@outerlayer/cli 0.5.0 → 0.6.0

package/dist/{chunk-EX6M5JPR.js → chunk-ANK2B36Y.js}

@@ -44368,14 +44368,14 @@ var ModelRegistryImpl = class {
 };
 var models_default = {
   version: "1.0.0",
-  generatedAt: "2026-10-03T04:32:34.999Z",
+  generatedAt: "2026-10-04T05:04:28.506Z",
   sources: {
     litellm: {
-      fetchedAt: "2026-10-03T04:32:34.999Z",
-      modelCount: 1882
+      fetchedAt: "2026-10-04T05:04:28.506Z",
+      modelCount: 1887
     },
     openrouter: {
-      fetchedAt: "2026-10-03T04:32:34.999Z",
+      fetchedAt: "2026-10-04T05:04:28.506Z",
       modelCount: 198
     }
   },
@@ -65888,12 +65888,12 @@ var models_default = {
         "top_p"
       ],
       pricing: {
-        inputCostPerToken: 29e-8,
-        outputCostPerToken: 114e-8
+        inputCostPerToken: 25e-8,
+        outputCostPerToken: 1e-6
       },
       context: {
         maxInputTokens: 163840,
-        maxOutputTokens: 115200
+        maxOutputTokens: 147456
       },
       capabilities: {
         functionCalling: true,
@@ -70352,7 +70352,10 @@ var models_default = {
       provider: "azure",
       displayName: "Flux.2 Pro",
       mode: "image_generation",
-      source: "litellm"
+      source: "litellm",
+      context: {
+        maxInputTokens: 32e3
+      }
     },
     "Llama-3.2-11B-Vision-Instruct": {
       provider: "azure",
@@ -73327,6 +73330,9 @@ var models_default = {
       displayName: "MAI Image 2.5",
       mode: "image_generation",
       source: "litellm",
+      context: {
+        maxInputTokens: 32e3
+      },
       deprecationDate: "2026-10-01"
     },
     "MAI-Image-2.5-Flash": {
@@ -73334,6 +73340,9 @@ var models_default = {
       displayName: "MAI Image 2.5 Flash",
       mode: "image_generation",
       source: "litellm",
+      context: {
+        maxInputTokens: 32e3
+      },
       deprecationDate: "2026-10-01"
     },
     "MAI-Image-2e": {
@@ -79250,6 +79259,10 @@ var models_default = {
         inputCostPerToken: 2e-6,
         outputCostPerToken: 12e-6
       },
+      context: {
+        maxInputTokens: 98304,
+        maxOutputTokens: 32768
+      },
       capabilities: {
         functionCalling: false,
         audioInput: true
@@ -79264,6 +79277,10 @@ var models_default = {
         inputCostPerToken: 35e-7,
         outputCostPerToken: 21e-6
       },
+      context: {
+        maxInputTokens: 131072,
+        maxOutputTokens: 65536
+      },
       capabilities: {
         functionCalling: false,
         audioInput: true
@@ -84381,6 +84398,9 @@ var models_default = {
       displayName: "MAI Image 2.5 Pro",
       mode: "image_generation",
       source: "litellm",
+      context: {
+        maxInputTokens: 32e3
+      },
       deprecationDate: "2026-10-01"
     },
     "ap-northeast-1/qwen.qwen3-next-80b-a3b": {
@@ -87196,13 +87216,19 @@ var models_default = {
