@outerlayer/cli 0.33.0 → 0.33.1-next.20261023182548

package/dist/{build-SEAQVLD5.js → build-LSU25G3M.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { KEY_PREFIX, TAG_HOST, buildRepositoryImage, metadataFromLabels, prepareImageBuild, writeRecord } from './chunk-YXHKCHWG.js';
+export { KEY_PREFIX, TAG_HOST, buildRepositoryImage, metadataFromLabels, prepareImageBuild, writeRecord } from './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 export { RecipeError } from './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-PA6CK6WQ.js';
 import './chunk-BALIE3BA.js';
 import './chunk-HACGUL52.js';

package/dist/{build-disk-ECTLWTPC.js → build-disk-3SSDZAA4.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK, DOCKER_CACHE_MS, allocatedBytes, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+export { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK, DOCKER_CACHE_MS, allocatedBytes, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-NIY2UBT6.js';
 import './chunk-SOI6K5DY.js';
 import './chunk-PA6CK6WQ.js';

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-23T18:10:50.201Z+1ad7157","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-23T18:27:24.825Z+a7bdcad","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-LUPHKUFM.js → builder-WBYLD47N.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-OGMXVPCS.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-NIY2UBT6.js';
 import './chunk-SOI6K5DY.js';
 import './chunk-PA6CK6WQ.js';

package/dist/{check-XPMN4GHD.js → check-KWAVBL4Q.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-YY3OQJ4X.js';
+import { probeCredentials } from './chunk-AL7K5RZJ.js';
 import './chunk-GH246BGV.js';
 import './chunk-57L2YAJA.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-E7R2GIAW.js';
-import './chunk-RZOO7X4G.js';
-import './chunk-2LFWCIIE.js';
+import './chunk-LUQZWSGR.js';
+import './chunk-LMDOA3P4.js';
 import './chunk-ZVB57WI6.js';
 import './chunk-DA3PLB5N.js';
 import './chunk-HVRQQOMH.js';
@@ -16,13 +16,13 @@ import './chunk-7IFYI7XF.js';
 import './chunk-D3EDZPJR.js';
 import './chunk-7UPMYRPS.js';
 import './chunk-ESVW4MJY.js';
-import { managedProblems, managedFactsOf } from './chunk-VMIOUVJF.js';
+import { managedProblems, managedFactsOf } from './chunk-Y45JWNCG.js';
 import './chunk-NBZ7XBT6.js';
 import './chunk-TBT347UY.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, probeHelper, HELPER_ENV, helperSocketPath, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-4YLL2E7Y.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, probeHelper, HELPER_ENV, helperSocketPath, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-MEF4FNS6.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-EXZACZ2P.js';
-import './chunk-YXHKCHWG.js';
+import './chunk-FC6R435X.js';
+import './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
@@ -31,12 +31,12 @@ import './chunk-L26V6ILJ.js';
 import './chunk-Z57X4KNC.js';
 import './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import { DEFAULT_UNIT_NAME } from './chunk-EHOFFTVX.js';
-import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+import { DEFAULT_UNIT_NAME } from './chunk-OG6Z3SU7.js';
+import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-VSLJ6PPG.js';
 import './chunk-IP7BIBXJ.js';
 import './chunk-HLZMAJJD.js';

package/dist/{chunk-YY3OQJ4X.js → chunk-AL7K5RZJ.js}

@@ -4,22 +4,22 @@ import { writePendingUpdate } from './chunk-GH246BGV.js';
 import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-57L2YAJA.js';
 import { decideInstalledSwitch } from './chunk-3JVYMD4G.js';
 import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-E7R2GIAW.js';
-import { reportFailedStart, fitImageBuildMemory } from './chunk-RZOO7X4G.js';
-import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, readProvisionOut, workdirProblem, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, startSender, finishJob, sampleGuest, foldSample, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, GUEST_USAGE_INTERVAL_MS, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-2LFWCIIE.js';
+import { reportFailedStart, fitImageBuildMemory } from './chunk-LUQZWSGR.js';
+import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, readProvisionOut, workdirProblem, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, startSender, finishJob, sampleGuest, foldSample, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, GUEST_USAGE_INTERVAL_MS, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-LMDOA3P4.js';
 import { JOB_STATE_FORMAT, readsJobState, jobStateFormatOf } from './chunk-ZVB57WI6.js';
 import { RUNNER_PROTOCOL } from './chunk-DA3PLB5N.js';
-import { realBlockedProbes, checkBlockedWithSlots, keepsHostBuilder } from './chunk-VMIOUVJF.js';
+import { realBlockedProbes, checkBlockedWithSlots, keepsHostBuilder } from './chunk-Y45JWNCG.js';
 import { writeMarker, readMarker, currentVersion, removeMarker, isInLayout, startedThroughCurrent, entryIn, versionDir, switchCurrent, cleanVersions, stagingDir } from './chunk-NBZ7XBT6.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, attemptNote, needsBuildSkill, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, provisionEnvironment, resolveHostBuild, listenOnBroker, hostEnvironment, deliverExecMaven, runWithSpawn, hostCommandEnvironment, lifecycleSteps, execArgv, lifecycleFailureReason, decideHostBuildSkill, prepareBranch, currentSkillCommand, formerSkillProblem, containerCommandExec, execCommandLine, startHostServices, setUpRunnerCgroup, sweepImageBuilders, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-4YLL2E7Y.js';
+import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, attemptNote, needsBuildSkill, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, provisionEnvironment, resolveHostBuild, listenOnBroker, hostEnvironment, deliverExecMaven, runWithSpawn, hostCommandEnvironment, lifecycleSteps, execArgv, lifecycleFailureReason, decideHostBuildSkill, prepareBranch, currentSkillCommand, formerSkillProblem, containerCommandExec, execCommandLine, startHostServices, setUpRunnerCgroup, sweepImageBuilders, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-MEF4FNS6.js';
 import { claimPidFile, writePidFile, readPidFile, releasePidFile } from './chunk-F5UL23I2.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
 import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, resolveGoverningSource, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-Z57X4KNC.js';
 import { tagToPull, pullInstruction, imageTag, writeUpdateStatus } from './chunk-MZBQTVFG.js';
 import { isVersion, compareVersions, satisfiesRange } from './chunk-TQMI335S.js';
-import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-VWQCYOBS.js';
-import { freeBytes, formatBytes, volumeBytes } from './chunk-X4JEBMYN.js';
-import { writeJobFile, ensureRunnerIdentity, readJobFile, exceedsDisk, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, BUILD_LABEL, RUNNER_LABEL, readJobFileChecked } from './chunk-OGMXVPCS.js';
+import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-QDSSMMBH.js';
+import { freeBytes, formatBytes, volumeBytes } from './chunk-YMJB3T7O.js';
+import { writeJobFile, ensureRunnerIdentity, readJobFile, exceedsDisk, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, BUILD_LABEL, RUNNER_LABEL, readJobFileChecked } from './chunk-XOL5E5JC.js';
 import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-VSLJ6PPG.js';
 import { loadHostKey, ensureHostKey, signerFor } from './chunk-SOI6K5DY.js';
 import { RUNNER_DIR_MODE, runnerDir, buildDir, attemptStamp, jobDir, RUNNER_FILE_MODE, jobsDir, pidFilePath, spoolDir, imagesDir, rootfsDir, builderCacheDiskPath } from './chunk-PA6CK6WQ.js';
@@ -3130,7 +3130,7 @@ async function startRunner(configPath, deps, startup) {
       check: update.check ? () => update.check(configPath) : async () => {
         const held = heldClaudeCredential();
         const env = held === void 0 ? process.env : { ...process.env, [held.variable]: held.value };
-        return (await import('./check-XPMN4GHD.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
+        return (await import('./check-KWAVBL4Q.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
       },
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log

