@outerlayer/cli 0.34.0-next.20261026214534 → 0.34.0-next.20261026230708

package/README.md

@@ -233,7 +233,8 @@ content:
   login`. The tools layer also downloads the pinned `gh` and `tini` releases
   from GitHub, a pinned static `ffmpeg` build from GitHub, and the narration
   voice pack from Hugging Face and the npm registry, checking each against a
-  digest. The image build runs outside
+  digest. It also installs the CLI's pinned Playwright release from the npm
+  registry, with no browser. The image build runs outside
   any work item and sends nothing to your factory. `outerlayer runner start`
   builds each build's image the same way, before the build starts. That image
   build uses the host's network: the build's tunnel does not carry it, and
@@ -404,8 +405,8 @@ content:
 - **`outerlayer emit demo <manifest>`** first reads the item's recorded
   criteria (`GET /v1/work-items/{number}`) to check the chapters' criterion
   ids. With `--replaces <record id>`, it also reads the item's newest demo record
-  (`GET /v1/work-items/{number}/demo`) before it uploads anything. It cuts a recorded video once, from the first chapter's start to the
-  last chapter's end, and emits it as one video artifact. It then emits a video
+  (`GET /v1/work-items/{number}/demo`) before it uploads anything. It edits a
+  recorded video once, keeping only the beats, and emits it as one video artifact. It then emits a video
   artifact for each chapter with the same bytes and a time range in that video,
   followed by the manifest as the demo record. A chapter's screenshot frame is
   emitted as a screenshot artifact after its clip. A recording over 8 MiB falls
@@ -415,6 +416,12 @@ content:
   400 MB, from huggingface.co and registry.npmjs.org into
   `~/.outerlayer/voice/`. It checks each file against a pinned sha256 and sends
   nothing to either host. `--no-narration` downloads nothing.
+- **`outerlayer demo record <file>`** sends nothing itself. It runs your demo
+  script in a local Chromium, through the Playwright release the CLI depends
+  on, and the browser opens only the pages the script opens. With the voice
+  on, it speaks each line on your machine, and the first time it may download
+  the voice pack as `outerlayer emit demo` does. `--no-voice` downloads
+  nothing.
 - **`outerlayer emit <name>`** sends one check's outcome for a work item.
   Run from inside a session, it sends only when that session carries a
   launch record — the session's own content may not leave by a second
@@ -512,7 +519,8 @@ before it gives up.
 | `outerlayer context emit [--check]` | Compile `.outerlayer/` into each configured target tool's native files (targets come from `.outerlayer/config.json`). `--check` computes outputs and diffs against disk without writing (CI mode). Bare `outerlayer emit` with no name still compiles, with a deprecation warning. |
 | `outerlayer hooks wrap` / `outerlayer hooks unwrap` | Auto-wrap (or undo wrapping) `PreToolUse`/`PostToolUse` hooks for execution evidence — one spawn per firing. |
 | `outerlayer emit artifact <file> --caption <text> [--for <criterion-id>] [--pr <n>]` | Upload a proof artifact — screenshot, recording, report, or log — with its caption. Inside a recorded session it spools locally and ships on the next `sync`; otherwise it uploads immediately, anchored to a pull request or the current checkout. `--replaces` retires artifacts an earlier run uploaded. A JUnit XML file bound with `--for` proves a criterion that declares `test` proof; `--test <name[=path:line]>` binds only the named tests. |
-| `outerlayer emit demo <manifest> [--compare <manifest>] [--no-narration] [--item <n>] [--pr <n>] [--replaces <record id>]` | Turn a recorded video and its manifest (written by `@outerlayer/playwright`) into a narrated demo: one WebM clip for each chapter, emitted as a video artifact. A chapter whose checks all passed is bound to its criterion. A chapter of a version 4 manifest may hold a screenshot frame, which its test marked with `demo.screenshot()`. The frame is stored as a screenshot of the chapter's criterion only when that criterion declares `screenshot` and every check passed; otherwise the command says why it stored none. The manifest is emitted as the demo record, with the test file a version 3 or 4 manifest names. With `--replaces <record id>`, the new demo retires the item's old demo. With `--compare`, a second run's stills are compared with the first run's, and each chapter reads `yes`, `no` or `not checked`. Needs `ffmpeg` and `ffprobe`, and `espeak-ng` unless `--no-narration`. Exit 1 means a chapter had a failed check. |
+| `outerlayer demo record <file> [--config <file> --project <name>] [--base-url <url>] [--output-dir <dir>] [--no-voice]` | Record a demo script with the recorder and the Playwright release the CLI carries; the repository installs nothing. The script imports `test` and `expect` from `@outerlayer/playwright`. Prints the manifest's path. Exit 1 means the demo's test failed; its manifest is written all the same. |
+| `outerlayer emit demo <manifest> [--compare <manifest>] [--no-narration] [--item <n>] [--pr <n>] [--replaces <record id>]` | Turn a recorded video and its manifest (written by the recorder that `outerlayer demo record` runs) into a narrated demo: one WebM clip for each chapter, emitted as a video artifact. A chapter whose checks all passed is bound to its criterion. A chapter of a version 4 manifest may hold a screenshot frame, which its test marked with `demo.screenshot()`. The frame is stored as a screenshot of the chapter's criterion only when that criterion declares `screenshot` and every check passed; otherwise the command says why it stored none. The manifest is emitted as the demo record, with the test file a version 3 or 4 manifest names. With `--replaces <record id>`, the new demo retires the item's old demo. With `--compare`, a second run's stills are compared with the first run's, and each chapter reads `yes`, `no` or `not checked`. Needs `ffmpeg` and `ffprobe`, and `espeak-ng` unless `--no-narration`. Exit 1 means a chapter had a failed check. |
 | `outerlayer emit <name> --result <pass\|fail> [--link <url>] [--body <text>\|--body-file <path>] --item <number>` | Record one named check's outcome on a work item. A check that ran carries the run URL as its proof (`--link`); a judgment you are making yourself carries one sentence (`--body`, or `--body-file` to read it from a file — `-` reads standard input). A `fail` needs at least one of the two; a `pass` needs neither. `--item` names the work item by the number printed when the item was created — always required, in or out of a recorded session; a session records checks on its own item like any other, stored as the session's, but cannot clear a person's fail. Prints the recorded check's id. Who recorded it comes from your API key, never from what you send. |
 | `outerlayer work comment --item <n> [--criterion <id>] --body <text> [--artifact <id>] [--pass\|--fail\|--attach\|--ready]` | Post one comment on a work item's general thread, or on one acceptance criterion's own thread with `--criterion`. `--pass`/`--fail` need a person's own credential and apply to the whole item, so they work on the general thread only and the gateway refuses them with `--criterion`; `--attach` makes the named artifact that criterion's current proof; `--ready` hands a thread back to a person. The detected session id rides along automatically, only ever narrowing what the comment may do. |
 | `outerlayer work stop --item <n> [--note <text>]` | Ask the host that holds the item's build to end it. The host reads the request at its next heartbeat and ends the build with outcome `stopped`, so the build may run a little longer. The item is not built again until a new build request. Needs `work.update`. Exits 1 when no host build is running for the item. |

