@outerlayer/cli 0.33.0-next.20261021171625 → 0.33.0-next.20261021223634

package/README.md

@@ -228,7 +228,11 @@ content:
   downloads a guest kernel and a guest helper from the releases of the public
   repository `outerlayerai/guest-assets` on github.com. The runner checks each
   file against a sha256 pinned in the CLI, and the requests send nothing about
-  the host. The microVM reaches the network only
+  the host. An image build in a builder microVM also needs the files of the
+  runner's tools layer, which the runner downloads on the host. It gets `gh`,
+  `tini` and FFmpeg from github.com. It gets the narration voice pack from
+  huggingface.co and registry.npmjs.org. Each file is checked against a sha256
+  pinned in the CLI. The microVM reaches the network only
   through the same tunnel a container build uses, which the runner serves on
   Unix sockets and the guest reaches over vsock. In a build with Docker, the
   guest forwards the proxy connections of containers and `docker build` steps
@@ -469,7 +473,7 @@ before it gives up.
 | `outerlayer context emit [--check]` | Compile `.outerlayer/` into each configured target tool's native files (targets come from `.outerlayer/config.json`). `--check` computes outputs and diffs against disk without writing (CI mode). Bare `outerlayer emit` with no name still compiles, with a deprecation warning. |
 | `outerlayer hooks wrap` / `outerlayer hooks unwrap` | Auto-wrap (or undo wrapping) `PreToolUse`/`PostToolUse` hooks for execution evidence — one spawn per firing. |
 | `outerlayer emit artifact <file> --caption <text> [--for <criterion-id>] [--pr <n>]` | Upload a proof artifact — screenshot, recording, report, or log — with its caption. Inside a recorded session it spools locally and ships on the next `sync`; otherwise it uploads immediately, anchored to a pull request or the current checkout. `--replaces` retires artifacts an earlier run uploaded. A JUnit XML file bound with `--for` proves a criterion that declares `test` proof; `--test <name[=path:line]>` binds only the named tests. |
-| `outerlayer emit demo <manifest> [--no-narration] [--item <n>] [--pr <n>]` | Turn a recorded video and its manifest (written by `@outerlayer/playwright`) into a narrated demo: one WebM clip for each chapter, emitted as a video artifact. A chapter whose checks all passed is bound to its criterion. The manifest is emitted as the demo record. Needs `ffmpeg` and `ffprobe`, and `espeak-ng` unless `--no-narration`. Exit 1 means a chapter had a failed check. |
+| `outerlayer emit demo <manifest> [--compare <manifest>] [--no-narration] [--item <n>] [--pr <n>]` | Turn a recorded video and its manifest (written by `@outerlayer/playwright`) into a narrated demo: one WebM clip for each chapter, emitted as a video artifact. A chapter whose checks all passed is bound to its criterion. The manifest is emitted as the demo record. With `--compare`, a second run's stills are compared with the first run's, and each chapter reads `yes`, `no` or `not checked`. Needs `ffmpeg` and `ffprobe`, and `espeak-ng` unless `--no-narration`. Exit 1 means a chapter had a failed check. |
 | `outerlayer emit <name> --result <pass\|fail> [--link <url>] [--body <text>\|--body-file <path>] --item <number>` | Record one named check's outcome on a work item. A check that ran carries the run URL as its proof (`--link`); a judgment you are making yourself carries one sentence (`--body`, or `--body-file` to read it from a file — `-` reads standard input). A `fail` needs at least one of the two; a `pass` needs neither. `--item` names the work item by the number printed when the item was created — always required, in or out of a recorded session; a session records checks on its own item like any other, stored as the session's, but cannot clear a person's fail. Prints the recorded check's id. Who recorded it comes from your API key, never from what you send. |
 | `outerlayer work comment --item <n> [--criterion <id>] --body <text> [--artifact <id>] [--pass\|--fail\|--attach\|--ready]` | Post one comment on a work item's general thread, or on one acceptance criterion's own thread with `--criterion`. `--pass`/`--fail` need a person's own credential and apply to the whole item, so they work on the general thread only and the gateway refuses them with `--criterion`; `--attach` makes the named artifact that criterion's current proof; `--ready` hands a thread back to a person. The detected session id rides along automatically, only ever narrowing what the comment may do. |
 | `outerlayer work stop --item <n> [--note <text>]` | Ask the host that holds the item's build to end it. The host reads the request at its next heartbeat and ends the build with outcome `stopped`, so the build may run a little longer. The item is not built again until a new build request. Needs `work.update`. Exits 1 when no host build is running for the item. |

