@outerlayer/cli 0.4.1 → 0.5.0

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @outerlayer/cli
 
+## 0.5.0
+
+### Minor Changes
+
+- 0101c5c: MicroVM builds are available. The CLI pins the guest kernel and guest helper published as the `guest-1` release of the public `outerlayerai/guest-assets` repository, so a Linux x86_64 host whose runner user can open `/dev/kvm` now runs each build in a Firecracker microVM. On such a host, `outerlayer runner init` names `builtin:vm`, and `outerlayer doctor` passes a `builtin:vm` hook. To move an existing host, set both hooks to `builtin:vm` and restart the runner while no build is running.
+
+### Patch Changes
+
+- cfe700a: A recorded criterion without its declared proof now flags its pull request's verdict, and an item with no recorded criteria flags it unless the policy sets `criteria.missing` to `info` or `off`. The `acceptance-criteria` check is retired from the recommended registry. Its report, bound with `--for acceptance-criteria`, is linked at the top of the item's Criteria tab instead.
+
 ## 0.4.1
 
 ### Patch Changes

package/dist/{build-TZUUTRGH.js → build-PAEKVYVK.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { buildRepositoryImage } from './chunk-ZNA27WEV.js';
+export { buildRepositoryImage } from './chunk-Z62HNKEJ.js';
 import './chunk-N5FOE5PS.js';
 export { RecipeError } from './chunk-QOZKPLVJ.js';
 import './chunk-ZM2IMMYN.js';

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-03T04:29:29.613Z+d16bdd8","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-03T18:15:54.958Z+defeb9b","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{check-7MFH6HNC.js → check-AXCXDYO2.js}

@@ -1,28 +1,28 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-QY22NZUW.js';
-import './chunk-DM3VFDS3.js';
+import { probeCredentials } from './chunk-L24G4PLP.js';
+import './chunk-RWOTHXYE.js';
 import './chunk-QDQEUVUF.js';
 import './chunk-ABIWDUMS.js';
 import './chunk-YYYXRJUW.js';
 import './chunk-CBPPJSAR.js';
-import { placeholderQueues, placeholderProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem } from './chunk-RFUPN6KX.js';
-import './chunk-LYCDNMOH.js';
+import { placeholderQueues, placeholderProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem } from './chunk-OHFDWLJP.js';
+import './chunk-ZOC7JSYC.js';
 import './chunk-TBT347UY.js';
-import './chunk-YFHIIH4B.js';
-import './chunk-3TFPDVTI.js';
-import './chunk-HZRNMGLF.js';
-import './chunk-ZNA27WEV.js';
+import './chunk-FC7TMRNA.js';
+import './chunk-RJ467PDQ.js';
+import './chunk-4NMBDRBS.js';
+import './chunk-Z62HNKEJ.js';
 import './chunk-N5FOE5PS.js';
 import './chunk-OGFGZQA3.js';
 import './chunk-774HEQL6.js';
 import './chunk-QOZKPLVJ.js';
 import './chunk-W4SQCOZU.js';
 import './chunk-B2G7JHHB.js';
-import './chunk-W5FVUZXV.js';
+import './chunk-RMAZ2NWA.js';
 import './chunk-BFESLKPP.js';
-import './chunk-WFJ65NUD.js';
-import './chunk-4C4THABW.js';
+import './chunk-WOBNRVQT.js';
+import './chunk-EX6M5JPR.js';
 import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-5Y3QQRUH.js';
 import './chunk-F6GFZXZ3.js';
 import './chunk-AUFG23AA.js';

