@outerlayer/cli 0.29.0 → 0.30.1

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # @outerlayer/cli
 
+## 0.30.1
+
+### Patch Changes
+
+- 9de15e4: `outerlayer spec` can file in GitHub beside a Linear or Jira connection when the factory links a repository. With more than one tracker, pass `--tracker`. The `/spec` skill asks you which one to use.
+
+## 0.30.0
+
+### Minor Changes
+
+- 964f486: `outerlayer findings show` lists the problems a fix item covers. `outerlayer findings result` records whether the fix resolved a problem, with a note.
+
+### Patch Changes
+
+- 7d80fe5: The line `init` and `connect` print to commit the policy says checks wait for it on the branch a pull request targets, not on the default branch. That is the branch OuterLayer reads the policy from.
+- 1eba9b9: `outerlayer runner container-start` refuses to start when `ANTHROPIC_AUTH_TOKEN` is its only Claude credential, and says so. The runner never used that variable, so a runner image given only it started and then claimed no work. Set `CLAUDE_CODE_OAUTH_TOKEN` or `ANTHROPIC_API_KEY` instead.
+- aea4cbd: Update the bundled `structured-headers` library from 2.1.0 to 2.1.1. The runner uses it to sign its requests to the gateway; signed requests are unchanged.
+
 ## 0.29.0
 
