@outerlayer/cli 0.33.0-next.20261023154943 → 0.33.1-next.20261023182548

package/CHANGELOG.md

@@ -1,5 +1,41 @@
 # @outerlayer/cli
 
+## 0.33.0
+
+### Minor Changes
+
+- ff838ea: Add `--compare <manifest>` to `outerlayer emit demo`. It takes a second run of the same demo and compares the stills taken after each check. The demo record, now version 2, marks each chapter `yes`, `no` or `not checked`, and names the step and region of a difference. `emit demo` reads manifests of version 1 and 2.
+- 432eeee: The demo manifest, version 3, names the test file that recorded the demo, and `outerlayer emit demo` stores it in the demo record. `emit demo --replaces <record id>` retires the old demo, and `outerlayer work demo --item <n>` prints the newest demo record. The amend skill records the demo again after it pushes.
+- 82d4e55: Add `demo.screenshot()` to `@outerlayer/playwright`. A demo test calls it where the result of a screenshot criterion shows. The manifest, now version 4, lists the frame. `outerlayer emit demo` stores the frame as a screenshot of the criterion when the criterion declares `screenshot` and every check of the chapter passed. It stores no frame in any other case, and says why. The demo record gains the stored frame's artifact id, and `--replaces` retires the old frame.
+- 68f0cc6: Add `outerlayer emit demo <manifest>`. It cuts a recorded video into one WebM clip for each chapter, narrates each chapter on your machine, and emits each clip as a video artifact. A chapter whose checks all passed is bound to its criterion. The first narrated run downloads a voice pack of about 400 MB to `~/.outerlayer/voice/`; `--no-narration` needs no download. `demo` is now a reserved emit name, so a validator file cannot declare it.
+- 2b9bc47: `outerlayer emit demo` uploads a demo's video once, and each chapter's proof is a time range of it, so a reviewer gets the whole demo with no extra storage. A recording over 8 MiB still falls back to one clip for each chapter. In `emit demo --json`, `clips` stays and each entry adds `range`, and a new `video` field names the whole video's artifact id or says it was left out for its size. The demo record is version 3.
+- 9eb87e9: On a `builtin:vm` runner, the repository's image now builds in a builder microVM that has no network device. A Dockerfile or devcontainer step reaches only the public hosts that `runner.build.allowHosts` lists. Set `runner.build.imageBuild` to `host` to build in the host's Docker, for example to pull from a private registry. A managed runner refuses `host`. The runner downloads its tools layer's pinned files on the host and checks each against its sha256: `gh`, `tini`, FFmpeg and the narration voice pack. So `allowHosts` does not need their hosts. When `runner.build.disk` changes, the next image build gets a new cache disk of that size. An image build in a builder microVM needs a `runner.build.disk` of `20g` or more. Before each one, the runner empties the layer cache if less than half of the cache disk is free, and a failed unpack names the free space.
+- 6ede2b7: In a microVM build, every program's TCP connections go through the runner's tunnel, including those of Maven, Gradle, `psql` and `ssh`, with no proxy settings. The tunnel applies `allowHosts` and refuses private ranges as before. No DNS query or UDP packet leaves the microVM.
+- beeb073: A runner build whose command runs `/build` now stops before its agent starts when the clone and the governed context hold no `build` skill, and the release says why. The runner log names each route it serves a build. The release records the requests and failures of each route. `outerlayer context show` prints the instructions and skills that a repository's builds receive. `outerlayer doctor` names a skill folder that a `.gitignore` rule keeps out of git. When several factories fit a repository, `outerlayer connect` and `outerlayer work build` use the one the config file names. `outerlayer init` treats a repository as set up only when `.outerlayer/skills/` or `.outerlayer/AGENTS.md` exists. The default build image includes `jq`.
+- cbfef98: A runner short of disk runs as many builds as fit instead of none. It also frees its image-build cache's unused space after each image build.
+- 8818aa0: `outerlayer spec edit` records the new body's criteria on the issue's work item, so the item is held to the criteria the issue states. Inside an agent session the edit still happens, and the command prints the `emit criteria` command to run yourself. A build that finds the item holds other criteria than the issue now reports a step on the item's Activity tab that says so.
+- 4fc4b3d: The evidence and build skills record every video proof as a chapter of the item's one demo, with `outerlayer emit demo`, so the Criteria tab plays the demo as one narrated video. A video is emitted on its own only when Playwright cannot drive the flow.
+- 4c51ec6: `outerlayer work proofs` lists each proof an item declares as current, out of date or missing at the checkout's head. It exits 1 when any proof is left, and 2 when it cannot tell. The build and amend skills run it before they end.
+
+### Patch Changes
+
+- a212c93: The shipped skills tell the agent to write the `npx -y @outerlayer/cli` fallback in full each time, because zsh runs a command kept in a shell variable as one command name and fails with exit 127.
+- 671ceda: A governed build fetches its control plane before the image is built, so a failed fetch ends the build in seconds. The runner tries a failed fetch once more, gives each fetch 30 seconds, and names a refused credential only when git refused it. Other failures give git's error or the time limit.
+- 04c1646: The default build image, used for a repository with no devcontainer configuration, now holds a C compiler, make, Python with venv and pip, unzip and jq.
+- fe21b06: The default build image, used for a repository with no devcontainer configuration, now holds Chromium, its system libraries and the Playwright video encoder, so a build can capture screenshots and videos as proof.
+- f4b9d9c: `outerlayer emit demo` gives every clip of a narrated demo an audio track as long as the clip. Silence follows each line, and a chapter with no line gets a silent track, so clips played one after another keep each line with its chapter.
+- d31f998: MicroVM builds keep running when their runner restarts, however many builds the runner has run before. The runner also logs when its service's descriptor store is full, and names each descriptor it could not take out.
+- 701260a: Maven 3.9 and later in a runner build reaches Maven Central through the runner's tunnel, with no settings file of your own.
+- 3d54e29: A microVM build command that exits before it reads all of its input reports its own exit status. Before, the runner could report a connection error, "write EPIPE", instead.
+- 80747d3: A microVM build no longer fails while its image builds with "the exec agent could not be reached: write EPIPE". When an image build fails because the builder's Docker engine panicked, the error now shows the engine's panic line.
+- 45d3a2f: A launch that replaces a checkout's skill link directory tries again to remove the old one when something was added to it during the removal, so no `.old-*` directory is left behind.
+- 48425af: The runner claims nothing while its builds' disks cannot all fit on the host, and `outerlayer doctor` says so.
+- 82b31ff: Runner housekeeping removes the tagged images the runner built that no image record names and no unfinished build uses, once they are an hour old, with the root disks made from them. Images left by an earlier way of building, or by pruned records, no longer fill the disk.
+- 0c94177: A runner that fails a start-up check before its first heartbeat now sends one start-up report to OuterLayer. This includes the runner image's check of the Docker that the container reaches, and the work on builds that an earlier runner left. The report holds the host name, the CLI version, the failed check and the error message, with terminal control codes and secrets removed. The runner sends no report when another runner already runs on the same config, or when the gateway refused its key. It waits at most 5 seconds for the report. A gateway that predates the report ignores it, and the runner still stops with the same error.
+- 5648b3a: A runner reports whether it can update itself, and why not. When the gateway refuses a claim because the runner's version is too old, the runner logs the lowest version it accepts and the step that updates it, once. The step matches how the runner runs. A claim carries the CLI's version, so `outerlayer work claim` is not refused for an old runner on the same machine.
+- f2e27cb: A build gives every criterion with no stated proof a proof from what it promises: a video for a flow a person sees, a screenshot for one state, and a test for an outcome no screen shows. The `spec` and `writing-specs` skills ask for a proof form on every criterion a user can see.
+- b42151d: A Claude Code session's stored cost counts each model request once. When Claude Code ran a tool call while a reply still streamed, the reply's tokens were counted once for each tool call, and the session cost read up to 70% too high.
+
 ## 0.32.0
 
 ### Minor Changes

package/dist/{build-SEAQVLD5.js → build-LSU25G3M.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { KEY_PREFIX, TAG_HOST, buildRepositoryImage, metadataFromLabels, prepareImageBuild, writeRecord } from './chunk-YXHKCHWG.js';
+export { KEY_PREFIX, TAG_HOST, buildRepositoryImage, metadataFromLabels, prepareImageBuild, writeRecord } from './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 export { RecipeError } from './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-PA6CK6WQ.js';
 import './chunk-BALIE3BA.js';
 import './chunk-HACGUL52.js';

package/dist/{build-disk-ECTLWTPC.js → build-disk-3SSDZAA4.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK, DOCKER_CACHE_MS, allocatedBytes, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+export { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK, DOCKER_CACHE_MS, allocatedBytes, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-NIY2UBT6.js';
 import './chunk-SOI6K5DY.js';
 import './chunk-PA6CK6WQ.js';