package/dist/{chunk-HZRNMGLF.js → chunk-4NMBDRBS.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { readDefaultBranchHead, cloneRepository, buildRepositoryImage, CLAUDE_CODE_VERSION, firecrackerArch, MICROVM_ARCHES, DEFAULT_BASE_IMAGE, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, FIRECRACKER_VERSION, GUEST_ASSETS_VERSION } from './chunk-ZNA27WEV.js';
+import { readDefaultBranchHead, cloneRepository, buildRepositoryImage, CLAUDE_CODE_VERSION, firecrackerArch, MICROVM_ARCHES, DEFAULT_BASE_IMAGE, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, FIRECRACKER_VERSION, GUEST_ASSETS_VERSION } from './chunk-Z62HNKEJ.js';
 import { startTimeOf, isSameProcess } from './chunk-N5FOE5PS.js';
 import { currentCliBuild } from './chunk-OGFGZQA3.js';
 import { createDockerHost, childEnvironment, spawnRun } from './chunk-774HEQL6.js';
 import { RecipeError } from './chunk-QOZKPLVJ.js';
 import { execCapture } from './chunk-W4SQCOZU.js';
 import { GUEST_CID } from './chunk-B2G7JHHB.js';
-import { WorkCommandError, postJson } from './chunk-W5FVUZXV.js';
+import { WorkCommandError, postJson } from './chunk-RMAZ2NWA.js';
 import { parseDuKilobytes, hostAllowed } from './chunk-F6GFZXZ3.js';
 import { RELAY_PORT, CHECKOUT_DIR, JOB_MOUNT, claudeCredential, buildEnvironment, startBuildServices, AGENT_CREDENTIAL_MISSING, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_PORT, CLAUDE_SOCKET, DESTINATION_BASE_PORT } from './chunk-AUFG23AA.js';
 import { defaultGitRunner, materializeContext } from './chunk-XDDW4FRS.js';

package/dist/{chunk-SY4GK4SP.js → chunk-D2KWEAN6.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { sanitizeTerminal } from './chunk-WFJ65NUD.js';
+import { sanitizeTerminal } from './chunk-WOBNRVQT.js';
 import { DEFAULT_DASHBOARD } from './chunk-USO2DKBD.js';
 import { readCloudConfig } from './chunk-EABW6AJQ.js';
 

package/dist/{chunk-LT5TZHYH.js → chunk-EGABNHZG.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { applyContextProvenance, installScrubContext, prepareSessionForUpload, wholeSessionCounts, sliceTurnIo } from './chunk-LYCDNMOH.js';
+import { applyContextProvenance, installScrubContext, prepareSessionForUpload, wholeSessionCounts, sliceTurnIo } from './chunk-ZOC7JSYC.js';
 import { LaunchFilter } from './chunk-BCJNHMZT.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
 import { hookExecSpoolPath } from './chunk-F7CU5ABH.js';
 import { applyReportedCost } from './chunk-BKO6JEZI.js';
-import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-WFJ65NUD.js';
-import { tailTranscript, enrichSessionRepo, CAPTURE_TIERS, scanAll, setRepoRoot, resolveRepoIdentity, inferArtifactKind, bannedPathsForTier, sessionIdFromPath, SOURCE_ADAPTERS, EVENT_TYPES } from './chunk-4C4THABW.js';
+import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-WOBNRVQT.js';
+import { tailTranscript, enrichSessionRepo, CAPTURE_TIERS, scanAll, setRepoRoot, resolveRepoIdentity, inferArtifactKind, bannedPathsForTier, sessionIdFromPath, SOURCE_ADAPTERS, EVENT_TYPES } from './chunk-EX6M5JPR.js';
 import { C } from './chunk-YRYMNBGQ.js';
 import { readLaunchSpoolState, launchStatusIsDecisive, launchedItemsBySession, launchesPath } from './chunk-DVDEBNQJ.js';
 import { readLatestProvenanceForSession, readContextProvenance } from './chunk-ZJSNLVCE.js';

