@outerlayer/cli 0.33.0-next.20261021171323 → 0.33.0-next.20261021171625

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-21T17:15:21.001Z+04c1646","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-21T17:29:56.212Z+b42151d","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-VFREWHZA.js → builder-QECLC243.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-ZZWWKBLL.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-5T2VOSIL.js';
 import './chunk-YJLHUKYS.js';
 import './chunk-3Z3MPR55.js';
 import './chunk-LK2S5XZH.js';
-import './chunk-GKNF4D62.js';
+import './chunk-XT5SOJRC.js';
 import './chunk-APSYTJ6I.js';
 import './chunk-KP6R7CV3.js';
 import './chunk-HDSDUTX4.js';

package/dist/{check-3TQJDGKM.js → check-4BL6XRWJ.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-LAS3DOTW.js';
-import './chunk-TI5Y242B.js';
+import { probeCredentials } from './chunk-UJIG5BU7.js';
+import './chunk-YGXKXL4Q.js';
 import './chunk-X7UUIHGH.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-E7R2GIAW.js';
@@ -11,21 +11,21 @@ import './chunk-TZQIEUDE.js';
 import './chunk-ZVB57WI6.js';
 import './chunk-RJYKTWUP.js';
 import './chunk-I3LTIAOR.js';
-import './chunk-AR6UB2BP.js';
-import './chunk-VXYPD33W.js';
-import './chunk-7LP3F2QH.js';
+import './chunk-3RS3RNGH.js';
+import './chunk-XFS2TMOB.js';
+import './chunk-INCKTGMM.js';
 import './chunk-ESVW4MJY.js';
 import './chunk-XTNMIV77.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, managedProblems, managedFactsOf, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-KQON2T4A.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, managedProblems, managedFactsOf, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-RHBFNZ7J.js';
 import './chunk-YYYRBYWG.js';
 import './chunk-ZZSQYOY5.js';
 import './chunk-TBT347UY.js';
-import './chunk-CI6PRMWZ.js';
-import './chunk-LQFDTQC2.js';
-import { probeHelper, HELPER_ENV, helperSocketPath } from './chunk-G7QBSH3X.js';
+import './chunk-2FPEB36J.js';
+import './chunk-GXKWPOK6.js';
+import { probeHelper, HELPER_ENV, helperSocketPath } from './chunk-MV52FCSG.js';
 import './chunk-QQGZ5THT.js';
 import './chunk-HIGJTX5U.js';
-import './chunk-BXA6JLHQ.js';
+import './chunk-QNVIGO5X.js';
 import './chunk-IWYS4ERC.js';
 import './chunk-TQMI335S.js';
 import './chunk-NJS7JJYN.js';
@@ -36,15 +36,15 @@ import './chunk-BSHUTMXV.js';
 import './chunk-T5TBGOT6.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-ZZWWKBLL.js';
+import './chunk-5T2VOSIL.js';
 import './chunk-YJLHUKYS.js';
 import './chunk-3Z3MPR55.js';
 import './chunk-LK2S5XZH.js';
-import './chunk-SOTJ2V3A.js';
-import './chunk-JKXTG3BV.js';
-import './chunk-HPOW2VCB.js';
+import './chunk-X7ML37UF.js';
+import './chunk-X2Y3B4JH.js';
+import './chunk-LESWVXRE.js';
 import './chunk-3H7NZPYG.js';
-import './chunk-GKNF4D62.js';
+import './chunk-XT5SOJRC.js';
 import './chunk-ZAJKEHIE.js';
 import './chunk-6C3ZVE62.js';
 import './chunk-G2JWZDFA.js';

package/dist/{chunk-CI6PRMWZ.js → chunk-2FPEB36J.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-LQFDTQC2.js';
-import { MIN_ENGINE_MAJOR } from './chunk-G7QBSH3X.js';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-GXKWPOK6.js';
+import { MIN_ENGINE_MAJOR } from './chunk-MV52FCSG.js';
 import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-NJS7JJYN.js';
 import { runnerCredentialProblem } from './chunk-P7BEZAEU.js';
 import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-KP6R7CV3.js';

