@outerlayer/cli 0.32.0 → 0.33.0-next.20261021171625

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (93) hide show
  1. package/README.md +15 -1
  2. package/dist/{agent-setup-E7CMDUR5.js → agent-setup-NSUX64RU.js} +10 -10
  3. package/dist/{artifact-link-cmd-VY6OM7S5.js → artifact-link-cmd-IGVFGHC2.js} +2 -2
  4. package/dist/{build-7QD3VJ6U.js → build-HU24C46Z.js} +3 -2
  5. package/dist/build-info.json +1 -1
  6. package/dist/{builder-REQJGZJP.js → builder-QECLC243.js} +5 -4
  7. package/dist/{check-COMHCLXW.js → check-4BL6XRWJ.js} +29 -28
  8. package/dist/{chunk-JH2AMJ4K.js → chunk-2FPEB36J.js} +2 -2
  9. package/dist/{chunk-HSUUTD4E.js → chunk-3H7NZPYG.js} +1 -1
  10. package/dist/{chunk-JFLVUA43.js → chunk-3RS3RNGH.js} +3 -3
  11. package/dist/{chunk-IWFYKNAO.js → chunk-3WW2TL7V.js} +45 -2
  12. package/dist/{chunk-SJZL5F3F.js → chunk-3Z3MPR55.js} +1 -51
  13. package/dist/{chunk-ZWBRHH3L.js → chunk-4LU7MFJO.js} +3 -3
  14. package/dist/{chunk-2JPVI45I.js → chunk-5T2VOSIL.js} +3 -2
  15. package/dist/{chunk-G2RRBBOX.js → chunk-6C3ZVE62.js} +1 -1
  16. package/dist/{chunk-Z7HAIZ6X.js → chunk-BSHUTMXV.js} +54 -5
  17. package/dist/{chunk-NIS2PIS4.js → chunk-D73OLAYE.js} +3 -3
  18. package/dist/{chunk-V6IYYQU3.js → chunk-FE3RTGJN.js} +2 -2
  19. package/dist/{chunk-XB7TRWI2.js → chunk-GI6LOIHS.js} +4 -4
  20. package/dist/{chunk-5TNEVWFJ.js → chunk-GXKWPOK6.js} +2 -2
  21. package/dist/{chunk-4XPAQXJF.js → chunk-H6Y5D6J7.js} +6 -6
  22. package/dist/{chunk-XKZPL3GE.js → chunk-INCKTGMM.js} +4 -4
  23. package/dist/{chunk-7F2VPHP7.js → chunk-JJ4W5LVF.js} +9 -9
  24. package/dist/{chunk-ZUOPFE22.js → chunk-JUXATN46.js} +1 -1
  25. package/dist/{chunk-BCWVTWS7.js → chunk-KURUM765.js} +4 -4
  26. package/dist/{chunk-IGIGNYZK.js → chunk-LESWVXRE.js} +4 -4
  27. package/dist/chunk-LK2S5XZH.js +99 -0
  28. package/dist/{emit-artifact-cmd-NCK3VCDM.js → chunk-LRBOBYQI.js} +8 -36
  29. package/dist/{chunk-VIHQLW4L.js → chunk-MV52FCSG.js} +9 -8
  30. package/dist/{chunk-WRW6QCI6.js → chunk-NHXJU7CM.js} +2 -2
  31. package/dist/{chunk-4I3ZDQFU.js → chunk-OF4TFWKR.js} +2 -2
  32. package/dist/{chunk-XAV6XCI2.js → chunk-OX7CHZTJ.js} +7 -7
  33. package/dist/{chunk-XTKH5VAC.js → chunk-QCDVKCHA.js} +2 -2
  34. package/dist/{chunk-SXJVL7NS.js → chunk-QNVIGO5X.js} +2 -2
  35. package/dist/{chunk-FKNOPMUD.js → chunk-RHBFNZ7J.js} +4 -4
  36. package/dist/{chunk-3PYMMGYO.js → chunk-UJIG5BU7.js} +10 -10
  37. package/dist/{chunk-HJUGOAM7.js → chunk-WXEPMPHK.js} +1 -1
  38. package/dist/{chunk-3DSC2FN3.js → chunk-X2Y3B4JH.js} +2 -2
  39. package/dist/{chunk-U4HMGT3L.js → chunk-X7ML37UF.js} +5 -5
  40. package/dist/{chunk-KCB6V5XH.js → chunk-XFS2TMOB.js} +5 -5
  41. package/dist/{chunk-UAFMC3PL.js → chunk-XRQ7DABQ.js} +1 -1
  42. package/dist/{chunk-V36AOTBP.js → chunk-XT5SOJRC.js} +379 -45
  43. package/dist/{chunk-CVGMB4N7.js → chunk-YGXKXL4Q.js} +13 -13
  44. package/dist/{chunk-AKKVPUGK.js → chunk-YW4PEGLN.js} +1 -1
  45. package/dist/{chunk-QDDPVBIS.js → chunk-ZAJKEHIE.js} +2 -2
  46. package/dist/{claude-launcher-IG7GKYIT.js → claude-launcher-RNMUZZ3Y.js} +5 -5
  47. package/dist/{cli-DLUADCTG.js → cli-PNQX4HRX.js} +144 -89
  48. package/dist/{command-JRWYFDNM.js → command-LA7T5YFX.js} +19 -18
  49. package/dist/{connect-cmd-K73AOVUR.js → connect-cmd-2AXEPDT2.js} +8 -8
  50. package/dist/{container-start-4RJRBPVB.js → container-start-4LIRN2LX.js} +20 -19
  51. package/dist/{context-cleanup-D5EGQHQV.js → context-cleanup-VSDT77BZ.js} +3 -3
  52. package/dist/{control-plane-launch-JCUNTTC3.js → control-plane-launch-DHMD5WBU.js} +6 -6
  53. package/dist/{dist-BE3LYGNH.js → dist-DY2ZNEBS.js} +2 -2
  54. package/dist/{docker-CVRCHNYC.js → docker-EOP32YLH.js} +5 -4
  55. package/dist/{doctor-A3A4X2HJ.js → doctor-FDXHHPDJ.js} +21 -20
  56. package/dist/emit-artifact-cmd-JY5V6WQI.js +43 -0
  57. package/dist/{emit-cmd-PSD7AAKJ.js → emit-cmd-T7NIBSF3.js} +6 -6
  58. package/dist/{emit-criteria-cmd-GTCZWV4B.js → emit-criteria-cmd-XRFBNFN7.js} +9 -9
  59. package/dist/emit-demo-cmd-JOVCVXIS.js +888 -0
  60. package/dist/{emit-finding-cmd-OUG72OQA.js → emit-finding-cmd-5RHKQHE6.js} +10 -10
  61. package/dist/{emit-result-cmd-YQ5DZMMR.js → emit-result-cmd-65KJQ2UM.js} +12 -12
  62. package/dist/{emit-step-cmd-QJXSHSQF.js → emit-step-cmd-YZIN6B6P.js} +10 -10
  63. package/dist/{findings-cmd-DYDEHJFI.js → findings-cmd-Z6CKWAG4.js} +10 -10
  64. package/dist/{fleet-readiness-JEQ5ITV6.js → fleet-readiness-7ROJ54ZF.js} +8 -8
  65. package/dist/{governing-source-JSYW4RCL.js → governing-source-NMGGSA6Q.js} +13 -13
  66. package/dist/{hook-fast-UFHR6EKZ.js → hook-fast-WQQYEXO5.js} +1 -1
  67. package/dist/index.js +4 -4
  68. package/dist/{init-SYNDV44H.js → init-OV6IOD2G.js} +20 -19
  69. package/dist/{init-CSXI3OQH.js → init-UBDZRWNE.js} +20 -19
  70. package/dist/{init-cmd-ALBPEG7I.js → init-cmd-YP4TVN2S.js} +18 -18
  71. package/dist/{init-update-PMDRKPA2.js → init-update-24K7ZZWX.js} +17 -17
  72. package/dist/{layout-3ISIED6A.js → layout-OQ7EJUMH.js} +4 -4
  73. package/dist/{login-browser-NTVVDJF7.js → login-browser-KP7YVYTN.js} +2 -2
  74. package/dist/{loop-XDJYLT4D.js → loop-4FEA6E2S.js} +29 -28
  75. package/dist/{machine-GC4MZB5W.js → machine-3BMBF33L.js} +19 -18
  76. package/dist/{machine-skills-I4DB2CP3.js → machine-skills-XWWYFNOZ.js} +4 -4
  77. package/dist/{runner-identity-D3XUB36T.js → runner-identity-HTQNM5AG.js} +5 -4
