@outerlayer/cli 0.31.0-next.20261020121516 → 0.31.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @outerlayer/cli
 
+## 0.31.0
+
+### Minor Changes
+
+- 9978d2e: Add `runner.managed`. A managed runner claims no work until its microVM builds run under the jailer, its Claude credential is an `ANTHROPIC_API_KEY`, and `runner.build.allowHosts` is set.
+
+### Patch Changes
+
+- 743c2ac: `outerlayer work` commands and the runner print the gateway's explanation and the billing URL when the gateway refuses new work because the organization is read-only.
+- 91a9738: A build no longer stops when the agent starts `outerlayer-build` as a skill. `outerlayer-build` leaves model invocation on, and an agent that starts it without reading the repository's `build` skill is sent to `build` first.
+- c47cb0f: The runner protocol is 23. A runner can release the lease of an item that was removed from Work while it built.
+
 ## 0.30.1
 
 ### Patch Changes

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-20T12:16:40.068Z+9978d2e","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-20T14:14:07.051Z+5079cba","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-JG34X757.js → builder-REQJGZJP.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-CBEM7ZWX.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-2JPVI45I.js';
 import './chunk-YJLHUKYS.js';
 import './chunk-SJZL5F3F.js';
-import './chunk-FTGJ3DPV.js';
+import './chunk-V36AOTBP.js';
 import './chunk-APSYTJ6I.js';
 import './chunk-KP6R7CV3.js';
 import './chunk-HDSDUTX4.js';

package/dist/{check-EP4F6VOP.js → check-UUWPPYC3.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-BPPWINVG.js';
-import './chunk-HB6SACVH.js';
+import { probeCredentials } from './chunk-KQLUUTLC.js';
+import './chunk-SNLMMLDD.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-E7R2GIAW.js';
 import './chunk-6C5MZ7UG.js';
@@ -10,21 +10,21 @@ import './chunk-ZVB57WI6.js';
 import './chunk-X7UUIHGH.js';
 import './chunk-RJYKTWUP.js';
 import './chunk-I3LTIAOR.js';
-import './chunk-V52SJHWK.js';
-import './chunk-A4UGPQXT.js';
-import './chunk-A2737R27.js';
+import './chunk-W4ICX5WW.js';
+import './chunk-IBG2ESJX.js';
+import './chunk-JCCUTTRI.js';
 import './chunk-ESVW4MJY.js';
 import './chunk-XTNMIV77.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, managedProblems, managedFactsOf, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-53SPRUEA.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, managedProblems, managedFactsOf, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-GYCKMZQJ.js';
 import './chunk-YYYRBYWG.js';
 import './chunk-ZZSQYOY5.js';
 import './chunk-TBT347UY.js';
-import './chunk-Y5OU66XJ.js';
-import './chunk-P2EVMNU6.js';
-import { probeHelper, HELPER_ENV, helperSocketPath } from './chunk-VJ4PORHS.js';
+import './chunk-ZD7J35IX.js';
+import './chunk-S4IJPYDV.js';
+import { probeHelper, HELPER_ENV, helperSocketPath } from './chunk-XU5O5JCZ.js';
 import './chunk-QQGZ5THT.js';
 import './chunk-HIGJTX5U.js';
-import './chunk-YIOUHJQM.js';
+import './chunk-WWHWF3KZ.js';
 import './chunk-YV7WULXQ.js';
 import './chunk-TQMI335S.js';
 import './chunk-NJS7JJYN.js';
@@ -35,14 +35,14 @@ import './chunk-Z7HAIZ6X.js';
 import './chunk-T5TBGOT6.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-CBEM7ZWX.js';
+import './chunk-2JPVI45I.js';
 import './chunk-YJLHUKYS.js';
 import './chunk-SJZL5F3F.js';
-import './chunk-MIVAWAMF.js';
-import './chunk-OSVS2QVP.js';
-import './chunk-GIRXO5HA.js';
+import './chunk-GPRIHEGQ.js';
+import './chunk-4EU4X2ML.js';
+import './chunk-7UD5ONVI.js';
 import './chunk-HSUUTD4E.js';
-import './chunk-FTGJ3DPV.js';
+import './chunk-V36AOTBP.js';
 import './chunk-QDDPVBIS.js';
 import './chunk-G2RRBBOX.js';
 import './chunk-G2JWZDFA.js';

