@outerlayer/cli 0.34.0-next.20261025132734 → 0.34.0-next.20261025180645

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (130) hide show
  1. package/README.md +6 -0
  2. package/dist/{agent-setup-HEJM3D3V.js → agent-setup-FNDKCPUP.js} +8 -9
  3. package/dist/{bridge-NBCXFTT4.js → bridge-YJBB4YA3.js} +2 -3
  4. package/dist/build-B4OKU4MV.js +16 -0
  5. package/dist/{build-disk-LEZ6LAM3.js → build-disk-ZL46AEN3.js} +7 -9
  6. package/dist/build-info.json +1 -1
  7. package/dist/{builder-I32JOQII.js → builder-XFPWE74N.js} +6 -8
  8. package/dist/{check-OOUGS65D.js → check-QULEN437.js} +45 -45
  9. package/dist/{chunk-65AKMFBH.js → chunk-25GRRBTH.js} +1 -1
  10. package/dist/{chunk-3CKMB2UK.js → chunk-2D6CKNR7.js} +8 -4
  11. package/dist/{chunk-5THSC6BD.js → chunk-2ILU7UAU.js} +1 -1
  12. package/dist/{chunk-5QBUX5YZ.js → chunk-3EJBI5JW.js} +3 -3
  13. package/dist/{chunk-6RKD7YZ6.js → chunk-3N77LUQI.js} +1 -1
  14. package/dist/{chunk-ES4ULBAL.js → chunk-4UPET3R7.js} +7 -3
  15. package/dist/{chunk-43I7PXDP.js → chunk-5AFPP3GZ.js} +239 -15
  16. package/dist/{chunk-HVRQQOMH.js → chunk-63IVRRIO.js} +3 -3
  17. package/dist/{chunk-FVKH3PMV.js → chunk-6OLVVAOK.js} +5 -5
  18. package/dist/{chunk-6ZFY2L2T.js → chunk-AJYZNISW.js} +416 -20
  19. package/dist/{chunk-6NUPXDAA.js → chunk-AVPLEFQR.js} +3 -3
  20. package/dist/{chunk-EN3YWO7Q.js → chunk-BHSSGVOY.js} +4 -4
  21. package/dist/{chunk-O6DYCIVW.js → chunk-CAQCDYKF.js} +2 -2
  22. package/dist/{chunk-7WM7K2DY.js → chunk-DNZYXEMY.js} +35 -21
  23. package/dist/{chunk-QMWUPRYQ.js → chunk-EGVHFHY4.js} +4 -4
  24. package/dist/{chunk-ACRRO3MB.js → chunk-FD5ASWTG.js} +22 -22
  25. package/dist/{chunk-57L2YAJA.js → chunk-FDJPDZSR.js} +1 -1
  26. package/dist/{chunk-EE2ZZGQV.js → chunk-FVCHHSHB.js} +3 -3
  27. package/dist/{chunk-BALIE3BA.js → chunk-G4W4B33M.js} +191 -8
  28. package/dist/{chunk-ZW6L275N.js → chunk-HHFZXOBC.js} +12 -14
  29. package/dist/{chunk-AMEM2ZLL.js → chunk-INOUUSYI.js} +29 -9
  30. package/dist/{chunk-XFFUXXI4.js → chunk-JBCOUY4M.js} +3 -3
  31. package/dist/{chunk-YEVPRO7L.js → chunk-JQSZTQSK.js} +81 -52
  32. package/dist/{chunk-TDAQHYM4.js → chunk-K2UAQWYO.js} +3 -3
  33. package/dist/{chunk-ZYKFYNES.js → chunk-KM2HLQE3.js} +2 -2
  34. package/dist/{chunk-DXJTBU7A.js → chunk-LUHIN4UZ.js} +3 -3
  35. package/dist/{chunk-SOI6K5DY.js → chunk-MOI2KDLH.js} +1 -1
  36. package/dist/{chunk-QDVGOMSC.js → chunk-NW26E4YU.js} +3 -3
  37. package/dist/{chunk-YIBFGAYI.js → chunk-O4Z2MNNL.js} +6 -6
  38. package/dist/{chunk-L26V6ILJ.js → chunk-OGPEHSNW.js} +1 -1
  39. package/dist/{chunk-2JB4GD34.js → chunk-OQLF3MQQ.js} +3 -4
  40. package/dist/{chunk-Z5IW4DHH.js → chunk-OS7DJOQJ.js} +1 -1
  41. package/dist/{chunk-DA3PLB5N.js → chunk-PAK5P2ND.js} +1 -1
  42. package/dist/{chunk-3IH6K7KG.js → chunk-PFHTT4PP.js} +5 -5
  43. package/dist/{chunk-PA6CK6WQ.js → chunk-PXGU3GKY.js} +1 -1
  44. package/dist/{chunk-YGSY2NWU.js → chunk-QANM5COC.js} +6 -6
  45. package/dist/{chunk-K5Q6T7SE.js → chunk-QQP3S5FU.js} +3 -3