  78. package/dist/{runner-key-7QNJNPQ6.js → runner-key-7I5FDQKR.js} +20 -19
  79. package/dist/{session-sender-S6KG6VOM.js → session-sender-MKDKMZJD.js} +13 -13
  80. package/dist/{spec-cmd-4RD3A55B.js → spec-cmd-V7W3UV6X.js} +10 -10
  81. package/dist/{starter-pack-2WFNRGFA.js → starter-pack-6O7F6P7C.js} +5 -5
  82. package/dist/{status-ZR2N44KU.js → status-TJDVDR4H.js} +23 -22
  83. package/dist/{sync-cmd-NISS7HJJ.js → sync-cmd-AI4KTJ56.js} +12 -12
  84. package/dist/{watch-VSTJUIRH.js → watch-C7IS6VNS.js} +12 -12
  85. package/dist/{work-claim-cmd-27OJUZ56.js → work-claim-cmd-GFXIZWMU.js} +12 -12
  86. package/dist/{work-cmd-B7YCAK5M.js → work-cmd-UTD4Y7W3.js} +10 -10
  87. package/dist/{work-comment-cmd-2X55NLNL.js → work-comment-cmd-J3SRBK6A.js} +10 -10
  88. package/dist/{work-logs-cmd-2CE5B2DP.js → work-logs-cmd-SH7MQPA3.js} +10 -10
  89. package/dist/{work-open-pr-cmd-Q3HZJPSD.js → work-open-pr-cmd-FIX5QLK7.js} +11 -11
  90. package/dist/{work-pr-cmd-MT246E2A.js → work-pr-cmd-S4IBR7DE.js} +10 -10
  91. package/dist/{work-stop-cmd-CWNLRQKE.js → work-stop-cmd-NECXJEJN.js} +10 -10
  92. package/package.json +1 -1
  93. package/skill-pack/maintained/outerlayer-evidence/SKILL.md +39 -0
@@ -1,16 +1,16 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- import { sanitizeTerminal } from './chunk-HSUUTD4E.js';
4
- import { isAgentsMdLayout } from './chunk-QDDPVBIS.js';
3
+ import { sanitizeTerminal } from './chunk-3H7NZPYG.js';
4
+ import { isAgentsMdLayout } from './chunk-ZAJKEHIE.js';
5
5
  import { resolveGatewayCredentials, defaultFetch } from './chunk-F3EF56LQ.js';
6
6
  import { versionAtLeast } from './chunk-HCVLP7XA.js';
7
7
  import { findGitDirs } from './chunk-BJ3KTMDH.js';
8
- import { machineSkillsState, staleClaudeSkills } from './chunk-UAFMC3PL.js';
9
- import { AGENTS_SKILLS_BASE, skillDir, namesCore, MACHINE_SKILL_PATH, isMaintainedCopy, loadTemplateFiles } from './chunk-AKKVPUGK.js';
8
+ import { machineSkillsState, staleClaudeSkills } from './chunk-XRQ7DABQ.js';
9
+ import { AGENTS_SKILLS_BASE, skillDir, namesCore, MACHINE_SKILL_PATH, isMaintainedCopy, loadTemplateFiles } from './chunk-YW4PEGLN.js';
10
10
  import { MAINTAINED_SKILLS } from './chunk-CDDED64E.js';
11
11
  import { cliInvocation } from './chunk-CRB3POP4.js';
12
- import { hasSymlinkComponent } from './chunk-HJUGOAM7.js';
13
- import { emitTree, ALL_TARGET_IDS, classifyTree, splitRawFile } from './chunk-ZUOPFE22.js';
12
+ import { hasSymlinkComponent } from './chunk-WXEPMPHK.js';
13
+ import { emitTree, ALL_TARGET_IDS, classifyTree, splitRawFile } from './chunk-JUXATN46.js';
14
14
  import { existsSync, readFileSync, writeFileSync, realpathSync, readdirSync } from 'fs';
15
15
  import { join, dirname, posix } from 'path';
16
16
 
@@ -1,14 +1,14 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
3
  import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
4
- import { autoConnect, detectActiveSession } from './chunk-3DSC2FN3.js';
5
- import { acquireSpoolLockAt } from './chunk-HSUUTD4E.js';
6
- import { resolveRepoIdentity } from './chunk-V36AOTBP.js';
4
+ import { autoConnect, detectActiveSession } from './chunk-X2Y3B4JH.js';
5
+ import { acquireSpoolLockAt } from './chunk-3H7NZPYG.js';
6
+ import { resolveRepoIdentity } from './chunk-XT5SOJRC.js';
7
7
  import { C } from './chunk-ANPNT6PM.js';
8
8
  import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-F3EF56LQ.js';
9
9
  import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
10
10
  import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
11
- import { StepNameSchema, StepBodySchema } from './chunk-IWFYKNAO.js';
11
+ import { StepNameSchema, StepBodySchema } from './chunk-3WW2TL7V.js';
12
12
  import { homeFromEnv } from './chunk-VNVZDWO3.js';
13
13
  import { randomUUID } from 'crypto';
14
14
  import { readFileSync, existsSync, mkdirSync, writeFileSync, renameSync, appendFileSync } from 'fs';
@@ -1,15 +1,15 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- import { checkStarterFiles, contextIsGoverned } from './chunk-BCWVTWS7.js';
4
- import { fleetCheck, checkBuildSkill, checkMachineSkills, checkCommittedMaintainedSkills, checkMaintainedReferences } from './chunk-4XPAQXJF.js';
5
- import { resolveCredentials, getJson, WorkCommandError } from './chunk-U4HMGT3L.js';
6
- import { isLinkedRepository } from './chunk-IGIGNYZK.js';
7
- import { sanitizeTerminal } from './chunk-HSUUTD4E.js';
8
- import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-V36AOTBP.js';
3
+ import { checkStarterFiles, contextIsGoverned } from './chunk-KURUM765.js';
4
+ import { fleetCheck, checkBuildSkill, checkMachineSkills, checkCommittedMaintainedSkills, checkMaintainedReferences } from './chunk-H6Y5D6J7.js';
5
+ import { resolveCredentials, getJson, WorkCommandError } from './chunk-X7ML37UF.js';
6
+ import { isLinkedRepository } from './chunk-LESWVXRE.js';
7
+ import { sanitizeTerminal } from './chunk-3H7NZPYG.js';
8
+ import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-XT5SOJRC.js';
9
9
  import { C } from './chunk-ANPNT6PM.js';
10
- import { checkFormerSkillNames } from './chunk-V6IYYQU3.js';
10
+ import { checkFormerSkillNames } from './chunk-FE3RTGJN.js';
11
11
  import { resolveGatewayCredentials, defaultFetch } from './chunk-F3EF56LQ.js';
12
- import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-WRW6QCI6.js';
12
