@outerlayer/cli 0.34.0-next.20261027162612 → 0.34.0-next.20261027190442

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-27T16:28:14.920Z+d66ae09","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-27T19:09:01.789Z+1403660","root":"/home/runner/work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{check-QGM2SECF.js → check-IFHLERRX.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-CKVJSOY3.js';
+import { probeCredentials } from './chunk-S5U6RKQX.js';
 import './chunk-3JVYMD4G.js';
-import './chunk-KVGK2JL3.js';
+import './chunk-Y4WJ4BLX.js';
 import './chunk-E7R2GIAW.js';
 import './chunk-MH6QLXUO.js';
 import './chunk-UZIAZXXO.js';
-import './chunk-MGF346ND.js';
+import './chunk-SKAML7GB.js';
 import './chunk-BS4CZMT6.js';
-import './chunk-BCIBSJZH.js';
+import './chunk-Y7MF32DM.js';
 import './chunk-6CK2OC4Q.js';
 import './chunk-ZVB57WI6.js';
 import './chunk-5ARXP3BP.js';
@@ -18,12 +18,12 @@ import './chunk-7SJNVGVC.js';
 import './chunk-RCAMBC3H.js';
 import './chunk-ESVW4MJY.js';
 import './chunk-GPO7F757.js';
-import { managedProblems, managedFactsOf } from './chunk-QWSAZGH6.js';
+import { managedProblems, managedFactsOf } from './chunk-4HA4S3U2.js';
 import './chunk-WR2GRWK3.js';
 import './chunk-TBT347UY.js';
 import { findServiceUnit } from './chunk-7TLGRE5F.js';
 import './chunk-TZMDRHWB.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, HELPER_ENV, helperSocketPath, probeHelper, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-J3Q3QCOF.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, HELPER_ENV, helperSocketPath, probeHelper, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-LSFP57LI.js';
 import './chunk-2PGI6RDE.js';
 import './chunk-5FHBVV25.js';
 import './chunk-CMMEJJTL.js';

package/dist/{chunk-QWSAZGH6.js → chunk-4HA4S3U2.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { placeholderQueues, placeholderProblem } from './chunk-J3Q3QCOF.js';
+import { placeholderQueues, placeholderProblem } from './chunk-LSFP57LI.js';
 import { checkFit, RUNNER_RESERVE_BYTES } from './chunk-OHTMTMFX.js';
 import { builtinKind, EGRESS_SWITCHABLE_KEYS, imageBuildOf, keepsHostBuilder } from './chunk-JWMJMQRF.js';
 import { realBuildDiskProbe, checkDiskFit, DEFAULT_CACHE_DISK, DEFAULT_BUILD_DISK } from './chunk-LYX2RRSF.js';

package/dist/{chunk-J3Q3QCOF.js → chunk-LSFP57LI.js}

@@ -3018,8 +3018,8 @@ async function provisionRuntimes(input) {
   }
   return { ok: true, unpinned, dropProxyWarning };
 }
-function runtimeStepInput(report, services, dropProxyWarning) {
-  return report.base === void 0 ? {} : { runtimes: { refusals: () => services.record().refusals, dropProxyWarning } };
+function runtimeStepInput(report, services) {
+  return report.base === void 0 ? {} : { runtimes: { refusals: () => services.record().refusals } };
 }
 function keepUnpinnedRuntimes(state, steps) {
   if (steps.unpinnedRuntimes !== void 0) state.unpinnedRuntimes = steps.unpinnedRuntimes;
@@ -3030,6 +3030,17 @@ var aborted = () => ({ ok: false, reason: "", aborted: true });
 function firstLine5(text) {
   return text.trim().split("\n")[0] ?? "";
 }
+async function nodeRejectsProxyWarningFlag(repositories, exec, log, tag) {
+  for (const entry of repositories) {
+    const ran = await exec(["node", "--version"], checkoutPath(entry), { quiet: true, withoutProxyWarning: true });
+    if (ran.status !== 0) continue;
+    const version = firstLine5(ran.stdout);
+    if (nodeAcceptsProxyWarningFlag(version)) continue;
+    log.line(`${tag} ${entry.repository}: leaving ${PROXY_WARNING_FLAG} out of NODE_OPTIONS because node ${version} does not accept it`);
+    return true;
+  }
+  return false;
+}
 function gitErrorLine(text) {
   const lines = text.split("\n").map((line2) => line2.trim()).filter((line2) => line2 !== "");
   return lines.find((line2) => /^(fatal|error):/.test(line2)) ?? lines.at(-1) ?? "";
@@ -3151,12 +3162,14 @@ async function runBuildSteps(input) {
   }
   if (input.governing !== void 0) await noteIgnoredDevcontainers(input, repositories, input.governing.repository);
   let unpinnedRuntimes;
+  const ordered = [{ ...primary, primary: true }, ...repositories.filter((candidate) => candidate.repository !== primary.repository).map((entry) => ({ ...entry, primary: false }))];
   if (input.runtimes !== void 0) {
-    const ordered = [{ ...primary, primary: true }, ...repositories.filter((candidate) => candidate.repository !== primary.repository).map((entry) => ({ ...entry, primary: false }))];
     const chosen = await provisionRuntimes({ repositories: ordered, exec, log, tag, refusals: input.runtimes.refusals, aborted: input.aborted });
     if (!chosen.ok) return chosen.aborted === true ? aborted() : { ok: false, reason: chosen.reason };
     unpinnedRuntimes = chosen.unpinned;
-    if (chosen.dropProxyWarning) input.runtimes.dropProxyWarning();
+    if (chosen.dropProxyWarning) input.dropProxyWarning?.();
+  } else if (input.dropProxyWarning !== void 0 && await nodeRejectsProxyWarningFlag(ordered, exec, log, tag)) {
+    input.dropProxyWarning();
   }
   const lifecycleDir = lifecycleWorkdir(repositories, input.governing?.repository);
   for (const step of lifecycleSteps(input.lifecycle)) {
@@ -4830,10 +4843,11 @@ async function provisionContainer(input) {
     keepIn: jobDir,
     ...input.requireBuildSkill === true ? { requireBuildSkill: true } : {},
     // A repository with no devcontainer file builds on the universal image, whose runtimes the build chooses and installs.
-    ...runtimeStepInput(report, services, () => {
+    ...runtimeStepInput(report, services),
+    dropProxyWarning: () => {
       state.proxyWarningDropped = true;
       execEnv = plainEnv;
-    })
+    }
   });
   if (!steps.ok) return bail(steps.reason, steps.aborted === true);
   state.startCommit = steps.startCommit;