  46. package/dist/{chunk-62LXQM7U.js → chunk-RFVIQLNB.js} +5 -5
  47. package/dist/{chunk-E4ASIOVL.js → chunk-RHV5SRI2.js} +3 -3
  48. package/dist/{chunk-6LBSAW6I.js → chunk-SI6WDF3U.js} +1 -1
  49. package/dist/chunk-SUOZYOWO.js +51 -0
  50. package/dist/{chunk-MZBQTVFG.js → chunk-SYVRBBLW.js} +1 -1
  51. package/dist/{chunk-5HZGLLNW.js → chunk-TBKV4L2W.js} +5 -5
  52. package/dist/{chunk-GH246BGV.js → chunk-TFPNPS4Q.js} +1 -1
  53. package/dist/{chunk-NBZ7XBT6.js → chunk-UMYYYF7B.js} +1 -1
  54. package/dist/{chunk-Z4KWHSO4.js → chunk-UN3SQTVL.js} +7 -7
  55. package/dist/{chunk-ZVLSYWDF.js → chunk-UO4FQAOX.js} +16 -12
  56. package/dist/{chunk-4Y54SQXH.js → chunk-VJ34F55N.js} +105 -44
  57. package/dist/{chunk-272AKVRP.js → chunk-YHKU2NOZ.js} +1 -1
  58. package/dist/{chunk-F5UL23I2.js → chunk-YNMVVQOQ.js} +1 -1
  59. package/dist/{claude-launcher-MORG66PJ.js → claude-launcher-OQZNW7XJ.js} +1 -1
  60. package/dist/{cli-XI7RUSC5.js → cli-G3P2B2XE.js} +124 -118
  61. package/dist/{command-BJSHY6OB.js → command-4XOXVWFW.js} +169 -48
  62. package/dist/config-QASNKYM6.js +16 -0
  63. package/dist/{connect-cmd-YAUOCX4X.js → connect-cmd-MEDWMW3L.js} +8 -9
  64. package/dist/{container-start-QADK3YGL.js → container-start-2DHCWV73.js} +34 -36
  65. package/dist/{context-show-cmd-VHY3OBIA.js → context-show-cmd-VSFCG663.js} +9 -10
  66. package/dist/{control-plane-launch-QSBWTA2V.js → control-plane-launch-XBGHM7DB.js} +5 -6
  67. package/dist/{dist-ZAHCXYSG.js → dist-QGN5R4Y2.js} +1 -1
  68. package/dist/{docker-DJ73SZRC.js → docker-TAC6G4VU.js} +6 -8
  69. package/dist/{doctor-UR76MCGI.js → doctor-LK6E3XOW.js} +68 -43
  70. package/dist/{emit-artifact-cmd-DP2EQ54N.js → emit-artifact-cmd-L4REOPWX.js} +13 -14
  71. package/dist/{emit-cmd-7NMNKDK7.js → emit-cmd-7TU3JBJ2.js} +2 -2
  72. package/dist/{emit-criteria-cmd-TTFBN6RK.js → emit-criteria-cmd-QVFOQARC.js} +10 -11
  73. package/dist/{emit-demo-cmd-Z7YGLEBJ.js → emit-demo-cmd-L4B6OOTV.js} +15 -16
  74. package/dist/{emit-finding-cmd-IQRD3J2X.js → emit-finding-cmd-YXFCIWMU.js} +10 -11
  75. package/dist/{emit-result-cmd-GIWB6UHH.js → emit-result-cmd-NI4LCTUM.js} +12 -13
  76. package/dist/{emit-step-cmd-PU5TTU6C.js → emit-step-cmd-HWAUCZZB.js} +10 -11
  77. package/dist/{exec-client-7PT4W7JR.js → exec-client-QB4OZRGM.js} +3 -4
  78. package/dist/find-unit-4UR647S4.js +18 -0
  79. package/dist/{findings-cmd-7J5SHCUO.js → findings-cmd-O2IBO25E.js} +10 -11
  80. package/dist/{fleet-readiness-G63D76EX.js → fleet-readiness-NJYTQYTA.js} +5 -6
  81. package/dist/{governing-source-DLESDP6T.js → governing-source-JCI7VDQ6.js} +12 -13
  82. package/dist/{guest-init-J3F3AEEY.js → guest-init-IF5LXGUL.js} +4 -5
  83. package/dist/{hook-fast-VQXRDS6E.js → hook-fast-GPUL7T77.js} +1 -1
  84. package/dist/host-key-5RU322O3.js +9 -0
  85. package/dist/{image-tag-ADSLWXBA.js → image-tag-SEMBVB5D.js} +3 -4
  86. package/dist/index.js +4 -4
  87. package/dist/{init-KSXU4PA7.js → init-2CEULE3F.js} +25 -27
  88. package/dist/{init-67R7LO4C.js → init-FAIF7KOK.js} +25 -27
