@outerlayer/cli 0.33.0-next.20261022161023 → 0.33.0-next.20261022180022

package/dist/{agent-setup-2MJXGAZ5.js → agent-setup-4WKFXVOP.js}

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { keepHandWritten, runAgentSetup } from './chunk-2GHI2J26.js';
+export { keepHandWritten, runAgentSetup } from './chunk-VHRKGCBY.js';
 import './chunk-JHTJPQSL.js';
 import './chunk-KT4CN6OU.js';
 import './chunk-DY7Y7UT4.js';
 import './chunk-HJYBWJAS.js';
 import './chunk-ANPNT6PM.js';
-import './chunk-JZ4FXSLI.js';
+import './chunk-YMGSMPPW.js';
 import './chunk-UIUGTW5C.js';
-import './chunk-VQ2JGZSC.js';
+import './chunk-FLFK42YF.js';
 import './chunk-PJDQPF5N.js';
-import './chunk-JT3YO5MH.js';
-import './chunk-ESP5VZBD.js';
-import './chunk-HDSDUTX4.js';
+import './chunk-634F6J3Q.js';
+import './chunk-MBGS33SL.js';
+import './chunk-D5ZGMXUL.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-G63KT5I5.js';
@@ -26,7 +26,7 @@ import './chunk-TUSYOL2O.js';
 import './chunk-LJG6EMLJ.js';
 import './chunk-E6CO3MJE.js';
 import './chunk-VNVZDWO3.js';
-import './chunk-XD4ZCMA4.js';
+import './chunk-HACGUL52.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{bridge-3EG6Q34K.js → bridge-DMFMBDRG.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig } from './chunk-XTNMIV77.js';
-import './chunk-HDSDUTX4.js';
-import './chunk-XD4ZCMA4.js';
+export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig } from './chunk-TTACRX4N.js';
+import './chunk-D5ZGMXUL.js';
+import './chunk-HACGUL52.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{build-NCELVKHF.js → build-2ONBPS3M.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { KEY_PREFIX, TAG_HOST, buildRepositoryImage, metadataFromLabels, prepareImageBuild, writeRecord } from './chunk-IK6M37BI.js';
-import './chunk-IPJ6HR7E.js';
+export { KEY_PREFIX, TAG_HOST, buildRepositoryImage, metadataFromLabels, prepareImageBuild, writeRecord } from './chunk-7HMF7I3D.js';
+import './chunk-ZFJAQS3A.js';
 import './chunk-JBJTC3UU.js';
 export { RecipeError } from './chunk-3Z3MPR55.js';
 import './chunk-R6QCSHKC.js';
-import './chunk-ESP5VZBD.js';
-import './chunk-HDSDUTX4.js';
-import './chunk-XD4ZCMA4.js';
+import './chunk-MBGS33SL.js';
+import './chunk-D5ZGMXUL.js';
+import './chunk-HACGUL52.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{build-disk-5GIWYDOB.js → build-disk-PCDS676T.js}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DEFAULT_BUILD_DISK, DOCKER_CACHE_MS, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-MBE6FEQ3.js';
+export { DEFAULT_BUILD_DISK, DOCKER_CACHE_MS, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-JFRBPBD5.js';
 import './chunk-YYYRBYWG.js';
-import './chunk-S2IJQER5.js';
+import './chunk-LG2IQRTO.js';
 import './chunk-3Z3MPR55.js';
 import './chunk-R6QCSHKC.js';
 import './chunk-YJLHUKYS.js';
 import './chunk-5DNCFOXA.js';
-import './chunk-JT3YO5MH.js';
-import './chunk-ESP5VZBD.js';
-import './chunk-HDSDUTX4.js';
+import './chunk-634F6J3Q.js';
+import './chunk-MBGS33SL.js';
+import './chunk-D5ZGMXUL.js';
 import './chunk-E6CO3MJE.js';
-import './chunk-XD4ZCMA4.js';
+import './chunk-HACGUL52.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-22T16:41:55.061Z+a212c93","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-22T18:03:01.584Z+80747d3","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-EELBB7SI.js → builder-AIKWGJHP.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-S2IJQER5.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-LG2IQRTO.js';
 import './chunk-3Z3MPR55.js';
 import './chunk-R6QCSHKC.js';
 import './chunk-YJLHUKYS.js';
 import './chunk-5DNCFOXA.js';
-import './chunk-JT3YO5MH.js';
-import './chunk-ESP5VZBD.js';
-import './chunk-HDSDUTX4.js';
+import './chunk-634F6J3Q.js';
+import './chunk-MBGS33SL.js';
+import './chunk-D5ZGMXUL.js';
 import './chunk-E6CO3MJE.js';
-import './chunk-XD4ZCMA4.js';
+import './chunk-HACGUL52.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{check-EJKRXI2N.js → check-LGZOJYLS.js}