package/dist/{chunk-NEBMTP7T.js → chunk-MXAYUZJF.js}

@@ -167,14 +167,14 @@ function governingDir(cwd) {
 async function testProofMode(cwd) {
   const dir = governingDir(cwd);
   if (dir === void 0) return "any";
-  const { testProofIn } = await import('./host-checks-6G2F2HTK.js');
+  const { testProofIn } = await import('./host-checks-33ZTDTSH.js');
   return testProofIn(dir);
 }
 async function judgeCheckName(cwd) {
   const dir = governingDir(cwd);
   if (dir === void 0) return {};
   if (!existsSync(dir)) return { note: `the governed context at ${dir} is not readable` };
-  const { checksIn, isJudgeCheck } = await import('./host-checks-6G2F2HTK.js');
+  const { checksIn, isJudgeCheck } = await import('./host-checks-33ZTDTSH.js');
   const quiet = { line: () => void 0, error: () => void 0 };
   const check = checksIn(dir, quiet, "").checks.find((c) => isJudgeCheck(c) && c.judge.subjects === "criteria");
   return check === void 0 ? {} : { name: check.name };
@@ -314,7 +314,7 @@ async function runWorkProofs(opts) {
 async function runWorkProofsCommand(opts) {
   try {
     if (opts.record) {
-      const { runWorkProofsRecord } = await import('./work-proofs-record-AVKJFZOD.js');
+      const { runWorkProofsRecord } = await import('./work-proofs-record-USD4JWFP.js');
       const result2 = await runWorkProofsRecord(opts);
       process.exitCode = result2.exitCode;
       return;

package/dist/{chunk-N33OOF3K.js → chunk-PMIW6OGQ.js}

@@ -1217,7 +1217,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-AG73VZNG.js');
+    const { runnerHostChecks } = await import('./doctor-N4I6IEKP.js');
     const gateway = (() => {
       try {
         const { url, apiKey, appId } = loadRunnerConfig(configPath);

package/dist/{chunk-CKVJSOY3.js → chunk-S5U6RKQX.js}

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { decideInstalledSwitch } from './chunk-3JVYMD4G.js';
-import { reportFailedStart, fitImageBuildMemory } from './chunk-KVGK2JL3.js';
+import { reportFailedStart, fitImageBuildMemory } from './chunk-Y4WJ4BLX.js';
 import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-E7R2GIAW.js';
 import { RUNNER_PROTOCOL } from './chunk-MH6QLXUO.js';
 import { writePendingUpdate } from './chunk-UZIAZXXO.js';
-import { renderUpdateSteps } from './chunk-MGF346ND.js';
+import { renderUpdateSteps } from './chunk-SKAML7GB.js';
 import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-BS4CZMT6.js';
-import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, readProvisionOut, workdirProblem, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, startSender, finishJob, sampleGuest, foldSample, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, GUEST_USAGE_INTERVAL_MS, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-BCIBSJZH.js';
+import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, readProvisionOut, workdirProblem, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, startSender, finishJob, sampleGuest, foldSample, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, GUEST_USAGE_INTERVAL_MS, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-Y7MF32DM.js';
 import { JOB_STATE_FORMAT, readsJobState, jobStateFormatOf } from './chunk-ZVB57WI6.js';
-import { realBlockedProbes, checkBlockedWithSlots, largeBuildMemoryBytes, LARGE_BUILD_DISK_BYTES, checkManagedRoom, sliceMemoryOf } from './chunk-QWSAZGH6.js';
+import { realBlockedProbes, checkBlockedWithSlots, largeBuildMemoryBytes, LARGE_BUILD_DISK_BYTES, checkManagedRoom, sliceMemoryOf } from './chunk-4HA4S3U2.js';
 import { writeMarker, readMarker, currentVersion, removeMarker, isInLayout, startedThroughCurrent, entryIn, versionDir, switchCurrent, cleanVersions, stagingDir } from './chunk-WR2GRWK3.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, attemptNote, fetchManagedClaudeKey, holdManagedClaudeKey, fetchManagedBuildSettings, holdManagedBuildSettings, needsBuildSkill, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, provisionEnvironment, resolveHostBuild, listenOnBroker, hostEnvironment, deliverExecMaven, runWithSpawn, hostCommandEnvironment, lifecycleSteps, execArgv, lifecycleFailureReason, decideHostBuildSkill, prepareBranch, currentSkillCommand, formerSkillProblem, containerCommandExec, execCommandLine, startHostServices, setUpRunnerCgroup, sweepImageBuilders, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, managedBuildSettingsFor, ADOPTED_FETCH_RETRY_WINDOW_MS, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-J3Q3QCOF.js';
+import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, attemptNote, fetchManagedClaudeKey, holdManagedClaudeKey, fetchManagedBuildSettings, holdManagedBuildSettings, needsBuildSkill, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, provisionEnvironment, resolveHostBuild, listenOnBroker, hostEnvironment, deliverExecMaven, runWithSpawn, hostCommandEnvironment, lifecycleSteps, execArgv, lifecycleFailureReason, decideHostBuildSkill, prepareBranch, currentSkillCommand, formerSkillProblem, containerCommandExec, execCommandLine, startHostServices, setUpRunnerCgroup, sweepImageBuilders, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, managedBuildSettingsFor, ADOPTED_FETCH_RETRY_WINDOW_MS, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-LSFP57LI.js';
 import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, resolveGoverningSource, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-7Q7GQELE.js';
 import { imageTag, writeUpdateStatus, pullInstruction, tagToPull } from './chunk-CFJOONWM.js';
 import { isVersion, compareVersions, satisfiesRange } from './chunk-TQMI335S.js';
@@ -3279,7 +3279,7 @@ async function startRunner(configPath, deps, startup) {
       check: update.check ? () => update.check(configPath) : async () => {
         const held = heldClaudeCredential();
         const env = held === void 0 ? process.env : { ...process.env, [held.variable]: held.value };
-        return (await import('./check-QGM2SECF.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
+        return (await import('./check-IFHLERRX.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
       },
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log

