@outerlayer/cli 0.32.0-next.20261020204004 → 0.32.0

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @outerlayer/cli
 
+## 0.32.0
+
+### Minor Changes
+
+- 06478ea: A microVM build now sends the memory and CPU its guest used, measured inside the guest, when the runner releases its claim.
+- 522c55a: The runner image reads `OUTERLAYER_BUILD_MEMORY` and `OUTERLAYER_CONCURRENCY` from its env file. On a machine too small for 8 GB builds, it fits each build's memory, down to 4 GB.
+- 0967505: The runner image has a `latest` tag and a tag for each minor version, such as `0.31`. A first `docker run` needs no version number.
+
+### Patch Changes
+
+- 42873e1: `init` ends with commit commands that name only the setup paths that exist and that git does not ignore. It names each path, and each file or folder inside a setup folder, that git ignores.
+- f70c8c2: The runner protocol is now 25. The gateway documents the 429 rate-limited answer on the context source read; the answer itself is unchanged.
+- 6adda17: The runner protocol is now 26. The gateway accepts a heartbeat from a pre-release runner build, whose version is longer than 64 characters.
+- 6eed059: A container build reads the gateway's short answers intact. The runner's session relay lost the start of a short response, so `outerlayer findings show`, `outerlayer emit step` and `outerlayer work open-pr` failed in the build with "fetch failed".
+
+  The `build` template opens the pull request when `outerlayer findings show` fails twice, and says in the description that the covered problems were not checked. `outerlayer init --update` gives an unedited `build` the new rule.
+
+- d39f74e: The starter `/spec` skill asks where to build: on a host, in a session you start, or not yet. A host build no longer prints the `/build` launch line, which built the item a second time. Run `outerlayer init --update` to get the new `spec` skill if you have not edited it.
+- 8773b66: A build whose push GitHub refused for a workflow change is released `failed` with `workflow_permission_required`, not `incomplete` with "the build opened no pull request". The build skill's final report names the policy lines that allow the change.
+
 ## 0.31.0
 
 ### Minor Changes

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-20T20:42:03.434Z+0967505","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-21T10:25:56.495Z+814b9ca","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{check-RGEPORAK.js → check-COMHCLXW.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-TV7LE7TM.js';
-import './chunk-VCPEUBXM.js';
+import { probeCredentials } from './chunk-3PYMMGYO.js';
+import './chunk-CVGMB4N7.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-WHSYPR3U.js';
 import './chunk-E7R2GIAW.js';
-import './chunk-WRU3K5AN.js';
+import './chunk-YKYCE4HY.js';
 import './chunk-TZQIEUDE.js';
 import './chunk-ZVB57WI6.js';
 import './chunk-X7UUIHGH.js';
@@ -16,13 +16,13 @@ import './chunk-KCB6V5XH.js';
 import './chunk-XKZPL3GE.js';
 import './chunk-ESVW4MJY.js';
 import './chunk-XTNMIV77.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, managedProblems, managedFactsOf, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-HIS7MJ6O.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, managedProblems, managedFactsOf, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-FKNOPMUD.js';
 import './chunk-YYYRBYWG.js';
 import './chunk-ZZSQYOY5.js';
 import './chunk-TBT347UY.js';
-import './chunk-GHHRJWAI.js';
-import './chunk-FRRJ63U2.js';
-import { probeHelper, HELPER_ENV, helperSocketPath } from './chunk-U2JERFV2.js';
+import './chunk-JH2AMJ4K.js';
+import './chunk-5TNEVWFJ.js';
+import { probeHelper, HELPER_ENV, helperSocketPath } from './chunk-VIHQLW4L.js';
 import './chunk-QQGZ5THT.js';
 import './chunk-HIGJTX5U.js';
 import './chunk-SXJVL7NS.js';