@@ -1,64 +1,64 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-HVIYKGK5.js';
-import './chunk-LWODW66U.js';
+import { probeCredentials } from './chunk-J5VNSW4W.js';
+import './chunk-VGIS2D3U.js';
 import './chunk-ZVB57WI6.js';
-import './chunk-LH3KULPL.js';
+import './chunk-QPAPHQZ7.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-E7R2GIAW.js';
-import './chunk-M5ZXOQYS.js';
+import './chunk-W4UFGYKQ.js';
 import './chunk-YKYCE4HY.js';
-import './chunk-CNRMP6EN.js';
-import './chunk-ELYHDWCC.js';
-import './chunk-XTNMIV77.js';
+import './chunk-5KO3TN2F.js';
+import './chunk-HAD7LYDL.js';
+import './chunk-TTACRX4N.js';
 import './chunk-I3LTIAOR.js';
-import './chunk-QJNFO7TQ.js';
-import './chunk-WHRR55PC.js';
-import './chunk-THTBXIK5.js';
+import './chunk-JUVUVXQZ.js';
+import './chunk-J6LFFZOY.js';
+import './chunk-EBX2DU2M.js';
 import './chunk-ESVW4MJY.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, managedProblems, managedFactsOf, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-XTBGPISI.js';
-import './chunk-3VGDZ23W.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, managedProblems, managedFactsOf, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-7SCEDWQP.js';
+import './chunk-O7MSQBTH.js';
 import './chunk-TBT347UY.js';
-import './chunk-FQW7TKIU.js';
-import './chunk-52C3SSNF.js';
-import './chunk-AESNEWYR.js';
-import { probeHelper, HELPER_ENV, helperSocketPath } from './chunk-D7ECJX4J.js';
+import './chunk-M7IA4JOX.js';
+import './chunk-HDD3BKAE.js';
+import './chunk-6KVKEZTH.js';
+import { probeHelper, HELPER_ENV, helperSocketPath } from './chunk-OKTLQTWH.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-IK6M37BI.js';
-import './chunk-IPJ6HR7E.js';
+import './chunk-7HMF7I3D.js';
+import './chunk-ZFJAQS3A.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-QQGZ5THT.js';
-import './chunk-HIGJTX5U.js';
-import './chunk-LCVR4UIS.js';
-import './chunk-533QGXGZ.js';
+import './chunk-XXVYHC6D.js';
+import './chunk-O5F376JJ.js';
+import './chunk-JKPJQNJF.js';
+import './chunk-PWB7EK4Z.js';
 import './chunk-TQMI335S.js';
-import { DEFAULT_UNIT_NAME } from './chunk-HBBCQ5NE.js';
-import './chunk-MBE6FEQ3.js';
+import { DEFAULT_UNIT_NAME } from './chunk-A6MLCH76.js';
+import './chunk-JFRBPBD5.js';
 import './chunk-YYYRBYWG.js';
-import './chunk-S2IJQER5.js';
+import './chunk-LG2IQRTO.js';
 import './chunk-3Z3MPR55.js';
 import './chunk-R6QCSHKC.js';
-import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-ALSE7YKX.js';
+import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-ZQ7VRXYM.js';
 import './chunk-UXYLWVTQ.js';
 import './chunk-YJLHUKYS.js';
-import './chunk-6JNCNHSV.js';
-import './chunk-C3XLVHN6.js';
-import './chunk-B3EE7OKK.js';
+import './chunk-KQFWTTG7.js';
+import './chunk-RLGSBR56.js';
+import './chunk-CMNAAKFD.js';
 import './chunk-EWVYQLD3.js';
 import './chunk-5DNCFOXA.js';
 import './chunk-HJYBWJAS.js';
 import './chunk-NSPRS7WK.js';
 import './chunk-G2JWZDFA.js';
 import './chunk-ANPNT6PM.js';
-import './chunk-JZ4FXSLI.js';
+import './chunk-YMGSMPPW.js';
 import './chunk-UIUGTW5C.js';
-import './chunk-VQ2JGZSC.js';
+import './chunk-FLFK42YF.js';
 import './chunk-PJDQPF5N.js';
-import './chunk-JT3YO5MH.js';
-import './chunk-ESP5VZBD.js';
-import { claudeEnvPath } from './chunk-HDSDUTX4.js';
-import './chunk-L3DUKDTR.js';
+import './chunk-634F6J3Q.js';
+import './chunk-MBGS33SL.js';
+import { claudeEnvPath } from './chunk-D5ZGMXUL.js';
+import './chunk-ZANK3WWF.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-2O5KA67H.js';
 import './chunk-BKO6JEZI.js';
@@ -78,7 +78,7 @@ import './chunk-TUSYOL2O.js';
 import './chunk-LJG6EMLJ.js';
 import './chunk-E6CO3MJE.js';
 import './chunk-VNVZDWO3.js';
-import { parseRunnerEnv } from './chunk-XD4ZCMA4.js';
+import { parseRunnerEnv } from './chunk-HACGUL52.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 import { readFileSync } from 'fs';