package/dist/{chunk-NE63JADS.js → chunk-ES4ULBAL.js}

@@ -29,13 +29,13 @@ var FIRECRACKER_SHA256 = {
 var FIRECRACKER_BINARY_SHA256 = {
   x86_64: "99ad0f5cd0514a88aad0e9ae8cfdb3cc3b4ab9d190e1194602406c786b5de7a5"
 };
-var GUEST_ASSETS_VERSION = "12";
+var GUEST_ASSETS_VERSION = "14";
 var GUEST_ASSETS_BASE_URL = `https://github.com/outerlayerai/guest-assets/releases/download/guest-${GUEST_ASSETS_VERSION}`;
 var GUEST_KERNEL_SHA256 = {
   x86_64: "8552fad4bdea1d49f3e7d2aa500ce3f8918fcd2fc66779fd83235949688a39bb"
 };
 var GUEST_HELPER_SHA256 = {
-  x86_64: "bf16e8d832d4ed6e3498fb8f59b521a1f9ce0431d05a1309a4a6cf89e354d2e5"
+  x86_64: "8080d4a8e8361cc8bf1cc34629bf49b6742e339c20cbf42d84a59b0d7fa33524"
 };
 function guestAssetsPinned(arch) {
   const zero = "0".repeat(64);

package/dist/{chunk-EXZACZ2P.js → chunk-FC6R435X.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { DEFAULT_UNIT_NAME } from './chunk-EHOFFTVX.js';
+import { DEFAULT_UNIT_NAME } from './chunk-OG6Z3SU7.js';
 import { RUNNER_FILE_MODE } from './chunk-PA6CK6WQ.js';
 import { claudeEnvPath, withoutCredentialLines } from './chunk-BALIE3BA.js';
 import { parseRunnerEnv } from './chunk-HACGUL52.js';

package/dist/{chunk-2LFWCIIE.js → chunk-LMDOA3P4.js}

@@ -6,16 +6,16 @@ import { writeDockerClientConfig } from './chunk-6LBSAW6I.js';
 import { zodProblem } from './chunk-I3LTIAOR.js';
 import { senderPidfile } from './chunk-7IFYI7XF.js';
 import { installScrubContext } from './chunk-D3EDZPJR.js';
-import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, startHostServices, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, closeHostBuild, containerSenderCommand, hostCommandEnvironment, execArgv, signalInContainer, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, helperFirecrackerNote, stopJailed, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, ROOT_DISK_ID_PREFIX, copyJudgeTree } from './chunk-4YLL2E7Y.js';
-import { readBranchHead, fetchCommit, diffBetween } from './chunk-YXHKCHWG.js';
+import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, startHostServices, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, closeHostBuild, containerSenderCommand, hostCommandEnvironment, execArgv, signalInContainer, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, helperFirecrackerNote, stopJailed, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, ROOT_DISK_ID_PREFIX, copyJudgeTree } from './chunk-MEF4FNS6.js';
+import { readBranchHead, fetchCommit, diffBetween } from './chunk-ZVLSYWDF.js';
 import { isSameProcess, startTimeOf } from './chunk-JBJTC3UU.js';
 import { waitForAgent, vmExecArgs } from './chunk-5THSC6BD.js';
 import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-L26V6ILJ.js';
 import { describeCallFailure, resolveGoverningSource, prefetchGovernedContext, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-Z57X4KNC.js';
-import { imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-VWQCYOBS.js';
-import { DEFAULT_CACHE_DISK, formatBytes, allocatedBytes } from './chunk-X4JEBMYN.js';
-import { parseSize, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-OGMXVPCS.js';
-import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-NE63JADS.js';
+import { imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-QDSSMMBH.js';
+import { DEFAULT_CACHE_DISK, formatBytes, allocatedBytes } from './chunk-YMJB3T7O.js';
+import { parseSize, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-XOL5E5JC.js';
+import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-ES4ULBAL.js';
 import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-VSLJ6PPG.js';
 import { planArtifactUpload } from './chunk-MPC2UAW2.js';
 import { scrubText } from './chunk-NIY2UBT6.js';

package/dist/{chunk-RZOO7X4G.js → chunk-LUQZWSGR.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { scrubReason, stripTerminalControls } from './chunk-2LFWCIIE.js';
+import { scrubReason, stripTerminalControls } from './chunk-LMDOA3P4.js';
 import { RunnerAlreadyRunningError, readPidFile } from './chunk-F5UL23I2.js';
 import { isSameProcess } from './chunk-JBJTC3UU.js';
-import { checkFit, RUNNER_RESERVE_BYTES } from './chunk-EHOFFTVX.js';
+import { checkFit, RUNNER_RESERVE_BYTES } from './chunk-OG6Z3SU7.js';
 import { isSignatureRefusal, postJson } from './chunk-VSLJ6PPG.js';
 import { signerFor } from './chunk-SOI6K5DY.js';
 import { pidFilePath } from './chunk-PA6CK6WQ.js';

package/dist/{chunk-4YLL2E7Y.js → chunk-MEF4FNS6.js}

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { sha256OfFile, downloadPinned, VoiceDownloadError } from './chunk-2PGI6RDE.js';
-import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-EXZACZ2P.js';
-import { readDefaultBranchHead, cloneRepository, buildRepositoryImage, prepareImageBuild, KEY_PREFIX, FETCHED_DIR, toolsDockerfile, TAG_HOST, metadataFromLabels, writeRecord, FETCHED_FFMPEG, FETCHED_GH, FETCHED_TINI, FETCHED_VOICE_DIR } from './chunk-YXHKCHWG.js';
+import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-FC6R435X.js';
+import { readDefaultBranchHead, cloneRepository, buildRepositoryImage, prepareImageBuild, KEY_PREFIX, FETCHED_DIR, toolsDockerfile, TAG_HOST, metadataFromLabels, writeRecord, FETCHED_FFMPEG, FETCHED_GH, FETCHED_TINI, FETCHED_VOICE_DIR } from './chunk-ZVLSYWDF.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
 import { currentCliBuild } from './chunk-OGFGZQA3.js';
 import { runExec, execCapture, waitForAgent } from './chunk-5THSC6BD.js';
 import { GUEST_CID, linkVsockSockets } from './chunk-L26V6ILJ.js';
 import { describeCallFailure, keepStagedContext, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, prefetchGovernedContext, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript, WORKFLOW_PERMISSION_REASON } from './chunk-Z57X4KNC.js';
 import { runnerImageVersion } from './chunk-MZBQTVFG.js';
-import { runnerCredentialProblem, builtinKind, hostAllowed } from './chunk-VWQCYOBS.js';
-import { formatBytes, allocatedBytes } from './chunk-X4JEBMYN.js';
-import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, readDu, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun } from './chunk-OGMXVPCS.js';
+import { runnerCredentialProblem, builtinKind, hostAllowed } from './chunk-QDSSMMBH.js';
+import { formatBytes, allocatedBytes } from './chunk-YMJB3T7O.js';
+import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, readDu, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun } from './chunk-XOL5E5JC.js';
 import { RecipeError, DOCKER_FEATURE, writeSanitizedRecipe, classifyProperties } from './chunk-3Z3MPR55.js';
-import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, hostHelperPinned, CLAUDE_CODE_VERSION, guestAssetsPinned, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, JAILER_BINARY_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, GUEST_ASSETS_VERSION, BUILDER_DISK_VERSION, builderDiskPinned, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, GH_VERSION, TINI_SHA256, TINI_VERSION, VOICE_PACK_FILES, BUILDER_DISK_SHA256, BUILDER_DISK_BASE_URL, DEFAULT_BASE_IMAGE } from './chunk-NE63JADS.js';
+import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, hostHelperPinned, CLAUDE_CODE_VERSION, guestAssetsPinned, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, JAILER_BINARY_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, GUEST_ASSETS_VERSION, BUILDER_DISK_VERSION, builderDiskPinned, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, GH_VERSION, TINI_SHA256, TINI_VERSION, VOICE_PACK_FILES, BUILDER_DISK_SHA256, BUILDER_DISK_BASE_URL, DEFAULT_BASE_IMAGE } from './chunk-ES4ULBAL.js';
 import { WorkCommandError, getJson } from './chunk-VSLJ6PPG.js';
 import { sanitizeTerminal } from './chunk-MPC2UAW2.js';
 import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-NIY2UBT6.js';

