@outerlayer/cli 0.34.0-next.20261025210240 → 0.34.0-next.20261026145838

package/dist/{cli-VHQPX2B7.js → cli-PFWJD5QM.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { gatherDoctorChecks, doctorExitCode, summarizeChecks, renderDoctorText, recordWrapped, recordUnwrapped, recordRemoval, readManifest, recordInstall, recordStatusline } from './chunk-HHFZXOBC.js';
-import './chunk-AP2K4LPI.js';
+import { gatherDoctorChecks, doctorExitCode, summarizeChecks, renderDoctorText, recordWrapped, recordUnwrapped, recordRemoval, readManifest, recordInstall, recordStatusline } from './chunk-KAVZAB3E.js';
+import './chunk-XKJOIQ2Q.js';
 import './chunk-KT4CN6OU.js';
 import './chunk-4P6QGMPN.js';
-import { verifiedTrackerNames, TRACKERS } from './chunk-UN3SQTVL.js';
+import { verifiedTrackerNames, TRACKERS } from './chunk-6JZXIWX7.js';
 import './chunk-IP7BIBXJ.js';
-import './chunk-AVPLEFQR.js';
-import './chunk-FVCHHSHB.js';
+import './chunk-7DXVL7TN.js';
+import './chunk-35JMYSUD.js';
 import './chunk-Y5YCX6AL.js';
 import './chunk-G2JWZDFA.js';
 import { C, warnDeprecated, API_KEY_FLAG_DEPRECATION, NO_COLOR_FLAG, stripNoColor } from './chunk-ANPNT6PM.js';
@@ -26,7 +26,7 @@ import './chunk-HCVLP7XA.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
 import './chunk-RCRE42V6.js';
 import './chunk-ZQSANKS4.js';
-import './chunk-AJYZNISW.js';
+import './chunk-GSSVJNP2.js';
 import './chunk-5BHIBJDA.js';
 import './chunk-CDDED64E.js';
 import { resolveVersion, resolvePackageVersion } from './chunk-RA3O54FC.js';
@@ -3799,8 +3799,8 @@ async function installMachineSkillsForSetup() {
 ` : "";
 }
 async function realConnectDepsForCwd() {
-  const { realConnectDeps } = await import('./connect-cmd-MEDWMW3L.js');
-  const { resolveRepoIdentity } = await import('./dist-QGN5R4Y2.js');
+  const { realConnectDeps } = await import('./connect-cmd-TOWE4P45.js');
+  const { resolveRepoIdentity } = await import('./dist-IOPJIQWK.js');
   return {
     ...realConnectDeps(),
     home: homeFromEnv(),
@@ -3874,7 +3874,7 @@ build, ../outerlayer-build/SKILL.md becomes ~/.agents/skills/outerlayer-build/SK
 what CLIs older than ${FIRST_VERSION_READING_AGENTS_SKILLS} do. \`` + cliInvocation() + " doctor` reports the same\nstates under Starter files.\n"
   ).action(async (opts) => {
     if (opts.update || opts.dryRun) {
-      const { runInitUpdateWithFleet, formatInitUpdate, updateFlagProblem } = await import('./init-update-TTMFFNMB.js');
+      const { runInitUpdateWithFleet, formatInitUpdate, updateFlagProblem } = await import('./init-update-RHS6HWLI.js');
       const { fleetReadiness } = await import('./fleet-readiness-NJYTQYTA.js');
       const problem = updateFlagProblem(opts);
       if (problem !== void 0) {
@@ -3926,13 +3926,13 @@ what CLIs older than ${FIRST_VERSION_READING_AGENTS_SKILLS} do. \`` + cliInvocat
         if (changed.length > 0 && !opts.json) process.stdout.write(`Removed the claude function from ${changed.join(", ")}.
 `);
       }
-      const shell = !opts.remove && opts.shellFunction !== void 0 ? (await import('./init-cmd-HZUUMO45.js')).applyShellFunctionFlag(opts.shellFunction, { home: homeFromEnv(), shellPath: process.env.SHELL }) : void 0;
+      const shell = !opts.remove && opts.shellFunction !== void 0 ? (await import('./init-cmd-RXHHEAOT.js')).applyShellFunctionFlag(opts.shellFunction, { home: homeFromEnv(), shellPath: process.env.SHELL }) : void 0;
       if (opts.json) writeJson(shell === void 0 ? outcome.result : { ...outcome.result, shellFunction: { outcome: shell.outcome, reason: shell.reason } });
       else process.stdout.write(outcome.text + skillsLine + (shell?.text ?? ""));
       return;
     }
     await installMachineSkillsForSetup();
-    const { runInitCommand } = await import('./init-cmd-HZUUMO45.js');
+    const { runInitCommand } = await import('./init-cmd-RXHHEAOT.js');
     const code = await runInitCommand(
       { json: opts.json, factory: opts.factory, shellFunction: opts.shellFunction },
       {
@@ -3953,7 +3953,7 @@ what CLIs older than ${FIRST_VERSION_READING_AGENTS_SKILLS} do. \`` + cliInvocat
           shellPath: process.env.SHELL,
           interactive: Boolean(process.stdin.isTTY && process.stderr.isTTY) && opts.json !== true,
           ask: async () => {
-            const { promptOnTerminal } = await import('./connect-cmd-MEDWMW3L.js');
+            const { promptOnTerminal } = await import('./connect-cmd-TOWE4P45.js');
             const answer = await promptOnTerminal({
               message: `Should plain claude start Claude Code through ${cliInvocation()} claude? That is how a session in a governed repository gets its control plane. It adds one block to your zsh or bash startup file.`,
               options: [
@@ -3992,7 +3992,7 @@ linked (true, false, or null when it could not be checked) and, when false,
 linkUrl.