package/dist/{chunk-TV7LE7TM.js → chunk-3PYMMGYO.js}

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-VCPEUBXM.js';
+import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, sampleGuest, foldSample, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, GUEST_USAGE_INTERVAL_MS, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-CVGMB4N7.js';
 import { decideInstalledSwitch } from './chunk-3JVYMD4G.js';
 import { fitImageBuildMemory } from './chunk-WHSYPR3U.js';
 import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-E7R2GIAW.js';
-import { RUNNER_PROTOCOL } from './chunk-WRU3K5AN.js';
+import { RUNNER_PROTOCOL } from './chunk-YKYCE4HY.js';
 import { writePendingUpdate } from './chunk-TZQIEUDE.js';
 import { JOB_STATE_FORMAT, readsJobState, jobStateFormatOf } from './chunk-ZVB57WI6.js';
 import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-X7UUIHGH.js';
-import { currentSkillCommand, formerSkillProblem, realBlockedProbes, checkBlocked } from './chunk-HIS7MJ6O.js';
+import { currentSkillCommand, formerSkillProblem, realBlockedProbes, checkBlocked } from './chunk-FKNOPMUD.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
 import { writeMarker, readMarker, currentVersion, removeMarker, entryIn, versionDir, startedThroughCurrent, switchCurrent, isInLayout, cleanVersions, stagingDir } from './chunk-ZZSQYOY5.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandExec, setUpRunnerCgroup, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-U2JERFV2.js';
+import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandExec, setUpRunnerCgroup, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-VIHQLW4L.js';
 import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-SXJVL7NS.js';
 import { tagToPull, pullInstruction, imageTag, writeUpdateStatus } from './chunk-IWYS4ERC.js';
 import { isVersion, compareVersions, satisfiesRange } from './chunk-TQMI335S.js';
@@ -2524,6 +2524,21 @@ async function endOrWaitForMicroVm(state, active) {
     log.error(`${tag} the build's command could not be read from its microVM \xB7 trying again`);
   }
 }
+async function sampleUsage(state, active) {
+  const microvm = active.job.microvm;
+  if (microvm?.vsockPath === void 0 || active.ending || active.sampling) return;
+  active.sampling = true;
+  try {
+    const sample = await sampleGuest(runtimeOf(state), microvm);
+    if (sample === void 0 || active.ending) return;
+    active.job.guestUsage = foldSample(active.job.guestUsage, sample);
+    writeJobFile(join(active.dirPath, "job.json"), active.job);
+  } catch (err) {
+    logOf(state).error(`#${active.job.item} reading the build's guest for its usage failed: ${describeCallFailure(err)}`);
+  } finally {
+    active.sampling = false;
+  }
+}
 async function probeBuild(state, active) {
   const container = active.job.container;
   const tracked = container !== void 0 && isContainerTracked(active.job) ? container : isMicroVmTracked(active.job) ? active.job.microvm : void 0;
@@ -2932,7 +2947,7 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
       check: update.check ? () => update.check(configPath) : async () => {
         const held = heldClaudeCredential();
         const env = held === void 0 ? process.env : { ...process.env, [held.variable]: held.value };
-        return (await import('./check-RGEPORAK.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
+        return (await import('./check-COMHCLXW.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
       },
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log
@@ -3064,6 +3079,9 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
   const probeTimer = setInterval(() => {
     for (const active of state.jobs.values()) void probeBuild(state, active);
   }, deps.probeIntervalMs ?? PROBE_INTERVAL_MS);
+  const usageTimer = setInterval(() => {
+    for (const active of state.jobs.values()) void sampleUsage(state, active);
+  }, deps.usageIntervalMs ?? GUEST_USAGE_INTERVAL_MS);
   const onSigterm = () => {
     if (deps.image !== void 0) leave();
     else if (leavesBuilds && buildBlockers(runningBuilds(state)).length === 0) leave();
@@ -3102,6 +3120,7 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
     clearInterval(pollTimer);
     clearInterval(watchTimer);
     clearInterval(probeTimer);
+    clearInterval(usageTimer);
   };
   const finish2 = () => {
     if (exited) return;
@@ -3151,6 +3170,7 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
     clearInterval(pollTimer);
     clearInterval(watchTimer);
     clearInterval(probeTimer);
+    clearInterval(usageTimer);
     log.line(`stopping: ending ${state.jobs.size} running job(s) now`);
     await Promise.all([...state.jobs.values()].map((active) => endJob(state, active, "stopped")));
     finish2();
@@ -3249,4 +3269,4 @@ function runnerProcessState(configPath) {
   return isSameProcess(entry.pid, entry.start) ? { state: "running", pid: entry.pid } : { state: "stale", pid: entry.pid };
 }
 
-export { RunnerStartError, leaseTimeLeftFor, listJobFiles, logUnusableHelper, probeBuild, probeCredentials, requestStop, runnerProcessState, runtimeOf, start, tick, watchTick };
+export { RunnerStartError, leaseTimeLeftFor, listJobFiles, logUnusableHelper, probeBuild, probeCredentials, requestStop, runnerProcessState, runtimeOf, sampleUsage, start, tick, watchTick };

package/dist/{chunk-FRRJ63U2.js → chunk-5TNEVWFJ.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { MIN_ENGINE_MAJOR } from './chunk-U2JERFV2.js';
+import { MIN_ENGINE_MAJOR } from './chunk-VIHQLW4L.js';
 import { runnerImageVersion } from './chunk-IWYS4ERC.js';
 import { firecrackerArch, MICROVM_ARCHES, guestAssetsPinned } from './chunk-SJZL5F3F.js';
 import { spawnSync } from 'child_process';

package/dist/{chunk-GNRCLFX7.js → chunk-7F2VPHP7.js}

@@ -1211,7 +1211,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-5YQWPRTW.js');
+    const { runnerHostChecks } = await import('./doctor-A3A4X2HJ.js');
     const gateway = (() => {
       try {
         const { url, apiKey, appId } = loadRunnerConfig(configPath);