package/dist/{chunk-BLHUFOOB.js → chunk-MMAYRJJJ.js}

@@ -1195,8 +1195,8 @@ function doctorExitCode(checks) {
 
 // src/doctor-report.ts
 async function gatherDoctorChecks() {
-  const { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK } = await import('./build-disk-ECTLWTPC.js');
-  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-MVA7YTFW.js');
+  const { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK } = await import('./build-disk-3SSDZAA4.js');
+  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-I2LWGSWY.js');
   const configPath = defaultRunnerConfigPath();
   const runnerHost = hasRunnerBlock(configPath);
   const hooks = (() => {
@@ -1217,7 +1217,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-MFLM7DMY.js');
+    const { runnerHostChecks } = await import('./doctor-KSYNTUW4.js');
     const gateway = (() => {
       try {
         const { url, apiKey, appId } = loadRunnerConfig(configPath);
@@ -1245,7 +1245,7 @@ async function gatherDoctorChecks() {
       const { existsSync: existsSync3 } = await import('fs');
       if (process.platform !== "linux" || !existsSync3("/run/systemd/system")) return void 0;
       const { inspectService, realInspectProbes } = await import('./inspect-DNLXTXLA.js');
-      const { DEFAULT_UNIT_NAME } = await import('./install-47Z7VNWP.js');
+      const { DEFAULT_UNIT_NAME } = await import('./install-7MW35BOF.js');
       const { dirname: dirname2 } = await import('path');
       return inspectService(DEFAULT_UNIT_NAME, dirname2(configPath), realInspectProbes());
     })();

package/dist/{chunk-EHOFFTVX.js → chunk-OG6Z3SU7.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { builtinKind } from './chunk-VWQCYOBS.js';
-import { parseSize } from './chunk-OGMXVPCS.js';
+import { builtinKind } from './chunk-QDSSMMBH.js';
+import { parseSize } from './chunk-XOL5E5JC.js';
 import { runnerDir } from './chunk-PA6CK6WQ.js';
 import { CLAUDE_CREDENTIAL_ID, CLAUDE_ENV_FILE, credentialLineIn, withoutCredentialLines } from './chunk-BALIE3BA.js';
 import { FD_SLOTS_PER_BUILD, FD_STORE_ENV } from './chunk-HACGUL52.js';

package/dist/{chunk-VWQCYOBS.js → chunk-QDSSMMBH.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { DEFAULT_CACHE_DISK, DEFAULT_BUILD_DISK } from './chunk-X4JEBMYN.js';
-import { parseSize } from './chunk-OGMXVPCS.js';
+import { DEFAULT_CACHE_DISK, DEFAULT_BUILD_DISK } from './chunk-YMJB3T7O.js';
+import { parseSize } from './chunk-XOL5E5JC.js';
 import { isRefusedInConfig, resolveDestinations, isReservedVariable } from './chunk-BALIE3BA.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { existsSync, statSync, accessSync, constants, readFileSync } from 'fs';

package/dist/{chunk-OGMXVPCS.js → chunk-XOL5E5JC.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { RecipeError } from './chunk-3Z3MPR55.js';
-import { BUILDKIT_IMAGE } from './chunk-NE63JADS.js';
+import { BUILDKIT_IMAGE } from './chunk-ES4ULBAL.js';
 import { compareVersions } from './chunk-NIY2UBT6.js';
 import { ensureHostKey } from './chunk-SOI6K5DY.js';
 import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, runnerDir, jobsDir } from './chunk-PA6CK6WQ.js';

package/dist/{chunk-VMIOUVJF.js → chunk-Y45JWNCG.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { placeholderQueues, placeholderProblem } from './chunk-4YLL2E7Y.js';
-import { checkFit } from './chunk-EHOFFTVX.js';
-import { builtinKind, imageBuildOf } from './chunk-VWQCYOBS.js';
-import { realBuildDiskProbe, checkDiskFit, DEFAULT_CACHE_DISK, DEFAULT_BUILD_DISK } from './chunk-X4JEBMYN.js';
-import { builderDiskPinned } from './chunk-NE63JADS.js';
+import { placeholderQueues, placeholderProblem } from './chunk-MEF4FNS6.js';
+import { checkFit } from './chunk-OG6Z3SU7.js';
+import { builtinKind, imageBuildOf } from './chunk-QDSSMMBH.js';
+import { realBuildDiskProbe, checkDiskFit, DEFAULT_CACHE_DISK, DEFAULT_BUILD_DISK } from './chunk-YMJB3T7O.js';
+import { builderDiskPinned } from './chunk-ES4ULBAL.js';
 import { claudeCredentialVariablesSet, claudeCredential } from './chunk-BALIE3BA.js';
 import { closeSync, openSync, constants } from 'fs';
 import { totalmem } from 'os';

package/dist/{chunk-X4JEBMYN.js → chunk-YMJB3T7O.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { parseSize, BUILD_LABEL, RUNNER_LABEL, runnerLabelValue } from './chunk-OGMXVPCS.js';
+import { parseSize, BUILD_LABEL, RUNNER_LABEL, runnerLabelValue } from './chunk-XOL5E5JC.js';
 import { buildsDir, rootfsDir, runnerDir, imagesDir, builderCacheDiskPath } from './chunk-PA6CK6WQ.js';
 import { spawnSync } from 'child_process';
 import { statfsSync, statSync, existsSync, readdirSync } from 'fs';

package/dist/{chunk-YXHKCHWG.js → chunk-ZVLSYWDF.js}

@@ -3,7 +3,7 @@ import { createRequire } from 'node:module';
 import { claimPidFile, RunnerAlreadyRunningError, releasePidFile } from './chunk-F5UL23I2.js';
 import { startTimeOf } from './chunk-JBJTC3UU.js';
 import { RecipeError, locateRecipe, readRecipe, assertBuildable, writeSanitizedRecipe, classifyProperties, SANITIZED_NAME } from './chunk-3Z3MPR55.js';
-import { GH_VERSION, VOICE_PACK_FILES, VOICE_PACK_VERSION, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, TINI_SHA256, TINI_VERSION, CLAUDE_CODE_VERSION, NODE_IMAGE, DEFAULT_BASE_IMAGE, MEDIA_PINS, PLAYWRIGHT_VERSION } from './chunk-NE63JADS.js';
+import { GH_VERSION, VOICE_PACK_FILES, VOICE_PACK_VERSION, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, TINI_SHA256, TINI_VERSION, CLAUDE_CODE_VERSION, NODE_IMAGE, DEFAULT_BASE_IMAGE, MEDIA_PINS, PLAYWRIGHT_VERSION } from './chunk-ES4ULBAL.js';
 import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, repoCacheDir, imagesDir, imageBuildLogsDir, attemptStamp, runnerDir, rootfsPathFor } from './chunk-PA6CK6WQ.js';
 import { PROXY_WARNING_FLAG, withGitConfig, tokenHeader } from './chunk-BALIE3BA.js';
 import { RELAY_ID, RELAY_USER } from './chunk-MESOOLF4.js';