 `
   ).action(async (opts) => {
-    const { runConnectCommand } = await import('./connect-cmd-MEDWMW3L.js');
+    const { runConnectCommand } = await import('./connect-cmd-TOWE4P45.js');
     const code = await runConnectCommand({ factory: opts.factory, json: opts.json }, await realConnectDepsForCwd(), {
       stdout: process.stdout,
       stderr: process.stderr
@@ -4070,7 +4070,7 @@ code is 1: revoke the token on /profile/security.
       else fail(found.reason);
       return;
     }
-    const { runSync, SyncConfigError, SyncTransportError } = await import('./sync-cmd-34CGNA6T.js');
+    const { runSync, SyncConfigError, SyncTransportError } = await import('./sync-cmd-BG2M536W.js');
     try {
       const result = await runSync({
         url: opts.url,
@@ -4101,7 +4101,7 @@ code is 1: revoke the token on /profile/security.
     if (invokedCommandToken(argv) === "watch") {
       warnDeprecated(`\`${cliInvocation()} watch\` is now \`${cliInvocation()} daemon\`; the old name will be removed in a future release.`);
     }
-    const { runWatch } = await import('./watch-6HU7LCUY.js');
+    const { runWatch } = await import('./watch-7A63565I.js');
     await runWatch({ once: opts.once });
   });
   program2.command("hook <event>", { hidden: true }).description("capture-hook fast path, installed by `init`").action(() => {
@@ -4191,7 +4191,7 @@ code is 1: revoke the token on /profile/security.
     process.exitCode = await runBuildCommand({ dir: opts.dir, argv: command });
   });
   program2.command("session-sender", { hidden: true }).description("stream a runner build's sessions to its work item while the build runs").action(async () => {
-    const { runSessionSender } = await import('./session-sender-5T7BXPKC.js');
+    const { runSessionSender } = await import('./session-sender-XDKMK4SF.js');
     try {
       await runSessionSender();
     } catch (err) {
@@ -4287,7 +4287,7 @@ Compiling .outerlayer/ moved to \`${cliInvocation()} context emit\`.
       await compileContext({ dir: opts.dir, check: opts.check, json: opts.json });
       return;
     }
-    const { runEmitResult, EmitResultError } = await import('./emit-result-cmd-NI4LCTUM.js');
+    const { runEmitResult, EmitResultError } = await import('./emit-result-cmd-AYXGCIPR.js');
     try {
       const result = await runEmitResult({
         name,
@@ -4338,7 +4338,7 @@ everywhere, bytes and deep link untouched; a still-queued one is cancelled
 locally so it never uploads. One correction can retire several duplicates.
 `
   ).action(async (file, opts) => {
-    const { runEmitArtifact, EmitArtifactError } = await import('./emit-artifact-cmd-L4REOPWX.js');
+    const { runEmitArtifact, EmitArtifactError } = await import('./emit-artifact-cmd-TUOLSGHB.js');
     let pr;
     if (opts.pr !== void 0) {
       pr = parseTrackerNumber(opts.pr);
@@ -4394,7 +4394,7 @@ its criterion, and the new record retires the old record. The id must be the ite
 as \`work demo --item <n> --json\` prints it.
 `
   ).action(async (manifest, opts) => {
-    const { runEmitDemo, EmitDemoError } = await import('./emit-demo-cmd-L4B6OOTV.js');
+    const { runEmitDemo, EmitDemoError } = await import('./emit-demo-cmd-YLEZB6FG.js');
     let item;
     if (opts.item !== void 0) {
       item = parseTrackerNumber(opts.item);
@@ -4464,7 +4464,7 @@ recent events with their ids. --find <text> searches all of them.
 item that session was launched for is used automatically.
 `
   ).action(async (opts) => {
-    const { runEmitFinding, refuseRemovedFindingFlags, EmitFindingError } = await import('./emit-finding-cmd-YXFCIWMU.js');
+    const { runEmitFinding, refuseRemovedFindingFlags, EmitFindingError } = await import('./emit-finding-cmd-BX3FWGSX.js');
     try {
       refuseRemovedFindingFlags(opts);
       const result = await runEmitFinding({
@@ -4531,7 +4531,7 @@ the whole batch. "untimed": true records one with no time on purpose.
 that session was launched for is used automatically.
 `
   ).action(async (file, opts) => {
-    const { runEmitFindings, EmitFindingError } = await import('./emit-finding-cmd-YXFCIWMU.js');
+    const { runEmitFindings, EmitFindingError } = await import('./emit-finding-cmd-BX3FWGSX.js');
     try {
       const result = await runEmitFindings({
         file,
@@ -4566,7 +4566,7 @@ command, the command exits 0, and \`sync\` sends it later. If the gateway refuse
 the step, the command prints why and exits 1.
 `
   ).action(async (name, opts) => {
-    const { runEmitStep, EmitStepError } = await import('./emit-step-cmd-HWAUCZZB.js');
+    const { runEmitStep, EmitStepError } = await import('./emit-step-cmd-CU6GQ3WW.js');
     try {
       await runEmitStep({
         name,
@@ -4609,7 +4609,7 @@ of the item, and a (proof: <kind>) annotation names its proof.