package/dist/{agent-setup-NSUX64RU.js → agent-setup-UY5NBT7C.js}

@@ -1,30 +1,30 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { keepHandWritten, runAgentSetup } from './chunk-OX7CHZTJ.js';
-import './chunk-GI6LOIHS.js';
+export { keepHandWritten, runAgentSetup } from './chunk-N3KK5BKF.js';
+import './chunk-TNJXCNQ6.js';
 import './chunk-KT4CN6OU.js';
-import './chunk-QCDVKCHA.js';
-import './chunk-ZAJKEHIE.js';
+import './chunk-UWEJ6HGB.js';
+import './chunk-4IG6EZHU.js';
 import './chunk-ANPNT6PM.js';
-import './chunk-D73OLAYE.js';
-import './chunk-FE3RTGJN.js';
-import './chunk-F3EF56LQ.js';
+import './chunk-RVWADVBN.js';
+import './chunk-M5OBRUQE.js';
+import './chunk-VQ2JGZSC.js';
 import './chunk-PJDQPF5N.js';
-import './chunk-APSYTJ6I.js';
-import './chunk-KP6R7CV3.js';
+import './chunk-JT3YO5MH.js';
+import './chunk-ESP5VZBD.js';
 import './chunk-HDSDUTX4.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-BJ3KTMDH.js';
-import './chunk-YW4PEGLN.js';
+import './chunk-KUTZ6XLS.js';
 import './chunk-5BHIBJDA.js';
 import './chunk-CDDED64E.js';
 import './chunk-RA3O54FC.js';
 import './chunk-CRB3POP4.js';
-import './chunk-WXEPMPHK.js';
+import './chunk-LN4WDONI.js';
 import './chunk-YQR6E6OV.js';
 import './chunk-TUSYOL2O.js';
-import './chunk-JUXATN46.js';
-import './chunk-3WW2TL7V.js';
+import './chunk-OGCG5LOX.js';
+import './chunk-AKHGQKNR.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-XD4ZCMA4.js';
 import './chunk-MESOOLF4.js';

package/dist/{artifact-link-cmd-IGVFGHC2.js → artifact-link-cmd-2MBHG3PO.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { sanitizeTerminal, readEffectiveArtifactSpoolState } from './chunk-3H7NZPYG.js';
+import { sanitizeTerminal, readEffectiveArtifactSpoolState } from './chunk-DM4EGXDO.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import './chunk-3WW2TL7V.js';
+import './chunk-AKHGQKNR.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{build-HU24C46Z.js → build-SK5BYBER.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { buildRepositoryImage } from './chunk-BSHUTMXV.js';
-import './chunk-T5TBGOT6.js';
+export { KEY_PREFIX, TAG_HOST, buildRepositoryImage, metadataFromLabels, prepareImageBuild, writeRecord } from './chunk-TPGHCH2H.js';
+import './chunk-IPJ6HR7E.js';
 import './chunk-JBJTC3UU.js';
 export { RecipeError } from './chunk-3Z3MPR55.js';
-import './chunk-LK2S5XZH.js';
-import './chunk-KP6R7CV3.js';
+import './chunk-LHYO4RDP.js';
+import './chunk-ESP5VZBD.js';
 import './chunk-HDSDUTX4.js';
 import './chunk-XD4ZCMA4.js';
 import './chunk-MESOOLF4.js';

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-21T17:29:56.212Z+b42151d","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-21T22:39:20.164Z+ff838ea","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-QECLC243.js → builder-K2XIVSSZ.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-5T2VOSIL.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-CHXYLCMA.js';
 import './chunk-YJLHUKYS.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-LK2S5XZH.js';
-import './chunk-XT5SOJRC.js';
-import './chunk-APSYTJ6I.js';
-import './chunk-KP6R7CV3.js';
+import './chunk-LHYO4RDP.js';
+import './chunk-AKR32WHV.js';
+import './chunk-JT3YO5MH.js';
+import './chunk-ESP5VZBD.js';
 import './chunk-HDSDUTX4.js';
-import './chunk-3WW2TL7V.js';
+import './chunk-AKHGQKNR.js';
 import './chunk-XD4ZCMA4.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';

