@outerlayer/cli 0.5.0 → 0.6.0

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # @outerlayer/cli
 
+## 0.6.0
+
+### Minor Changes
+
+- cb41102: A runner build's agent session now appears on its work item, with its running cost, while the build runs. The runner starts a hidden `session-sender` command beside each build's command, in a microVM, a container, a host `exec` hook or on the host. The end-of-attempt sync stays the complete upload. The capture daemon gains a watch-only mode that reports changed transcripts without copying them.
+- 21b7405: `outerlayer runner init` now sets the runner up to keep running on Linux, macOS and Windows (WSL2), with the same commands on each: `runner install --service` (with `--print`, `--user` and `--replace`) writes, enables and starts one systemd unit, and `runner uninstall --service` removes it. Each microVM build runs in a cgroup of its own with a memory limit of `build.memory` plus 256 MiB, and a build the kernel kills for want of memory ends `failed` with a reason that says so, without stopping the runner or the other builds. Setup refuses builds that cannot fit in memory together. The runner claims nothing, and says why in its heartbeat as `blocked`, when it cannot open `/dev/kvm`, has no Claude credential, still has the placeholder command, or has builds that do not fit in memory. `outerlayer doctor` now reports the running service's groups and credential instead of your shell's. The runner now reports protocol 14 to its gateway.
+
+### Patch Changes
+
+- 573abaa: A session link that worked no longer leaves a Node warning in `~/.outerlayer/spool/hook-errors.log`. Only links that fail are logged, with one line naming the item.
+
+## 0.5.1
+
+### Patch Changes
+
+- 1cc839a: The runner now cleans up after itself and stops taking builds when its disk is nearly full. A new `runner.housekeeping` block in the runner config sets how many days a finished build's job directory is kept (`jobsKeepDays`), the most the Docker build cache may hold (`buildCacheMax`, or `"off"`), and the free space the runner needs to claim work (`minFreeDisk`). The runner also removes build containers and volumes that a failed cleanup left behind. `outerlayer runner status` shows what housekeeping did and whether the runner is holding off for disk, and `outerlayer doctor` checks free disk space. The runner now reports protocol 13 to its gateway.
+
 ## 0.5.0
 
 ### Minor Changes

package/README.md

@@ -56,6 +56,15 @@ send, so turning it off takes effect without restarting the daemon.
 authoritative upload — the daemon exists so a session's page can follow
 along before that sync ever runs.
 
+**`outerlayer session-sender` is started only by a runner, inside each build,
+and streams that build's sessions to its work item while the build runs.** It
+sends under the build's own item key to the build's own gateway, both taken
+from the job's environment and never from your config file, and only sessions
+the build itself launched. It sends no session that belongs to anyone else on
+the machine, and your own `outerlayer daemon` skips sessions launched inside a
+runner build. The runner stops it before the build's final `outerlayer sync`,
+which remains the complete upload.
+
 These commands also talk to your workspace. None of them sends session
 content:
 

package/dist/{agent-setup-IFH3FB5X.js → agent-setup-USZ2SAXC.js}

@@ -4,11 +4,11 @@ import { installStarterPack } from './chunk-ZMYPLFG3.js';
 import { runEmit } from './chunk-H5NCNVDA.js';
 import { addStdioMcpEntryIfAbsent } from './chunk-MQ3IPHIZ.js';
 import { C } from './chunk-YRYMNBGQ.js';
-import { resolveGitCommonDir, defaultGitRunner } from './chunk-XDDW4FRS.js';
+import { resolveGitCommonDir, defaultGitRunner } from './chunk-OIRNH6UO.js';
+import './chunk-ZJSNLVCE.js';
 import { pinExists, readContextManifest } from './chunk-WIOZAJ2W.js';
 import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-WO2BXCTQ.js';
 import { generatedHeaderSource } from './chunk-EMY4I27X.js';
-import './chunk-ZJSNLVCE.js';
 import './chunk-BCLJSQCV.js';
 import './chunk-BOLTI6LR.js';
 import './chunk-EABW6AJQ.js';

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-03T18:15:54.958Z+defeb9b","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-04T12:35:01.048Z+a19ef31","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{check-AXCXDYO2.js → check-CCVPBN7A.js}