package/dist/{chunk-AR6UB2BP.js → chunk-3RS3RNGH.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LiveUploader } from './chunk-VXYPD33W.js';
-import { CaptureDaemon } from './chunk-GKNF4D62.js';
+import { LiveUploader } from './chunk-XFS2TMOB.js';
+import { CaptureDaemon } from './chunk-XT5SOJRC.js';
 import { spoolDir } from './chunk-NHXJU7CM.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{chunk-NYKZC6HU.js → chunk-4LU7MFJO.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
-import { detectActiveSession, autoConnect, transcriptPathForSession } from './chunk-JKXTG3BV.js';
-import { resolveRepoIdentity, defaultProjectsDir, findTranscripts, sessionIdFromPath, scrubText } from './chunk-GKNF4D62.js';
+import { detectActiveSession, autoConnect, transcriptPathForSession } from './chunk-X2Y3B4JH.js';
+import { resolveRepoIdentity, defaultProjectsDir, findTranscripts, sessionIdFromPath, scrubText } from './chunk-XT5SOJRC.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-F3EF56LQ.js';
 import { readLatestProvenanceForSession } from './chunk-ZJSNLVCE.js';

package/dist/{chunk-ZZWWKBLL.js → chunk-5T2VOSIL.js}

@@ -3,7 +3,7 @@ import { createRequire } from 'node:module';
 import { parseSize } from './chunk-YJLHUKYS.js';
 import { RecipeError } from './chunk-3Z3MPR55.js';
 import { BUILDKIT_IMAGE } from './chunk-LK2S5XZH.js';
-import { compareVersions } from './chunk-GKNF4D62.js';
+import { compareVersions } from './chunk-XT5SOJRC.js';
 import { ensureHostKey } from './chunk-APSYTJ6I.js';
 import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, runnerDir, jobsDir } from './chunk-KP6R7CV3.js';
 import { CLAUDE_PORT, JOB_MOUNT, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_SOCKET, RELAY_PORT, DESTINATION_BASE_PORT } from './chunk-HDSDUTX4.js';

package/dist/{chunk-LQFDTQC2.js → chunk-GXKWPOK6.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { MIN_ENGINE_MAJOR } from './chunk-G7QBSH3X.js';
+import { MIN_ENGINE_MAJOR } from './chunk-MV52FCSG.js';
 import { runnerImageVersion } from './chunk-IWYS4ERC.js';
 import { firecrackerArch, MICROVM_ARCHES, guestAssetsPinned } from './chunk-LK2S5XZH.js';
 import { spawnSync } from 'child_process';

package/dist/{chunk-7LP3F2QH.js → chunk-INCKTGMM.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
-import { autoConnect, detectActiveSession } from './chunk-JKXTG3BV.js';
+import { autoConnect, detectActiveSession } from './chunk-X2Y3B4JH.js';
 import { acquireSpoolLockAt } from './chunk-3H7NZPYG.js';
-import { resolveRepoIdentity } from './chunk-GKNF4D62.js';
+import { resolveRepoIdentity } from './chunk-XT5SOJRC.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-F3EF56LQ.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';

package/dist/{chunk-LSMF3EET.js → chunk-JJ4W5LVF.js}

@@ -2,10 +2,10 @@
 import { createRequire } from 'node:module';
 import { checkStarterFiles, contextIsGoverned } from './chunk-KURUM765.js';
 import { fleetCheck, checkBuildSkill, checkMachineSkills, checkCommittedMaintainedSkills, checkMaintainedReferences } from './chunk-H6Y5D6J7.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-SOTJ2V3A.js';
-import { isLinkedRepository } from './chunk-HPOW2VCB.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-X7ML37UF.js';
+import { isLinkedRepository } from './chunk-LESWVXRE.js';
 import { sanitizeTerminal } from './chunk-3H7NZPYG.js';
-import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-GKNF4D62.js';
+import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-XT5SOJRC.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { checkFormerSkillNames } from './chunk-FE3RTGJN.js';
 import { resolveGatewayCredentials, defaultFetch } from './chunk-F3EF56LQ.js';
@@ -1211,7 +1211,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-ZE4LA7EZ.js');
+    const { runnerHostChecks } = await import('./doctor-FDXHHPDJ.js');
     const gateway = (() => {
       try {
         const { url, apiKey, appId } = loadRunnerConfig(configPath);