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-23T15:51:40.272Z+f2e27cb","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-23T18:27:24.825Z+a7bdcad","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-LUPHKUFM.js → builder-WBYLD47N.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-OGMXVPCS.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-NIY2UBT6.js';
 import './chunk-SOI6K5DY.js';
 import './chunk-PA6CK6WQ.js';

package/dist/{check-XPMN4GHD.js → check-KWAVBL4Q.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-YY3OQJ4X.js';
+import { probeCredentials } from './chunk-AL7K5RZJ.js';
 import './chunk-GH246BGV.js';
 import './chunk-57L2YAJA.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-E7R2GIAW.js';
-import './chunk-RZOO7X4G.js';
-import './chunk-2LFWCIIE.js';
+import './chunk-LUQZWSGR.js';
+import './chunk-LMDOA3P4.js';
 import './chunk-ZVB57WI6.js';
 import './chunk-DA3PLB5N.js';
 import './chunk-HVRQQOMH.js';
@@ -16,13 +16,13 @@ import './chunk-7IFYI7XF.js';
 import './chunk-D3EDZPJR.js';
 import './chunk-7UPMYRPS.js';
 import './chunk-ESVW4MJY.js';
-import { managedProblems, managedFactsOf } from './chunk-VMIOUVJF.js';
+import { managedProblems, managedFactsOf } from './chunk-Y45JWNCG.js';
 import './chunk-NBZ7XBT6.js';
 import './chunk-TBT347UY.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, probeHelper, HELPER_ENV, helperSocketPath, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-4YLL2E7Y.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, probeHelper, HELPER_ENV, helperSocketPath, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-MEF4FNS6.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-EXZACZ2P.js';
-import './chunk-YXHKCHWG.js';
+import './chunk-FC6R435X.js';
+import './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
@@ -31,12 +31,12 @@ import './chunk-L26V6ILJ.js';
 import './chunk-Z57X4KNC.js';
 import './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import { DEFAULT_UNIT_NAME } from './chunk-EHOFFTVX.js';
-import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+import { DEFAULT_UNIT_NAME } from './chunk-OG6Z3SU7.js';
+import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-VSLJ6PPG.js';
 import './chunk-IP7BIBXJ.js';
 import './chunk-HLZMAJJD.js';

package/dist/{chunk-YY3OQJ4X.js → chunk-AL7K5RZJ.js}

@@ -4,22 +4,22 @@ import { writePendingUpdate } from './chunk-GH246BGV.js';
 import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-57L2YAJA.js';
 import { decideInstalledSwitch } from './chunk-3JVYMD4G.js';
 import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-E7R2GIAW.js';
-import { reportFailedStart, fitImageBuildMemory } from './chunk-RZOO7X4G.js';
-import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, readProvisionOut, workdirProblem, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, startSender, finishJob, sampleGuest, foldSample, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, GUEST_USAGE_INTERVAL_MS, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-2LFWCIIE.js';
+import { reportFailedStart, fitImageBuildMemory } from './chunk-LUQZWSGR.js';
+import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, readProvisionOut, workdirProblem, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, startSender, finishJob, sampleGuest, foldSample, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, GUEST_USAGE_INTERVAL_MS, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-LMDOA3P4.js';
 import { JOB_STATE_FORMAT, readsJobState, jobStateFormatOf } from './chunk-ZVB57WI6.js';
 import { RUNNER_PROTOCOL } from './chunk-DA3PLB5N.js';
-import { realBlockedProbes, checkBlockedWithSlots, keepsHostBuilder } from './chunk-VMIOUVJF.js';
+import { realBlockedProbes, checkBlockedWithSlots, keepsHostBuilder } from './chunk-Y45JWNCG.js';
 import { writeMarker, readMarker, currentVersion, removeMarker, isInLayout, startedThroughCurrent, entryIn, versionDir, switchCurrent, cleanVersions, stagingDir } from './chunk-NBZ7XBT6.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, attemptNote, needsBuildSkill, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, provisionEnvironment, resolveHostBuild, listenOnBroker, hostEnvironment, deliverExecMaven, runWithSpawn, hostCommandEnvironment, lifecycleSteps, execArgv, lifecycleFailureReason, decideHostBuildSkill, prepareBranch, currentSkillCommand, formerSkillProblem, containerCommandExec, execCommandLine, startHostServices, setUpRunnerCgroup, sweepImageBuilders, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-4YLL2E7Y.js';
+import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, attemptNote, needsBuildSkill, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, provisionEnvironment, resolveHostBuild, listenOnBroker, hostEnvironment, deliverExecMaven, runWithSpawn, hostCommandEnvironment, lifecycleSteps, execArgv, lifecycleFailureReason, decideHostBuildSkill, prepareBranch, currentSkillCommand, formerSkillProblem, containerCommandExec, execCommandLine, startHostServices, setUpRunnerCgroup, sweepImageBuilders, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-MEF4FNS6.js';
 import { claimPidFile, writePidFile, readPidFile, releasePidFile } from './chunk-F5UL23I2.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
 import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, resolveGoverningSource, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-Z57X4KNC.js';
 import { tagToPull, pullInstruction, imageTag, writeUpdateStatus } from './chunk-MZBQTVFG.js';
 import { isVersion, compareVersions, satisfiesRange } from './chunk-TQMI335S.js';
-import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-VWQCYOBS.js';
-import { freeBytes, formatBytes, volumeBytes } from './chunk-X4JEBMYN.js';
-import { writeJobFile, ensureRunnerIdentity, readJobFile, exceedsDisk, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, BUILD_LABEL, RUNNER_LABEL, readJobFileChecked } from './chunk-OGMXVPCS.js';
+import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-QDSSMMBH.js';
+import { freeBytes, formatBytes, volumeBytes } from './chunk-YMJB3T7O.js';
+import { writeJobFile, ensureRunnerIdentity, readJobFile, exceedsDisk, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, BUILD_LABEL, RUNNER_LABEL, readJobFileChecked } from './chunk-XOL5E5JC.js';
 import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-VSLJ6PPG.js';
 import { loadHostKey, ensureHostKey, signerFor } from './chunk-SOI6K5DY.js';
 import { RUNNER_DIR_MODE, runnerDir, buildDir, attemptStamp, jobDir, RUNNER_FILE_MODE, jobsDir, pidFilePath, spoolDir, imagesDir, rootfsDir, builderCacheDiskPath } from './chunk-PA6CK6WQ.js';
@@ -3130,7 +3130,7 @@ async function startRunner(configPath, deps, startup) {
       check: update.check ? () => update.check(configPath) : async () => {
         const held = heldClaudeCredential();
         const env = held === void 0 ? process.env : { ...process.env, [held.variable]: held.value };
-        return (await import('./check-XPMN4GHD.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
+        return (await import('./check-KWAVBL4Q.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
       },
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log

package/dist/{chunk-NE63JADS.js → chunk-ES4ULBAL.js}

@@ -29,13 +29,13 @@ var FIRECRACKER_SHA256 = {
 var FIRECRACKER_BINARY_SHA256 = {
   x86_64: "99ad0f5cd0514a88aad0e9ae8cfdb3cc3b4ab9d190e1194602406c786b5de7a5"
 };
-var GUEST_ASSETS_VERSION = "12";
+var GUEST_ASSETS_VERSION = "14";
 var GUEST_ASSETS_BASE_URL = `https://github.com/outerlayerai/guest-assets/releases/download/guest-${GUEST_ASSETS_VERSION}`;
 var GUEST_KERNEL_SHA256 = {
   x86_64: "8552fad4bdea1d49f3e7d2aa500ce3f8918fcd2fc66779fd83235949688a39bb"
 };
 var GUEST_HELPER_SHA256 = {
-  x86_64: "bf16e8d832d4ed6e3498fb8f59b521a1f9ce0431d05a1309a4a6cf89e354d2e5"
+  x86_64: "8080d4a8e8361cc8bf1cc34629bf49b6742e339c20cbf42d84a59b0d7fa33524"
 };
 function guestAssetsPinned(arch) {
   const zero = "0".repeat(64);

package/dist/{chunk-EXZACZ2P.js → chunk-FC6R435X.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { DEFAULT_UNIT_NAME } from './chunk-EHOFFTVX.js';
+import { DEFAULT_UNIT_NAME } from './chunk-OG6Z3SU7.js';
 import { RUNNER_FILE_MODE } from './chunk-PA6CK6WQ.js';
 import { claudeEnvPath, withoutCredentialLines } from './chunk-BALIE3BA.js';
 import { parseRunnerEnv } from './chunk-HACGUL52.js';