+ import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-NHXJU7CM.js';
13
13
  import { readStatuslineState, STATE_FRESH_MS } from './chunk-I7RZHMXW.js';
14
14
  import { hookCommandEscapesControlPlane, CONTROL_PLANE_DIR_VARIABLE } from './chunk-HCVLP7XA.js';
15
15
  import { findGitDirs } from './chunk-BJ3KTMDH.js';
@@ -1211,7 +1211,7 @@ async function gatherDoctorChecks() {
1211
1211
  const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
1212
1212
  checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
1213
1213
  } else if (hasRunnerBlock(configPath)) {
1214
- const { runnerHostChecks } = await import('./doctor-A3A4X2HJ.js');
1214
+ const { runnerHostChecks } = await import('./doctor-FDXHHPDJ.js');
1215
1215
  const gateway = (() => {
1216
1216
  try {
1217
1217
  const { url, apiKey, appId } = loadRunnerConfig(configPath);
@@ -1,6 +1,6 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- import { RESERVED_EMIT_NAMES, ARTIFACT_KINDS, ArtifactCriterionIdSchema } from './chunk-IWFYKNAO.js';
3
+ import { RESERVED_EMIT_NAMES, ARTIFACT_KINDS, ArtifactCriterionIdSchema } from './chunk-3WW2TL7V.js';
4
4
  import { __commonJS, __require, __toESM } from './chunk-Z5GEFMRW.js';
5
5
 
6
6
  createRequire(import.meta.url);
@@ -1,12 +1,12 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
3
  import { mcpTargetPath, INIT_STDIO_ENTRY, INIT_DOCS_ENTRY, DOCS_MCP_SERVER_NAME } from './chunk-KT4CN6OU.js';
4
- import { POLICY_CONTENT, VALIDATOR_FILES, VALIDATORS_DIR, POLICY_PATH } from './chunk-XTKH5VAC.js';
5
- import { skillsBaseFor } from './chunk-QDDPVBIS.js';
4
+ import { POLICY_CONTENT, VALIDATOR_FILES, VALIDATORS_DIR, POLICY_PATH } from './chunk-QCDVKCHA.js';
5
+ import { skillsBaseFor } from './chunk-ZAJKEHIE.js';
6
6
  import { findGitDirs } from './chunk-BJ3KTMDH.js';
7
- import { resolvePackRoot, OUTERLAYER_SKILLS_BASE, skillDir, loadTemplateFiles, rewriteSkillPaths, restoreSkillPaths, TEMPLATE_SKILLS } from './chunk-AKKVPUGK.js';
7
+ import { resolvePackRoot, OUTERLAYER_SKILLS_BASE, skillDir, loadTemplateFiles, rewriteSkillPaths, restoreSkillPaths, TEMPLATE_SKILLS } from './chunk-YW4PEGLN.js';
8
8
  import { cliInvocation } from './chunk-CRB3POP4.js';
9
- import { hasSymlinkComponent } from './chunk-HJUGOAM7.js';
9
+ import { hasSymlinkComponent } from './chunk-WXEPMPHK.js';
10
10
  import { cloneIsGoverned } from './chunk-YQR6E6OV.js';
11
11
  import { createHash } from 'crypto';
12
12
  import { existsSync, readFileSync } from 'fs';
@@ -1,9 +1,9 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- import { sanitizeTerminal } from './chunk-HSUUTD4E.js';
4
- import { remoteLookupFailed } from './chunk-V36AOTBP.js';
5
- import { isAgentsMdLayout } from './chunk-QDDPVBIS.js';
6
- import { DEFAULT_DASHBOARD } from './chunk-G2RRBBOX.js';
3
+ import { sanitizeTerminal } from './chunk-3H7NZPYG.js';
4
+ import { remoteLookupFailed } from './chunk-XT5SOJRC.js';
5
+ import { isAgentsMdLayout } from './chunk-ZAJKEHIE.js';
6
+ import { DEFAULT_DASHBOARD } from './chunk-6C3ZVE62.js';
7
7
  import { cliFetch, resolveGatewayCredentials } from './chunk-F3EF56LQ.js';
8
8
  import { readCloudConfig } from './chunk-PJDQPF5N.js';
9
9
  import { findGitDirs, writeRepoConnection, readRepoConnection } from './chunk-BJ3KTMDH.js';
@@ -0,0 +1,99 @@
1
+ #!/usr/bin/env node
2
+ import { createRequire } from 'node:module';
3
+
4
+ createRequire(import.meta.url);
5
+
6
+ // src/runner/image/pins.ts
7
+ var CLAUDE_CODE_VERSION = "2.1.284";
8
+ var DEFAULT_BASE_IMAGE = "ubuntu:24.04@sha256:008173c23f95b170204355c12626cb5a965d779a7e1283b09e9cffbb1bf33ca3";
9
+ var NODE_IMAGE = "node:22-bookworm-slim@sha256:43ac6c60b8f89723f746e8a92ce91abd5017e627ce1ddfe4238355d3a30b772c";
10
+ var BUILDKIT_IMAGE = "moby/buildkit:v0.33.1@sha256:cec9f139f45e93c5c69c60f8b07cfad9f43f4ef6b6a6cd917527fea5ff2e3dea";
11
+ var GH_VERSION = "2.101.0";
12
+ var GH_SHA256 = {
13
+ amd64: "9bca2d1c16825f109907a23307628a2f0698fbf99662b73a5cf0b020293072b8",
14
+ arm64: "b57e8063f18862647c9d22727c32e9da1b963f8bf9db648fe123a6975695640f"
15
+ };
16
+ var TINI_VERSION = "0.19.0";
17
+ var TINI_SHA256 = {
18
+ amd64: "c5b0666b4cb676901f90dfcb37106783c5fe2077b04590973b885950611b30ee",
19
+ arm64: "eae1d3aa50c48fb23b8cbdf4e369d0910dfc538566bfd09df89a774aa84a48b9"
20
+ };
21
+ var MICROVM_ARCHES = ["x86_64"];
22
+ function firecrackerArch(nodeArch) {
23
+ return nodeArch === "x64" ? "x86_64" : nodeArch === "arm64" ? "aarch64" : nodeArch;
24
+ }
25
+ var FIRECRACKER_VERSION = "1.17.0";
26
+ var FIRECRACKER_SHA256 = {
27
+ x86_64: "06094a1108ae9e82aa4c23a775aa92758f53f1175d422270d9d6162cb9ade558"
28
+ };
29
+ var FIRECRACKER_BINARY_SHA256 = {
30
+ x86_64: "99ad0f5cd0514a88aad0e9ae8cfdb3cc3b4ab9d190e1194602406c786b5de7a5"
31
+ };
32
+ var GUEST_ASSETS_VERSION = "7";
33
+ var GUEST_ASSETS_BASE_URL = `https://github.com/outerlayerai/guest-assets/releases/download/guest-${GUEST_ASSETS_VERSION}`;
34
+ var GUEST_KERNEL_SHA256 = {
35
+ x86_64: "8552fad4bdea1d49f3e7d2aa500ce3f8918fcd2fc66779fd83235949688a39bb"
36
+ };
37
+ var GUEST_HELPER_SHA256 = {
38
+ x86_64: "0ae934d3ad3f2a94abffcc3f044ba633b1a523dc17ff0c2bc322ed7d7fc505ea"
39
+ };
40
+ function guestAssetsPinned(arch) {
41
+ const zero = "0".repeat(64);
42
+ return GUEST_KERNEL_SHA256[arch] !== zero && GUEST_HELPER_SHA256[arch] !== zero;
43
+ }
44
+ var JAILER_BINARY_SHA256 = {
45
+ x86_64: "65ef226e96f0ceda55ba643f445801ef2cc0ea667ef67cad8ac4f406c9c8434f"
