@outerlayer/cli 0.6.0 → 0.7.0

package/dist/{command-ARFK3OYF.js → command-FLSYCGIB.js}

@@ -1,37 +1,44 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { runRunnerInstall } from './chunk-JWOQNNN2.js';
-import { execStartCommand } from './chunk-YYYXRJUW.js';
+import { runRunnerInstall } from './chunk-Q5G2ODUZ.js';
+import { currentLink, execStartCommand } from './chunk-TI7B7UEO.js';
 import { readJobFile } from './chunk-T6OIJQRT.js';
-import { installService, uninstallService, realTaskScheduler } from './chunk-NQXFAGHU.js';
+import { installService, uninstallService, realTaskScheduler } from './chunk-7FTNIAHS.js';
 import './chunk-FBTE2A2X.js';
 import './chunk-OUUINEYB.js';
+import { realLima } from './chunk-77MM5RYD.js';
 import { writeLaunchAgent, launchAgentPath } from './chunk-LF6MLJCY.js';
-import { detectMachine } from './chunk-RBOMWNOG.js';
-import './chunk-RZSF5B46.js';
-import './chunk-Z62HNKEJ.js';
+import { detectMachine } from './chunk-AQ54MKSQ.js';
+import './chunk-E4PIFIC3.js';
+import './chunk-CEBIA5FD.js';
 import './chunk-N5FOE5PS.js';
 import './chunk-OGFGZQA3.js';
 import './chunk-774HEQL6.js';
 import './chunk-QOZKPLVJ.js';
-import './chunk-W4SQCOZU.js';
-import './chunk-B2G7JHHB.js';
-import './chunk-BNMCXPG7.js';
+import './chunk-ZOAEPWGL.js';
+import './chunk-R7STSBLC.js';
+import './chunk-DGAIVMMN.js';
+import './chunk-PUN7LMNS.js';
 import './chunk-BFESLKPP.js';
-import './chunk-3DEVYTNQ.js';
-import './chunk-ANK2B36Y.js';
-import { runnerVmOf, loadRunnerConfig } from './chunk-3DD6AOWC.js';
+import './chunk-SSU747O6.js';
+import './chunk-ZYHKJKSU.js';
+import './chunk-D6FXM5OW.js';
+import './chunk-USO2DKBD.js';
+import './chunk-N6LURUEF.js';
+import './chunk-YRYMNBGQ.js';
+import { runnerVmOf, loadRunnerConfig } from './chunk-DTXOJDEH.js';
 import './chunk-F6GFZXZ3.js';
-import './chunk-AUFG23AA.js';
-import { realLima } from './chunk-77MM5RYD.js';
+import './chunk-OD2VTIHN.js';
+import './chunk-HKMPVPO7.js';
 import './chunk-WZBHBH3J.js';
-import './chunk-OIRNH6UO.js';
+import './chunk-5FWNEQNZ.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-WIOZAJ2W.js';
-import './chunk-WO2BXCTQ.js';
-import './chunk-EMY4I27X.js';
+import './chunk-ZZXLM64C.js';
+import './chunk-VXLJORHL.js';
+import './chunk-7ZR5UPMB.js';
 import './chunk-BCLJSQCV.js';
 import './chunk-BOLTI6LR.js';
+import './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
 import './chunk-M5POMKKW.js';
@@ -41,9 +48,9 @@ import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';
 import { userInfo, totalmem } from 'os';
+import { join } from 'path';
 import { rmSync, existsSync, readdirSync, readFileSync } from 'fs';
 import { spawnSync } from 'child_process';
-import { join } from 'path';
 
 createRequire(import.meta.url);
 async function serviceInVm(lima, instance, action, options) {
@@ -114,11 +121,22 @@ function realServiceDeps() {
     systemd: realSystemd(),
     ...platform === "wsl2" ? { tasks: realTaskScheduler(), wslConf: realWslConf(), distro: process.env.WSL_DISTRO_NAME } : {},
     usableMemoryBytes: totalmem(),
-    buildsRunning: buildsRunningIn
+    buildsRunning: buildsRunningIn,
+    // Asked as the account, through sudo, which the unit's own install needs anyway.
+    accountCan: (account, flag, path) => spawnSync("sudo", ["-n", "-u", account, "test", flag, path], { stdio: "ignore" }).status === 0
   };
 }
 