package/dist/{build-BBWAD5LR.js → build-M4UYZAFH.js}

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { KEY_PREFIX, TAG_HOST, buildRepositoryImage, metadataFromLabels, prepareImageBuild, writeRecord } from './chunk-XHZBLIB2.js';
-export { RecipeError } from './chunk-XYLHSCLR.js';
+export { KEY_PREFIX, TAG_HOST, buildRepositoryImage, metadataFromLabels, prepareImageBuild, writeRecord } from './chunk-XDJ376OP.js';
+import './chunk-KOZ6IBEI.js';
 import './chunk-4UPET3R7.js';
+export { RecipeError } from './chunk-HDLON3RJ.js';
 import './chunk-LQHCNXPK.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-L5VHGRQE.js';

package/dist/{build-disk-TGLM5XK7.js → build-disk-ZDVSSHO2.js}

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK, DOCKER_CACHE_MS, allocatedBytes, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-3HJMY3H5.js';
-import './chunk-XYLHSCLR.js';
+export { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK, DOCKER_CACHE_MS, allocatedBytes, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-6NXBXWOP.js';
+import './chunk-KOZ6IBEI.js';
 import './chunk-4UPET3R7.js';
+import './chunk-HDLON3RJ.js';
 import './chunk-L5VHGRQE.js';
 import './chunk-OOD5NDQA.js';
 import './chunk-DINRXUQA.js';

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-26T21:57:47.670Z+29e8182","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-26T23:08:41.174Z+58e3fae","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-FD53GTWL.js → builder-IORYS76D.js}