46
+ };
47
+ var HOST_HELPER_ASSETS_VERSION = "10";
48
+ var HOST_HELPER_BASE_URL = `https://github.com/outerlayerai/guest-assets/releases/download/guest-${HOST_HELPER_ASSETS_VERSION}`;
49
+ var HOST_HELPER_SHA256 = {
50
+ x86_64: "caa06b7206cceae6d8fc569781b269817ca66cb2ccfe177740fda042ed46bfcc"
51
+ };
52
+ function hostHelperPinned(arch = "x86_64", hashes = HOST_HELPER_SHA256) {
53
+ return hashes[arch] !== "0".repeat(64);
54
+ }
55
+ var VOICE_PACK_VERSION = "kokoro-82m-v1.0-ort-1.21.0";
56
+ var KOKORO_REVISION = "1939ad2a8e416c0acfeecc08a694d14ef25f2231";
57
+ var KOKORO_BASE_URL = `https://huggingface.co/onnx-community/Kokoro-82M-v1.0-ONNX/resolve/${KOKORO_REVISION}`;
58
+ var ONNX_RUNTIME_VERSION = "1.21.0";
59
+ var VOICE_PACK_FILES = [
60
+ {
61
+ name: "model.onnx",
62
+ url: `${KOKORO_BASE_URL}/onnx/model.onnx`,
63
+ sha256: "8fbea51ea711f2af382e88c833d9e288c6dc82ce5e98421ea61c058ce21a34cb"
64
+ },
65
+ {
66
+ name: "af_heart.bin",
67
+ url: `${KOKORO_BASE_URL}/voices/af_heart.bin`,
68
+ sha256: "d583ccff3cdca2f7fae535cb998ac07e9fcb90f09737b9a41fa2734ec44a8f0b"
69
+ },
70
+ {
71
+ name: "tokenizer.json",
72
+ url: `${KOKORO_BASE_URL}/tokenizer.json`,
73
+ sha256: "77a02c8e164413299b4b4c403b14f8e0e1c1b727db4d46a09d6327b861060a34"
74
+ },
75
+ {
76
+ name: `onnxruntime-node-${ONNX_RUNTIME_VERSION}.tgz`,
77
+ url: `https://registry.npmjs.org/onnxruntime-node/-/onnxruntime-node-${ONNX_RUNTIME_VERSION}.tgz`,
78
+ sha256: "c711a4048a8b460a70de25a5008b1628e3773878ef9deec1dd4a4ccab46de01a"
79
+ },
80
+ {
81
+ name: `onnxruntime-common-${ONNX_RUNTIME_VERSION}.tgz`,
82
+ url: `https://registry.npmjs.org/onnxruntime-common/-/onnxruntime-common-${ONNX_RUNTIME_VERSION}.tgz`,
83
+ sha256: "9c6126102b312514e64703c0922772974ee5c83e89eb345161226bcfeb67a22c"
84
+ }
85
+ ];
86
+ var FFMPEG_BUILD_TAG = "autobuild-2026-09-30-13-08";
87
+ var FFMPEG_STATIC = {
88
+ amd64: {
89
+ file: "ffmpeg-n8.1.3-9-g29e619e767-linux64-lgpl-8.1.tar.xz",
90
+ sha256: "dfa863a00ca81f1bdf58a372b18cff4820f0017e55de32778de8ecd8ed92a02e"
91
+ },
92
+ arm64: {
93
+ file: "ffmpeg-n8.1.3-9-g29e619e767-linuxarm64-lgpl-8.1.tar.xz",
94
+ sha256: "8463881ca7a25015ca6e00f5c91dd2f1637eb73d33c8230413cb74db760a86b3"
95
+ }
96
+ };
97
+ var MEDIA_PINS = `${VOICE_PACK_VERSION}+${FFMPEG_BUILD_TAG}`;
98
+
99
+ export { BUILDKIT_IMAGE, CLAUDE_CODE_VERSION, DEFAULT_BASE_IMAGE, FFMPEG_BUILD_TAG, FFMPEG_STATIC, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, FIRECRACKER_VERSION, GH_SHA256, GH_VERSION, GUEST_ASSETS_BASE_URL, GUEST_ASSETS_VERSION, GUEST_HELPER_SHA256, GUEST_KERNEL_SHA256, HOST_HELPER_ASSETS_VERSION, HOST_HELPER_BASE_URL, HOST_HELPER_SHA256, JAILER_BINARY_SHA256, MEDIA_PINS, MICROVM_ARCHES, NODE_IMAGE, TINI_SHA256, TINI_VERSION, VOICE_PACK_FILES, VOICE_PACK_VERSION, firecrackerArch, guestAssetsPinned, hostHelperPinned };
@@ -1,49 +1,21 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- import { staleBuildRefusal, staleBuildWarning, detectCi } from './chunk-KCB6V5XH.js';
4
- import './chunk-XKZPL3GE.js';
3
+ import { staleBuildRefusal, staleBuildWarning, detectCi } from './chunk-XFS2TMOB.js';
5
4
  import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
6
- import './chunk-TBT347UY.js';
7
- import { detectActiveSession, autoConnect } from './chunk-3DSC2FN3.js';
8
- import './chunk-IGIGNYZK.js';
9
- import { readEffectiveArtifactSpoolState, localArtifactIds, isArtifactTombstoned, artifactBlobsDir, appendArtifactRecord, artifactsSpoolPath, findPendingArtifactRecord, sanitizeTerminal, appendArtifactTombstone } from './chunk-HSUUTD4E.js';
10
- import { resolveRepoIdentity } from './chunk-V36AOTBP.js';
11
- import './chunk-QDDPVBIS.js';
12
- import './chunk-G2RRBBOX.js';
13
- import './chunk-G2JWZDFA.js';
5
+ import { detectActiveSession, autoConnect } from './chunk-X2Y3B4JH.js';
6
+ import { readEffectiveArtifactSpoolState, localArtifactIds, isArtifactTombstoned, artifactBlobsDir, appendArtifactRecord, artifactsSpoolPath, findPendingArtifactRecord, sanitizeTerminal, appendArtifactTombstone } from './chunk-3H7NZPYG.js';
7
+ import { resolveRepoIdentity } from './chunk-XT5SOJRC.js';
14
8
  import { C } from './chunk-ANPNT6PM.js';
15
9
  import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-F3EF56LQ.js';
16
- import './chunk-PJDQPF5N.js';
17
- import './chunk-APSYTJ6I.js';
18
- import './chunk-KP6R7CV3.js';
19
- import './chunk-HDSDUTX4.js';
20
- import './chunk-WRW6QCI6.js';
21
- import './chunk-ZJSNLVCE.js';
22
- import './chunk-2O5KA67H.js';
23
- import './chunk-BKO6JEZI.js';
24
- import './chunk-HCVLP7XA.js';
25
- import './chunk-BJ3KTMDH.js';
26
- import './chunk-AKKVPUGK.js';
27
- import './chunk-5BHIBJDA.js';
28
- import './chunk-CDDED64E.js';
29
- import './chunk-RA3O54FC.js';
30
- import './chunk-T2Q7ISPE.js';
31
10
  import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
32
11
  import { cliInvocation } from './chunk-CRB3POP4.js';
33
- import './chunk-URIZRCRY.js';
34
- import './chunk-TUSYOL2O.js';
35
- import './chunk-ZUOPFE22.js';
36
- import { ARTIFACT_MAX_CAPTION_LENGTH, ArtifactCriterionIdSchema, ARTIFACT_MAX_FILENAME_LENGTH, mediaTypeForArtifactPath, inferArtifactKind, ARTIFACT_MAX_REPLACES_TARGETS, parseTestSelector, parseJunit, bindTests } from './chunk-IWFYKNAO.js';
12