package/dist/{cli-65ZQJ622.js → cli-UWOSIR44.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { gatherDoctorChecks, doctorExitCode, summarizeChecks, renderDoctorText, recordWrapped, recordUnwrapped, recordRemoval, readManifest, recordInstall, recordStatusline } from './chunk-BLHUFOOB.js';
+import { gatherDoctorChecks, doctorExitCode, summarizeChecks, renderDoctorText, recordWrapped, recordUnwrapped, recordRemoval, readManifest, recordInstall, recordStatusline } from './chunk-MMAYRJJJ.js';
 import './chunk-DKFUXYGD.js';
 import './chunk-EJL6CWSP.js';
 import './chunk-KT4CN6OU.js';
@@ -3927,13 +3927,13 @@ what CLIs older than ${FIRST_VERSION_READING_AGENTS_SKILLS} do. \`` + cliInvocat
         if (changed.length > 0 && !opts.json) process.stdout.write(`Removed the claude function from ${changed.join(", ")}.
 `);
       }
-      const shell = !opts.remove && opts.shellFunction !== void 0 ? (await import('./init-cmd-3VWJUWXA.js')).applyShellFunctionFlag(opts.shellFunction, { home: homeFromEnv(), shellPath: process.env.SHELL }) : void 0;
+      const shell = !opts.remove && opts.shellFunction !== void 0 ? (await import('./init-cmd-P55KQRDW.js')).applyShellFunctionFlag(opts.shellFunction, { home: homeFromEnv(), shellPath: process.env.SHELL }) : void 0;
       if (opts.json) writeJson(shell === void 0 ? outcome.result : { ...outcome.result, shellFunction: { outcome: shell.outcome, reason: shell.reason } });
       else process.stdout.write(outcome.text + skillsLine + (shell?.text ?? ""));
       return;
     }
     await installMachineSkillsForSetup();
-    const { runInitCommand } = await import('./init-cmd-3VWJUWXA.js');
+    const { runInitCommand } = await import('./init-cmd-P55KQRDW.js');
     const code = await runInitCommand(
       { json: opts.json, factory: opts.factory, shellFunction: opts.shellFunction },
       {
@@ -4395,7 +4395,7 @@ its criterion, and the new record retires the old record. The id must be the ite
 as \`work demo --item <n> --json\` prints it.
 `
   ).action(async (manifest, opts) => {
-    const { runEmitDemo, EmitDemoError } = await import('./emit-demo-cmd-IQRS7BP2.js');
+    const { runEmitDemo, EmitDemoError } = await import('./emit-demo-cmd-VPPVKLSJ.js');
     let item;
     if (opts.item !== void 0) {
       item = parseTrackerNumber(opts.item);
@@ -4963,7 +4963,7 @@ by a different key is refused; claiming again with the same key extends
 it. --host is a label only.
 `
   ).action(async (opts) => {
-    const { runWorkClaim, WorkCommandError } = await import('./work-claim-cmd-G3DC5LJK.js');
+    const { runWorkClaim, WorkCommandError } = await import('./work-claim-cmd-N25RIAVT.js');
     try {
       await runWorkClaim(opts);
     } catch (err) {
@@ -4983,7 +4983,7 @@ Extends the live lease this API key holds. Refused with a 410 if the
 lease has expired, or a 403 if a different key holds it.
 `
   ).action(async (opts) => {
-    const { runWorkRenew, WorkCommandError } = await import('./work-claim-cmd-G3DC5LJK.js');
+    const { runWorkRenew, WorkCommandError } = await import('./work-claim-cmd-N25RIAVT.js');
     try {
       await runWorkRenew(opts);
     } catch (err) {
@@ -5015,7 +5015,7 @@ applies to a host's lease only. A later tool call in the session
 takes the lease again.
 `
   ).action(async (opts) => {
-    const { runWorkRelease, WorkCommandError } = await import('./work-claim-cmd-G3DC5LJK.js');
+    const { runWorkRelease, WorkCommandError } = await import('./work-claim-cmd-N25RIAVT.js');
     try {
       await runWorkRelease(opts);
     } catch (err) {
@@ -5084,8 +5084,8 @@ function registerRunnerCommands(program2) {
   const runnerCmd = program2.command("runner").description("Take work from the implement and amend queues on this machine");
   const configOption = "the cloud config file to run against (default: ~/.outerlayer/config.json)";
   runnerCmd.command("start").description("Run the loop: claim work, run it, report, clean up, repeat").option("--config <path>", configOption).action(async (opts) => {
-    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-MVA7YTFW.js');
-    const { start, RunnerStartError } = await import('./loop-5QV4VZOF.js');
+    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-I2LWGSWY.js');
+    const { start, RunnerStartError } = await import('./loop-QX6OG6FM.js');
     const { RunnerAlreadyRunningError } = await import('./pidfile-5UDLYPMC.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     try {
@@ -5103,9 +5103,9 @@ function registerRunnerCommands(program2) {
     "after",
     "\nReads OUTERLAYER_URL, OUTERLAYER_APP_ID, OUTERLAYER_API_KEY, OUTERLAYER_RUNNER_NAME and one Claude credential\n(CLAUDE_CODE_OAUTH_TOKEN or ANTHROPIC_API_KEY) from the environment. OUTERLAYER_AGENT\nis optional and defaults to claude. On a later start it refuses variables that disagree with the config in the volume.\nThe image sets OUTERLAYER_RUNNER_IMAGE; outside the image, use `runner start`.\n"
   ).action(async () => {
-    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-MVA7YTFW.js');
-    const { containerStart } = await import('./container-start-RVH5743X.js');
-    const { start, RunnerStartError } = await import('./loop-5QV4VZOF.js');
+    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-I2LWGSWY.js');
+    const { containerStart } = await import('./container-start-W4NCCAZC.js');
+    const { start, RunnerStartError } = await import('./loop-QX6OG6FM.js');
     const { RunnerAlreadyRunningError } = await import('./pidfile-5UDLYPMC.js');
     try {
       const result = await containerStart({
@@ -5124,8 +5124,8 @@ function registerRunnerCommands(program2) {
     }
   });
   runnerCmd.command("check").description("Validate the config, the hooks and the key, and print the effective settings").option("--config <path>", configOption).action(async (opts) => {
-    const { defaultRunnerConfigPath } = await import('./config-MVA7YTFW.js');
-    const { runRunnerCheck } = await import('./check-XPMN4GHD.js');
+    const { defaultRunnerConfigPath } = await import('./config-I2LWGSWY.js');
+    const { runRunnerCheck } = await import('./check-KWAVBL4Q.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const result = await runRunnerCheck(configPath);
     if (!result.ok) {
@@ -5146,7 +5146,7 @@ function registerRunnerCommands(program2) {
 `);
   });
   runnerCmd.command("install").description("Put this CLI in the runner's install layout; --service adds its service").option("--config <path>", configOption).option("--service", "set up the service that keeps the runner running").option("--print", "with --service, print the unit and set up nothing").option("--user <account>", "with --service, the account the service runs as").option("--replace", "replace a unit or launcher file this command did not write").option("--allow-downgrade", "install this CLI even when it is older than the version the runner runs").option("--unit-name <name>", "with --service, the unit's name, to run a second runner beside the first").action(async (opts) => {
-    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-MVA7YTFW.js');
+    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-I2LWGSWY.js');
     const { runRunnerInstall, RunnerInstallError, launcherSummary, restartNote } = await import('./install-cmd-FV7IZ7XF.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     if (opts.service !== true) {
@@ -5159,7 +5159,7 @@ function registerRunnerCommands(program2) {
     }
     try {
       if (opts.service === true) {
-        const { installServiceCommand } = await import('./command-QENZQGZL.js');
+        const { installServiceCommand } = await import('./command-UDK2TONI.js');
         const result2 = await installServiceCommand({
           configPath,
           print: opts.print,
@@ -5214,8 +5214,8 @@ To keep it running, run ${C.yellow}${cliInvocation()} runner install --service${
       fail(`pass --service: \`${cliInvocation()} runner uninstall --service\` removes the runner's service.`);
       return;
     }
-    const { defaultRunnerConfigPath } = await import('./config-MVA7YTFW.js');
