@outerlayer/cli 0.34.0-next.20261028002917 → 0.34.0-next.20261028010245

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-28T00:31:49.139Z+965fd25","root":"/home/runner/work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-28T01:05:50.347Z+dd29145","root":"/home/runner/work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{check-ZULOZVV4.js → check-C7UKLYZQ.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-ILTVAD5Y.js';
+import { probeCredentials } from './chunk-HFMK2R7O.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-GMEXR6PY.js';
 import './chunk-E7R2GIAW.js';

package/dist/{chunk-ILTVAD5Y.js → chunk-HFMK2R7O.js}

@@ -12,14 +12,14 @@ import { JOB_STATE_FORMAT, readsJobState, jobStateFormatOf } from './chunk-ZVB57
 import { realBlockedProbes, checkBlockedWithSlots, largeBuildMemoryBytes, LARGE_BUILD_DISK_BYTES, checkManagedRoom, sliceMemoryOf, createHousekeepingDocker, housekeepingDockerIfReachable, KIND_LABEL, RECIPE_KEY_LABEL } from './chunk-3E7QAXUW.js';
 import { writeMarker, readMarker, currentVersion, removeMarker, isInLayout, startedThroughCurrent, entryIn, versionDir, switchCurrent, cleanVersions, stagingDir } from './chunk-I4YOWQH7.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, attemptNote, fetchManagedClaudeKey, holdManagedClaudeKey, fetchManagedBuildSettings, holdManagedBuildSettings, needsBuildSkill, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, provisionEnvironment, resolveHostBuild, listenOnBroker, hostEnvironment, deliverExecMaven, runWithSpawn, hostCommandEnvironment, lifecycleSteps, execArgv, lifecycleFailureReason, decideHostBuildSkill, prepareBranch, currentSkillCommand, formerSkillProblem, containerCommandExec, execCommandLine, startHostServices, setUpRunnerCgroup, sweepImageBuilders, stoppedHelperReason, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, ensureNetworkReady, managedBuildSettingsFor, ADOPTED_FETCH_RETRY_WINDOW_MS, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-VB4QD4WN.js';
+import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, attemptNote, fetchManagedClaudeKey, holdManagedClaudeKey, fetchManagedBuildSettings, holdManagedBuildSettings, needsBuildSkill, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, provisionEnvironment, resolveHostBuild, listenOnBroker, hostEnvironment, deliverExecMaven, runWithSpawn, hostCommandEnvironment, lifecycleSteps, execArgv, lifecycleFailureReason, decideHostBuildSkill, prepareBranch, currentSkillCommand, formerSkillProblem, containerCommandExec, execCommandLine, startHostServices, HELPER_ENV, setUpRunnerCgroup, sweepImageBuilders, stoppedHelperReason, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, ensureNetworkReady, managedBuildSettingsFor, ADOPTED_FETCH_RETRY_WINDOW_MS, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-VB4QD4WN.js';
 import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, resolveGoverningSource, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-PPQTTJSW.js';
 import { imageTag, writeUpdateStatus, pullInstruction, tagToPull } from './chunk-LBKCYEJT.js';
 import { isVersion, compareVersions, satisfiesRange } from './chunk-TQMI335S.js';
 import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, keepsHostBuilder, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-GXMMILQ4.js';
 import { freeBytes, formatBytes, allocatedBytes } from './chunk-EGJY6MBC.js';
 import { writeJobFile, ensureRunnerIdentity, identityDockerFor, readJobFile, exceedsDisk, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, readJobFileChecked } from './chunk-AHWMY3MS.js';
-import { claimPidFile, writePidFile, readPidFile, releasePidFile } from './chunk-3X6OSXSB.js';
+import { claimPidFile, releasePidFile, writePidFile, readPidFile } from './chunk-3X6OSXSB.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
 import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-GJYGOFF3.js';
 import { loadHostKey, ensureHostKey, signerFor } from './chunk-VKYU4HHW.js';
@@ -27,9 +27,9 @@ import { resolveVersion } from './chunk-RA3O54FC.js';
 import { RUNNER_DIR_MODE, runnerDir, buildDir, attemptStamp, jobDir, RUNNER_FILE_MODE, jobsDir, pidFilePath, spoolDir, imagesDir, rootfsDir, builderCacheDiskPath } from './chunk-AJTGTSNA.js';
 import { parseClaimIdentity, parseClaimedRepositories, parseUnreachable, repositoriesOf, primaryOf, sharedUserEnvironment, JOB_MOUNT, takeClaudeCredential, heldClaudeCredential, currentClaudeCredential, fdName } from './chunk-L2OARQKP.js';
 import { COMMAND_LOST_REASON, CONTAINER_STOPPED_REASON } from './chunk-MESOOLF4.js';
-import { randomBytes } from 'crypto';
-import { mkdirSync, existsSync, chmodSync, writeFileSync, renameSync, statSync, readdirSync, readFileSync, closeSync, rmSync, lstatSync } from 'fs';
-import { totalmem, constants } from 'os';
+import { randomBytes, createHash } from 'crypto';
+import { mkdirSync, existsSync, chmodSync, writeFileSync, renameSync, statSync, readdirSync, readFileSync, rmSync, closeSync, lstatSync } from 'fs';
+import { totalmem, userInfo, constants } from 'os';
 import { join, dirname } from 'path';
 
