@outerlayer/cli 0.5.1 → 0.6.0

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @outerlayer/cli
 
+## 0.6.0
+
+### Minor Changes
+
+- cb41102: A runner build's agent session now appears on its work item, with its running cost, while the build runs. The runner starts a hidden `session-sender` command beside each build's command, in a microVM, a container, a host `exec` hook or on the host. The end-of-attempt sync stays the complete upload. The capture daemon gains a watch-only mode that reports changed transcripts without copying them.
+- 21b7405: `outerlayer runner init` now sets the runner up to keep running on Linux, macOS and Windows (WSL2), with the same commands on each: `runner install --service` (with `--print`, `--user` and `--replace`) writes, enables and starts one systemd unit, and `runner uninstall --service` removes it. Each microVM build runs in a cgroup of its own with a memory limit of `build.memory` plus 256 MiB, and a build the kernel kills for want of memory ends `failed` with a reason that says so, without stopping the runner or the other builds. Setup refuses builds that cannot fit in memory together. The runner claims nothing, and says why in its heartbeat as `blocked`, when it cannot open `/dev/kvm`, has no Claude credential, still has the placeholder command, or has builds that do not fit in memory. `outerlayer doctor` now reports the running service's groups and credential instead of your shell's. The runner now reports protocol 14 to its gateway.
+
+### Patch Changes
+
+- 573abaa: A session link that worked no longer leaves a Node warning in `~/.outerlayer/spool/hook-errors.log`. Only links that fail are logged, with one line naming the item.
+
 ## 0.5.1
 
 ### Patch Changes

package/README.md

@@ -56,6 +56,15 @@ send, so turning it off takes effect without restarting the daemon.
 authoritative upload — the daemon exists so a session's page can follow
 along before that sync ever runs.
 
+**`outerlayer session-sender` is started only by a runner, inside each build,
+and streams that build's sessions to its work item while the build runs.** It
+sends under the build's own item key to the build's own gateway, both taken
+from the job's environment and never from your config file, and only sessions
+the build itself launched. It sends no session that belongs to anyone else on
+the machine, and your own `outerlayer daemon` skips sessions launched inside a
+runner build. The runner stops it before the build's final `outerlayer sync`,
+which remains the complete upload.
+
 These commands also talk to your workspace. None of them sends session
 content:
 

package/dist/{agent-setup-IFH3FB5X.js → agent-setup-USZ2SAXC.js}

@@ -4,11 +4,11 @@ import { installStarterPack } from './chunk-ZMYPLFG3.js';
 import { runEmit } from './chunk-H5NCNVDA.js';
 import { addStdioMcpEntryIfAbsent } from './chunk-MQ3IPHIZ.js';
 import { C } from './chunk-YRYMNBGQ.js';
-import { resolveGitCommonDir, defaultGitRunner } from './chunk-XDDW4FRS.js';
+import { resolveGitCommonDir, defaultGitRunner } from './chunk-OIRNH6UO.js';
+import './chunk-ZJSNLVCE.js';
 import { pinExists, readContextManifest } from './chunk-WIOZAJ2W.js';
 import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-WO2BXCTQ.js';
 import { generatedHeaderSource } from './chunk-EMY4I27X.js';
-import './chunk-ZJSNLVCE.js';
 import './chunk-BCLJSQCV.js';
 import './chunk-BOLTI6LR.js';
 import './chunk-EABW6AJQ.js';

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-04T00:10:45.902Z+d37533c","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-04T12:35:01.048Z+a19ef31","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{check-4Q33B5ZE.js → check-CCVPBN7A.js}