package/dist/{chunk-MGF346ND.js → chunk-SKAML7GB.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { stripTerminalControls } from './chunk-BCIBSJZH.js';
+import { stripTerminalControls } from './chunk-Y7MF32DM.js';
 import { tagToPull, imageTag, pullInstruction, readUpdateStatus, runnerImageVersion } from './chunk-CFJOONWM.js';
 import { readFileSync } from 'fs';
 

package/dist/{chunk-KVGK2JL3.js → chunk-Y4WJ4BLX.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { scrubReason, stripTerminalControls } from './chunk-BCIBSJZH.js';
+import { scrubReason, stripTerminalControls } from './chunk-Y7MF32DM.js';
 import { checkFit, RUNNER_RESERVE_BYTES } from './chunk-OHTMTMFX.js';
 import { RunnerAlreadyRunningError, readPidFile } from './chunk-3FTIUB7I.js';
 import { isSameProcess } from './chunk-JBJTC3UU.js';

package/dist/{chunk-BCIBSJZH.js → chunk-Y7MF32DM.js}

@@ -8,7 +8,7 @@ import { senderPidfile } from './chunk-QRIE4JZE.js';
 import { installScrubContext } from './chunk-7SJNVGVC.js';
 import { writeDockerClientConfig } from './chunk-GPO7F757.js';
 import { upgradedStarterText } from './chunk-TZMDRHWB.js';
-import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, hasClaudeCredential, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, runtimeStepInput, keepUnpinnedRuntimes, createContainerRuntime, containerSenderCommand, hostCommandEnvironment, execArgv, signalInContainer, startHostServices, LEASE_SECONDS, managedBuildSettingsFor, stopContainer, cleanupContainer, outOfMemoryReason, closeHostBuild, dropManagedClaudeKey, dropManagedBuildSettings, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, managedMachineLimits, withFactoryHosts, helperFirecrackerNote, managedClaudeKeyValues, managedBuildSettingValues, stopJailed, deleteBuildDisk, managedClaudeKeyFor, ROOT_DISK_ID_PREFIX, copyTranscripts, containerJudgeEnvironment, senderSignalScript, copyJudgeTree } from './chunk-J3Q3QCOF.js';
+import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, hasClaudeCredential, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, runtimeStepInput, keepUnpinnedRuntimes, createContainerRuntime, containerSenderCommand, hostCommandEnvironment, execArgv, signalInContainer, startHostServices, LEASE_SECONDS, managedBuildSettingsFor, stopContainer, cleanupContainer, outOfMemoryReason, closeHostBuild, dropManagedClaudeKey, dropManagedBuildSettings, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, managedMachineLimits, withFactoryHosts, helperFirecrackerNote, managedClaudeKeyValues, managedBuildSettingValues, stopJailed, deleteBuildDisk, managedClaudeKeyFor, ROOT_DISK_ID_PREFIX, copyTranscripts, containerJudgeEnvironment, senderSignalScript, copyJudgeTree } from './chunk-LSFP57LI.js';
 import { fetchCommit, readBranchHead, diffBetween } from './chunk-5FHBVV25.js';
 import { waitForAgent, vmExecArgs } from './chunk-JVNQNKHV.js';
 import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-BS3OYFAD.js';
@@ -654,10 +654,11 @@ async function provisionMicroVm(input) {
     keepIn: jobDir,
     ...input.requireBuildSkill === true ? { requireBuildSkill: true } : {},
     // A repository with no devcontainer file builds on the universal image, whose runtimes the build chooses and installs.
-    ...runtimeStepInput(report, services, () => {
+    ...runtimeStepInput(report, services),
+    dropProxyWarning: () => {
       state.proxyWarningDropped = true;
       execEnv = plainEnv;
-    })
+    }
   });
   if (!steps.ok) return bail(steps.reason, steps.aborted === true);
   state.startCommit = steps.startCommit;