   ${cliInvocation()} emit criteria acceptance/412-login.md --item 412
 `
   ).action(async (file, opts) => {
-    const { runEmitCriteria, EmitCriteriaError } = await import('./emit-criteria-cmd-QVFOQARC.js');
+    const { runEmitCriteria, EmitCriteriaError } = await import('./emit-criteria-cmd-VEUMA7MZ.js');
     try {
       const result = await runEmitCriteria({
         file,
@@ -4633,9 +4633,9 @@ function registerSpecCommands(program2) {
   const specCmd = program2.command("spec").description("Find, file and edit the issue a spec lives in, in your factory's tracker");
   const credentialOptions = (command) => command.option("--json", "machine-readable JSON output").option("--url <url>", "cloud base URL (or OUTERLAYER_URL / config)").addOption(apiKeyOption()).option("--app-id <id>", "factory id the key is bound to (or OUTERLAYER_APP_ID / config)");
   const run = async (action) => {
-    const { WorkCommandError } = await import('./work-cmd-3MKUIE2C.js');
+    const { WorkCommandError } = await import('./work-cmd-KVFRK24I.js');
     try {
-      await action(await import('./spec-cmd-4ABYAFNZ.js'));
+      await action(await import('./spec-cmd-XQV7EIJW.js'));
     } catch (err) {
       if (err instanceof WorkCommandError) {
         fail(err.message);
@@ -4670,7 +4670,7 @@ Prints each problem the item covers with its id, its reports and its result.
 session was launched for is used.
 `
   ).action(async (opts) => {
-    const { runFindingsShow, FindingsCommandError } = await import('./findings-cmd-O2IBO25E.js');
+    const { runFindingsShow, FindingsCommandError } = await import('./findings-cmd-G4V4M3PO.js');
     try {
       const result = await runFindingsShow({
         item: opts.item,
@@ -4698,7 +4698,7 @@ Give exactly one of --fixed and --not-fixed, and a --note. Run it again for the
 problem to replace the earlier result. A problem the item does not cover is refused.
 `
   ).action(async (problem, opts) => {
-    const { runFindingsResult, FindingsCommandError } = await import('./findings-cmd-O2IBO25E.js');
+    const { runFindingsResult, FindingsCommandError } = await import('./findings-cmd-G4V4M3PO.js');
     try {
       const result = await runFindingsResult({
         problem,
@@ -4739,7 +4739,7 @@ takes it, and prints the line that starts your session on it. That
 session links itself and holds the item's lease while it works.
 `
   ).action(async (opts) => {
-    const { runWorkBuild, WorkCommandError } = await import('./work-cmd-3MKUIE2C.js');
+    const { runWorkBuild, WorkCommandError } = await import('./work-cmd-KVFRK24I.js');
     try {
       await runWorkBuild(opts);
     } catch (err) {
@@ -4762,7 +4762,7 @@ renews that session's own 20-minute lease, unless --no-lease or
 --ended is given, or another worker already holds a live one.
 `
   ).action(async (number, opts) => {
-    const { runWorkLinkSession, WorkCommandError } = await import('./work-cmd-3MKUIE2C.js');
+    const { runWorkLinkSession, WorkCommandError } = await import('./work-cmd-KVFRK24I.js');
     try {
       await runWorkLinkSession({ ...opts, number, noLease: opts.lease === false, logFailures: opts.logFailures === true });
     } catch (err) {
@@ -4786,8 +4786,8 @@ criterion's new proof; --ready hands the thread back to a person. At
 most one action flag may be given.
 `
   ).action(async (opts) => {
-    const { runWorkComment, WorkCommentCommandError } = await import('./work-comment-cmd-ESC3DSHI.js');
-    const { WorkCommandError } = await import('./work-cmd-3MKUIE2C.js');
+    const { runWorkComment, WorkCommentCommandError } = await import('./work-comment-cmd-GC3WAFM7.js');
+    const { WorkCommandError } = await import('./work-cmd-KVFRK24I.js');
     try {
       await runWorkComment(opts);
     } catch (err) {
@@ -4808,8 +4808,8 @@ criterion that carries proof or a comment, each with who is waiting
 on whom next.
 `
   ).action(async (opts) => {
-    const { runWorkThreads, WorkCommentCommandError } = await import('./work-comment-cmd-ESC3DSHI.js');
-    const { WorkCommandError } = await import('./work-cmd-3MKUIE2C.js');
+    const { runWorkThreads, WorkCommentCommandError } = await import('./work-comment-cmd-GC3WAFM7.js');
+    const { WorkCommandError } = await import('./work-cmd-KVFRK24I.js');
     try {
       await runWorkThreads(opts);
     } catch (err) {
@@ -4833,8 +4833,8 @@ still running, or that an older runner released, has no log and the
 command exits 1.
 `
   ).action(async (opts) => {
-    const { runWorkLogs, WorkLogsCommandError } = await import('./work-logs-cmd-46UPNN7Q.js');
-    const { WorkCommandError } = await import('./work-cmd-3MKUIE2C.js');
+    const { runWorkLogs, WorkLogsCommandError } = await import('./work-logs-cmd-7II6D2JJ.js');
+    const { WorkCommandError } = await import('./work-cmd-KVFRK24I.js');
     try {
       await runWorkLogs(opts);
     } catch (err) {
@@ -4857,8 +4857,8 @@ item is not built again until a new build request. Exits 1 when no host
 build is running for the item.