package/dist/{chunk-VCPEUBXM.js → chunk-CVGMB4N7.js}

@@ -6,7 +6,7 @@ import { zodProblem } from './chunk-I3LTIAOR.js';
 import { senderPidfile } from './chunk-JFLVUA43.js';
 import { installScrubContext } from './chunk-KCB6V5XH.js';
 import { writeDockerClientConfig } from './chunk-XTNMIV77.js';
-import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, resolveAgentUser, AgentUserError, runBuildSteps, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, senderAliveScript, helperFirecrackerNote, HelperRefusal, isLiteralAddress, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, copyJudgeTree } from './chunk-U2JERFV2.js';
+import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, resolveAgentUser, AgentUserError, runBuildSteps, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, senderAliveScript, helperFirecrackerNote, HelperRefusal, isLiteralAddress, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, copyJudgeTree } from './chunk-VIHQLW4L.js';
 import { waitForAgent, vmExecArgs } from './chunk-QQGZ5THT.js';
 import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-HIGJTX5U.js';
 import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-SXJVL7NS.js';
@@ -1145,6 +1145,82 @@ async function stopOrphanedMicroVms(input) {
   }
   return stopped;
 }
+
+// src/runner/microvm/guest-usage.ts
+var GUEST_USAGE_INTERVAL_MS = 15e3;
+var MS_PER_TICK = 10;
+function usageScript(procDir = "/proc") {
+  return [
+    `echo OL-USAGE-MEMINFO; cat ${procDir}/meminfo`,
+    `echo OL-USAGE-STAT; cat ${procDir}/stat`,
+    `if [ -r ${procDir}/pressure/memory ]; then echo OL-USAGE-PSI-MEMORY; cat ${procDir}/pressure/memory; fi`,
+    `if [ -r ${procDir}/pressure/cpu ]; then echo OL-USAGE-PSI-CPU; cat ${procDir}/pressure/cpu; fi`
+  ].join("; ");
+}
+function section(stdout, name) {
+  const lines = stdout.split("\n");
+  const start = lines.indexOf(`OL-USAGE-${name}`);
+  if (start === -1) return void 0;
+  const end = lines.findIndex((line, index) => index > start && line.startsWith("OL-USAGE-"));
+  return lines.slice(start + 1, end === -1 ? void 0 : end).join("\n");
+}
+function meminfoKb(text2, key) {
+  const match = new RegExp(`^${key}:\\s+(\\d+)\\s+kB\\s*$`, "m").exec(text2);
+  return match === null ? void 0 : Number(match[1]);
+}
+function pressureTotal(text2) {
+  if (text2 === void 0) return void 0;
+  const match = /^some\s.*\btotal=(\d+)\s*$/m.exec(text2);
+  return match === null ? void 0 : Number(match[1]);
+}
+function parseGuestSample(stdout) {
+  const meminfo = section(stdout, "MEMINFO");
+  const stat = section(stdout, "STAT");
+  if (meminfo === void 0 || stat === void 0) return void 0;
+  const totalKb = meminfoKb(meminfo, "MemTotal");
+  const availableKb = meminfoKb(meminfo, "MemAvailable");
+  const aggregate = /^cpu\s+(\d+(?:\s+\d+){7,})\s*$/m.exec(stat);
+  if (totalKb === void 0 || availableKb === void 0 || totalKb <= 0 || availableKb > totalKb || aggregate === null) return void 0;
+  const [user, nice, system, , , irq, softirq, steal] = aggregate[1].split(/\s+/).map(Number);
+  const vcpus = stat.split("\n").filter((line) => /^cpu\d+\s/.test(line)).length;
+  if (vcpus < 1) return void 0;
+  const memoryPressureUs = pressureTotal(section(stdout, "PSI-MEMORY"));
+  const cpuPressureUs = pressureTotal(section(stdout, "PSI-CPU"));
+  return {
+    memoryBytes: totalKb * 1024,
+    vcpus,
+    usedBytes: (totalKb - availableKb) * 1024,
+    cpuBusyMs: (user + nice + system + irq + softirq + steal) * MS_PER_TICK,
+    ...memoryPressureUs === void 0 ? {} : { memoryPressureUs },
+    ...cpuPressureUs === void 0 ? {} : { cpuPressureUs }
+  };
+}
+function foldSample(usage, sample) {
+  return { peakMemoryBytes: Math.max(usage?.peakMemoryBytes ?? 0, sample.usedBytes), last: sample };
+}
+function usageRecord(usage) {
+  if (usage === void 0) return void 0;
+  const { last } = usage;
+  return {
+    guestMemoryBytes: last.memoryBytes,
+    guestVcpus: last.vcpus,
+    peakMemoryBytes: usage.peakMemoryBytes,
+    cpuBusyMs: last.cpuBusyMs,
+    ...last.memoryPressureUs === void 0 ? {} : { memoryPressureUs: last.memoryPressureUs },
+    ...last.cpuPressureUs === void 0 ? {} : { cpuPressureUs: last.cpuPressureUs }
+  };
+}
+async function sampleGuest(runtime, state) {
+  if (state.vsockPath === void 0) return void 0;
+  try {
+    const result = await withinTime(
+      (signal) => runtime.vm.exec(state.vsockPath, { argv: ["/bin/sh", "-c", usageScript()], user: "root", cwd: "/", env: { PATH: GUEST_PATH } }, { signal })
+    );
+    return result.status === 0 ? parseGuestSample(result.stdout) : void 0;
+  } catch {
+    return void 0;
+  }
+}
 function provisionEnvironment(base, input) {
   return {
     ...base,
@@ -2891,6 +2967,9 @@ async function releaseLease(config, item, outcome, detail, fetchImpl) {
         sent = "ok";
       } else if (log !== void 0 && /\blog\b/.test(err.message)) {
         log = void 0;
+      } else if (environment?.guestUsage !== void 0) {
+        const { guestUsage: _omittedUsage, ...withoutUsage } = environment;
+        environment = withoutUsage;
       } else if (environment?.controlPlane !== void 0) {
         const { controlPlane: _omittedPlane, ...withoutPlane } = environment;
         environment = withoutPlane;
@@ -3000,6 +3079,13 @@ async function finishJob(job, jobDirPath, outcome, config, deps, ending) {
   const build = job.container === void 0 ? void 0 : { state: job.container, runtime: deps.container ?? createContainerRuntime() };
   const vmBuild = job.microvm === void 0 ? void 0 : { state: job.microvm, runtime: deps.container ?? createContainerRuntime() };
   const commandMayRun = job.pid !== void 0 && isGroupAlive(job.pid) || isContainerTracked(job) && job.exitCode === void 0;
+  if (vmBuild !== void 0) {
+    const sample = await sampleGuest(vmBuild.runtime, vmBuild.state);
+    if (sample !== void 0) {
+      job.guestUsage = foldSample(job.guestUsage, sample);
+      writeJobFile(jobFilePath, job);
+    }
+  }
   if (vmBuild !== void 0 && isMicroVmTracked(job) && job.exitCode === void 0) {
     await endMicroVmCommand(vmBuild.runtime, vmBuild.state, jobDirPath, (line) => log.error(`${tag} ${line}`));
   }
@@ -3298,6 +3384,9 @@ async function finishJob(job, jobDirPath, outcome, config, deps, ending) {
       job.environment = base;
     }
     job.environment = { ...job.environment, commitIdentity: commitIdentityRecord(job.commitIdentity) };
+    const guestUsage = job.microvm === void 0 ? void 0 : usageRecord(job.guestUsage);
+    if (guestUsage !== void 0) job.environment = { ...job.environment, guestUsage };
+    else delete job.environment.guestUsage;
     writeJobFile(jobFilePath, job);
   }
   const sentAtMs = now().getTime();
@@ -3599,4 +3688,4 @@ async function stopSender(input) {
   }
 }
 