 // src/runner/service/command.ts
+function accountCannotStart(account, nodePath, entry, can) {
+  if (!can(account, "-x", nodePath)) {
+    return `\u2717 the service would run as ${account}, which cannot execute ${nodePath}, the Node this install runs on. Nothing is set up: run the install as ${account} with a Node it can execute, or install Node where ${account} can reach it`;
+  }
+  if (!can(account, "-r", entry)) {
+    return `\u2717 the service would run as ${account}, which cannot read ${entry}. Nothing is set up: put the runner's config where ${account} can read it, or run the install as ${account}`;
+  }
+  return void 0;
+}
 function vmArgs(input) {
   return [...input.print === true ? ["--print"] : [], ...input.replace === true ? ["--replace"] : [], ...input.user === void 0 ? [] : ["--user", input.user], ...input.unitName === void 0 ? [] : ["--unit-name", input.unitName]];
 }
@@ -132,6 +150,13 @@ async function installServiceCommand(input, deps = {}) {
   if (input.print !== true && input.layoutInstalled !== true) {
     runRunnerInstall({ configPath: input.configPath, entryPath: input.entryPath, nodePath: input.nodePath });
   }
+  const account = input.user ?? userInfo().username;
+  const serviceDeps = (deps.service ?? realServiceDeps)();
+  if (input.print !== true && account !== userInfo().username && serviceDeps.accountCan !== void 0) {
+    const entry = join(currentLink(input.configPath), "node_modules", "@outerlayer", "cli", "dist", "index.js");
+    const problem = accountCannotStart(account, input.nodePath, entry, serviceDeps.accountCan);
+    if (problem !== void 0) return { ok: false, state: "refused", lines: [problem] };
+  }
   const outcome = installService(
     {
       configPath: input.configPath,
@@ -140,12 +165,12 @@ async function installServiceCommand(input, deps = {}) {
       buildMemory: config.build?.memory ?? "8g",
       timeLimitMinutes: config.timeLimitMinutes,
       execStart: execStartCommand(input.configPath, input.nodePath),
-      user: input.user ?? userInfo().username,
+      user: account,
       unitName: input.unitName,
       print: input.print,
       replace: input.replace
     },
-    (deps.service ?? realServiceDeps)()
+    serviceDeps
   );
   return { ok: outcome.ok, state: outcome.state, lines: outcome.lines, unit: outcome.unit };
 }

package/dist/config-I3TVFYLH.js

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+export { DEFAULT_CHECK_TIME_LIMIT_MINUTES, RunnerConfigError, builtinKind, checkHooks, defaultRunnerConfigPath, hasRunnerBlock, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, loadRunnerConfig, resolveBuild, runnerVmOf } from './chunk-DTXOJDEH.js';
+import './chunk-F6GFZXZ3.js';
+import './chunk-OD2VTIHN.js';
+import './chunk-HKMPVPO7.js';
+import './chunk-VNVZDWO3.js';
+import './chunk-Z5GEFMRW.js';
+
+createRequire(import.meta.url);

package/dist/{connect-cmd-PCESZLTR.js → connect-cmd-MJMUONDY.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { promptOnTerminal, realConnectDeps, runConnect, runConnectCommand } from './chunk-PMAMOSTP.js';
-import './chunk-7DBI6SNT.js';
-import './chunk-3DEVYTNQ.js';
-import './chunk-ANK2B36Y.js';
+export { connectedLine, fetchFactories, promptOnTerminal, realConnectDeps, runConnect, runConnectCommand, saveFactoryConnection, selectFactory } from './chunk-SSU747O6.js';
+import './chunk-ZYHKJKSU.js';
+import './chunk-D6FXM5OW.js';
 import './chunk-USO2DKBD.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
 import './chunk-BOLTI6LR.js';
+import './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';