       provider: "azure",
       displayName: "MAI Image 2.6",
       mode: "image_generation",
-      source: "litellm"
+      source: "litellm",
+      context: {
+        maxInputTokens: 32e3
+      }
     },
     "MAI-Image-2.6-Flash": {
       provider: "azure",
       displayName: "MAI Image 2.6 Flash",
       mode: "image_generation",
-      source: "litellm"
+      source: "litellm",
+      context: {
+        maxInputTokens: 32e3
+      }
     },
     "FW-DeepSeek-V4.1-Flash": {
       provider: "azure",
@@ -88198,6 +88224,72 @@ var models_default = {
           }
         ]
       }
+    },
+    "embed-v5.0-pro": {
+      provider: "cohere",
+      displayName: "Embed V5.0 Pro",
+      mode: "embedding",
+      source: "litellm",
+      pricing: {
+        inputCostPerToken: 12e-8,
+        outputCostPerToken: 0
+      },
+      context: {
+        maxInputTokens: 128e3
+      }
+    },
+    "embed-v5.0-fast": {
+      provider: "cohere",
+      displayName: "Embed V5.0 Fast",
+      mode: "embedding",
+      source: "litellm",
+      pricing: {
+        inputCostPerToken: 8e-8,
+        outputCostPerToken: 0
+      },
+      context: {
+        maxInputTokens: 128e3
+      }
+    },
+    "pplx-decider-v1-27b": {
+      provider: "perplexity",
+      displayName: "Pplx Decider V1 27b",
+      mode: "chat",
+      source: "litellm",
+      pricing: {
+        inputCostPerToken: 4e-8,
+        outputCostPerToken: 0
+      },
+      context: {
+        maxInputTokens: 262144
+      }
+    },
+    "grok-imagine-video-1.5-lite": {
+      provider: "xai",
+      displayName: "Grok Imagine Video 1.5 Lite",
+      mode: "chat",
+      source: "litellm"
+    },
+    "kimi-k2-thinking": {
+      provider: "azure",
+      displayName: "Kimi K2 Thinking",
+      mode: "chat",
+      source: "litellm",
+      pricing: {
+        inputCostPerToken: 6e-7,
+        outputCostPerToken: 25e-7
+      },
+      context: {
+        maxInputTokens: 262144,
+        maxOutputTokens: 262144
+      },
+      capabilities: {
+        vision: false,
+        functionCalling: true,
+        promptCaching: false,
+        reasoning: true
+      },
+      deprecationDate: "2026-03-29"
     }
   }
 };
@@ -90223,7 +90315,8 @@ function scanAll(opts = {}) {
 var CaptureDaemon = class {
   constructor(options = {}) {
     this.pending = /* @__PURE__ */ new Map();
-    var _a5, _b, _c, _d, _e, _f, _g;
+    this.reported = /* @__PURE__ */ new Map();
+    var _a5, _b, _c, _d, _e, _f, _g, _h;
     this.root = (_a5 = options.root) != null ? _a5 : defaultProjectsDir();
     this.rawRoot = (_b = options.rawRoot) != null ? _b : defaultRawDir();
     this.debounceMs = (_c = options.debounceMs) != null ? _c : 2e3;
@@ -90233,18 +90326,23 @@ var CaptureDaemon = class {
     this.excludeProjects = options.excludeProjects;