-export { ALREADY_RELEASED, AttemptLogBook, EXIT_CODE_FILE, MICROVM_COMMAND_DIR, RENEW_INTERVAL_SECONDS, appendCommandLog, commandLogOffset, deliverCommitHooks, describeHookEnd, execArgv, execCommandLine, finishJob, hookLimitsFor, hostCommandEnvironment, hostEnvironment, inTeardown, isContainerTracked, isGroupAlive, isIdle, isMicroVmTracked, isReadable, isTimedOut, isTracked, isUnfinished, jobEnv, judgeProbe, listAdoptableJobs, listTrackedJobs, listUnreadableJobs, listenOnBroker, microVmCommandLine, microVmOomKills, needsRenew, outcomeFromExitCode, probeCommand, probeMicroVmCommand, provisionEnvironment, provisionMicroVm, provisionProcess, readCpuUsec, readProvisionOut, recoverLostJobs, releaseLease, renewLease, resolveHostBuild, restartSender, retryFailedReleases, runCommand, runHook, serveLease, setStage, startHostServices, startMicroVmCommand, startSender, stopOrphanedMicroVms, unfinishedJobs, vmAlive, workdirProblem, writeGuestGhConfig };
+export { ALREADY_RELEASED, AttemptLogBook, EXIT_CODE_FILE, GUEST_USAGE_INTERVAL_MS, MICROVM_COMMAND_DIR, RENEW_INTERVAL_SECONDS, appendCommandLog, commandLogOffset, deliverCommitHooks, describeHookEnd, execArgv, execCommandLine, finishJob, foldSample, hookLimitsFor, hostCommandEnvironment, hostEnvironment, inTeardown, isContainerTracked, isGroupAlive, isIdle, isMicroVmTracked, isReadable, isTimedOut, isTracked, isUnfinished, jobEnv, judgeProbe, listAdoptableJobs, listTrackedJobs, listUnreadableJobs, listenOnBroker, microVmCommandLine, microVmOomKills, needsRenew, outcomeFromExitCode, probeCommand, probeMicroVmCommand, provisionEnvironment, provisionMicroVm, provisionProcess, readCpuUsec, readProvisionOut, recoverLostJobs, releaseLease, renewLease, resolveHostBuild, restartSender, retryFailedReleases, runCommand, runHook, sampleGuest, serveLease, setStage, startHostServices, startMicroVmCommand, startSender, stopOrphanedMicroVms, unfinishedJobs, vmAlive, workdirProblem, writeGuestGhConfig };

package/dist/{chunk-HIS7MJ6O.js → chunk-FKNOPMUD.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isPlaceholderCommand } from './chunk-GHHRJWAI.js';
+import { isPlaceholderCommand } from './chunk-JH2AMJ4K.js';
 import { describeCallFailure } from './chunk-SXJVL7NS.js';
 import { checkFit } from './chunk-RQGHHEM7.js';
 import { builtinKind } from './chunk-P7BEZAEU.js';

package/dist/{chunk-GHHRJWAI.js → chunk-JH2AMJ4K.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-FRRJ63U2.js';
-import { MIN_ENGINE_MAJOR } from './chunk-U2JERFV2.js';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-5TNEVWFJ.js';
+import { MIN_ENGINE_MAJOR } from './chunk-VIHQLW4L.js';
 import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-NJS7JJYN.js';
 import { runnerCredentialProblem } from './chunk-P7BEZAEU.js';
 import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-KP6R7CV3.js';

package/dist/{chunk-U2JERFV2.js → chunk-VIHQLW4L.js}

@@ -883,6 +883,8 @@ function machineConfig(limits2, paths) {
     "i8042.nomux",
     "i8042.nopnp",
     "i8042.dumbkbd",
+    // The pinned guest kernel builds pressure stall information default-disabled; the guest usage record reads it.
+    "psi=1",
     "ro",
     "root=/dev/vda",
     "rootfstype=ext4",

package/dist/{chunk-WRU3K5AN.js → chunk-YKYCE4HY.js}

@@ -4,6 +4,6 @@ import { createRequire } from 'node:module';
 createRequire(import.meta.url);
 