-    const { uninstallServiceCommand } = await import('./command-QENZQGZL.js');
+    const { defaultRunnerConfigPath } = await import('./config-I2LWGSWY.js');
+    const { uninstallServiceCommand } = await import('./command-UDK2TONI.js');
     const result = await uninstallServiceCommand({ configPath: opts.config ?? defaultRunnerConfigPath(), unitName: opts.unitName, home: homeFromEnv() });
     if (result.ok) for (const line of result.lines) process.stdout.write(`${C.green}\u2713${C.reset} ${line}
 `);
@@ -5242,12 +5242,12 @@ already in claude.env is used.
   printf '%s' "$CLAUDE_CODE_OAUTH_TOKEN" | ${cliInvocation()} runner init --agent claude --factory <org>/<factory>
 `
   ).action(async (opts) => {
-    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-MVA7YTFW.js');
-    const { prepareRunnerInit, runRunnerInit, RunnerInitError, writeRunnerInit } = await import('./init-WIHSXL74.js');
-    const { obtainRunnerKey, runnerKeyLogin } = await import('./runner-key-N4IIFMUX.js');
-    const { detectMachine } = await import('./machine-XTSUAX3K.js');
-    const { chooseVm, runVmInit, VmInitError } = await import('./init-VWJIINBC.js');
-    const { AGENT_COMMANDS, credentialFromStdin, isAgentName, restartForCredential, RunnerEnvError } = await import('./runner-env-ILP6BAC2.js');
+    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-I2LWGSWY.js');
+    const { prepareRunnerInit, runRunnerInit, RunnerInitError, writeRunnerInit } = await import('./init-5QBQWYSY.js');
+    const { obtainRunnerKey, runnerKeyLogin } = await import('./runner-key-7TN4NJJD.js');
+    const { detectMachine } = await import('./machine-ZDSC5MIT.js');
+    const { chooseVm, runVmInit, VmInitError } = await import('./init-HJXO36GA.js');
+    const { AGENT_COMMANDS, credentialFromStdin, isAgentName, restartForCredential, RunnerEnvError } = await import('./runner-env-BWKVKMKG.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     if (opts.agent !== void 0 && !isAgentName(opts.agent)) {
       fail(`--agent ${opts.agent}: runner init writes commands for ${Object.keys(AGENT_COMMANDS).join(", ")}. For another agent, leave --agent out and edit runner.commands.`);
@@ -5397,7 +5397,7 @@ ${C.yellow}The runner will not update itself: ${installErr.message}${C.reset}
       let serviceUp = false;
       let restart;
       if (installedLayout) {
-        const { installServiceCommand } = await import('./command-QENZQGZL.js');
+        const { installServiceCommand } = await import('./command-UDK2TONI.js');
         const service = await installServiceCommand({
           configPath,
           entryPath: process.argv[1] ?? "",
@@ -5441,12 +5441,12 @@ Next:
     "after",
     "\nA repository governed by a control plane builds the control plane's image, at the commit\nthe gateway has stored for it. A repository that governs itself fetches the head of its\ndefault branch into the runner's cache. Either way it reads .devcontainer/devcontainer.json\nand builds the image with the devcontainer CLI. Settings\nthat reach the host or widen the container's privileges are ignored and listed. The\nimage holds this CLI and a pinned Claude Code. Nothing runs inside the image.\n"
   ).action(async (opts) => {
-    const { defaultRunnerConfigPath } = await import('./config-MVA7YTFW.js');
-    const { buildRepositoryImage, RecipeError } = await import('./build-SEAQVLD5.js');
+    const { defaultRunnerConfigPath } = await import('./config-I2LWGSWY.js');
+    const { buildRepositoryImage, RecipeError } = await import('./build-LSU25G3M.js');
     const { currentCliBuild } = await import('./cli-build-K56DK4DS.js');
-    const { createDockerHost } = await import('./docker-YKYQJHL2.js');
-    const { builderSpec } = await import('./builder-LUPHKUFM.js');
-    const { loadRunnerConfig } = await import('./config-MVA7YTFW.js');
+    const { createDockerHost } = await import('./docker-AYRM3TQP.js');
+    const { builderSpec } = await import('./builder-WBYLD47N.js');
+    const { loadRunnerConfig } = await import('./config-I2LWGSWY.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const loaded = (() => {
       try {
@@ -5457,7 +5457,7 @@ Next:
     })();
     const memory = loaded?.build?.memory ?? "8g";
     try {
-      const { ensureRunnerIdentity } = await import('./runner-identity-MF3AYBR6.js');
+      const { ensureRunnerIdentity } = await import('./runner-identity-QULLBQLS.js');
       await ensureRunnerIdentity(configPath, { log: (line) => console.error(line) }).catch((err) => {
         console.error(`the runner's Docker identity could not be stored: ${err instanceof Error ? err.message : String(err)}`);
       });
@@ -5524,17 +5524,17 @@ Next:
     }
   });
   runnerCmd.command("stop").description("Take no more work; finish running jobs, then exit").option("--config <path>", "the cloud config file naming the runner to stop").option("--now", "end running jobs immediately, with outcome stopped").action(async (opts) => {
-    const { defaultRunnerConfigPath } = await import('./config-MVA7YTFW.js');
-    const { requestStop } = await import('./loop-5QV4VZOF.js');
+    const { defaultRunnerConfigPath } = await import('./config-I2LWGSWY.js');
+    const { requestStop } = await import('./loop-QX6OG6FM.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const { runnerImageVersion } = await import('./image-tag-ADSLWXBA.js');
     await requestStop(configPath, Boolean(opts.now), void 0, { image: runnerImageVersion() !== void 0 });
   });
   runnerCmd.command("status").description("List running jobs; with --recent, finished ones too").option("--config <path>", "the cloud config file naming the runner to inspect").option("--recent", "also list finished jobs, newest first, capped at 20").option("--json", "machine-readable JSON output").action(async (opts) => {
-    const { defaultRunnerConfigPath, loadRunnerConfig } = await import('./config-MVA7YTFW.js');
+    const { defaultRunnerConfigPath, loadRunnerConfig } = await import('./config-I2LWGSWY.js');
     const { jobsDir, runnerDir } = await import('./paths-7HVTDE6J.js');
-    const { listJobFiles, runnerProcessState } = await import('./loop-5QV4VZOF.js');
-    const { renderStatus } = await import('./status-VBUCLDN5.js');
+    const { listJobFiles, runnerProcessState } = await import('./loop-QX6OG6FM.js');
+    const { renderStatus } = await import('./status-LVA6GMLY.js');
     const { readHousekeepingRecord } = await import('./record-PPZEXAVA.js');
     const path2 = await import('path');
     const configPath = opts.config ?? defaultRunnerConfigPath();
@@ -5556,7 +5556,7 @@ Next:
     const service = await (async () => {
       if (process.platform !== "linux" || !existsSync("/run/systemd/system")) return void 0;
       const { inspectService, realInspectProbes } = await import('./inspect-DNLXTXLA.js');
-      const { DEFAULT_UNIT_NAME } = await import('./install-47Z7VNWP.js');
+      const { DEFAULT_UNIT_NAME } = await import('./install-7MW35BOF.js');
       const facts = inspectService(DEFAULT_UNIT_NAME, path2.dirname(configPath), realInspectProbes());
       return facts === void 0 ? void 0 : { unit: facts.unit, running: facts.mainPid !== void 0, delegated: facts.delegate };
     })();
@@ -5593,8 +5593,8 @@ Next:
     );
   });
   runnerCmd.command("logs").argument("<item>", "the work item's number in the factory").description("Print the newest attempt's log for one item").option("--config <path>", "the cloud config file naming the runner to inspect").option("-f, --follow", "keep printing as the log grows").action(async (itemArg, opts) => {
-    const { defaultRunnerConfigPath } = await import('./config-MVA7YTFW.js');
-    const { listJobFiles } = await import('./loop-5QV4VZOF.js');
+    const { defaultRunnerConfigPath } = await import('./config-I2LWGSWY.js');
+    const { listJobFiles } = await import('./loop-QX6OG6FM.js');
     const { newestAttempt, logPathFor, tail, RunnerLogsError } = await import('./logs-HI46FO6Z.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const item = parseTrackerNumber(itemArg);