package/dist/{chunk-4C4THABW.js → chunk-EX6M5JPR.js}

@@ -44368,14 +44368,14 @@ var ModelRegistryImpl = class {
 };
 var models_default = {
   version: "1.0.0",
-  generatedAt: "2026-10-02T04:49:56.063Z",
+  generatedAt: "2026-10-03T04:32:34.999Z",
   sources: {
     litellm: {
-      fetchedAt: "2026-10-02T04:49:56.063Z",
+      fetchedAt: "2026-10-03T04:32:34.999Z",
       modelCount: 1882
     },
     openrouter: {
-      fetchedAt: "2026-10-02T04:49:56.063Z",
+      fetchedAt: "2026-10-03T04:32:34.999Z",
       modelCount: 198
     }
   },
@@ -47107,6 +47107,7 @@ var models_default = {
         pdfInput: true,
         webSearch: true
       },
+      deprecationDate: "2027-04-01",
       supportedParameters: [
         "max_tokens"
       ]
@@ -47384,6 +47385,7 @@ var models_default = {
         pdfInput: true,
         webSearch: true
       },
+      deprecationDate: "2027-04-01",
       supportedParameters: [
         "max_tokens"
       ]
@@ -47782,6 +47784,7 @@ var models_default = {
         pdfInput: true,
         webSearch: true
       },
+      deprecationDate: "2027-04-01",
       supportedParameters: [
         "max_tokens"
       ]
@@ -48513,13 +48516,15 @@ var models_default = {
       provider: "openai",
       displayName: "TTS-1",
       mode: "audio_speech",
-      source: "litellm"
+      source: "litellm",
+      deprecationDate: "2027-01-06"
     },
     "tts-1-hd": {
       provider: "openai",
       displayName: "TTS-1 HD",
       mode: "audio_speech",
-      source: "litellm"
+      source: "litellm",
+      deprecationDate: "2027-01-06"
     },
     "us/gpt-4.1-2025-04-14": {
       provider: "azure",
@@ -64657,7 +64662,8 @@ var models_default = {
       pricing: {
         inputCostPerToken: 6e-7,
         outputCostPerToken: 1e-5
-      }
+      },
+      deprecationDate: "2027-01-06"
     },
     "gpt-4o-mini-tts-2025-12-15": {
       provider: "openai",
@@ -64667,7 +64673,8 @@ var models_default = {
       pricing: {
         inputCostPerToken: 6e-7,
         outputCostPerToken: 1e-5
-      }
+      },
+      deprecationDate: "2027-01-06"
     },
     "gpt-4o-mini-transcribe-2025-03-20": {
       provider: "openai",
@@ -65029,9 +65036,7 @@ var models_default = {
       mode: "chat",
       source: "openrouter",
       supportedParameters: [
-        "frequency_penalty",
-        "max_tokens",
-        "presence_penalty"
+        "max_tokens"
       ],
       pricing: {
         inputCostPerToken: 8e-6,
@@ -65400,9 +65405,7 @@ var models_default = {
       mode: "chat",
       source: "openrouter",
       supportedParameters: [
-        "frequency_penalty",
         "max_tokens",