 // src/runner/protocol.ts
-var RUNNER_PROTOCOL = 26;
+var RUNNER_PROTOCOL = 27;
 
 export { RUNNER_PROTOCOL };

package/dist/{cli-FSPRS432.js → cli-DLUADCTG.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { gatherDoctorChecks, doctorExitCode, summarizeChecks, renderDoctorText, recordWrapped, recordUnwrapped, recordRemoval, readManifest, recordInstall, recordStatusline } from './chunk-GNRCLFX7.js';
+import { gatherDoctorChecks, doctorExitCode, summarizeChecks, renderDoctorText, recordWrapped, recordUnwrapped, recordRemoval, readManifest, recordInstall, recordStatusline } from './chunk-7F2VPHP7.js';
 import './chunk-BCWVTWS7.js';
 import './chunk-4XPAQXJF.js';
 import './chunk-KT4CN6OU.js';
@@ -3926,13 +3926,13 @@ what CLIs older than ${FIRST_VERSION_READING_AGENTS_SKILLS} do. \`` + cliInvocat
         if (changed.length > 0 && !opts.json) process.stdout.write(`Removed the claude function from ${changed.join(", ")}.
 `);
       }
-      const shell = !opts.remove && opts.shellFunction !== void 0 ? (await import('./init-cmd-TQL7Q2NZ.js')).applyShellFunctionFlag(opts.shellFunction, { home: homeFromEnv(), shellPath: process.env.SHELL }) : void 0;
+      const shell = !opts.remove && opts.shellFunction !== void 0 ? (await import('./init-cmd-ALBPEG7I.js')).applyShellFunctionFlag(opts.shellFunction, { home: homeFromEnv(), shellPath: process.env.SHELL }) : void 0;
       if (opts.json) writeJson(shell === void 0 ? outcome.result : { ...outcome.result, shellFunction: { outcome: shell.outcome, reason: shell.reason } });
       else process.stdout.write(outcome.text + skillsLine + (shell?.text ?? ""));
       return;
     }
     await installMachineSkillsForSetup();
-    const { runInitCommand } = await import('./init-cmd-TQL7Q2NZ.js');
+    const { runInitCommand } = await import('./init-cmd-ALBPEG7I.js');
     const code = await runInitCommand(
       { json: opts.json, factory: opts.factory, shellFunction: opts.shellFunction },
       {
@@ -4856,7 +4856,7 @@ by a different key is refused; claiming again with the same key extends
 it. --host is a label only.
 `
   ).action(async (opts) => {
-    const { runWorkClaim, WorkCommandError } = await import('./work-claim-cmd-RRRH73HD.js');
+    const { runWorkClaim, WorkCommandError } = await import('./work-claim-cmd-27OJUZ56.js');
     try {
       await runWorkClaim(opts);
     } catch (err) {
@@ -4876,7 +4876,7 @@ Extends the live lease this API key holds. Refused with a 410 if the
 lease has expired, or a 403 if a different key holds it.
 `
   ).action(async (opts) => {
-    const { runWorkRenew, WorkCommandError } = await import('./work-claim-cmd-RRRH73HD.js');
+    const { runWorkRenew, WorkCommandError } = await import('./work-claim-cmd-27OJUZ56.js');
     try {
       await runWorkRenew(opts);
     } catch (err) {
@@ -4908,7 +4908,7 @@ applies to a host's lease only. A later tool call in the session
 takes the lease again.
 `
   ).action(async (opts) => {
-    const { runWorkRelease, WorkCommandError } = await import('./work-claim-cmd-RRRH73HD.js');
+    const { runWorkRelease, WorkCommandError } = await import('./work-claim-cmd-27OJUZ56.js');
     try {
       await runWorkRelease(opts);
     } catch (err) {
@@ -4978,7 +4978,7 @@ function registerRunnerCommands(program2) {
   const configOption = "the cloud config file to run against (default: ~/.outerlayer/config.json)";
   runnerCmd.command("start").description("Run the loop: claim work, run it, report, clean up, repeat").option("--config <path>", configOption).action(async (opts) => {
     const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-3JRFDYZL.js');
-    const { start, RunnerStartError } = await import('./loop-7DALGFAY.js');
+    const { start, RunnerStartError } = await import('./loop-XDJYLT4D.js');
     const { RunnerAlreadyRunningError } = await import('./pidfile-BMFAUQAI.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     try {
@@ -4997,8 +4997,8 @@ function registerRunnerCommands(program2) {
     "\nReads OUTERLAYER_URL, OUTERLAYER_APP_ID, OUTERLAYER_API_KEY, OUTERLAYER_RUNNER_NAME and one Claude credential\n(CLAUDE_CODE_OAUTH_TOKEN or ANTHROPIC_API_KEY) from the environment. OUTERLAYER_AGENT\nis optional and defaults to claude. On a later start it refuses variables that disagree with the config in the volume.\nThe image sets OUTERLAYER_RUNNER_IMAGE; outside the image, use `runner start`.\n"
   ).action(async () => {
     const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-3JRFDYZL.js');
-    const { containerStart } = await import('./container-start-TLDKQ5HP.js');
-    const { start, RunnerStartError } = await import('./loop-7DALGFAY.js');
+    const { containerStart } = await import('./container-start-4RJRBPVB.js');
+    const { start, RunnerStartError } = await import('./loop-XDJYLT4D.js');
     const { RunnerAlreadyRunningError } = await import('./pidfile-BMFAUQAI.js');
     try {
       const result = await containerStart({
@@ -5018,7 +5018,7 @@ function registerRunnerCommands(program2) {
   });
   runnerCmd.command("check").description("Validate the config, the hooks and the key, and print the effective settings").option("--config <path>", configOption).action(async (opts) => {
     const { defaultRunnerConfigPath } = await import('./config-3JRFDYZL.js');
-    const { runRunnerCheck } = await import('./check-RGEPORAK.js');