package/dist/{chunk-CBEM7ZWX.js → chunk-2JPVI45I.js}

@@ -2,7 +2,7 @@
 import { createRequire } from 'node:module';
 import { parseSize } from './chunk-YJLHUKYS.js';
 import { RecipeError, BUILDKIT_IMAGE } from './chunk-SJZL5F3F.js';
-import { compareVersions } from './chunk-FTGJ3DPV.js';
+import { compareVersions } from './chunk-V36AOTBP.js';
 import { ensureHostKey } from './chunk-APSYTJ6I.js';
 import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, runnerDir, jobsDir } from './chunk-KP6R7CV3.js';
 import { CLAUDE_PORT, JOB_MOUNT, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_SOCKET, RELAY_PORT, DESTINATION_BASE_PORT } from './chunk-HDSDUTX4.js';

package/dist/{chunk-OSVS2QVP.js → chunk-4EU4X2ML.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-GIRXO5HA.js';
-import { resolveRepoIdentity } from './chunk-FTGJ3DPV.js';
+import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-7UD5ONVI.js';
+import { resolveRepoIdentity } from './chunk-V36AOTBP.js';
 import { resolveGatewayCredentials } from './chunk-F3EF56LQ.js';
 import { findGitDirs, readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';

package/dist/{chunk-MCOG33O7.js → chunk-5FHNQST3.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { autoConnect, detectActiveSession } from './chunk-OSVS2QVP.js';
-import { resolveRepoIdentity } from './chunk-FTGJ3DPV.js';
+import { autoConnect, detectActiveSession } from './chunk-4EU4X2ML.js';
+import { resolveRepoIdentity } from './chunk-V36AOTBP.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { defaultFetch, unauthorizedMessage, resolveGatewayCredentials } from './chunk-F3EF56LQ.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';

package/dist/{chunk-GIRXO5HA.js → chunk-7UD5ONVI.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { sanitizeTerminal } from './chunk-HSUUTD4E.js';
-import { remoteLookupFailed } from './chunk-FTGJ3DPV.js';
+import { remoteLookupFailed } from './chunk-V36AOTBP.js';
 import { isAgentsMdLayout } from './chunk-QDDPVBIS.js';
 import { DEFAULT_DASHBOARD } from './chunk-G2RRBBOX.js';
 import { cliFetch, resolveGatewayCredentials } from './chunk-F3EF56LQ.js';

package/dist/{chunk-TYRORELN.js → chunk-D7O7LA2O.js}

@@ -2,10 +2,10 @@
 import { createRequire } from 'node:module';
 import { checkStarterFiles, contextIsGoverned } from './chunk-BCWVTWS7.js';
 import { fleetCheck, checkBuildSkill, checkMachineSkills, checkCommittedMaintainedSkills, checkMaintainedReferences } from './chunk-4XPAQXJF.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-MIVAWAMF.js';
-import { isLinkedRepository } from './chunk-GIRXO5HA.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-GPRIHEGQ.js';
+import { isLinkedRepository } from './chunk-7UD5ONVI.js';
 import { sanitizeTerminal } from './chunk-HSUUTD4E.js';
-import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-FTGJ3DPV.js';
+import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-V36AOTBP.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { checkFormerSkillNames } from './chunk-V6IYYQU3.js';
 import { resolveGatewayCredentials, defaultFetch } from './chunk-F3EF56LQ.js';
@@ -1211,7 +1211,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-XSYJJHMJ.js');
+    const { runnerHostChecks } = await import('./doctor-XZ47GD4V.js');
     const gateway = (() => {
       try {
         const { url, apiKey, appId } = loadRunnerConfig(configPath);