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-XYLHSCLR.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-KOZ6IBEI.js';
 import './chunk-4UPET3R7.js';
+import './chunk-HDLON3RJ.js';
 import './chunk-L5VHGRQE.js';
 import './chunk-OOD5NDQA.js';
 import './chunk-DINRXUQA.js';

package/dist/{check-FOWN6M3C.js → check-V66LZDNK.js}

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-FVF2LMVG.js';
+import { probeCredentials } from './chunk-IZVDQXTC.js';
 import './chunk-3JVYMD4G.js';
-import './chunk-RNMCFAYH.js';
+import './chunk-F5H3LVHR.js';
 import './chunk-E7R2GIAW.js';
 import './chunk-MH6QLXUO.js';
 import './chunk-HOUFCUMH.js';
-import './chunk-5ZBVKRDK.js';
+import './chunk-PN7RMFPP.js';
 import './chunk-TS3EFB7S.js';
-import './chunk-JKLSQOYO.js';
-import './chunk-ZVB57WI6.js';
+import './chunk-TGBST2QL.js';
 import './chunk-6CK2OC4Q.js';
+import './chunk-ZVB57WI6.js';
 import './chunk-P3NPTFLF.js';
 import './chunk-I3LTIAOR.js';
 import './chunk-WBTPI5MP.js';
@@ -18,26 +18,27 @@ import './chunk-QRJIBTNQ.js';
 import './chunk-7DK2FOZ4.js';
 import './chunk-ESVW4MJY.js';
 import './chunk-CFFVCI2I.js';
-import { managedProblems, managedFactsOf } from './chunk-ZADRW2V2.js';
+import { managedProblems, managedFactsOf } from './chunk-XLJXO4QC.js';
 import './chunk-YL3RWW7X.js';
 import './chunk-TBT347UY.js';
-import { findServiceUnit } from './chunk-LY62UHRR.js';
+import { findServiceUnit } from './chunk-JZLMFYFM.js';
 import './chunk-TZMDRHWB.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, HELPER_ENV, helperSocketPath, probeHelper, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-3PUOHONX.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, HELPER_ENV, helperSocketPath, probeHelper, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-DFBY6LX3.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-XHZBLIB2.js';
+import './chunk-XDJ376OP.js';
 import './chunk-OGFGZQA3.js';
 import './chunk-3VZTNXK5.js';
 import './chunk-6KFJIU73.js';
 import './chunk-77VBS2RT.js';
 import './chunk-SDELQEG4.js';
 import './chunk-TQMI335S.js';
-import './chunk-T2HH7IHT.js';
-import './chunk-3NCWHEGM.js';
-import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-BQQPDBSF.js';
-import './chunk-3HJMY3H5.js';
-import './chunk-XYLHSCLR.js';
+import './chunk-63A6NUEZ.js';
+import './chunk-TLIZ7FY4.js';
+import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-Q3L5AC75.js';
+import './chunk-6NXBXWOP.js';
+import './chunk-KOZ6IBEI.js';
 import './chunk-4UPET3R7.js';
+import './chunk-HDLON3RJ.js';
 import './chunk-LQHCNXPK.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-KT4CN6OU.js';

package/dist/{chunk-T2HH7IHT.js → chunk-63A6NUEZ.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { DEFAULT_UNIT_NAME } from './chunk-3NCWHEGM.js';
+import { DEFAULT_UNIT_NAME } from './chunk-TLIZ7FY4.js';
 import { RUNNER_FILE_MODE } from './chunk-GJ4KBHBD.js';
 import { claudeEnvPath, withoutCredentialLines, parseRunnerEnv } from './chunk-SDAEXUIX.js';
 import { existsSync, readFileSync, writeFileSync, renameSync, rmSync } from 'fs';

package/dist/{chunk-3HJMY3H5.js → chunk-6NXBXWOP.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { parseSize, BUILD_LABEL, RUNNER_LABEL, runnerLabelValue } from './chunk-XYLHSCLR.js';
+import { parseSize, BUILD_LABEL, RUNNER_LABEL, runnerLabelValue } from './chunk-KOZ6IBEI.js';
 import { buildsDir, rootfsDir, runnerDir, imagesDir, builderCacheDiskPath } from './chunk-GJ4KBHBD.js';
 import { spawnSync } from 'child_process';
 import { statfsSync, statSync, existsSync, readdirSync } from 'fs';