+    const { runRunnerCheck } = await import('./check-COMHCLXW.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const result = await runRunnerCheck(configPath);
     if (!result.ok) {
@@ -5052,7 +5052,7 @@ function registerRunnerCommands(program2) {
     }
     try {
       if (opts.service === true) {
-        const { installServiceCommand } = await import('./command-ZVRG3GRH.js');
+        const { installServiceCommand } = await import('./command-JRWYFDNM.js');
         const result2 = await installServiceCommand({
           configPath,
           print: opts.print,
@@ -5108,7 +5108,7 @@ To keep it running, run ${C.yellow}${cliInvocation()} runner install --service${
       return;
     }
     const { defaultRunnerConfigPath } = await import('./config-3JRFDYZL.js');
-    const { uninstallServiceCommand } = await import('./command-ZVRG3GRH.js');
+    const { uninstallServiceCommand } = await import('./command-JRWYFDNM.js');
     const result = await uninstallServiceCommand({ configPath: opts.config ?? defaultRunnerConfigPath(), unitName: opts.unitName, home: homeFromEnv() });
     if (result.ok) for (const line of result.lines) process.stdout.write(`${C.green}\u2713${C.reset} ${line}
 `);
@@ -5136,10 +5136,10 @@ already in claude.env is used.
 `
   ).action(async (opts) => {
     const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-3JRFDYZL.js');
-    const { prepareRunnerInit, runRunnerInit, RunnerInitError, writeRunnerInit } = await import('./init-EL6WIQX6.js');
-    const { obtainRunnerKey, runnerKeyLogin } = await import('./runner-key-OO3PYB6C.js');
-    const { detectMachine } = await import('./machine-V5NVLRVX.js');
-    const { chooseVm, runVmInit, VmInitError } = await import('./init-JWHPLUXM.js');
+    const { prepareRunnerInit, runRunnerInit, RunnerInitError, writeRunnerInit } = await import('./init-SYNDV44H.js');
+    const { obtainRunnerKey, runnerKeyLogin } = await import('./runner-key-7QNJNPQ6.js');
+    const { detectMachine } = await import('./machine-GC4MZB5W.js');
+    const { chooseVm, runVmInit, VmInitError } = await import('./init-CSXI3OQH.js');
     const { AGENT_COMMANDS, credentialFromStdin, isAgentName, restartForCredential, RunnerEnvError } = await import('./runner-env-66RAFIDJ.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     if (opts.agent !== void 0 && !isAgentName(opts.agent)) {
@@ -5290,7 +5290,7 @@ ${C.yellow}The runner will not update itself: ${installErr.message}${C.reset}
       let serviceUp = false;
       let restart;
       if (installedLayout) {
-        const { installServiceCommand } = await import('./command-ZVRG3GRH.js');
+        const { installServiceCommand } = await import('./command-JRWYFDNM.js');
         const service = await installServiceCommand({
           configPath,
           entryPath: process.argv[1] ?? "",
@@ -5418,7 +5418,7 @@ Next:
   });
   runnerCmd.command("stop").description("Take no more work; finish running jobs, then exit").option("--config <path>", "the cloud config file naming the runner to stop").option("--now", "end running jobs immediately, with outcome stopped").action(async (opts) => {
     const { defaultRunnerConfigPath } = await import('./config-3JRFDYZL.js');
-    const { requestStop } = await import('./loop-7DALGFAY.js');
+    const { requestStop } = await import('./loop-XDJYLT4D.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const { runnerImageVersion } = await import('./image-tag-NM2YT2J2.js');
     await requestStop(configPath, Boolean(opts.now), void 0, { image: runnerImageVersion() !== void 0 });
@@ -5426,8 +5426,8 @@ Next:
   runnerCmd.command("status").description("List running jobs; with --recent, finished ones too").option("--config <path>", "the cloud config file naming the runner to inspect").option("--recent", "also list finished jobs, newest first, capped at 20").option("--json", "machine-readable JSON output").action(async (opts) => {
     const { defaultRunnerConfigPath, loadRunnerConfig } = await import('./config-3JRFDYZL.js');
     const { jobsDir, runnerDir } = await import('./paths-OK2EZS7W.js');
-    const { listJobFiles, runnerProcessState } = await import('./loop-7DALGFAY.js');
-    const { renderStatus } = await import('./status-OL3KQLBB.js');
+    const { listJobFiles, runnerProcessState } = await import('./loop-XDJYLT4D.js');
+    const { renderStatus } = await import('./status-ZR2N44KU.js');
     const { readHousekeepingRecord } = await import('./record-26AH6WDB.js');
     const path2 = await import('path');
     const configPath = opts.config ?? defaultRunnerConfigPath();
@@ -5487,7 +5487,7 @@ Next:
   });
   runnerCmd.command("logs").argument("<item>", "the work item's number in the factory").description("Print the newest attempt's log for one item").option("--config <path>", "the cloud config file naming the runner to inspect").option("-f, --follow", "keep printing as the log grows").action(async (itemArg, opts) => {
     const { defaultRunnerConfigPath } = await import('./config-3JRFDYZL.js');
-    const { listJobFiles } = await import('./loop-7DALGFAY.js');
+    const { listJobFiles } = await import('./loop-XDJYLT4D.js');
     const { newestAttempt, logPathFor, tail, RunnerLogsError } = await import('./logs-C3RJ3ZTC.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const item = parseTrackerNumber(itemArg);