package/dist/{chunk-MIVAWAMF.js → chunk-GPRIHEGQ.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectActiveSession, autoConnect } from './chunk-OSVS2QVP.js';
-import { workPageUrl } from './chunk-GIRXO5HA.js';
+import { detectActiveSession, autoConnect } from './chunk-4EU4X2ML.js';
+import { workPageUrl } from './chunk-7UD5ONVI.js';
 import { sanitizeTerminal } from './chunk-HSUUTD4E.js';
-import { resolveRepoIdentity } from './chunk-FTGJ3DPV.js';
+import { resolveRepoIdentity } from './chunk-V36AOTBP.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { resolveGatewayCredentials, unauthorizedMessage, defaultFetch } from './chunk-F3EF56LQ.js';
 import { signRunnerRequest } from './chunk-APSYTJ6I.js';

package/dist/{chunk-53SPRUEA.js → chunk-GYCKMZQJ.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isPlaceholderCommand } from './chunk-Y5OU66XJ.js';
-import { describeCallFailure } from './chunk-YIOUHJQM.js';
+import { isPlaceholderCommand } from './chunk-ZD7J35IX.js';
+import { describeCallFailure } from './chunk-WWHWF3KZ.js';
 import { checkFit } from './chunk-RQGHHEM7.js';
 import { builtinKind } from './chunk-P7BEZAEU.js';
-import { WorkCommandError, getJson } from './chunk-MIVAWAMF.js';
+import { WorkCommandError, getJson } from './chunk-GPRIHEGQ.js';
 import { sanitizeTerminal } from './chunk-HSUUTD4E.js';
 import { signerFor } from './chunk-APSYTJ6I.js';
 import { CLAUDE_CREDENTIAL_VARIABLES, claudeCredential, claudeCredentialVariablesSet } from './chunk-HDSDUTX4.js';

package/dist/{chunk-A4UGPQXT.js → chunk-IBG2ESJX.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { uploadSpooledSteps } from './chunk-A2737R27.js';
+import { uploadSpooledSteps } from './chunk-JCCUTTRI.js';
 import { LaunchFilter } from './chunk-ESVW4MJY.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
 import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-HSUUTD4E.js';
-import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-FTGJ3DPV.js';
+import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-V36AOTBP.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { cliFetch, resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-F3EF56LQ.js';
 import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-PJDQPF5N.js';

package/dist/{chunk-A2737R27.js → chunk-JCCUTTRI.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
-import { autoConnect, detectActiveSession } from './chunk-OSVS2QVP.js';
+import { autoConnect, detectActiveSession } from './chunk-4EU4X2ML.js';
 import { acquireSpoolLockAt } from './chunk-HSUUTD4E.js';
-import { resolveRepoIdentity } from './chunk-FTGJ3DPV.js';
+import { resolveRepoIdentity } from './chunk-V36AOTBP.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-F3EF56LQ.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';