 `
   ).action(async (opts) => {
-    const { runWorkStop, WorkStopCommandError } = await import('./work-stop-cmd-Y22XIVQ6.js');
-    const { WorkCommandError } = await import('./work-cmd-3MKUIE2C.js');
+    const { runWorkStop, WorkStopCommandError } = await import('./work-stop-cmd-5V3DV3HJ.js');
+    const { WorkCommandError } = await import('./work-cmd-KVFRK24I.js');
     try {
       await runWorkStop(opts);
     } catch (err) {
@@ -4879,8 +4879,8 @@ Prints the item's newest live demo record: its artifact id, the commit it was re
 test file that recorded it. With --json, prints { "demo": null } for an item with no demo.
 `
   ).action(async (opts) => {
-    const { runWorkDemo, WorkDemoCommandError } = await import('./work-demo-cmd-7S23DGYO.js');
-    const { WorkCommandError } = await import('./work-cmd-3MKUIE2C.js');
+    const { runWorkDemo, WorkDemoCommandError } = await import('./work-demo-cmd-IOB5UDGQ.js');
+    const { WorkCommandError } = await import('./work-cmd-KVFRK24I.js');
     try {
       await runWorkDemo(opts);
     } catch (err) {
@@ -4901,7 +4901,7 @@ deletes anything \u2014 the item is removed from Work only once no
 live addition remains on it.
 `
   ).action(async (opts) => {
-    const { runWorkRemove, WorkCommandError } = await import('./work-cmd-3MKUIE2C.js');
+    const { runWorkRemove, WorkCommandError } = await import('./work-cmd-KVFRK24I.js');
     try {
       await runWorkRemove(opts);
     } catch (err) {
@@ -4913,7 +4913,7 @@ live addition remains on it.
     }
   });
   workCmd.command("status").description("Show one item's stage, gate ledger, and additions").option("--item <number>", "the item's number inside this factory").option("--issue <number>", "issue number, or a Linear/Jira key like ENG-123").option(TRACKER_OPTION_FLAG, "tracker for a keyed --issue, when both hold the key").option("--repo <owner/name>", "repository for an issue number (default: the checkout's remote)").option("--json", "machine-readable JSON output").option("--url <url>", "cloud base URL (or OUTERLAYER_URL / config)").addOption(apiKeyOption()).option("--app-id <id>", "factory id the key is bound to (or OUTERLAYER_APP_ID / config)").action(async (opts) => {
-    const { runWorkStatus, WorkCommandError } = await import('./work-cmd-3MKUIE2C.js');
+    const { runWorkStatus, WorkCommandError } = await import('./work-cmd-KVFRK24I.js');
     try {
       await runWorkStatus(opts);
     } catch (err) {
@@ -4957,11 +4957,11 @@ differs from HEAD.
       fail(trackerNumberError("--pr", opts.pr));
       return;
     }
-    const { runWorkProofsCommand } = await import('./work-proofs-cmd-HRWTHYSS.js');
+    const { runWorkProofsCommand } = await import('./work-proofs-cmd-TVU6QFZN.js');
     await runWorkProofsCommand({ ...opts, ...pr === void 0 ? {} : { pr } });
   });
   workCmd.command("list").description("List live work items for this factory").option("--stage <spec|build|review>", "filter by stage").option("--section <attention|waiting|flowing>", "filter by Queue section").option("--repo <owner/name>", "repository (default: the current checkout's remote)").option("--unclaimed", "only items with no live lease").option("--claimed", "only items with a live lease, held by a host or a local session").option("--startable", "only items a host can start: a build request, no open PR, no live lease").option("--needs <amend>", "only items with a thread waiting on an agent").option("--json", "machine-readable JSON output").option("--url <url>", "cloud base URL (or OUTERLAYER_URL / config)").addOption(apiKeyOption()).option("--app-id <id>", "factory id the key is bound to (or OUTERLAYER_APP_ID / config)").action(async (opts) => {
-    const { runWorkList, WorkCommandError } = await import('./work-cmd-3MKUIE2C.js');
+    const { runWorkList, WorkCommandError } = await import('./work-cmd-KVFRK24I.js');
     try {
       await runWorkList(opts);
     } catch (err) {
@@ -4982,7 +4982,7 @@ by a different key is refused; claiming again with the same key extends
 it. --host is a label only.
 `
   ).action(async (opts) => {
-    const { runWorkClaim, WorkCommandError } = await import('./work-claim-cmd-5QKLHSCR.js');
+    const { runWorkClaim, WorkCommandError } = await import('./work-claim-cmd-OVPMBIRR.js');
     try {
       await runWorkClaim(opts);
     } catch (err) {
@@ -5002,7 +5002,7 @@ Extends the live lease this API key holds. Refused with a 410 if the
 lease has expired, or a 403 if a different key holds it.
 `
   ).action(async (opts) => {
-    const { runWorkRenew, WorkCommandError } = await import('./work-claim-cmd-5QKLHSCR.js');
+    const { runWorkRenew, WorkCommandError } = await import('./work-claim-cmd-OVPMBIRR.js');
     try {
       await runWorkRenew(opts);
     } catch (err) {
@@ -5034,7 +5034,7 @@ applies to a host's lease only. A later tool call in the session
 takes the lease again.
 `
   ).action(async (opts) => {
-    const { runWorkRelease, WorkCommandError } = await import('./work-claim-cmd-5QKLHSCR.js');
+    const { runWorkRelease, WorkCommandError } = await import('./work-claim-cmd-OVPMBIRR.js');
     try {
       await runWorkRelease(opts);
     } catch (err) {
@@ -5061,7 +5061,7 @@ Idempotent: declaring the same pull request twice is a no-op.
 needs your own login; an agent session or a factory key is refused.