@@ -1,17 +1,23 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-L24G4PLP.js';
-import './chunk-RWOTHXYE.js';
-import './chunk-QDQEUVUF.js';
+import { probeCredentials } from './chunk-43J3M6KB.js';
 import './chunk-ABIWDUMS.js';
 import './chunk-YYYXRJUW.js';
+import './chunk-VMJ3MMBX.js';
+import './chunk-T6OIJQRT.js';
+import './chunk-AIW6GLET.js';
+import './chunk-UGP76IZ5.js';
+import './chunk-ZILGTTY6.js';
 import './chunk-CBPPJSAR.js';
-import { placeholderQueues, placeholderProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem } from './chunk-OHFDWLJP.js';
-import './chunk-ZOC7JSYC.js';
+import './chunk-UMFWVGJO.js';
+import './chunk-HHJDN6AU.js';
+import { placeholderQueues, placeholderProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem } from './chunk-MXB5VB4Y.js';
+import './chunk-YYYRBYWG.js';
 import './chunk-TBT347UY.js';
-import './chunk-FC7TMRNA.js';
-import './chunk-RJ467PDQ.js';
-import './chunk-4NMBDRBS.js';
+import './chunk-OUUINEYB.js';
+import './chunk-4NLKY4WR.js';
+import './chunk-RBOMWNOG.js';
+import './chunk-RZSF5B46.js';
 import './chunk-Z62HNKEJ.js';
 import './chunk-N5FOE5PS.js';
 import './chunk-OGFGZQA3.js';
@@ -19,25 +25,31 @@ import './chunk-774HEQL6.js';
 import './chunk-QOZKPLVJ.js';
 import './chunk-W4SQCOZU.js';
 import './chunk-B2G7JHHB.js';
-import './chunk-RMAZ2NWA.js';
+import './chunk-F7CU5ABH.js';
+import './chunk-BKO6JEZI.js';
+import './chunk-BNMCXPG7.js';
 import './chunk-BFESLKPP.js';
-import './chunk-WOBNRVQT.js';
-import './chunk-EX6M5JPR.js';
-import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-5Y3QQRUH.js';
+import './chunk-3DEVYTNQ.js';
+import './chunk-ANK2B36Y.js';
+import './chunk-YRYMNBGQ.js';
+import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-3DD6AOWC.js';
 import './chunk-F6GFZXZ3.js';
 import './chunk-AUFG23AA.js';
+import './chunk-GQD22KKN.js';
 import './chunk-WZBHBH3J.js';
-import './chunk-XDDW4FRS.js';
+import './chunk-5QRP3MVS.js';
+import './chunk-OIRNH6UO.js';
+import './chunk-ZJSNLVCE.js';
 import './chunk-WIOZAJ2W.js';
 import './chunk-WO2BXCTQ.js';
 import './chunk-EMY4I27X.js';
-import './chunk-ZJSNLVCE.js';
 import './chunk-BCLJSQCV.js';
 import './chunk-BOLTI6LR.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
 import './chunk-M5POMKKW.js';
 import './chunk-ZM2IMMYN.js';
+import './chunk-FA2BOX4O.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';