package/dist/{context-adopt-G5JAELE7.js → context-adopt-CE4KDXS3.js}

@@ -1,12 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { defaultGitRunner, hasSymlinkComponent } from './chunk-OIRNH6UO.js';
+import { defaultGitRunner, hasSymlinkComponent } from './chunk-5FWNEQNZ.js';
 import './chunk-ZJSNLVCE.js';
-import { writeContextManifest, writePinIfChanged, touchLastCheck, clearDegraded, writeSourceCache, SOURCE_CACHE_TTL_SUCCESS_MS, writeBuildHold } from './chunk-WIOZAJ2W.js';
-import './chunk-WO2BXCTQ.js';
-import './chunk-EMY4I27X.js';
+import { writeContextManifest, writePinIfChanged, touchLastCheck, clearDegraded, writeSourceCache, SOURCE_CACHE_TTL_SUCCESS_MS, writeBuildHold } from './chunk-ZZXLM64C.js';
+import './chunk-VXLJORHL.js';
+import './chunk-7ZR5UPMB.js';
 import './chunk-BCLJSQCV.js';
 import './chunk-BOLTI6LR.js';
+import './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
 import './chunk-M5POMKKW.js';

package/dist/{context-materialize-3HLPZAF6.js → context-materialize-QL33HDJN.js}

@@ -1,12 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { defaultGitRunner, hasSymlinkComponent, materializeContext, parseOwnerRepo, parseRemoteHost, resolveGitCommonDir } from './chunk-OIRNH6UO.js';
+export { defaultGitRunner, hasSymlinkComponent, materializeContext, parseOwnerRepo, parseRemoteHost, resolveGitCommonDir } from './chunk-5FWNEQNZ.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-WIOZAJ2W.js';
-import './chunk-WO2BXCTQ.js';
-import './chunk-EMY4I27X.js';
+import './chunk-ZZXLM64C.js';
+import './chunk-VXLJORHL.js';
+import './chunk-7ZR5UPMB.js';
 import './chunk-BCLJSQCV.js';
 import './chunk-BOLTI6LR.js';
+import './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
 import './chunk-M5POMKKW.js';

package/dist/{dist-RDLP4GGJ.js → dist-PXBSA7QX.js}

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { CaptureDaemon, PRICE_TABLE_SOURCE, SECRET_PATTERNS, SOURCE_ADAPTERS, SUPPORTED_VERSIONS, StatuslineAggregator, WARNING_CODES, claudeCodeAdapter, codexAdapter, codexSessionIdFromPath, compareVersions, completePrefix, computeStatuslineState, costOfUsage, cursorAdapter, cursorChatIdFromPath, defaultCodexSessionsDir, defaultCursorChatsDir, defaultCursorProjectsDir, defaultProjectsDir, defaultRawDir, enrichSessionRepo, findCodexRollouts, findCursorChats, findTranscripts, isNewerThanSupported, isPriceKnown, normalizeErrorSignature, normalizeRemote, parseCodexRollout, parseCursorChat, parseTranscript, readStatuslineState, readSyncWatermarkMs, remoteLookupFailed, resolvePrice, resolveRepoIdentity, rootChildIds, scanAll, scrubDeep, scrubText, sessionIdFromPath, setCustomScrubbers, setLocalIdentity, setRepoRoot, statuslineStatePath, tailTranscript, workspacesByHash, writeStatuslineState } from './chunk-ANK2B36Y.js';
+export { CaptureDaemon, PRICE_TABLE_SOURCE, SECRET_PATTERNS, SOURCE_ADAPTERS, SUPPORTED_VERSIONS, StatuslineAggregator, WARNING_CODES, claudeCodeAdapter, codexAdapter, codexSessionIdFromPath, compareVersions, completePrefix, computeStatuslineState, costOfUsage, cursorAdapter, cursorChatIdFromPath, defaultCodexSessionsDir, defaultCursorChatsDir, defaultCursorProjectsDir, defaultProjectsDir, defaultRawDir, enrichSessionRepo, findCodexRollouts, findCursorChats, findTranscripts, isNewerThanSupported, isPriceKnown, normalizeErrorSignature, normalizeRemote, parseCodexRollout, parseCursorChat, parseTranscript, readStatuslineState, readSyncWatermarkMs, remoteLookupFailed, resolvePrice, resolveRepoIdentity, rootChildIds, scanAll, scrubDeep, scrubText, sessionIdFromPath, setCustomScrubbers, setLocalIdentity, setRepoRoot, statuslineStatePath, tailTranscript, workspacesByHash, writeStatuslineState } from './chunk-D6FXM5OW.js';
+import './chunk-YNJEOGDL.js';
 import './chunk-Z5GEFMRW.js';
 