     this.log = (_f = options.onLog) != null ? _f : (() => void 0);
     this.now = (_g = options.now) != null ? _g : Date.now;
+    this.watchOnly = (_h = options.watchOnly) != null ? _h : false;
   }
   /** Begin watching. Resolves once the initial scan completes. */
   async start() {
-    mkdirSync(this.rawRoot, { recursive: true });
+    if (!this.watchOnly) mkdirSync(this.rawRoot, { recursive: true });
     this.rescanNow();
-    this.watcher = watch(`${this.root}/**/*.jsonl`, {
+    if (this.watchOnly) mkdirSync(this.root, { recursive: true });
+    this.watcher = watch(this.watchOnly ? this.root : `${this.root}/**/*.jsonl`, {
       ignoreInitial: true,
+      ...this.watchOnly ? { ignored: (path, stats) => (stats == null ? void 0 : stats.isFile()) === true && !path.endsWith(".jsonl") } : {},
       awaitWriteFinish: { stabilityThreshold: 500, pollInterval: 100 }
     });
+    const ready = this.watchOnly ? new Promise((resolve3) => this.watcher.once("ready", () => resolve3())) : void 0;
     this.watcher.on("add", (f) => this.schedule(f));
     this.watcher.on("change", (f) => this.schedule(f));
     this.rescanTimer = setInterval(() => this.rescanNow(), this.rescanMs);
+    await ready;
     this.log({ type: "started" });
   }
   async stop() {
@@ -90263,7 +90361,8 @@ var CaptureDaemon = class {
       file22,
       setTimeout(() => {
         this.pending.delete(file22);
-        this.mirror(file22);
+        if (this.watchOnly) this.report(file22);
+        else this.mirror(file22);
       }, this.debounceMs)
     );
   }
@@ -90275,6 +90374,21 @@ var CaptureDaemon = class {
     if (this.excludeProjects && this.excludeProjects.test(projectDir)) return false;
     return true;
   }
+  /** Watch-only mode: names a source transcript that exists and is not empty. Nothing is copied or evicted. */
+  report(file22) {
+    if (!this.included(file22)) return;
+    let signature;
+    try {
+      const st = statSync(file22);
+      if (st.size === 0) return;
+      signature = `${st.size}:${st.mtimeMs}`;
+    } catch {
+      return;
+    }
+    if (this.reported.get(file22) === signature) return;
+    this.reported.set(file22, signature);
+    this.log({ type: "changed", file: file22 });
+  }
   /** Copy one transcript to the raw mirror atomically. Public for the tailer
    * loop and tests. Returns bytes written, or null if skipped/unchanged. */
   mirror(file22) {
@@ -90308,7 +90422,9 @@ var CaptureDaemon = class {
   rescanNow() {
     const files = this.listJsonl(this.root);
     for (const file22 of files) {
-      if (this.included(file22)) this.mirror(file22);
+      if (!this.included(file22)) continue;
+      if (this.watchOnly) this.report(file22);
+      else this.mirror(file22);
     }
     this.log({ type: "rescan", detail: `${files.length} files` });
   }