package/dist/{chunk-CNRMP6EN.js → chunk-5KO3TN2F.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-ESP5VZBD.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-MBGS33SL.js';
 import { readFileSync, existsSync, rmSync, mkdirSync, writeFileSync, renameSync } from 'fs';
 import { join } from 'path';
 

package/dist/{chunk-JT3YO5MH.js → chunk-634F6J3Q.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { hostKeyPath, runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-ESP5VZBD.js';
+import { hostKeyPath, runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-MBGS33SL.js';
 import { generateKeyPairSync, createPrivateKey, createPublicKey, sign } from 'crypto';
 import { existsSync, mkdirSync, writeFileSync, readFileSync } from 'fs';
 

package/dist/{chunk-AESNEWYR.js → chunk-6KVKEZTH.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { MIN_ENGINE_MAJOR } from './chunk-D7ECJX4J.js';
-import { runnerImageVersion } from './chunk-533QGXGZ.js';
+import { MIN_ENGINE_MAJOR } from './chunk-OKTLQTWH.js';
+import { runnerImageVersion } from './chunk-PWB7EK4Z.js';
 import { firecrackerArch, MICROVM_ARCHES, guestAssetsPinned } from './chunk-R6QCSHKC.js';
 import { spawnSync } from 'child_process';
 import { existsSync, accessSync, constants, statSync, readFileSync } from 'fs';

package/dist/{chunk-IK6M37BI.js → chunk-7HMF7I3D.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { claimPidFile, RunnerAlreadyRunningError, releasePidFile } from './chunk-IPJ6HR7E.js';
+import { claimPidFile, RunnerAlreadyRunningError, releasePidFile } from './chunk-ZFJAQS3A.js';
 import { startTimeOf } from './chunk-JBJTC3UU.js';
 import { RecipeError, locateRecipe, readRecipe, assertBuildable, writeSanitizedRecipe, classifyProperties, SANITIZED_NAME } from './chunk-3Z3MPR55.js';
 import { GH_VERSION, VOICE_PACK_FILES, VOICE_PACK_VERSION, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, TINI_SHA256, TINI_VERSION, CLAUDE_CODE_VERSION, NODE_IMAGE, DEFAULT_BASE_IMAGE, MEDIA_PINS, PLAYWRIGHT_VERSION } from './chunk-R6QCSHKC.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, repoCacheDir, imagesDir, attemptStamp, runnerDir, rootfsPathFor } from './chunk-ESP5VZBD.js';
-import { PROXY_WARNING_FLAG, withGitConfig, tokenHeader } from './chunk-HDSDUTX4.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, repoCacheDir, imagesDir, imageBuildLogsDir, attemptStamp, runnerDir, rootfsPathFor } from './chunk-MBGS33SL.js';
+import { PROXY_WARNING_FLAG, withGitConfig, tokenHeader } from './chunk-D5ZGMXUL.js';
 import { RELAY_ID, RELAY_USER } from './chunk-MESOOLF4.js';
 import { mkdirSync, rmSync, writeFileSync, existsSync, mkdtempSync, cpSync, readFileSync, readdirSync, lstatSync, readlinkSync } from 'fs';
 import { tmpdir } from 'os';
@@ -423,7 +423,7 @@ async function prepareImageBuild(opts) {
   const baseImage = opts.defaultBaseImage ?? DEFAULT_BASE_IMAGE;
   const cacheDir = repoCacheDir(opts.configPath, owner, name);
   const repoRecords = join(imagesDir(opts.configPath), owner, name);
-  const logPath = join(repoRecords, "builds", `${attemptStamp(now())}.log`);
+  const logPath = join(imageBuildLogsDir(opts.configPath, owner, name), `${attemptStamp(now())}.log`);
   const lockPath = join(repoRecords, LOCK_NAME);
   const self = { pid: process.pid, start: startTimeOf(process.pid) ?? "" };
   mkdirSync(repoRecords, { recursive: true, mode: RUNNER_DIR_MODE });