+ import { ARTIFACT_MAX_CAPTION_LENGTH, ArtifactCriterionIdSchema, ARTIFACT_MAX_BYTES, ARTIFACT_MAX_FILENAME_LENGTH, mediaTypeForArtifactPath, inferArtifactKind, ARTIFACT_MAX_REPLACES_TARGETS, parseTestSelector, parseJunit, bindTests } from './chunk-3WW2TL7V.js';
37
13
  import { homeFromEnv } from './chunk-VNVZDWO3.js';
38
- import './chunk-XD4ZCMA4.js';
39
- import './chunk-MESOOLF4.js';
40
- import './chunk-Z5GEFMRW.js';
41
14
  import { createHash, randomUUID } from 'crypto';
42
15
  import { statSync, readFileSync, mkdirSync, existsSync, writeFileSync, renameSync, unlinkSync } from 'fs';
43
16
  import { resolve, basename, join } from 'path';
44
17
 
45
18
  createRequire(import.meta.url);
46
- var ARTIFACT_MAX_BYTES = 8 * 1024 * 1024;
47
19
  var EmitArtifactError = class extends Error {
48
20
  };
49
21
  var ARTIFACT_ID_PATTERN = /^[A-Za-z0-9_.:-]{1,64}$/;
@@ -242,7 +214,7 @@ async function runEmitArtifact(opts) {
242
214
  }
243
215
  }
244
216
  }
245
- const mediaType = mediaTypeForArtifactPath(filePath);
217
+ const mediaType = opts.mediaType ?? mediaTypeForArtifactPath(filePath);
246
218
  const kind = inferArtifactKind(mediaType);
247
219
  const tests = checkTestResults({
248
220
  file: opts.file,
@@ -276,7 +248,7 @@ async function runEmitArtifact(opts) {
276
248
  }
277
249
  const record = {
278
250
  rec: "artifact",
279
- artifactId: randomUUID(),
251
+ artifactId: opts.artifactId ?? randomUUID(),
280
252
  t: now().toISOString(),
281
253
  sessionId,
282
254
  cwd,
@@ -335,7 +307,7 @@ async function runEmitArtifact(opts) {
335
307
  const resolved = resolveGatewayCredentials({ ...opts, home, env });
336
308
  if (!resolved.ok) throw new EmitArtifactError(resolved.message);
337
309
  const { url, credential: apiKey, appId } = resolved;
338
- const clientArtifactId = randomUUID();
310
+ const clientArtifactId = opts.artifactId ?? randomUUID();
339
311
  const commitSha = prHeadShaFromCiEnv(env) ?? identity.commitSha;
340
312
  const singleTarget = replacesTargets !== void 0 && replacesTargets.length === 1 ? replacesTargets[0] : void 0;
341
313
  const targetPendingLocally = singleTarget !== void 0 && findPendingArtifactRecord(singleTarget, home) !== void 0;
@@ -2,23 +2,24 @@
2
2
  import { createRequire } from 'node:module';
3
3
  import { execCapture } from './chunk-QQGZ5THT.js';
4
4
  import { GUEST_CID } from './chunk-HIGJTX5U.js';
5
- import { keepStagedContext, describeCallFailure, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript, WORKFLOW_PERMISSION_REASON } from './chunk-SXJVL7NS.js';
5
+ import { keepStagedContext, describeCallFailure, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript, WORKFLOW_PERMISSION_REASON } from './chunk-QNVIGO5X.js';
6
6
  import { runnerImageVersion } from './chunk-IWYS4ERC.js';
7
7
  import { hostAllowed } from './chunk-UXYLWVTQ.js';
8
- import { readDefaultBranchHead, cloneRepository, buildRepositoryImage } from './chunk-Z7HAIZ6X.js';
8
+ import { readDefaultBranchHead, cloneRepository, buildRepositoryImage } from './chunk-BSHUTMXV.js';
9
9
  import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
10
10
  import { currentCliBuild } from './chunk-OGFGZQA3.js';
11
- import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun } from './chunk-2JPVI45I.js';
11
+ import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun } from './chunk-5T2VOSIL.js';
12
12
  import { readDu } from './chunk-YJLHUKYS.js';
13
- import { FIRECRACKER_VERSION, hostHelperPinned, firecrackerArch, MICROVM_ARCHES, RecipeError, DOCKER_FEATURE, CLAUDE_CODE_VERSION, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, JAILER_BINARY_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, GUEST_ASSETS_VERSION, DEFAULT_BASE_IMAGE } from './chunk-SJZL5F3F.js';
14
- import { WorkCommandError } from './chunk-U4HMGT3L.js';
15
- import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-V36AOTBP.js';
13
+ import { RecipeError, DOCKER_FEATURE } from './chunk-3Z3MPR55.js';
14
+ import { FIRECRACKER_VERSION, hostHelperPinned, firecrackerArch, MICROVM_ARCHES, CLAUDE_CODE_VERSION, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, JAILER_BINARY_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, GUEST_ASSETS_VERSION, DEFAULT_BASE_IMAGE } from './chunk-LK2S5XZH.js';
15
+ import { WorkCommandError } from './chunk-X7ML37UF.js';
16
+ import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-XT5SOJRC.js';
16
17
  import { vmAssetsDir, RUNNER_DIR_MODE, rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, deliveryDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, buildDir, SHIM_DIR } from './chunk-KP6R7CV3.js';
17
18
  import { repositoriesOf, primaryOf, RELAY_PORT, repositoryPath, CHECKOUT_DIR, lifecycleWorkdir, claudeCredential, buildEnvironment, startBuildServices, checkEnvironment, AGENT_CREDENTIAL_MISSING, checkoutPath, JOB_MOUNT } from './chunk-HDSDUTX4.js';
18
19
  import { sharedSkillNames, skillConflictMessage } from './chunk-FGF52V4V.js';
19
20
  import { versionAtLeast, MINIMUM_CLAUDE_VERSION } from './chunk-HCVLP7XA.js';
20
- import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-ZUOPFE22.js';
21
- import { downconvertSession } from './chunk-IWFYKNAO.js';
21
+ import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-JUXATN46.js';
22
+ import { downconvertSession } from './chunk-3WW2TL7V.js';
22
23
  import { realFdStorePort } from './chunk-XD4ZCMA4.js';
23
24