-        "presence_penalty",
         "temperature",
         "top_p"
       ],
@@ -65450,9 +65453,7 @@ var models_default = {
       mode: "chat",
       source: "openrouter",
       supportedParameters: [
-        "frequency_penalty",
         "max_tokens",
-        "presence_penalty",
         "temperature",
         "top_p"
       ],
@@ -65533,12 +65534,12 @@ var models_default = {
         "top_p"
       ],
       pricing: {
-        inputCostPerToken: 3e-7,
+        inputCostPerToken: 27e-8,
         outputCostPerToken: 1e-6
       },
       context: {
         maxInputTokens: 163840,
-        maxOutputTokens: 65536
+        maxOutputTokens: 147456
       },
       capabilities: {
         functionCalling: true,
@@ -69067,9 +69068,9 @@ var models_default = {
       mode: "chat",
       source: "litellm",
       pricing: {
-        inputCostPerToken: 21875e-10,
-        outputCostPerToken: 175e-7,
-        cacheReadCostPerToken: 546875e-12
+        inputCostPerToken: 125e-8,
+        outputCostPerToken: 1e-5,
+        cacheReadCostPerToken: 3125e-10
       },
       context: {
         maxInputTokens: 1e6,
@@ -69113,9 +69114,9 @@ var models_default = {
       mode: "chat",
       source: "litellm",
       pricing: {
-        inputCostPerToken: 21875e-10,
-        outputCostPerToken: 175e-7,
-        cacheReadCostPerToken: 546875e-12
+        inputCostPerToken: 1375e-9,
+        outputCostPerToken: 11e-6,
+        cacheReadCostPerToken: 34375e-11
       },
       context: {
         maxInputTokens: 1e6,
@@ -69159,9 +69160,9 @@ var models_default = {
       mode: "chat",
       source: "litellm",
       pricing: {
-        inputCostPerToken: 21875e-10,
-        outputCostPerToken: 175e-7,
-        cacheReadCostPerToken: 546875e-12
+        inputCostPerToken: 1375e-9,
+        outputCostPerToken: 11e-6,
+        cacheReadCostPerToken: 34375e-11
       },
       context: {
         maxInputTokens: 1e6,
@@ -69205,9 +69206,9 @@ var models_default = {
       mode: "chat",
       source: "litellm",
       pricing: {
-        inputCostPerToken: 21875e-10,
-        outputCostPerToken: 175e-7,
-        cacheReadCostPerToken: 546875e-12
+        inputCostPerToken: 1375e-9,
+        outputCostPerToken: 11e-6,
+        cacheReadCostPerToken: 34375e-11
       },
       context: {
         maxInputTokens: 1e6,
@@ -84366,7 +84367,8 @@ var models_default = {
       provider: "xai",
       displayName: "Grok Voice Transcribe 1.0",
       mode: "audio_transcription",
-      source: "litellm"
+      source: "litellm",
+      deprecationDate: "2026-10-02"
     },
     "grok-voice-transcribe-2.0": {
       provider: "xai",