package/dist/{check-4BL6XRWJ.js → check-AXDPZJU4.js}

@@ -1,69 +1,69 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-UJIG5BU7.js';
-import './chunk-YGXKXL4Q.js';
-import './chunk-X7UUIHGH.js';
+import { probeCredentials } from './chunk-CV2S5L4J.js';
+import './chunk-72YES3RL.js';
+import './chunk-LH3KULPL.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-E7R2GIAW.js';
-import './chunk-WHSYPR3U.js';
+import './chunk-M5ZXOQYS.js';
 import './chunk-YKYCE4HY.js';
-import './chunk-TZQIEUDE.js';
+import './chunk-CNRMP6EN.js';
 import './chunk-ZVB57WI6.js';
 import './chunk-RJYKTWUP.js';
 import './chunk-I3LTIAOR.js';
-import './chunk-3RS3RNGH.js';
-import './chunk-XFS2TMOB.js';
-import './chunk-INCKTGMM.js';
+import './chunk-Q4YVHYHT.js';
+import './chunk-SFJD4MRY.js';
+import './chunk-RQKQTRXM.js';
 import './chunk-ESVW4MJY.js';
 import './chunk-XTNMIV77.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, managedProblems, managedFactsOf, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-RHBFNZ7J.js';
-import './chunk-YYYRBYWG.js';
-import './chunk-ZZSQYOY5.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, managedProblems, managedFactsOf, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-LBPK2TPR.js';
+import './chunk-3VGDZ23W.js';
 import './chunk-TBT347UY.js';
-import './chunk-2FPEB36J.js';
-import './chunk-GXKWPOK6.js';
-import { probeHelper, HELPER_ENV, helperSocketPath } from './chunk-MV52FCSG.js';
+import './chunk-O6NG67Y7.js';
+import './chunk-CMU6QJHE.js';
+import { probeHelper, HELPER_ENV, helperSocketPath } from './chunk-X5LFLYSD.js';
+import './chunk-2PGI6RDE.js';
 import './chunk-QQGZ5THT.js';
 import './chunk-HIGJTX5U.js';
-import './chunk-QNVIGO5X.js';
-import './chunk-IWYS4ERC.js';
+import './chunk-KDM77TVX.js';
+import './chunk-533QGXGZ.js';
 import './chunk-TQMI335S.js';
-import './chunk-NJS7JJYN.js';
-import { DEFAULT_UNIT_NAME } from './chunk-RQGHHEM7.js';
-import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-P7BEZAEU.js';
+import './chunk-52C3SSNF.js';
+import { DEFAULT_UNIT_NAME } from './chunk-HBBCQ5NE.js';
+import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-ALSE7YKX.js';
 import './chunk-UXYLWVTQ.js';
-import './chunk-BSHUTMXV.js';
-import './chunk-T5TBGOT6.js';
+import './chunk-TPGHCH2H.js';
+import './chunk-IPJ6HR7E.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-5T2VOSIL.js';
+import './chunk-CHXYLCMA.js';
 import './chunk-YJLHUKYS.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-LK2S5XZH.js';
-import './chunk-X7ML37UF.js';
-import './chunk-X2Y3B4JH.js';
-import './chunk-LESWVXRE.js';
-import './chunk-3H7NZPYG.js';
-import './chunk-XT5SOJRC.js';
-import './chunk-ZAJKEHIE.js';
-import './chunk-6C3ZVE62.js';
+import './chunk-LHYO4RDP.js';
+import './chunk-UIBTEDLA.js';
+import './chunk-6TFTRVOA.js';
+import './chunk-5RUH3PCG.js';
+import './chunk-DM4EGXDO.js';
+import './chunk-AKR32WHV.js';
+import './chunk-4IG6EZHU.js';
+import './chunk-RW52CUFX.js';
 import './chunk-G2JWZDFA.js';
 import './chunk-ANPNT6PM.js';
-import './chunk-D73OLAYE.js';
-import './chunk-FE3RTGJN.js';
-import './chunk-F3EF56LQ.js';
+import './chunk-RVWADVBN.js';
+import './chunk-M5OBRUQE.js';
+import './chunk-VQ2JGZSC.js';
 import './chunk-PJDQPF5N.js';
-import './chunk-APSYTJ6I.js';
-import './chunk-KP6R7CV3.js';
+import './chunk-JT3YO5MH.js';
+import './chunk-ESP5VZBD.js';
 import { claudeEnvPath } from './chunk-HDSDUTX4.js';
-import './chunk-NHXJU7CM.js';
+import './chunk-HT7LVCTX.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-2O5KA67H.js';
 import './chunk-BKO6JEZI.js';
 import './chunk-FGF52V4V.js';
 import './chunk-HCVLP7XA.js';
 import './chunk-BJ3KTMDH.js';
-import './chunk-YW4PEGLN.js';
+import './chunk-KUTZ6XLS.js';
 import './chunk-5BHIBJDA.js';
 import './chunk-CDDED64E.js';
 import './chunk-RA3O54FC.js';
@@ -73,8 +73,8 @@ import './chunk-CRB3POP4.js';
 import './chunk-URIZRCRY.js';
 import './chunk-YQR6E6OV.js';
 import './chunk-TUSYOL2O.js';
-import './chunk-JUXATN46.js';
-import './chunk-3WW2TL7V.js';
+import './chunk-OGCG5LOX.js';
+import './chunk-AKHGQKNR.js';
 import './chunk-VNVZDWO3.js';
 import { parseRunnerEnv } from './chunk-XD4ZCMA4.js';
 import './chunk-MESOOLF4.js';