package/dist/{chunk-HPOW2VCB.js → chunk-LESWVXRE.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { sanitizeTerminal } from './chunk-3H7NZPYG.js';
-import { remoteLookupFailed } from './chunk-GKNF4D62.js';
+import { remoteLookupFailed } from './chunk-XT5SOJRC.js';
 import { isAgentsMdLayout } from './chunk-ZAJKEHIE.js';
 import { DEFAULT_DASHBOARD } from './chunk-6C3ZVE62.js';
 import { cliFetch, resolveGatewayCredentials } from './chunk-F3EF56LQ.js';

package/dist/{chunk-EKMMX5A5.js → chunk-LRBOBYQI.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { staleBuildRefusal, staleBuildWarning, detectCi } from './chunk-VXYPD33W.js';
+import { staleBuildRefusal, staleBuildWarning, detectCi } from './chunk-XFS2TMOB.js';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
-import { detectActiveSession, autoConnect } from './chunk-JKXTG3BV.js';
+import { detectActiveSession, autoConnect } from './chunk-X2Y3B4JH.js';
 import { readEffectiveArtifactSpoolState, localArtifactIds, isArtifactTombstoned, artifactBlobsDir, appendArtifactRecord, artifactsSpoolPath, findPendingArtifactRecord, sanitizeTerminal, appendArtifactTombstone } from './chunk-3H7NZPYG.js';
-import { resolveRepoIdentity } from './chunk-GKNF4D62.js';
+import { resolveRepoIdentity } from './chunk-XT5SOJRC.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-F3EF56LQ.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';

package/dist/{chunk-G7QBSH3X.js → chunk-MV52FCSG.js}

@@ -2,18 +2,18 @@
 import { createRequire } from 'node:module';
 import { execCapture } from './chunk-QQGZ5THT.js';
 import { GUEST_CID } from './chunk-HIGJTX5U.js';
-import { keepStagedContext, describeCallFailure, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript, WORKFLOW_PERMISSION_REASON } from './chunk-BXA6JLHQ.js';
+import { keepStagedContext, describeCallFailure, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript, WORKFLOW_PERMISSION_REASON } from './chunk-QNVIGO5X.js';
 import { runnerImageVersion } from './chunk-IWYS4ERC.js';
 import { hostAllowed } from './chunk-UXYLWVTQ.js';
 import { readDefaultBranchHead, cloneRepository, buildRepositoryImage } from './chunk-BSHUTMXV.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
 import { currentCliBuild } from './chunk-OGFGZQA3.js';
-import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun } from './chunk-ZZWWKBLL.js';
+import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun } from './chunk-5T2VOSIL.js';
 import { readDu } from './chunk-YJLHUKYS.js';
 import { RecipeError, DOCKER_FEATURE } from './chunk-3Z3MPR55.js';
 import { FIRECRACKER_VERSION, hostHelperPinned, firecrackerArch, MICROVM_ARCHES, CLAUDE_CODE_VERSION, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, JAILER_BINARY_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, GUEST_ASSETS_VERSION, DEFAULT_BASE_IMAGE } from './chunk-LK2S5XZH.js';
-import { WorkCommandError } from './chunk-SOTJ2V3A.js';
-import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-GKNF4D62.js';
+import { WorkCommandError } from './chunk-X7ML37UF.js';
+import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-XT5SOJRC.js';
 import { vmAssetsDir, RUNNER_DIR_MODE, rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, deliveryDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, buildDir, SHIM_DIR } from './chunk-KP6R7CV3.js';
 import { repositoriesOf, primaryOf, RELAY_PORT, repositoryPath, CHECKOUT_DIR, lifecycleWorkdir, claudeCredential, buildEnvironment, startBuildServices, checkEnvironment, AGENT_CREDENTIAL_MISSING, checkoutPath, JOB_MOUNT } from './chunk-HDSDUTX4.js';
 import { sharedSkillNames, skillConflictMessage } from './chunk-FGF52V4V.js';

