@outerlayer/cli 0.32.0 → 0.33.0-next.20261021171323

package/README.md

@@ -215,7 +215,9 @@ content:
   host. Docker pulls base images, features and Claude Code's npm package
   from registries while the image builds, with the host's own `docker
   login`. The tools layer also downloads the pinned `gh` and `tini` releases
-  from GitHub, checking each against a digest. The image build runs outside
+  from GitHub, a pinned static `ffmpeg` build from GitHub, and the narration
+  voice pack from Hugging Face and the npm registry, checking each against a
+  digest. The image build runs outside
   any work item and sends nothing to your factory. `outerlayer runner start`
   builds each build's image the same way, before the build starts. That image
   build uses the host's network: the build's tunnel does not carry it, and
@@ -364,6 +366,17 @@ content:
   content, not to files you emit. With no recorded
   session to attach it to, it uploads immediately, anchored to a pull request
   or to the git checkout.
+- **`outerlayer emit demo <manifest>`** cuts a recorded video into one clip
+  for each chapter of its manifest and emits each clip as an artifact, as
+  `emit artifact` does, followed by the manifest as the demo record. Before
+  that it reads the item's recorded criteria
+  (`GET /v1/work-items/{number}`) to check the chapters' criterion ids. It
+  runs `ffmpeg` and `espeak-ng` on your machine as separate programs and speaks
+  the narration there. Nothing is sent to a speech service. The first narrated
+  run downloads the voice pack, about 400 MB, from huggingface.co and
+  registry.npmjs.org into `~/.outerlayer/voice/`. It checks each file against a
+  pinned sha256 and sends nothing to either host. `--no-narration` downloads
+  nothing.
 - **`outerlayer emit <name>`** sends one check's outcome for a work item.
   Run from inside a session, it sends only when that session carries a
   launch record — the session's own content may not leave by a second
@@ -456,6 +469,7 @@ before it gives up.
 | `outerlayer context emit [--check]` | Compile `.outerlayer/` into each configured target tool's native files (targets come from `.outerlayer/config.json`). `--check` computes outputs and diffs against disk without writing (CI mode). Bare `outerlayer emit` with no name still compiles, with a deprecation warning. |
 | `outerlayer hooks wrap` / `outerlayer hooks unwrap` | Auto-wrap (or undo wrapping) `PreToolUse`/`PostToolUse` hooks for execution evidence — one spawn per firing. |
 | `outerlayer emit artifact <file> --caption <text> [--for <criterion-id>] [--pr <n>]` | Upload a proof artifact — screenshot, recording, report, or log — with its caption. Inside a recorded session it spools locally and ships on the next `sync`; otherwise it uploads immediately, anchored to a pull request or the current checkout. `--replaces` retires artifacts an earlier run uploaded. A JUnit XML file bound with `--for` proves a criterion that declares `test` proof; `--test <name[=path:line]>` binds only the named tests. |
+| `outerlayer emit demo <manifest> [--no-narration] [--item <n>] [--pr <n>]` | Turn a recorded video and its manifest (written by `@outerlayer/playwright`) into a narrated demo: one WebM clip for each chapter, emitted as a video artifact. A chapter whose checks all passed is bound to its criterion. The manifest is emitted as the demo record. Needs `ffmpeg` and `ffprobe`, and `espeak-ng` unless `--no-narration`. Exit 1 means a chapter had a failed check. |
 | `outerlayer emit <name> --result <pass\|fail> [--link <url>] [--body <text>\|--body-file <path>] --item <number>` | Record one named check's outcome on a work item. A check that ran carries the run URL as its proof (`--link`); a judgment you are making yourself carries one sentence (`--body`, or `--body-file` to read it from a file — `-` reads standard input). A `fail` needs at least one of the two; a `pass` needs neither. `--item` names the work item by the number printed when the item was created — always required, in or out of a recorded session; a session records checks on its own item like any other, stored as the session's, but cannot clear a person's fail. Prints the recorded check's id. Who recorded it comes from your API key, never from what you send. |
 | `outerlayer work comment --item <n> [--criterion <id>] --body <text> [--artifact <id>] [--pass\|--fail\|--attach\|--ready]` | Post one comment on a work item's general thread, or on one acceptance criterion's own thread with `--criterion`. `--pass`/`--fail` need a person's own credential and apply to the whole item, so they work on the general thread only and the gateway refuses them with `--criterion`; `--attach` makes the named artifact that criterion's current proof; `--ready` hands a thread back to a person. The detected session id rides along automatically, only ever narrowing what the comment may do. |
 | `outerlayer work stop --item <n> [--note <text>]` | Ask the host that holds the item's build to end it. The host reads the request at its next heartbeat and ends the build with outcome `stopped`, so the build may run a little longer. The item is not built again until a new build request. Needs `work.update`. Exits 1 when no host build is running for the item. |