package/dist/{chunk-YFHIIH4B.js → chunk-FC7TMRNA.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-3TFPDVTI.js';
-import { MIN_ENGINE_MAJOR } from './chunk-HZRNMGLF.js';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-RJ467PDQ.js';
+import { MIN_ENGINE_MAJOR } from './chunk-4NMBDRBS.js';
 import { RUNNER_DIR_MODE, runnerDir, RUNNER_FILE_MODE } from './chunk-ZM2IMMYN.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
 import { dirname } from 'path';

package/dist/{chunk-7WERLFVR.js → chunk-JLDZTG3A.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import { resolveRepoIdentity } from './chunk-4C4THABW.js';
+import { resolveRepoIdentity } from './chunk-EX6M5JPR.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { defaultFetch } from './chunk-BCLJSQCV.js';
 import { unauthorizedMessage, resolveGatewayCredentials } from './chunk-BOLTI6LR.js';

package/dist/{chunk-QY22NZUW.js → chunk-L24G4PLP.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LEASE_SECONDS, releaseLease, isUnfinished, writeJobFile, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, microVmCommandLine, runCommand, execCommandLine, startHostServices, finishJob, isGroupAlive, outcomeFromExitCode, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, readJobFile, hookLimitsFor } from './chunk-DM3VFDS3.js';
+import { LEASE_SECONDS, releaseLease, isUnfinished, writeJobFile, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, microVmCommandLine, runCommand, execCommandLine, startHostServices, finishJob, isGroupAlive, outcomeFromExitCode, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, readJobFile, hookLimitsFor } from './chunk-RWOTHXYE.js';
 import { RUNNER_PROTOCOL } from './chunk-QDQEUVUF.js';
 import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-ABIWDUMS.js';
 import { readMarker, currentVersion, removeMarker, writeMarker, entryIn, versionDir, switchCurrent, cleanVersions, isInLayout, startedThroughCurrent, stagingDir } from './chunk-YYYXRJUW.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, provisionContainer, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandLine, BuildTokens, classifyRefusal, refusalCode, formatClock, measureDisk, createRunnerLog, ensureTunnel, keepGhConfigCurrent, createContainerRuntime } from './chunk-HZRNMGLF.js';
+import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, provisionContainer, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandLine, BuildTokens, classifyRefusal, refusalCode, formatClock, measureDisk, createRunnerLog, ensureTunnel, keepGhConfigCurrent, createContainerRuntime } from './chunk-4NMBDRBS.js';
 import { startTimeOf, claimPidFile, readPidFile, isSameProcess, releasePidFile } from './chunk-N5FOE5PS.js';
-import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-W5FVUZXV.js';
+import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-RMAZ2NWA.js';
 import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks } from './chunk-5Y3QQRUH.js';
 import { exceedsDisk } from './chunk-F6GFZXZ3.js';
 import { parseClaimIdentity, sharedUserEnvironment, JOB_MOUNT } from './chunk-AUFG23AA.js';
@@ -825,7 +825,7 @@ var CLAIM_REFUSAL_CODES = new Set(
   "pull_request_from_fork pull_request_on_default_branch pull_request_ambiguous branch_claimed_elsewhere".split(" ")
 );
 async function tryClaimAndStart(state, item, queue) {
-  const { postJson: postJson2 } = await import('./work-cmd-QAUZ7MTD.js');
+  const { postJson: postJson2 } = await import('./work-cmd-NUR4CAG6.js');
   const log = logOf(state);
   const hostKey = await loadHostKey(state.config.configPath);
   const claim = await retrySend(
@@ -1525,7 +1525,7 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
     const outcome = await onStartUnderMarker({
       configPath,
       own: ownVersionOf(deps),
-      check: update.check ? () => update.check(configPath) : async () => (await import('./check-7MFH6HNC.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
+      check: update.check ? () => update.check(configPath) : async () => (await import('./check-AXCXDYO2.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log
     });

package/dist/{chunk-RFUPN6KX.js → chunk-OHFDWLJP.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isPlaceholderCommand } from './chunk-YFHIIH4B.js';
-import { describeCallFailure } from './chunk-HZRNMGLF.js';
-import { WorkCommandError, getJson } from './chunk-W5FVUZXV.js';
-import { sanitizeTerminal } from './chunk-WFJ65NUD.js';
+import { isPlaceholderCommand } from './chunk-FC7TMRNA.js';
+import { describeCallFailure } from './chunk-4NMBDRBS.js';
+import { WorkCommandError, getJson } from './chunk-RMAZ2NWA.js';
+import { sanitizeTerminal } from './chunk-WOBNRVQT.js';
 import { builtinKind } from './chunk-5Y3QQRUH.js';
 import { claudeCredential, CLAUDE_CREDENTIAL_VARIABLES } from './chunk-AUFG23AA.js';
 import { signerFor } from './chunk-M5POMKKW.js';

package/dist/{chunk-Y7KJLXYN.js → chunk-OR6AEEDO.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { dashboardBase, isRepositoryLinked, workPageUrl, notLinkedText } from './chunk-SY4GK4SP.js';
-import { sanitizeTerminal } from './chunk-WFJ65NUD.js';
-import { remoteLookupFailed } from './chunk-4C4THABW.js';
+import { dashboardBase, isRepositoryLinked, workPageUrl, notLinkedText } from './chunk-D2KWEAN6.js';
+import { sanitizeTerminal } from './chunk-WOBNRVQT.js';
+import { remoteLookupFailed } from './chunk-EX6M5JPR.js';
 import { resolveGatewayCredentials } from './chunk-BOLTI6LR.js';
 import { findGitDirs, readRepoConnection, writeRepoConnection } from './chunk-BJ3KTMDH.js';
 import { createInterface } from 'readline/promises';