package/dist/{chunk-54GBOMDW.js → chunk-OF4TFWKR.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { autoConnect, detectActiveSession } from './chunk-JKXTG3BV.js';
-import { resolveRepoIdentity } from './chunk-GKNF4D62.js';
+import { autoConnect, detectActiveSession } from './chunk-X2Y3B4JH.js';
+import { resolveRepoIdentity } from './chunk-XT5SOJRC.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { defaultFetch, unauthorizedMessage, resolveGatewayCredentials } from './chunk-F3EF56LQ.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';

package/dist/{chunk-BXA6JLHQ.js → chunk-QNVIGO5X.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { WorkCommandError, postJson } from './chunk-SOTJ2V3A.js';
+import { WorkCommandError, postJson } from './chunk-X7ML37UF.js';
 import { defaultGitRunner, materializeContext, isStagingWriteFault, lookupGoverningSource } from './chunk-D73OLAYE.js';
 import { signingFetchFor } from './chunk-F3EF56LQ.js';
 import { signerFor } from './chunk-APSYTJ6I.js';

package/dist/{chunk-KQON2T4A.js → chunk-RHBFNZ7J.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isPlaceholderCommand } from './chunk-CI6PRMWZ.js';
-import { describeCallFailure } from './chunk-BXA6JLHQ.js';
+import { isPlaceholderCommand } from './chunk-2FPEB36J.js';
+import { describeCallFailure } from './chunk-QNVIGO5X.js';
 import { checkFit } from './chunk-RQGHHEM7.js';
 import { builtinKind } from './chunk-P7BEZAEU.js';
-import { WorkCommandError, getJson } from './chunk-SOTJ2V3A.js';
+import { WorkCommandError, getJson } from './chunk-X7ML37UF.js';
 import { sanitizeTerminal } from './chunk-3H7NZPYG.js';
 import { signerFor } from './chunk-APSYTJ6I.js';
 import { CLAUDE_CREDENTIAL_VARIABLES, claudeCredential, claudeCredentialVariablesSet } from './chunk-HDSDUTX4.js';

package/dist/{chunk-LAS3DOTW.js → chunk-UJIG5BU7.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, sampleGuest, foldSample, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, GUEST_USAGE_INTERVAL_MS, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-TI5Y242B.js';
+import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, sampleGuest, foldSample, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, GUEST_USAGE_INTERVAL_MS, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-YGXKXL4Q.js';
 import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-X7UUIHGH.js';
 import { decideInstalledSwitch } from './chunk-3JVYMD4G.js';
 import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-E7R2GIAW.js';
@@ -8,20 +8,20 @@ import { fitImageBuildMemory } from './chunk-WHSYPR3U.js';
 import { RUNNER_PROTOCOL } from './chunk-YKYCE4HY.js';
 import { writePendingUpdate } from './chunk-TZQIEUDE.js';
 import { JOB_STATE_FORMAT, readsJobState, jobStateFormatOf } from './chunk-ZVB57WI6.js';
-import { currentSkillCommand, formerSkillProblem, realBlockedProbes, checkBlocked } from './chunk-KQON2T4A.js';
+import { currentSkillCommand, formerSkillProblem, realBlockedProbes, checkBlocked } from './chunk-RHBFNZ7J.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
 import { writeMarker, readMarker, currentVersion, removeMarker, entryIn, versionDir, startedThroughCurrent, switchCurrent, isInLayout, cleanVersions, stagingDir } from './chunk-ZZSQYOY5.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandExec, setUpRunnerCgroup, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-G7QBSH3X.js';
-import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-BXA6JLHQ.js';
+import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandExec, setUpRunnerCgroup, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-MV52FCSG.js';
+import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-QNVIGO5X.js';
 import { tagToPull, pullInstruction, imageTag, writeUpdateStatus } from './chunk-IWYS4ERC.js';
 import { isVersion, compareVersions, satisfiesRange } from './chunk-TQMI335S.js';
 import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-P7BEZAEU.js';
 import { claimPidFile, writePidFile, readPidFile, releasePidFile } from './chunk-T5TBGOT6.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
-import { writeJobFile, ensureRunnerIdentity, readJobFile, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, BUILD_LABEL, RUNNER_LABEL, readJobFileChecked } from './chunk-ZZWWKBLL.js';
+import { writeJobFile, ensureRunnerIdentity, readJobFile, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, BUILD_LABEL, RUNNER_LABEL, readJobFileChecked } from './chunk-5T2VOSIL.js';
 import { exceedsDisk } from './chunk-YJLHUKYS.js';
-import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-SOTJ2V3A.js';
+import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-X7ML37UF.js';
 import { loadHostKey, ensureHostKey, signerFor } from './chunk-APSYTJ6I.js';
 import { RUNNER_DIR_MODE, runnerDir, buildDir, attemptStamp, jobDir, RUNNER_FILE_MODE, jobsDir, pidFilePath, spoolDir, rootfsDir } from './chunk-KP6R7CV3.js';
 import { parseClaimIdentity, parseClaimedRepositories, parseUnreachable, repositoriesOf, primaryOf, sharedUserEnvironment, JOB_MOUNT, takeClaudeCredential, heldClaudeCredential, currentClaudeCredential } from './chunk-HDSDUTX4.js';
@@ -1751,7 +1751,7 @@ var CLAIM_REFUSAL_CODES = new Set(
   "pull_request_from_fork pull_request_on_default_branch pull_request_ambiguous pull_request_repository_not_connected repository_not_reachable branch_claimed_elsewhere".split(" ")
 );
 async function tryClaimAndStart(state, item, queue) {
-  const { postJson: postJson2 } = await import('./work-cmd-3G26E3NL.js');
+  const { postJson: postJson2 } = await import('./work-cmd-UTD4Y7W3.js');
   const log = logOf(state);
   const hostKey = await loadHostKey(state.config.configPath);
   const claim = await retrySend(
@@ -2947,7 +2947,7 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
       check: update.check ? () => update.check(configPath) : async () => {
         const held = heldClaudeCredential();
         const env = held === void 0 ? process.env : { ...process.env, [held.variable]: held.value };
-        return (await import('./check-3TQJDGKM.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
+        return (await import('./check-4BL6XRWJ.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
       },
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log