 `
   ).action(async (number, opts) => {
-    const { runWorkPr, WorkPrCommandError } = await import('./work-pr-cmd-2J2LKETD.js');
+    const { runWorkPr, WorkPrCommandError } = await import('./work-pr-cmd-KP3RI7TV.js');
     try {
       await runWorkPr({ ...opts, number });
     } catch (err) {
@@ -5086,8 +5086,8 @@ login, then declares the pull request on the item, as \`work pr\` does.
 Run it again after a change to the title or description.
 `
   ).action(async (opts) => {
-    const { runWorkOpenPr, WorkOpenPrCommandError } = await import('./work-open-pr-cmd-JNGTGLIP.js');
-    const { WorkCommandError } = await import('./work-cmd-3MKUIE2C.js');
+    const { runWorkOpenPr, WorkOpenPrCommandError } = await import('./work-open-pr-cmd-FYKRKCDL.js');
+    const { WorkCommandError } = await import('./work-cmd-KVFRK24I.js');
     try {
       await runWorkOpenPr(opts);
     } catch (err) {
@@ -5103,8 +5103,8 @@ function registerRunnerCommands(program2) {
   const runnerCmd = program2.command("runner").description("Take work from the implement and amend queues on this machine");
   const configOption = "the cloud config file to run against (default: ~/.outerlayer/config.json)";
   runnerCmd.command("start").description("Run the loop: claim work, run it, report, clean up, repeat").option("--config <path>", configOption).action(async (opts) => {
-    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-QASNKYM6.js');
-    const { start, RunnerStartError } = await import('./loop-7U7MVICV.js');
+    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-W2XWNR4C.js');
+    const { start, RunnerStartError } = await import('./loop-V3GED2WX.js');
     const { RunnerAlreadyRunningError } = await import('./pidfile-EAD2OEM7.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     try {
@@ -5122,9 +5122,9 @@ function registerRunnerCommands(program2) {
     "after",
     "\nReads OUTERLAYER_URL, OUTERLAYER_APP_ID, OUTERLAYER_API_KEY, OUTERLAYER_RUNNER_NAME and one Claude credential\n(CLAUDE_CODE_OAUTH_TOKEN or ANTHROPIC_API_KEY) from the environment. OUTERLAYER_AGENT\nis optional and defaults to claude. On a later start it refuses variables that disagree with the config in the volume.\nThe image sets OUTERLAYER_RUNNER_IMAGE; outside the image, use `runner start`.\n"
   ).action(async () => {
-    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-QASNKYM6.js');
-    const { containerStart } = await import('./container-start-2DHCWV73.js');
-    const { start, RunnerStartError } = await import('./loop-7U7MVICV.js');
+    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-W2XWNR4C.js');
+    const { containerStart } = await import('./container-start-D2OEPMUO.js');
+    const { start, RunnerStartError } = await import('./loop-V3GED2WX.js');
     const { RunnerAlreadyRunningError } = await import('./pidfile-EAD2OEM7.js');
     try {
       const result = await containerStart({
@@ -5146,16 +5146,16 @@ function registerRunnerCommands(program2) {
     "after",
     "\nIn the runner image, run it with `docker exec <container> outerlayer runner update-steps`. It reads the\ncontainer with `docker inspect` and changes nothing. The steps rename the old container and never remove it\nbefore the new one runs. They name the container's variables and never print a value.\n"
   ).action(async (opts) => {
-    const { defaultRunnerConfigPath } = await import('./config-QASNKYM6.js');
+    const { defaultRunnerConfigPath } = await import('./config-W2XWNR4C.js');
     const { runnerDir } = await import('./paths-T2DEBI62.js');
-    const { runUpdateSteps } = await import('./update-steps-JQOCCDWO.js');
+    const { runUpdateSteps } = await import('./update-steps-I5JLERXS.js');
     const text = await runUpdateSteps({ runnerDirPath: runnerDir(opts.config ?? defaultRunnerConfigPath()) });
     process.stdout.write(`${text}
 `);
   });
   runnerCmd.command("check").description("Validate the config, the hooks and the key, and print the effective settings").option("--config <path>", configOption).action(async (opts) => {
-    const { defaultRunnerConfigPath } = await import('./config-QASNKYM6.js');
-    const { runRunnerCheck } = await import('./check-QULEN437.js');
+    const { defaultRunnerConfigPath } = await import('./config-W2XWNR4C.js');
+    const { runRunnerCheck } = await import('./check-4W4QUBMP.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const result = await runRunnerCheck(configPath);
     if (!result.ok) {
@@ -5176,7 +5176,7 @@ function registerRunnerCommands(program2) {
 `);
   });
   runnerCmd.command("install").description("Put this CLI in the runner's install layout; --service adds its service").option("--config <path>", configOption).option("--service", "set up the service that keeps the runner running").option("--print", "with --service, print the unit and set up nothing").option("--user <account>", "with --service, the account the service runs as").option("--replace", "replace a unit or launcher file this command did not write").option("--allow-downgrade", "install this CLI even when it is older than the version the runner runs").option("--unit-name <name>", "with --service, the unit's name, to run a second runner beside the first").option("--build-memory-max <size>", "with --service, memory all builds may use together, such as 16g").option("--build-cpus-max <n>", "with --service, CPUs all builds may use together, such as 4").action(async (opts) => {