package/dist/{chunk-3TFPDVTI.js → chunk-RJ467PDQ.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { MIN_ENGINE_MAJOR } from './chunk-HZRNMGLF.js';
-import { firecrackerArch, MICROVM_ARCHES, guestAssetsPinned } from './chunk-ZNA27WEV.js';
+import { MIN_ENGINE_MAJOR } from './chunk-4NMBDRBS.js';
+import { firecrackerArch, MICROVM_ARCHES, guestAssetsPinned } from './chunk-Z62HNKEJ.js';
 import { spawnSync } from 'child_process';
 import { existsSync, accessSync, constants, statSync, readFileSync } from 'fs';
 

package/dist/{chunk-W5FVUZXV.js → chunk-RMAZ2NWA.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import { sanitizeTerminal } from './chunk-WFJ65NUD.js';
-import { resolveRepoIdentity } from './chunk-4C4THABW.js';
+import { sanitizeTerminal } from './chunk-WOBNRVQT.js';
+import { resolveRepoIdentity } from './chunk-EX6M5JPR.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { defaultFetch } from './chunk-BCLJSQCV.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-BOLTI6LR.js';

package/dist/{chunk-DM3VFDS3.js → chunk-RWOTHXYE.js}

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { DOCKERD_LOG } from './chunk-CBPPJSAR.js';
-import { installScrubContext } from './chunk-LYCDNMOH.js';
-import { AssetError, describeCallFailure, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createBuildDisk, machineConfig, refusalCode, resolveAgentUser, AgentUserError, runBuildSteps, removeStagedContext, stageGovernedContext, shellQuote, ADDED_USER, createRunnerLog, createContainerRuntime, stopContainer, syncInContainer, formatDuration, cleanupContainer, retrySend, formatClock, GH_CONFIG_YML, ghHostsYml, isLiteralAddress, deleteBuildDisk } from './chunk-HZRNMGLF.js';
-import { CLAUDE_CODE_VERSION } from './chunk-ZNA27WEV.js';
+import { installScrubContext } from './chunk-ZOC7JSYC.js';
+import { AssetError, describeCallFailure, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createBuildDisk, machineConfig, refusalCode, resolveAgentUser, AgentUserError, runBuildSteps, removeStagedContext, stageGovernedContext, shellQuote, ADDED_USER, createRunnerLog, createContainerRuntime, stopContainer, syncInContainer, formatDuration, cleanupContainer, retrySend, formatClock, GH_CONFIG_YML, ghHostsYml, isLiteralAddress, deleteBuildDisk } from './chunk-4NMBDRBS.js';
+import { CLAUDE_CODE_VERSION } from './chunk-Z62HNKEJ.js';
 import { isSameProcess, startTimeOf } from './chunk-N5FOE5PS.js';
 import { childEnvironment } from './chunk-774HEQL6.js';
 import { waitForAgent, vmExecArgs } from './chunk-W4SQCOZU.js';
 import { socketPathProblem, vsockLinks, linkVsockSockets } from './chunk-B2G7JHHB.js';
-import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-W5FVUZXV.js';
-import { planArtifactUpload } from './chunk-WFJ65NUD.js';
-import { scrubText } from './chunk-4C4THABW.js';
+import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-RMAZ2NWA.js';
+import { planArtifactUpload } from './chunk-WOBNRVQT.js';
+import { scrubText } from './chunk-EX6M5JPR.js';
 import { isBuiltinContainer, isBuiltinProcess, isBuiltinVm } from './chunk-5Y3QQRUH.js';
 import { parseSize } from './chunk-F6GFZXZ3.js';
 import { claudeCredential, buildEnvironment, JOB_MOUNT, CHECKOUT_DIR, parseIsolation, proxyEnvironment, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, withHooksPath, startBuildServices, BUILT_IN_NAMES, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, RELAY_PORT } from './chunk-AUFG23AA.js';