package/dist/{chunk-JKXTG3BV.js → chunk-X2Y3B4JH.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-HPOW2VCB.js';
-import { resolveRepoIdentity } from './chunk-GKNF4D62.js';
+import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-LESWVXRE.js';
+import { resolveRepoIdentity } from './chunk-XT5SOJRC.js';
 import { resolveGatewayCredentials } from './chunk-F3EF56LQ.js';
 import { findGitDirs, readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';

package/dist/{chunk-SOTJ2V3A.js → chunk-X7ML37UF.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectActiveSession, autoConnect } from './chunk-JKXTG3BV.js';
-import { workPageUrl } from './chunk-HPOW2VCB.js';
+import { detectActiveSession, autoConnect } from './chunk-X2Y3B4JH.js';
+import { workPageUrl } from './chunk-LESWVXRE.js';
 import { sanitizeTerminal } from './chunk-3H7NZPYG.js';
-import { resolveRepoIdentity } from './chunk-GKNF4D62.js';
+import { resolveRepoIdentity } from './chunk-XT5SOJRC.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { resolveGatewayCredentials, unauthorizedMessage, defaultFetch } from './chunk-F3EF56LQ.js';
 import { signRunnerRequest } from './chunk-APSYTJ6I.js';

package/dist/{chunk-VXYPD33W.js → chunk-XFS2TMOB.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { uploadSpooledSteps } from './chunk-7LP3F2QH.js';
+import { uploadSpooledSteps } from './chunk-INCKTGMM.js';
 import { LaunchFilter } from './chunk-ESVW4MJY.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
 import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-3H7NZPYG.js';
-import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-GKNF4D62.js';
+import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-XT5SOJRC.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { cliFetch, resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-F3EF56LQ.js';
 import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-PJDQPF5N.js';

