@outerlayer/cli 0.28.4 → 0.30.0

package/dist/{chunk-2BZTGJII.js → chunk-DBELICD6.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { uploadSpooledSteps } from './chunk-VM6BX2WJ.js';
+import { uploadSpooledSteps } from './chunk-PS3AHE6C.js';
 import { LaunchFilter } from './chunk-ESVW4MJY.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-BUP5N3X6.js';
-import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-UHU7H57K.js';
+import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-HSUUTD4E.js';
+import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-FTGJ3DPV.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { cliFetch, resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-KJIUFOC4.js';
+import { cliFetch, resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-AM3GMWQK.js';
 import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-PJDQPF5N.js';
-import { signerFor, signRunnerRequest } from './chunk-R7TMTFJP.js';
-import { writeSyncStatus, spoolDir } from './chunk-OOUHNKKX.js';
+import { signerFor, signRunnerRequest } from './chunk-IRF2FKB5.js';
+import { writeSyncStatus, spoolDir } from './chunk-RJDJFRRY.js';
 import { readLatestProvenanceForSession, readContextProvenance } from './chunk-ZJSNLVCE.js';
 import { hookExecSpoolPath } from './chunk-2O5KA67H.js';
 import { applyReportedCost } from './chunk-BKO6JEZI.js';
@@ -17,7 +17,7 @@ import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
 import { readLaunchSpoolState, launchStatusIsDecisive, launchedItemsBySession, launchesPath } from './chunk-T2Q7ISPE.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { removeJournalHooks } from './chunk-TUSYOL2O.js';
-import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-QZBXLLTV.js';
+import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-IWFYKNAO.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { dirname, basename, join, sep } from 'path';
 import { statSync, readFileSync, readdirSync, mkdirSync, writeFileSync, renameSync, existsSync, rmSync } from 'fs';