package/dist/chunk-2PGI6RDE.js

@@ -0,0 +1,90 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+import { createHash } from 'crypto';
+import { createReadStream, mkdirSync, rmSync, renameSync, existsSync, statSync, createWriteStream } from 'fs';
+import { dirname } from 'path';
+import { once } from 'events';
+
+createRequire(import.meta.url);
+var VoiceDownloadError = class extends Error {
+  constructor(message, retryable = false) {
+    super(message);
+    this.retryable = retryable;
+  }
+};
+async function sha256OfFile(path) {
+  const hash = createHash("sha256");
+  for await (const chunk of createReadStream(path)) hash.update(chunk);
+  return hash.digest("hex");
+}
+function withoutCredentials(url) {
+  try {
+    const parsed = new URL(url);
+    parsed.username = "";
+    parsed.password = "";
+    return parsed.toString();
+  } catch {
+    return "(an invalid URL)";
+  }
+}
+var ATTEMPTS = 3;
+async function requestRest(params) {
+  const { url, part, name, fetchImpl, progress } = params;
+  const offset = existsSync(part) ? statSync(part).size : 0;
+  const response = await fetchImpl(url, offset > 0 ? { headers: { range: `bytes=${offset}-` } } : {});
+  if (response.status === 416 && offset > 0) {
+    await response.body?.cancel();
+    return;
+  }
+  if (!response.ok || response.body === null) {
+    await response.body?.cancel();
+    throw new VoiceDownloadError(`cannot download ${name} from ${withoutCredentials(url)}: the server answered ${response.status}`, response.status >= 500);
+  }
+  const resumed = response.status === 206;
+  const start = resumed ? offset : 0;
+  const total = Number(response.headers.get("content-length") ?? 0) + start;
+  const out = createWriteStream(part, { flags: resumed ? "a" : "w" });
+  let written = start;
+  let lastReport = 0;
+  try {
+    for await (const chunk of response.body) {
+      if (!out.write(chunk)) await once(out, "drain");
+      written += chunk.length;
+      const now = Date.now();
+      if (progress !== void 0 && now - lastReport >= 1e3) {
+        lastReport = now;
+        progress(`  downloading ${name}: ${(written / 1048576).toFixed(0)}${total > start ? ` of ${(total / 1048576).toFixed(0)}` : ""} MiB`);
+      }
+    }
+  } finally {
+    out.end();
+    await once(out, "close");
+  }
+}
+async function downloadPinned(params) {
+  const { url, dest, sha256, name } = params;
+  mkdirSync(dirname(dest), { recursive: true });
+  const part = `${dest}.part`;
+  for (let attempt = 1; ; attempt += 1) {
+    try {
+      await requestRest({ ...params, part });
+      break;
+    } catch (err) {
+      const refused = err instanceof VoiceDownloadError && !err.retryable;
+      if (refused || attempt === ATTEMPTS) {
+        throw err instanceof VoiceDownloadError ? err : new VoiceDownloadError(`cannot download ${name} from ${withoutCredentials(url)}: ${String(err)}`);
+      }
+      await new Promise((resolve) => setTimeout(resolve, params.retryDelayMs ?? 500));
+    }
+  }
+  const digest = await sha256OfFile(part);
+  if (digest !== sha256) {
+    rmSync(part, { force: true });
+    throw new VoiceDownloadError(
+      `the downloaded ${name} has sha256 ${digest}, not the pinned ${sha256} \u2014 it was discarded and ${params.stopped ?? "nothing was spoken"}`
+    );
+  }
+  renameSync(part, dest);
+}
+
+export { VoiceDownloadError, downloadPinned, sha256OfFile };