package/dist/{chunk-GKNF4D62.js → chunk-XT5SOJRC.js}

@@ -68435,18 +68435,38 @@ function parseTranscript(content, opts = {}) {
   const unknownModels = /* @__PURE__ */ new Set();
   const blobs = /* @__PURE__ */ new Map();
   let open22 = null;
+  const usageTurnByMessageId = /* @__PURE__ */ new Map();
+  const addToTotals = (usage, sign) => {
+    totals.in += sign * usage.in;
+    totals.out += sign * usage.out;
+    totals.cacheRead += sign * usage.cacheRead;
+    totals.cacheCreate += sign * usage.cacheCreate;
+  };
+  const addCost = (costUsd, sign) => {
+    if (typeof costUsd !== "number") return;
+    totalCost += sign * costUsd;
+    anyCostKnown = true;
+  };
   const flushOpen = () => {
     if (!open22) return;
     const turn = finalizeAssistant(open22, turnIndex, toolCallsById, models, unknownModels);
-    if (turn.usage) {
-      totals.in += turn.usage.in;
-      totals.out += turn.usage.out;
-      totals.cacheRead += turn.usage.cacheRead;
-      totals.cacheCreate += turn.usage.cacheCreate;
-    }
-    if (typeof turn.costUsd === "number") {
-      totalCost += turn.costUsd;
-      anyCostKnown = true;
+    const usageTurn = turn.messageId ? usageTurnByMessageId.get(turn.messageId) : void 0;
+    if ((usageTurn == null ? void 0 : usageTurn.usage) && turn.usage) {
+      const merged = maxUsage(usageTurn.usage, turn.usage);
+      addToTotals(usageTurn.usage, -1);
+      addToTotals(merged, 1);
+      usageTurn.usage = merged;
+      if (usageTurn.model) {
+        addCost(usageTurn.costUsd, -1);
+        usageTurn.costUsd = costOfUsage(usageTurn.model, merged);
+        addCost(usageTurn.costUsd, 1);
+      }
+      turn.usage = { in: 0, out: 0, cacheRead: 0, cacheCreate: 0, ...merged.speed ? { speed: merged.speed } : {} };
+      turn.costUsd = turn.model ? costOfUsage(turn.model, turn.usage) : null;
+    } else if (turn.usage) {
+      if (turn.messageId) usageTurnByMessageId.set(turn.messageId, turn);
+      addToTotals(turn.usage, 1);
+      addCost(turn.costUsd, 1);
     }
     turns.push(turn);
     turnIndex += 1;
@@ -68766,27 +68786,30 @@ function extractInlineImages(value, blobs, images) {
   }
   return changed ? out : obj;
 }
+function maxUsage(a, b) {
+  var _a5, _b, _c, _d, _e;
+  const merged = {
+    in: Math.max(a.in, b.in),
+    out: Math.max(a.out, b.out),
+    cacheRead: Math.max(a.cacheRead, b.cacheRead),
+    cacheCreate: Math.max(a.cacheCreate, b.cacheCreate),
+    // Same max-merge as the total it is a share of. Left unset when neither
+    // reading carried the split, so the request still prices as all-5-minute
+    // rather than as a zero-length 1-hour write.
+    ...a.cacheCreate1h !== void 0 || b.cacheCreate1h !== void 0 ? { cacheCreate1h: Math.max((_a5 = a.cacheCreate1h) != null ? _a5 : 0, (_b = b.cacheCreate1h) != null ? _b : 0) } : {},
+    ...((_c = a.speed) != null ? _c : b.speed) !== void 0 ? { speed: (_d = a.speed) != null ? _d : b.speed } : {}
+  };
+  merged.cacheCreate5m = merged.cacheCreate - Math.min((_e = merged.cacheCreate1h) != null ? _e : 0, merged.cacheCreate);
+  return merged;
+}
 function mergeAssistantLine(open22, line, tsIso) {
-  var _a5, _b, _c, _d, _e, _f;
+  var _a5;
   if (!open22.ts && tsIso) open22.ts = tsIso;
   const message = line.message;
   const isSyntheticStub = line.isApiErrorMessage === true || (message == null ? void 0 : message.model) === "<synthetic>";
   if (!isSyntheticStub && typeof (message == null ? void 0 : message.model) === "string" && !open22.model) open22.model = message.model;
   const usage = readUsage(message == null ? void 0 : message.usage);
-  if (usage) {
-    open22.usage = open22.usage ? {
-      in: Math.max(open22.usage.in, usage.in),
-      out: Math.max(open22.usage.out, usage.out),
-      cacheRead: Math.max(open22.usage.cacheRead, usage.cacheRead),
-      cacheCreate: Math.max(open22.usage.cacheCreate, usage.cacheCreate),
-      // Same max-merge as the total it is a share of. Left unset when
-      // neither line carried the split, so the turn still prices as
-      // all-5-minute rather than as a zero-length 1-hour write.
-      ...open22.usage.cacheCreate1h !== void 0 || usage.cacheCreate1h !== void 0 ? { cacheCreate1h: Math.max((_a5 = open22.usage.cacheCreate1h) != null ? _a5 : 0, (_b = usage.cacheCreate1h) != null ? _b : 0) } : {},
-      ...((_c = open22.usage.speed) != null ? _c : usage.speed) !== void 0 ? { speed: (_d = open22.usage.speed) != null ? _d : usage.speed } : {}
-    } : usage;
-    open22.usage.cacheCreate5m = open22.usage.cacheCreate - Math.min((_e = open22.usage.cacheCreate1h) != null ? _e : 0, open22.usage.cacheCreate);
-  }
+  if (usage) open22.usage = open22.usage ? maxUsage(open22.usage, usage) : usage;
   const content = message == null ? void 0 : message.content;
   if (typeof content === "string") {
     if (content && !open22.texts.includes(content)) open22.texts.push(content);
@@ -68825,7 +68848,7 @@ function mergeAssistantLine(open22, line, tsIso) {
             open22.toolOrder.push(b.id);
           }
         } else {
-          ((_f = open22.anonCalls) != null ? _f : open22.anonCalls = []).push(call);
+          ((_a5 = open22.anonCalls) != null ? _a5 : open22.anonCalls = []).push(call);
         }
         break;
       }