package/dist/{chunk-RMAZ2NWA.js → chunk-BNMCXPG7.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import { sanitizeTerminal } from './chunk-WOBNRVQT.js';
-import { resolveRepoIdentity } from './chunk-EX6M5JPR.js';
+import { sanitizeTerminal } from './chunk-3DEVYTNQ.js';
+import { resolveRepoIdentity } from './chunk-ANK2B36Y.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { defaultFetch } from './chunk-BCLJSQCV.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-BOLTI6LR.js';
@@ -337,6 +337,18 @@ async function runWorkBuild(opts) {
   return { data, output };
 }
 async function runWorkLinkSession(opts) {
+  try {
+    return await linkSession(opts);
+  } catch (err) {
+    if (opts.logFailures) {
+      const { logHookError } = await import('./hook-fast-NJBBZQ5Q.js');
+      const reason = err instanceof Error ? err.message : String(err);
+      logHookError(opts.home ?? homeFromEnv(opts.env ?? process.env), new Error(`work link-session #${opts.number} failed: ${reason}`));
+    }
+    throw err;
+  }
+}
+async function linkSession(opts) {
   const cwd = opts.cwd ?? process.cwd();
   const env = opts.env ?? process.env;
   const home = opts.home ?? homeFromEnv(env);

package/dist/{chunk-UFFXNXLQ.js → chunk-FA2BOX4O.js}

@@ -3,7 +3,7 @@ import { createRequire } from 'node:module';
 import { deadHooksState, huskyPrepareScript, preparePackageManagerCommand } from './chunk-XCCLFVXM.js';
 import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import { readFileSync, mkdirSync, writeFileSync, renameSync, existsSync, statSync, appendFileSync, openSync, opendirSync, unlinkSync } from 'fs';
+import { readFileSync, mkdirSync, writeFileSync, renameSync, existsSync, statSync, appendFileSync, opendirSync, unlinkSync } from 'fs';
 import { spawn, execFileSync } from 'child_process';
 import { createHash } from 'crypto';
 import { join, dirname, resolve } from 'path';
@@ -347,18 +347,11 @@ var readStdin = () => {
   }
 };
 var AUTO_SYNC_DEBOUNCE_MS = 5 * 60 * 1e3;
-function appendFd(path) {
-  if (path === void 0) return "ignore";
-  try {
-    return openSync(path, "a");
-  } catch {
-    return "ignore";
-  }
-}
-var spawnDetached = (command, args, stderrPath, cwd) => {
+var LOG_FAILURES_FLAG = "--log-failures";
+var spawnDetached = (command, args, cwd) => {
   const child = spawn(command, args, {
     detached: true,
-    stdio: ["ignore", "ignore", appendFd(stderrPath)],
+    stdio: ["ignore", "ignore", "ignore"],
     ...cwd !== void 0 ? { cwd } : {}
   });
   child.on("error", () => {
@@ -382,7 +375,7 @@ function maybeAutoSync(event, home = homeFromEnv(), spawnImpl = spawnDetached, n
       if (!config.appId) return;
     } else if (!config.accountToken || readRepoConnection(cwd) === void 0) return;
     writeFileSync(marker, String(now));
-    spawnImpl(process.execPath, [process.argv[1], "sync", "--quiet"], void 0, cwd);
+    spawnImpl(process.execPath, [process.argv[1], "sync", "--quiet"], cwd);
   } catch {
   }
 }
@@ -395,13 +388,13 @@ function hookErrorsContext(home, writtenBytes, seenBytes) {
 }
 async function handleWorkLaunch(sessionId, home, env, spawnImpl = spawnDetached, cwd = process.cwd()) {
   if (!sessionId || env.OUTERLAYER_WORK === void 0) return void 0;
-  const { parseWorkItemEnv, appendLaunchRecord } = await import('./work-launch-YI4CJDAP.js');
+  const { parseWorkItemEnv, appendLaunchRecord } = await import('./work-launch-R5HTAP6X.js');
   const parsed = parseWorkItemEnv(env.OUTERLAYER_WORK);
   if ("reason" in parsed) {
     logHookError(home, new Error(`OUTERLAYER_WORK ignored: ${parsed.reason}`));
     return `OuterLayer ignored this session's OUTERLAYER_WORK value: ${sanitizeForContext(parsed.reason)}. The session is not attached to a work item and will not upload. Hook failures are logged to ${join(spoolDir(home), "hook-errors.log")}.`;
   }
-  appendLaunchRecord({ sessionId, item: parsed.number }, home);
+  appendLaunchRecord({ sessionId, item: parsed.number, ...env.OUTERLAYER_JOB_DIR === void 0 ? {} : { job: env.OUTERLAYER_JOB_DIR } }, home);
   const args = [
     process.argv[1],
     "work",
@@ -417,17 +410,16 @@ async function handleWorkLaunch(sessionId, home, env, spawnImpl = spawnDetached,