package/dist/{chunk-ZZSQYOY5.js → chunk-3VGDZ23W.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-KP6R7CV3.js';
+import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-ESP5VZBD.js';
 import { readlinkSync, realpathSync, mkdirSync, unlinkSync, symlinkSync, renameSync, readFileSync, writeFileSync, rmSync, existsSync, readdirSync } from 'fs';
 import { join, basename, sep, resolve } from 'path';
 

package/dist/{chunk-ZAJKEHIE.js → chunk-4IG6EZHU.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { AGENTS_SKILLS_BASE, OUTERLAYER_SKILLS_BASE } from './chunk-YW4PEGLN.js';
-import { normalizePath, CONTEXT_PIN_FILENAME } from './chunk-JUXATN46.js';
+import { AGENTS_SKILLS_BASE, OUTERLAYER_SKILLS_BASE } from './chunk-KUTZ6XLS.js';
+import { normalizePath, CONTEXT_PIN_FILENAME } from './chunk-OGCG5LOX.js';
 import { existsSync, readdirSync, readFileSync, mkdirSync, writeFileSync, lstatSync, readlinkSync, symlinkSync, rmdirSync } from 'fs';
 import { relative, sep, join } from 'path';
 

package/dist/{chunk-NJS7JJYN.js → chunk-52C3SSNF.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { DEFAULT_UNIT_NAME } from './chunk-RQGHHEM7.js';
-import { RUNNER_FILE_MODE } from './chunk-KP6R7CV3.js';
+import { DEFAULT_UNIT_NAME } from './chunk-HBBCQ5NE.js';
+import { RUNNER_FILE_MODE } from './chunk-ESP5VZBD.js';
 import { claudeEnvPath, withoutCredentialLines } from './chunk-HDSDUTX4.js';
 import { parseRunnerEnv } from './chunk-XD4ZCMA4.js';
 import { existsSync, readFileSync, writeFileSync, renameSync, rmSync } from 'fs';

package/dist/{chunk-IWYS4ERC.js → chunk-533QGXGZ.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { isVersion, compareVersions } from './chunk-TQMI335S.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-KP6R7CV3.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-ESP5VZBD.js';
 import { readFileSync, mkdirSync, writeFileSync, renameSync } from 'fs';
 import { join } from 'path';
 

package/dist/{chunk-LESWVXRE.js → chunk-5RUH3PCG.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { sanitizeTerminal } from './chunk-3H7NZPYG.js';
-import { remoteLookupFailed } from './chunk-XT5SOJRC.js';
-import { isAgentsMdLayout } from './chunk-ZAJKEHIE.js';
-import { DEFAULT_DASHBOARD } from './chunk-6C3ZVE62.js';
-import { cliFetch, resolveGatewayCredentials } from './chunk-F3EF56LQ.js';
+import { sanitizeTerminal } from './chunk-DM4EGXDO.js';
+import { remoteLookupFailed } from './chunk-AKR32WHV.js';
+import { isAgentsMdLayout } from './chunk-4IG6EZHU.js';
+import { DEFAULT_DASHBOARD } from './chunk-RW52CUFX.js';
+import { cliFetch, resolveGatewayCredentials } from './chunk-VQ2JGZSC.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
 import { findGitDirs, writeRepoConnection, readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';

package/dist/{chunk-X2Y3B4JH.js → chunk-6TFTRVOA.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-LESWVXRE.js';
-import { resolveRepoIdentity } from './chunk-XT5SOJRC.js';
-import { resolveGatewayCredentials } from './chunk-F3EF56LQ.js';
+import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-5RUH3PCG.js';
+import { resolveRepoIdentity } from './chunk-AKR32WHV.js';
+import { resolveGatewayCredentials } from './chunk-VQ2JGZSC.js';
 import { findGitDirs, readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{chunk-YGXKXL4Q.js → chunk-72YES3RL.js}