package/dist/{agent-setup-E7CMDUR5.js → agent-setup-NSUX64RU.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { keepHandWritten, runAgentSetup } from './chunk-XAV6XCI2.js';
-import './chunk-XB7TRWI2.js';
+export { keepHandWritten, runAgentSetup } from './chunk-OX7CHZTJ.js';
+import './chunk-GI6LOIHS.js';
 import './chunk-KT4CN6OU.js';
-import './chunk-XTKH5VAC.js';
-import './chunk-QDDPVBIS.js';
+import './chunk-QCDVKCHA.js';
+import './chunk-ZAJKEHIE.js';
 import './chunk-ANPNT6PM.js';
-import './chunk-NIS2PIS4.js';
-import './chunk-V6IYYQU3.js';
+import './chunk-D73OLAYE.js';
+import './chunk-FE3RTGJN.js';
 import './chunk-F3EF56LQ.js';
 import './chunk-PJDQPF5N.js';
 import './chunk-APSYTJ6I.js';
@@ -15,16 +15,16 @@ import './chunk-KP6R7CV3.js';
 import './chunk-HDSDUTX4.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-BJ3KTMDH.js';
-import './chunk-AKKVPUGK.js';
+import './chunk-YW4PEGLN.js';
 import './chunk-5BHIBJDA.js';
 import './chunk-CDDED64E.js';
 import './chunk-RA3O54FC.js';
 import './chunk-CRB3POP4.js';
-import './chunk-HJUGOAM7.js';
+import './chunk-WXEPMPHK.js';
 import './chunk-YQR6E6OV.js';
 import './chunk-TUSYOL2O.js';
-import './chunk-ZUOPFE22.js';
-import './chunk-IWFYKNAO.js';
+import './chunk-JUXATN46.js';
+import './chunk-3WW2TL7V.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-XD4ZCMA4.js';
 import './chunk-MESOOLF4.js';

package/dist/{artifact-link-cmd-VY6OM7S5.js → artifact-link-cmd-IGVFGHC2.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { sanitizeTerminal, readEffectiveArtifactSpoolState } from './chunk-HSUUTD4E.js';
+import { sanitizeTerminal, readEffectiveArtifactSpoolState } from './chunk-3H7NZPYG.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import './chunk-IWFYKNAO.js';
+import './chunk-3WW2TL7V.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{build-7QD3VJ6U.js → build-HU24C46Z.js}

@@ -1,9 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { buildRepositoryImage } from './chunk-Z7HAIZ6X.js';
+export { buildRepositoryImage } from './chunk-BSHUTMXV.js';
 import './chunk-T5TBGOT6.js';
 import './chunk-JBJTC3UU.js';
-export { RecipeError } from './chunk-SJZL5F3F.js';
+export { RecipeError } from './chunk-3Z3MPR55.js';
+import './chunk-LK2S5XZH.js';
 import './chunk-KP6R7CV3.js';
 import './chunk-HDSDUTX4.js';
 import './chunk-XD4ZCMA4.js';

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-21T10:25:56.495Z+814b9ca","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-21T17:15:21.001Z+04c1646","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-REQJGZJP.js → builder-VFREWHZA.js}

@@ -1,13 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-2JPVI45I.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-ZZWWKBLL.js';
 import './chunk-YJLHUKYS.js';
-import './chunk-SJZL5F3F.js';
-import './chunk-V36AOTBP.js';
+import './chunk-3Z3MPR55.js';
+import './chunk-LK2S5XZH.js';
+import './chunk-GKNF4D62.js';
 import './chunk-APSYTJ6I.js';
 import './chunk-KP6R7CV3.js';
 import './chunk-HDSDUTX4.js';
-import './chunk-IWFYKNAO.js';
+import './chunk-3WW2TL7V.js';
 import './chunk-XD4ZCMA4.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';