package/dist/{chunk-TI5Y242B.js → chunk-YGXKXL4Q.js}

@@ -3,22 +3,22 @@ import { createRequire } from 'node:module';
 import { readsJobState, READ_JOB_STATE_FORMATS, jobStateFormatOf } from './chunk-ZVB57WI6.js';
 import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-RJYKTWUP.js';
 import { zodProblem } from './chunk-I3LTIAOR.js';
-import { senderPidfile } from './chunk-AR6UB2BP.js';
-import { installScrubContext } from './chunk-VXYPD33W.js';
+import { senderPidfile } from './chunk-3RS3RNGH.js';
+import { installScrubContext } from './chunk-XFS2TMOB.js';
 import { writeDockerClientConfig } from './chunk-XTNMIV77.js';
-import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, resolveAgentUser, AgentUserError, runBuildSteps, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, senderAliveScript, helperFirecrackerNote, HelperRefusal, isLiteralAddress, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, copyJudgeTree } from './chunk-G7QBSH3X.js';
+import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, resolveAgentUser, AgentUserError, runBuildSteps, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, senderAliveScript, helperFirecrackerNote, HelperRefusal, isLiteralAddress, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, copyJudgeTree } from './chunk-MV52FCSG.js';
 import { waitForAgent, vmExecArgs } from './chunk-QQGZ5THT.js';
 import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-HIGJTX5U.js';
-import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-BXA6JLHQ.js';
+import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-QNVIGO5X.js';
 import { isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-P7BEZAEU.js';
 import { readBranchHead, fetchCommit, diffBetween } from './chunk-BSHUTMXV.js';
 import { isSameProcess, startTimeOf } from './chunk-JBJTC3UU.js';
-import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-ZZWWKBLL.js';
+import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-5T2VOSIL.js';
 import { parseSize } from './chunk-YJLHUKYS.js';
 import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-LK2S5XZH.js';
-import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-SOTJ2V3A.js';
+import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-X7ML37UF.js';
 import { planArtifactUpload } from './chunk-3H7NZPYG.js';
-import { scrubText } from './chunk-GKNF4D62.js';
+import { scrubText } from './chunk-XT5SOJRC.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
 import { signerFor } from './chunk-APSYTJ6I.js';
 import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath } from './chunk-KP6R7CV3.js';