@@ -1,19 +1,23 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-F4NU4H3V.js';
-import './chunk-UWH5DSUP.js';
-import './chunk-ZXBITXTS.js';
-import './chunk-UGP76IZ5.js';
+import { probeCredentials } from './chunk-43J3M6KB.js';
 import './chunk-ABIWDUMS.js';
 import './chunk-YYYXRJUW.js';
+import './chunk-VMJ3MMBX.js';
+import './chunk-T6OIJQRT.js';
+import './chunk-AIW6GLET.js';
+import './chunk-UGP76IZ5.js';
+import './chunk-ZILGTTY6.js';
 import './chunk-CBPPJSAR.js';
-import { placeholderQueues, placeholderProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem } from './chunk-CHLVJNTE.js';
+import './chunk-UMFWVGJO.js';
+import './chunk-HHJDN6AU.js';
+import { placeholderQueues, placeholderProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem } from './chunk-MXB5VB4Y.js';
 import './chunk-YYYRBYWG.js';
-import './chunk-ZOC7JSYC.js';
 import './chunk-TBT347UY.js';
-import './chunk-W7UTFZDH.js';
-import './chunk-RTXKYLCA.js';
-import './chunk-T52PKE2Y.js';
+import './chunk-OUUINEYB.js';
+import './chunk-4NLKY4WR.js';
+import './chunk-RBOMWNOG.js';
+import './chunk-RZSF5B46.js';
 import './chunk-Z62HNKEJ.js';
 import './chunk-N5FOE5PS.js';
 import './chunk-OGFGZQA3.js';
@@ -21,25 +25,31 @@ import './chunk-774HEQL6.js';
 import './chunk-QOZKPLVJ.js';
 import './chunk-W4SQCOZU.js';
 import './chunk-B2G7JHHB.js';
-import './chunk-RMAZ2NWA.js';
+import './chunk-F7CU5ABH.js';
+import './chunk-BKO6JEZI.js';
+import './chunk-BNMCXPG7.js';
 import './chunk-BFESLKPP.js';
-import './chunk-WOBNRVQT.js';
-import './chunk-EX6M5JPR.js';
+import './chunk-3DEVYTNQ.js';
+import './chunk-ANK2B36Y.js';
+import './chunk-YRYMNBGQ.js';
 import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-3DD6AOWC.js';
 import './chunk-F6GFZXZ3.js';
 import './chunk-AUFG23AA.js';
+import './chunk-GQD22KKN.js';
 import './chunk-WZBHBH3J.js';
-import './chunk-XDDW4FRS.js';
+import './chunk-5QRP3MVS.js';
+import './chunk-OIRNH6UO.js';
+import './chunk-ZJSNLVCE.js';
 import './chunk-WIOZAJ2W.js';
 import './chunk-WO2BXCTQ.js';
 import './chunk-EMY4I27X.js';
-import './chunk-ZJSNLVCE.js';
 import './chunk-BCLJSQCV.js';
 import './chunk-BOLTI6LR.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
 import './chunk-M5POMKKW.js';
 import './chunk-ZM2IMMYN.js';
+import './chunk-FA2BOX4O.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';

package/dist/{chunk-WOBNRVQT.js → chunk-3DEVYTNQ.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { ArtifactTombstoneRecordSchema, ArtifactSpoolRecordSchema } from './chunk-EX6M5JPR.js';
+import { ArtifactTombstoneRecordSchema, ArtifactSpoolRecordSchema } from './chunk-ANK2B36Y.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { mkdirSync, appendFileSync, writeFileSync, renameSync, existsSync, unlinkSync, readdirSync, readFileSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-F4NU4H3V.js → chunk-43J3M6KB.js}