-    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-QASNKYM6.js');
+    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-W2XWNR4C.js');
     const { runRunnerInstall, RunnerInstallError, launcherSummary, restartNote } = await import('./install-cmd-5H6M2KJ7.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     if (opts.service !== true) {
@@ -5189,13 +5189,13 @@ function registerRunnerCommands(program2) {
       }
     }
     const buildCpusMax = opts.buildCpusMax === void 0 ? void 0 : Number(opts.buildCpusMax);
-    if (buildCpusMax !== void 0 && !(await import('./command-KFYK3WEF.js')).cpusAreValid(buildCpusMax)) {
+    if (buildCpusMax !== void 0 && !(await import('./command-CM22HPN5.js')).cpusAreValid(buildCpusMax)) {
       fail(`--build-cpus-max ${opts.buildCpusMax} is not a number of CPUs from 0.01 to 1024.`);
       return;
     }
     try {
       if (opts.service === true) {
-        const { installServiceCommand } = await import('./command-KFYK3WEF.js');
+        const { installServiceCommand } = await import('./command-CM22HPN5.js');
         const result2 = await installServiceCommand({
           configPath,
           print: opts.print,
@@ -5252,8 +5252,8 @@ To keep it running, run ${C.yellow}${cliInvocation()} runner install --service${
       fail(`pass --service: \`${cliInvocation()} runner uninstall --service\` removes the runner's service.`);
       return;
     }
-    const { defaultRunnerConfigPath } = await import('./config-QASNKYM6.js');
-    const { uninstallServiceCommand } = await import('./command-KFYK3WEF.js');
+    const { defaultRunnerConfigPath } = await import('./config-W2XWNR4C.js');
+    const { uninstallServiceCommand } = await import('./command-CM22HPN5.js');
     const result = await uninstallServiceCommand({ configPath: opts.config ?? defaultRunnerConfigPath(), unitName: opts.unitName, home: homeFromEnv() });
     if (result.ok) for (const line of result.lines) process.stdout.write(`${C.green}\u2713${C.reset} ${line}
 `);
@@ -5280,12 +5280,12 @@ already in claude.env is used.
   printf '%s' "$CLAUDE_CODE_OAUTH_TOKEN" | ${cliInvocation()} runner init --agent claude --factory <org>/<factory>
 `
   ).action(async (opts) => {
-    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-QASNKYM6.js');
-    const { prepareRunnerInit, runRunnerInit, RunnerInitError, writeRunnerInit } = await import('./init-FAIF7KOK.js');
-    const { obtainRunnerKey, runnerKeyLogin } = await import('./runner-key-CYSUYKSX.js');
-    const { detectMachine } = await import('./machine-S3JHOX4V.js');
-    const { chooseVm, runVmInit, VmInitError } = await import('./init-2CEULE3F.js');
-    const { AGENT_COMMANDS, credentialFromStdin, isAgentName, restartForCredential, RunnerEnvError } = await import('./runner-env-BJPUHAKZ.js');
+    const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-W2XWNR4C.js');
+    const { prepareRunnerInit, runRunnerInit, RunnerInitError, writeRunnerInit } = await import('./init-3NT4YX2X.js');
+    const { obtainRunnerKey, runnerKeyLogin } = await import('./runner-key-ZUHMQCHZ.js');
+    const { detectMachine } = await import('./machine-HLZLH327.js');
+    const { chooseVm, runVmInit, VmInitError } = await import('./init-FY3HP73H.js');
+    const { AGENT_COMMANDS, credentialFromStdin, isAgentName, restartForCredential, RunnerEnvError } = await import('./runner-env-V52JUOD5.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     if (opts.agent !== void 0 && !isAgentName(opts.agent)) {
       fail(`--agent ${opts.agent}: runner init writes commands for ${Object.keys(AGENT_COMMANDS).join(", ")}. For another agent, leave --agent out and edit runner.commands.`);
@@ -5435,7 +5435,7 @@ ${C.yellow}The runner will not update itself: ${installErr.message}${C.reset}
       let serviceUp = false;
       let restart;
       if (installedLayout) {
-        const { installServiceCommand } = await import('./command-KFYK3WEF.js');
+        const { installServiceCommand } = await import('./command-CM22HPN5.js');
         const service = await installServiceCommand({
           configPath,
           entryPath: process.argv[1] ?? "",
@@ -5479,12 +5479,12 @@ Next:
     "after",
     "\nA repository governed by a control plane builds the control plane's image, at the commit\nthe gateway has stored for it. A repository that governs itself fetches the head of its\ndefault branch into the runner's cache. Either way it reads .devcontainer/devcontainer.json\nand builds the image with the devcontainer CLI. Settings\nthat reach the host or widen the container's privileges are ignored and listed. The\nimage holds this CLI and a pinned Claude Code. Nothing runs inside the image.\n"
   ).action(async (opts) => {
-    const { defaultRunnerConfigPath } = await import('./config-QASNKYM6.js');
-    const { buildRepositoryImage, RecipeError } = await import('./build-B4OKU4MV.js');