package/dist/{chunk-WFJ65NUD.js → chunk-WOBNRVQT.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { ArtifactTombstoneRecordSchema, ArtifactSpoolRecordSchema } from './chunk-4C4THABW.js';
+import { ArtifactTombstoneRecordSchema, ArtifactSpoolRecordSchema } from './chunk-EX6M5JPR.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { mkdirSync, appendFileSync, writeFileSync, renameSync, existsSync, unlinkSync, readdirSync, readFileSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-ZNA27WEV.js → chunk-Z62HNKEJ.js}

@@ -123,12 +123,12 @@ var FIRECRACKER_BINARY_SHA256 = {
   x86_64: "7d3924e0c8761edafbf85cb2a94c268ffad249644a40fd02d4e15cde4c206f6e"
 };
 var GUEST_ASSETS_VERSION = "1";
-var GUEST_ASSETS_BASE_URL = `https://github.com/outerlayerai/outerlayer/releases/download/guest-${GUEST_ASSETS_VERSION}`;
+var GUEST_ASSETS_BASE_URL = `https://github.com/outerlayerai/guest-assets/releases/download/guest-${GUEST_ASSETS_VERSION}`;
 var GUEST_KERNEL_SHA256 = {
-  x86_64: "0000000000000000000000000000000000000000000000000000000000000000"
+  x86_64: "5a2d716d301615c69fefc2f9574954e838269f14d5e8b0d1bad88b680cd372ee"
 };
 var GUEST_HELPER_SHA256 = {
-  x86_64: "0000000000000000000000000000000000000000000000000000000000000000"
+  x86_64: "4175e89ae8cb633113b5f69ef8b6e206093954411fe53edf86357bc1b7e822f9"
 };
 function guestAssetsPinned(arch) {
   const zero = "0".repeat(64);

package/dist/{chunk-TWNWNS2Q.js → chunk-ZLB7GCTY.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isLinkedRepository } from './chunk-SY4GK4SP.js';
+import { isLinkedRepository } from './chunk-D2KWEAN6.js';
 import { readStatuslineState, STATE_FRESH_MS } from './chunk-F47JBIAW.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-W5FVUZXV.js';
-import { sanitizeTerminal } from './chunk-WFJ65NUD.js';
-import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-4C4THABW.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-RMAZ2NWA.js';
+import { sanitizeTerminal } from './chunk-WOBNRVQT.js';
+import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-EX6M5JPR.js';
 import { C } from './chunk-YRYMNBGQ.js';
 import { readSettings, settingsPath, isOurStatuslineSlot, statuslineWrappedOriginal, REGISTERED_EVENTS, isOurHookCommand, ourCommandBins, cliBinResolvable, ourDirectScriptBins, wrappedOriginalCommand } from './chunk-5QRP3MVS.js';
 import { readPin, readContextManifest, readDegraded, readSourceCache } from './chunk-WIOZAJ2W.js';
@@ -1016,7 +1016,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-ZLGZYMDK.js');
+    const { runnerHostChecks } = await import('./doctor-J3GIMR7K.js');
     const hooks = (() => {
       try {
         return loadRunnerConfig(configPath).hooks;

package/dist/{chunk-LYCDNMOH.js → chunk-ZOC7JSYC.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { setCustomScrubbers, setLocalIdentity, setRepoRoot, resolveRepoIdentity, scrubDeep, downconvertSession, isHumanUserTurn, turnCountBound } from './chunk-4C4THABW.js';
+import { setCustomScrubbers, setLocalIdentity, setRepoRoot, resolveRepoIdentity, scrubDeep, downconvertSession, isHumanUserTurn, turnCountBound } from './chunk-EX6M5JPR.js';
 import { execFileSync } from 'child_process';
 import { hostname, userInfo } from 'os';