package/dist/{chunk-2LFWCIIE.js → chunk-LMDOA3P4.js}

@@ -6,16 +6,16 @@ import { writeDockerClientConfig } from './chunk-6LBSAW6I.js';
 import { zodProblem } from './chunk-I3LTIAOR.js';
 import { senderPidfile } from './chunk-7IFYI7XF.js';
 import { installScrubContext } from './chunk-D3EDZPJR.js';
-import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, startHostServices, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, closeHostBuild, containerSenderCommand, hostCommandEnvironment, execArgv, signalInContainer, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, helperFirecrackerNote, stopJailed, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, ROOT_DISK_ID_PREFIX, copyJudgeTree } from './chunk-4YLL2E7Y.js';
-import { readBranchHead, fetchCommit, diffBetween } from './chunk-YXHKCHWG.js';
+import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, startHostServices, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, closeHostBuild, containerSenderCommand, hostCommandEnvironment, execArgv, signalInContainer, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, helperFirecrackerNote, stopJailed, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, ROOT_DISK_ID_PREFIX, copyJudgeTree } from './chunk-MEF4FNS6.js';
+import { readBranchHead, fetchCommit, diffBetween } from './chunk-ZVLSYWDF.js';
 import { isSameProcess, startTimeOf } from './chunk-JBJTC3UU.js';
 import { waitForAgent, vmExecArgs } from './chunk-5THSC6BD.js';
 import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-L26V6ILJ.js';
 import { describeCallFailure, resolveGoverningSource, prefetchGovernedContext, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-Z57X4KNC.js';
-import { imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-VWQCYOBS.js';
-import { DEFAULT_CACHE_DISK, formatBytes, allocatedBytes } from './chunk-X4JEBMYN.js';
-import { parseSize, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-OGMXVPCS.js';
-import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-NE63JADS.js';
+import { imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-QDSSMMBH.js';
+import { DEFAULT_CACHE_DISK, formatBytes, allocatedBytes } from './chunk-YMJB3T7O.js';
+import { parseSize, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-XOL5E5JC.js';
+import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-ES4ULBAL.js';
 import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-VSLJ6PPG.js';
 import { planArtifactUpload } from './chunk-MPC2UAW2.js';
 import { scrubText } from './chunk-NIY2UBT6.js';

package/dist/{chunk-RZOO7X4G.js → chunk-LUQZWSGR.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { scrubReason, stripTerminalControls } from './chunk-2LFWCIIE.js';
+import { scrubReason, stripTerminalControls } from './chunk-LMDOA3P4.js';
 import { RunnerAlreadyRunningError, readPidFile } from './chunk-F5UL23I2.js';
 import { isSameProcess } from './chunk-JBJTC3UU.js';
-import { checkFit, RUNNER_RESERVE_BYTES } from './chunk-EHOFFTVX.js';
+import { checkFit, RUNNER_RESERVE_BYTES } from './chunk-OG6Z3SU7.js';
 import { isSignatureRefusal, postJson } from './chunk-VSLJ6PPG.js';
 import { signerFor } from './chunk-SOI6K5DY.js';
 import { pidFilePath } from './chunk-PA6CK6WQ.js';

package/dist/{chunk-4YLL2E7Y.js → chunk-MEF4FNS6.js}

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { sha256OfFile, downloadPinned, VoiceDownloadError } from './chunk-2PGI6RDE.js';
-import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-EXZACZ2P.js';
-import { readDefaultBranchHead, cloneRepository, buildRepositoryImage, prepareImageBuild, KEY_PREFIX, FETCHED_DIR, toolsDockerfile, TAG_HOST, metadataFromLabels, writeRecord, FETCHED_FFMPEG, FETCHED_GH, FETCHED_TINI, FETCHED_VOICE_DIR } from './chunk-YXHKCHWG.js';
+import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-FC6R435X.js';
+import { readDefaultBranchHead, cloneRepository, buildRepositoryImage, prepareImageBuild, KEY_PREFIX, FETCHED_DIR, toolsDockerfile, TAG_HOST, metadataFromLabels, writeRecord, FETCHED_FFMPEG, FETCHED_GH, FETCHED_TINI, FETCHED_VOICE_DIR } from './chunk-ZVLSYWDF.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
 import { currentCliBuild } from './chunk-OGFGZQA3.js';
 import { runExec, execCapture, waitForAgent } from './chunk-5THSC6BD.js';
 import { GUEST_CID, linkVsockSockets } from './chunk-L26V6ILJ.js';
 import { describeCallFailure, keepStagedContext, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, prefetchGovernedContext, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript, WORKFLOW_PERMISSION_REASON } from './chunk-Z57X4KNC.js';
 import { runnerImageVersion } from './chunk-MZBQTVFG.js';
-import { runnerCredentialProblem, builtinKind, hostAllowed } from './chunk-VWQCYOBS.js';
-import { formatBytes, allocatedBytes } from './chunk-X4JEBMYN.js';
-import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, readDu, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun } from './chunk-OGMXVPCS.js';
+import { runnerCredentialProblem, builtinKind, hostAllowed } from './chunk-QDSSMMBH.js';
+import { formatBytes, allocatedBytes } from './chunk-YMJB3T7O.js';
+import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, readDu, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun } from './chunk-XOL5E5JC.js';
 import { RecipeError, DOCKER_FEATURE, writeSanitizedRecipe, classifyProperties } from './chunk-3Z3MPR55.js';
-import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, hostHelperPinned, CLAUDE_CODE_VERSION, guestAssetsPinned, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, JAILER_BINARY_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, GUEST_ASSETS_VERSION, BUILDER_DISK_VERSION, builderDiskPinned, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, GH_VERSION, TINI_SHA256, TINI_VERSION, VOICE_PACK_FILES, BUILDER_DISK_SHA256, BUILDER_DISK_BASE_URL, DEFAULT_BASE_IMAGE } from './chunk-NE63JADS.js';
+import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, hostHelperPinned, CLAUDE_CODE_VERSION, guestAssetsPinned, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, JAILER_BINARY_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, GUEST_ASSETS_VERSION, BUILDER_DISK_VERSION, builderDiskPinned, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, GH_VERSION, TINI_SHA256, TINI_VERSION, VOICE_PACK_FILES, BUILDER_DISK_SHA256, BUILDER_DISK_BASE_URL, DEFAULT_BASE_IMAGE } from './chunk-ES4ULBAL.js';
 import { WorkCommandError, getJson } from './chunk-VSLJ6PPG.js';
 import { sanitizeTerminal } from './chunk-MPC2UAW2.js';
 import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-NIY2UBT6.js';

package/dist/{chunk-BLHUFOOB.js → chunk-MMAYRJJJ.js}

@@ -1195,8 +1195,8 @@ function doctorExitCode(checks) {
 
 // src/doctor-report.ts
 async function gatherDoctorChecks() {
-  const { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK } = await import('./build-disk-ECTLWTPC.js');
-  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-MVA7YTFW.js');
+  const { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK } = await import('./build-disk-3SSDZAA4.js');
+  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-I2LWGSWY.js');
   const configPath = defaultRunnerConfigPath();
   const runnerHost = hasRunnerBlock(configPath);
   const hooks = (() => {
@@ -1217,7 +1217,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-MFLM7DMY.js');
+    const { runnerHostChecks } = await import('./doctor-KSYNTUW4.js');
     const gateway = (() => {
       try {
         const { url, apiKey, appId } = loadRunnerConfig(configPath);
@@ -1245,7 +1245,7 @@ async function gatherDoctorChecks() {
       const { existsSync: existsSync3 } = await import('fs');
       if (process.platform !== "linux" || !existsSync3("/run/systemd/system")) return void 0;
       const { inspectService, realInspectProbes } = await import('./inspect-DNLXTXLA.js');
-      const { DEFAULT_UNIT_NAME } = await import('./install-47Z7VNWP.js');
+      const { DEFAULT_UNIT_NAME } = await import('./install-7MW35BOF.js');
       const { dirname: dirname2 } = await import('path');
       return inspectService(DEFAULT_UNIT_NAME, dirname2(configPath), realInspectProbes());
     })();