 createRequire(import.meta.url);
@@ -996,6 +996,45 @@ function notEndedByRunnerReason(exit, isolated) {
 function jobNotEndedByRunnerReason(exit, job) {
   return notEndedByRunnerReason(exit, job.container !== void 0 || job.microvm !== void 0);
 }
+var HelperInUseError = class extends Error {
+  constructor(socketPath, holder) {
+    super(
+      `another runner already uses the root helper at ${socketPath} (pid ${holder.pid}, config ${holder.config}). A runner stops every microVM build its helper lists that it did not start, so two runners on one helper end each other's builds. Give this runner a service and a helper of its own: outerlayer runner install --service --unit-name <name>.`
+    );
+    this.socketPath = socketPath;
+    this.holder = holder;
+  }
+};
+function helperClaimPath(socketPath, home = userInfo().homedir) {
+  const key = createHash("sha256").update(socketPath).digest("hex").slice(0, 16);
+  return join(home, ".outerlayer", "helper-runners", `${key}.json`);
+}
+function readClaim(path) {
+  if (!existsSync(path)) return void 0;
+  try {
+    const parsed = JSON.parse(readFileSync(path, "utf8"));
+    if (typeof parsed.pid !== "number" || typeof parsed.start !== "string") return void 0;
+    return { pid: parsed.pid, start: parsed.start, config: typeof parsed.config === "string" ? parsed.config : "unknown" };
+  } catch {
+    return void 0;
+  }
+}
+function claimHelper(socketPath, self, options = {}) {
+  const path = helperClaimPath(socketPath, options.home);
+  const alive = options.isSameProcessFn ?? isSameProcess;
+  const holder = readClaim(path);
+  if (holder !== void 0 && !(holder.pid === self.pid && holder.start === self.start) && alive(holder.pid, holder.start)) {
+    throw new HelperInUseError(socketPath, holder);
+  }
+  mkdirSync(join(path, ".."), { recursive: true, mode: RUNNER_DIR_MODE });
+  writeFileSync(path, JSON.stringify(self), { mode: RUNNER_FILE_MODE });
+}
+function releaseHelper(socketPath, self, options = {}) {
+  const path = helperClaimPath(socketPath, options.home);
+  const holder = readClaim(path);
+  if (holder === void 0 || holder.pid !== self.pid || holder.start !== self.start) return;
+  rmSync(path, { force: true });
+}
 
 // src/runner/loop.ts
 var QUEUE_ORDER = ["amend", "implement"];
@@ -3150,7 +3189,7 @@ async function startRunner(configPath, deps, startup) {
       check: update.check ? () => update.check(configPath) : async () => {
         const held = heldClaudeCredential();
         const env = held === void 0 ? process.env : { ...process.env, [held.variable]: held.value };
-        return (await import('./check-ZULOZVV4.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
+        return (await import('./check-C7UKLYZQ.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
       },
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log
@@ -3191,6 +3230,15 @@ async function startRunner(configPath, deps, startup) {
   mkdirSync(jobsDir(configPath), { recursive: true, mode: RUNNER_DIR_MODE });
   const self = { pid: process.pid, start: startTimeOf(process.pid) ?? "" };
   claimPidFile(pidFilePath(configPath), self);
+  const helperSocket = process.env[HELPER_ENV];
+  if (helperSocket !== void 0 && helperSocket !== "") {
+    try {
+      claimHelper(helperSocket, { ...self, config: configPath }, deps.helperClaim);
+    } catch (err) {
+      releasePidFile(pidFilePath(configPath), self);
+      throw err instanceof HelperInUseError ? new RunnerStartError(err.message) : err;
+    }
+  }
   check = "cgroup";
   const { delegated, refusal } = setUpRunnerCgroup();
   if (refusal !== void 0) log.error(`the kernel refused a cgroup step for the runner's service: ${refusal}`);
@@ -3353,6 +3401,7 @@ async function startRunner(configPath, deps, startup) {
     close();
     for (const relay of state.containerRuntime?.relays.values() ?? []) void relay.close();
     releasePidFile(pidFilePath(configPath), self);
+    if (helperSocket !== void 0 && helperSocket !== "") releaseHelper(helperSocket, self, deps.helperClaim);
     log.line("runner exited");
   };
   const drain = async (onWaiting) => {