  89. package/dist/{init-cmd-MNOVMADM.js → init-cmd-HZUUMO45.js} +13 -14
  90. package/dist/{init-update-6KEXRCJH.js → init-update-TTMFFNMB.js} +12 -13
  91. package/dist/{install-cmd-FV7IZ7XF.js → install-cmd-TWGRGEVL.js} +5 -6
  92. package/dist/{logs-HI46FO6Z.js → logs-6CMB3DO6.js} +2 -3
  93. package/dist/{loop-KUEOPBKX.js → loop-7U7MVICV.js} +41 -43
  94. package/dist/{machine-EQEAPT76.js → machine-S3JHOX4V.js} +25 -27
  95. package/dist/{mcp-serve-cmd-7ABBV2QE.js → mcp-serve-cmd-MWGIN6YL.js} +4 -5
  96. package/dist/{paths-7HVTDE6J.js → paths-T2DEBI62.js} +2 -3
  97. package/dist/pending-ERXWVLLG.js +9 -0
  98. package/dist/{pidfile-5UDLYPMC.js → pidfile-EAD2OEM7.js} +3 -4
  99. package/dist/{record-PPZEXAVA.js → record-IMXQNHPB.js} +3 -4
  100. package/dist/runner-env-BJPUHAKZ.js +18 -0
  101. package/dist/runner-identity-ZCPPC2BJ.js +13 -0
  102. package/dist/{runner-key-ML7R33HF.js → runner-key-CYSUYKSX.js} +25 -27
  103. package/dist/{session-sender-A43GZQ7T.js → session-sender-5T7BXPKC.js} +13 -14
  104. package/dist/{spec-cmd-VVUJZSG2.js → spec-cmd-4ABYAFNZ.js} +11 -12
  105. package/dist/{status-4G6K7I2C.js → status-2AP7J2L7.js} +32 -34
  106. package/dist/{sync-cmd-ZEC65ABJ.js → sync-cmd-34CGNA6T.js} +12 -13
  107. package/dist/{update-steps-XLO7734I.js → update-steps-JQOCCDWO.js} +33 -35
  108. package/dist/{watch-QB4AMWR3.js → watch-6HU7LCUY.js} +12 -13
  109. package/dist/{work-claim-cmd-6W3GBHRS.js → work-claim-cmd-5QKLHSCR.js} +17 -19
  110. package/dist/{work-cmd-LTZXOPPN.js → work-cmd-3MKUIE2C.js} +10 -11
  111. package/dist/{work-comment-cmd-LDZBUO6M.js → work-comment-cmd-ESC3DSHI.js} +11 -12
  112. package/dist/{work-demo-cmd-77LISWQ3.js → work-demo-cmd-7S23DGYO.js} +10 -11
  113. package/dist/{work-logs-cmd-FK7HE7PC.js → work-logs-cmd-46UPNN7Q.js} +10 -11
  114. package/dist/{work-open-pr-cmd-WVONEHZL.js → work-open-pr-cmd-JNGTGLIP.js} +11 -12
  115. package/dist/{work-pr-cmd-6IPXWJEH.js → work-pr-cmd-2J2LKETD.js} +10 -11
  116. package/dist/{work-proofs-cmd-TGIAP5IO.js → work-proofs-cmd-HRWTHYSS.js} +11 -12
  117. package/dist/{work-proofs-record-XPAU7N57.js → work-proofs-record-6OKAT3IC.js} +18 -19
  118. package/dist/{work-stop-cmd-UJ45EV3A.js → work-stop-cmd-Y22XIVQ6.js} +10 -11
  119. package/package.json +1 -1
  120. package/dist/build-LSU25G3M.js +0 -14
  121. package/dist/chunk-3Z3MPR55.js +0 -226
  122. package/dist/chunk-HACGUL52.js +0 -183
  123. package/dist/config-WRHQDGVI.js +0 -18
  124. package/dist/host-key-UERIQRE6.js +0 -10
  125. package/dist/inspect-DNLXTXLA.js +0 -6
  126. package/dist/install-OCBERTPQ.js +0 -19
  127. package/dist/pending-5HZACM2V.js +0 -10
  128. package/dist/runner-env-L7OPH3O3.js +0 -20
  129. package/dist/runner-identity-VASV2AEQ.js +0 -15
  130. package/dist/{chunk-2AIOOU3A.js → chunk-KPHRRCUY.js} +1 -1
package/README.md CHANGED
@@ -328,6 +328,12 @@ content:
328
328
  files and no credential for the control plane. The runner deletes the staged
329
329
  copy before the command starts. A host that cannot read the control plane
330
330
  fails the build at provision.