 ### Minor Changes

package/README.md

@@ -196,7 +196,7 @@ content:
 - **`outerlayer work`** and **`outerlayer emit`**, in the subcommands named below, with a login and no saved
   connection for the repository send the same `GET /v1/me/factories?repository=<host/owner/name>`
   request before their own, to connect the repository when exactly one factory
-  fits. They send nothing extra with a factory key, `--app-id` or `OUTERLAYER_APP_ID`. The subcommands are `work build`, `list`, `status`, `remove` and `pr`, and `emit artifact`, `criteria`, `finding`, `findings` and `emit <name>`. Other `work` subcommands never connect.
+  fits. They send nothing extra with a factory key, `--app-id` or `OUTERLAYER_APP_ID`. The subcommands are `work build`, `list`, `status`, `remove` and `pr`, and `emit artifact`, `criteria`, `finding`, `findings` and `emit <name>`, and `findings show` and `findings result`. Other `work` subcommands never connect.
 - **`outerlayer connect`**, and the first step of `outerlayer init`, send a
   request with your login's token: `GET /v1/me/factories?repository=<host/owner/name>`,
   naming this checkout's remote. The gateway answers with the factories you can
@@ -377,6 +377,12 @@ content:
   and a one-line summary scrubbed of secrets) and to look up the time of the
   events you name with `--started-at` and `--ended-at`. The transcript itself
   is never sent; only the two event ids and their times are.
+- **`outerlayer findings show`** and **`outerlayer findings result`**
+  read the problems a fix item covers (`GET /v1/work-items/{id}/problems`) and
+  record whether the fix resolved one (`PUT /v1/work-items/{id}/problems/{problemId}/result`).
+  The item is `--item`, or the item the recorded session was launched for.
+  `findings result` sends the problem id, `fixed` or `not_fixed`, your note and
+  the session id. Nothing from the session itself is sent.
 - **`outerlayer emit criteria <file>`** sends the acceptance criteria of a work
   item as one list (`POST /v1/criteria`): each criterion's id, text and
   declared proof kind, from the JSON file you name. The anchoring is the same
@@ -458,6 +464,8 @@ before it gives up.
 | `outerlayer emit finding --id <id> --category <context\|flaky-test\|tooling\|environment\|defect\|other> --title <text> --file <path> --where <label> [--line <n>] [--item <number>] [--cause <text>] [--detail <text>] [--suggestion <text>] [--command <text>] [--error <text>] [--test <name>] [--symbol <name>] [--started-at <event> --ended-at <event>] [--problem <id> … --link-reason <text> \| --new] …` | Record one problem you hit in the factory. `--category` is one of `context` (an instruction that is wrong, broken or missing), `flaky-test`, `tooling`, `environment`, `defect` (a bug outside your own change) or `other`. A `context` finding also needs `--rule-path` and `--rule-relation` (`wrong`, `broken` or `missing`), and `--rule-quote` unless the relation is `missing`. `--cause`, `--detail`, `--suggestion`, `--command`, `--error` (the first error line), `--test` and `--symbol` carry what a fix needs. Every finding joins a factory-level problem: when a key of the finding matches a known problem it joins that problem; otherwise nothing is stored, the closest problems are printed, and the command exits with code 3. Run it again with `--problem <id> --link-reason <text>` (repeat `--problem` for each problem the finding reports) or with `--new`. Without `--started-at`, it prints the session's recent events with ids and times; name the event where you hit the problem and the one where you got past it with `--started-at` and `--ended-at`. Findings are informational; nothing reads one to pass or fail the work. `--item` names the work item; without it, inside a recorded session, the item that session was launched for is used automatically. Re-emitting the same `--id` on the item replaces that finding and keeps its problems. |
 | `outerlayer emit findings <file> [--item <number>]` | Record a whole batch at once, read from a JSON file (`-` for standard input) with `"schemaVersion": 3` — the same shape and validation as `emit finding`, one record per id. A finding's `startedAt` and `endedAt` may be event ids. The findings that match a key are stored; those that need a choice are listed with their candidates and not stored, and the exit code is 3. Anchored the same way: `--item`, else a recorded session's own item. |
 | `outerlayer emit step <name> [--item <number>]` | Report that you started a step. The name is free text, 1 to 80 characters on one line. The work item's Activity tab shows the step with the time you ran the command. A step has a start and nothing else, so run it again at the start of the next step. `--item` names the work item; without it, inside a recorded session, the item that session was launched for is used. If the gateway cannot be reached, or answers with a 5xx, the step is queued in `~/.outerlayer/spool/steps.jsonl`, the command exits 0, and `outerlayer sync` sends it later with its original time. If the gateway refuses the step, the command prints why and exits 1. |
+| `outerlayer findings show [--item <number>] [--json]` | List the problems a fix item covers, each with its id, title, reports and recorded result. A problem with no result shows "no result yet". `--item` names the work item; without it, inside a recorded session, the item that session was launched for is used. |
+| `outerlayer findings result <problem> --fixed\|--not-fixed --note <text> [--item <number>]` | Record whether the fix resolved one covered problem. Give exactly one of `--fixed` and `--not-fixed`, and a `--note`. Running it again for the same problem replaces the earlier result. A problem the item does not cover is refused and nothing is stored. |
 | `outerlayer emit criteria <file> [--item <number>]` | Record a work item's acceptance criteria as one list, read from a JSON file (`-` for standard input): `{"criteria": [{"id": "AC-1", "text": "Given …", "proof": null}]}`. An `id` is 1 to 64 characters of `A-Z a-z 0-9 . _ : -`, the same id `emit artifact --for` binds evidence to. `proof` is `video`, `screenshot`, `report`, `log`, `test`, `file` or `null` (any bound artifact proves it). The list holds 1 to 200 criteria, each `text` at most 2,000 characters, with no id twice. It is validated before anything is sent. This list is the only source for the item's Criteria tab. Once an item has a list, only a person can replace it: run the command outside an agent session, with your own login. Anchored the same way as `emit findings`: `--item`, else a recorded session's own item. |
 | `outerlayer mcp install [--transport stdio\|http] [--url] [--name] [--command]` | Write (or update) an `mcpServers` entry in `.mcp.json` for the OuterLayer gateway. Default `stdio`: the client spawns `outerlayer mcp serve`, which reads the API key from `~/.outerlayer/config.json` (or `OUTERLAYER_API_KEY`) each time it connects, so a reconnect picks up a newly saved or rotated key. `--transport http` writes a direct `POST /v1/mcp` entry referencing `${OUTERLAYER_API_KEY}`, resolved by the client from the environment it was launched with. Never writes an API key. Pass `--url`/`--app-id` for self-host. |
 | `outerlayer mcp serve [--url] [--app-id]` | Stdio MCP server bridging stdin/stdout JSON-RPC to the gateway's `POST /v1/mcp`. What the stdio `.mcp.json` entry runs; exits 1 with a clear message when no API key is configured. |