package/dist/{command-ZVRG3GRH.js → command-JRWYFDNM.js}

@@ -3,8 +3,8 @@ import { createRequire } from 'node:module';
 import { runRunnerInstall, launcherSummary, restartNote } from './chunk-77F7NGAZ.js';
 import './chunk-ZBN4JGTJ.js';
 import { currentLink, execStartCommand } from './chunk-ZZSQYOY5.js';
-import { detectMachine } from './chunk-FRRJ63U2.js';
-import { helperSocketPath, ensureFirecrackerAndJailer } from './chunk-U2JERFV2.js';
+import { detectMachine } from './chunk-5TNEVWFJ.js';
+import { helperSocketPath, ensureFirecrackerAndJailer } from './chunk-VIHQLW4L.js';
 import './chunk-QQGZ5THT.js';
 import './chunk-HIGJTX5U.js';
 import './chunk-SXJVL7NS.js';

package/dist/{container-start-TLDKQ5HP.js → container-start-4RJRBPVB.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { BUILD_MEMORY_VARIABLE } from './chunk-WHSYPR3U.js';
-import { RunnerInitError, prepareRunnerInit, writeRunnerInit } from './chunk-GHHRJWAI.js';
-import { detectMachine, supportsContainerBuilds, describeMachineDocker } from './chunk-FRRJ63U2.js';
-import { MIN_ENGINE_MAJOR } from './chunk-U2JERFV2.js';
+import { RunnerInitError, prepareRunnerInit, writeRunnerInit } from './chunk-JH2AMJ4K.js';
+import { detectMachine, supportsContainerBuilds, describeMachineDocker } from './chunk-5TNEVWFJ.js';
+import { MIN_ENGINE_MAJOR } from './chunk-VIHQLW4L.js';
 import './chunk-QQGZ5THT.js';
 import './chunk-HIGJTX5U.js';
 import './chunk-SXJVL7NS.js';

package/dist/{doctor-5YQWPRTW.js → doctor-A3A4X2HJ.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { needsClaudeCredential, claudeCredentialCheck, managedProblems, missingPermissionOf, missingPermissionFix } from './chunk-HIS7MJ6O.js';
+import { needsClaudeCredential, claudeCredentialCheck, managedProblems, missingPermissionOf, missingPermissionFix } from './chunk-FKNOPMUD.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
 import { launcherCheck } from './chunk-ZBN4JGTJ.js';
 import './chunk-ZZSQYOY5.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import './chunk-GHHRJWAI.js';
-import { detectMachine, supportsContainerBuilds, describeMachineDocker, reachDockerStep, supportsMicroVmBuilds, microVmArchSupported, microVmAssetsPinned } from './chunk-FRRJ63U2.js';
-import { MIN_ENGINE_MAJOR, helperFirecrackerNote, probeHelper, helperSocketPath } from './chunk-U2JERFV2.js';
+import './chunk-JH2AMJ4K.js';
+import { detectMachine, supportsContainerBuilds, describeMachineDocker, reachDockerStep, supportsMicroVmBuilds, microVmArchSupported, microVmAssetsPinned } from './chunk-5TNEVWFJ.js';
+import { MIN_ENGINE_MAJOR, helperFirecrackerNote, probeHelper, helperSocketPath } from './chunk-VIHQLW4L.js';
 import './chunk-QQGZ5THT.js';
 import './chunk-HIGJTX5U.js';
 import './chunk-SXJVL7NS.js';

package/dist/index.js

@@ -26,5 +26,5 @@ if (argv[0] === "claude") {
   process.exit(await runClaudeLauncher(argv.slice(1)));
 }
 (await import('./hook-fast-UFHR6EKZ.js')).recordLinkExitFailure(argv);
-var { runCli } = await import('./cli-FSPRS432.js');
+var { runCli } = await import('./cli-DLUADCTG.js');
 await runCli(process.argv);

package/dist/{init-JWHPLUXM.js → init-CSXI3OQH.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { npmSupportsProvenance } from './chunk-E7R2GIAW.js';
-import { RunnerInitError, readConfigObject } from './chunk-GHHRJWAI.js';
-import './chunk-FRRJ63U2.js';
-import './chunk-U2JERFV2.js';
+import { RunnerInitError, readConfigObject } from './chunk-JH2AMJ4K.js';
+import './chunk-5TNEVWFJ.js';
+import './chunk-VIHQLW4L.js';
 import './chunk-QQGZ5THT.js';
 import './chunk-HIGJTX5U.js';
 import './chunk-SXJVL7NS.js';

package/dist/{init-EL6WIQX6.js → init-SYNDV44H.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { PLACEHOLDER_MARKER, RunnerInitError, isPlaceholderCommand, prepareRunnerInit, readConfigObject, runRunnerInit, writeRunnerInit } from './chunk-GHHRJWAI.js';
-import './chunk-FRRJ63U2.js';
-import './chunk-U2JERFV2.js';
+export { PLACEHOLDER_MARKER, RunnerInitError, isPlaceholderCommand, prepareRunnerInit, readConfigObject, runRunnerInit, writeRunnerInit } from './chunk-JH2AMJ4K.js';
+import './chunk-5TNEVWFJ.js';
+import './chunk-VIHQLW4L.js';
 import './chunk-QQGZ5THT.js';
 import './chunk-HIGJTX5U.js';
 import './chunk-SXJVL7NS.js';

package/dist/{init-cmd-TQL7Q2NZ.js → init-cmd-ALBPEG7I.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { summarizeChecks, summaryText, renderDoctorText } from './chunk-GNRCLFX7.js';
+import { summarizeChecks, summaryText, renderDoctorText } from './chunk-7F2VPHP7.js';
 import './chunk-BCWVTWS7.js';
 import { shellFunctionInstalled, removeShellFunction, installShellFunction, SHELL_FUNCTION_LINE } from './chunk-CJJDJ7AT.js';
 import './chunk-4XPAQXJF.js';