331
+ - **`outerlayer runner start` on a managed runner** asks your gateway for the
332
+ factory's stored Anthropic API key once for each claim (`POST
333
+ /v1/work-items/{id}/claim/anthropic-key`, signed with the host key), before it
334
+ provisions the build. The runner keeps the key in memory only, gives it to
335
+ the build's model traffic, and forgets it when the attempt ends. It never
336
+ writes the key to disk or to a log.
331
337
  - **`outerlayer runner start` with `builtin:process` hooks** runs each build
332
338
  as a process under the runner's own user, with no isolation, and the
333
339
  attempt records `shared-user`. The runner clones the item's repository
@@ -1,18 +1,16 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- export { keepHandWritten, runAgentSetup } from './chunk-5QBUX5YZ.js';
4
- import './chunk-2AIOOU3A.js';
3
+ export { keepHandWritten, runAgentSetup } from './chunk-3EJBI5JW.js';
4
+ import './chunk-KPHRRCUY.js';
5
5
  import './chunk-KT4CN6OU.js';
6
6
  import './chunk-4P6QGMPN.js';
7
- import './chunk-NKOM4JKY.js';
8
7
  import './chunk-ANPNT6PM.js';
9
- import './chunk-O6DYCIVW.js';
8
+ import './chunk-NKOM4JKY.js';
9
+ import './chunk-CAQCDYKF.js';
10
10
  import './chunk-JWNH4ZTF.js';
11
- import './chunk-6RKD7YZ6.js';
11
+ import './chunk-3N77LUQI.js';
12
12
  import './chunk-PJDQPF5N.js';
13
- import './chunk-SOI6K5DY.js';
14
- import './chunk-PA6CK6WQ.js';
15
- import './chunk-BALIE3BA.js';
13
+ import './chunk-MOI2KDLH.js';
16
14
  import './chunk-ZJSNLVCE.js';
17
15
  import './chunk-BJ3KTMDH.js';
18
16
  import './chunk-ZQSANKS4.js';
@@ -26,7 +24,8 @@ import './chunk-TUSYOL2O.js';
26
24
  import './chunk-FGXT5OXS.js';
27
25
  import './chunk-EOTMDIYC.js';
28
26
  import './chunk-VNVZDWO3.js';
29
- import './chunk-HACGUL52.js';
27
+ import './chunk-PXGU3GKY.js';
28
+ import './chunk-G4W4B33M.js';
30
29
  import './chunk-MESOOLF4.js';
31
30
  import './chunk-Z5GEFMRW.js';
32
31
 
@@ -1,8 +1,7 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig } from './chunk-6LBSAW6I.js';
4
- import './chunk-BALIE3BA.js';
5
- import './chunk-HACGUL52.js';
3
+ export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig } from './chunk-SI6WDF3U.js';
4
+ import './chunk-G4W4B33M.js';
6
5
  import './chunk-MESOOLF4.js';
7
6
  import './chunk-Z5GEFMRW.js';
8
7
 
@@ -0,0 +1,16 @@
1
+ #!/usr/bin/env node
2
+ import { createRequire } from 'node:module';
3
+ export { KEY_PREFIX, TAG_HOST, buildRepositoryImage, metadataFromLabels, prepareImageBuild, writeRecord } from './chunk-UO4FQAOX.js';
4
+ export { RecipeError } from './chunk-5AFPP3GZ.js';
5
+ import './chunk-4UPET3R7.js';
6
+ import './chunk-YNMVVQOQ.js';
7
+ import './chunk-JBJTC3UU.js';
8
+ import './chunk-MOI2KDLH.js';
9
+ import './chunk-AJYZNISW.js';
10
+ import './chunk-EOTMDIYC.js';
11
+ import './chunk-PXGU3GKY.js';
12
+ import './chunk-G4W4B33M.js';
13
+ import './chunk-MESOOLF4.js';
14
+ import './chunk-Z5GEFMRW.js';
15
+
16
+ createRequire(import.meta.url);
@@ -1,15 +1,13 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- export { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK, DOCKER_CACHE_MS, allocatedBytes, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-ZYKFYNES.js';
4
- import './chunk-43I7PXDP.js';
5
- import './chunk-3Z3MPR55.js';
6
- import './chunk-ES4ULBAL.js';
7
- import './chunk-6ZFY2L2T.js';
8
- import './chunk-SOI6K5DY.js';
9
- import './chunk-PA6CK6WQ.js';
10
- import './chunk-BALIE3BA.js';
3
+ export { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK, DOCKER_CACHE_MS, allocatedBytes, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-KM2HLQE3.js';