@@ -3,35 +3,35 @@ import { createRequire } from 'node:module';
 import { readsJobState, READ_JOB_STATE_FORMATS, jobStateFormatOf } from './chunk-ZVB57WI6.js';
 import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-RJYKTWUP.js';
 import { zodProblem } from './chunk-I3LTIAOR.js';
-import { senderPidfile } from './chunk-3RS3RNGH.js';
-import { installScrubContext } from './chunk-XFS2TMOB.js';
+import { senderPidfile } from './chunk-Q4YVHYHT.js';
+import { installScrubContext } from './chunk-SFJD4MRY.js';
 import { writeDockerClientConfig } from './chunk-XTNMIV77.js';
-import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, resolveAgentUser, AgentUserError, runBuildSteps, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, senderAliveScript, helperFirecrackerNote, HelperRefusal, isLiteralAddress, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, copyJudgeTree } from './chunk-MV52FCSG.js';
+import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, helperFirecrackerNote, isLiteralAddress, stopJailed, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, ROOT_DISK_ID_PREFIX, copyJudgeTree } from './chunk-X5LFLYSD.js';
 import { waitForAgent, vmExecArgs } from './chunk-QQGZ5THT.js';
 import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-HIGJTX5U.js';
-import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-QNVIGO5X.js';
-import { isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-P7BEZAEU.js';
-import { readBranchHead, fetchCommit, diffBetween } from './chunk-BSHUTMXV.js';
+import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-KDM77TVX.js';
+import { imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-ALSE7YKX.js';
+import { readBranchHead, fetchCommit, diffBetween } from './chunk-TPGHCH2H.js';
 import { isSameProcess, startTimeOf } from './chunk-JBJTC3UU.js';
-import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-5T2VOSIL.js';
+import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-CHXYLCMA.js';
 import { parseSize } from './chunk-YJLHUKYS.js';
-import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-LK2S5XZH.js';
-import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-X7ML37UF.js';
-import { planArtifactUpload } from './chunk-3H7NZPYG.js';
-import { scrubText } from './chunk-XT5SOJRC.js';
+import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-LHYO4RDP.js';
+import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-UIBTEDLA.js';
+import { planArtifactUpload } from './chunk-DM4EGXDO.js';
+import { scrubText } from './chunk-AKR32WHV.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
-import { signerFor } from './chunk-APSYTJ6I.js';
-import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath } from './chunk-KP6R7CV3.js';
+import { signerFor } from './chunk-JT3YO5MH.js';
+import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath } from './chunk-ESP5VZBD.js';
 import { JOB_MOUNT, claudeCredential, repositoriesOf, primaryOf, buildEnvironment, CHECKOUT_DIR, parseIsolation, proxyEnvironment, withProxyWarningHidden, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, withHooksPath, startBuildServices, BUILT_IN_NAMES, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, RELAY_PORT, repositoryPath, lifecycleWorkdir, CHECK_ITEMS_FILE, currentClaudeCredential, removedClaudeCredentialValues, checkEnvironment, EVAL_INPUT_DIR } from './chunk-HDSDUTX4.js';
-import { resolvePackRoot } from './chunk-YW4PEGLN.js';
+import { resolvePackRoot } from './chunk-KUTZ6XLS.js';
 import { MAINTAINED_SKILLS } from './chunk-CDDED64E.js';
 import { resolveVersion } from './chunk-RA3O54FC.js';
-import { parsePolicy } from './chunk-JUXATN46.js';
-import { CheckItemsSchema, CHECK_ITEM_REASON_MAX_LENGTH } from './chunk-3WW2TL7V.js';
+import { parsePolicy } from './chunk-OGCG5LOX.js';
+import { CheckItemsSchema, CHECK_ITEM_REASON_MAX_LENGTH } from './chunk-AKHGQKNR.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { fdName } from './chunk-XD4ZCMA4.js';
 import { RUNNER_WORDED_REASONS, UNKNOWN_TRACKING_REASON } from './chunk-MESOOLF4.js';
-import { existsSync, statSync, appendFileSync, rmSync, mkdirSync, chmodSync, writeFileSync, accessSync, constants, openSync, readFileSync, closeSync, readdirSync, linkSync, lstatSync, fstatSync, readSync, realpathSync } from 'fs';