package/dist/{cli-HVBFWC3J.js → cli-7S4PEKAV.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { gatherDoctorChecks, doctorExitCode, summarizeChecks, renderDoctorText, recordWrapped, recordUnwrapped, recordRemoval, readManifest, recordInstall, recordStatusline } from './chunk-N33OOF3K.js';
+import { gatherDoctorChecks, doctorExitCode, summarizeChecks, renderDoctorText, recordWrapped, recordUnwrapped, recordRemoval, readManifest, recordInstall, recordStatusline } from './chunk-PMIW6OGQ.js';
 import './chunk-TZMDRHWB.js';
 import './chunk-KT4CN6OU.js';
 import './chunk-J7EJMIDR.js';
@@ -3926,13 +3926,13 @@ what CLIs older than ${FIRST_VERSION_READING_AGENTS_SKILLS} do. \`` + cliInvocat
         if (changed.length > 0 && !opts.json) process.stdout.write(`Removed the claude function from ${changed.join(", ")}.
 `);
       }
-      const shell = !opts.remove && opts.shellFunction !== void 0 ? (await import('./init-cmd-77XKBRUF.js')).applyShellFunctionFlag(opts.shellFunction, { home: homeFromEnv(), shellPath: process.env.SHELL }) : void 0;
+      const shell = !opts.remove && opts.shellFunction !== void 0 ? (await import('./init-cmd-BUWWUQKM.js')).applyShellFunctionFlag(opts.shellFunction, { home: homeFromEnv(), shellPath: process.env.SHELL }) : void 0;
       if (opts.json) writeJson(shell === void 0 ? outcome.result : { ...outcome.result, shellFunction: { outcome: shell.outcome, reason: shell.reason } });
       else process.stdout.write(outcome.text + skillsLine + (shell?.text ?? ""));
       return;
     }
     await installMachineSkillsForSetup();
-    const { runInitCommand } = await import('./init-cmd-77XKBRUF.js');
+    const { runInitCommand } = await import('./init-cmd-BUWWUQKM.js');
     const code = await runInitCommand(
       { json: opts.json, factory: opts.factory, shellFunction: opts.shellFunction },
       {
@@ -4999,7 +4999,7 @@ differs from HEAD.
       fail(trackerNumberError("--pr", opts.pr));
       return;
     }
-    const { runWorkProofsCommand } = await import('./work-proofs-cmd-PBY7WNYI.js');
+    const { runWorkProofsCommand } = await import('./work-proofs-cmd-5BYAAW3H.js');
     await runWorkProofsCommand({ ...opts, ...pr === void 0 ? {} : { pr } });
   });
   workCmd.command("list").description("List live work items for this factory").option("--stage <spec|build|review>", "filter by stage").option("--section <attention|waiting|flowing>", "filter by Queue section").option("--repo <owner/name>", "repository (default: the current checkout's remote)").option("--unclaimed", "only items with no live lease").option("--claimed", "only items with a live lease, held by a host or a local session").option("--startable", "only items a host can start: a build request, no open PR, no live lease").option("--needs <amend>", "only items with a thread waiting on an agent").option("--json", "machine-readable JSON output").option("--url <url>", "cloud base URL (or OUTERLAYER_URL / config)").addOption(apiKeyOption()).option("--app-id <id>", "factory id the key is bound to (or OUTERLAYER_APP_ID / config)").action(async (opts) => {
@@ -5146,7 +5146,7 @@ function registerRunnerCommands(program2) {
   const configOption = "the cloud config file to run against (default: ~/.outerlayer/config.json)";
   runnerCmd.command("start").description("Run the loop: claim work, run it, report, clean up, repeat").option("--config <path>", configOption).action(async (opts) => {
     const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-5NWSCHIO.js');
-    const { start, RunnerStartError } = await import('./loop-FRT5NSFG.js');
+    const { start, RunnerStartError } = await import('./loop-M3XDFD6O.js');
     const { RunnerAlreadyRunningError } = await import('./pidfile-WLZ427QQ.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     try {
@@ -5165,8 +5165,8 @@ function registerRunnerCommands(program2) {
     "\nReads OUTERLAYER_URL, OUTERLAYER_APP_ID, OUTERLAYER_API_KEY, OUTERLAYER_RUNNER_NAME and one Claude credential\n(CLAUDE_CODE_OAUTH_TOKEN or ANTHROPIC_API_KEY) from the environment. OUTERLAYER_AGENT\nis optional and defaults to claude. On a later start it refuses variables that disagree with the config in the volume.\nThe image sets OUTERLAYER_RUNNER_IMAGE; outside the image, use `runner start`.\n"
   ).action(async () => {
     const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-5NWSCHIO.js');
-    const { containerStart } = await import('./container-start-YLKDT2JG.js');
-    const { start, RunnerStartError } = await import('./loop-FRT5NSFG.js');
+    const { containerStart } = await import('./container-start-WRD3YZQR.js');
+    const { start, RunnerStartError } = await import('./loop-M3XDFD6O.js');
     const { RunnerAlreadyRunningError } = await import('./pidfile-WLZ427QQ.js');
     try {
       const result = await containerStart({
@@ -5190,14 +5190,14 @@ function registerRunnerCommands(program2) {
   ).action(async (opts) => {
     const { defaultRunnerConfigPath } = await import('./config-5NWSCHIO.js');
     const { runnerDir } = await import('./paths-QLFRPIKS.js');
-    const { runUpdateSteps } = await import('./update-steps-KNN4Y2ZU.js');
+    const { runUpdateSteps } = await import('./update-steps-2D4YQAW2.js');
     const text = await runUpdateSteps({ runnerDirPath: runnerDir(opts.config ?? defaultRunnerConfigPath()) });
     process.stdout.write(`${text}
 `);
   });
   runnerCmd.command("check").description("Validate the config, the hooks and the key, and print the effective settings").option("--config <path>", configOption).action(async (opts) => {
     const { defaultRunnerConfigPath } = await import('./config-5NWSCHIO.js');
-    const { runRunnerCheck } = await import('./check-QGM2SECF.js');