4
+ import './chunk-5AFPP3GZ.js';
5
+ import './chunk-4UPET3R7.js';
6
+ import './chunk-MOI2KDLH.js';
7
+ import './chunk-AJYZNISW.js';
11
8
  import './chunk-EOTMDIYC.js';
12
- import './chunk-HACGUL52.js';
9
+ import './chunk-PXGU3GKY.js';
10
+ import './chunk-G4W4B33M.js';
13
11
  import './chunk-MESOOLF4.js';
14
12
  import './chunk-Z5GEFMRW.js';
15
13
 
@@ -1 +1 @@
1
- {"id":"2026-10-25T13:28:45.990Z+09b988d","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
1
+ {"id":"2026-10-25T18:08:18.697Z+424fcf9","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
@@ -1,14 +1,12 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-43I7PXDP.js';
4
- import './chunk-3Z3MPR55.js';
5
- import './chunk-ES4ULBAL.js';
6
- import './chunk-6ZFY2L2T.js';
7
- import './chunk-SOI6K5DY.js';
8
- import './chunk-PA6CK6WQ.js';
9
- import './chunk-BALIE3BA.js';
3
+ export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-5AFPP3GZ.js';
4
+ import './chunk-4UPET3R7.js';
5
+ import './chunk-MOI2KDLH.js';
6
+ import './chunk-AJYZNISW.js';
10
7
  import './chunk-EOTMDIYC.js';
11
- import './chunk-HACGUL52.js';
8
+ import './chunk-PXGU3GKY.js';
9
+ import './chunk-G4W4B33M.js';
12
10
  import './chunk-MESOOLF4.js';
13
11
  import './chunk-Z5GEFMRW.js';
14
12
 
@@ -1,61 +1,58 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- import { probeCredentials } from './chunk-4Y54SQXH.js';
3
+ import { probeCredentials } from './chunk-VJ34F55N.js';
4
+ import './chunk-O4Z2MNNL.js';
5
+ import './chunk-TFPNPS4Q.js';
6
+ import './chunk-RHV5SRI2.js';
7
+ import './chunk-FD5ASWTG.js';
8
+ import './chunk-ZVB57WI6.js';
9
+ import './chunk-FDJPDZSR.js';
4
10
  import './chunk-3JVYMD4G.js';
5
- import './chunk-YIBFGAYI.js';
6
11
  import './chunk-E7R2GIAW.js';
7
- import './chunk-GH246BGV.js';
8
- import './chunk-E4ASIOVL.js';
9
- import './chunk-ACRRO3MB.js';
10
- import './chunk-ZVB57WI6.js';
11
- import './chunk-57L2YAJA.js';
12
- import './chunk-DA3PLB5N.js';
13
- import './chunk-HVRQQOMH.js';
14
- import './chunk-6LBSAW6I.js';
12
+ import './chunk-PAK5P2ND.js';
13
+ import './chunk-63IVRRIO.js';
15
14
  import './chunk-I3LTIAOR.js';
16
- import './chunk-XFFUXXI4.js';
17
- import './chunk-YGSY2NWU.js';
18
- import './chunk-QMWUPRYQ.js';
15
+ import './chunk-JBCOUY4M.js';
16
+ import './chunk-QANM5COC.js';
17
+ import './chunk-EGVHFHY4.js';
19
18
  import './chunk-ESVW4MJY.js';
20
- import { managedProblems, managedFactsOf } from './chunk-7WM7K2DY.js';
21
- import './chunk-NBZ7XBT6.js';
19
+ import './chunk-SI6WDF3U.js';
20
+ import { managedProblems, managedFactsOf } from './chunk-DNZYXEMY.js';
21
+ import './chunk-UMYYYF7B.js';
22
22
  import './chunk-TBT347UY.js';
23
- import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, probeHelper, HELPER_ENV, helperSocketPath, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-YEVPRO7L.js';
23
+ import { findServiceUnit } from './chunk-SUOZYOWO.js';
24
+ import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, HELPER_ENV, helperSocketPath, probeHelper, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-JQSZTQSK.js';
24
25
  import './chunk-2PGI6RDE.js';
25
- import './chunk-2JB4GD34.js';
26
- import './chunk-ZVLSYWDF.js';
27
- import './chunk-F5UL23I2.js';
28
- import './chunk-JBJTC3UU.js';
26
+ import './chunk-UO4FQAOX.js';
29
27
  import './chunk-OGFGZQA3.js';
30
- import './chunk-5THSC6BD.js';
31
- import './chunk-L26V6ILJ.js';
32
- import './chunk-62LXQM7U.js';
33
- import './chunk-MZBQTVFG.js';
28
+ import './chunk-2ILU7UAU.js';
29
+ import './chunk-OGPEHSNW.js';
30
+ import './chunk-RFVIQLNB.js';
31
+ import './chunk-SYVRBBLW.js';
34