package/dist/{check-COMHCLXW.js → check-3TQJDGKM.js}

@@ -1,68 +1,69 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-3PYMMGYO.js';
-import './chunk-CVGMB4N7.js';
+import { probeCredentials } from './chunk-LAS3DOTW.js';
+import './chunk-TI5Y242B.js';
+import './chunk-X7UUIHGH.js';
 import './chunk-3JVYMD4G.js';
-import './chunk-WHSYPR3U.js';
 import './chunk-E7R2GIAW.js';
+import './chunk-WHSYPR3U.js';
 import './chunk-YKYCE4HY.js';
 import './chunk-TZQIEUDE.js';
 import './chunk-ZVB57WI6.js';
-import './chunk-X7UUIHGH.js';
 import './chunk-RJYKTWUP.js';
 import './chunk-I3LTIAOR.js';
-import './chunk-JFLVUA43.js';
-import './chunk-KCB6V5XH.js';
-import './chunk-XKZPL3GE.js';
+import './chunk-AR6UB2BP.js';
+import './chunk-VXYPD33W.js';
+import './chunk-7LP3F2QH.js';
 import './chunk-ESVW4MJY.js';
 import './chunk-XTNMIV77.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, managedProblems, managedFactsOf, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-FKNOPMUD.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, managedProblems, managedFactsOf, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-KQON2T4A.js';
 import './chunk-YYYRBYWG.js';
 import './chunk-ZZSQYOY5.js';
 import './chunk-TBT347UY.js';
-import './chunk-JH2AMJ4K.js';
-import './chunk-5TNEVWFJ.js';
-import { probeHelper, HELPER_ENV, helperSocketPath } from './chunk-VIHQLW4L.js';
+import './chunk-CI6PRMWZ.js';
+import './chunk-LQFDTQC2.js';
+import { probeHelper, HELPER_ENV, helperSocketPath } from './chunk-G7QBSH3X.js';
 import './chunk-QQGZ5THT.js';
 import './chunk-HIGJTX5U.js';
-import './chunk-SXJVL7NS.js';
+import './chunk-BXA6JLHQ.js';
 import './chunk-IWYS4ERC.js';
 import './chunk-TQMI335S.js';
 import './chunk-NJS7JJYN.js';
 import { DEFAULT_UNIT_NAME } from './chunk-RQGHHEM7.js';
 import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-P7BEZAEU.js';
 import './chunk-UXYLWVTQ.js';
-import './chunk-Z7HAIZ6X.js';
+import './chunk-BSHUTMXV.js';
 import './chunk-T5TBGOT6.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-2JPVI45I.js';
+import './chunk-ZZWWKBLL.js';
 import './chunk-YJLHUKYS.js';
-import './chunk-SJZL5F3F.js';
-import './chunk-U4HMGT3L.js';
-import './chunk-3DSC2FN3.js';
-import './chunk-IGIGNYZK.js';
-import './chunk-HSUUTD4E.js';
-import './chunk-V36AOTBP.js';
-import './chunk-QDDPVBIS.js';
-import './chunk-G2RRBBOX.js';
+import './chunk-3Z3MPR55.js';
+import './chunk-LK2S5XZH.js';
+import './chunk-SOTJ2V3A.js';
+import './chunk-JKXTG3BV.js';
+import './chunk-HPOW2VCB.js';
+import './chunk-3H7NZPYG.js';
+import './chunk-GKNF4D62.js';
+import './chunk-ZAJKEHIE.js';
+import './chunk-6C3ZVE62.js';
 import './chunk-G2JWZDFA.js';
 import './chunk-ANPNT6PM.js';
-import './chunk-NIS2PIS4.js';
-import './chunk-V6IYYQU3.js';
+import './chunk-D73OLAYE.js';
+import './chunk-FE3RTGJN.js';
 import './chunk-F3EF56LQ.js';
 import './chunk-PJDQPF5N.js';
 import './chunk-APSYTJ6I.js';
 import './chunk-KP6R7CV3.js';
 import { claudeEnvPath } from './chunk-HDSDUTX4.js';
-import './chunk-WRW6QCI6.js';
+import './chunk-NHXJU7CM.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-2O5KA67H.js';
 import './chunk-BKO6JEZI.js';
 import './chunk-FGF52V4V.js';
 import './chunk-HCVLP7XA.js';
 import './chunk-BJ3KTMDH.js';
-import './chunk-AKKVPUGK.js';
+import './chunk-YW4PEGLN.js';
 import './chunk-5BHIBJDA.js';
 import './chunk-CDDED64E.js';
 import './chunk-RA3O54FC.js';
@@ -72,8 +73,8 @@ import './chunk-CRB3POP4.js';
 import './chunk-URIZRCRY.js';
 import './chunk-YQR6E6OV.js';
 import './chunk-TUSYOL2O.js';
-import './chunk-ZUOPFE22.js';
-import './chunk-IWFYKNAO.js';
+import './chunk-JUXATN46.js';
+import './chunk-3WW2TL7V.js';
 import './chunk-VNVZDWO3.js';
 import { parseRunnerEnv } from './chunk-XD4ZCMA4.js';
 import './chunk-MESOOLF4.js';

package/dist/{chunk-HSUUTD4E.js → chunk-3H7NZPYG.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { ArtifactTombstoneRecordSchema, ArtifactSpoolRecordSchema } from './chunk-IWFYKNAO.js';
+import { ArtifactTombstoneRecordSchema, ArtifactSpoolRecordSchema } from './chunk-3WW2TL7V.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { mkdirSync, appendFileSync, writeFileSync, renameSync, unlinkSync, existsSync, readdirSync, readFileSync, statSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-IWFYKNAO.js → chunk-3WW2TL7V.js}