package/dist/{agent-setup-S3KI7TER.js → agent-setup-ZNYAXAWI.js}

@@ -1,30 +1,30 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { keepHandWritten, runAgentSetup } from './chunk-FA6XWYRH.js';
-import './chunk-GJOF6357.js';
+export { keepHandWritten, runAgentSetup } from './chunk-I3WLYIIW.js';
+import './chunk-XB7TRWI2.js';
 import './chunk-KT4CN6OU.js';
-import './chunk-25Z6SBMQ.js';
-import './chunk-427AVP6J.js';
+import './chunk-XTKH5VAC.js';
+import './chunk-QDDPVBIS.js';
 import './chunk-ANPNT6PM.js';
-import './chunk-H6DGJBXG.js';
-import './chunk-FUGRIAG7.js';
-import './chunk-F72ABZRD.js';
+import './chunk-DLY22KHX.js';
+import './chunk-V6IYYQU3.js';
+import './chunk-AM3GMWQK.js';
 import './chunk-PJDQPF5N.js';
-import './chunk-SHVE5JZO.js';
-import './chunk-PAHZQQB3.js';
-import './chunk-C7F6U2YZ.js';
+import './chunk-IRF2FKB5.js';
+import './chunk-SOWXLIDN.js';
+import './chunk-WHCDULC4.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-BJ3KTMDH.js';
-import './chunk-NX2G6PH6.js';
+import './chunk-AKKVPUGK.js';
 import './chunk-5BHIBJDA.js';
 import './chunk-CDDED64E.js';
 import './chunk-RA3O54FC.js';
 import './chunk-CRB3POP4.js';
-import './chunk-42TFWHFF.js';
+import './chunk-HJUGOAM7.js';
 import './chunk-YQR6E6OV.js';
 import './chunk-TUSYOL2O.js';
-import './chunk-DXI6A6JN.js';
-import './chunk-JL6VZHAJ.js';
+import './chunk-ZUOPFE22.js';
+import './chunk-IWFYKNAO.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-XD4ZCMA4.js';
 import './chunk-MESOOLF4.js';

package/dist/{artifact-link-cmd-LIJEXVN5.js → artifact-link-cmd-VY6OM7S5.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { sanitizeTerminal, readEffectiveArtifactSpoolState } from './chunk-6XQPCQBW.js';
+import { sanitizeTerminal, readEffectiveArtifactSpoolState } from './chunk-HSUUTD4E.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import './chunk-JL6VZHAJ.js';
+import './chunk-IWFYKNAO.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{bridge-CP25XV3W.js → bridge-FI7OF2H3.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig } from './chunk-KBIJZAH4.js';
-import './chunk-C7F6U2YZ.js';
+export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig } from './chunk-TN2XMMD7.js';
+import './chunk-WHCDULC4.js';
 import './chunk-XD4ZCMA4.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';

package/dist/{build-ZS4Y5MJU.js → build-PXRDWSN4.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { buildRepositoryImage } from './chunk-V47KJGNE.js';
-import './chunk-CU7TJL6S.js';
+export { buildRepositoryImage } from './chunk-U5DC57AF.js';
+import './chunk-IRTZYDZO.js';
 import './chunk-JBJTC3UU.js';
 export { RecipeError } from './chunk-SJZL5F3F.js';
-import './chunk-PAHZQQB3.js';
-import './chunk-C7F6U2YZ.js';
+import './chunk-SOWXLIDN.js';
+import './chunk-WHCDULC4.js';
 import './chunk-XD4ZCMA4.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-19T13:07:50.023Z+2340eef","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-19T23:00:19.648Z+aeb3c0b","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-FDUOMHY3.js → builder-UNVHUZL7.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-BFA2LNJG.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-7YSR636F.js';
 import './chunk-YJLHUKYS.js';
 import './chunk-SJZL5F3F.js';
-import './chunk-LKN4J37L.js';
-import './chunk-SHVE5JZO.js';
-import './chunk-PAHZQQB3.js';
-import './chunk-C7F6U2YZ.js';
-import './chunk-JL6VZHAJ.js';
+import './chunk-FTGJ3DPV.js';
+import './chunk-IRF2FKB5.js';
+import './chunk-SOWXLIDN.js';
+import './chunk-WHCDULC4.js';
+import './chunk-IWFYKNAO.js';
 import './chunk-XD4ZCMA4.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';