     // hook has already returned) and cannot double-link, because the
     // link is keyed by the session id passed above.
     "--retry",
-    String(WORK_LINK_RETRIES)
+    String(WORK_LINK_RETRIES),
+    LOG_FAILURES_FLAG
   ];
   if (env.OUTERLAYER_JOB_DIR !== void 0) args.push("--no-lease");
   spawnImpl(
     process.execPath,
     args,
-    // The link runs after this hook has exited, so its own failure
-    // (offline, revoked key, unknown item number) has nowhere else to be
-    // seen: without this the session uploads later with no Work link and
-    // no trace of why.
-    join(spoolDir(home), "hook-errors.log"),
+    // The link appends its own failure line to hook-errors.log (see
+    // `--log-failures`), so a Node warning on a link that worked never
+    // reaches the log.
     cwd
   );
   return void 0;
@@ -456,30 +448,28 @@ async function maybeRenewWorkLease(event, sessionId, home = homeFromEnv(), env =
       if (now - statSync(marker).mtimeMs < WORK_LEASE_RENEW_DEBOUNCE_MS) return;
     } catch {
     }
-    const { parseWorkItemEnv } = await import('./work-launch-YI4CJDAP.js');
+    const { parseWorkItemEnv } = await import('./work-launch-R5HTAP6X.js');
     const parsed = parseWorkItemEnv(env.OUTERLAYER_WORK);
     if ("reason" in parsed) return;
     writeFileSync(marker, String(now));
     spawnImpl(
       process.execPath,
-      [process.argv[1], "work", "link-session", String(parsed.number), "--session-id", sessionId],
-      join(spoolDir(home), "hook-errors.log"),
+      [process.argv[1], "work", "link-session", String(parsed.number), "--session-id", sessionId, LOG_FAILURES_FLAG],
       cwd
     );
   } catch {
   }
 }
-async function handleWorkSessionEnd(event, sessionId, home = homeFromEnv(), env = process.env, spawnImpl = spawnDetached, cwd = process.cwd()) {
+async function handleWorkSessionEnd(event, sessionId, _home = homeFromEnv(), env = process.env, spawnImpl = spawnDetached, cwd = process.cwd()) {
   try {
     if (event !== "SessionEnd") return;
     if (!sessionId || env.OUTERLAYER_WORK === void 0) return;
-    const { parseWorkItemEnv } = await import('./work-launch-YI4CJDAP.js');
+    const { parseWorkItemEnv } = await import('./work-launch-R5HTAP6X.js');
     const parsed = parseWorkItemEnv(env.OUTERLAYER_WORK);
     if ("reason" in parsed) return;
     spawnImpl(
       process.execPath,
-      [process.argv[1], "work", "link-session", String(parsed.number), "--session-id", sessionId, "--ended"],
-      join(spoolDir(home), "hook-errors.log"),
+      [process.argv[1], "work", "link-session", String(parsed.number), "--session-id", sessionId, "--ended", LOG_FAILURES_FLAG],
       cwd
     );
   } catch {
@@ -638,7 +628,7 @@ async function runHookFast(event, home = homeFromEnv(), read = readStdin, env =
       recordHookErrorsSeen(home, hookErrorsBytes);
       if (contextPossiblyGoverned(sessionCwd, home)) {
         try {
-          const { materializeContext: materialize } = await import('./context-materialize-G2FUFC72.js');
+          const { materializeContext: materialize } = await import('./context-materialize-3HLPZAF6.js');
           const sessionId = typeof payload.session_id === "string" ? payload.session_id : "unknown";
           const result = await materialize({ cwd: sessionCwd, sessionId, home });
           materializeMessage = result.message;
@@ -677,7 +667,9 @@ async function runHookFast(event, home = homeFromEnv(), read = readStdin, env =
     logHookError(home, err);
   }
 }
+var hookErrorsLogged = 0;
 function logHookError(home, err) {
+  hookErrorsLogged++;
   try {
     const dir = spoolDir(home);
     mkdirSync(dir, { recursive: true });
@@ -690,5 +682,15 @@ function logHookError(home, err) {
   } catch {
   }
 }
+function recordLinkExitFailure(argv, home = homeFromEnv(), target = process) {
+  const at = argv.indexOf("link-session");
+  if (at < 0 || !argv.includes(LOG_FAILURES_FLAG)) return;
+  const number = argv[at + 1] ?? "?";
+  target.once("exit", (code) => {
+    if (code !== 0 && hookErrorsLogged === 0) {
+      logHookError(home, new Error(`work link-session #${number} exited with code ${code} before it reported a failure`));
+    }
+  });
+}
 