package/dist/{chunk-NVUO52YW.js → chunk-DBENBGVF.js}

@@ -1,30 +1,30 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-6P2Z5AUY.js';
+import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-ISKWFUEQ.js';
 import { decideInstalledSwitch } from './chunk-3JVYMD4G.js';
 import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-E7R2GIAW.js';
 import { RUNNER_PROTOCOL } from './chunk-TPKYTORP.js';
-import { writePendingUpdate } from './chunk-HWOU2HDH.js';
+import { writePendingUpdate } from './chunk-QWJBTFAF.js';
 import { JOB_STATE_FORMAT, readsJobState, jobStateFormatOf } from './chunk-ZVB57WI6.js';
-import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-QBF462QH.js';
-import { currentSkillCommand, formerSkillProblem, placeholderQueues, placeholderProblem } from './chunk-ERVZGWUR.js';
+import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-44CGGHJF.js';
+import { currentSkillCommand, formerSkillProblem, placeholderQueues, placeholderProblem } from './chunk-JGOMMFNX.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
-import { writeMarker, readMarker, currentVersion, removeMarker, entryIn, versionDir, startedThroughCurrent, switchCurrent, isInLayout, cleanVersions, stagingDir } from './chunk-6NFXOQKZ.js';
+import { writeMarker, readMarker, currentVersion, removeMarker, entryIn, versionDir, startedThroughCurrent, switchCurrent, isInLayout, cleanVersions, stagingDir } from './chunk-LJIFCG4G.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandExec, setUpRunnerCgroup, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-5Q4NDYQP.js';
-import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-JZJLKTZT.js';
-import { tagToPull, pullInstruction, imageTag, writeUpdateStatus } from './chunk-O47BTZSN.js';
+import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandExec, setUpRunnerCgroup, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-QQJGL7LG.js';
+import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-3IDNLZPR.js';
+import { tagToPull, pullInstruction, imageTag, writeUpdateStatus } from './chunk-D3LS7E7U.js';
 import { isVersion, compareVersions, satisfiesRange } from './chunk-TQMI335S.js';
-import { checkFit } from './chunk-JYVBEWBC.js';
-import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-YYGXCRIW.js';
-import { claimPidFile, writePidFile, readPidFile, releasePidFile } from './chunk-M6NNXKRM.js';
+import { checkFit } from './chunk-3F7RC3UA.js';
+import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-2ZMJFGOZ.js';
+import { claimPidFile, writePidFile, readPidFile, releasePidFile } from './chunk-IRTZYDZO.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
-import { writeJobFile, ensureRunnerIdentity, readJobFile, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, BUILD_LABEL, RUNNER_LABEL, readJobFileChecked } from './chunk-MFI55TNI.js';
+import { writeJobFile, ensureRunnerIdentity, readJobFile, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, BUILD_LABEL, RUNNER_LABEL, readJobFileChecked } from './chunk-7YSR636F.js';
 import { exceedsDisk } from './chunk-YJLHUKYS.js';
-import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-X7SFJZIG.js';
-import { loadHostKey, ensureHostKey, signerFor } from './chunk-R7TMTFJP.js';
-import { RUNNER_DIR_MODE, runnerDir, buildDir, attemptStamp, jobDir, RUNNER_FILE_MODE, jobsDir, pidFilePath, spoolDir, rootfsDir } from './chunk-DWVAG73B.js';
-import { parseClaimIdentity, parseClaimedRepositories, parseUnreachable, repositoriesOf, primaryOf, sharedUserEnvironment, JOB_MOUNT, takeClaudeCredential, heldClaudeCredential, claudeCredential, currentClaudeCredential } from './chunk-N5EEEKT6.js';
+import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-DBRB26R7.js';
+import { loadHostKey, ensureHostKey, signerFor } from './chunk-IRF2FKB5.js';
+import { RUNNER_DIR_MODE, runnerDir, buildDir, attemptStamp, jobDir, RUNNER_FILE_MODE, jobsDir, pidFilePath, spoolDir, rootfsDir } from './chunk-SOWXLIDN.js';
+import { parseClaimIdentity, parseClaimedRepositories, parseUnreachable, repositoriesOf, primaryOf, sharedUserEnvironment, JOB_MOUNT, takeClaudeCredential, heldClaudeCredential, claudeCredential, currentClaudeCredential } from './chunk-WHCDULC4.js';
 import { resolveVersion } from './chunk-RA3O54FC.js';
 import { fdName } from './chunk-XD4ZCMA4.js';
 import { COMMAND_LOST_REASON, CONTAINER_STOPPED_REASON } from './chunk-MESOOLF4.js';
@@ -1140,17 +1140,21 @@ function deriveRepo(item) {
   const repoPart = hash === -1 ? item.trackerKey : item.trackerKey.slice(0, hash);
   return repoPart === "" ? void 0 : `${host}/${repoPart}`;
 }
-async function listStartable(config, queue, fetchImpl) {
+async function listStartable(config, queue, fetchImpl, cursor = null) {
   const query = queue === "amend" ? "needs=amend&startable=true" : "startable=true";
   const page = await getJson(
     config.url,
-    `/v1/work-items?${query}`,
+    `/v1/work-items?${query}${cursor === null ? "" : `&cursor=${encodeURIComponent(cursor)}`}`,
     config.apiKey,
     config.appId,
     fetchImpl,
     await signerFor(config.configPath)
   );
-  return Array.isArray(page.data) ? page.data : [];
+  const next = page.pagination?.cursor;
+  return {
+    items: Array.isArray(page.data) ? page.data : [],
+    cursor: typeof next === "string" && next !== "" && next !== cursor ? next : null
+  };
 }
 function reloadConfig(state) {
   let mtimeMs;
@@ -1735,35 +1739,39 @@ async function runTick(state) {
     let claimed = false;
     for (const queue of QUEUE_ORDER) {
       if (!state.config.queues.includes(queue)) continue;
-      let items;
-      try {
-        items = await listStartable(state.config, queue, state.deps.fetchImpl);
-        reportRepeating(state, "the work item list", void 0);
-        state.lastWorkRequest = { ok: true };
-      } catch (err) {
-        state.lastWorkRequest = workRequestFromFailure(err);
-        reportRepeating(state, "the work item list", `list failed: ${describeCallFailure(err)} \xB7 retrying next tick`);
-        return;
-      }
-      for (const item of items) {
-        if (item.startable === false) continue;
-        if (!repoFilter.allows(deriveRepo(item))) {
-          filtered++;
-          continue;
-        }
-        const attempt = await tryClaimAndStart(state, item, queue);
-        if (attempt.kind === "started") {
-          claimed = true;
-          break;
-        }
-        if (attempt.kind === "outdated" || attempt.kind === "signature" || attempt.kind === "no_item_key" || attempt.kind === "no_branch" || attempt.kind === "unreadable_repositories") {
+      let cursor = null;
+      do {
+        let page;
+        try {
+          page = await listStartable(state.config, queue, state.deps.fetchImpl, cursor);
+          reportRepeating(state, "the work item list", void 0);
+          state.lastWorkRequest = { ok: true };
+        } catch (err) {
+          state.lastWorkRequest = workRequestFromFailure(err);
+          reportRepeating(state, "the work item list", `list failed: ${describeCallFailure(err)} \xB7 retrying next tick`);
           return;
         }
-        if (attempt.kind === "error") {
-          log.error(`claim for #${item.number} failed: ${attempt.reason} \xB7 retrying next tick`);
-          return;
+        cursor = page.cursor;
+        for (const item of page.items) {
+          if (item.startable === false) continue;
+          if (!repoFilter.allows(deriveRepo(item))) {
+            filtered++;
+            continue;
+          }
+          const attempt = await tryClaimAndStart(state, item, queue);
+          if (attempt.kind === "started") {
+            claimed = true;
+            break;
+          }
+          if (attempt.kind === "outdated" || attempt.kind === "signature" || attempt.kind === "no_item_key" || attempt.kind === "no_branch" || attempt.kind === "unreadable_repositories") {
+            return;
+          }
+          if (attempt.kind === "error") {
+            log.error(`claim for #${item.number} failed: ${attempt.reason} \xB7 retrying next tick`);
+            return;
+          }
         }
-      }
+      } while (!claimed && cursor !== null);
       if (claimed) break;
     }
     if (!claimed) break;
@@ -1779,7 +1787,7 @@ var CLAIM_REFUSAL_CODES = new Set(
   "pull_request_from_fork pull_request_on_default_branch pull_request_ambiguous pull_request_repository_not_connected repository_not_reachable branch_claimed_elsewhere".split(" ")
 );
 async function tryClaimAndStart(state, item, queue) {
-  const { postJson: postJson2 } = await import('./work-cmd-FOI74X5B.js');
+  const { postJson: postJson2 } = await import('./work-cmd-RRHDQDOX.js');
   const log = logOf(state);
   const hostKey = await loadHostKey(state.config.configPath);
   const claim = await retrySend(
@@ -2955,7 +2963,7 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
       check: update.check ? () => update.check(configPath) : async () => {
         const held = heldClaudeCredential();
         const env = held === void 0 ? process.env : { ...process.env, [held.variable]: held.value };
-        return (await import('./check-WJ4X2Q44.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
+        return (await import('./check-BKONE55O.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
       },
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log