package/dist/{check-5XB22HKS.js → check-BKONE55O.js}

@@ -1,67 +1,67 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-A2E7MU2H.js';
-import './chunk-M4QY7YZ5.js';
+import { probeCredentials } from './chunk-DBENBGVF.js';
+import './chunk-ISKWFUEQ.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-E7R2GIAW.js';
 import './chunk-TPKYTORP.js';
-import './chunk-MX3PPJNS.js';
+import './chunk-QWJBTFAF.js';
 import './chunk-ZVB57WI6.js';
-import './chunk-3KMYWLMK.js';
-import './chunk-OD6WUNKZ.js';
+import './chunk-44CGGHJF.js';
+import './chunk-6CNNRO53.js';
 import './chunk-I3LTIAOR.js';
-import './chunk-PP7C7JQO.js';
-import './chunk-GJJDPZS2.js';
-import './chunk-UPKFSNSU.js';
+import './chunk-ZNMVBHGJ.js';
+import './chunk-DBELICD6.js';
+import './chunk-PS3AHE6C.js';
 import './chunk-ESVW4MJY.js';
-import './chunk-KBIJZAH4.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-WEMNLTWB.js';
+import './chunk-TN2XMMD7.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-JGOMMFNX.js';
 import './chunk-YYYRBYWG.js';
-import './chunk-23PFIW35.js';
+import './chunk-LJIFCG4G.js';
 import './chunk-TBT347UY.js';
-import './chunk-D3D2CERC.js';
-import './chunk-2YLKMVFV.js';
-import './chunk-MO2NI6W6.js';
-import './chunk-77YT7YC4.js';
-import './chunk-YSH4KCUJ.js';
-import './chunk-SN3C57RV.js';
-import './chunk-GI73HOI2.js';
+import './chunk-B6OYEP3K.js';
+import './chunk-XRRSFHKV.js';
+import './chunk-QQJGL7LG.js';
+import './chunk-MBVSVQVH.js';
+import './chunk-TKJISBV6.js';
+import './chunk-3IDNLZPR.js';
+import './chunk-D3LS7E7U.js';
 import './chunk-TQMI335S.js';
-import './chunk-IGEJUPDE.js';
-import './chunk-GG3WS4C5.js';
-import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-NAHTO4XM.js';
+import './chunk-5HZDPOJI.js';
+import './chunk-3F7RC3UA.js';
+import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-2ZMJFGOZ.js';
 import './chunk-UXYLWVTQ.js';
-import './chunk-V47KJGNE.js';
-import './chunk-CU7TJL6S.js';
+import './chunk-U5DC57AF.js';
+import './chunk-IRTZYDZO.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-BFA2LNJG.js';
+import './chunk-7YSR636F.js';
 import './chunk-YJLHUKYS.js';
 import './chunk-SJZL5F3F.js';
-import './chunk-6AG2XW5S.js';
-import './chunk-PGA5BVHQ.js';
-import './chunk-HRWL7NSJ.js';
-import './chunk-6XQPCQBW.js';
-import './chunk-LKN4J37L.js';
-import './chunk-427AVP6J.js';
-import './chunk-VY4YVFL5.js';
+import './chunk-DBRB26R7.js';
+import './chunk-SJ4DX2AD.js';
+import './chunk-3YLHIXLR.js';
+import './chunk-HSUUTD4E.js';
+import './chunk-FTGJ3DPV.js';
+import './chunk-QDDPVBIS.js';
+import './chunk-G2RRBBOX.js';
 import './chunk-G2JWZDFA.js';
 import './chunk-ANPNT6PM.js';
-import './chunk-H6DGJBXG.js';
-import './chunk-FUGRIAG7.js';
-import './chunk-F72ABZRD.js';
+import './chunk-DLY22KHX.js';
+import './chunk-V6IYYQU3.js';
+import './chunk-AM3GMWQK.js';
 import './chunk-PJDQPF5N.js';
-import './chunk-SHVE5JZO.js';
-import './chunk-PAHZQQB3.js';
-import { claudeEnvPath } from './chunk-C7F6U2YZ.js';
-import './chunk-IG45QISA.js';
+import './chunk-IRF2FKB5.js';
+import './chunk-SOWXLIDN.js';
+import { claudeEnvPath } from './chunk-WHCDULC4.js';
+import './chunk-RJDJFRRY.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-2O5KA67H.js';
 import './chunk-BKO6JEZI.js';
 import './chunk-FGF52V4V.js';
 import './chunk-HCVLP7XA.js';
 import './chunk-BJ3KTMDH.js';
-import './chunk-NX2G6PH6.js';
+import './chunk-AKKVPUGK.js';
 import './chunk-5BHIBJDA.js';
 import './chunk-CDDED64E.js';
 import './chunk-RA3O54FC.js';
@@ -71,8 +71,8 @@ import './chunk-CRB3POP4.js';
 import './chunk-URIZRCRY.js';
 import './chunk-YQR6E6OV.js';
 import './chunk-TUSYOL2O.js';
-import './chunk-DXI6A6JN.js';
-import './chunk-JL6VZHAJ.js';
+import './chunk-ZUOPFE22.js';
+import './chunk-IWFYKNAO.js';
 import './chunk-VNVZDWO3.js';
 import { parseRunnerEnv } from './chunk-XD4ZCMA4.js';
 import './chunk-MESOOLF4.js';