@@ -1,33 +1,78 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LEASE_SECONDS, releaseLease, isUnfinished, writeJobFile, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, microVmCommandLine, runCommand, execCommandLine, startHostServices, finishJob, isGroupAlive, outcomeFromExitCode, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, readJobFile, hookLimitsFor, readJobFileChecked, ALREADY_RELEASED } from './chunk-UWH5DSUP.js';
-import { RUNNER_PROTOCOL } from './chunk-ZXBITXTS.js';
-import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-UGP76IZ5.js';
 import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-ABIWDUMS.js';
 import { readMarker, currentVersion, removeMarker, writeMarker, entryIn, versionDir, switchCurrent, cleanVersions, isInLayout, startedThroughCurrent, stagingDir } from './chunk-YYYXRJUW.js';
+import { LEASE_SECONDS, releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isGroupAlive, outcomeFromExitCode, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, ALREADY_RELEASED } from './chunk-VMJ3MMBX.js';
+import { writeJobFile, readJobFile, readJobFileChecked } from './chunk-T6OIJQRT.js';
+import { RUNNER_PROTOCOL } from './chunk-AIW6GLET.js';
+import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-UGP76IZ5.js';
+import { placeholderQueues, placeholderProblem } from './chunk-MXB5VB4Y.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, provisionContainer, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandLine, BuildTokens, classifyRefusal, refusalCode, formatClock, measureDisk, createRunnerLog, ensureTunnel, keepGhConfigCurrent, createContainerRuntime, runnerLabelValue, BUILD_LABEL, RUNNER_LABEL } from './chunk-T52PKE2Y.js';
+import { checkFit } from './chunk-OUUINEYB.js';
+import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, provisionContainer, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandLine, BuildTokens, classifyRefusal, refusalCode, formatClock, measureDisk, createRunnerLog, setUpRunnerCgroup, ensureTunnel, keepGhConfigCurrent, createContainerRuntime, runnerLabelValue, BUILD_LABEL, RUNNER_LABEL } from './chunk-RZSF5B46.js';
 import { startTimeOf, claimPidFile, readPidFile, isSameProcess, releasePidFile } from './chunk-N5FOE5PS.js';
 import { spawnRun } from './chunk-774HEQL6.js';
-import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-RMAZ2NWA.js';
+import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-BNMCXPG7.js';
 import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind } from './chunk-3DD6AOWC.js';
 import { exceedsDisk } from './chunk-F6GFZXZ3.js';
-import { parseClaimIdentity, sharedUserEnvironment, JOB_MOUNT } from './chunk-AUFG23AA.js';
+import { parseClaimIdentity, sharedUserEnvironment, JOB_MOUNT, claudeCredential } from './chunk-AUFG23AA.js';
 import { resolveVersion } from './chunk-RA3O54FC.js';
 import { loadHostKey, ensureHostKey, signerFor } from './chunk-M5POMKKW.js';
 import { RUNNER_DIR_MODE, runnerDir, buildDir, attemptStamp, jobDir, jobsDir, pidFilePath, spoolDir, RUNNER_FILE_MODE, rootfsDir } from './chunk-ZM2IMMYN.js';
 import { HOOKS_DIR_NAME, writeCommitHooks } from './chunk-XCCLFVXM.js';
 import { randomBytes } from 'crypto';
-import { mkdirSync, existsSync, chmodSync, statSync, readdirSync, readFileSync, rmSync, renameSync, writeFileSync, lstatSync } from 'fs';
+import { mkdirSync, existsSync, chmodSync, statSync, readdirSync, readFileSync, rmSync, renameSync, writeFileSync, closeSync, openSync, constants, lstatSync } from 'fs';
 import { join, dirname } from 'path';
+import { totalmem } from 'os';
 