package/dist/{chunk-X7SFJZIG.js → chunk-DBRB26R7.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectActiveSession, autoConnect } from './chunk-NMIYK2G2.js';
-import { workPageUrl } from './chunk-QFNFBQCG.js';
-import { sanitizeTerminal } from './chunk-BUP5N3X6.js';
-import { resolveRepoIdentity } from './chunk-UHU7H57K.js';
+import { detectActiveSession, autoConnect } from './chunk-SJ4DX2AD.js';
+import { workPageUrl } from './chunk-3YLHIXLR.js';
+import { sanitizeTerminal } from './chunk-HSUUTD4E.js';
+import { resolveRepoIdentity } from './chunk-FTGJ3DPV.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { resolveGatewayCredentials, unauthorizedMessage, defaultFetch } from './chunk-KJIUFOC4.js';
-import { signRunnerRequest } from './chunk-R7TMTFJP.js';
+import { resolveGatewayCredentials, unauthorizedMessage, defaultFetch } from './chunk-AM3GMWQK.js';
+import { signRunnerRequest } from './chunk-IRF2FKB5.js';
 import { readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -428,7 +428,7 @@ async function runWorkLinkSession(opts) {
     return await linkSession(opts);
   } catch (err) {
     if (opts.logFailures) {
-      const { logHookError } = await import('./hook-fast-UJPAWDAO.js');
+      const { logHookError } = await import('./hook-fast-A2N3PSXI.js');
       const reason = err instanceof Error ? err.message : String(err);
       logHookError(opts.home ?? homeFromEnv(opts.env ?? process.env), new Error(`work link-session #${opts.number} failed: ${reason}`));
     }
@@ -534,14 +534,33 @@ function repositoryDisconnectedLine(data) {
 