package/dist/{chunk-NAHTO4XM.js → chunk-2ZMJFGOZ.js}

@@ -2,7 +2,7 @@
 import { createRequire } from 'node:module';
 import { MAX_ALLOW_HOSTS, allowHostProblem } from './chunk-UXYLWVTQ.js';
 import { parseSize } from './chunk-YJLHUKYS.js';
-import { isRefusedInConfig, resolveDestinations, isReservedVariable } from './chunk-C7F6U2YZ.js';
+import { isRefusedInConfig, resolveDestinations, isReservedVariable } from './chunk-WHCDULC4.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { existsSync, statSync, accessSync, constants, readFileSync } from 'fs';
 import { hostname } from 'os';

package/dist/{chunk-GG3WS4C5.js → chunk-3F7RC3UA.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { builtinKind } from './chunk-NAHTO4XM.js';
+import { builtinKind } from './chunk-2ZMJFGOZ.js';
 import { parseSize } from './chunk-YJLHUKYS.js';
-import { runnerDir } from './chunk-PAHZQQB3.js';
-import { CLAUDE_CREDENTIAL_ID, CLAUDE_ENV_FILE, credentialLineIn, withoutCredentialLines } from './chunk-C7F6U2YZ.js';
+import { runnerDir } from './chunk-SOWXLIDN.js';
+import { CLAUDE_CREDENTIAL_ID, CLAUDE_ENV_FILE, credentialLineIn, withoutCredentialLines } from './chunk-WHCDULC4.js';
 import { FD_SLOTS_PER_BUILD, FD_STORE_ENV } from './chunk-XD4ZCMA4.js';
 import { existsSync, readFileSync, writeFileSync, chmodSync, renameSync } from 'fs';
 import { dirname, join } from 'path';

package/dist/{chunk-SN3C57RV.js → chunk-3IDNLZPR.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { WorkCommandError, postJson } from './chunk-6AG2XW5S.js';
-import { defaultGitRunner, materializeContext, isStagingWriteFault, lookupGoverningSource } from './chunk-H6DGJBXG.js';
-import { signingFetchFor } from './chunk-F72ABZRD.js';
-import { signerFor } from './chunk-SHVE5JZO.js';
-import { SHIM_DIR, stagedContextDir, contextHomeDir, deliveryDir, keptContextDir } from './chunk-PAHZQQB3.js';
+import { WorkCommandError, postJson } from './chunk-DBRB26R7.js';
+import { defaultGitRunner, materializeContext, isStagingWriteFault, lookupGoverningSource } from './chunk-DLY22KHX.js';
+import { signingFetchFor } from './chunk-AM3GMWQK.js';
+import { signerFor } from './chunk-IRF2FKB5.js';
+import { SHIM_DIR, stagedContextDir, contextHomeDir, deliveryDir, keptContextDir } from './chunk-SOWXLIDN.js';
 import { unsupportedLayout, layoutRefusalReason, composeDelivery } from './chunk-FGF52V4V.js';
 import { SHIM_SCRIPT, GOVERNANCE_VARIABLE } from './chunk-HCVLP7XA.js';
 import { readDegraded, readContextManifest, readSourceCache } from './chunk-YQR6E6OV.js';

package/dist/{chunk-HRWL7NSJ.js → chunk-3YLHIXLR.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { sanitizeTerminal } from './chunk-6XQPCQBW.js';
-import { remoteLookupFailed } from './chunk-LKN4J37L.js';
-import { isAgentsMdLayout } from './chunk-427AVP6J.js';
-import { DEFAULT_DASHBOARD } from './chunk-VY4YVFL5.js';
-import { cliFetch, resolveGatewayCredentials } from './chunk-F72ABZRD.js';
+import { sanitizeTerminal } from './chunk-HSUUTD4E.js';
+import { remoteLookupFailed } from './chunk-FTGJ3DPV.js';
+import { isAgentsMdLayout } from './chunk-QDDPVBIS.js';
+import { DEFAULT_DASHBOARD } from './chunk-G2RRBBOX.js';
+import { cliFetch, resolveGatewayCredentials } from './chunk-AM3GMWQK.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
 import { writeRepoConnection, findGitDirs, readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
@@ -61,8 +61,8 @@ Then run \`${cliInvocation()} connect\` again.
 