 createRequire(import.meta.url);
+function openKvm() {
+  try {
+    closeSync(openSync("/dev/kvm", constants.O_RDWR));
+    return "usable";
+  } catch (err) {
+    return err.code === "ENOENT" ? "absent" : "no-permission";
+  }
+}
+function realBlockedProbes() {
+  return { env: process.env, kvm: openKvm, totalMemoryBytes: totalmem };
+}
+var DEFAULT_BUILD_MEMORY = "8g";
+function checkBlocked(config, probes) {
+  const placeholders = placeholderQueues(config);
+  if (placeholders.length > 0) return { reason: `${placeholderProblem(placeholders)}. The runner takes work again once the config is edited` };
+  const kind = builtinKind(config.hooks.provision);
+  if (kind === "container" || kind === "vm") {
+    const fit = checkFit({
+      concurrency: config.concurrency,
+      buildMemory: config.build?.memory ?? DEFAULT_BUILD_MEMORY,
+      usableBytes: probes.totalMemoryBytes()
+    });
+    if (!fit.fits) return { reason: `${fit.message}. Lower runner.concurrency or runner.build.memory` };
+  }
+  const kvm = kind === "vm" ? probes.kvm() : "usable";
+  if (kvm === "absent") {
+    return { reason: "/dev/kvm does not exist on this machine, so builtin:vm cannot start a microVM. Use a host with KVM enabled, or builtin:container hooks" };
+  }
+  if (kvm !== "usable") {
+    return {
+      reason: "the runner cannot open /dev/kvm, so builtin:vm cannot start a microVM. Add the runner's account to the kvm group, then restart the service, because a service reads its groups only when it starts"
+    };
+  }
+  if (kind !== "own" && claudeCredential(probes.env) === void 0) {
+    return {
+      reason: "there is no Claude credential in the runner's environment. Put CLAUDE_CODE_OAUTH_TOKEN (from `claude setup-token`) or ANTHROPIC_API_KEY in the runner.env beside the config, then restart the service"
+    };
+  }
+  return void 0;
+}
 