-export { AUTO_SYNC_DEBOUNCE_MS, SYNC_STALE_AFTER_MS, WORK_LEASE_RENEW_DEBOUNCE_MS, WORK_LINK_RETRIES, assessSyncHealth, checkInstalledCliStaleness, contextPossiblyGoverned, formatAgo, handleWorkLaunch, handleWorkSessionEnd, hookFiredMarkerPath, installedCliDistDir, maybeAutoSync, maybeRenewWorkLease, readSyncStatus, refreshCommand, runHookFast, sanitizeForContext, spoolDir, workspaceRootOf, writeSyncStatus };
+export { AUTO_SYNC_DEBOUNCE_MS, SYNC_STALE_AFTER_MS, WORK_LEASE_RENEW_DEBOUNCE_MS, WORK_LINK_RETRIES, assessSyncHealth, checkInstalledCliStaleness, contextPossiblyGoverned, formatAgo, handleWorkLaunch, handleWorkSessionEnd, hookFiredMarkerPath, installedCliDistDir, logHookError, maybeAutoSync, maybeRenewWorkLease, readSyncStatus, recordLinkExitFailure, refreshCommand, runHookFast, sanitizeForContext, spoolDir, workspaceRootOf, writeSyncStatus };

package/dist/chunk-FBTE2A2X.js

@@ -0,0 +1,38 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+
+createRequire(import.meta.url);
+
+// src/runner/vm/service.ts
+var VM_SERVICE_NAME = "outerlayer-runner";
+var UNIT_MARKER = "# Written by outerlayer runner install --service; edit the runner config, not this file.";
+var STOP_MARGIN_MINUTES = 10;
+function escapeUnitPath(path) {
+  return path.replace(/%/g, "%%").replace(/ /g, "\\x20");
+}
+function runnerUnit(unit) {
+  return `${UNIT_MARKER}
+[Unit]
+Description=OuterLayer runner
+After=network-online.target${unit.docker ? " docker.service" : ""}
+Wants=network-online.target
+${unit.docker ? "Requires=docker.service\n" : ""}
+[Service]
+User=${unit.user}
+ExecStart=${unit.execStart}
+EnvironmentFile=-${escapeUnitPath(`${unit.configDir}/runner.env`)}
+Restart=on-failure
+RestartForceExitStatus=75
+RestartSec=30
+KillSignal=SIGTERM
+KillMode=mixed
+TimeoutStopSec=${unit.timeLimitMinutes + STOP_MARGIN_MINUTES}min
+OOMPolicy=continue
+Delegate=yes
+
+[Install]
+WantedBy=multi-user.target
+`;
+}
+
+export { UNIT_MARKER, VM_SERVICE_NAME, runnerUnit };

package/dist/{chunk-DVDEBNQJ.js → chunk-GQD22KKN.js}

@@ -27,7 +27,12 @@ function launchesPath(home) {
 }
 function appendLaunchRecord(input, home) {
   mkdirSync(join(home, ".outerlayer", "spool"), { recursive: true });
-  const record = { sessionId: input.sessionId, item: input.item, t: input.t ?? (/* @__PURE__ */ new Date()).toISOString() };
+  const record = {
+    sessionId: input.sessionId,
+    item: input.item,
+    ...input.job === void 0 ? {} : { job: input.job },
+    t: input.t ?? (/* @__PURE__ */ new Date()).toISOString()
+  };
   appendFileSync(launchesPath(home), `${JSON.stringify(record)}
 `);
 }
@@ -75,22 +80,28 @@ function launchedItemsBySession(home, readImpl = readLaunchSpool) {
 }
 function readLaunchSpoolState(home, readImpl = readLaunchSpool) {
   const ids = /* @__PURE__ */ new Set();
+  const records = /* @__PURE__ */ new Map();
   const read = readImpl(launchesPath(home));
-  if (read.kind === "unreadable") return { ids, unreadable: read.reason };
-  if (read.kind === "absent") return { ids };
+  if (read.kind === "unreadable") return { ids, records, unreadable: read.reason };
+  if (read.kind === "absent") return { ids, records };
   let malformedLines = 0;
   for (const line of read.text.split("\n")) {
     const text = line.trim();
     if (!text) continue;
     try {
       const record = JSON.parse(text);
-      if (typeof record.sessionId === "string" && record.sessionId !== "") ids.add(record.sessionId);
-      else malformedLines += 1;
+      if (typeof record.sessionId === "string" && record.sessionId !== "") {
+        ids.add(record.sessionId);
+        records.set(record.sessionId, {
+          ...typeof record.item === "number" ? { item: record.item } : {},
+          ...typeof record.job === "string" ? { job: record.job } : {}
+        });
+      } else malformedLines += 1;
     } catch {
       malformedLines += 1;
     }
   }
-  return { ids, ...malformedLines > 0 ? { malformedLines } : {} };
+  return { ids, records, ...malformedLines > 0 ? { malformedLines } : {} };
 }
 