package/dist/{chunk-EHOFFTVX.js → chunk-OG6Z3SU7.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { builtinKind } from './chunk-VWQCYOBS.js';
-import { parseSize } from './chunk-OGMXVPCS.js';
+import { builtinKind } from './chunk-QDSSMMBH.js';
+import { parseSize } from './chunk-XOL5E5JC.js';
 import { runnerDir } from './chunk-PA6CK6WQ.js';
 import { CLAUDE_CREDENTIAL_ID, CLAUDE_ENV_FILE, credentialLineIn, withoutCredentialLines } from './chunk-BALIE3BA.js';
 import { FD_SLOTS_PER_BUILD, FD_STORE_ENV } from './chunk-HACGUL52.js';

package/dist/{chunk-VWQCYOBS.js → chunk-QDSSMMBH.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { DEFAULT_CACHE_DISK, DEFAULT_BUILD_DISK } from './chunk-X4JEBMYN.js';
-import { parseSize } from './chunk-OGMXVPCS.js';
+import { DEFAULT_CACHE_DISK, DEFAULT_BUILD_DISK } from './chunk-YMJB3T7O.js';
+import { parseSize } from './chunk-XOL5E5JC.js';
 import { isRefusedInConfig, resolveDestinations, isReservedVariable } from './chunk-BALIE3BA.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { existsSync, statSync, accessSync, constants, readFileSync } from 'fs';

package/dist/{chunk-OGMXVPCS.js → chunk-XOL5E5JC.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { RecipeError } from './chunk-3Z3MPR55.js';
-import { BUILDKIT_IMAGE } from './chunk-NE63JADS.js';
+import { BUILDKIT_IMAGE } from './chunk-ES4ULBAL.js';
 import { compareVersions } from './chunk-NIY2UBT6.js';
 import { ensureHostKey } from './chunk-SOI6K5DY.js';
 import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, runnerDir, jobsDir } from './chunk-PA6CK6WQ.js';

package/dist/{chunk-VMIOUVJF.js → chunk-Y45JWNCG.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { placeholderQueues, placeholderProblem } from './chunk-4YLL2E7Y.js';
-import { checkFit } from './chunk-EHOFFTVX.js';
-import { builtinKind, imageBuildOf } from './chunk-VWQCYOBS.js';
-import { realBuildDiskProbe, checkDiskFit, DEFAULT_CACHE_DISK, DEFAULT_BUILD_DISK } from './chunk-X4JEBMYN.js';
-import { builderDiskPinned } from './chunk-NE63JADS.js';
+import { placeholderQueues, placeholderProblem } from './chunk-MEF4FNS6.js';
+import { checkFit } from './chunk-OG6Z3SU7.js';
+import { builtinKind, imageBuildOf } from './chunk-QDSSMMBH.js';
+import { realBuildDiskProbe, checkDiskFit, DEFAULT_CACHE_DISK, DEFAULT_BUILD_DISK } from './chunk-YMJB3T7O.js';
+import { builderDiskPinned } from './chunk-ES4ULBAL.js';
 import { claudeCredentialVariablesSet, claudeCredential } from './chunk-BALIE3BA.js';
 import { closeSync, openSync, constants } from 'fs';
 import { totalmem } from 'os';

package/dist/{chunk-X4JEBMYN.js → chunk-YMJB3T7O.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { parseSize, BUILD_LABEL, RUNNER_LABEL, runnerLabelValue } from './chunk-OGMXVPCS.js';
+import { parseSize, BUILD_LABEL, RUNNER_LABEL, runnerLabelValue } from './chunk-XOL5E5JC.js';
 import { buildsDir, rootfsDir, runnerDir, imagesDir, builderCacheDiskPath } from './chunk-PA6CK6WQ.js';
 import { spawnSync } from 'child_process';
 import { statfsSync, statSync, existsSync, readdirSync } from 'fs';

package/dist/{chunk-YXHKCHWG.js → chunk-ZVLSYWDF.js}

@@ -3,7 +3,7 @@ import { createRequire } from 'node:module';
 import { claimPidFile, RunnerAlreadyRunningError, releasePidFile } from './chunk-F5UL23I2.js';
 import { startTimeOf } from './chunk-JBJTC3UU.js';
 import { RecipeError, locateRecipe, readRecipe, assertBuildable, writeSanitizedRecipe, classifyProperties, SANITIZED_NAME } from './chunk-3Z3MPR55.js';
-import { GH_VERSION, VOICE_PACK_FILES, VOICE_PACK_VERSION, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, TINI_SHA256, TINI_VERSION, CLAUDE_CODE_VERSION, NODE_IMAGE, DEFAULT_BASE_IMAGE, MEDIA_PINS, PLAYWRIGHT_VERSION } from './chunk-NE63JADS.js';
+import { GH_VERSION, VOICE_PACK_FILES, VOICE_PACK_VERSION, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, TINI_SHA256, TINI_VERSION, CLAUDE_CODE_VERSION, NODE_IMAGE, DEFAULT_BASE_IMAGE, MEDIA_PINS, PLAYWRIGHT_VERSION } from './chunk-ES4ULBAL.js';
 import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, repoCacheDir, imagesDir, imageBuildLogsDir, attemptStamp, runnerDir, rootfsPathFor } from './chunk-PA6CK6WQ.js';
 import { PROXY_WARNING_FLAG, withGitConfig, tokenHeader } from './chunk-BALIE3BA.js';
 import { RELAY_ID, RELAY_USER } from './chunk-MESOOLF4.js';