 // src/runner/heartbeat.ts
 var HEARTBEAT_TIMEOUT_MS = 1e4;
 var ERROR_CODE_MAX = 100;
 var ERROR_MESSAGE_MAX = 500;
+var BLOCKED_REASON_MAX = 500;
 var UNREACHABLE_MESSAGE = "the request did not reach the platform";
 function noPlatformMessage(status) {
   return `the request got HTTP ${status} with no error message from the platform`;
@@ -73,7 +118,9 @@ async function sendHeartbeat(args, fetchImpl) {
       ...args.lastUpdate.at !== void 0 ? { at: args.lastUpdate.at } : {}
     },
     // Free disk on the runner's file system, in bytes. Sent only while held, so a host with room sends nothing about its disk.
-    lowDisk: args.lowDisk === void 0 ? void 0 : { free: args.lowDisk.free, needed: args.lowDisk.needed }
+    lowDisk: args.lowDisk === void 0 ? void 0 : { free: args.lowDisk.free, needed: args.lowDisk.needed },
+    // Why the runner claims nothing. Sent only while it holds, so a runner that takes work says nothing about it.
+    blocked: args.blocked === void 0 ? void 0 : { reason: cutForGateway(args.blocked.reason, BLOCKED_REASON_MAX) }
   };
   try {
     const response = await postJson(
@@ -964,7 +1011,8 @@ async function sendTickHeartbeat(state, workRequest) {
           slotsTotal: state.config.concurrency,
           workRequest: next,
           lastUpdate: readLastUpdate(state.config.configPath),
-          lowDisk: state.lowDisk
+          lowDisk: state.lowDisk,
+          blocked: state.blocked
         },
         state.deps.fetchImpl
       );
@@ -1088,6 +1136,25 @@ async function tick(state) {
   }
   await sendTickHeartbeat(state, state.lastWorkRequest);
 }
+function holdWhenBlocked(state) {
+  const probes = {
+    ...realBlockedProbes(),
+    ...state.deps.container?.hostEnv === void 0 ? {} : { env: state.deps.container.hostEnv },
+    ...state.deps.blocked
+  };
+  const blocked = checkBlocked(state.config, probes);
+  const log = logOf(state);
+  if (blocked !== void 0) {
+    if (state.blocked?.reason !== blocked.reason) log.line(`claiming nothing: ${blocked.reason}`);
+    state.blocked = blocked;
+    return true;
+  }
+  if (state.blocked !== void 0) {
+    state.blocked = void 0;
+    log.line("the runner can run its work again \xB7 taking work");
+  }
+  return false;
+}
 function holdOffForDisk(state) {
   const minimum = state.config.housekeeping?.minFreeDisk ?? 0;
   const root = runnerDir(state.config.configPath);
@@ -1145,6 +1212,7 @@ async function housekeepingPass(state) {
 async function runTick(state) {
   reloadConfig(state);
   if (await updateWhenIdle(state)) return;
+  if (holdWhenBlocked(state)) return;
   if (holdOffForDisk(state)) return;
   const log = logOf(state);
   const repoFilter = new RepoFilter(state.config.repos);
@@ -1199,7 +1267,7 @@ var CLAIM_REFUSAL_CODES = new Set(
   "pull_request_from_fork pull_request_on_default_branch pull_request_ambiguous branch_claimed_elsewhere".split(" ")
 );
 async function tryClaimAndStart(state, item, queue) {
-  const { postJson: postJson2 } = await import('./work-cmd-NUR4CAG6.js');
+  const { postJson: postJson2 } = await import('./work-cmd-OVNF44FY.js');
   const log = logOf(state);
   const hostKey = await loadHostKey(state.config.configPath);
   const claim = await retrySend(
@@ -1678,6 +1746,17 @@ async function startJob(state, item, queue, claimId, itemKey, branch, identity)
   writeJobFile(jobFilePath, job);
   const commandStartedMs = nowOf(state).getTime();
   log.line(`${tag} command started \xB7 pid ${running.pid}`);
+  const sender = await startSender({
+    config: state.config,
+    job,
+    jobDir: dirPath,
+    deps: { spawnFn: state.deps.spawnFn, runtime: job.microvm !== void 0 || job.container !== void 0 ? runtimeOf(state) : void 0, log }
+  });
+  if (sender !== void 0) {
+    job = { ...active.job, sender };
+    active.job = job;
+    writeJobFile(jobFilePath, job);
+  }
   running.onExit.then(({ code, signal, error }) => {
     if (active.ending) return;
     if (error !== void 0) {
@@ -1899,7 +1978,7 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
     const outcome = await onStartUnderMarker({
       configPath,
       own: ownVersionOf(deps),
-      check: update.check ? () => update.check(configPath) : async () => (await import('./check-4Q33B5ZE.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
+      check: update.check ? () => update.check(configPath) : async () => (await import('./check-CCVPBN7A.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log
     });
@@ -1918,6 +1997,11 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
   mkdirSync(jobsDir(configPath), { recursive: true, mode: RUNNER_DIR_MODE });
   const self = { pid: process.pid, start: startTimeOf(process.pid) ?? "" };
   claimPidFile(pidFilePath(configPath), self);
+  const { delegated, refusal } = setUpRunnerCgroup();
+  if (refusal !== void 0) log.error(`the kernel refused a cgroup step for the runner's service: ${refusal}`);
+  if (isBuiltinVm(config.hooks.provision) && !delegated) {
+    log.line("microVM builds run with no memory limit of their own: the runner's service is not delegated its cgroup (Delegate=yes in the unit, cgroup v2)");
+  }
   let configMtimeMs;
   try {
     configMtimeMs = statSync(configPath).mtimeMs;

package/dist/{chunk-W7UTFZDH.js → chunk-4NLKY4WR.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-RTXKYLCA.js';
-import { MIN_ENGINE_MAJOR } from './chunk-T52PKE2Y.js';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-RBOMWNOG.js';
+import { MIN_ENGINE_MAJOR } from './chunk-RZSF5B46.js';
 import { RUNNER_DIR_MODE, runnerDir, RUNNER_FILE_MODE } from './chunk-ZM2IMMYN.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
 import { dirname } from 'path';

package/dist/{lima-XN65D7GN.js → chunk-77MM5RYD.js}

@@ -1,6 +1,5 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import './chunk-Z5GEFMRW.js';
 import { spawnSync, spawn } from 'child_process';
 import { statSync, accessSync, constants } from 'fs';
 import { delimiter, resolve } from 'path';