32
  import './chunk-TQMI335S.js';
35
- import { DEFAULT_UNIT_NAME } from './chunk-AMEM2ZLL.js';
36
- import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-3CKMB2UK.js';
37
- import './chunk-ZYKFYNES.js';
38
- import './chunk-43I7PXDP.js';
39
- import './chunk-3Z3MPR55.js';
40
- import './chunk-ES4ULBAL.js';
41
- import './chunk-Z4KWHSO4.js';
33
+ import './chunk-OQLF3MQQ.js';
34
+ import './chunk-INOUUSYI.js';
35
+ import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-2D6CKNR7.js';
36
+ import './chunk-KM2HLQE3.js';
37
+ import './chunk-5AFPP3GZ.js';
38
+ import './chunk-4UPET3R7.js';
39
+ import './chunk-YNMVVQOQ.js';
40
+ import './chunk-JBJTC3UU.js';
41
+ import './chunk-UN3SQTVL.js';
42
42
  import './chunk-IP7BIBXJ.js';
43
- import './chunk-6NUPXDAA.js';
44
- import './chunk-EE2ZZGQV.js';
45
- import './chunk-MECW77XP.js';
46
- import './chunk-6ZFY2L2T.js';
47
- import './chunk-NKOM4JKY.js';
43
+ import './chunk-AVPLEFQR.js';
44
+ import './chunk-FVCHHSHB.js';
48
45
  import './chunk-Y5YCX6AL.js';
49
46
  import './chunk-G2JWZDFA.js';
50
47
  import './chunk-ANPNT6PM.js';
51
- import './chunk-O6DYCIVW.js';
48
+ import './chunk-MECW77XP.js';
49
+ import './chunk-NKOM4JKY.js';
50
+ import './chunk-CAQCDYKF.js';
52
51
  import './chunk-JWNH4ZTF.js';
53
- import './chunk-6RKD7YZ6.js';
52
+ import './chunk-3N77LUQI.js';
54
53
  import './chunk-PJDQPF5N.js';
55
- import './chunk-SOI6K5DY.js';
56
- import './chunk-PA6CK6WQ.js';
57
- import { claudeEnvPath } from './chunk-BALIE3BA.js';
58
- import './chunk-65AKMFBH.js';
54
+ import './chunk-MOI2KDLH.js';
55
+ import './chunk-25GRRBTH.js';
59
56
  import './chunk-ZJSNLVCE.js';
60
57
  import './chunk-2O5KA67H.js';
61
58
  import './chunk-BKO6JEZI.js';
@@ -63,6 +60,7 @@ import './chunk-FGF52V4V.js';
63
60
  import './chunk-HCVLP7XA.js';
64
61
  import './chunk-BJ3KTMDH.js';
65
62
  import './chunk-ZQSANKS4.js';
63
+ import './chunk-AJYZNISW.js';
66
64
  import './chunk-5BHIBJDA.js';
67
65
  import './chunk-CDDED64E.js';
68
66
  import './chunk-RA3O54FC.js';
@@ -75,7 +73,8 @@ import './chunk-TUSYOL2O.js';
75
73
  import './chunk-FGXT5OXS.js';
76
74
  import './chunk-EOTMDIYC.js';
77
75
  import './chunk-VNVZDWO3.js';
78
- import { parseRunnerEnv } from './chunk-HACGUL52.js';
76
+ import './chunk-PXGU3GKY.js';
77
+ import { claudeEnvPath, parseRunnerEnv } from './chunk-G4W4B33M.js';
79
78
  import './chunk-MESOOLF4.js';
80
79
  import './chunk-Z5GEFMRW.js';
81
80
  import { readFileSync } from 'fs';
@@ -116,12 +115,13 @@ async function runRunnerCheck(configPath, deps = {}) {
116
115
  Object.assign(env, fromFile.env);
117
116
  }
118
117
  Object.assign(env, deps.env ?? process.env);
119
- const asked = await (deps.helper ?? (() => probeHelper(env[HELPER_ENV] ?? helperSocketPath(DEFAULT_UNIT_NAME))))();
118
+ const socket = env[HELPER_ENV] ?? helperSocketPath(findServiceUnit(dirname(configPath), deps.units));
119
+ const asked = await (deps.helper ?? probeHelper)(socket);
120
120
  const unmet = managedProblems(managedFactsOf(config, { env, jailer: asked.ok ? "usable" : { problem: asked.detail } }))[0];
121
121
  if (unmet !== void 0) return { ok: false, check: "managed", message: `${configPath}: ${unmet.reason}` };
122
122
  }
123
123
  let credentialLine;
124
- if (needsClaudeCredential(config.hooks)) {
124
+ if (config.managed !== true && needsClaudeCredential(config.hooks)) {
125
125
  const env = deps.env ?? process.env;
126
126
  const files = [claudeEnvPath(configPath), join(dirname(configPath), "runner.env")];
127
127
  const inShell = claudeCredentialCheck(env, { ignoreHeld: true });
