@outerlayer/cli 0.31.0-next.20261020133458 → 0.31.1-next.20261020170819

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @outerlayer/cli
 
+## 0.31.0
+
+### Minor Changes
+
+- 9978d2e: Add `runner.managed`. A managed runner claims no work until its microVM builds run under the jailer, its Claude credential is an `ANTHROPIC_API_KEY`, and `runner.build.allowHosts` is set.
+
+### Patch Changes
+
+- 743c2ac: `outerlayer work` commands and the runner print the gateway's explanation and the billing URL when the gateway refuses new work because the organization is read-only.
+- 91a9738: A build no longer stops when the agent starts `outerlayer-build` as a skill. `outerlayer-build` leaves model invocation on, and an agent that starts it without reading the repository's `build` skill is sent to `build` first.
+- c47cb0f: The runner protocol is 23. A runner can release the lease of an item that was removed from Work while it built.
+
 ## 0.30.1
 
 ### Patch Changes

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-20T13:36:31.668Z+91a9738","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-20T17:10:30.459Z+f70c8c2","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{check-UUWPPYC3.js → check-FUZ4OTOO.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-KQLUUTLC.js';
+import { probeCredentials } from './chunk-MFAFJQUS.js';
 import './chunk-SNLMMLDD.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-E7R2GIAW.js';
-import './chunk-6C5MZ7UG.js';
+import './chunk-HZITEOLO.js';
 import './chunk-TZQIEUDE.js';
 import './chunk-ZVB57WI6.js';
 import './chunk-X7UUIHGH.js';

package/dist/{chunk-6C5MZ7UG.js → chunk-HZITEOLO.js}

@@ -4,6 +4,6 @@ import { createRequire } from 'node:module';
 createRequire(import.meta.url);
 
 // src/runner/protocol.ts
-var RUNNER_PROTOCOL = 24;
+var RUNNER_PROTOCOL = 25;
 
 export { RUNNER_PROTOCOL };

package/dist/{chunk-KQLUUTLC.js → chunk-MFAFJQUS.js}

@@ -3,7 +3,7 @@ import { createRequire } from 'node:module';
 import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-SNLMMLDD.js';
 import { decideInstalledSwitch } from './chunk-3JVYMD4G.js';
 import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-E7R2GIAW.js';
-import { RUNNER_PROTOCOL } from './chunk-6C5MZ7UG.js';
+import { RUNNER_PROTOCOL } from './chunk-HZITEOLO.js';
 import { writePendingUpdate } from './chunk-TZQIEUDE.js';
 import { JOB_STATE_FORMAT, readsJobState, jobStateFormatOf } from './chunk-ZVB57WI6.js';
 import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-X7UUIHGH.js';
@@ -2926,7 +2926,7 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
       check: update.check ? () => update.check(configPath) : async () => {
         const held = heldClaudeCredential();
         const env = held === void 0 ? process.env : { ...process.env, [held.variable]: held.value };
-        return (await import('./check-UUWPPYC3.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
+        return (await import('./check-FUZ4OTOO.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
       },
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log