package/dist/{chunk-D2KWEAN6.js → chunk-7DBI6SNT.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { sanitizeTerminal } from './chunk-WOBNRVQT.js';
+import { sanitizeTerminal } from './chunk-3DEVYTNQ.js';
 import { DEFAULT_DASHBOARD } from './chunk-USO2DKBD.js';
 import { readCloudConfig } from './chunk-EABW6AJQ.js';
 

package/dist/{chunk-ZXBITXTS.js → chunk-AIW6GLET.js}

@@ -4,6 +4,6 @@ import { createRequire } from 'node:module';
 createRequire(import.meta.url);
 
 // src/runner/protocol.ts
-var RUNNER_PROTOCOL = 13;
+var RUNNER_PROTOCOL = 14;
 
 export { RUNNER_PROTOCOL };

package/dist/{chunk-EX6M5JPR.js → chunk-ANK2B36Y.js}

@@ -44368,14 +44368,14 @@ var ModelRegistryImpl = class {
 };
 var models_default = {
   version: "1.0.0",
-  generatedAt: "2026-10-03T04:32:34.999Z",
+  generatedAt: "2026-10-04T05:04:28.506Z",
   sources: {
     litellm: {
-      fetchedAt: "2026-10-03T04:32:34.999Z",
-      modelCount: 1882
+      fetchedAt: "2026-10-04T05:04:28.506Z",
+      modelCount: 1887
     },
     openrouter: {
-      fetchedAt: "2026-10-03T04:32:34.999Z",
+      fetchedAt: "2026-10-04T05:04:28.506Z",
       modelCount: 198
     }
   },
@@ -65888,12 +65888,12 @@ var models_default = {
         "top_p"
       ],
       pricing: {
-        inputCostPerToken: 29e-8,
-        outputCostPerToken: 114e-8
+        inputCostPerToken: 25e-8,
+        outputCostPerToken: 1e-6
       },
       context: {
         maxInputTokens: 163840,
-        maxOutputTokens: 115200
+        maxOutputTokens: 147456
       },
       capabilities: {
         functionCalling: true,
@@ -70352,7 +70352,10 @@ var models_default = {
       provider: "azure",
       displayName: "Flux.2 Pro",
       mode: "image_generation",
-      source: "litellm"
+      source: "litellm",
+      context: {
+        maxInputTokens: 32e3
+      }
     },
     "Llama-3.2-11B-Vision-Instruct": {
       provider: "azure",
@@ -73327,6 +73330,9 @@ var models_default = {
       displayName: "MAI Image 2.5",
       mode: "image_generation",
       source: "litellm",
+      context: {
+        maxInputTokens: 32e3
+      },
       deprecationDate: "2026-10-01"
     },
     "MAI-Image-2.5-Flash": {
@@ -73334,6 +73340,9 @@ var models_default = {
       displayName: "MAI Image 2.5 Flash",
       mode: "image_generation",
       source: "litellm",
+      context: {
+        maxInputTokens: 32e3
+      },
       deprecationDate: "2026-10-01"
     },
     "MAI-Image-2e": {
@@ -79250,6 +79259,10 @@ var models_default = {
         inputCostPerToken: 2e-6,
         outputCostPerToken: 12e-6
       },
+      context: {
+        maxInputTokens: 98304,
+        maxOutputTokens: 32768
+      },
       capabilities: {
         functionCalling: false,
         audioInput: true
@@ -79264,6 +79277,10 @@ var models_default = {
         inputCostPerToken: 35e-7,
         outputCostPerToken: 21e-6
       },
+      context: {
+        maxInputTokens: 131072,
+        maxOutputTokens: 65536
+      },
       capabilities: {
         functionCalling: false,
         audioInput: true
@@ -84381,6 +84398,9 @@ var models_default = {
       displayName: "MAI Image 2.5 Pro",
       mode: "image_generation",
       source: "litellm",
+      context: {
+        maxInputTokens: 32e3
+      },
       deprecationDate: "2026-10-01"
     },
     "ap-northeast-1/qwen.qwen3-next-80b-a3b": {
@@ -87196,13 +87216,19 @@ var models_default = {