package/dist/{chunk-BPPWINVG.js → chunk-KQLUUTLC.js}

@@ -1,26 +1,26 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-HB6SACVH.js';
+import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-SNLMMLDD.js';
 import { decideInstalledSwitch } from './chunk-3JVYMD4G.js';
 import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-E7R2GIAW.js';
 import { RUNNER_PROTOCOL } from './chunk-6C5MZ7UG.js';
 import { writePendingUpdate } from './chunk-TZQIEUDE.js';
 import { JOB_STATE_FORMAT, readsJobState, jobStateFormatOf } from './chunk-ZVB57WI6.js';
 import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-X7UUIHGH.js';
-import { currentSkillCommand, formerSkillProblem, realBlockedProbes, checkBlocked } from './chunk-53SPRUEA.js';
+import { currentSkillCommand, formerSkillProblem, realBlockedProbes, checkBlocked } from './chunk-GYCKMZQJ.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
 import { writeMarker, readMarker, currentVersion, removeMarker, entryIn, versionDir, startedThroughCurrent, switchCurrent, isInLayout, cleanVersions, stagingDir } from './chunk-ZZSQYOY5.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandExec, setUpRunnerCgroup, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-VJ4PORHS.js';
-import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-YIOUHJQM.js';
+import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandExec, setUpRunnerCgroup, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-XU5O5JCZ.js';
+import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-WWHWF3KZ.js';
 import { tagToPull, pullInstruction, imageTag, writeUpdateStatus } from './chunk-YV7WULXQ.js';
 import { isVersion, compareVersions, satisfiesRange } from './chunk-TQMI335S.js';
 import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-P7BEZAEU.js';
 import { claimPidFile, writePidFile, readPidFile, releasePidFile } from './chunk-T5TBGOT6.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
-import { writeJobFile, ensureRunnerIdentity, readJobFile, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, BUILD_LABEL, RUNNER_LABEL, readJobFileChecked } from './chunk-CBEM7ZWX.js';
+import { writeJobFile, ensureRunnerIdentity, readJobFile, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, BUILD_LABEL, RUNNER_LABEL, readJobFileChecked } from './chunk-2JPVI45I.js';
 import { exceedsDisk } from './chunk-YJLHUKYS.js';
-import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-MIVAWAMF.js';
+import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-GPRIHEGQ.js';
 import { loadHostKey, ensureHostKey, signerFor } from './chunk-APSYTJ6I.js';
 import { RUNNER_DIR_MODE, runnerDir, buildDir, attemptStamp, jobDir, RUNNER_FILE_MODE, jobsDir, pidFilePath, spoolDir, rootfsDir } from './chunk-KP6R7CV3.js';
 import { parseClaimIdentity, parseClaimedRepositories, parseUnreachable, repositoriesOf, primaryOf, sharedUserEnvironment, JOB_MOUNT, takeClaudeCredential, heldClaudeCredential, currentClaudeCredential } from './chunk-HDSDUTX4.js';
@@ -1745,7 +1745,7 @@ var CLAIM_REFUSAL_CODES = new Set(
   "pull_request_from_fork pull_request_on_default_branch pull_request_ambiguous pull_request_repository_not_connected repository_not_reachable branch_claimed_elsewhere".split(" ")
 );
 async function tryClaimAndStart(state, item, queue) {
-  const { postJson: postJson2 } = await import('./work-cmd-PHNJNLWA.js');
+  const { postJson: postJson2 } = await import('./work-cmd-I37TTGHI.js');
   const log = logOf(state);
   const hostKey = await loadHostKey(state.config.configPath);
   const claim = await retrySend(
@@ -2926,7 +2926,7 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
       check: update.check ? () => update.check(configPath) : async () => {
         const held = heldClaudeCredential();
         const env = held === void 0 ? process.env : { ...process.env, [held.variable]: held.value };
-        return (await import('./check-EP4F6VOP.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
+        return (await import('./check-UUWPPYC3.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
       },
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log

package/dist/{chunk-P2EVMNU6.js → chunk-S4IJPYDV.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { MIN_ENGINE_MAJOR } from './chunk-VJ4PORHS.js';
+import { MIN_ENGINE_MAJOR } from './chunk-XU5O5JCZ.js';
 import { runnerImageVersion } from './chunk-YV7WULXQ.js';
 import { firecrackerArch, MICROVM_ARCHES, guestAssetsPinned } from './chunk-SJZL5F3F.js';
 import { spawnSync } from 'child_process';