package/dist/{command-QENZQGZL.js → command-UDK2TONI.js}

@@ -3,10 +3,10 @@ import { createRequire } from 'node:module';
 import { runRunnerInstall, launcherSummary, restartNote } from './chunk-DXJTBU7A.js';
 import './chunk-Z5IW4DHH.js';
 import { currentLink, execStartCommand } from './chunk-NBZ7XBT6.js';
-import { detectMachine, helperSocketPath, ensureFirecrackerAndJailer } from './chunk-4YLL2E7Y.js';
+import { detectMachine, helperSocketPath, ensureFirecrackerAndJailer } from './chunk-MEF4FNS6.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-EXZACZ2P.js';
-import './chunk-YXHKCHWG.js';
+import './chunk-FC6R435X.js';
+import './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
@@ -15,12 +15,12 @@ import './chunk-L26V6ILJ.js';
 import './chunk-Z57X4KNC.js';
 import './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import { DEFAULT_UNIT_NAME, installService, uninstallService, realTaskScheduler, UNIT_MARKER } from './chunk-EHOFFTVX.js';
-import { runnerVmOf, loadRunnerConfig, builtinKind } from './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import { readJobFile } from './chunk-OGMXVPCS.js';
+import { DEFAULT_UNIT_NAME, installService, uninstallService, realTaskScheduler, UNIT_MARKER } from './chunk-OG6Z3SU7.js';
+import { runnerVmOf, loadRunnerConfig, builtinKind } from './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import { readJobFile } from './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, FIRECRACKER_BINARY_SHA256, JAILER_BINARY_SHA256, HOST_HELPER_SHA256, HOST_HELPER_BASE_URL, HOST_HELPER_ASSETS_VERSION, hostHelperPinned } from './chunk-NE63JADS.js';
+import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, FIRECRACKER_BINARY_SHA256, JAILER_BINARY_SHA256, HOST_HELPER_SHA256, HOST_HELPER_BASE_URL, HOST_HELPER_ASSETS_VERSION, hostHelperPinned } from './chunk-ES4ULBAL.js';
 import { realLima } from './chunk-77MM5RYD.js';
 import { writeLaunchAgent, launchAgentPath } from './chunk-LF6MLJCY.js';
 import './chunk-VSLJ6PPG.js';

package/dist/{config-MVA7YTFW.js → config-I2LWGSWY.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DEFAULT_CHECK_TIME_LIMIT_MINUTES, DEFAULT_UPDATE_MAX_WAIT_HOURS, RunnerConfigError, builtinKind, checkHooks, defaultRunnerConfigPath, hasRunnerBlock, imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, loadRunnerConfig, resolveBuild, resolveHousekeeping, runnerCredentialProblem, runnerVmOf } from './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+export { DEFAULT_CHECK_TIME_LIMIT_MINUTES, DEFAULT_UPDATE_MAX_WAIT_HOURS, RunnerConfigError, builtinKind, checkHooks, defaultRunnerConfigPath, hasRunnerBlock, imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, loadRunnerConfig, resolveBuild, resolveHousekeeping, runnerCredentialProblem, runnerVmOf } from './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-NIY2UBT6.js';
 import './chunk-SOI6K5DY.js';
 import './chunk-PA6CK6WQ.js';

package/dist/{container-start-RVH5743X.js → container-start-W4NCCAZC.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { reportFailedStart, BUILD_MEMORY_VARIABLE } from './chunk-RZOO7X4G.js';
-import './chunk-2LFWCIIE.js';
+import { reportFailedStart, BUILD_MEMORY_VARIABLE } from './chunk-LUQZWSGR.js';
+import './chunk-LMDOA3P4.js';
 import './chunk-ZVB57WI6.js';
 import './chunk-HVRQQOMH.js';
 import './chunk-6LBSAW6I.js';
@@ -11,10 +11,10 @@ import './chunk-D3EDZPJR.js';
 import './chunk-7UPMYRPS.js';
 import './chunk-ESVW4MJY.js';
 import './chunk-TBT347UY.js';
-import { detectMachine, supportsContainerBuilds, MIN_ENGINE_MAJOR, describeMachineDocker, RunnerInitError, prepareRunnerInit, writeRunnerInit } from './chunk-4YLL2E7Y.js';
+import { detectMachine, supportsContainerBuilds, MIN_ENGINE_MAJOR, describeMachineDocker, RunnerInitError, prepareRunnerInit, writeRunnerInit } from './chunk-MEF4FNS6.js';
 import './chunk-2PGI6RDE.js';
-import { isAgentName, AGENT_COMMANDS } from './chunk-EXZACZ2P.js';
-import './chunk-YXHKCHWG.js';
+import { isAgentName, AGENT_COMMANDS } from './chunk-FC6R435X.js';
+import './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
@@ -23,12 +23,12 @@ import './chunk-L26V6ILJ.js';
 import './chunk-Z57X4KNC.js';
 import { runnerImageVersion, IMAGE_VERSION_VARIABLE } from './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import './chunk-EHOFFTVX.js';
-import './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import { parseSize } from './chunk-OGMXVPCS.js';
+import './chunk-OG6Z3SU7.js';
+import './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import { parseSize } from './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-VSLJ6PPG.js';
 import './chunk-IP7BIBXJ.js';
 import './chunk-HLZMAJJD.js';

package/dist/{docker-YKYQJHL2.js → docker-AYRM3TQP.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { childEnvironment, createDockerHost, spawnRun } from './chunk-OGMXVPCS.js';
+export { childEnvironment, createDockerHost, spawnRun } from './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-NIY2UBT6.js';
 import './chunk-SOI6K5DY.js';
 import './chunk-PA6CK6WQ.js';