package/dist/{chunk-XTBGPISI.js → chunk-7SCEDWQP.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isPlaceholderCommand } from './chunk-FQW7TKIU.js';
-import { describeCallFailure } from './chunk-LCVR4UIS.js';
-import { checkFit } from './chunk-HBBCQ5NE.js';
-import { realBuildDiskProbe, checkDiskFit, DEFAULT_BUILD_DISK } from './chunk-MBE6FEQ3.js';
+import { isPlaceholderCommand } from './chunk-M7IA4JOX.js';
+import { describeCallFailure } from './chunk-JKPJQNJF.js';
+import { checkFit } from './chunk-A6MLCH76.js';
+import { realBuildDiskProbe, checkDiskFit, DEFAULT_BUILD_DISK } from './chunk-JFRBPBD5.js';
 import { builderDiskPinned } from './chunk-R6QCSHKC.js';
-import { builtinKind, imageBuildOf } from './chunk-ALSE7YKX.js';
-import { WorkCommandError, getJson } from './chunk-6JNCNHSV.js';
+import { builtinKind, imageBuildOf } from './chunk-ZQ7VRXYM.js';
+import { WorkCommandError, getJson } from './chunk-KQFWTTG7.js';
 import { sanitizeTerminal } from './chunk-EWVYQLD3.js';
-import { signerFor } from './chunk-JT3YO5MH.js';
-import { CLAUDE_CREDENTIAL_VARIABLES, claudeCredential, claudeCredentialVariablesSet } from './chunk-HDSDUTX4.js';
+import { signerFor } from './chunk-634F6J3Q.js';
+import { CLAUDE_CREDENTIAL_VARIABLES, claudeCredential, claudeCredentialVariablesSet } from './chunk-D5ZGMXUL.js';
 import { closeSync, openSync, constants } from 'fs';
 import { totalmem } from 'os';
 

package/dist/{chunk-HBBCQ5NE.js → chunk-A6MLCH76.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { builtinKind } from './chunk-ALSE7YKX.js';
+import { builtinKind } from './chunk-ZQ7VRXYM.js';
 import { parseSize } from './chunk-YJLHUKYS.js';
-import { runnerDir } from './chunk-ESP5VZBD.js';
-import { CLAUDE_CREDENTIAL_ID, CLAUDE_ENV_FILE, credentialLineIn, withoutCredentialLines } from './chunk-HDSDUTX4.js';
-import { FD_SLOTS_PER_BUILD, FD_STORE_ENV } from './chunk-XD4ZCMA4.js';
+import { runnerDir } from './chunk-MBGS33SL.js';
+import { CLAUDE_CREDENTIAL_ID, CLAUDE_ENV_FILE, credentialLineIn, withoutCredentialLines } from './chunk-D5ZGMXUL.js';
+import { FD_SLOTS_PER_BUILD, FD_STORE_ENV } from './chunk-HACGUL52.js';
 import { existsSync, readFileSync, writeFileSync, chmodSync, renameSync } from 'fs';
 import { dirname, join } from 'path';
 import { spawnSync } from 'child_process';