package/dist/{chunk-HB6SACVH.js → chunk-SNLMMLDD.js}

@@ -3,22 +3,22 @@ import { createRequire } from 'node:module';
 import { readsJobState, READ_JOB_STATE_FORMATS, jobStateFormatOf } from './chunk-ZVB57WI6.js';
 import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-RJYKTWUP.js';
 import { zodProblem } from './chunk-I3LTIAOR.js';
-import { senderPidfile } from './chunk-V52SJHWK.js';
-import { installScrubContext } from './chunk-A4UGPQXT.js';
+import { senderPidfile } from './chunk-W4ICX5WW.js';
+import { installScrubContext } from './chunk-IBG2ESJX.js';
 import { writeDockerClientConfig } from './chunk-XTNMIV77.js';
-import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, resolveAgentUser, AgentUserError, runBuildSteps, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, senderAliveScript, helperFirecrackerNote, HelperRefusal, isLiteralAddress, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, copyJudgeTree } from './chunk-VJ4PORHS.js';
+import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, resolveAgentUser, AgentUserError, runBuildSteps, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, senderAliveScript, helperFirecrackerNote, HelperRefusal, isLiteralAddress, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, copyJudgeTree } from './chunk-XU5O5JCZ.js';
 import { waitForAgent, vmExecArgs } from './chunk-QQGZ5THT.js';
 import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-HIGJTX5U.js';
-import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, keptContextTree } from './chunk-YIOUHJQM.js';
+import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, keptContextTree } from './chunk-WWHWF3KZ.js';
 import { isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-P7BEZAEU.js';
 import { readBranchHead, fetchCommit, diffBetween } from './chunk-Z7HAIZ6X.js';
 import { isSameProcess, startTimeOf } from './chunk-JBJTC3UU.js';
-import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-CBEM7ZWX.js';
+import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-2JPVI45I.js';
 import { parseSize } from './chunk-YJLHUKYS.js';
 import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-SJZL5F3F.js';
-import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-MIVAWAMF.js';
+import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-GPRIHEGQ.js';
 import { planArtifactUpload } from './chunk-HSUUTD4E.js';
-import { scrubText } from './chunk-FTGJ3DPV.js';
+import { scrubText } from './chunk-V36AOTBP.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
 import { signerFor } from './chunk-APSYTJ6I.js';
 import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath } from './chunk-KP6R7CV3.js';