package/dist/{doctor-MFLM7DMY.js → doctor-KSYNTUW4.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launcherCheck } from './chunk-Z5IW4DHH.js';
-import { keepsHostBuilder, managedProblems } from './chunk-VMIOUVJF.js';
+import { keepsHostBuilder, managedProblems } from './chunk-Y45JWNCG.js';
 import './chunk-NBZ7XBT6.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { needsClaudeCredential, claudeCredentialCheck, detectMachine, supportsContainerBuilds, describeMachineDocker, MIN_ENGINE_MAJOR, reachDockerStep, supportsMicroVmBuilds, microVmArchSupported, microVmAssetsPinned, helperFirecrackerNote, probeHelper, helperSocketPath, missingPermissionOf, missingPermissionFix } from './chunk-4YLL2E7Y.js';
+import { needsClaudeCredential, claudeCredentialCheck, detectMachine, supportsContainerBuilds, describeMachineDocker, MIN_ENGINE_MAJOR, reachDockerStep, supportsMicroVmBuilds, microVmArchSupported, microVmAssetsPinned, helperFirecrackerNote, probeHelper, helperSocketPath, missingPermissionOf, missingPermissionFix } from './chunk-MEF4FNS6.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-EXZACZ2P.js';
-import './chunk-YXHKCHWG.js';
+import './chunk-FC6R435X.js';
+import './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
@@ -16,12 +16,12 @@ import './chunk-L26V6ILJ.js';
 import './chunk-Z57X4KNC.js';
 import { runnerImageVersion, imageAdvice, readUpdateStatus, imageTag, pullInstruction } from './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import './chunk-EHOFFTVX.js';
-import { builtinKind, allowHostProblem, MAX_ALLOW_HOSTS } from './chunk-VWQCYOBS.js';
-import { realBuildDiskProbe, DEFAULT_BUILD_DISK, freeBytes, checkDiskFit, formatBytes } from './chunk-X4JEBMYN.js';
-import { resolveDevcontainerCli, buildxState, spawnRun, parseSize } from './chunk-OGMXVPCS.js';
+import './chunk-OG6Z3SU7.js';
+import { builtinKind, allowHostProblem, MAX_ALLOW_HOSTS } from './chunk-QDSSMMBH.js';
+import { realBuildDiskProbe, DEFAULT_BUILD_DISK, freeBytes, checkDiskFit, formatBytes } from './chunk-YMJB3T7O.js';
+import { resolveDevcontainerCli, buildxState, spawnRun, parseSize } from './chunk-XOL5E5JC.js';
 import { locateRecipe, assertBuildable, readRecipe, RecipeError } from './chunk-3Z3MPR55.js';
-import { FIRECRACKER_VERSION, builderDiskPinned, CLAUDE_CODE_VERSION } from './chunk-NE63JADS.js';
+import { FIRECRACKER_VERSION, builderDiskPinned, CLAUDE_CODE_VERSION } from './chunk-ES4ULBAL.js';
 import { getJson, WorkCommandError, signatureRefusalMessage } from './chunk-VSLJ6PPG.js';
 import './chunk-IP7BIBXJ.js';
 import './chunk-HLZMAJJD.js';

package/dist/{emit-demo-cmd-IQRS7BP2.js → emit-demo-cmd-VPPVKLSJ.js}

@@ -7,7 +7,7 @@ import './chunk-7UPMYRPS.js';
 import './chunk-ESVW4MJY.js';
 import './chunk-TBT347UY.js';
 import { VoiceDownloadError, downloadPinned, sha256OfFile } from './chunk-2PGI6RDE.js';
-import { VOICE_PACK_FILES, VOICE_PACK_VERSION } from './chunk-NE63JADS.js';
+import { VOICE_PACK_FILES, VOICE_PACK_VERSION } from './chunk-ES4ULBAL.js';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
 import { autoConnect } from './chunk-HLZMAJJD.js';
 import './chunk-S5CNYXUA.js';

package/dist/index.js

@@ -26,5 +26,5 @@ if (argv[0] === "claude") {
   process.exit(await runClaudeLauncher(argv.slice(1)));
 }
 (await import('./hook-fast-3IYSWDL4.js')).recordLinkExitFailure(argv);
-var { runCli } = await import('./cli-65ZQJ622.js');
+var { runCli } = await import('./cli-UWOSIR44.js');
 await runCli(process.argv);

package/dist/{init-WIHSXL74.js → init-5QBQWYSY.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { PLACEHOLDER_MARKER, RunnerInitError, isPlaceholderCommand, prepareRunnerInit, readConfigObject, runRunnerInit, writeRunnerInit } from './chunk-4YLL2E7Y.js';
+export { PLACEHOLDER_MARKER, RunnerInitError, isPlaceholderCommand, prepareRunnerInit, readConfigObject, runRunnerInit, writeRunnerInit } from './chunk-MEF4FNS6.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-EXZACZ2P.js';
-import './chunk-YXHKCHWG.js';
+import './chunk-FC6R435X.js';
+import './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
@@ -12,12 +12,12 @@ import './chunk-L26V6ILJ.js';
 import './chunk-Z57X4KNC.js';
 import './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import './chunk-EHOFFTVX.js';
-import './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+import './chunk-OG6Z3SU7.js';
+import './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-VSLJ6PPG.js';
 import './chunk-IP7BIBXJ.js';
 import './chunk-HLZMAJJD.js';

package/dist/{init-VWJIINBC.js → init-HJXO36GA.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { npmSupportsProvenance } from './chunk-E7R2GIAW.js';
-import { RunnerInitError, readConfigObject } from './chunk-4YLL2E7Y.js';
+import { RunnerInitError, readConfigObject } from './chunk-MEF4FNS6.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-EXZACZ2P.js';
-import './chunk-YXHKCHWG.js';
+import './chunk-FC6R435X.js';
+import './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
@@ -13,12 +13,12 @@ import './chunk-L26V6ILJ.js';
 import './chunk-Z57X4KNC.js';
 import './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import { checkFit, VM_SERVICE_NAME, RUNNER_RESERVE_BYTES } from './chunk-EHOFFTVX.js';
-import { runnerCredentialProblem, resolveBuild, resolveHousekeeping } from './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import { parseSize } from './chunk-OGMXVPCS.js';
+import { checkFit, VM_SERVICE_NAME, RUNNER_RESERVE_BYTES } from './chunk-OG6Z3SU7.js';
+import { runnerCredentialProblem, resolveBuild, resolveHousekeeping } from './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import { parseSize } from './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import { writeLaunchAgent } from './chunk-LF6MLJCY.js';
 import './chunk-VSLJ6PPG.js';
 import './chunk-IP7BIBXJ.js';

package/dist/{init-cmd-3VWJUWXA.js → init-cmd-P55KQRDW.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { summarizeChecks, summaryText, renderDoctorText } from './chunk-BLHUFOOB.js';
+import { summarizeChecks, summaryText, renderDoctorText } from './chunk-MMAYRJJJ.js';
 import './chunk-DKFUXYGD.js';
 import { shellFunctionInstalled, removeShellFunction, installShellFunction, SHELL_FUNCTION_LINE } from './chunk-CJJDJ7AT.js';
 import './chunk-EJL6CWSP.js';

package/dist/{install-47Z7VNWP.js → install-7MW35BOF.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DEFAULT_UNIT_NAME, installService, uninstallService, unitPathFor } from './chunk-EHOFFTVX.js';
-import './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+export { DEFAULT_UNIT_NAME, installService, uninstallService, unitPathFor } from './chunk-OG6Z3SU7.js';
+import './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-NIY2UBT6.js';
 import './chunk-SOI6K5DY.js';
 import './chunk-PA6CK6WQ.js';