@@ -22365,7 +22365,7 @@ function itemsAllowResult(result, items) {
   return result === "fail" || !(items != null ? items : []).some((item) => item.result === "fail");
 }
 var EMITTED_RESULTS = ["pass", "fail"];
-var RESERVED_EMIT_NAMES = ["artifact", "criteria", "finding", "findings", "step"];
+var RESERVED_EMIT_NAMES = ["artifact", "criteria", "demo", "finding", "findings", "step"];
 var EmittedNameSchema = external_exports.string().regex(/^[a-z][a-z0-9._-]{0,63}$/).superRefine((name, ctx) => {
   if (RESERVED_EMIT_NAMES.includes(name)) {
     ctx.addIssue({
@@ -22635,6 +22635,49 @@ var CliLoginRefusalSchema = external_exports.object({
   error: external_exports.string(),
   message: external_exports.string().optional()
 });
+var DEMO_RECORD_MEDIA_TYPE = "application/vnd.outerlayer.demo+json";
+var ARTIFACT_MAX_BYTES = 8 * 1024 * 1024;
+var DEMO_CHAPTERS_MAX = 200;
+var DEMO_CHECKS_MAX = 100;
+var DEMO_TITLE_MAX = 200;
+var DEMO_NARRATION_MAX = 2e3;
+var DEMO_CHECK_TEXT_MAX = 500;
+var DemoCheckSchema = external_exports.strictObject({
+  text: external_exports.string().min(1).max(DEMO_CHECK_TEXT_MAX),
+  passed: external_exports.boolean()
+});
+var chapterFields = {
+  /** The criterion the chapter shows, or `null` for an opening scene. */
+  criterionId: ArtifactCriterionIdSchema.nullable(),
+  /** Seconds from the start of the video. */
+  start: external_exports.number().finite().min(0),
+  end: external_exports.number().finite().positive(),
+  title: external_exports.string().min(1).max(DEMO_TITLE_MAX),
+  /** The line spoken over the chapter. Empty for a chapter with no speech. */
+  narration: external_exports.string().max(DEMO_NARRATION_MAX),
+  checks: external_exports.array(DemoCheckSchema).max(DEMO_CHECKS_MAX)
+};
+var DemoChapterSchema = external_exports.strictObject(chapterFields).refine((chapter) => chapter.end > chapter.start, {
+  message: "a chapter must end after it starts",
+  path: ["end"]
+});
+var DemoManifestSchema = external_exports.strictObject({
+  schemaVersion: external_exports.literal(1),
+  /** The recorded video, as a path relative to the manifest's folder. */
+  video: external_exports.string().min(1).max(500),
+  chapters: external_exports.array(DemoChapterSchema).min(1).max(DEMO_CHAPTERS_MAX)
+});
+var DemoRecordChapterSchema = external_exports.strictObject({
+  ...chapterFields,
+  /** The `clientArtifactId` of the chapter's clip. */
+  clipArtifactId: external_exports.string().min(1).max(64),
+  /** True when the clip was bound to the chapter's criterion: every check passed. */
+  bound: external_exports.boolean()
+});
+external_exports.strictObject({
+  schemaVersion: external_exports.literal(1),
+  chapters: external_exports.array(DemoRecordChapterSchema).min(1).max(DEMO_CHAPTERS_MAX)
+});
 /*! Bundled license information:
 
 xmlchars/xml/1.0/ed5.js:
@@ -22665,4 +22708,4 @@ xmlchars/xmlns/1.0/ed3.js:
    *)
 */
 
-export { ARTIFACT_KINDS, ARTIFACT_MAX_CAPTION_LENGTH, ARTIFACT_MAX_FILENAME_LENGTH, ARTIFACT_MAX_REPLACES_TARGETS, ArtifactCriterionIdSchema, ArtifactSpoolRecordSchema, ArtifactTombstoneRecordSchema, BUCKET_MODEL_MAX_LENGTH, CAPTURE_TIERS, CHECK_ITEM_REASON_MAX_LENGTH, CLI_LOGIN_KIND, CLI_LOGIN_MACHINE_NAME_MAX, CheckItemsSchema, CliLoginPollResponseSchema, CliLoginRefusalSchema, CliLoginStartedSchema, CriteriaListSchema, EMITTED_RESULTS, EMITTED_RESULT_MAX_BODY_LENGTH, EMITTED_RESULT_MAX_LINK_LENGTH, EVENT_TYPES, EmittedNameSchema, FindingBatchSchema, FindingsResponseSchema, INPUT_BAND_BOUNDARIES, RESERVED_EMIT_NAMES, SAME_PROBLEM_RULES, SCHEMA_VERSION, SPEED_MAX_LENGTH, StepBodySchema, StepNameSchema, bannedPathsForTier, bindTests, downconvertSession, inferArtifactKind, inputBandOf, isHumanUserTurn, itemsAllowResult, mediaTypeForArtifactPath, parseAgentSession, parseJunit, parseTestSelector, turnCountBound };
+export { ARTIFACT_KINDS, ARTIFACT_MAX_BYTES, ARTIFACT_MAX_CAPTION_LENGTH, ARTIFACT_MAX_FILENAME_LENGTH, ARTIFACT_MAX_REPLACES_TARGETS, ArtifactCriterionIdSchema, ArtifactSpoolRecordSchema, ArtifactTombstoneRecordSchema, BUCKET_MODEL_MAX_LENGTH, CAPTURE_TIERS, CHECK_ITEM_REASON_MAX_LENGTH, CLI_LOGIN_KIND, CLI_LOGIN_MACHINE_NAME_MAX, CheckItemsSchema, CliLoginPollResponseSchema, CliLoginRefusalSchema, CliLoginStartedSchema, CriteriaListSchema, DEMO_RECORD_MEDIA_TYPE, DemoManifestSchema, EMITTED_RESULTS, EMITTED_RESULT_MAX_BODY_LENGTH, EMITTED_RESULT_MAX_LINK_LENGTH, EVENT_TYPES, EmittedNameSchema, FindingBatchSchema, FindingsResponseSchema, INPUT_BAND_BOUNDARIES, RESERVED_EMIT_NAMES, SAME_PROBLEM_RULES, SCHEMA_VERSION, SPEED_MAX_LENGTH, StepBodySchema, StepNameSchema, bannedPathsForTier, bindTests, downconvertSession, inferArtifactKind, inputBandOf, isHumanUserTurn, itemsAllowResult, mediaTypeForArtifactPath, parseAgentSession, parseJunit, parseTestSelector, turnCountBound };

package/dist/{chunk-SJZL5F3F.js → chunk-3Z3MPR55.js}

@@ -223,54 +223,4 @@ function writeSanitizedRecipe(checkoutDir, location, recipe) {
 }
 var SANITIZED_NAME = "outerlayer-recipe.json";
 