package/dist/{chunk-B3EE7OKK.js → chunk-CMNAAKFD.js}

@@ -4,7 +4,7 @@ import { sanitizeTerminal } from './chunk-EWVYQLD3.js';
 import { remoteLookupFailed } from './chunk-5DNCFOXA.js';
 import { isAgentsMdLayout } from './chunk-HJYBWJAS.js';
 import { DEFAULT_DASHBOARD } from './chunk-NSPRS7WK.js';
-import { cliFetch, resolveGatewayCredentials } from './chunk-VQ2JGZSC.js';
+import { cliFetch, resolveGatewayCredentials } from './chunk-FLFK42YF.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
 import { findGitDirs, writeRepoConnection, readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';

package/dist/{chunk-HDSDUTX4.js → chunk-D5ZGMXUL.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { parseRunnerEnv } from './chunk-XD4ZCMA4.js';
+import { parseRunnerEnv } from './chunk-HACGUL52.js';
 import { TARGET_TUNNEL, TARGET_LEASE, destinationTarget } from './chunk-MESOOLF4.js';
 import { readFileSync, existsSync, unlinkSync, chmodSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-TA6TFYAN.js → chunk-DZGLRVS3.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { launcherPath, writeLauncher, LauncherWriteError, pathNotes } from './chunk-A3H27SYX.js';
-import { currentVersion, currentLink, isInLayout, packageRootIn, versionDir, switchCurrent, execStartLine } from './chunk-3VGDZ23W.js';
+import { launcherPath, writeLauncher, LauncherWriteError, pathNotes } from './chunk-Y53T3QZM.js';
+import { currentVersion, currentLink, isInLayout, packageRootIn, versionDir, switchCurrent, execStartLine } from './chunk-O7MSQBTH.js';
 import { compareVersions } from './chunk-TQMI335S.js';
-import { RUNNER_DIR_MODE } from './chunk-ESP5VZBD.js';
+import { RUNNER_DIR_MODE } from './chunk-MBGS33SL.js';
 import { realpathSync, readFileSync, mkdirSync, rmSync, cpSync, existsSync } from 'fs';
 import { dirname, sep, join } from 'path';
 

package/dist/{chunk-THTBXIK5.js → chunk-EBX2DU2M.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
-import { autoConnect, detectActiveSession } from './chunk-C3XLVHN6.js';
+import { autoConnect, detectActiveSession } from './chunk-RLGSBR56.js';
 import { acquireSpoolLockAt } from './chunk-EWVYQLD3.js';
 import { resolveRepoIdentity } from './chunk-5DNCFOXA.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-VQ2JGZSC.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-FLFK42YF.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { StepNameSchema, StepBodySchema } from './chunk-E6CO3MJE.js';

package/dist/{chunk-VQ2JGZSC.js → chunk-FLFK42YF.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { readCloudConfigStrict, readCloudConfig, cloudConfigPath } from './chunk-PJDQPF5N.js';
-import { signRunnerRequest, signerFor } from './chunk-JT3YO5MH.js';
+import { signRunnerRequest, signerFor } from './chunk-634F6J3Q.js';
 import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
 import { PLAIN_VERSION, recordCliVersion, removeRecordedVersion } from './chunk-5BHIBJDA.js';
 import { resolvePackageVersion } from './chunk-RA3O54FC.js';

package/dist/{chunk-QSSYXK6C.js → chunk-FSFAP7GA.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
-import { detectActiveSession, autoConnect, transcriptPathForSession } from './chunk-C3XLVHN6.js';
+import { detectActiveSession, autoConnect, transcriptPathForSession } from './chunk-RLGSBR56.js';
 import { resolveRepoIdentity, defaultProjectsDir, findTranscripts, sessionIdFromPath, scrubText } from './chunk-5DNCFOXA.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-VQ2JGZSC.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-FLFK42YF.js';
 import { readLatestProvenanceForSession } from './chunk-ZJSNLVCE.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';