  import { RELAY_USER, RELAY_ID, UNKNOWN_TRANSPORT_REASON, DOCKER_DESKTOP_REASON, MAX_MALFORMED_SESSIONS, MALFORMED_REASON, JOIN_WAIT_MS, MAX_OPEN_STREAMS, STREAM_RESET_RATE, STREAM_RESET_BURST, STREAM_WINDOW, SESSION_WINDOW, targetOfPath } from './chunk-MESOOLF4.js';
24
25
  import { readFileSync, mkdirSync, existsSync, mkdtempSync, rmSync, chmodSync, truncateSync, writeFileSync, readdirSync, lstatSync, copyFileSync, accessSync, constants, statSync, rmdirSync, renameSync, unlinkSync, openSync, closeSync, createWriteStream, createReadStream, writeSync } from 'fs';
@@ -680,11 +680,11 @@ async function missingControlPlane(cwd, sessionId, home, env) {
680
680
  const dirs = findGitDirs(cwd);
681
681
  if (dirs === void 0) return void 0;
682
682
  if (existsSync(join(dirs.gitCommonDir, "outerlayer", "materialized.json")) || hasExcludeBlock(dirs.gitCommonDir)) {
683
- const { cleanupEarlierCopies } = await import('./context-cleanup-D5EGQHQV.js');
683
+ const { cleanupEarlierCopies } = await import('./context-cleanup-VSDT77BZ.js');
684
684
  cleanupEarlierCopies(dirs);
685
685
  }
686
686
  if (!contextPossiblyGoverned(cwd, home)) return void 0;
687
- const { governanceOf } = await import('./control-plane-launch-JCUNTTC3.js');
687
+ const { governanceOf } = await import('./control-plane-launch-DHMD5WBU.js');
688
688
  if (await governanceOf({ cwd, env, home }) !== "governed") return void 0;
689
689
  recordMissingContext(dirs, sessionId, home);
690
690
  const launcher = `${cliInvocation()} claude`;
@@ -1,7 +1,7 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- import { autoConnect, detectActiveSession } from './chunk-3DSC2FN3.js';
4
- import { resolveRepoIdentity } from './chunk-V36AOTBP.js';
3
+ import { autoConnect, detectActiveSession } from './chunk-X2Y3B4JH.js';
4
+ import { resolveRepoIdentity } from './chunk-XT5SOJRC.js';
5
5
  import { C } from './chunk-ANPNT6PM.js';
6
6
  import { defaultFetch, unauthorizedMessage, resolveGatewayCredentials } from './chunk-F3EF56LQ.js';
7
7
  import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';
@@ -1,16 +1,16 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- import { runEmit } from './chunk-XB7TRWI2.js';
3
+ import { runEmit } from './chunk-GI6LOIHS.js';
4
4
  import { addStdioMcpEntryIfAbsent, addDocsMcpEntryIfAbsent, DOCS_MCP_SERVER_NAME } from './chunk-KT4CN6OU.js';
5
- import { installStarterPack } from './chunk-XTKH5VAC.js';
6
- import { AGENTS_MD_LAYOUT, declareAgentsMdLayout, linkClaudeSkills, SKILLS_LINK_PATH, describeSkillsLink, isAgentsMdLayout, holdsTodaysLayoutSources, discoverOuterlayerPaths } from './chunk-QDDPVBIS.js';
5
+ import { installStarterPack } from './chunk-QCDVKCHA.js';
6
+ import { AGENTS_MD_LAYOUT, declareAgentsMdLayout, linkClaudeSkills, SKILLS_LINK_PATH, describeSkillsLink, isAgentsMdLayout, holdsTodaysLayoutSources, discoverOuterlayerPaths } from './chunk-ZAJKEHIE.js';
7
7
  import { C } from './chunk-ANPNT6PM.js';
8
- import { resolveGitCommonDir, defaultGitRunner } from './chunk-NIS2PIS4.js';
9
- import { loadTemplateFiles, loadMaintainedFiles, skillDir, AGENTS_SKILLS_BASE } from './chunk-AKKVPUGK.js';
8
+ import { resolveGitCommonDir, defaultGitRunner } from './chunk-D73OLAYE.js';
9
+ import { loadTemplateFiles, loadMaintainedFiles, skillDir, AGENTS_SKILLS_BASE } from './chunk-YW4PEGLN.js';
10
10
  import { cliInvocation } from './chunk-CRB3POP4.js';
11
- import { linkedAgentsPath } from './chunk-HJUGOAM7.js';
11
+ import { linkedAgentsPath } from './chunk-WXEPMPHK.js';
12
12
  import { cloneIsGoverned } from './chunk-YQR6E6OV.js';
13
- import { generatedHeaderSource } from './chunk-ZUOPFE22.js';
13
+ import { generatedHeaderSource } from './chunk-JUXATN46.js';
14
14
  import { execFileSync } from 'child_process';
15
15
  import { existsSync, mkdirSync, writeFileSync } from 'fs';
16
16
  import { join, dirname } from 'path';
@@ -1,11 +1,11 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
3
  import { C } from './chunk-ANPNT6PM.js';
4
- import { resolvePackRoot, OUTERLAYER_SKILLS_BASE, loadTemplateFiles, AGENTS_SKILLS_BASE, loadMaintainedFiles, rewriteSkillPaths, TEMPLATE_SKILLS, skillDir, writeMaintainedFiles, MACHINE_SKILL_PATH } from './chunk-AKKVPUGK.js';
4
+ import { resolvePackRoot, OUTERLAYER_SKILLS_BASE, loadTemplateFiles, AGENTS_SKILLS_BASE, loadMaintainedFiles, rewriteSkillPaths, TEMPLATE_SKILLS, skillDir, writeMaintainedFiles, MACHINE_SKILL_PATH } from './chunk-YW4PEGLN.js';
5
5
  import { MAINTAINED_SKILLS } from './chunk-CDDED64E.js';
6
6
  import { resolvePackageVersion } from './chunk-RA3O54FC.js';
7
7
  import { cliInvocation } from './chunk-CRB3POP4.js';
8
- import { linkedAgentsPath } from './chunk-HJUGOAM7.js';
8
+ import { linkedAgentsPath } from './chunk-WXEPMPHK.js';
9
9
  import { readFileSync, existsSync, mkdirSync, writeFileSync } from 'fs';
10
10
  import { join, dirname } from 'path';
11
11
 
@@ -1,7 +1,7 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- import { WorkCommandError, postJson } from './chunk-U4HMGT3L.js';
4
- import { defaultGitRunner, materializeContext, isStagingWriteFault, lookupGoverningSource } from './chunk-NIS2PIS4.js';
3
+ import { WorkCommandError, postJson } from './chunk-X7ML37UF.js';
4
+ import { defaultGitRunner, materializeContext, isStagingWriteFault, lookupGoverningSource } from './chunk-D73OLAYE.js';
5
5
  import { signingFetchFor } from './chunk-F3EF56LQ.js';
6
6
  import { signerFor } from './chunk-APSYTJ6I.js';
7
7