-// src/runner/image/pins.ts
-var CLAUDE_CODE_VERSION = "2.1.284";
-var DEFAULT_BASE_IMAGE = "ubuntu:24.04@sha256:008173c23f95b170204355c12626cb5a965d779a7e1283b09e9cffbb1bf33ca3";
-var NODE_IMAGE = "node:22-bookworm-slim@sha256:43ac6c60b8f89723f746e8a92ce91abd5017e627ce1ddfe4238355d3a30b772c";
-var BUILDKIT_IMAGE = "moby/buildkit:v0.33.1@sha256:cec9f139f45e93c5c69c60f8b07cfad9f43f4ef6b6a6cd917527fea5ff2e3dea";
-var GH_VERSION = "2.101.0";
-var GH_SHA256 = {
-  amd64: "9bca2d1c16825f109907a23307628a2f0698fbf99662b73a5cf0b020293072b8",
-  arm64: "b57e8063f18862647c9d22727c32e9da1b963f8bf9db648fe123a6975695640f"
-};
-var TINI_VERSION = "0.19.0";
-var TINI_SHA256 = {
-  amd64: "c5b0666b4cb676901f90dfcb37106783c5fe2077b04590973b885950611b30ee",
-  arm64: "eae1d3aa50c48fb23b8cbdf4e369d0910dfc538566bfd09df89a774aa84a48b9"
-};
-var MICROVM_ARCHES = ["x86_64"];
-function firecrackerArch(nodeArch) {
-  return nodeArch === "x64" ? "x86_64" : nodeArch === "arm64" ? "aarch64" : nodeArch;
-}
-var FIRECRACKER_VERSION = "1.17.0";
-var FIRECRACKER_SHA256 = {
-  x86_64: "06094a1108ae9e82aa4c23a775aa92758f53f1175d422270d9d6162cb9ade558"
-};
-var FIRECRACKER_BINARY_SHA256 = {
-  x86_64: "99ad0f5cd0514a88aad0e9ae8cfdb3cc3b4ab9d190e1194602406c786b5de7a5"
-};
-var GUEST_ASSETS_VERSION = "7";
-var GUEST_ASSETS_BASE_URL = `https://github.com/outerlayerai/guest-assets/releases/download/guest-${GUEST_ASSETS_VERSION}`;
-var GUEST_KERNEL_SHA256 = {
-  x86_64: "8552fad4bdea1d49f3e7d2aa500ce3f8918fcd2fc66779fd83235949688a39bb"
-};
-var GUEST_HELPER_SHA256 = {
-  x86_64: "0ae934d3ad3f2a94abffcc3f044ba633b1a523dc17ff0c2bc322ed7d7fc505ea"
-};
-function guestAssetsPinned(arch) {
-  const zero = "0".repeat(64);
-  return GUEST_KERNEL_SHA256[arch] !== zero && GUEST_HELPER_SHA256[arch] !== zero;
-}
-var JAILER_BINARY_SHA256 = {
-  x86_64: "65ef226e96f0ceda55ba643f445801ef2cc0ea667ef67cad8ac4f406c9c8434f"
-};
-var HOST_HELPER_ASSETS_VERSION = "10";
-var HOST_HELPER_BASE_URL = `https://github.com/outerlayerai/guest-assets/releases/download/guest-${HOST_HELPER_ASSETS_VERSION}`;
-var HOST_HELPER_SHA256 = {
-  x86_64: "caa06b7206cceae6d8fc569781b269817ca66cb2ccfe177740fda042ed46bfcc"
-};
-function hostHelperPinned(arch = "x86_64", hashes = HOST_HELPER_SHA256) {
-  return hashes[arch] !== "0".repeat(64);
-}
-
-export { BUILDKIT_IMAGE, CLAUDE_CODE_VERSION, DEFAULT_BASE_IMAGE, DOCKER_FEATURE, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, FIRECRACKER_VERSION, GH_SHA256, GH_VERSION, GUEST_ASSETS_BASE_URL, GUEST_ASSETS_VERSION, GUEST_HELPER_SHA256, GUEST_KERNEL_SHA256, HOST_HELPER_ASSETS_VERSION, HOST_HELPER_BASE_URL, HOST_HELPER_SHA256, JAILER_BINARY_SHA256, MICROVM_ARCHES, NODE_IMAGE, RecipeError, SANITIZED_NAME, TINI_SHA256, TINI_VERSION, assertBuildable, classifyProperties, firecrackerArch, guestAssetsPinned, hostHelperPinned, locateRecipe, readRecipe, writeSanitizedRecipe };
+export { DOCKER_FEATURE, RecipeError, SANITIZED_NAME, assertBuildable, classifyProperties, locateRecipe, readRecipe, writeSanitizedRecipe };

package/dist/{chunk-4I3ZDQFU.js → chunk-54GBOMDW.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { autoConnect, detectActiveSession } from './chunk-3DSC2FN3.js';
-import { resolveRepoIdentity } from './chunk-V36AOTBP.js';
+import { autoConnect, detectActiveSession } from './chunk-JKXTG3BV.js';
+import { resolveRepoIdentity } from './chunk-GKNF4D62.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { defaultFetch, unauthorizedMessage, resolveGatewayCredentials } from './chunk-F3EF56LQ.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';