package/dist/{chunk-FTGJ3DPV.js → chunk-V36AOTBP.js}

@@ -22021,15 +22021,15 @@ var ModelRegistryImpl = class {
 };
 var models_default = {
   version: "1.0.0",
-  generatedAt: "2026-10-19T03:56:01.431Z",
+  generatedAt: "2026-10-20T04:08:05.260Z",
   sources: {
     litellm: {
-      fetchedAt: "2026-10-19T03:56:01.431Z",
-      modelCount: 1966
+      fetchedAt: "2026-10-20T04:08:05.260Z",
+      modelCount: 1968
     },
     openrouter: {
-      fetchedAt: "2026-10-19T03:56:01.431Z",
-      modelCount: 205
+      fetchedAt: "2026-10-20T04:08:05.260Z",
+      modelCount: 204
     }
   },
   models: {
@@ -22315,19 +22315,22 @@ var models_default = {
       provider: "bedrock",
       displayName: "Twelvelabs.pegasus 1 2 V1:0",
       mode: "chat",
-      source: "litellm"
+      source: "litellm",
+      deprecationDate: "2027-03-22"
     },
     "us.twelvelabs.pegasus-1-2-v1:0": {
       provider: "bedrock",
       displayName: "Us.twelvelabs.pegasus 1 2 V1:0",
       mode: "chat",
-      source: "litellm"
+      source: "litellm",
+      deprecationDate: "2027-03-22"
     },
     "eu.twelvelabs.pegasus-1-2-v1:0": {
       provider: "bedrock",
       displayName: "Eu.twelvelabs.pegasus 1 2 V1:0",
       mode: "chat",
-      source: "litellm"
+      source: "litellm",
+      deprecationDate: "2027-03-22"
     },
     "amazon.titan-text-express-v1": {
       provider: "bedrock",
@@ -30064,15 +30067,7 @@ var models_default = {
       },
       capabilities: {
         reasoning: true
-      },
-      supportedParameters: [
-        "frequency_penalty",
-        "max_tokens",
-        "presence_penalty",
-        "temperature",
-        "top_k",
-        "top_p"
-      ]
+      }
     },
     "deepseek-v3": {
       provider: "azure",
@@ -43614,12 +43609,12 @@ var models_default = {
         "top_p"
       ],
       pricing: {
-        inputCostPerToken: 5e-8,
-        outputCostPerToken: 1e-7
+        inputCostPerToken: 4e-8,
+        outputCostPerToken: 5e-8
       },
       context: {
         maxInputTokens: 131072,
-        maxOutputTokens: 16384
+        maxOutputTokens: 117964
       },
       capabilities: {
         vision: true,
@@ -46662,7 +46657,8 @@ var models_default = {
       capabilities: {
         functionCalling: true,
         pdfInput: true
-      }
+      },
+      deprecationDate: "2027-03-09"
     },
     "us.writer.palmyra-x5-v1:0": {
       provider: "bedrock",
@@ -46680,7 +46676,8 @@ var models_default = {
       capabilities: {
         functionCalling: true,
         pdfInput: true
-      }
+      },
+      deprecationDate: "2027-03-21"
     },
     "writer.palmyra-x4-v1:0": {
       provider: "bedrock",
@@ -46698,7 +46695,8 @@ var models_default = {
       capabilities: {
         functionCalling: true,
         pdfInput: true
-      }
+      },
+      deprecationDate: "2027-03-09"
     },
     "writer.palmyra-x5-v1:0": {
       provider: "bedrock",
@@ -46716,7 +46714,8 @@ var models_default = {
       capabilities: {
         functionCalling: true,
         pdfInput: true
-      }
+      },
+      deprecationDate: "2027-03-21"
     },
     "amazon.nova-lite-v1:0": {
       provider: "bedrock",
@@ -58053,12 +58052,12 @@ var models_default = {
         pdfInput: true,
         webSearch: true
       },
-      deprecationDate: "2027-09-02",
       supportedParameters: [
         "max_tokens",
         "temperature",
         "top_p"
-      ]
+      ],
+      deprecationDate: null
     },
     "gemini-3.8-flash:batch": {
       provider: "google",
@@ -59987,7 +59986,8 @@ var models_default = {
       provider: "bedrock",
       displayName: "Global.twelvelabs.pegasus 1 2 V1:0",
       mode: "chat",
-      source: "litellm"
+      source: "litellm",
+      deprecationDate: "2027-03-22"
     },
     whisper: {
       provider: "azure",
@@ -67620,8 +67620,8 @@ var models_default = {
         "top_p"
       ],
       pricing: {
-        inputCostPerToken: 3e-7,
-        outputCostPerToken: 12e-7
+        inputCostPerToken: 15e-8,
+        outputCostPerToken: 6e-7
       },
       context: {
         maxInputTokens: 1048576,
@@ -67649,11 +67649,53 @@ var models_default = {
       },
       capabilities: {
         vision: true,
-        functionCalling: false,
+        functionCalling: true,
         structuredOutput: true,
         promptCaching: true,
         reasoning: true
       }
+    },
+    "deepseek-ai/DeepSeek-V4.1-Flash-1017": {
+      provider: "together_ai",
+      displayName: "Deepseek Ai/DeepSeek V4.1 Flash 1017",
+      mode: "chat",
+      source: "litellm",
+      pricing: {
+        inputCostPerToken: 3e-7,
+        outputCostPerToken: 12e-7,
+        cacheReadCostPerToken: 6e-9
+      },
+      context: {
+        maxInputTokens: 1048576
+      },
+      capabilities: {
+        vision: true,
+        functionCalling: true,
+        structuredOutput: true,
+        promptCaching: true,
+        reasoning: true
+      }
+    },
+    "accounts/fireworks/models/minimax-m3p1-flash": {
+      provider: "fireworks_ai",
+      displayName: "Accounts/fireworks/models/minimax M3p1 Flash",
+      mode: "chat",
+      source: "litellm",
+      pricing: {
+        inputCostPerToken: 15e-8,
+        outputCostPerToken: 6e-7,
+        cacheReadCostPerToken: 15e-9
+      },
+      context: {
+        maxInputTokens: 1048576,
+        maxOutputTokens: 1048576
+      },
+      capabilities: {
+        vision: true,
+        functionCalling: true,
+        structuredOutput: true,
+        reasoning: true
+      }
     }
   }
 };