+    const { runRunnerCheck } = await import('./check-IFHLERRX.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const result = await runRunnerCheck(configPath);
     if (!result.ok) {
@@ -5231,13 +5231,13 @@ function registerRunnerCommands(program2) {
       }
     }
     const buildCpusMax = opts.buildCpusMax === void 0 ? void 0 : Number(opts.buildCpusMax);
-    if (buildCpusMax !== void 0 && !(await import('./command-J3CDQLWC.js')).cpusAreValid(buildCpusMax)) {
+    if (buildCpusMax !== void 0 && !(await import('./command-GQVFZHJ2.js')).cpusAreValid(buildCpusMax)) {
       fail(`--build-cpus-max ${opts.buildCpusMax} is not a number of CPUs from 0.01 to 1024.`);
       return;
     }
     try {
       if (opts.service === true) {
-        const { installServiceCommand } = await import('./command-J3CDQLWC.js');
+        const { installServiceCommand } = await import('./command-GQVFZHJ2.js');
         const result2 = await installServiceCommand({
           configPath,
           print: opts.print,
@@ -5295,7 +5295,7 @@ To keep it running, run ${C.yellow}${cliInvocation()} runner install --service${
       return;
     }
     const { defaultRunnerConfigPath } = await import('./config-5NWSCHIO.js');
-    const { uninstallServiceCommand } = await import('./command-J3CDQLWC.js');
+    const { uninstallServiceCommand } = await import('./command-GQVFZHJ2.js');
     const result = await uninstallServiceCommand({ configPath: opts.config ?? defaultRunnerConfigPath(), unitName: opts.unitName, home: homeFromEnv() });
     if (result.ok) for (const line of result.lines) process.stdout.write(`${C.green}\u2713${C.reset} ${line}
 `);
@@ -5323,10 +5323,10 @@ already in claude.env is used.
 `
   ).action(async (opts) => {
     const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-5NWSCHIO.js');
-    const { prepareRunnerInit, runRunnerInit, RunnerInitError, writeRunnerInit } = await import('./init-Y2OJSOAA.js');
-    const { obtainRunnerKey, runnerKeyLogin } = await import('./runner-key-T3V7N7CL.js');
-    const { detectMachine } = await import('./machine-TEG554M5.js');
-    const { chooseVm, runVmInit, VmInitError } = await import('./init-7VWIU5TG.js');
+    const { prepareRunnerInit, runRunnerInit, RunnerInitError, writeRunnerInit } = await import('./init-OXCOPKHP.js');
+    const { obtainRunnerKey, runnerKeyLogin } = await import('./runner-key-KMTC4NCQ.js');
+    const { detectMachine } = await import('./machine-3BI2SGAK.js');
+    const { chooseVm, runVmInit, VmInitError } = await import('./init-2YOAKLDN.js');
     const { AGENT_COMMANDS, credentialFromStdin, isAgentName, restartForCredential, RunnerEnvError } = await import('./runner-env-6FSJOSWS.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     if (opts.agent !== void 0 && !isAgentName(opts.agent)) {
@@ -5477,7 +5477,7 @@ ${C.yellow}The runner will not update itself: ${installErr.message}${C.reset}
       let serviceUp = false;
       let restart;
       if (installedLayout) {
-        const { installServiceCommand } = await import('./command-J3CDQLWC.js');
+        const { installServiceCommand } = await import('./command-GQVFZHJ2.js');
         const service = await installServiceCommand({
           configPath,
           entryPath: process.argv[1] ?? "",
@@ -5606,7 +5606,7 @@ Next:
   });
   runnerCmd.command("stop").description("Take no more work; finish running jobs, then exit").option("--config <path>", "the cloud config file naming the runner to stop").option("--now", "end running jobs immediately, with outcome stopped").action(async (opts) => {
     const { defaultRunnerConfigPath } = await import('./config-5NWSCHIO.js');
-    const { requestStop } = await import('./loop-FRT5NSFG.js');
+    const { requestStop } = await import('./loop-M3XDFD6O.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const { runnerImageVersion } = await import('./image-tag-OYHGRHVV.js');
     await requestStop(configPath, Boolean(opts.now), void 0, { image: runnerImageVersion() !== void 0 });
@@ -5614,8 +5614,8 @@ Next:
   runnerCmd.command("status").description("List running jobs; with --recent, finished ones too").option("--config <path>", "the cloud config file naming the runner to inspect").option("--recent", "also list finished jobs, newest first, capped at 20").option("--json", "machine-readable JSON output").action(async (opts) => {
     const { defaultRunnerConfigPath, loadRunnerConfig } = await import('./config-5NWSCHIO.js');
     const { jobsDir, runnerDir } = await import('./paths-QLFRPIKS.js');
-    const { listJobFiles, runnerProcessState } = await import('./loop-FRT5NSFG.js');
-    const { renderStatus } = await import('./status-4YO4TUEH.js');
+    const { listJobFiles, runnerProcessState } = await import('./loop-M3XDFD6O.js');
+    const { renderStatus } = await import('./status-WVCQCBDQ.js');
     const { readHousekeepingRecord } = await import('./record-WGCMQLQS.js');
     const path2 = await import('path');
     const configPath = opts.config ?? defaultRunnerConfigPath();
@@ -5674,7 +5674,7 @@ Next:
   });
   runnerCmd.command("logs").argument("<item>", "the work item's number in the factory").description("Print the newest attempt's log for one item").option("--config <path>", "the cloud config file naming the runner to inspect").option("-f, --follow", "keep printing as the log grows").action(async (itemArg, opts) => {
     const { defaultRunnerConfigPath } = await import('./config-5NWSCHIO.js');
-    const { listJobFiles } = await import('./loop-FRT5NSFG.js');
+    const { listJobFiles } = await import('./loop-M3XDFD6O.js');
     const { newestAttempt, logPathFor, tail, RunnerLogsError } = await import('./logs-42QPBCMC.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const item = parseTrackerNumber(itemArg);