package/dist/{chunk-G2RRBBOX.js → chunk-6C3ZVE62.js}

@@ -5,7 +5,7 @@ import { C } from './chunk-ANPNT6PM.js';
 import { readCloudConfigStrict, CloudConfigError, readCloudConfig, writeCloudConfig, cloudConfigPath } from './chunk-PJDQPF5N.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import { CLI_LOGIN_MACHINE_NAME_MAX, CliLoginPollResponseSchema, CLI_LOGIN_KIND, CliLoginRefusalSchema, CliLoginStartedSchema } from './chunk-IWFYKNAO.js';
+import { CLI_LOGIN_MACHINE_NAME_MAX, CliLoginPollResponseSchema, CLI_LOGIN_KIND, CliLoginRefusalSchema, CliLoginStartedSchema } from './chunk-3WW2TL7V.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { generateKeyPairSync, privateDecrypt, constants, createPrivateKey } from 'crypto';
 import { spawn } from 'child_process';

package/dist/{chunk-XKZPL3GE.js → chunk-7LP3F2QH.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
-import { autoConnect, detectActiveSession } from './chunk-3DSC2FN3.js';
-import { acquireSpoolLockAt } from './chunk-HSUUTD4E.js';
-import { resolveRepoIdentity } from './chunk-V36AOTBP.js';
+import { autoConnect, detectActiveSession } from './chunk-JKXTG3BV.js';
+import { acquireSpoolLockAt } from './chunk-3H7NZPYG.js';
+import { resolveRepoIdentity } from './chunk-GKNF4D62.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-F3EF56LQ.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
-import { StepNameSchema, StepBodySchema } from './chunk-IWFYKNAO.js';
+import { StepNameSchema, StepBodySchema } from './chunk-3WW2TL7V.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { randomUUID } from 'crypto';
 import { readFileSync, existsSync, mkdirSync, writeFileSync, renameSync, appendFileSync } from 'fs';

package/dist/{chunk-JFLVUA43.js → chunk-AR6UB2BP.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LiveUploader } from './chunk-KCB6V5XH.js';
-import { CaptureDaemon } from './chunk-V36AOTBP.js';
-import { spoolDir } from './chunk-WRW6QCI6.js';
+import { LiveUploader } from './chunk-VXYPD33W.js';
+import { CaptureDaemon } from './chunk-GKNF4D62.js';
+import { spoolDir } from './chunk-NHXJU7CM.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { mkdirSync, writeFileSync, rmSync } from 'fs';