+    const { defaultRunnerConfigPath } = await import('./config-W2XWNR4C.js');
+    const { buildRepositoryImage, RecipeError } = await import('./build-ZJK6CPNH.js');
     const { currentCliBuild } = await import('./cli-build-K56DK4DS.js');
-    const { createDockerHost } = await import('./docker-TAC6G4VU.js');
-    const { builderSpec } = await import('./builder-XFPWE74N.js');
-    const { loadRunnerConfig } = await import('./config-QASNKYM6.js');
+    const { createDockerHost } = await import('./docker-GA63DVME.js');
+    const { builderSpec } = await import('./builder-MHZKDI4H.js');
+    const { loadRunnerConfig } = await import('./config-W2XWNR4C.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const loaded = (() => {
       try {
@@ -5495,11 +5495,11 @@ Next:
     })();
     const memory = loaded?.build?.memory ?? "8g";
     try {
-      const { ensureRunnerIdentity } = await import('./runner-identity-ZCPPC2BJ.js');
+      const { ensureRunnerIdentity } = await import('./runner-identity-J4NCBSBU.js');
       await ensureRunnerIdentity(configPath, { log: (line) => console.error(line) }).catch((err) => {
         console.error(`the runner's Docker identity could not be stored: ${err instanceof Error ? err.message : String(err)}`);
       });
-      const { imageTargetFor } = await import('./governing-source-JCI7VDQ6.js');
+      const { imageTargetFor } = await import('./governing-source-JQV3ZKD7.js');
       const target = await imageTargetFor({ config: loaded, repository: opts.repository, fetchImpl: fetch });
       if (!target.ok) {
         if (opts.json) {
@@ -5562,17 +5562,17 @@ Next:
     }
   });
   runnerCmd.command("stop").description("Take no more work; finish running jobs, then exit").option("--config <path>", "the cloud config file naming the runner to stop").option("--now", "end running jobs immediately, with outcome stopped").action(async (opts) => {
-    const { defaultRunnerConfigPath } = await import('./config-QASNKYM6.js');
-    const { requestStop } = await import('./loop-7U7MVICV.js');
+    const { defaultRunnerConfigPath } = await import('./config-W2XWNR4C.js');
+    const { requestStop } = await import('./loop-V3GED2WX.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const { runnerImageVersion } = await import('./image-tag-SEMBVB5D.js');
     await requestStop(configPath, Boolean(opts.now), void 0, { image: runnerImageVersion() !== void 0 });
   });
   runnerCmd.command("status").description("List running jobs; with --recent, finished ones too").option("--config <path>", "the cloud config file naming the runner to inspect").option("--recent", "also list finished jobs, newest first, capped at 20").option("--json", "machine-readable JSON output").action(async (opts) => {
-    const { defaultRunnerConfigPath, loadRunnerConfig } = await import('./config-QASNKYM6.js');
+    const { defaultRunnerConfigPath, loadRunnerConfig } = await import('./config-W2XWNR4C.js');
     const { jobsDir, runnerDir } = await import('./paths-T2DEBI62.js');
-    const { listJobFiles, runnerProcessState } = await import('./loop-7U7MVICV.js');
-    const { renderStatus } = await import('./status-2AP7J2L7.js');
+    const { listJobFiles, runnerProcessState } = await import('./loop-V3GED2WX.js');
+    const { renderStatus } = await import('./status-ZJJEJ52D.js');
     const { readHousekeepingRecord } = await import('./record-IMXQNHPB.js');
     const path2 = await import('path');
     const configPath = opts.config ?? defaultRunnerConfigPath();
@@ -5593,7 +5593,7 @@ Next:
     const processState = runnerProcessState(configPath);
     const service = await (async () => {
       if (process.platform !== "linux" || !existsSync("/run/systemd/system")) return void 0;
-      const { inspectRunnerService } = await import('./find-unit-4UR647S4.js');
+      const { inspectRunnerService } = await import('./find-unit-GGBRYOSO.js');
       const facts = inspectRunnerService(configPath);
       return facts === void 0 ? void 0 : { unit: facts.unit, running: facts.mainPid !== void 0, delegated: facts.delegate };
     })();
@@ -5630,8 +5630,8 @@ Next:
     );
   });
   runnerCmd.command("logs").argument("<item>", "the work item's number in the factory").description("Print the newest attempt's log for one item").option("--config <path>", "the cloud config file naming the runner to inspect").option("-f, --follow", "keep printing as the log grows").action(async (itemArg, opts) => {
-    const { defaultRunnerConfigPath } = await import('./config-QASNKYM6.js');
-    const { listJobFiles } = await import('./loop-7U7MVICV.js');
+    const { defaultRunnerConfigPath } = await import('./config-W2XWNR4C.js');
+    const { listJobFiles } = await import('./loop-V3GED2WX.js');
     const { newestAttempt, logPathFor, tail, RunnerLogsError } = await import('./logs-6CMB3DO6.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const item = parseTrackerNumber(itemArg);
@@ -5884,7 +5884,7 @@ would get, the instruction files and the names of the skills. It warns when the
 no \`build\`. It needs the context-read permission: a login or a factory key with it is enough.