       provider: "azure",
       displayName: "MAI Image 2.6",
       mode: "image_generation",
-      source: "litellm"
+      source: "litellm",
+      context: {
+        maxInputTokens: 32e3
+      }
     },
     "MAI-Image-2.6-Flash": {
       provider: "azure",
       displayName: "MAI Image 2.6 Flash",
       mode: "image_generation",
-      source: "litellm"
+      source: "litellm",
+      context: {
+        maxInputTokens: 32e3
+      }
     },
     "FW-DeepSeek-V4.1-Flash": {
       provider: "azure",
@@ -88198,6 +88224,72 @@ var models_default = {
           }
         ]
       }
+    },
+    "embed-v5.0-pro": {
+      provider: "cohere",
+      displayName: "Embed V5.0 Pro",
+      mode: "embedding",
+      source: "litellm",
+      pricing: {
+        inputCostPerToken: 12e-8,
+        outputCostPerToken: 0
+      },
+      context: {
+        maxInputTokens: 128e3
+      }
+    },
+    "embed-v5.0-fast": {
+      provider: "cohere",
+      displayName: "Embed V5.0 Fast",
+      mode: "embedding",
+      source: "litellm",
+      pricing: {
+        inputCostPerToken: 8e-8,
+        outputCostPerToken: 0
+      },
+      context: {
+        maxInputTokens: 128e3
+      }
+    },
+    "pplx-decider-v1-27b": {
+      provider: "perplexity",
+      displayName: "Pplx Decider V1 27b",
+      mode: "chat",
+      source: "litellm",
+      pricing: {
+        inputCostPerToken: 4e-8,
+        outputCostPerToken: 0
+      },
+      context: {
+        maxInputTokens: 262144
+      }
+    },
+    "grok-imagine-video-1.5-lite": {
+      provider: "xai",
+      displayName: "Grok Imagine Video 1.5 Lite",
+      mode: "chat",
+      source: "litellm"
+    },
+    "kimi-k2-thinking": {
+      provider: "azure",
+      displayName: "Kimi K2 Thinking",
+      mode: "chat",
+      source: "litellm",
+      pricing: {
+        inputCostPerToken: 6e-7,
+        outputCostPerToken: 25e-7
+      },
+      context: {
+        maxInputTokens: 262144,
+        maxOutputTokens: 262144
+      },
+      capabilities: {
+        vision: false,
+        functionCalling: true,
+        promptCaching: false,
+        reasoning: true
+      },
+      deprecationDate: "2026-03-29"
     }
   }
 };
@@ -90223,7 +90315,8 @@ function scanAll(opts = {}) {
 var CaptureDaemon = class {
   constructor(options = {}) {
     this.pending = /* @__PURE__ */ new Map();
-    var _a5, _b, _c, _d, _e, _f, _g;
+    this.reported = /* @__PURE__ */ new Map();
+    var _a5, _b, _c, _d, _e, _f, _g, _h;
     this.root = (_a5 = options.root) != null ? _a5 : defaultProjectsDir();
     this.rawRoot = (_b = options.rawRoot) != null ? _b : defaultRawDir();
     this.debounceMs = (_c = options.debounceMs) != null ? _c : 2e3;
@@ -90233,18 +90326,23 @@ var CaptureDaemon = class {
     this.excludeProjects = options.excludeProjects;
     this.log = (_f = options.onLog) != null ? _f : (() => void 0);
     this.now = (_g = options.now) != null ? _g : Date.now;
+    this.watchOnly = (_h = options.watchOnly) != null ? _h : false;
   }
   /** Begin watching. Resolves once the initial scan completes. */
   async start() {
-    mkdirSync(this.rawRoot, { recursive: true });
+    if (!this.watchOnly) mkdirSync(this.rawRoot, { recursive: true });
     this.rescanNow();
-    this.watcher = watch(`${this.root}/**/*.jsonl`, {
+    if (this.watchOnly) mkdirSync(this.root, { recursive: true });