  import { SHIM_DIR, stagedContextDir, contextHomeDir, deliveryDir, keptContextDir } from './chunk-KP6R7CV3.js';
@@ -1,11 +1,11 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- import { isPlaceholderCommand } from './chunk-JH2AMJ4K.js';
4
- import { describeCallFailure } from './chunk-SXJVL7NS.js';
3
+ import { isPlaceholderCommand } from './chunk-2FPEB36J.js';
4
+ import { describeCallFailure } from './chunk-QNVIGO5X.js';
5
5
  import { checkFit } from './chunk-RQGHHEM7.js';
6
6
  import { builtinKind } from './chunk-P7BEZAEU.js';
7
- import { WorkCommandError, getJson } from './chunk-U4HMGT3L.js';
8
- import { sanitizeTerminal } from './chunk-HSUUTD4E.js';
7
+ import { WorkCommandError, getJson } from './chunk-X7ML37UF.js';
8
+ import { sanitizeTerminal } from './chunk-3H7NZPYG.js';
9
9
  import { signerFor } from './chunk-APSYTJ6I.js';
10
10
  import { CLAUDE_CREDENTIAL_VARIABLES, claudeCredential, claudeCredentialVariablesSet } from './chunk-HDSDUTX4.js';
11
11
  import { closeSync, openSync, constants } from 'fs';
@@ -1,27 +1,27 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, sampleGuest, foldSample, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, GUEST_USAGE_INTERVAL_MS, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-CVGMB4N7.js';
3
+ import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, sampleGuest, foldSample, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, GUEST_USAGE_INTERVAL_MS, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-YGXKXL4Q.js';
4
+ import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-X7UUIHGH.js';
4
5
  import { decideInstalledSwitch } from './chunk-3JVYMD4G.js';
5
- import { fitImageBuildMemory } from './chunk-WHSYPR3U.js';
6
6
  import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-E7R2GIAW.js';
7
+ import { fitImageBuildMemory } from './chunk-WHSYPR3U.js';
7
8
  import { RUNNER_PROTOCOL } from './chunk-YKYCE4HY.js';
8
9
  import { writePendingUpdate } from './chunk-TZQIEUDE.js';
9
10
  import { JOB_STATE_FORMAT, readsJobState, jobStateFormatOf } from './chunk-ZVB57WI6.js';
10
- import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-X7UUIHGH.js';
11
- import { currentSkillCommand, formerSkillProblem, realBlockedProbes, checkBlocked } from './chunk-FKNOPMUD.js';
11
+ import { currentSkillCommand, formerSkillProblem, realBlockedProbes, checkBlocked } from './chunk-RHBFNZ7J.js';
12
12
  import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
13
13
  import { writeMarker, readMarker, currentVersion, removeMarker, entryIn, versionDir, startedThroughCurrent, switchCurrent, isInLayout, cleanVersions, stagingDir } from './chunk-ZZSQYOY5.js';
14
14
  import { RepoFilter } from './chunk-TBT347UY.js';
15
- import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandExec, setUpRunnerCgroup, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-VIHQLW4L.js';
16
- import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-SXJVL7NS.js';
15
+ import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandExec, setUpRunnerCgroup, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-MV52FCSG.js';
16
+ import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-QNVIGO5X.js';
17
17
  import { tagToPull, pullInstruction, imageTag, writeUpdateStatus } from './chunk-IWYS4ERC.js';
18
18
  import { isVersion, compareVersions, satisfiesRange } from './chunk-TQMI335S.js';
19
19
  import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-P7BEZAEU.js';
20
20
  import { claimPidFile, writePidFile, readPidFile, releasePidFile } from './chunk-T5TBGOT6.js';
21
21
  import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
22
- import { writeJobFile, ensureRunnerIdentity, readJobFile, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, BUILD_LABEL, RUNNER_LABEL, readJobFileChecked } from './chunk-2JPVI45I.js';
22
+ import { writeJobFile, ensureRunnerIdentity, readJobFile, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, BUILD_LABEL, RUNNER_LABEL, readJobFileChecked } from './chunk-5T2VOSIL.js';
23
23
  import { exceedsDisk } from './chunk-YJLHUKYS.js';
24
- import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-U4HMGT3L.js';
24
+ import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-X7ML37UF.js';
25
25
  import { loadHostKey, ensureHostKey, signerFor } from './chunk-APSYTJ6I.js';
26
26
  import { RUNNER_DIR_MODE, runnerDir, buildDir, attemptStamp, jobDir, RUNNER_FILE_MODE, jobsDir, pidFilePath, spoolDir, rootfsDir } from './chunk-KP6R7CV3.js';
27
27
  import { parseClaimIdentity, parseClaimedRepositories, parseUnreachable, repositoriesOf, primaryOf, sharedUserEnvironment, JOB_MOUNT, takeClaudeCredential, heldClaudeCredential, currentClaudeCredential } from './chunk-HDSDUTX4.js';
@@ -1751,7 +1751,7 @@ var CLAIM_REFUSAL_CODES = new Set(
1751
1751
  "pull_request_from_fork pull_request_on_default_branch pull_request_ambiguous pull_request_repository_not_connected repository_not_reachable branch_claimed_elsewhere".split(" ")
1752
1752
  );
1753
1753
  async function tryClaimAndStart(state, item, queue) {
1754
- const { postJson: postJson2 } = await import('./work-cmd-B7YCAK5M.js');
1754
+ const { postJson: postJson2 } = await import('./work-cmd-UTD4Y7W3.js');
1755
1755
  const log = logOf(state);
1756
1756
  const hostKey = await loadHostKey(state.config.configPath);
1757
1757
  const claim = await retrySend(
@@ -2947,7 +2947,7 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