package/dist/{chunk-6WUQSARX.js → chunk-GDI6QGRH.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { checkStarterFiles, contextIsGoverned } from './chunk-BJQ25STI.js';
-import { fleetCheck, checkBuildSkill, checkMachineSkills, checkCommittedMaintainedSkills, checkMaintainedReferences } from './chunk-72BIONOT.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-6JNCNHSV.js';
-import { isLinkedRepository } from './chunk-B3EE7OKK.js';
+import { fleetCheck, checkBuildSkill, checkMachineSkills, checkCommittedMaintainedSkills, checkMaintainedReferences } from './chunk-LOYLFW4I.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-KQFWTTG7.js';
+import { isLinkedRepository } from './chunk-CMNAAKFD.js';
 import { sanitizeTerminal } from './chunk-EWVYQLD3.js';
 import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-5DNCFOXA.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { checkFormerSkillNames } from './chunk-UIUGTW5C.js';
-import { resolveGatewayCredentials, defaultFetch } from './chunk-VQ2JGZSC.js';
-import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-L3DUKDTR.js';
+import { resolveGatewayCredentials, defaultFetch } from './chunk-FLFK42YF.js';
+import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-ZANK3WWF.js';
 import { readStatuslineState, STATE_FRESH_MS } from './chunk-I7RZHMXW.js';
 import { hookCommandEscapesControlPlane, CONTROL_PLANE_DIR_VARIABLE } from './chunk-HCVLP7XA.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
@@ -1190,8 +1190,8 @@ function doctorExitCode(checks) {
 
 // src/doctor-report.ts
 async function gatherDoctorChecks() {
-  const { DEFAULT_BUILD_DISK } = await import('./build-disk-5GIWYDOB.js');
-  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-CUJ3Q4L2.js');
+  const { DEFAULT_BUILD_DISK } = await import('./build-disk-PCDS676T.js');
+  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-WAIYUZUG.js');
   const configPath = defaultRunnerConfigPath();
   const runnerHost = hasRunnerBlock(configPath);
   const hooks = (() => {
@@ -1212,7 +1212,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-JUR62PMF.js');
+    const { runnerHostChecks } = await import('./doctor-C3JKNKEJ.js');
     const gateway = (() => {
       try {
         const { url, apiKey, appId } = loadRunnerConfig(configPath);
@@ -1239,8 +1239,8 @@ async function gatherDoctorChecks() {
     const service = await (async () => {
       const { existsSync: existsSync3 } = await import('fs');
       if (process.platform !== "linux" || !existsSync3("/run/systemd/system")) return void 0;
-      const { inspectService, realInspectProbes } = await import('./inspect-L7JIBK3Y.js');
-      const { DEFAULT_UNIT_NAME } = await import('./install-3DBYJITP.js');
+      const { inspectService, realInspectProbes } = await import('./inspect-DNLXTXLA.js');
+      const { DEFAULT_UNIT_NAME } = await import('./install-4OPPUC72.js');
       const { dirname: dirname2 } = await import('path');
       return inspectService(DEFAULT_UNIT_NAME, dirname2(configPath), realInspectProbes());
     })();

package/dist/{chunk-XD4ZCMA4.js → chunk-HACGUL52.js}

@@ -64,7 +64,10 @@ function realFdStorePort(options = {}) {
   const command = options.command ?? "systemd-notify";
   const spawnFn = options.spawn ?? spawn;
   let inherited;
+  let held;
   let version;
+  const inheritedNames = () => inherited ??= parseListenFds(env, pid);
+  const heldNames = () => held ??= new Set(inheritedNames().keys());
   return {
     async status() {
       if (env.NOTIFY_SOCKET === void 0 || env.NOTIFY_SOCKET === "") return { ok: false, reason: "NOTIFY_SOCKET is not set, so this runner was not started by a service that accepts descriptors" };
@@ -79,16 +82,22 @@ function realFdStorePort(options = {}) {
     async push(name, server) {
       const fd = listenFdOf(server);
       if (fd === void 0) throw new Error(`${name} has no descriptor to store`);
+      const size = Number(env[FD_STORE_ENV]);
+      const names = heldNames();
+      if (Number.isInteger(size) && names.size >= size) {
+        throw new Error(`the descriptor store is full: it holds ${names.size} descriptors, the size the service's unit sets (FileDescriptorStoreMax=${size})`);
+      }
       const ran = await run(spawnFn, command, [`--fd=${LISTEN_FDS_START}`, `--fdname=${name}`, "FDSTORE=1"], fd);
       if (ran.status !== 0) throw new Error(`storing ${name} failed${ran.status === null ? "" : ` (exit ${ran.status})`}: ${ran.stderr.trim().split("\n")[0] ?? ""}`);
+      names.add(name);
     },
     async remove(name) {
-      const ran = await run(spawnFn, command, [`--fdname=${name}`, "FDSTOREREMOVE=1"]);
+      const ran = await run(spawnFn, command, ["FDSTOREREMOVE=1", `FDNAME=${name}`]);
       if (ran.status !== 0) throw new Error(`removing ${name} from the store failed${ran.status === null ? "" : ` (exit ${ran.status})`}: ${ran.stderr.trim().split("\n")[0] ?? ""}`);
+      heldNames().delete(name);
     },
     inherited() {
-      inherited ??= parseListenFds(env, pid);
-      return inherited;
+      return inheritedNames();
     },
     listenOn: listenOnFd
   };