 // src/connect-cmd.ts
 var REQUEST_TIMEOUT_MS = 15e3;
-var COMMIT_LINE = "Commit and push .outerlayer/ so the factory reads your policy and skills. No checks run on your pull requests until the policy is on your default branch.";
-var AGENTS_LAYOUT_COMMIT_LINE = "Commit and push .outerlayer/, AGENTS.md, .agents/, .mcp.json and .claude/skills so the factory reads your policy and skills. No checks run on your pull requests until the policy is on your default branch.";
+var COMMIT_LINE = "Commit and push .outerlayer/ so the factory reads your policy and skills. No checks run on a pull request until the policy is on the branch it targets.";
+var AGENTS_LAYOUT_COMMIT_LINE = "Commit and push .outerlayer/, AGENTS.md, .agents/, .mcp.json and .claude/skills so the factory reads your policy and skills. No checks run on a pull request until the policy is on the branch it targets.";
 var COMMIT_PATHS = [":/.outerlayer"];
 var AGENTS_LAYOUT_COMMIT_PATHS = [":/.outerlayer", ":/AGENTS.md", ":/.agents", ":/.mcp.json", ":/.claude/skills"];
 function inAgentsMdLayout(cwd) {

package/dist/{chunk-3KMYWLMK.js → chunk-44CGGHJF.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-PAHZQQB3.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-SOWXLIDN.js';
 import { readFileSync, mkdirSync, writeFileSync, renameSync } from 'fs';
 import { join } from 'path';
 

package/dist/{chunk-IGEJUPDE.js → chunk-5HZDPOJI.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { DEFAULT_UNIT_NAME } from './chunk-GG3WS4C5.js';
-import { RUNNER_FILE_MODE } from './chunk-PAHZQQB3.js';
-import { claudeEnvPath, withoutCredentialLines } from './chunk-C7F6U2YZ.js';
+import { DEFAULT_UNIT_NAME } from './chunk-3F7RC3UA.js';
+import { RUNNER_FILE_MODE } from './chunk-SOWXLIDN.js';
+import { claudeEnvPath, withoutCredentialLines } from './chunk-WHCDULC4.js';
 import { parseRunnerEnv } from './chunk-XD4ZCMA4.js';
 import { existsSync, readFileSync, writeFileSync, renameSync, rmSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-OD6WUNKZ.js → chunk-6CNNRO53.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { BRIDGE_ADDRESS, TUNNEL_PORT, BRIDGE_CIDR } from './chunk-KBIJZAH4.js';
-import { EXEC_PORT } from './chunk-YSH4KCUJ.js';
+import { BRIDGE_ADDRESS, TUNNEL_PORT, BRIDGE_CIDR } from './chunk-TN2XMMD7.js';
+import { EXEC_PORT } from './chunk-TKJISBV6.js';
 import { startTimeOf } from './chunk-JBJTC3UU.js';
-import { RELAY_PORT } from './chunk-C7F6U2YZ.js';
+import { RELAY_PORT } from './chunk-WHCDULC4.js';
 import { spawn, spawnSync } from 'child_process';
 import { symlinkSync, lstatSync, writeFileSync, chmodSync, mkdirSync } from 'fs';
 