 export { appendLaunchRecord, launchStatusIsDecisive, launchedItemForSession, launchedItemsBySession, launchesPath, parseWorkItemEnv, readLaunchSpoolState };

package/dist/{chunk-BCJNHMZT.js → chunk-HHJDN6AU.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { readLaunchSpoolState, launchesPath } from './chunk-DVDEBNQJ.js';
+import { readLaunchSpoolState, launchesPath } from './chunk-GQD22KKN.js';
 
 createRequire(import.meta.url);
 
@@ -17,18 +17,33 @@ function launchRefusalForSession(sessionId, home) {
   return `this session was not launched with OUTERLAYER_WORK naming a work item, so nothing it produces may leave the machine. Start the session with OUTERLAYER_WORK set (for example OUTERLAYER_WORK=42), or run this from CI.`;
 }
 var LaunchFilter = class {
-  constructor(launchedSessionIds) {
+  /**
+   * `records`, when given, scopes a live sender:
+   * - a build sender (`build`) admits only a session launched for its item in its own job; a record with no job
+   *   is one an older hook wrote, which is admitted on the item alone;
+   * - any other live sender skips a session launched inside a runner job, which only that job's sender sends.
+   * `sync` passes no records and decides by the launch record's existence alone.
+   */
+  constructor(launchedSessionIds, records, build) {
     this.launchedSessionIds = launchedSessionIds;
+    this.records = records;
+    this.build = build;
     /** Sessions dropped for carrying no launch record — for the sync summary. */
     this.skippedTotal = 0;
   }
   /** True when the session should sync. Records skips for reporting. */
   allows(session) {
     const key = session.subagent?.parentSessionId ?? session.id;
-    const allowed = typeof key === "string" && this.launchedSessionIds.has(key);
+    const allowed = typeof key === "string" && this.launchedSessionIds.has(key) && this.inScope(this.records?.get(key));
     if (!allowed) this.skippedTotal += 1;
     return allowed;
   }
+  inScope(facts) {
+    if (this.build !== void 0) {
+      return facts !== void 0 && facts.item === this.build.item && (facts.job === void 0 || facts.job === this.build.jobDir);
+    }
+    return facts?.job === void 0;
+  }
 };
 
 export { LaunchFilter, launchRefusalForSession };

package/dist/{chunk-JLDZTG3A.js → chunk-IASWYRVG.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import { resolveRepoIdentity } from './chunk-EX6M5JPR.js';
+import { resolveRepoIdentity } from './chunk-ANK2B36Y.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { defaultFetch } from './chunk-BCLJSQCV.js';
 import { unauthorizedMessage, resolveGatewayCredentials } from './chunk-BOLTI6LR.js';

package/dist/{install-cmd-7WXOIFDO.js → chunk-JWOQNNN2.js}

@@ -2,7 +2,6 @@
 import { createRequire } from 'node:module';
 import { isInLayout, packageRootIn, versionDir, switchCurrent, execStartLine } from './chunk-YYYXRJUW.js';
 import { RUNNER_DIR_MODE } from './chunk-ZM2IMMYN.js';
-import './chunk-Z5GEFMRW.js';
 import { realpathSync, readFileSync, mkdirSync, rmSync, cpSync, existsSync } from 'fs';
 import { dirname, sep, join } from 'path';
 