package/dist/{chunk-5Y3QQRUH.js → chunk-3DD6AOWC.js}

@@ -32,6 +32,9 @@ var DEFAULT_TIME_LIMIT_MINUTES = 480;
 var DEFAULT_IDLE_LIMIT_MINUTES = 30;
 var DEFAULT_BUILD = { memory: "8g", cpus: 4, pids: 4096, disk: "40g", variables: [] };
 var BUILD_KEYS = ["memory", "cpus", "pids", "disk", "variables", "destinations", "allowHosts"];
+var HOUSEKEEPING_KEYS = ["jobsKeepDays", "buildCacheMax", "minFreeDisk"];
+var DEFAULT_JOBS_KEEP_DAYS = 30;
+var DEFAULT_BUILD_CACHE_MAX = "20g";
 var VARIABLE_NAME = /^[A-Za-z_][A-Za-z0-9_]{0,254}$/;
 var MAX_VARIABLES = 100;
 function defaultRunnerConfigPath(home = homeFromEnv()) {
@@ -77,6 +80,7 @@ var RUNNER_KEYS = [
   "commands",
   "hooks",
   "build",
+  "housekeeping",
   "autoUpdate"
 ];
 function runnerNumbers() {
@@ -194,6 +198,7 @@ function loadRunnerConfig(configPath) {
   if (!runner.hooks?.cleanup) fail(configPath, "runner.hooks.cleanup", "is required");
   checkBuiltinHooks(configPath, runner.hooks);
   const build = resolveBuild(configPath, runner.build);
+  const housekeeping = resolveHousekeeping(configPath, runner.housekeeping, build.disk);
   if (config.scrub?.literals !== void 0 && !Array.isArray(config.scrub.literals)) {
     fail(configPath, "scrub.literals", "must be a list of strings");
   }
@@ -220,6 +225,7 @@ function loadRunnerConfig(configPath) {
       report: runner.hooks.report
     },
     build,
+    housekeeping,
     // A host with executables of its own for provision and cleanup chose
     // its own environment, and an update could change what its hooks run
     // under; it opts in. The built-in hooks are the runner's own. Provision
@@ -243,6 +249,37 @@ function checkBuiltinHooks(configPath, hooks) {
     fail(configPath, "runner.hooks", `provision and cleanup must both be ${BUILTIN_CONTAINER}, both be ${BUILTIN_PROCESS}, both be ${BUILTIN_VM}, or neither`);
   }
 }
+function resolveHousekeeping(configPath, block, buildDisk) {
+  const given = block ?? {};
+  if (typeof given !== "object" || Array.isArray(given)) fail(configPath, "runner.housekeeping", "must be an object");
+  const keys = given;
+  for (const key of Object.keys(keys)) {
+    if (HOUSEKEEPING_KEYS.includes(key)) continue;
+    const near = nearestKey(key, HOUSEKEEPING_KEYS);
+    fail(configPath, `runner.housekeeping.${key}`, near ? `is not a key this block accepts; did you mean ${near}?` : "is not a key this block accepts");
+  }
+  if (keys.jobsKeepDays !== void 0 && (!Number.isInteger(keys.jobsKeepDays) || keys.jobsKeepDays < 1)) {
+    fail(configPath, "runner.housekeeping.jobsKeepDays", "must be a whole number of at least 1");
+  }
+  let buildCacheMax;
+  if (keys.buildCacheMax === "off") {
+    buildCacheMax = "off";
+  } else {
+    const text = keys.buildCacheMax ?? DEFAULT_BUILD_CACHE_MAX;
+    const bytes = typeof text === "string" ? wholeBytes(parseSize(text)) : void 0;
+    if (bytes === void 0) fail(configPath, "runner.housekeeping.buildCacheMax", 'must be a size such as "20g", or "off"');
+    buildCacheMax = bytes;
+  }
+  const minText = keys.minFreeDisk ?? buildDisk;
+  const minFreeDisk = typeof minText === "string" ? wholeBytes(parseSize(minText)) : void 0;
+  if (minFreeDisk === void 0) fail(configPath, "runner.housekeeping.minFreeDisk", 'must be a size such as "40g"');
+  return { jobsKeepDays: keys.jobsKeepDays ?? DEFAULT_JOBS_KEEP_DAYS, buildCacheMax, minFreeDisk };
+}
+function wholeBytes(bytes) {
+  if (bytes === void 0) return void 0;
+  const whole = Math.floor(bytes);
+  return Number.isSafeInteger(whole) && whole > 0 ? whole : void 0;
+}
 function resolveBuild(configPath, block) {
   if (block === void 0) return { ...DEFAULT_BUILD, variables: [] };
   if (typeof block !== "object" || block === null || Array.isArray(block)) fail(configPath, "runner.build", "must be an object");

package/dist/{chunk-WOBNRVQT.js → chunk-3DEVYTNQ.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { ArtifactTombstoneRecordSchema, ArtifactSpoolRecordSchema } from './chunk-EX6M5JPR.js';
+import { ArtifactTombstoneRecordSchema, ArtifactSpoolRecordSchema } from './chunk-ANK2B36Y.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { mkdirSync, appendFileSync, writeFileSync, renameSync, existsSync, unlinkSync, readdirSync, readFileSync } from 'fs';
 import { join, dirname } from 'path';