package/dist/{cli-65ZQJ622.js → cli-UWOSIR44.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { gatherDoctorChecks, doctorExitCode, summarizeChecks, renderDoctorText, recordWrapped, recordUnwrapped, recordRemoval, readManifest, recordInstall, recordStatusline } from './chunk-BLHUFOOB.js';
+import { gatherDoctorChecks, doctorExitCode, summarizeChecks, renderDoctorText, recordWrapped, recordUnwrapped, recordRemoval, readManifest, recordInstall, recordStatusline } from './chunk-MMAYRJJJ.js';
 import './chunk-DKFUXYGD.js';
 import './chunk-EJL6CWSP.js';
 import './chunk-KT4CN6OU.js';
@@ -3927,13 +3927,13 @@ what CLIs older than ${FIRST_VERSION_READING_AGENTS_SKILLS} do. \`` + cliInvocat
         if (changed.length > 0 && !opts.json) process.stdout.write(`Removed the claude function from ${changed.join(", ")}.
 `);
       }
-      const shell = !opts.remove && opts.shellFunction !== void 0 ? (await import('./init-cmd-3VWJUWXA.js')).applyShellFunctionFlag(opts.shellFunction, { home: homeFromEnv(), shellPath: process.env.SHELL }) : void 0;
+      const shell = !opts.remove && opts.shellFunction !== void 0 ? (await import('./init-cmd-P55KQRDW.js')).applyShellFunctionFlag(opts.shellFunction, { home: homeFromEnv(), shellPath: process.env.SHELL }) : void 0;
       if (opts.json) writeJson(shell === void 0 ? outcome.result : { ...outcome.result, shellFunction: { outcome: shell.outcome, reason: shell.reason } });
       else process.stdout.write(outcome.text + skillsLine + (shell?.text ?? ""));
       return;
     }
     await installMachineSkillsForSetup();
-    const { runInitCommand } = await import('./init-cmd-3VWJUWXA.js');
+    const { runInitCommand } = await import('./init-cmd-P55KQRDW.js');
     const code = await runInitCommand(
       { json: opts.json, factory: opts.factory, shellFunction: opts.shellFunction },
       {
@@ -4395,7 +4395,7 @@ its criterion, and the new record retires the old record. The id must be the ite
 as \`work demo --item <n> --json\` prints it.
 `
   ).action(async (manifest, opts) => {
-    const { runEmitDemo, EmitDemoError } = await import('./emit-demo-cmd-IQRS7BP2.js');
+    const { runEmitDemo, EmitDemoError } = await import('./emit-demo-cmd-VPPVKLSJ.js');
     let item;
     if (opts.item !== void 0) {
       item = parseTrackerNumber(opts.item);
@@ -4963,7 +4963,7 @@ by a different key is refused; claiming again with the same key extends
 it. --host is a label only.
 `
   ).action(async (opts) => {
-    const { runWorkClaim, WorkCommandError } = await import('./work-claim-cmd-G3DC5LJK.js');
+    const { runWorkClaim, WorkCommandError } = await import('./work-claim-cmd-N25RIAVT.js');
     try {
       await runWorkClaim(opts);
     } catch (err) {
@@ -4983,7 +4983,7 @@ Extends the live lease this API key holds. Refused with a 410 if the
 lease has expired, or a 403 if a different key holds it.
 `
   ).action(async (opts) => {
-    const { runWorkRenew, WorkCommandError } = await import('./work-claim-cmd-G3DC5LJK.js');
+    const { runWorkRenew, WorkCommandError } = await import('./work-claim-cmd-N25RIAVT.js');
     try {
       await runWorkRenew(opts);
     } catch (err) {
@@ -5015,7 +5015,7 @@ applies to a host's lease only. A later tool call in the session
 takes the lease again.
 `
   ).action(async (opts) => {
-    const { runWorkRelease, WorkCommandError } = await import('./work-claim-cmd-G3DC5LJK.js');
+    const { runWorkRelease, WorkCommandError } = await import('./work-claim-cmd-N25RIAVT.js');
     try {
       await runWorkRelease(opts);
     } catch (err) {
@@ -5084,8 +5084,8 @@ function registerRunnerCommands(program2) {
   const runnerCmd = program2.command("runner").description("Take work from the implement and amend queues on this machine");
   const configOption = "the cloud config file to run against (default: ~/.outerlayer/config.json)";
   runnerCmd.command("start").description("Run the loop: claim work, run it, report, clean up, repeat").option("--config <path>", configOption).action(async (opts) => {
-    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-MVA7YTFW.js');
-    const { start, RunnerStartError } = await import('./loop-5QV4VZOF.js');
+    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-I2LWGSWY.js');
+    const { start, RunnerStartError } = await import('./loop-QX6OG6FM.js');
     const { RunnerAlreadyRunningError } = await import('./pidfile-5UDLYPMC.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     try {
@@ -5103,9 +5103,9 @@ function registerRunnerCommands(program2) {
     "after",
     "\nReads OUTERLAYER_URL, OUTERLAYER_APP_ID, OUTERLAYER_API_KEY, OUTERLAYER_RUNNER_NAME and one Claude credential\n(CLAUDE_CODE_OAUTH_TOKEN or ANTHROPIC_API_KEY) from the environment. OUTERLAYER_AGENT\nis optional and defaults to claude. On a later start it refuses variables that disagree with the config in the volume.\nThe image sets OUTERLAYER_RUNNER_IMAGE; outside the image, use `runner start`.\n"
   ).action(async () => {
-    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-MVA7YTFW.js');
-    const { containerStart } = await import('./container-start-RVH5743X.js');
-    const { start, RunnerStartError } = await import('./loop-5QV4VZOF.js');
+    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-I2LWGSWY.js');
+    const { containerStart } = await import('./container-start-W4NCCAZC.js');
+    const { start, RunnerStartError } = await import('./loop-QX6OG6FM.js');
     const { RunnerAlreadyRunningError } = await import('./pidfile-5UDLYPMC.js');
     try {
       const result = await containerStart({
@@ -5124,8 +5124,8 @@ function registerRunnerCommands(program2) {
     }
   });
   runnerCmd.command("check").description("Validate the config, the hooks and the key, and print the effective settings").option("--config <path>", configOption).action(async (opts) => {
-    const { defaultRunnerConfigPath } = await import('./config-MVA7YTFW.js');
-    const { runRunnerCheck } = await import('./check-XPMN4GHD.js');
+    const { defaultRunnerConfigPath } = await import('./config-I2LWGSWY.js');
+    const { runRunnerCheck } = await import('./check-KWAVBL4Q.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const result = await runRunnerCheck(configPath);
     if (!result.ok) {
@@ -5146,7 +5146,7 @@ function registerRunnerCommands(program2) {
 `);
   });
   runnerCmd.command("install").description("Put this CLI in the runner's install layout; --service adds its service").option("--config <path>", configOption).option("--service", "set up the service that keeps the runner running").option("--print", "with --service, print the unit and set up nothing").option("--user <account>", "with --service, the account the service runs as").option("--replace", "replace a unit or launcher file this command did not write").option("--allow-downgrade", "install this CLI even when it is older than the version the runner runs").option("--unit-name <name>", "with --service, the unit's name, to run a second runner beside the first").action(async (opts) => {
-    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-MVA7YTFW.js');
+    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-I2LWGSWY.js');
     const { runRunnerInstall, RunnerInstallError, launcherSummary, restartNote } = await import('./install-cmd-FV7IZ7XF.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     if (opts.service !== true) {
@@ -5159,7 +5159,7 @@ function registerRunnerCommands(program2) {
     }
     try {
       if (opts.service === true) {
-        const { installServiceCommand } = await import('./command-QENZQGZL.js');
+        const { installServiceCommand } = await import('./command-UDK2TONI.js');
         const result2 = await installServiceCommand({
           configPath,
           print: opts.print,
@@ -5214,8 +5214,8 @@ To keep it running, run ${C.yellow}${cliInvocation()} runner install --service${
       fail(`pass --service: \`${cliInvocation()} runner uninstall --service\` removes the runner's service.`);
       return;
     }
-    const { defaultRunnerConfigPath } = await import('./config-MVA7YTFW.js');
-    const { uninstallServiceCommand } = await import('./command-QENZQGZL.js');
+    const { defaultRunnerConfigPath } = await import('./config-I2LWGSWY.js');
+    const { uninstallServiceCommand } = await import('./command-UDK2TONI.js');
     const result = await uninstallServiceCommand({ configPath: opts.config ?? defaultRunnerConfigPath(), unitName: opts.unitName, home: homeFromEnv() });
     if (result.ok) for (const line of result.lines) process.stdout.write(`${C.green}\u2713${C.reset} ${line}
 `);
@@ -5242,12 +5242,12 @@ already in claude.env is used.
   printf '%s' "$CLAUDE_CODE_OAUTH_TOKEN" | ${cliInvocation()} runner init --agent claude --factory <org>/<factory>
 `
   ).action(async (opts) => {
-    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-MVA7YTFW.js');
-    const { prepareRunnerInit, runRunnerInit, RunnerInitError, writeRunnerInit } = await import('./init-WIHSXL74.js');
-    const { obtainRunnerKey, runnerKeyLogin } = await import('./runner-key-N4IIFMUX.js');
-    const { detectMachine } = await import('./machine-XTSUAX3K.js');
-    const { chooseVm, runVmInit, VmInitError } = await import('./init-VWJIINBC.js');
-    const { AGENT_COMMANDS, credentialFromStdin, isAgentName, restartForCredential, RunnerEnvError } = await import('./runner-env-ILP6BAC2.js');
+    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-I2LWGSWY.js');
+    const { prepareRunnerInit, runRunnerInit, RunnerInitError, writeRunnerInit } = await import('./init-5QBQWYSY.js');
+    const { obtainRunnerKey, runnerKeyLogin } = await import('./runner-key-7TN4NJJD.js');
+    const { detectMachine } = await import('./machine-ZDSC5MIT.js');
+    const { chooseVm, runVmInit, VmInitError } = await import('./init-HJXO36GA.js');
+    const { AGENT_COMMANDS, credentialFromStdin, isAgentName, restartForCredential, RunnerEnvError } = await import('./runner-env-BWKVKMKG.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     if (opts.agent !== void 0 && !isAgentName(opts.agent)) {
       fail(`--agent ${opts.agent}: runner init writes commands for ${Object.keys(AGENT_COMMANDS).join(", ")}. For another agent, leave --agent out and edit runner.commands.`);
@@ -5397,7 +5397,7 @@ ${C.yellow}The runner will not update itself: ${installErr.message}${C.reset}
       let serviceUp = false;
       let restart;
       if (installedLayout) {
-        const { installServiceCommand } = await import('./command-QENZQGZL.js');
+        const { installServiceCommand } = await import('./command-UDK2TONI.js');
         const service = await installServiceCommand({
           configPath,
           entryPath: process.argv[1] ?? "",
@@ -5441,12 +5441,12 @@ Next:
     "after",
     "\nA repository governed by a control plane builds the control plane's image, at the commit\nthe gateway has stored for it. A repository that governs itself fetches the head of its\ndefault branch into the runner's cache. Either way it reads .devcontainer/devcontainer.json\nand builds the image with the devcontainer CLI. Settings\nthat reach the host or widen the container's privileges are ignored and listed. The\nimage holds this CLI and a pinned Claude Code. Nothing runs inside the image.\n"
   ).action(async (opts) => {
-    const { defaultRunnerConfigPath } = await import('./config-MVA7YTFW.js');
-    const { buildRepositoryImage, RecipeError } = await import('./build-SEAQVLD5.js');
+    const { defaultRunnerConfigPath } = await import('./config-I2LWGSWY.js');
+    const { buildRepositoryImage, RecipeError } = await import('./build-LSU25G3M.js');
     const { currentCliBuild } = await import('./cli-build-K56DK4DS.js');
-    const { createDockerHost } = await import('./docker-YKYQJHL2.js');
-    const { builderSpec } = await import('./builder-LUPHKUFM.js');
-    const { loadRunnerConfig } = await import('./config-MVA7YTFW.js');
+    const { createDockerHost } = await import('./docker-AYRM3TQP.js');
+    const { builderSpec } = await import('./builder-WBYLD47N.js');
+    const { loadRunnerConfig } = await import('./config-I2LWGSWY.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const loaded = (() => {
       try {
@@ -5457,7 +5457,7 @@ Next:
     })();
     const memory = loaded?.build?.memory ?? "8g";
     try {
-      const { ensureRunnerIdentity } = await import('./runner-identity-MF3AYBR6.js');
+      const { ensureRunnerIdentity } = await import('./runner-identity-QULLBQLS.js');
       await ensureRunnerIdentity(configPath, { log: (line) => console.error(line) }).catch((err) => {
         console.error(`the runner's Docker identity could not be stored: ${err instanceof Error ? err.message : String(err)}`);
       });
@@ -5524,17 +5524,17 @@ Next:
     }
   });
   runnerCmd.command("stop").description("Take no more work; finish running jobs, then exit").option("--config <path>", "the cloud config file naming the runner to stop").option("--now", "end running jobs immediately, with outcome stopped").action(async (opts) => {
-    const { defaultRunnerConfigPath } = await import('./config-MVA7YTFW.js');
-    const { requestStop } = await import('./loop-5QV4VZOF.js');
+    const { defaultRunnerConfigPath } = await import('./config-I2LWGSWY.js');
+    const { requestStop } = await import('./loop-QX6OG6FM.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const { runnerImageVersion } = await import('./image-tag-ADSLWXBA.js');
     await requestStop(configPath, Boolean(opts.now), void 0, { image: runnerImageVersion() !== void 0 });
   });
   runnerCmd.command("status").description("List running jobs; with --recent, finished ones too").option("--config <path>", "the cloud config file naming the runner to inspect").option("--recent", "also list finished jobs, newest first, capped at 20").option("--json", "machine-readable JSON output").action(async (opts) => {
-    const { defaultRunnerConfigPath, loadRunnerConfig } = await import('./config-MVA7YTFW.js');
+    const { defaultRunnerConfigPath, loadRunnerConfig } = await import('./config-I2LWGSWY.js');
     const { jobsDir, runnerDir } = await import('./paths-7HVTDE6J.js');
-    const { listJobFiles, runnerProcessState } = await import('./loop-5QV4VZOF.js');
-    const { renderStatus } = await import('./status-VBUCLDN5.js');
+    const { listJobFiles, runnerProcessState } = await import('./loop-QX6OG6FM.js');
+    const { renderStatus } = await import('./status-LVA6GMLY.js');
     const { readHousekeepingRecord } = await import('./record-PPZEXAVA.js');
     const path2 = await import('path');
     const configPath = opts.config ?? defaultRunnerConfigPath();
@@ -5556,7 +5556,7 @@ Next:
     const service = await (async () => {
       if (process.platform !== "linux" || !existsSync("/run/systemd/system")) return void 0;
       const { inspectService, realInspectProbes } = await import('./inspect-DNLXTXLA.js');
-      const { DEFAULT_UNIT_NAME } = await import('./install-47Z7VNWP.js');
+      const { DEFAULT_UNIT_NAME } = await import('./install-7MW35BOF.js');
       const facts = inspectService(DEFAULT_UNIT_NAME, path2.dirname(configPath), realInspectProbes());
       return facts === void 0 ? void 0 : { unit: facts.unit, running: facts.mainPid !== void 0, delegated: facts.delegate };
     })();
@@ -5593,8 +5593,8 @@ Next:
     );
   });
   runnerCmd.command("logs").argument("<item>", "the work item's number in the factory").description("Print the newest attempt's log for one item").option("--config <path>", "the cloud config file naming the runner to inspect").option("-f, --follow", "keep printing as the log grows").action(async (itemArg, opts) => {
-    const { defaultRunnerConfigPath } = await import('./config-MVA7YTFW.js');
-    const { listJobFiles } = await import('./loop-5QV4VZOF.js');
+    const { defaultRunnerConfigPath } = await import('./config-I2LWGSWY.js');
+    const { listJobFiles } = await import('./loop-QX6OG6FM.js');
     const { newestAttempt, logPathFor, tail, RunnerLogsError } = await import('./logs-HI46FO6Z.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const item = parseTrackerNumber(itemArg);