 `;
 }
+function failingChecksSection(data) {
+  const checks = data.checks;
+  if (!Array.isArray(checks)) return "";
+  const failing = checks.filter((check) => check.result === "fail");
+  if (failing.length === 0) return "";
+  const lines = failing.flatMap((check) => {
+    const body = typeof check.body === "string" && check.body !== "" ? `: ${sanitizeTerminal(check.body)}` : "";
+    const items = Array.isArray(check.items) ? check.items : [];
+    return [
+      `  ${sanitizeTerminal(String(check.name))}${body}`,
+      ...items.filter((item) => item.result === "fail").map((item) => `    ${sanitizeTerminal(String(item.id))}${typeof item.reason === "string" ? `  ${C.dim}${sanitizeTerminal(item.reason)}${C.reset}` : ""}`)
+    ];
+  });
+  return `
+
+Failing checks
+${lines.join("\n")}`;
+}
 function statusOutput(data, json) {
   if (json) return JSON.stringify(data);
   const document = mergedUnverifiedLine(data) + repositoryDisconnectedLine(data) + JSON.stringify(data, null, 2);
+  const checks = failingChecksSection(data);
   const criteria = data.criteria;
-  if (criteria === void 0) return document;
+  if (criteria === void 0) return `${document}${checks}`;
   if (criteria === null || !Array.isArray(criteria.items)) return `${document}
 
-Criteria: none recorded`;
+Criteria: none recorded${checks}`;
   const mark = criteria.drafted === true ? ` ${C.dim}(drafted by the build)${C.reset}` : "";
   const lines = criteria.items.map((item) => {
     const proof = typeof item.proof === "string" ? ` ${C.dim}[proof: ${sanitizeTerminal(item.proof)}]${C.reset}` : "";
@@ -550,7 +569,7 @@ Criteria: none recorded`;
   return `${document}
 
 Criteria${mark}
-${lines.join("\n")}`;
+${lines.join("\n")}${checks}`;
 }
 async function runWorkStatus(opts) {
   const cwd = opts.cwd ?? process.cwd();

package/dist/{chunk-TG7FAHRP.js → chunk-DLY22KHX.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { removeRetiredSkills } from './chunk-P2RWZCV7.js';
-import { defaultFetch, resolveGatewayCredentials } from './chunk-KJIUFOC4.js';
-import { withTokenHeader } from './chunk-N5EEEKT6.js';
+import { removeRetiredSkills } from './chunk-V6IYYQU3.js';
+import { defaultFetch, resolveGatewayCredentials } from './chunk-AM3GMWQK.js';
+import { withTokenHeader } from './chunk-WHCDULC4.js';
 import { appendContextProvenance } from './chunk-ZJSNLVCE.js';
-import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-JGML2VUN.js';
+import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-AKKVPUGK.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { writeDegraded, writeSourceCache, SOURCE_CACHE_TTL_RETRY_MS, writeContextManifest, SOURCE_CACHE_TTL_SUCCESS_MS, readSourceCache, isSourceCacheFresh, clearDegraded } from './chunk-YQR6E6OV.js';
-import { normalizeRepoName, parseOuterlayerConfig, classifyTree, emitTree } from './chunk-RKOTJQVG.js';
+import { normalizeRepoName, parseOuterlayerConfig, classifyTree, emitTree } from './chunk-ZUOPFE22.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { execFileSync } from 'child_process';
 import { existsSync, mkdirSync, writeFileSync, chmodSync, lstatSync, readFileSync, copyFileSync } from 'fs';