package/dist/{cli-SOR7FKHH.js → cli-BYVJAVA7.js}

@@ -4856,7 +4856,7 @@ by a different key is refused; claiming again with the same key extends
 it. --host is a label only.
 `
   ).action(async (opts) => {
-    const { runWorkClaim, WorkCommandError } = await import('./work-claim-cmd-NNLX6KLD.js');
+    const { runWorkClaim, WorkCommandError } = await import('./work-claim-cmd-YNTKBRNL.js');
     try {
       await runWorkClaim(opts);
     } catch (err) {
@@ -4876,7 +4876,7 @@ Extends the live lease this API key holds. Refused with a 410 if the
 lease has expired, or a 403 if a different key holds it.
 `
   ).action(async (opts) => {
-    const { runWorkRenew, WorkCommandError } = await import('./work-claim-cmd-NNLX6KLD.js');
+    const { runWorkRenew, WorkCommandError } = await import('./work-claim-cmd-YNTKBRNL.js');
     try {
       await runWorkRenew(opts);
     } catch (err) {
@@ -4908,7 +4908,7 @@ applies to a host's lease only. A later tool call in the session
 takes the lease again.
 `
   ).action(async (opts) => {
-    const { runWorkRelease, WorkCommandError } = await import('./work-claim-cmd-NNLX6KLD.js');
+    const { runWorkRelease, WorkCommandError } = await import('./work-claim-cmd-YNTKBRNL.js');
     try {
       await runWorkRelease(opts);
     } catch (err) {
@@ -4978,7 +4978,7 @@ function registerRunnerCommands(program2) {
   const configOption = "the cloud config file to run against (default: ~/.outerlayer/config.json)";
   runnerCmd.command("start").description("Run the loop: claim work, run it, report, clean up, repeat").option("--config <path>", configOption).action(async (opts) => {
     const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-3JRFDYZL.js');
-    const { start, RunnerStartError } = await import('./loop-PJBYILSU.js');
+    const { start, RunnerStartError } = await import('./loop-WMVGW3DH.js');
     const { RunnerAlreadyRunningError } = await import('./pidfile-BMFAUQAI.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     try {
@@ -4998,7 +4998,7 @@ function registerRunnerCommands(program2) {
   ).action(async () => {
     const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-3JRFDYZL.js');
     const { containerStart } = await import('./container-start-6AZJQJCH.js');
-    const { start, RunnerStartError } = await import('./loop-PJBYILSU.js');
+    const { start, RunnerStartError } = await import('./loop-WMVGW3DH.js');
     const { RunnerAlreadyRunningError } = await import('./pidfile-BMFAUQAI.js');
     try {
       const result = await containerStart({
@@ -5018,7 +5018,7 @@ function registerRunnerCommands(program2) {
   });
   runnerCmd.command("check").description("Validate the config, the hooks and the key, and print the effective settings").option("--config <path>", configOption).action(async (opts) => {
     const { defaultRunnerConfigPath } = await import('./config-3JRFDYZL.js');
-    const { runRunnerCheck } = await import('./check-UUWPPYC3.js');
+    const { runRunnerCheck } = await import('./check-FUZ4OTOO.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const result = await runRunnerCheck(configPath);
     if (!result.ok) {
@@ -5418,7 +5418,7 @@ Next:
   });
   runnerCmd.command("stop").description("Take no more work; finish running jobs, then exit").option("--config <path>", "the cloud config file naming the runner to stop").option("--now", "end running jobs immediately, with outcome stopped").action(async (opts) => {
     const { defaultRunnerConfigPath } = await import('./config-3JRFDYZL.js');
-    const { requestStop } = await import('./loop-PJBYILSU.js');
+    const { requestStop } = await import('./loop-WMVGW3DH.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const { runnerImageVersion } = await import('./image-tag-OYT7UG7Y.js');
     await requestStop(configPath, Boolean(opts.now), void 0, { image: runnerImageVersion() !== void 0 });
@@ -5426,7 +5426,7 @@ Next:
   runnerCmd.command("status").description("List running jobs; with --recent, finished ones too").option("--config <path>", "the cloud config file naming the runner to inspect").option("--recent", "also list finished jobs, newest first, capped at 20").option("--json", "machine-readable JSON output").action(async (opts) => {
     const { defaultRunnerConfigPath, loadRunnerConfig } = await import('./config-3JRFDYZL.js');
     const { jobsDir, runnerDir } = await import('./paths-OK2EZS7W.js');
-    const { listJobFiles, runnerProcessState } = await import('./loop-PJBYILSU.js');
+    const { listJobFiles, runnerProcessState } = await import('./loop-WMVGW3DH.js');
     const { renderStatus } = await import('./status-C6IM56UC.js');
     const { readHousekeepingRecord } = await import('./record-26AH6WDB.js');
     const path2 = await import('path');
@@ -5487,7 +5487,7 @@ Next:
   });
   runnerCmd.command("logs").argument("<item>", "the work item's number in the factory").description("Print the newest attempt's log for one item").option("--config <path>", "the cloud config file naming the runner to inspect").option("-f, --follow", "keep printing as the log grows").action(async (itemArg, opts) => {
     const { defaultRunnerConfigPath } = await import('./config-3JRFDYZL.js');
-    const { listJobFiles } = await import('./loop-PJBYILSU.js');
+    const { listJobFiles } = await import('./loop-WMVGW3DH.js');
     const { newestAttempt, logPathFor, tail, RunnerLogsError } = await import('./logs-C3RJ3ZTC.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const item = parseTrackerNumber(itemArg);

package/dist/index.js

@@ -26,5 +26,5 @@ if (argv[0] === "claude") {
   process.exit(await runClaudeLauncher(argv.slice(1)));
 }
 (await import('./hook-fast-UFHR6EKZ.js')).recordLinkExitFailure(argv);
-var { runCli } = await import('./cli-SOR7FKHH.js');
+var { runCli } = await import('./cli-BYVJAVA7.js');
 await runCli(process.argv);

package/dist/{loop-PJBYILSU.js → loop-WMVGW3DH.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { RunnerStartError, leaseTimeLeftFor, listJobFiles, logUnusableHelper, probeBuild, probeCredentials, requestStop, runnerProcessState, runtimeOf, start, tick, watchTick } from './chunk-KQLUUTLC.js';
+export { RunnerStartError, leaseTimeLeftFor, listJobFiles, logUnusableHelper, probeBuild, probeCredentials, requestStop, runnerProcessState, runtimeOf, start, tick, watchTick } from './chunk-MFAFJQUS.js';
 import './chunk-SNLMMLDD.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-E7R2GIAW.js';
-import './chunk-6C5MZ7UG.js';
+import './chunk-HZITEOLO.js';
 import './chunk-TZQIEUDE.js';
 import './chunk-ZVB57WI6.js';
 import './chunk-X7UUIHGH.js';

package/dist/{work-claim-cmd-NNLX6KLD.js → work-claim-cmd-YNTKBRNL.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RUNNER_PROTOCOL } from './chunk-6C5MZ7UG.js';
+import { RUNNER_PROTOCOL } from './chunk-HZITEOLO.js';
 import { defaultRunnerConfigPath } from './chunk-P7BEZAEU.js';
 import './chunk-UXYLWVTQ.js';
 import './chunk-YJLHUKYS.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@outerlayer/cli",
-  "version": "0.31.0-next.20261020133458",
+  "version": "0.31.1-next.20261020170819",
   "description": "OuterLayer CLI — commands: init, claude, connect, doctor, login, logout, sync, daemon (alias: watch), emit, findings, work, spec, runner, hooks, mcp, context. Capture and sync coding-agent sessions, and record proof of factory work.",
   "license": "Apache-2.0",
   "author": "Magu Studios, Inc.",