package/dist/{chunk-ZLB7GCTY.js → chunk-MIGEDH5P.js}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isLinkedRepository } from './chunk-D2KWEAN6.js';
+import { isLinkedRepository } from './chunk-7DBI6SNT.js';
 import { readStatuslineState, STATE_FRESH_MS } from './chunk-F47JBIAW.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-RMAZ2NWA.js';
-import { sanitizeTerminal } from './chunk-WOBNRVQT.js';
-import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-EX6M5JPR.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-BNMCXPG7.js';
+import { sanitizeTerminal } from './chunk-3DEVYTNQ.js';
+import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-ANK2B36Y.js';
 import { C } from './chunk-YRYMNBGQ.js';
 import { readSettings, settingsPath, isOurStatuslineSlot, statuslineWrappedOriginal, REGISTERED_EVENTS, isOurHookCommand, ourCommandBins, cliBinResolvable, ourDirectScriptBins, wrappedOriginalCommand } from './chunk-5QRP3MVS.js';
 import { readPin, readContextManifest, readDegraded, readSourceCache } from './chunk-WIOZAJ2W.js';
 import { defaultFetch } from './chunk-BCLJSQCV.js';
 import { resolveGatewayCredentials } from './chunk-BOLTI6LR.js';
 import { readCloudConfig } from './chunk-EABW6AJQ.js';
-import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-UFFXNXLQ.js';
+import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-FA2BOX4O.js';
 import { deadHooksState, preparePackageManagerCommand, contextExcludesPresent } from './chunk-XCCLFVXM.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -1004,7 +1004,7 @@ function doctorExitCode(checks) {
 
 // src/doctor-report.ts
 async function gatherDoctorChecks() {
-  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-XVJYZ4IQ.js');
+  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-HL2AIR3K.js');
   const configPath = defaultRunnerConfigPath();
   const checks = runDoctor({ runnerHost: hasRunnerBlock(configPath) });
   const credential = await credentialChecks();
@@ -1012,11 +1012,11 @@ async function gatherDoctorChecks() {
   if (credential[0]?.status === "pass") checks.push(...await githubAppChecks());
   const runnerVm = runnerVmOf(configPath);
   if (runnerVm !== void 0) {
-    const { realLima } = await import('./lima-XN65D7GN.js');
+    const { realLima } = await import('./lima-7NPCNGWT.js');
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-J3GIMR7K.js');
+    const { runnerHostChecks } = await import('./doctor-VOMYOHQU.js');
     const hooks = (() => {
       try {
         return loadRunnerConfig(configPath).hooks;
@@ -1041,13 +1041,21 @@ async function gatherDoctorChecks() {
     })();
     const runner = (() => {
       try {
-        const { concurrency, build } = loadRunnerConfig(configPath);
-        return { concurrency, buildMemory: build?.memory ?? "8g" };
+        const { concurrency, build, housekeeping } = loadRunnerConfig(configPath);
+        return { concurrency, buildMemory: build?.memory ?? "8g", minFreeDisk: housekeeping?.minFreeDisk };
       } catch {
         return void 0;
       }
     })();
-    checks.push(...await runnerHostChecks({ configPath, hooks, gateway, repos, runner }));
+    const service = await (async () => {
+      const { existsSync: existsSync2 } = await import('fs');
+      if (process.platform !== "linux" || !existsSync2("/run/systemd/system")) return void 0;
+      const { inspectService, realInspectProbes } = await import('./inspect-XAUSB7L3.js');
+      const { DEFAULT_UNIT_NAME } = await import('./install-DSUZE2TJ.js');
+      const { dirname: dirname2 } = await import('path');
+      return inspectService(DEFAULT_UNIT_NAME, dirname2(configPath), realInspectProbes());
+    })();
+    checks.push(...await runnerHostChecks({ configPath, hooks, gateway, repos, runner, service }));
   }
   return checks;
 }