@@ -684,7 +684,7 @@ async function missingControlPlane(cwd, sessionId, home, env) {
684
684
  cleanupEarlierCopies(dirs);
685
685
  }
686
686
  if (!contextPossiblyGoverned(cwd, home)) return void 0;
687
- const { governanceOf } = await import('./control-plane-launch-QSBWTA2V.js');
687
+ const { governanceOf } = await import('./control-plane-launch-XBGHM7DB.js');
688
688
  if (await governanceOf({ cwd, env, home }) !== "governed") return void 0;
689
689
  recordMissingContext(dirs, sessionId, home);
690
690
  const launcher = `${cliInvocation()} claude`;
@@ -1,9 +1,10 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- import { DEFAULT_CACHE_DISK, DEFAULT_BUILD_DISK } from './chunk-ZYKFYNES.js';
4
- import { parseSize } from './chunk-43I7PXDP.js';
5
- import { isRefusedInConfig, resolveDestinations, isReservedVariable } from './chunk-BALIE3BA.js';
3
+ import { DEFAULT_CACHE_DISK, DEFAULT_BUILD_DISK } from './chunk-KM2HLQE3.js';
4
+ import { parseSize } from './chunk-5AFPP3GZ.js';
5
+ import { builderDiskPinned } from './chunk-4UPET3R7.js';
6
6
  import { homeFromEnv } from './chunk-VNVZDWO3.js';
7
+ import { isRefusedInConfig, resolveDestinations, isReservedVariable } from './chunk-G4W4B33M.js';
7
8
  import { existsSync, statSync, accessSync, constants, readFileSync } from 'fs';
8
9
  import { hostname } from 'os';
9
10
  import { join } from 'path';
@@ -78,6 +79,9 @@ function imageBuildOf(config) {
78
79
  if (builtinKind(config.hooks.provision) !== "vm") return "host";
79
80
  return config.build?.imageBuild ?? "vm";
80
81
  }
82
+ function keepsHostBuilder(config, builderDiskIsPinned) {
83
+ return !(imageBuildOf(config) === "vm" && (builderDiskIsPinned ?? builderDiskPinned()));
84
+ }
81
85
  var BUILD_KEYS = ["memory", "cpus", "pids", "disk", "cacheDisk", "variables", "destinations", "allowHosts", "imageBuild"];
82
86
  var HOUSEKEEPING_KEYS = ["jobsKeepDays", "buildCacheMax", "minFreeDisk"];
83
87
  var DEFAULT_JOBS_KEEP_DAYS = 30;
@@ -455,4 +459,4 @@ function resolveBuild(configPath, block) {
455
459
  };
456
460
  }
457
461
 
458
- export { DEFAULT_CHECK_TIME_LIMIT_MINUTES, DEFAULT_UPDATE_MAX_WAIT_HOURS, MAX_ALLOW_HOSTS, RunnerConfigError, allowHostProblem, builtinKind, checkHooks, defaultRunnerConfigPath, hasRunnerBlock, hostAllowed, imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, loadRunnerConfig, resolveBuild, resolveHousekeeping, runnerCredentialProblem, runnerVmOf };
462
+ export { DEFAULT_CHECK_TIME_LIMIT_MINUTES, DEFAULT_UPDATE_MAX_WAIT_HOURS, MAX_ALLOW_HOSTS, RunnerConfigError, allowHostProblem, builtinKind, checkHooks, defaultRunnerConfigPath, hasRunnerBlock, hostAllowed, imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, keepsHostBuilder, loadRunnerConfig, resolveBuild, resolveHousekeeping, runnerCredentialProblem, runnerVmOf };
@@ -1,6 +1,6 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- import { EXEC_PORT } from './chunk-L26V6ILJ.js';
3
+ import { EXEC_PORT } from './chunk-OGPEHSNW.js';
4
4
  import { createConnection } from 'net';
5
5
 
6
6
  createRequire(import.meta.url);
@@ -1,11 +1,11 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
- import { runEmit } from './chunk-2AIOOU3A.js';
3
+ import { runEmit } from './chunk-KPHRRCUY.js';
4
4
  import { addStdioMcpEntryIfAbsent, addDocsMcpEntryIfAbsent, DOCS_MCP_SERVER_NAME } from './chunk-KT4CN6OU.js';
5
5
  import { installStarterPack } from './chunk-4P6QGMPN.js';
6
- import { AGENTS_MD_LAYOUT, declareAgentsMdLayout, linkClaudeSkills, SKILLS_LINK_PATH, describeSkillsLink, isAgentsMdLayout, holdsTodaysLayoutSources, discoverOuterlayerPaths } from './chunk-NKOM4JKY.js';
7
6
  import { C } from './chunk-ANPNT6PM.js';