package/dist/{chunk-V52SJHWK.js → chunk-W4ICX5WW.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LiveUploader } from './chunk-A4UGPQXT.js';
-import { CaptureDaemon } from './chunk-FTGJ3DPV.js';
+import { LiveUploader } from './chunk-IBG2ESJX.js';
+import { CaptureDaemon } from './chunk-V36AOTBP.js';
 import { spoolDir } from './chunk-WRW6QCI6.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{chunk-YIOUHJQM.js → chunk-WWHWF3KZ.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { WorkCommandError, postJson } from './chunk-MIVAWAMF.js';
+import { WorkCommandError, postJson } from './chunk-GPRIHEGQ.js';
 import { defaultGitRunner, materializeContext, isStagingWriteFault, lookupGoverningSource } from './chunk-NIS2PIS4.js';
 import { signingFetchFor } from './chunk-F3EF56LQ.js';
 import { signerFor } from './chunk-APSYTJ6I.js';

package/dist/{chunk-VJ4PORHS.js → chunk-XU5O5JCZ.js}

@@ -2,17 +2,17 @@
 import { createRequire } from 'node:module';
 import { execCapture } from './chunk-QQGZ5THT.js';
 import { GUEST_CID } from './chunk-HIGJTX5U.js';
-import { keepStagedContext, describeCallFailure, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript } from './chunk-YIOUHJQM.js';
+import { keepStagedContext, describeCallFailure, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript } from './chunk-WWHWF3KZ.js';
 import { runnerImageVersion } from './chunk-YV7WULXQ.js';
 import { hostAllowed } from './chunk-UXYLWVTQ.js';
 import { readDefaultBranchHead, cloneRepository, buildRepositoryImage } from './chunk-Z7HAIZ6X.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
 import { currentCliBuild } from './chunk-OGFGZQA3.js';
-import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun } from './chunk-CBEM7ZWX.js';
+import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun } from './chunk-2JPVI45I.js';
 import { readDu } from './chunk-YJLHUKYS.js';
 import { FIRECRACKER_VERSION, hostHelperPinned, firecrackerArch, MICROVM_ARCHES, RecipeError, DOCKER_FEATURE, CLAUDE_CODE_VERSION, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, JAILER_BINARY_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, GUEST_ASSETS_VERSION, DEFAULT_BASE_IMAGE } from './chunk-SJZL5F3F.js';
-import { WorkCommandError } from './chunk-MIVAWAMF.js';
-import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-FTGJ3DPV.js';
+import { WorkCommandError } from './chunk-GPRIHEGQ.js';
+import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-V36AOTBP.js';
 import { vmAssetsDir, RUNNER_DIR_MODE, rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, deliveryDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, buildDir, SHIM_DIR } from './chunk-KP6R7CV3.js';
 import { repositoriesOf, primaryOf, RELAY_PORT, repositoryPath, CHECKOUT_DIR, lifecycleWorkdir, claudeCredential, buildEnvironment, startBuildServices, checkEnvironment, AGENT_CREDENTIAL_MISSING, checkoutPath, JOB_MOUNT } from './chunk-HDSDUTX4.js';
 import { sharedSkillNames, skillConflictMessage } from './chunk-FGF52V4V.js';

package/dist/{chunk-2DH7VRLQ.js → chunk-YQTQQTYK.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
-import { detectActiveSession, autoConnect, transcriptPathForSession } from './chunk-OSVS2QVP.js';
-import { resolveRepoIdentity, defaultProjectsDir, findTranscripts, sessionIdFromPath, scrubText } from './chunk-FTGJ3DPV.js';
+import { detectActiveSession, autoConnect, transcriptPathForSession } from './chunk-4EU4X2ML.js';
+import { resolveRepoIdentity, defaultProjectsDir, findTranscripts, sessionIdFromPath, scrubText } from './chunk-V36AOTBP.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-F3EF56LQ.js';
 import { readLatestProvenanceForSession } from './chunk-ZJSNLVCE.js';

package/dist/{chunk-Y5OU66XJ.js → chunk-ZD7J35IX.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-P2EVMNU6.js';
-import { MIN_ENGINE_MAJOR } from './chunk-VJ4PORHS.js';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-S4IJPYDV.js';
+import { MIN_ENGINE_MAJOR } from './chunk-XU5O5JCZ.js';
 import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-NJS7JJYN.js';
 import { runnerCredentialProblem } from './chunk-P7BEZAEU.js';
 import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-KP6R7CV3.js';