package/dist/{loop-7DALGFAY.js → loop-XDJYLT4D.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { RunnerStartError, leaseTimeLeftFor, listJobFiles, logUnusableHelper, probeBuild, probeCredentials, requestStop, runnerProcessState, runtimeOf, start, tick, watchTick } from './chunk-TV7LE7TM.js';
-import './chunk-VCPEUBXM.js';
+export { RunnerStartError, leaseTimeLeftFor, listJobFiles, logUnusableHelper, probeBuild, probeCredentials, requestStop, runnerProcessState, runtimeOf, sampleUsage, start, tick, watchTick } from './chunk-3PYMMGYO.js';
+import './chunk-CVGMB4N7.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-WHSYPR3U.js';
 import './chunk-E7R2GIAW.js';
-import './chunk-WRU3K5AN.js';
+import './chunk-YKYCE4HY.js';
 import './chunk-TZQIEUDE.js';
 import './chunk-ZVB57WI6.js';
 import './chunk-X7UUIHGH.js';
@@ -16,13 +16,13 @@ import './chunk-KCB6V5XH.js';
 import './chunk-XKZPL3GE.js';
 import './chunk-ESVW4MJY.js';
 import './chunk-XTNMIV77.js';
-import './chunk-HIS7MJ6O.js';
+import './chunk-FKNOPMUD.js';
 import './chunk-YYYRBYWG.js';
 import './chunk-ZZSQYOY5.js';
 import './chunk-TBT347UY.js';
-import './chunk-GHHRJWAI.js';
-import './chunk-FRRJ63U2.js';
-import './chunk-U2JERFV2.js';
+import './chunk-JH2AMJ4K.js';
+import './chunk-5TNEVWFJ.js';
+import './chunk-VIHQLW4L.js';
 import './chunk-QQGZ5THT.js';
 import './chunk-HIGJTX5U.js';
 import './chunk-SXJVL7NS.js';

package/dist/{machine-V5NVLRVX.js → machine-GC4MZB5W.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { describeMachineDocker, detectMachine, microVmArchSupported, microVmAssetsPinned, reachDockerStep, supportsContainerBuilds, supportsMicroVmBuilds } from './chunk-FRRJ63U2.js';
-import './chunk-U2JERFV2.js';
+export { describeMachineDocker, detectMachine, microVmArchSupported, microVmAssetsPinned, reachDockerStep, supportsContainerBuilds, supportsMicroVmBuilds } from './chunk-5TNEVWFJ.js';
+import './chunk-VIHQLW4L.js';
 import './chunk-QQGZ5THT.js';
 import './chunk-HIGJTX5U.js';
 import './chunk-SXJVL7NS.js';

package/dist/{runner-key-OO3PYB6C.js → runner-key-7QNJNPQ6.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { readConfigObject, RunnerInitError } from './chunk-GHHRJWAI.js';
-import './chunk-FRRJ63U2.js';
-import './chunk-U2JERFV2.js';
+import { readConfigObject, RunnerInitError } from './chunk-JH2AMJ4K.js';
+import './chunk-5TNEVWFJ.js';
+import './chunk-VIHQLW4L.js';
 import './chunk-QQGZ5THT.js';
 import './chunk-HIGJTX5U.js';
 import './chunk-SXJVL7NS.js';

package/dist/{status-OL3KQLBB.js → status-ZR2N44KU.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isReadable, ALREADY_RELEASED, RENEW_INTERVAL_SECONDS } from './chunk-VCPEUBXM.js';
+import { isReadable, ALREADY_RELEASED, RENEW_INTERVAL_SECONDS } from './chunk-CVGMB4N7.js';
 import { jobStateFormatOf } from './chunk-ZVB57WI6.js';
 import './chunk-RJYKTWUP.js';
 import './chunk-I3LTIAOR.js';
@@ -11,7 +11,7 @@ import './chunk-ESVW4MJY.js';
 import './chunk-XTNMIV77.js';
 import { formatBytes } from './chunk-YYYRBYWG.js';
 import './chunk-TBT347UY.js';
-import { LEASE_SECONDS } from './chunk-U2JERFV2.js';
+import { LEASE_SECONDS } from './chunk-VIHQLW4L.js';
 import './chunk-QQGZ5THT.js';
 import './chunk-HIGJTX5U.js';
 import { formatDuration, formatClock, relativeToRunner } from './chunk-SXJVL7NS.js';

package/dist/{work-claim-cmd-RRRH73HD.js → work-claim-cmd-27OJUZ56.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RUNNER_PROTOCOL } from './chunk-WRU3K5AN.js';
+import { RUNNER_PROTOCOL } from './chunk-YKYCE4HY.js';
 import { defaultRunnerConfigPath } from './chunk-P7BEZAEU.js';
 import './chunk-UXYLWVTQ.js';
 import './chunk-YJLHUKYS.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@outerlayer/cli",
-  "version": "0.32.0-next.20261020204004",
+  "version": "0.32.0",
   "description": "OuterLayer CLI — commands: init, claude, connect, doctor, login, logout, sync, daemon (alias: watch), emit, findings, work, spec, runner, hooks, mcp, context. Capture and sync coding-agent sessions, and record proof of factory work.",
   "license": "Apache-2.0",
   "author": "Magu Studios, Inc.",