package/dist/{command-QENZQGZL.js → command-UDK2TONI.js}

@@ -3,10 +3,10 @@ import { createRequire } from 'node:module';
 import { runRunnerInstall, launcherSummary, restartNote } from './chunk-DXJTBU7A.js';
 import './chunk-Z5IW4DHH.js';
 import { currentLink, execStartCommand } from './chunk-NBZ7XBT6.js';
-import { detectMachine, helperSocketPath, ensureFirecrackerAndJailer } from './chunk-4YLL2E7Y.js';
+import { detectMachine, helperSocketPath, ensureFirecrackerAndJailer } from './chunk-MEF4FNS6.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-EXZACZ2P.js';
-import './chunk-YXHKCHWG.js';
+import './chunk-FC6R435X.js';
+import './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
@@ -15,12 +15,12 @@ import './chunk-L26V6ILJ.js';
 import './chunk-Z57X4KNC.js';
 import './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import { DEFAULT_UNIT_NAME, installService, uninstallService, realTaskScheduler, UNIT_MARKER } from './chunk-EHOFFTVX.js';
-import { runnerVmOf, loadRunnerConfig, builtinKind } from './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import { readJobFile } from './chunk-OGMXVPCS.js';
+import { DEFAULT_UNIT_NAME, installService, uninstallService, realTaskScheduler, UNIT_MARKER } from './chunk-OG6Z3SU7.js';
+import { runnerVmOf, loadRunnerConfig, builtinKind } from './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import { readJobFile } from './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, FIRECRACKER_BINARY_SHA256, JAILER_BINARY_SHA256, HOST_HELPER_SHA256, HOST_HELPER_BASE_URL, HOST_HELPER_ASSETS_VERSION, hostHelperPinned } from './chunk-NE63JADS.js';
+import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, FIRECRACKER_BINARY_SHA256, JAILER_BINARY_SHA256, HOST_HELPER_SHA256, HOST_HELPER_BASE_URL, HOST_HELPER_ASSETS_VERSION, hostHelperPinned } from './chunk-ES4ULBAL.js';
 import { realLima } from './chunk-77MM5RYD.js';
 import { writeLaunchAgent, launchAgentPath } from './chunk-LF6MLJCY.js';
 import './chunk-VSLJ6PPG.js';

package/dist/{config-MVA7YTFW.js → config-I2LWGSWY.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DEFAULT_CHECK_TIME_LIMIT_MINUTES, DEFAULT_UPDATE_MAX_WAIT_HOURS, RunnerConfigError, builtinKind, checkHooks, defaultRunnerConfigPath, hasRunnerBlock, imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, loadRunnerConfig, resolveBuild, resolveHousekeeping, runnerCredentialProblem, runnerVmOf } from './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+export { DEFAULT_CHECK_TIME_LIMIT_MINUTES, DEFAULT_UPDATE_MAX_WAIT_HOURS, RunnerConfigError, builtinKind, checkHooks, defaultRunnerConfigPath, hasRunnerBlock, imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, loadRunnerConfig, resolveBuild, resolveHousekeeping, runnerCredentialProblem, runnerVmOf } from './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-NIY2UBT6.js';
 import './chunk-SOI6K5DY.js';
 import './chunk-PA6CK6WQ.js';