package/dist/{chunk-BFA2LNJG.js → chunk-7YSR636F.js}

@@ -2,10 +2,10 @@
 import { createRequire } from 'node:module';
 import { parseSize } from './chunk-YJLHUKYS.js';
 import { RecipeError, BUILDKIT_IMAGE } from './chunk-SJZL5F3F.js';
-import { compareVersions } from './chunk-LKN4J37L.js';
-import { ensureHostKey } from './chunk-SHVE5JZO.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, runnerDir, jobsDir } from './chunk-PAHZQQB3.js';
-import { CLAUDE_PORT, JOB_MOUNT, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_SOCKET, RELAY_PORT, DESTINATION_BASE_PORT } from './chunk-C7F6U2YZ.js';
+import { compareVersions } from './chunk-FTGJ3DPV.js';
+import { ensureHostKey } from './chunk-IRF2FKB5.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, runnerDir, jobsDir } from './chunk-SOWXLIDN.js';
+import { CLAUDE_PORT, JOB_MOUNT, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_SOCKET, RELAY_PORT, DESTINATION_BASE_PORT } from './chunk-WHCDULC4.js';
 import { JOIN_DIR, RELAY_ID, JOIN_SOCKET, TARGET_GATEWAY, TARGET_CLAUDE, destinationTarget, RELAY_USER } from './chunk-MESOOLF4.js';
 import { StringDecoder } from 'string_decoder';
 import { spawn } from 'child_process';

package/dist/{chunk-NX2G6PH6.js → chunk-AKKVPUGK.js}

@@ -2,7 +2,7 @@
 import { createRequire } from 'node:module';
 import { MAINTAINED_SKILLS } from './chunk-CDDED64E.js';
 import { resolvePackageVersion } from './chunk-RA3O54FC.js';
-import { splitRawFile } from './chunk-DXI6A6JN.js';
+import { splitRawFile } from './chunk-ZUOPFE22.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, readdirSync } from 'fs';
 import { join, dirname } from 'path';
 import { fileURLToPath } from 'url';

package/dist/{chunk-F72ABZRD.js → chunk-AM3GMWQK.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { readCloudConfigStrict, readCloudConfig, cloudConfigPath } from './chunk-PJDQPF5N.js';
-import { signRunnerRequest, signerFor } from './chunk-SHVE5JZO.js';
+import { signRunnerRequest, signerFor } from './chunk-IRF2FKB5.js';
 import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
 import { PLAIN_VERSION, recordCliVersion, removeRecordedVersion } from './chunk-5BHIBJDA.js';
 import { resolvePackageVersion } from './chunk-RA3O54FC.js';

package/dist/{emit-finding-cmd-XEX5XVVI.js → chunk-B5CQJBZ2.js}

@@ -1,34 +1,16 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
-import { detectActiveSession, autoConnect, transcriptPathForSession } from './chunk-PGA5BVHQ.js';
-import './chunk-HRWL7NSJ.js';
-import './chunk-6XQPCQBW.js';
-import { resolveRepoIdentity, defaultProjectsDir, findTranscripts, sessionIdFromPath, scrubText } from './chunk-LKN4J37L.js';
-import './chunk-427AVP6J.js';
-import './chunk-VY4YVFL5.js';
-import './chunk-G2JWZDFA.js';
+import { detectActiveSession, autoConnect, transcriptPathForSession } from './chunk-SJ4DX2AD.js';
+import { resolveRepoIdentity, defaultProjectsDir, findTranscripts, sessionIdFromPath, scrubText } from './chunk-FTGJ3DPV.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-F72ABZRD.js';
-import './chunk-PJDQPF5N.js';
-import './chunk-SHVE5JZO.js';
-import './chunk-PAHZQQB3.js';
-import './chunk-C7F6U2YZ.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-AM3GMWQK.js';
 import { readLatestProvenanceForSession } from './chunk-ZJSNLVCE.js';
-import './chunk-BJ3KTMDH.js';
-import './chunk-NX2G6PH6.js';
-import './chunk-5BHIBJDA.js';
-import './chunk-CDDED64E.js';
-import './chunk-RA3O54FC.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import './chunk-DXI6A6JN.js';
-import { FindingBatchSchema, FindingsResponseSchema, SAME_PROBLEM_RULES } from './chunk-JL6VZHAJ.js';
+import { FindingBatchSchema, FindingsResponseSchema, SAME_PROBLEM_RULES } from './chunk-IWFYKNAO.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import './chunk-XD4ZCMA4.js';
-import './chunk-MESOOLF4.js';
-import './chunk-Z5GEFMRW.js';
 import { readFileSync, existsSync } from 'fs';
 import { join, dirname, basename } from 'path';
 