package/dist/{chunk-3PUOHONX.js → chunk-DFBY6LX3.js}

@@ -1,17 +1,18 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { sha256OfFile, downloadPinned, VoiceDownloadError } from './chunk-2PGI6RDE.js';
-import { readDefaultBranchHead, cloneRepository, buildRepositoryImage, prepareImageBuild, KEY_PREFIX, FETCHED_DIR, toolsDockerfile, TAG_HOST, metadataFromLabels, writeRecord, FETCHED_FFMPEG, FETCHED_GH, FETCHED_TINI, FETCHED_VOICE_DIR } from './chunk-XHZBLIB2.js';
+import { readDefaultBranchHead, cloneRepository, buildRepositoryImage, prepareImageBuild, KEY_PREFIX, FETCHED_DIR, toolsDockerfile, TAG_HOST, metadataFromLabels, writeRecord, FETCHED_FFMPEG, FETCHED_GH, FETCHED_TINI, FETCHED_VOICE_DIR } from './chunk-XDJ376OP.js';
 import { currentCliBuild } from './chunk-OGFGZQA3.js';
 import { runExec, execCapture, waitForAgent } from './chunk-3VZTNXK5.js';
 import { GUEST_CID, linkVsockSockets } from './chunk-6KFJIU73.js';
 import { retrySend, describeCallFailure, keepStagedContext, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, prefetchGovernedContext, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript, WORKFLOW_PERMISSION_REASON } from './chunk-77VBS2RT.js';
 import { runnerImageVersion } from './chunk-SDELQEG4.js';
-import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-T2HH7IHT.js';
-import { runnerCredentialProblem, builtinKind, allowHostProblem, hostAllowed } from './chunk-BQQPDBSF.js';
-import { formatBytes, allocatedBytes } from './chunk-3HJMY3H5.js';
-import { createDockerHost, builderSpec, RecipeError, DOCKER_FEATURE, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, readDu, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun, writeSanitizedRecipe, classifyProperties } from './chunk-XYLHSCLR.js';
+import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-63A6NUEZ.js';
+import { runnerCredentialProblem, builtinKind, allowHostProblem, hostAllowed } from './chunk-Q3L5AC75.js';
+import { formatBytes, allocatedBytes } from './chunk-6NXBXWOP.js';
+import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, readDu, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun } from './chunk-KOZ6IBEI.js';
 import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, hostHelperPinned, CLAUDE_CODE_VERSION, builderDiskPinned, guestAssetsPinned, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, JAILER_BINARY_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, GUEST_ASSETS_VERSION, BUILDER_DISK_VERSION, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, GH_VERSION, TINI_SHA256, TINI_VERSION, VOICE_PACK_FILES, BUILDER_DISK_SHA256, BUILDER_DISK_BASE_URL, DEFAULT_BASE_IMAGE } from './chunk-4UPET3R7.js';
+import { RecipeError, DOCKER_FEATURE, writeSanitizedRecipe, classifyProperties } from './chunk-HDLON3RJ.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
 import { postJson, WorkCommandError, getJson } from './chunk-QABXXQ67.js';
 import { sanitizeTerminal } from './chunk-IXPH4EXK.js';

package/dist/{chunk-RNMCFAYH.js → chunk-F5H3LVHR.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { scrubReason, stripTerminalControls } from './chunk-JKLSQOYO.js';
-import { checkFit, RUNNER_RESERVE_BYTES } from './chunk-3NCWHEGM.js';
+import { scrubReason, stripTerminalControls } from './chunk-TGBST2QL.js';
+import { checkFit, RUNNER_RESERVE_BYTES } from './chunk-TLIZ7FY4.js';
 import { RunnerAlreadyRunningError, readPidFile } from './chunk-LQHCNXPK.js';
 import { isSameProcess } from './chunk-JBJTC3UU.js';
 import { isSignatureRefusal, postJson } from './chunk-QABXXQ67.js';