package/dist/{container-start-RVH5743X.js → container-start-W4NCCAZC.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { reportFailedStart, BUILD_MEMORY_VARIABLE } from './chunk-RZOO7X4G.js';
-import './chunk-2LFWCIIE.js';
+import { reportFailedStart, BUILD_MEMORY_VARIABLE } from './chunk-LUQZWSGR.js';
+import './chunk-LMDOA3P4.js';
 import './chunk-ZVB57WI6.js';
 import './chunk-HVRQQOMH.js';
 import './chunk-6LBSAW6I.js';
@@ -11,10 +11,10 @@ import './chunk-D3EDZPJR.js';
 import './chunk-7UPMYRPS.js';
 import './chunk-ESVW4MJY.js';
 import './chunk-TBT347UY.js';
-import { detectMachine, supportsContainerBuilds, MIN_ENGINE_MAJOR, describeMachineDocker, RunnerInitError, prepareRunnerInit, writeRunnerInit } from './chunk-4YLL2E7Y.js';
+import { detectMachine, supportsContainerBuilds, MIN_ENGINE_MAJOR, describeMachineDocker, RunnerInitError, prepareRunnerInit, writeRunnerInit } from './chunk-MEF4FNS6.js';
 import './chunk-2PGI6RDE.js';
-import { isAgentName, AGENT_COMMANDS } from './chunk-EXZACZ2P.js';
-import './chunk-YXHKCHWG.js';
+import { isAgentName, AGENT_COMMANDS } from './chunk-FC6R435X.js';
+import './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
@@ -23,12 +23,12 @@ import './chunk-L26V6ILJ.js';
 import './chunk-Z57X4KNC.js';
 import { runnerImageVersion, IMAGE_VERSION_VARIABLE } from './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import './chunk-EHOFFTVX.js';
-import './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import { parseSize } from './chunk-OGMXVPCS.js';
+import './chunk-OG6Z3SU7.js';
+import './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import { parseSize } from './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-VSLJ6PPG.js';
 import './chunk-IP7BIBXJ.js';
 import './chunk-HLZMAJJD.js';

package/dist/{docker-YKYQJHL2.js → docker-AYRM3TQP.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { childEnvironment, createDockerHost, spawnRun } from './chunk-OGMXVPCS.js';
+export { childEnvironment, createDockerHost, spawnRun } from './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-NIY2UBT6.js';
 import './chunk-SOI6K5DY.js';
 import './chunk-PA6CK6WQ.js';

package/dist/{doctor-MFLM7DMY.js → doctor-KSYNTUW4.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launcherCheck } from './chunk-Z5IW4DHH.js';
-import { keepsHostBuilder, managedProblems } from './chunk-VMIOUVJF.js';
+import { keepsHostBuilder, managedProblems } from './chunk-Y45JWNCG.js';
 import './chunk-NBZ7XBT6.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { needsClaudeCredential, claudeCredentialCheck, detectMachine, supportsContainerBuilds, describeMachineDocker, MIN_ENGINE_MAJOR, reachDockerStep, supportsMicroVmBuilds, microVmArchSupported, microVmAssetsPinned, helperFirecrackerNote, probeHelper, helperSocketPath, missingPermissionOf, missingPermissionFix } from './chunk-4YLL2E7Y.js';
+import { needsClaudeCredential, claudeCredentialCheck, detectMachine, supportsContainerBuilds, describeMachineDocker, MIN_ENGINE_MAJOR, reachDockerStep, supportsMicroVmBuilds, microVmArchSupported, microVmAssetsPinned, helperFirecrackerNote, probeHelper, helperSocketPath, missingPermissionOf, missingPermissionFix } from './chunk-MEF4FNS6.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-EXZACZ2P.js';
-import './chunk-YXHKCHWG.js';
+import './chunk-FC6R435X.js';
+import './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
@@ -16,12 +16,12 @@ import './chunk-L26V6ILJ.js';
 import './chunk-Z57X4KNC.js';
 import { runnerImageVersion, imageAdvice, readUpdateStatus, imageTag, pullInstruction } from './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import './chunk-EHOFFTVX.js';
-import { builtinKind, allowHostProblem, MAX_ALLOW_HOSTS } from './chunk-VWQCYOBS.js';
-import { realBuildDiskProbe, DEFAULT_BUILD_DISK, freeBytes, checkDiskFit, formatBytes } from './chunk-X4JEBMYN.js';
-import { resolveDevcontainerCli, buildxState, spawnRun, parseSize } from './chunk-OGMXVPCS.js';
+import './chunk-OG6Z3SU7.js';
+import { builtinKind, allowHostProblem, MAX_ALLOW_HOSTS } from './chunk-QDSSMMBH.js';
+import { realBuildDiskProbe, DEFAULT_BUILD_DISK, freeBytes, checkDiskFit, formatBytes } from './chunk-YMJB3T7O.js';
+import { resolveDevcontainerCli, buildxState, spawnRun, parseSize } from './chunk-XOL5E5JC.js';
 import { locateRecipe, assertBuildable, readRecipe, RecipeError } from './chunk-3Z3MPR55.js';
-import { FIRECRACKER_VERSION, builderDiskPinned, CLAUDE_CODE_VERSION } from './chunk-NE63JADS.js';
+import { FIRECRACKER_VERSION, builderDiskPinned, CLAUDE_CODE_VERSION } from './chunk-ES4ULBAL.js';
 import { getJson, WorkCommandError, signatureRefusalMessage } from './chunk-VSLJ6PPG.js';
 import './chunk-IP7BIBXJ.js';
 import './chunk-HLZMAJJD.js';

package/dist/{emit-demo-cmd-IQRS7BP2.js → emit-demo-cmd-VPPVKLSJ.js}

@@ -7,7 +7,7 @@ import './chunk-7UPMYRPS.js';
 import './chunk-ESVW4MJY.js';
 import './chunk-TBT347UY.js';
 import { VoiceDownloadError, downloadPinned, sha256OfFile } from './chunk-2PGI6RDE.js';
-import { VOICE_PACK_FILES, VOICE_PACK_VERSION } from './chunk-NE63JADS.js';
+import { VOICE_PACK_FILES, VOICE_PACK_VERSION } from './chunk-ES4ULBAL.js';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
 import { autoConnect } from './chunk-HLZMAJJD.js';
 import './chunk-S5CNYXUA.js';

package/dist/index.js

@@ -26,5 +26,5 @@ if (argv[0] === "claude") {
   process.exit(await runClaudeLauncher(argv.slice(1)));
 }
 (await import('./hook-fast-3IYSWDL4.js')).recordLinkExitFailure(argv);
-var { runCli } = await import('./cli-65ZQJ622.js');
+var { runCli } = await import('./cli-UWOSIR44.js');
 await runCli(process.argv);

package/dist/{init-WIHSXL74.js → init-5QBQWYSY.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { PLACEHOLDER_MARKER, RunnerInitError, isPlaceholderCommand, prepareRunnerInit, readConfigObject, runRunnerInit, writeRunnerInit } from './chunk-4YLL2E7Y.js';
+export { PLACEHOLDER_MARKER, RunnerInitError, isPlaceholderCommand, prepareRunnerInit, readConfigObject, runRunnerInit, writeRunnerInit } from './chunk-MEF4FNS6.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-EXZACZ2P.js';
-import './chunk-YXHKCHWG.js';
+import './chunk-FC6R435X.js';
+import './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
@@ -12,12 +12,12 @@ import './chunk-L26V6ILJ.js';
 import './chunk-Z57X4KNC.js';
 import './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import './chunk-EHOFFTVX.js';
-import './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+import './chunk-OG6Z3SU7.js';
+import './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-VSLJ6PPG.js';
 import './chunk-IP7BIBXJ.js';
 import './chunk-HLZMAJJD.js';

package/dist/{init-VWJIINBC.js → init-HJXO36GA.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { npmSupportsProvenance } from './chunk-E7R2GIAW.js';
-import { RunnerInitError, readConfigObject } from './chunk-4YLL2E7Y.js';
+import { RunnerInitError, readConfigObject } from './chunk-MEF4FNS6.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-EXZACZ2P.js';
-import './chunk-YXHKCHWG.js';
+import './chunk-FC6R435X.js';
+import './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
@@ -13,12 +13,12 @@ import './chunk-L26V6ILJ.js';
 import './chunk-Z57X4KNC.js';
 import './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import { checkFit, VM_SERVICE_NAME, RUNNER_RESERVE_BYTES } from './chunk-EHOFFTVX.js';
-import { runnerCredentialProblem, resolveBuild, resolveHousekeeping } from './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import { parseSize } from './chunk-OGMXVPCS.js';
+import { checkFit, VM_SERVICE_NAME, RUNNER_RESERVE_BYTES } from './chunk-OG6Z3SU7.js';
+import { runnerCredentialProblem, resolveBuild, resolveHousekeeping } from './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import { parseSize } from './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import { writeLaunchAgent } from './chunk-LF6MLJCY.js';
 import './chunk-VSLJ6PPG.js';
 import './chunk-IP7BIBXJ.js';

package/dist/{init-cmd-3VWJUWXA.js → init-cmd-P55KQRDW.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { summarizeChecks, summaryText, renderDoctorText } from './chunk-BLHUFOOB.js';
+import { summarizeChecks, summaryText, renderDoctorText } from './chunk-MMAYRJJJ.js';
 import './chunk-DKFUXYGD.js';
 import { shellFunctionInstalled, removeShellFunction, installShellFunction, SHELL_FUNCTION_LINE } from './chunk-CJJDJ7AT.js';
 import './chunk-EJL6CWSP.js';