package/dist/{chunk-Z7HAIZ6X.js → chunk-BSHUTMXV.js}

@@ -2,7 +2,8 @@
 import { createRequire } from 'node:module';
 import { claimPidFile, RunnerAlreadyRunningError, releasePidFile } from './chunk-T5TBGOT6.js';
 import { startTimeOf } from './chunk-JBJTC3UU.js';
-import { CLAUDE_CODE_VERSION, NODE_IMAGE, DEFAULT_BASE_IMAGE, RecipeError, locateRecipe, readRecipe, assertBuildable, TINI_VERSION, GH_VERSION, writeSanitizedRecipe, classifyProperties, GH_SHA256, TINI_SHA256, SANITIZED_NAME } from './chunk-SJZL5F3F.js';
+import { RecipeError, locateRecipe, readRecipe, assertBuildable, writeSanitizedRecipe, classifyProperties, SANITIZED_NAME } from './chunk-3Z3MPR55.js';
+import { CLAUDE_CODE_VERSION, NODE_IMAGE, DEFAULT_BASE_IMAGE, MEDIA_PINS, TINI_VERSION, GH_VERSION, VOICE_PACK_FILES, VOICE_PACK_VERSION, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, TINI_SHA256 } from './chunk-LK2S5XZH.js';
 import { RUNNER_DIR_MODE, repoCacheDir, imagesDir, attemptStamp, runnerDir, rootfsPathFor, RUNNER_FILE_MODE } from './chunk-KP6R7CV3.js';
 import { withGitConfig, tokenHeader, PROXY_WARNING_FLAG } from './chunk-HDSDUTX4.js';
 import { RELAY_ID, RELAY_USER } from './chunk-MESOOLF4.js';
@@ -150,12 +151,16 @@ function plain(name, value, allowed) {
   if (!allowed.test(value)) throw new Error(`${name} holds a character a Dockerfile line cannot carry safely: ${JSON.stringify(value)}`);
   return value;
 }
+var DEFAULT_PACKAGES = ["git", "ca-certificates", "curl", "build-essential", "python3", "python3-pip", "python3-venv", "unzip", "jq"];
 function defaultDockerfile(baseImage, nodeImage) {
+  return ubuntuWithNode(baseImage, nodeImage, DEFAULT_PACKAGES);
+}
+function ubuntuWithNode(baseImage, nodeImage, packages) {
   return [
     `FROM ${baseImage}`,
     "ENV DEBIAN_FRONTEND=noninteractive",
     "RUN apt-get update \\",
-    " && apt-get install -y --no-install-recommends git ca-certificates curl \\",
+    ` && apt-get install -y --no-install-recommends ${packages.join(" ")} \\`,
     " && rm -rf /var/lib/apt/lists/*",
     `COPY --from=${nodeImage} /usr/local/bin/node /usr/local/bin/node`,
     `COPY --from=${nodeImage} /usr/local/lib/node_modules /usr/local/lib/node_modules`,
@@ -177,7 +182,40 @@ function toolsDockerfile(parts) {
     )
   });
   const download = `NODE_USE_ENV_PROXY=1 node ${PROXY_WARNING_FLAG} -e 'fetch(process.argv[1]).then((r)=>{if(!r.ok)throw new Error(process.argv[1]+" "+r.status);return r.arrayBuffer()}).then((b)=>require("fs").writeFileSync(process.argv[2],Buffer.from(b)))'`;
+  const stream = `NODE_USE_ENV_PROXY=1 node ${PROXY_WARNING_FLAG} -e 'const{pipeline}=require("stream/promises"),{Readable}=require("stream"),fs=require("fs");fetch(process.argv[1]).then((r)=>{if(!r.ok)throw new Error(process.argv[1]+" "+r.status);return pipeline(Readable.fromWeb(r.body),fs.createWriteStream(process.argv[2]))})'`;
+  const voiceDir = `/out/opt/outerlayer/voice/${VOICE_PACK_VERSION}`;
+  const checks = VOICE_PACK_FILES.map((file) => `echo "${file.sha256}  ${voiceDir}/${file.name}" | sha256sum -c -`);
   return [
+    // The voice pack streams to disk, one pinned file at a time, because a 300 MB model must not sit in a build's memory. Its own stage keeps it cached when the CLI changes.
+    `FROM ${nodeImage} AS voice`,
+    `RUN mkdir -p ${voiceDir} \\`,
+    ...VOICE_PACK_FILES.map((file) => ` && ${stream} ${file.url} ${voiceDir}/${file.name} \\`),
+    ...checks.map((check) => ` && ${check} \\`),
+    " && chmod -R a+rX /out",
+    // ffmpeg and ffprobe are static LGPL builds. espeak-ng comes from the stage image's own package, with the libraries and loader it needs, and runs as a separate program.
+    `FROM ${nodeImage} AS media`,
+    "ARG TARGETARCH",
+    "RUN apt-get update \\",
+    " && apt-get install -y --no-install-recommends ca-certificates espeak-ng xz-utils \\",
+    " && rm -rf /var/lib/apt/lists/*",
+    "RUN set -eu \\",
+    ` && case "$TARGETARCH" in \\`,
+    `      amd64) ffmpeg_file=${FFMPEG_STATIC.amd64.file}; ffmpeg_sha=${FFMPEG_STATIC.amd64.sha256} ;; \\`,
+    `      arm64) ffmpeg_file=${FFMPEG_STATIC.arm64.file}; ffmpeg_sha=${FFMPEG_STATIC.arm64.sha256} ;; \\`,
+    `      *) echo "no pinned ffmpeg for $TARGETARCH" >&2; exit 1 ;; \\`,
+    "    esac \\",
+    ` && ${download} https://github.com/BtbN/FFmpeg-Builds/releases/download/${FFMPEG_BUILD_TAG}/$ffmpeg_file /tmp/ffmpeg.tar.xz \\`,
+    ' && echo "$ffmpeg_sha  /tmp/ffmpeg.tar.xz" | sha256sum -c - \\',
+    " && tar -xJf /tmp/ffmpeg.tar.xz -C /tmp \\",
+    " && mkdir -p /out/usr/local/bin /out/opt/outerlayer/media/lib \\",
+    " && install -m 0755 /tmp/ffmpeg-*/bin/ffmpeg /tmp/ffmpeg-*/bin/ffprobe /out/usr/local/bin/ \\",
+    " && install -m 0755 /usr/bin/espeak-ng /out/opt/outerlayer/media/espeak-ng \\",
+    ` && for lib in $(ldd /usr/bin/espeak-ng | awk '$3 ~ /^\\// {print $3}'); do cp -L "$lib" /out/opt/outerlayer/media/lib/; done \\`,
+    " && cp -L $(ldd /usr/bin/espeak-ng | awk '$1 ~ /ld-linux/ {print $1}') /out/opt/outerlayer/media/lib/ld.so \\",
+    " && cp -r /usr/lib/*/espeak-ng-data /out/opt/outerlayer/media/espeak-ng-data \\",
+    ` && printf '%s\\n' '#!/bin/sh' 'ESPEAK_DATA_PATH=/opt/outerlayer/media' 'export ESPEAK_DATA_PATH' 'exec /opt/outerlayer/media/lib/ld.so --library-path /opt/outerlayer/media/lib /opt/outerlayer/media/espeak-ng "$@"' > /out/usr/local/bin/espeak-ng \\`,
+    " && chmod 0755 /out/usr/local/bin/espeak-ng \\",
+    " && chmod -R a+rX /out",
     `FROM ${recipeImage} AS recipe`,
     `FROM ${nodeImage} AS stage`,
     "ARG TARGETARCH",
@@ -231,8 +269,15 @@ function toolsDockerfile(parts) {
     " && chmod -R a+rX /out",
     `FROM ${recipeImage}`,
     "COPY --from=stage /out/ /",
+    "COPY --from=voice /out/ /",
+    "COPY --from=media /out/ /",
     "ENV DISABLE_AUTOUPDATER=1",
-    "RUN outerlayer --version && claude --version && gh --version",
+    // espeak-ng's audio library makes a private pulse-* folder for the user who runs it, in the temp folder unless XDG_RUNTIME_DIR names another.
+    // Made here, as root, it would ship in the image where the build user cannot read it, and the runner's disk check fails on it.
+    "RUN check=$(mktemp -d /tmp/ol-check.XXXXXX) \\",
+    " && outerlayer --version && claude --version && gh --version && ffmpeg -version && ffprobe -version \\",
+    ' && XDG_RUNTIME_DIR="$check" espeak-ng --version \\',
+    ' && rm -rf "$check"',
     ""
   ].join("\n");
 }
@@ -269,7 +314,11 @@ function recipeKey(checkoutDir, location, defaultDockerfile2) {
 }
 function toolsKey(parts) {
   const base = [parts.buildId, "\0", parts.claudeCodeVersion, "\0", parts.nodeImage, "\0", parts.ghVersion, "\0", parts.tiniVersion];
-  return sha256(...base, ...parts.guestHelperSha256 === void 0 ? [] : ["\0guest-helper\0", parts.guestHelperSha256]);
+  return sha256(
+    ...base,
+    ...parts.guestHelperSha256 === void 0 ? [] : ["\0guest-helper\0", parts.guestHelperSha256],
+    ...parts.mediaPins === void 0 ? [] : ["\0media\0", parts.mediaPins]
+  );
 }
 