package/dist/chunk-HDLON3RJ.js

@@ -0,0 +1,274 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+import { existsSync, readdirSync, readFileSync, lstatSync, realpathSync, writeFileSync } from 'fs';
+import { join, resolve, relative, dirname, sep, basename } from 'path';
+import { createRequire as createRequire$1 } from 'module';
+import { fileURLToPath } from 'url';
+
+createRequire(import.meta.url);
+
+// src/runner/image/properties.ts
+var LIFECYCLE = ["onCreateCommand", "updateContentCommand", "postCreateCommand", "postStartCommand"];
+var HONOURED = ["image", "build", "features", "containerEnv", "remoteUser", ...LIFECYCLE];
+var IGNORED_BUILD_KEYS = ["options"];
+var HOST_REFERENCE = /\$\{(?:localEnv|env)[:}]/;
+var DROP = /* @__PURE__ */ Symbol("drop");
+function isHonoured(property) {
+  return HONOURED.includes(property);
+}
+function isObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function featureName(id) {
+  const slash = id.lastIndexOf("/");
+  const cut = id.slice(slash + 1).search(/[:@]/);
+  return cut === -1 ? id : id.slice(0, slash + 1 + cut);
+}
+var DOCKER_FEATURE = "ghcr.io/devcontainers/features/docker-in-docker";
+function asksForDocker(recipe, metadata) {
+  const isDocker = (id) => featureName(id) === DOCKER_FEATURE;
+  if (isObject(recipe.features) && Object.keys(recipe.features).some(isDocker)) return true;
+  return metadata.some((entry) => typeof entry.id === "string" && isDocker(entry.id));
+}
+function sameValue(a, b) {
+  return JSON.stringify(a) === JSON.stringify(b);
+}
+function isFilesOwnEntry(entry, recipe) {
+  if (typeof entry.id === "string") return false;
+  const keys = Object.keys(entry);
+  return keys.length > 0 && keys.every((key) => key in recipe && sameValue(entry[key], recipe[key]));
+}
+function withoutHostReferences(value, path, dropped) {
+  if (typeof value === "string") {
+    if (!HOST_REFERENCE.test(value)) return value;
+    dropped.push(path);
+    return DROP;
+  }
+  if (Array.isArray(value)) {
+    if (!HOST_REFERENCE.test(JSON.stringify(value))) return value;
+    dropped.push(path);
+    return DROP;
+  }
+  if (isObject(value)) {
+    const kept = {};
+    for (const [key, item] of Object.entries(value)) {
+      if (HOST_REFERENCE.test(key)) {
+        dropped.push(`${path}.${key}`);
+        continue;
+      }
+      const clean = withoutHostReferences(item, `${path}.${key}`, dropped);
+      if (clean !== DROP) kept[key] = clean;
+    }
+    return kept;
+  }
+  return value;
+}
+function honouredWithoutHostReferences(entry) {
+  const kept = {};
+  const dropped = [];
+  for (const property of HONOURED) {
+    if (!(property in entry)) continue;
+    const value = entry[property];
+    const clean = withoutHostReferences(
+      property === "build" && isObject(value) ? withoutIgnoredBuildKeys(value) : value,
+      property,
+      dropped
+    );
+    if (clean !== DROP) kept[property] = clean;
+  }
+  return { kept, dropped };
+}
+function withoutIgnoredBuildKeys(build) {
+  return Object.fromEntries(Object.entries(build).filter(([key]) => !IGNORED_BUILD_KEYS.includes(key)));
+}
+function ignoredIn(entry, source) {
+  const found = [];
+  for (const property of Object.keys(entry)) {
+    if (property === "id" || property.startsWith("$") || isHonoured(property)) continue;
+    found.push({ property, source });
+  }
+  if (isObject(entry.build)) {
+    for (const key of IGNORED_BUILD_KEYS) {
+      if (key in entry.build) found.push({ property: `build.${key}`, source });
+    }
+  }
+  for (const property of honouredWithoutHostReferences(entry).dropped) found.push({ property, source });
+  return found;
+}
+function emptyApply() {
+  return { containerEnv: {}, lifecycle: { onCreateCommand: [], updateContentCommand: [], postCreateCommand: [], postStartCommand: [] } };