package/dist/{loop-5QV4VZOF.js → loop-QX6OG6FM.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { RunnerStartError, leaseTimeLeftFor, listJobFiles, logUnusableHelper, probeBuild, probeCredentials, requestStop, runnerProcessState, runtimeOf, sampleUsage, start, tick, watchTick } from './chunk-YY3OQJ4X.js';
+export { RunnerStartError, leaseTimeLeftFor, listJobFiles, logUnusableHelper, probeBuild, probeCredentials, requestStop, runnerProcessState, runtimeOf, sampleUsage, start, tick, watchTick } from './chunk-AL7K5RZJ.js';
 import './chunk-GH246BGV.js';
 import './chunk-57L2YAJA.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-E7R2GIAW.js';
-import './chunk-RZOO7X4G.js';
-import './chunk-2LFWCIIE.js';
+import './chunk-LUQZWSGR.js';
+import './chunk-LMDOA3P4.js';
 import './chunk-ZVB57WI6.js';
 import './chunk-DA3PLB5N.js';
 import './chunk-HVRQQOMH.js';
@@ -16,13 +16,13 @@ import './chunk-7IFYI7XF.js';
 import './chunk-D3EDZPJR.js';
 import './chunk-7UPMYRPS.js';
 import './chunk-ESVW4MJY.js';
-import './chunk-VMIOUVJF.js';
+import './chunk-Y45JWNCG.js';
 import './chunk-NBZ7XBT6.js';
 import './chunk-TBT347UY.js';
-import './chunk-4YLL2E7Y.js';
+import './chunk-MEF4FNS6.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-EXZACZ2P.js';
-import './chunk-YXHKCHWG.js';
+import './chunk-FC6R435X.js';
+import './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
@@ -31,12 +31,12 @@ import './chunk-L26V6ILJ.js';
 import './chunk-Z57X4KNC.js';
 import './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import './chunk-EHOFFTVX.js';
-import './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+import './chunk-OG6Z3SU7.js';
+import './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-VSLJ6PPG.js';
 import './chunk-IP7BIBXJ.js';
 import './chunk-HLZMAJJD.js';

package/dist/{machine-XTSUAX3K.js → machine-ZDSC5MIT.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { describeMachineDocker, detectMachine, microVmArchSupported, microVmAssetsPinned, reachDockerStep, supportsContainerBuilds, supportsMicroVmBuilds } from './chunk-4YLL2E7Y.js';
+export { describeMachineDocker, detectMachine, microVmArchSupported, microVmAssetsPinned, reachDockerStep, supportsContainerBuilds, supportsMicroVmBuilds } from './chunk-MEF4FNS6.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-EXZACZ2P.js';
-import './chunk-YXHKCHWG.js';
+import './chunk-FC6R435X.js';
+import './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
@@ -12,12 +12,12 @@ import './chunk-L26V6ILJ.js';
 import './chunk-Z57X4KNC.js';
 import './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import './chunk-EHOFFTVX.js';
-import './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+import './chunk-OG6Z3SU7.js';
+import './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-VSLJ6PPG.js';
 import './chunk-IP7BIBXJ.js';
 import './chunk-HLZMAJJD.js';

package/dist/{runner-env-ILP6BAC2.js → runner-env-BWKVKMKG.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { AGENT_COMMANDS, RunnerEnvError, credentialFromStdin, hasStoredCredential, isAgentName, restartForCredential, storeClaudeCredential } from './chunk-EXZACZ2P.js';
-import './chunk-EHOFFTVX.js';
-import './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+export { AGENT_COMMANDS, RunnerEnvError, credentialFromStdin, hasStoredCredential, isAgentName, restartForCredential, storeClaudeCredential } from './chunk-FC6R435X.js';
+import './chunk-OG6Z3SU7.js';
+import './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-NIY2UBT6.js';
 import './chunk-SOI6K5DY.js';
 import './chunk-PA6CK6WQ.js';

package/dist/{runner-identity-MF3AYBR6.js → runner-identity-QULLBQLS.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { RUNNER_LABEL, builderNameFor, dockerIdentity, ensureRunnerIdentity, pathLabelValue, readRunnerIdentity } from './chunk-OGMXVPCS.js';
+export { RUNNER_LABEL, builderNameFor, dockerIdentity, ensureRunnerIdentity, pathLabelValue, readRunnerIdentity } from './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-NIY2UBT6.js';
 import './chunk-SOI6K5DY.js';
 import './chunk-PA6CK6WQ.js';

package/dist/{runner-key-N4IIFMUX.js → runner-key-7TN4NJJD.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { readConfigObject, RunnerInitError } from './chunk-4YLL2E7Y.js';
+import { readConfigObject, RunnerInitError } from './chunk-MEF4FNS6.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-EXZACZ2P.js';
-import './chunk-YXHKCHWG.js';
+import './chunk-FC6R435X.js';
+import './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
@@ -12,12 +12,12 @@ import './chunk-L26V6ILJ.js';
 import './chunk-Z57X4KNC.js';
 import './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import './chunk-EHOFFTVX.js';
-import { runnerCredentialProblem } from './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+import './chunk-OG6Z3SU7.js';
+import { runnerCredentialProblem } from './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import { getJson } from './chunk-VSLJ6PPG.js';
 import './chunk-IP7BIBXJ.js';
 import './chunk-HLZMAJJD.js';

package/dist/{status-VBUCLDN5.js → status-LVA6GMLY.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isReadable, ALREADY_RELEASED, RENEW_INTERVAL_SECONDS } from './chunk-2LFWCIIE.js';
+import { isReadable, ALREADY_RELEASED, RENEW_INTERVAL_SECONDS } from './chunk-LMDOA3P4.js';
 import { jobStateFormatOf } from './chunk-ZVB57WI6.js';
 import './chunk-HVRQQOMH.js';
 import './chunk-6LBSAW6I.js';
@@ -10,10 +10,10 @@ import './chunk-D3EDZPJR.js';
 import './chunk-7UPMYRPS.js';
 import './chunk-ESVW4MJY.js';
 import './chunk-TBT347UY.js';
-import { LEASE_SECONDS } from './chunk-4YLL2E7Y.js';
+import { LEASE_SECONDS } from './chunk-MEF4FNS6.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-EXZACZ2P.js';
-import './chunk-YXHKCHWG.js';
+import './chunk-FC6R435X.js';
+import './chunk-ZVLSYWDF.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
@@ -22,12 +22,12 @@ import './chunk-L26V6ILJ.js';
 import { formatDuration, formatClock, relativeToRunner } from './chunk-Z57X4KNC.js';
 import { pullInstruction } from './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import './chunk-EHOFFTVX.js';
-import './chunk-VWQCYOBS.js';
-import { formatBytes } from './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+import './chunk-OG6Z3SU7.js';
+import './chunk-QDSSMMBH.js';
+import { formatBytes } from './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import './chunk-VSLJ6PPG.js';
 import './chunk-IP7BIBXJ.js';
 import './chunk-HLZMAJJD.js';

package/dist/{work-claim-cmd-G3DC5LJK.js → work-claim-cmd-N25RIAVT.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { RUNNER_PROTOCOL } from './chunk-DA3PLB5N.js';
-import { defaultRunnerConfigPath } from './chunk-VWQCYOBS.js';
-import './chunk-X4JEBMYN.js';
-import './chunk-OGMXVPCS.js';
+import { defaultRunnerConfigPath } from './chunk-QDSSMMBH.js';
+import './chunk-YMJB3T7O.js';
+import './chunk-XOL5E5JC.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-NE63JADS.js';
+import './chunk-ES4ULBAL.js';
 import { resolveCredentials, WorkCommandError, parsePositiveInt, postJson, environmentFacts, findLiveItemForIssue } from './chunk-VSLJ6PPG.js';
 export { WorkCommandError } from './chunk-VSLJ6PPG.js';
 import './chunk-IP7BIBXJ.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@outerlayer/cli",
-  "version": "0.33.0",
+  "version": "0.33.1-next.20261023182548",
   "description": "OuterLayer CLI — commands: init, claude, connect, doctor, login, logout, sync, daemon (alias: watch), emit, findings, work, spec, runner, hooks, mcp, context. Capture and sync coding-agent sessions, and record proof of factory work.",
   "license": "Apache-2.0",
   "author": "Magu Studios, Inc.",