package/dist/{command-J3CDQLWC.js → command-GQVFZHJ2.js}

@@ -3,7 +3,7 @@ import { createRequire } from 'node:module';
 import { realOwnership, accountNamed, handOver, runRunnerInstall, launcherSummary, restartNote, accountIdentity } from './chunk-2YPOSVC7.js';
 import './chunk-AV5T7HV3.js';
 import { currentLink, execStartCommand } from './chunk-WR2GRWK3.js';
-import { detectMachine, helperSocketPath, ensureFirecrackerAndJailer } from './chunk-J3Q3QCOF.js';
+import { detectMachine, helperSocketPath, ensureFirecrackerAndJailer } from './chunk-LSFP57LI.js';
 import './chunk-2PGI6RDE.js';
 import './chunk-5FHBVV25.js';
 import './chunk-CMMEJJTL.js';

package/dist/{container-start-YLKDT2JG.js → container-start-WRD3YZQR.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { reportFailedStart, BUILD_MEMORY_VARIABLE } from './chunk-KVGK2JL3.js';
-import { readOwnContainer } from './chunk-MGF346ND.js';
-import './chunk-BCIBSJZH.js';
+import { reportFailedStart, BUILD_MEMORY_VARIABLE } from './chunk-Y4WJ4BLX.js';
+import { readOwnContainer } from './chunk-SKAML7GB.js';
+import './chunk-Y7MF32DM.js';
 import './chunk-6CK2OC4Q.js';
 import './chunk-ZVB57WI6.js';
 import './chunk-5ARXP3BP.js';
@@ -14,7 +14,7 @@ import './chunk-ESVW4MJY.js';
 import './chunk-GPO7F757.js';
 import './chunk-TBT347UY.js';
 import './chunk-TZMDRHWB.js';
-import { detectMachine, supportsContainerBuilds, MIN_ENGINE_MAJOR, describeMachineDocker, RunnerInitError, prepareRunnerInit, writeRunnerInit } from './chunk-J3Q3QCOF.js';
+import { detectMachine, supportsContainerBuilds, MIN_ENGINE_MAJOR, describeMachineDocker, RunnerInitError, prepareRunnerInit, writeRunnerInit } from './chunk-LSFP57LI.js';
 import './chunk-2PGI6RDE.js';
 import './chunk-5FHBVV25.js';
 import './chunk-CMMEJJTL.js';

package/dist/{doctor-AG73VZNG.js → doctor-N4I6IEKP.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { managedProblems } from './chunk-QWSAZGH6.js';
+import { managedProblems } from './chunk-4HA4S3U2.js';
 import { launcherCheck } from './chunk-AV5T7HV3.js';
 import './chunk-WR2GRWK3.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { needsClaudeCredential, claudeCredentialCheck, detectMachine, supportsContainerBuilds, describeMachineDocker, MIN_ENGINE_MAJOR, reachDockerStep, supportsMicroVmBuilds, microVmArchSupported, microVmAssetsPinned, helperFirecrackerNote, probeHelper, helperSocketPath, missingPermissionOf, missingPermissionFix } from './chunk-J3Q3QCOF.js';
+import { needsClaudeCredential, claudeCredentialCheck, detectMachine, supportsContainerBuilds, describeMachineDocker, MIN_ENGINE_MAJOR, reachDockerStep, supportsMicroVmBuilds, microVmArchSupported, microVmAssetsPinned, helperFirecrackerNote, probeHelper, helperSocketPath, missingPermissionOf, missingPermissionFix } from './chunk-LSFP57LI.js';
 import './chunk-2PGI6RDE.js';
 import './chunk-5FHBVV25.js';
 import './chunk-CMMEJJTL.js';

package/dist/{host-checks-6G2F2HTK.js → host-checks-33ZTDTSH.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MAX_CHECK_ITEMS_BYTES, checksIn, commandItems, isJudgeCheck, makeRecorder, readDefinitions, runHostChecks, testProofIn, timeoutAfter } from './chunk-BCIBSJZH.js';
+export { MAX_CHECK_ITEMS_BYTES, checksIn, commandItems, isJudgeCheck, makeRecorder, readDefinitions, runHostChecks, testProofIn, timeoutAfter } from './chunk-Y7MF32DM.js';
 import './chunk-6CK2OC4Q.js';
 import './chunk-ZVB57WI6.js';
 import './chunk-5ARXP3BP.js';
@@ -12,7 +12,7 @@ import './chunk-ESVW4MJY.js';
 import './chunk-GPO7F757.js';
 import './chunk-TBT347UY.js';
 import './chunk-TZMDRHWB.js';
-import './chunk-J3Q3QCOF.js';
+import './chunk-LSFP57LI.js';
 import './chunk-2PGI6RDE.js';
 import './chunk-5FHBVV25.js';
 import './chunk-CMMEJJTL.js';