+}
+function applyEntry(apply, raw, source) {
+  const entry = honouredWithoutHostReferences(raw).kept;
+  if (typeof entry.remoteUser === "string") apply.remoteUser = entry.remoteUser;
+  if (isObject(entry.containerEnv)) {
+    for (const [key, value] of Object.entries(entry.containerEnv)) {
+      if (typeof value === "string") apply.containerEnv[key] = value;
+    }
+  }
+  for (const name of LIFECYCLE) {
+    if (entry[name] !== void 0) apply.lifecycle[name].push({ source, command: entry[name] });
+  }
+}
+function classifyProperties(recipe, metadata) {
+  const ignored = ignoredIn(recipe, "file");
+  const apply = emptyApply();
+  let fileApplied = false;
+  const sanitized = sanitizeRecipe(recipe);
+  for (const entry of metadata) {
+    if (isFilesOwnEntry(entry, sanitized)) {
+      applyEntry(apply, entry, "file");
+      fileApplied = true;
+      continue;
+    }
+    const source = typeof entry.id === "string" ? `feature ${featureName(entry.id)}` : "image label";
+    ignored.push(...ignoredIn(entry, source));
+    applyEntry(apply, entry, source);
+  }
+  if (!fileApplied) applyEntry(apply, recipe, "file");
+  return { docker: asksForDocker(recipe, metadata), honoured: HONOURED.filter((property) => property in recipe), ignored, apply };
+}
+function sanitizeRecipe(recipe) {
+  return honouredWithoutHostReferences(recipe).kept;
+}
+var RecipeError = class extends Error {
+  constructor(code, message, logPath) {
+    super(message);
+    this.code = code;
+    this.logPath = logPath;
+  }
+};
+var DIR_RECIPE = ".devcontainer/devcontainer.json";
+var ROOT_RECIPE = ".devcontainer.json";
+function locateRecipe(checkoutDir) {
+  if (existsSync(join(checkoutDir, DIR_RECIPE))) return { kind: "file", path: DIR_RECIPE };
+  if (existsSync(join(checkoutDir, ROOT_RECIPE))) return { kind: "file", path: ROOT_RECIPE };
+  const named = namedConfigurations(checkoutDir);
+  if (named.length > 0) {
+    throw new RecipeError(
+      "recipe_ambiguous",
+      `the repository has only named devcontainer configurations (${named.join(", ")}); add ${DIR_RECIPE} so the runner knows which to build`
+    );
+  }
+  return { kind: "default" };
+}
+function namedConfigurations(checkoutDir) {
+  const dir = join(checkoutDir, ".devcontainer");
+  if (!existsSync(dir)) return [];
+  return readdirSync(dir).sort().map((entry) => `.devcontainer/${entry}/devcontainer.json`).filter((path) => existsSync(join(checkoutDir, path)));
+}
+var COMMENTS = /("(?:[^"\\]|\\.)*")|\/\/[^\n]*|\/\*[\s\S]*?(?:\*\/|$)/g;
+var TRAILING_COMMAS = /("(?:[^"\\]|\\.)*")|,(\s*[}\]])/g;
+function parseJsonc(text) {
+  const withoutComments = text.replace(COMMENTS, (_match, str) => str ?? "");
+  return JSON.parse(withoutComments.replace(TRAILING_COMMAS, (_match, str, close) => str ?? close ?? ""));
+}
+function readRecipe(checkoutDir, location) {
+  if (location.kind === "default") return {};
+  const parsed = parseJsonc(readFileSync(join(checkoutDir, location.path), "utf8"));
+  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+    throw new Error(`${location.path} is not a JSON object`);
+  }
+  return parsed;
+}
+function within(dir, path) {
+  const rel = relative(dir, path);
+  return rel !== ".." && !rel.startsWith(`..${sep}`);
+}
+function realish(path) {
+  let existing = path;
+  let rest = "";
+  while (!existsSync(existing)) {
+    rest = join(basename(existing), rest);
+    existing = dirname(existing);
+  }
+  return join(realpathSync(existing), rest);
+}
+function assertBuildable(checkoutDir, location, recipe) {
+  if (location.kind === "default") return;
+  const devcontainerDir = join(checkoutDir, ".devcontainer");
+  if (existsSync(devcontainerDir) && lstatSync(devcontainerDir).isSymbolicLink()) {