 // src/runner/image/prune.ts
@@ -370,7 +419,7 @@ async function buildRepositoryImage(opts, ports) {
     assertBuildable(checkout.dir, location, recipe);
     const defaultText = defaultDockerfile(baseImage, nodeImage);
     const rKey = recipeKey(checkout.dir, location, defaultText);
-    const tKey = toolsKey({ buildId: opts.cli.buildId, claudeCodeVersion, nodeImage, ghVersion: GH_VERSION, tiniVersion: TINI_VERSION, guestHelperSha256: opts.guestHelper?.sha256 });
+    const tKey = toolsKey({ buildId: opts.cli.buildId, claudeCodeVersion, nodeImage, ghVersion: GH_VERSION, tiniVersion: TINI_VERSION, guestHelperSha256: opts.guestHelper?.sha256, mediaPins: MEDIA_PINS });
     const recordDir = join(repoRecords, `${rKey.slice(0, KEY_PREFIX)}-${tKey.slice(0, KEY_PREFIX)}`);
     const buildTag = `${TAG_HOST}/build/${repository}:${rKey.slice(0, KEY_PREFIX)}-${tKey.slice(0, KEY_PREFIX)}`;
     const recipeTag = `${TAG_HOST}/recipe/${repository}:${rKey.slice(0, KEY_PREFIX)}`;

package/dist/{chunk-SXJVL7NS.js → chunk-BXA6JLHQ.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { WorkCommandError, postJson } from './chunk-U4HMGT3L.js';
-import { defaultGitRunner, materializeContext, isStagingWriteFault, lookupGoverningSource } from './chunk-NIS2PIS4.js';
+import { WorkCommandError, postJson } from './chunk-SOTJ2V3A.js';
+import { defaultGitRunner, materializeContext, isStagingWriteFault, lookupGoverningSource } from './chunk-D73OLAYE.js';
 import { signingFetchFor } from './chunk-F3EF56LQ.js';
 import { signerFor } from './chunk-APSYTJ6I.js';
 import { SHIM_DIR, stagedContextDir, contextHomeDir, deliveryDir, keptContextDir } from './chunk-KP6R7CV3.js';

package/dist/{chunk-JH2AMJ4K.js → chunk-CI6PRMWZ.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-5TNEVWFJ.js';
-import { MIN_ENGINE_MAJOR } from './chunk-VIHQLW4L.js';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-LQFDTQC2.js';
+import { MIN_ENGINE_MAJOR } from './chunk-G7QBSH3X.js';
 import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-NJS7JJYN.js';
 import { runnerCredentialProblem } from './chunk-P7BEZAEU.js';
 import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-KP6R7CV3.js';

package/dist/{chunk-NIS2PIS4.js → chunk-D73OLAYE.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { removeRetiredSkills } from './chunk-V6IYYQU3.js';
+import { removeRetiredSkills } from './chunk-FE3RTGJN.js';
 import { defaultFetch, resolveGatewayCredentials } from './chunk-F3EF56LQ.js';
 import { withTokenHeader } from './chunk-HDSDUTX4.js';
 import { appendContextProvenance } from './chunk-ZJSNLVCE.js';
-import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-AKKVPUGK.js';
+import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-YW4PEGLN.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { writeDegraded, writeSourceCache, SOURCE_CACHE_TTL_RETRY_MS, writeContextManifest, SOURCE_CACHE_TTL_SUCCESS_MS, readSourceCache, isSourceCacheFresh, clearDegraded } from './chunk-YQR6E6OV.js';
-import { normalizeRepoName, parseOuterlayerConfig, classifyTree, emitTree } from './chunk-ZUOPFE22.js';
+import { normalizeRepoName, parseOuterlayerConfig, classifyTree, emitTree } from './chunk-JUXATN46.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { execFileSync } from 'child_process';
 import { existsSync, mkdirSync, writeFileSync, chmodSync, lstatSync, readFileSync, copyFileSync } from 'fs';