package/dist/index.js

@@ -26,5 +26,5 @@ if (argv[0] === "claude") {
   process.exit(await runClaudeLauncher(argv.slice(1)));
 }
 (await import('./hook-fast-5WOGLR7V.js')).recordLinkExitFailure(argv);
-var { runCli } = await import('./cli-HVBFWC3J.js');
+var { runCli } = await import('./cli-7S4PEKAV.js');
 await runCli(process.argv);

package/dist/{init-7VWIU5TG.js → init-2YOAKLDN.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { npmSupportsProvenance } from './chunk-E7R2GIAW.js';
-import { RunnerInitError, readConfigObject } from './chunk-J3Q3QCOF.js';
+import { RunnerInitError, readConfigObject } from './chunk-LSFP57LI.js';
 import './chunk-2PGI6RDE.js';
 import './chunk-5FHBVV25.js';
 import './chunk-CMMEJJTL.js';

package/dist/{init-Y2OJSOAA.js → init-OXCOPKHP.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { PLACEHOLDER_MARKER, RunnerInitError, isPlaceholderCommand, prepareRunnerInit, readConfigObject, runRunnerInit, writeRunnerInit } from './chunk-J3Q3QCOF.js';
+export { PLACEHOLDER_MARKER, RunnerInitError, isPlaceholderCommand, prepareRunnerInit, readConfigObject, runRunnerInit, writeRunnerInit } from './chunk-LSFP57LI.js';
 import './chunk-2PGI6RDE.js';
 import './chunk-5FHBVV25.js';
 import './chunk-CMMEJJTL.js';

package/dist/{init-cmd-77XKBRUF.js → init-cmd-BUWWUQKM.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { summarizeChecks, summaryText, renderDoctorText } from './chunk-N33OOF3K.js';
+import { summarizeChecks, summaryText, renderDoctorText } from './chunk-PMIW6OGQ.js';
 import './chunk-TZMDRHWB.js';
 import { shellFunctionInstalled, removeShellFunction, installShellFunction, SHELL_FUNCTION_LINE } from './chunk-CJJDJ7AT.js';
 import './chunk-KT4CN6OU.js';

package/dist/{loop-FRT5NSFG.js → loop-M3XDFD6O.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { RunnerStartError, leaseTimeLeftFor, listJobFiles, logUnusableHelper, probeBuild, probeCredentials, requestStop, runnerProcessState, runtimeOf, sampleUsage, start, tick, watchTick } from './chunk-CKVJSOY3.js';
+export { RunnerStartError, leaseTimeLeftFor, listJobFiles, logUnusableHelper, probeBuild, probeCredentials, requestStop, runnerProcessState, runtimeOf, sampleUsage, start, tick, watchTick } from './chunk-S5U6RKQX.js';
 import './chunk-3JVYMD4G.js';
-import './chunk-KVGK2JL3.js';
+import './chunk-Y4WJ4BLX.js';
 import './chunk-E7R2GIAW.js';
 import './chunk-MH6QLXUO.js';
 import './chunk-UZIAZXXO.js';
-import './chunk-MGF346ND.js';
+import './chunk-SKAML7GB.js';
 import './chunk-BS4CZMT6.js';
-import './chunk-BCIBSJZH.js';
+import './chunk-Y7MF32DM.js';
 import './chunk-6CK2OC4Q.js';
 import './chunk-ZVB57WI6.js';
 import './chunk-5ARXP3BP.js';
@@ -18,11 +18,11 @@ import './chunk-7SJNVGVC.js';
 import './chunk-RCAMBC3H.js';
 import './chunk-ESVW4MJY.js';
 import './chunk-GPO7F757.js';
-import './chunk-QWSAZGH6.js';
+import './chunk-4HA4S3U2.js';
 import './chunk-WR2GRWK3.js';
 import './chunk-TBT347UY.js';
 import './chunk-TZMDRHWB.js';
-import './chunk-J3Q3QCOF.js';
+import './chunk-LSFP57LI.js';
 import './chunk-2PGI6RDE.js';
 import './chunk-5FHBVV25.js';
 import './chunk-CMMEJJTL.js';

package/dist/{machine-TEG554M5.js → machine-3BI2SGAK.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { describeMachineDocker, detectMachine, microVmArchSupported, microVmAssetsPinned, reachDockerStep, supportsContainerBuilds, supportsMicroVmBuilds } from './chunk-J3Q3QCOF.js';
+export { describeMachineDocker, detectMachine, microVmArchSupported, microVmAssetsPinned, reachDockerStep, supportsContainerBuilds, supportsMicroVmBuilds } from './chunk-LSFP57LI.js';
 import './chunk-2PGI6RDE.js';
 import './chunk-5FHBVV25.js';
 import './chunk-CMMEJJTL.js';

package/dist/{runner-key-T3V7N7CL.js → runner-key-KMTC4NCQ.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { readConfigObject, RunnerInitError } from './chunk-J3Q3QCOF.js';
+import { readConfigObject, RunnerInitError } from './chunk-LSFP57LI.js';
 import './chunk-2PGI6RDE.js';
 import './chunk-5FHBVV25.js';
 import './chunk-CMMEJJTL.js';