package/dist/{cli-6WPETUBZ.js → cli-IG52447Q.js}

@@ -5146,7 +5146,7 @@ function registerRunnerCommands(program2) {
   const configOption = "the cloud config file to run against (default: ~/.outerlayer/config.json)";
   runnerCmd.command("start").description("Run the loop: claim work, run it, report, clean up, repeat").option("--config <path>", configOption).action(async (opts) => {
     const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-YPUOOZB6.js');
-    const { start, RunnerStartError } = await import('./loop-WM62DR42.js');
+    const { start, RunnerStartError } = await import('./loop-ELTO36MN.js');
     const { RunnerAlreadyRunningError } = await import('./pidfile-VLZPRIBZ.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     try {
@@ -5166,7 +5166,7 @@ function registerRunnerCommands(program2) {
   ).action(async () => {
     const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-YPUOOZB6.js');
     const { containerStart } = await import('./container-start-OOBTGHWF.js');
-    const { start, RunnerStartError } = await import('./loop-WM62DR42.js');
+    const { start, RunnerStartError } = await import('./loop-ELTO36MN.js');
     const { RunnerAlreadyRunningError } = await import('./pidfile-VLZPRIBZ.js');
     try {
       const result = await containerStart({
@@ -5197,7 +5197,7 @@ function registerRunnerCommands(program2) {
   });
   runnerCmd.command("check").description("Validate the config, the hooks and the key, and print the effective settings").option("--config <path>", configOption).action(async (opts) => {
     const { defaultRunnerConfigPath } = await import('./config-YPUOOZB6.js');
-    const { runRunnerCheck } = await import('./check-ZULOZVV4.js');
+    const { runRunnerCheck } = await import('./check-C7UKLYZQ.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const result = await runRunnerCheck(configPath);
     if (!result.ok) {
@@ -5606,7 +5606,7 @@ Next:
   });
   runnerCmd.command("stop").description("Take no more work; finish running jobs, then exit").option("--config <path>", "the cloud config file naming the runner to stop").option("--now", "end running jobs immediately, with outcome stopped").action(async (opts) => {
     const { defaultRunnerConfigPath } = await import('./config-YPUOOZB6.js');
-    const { requestStop } = await import('./loop-WM62DR42.js');
+    const { requestStop } = await import('./loop-ELTO36MN.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const { runnerImageVersion } = await import('./image-tag-LF3NEGSL.js');
     await requestStop(configPath, Boolean(opts.now), void 0, { image: runnerImageVersion() !== void 0 });
@@ -5614,7 +5614,7 @@ Next:
   runnerCmd.command("status").description("List running jobs; with --recent, finished ones too").option("--config <path>", "the cloud config file naming the runner to inspect").option("--recent", "also list finished jobs, newest first, capped at 20").option("--json", "machine-readable JSON output").action(async (opts) => {
     const { defaultRunnerConfigPath, loadRunnerConfig } = await import('./config-YPUOOZB6.js');
     const { jobsDir, runnerDir } = await import('./paths-4ZGWWNTG.js');
-    const { listJobFiles, runnerProcessState } = await import('./loop-WM62DR42.js');
+    const { listJobFiles, runnerProcessState } = await import('./loop-ELTO36MN.js');
     const { renderStatus } = await import('./status-L2OYAZHY.js');
     const { readHousekeepingRecord } = await import('./record-4ZJPJTWO.js');
     const path2 = await import('path');
@@ -5674,7 +5674,7 @@ Next:
   });
   runnerCmd.command("logs").argument("<item>", "the work item's number in the factory").description("Print the newest attempt's log for one item").option("--config <path>", "the cloud config file naming the runner to inspect").option("-f, --follow", "keep printing as the log grows").action(async (itemArg, opts) => {
     const { defaultRunnerConfigPath } = await import('./config-YPUOOZB6.js');
-    const { listJobFiles } = await import('./loop-WM62DR42.js');
+    const { listJobFiles } = await import('./loop-ELTO36MN.js');
     const { newestAttempt, logPathFor, tail, RunnerLogsError } = await import('./logs-QHXZTSKZ.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const item = parseTrackerNumber(itemArg);

package/dist/index.js

@@ -26,5 +26,5 @@ if (argv[0] === "claude") {
   process.exit(await runClaudeLauncher(argv.slice(1)));
 }
 (await import('./hook-fast-WM6YZVBJ.js')).recordLinkExitFailure(argv);
-var { runCli } = await import('./cli-6WPETUBZ.js');
+var { runCli } = await import('./cli-IG52447Q.js');
 await runCli(process.argv);

package/dist/{loop-WM62DR42.js → loop-ELTO36MN.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { RunnerStartError, leaseTimeLeftFor, listJobFiles, logUnusableHelper, probeBuild, probeCredentials, requestStop, runnerProcessState, runtimeOf, sampleUsage, start, tick, watchTick } from './chunk-ILTVAD5Y.js';
+export { RunnerStartError, leaseTimeLeftFor, listJobFiles, logUnusableHelper, probeBuild, probeCredentials, requestStop, runnerProcessState, runtimeOf, sampleUsage, start, tick, watchTick } from './chunk-HFMK2R7O.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-GMEXR6PY.js';
 import './chunk-E7R2GIAW.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@outerlayer/cli",
-  "version": "0.34.0-next.20261028002917",
+  "version": "0.34.0-next.20261028010245",
   "description": "OuterLayer CLI — commands: init, claude, connect, doctor, login, logout, sync, daemon (alias: watch), emit, demo, findings, work, spec, runner, hooks, mcp, context. Capture and sync coding-agent sessions, and record proof of factory work.",
   "license": "Apache-2.0",
   "author": "Magu Studios, Inc.",