2947
2947
  check: update.check ? () => update.check(configPath) : async () => {
2948
2948
  const held = heldClaudeCredential();
2949
2949
  const env = held === void 0 ? process.env : { ...process.env, [held.variable]: held.value };
2950
- return (await import('./check-COMHCLXW.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
2950
+ return (await import('./check-4BL6XRWJ.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
2951
2951
  },
2952
2952
  now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
2953
2953
  log
@@ -2,7 +2,7 @@
2
2
  import { createRequire } from 'node:module';
3
3
  import { readContextManifest, removeContextManifest } from './chunk-YQR6E6OV.js';
4
4
  import { removePreCommitGuardHook } from './chunk-TUSYOL2O.js';
5
- import { CONTEXT_PIN_FILENAME } from './chunk-ZUOPFE22.js';
5
+ import { CONTEXT_PIN_FILENAME } from './chunk-JUXATN46.js';
6
6
  import { execFileSync } from 'child_process';
7
7
  import { lstatSync, existsSync, unlinkSync, readdirSync, rmdirSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
8
8
  import { join, dirname, isAbsolute } from 'path';
@@ -1,7 +1,7 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-IGIGNYZK.js';
4
- import { resolveRepoIdentity } from './chunk-V36AOTBP.js';
3
+ import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-LESWVXRE.js';
4
+ import { resolveRepoIdentity } from './chunk-XT5SOJRC.js';
5
5
  import { resolveGatewayCredentials } from './chunk-F3EF56LQ.js';
6
6
  import { findGitDirs, readRepoConnection } from './chunk-BJ3KTMDH.js';
7
7
  import { cliInvocation } from './chunk-CRB3POP4.js';
@@ -1,9 +1,9 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- import { detectActiveSession, autoConnect } from './chunk-3DSC2FN3.js';
4
- import { workPageUrl } from './chunk-IGIGNYZK.js';
5
- import { sanitizeTerminal } from './chunk-HSUUTD4E.js';
6
- import { resolveRepoIdentity } from './chunk-V36AOTBP.js';
3
+ import { detectActiveSession, autoConnect } from './chunk-X2Y3B4JH.js';
4
+ import { workPageUrl } from './chunk-LESWVXRE.js';
5
+ import { sanitizeTerminal } from './chunk-3H7NZPYG.js';
6
+ import { resolveRepoIdentity } from './chunk-XT5SOJRC.js';
7
7
  import { C } from './chunk-ANPNT6PM.js';
8
8
  import { resolveGatewayCredentials, unauthorizedMessage, defaultFetch } from './chunk-F3EF56LQ.js';
9
9
  import { signRunnerRequest } from './chunk-APSYTJ6I.js';
@@ -441,7 +441,7 @@ async function runWorkLinkSession(opts) {
441
441
  return await linkSession(opts);
442
442
  } catch (err) {
443
443
  if (opts.logFailures) {
444
- const { logHookError } = await import('./hook-fast-UFHR6EKZ.js');
444
+ const { logHookError } = await import('./hook-fast-WQQYEXO5.js');
445
445
  const reason = err instanceof Error ? err.message : String(err);
446
446
  logHookError(opts.home ?? homeFromEnv(opts.env ?? process.env), new Error(`work link-session #${opts.number} failed: ${reason}`));
447
447
  }
@@ -1,15 +1,15 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- import { uploadSpooledSteps } from './chunk-XKZPL3GE.js';
3
+ import { uploadSpooledSteps } from './chunk-INCKTGMM.js';
4
4
  import { LaunchFilter } from './chunk-ESVW4MJY.js';
5
5
  import { RepoFilter } from './chunk-TBT347UY.js';
6
- import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-HSUUTD4E.js';
7
- import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-V36AOTBP.js';
6
+ import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-3H7NZPYG.js';
7
+ import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-XT5SOJRC.js';
8
8
  import { C } from './chunk-ANPNT6PM.js';
9
9
  import { cliFetch, resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-F3EF56LQ.js';
10
10
  import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-PJDQPF5N.js';
11
11
  import { signerFor, signRunnerRequest } from './chunk-APSYTJ6I.js';
12
- import { writeSyncStatus, spoolDir } from './chunk-WRW6QCI6.js';
12
+ import { writeSyncStatus, spoolDir } from './chunk-NHXJU7CM.js';
13
13
  import { readLatestProvenanceForSession, readContextProvenance } from './chunk-ZJSNLVCE.js';
14
14
  import { hookExecSpoolPath } from './chunk-2O5KA67H.js';
15
15
  import { applyReportedCost } from './chunk-BKO6JEZI.js';
@@ -17,7 +17,7 @@ import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
17
17
  import { readLaunchSpoolState, launchStatusIsDecisive, launchedItemsBySession, launchesPath } from './chunk-T2Q7ISPE.js';
18
18
  import { cliInvocation } from './chunk-CRB3POP4.js';
19
19
  import { removeJournalHooks } from './chunk-TUSYOL2O.js';
20
- import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-IWFYKNAO.js';
20
+ import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-3WW2TL7V.js';
21
21
  import { homeFromEnv } from './chunk-VNVZDWO3.js';
22
22
  import { dirname, basename, join, sep } from 'path';
23
23
  import { statSync, readFileSync, readdirSync, mkdirSync, writeFileSync, renameSync, existsSync, rmSync } from 'fs';
@@ -1,6 +1,6 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- import { loadMachineSkillFiles, resolvePackRoot } from './chunk-AKKVPUGK.js';
3
+ import { loadMachineSkillFiles, resolvePackRoot } from './chunk-YW4PEGLN.js';
4
4
  import { MAINTAINED_SKILLS, maintainedLineVersion } from './chunk-CDDED64E.js';
5
5
  import { resolvePackageVersion } from './chunk-RA3O54FC.js';
6
6
  import { homeFromEnv } from './chunk-VNVZDWO3.js';