package/dist/{chunk-ELYHDWCC.js → chunk-HAD7LYDL.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { BRIDGE_ADDRESS, TUNNEL_PORT, BRIDGE_CIDR } from './chunk-XTNMIV77.js';
+import { BRIDGE_ADDRESS, TUNNEL_PORT, BRIDGE_CIDR } from './chunk-TTACRX4N.js';
 import { startTimeOf } from './chunk-JBJTC3UU.js';
-import { EXEC_PORT } from './chunk-HIGJTX5U.js';
-import { RELAY_PORT } from './chunk-HDSDUTX4.js';
+import { EXEC_PORT } from './chunk-O5F376JJ.js';
+import { RELAY_PORT } from './chunk-D5ZGMXUL.js';
 import { spawn, spawnSync } from 'child_process';
 import { symlinkSync, lstatSync, writeFileSync, chmodSync, mkdirSync } from 'fs';
 

package/dist/{chunk-52C3SSNF.js → chunk-HDD3BKAE.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { DEFAULT_UNIT_NAME } from './chunk-HBBCQ5NE.js';
-import { RUNNER_FILE_MODE } from './chunk-ESP5VZBD.js';
-import { claudeEnvPath, withoutCredentialLines } from './chunk-HDSDUTX4.js';
-import { parseRunnerEnv } from './chunk-XD4ZCMA4.js';
+import { DEFAULT_UNIT_NAME } from './chunk-A6MLCH76.js';
+import { RUNNER_FILE_MODE } from './chunk-MBGS33SL.js';
+import { claudeEnvPath, withoutCredentialLines } from './chunk-D5ZGMXUL.js';
+import { parseRunnerEnv } from './chunk-HACGUL52.js';
 import { existsSync, readFileSync, writeFileSync, renameSync, rmSync } from 'fs';
 import { join, dirname } from 'path';
 