package/dist/{install-47Z7VNWP.js → install-7MW35BOF.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DEFAULT_UNIT_NAME, installService, uninstallService, unitPathFor } from './chunk-EHOFFTVX.js';
-import './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+export { DEFAULT_UNIT_NAME, installService, uninstallService, unitPathFor } from './chunk-OG6Z3SU7.js';
+import './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-NIY2UBT6.js';
 import './chunk-SOI6K5DY.js';
 import './chunk-PA6CK6WQ.js';

package/dist/{loop-5QV4VZOF.js → loop-QX6OG6FM.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { RunnerStartError, leaseTimeLeftFor, listJobFiles, logUnusableHelper, probeBuild, probeCredentials, requestStop, runnerProcessState, runtimeOf, sampleUsage, start, tick, watchTick } from './chunk-YY3OQJ4X.js';
+export { RunnerStartError, leaseTimeLeftFor, listJobFiles, logUnusableHelper, probeBuild, probeCredentials, requestStop, runnerProcessState, runtimeOf, sampleUsage, start, tick, watchTick } from './chunk-AL7K5RZJ.js';
 import './chunk-GH246BGV.js';
 import './chunk-57L2YAJA.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-E7R2GIAW.js';
-import './chunk-RZOO7X4G.js';
-import './chunk-2LFWCIIE.js';
+import './chunk-LUQZWSGR.js';
+import './chunk-LMDOA3P4.js';
 import './chunk-ZVB57WI6.js';
 import './chunk-DA3PLB5N.js';
 import './chunk-HVRQQOMH.js';
@@ -16,13 +16,13 @@ import './chunk-7IFYI7XF.js';
 import './chunk-D3EDZPJR.js';
 import './chunk-7UPMYRPS.js';
 import './chunk-ESVW4MJY.js';
-import './chunk-VMIOUVJF.js';
+import './chunk-Y45JWNCG.js';
 import './chunk-NBZ7XBT6.js';
 import './chunk-TBT347UY.js';
-import './chunk-4YLL2E7Y.js';
+import './chunk-MEF4FNS6.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-EXZACZ2P.js';
-import './chunk-YXHKCHWG.js';
+import './chunk-FC6R435X.js';
+import './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
@@ -31,12 +31,12 @@ import './chunk-L26V6ILJ.js';
 import './chunk-Z57X4KNC.js';
 import './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import './chunk-EHOFFTVX.js';
-import './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+import './chunk-OG6Z3SU7.js';
+import './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-VSLJ6PPG.js';
 import './chunk-IP7BIBXJ.js';
 import './chunk-HLZMAJJD.js';

package/dist/{machine-XTSUAX3K.js → machine-ZDSC5MIT.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { describeMachineDocker, detectMachine, microVmArchSupported, microVmAssetsPinned, reachDockerStep, supportsContainerBuilds, supportsMicroVmBuilds } from './chunk-4YLL2E7Y.js';
+export { describeMachineDocker, detectMachine, microVmArchSupported, microVmAssetsPinned, reachDockerStep, supportsContainerBuilds, supportsMicroVmBuilds } from './chunk-MEF4FNS6.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-EXZACZ2P.js';
-import './chunk-YXHKCHWG.js';
+import './chunk-FC6R435X.js';
+import './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
@@ -12,12 +12,12 @@ import './chunk-L26V6ILJ.js';
 import './chunk-Z57X4KNC.js';
 import './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import './chunk-EHOFFTVX.js';
-import './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+import './chunk-OG6Z3SU7.js';
+import './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-VSLJ6PPG.js';
 import './chunk-IP7BIBXJ.js';
 import './chunk-HLZMAJJD.js';

package/dist/{runner-env-ILP6BAC2.js → runner-env-BWKVKMKG.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { AGENT_COMMANDS, RunnerEnvError, credentialFromStdin, hasStoredCredential, isAgentName, restartForCredential, storeClaudeCredential } from './chunk-EXZACZ2P.js';
-import './chunk-EHOFFTVX.js';
-import './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+export { AGENT_COMMANDS, RunnerEnvError, credentialFromStdin, hasStoredCredential, isAgentName, restartForCredential, storeClaudeCredential } from './chunk-FC6R435X.js';
+import './chunk-OG6Z3SU7.js';
+import './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-NIY2UBT6.js';
 import './chunk-SOI6K5DY.js';
 import './chunk-PA6CK6WQ.js';

package/dist/{runner-identity-MF3AYBR6.js → runner-identity-QULLBQLS.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { RUNNER_LABEL, builderNameFor, dockerIdentity, ensureRunnerIdentity, pathLabelValue, readRunnerIdentity } from './chunk-OGMXVPCS.js';
+export { RUNNER_LABEL, builderNameFor, dockerIdentity, ensureRunnerIdentity, pathLabelValue, readRunnerIdentity } from './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-NIY2UBT6.js';
 import './chunk-SOI6K5DY.js';
 import './chunk-PA6CK6WQ.js';

package/dist/{runner-key-N4IIFMUX.js → runner-key-7TN4NJJD.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { readConfigObject, RunnerInitError } from './chunk-4YLL2E7Y.js';
+import { readConfigObject, RunnerInitError } from './chunk-MEF4FNS6.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-EXZACZ2P.js';
-import './chunk-YXHKCHWG.js';
+import './chunk-FC6R435X.js';
+import './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
@@ -12,12 +12,12 @@ import './chunk-L26V6ILJ.js';
 import './chunk-Z57X4KNC.js';
 import './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import './chunk-EHOFFTVX.js';
-import { runnerCredentialProblem } from './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+import './chunk-OG6Z3SU7.js';
+import { runnerCredentialProblem } from './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import { getJson } from './chunk-VSLJ6PPG.js';
 import './chunk-IP7BIBXJ.js';
 import './chunk-HLZMAJJD.js';

package/dist/{status-VBUCLDN5.js → status-LVA6GMLY.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isReadable, ALREADY_RELEASED, RENEW_INTERVAL_SECONDS } from './chunk-2LFWCIIE.js';
+import { isReadable, ALREADY_RELEASED, RENEW_INTERVAL_SECONDS } from './chunk-LMDOA3P4.js';
 import { jobStateFormatOf } from './chunk-ZVB57WI6.js';
 import './chunk-HVRQQOMH.js';
 import './chunk-6LBSAW6I.js';
@@ -10,10 +10,10 @@ import './chunk-D3EDZPJR.js';
 import './chunk-7UPMYRPS.js';
 import './chunk-ESVW4MJY.js';
 import './chunk-TBT347UY.js';
-import { LEASE_SECONDS } from './chunk-4YLL2E7Y.js';
+import { LEASE_SECONDS } from './chunk-MEF4FNS6.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-EXZACZ2P.js';
-import './chunk-YXHKCHWG.js';
+import './chunk-FC6R435X.js';
+import './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
@@ -22,12 +22,12 @@ import './chunk-L26V6ILJ.js';
 import { formatDuration, formatClock, relativeToRunner } from './chunk-Z57X4KNC.js';
 import { pullInstruction } from './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import './chunk-EHOFFTVX.js';
-import './chunk-VWQCYOBS.js';
-import { formatBytes } from './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+import './chunk-OG6Z3SU7.js';
+import './chunk-QDSSMMBH.js';
+import { formatBytes } from './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-VSLJ6PPG.js';
 import './chunk-IP7BIBXJ.js';
 import './chunk-HLZMAJJD.js';

package/dist/{work-claim-cmd-G3DC5LJK.js → work-claim-cmd-N25RIAVT.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { RUNNER_PROTOCOL } from './chunk-DA3PLB5N.js';
-import { defaultRunnerConfigPath } from './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+import { defaultRunnerConfigPath } from './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import { resolveCredentials, WorkCommandError, parsePositiveInt, postJson, environmentFacts, findLiveItemForIssue } from './chunk-VSLJ6PPG.js';
 export { WorkCommandError } from './chunk-VSLJ6PPG.js';
 import './chunk-IP7BIBXJ.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@outerlayer/cli",
-  "version": "0.33.0-next.20261023154943",
+  "version": "0.33.1-next.20261023182548",
   "description": "OuterLayer CLI — commands: init, claude, connect, doctor, login, logout, sync, daemon (alias: watch), emit, findings, work, spec, runner, hooks, mcp, context. Capture and sync coding-agent sessions, and record proof of factory work.",
   "license": "Apache-2.0",
   "author": "Magu Studios, Inc.",