8
- import { resolveGitCommonDir, defaultGitRunner } from './chunk-O6DYCIVW.js';
7
+ import { AGENTS_MD_LAYOUT, declareAgentsMdLayout, linkClaudeSkills, SKILLS_LINK_PATH, describeSkillsLink, isAgentsMdLayout, holdsTodaysLayoutSources, discoverOuterlayerPaths } from './chunk-NKOM4JKY.js';
8
+ import { resolveGitCommonDir, defaultGitRunner } from './chunk-CAQCDYKF.js';
9
9
  import { loadTemplateFiles, loadMaintainedFiles, skillDir, AGENTS_SKILLS_BASE } from './chunk-ZQSANKS4.js';
10
10
  import { cliInvocation } from './chunk-CRB3POP4.js';
11
11
  import { linkedAgentsPath } from './chunk-DQ6YO7FH.js';
@@ -1,7 +1,7 @@
1
1
  #!/usr/bin/env node
2
2
  import { createRequire } from 'node:module';
3
3
  import { readCloudConfigStrict, readCloudConfig, cloudConfigPath } from './chunk-PJDQPF5N.js';
4
- import { signRunnerRequest, signerFor } from './chunk-SOI6K5DY.js';
4
+ import { signRunnerRequest, signerFor } from './chunk-MOI2KDLH.js';
5
5
  import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
6
6
  import { PLAIN_VERSION, recordCliVersion, removeRecordedVersion } from './chunk-5BHIBJDA.js';
7
7
  import { resolvePackageVersion } from './chunk-RA3O54FC.js';
@@ -44,11 +44,15 @@ function guestAssetsPinned(arch) {
44
44
  var JAILER_BINARY_SHA256 = {
45
45
  x86_64: "65ef226e96f0ceda55ba643f445801ef2cc0ea667ef67cad8ac4f406c9c8434f"
46
46
  };
47
- var HOST_HELPER_ASSETS_VERSION = "13";
47
+ var HOST_HELPER_ASSETS_VERSION = "15";
48
48
  var HOST_HELPER_BASE_URL = `https://github.com/outerlayerai/guest-assets/releases/download/guest-${HOST_HELPER_ASSETS_VERSION}`;
49
49
  var HOST_HELPER_SHA256 = {
50
- x86_64: "0d6cdbce1e5a5e084726b1d1b1cc0bc208f6662fe8d10a1d7a91e8573035505f"
50
+ x86_64: "710176334d514f5cf21871a96a7712646e88ed1d31dc95d835de9f0a817601c4"
51
51
  };
52
+ var HOST_HELPER_SLICE_SINCE = 15;
53
+ function hostHelperSupportsSlice(version = HOST_HELPER_ASSETS_VERSION) {
54
+ return Number(version) >= HOST_HELPER_SLICE_SINCE;
55
+ }
52
56
  function hostHelperPinned(arch = "x86_64", hashes = HOST_HELPER_SHA256) {
53
57
  return hashes[arch] !== "0".repeat(64);
54
58
  }
@@ -105,4 +109,4 @@ var FFMPEG_STATIC = {
105
109
  var MEDIA_PINS = `${VOICE_PACK_VERSION}+${FFMPEG_BUILD_TAG}`;
106
110
  var PLAYWRIGHT_VERSION = "1.64.1";
107
111
 
108
- export { BUILDER_DISK_BASE_URL, BUILDER_DISK_SHA256, BUILDER_DISK_VERSION, BUILDKIT_IMAGE, CLAUDE_CODE_VERSION, DEFAULT_BASE_IMAGE, FFMPEG_BUILD_TAG, FFMPEG_STATIC, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, FIRECRACKER_VERSION, GH_SHA256, GH_VERSION, GUEST_ASSETS_BASE_URL, GUEST_ASSETS_VERSION, GUEST_HELPER_SHA256, GUEST_KERNEL_SHA256, HOST_HELPER_ASSETS_VERSION, HOST_HELPER_BASE_URL, HOST_HELPER_SHA256, JAILER_BINARY_SHA256, MEDIA_PINS, MICROVM_ARCHES, NODE_IMAGE, PLAYWRIGHT_VERSION, TINI_SHA256, TINI_VERSION, VOICE_PACK_FILES, VOICE_PACK_VERSION, builderDiskPinned, firecrackerArch, guestAssetsPinned, hostHelperPinned };
112
+ export { BUILDER_DISK_BASE_URL, BUILDER_DISK_SHA256, BUILDER_DISK_VERSION, BUILDKIT_IMAGE, CLAUDE_CODE_VERSION, DEFAULT_BASE_IMAGE, FFMPEG_BUILD_TAG, FFMPEG_STATIC, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, FIRECRACKER_VERSION, GH_SHA256, GH_VERSION, GUEST_ASSETS_BASE_URL, GUEST_ASSETS_VERSION, GUEST_HELPER_SHA256, GUEST_KERNEL_SHA256, HOST_HELPER_ASSETS_VERSION, HOST_HELPER_BASE_URL, HOST_HELPER_SHA256, HOST_HELPER_SLICE_SINCE, JAILER_BINARY_SHA256, MEDIA_PINS, MICROVM_ARCHES, NODE_IMAGE, PLAYWRIGHT_VERSION, TINI_SHA256, TINI_VERSION, VOICE_PACK_FILES, VOICE_PACK_VERSION, builderDiskPinned, firecrackerArch, guestAssetsPinned, hostHelperPinned, hostHelperSupportsSlice };