package/dist/{chunk-HVIYKGK5.js → chunk-J5VNSW4W.js}

@@ -1,32 +1,32 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, sampleGuest, foldSample, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, GUEST_USAGE_INTERVAL_MS, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-LWODW66U.js';
+import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, sampleGuest, foldSample, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, GUEST_USAGE_INTERVAL_MS, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-VGIS2D3U.js';
 import { JOB_STATE_FORMAT, readsJobState, jobStateFormatOf } from './chunk-ZVB57WI6.js';
-import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-LH3KULPL.js';
+import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-QPAPHQZ7.js';
 import { decideInstalledSwitch } from './chunk-3JVYMD4G.js';
 import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-E7R2GIAW.js';
-import { fitImageBuildMemory } from './chunk-M5ZXOQYS.js';
+import { fitImageBuildMemory } from './chunk-W4UFGYKQ.js';
 import { RUNNER_PROTOCOL } from './chunk-YKYCE4HY.js';
-import { writePendingUpdate } from './chunk-CNRMP6EN.js';
-import { currentSkillCommand, formerSkillProblem, realBlockedProbes, checkBlocked } from './chunk-XTBGPISI.js';
-import { writeMarker, readMarker, currentVersion, removeMarker, entryIn, versionDir, startedThroughCurrent, switchCurrent, isInLayout, cleanVersions, stagingDir } from './chunk-3VGDZ23W.js';
+import { writePendingUpdate } from './chunk-5KO3TN2F.js';
+import { currentSkillCommand, formerSkillProblem, realBlockedProbes, checkBlocked } from './chunk-7SCEDWQP.js';
+import { writeMarker, readMarker, currentVersion, removeMarker, entryIn, versionDir, startedThroughCurrent, switchCurrent, isInLayout, cleanVersions, stagingDir } from './chunk-O7MSQBTH.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandExec, setUpRunnerCgroup, sweepImageBuilders, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-D7ECJX4J.js';
-import { claimPidFile, writePidFile, readPidFile, releasePidFile } from './chunk-IPJ6HR7E.js';
+import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandExec, setUpRunnerCgroup, sweepImageBuilders, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-OKTLQTWH.js';
+import { claimPidFile, writePidFile, readPidFile, releasePidFile } from './chunk-ZFJAQS3A.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
-import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-LCVR4UIS.js';
-import { tagToPull, pullInstruction, imageTag, writeUpdateStatus } from './chunk-533QGXGZ.js';
+import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-JKPJQNJF.js';
+import { tagToPull, pullInstruction, imageTag, writeUpdateStatus } from './chunk-PWB7EK4Z.js';
 import { isVersion, compareVersions, satisfiesRange } from './chunk-TQMI335S.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
-import { writeJobFile, ensureRunnerIdentity, readJobFile, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, BUILD_LABEL, RUNNER_LABEL, readJobFileChecked } from './chunk-S2IJQER5.js';
-import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-ALSE7YKX.js';
+import { writeJobFile, ensureRunnerIdentity, readJobFile, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, BUILD_LABEL, RUNNER_LABEL, readJobFileChecked } from './chunk-LG2IQRTO.js';
+import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-ZQ7VRXYM.js';
 import { exceedsDisk } from './chunk-YJLHUKYS.js';
-import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-6JNCNHSV.js';
-import { loadHostKey, ensureHostKey, signerFor } from './chunk-JT3YO5MH.js';
-import { RUNNER_DIR_MODE, runnerDir, buildDir, attemptStamp, jobDir, RUNNER_FILE_MODE, jobsDir, pidFilePath, spoolDir, imagesDir, rootfsDir, builderCacheDiskPath } from './chunk-ESP5VZBD.js';
-import { parseClaimIdentity, parseClaimedRepositories, parseUnreachable, repositoriesOf, primaryOf, sharedUserEnvironment, JOB_MOUNT, takeClaudeCredential, heldClaudeCredential, currentClaudeCredential } from './chunk-HDSDUTX4.js';
+import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-KQFWTTG7.js';
+import { loadHostKey, ensureHostKey, signerFor } from './chunk-634F6J3Q.js';
+import { RUNNER_DIR_MODE, runnerDir, buildDir, attemptStamp, jobDir, RUNNER_FILE_MODE, jobsDir, pidFilePath, spoolDir, imagesDir, rootfsDir, builderCacheDiskPath } from './chunk-MBGS33SL.js';
+import { parseClaimIdentity, parseClaimedRepositories, parseUnreachable, repositoriesOf, primaryOf, sharedUserEnvironment, JOB_MOUNT, takeClaudeCredential, heldClaudeCredential, currentClaudeCredential } from './chunk-D5ZGMXUL.js';
 import { resolveVersion } from './chunk-RA3O54FC.js';
-import { fdName } from './chunk-XD4ZCMA4.js';
+import { fdName } from './chunk-HACGUL52.js';
 import { COMMAND_LOST_REASON, CONTAINER_STOPPED_REASON } from './chunk-MESOOLF4.js';
 import { randomBytes } from 'crypto';
 import { mkdirSync, existsSync, chmodSync, writeFileSync, renameSync, statSync, readdirSync, readFileSync, closeSync, rmSync, lstatSync } from 'fs';
@@ -1837,7 +1837,7 @@ var CLAIM_REFUSAL_CODES = new Set(
   "pull_request_from_fork pull_request_on_default_branch pull_request_ambiguous pull_request_repository_not_connected repository_not_reachable branch_claimed_elsewhere".split(" ")
 );
 async function tryClaimAndStart(state, item, queue) {
-  const { postJson: postJson2 } = await import('./work-cmd-DYM67Z3F.js');
+  const { postJson: postJson2 } = await import('./work-cmd-IGYK3MVP.js');
   const log = logOf(state);
   const hostKey = await loadHostKey(state.config.configPath);
   const claim = await retrySend(
@@ -3033,7 +3033,7 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
       check: update.check ? () => update.check(configPath) : async () => {
         const held = heldClaudeCredential();
         const env = held === void 0 ? process.env : { ...process.env, [held.variable]: held.value };
-        return (await import('./check-EJKRXI2N.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
+        return (await import('./check-LGZOJYLS.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
       },
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log