+    throw new RecipeError(
+      "recipe_context_outside",
+      ".devcontainer is a symbolic link, so the build could read files outside the repository; commit a real directory"
+    );
+  }
+  if (recipe.dockerComposeFile !== void 0) {
+    throw new RecipeError(
+      "recipe_needs_docker",
+      "the recipe uses dockerComposeFile; its services need Docker, which a container build does not have"
+    );
+  }
+  const build = recipe.build;
+  if (typeof build !== "object" || build === null) return;
+  const { dockerfile, context } = build;
+  const base = resolve(checkoutDir, location.path, "..");
+  const allowed = join(realpathSync(checkoutDir), ".devcontainer");
+  const contextPath = resolve(base, typeof context === "string" ? context : ".");
+  const paths = [contextPath];
+  if (typeof dockerfile === "string") paths.push(resolve(base, dockerfile));
+  for (const path of paths) {
+    if (!within(devcontainerDir, path) || !within(allowed, realish(path))) {
+      throw new RecipeError(
+        "recipe_context_outside",
+        `the recipe's build reads ${relative(checkoutDir, path) || "."}, outside .devcontainer/; move the build files into .devcontainer/`
+      );
+    }
+  }
+}
+function writeSanitizedRecipe(checkoutDir, location, recipe) {
+  if (location.kind === "default") throw new Error("the default image has no recipe to sanitize");
+  const path = location.path === ROOT_RECIPE ? join(checkoutDir, ".outerlayer-recipe.json") : join(checkoutDir, ".devcontainer", SANITIZED_NAME);
+  writeFileSync(path, `${JSON.stringify(sanitizeRecipe(recipe), null, 2)}
+`);
+  return path;
+}
+var SANITIZED_NAME = "outerlayer-recipe.json";
+var PACKAGE = "@devcontainers/cli";
+function buildRootFromDist(moduleDir = dirname(fileURLToPath(import.meta.url))) {
+  try {
+    const info = JSON.parse(readFileSync(join(moduleDir, "build-info.json"), "utf8"));
+    return typeof info.root === "string" ? info.root : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function resolveDevcontainerCli(opts = {}) {
+  const resolve2 = opts.resolve ?? createRequire$1(import.meta.url).resolve;
+  try {
+    const bin = join(dirname(resolve2(`${PACKAGE}/package.json`)), "devcontainer.js");
+    if (existsSync(bin)) return { command: process.execPath, args: [bin] };
+  } catch {
+  }
+  const buildRoot = opts.buildRoot ?? buildRootFromDist();
+  const fallback = buildRoot === void 0 ? void 0 : join(buildRoot, "node_modules", PACKAGE);
+  if (fallback !== void 0 && existsSync(join(fallback, "devcontainer.js"))) {
+    return { command: process.execPath, args: [join(fallback, "devcontainer.js")] };
+  }
+  throw new RecipeError(
+    "devcontainer_cli_missing",
+    `the devcontainer CLI is not installed: looked beside this package and in ${fallback ?? "the checkout this build came from (unknown)"}. Run yarn install in that checkout.`
+  );
+}
+function devcontainerBuildInvocation(cli, req) {
+  return {
+    command: cli.command,
+    args: [
+      ...cli.args,
+      "build",
+      "--workspace-folder",
+      req.workspace,
+      "--config",
+      req.config,
+      "--image-name",
+      req.imageName,
+      ...Object.entries(req.labels).flatMap(([key, value]) => ["--label", `${key}=${value}`]),
+      "--log-format",
+      "text",
+      // Written as an OCI layout instead of loaded into Docker: the runner's builder cannot read Docker's image store, so the next layer starts FROM the layout.
+      ...req.layoutOut === void 0 ? [] : ["--output", `type=oci,dest=${req.layoutOut},tar=false`]
+    ]
+  };
+}
+
+export { DOCKER_FEATURE, RecipeError, SANITIZED_NAME, assertBuildable, buildRootFromDist, classifyProperties, devcontainerBuildInvocation, locateRecipe, readRecipe, resolveDevcontainerCli, writeSanitizedRecipe };