+    this.watcher = watch(this.watchOnly ? this.root : `${this.root}/**/*.jsonl`, {
       ignoreInitial: true,
+      ...this.watchOnly ? { ignored: (path, stats) => (stats == null ? void 0 : stats.isFile()) === true && !path.endsWith(".jsonl") } : {},
       awaitWriteFinish: { stabilityThreshold: 500, pollInterval: 100 }
     });
+    const ready = this.watchOnly ? new Promise((resolve3) => this.watcher.once("ready", () => resolve3())) : void 0;
     this.watcher.on("add", (f) => this.schedule(f));
     this.watcher.on("change", (f) => this.schedule(f));
     this.rescanTimer = setInterval(() => this.rescanNow(), this.rescanMs);
+    await ready;
     this.log({ type: "started" });
   }
   async stop() {
@@ -90263,7 +90361,8 @@ var CaptureDaemon = class {
       file22,
       setTimeout(() => {
         this.pending.delete(file22);
-        this.mirror(file22);
+        if (this.watchOnly) this.report(file22);
+        else this.mirror(file22);
       }, this.debounceMs)
     );
   }
@@ -90275,6 +90374,21 @@ var CaptureDaemon = class {
     if (this.excludeProjects && this.excludeProjects.test(projectDir)) return false;
     return true;
   }
+  /** Watch-only mode: names a source transcript that exists and is not empty. Nothing is copied or evicted. */
+  report(file22) {
+    if (!this.included(file22)) return;
+    let signature;
+    try {
+      const st = statSync(file22);
+      if (st.size === 0) return;
+      signature = `${st.size}:${st.mtimeMs}`;
+    } catch {
+      return;
+    }
+    if (this.reported.get(file22) === signature) return;
+    this.reported.set(file22, signature);
+    this.log({ type: "changed", file: file22 });
+  }
   /** Copy one transcript to the raw mirror atomically. Public for the tailer
    * loop and tests. Returns bytes written, or null if skipped/unchanged. */
   mirror(file22) {
@@ -90308,7 +90422,9 @@ var CaptureDaemon = class {
   rescanNow() {
     const files = this.listJsonl(this.root);
     for (const file22 of files) {
-      if (this.included(file22)) this.mirror(file22);
+      if (!this.included(file22)) continue;
+      if (this.watchOnly) this.report(file22);
+      else this.mirror(file22);
     }
     this.log({ type: "rescan", detail: `${files.length} files` });
   }

package/dist/{chunk-RMAZ2NWA.js → chunk-BNMCXPG7.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import { sanitizeTerminal } from './chunk-WOBNRVQT.js';
-import { resolveRepoIdentity } from './chunk-EX6M5JPR.js';
+import { sanitizeTerminal } from './chunk-3DEVYTNQ.js';
+import { resolveRepoIdentity } from './chunk-ANK2B36Y.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { defaultFetch } from './chunk-BCLJSQCV.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-BOLTI6LR.js';
@@ -337,6 +337,18 @@ async function runWorkBuild(opts) {
   return { data, output };
 }
 async function runWorkLinkSession(opts) {
+  try {
+    return await linkSession(opts);
+  } catch (err) {
+    if (opts.logFailures) {
+      const { logHookError } = await import('./hook-fast-NJBBZQ5Q.js');
+      const reason = err instanceof Error ? err.message : String(err);
+      logHookError(opts.home ?? homeFromEnv(opts.env ?? process.env), new Error(`work link-session #${opts.number} failed: ${reason}`));
+    }
+    throw err;
+  }
+}
+async function linkSession(opts) {
   const cwd = opts.cwd ?? process.cwd();
   const env = opts.env ?? process.env;
   const home = opts.home ?? homeFromEnv(env);