package/dist/{status-4YO4TUEH.js → status-WVCQCBDQ.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isReadable, ALREADY_RELEASED, RENEW_INTERVAL_SECONDS } from './chunk-BCIBSJZH.js';
+import { isReadable, ALREADY_RELEASED, RENEW_INTERVAL_SECONDS } from './chunk-Y7MF32DM.js';
 import './chunk-6CK2OC4Q.js';
 import { jobStateFormatOf } from './chunk-ZVB57WI6.js';
 import './chunk-5ARXP3BP.js';
@@ -12,7 +12,7 @@ import './chunk-ESVW4MJY.js';
 import './chunk-GPO7F757.js';
 import './chunk-TBT347UY.js';
 import './chunk-TZMDRHWB.js';
-import { LEASE_SECONDS } from './chunk-J3Q3QCOF.js';
+import { LEASE_SECONDS } from './chunk-LSFP57LI.js';
 import './chunk-2PGI6RDE.js';
 import './chunk-5FHBVV25.js';
 import './chunk-CMMEJJTL.js';

package/dist/{update-steps-KNN4Y2ZU.js → update-steps-2D4YQAW2.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { readOwnContainer, renderUpdateSteps, runUpdateSteps } from './chunk-MGF346ND.js';
-import './chunk-BCIBSJZH.js';
+export { readOwnContainer, renderUpdateSteps, runUpdateSteps } from './chunk-SKAML7GB.js';
+import './chunk-Y7MF32DM.js';
 import './chunk-6CK2OC4Q.js';
 import './chunk-ZVB57WI6.js';
 import './chunk-5ARXP3BP.js';
@@ -13,7 +13,7 @@ import './chunk-ESVW4MJY.js';
 import './chunk-GPO7F757.js';
 import './chunk-TBT347UY.js';
 import './chunk-TZMDRHWB.js';
-import './chunk-J3Q3QCOF.js';
+import './chunk-LSFP57LI.js';
 import './chunk-2PGI6RDE.js';
 import './chunk-5FHBVV25.js';
 import './chunk-CMMEJJTL.js';

package/dist/{work-proofs-cmd-PBY7WNYI.js → work-proofs-cmd-5BYAAW3H.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { classifyProofs, classifyProofsAt, otherPullRequestHeads, resolveProofsItem, runWorkProofs, runWorkProofsCommand } from './chunk-NEBMTP7T.js';
+export { classifyProofs, classifyProofsAt, otherPullRequestHeads, resolveProofsItem, runWorkProofs, runWorkProofsCommand } from './chunk-MXAYUZJF.js';
 import './chunk-6CK2OC4Q.js';
 import './chunk-6IMQXBTZ.js';
 import './chunk-IP7BIBXJ.js';

package/dist/{work-proofs-record-AVKJFZOD.js → work-proofs-record-USD4JWFP.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { resolveProofsItem, ownPullRequest, proofsCommentId, otherPullRequestHeads, classifyProofsAt, kindProblem, proofsCommentBody, runWorkProofs } from './chunk-NEBMTP7T.js';
+import { resolveProofsItem, ownPullRequest, proofsCommentId, otherPullRequestHeads, classifyProofsAt, kindProblem, proofsCommentBody, runWorkProofs } from './chunk-MXAYUZJF.js';
 import { runWorkComment } from './chunk-HJCNWEQK.js';
 import './chunk-6CK2OC4Q.js';
 import { runEmitDemo } from './chunk-ANFNZCXZ.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@outerlayer/cli",
-  "version": "0.34.0-next.20261027162612",
+  "version": "0.34.0-next.20261027190442",
   "description": "OuterLayer CLI — commands: init, claude, connect, doctor, login, logout, sync, daemon (alias: watch), emit, demo, findings, work, spec, runner, hooks, mcp, context. Capture and sync coding-agent sessions, and record proof of factory work.",
   "license": "Apache-2.0",
   "author": "Magu Studios, Inc.",

package/skill-pack/maintained/outerlayer-build/references/agent-briefs.md

@@ -206,10 +206,13 @@ its file updated.
 Run the repository's own pre-push checks and tests, as its instructions file
 names them, in the foreground with the maximum timeout. When the repository
 has a changed-lines mutation tool, run it over the final branch diff. Run it
-the way its instructions say CI runs it. The review's run does not count,
-because fixes changed lines after it. A run that ends over its time budget, or
-with no score, is a red gate, as a low score is: run it again with a larger
-budget. Then run any check the repository runs only in CI, when the diff
+the way its instructions say to run it before a push, not with CI's settings.
+CI's time budget is sized for a CI job. On this machine it can stop a run
+before the run scores anything. Run the tool again after the review's run,
+because fixes changed lines after it. When the tool can reuse an earlier run's
+results, let it. Then this run tests again only what the fixes changed. A run
+that ends over its time budget, or with no score, is a red gate, as a low
+score is: run it again with a larger budget. Then run any check the repository runs only in CI, when the diff
 touches its domain, each in the foreground, and quote every result in your
 report. A check this machine cannot
 run is named in the report with the reason. A check that fails is a red gate,

package/skill-pack/maintained/outerlayer-build/references/review-briefs.md

@@ -264,6 +264,9 @@ dependencies, and give its path in your report. Reviewers are reading the
 shared tree while you run, so no mutation may touch it.
 
 1. Run the repository's changed-lines mutation tool once over the whole diff.
+   Run it the way the repository's instructions say to run it before a push,
+   not with CI's settings. When the tool can keep its results for a later
+   run, let it, so the run after the fixes tests only what changed.
    Every survivor it reports is a finding. Never rerun it per file, never
    lower its budget, and never run a whole suite or a coverage run. The
    tool can run longer than your shell's maximum timeout. Then your shell