+import { existsSync, statSync, appendFileSync, rmSync, mkdirSync, chmodSync, writeFileSync, accessSync, constants, openSync, readFileSync, closeSync, readdirSync, lstatSync, fstatSync, readSync, realpathSync } from 'fs';
 import { join, isAbsolute, dirname, delimiter, sep } from 'path';
 import { once } from 'events';
 import { createServer } from 'net';
@@ -175,61 +175,7 @@ async function stopMicroVmCommand(runtime, state) {
     (signal) => runtime.vm.exec(state.vsockPath, { argv: ["/bin/sh", "-c", STOP_COMMAND_SCRIPT], user: "root", cwd: "/", env: { PATH: GUEST_PATH } }, { signal })
   );
 }
-function unitNameFor(buildId) {
-  return `outerlayer-build-${buildId}`;
-}
-function linkIn(buildDir2, name, source) {
-  const target = join(buildDir2, name);
-  rmSync(target, { force: true });
-  try {
-    linkSync(source, target);
-  } catch (err) {
-    if (err.code === "EXDEV") {
-      throw new Error(`${source} and ${buildDir2} are on different file systems, so the build's files cannot be linked into its jail`);
-    }
-    throw err;
-  }
-  chmodSync(source, 292);
-}
-async function startJailed(input) {
-  linkIn(input.buildDir, "kernel", input.kernel);
-  linkIn(input.buildDir, "rootfs.ext4", input.rootfs);
-  for (const name of input.sockets) {
-    try {
-      chmodSync(join(input.buildDir, name), 438);
-    } catch (err) {
-      if (err.code !== "ENOENT") throw err;
-    }
-  }
-  return input.client.start({ build: input.buildId, kind: input.kind, ...input.timeLimitMinutes === void 0 ? {} : { timeLimitMinutes: input.timeLimitMinutes } });
-}
-async function startJailedInto(state, input, save) {
-  state.jailed = { unit: unitNameFor(state.buildId), chroot: "" };
-  save();
-  try {
-    const started = await startJailed({ ...input, buildId: state.buildId, buildDir: state.buildDir });
-    state.jailed = { unit: started.unit, chroot: started.chroot };
-    state.vsockPath = started.vsock;
-  } catch (err) {
-    if (err instanceof HelperRefusal) {
-      delete state.jailed;
-      save();
-    }
-    throw err;
-  }
-  save();
-}
-async function stopJailed(helper, state) {
-  const probe = await helper.probe();
-  if (!probe.ok) throw new Error(`the build's unit ${state.jailed?.unit ?? unitNameFor(state.buildId)} could not be stopped, because there is no helper to ask: ${probe.detail}`);
-  try {
-    await probe.client.stop(state.buildId);
-  } catch (err) {
-    throw new Error(`the build's unit ${state.jailed?.unit ?? unitNameFor(state.buildId)} was not stopped: ${describeCallFailure(err)}`);
-  }
-}
-
-// src/runner/microvm/hooks.ts
+var MANAGED_NO_BUILDER_DISK_REASON = "this release of the CLI pins no builder root disk, and a managed runner builds its images in a builder microVM, never on the host. The build did not start; update the CLI";
 var DEFAULT_MEMORY = "8g";
 var DEFAULT_DISK = "40g";
 var DEFAULT_CPUS = 4;
@@ -287,12 +233,6 @@ function vmAlive(runtime, state) {
   if (state.jailed !== void 0) return runtime.vm.helper.alive(state.jailed.unit);
   return state.firecracker !== void 0 && runtime.vm.firecracker.alive(state.firecracker);
 }
-function makeBuildsDirPrivate(buildDir2) {
-  const builds = dirname(buildDir2);
-  const stat = statSync(builds);
-  if (stat.uid === process.getuid?.() && (stat.mode & 18) !== 0) chmodSync(builds, 448);
-}
-var MANAGED_UNJAILED_REASON = "the root helper does not answer, and a managed runner starts no build without the jailer. The build did not start; restore the helper with `outerlayer runner install --service --replace`";
 async function helperFor(runtime, log, managed) {
   const probe = await runtime.vm.helper.probe();
   if (probe.ok) {
@@ -368,6 +308,17 @@ async function provisionMicroVm(input) {
   const governing = await resolveGoverningSource({ config, repository, fetchImpl: input.fetchImpl });
   if (!governing.ok) return fail(governing.reason);
   const governingSource = governing.source;
+  const limits = {
+    cpus: config.build?.cpus ?? DEFAULT_CPUS,
+    memoryBytes: buildMemoryBytes(config),
+    diskBytes: parseSize(config.build?.disk ?? DEFAULT_DISK) ?? parseSize(DEFAULT_DISK)
+  };
+  let buildsInBuilder = imageBuildOf(config) === "vm";