 `
   ).action(async (opts) => {
-    const { runContextShow, ContextShowError } = await import('./context-show-cmd-VSFCG663.js');
+    const { runContextShow, ContextShowError } = await import('./context-show-cmd-5UJUWBJL.js');
     try {
       const result = await runContextShow({ repo: opts.repo, json: opts.json, url: opts.url, apiKey: opts.apiKey, appId: opts.appId });
       process.stdout.write(result.output);

package/dist/{command-KFYK3WEF.js → command-CM22HPN5.js}

@@ -3,29 +3,29 @@ import { createRequire } from 'node:module';
 import { realOwnership, accountNamed, handOver, runRunnerInstall, launcherSummary, restartNote, accountIdentity } from './chunk-GC5PVMIJ.js';
 import './chunk-OS7DJOQJ.js';
 import { currentLink, execStartCommand } from './chunk-UMYYYF7B.js';
-import { detectMachine, helperSocketPath, ensureFirecrackerAndJailer } from './chunk-JQSZTQSK.js';
+import { detectMachine, helperSocketPath, ensureFirecrackerAndJailer } from './chunk-7P3H4RY2.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-UO4FQAOX.js';
+import './chunk-VVOSUGEF.js';
 import './chunk-OGFGZQA3.js';
 import './chunk-2ILU7UAU.js';
 import './chunk-OGPEHSNW.js';
-import './chunk-RFVIQLNB.js';
+import './chunk-PP6OX4OT.js';
 import './chunk-SYVRBBLW.js';
 import './chunk-TQMI335S.js';
-import './chunk-OQLF3MQQ.js';
-import { unitNameProblem, DEFAULT_UNIT_NAME, checkFit, installService, uninstallService, realTaskScheduler, UNIT_MARKER } from './chunk-INOUUSYI.js';
-import { runnerVmOf, loadRunnerConfig, builtinKind } from './chunk-2D6CKNR7.js';
-import './chunk-KM2HLQE3.js';
-import { parseSize, readJobFile } from './chunk-5AFPP3GZ.js';
+import './chunk-7JE2WFNK.js';
+import { unitNameProblem, DEFAULT_UNIT_NAME, checkFit, installService, uninstallService, realTaskScheduler, UNIT_MARKER } from './chunk-EMH2LNIE.js';
+import { runnerVmOf, loadRunnerConfig, builtinKind } from './chunk-3EHDZTRT.js';
+import './chunk-UONH72CJ.js';
+import { parseSize, readJobFile } from './chunk-M3ME6TLQ.js';
 import { HOST_HELPER_ASSETS_VERSION, builderDiskPinned, hostHelperSupportsSlice, HOST_HELPER_SLICE_SINCE, firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, FIRECRACKER_BINARY_SHA256, JAILER_BINARY_SHA256, HOST_HELPER_SHA256, HOST_HELPER_BASE_URL, hostHelperPinned } from './chunk-4UPET3R7.js';
 import { realLima } from './chunk-77MM5RYD.js';
 import { writeLaunchAgent, launchAgentPath } from './chunk-LF6MLJCY.js';
 import './chunk-YNMVVQOQ.js';
 import './chunk-JBJTC3UU.js';
-import './chunk-UN3SQTVL.js';
+import './chunk-6JZXIWX7.js';
 import './chunk-IP7BIBXJ.js';
-import './chunk-AVPLEFQR.js';
-import './chunk-FVCHHSHB.js';
+import './chunk-7DXVL7TN.js';
+import './chunk-35JMYSUD.js';
 import './chunk-Y5YCX6AL.js';
 import './chunk-G2JWZDFA.js';
 import './chunk-ANPNT6PM.js';
@@ -41,7 +41,7 @@ import './chunk-FGF52V4V.js';
 import './chunk-HCVLP7XA.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-ZQSANKS4.js';
-import './chunk-AJYZNISW.js';
+import './chunk-GSSVJNP2.js';
 import './chunk-5BHIBJDA.js';
 import './chunk-CDDED64E.js';
 import './chunk-RA3O54FC.js';

package/dist/{config-QASNKYM6.js → config-W2XWNR4C.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DEFAULT_CHECK_TIME_LIMIT_MINUTES, DEFAULT_UPDATE_MAX_WAIT_HOURS, RunnerConfigError, builtinKind, checkHooks, defaultRunnerConfigPath, hasRunnerBlock, imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, keepsHostBuilder, loadRunnerConfig, resolveBuild, resolveHousekeeping, runnerCredentialProblem, runnerVmOf } from './chunk-2D6CKNR7.js';
-import './chunk-KM2HLQE3.js';
-import './chunk-5AFPP3GZ.js';
+export { DEFAULT_CHECK_TIME_LIMIT_MINUTES, DEFAULT_UPDATE_MAX_WAIT_HOURS, RunnerConfigError, builtinKind, checkHooks, defaultRunnerConfigPath, hasRunnerBlock, imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, keepsHostBuilder, loadRunnerConfig, resolveBuild, resolveHousekeeping, runnerCredentialProblem, runnerVmOf } from './chunk-3EHDZTRT.js';
+import './chunk-UONH72CJ.js';
+import './chunk-M3ME6TLQ.js';
 import './chunk-4UPET3R7.js';
 import './chunk-MOI2KDLH.js';
-import './chunk-AJYZNISW.js';
+import './chunk-GSSVJNP2.js';
 import './chunk-EOTMDIYC.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-PXGU3GKY.js';

package/dist/{connect-cmd-MEDWMW3L.js → connect-cmd-TOWE4P45.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { AGENTS_LAYOUT_COMMIT_LINE, COMMIT_LINE, autoConnectedLine, commitCommandsFor, commitLineFor, listText as factoryListText, slug as factorySlug, fetchFactories, hasUncommittedPolicy, promptOnTerminal, realConnectDeps, runConnect, runConnectCommand, saveFactoryConnection, selectFactory } from './chunk-FVCHHSHB.js';
+export { AGENTS_LAYOUT_COMMIT_LINE, COMMIT_LINE, autoConnectedLine, commitCommandsFor, commitLineFor, listText as factoryListText, slug as factorySlug, fetchFactories, hasUncommittedPolicy, promptOnTerminal, realConnectDeps, runConnect, runConnectCommand, saveFactoryConnection, selectFactory } from './chunk-35JMYSUD.js';
 import './chunk-Y5YCX6AL.js';
 import './chunk-G2JWZDFA.js';
 import './chunk-ANPNT6PM.js';
@@ -11,7 +11,7 @@ import './chunk-PJDQPF5N.js';
 import './chunk-MOI2KDLH.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-ZQSANKS4.js';
-import './chunk-AJYZNISW.js';
+import './chunk-GSSVJNP2.js';
 import './chunk-5BHIBJDA.js';
 import './chunk-CDDED64E.js';
 import './chunk-RA3O54FC.js';