package/dist/{chunk-FVF2LMVG.js → chunk-IZVDQXTC.js}

@@ -1,24 +1,24 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { decideInstalledSwitch } from './chunk-3JVYMD4G.js';
-import { reportFailedStart, fitImageBuildMemory } from './chunk-RNMCFAYH.js';
+import { reportFailedStart, fitImageBuildMemory } from './chunk-F5H3LVHR.js';
 import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-E7R2GIAW.js';
 import { RUNNER_PROTOCOL } from './chunk-MH6QLXUO.js';
 import { writePendingUpdate } from './chunk-HOUFCUMH.js';
-import { renderUpdateSteps } from './chunk-5ZBVKRDK.js';
+import { renderUpdateSteps } from './chunk-PN7RMFPP.js';
 import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-TS3EFB7S.js';
-import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, readProvisionOut, workdirProblem, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, startSender, finishJob, sampleGuest, foldSample, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, GUEST_USAGE_INTERVAL_MS, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-JKLSQOYO.js';
+import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, readProvisionOut, workdirProblem, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, startSender, finishJob, sampleGuest, foldSample, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, GUEST_USAGE_INTERVAL_MS, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-TGBST2QL.js';
 import { JOB_STATE_FORMAT, readsJobState, jobStateFormatOf } from './chunk-ZVB57WI6.js';
-import { realBlockedProbes, checkBlockedWithSlots, largeBuildMemoryBytes, LARGE_BUILD_DISK_BYTES, checkManagedRoom, sliceMemoryOf } from './chunk-ZADRW2V2.js';
+import { realBlockedProbes, checkBlockedWithSlots, largeBuildMemoryBytes, LARGE_BUILD_DISK_BYTES, checkManagedRoom, sliceMemoryOf } from './chunk-XLJXO4QC.js';
 import { writeMarker, readMarker, currentVersion, removeMarker, isInLayout, startedThroughCurrent, entryIn, versionDir, switchCurrent, cleanVersions, stagingDir } from './chunk-YL3RWW7X.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, attemptNote, fetchManagedClaudeKey, holdManagedClaudeKey, fetchManagedBuildSettings, holdManagedBuildSettings, needsBuildSkill, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, provisionEnvironment, resolveHostBuild, listenOnBroker, hostEnvironment, deliverExecMaven, runWithSpawn, hostCommandEnvironment, lifecycleSteps, execArgv, lifecycleFailureReason, decideHostBuildSkill, prepareBranch, currentSkillCommand, formerSkillProblem, containerCommandExec, execCommandLine, startHostServices, setUpRunnerCgroup, sweepImageBuilders, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, managedBuildSettingsFor, ADOPTED_FETCH_RETRY_WINDOW_MS, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-3PUOHONX.js';
+import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, attemptNote, fetchManagedClaudeKey, holdManagedClaudeKey, fetchManagedBuildSettings, holdManagedBuildSettings, needsBuildSkill, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, provisionEnvironment, resolveHostBuild, listenOnBroker, hostEnvironment, deliverExecMaven, runWithSpawn, hostCommandEnvironment, lifecycleSteps, execArgv, lifecycleFailureReason, decideHostBuildSkill, prepareBranch, currentSkillCommand, formerSkillProblem, containerCommandExec, execCommandLine, startHostServices, setUpRunnerCgroup, sweepImageBuilders, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, managedBuildSettingsFor, ADOPTED_FETCH_RETRY_WINDOW_MS, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-DFBY6LX3.js';
 import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, resolveGoverningSource, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-77VBS2RT.js';
 import { imageTag, writeUpdateStatus, pullInstruction, tagToPull } from './chunk-SDELQEG4.js';
 import { isVersion, compareVersions, satisfiesRange } from './chunk-TQMI335S.js';
-import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, keepsHostBuilder, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-BQQPDBSF.js';
-import { freeBytes, formatBytes, allocatedBytes, volumeBytes } from './chunk-3HJMY3H5.js';
-import { writeJobFile, ensureRunnerIdentity, identityDockerFor, readJobFile, exceedsDisk, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, RUNNER_LABEL, BUILD_LABEL, readJobFileChecked } from './chunk-XYLHSCLR.js';
+import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, keepsHostBuilder, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-Q3L5AC75.js';
+import { freeBytes, formatBytes, allocatedBytes, volumeBytes } from './chunk-6NXBXWOP.js';
+import { writeJobFile, ensureRunnerIdentity, identityDockerFor, readJobFile, exceedsDisk, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, RUNNER_LABEL, BUILD_LABEL, readJobFileChecked } from './chunk-KOZ6IBEI.js';
 import { claimPidFile, writePidFile, readPidFile, releasePidFile } from './chunk-LQHCNXPK.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
 import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-QABXXQ67.js';
@@ -3279,7 +3279,7 @@ async function startRunner(configPath, deps, startup) {
       check: update.check ? () => update.check(configPath) : async () => {
         const held = heldClaudeCredential();
         const env = held === void 0 ? process.env : { ...process.env, [held.variable]: held.value };
-        return (await import('./check-FOWN6M3C.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
+        return (await import('./check-V66LZDNK.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
       },
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log

package/dist/{chunk-LY62UHRR.js → chunk-JZLMFYFM.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { escapeUnitPath, UNIT_MARKER, DEFAULT_UNIT_NAME } from './chunk-3NCWHEGM.js';
+import { escapeUnitPath, UNIT_MARKER, DEFAULT_UNIT_NAME } from './chunk-TLIZ7FY4.js';
 import { inspectService, realInspectProbes } from './chunk-SDAEXUIX.js';
 import { realpathSync, readFileSync, readdirSync } from 'fs';
 import { resolve, dirname, join } from 'path';