@@ -580,4 +562,4 @@ async function runEmitFindings(opts) {
   });
 }
 
-export { EmitFindingError, refuseRemovedFindingFlags, runEmitFinding, runEmitFindings };
+export { EmitFindingError, detectUploadSessionId, refuseRemovedFindingFlags, resolveUploadTarget, runEmitFinding, runEmitFindings };

package/dist/{chunk-D3D2CERC.js → chunk-B6OYEP3K.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-2YLKMVFV.js';
-import { MIN_ENGINE_MAJOR } from './chunk-MO2NI6W6.js';
-import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-IGEJUPDE.js';
-import { runnerCredentialProblem } from './chunk-NAHTO4XM.js';
-import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-PAHZQQB3.js';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-XRRSFHKV.js';
+import { MIN_ENGINE_MAJOR } from './chunk-QQJGL7LG.js';
+import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-5HZDPOJI.js';
+import { runnerCredentialProblem } from './chunk-2ZMJFGOZ.js';
+import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-SOWXLIDN.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
 import { dirname } from 'path';
 

package/dist/{chunk-MZJAIRXM.js → chunk-BCWVTWS7.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { mcpTargetPath, INIT_STDIO_ENTRY, INIT_DOCS_ENTRY, DOCS_MCP_SERVER_NAME } from './chunk-KT4CN6OU.js';
-import { POLICY_CONTENT, VALIDATOR_FILES, VALIDATORS_DIR, POLICY_PATH } from './chunk-25Z6SBMQ.js';
-import { skillsBaseFor } from './chunk-427AVP6J.js';
+import { POLICY_CONTENT, VALIDATOR_FILES, VALIDATORS_DIR, POLICY_PATH } from './chunk-XTKH5VAC.js';
+import { skillsBaseFor } from './chunk-QDDPVBIS.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
-import { resolvePackRoot, OUTERLAYER_SKILLS_BASE, skillDir, loadTemplateFiles, rewriteSkillPaths, restoreSkillPaths, TEMPLATE_SKILLS } from './chunk-NX2G6PH6.js';
+import { resolvePackRoot, OUTERLAYER_SKILLS_BASE, skillDir, loadTemplateFiles, rewriteSkillPaths, restoreSkillPaths, TEMPLATE_SKILLS } from './chunk-AKKVPUGK.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import { hasSymlinkComponent } from './chunk-42TFWHFF.js';
+import { hasSymlinkComponent } from './chunk-HJUGOAM7.js';
 import { cloneIsGoverned } from './chunk-YQR6E6OV.js';
 import { createHash } from 'crypto';
 import { existsSync, readFileSync } from 'fs';

package/dist/{chunk-GI73HOI2.js → chunk-D3LS7E7U.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { isVersion, compareVersions } from './chunk-TQMI335S.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-PAHZQQB3.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-SOWXLIDN.js';
 import { readFileSync, mkdirSync, writeFileSync, renameSync } from 'fs';
 import { join } from 'path';
 

package/dist/{chunk-GJJDPZS2.js → chunk-DBELICD6.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { uploadSpooledSteps } from './chunk-UPKFSNSU.js';
+import { uploadSpooledSteps } from './chunk-PS3AHE6C.js';
 import { LaunchFilter } from './chunk-ESVW4MJY.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-6XQPCQBW.js';
-import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-LKN4J37L.js';
+import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-HSUUTD4E.js';
+import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-FTGJ3DPV.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { cliFetch, resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-F72ABZRD.js';
+import { cliFetch, resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-AM3GMWQK.js';
 import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-PJDQPF5N.js';
-import { signerFor, signRunnerRequest } from './chunk-SHVE5JZO.js';
-import { writeSyncStatus, spoolDir } from './chunk-IG45QISA.js';
+import { signerFor, signRunnerRequest } from './chunk-IRF2FKB5.js';
+import { writeSyncStatus, spoolDir } from './chunk-RJDJFRRY.js';
 import { readLatestProvenanceForSession, readContextProvenance } from './chunk-ZJSNLVCE.js';
 import { hookExecSpoolPath } from './chunk-2O5KA67H.js';
 import { applyReportedCost } from './chunk-BKO6JEZI.js';
@@ -17,7 +17,7 @@ import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
 import { readLaunchSpoolState, launchStatusIsDecisive, launchedItemsBySession, launchesPath } from './chunk-T2Q7ISPE.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { removeJournalHooks } from './chunk-TUSYOL2O.js';
-import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-JL6VZHAJ.js';
+import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-IWFYKNAO.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { dirname, basename, join, sep } from 'path';
 import { statSync, readFileSync, readdirSync, mkdirSync, writeFileSync, renameSync, existsSync, rmSync } from 'fs';