+  if (buildsInBuilder && !vm.builderDiskPinned()) {
+    if (config.managed === true) return fail(MANAGED_NO_BUILDER_DISK_REASON);
+    log.line(`${tag} this release of the CLI pins no builder root disk, so the image builds on the host, as it does with runner.build.imageBuild set to host`);
+    buildsInBuilder = false;
+  }
   const obtained = await obtainImage({
     config,
     runtime,
@@ -380,10 +331,22 @@ async function provisionMicroVm(input) {
     aborted: input.aborted,
     deadlineMs: input.deadlineMs,
     now: input.now,
-    guestHelper: { path: assets.helper, sha256: assets.helperSha256 }
+    guestHelper: { path: assets.helper, sha256: assets.helperSha256 },
+    ...buildsInBuilder ? {
+      inBuilder: {
+        kernel: assets.kernel,
+        firecracker: assets.firecracker,
+        limits,
+        memory: config.build?.memory,
+        allowHosts: config.build?.allowHosts,
+        managed: config.managed === true,
+        timeLimitMinutes: config.timeLimitMinutes
+      }
+    } : {}
   });
   if (!obtained.ok) return obtained.aborted === true ? { ok: false, reason: obtained.reason, aborted: true } : fail(obtained.reason);
   const { report } = obtained.built;
+  const madeInBuilder = "rootfs" in obtained.built ? obtained.built.rootfs : void 0;
   const buildId = randomBytes(6).toString("hex");
   const buildDir2 = buildDir(config.configPath, buildId);
   const state = {
@@ -438,11 +401,16 @@ async function provisionMicroVm(input) {
   };
   if (input.aborted()) return bail("", true);
   let imageConfig;
-  try {
-    state.rootfs = await ensureRootfs({ host: vm.rootfs, runnerDir: runnerDirPath, imageId: report.imageId, memoryBytes: buildMemoryBytes(config) });
-    imageConfig = await vm.rootfs.imageConfig(report.imageId);
-  } catch (err) {
-    return bail(`the image could not be converted to a root disk: ${describeCallFailure(err)}`);
+  if (madeInBuilder !== void 0) {
+    state.rootfs = madeInBuilder.path;
+    imageConfig = { env: madeInBuilder.env, user: madeInBuilder.user };
+  } else {
+    try {
+      state.rootfs = await ensureRootfs({ host: vm.rootfs, runnerDir: runnerDirPath, imageId: report.imageId, memoryBytes: buildMemoryBytes(config) });
+      imageConfig = await vm.rootfs.imageConfig(report.imageId);
+    } catch (err) {
+      return bail(`the image could not be converted to a root disk: ${describeCallFailure(err)}`);
+    }
   }
   state.imageEnv = imageConfig.env;
   state.buildDisk = join(buildDir2, "build.ext4");
@@ -460,11 +428,6 @@ async function provisionMicroVm(input) {
   } catch (err) {
     return bail(`the tunnel could not start: ${describeCallFailure(err)}`);
   }
-  const limits = {
-    cpus: config.build?.cpus ?? DEFAULT_CPUS,
-    memoryBytes: buildMemoryBytes(config),
-    diskBytes: parseSize(config.build?.disk ?? DEFAULT_DISK) ?? parseSize(DEFAULT_DISK)
-  };
   const links = vsockLinks({ destinations: config.build?.destinations?.length ?? 0, builtIns: true });
   const served = input.leaseTimeLeftMs === void 0 ? links : [...links, LEASE_LINK];
   let leaseServer;
@@ -928,10 +891,15 @@ async function startCheckMicroVm(input) {
     return fail(err instanceof AssetError ? err.message : `the microVM's assets could not be had: ${describeCallFailure(err)}`);
   }
   if (abandoned()) return fail(ABANDONED);
-  try {
-    state.rootfs = await ensureRootfs({ host: vm.rootfs, runnerDir: runnerDirPath, imageId: built.imageId, memoryBytes: buildMemoryBytes(config) });
-  } catch (err) {
-    return fail(`the image could not be converted to a root disk: ${describeCallFailure(err)}`);
+  if (built.imageId.startsWith(ROOT_DISK_ID_PREFIX)) {
+    if (built.rootfs === void 0 || !existsSync(built.rootfs)) return fail("the build's root disk is no longer stored, so the check environment cannot start from it");
+    state.rootfs = built.rootfs;
+  } else {
+    try {
+      state.rootfs = await ensureRootfs({ host: vm.rootfs, runnerDir: runnerDirPath, imageId: built.imageId, memoryBytes: buildMemoryBytes(config) });
+    } catch (err) {
+      return fail(`the image could not be converted to a root disk: ${describeCallFailure(err)}`);
+    }
   }
   if (abandoned()) return fail(ABANDONED);
   state.buildDisk = join(buildDir2, "build.ext4");