 createRequire(import.meta.url);

package/dist/{doctor-VOMYOHQU.js → doctor-FVDT3KJZ.js}

@@ -1,33 +1,40 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { needsClaudeCredential, claudeCredentialCheck, missingPermissionOf, missingPermissionFix } from './chunk-MXB5VB4Y.js';
+import { needsClaudeCredential, claudeCredentialCheck, missingPermissionOf, missingPermissionFix } from './chunk-6IYLDODX.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import './chunk-4NLKY4WR.js';
-import { detectMachine, supportsContainerBuilds, describeMachineDocker, reachDockerStep, supportsMicroVmBuilds, microVmArchSupported, microVmAssetsPinned } from './chunk-RBOMWNOG.js';
-import { MIN_ENGINE_MAJOR } from './chunk-RZSF5B46.js';
-import { CLAUDE_CODE_VERSION } from './chunk-Z62HNKEJ.js';
+import './chunk-6QWV3YDJ.js';
+import { detectMachine, supportsContainerBuilds, describeMachineDocker, reachDockerStep, supportsMicroVmBuilds, microVmArchSupported, microVmAssetsPinned } from './chunk-AQ54MKSQ.js';
+import { MIN_ENGINE_MAJOR } from './chunk-E4PIFIC3.js';
+import { CLAUDE_CODE_VERSION } from './chunk-CEBIA5FD.js';
 import './chunk-N5FOE5PS.js';
 import './chunk-OGFGZQA3.js';
 import { resolveDevcontainerCli } from './chunk-774HEQL6.js';
 import { locateRecipe, assertBuildable, readRecipe, RecipeError } from './chunk-QOZKPLVJ.js';
-import './chunk-W4SQCOZU.js';
-import './chunk-B2G7JHHB.js';
-import { getJson, WorkCommandError, signatureRefusalMessage } from './chunk-BNMCXPG7.js';
+import './chunk-ZOAEPWGL.js';
+import './chunk-R7STSBLC.js';
+import { getJson, WorkCommandError, signatureRefusalMessage } from './chunk-DGAIVMMN.js';
+import './chunk-PUN7LMNS.js';
 import './chunk-BFESLKPP.js';
-import './chunk-3DEVYTNQ.js';
-import { compareVersions } from './chunk-ANK2B36Y.js';
-import { builtinKind } from './chunk-3DD6AOWC.js';
+import './chunk-SSU747O6.js';
+import './chunk-ZYHKJKSU.js';
+import { compareVersions } from './chunk-D6FXM5OW.js';
+import './chunk-USO2DKBD.js';
+import './chunk-N6LURUEF.js';
+import './chunk-YRYMNBGQ.js';
+import { builtinKind } from './chunk-DTXOJDEH.js';
 import { parseSize } from './chunk-F6GFZXZ3.js';
-import './chunk-AUFG23AA.js';
+import './chunk-OD2VTIHN.js';
+import './chunk-HKMPVPO7.js';
 import './chunk-WZBHBH3J.js';
-import { defaultGitRunner } from './chunk-OIRNH6UO.js';
+import { defaultGitRunner } from './chunk-5FWNEQNZ.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-WIOZAJ2W.js';
-import './chunk-WO2BXCTQ.js';
-import './chunk-EMY4I27X.js';
+import './chunk-ZZXLM64C.js';
+import './chunk-VXLJORHL.js';
+import './chunk-7ZR5UPMB.js';
 import { defaultFetch } from './chunk-BCLJSQCV.js';
 import './chunk-BOLTI6LR.js';
+import './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
 import { loadHostKey } from './chunk-M5POMKKW.js';

package/dist/{emit-artifact-cmd-TBF46VXZ.js → emit-artifact-cmd-7RPMRSVP.js}

@@ -1,13 +1,17 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { staleBuildRefusal, staleBuildWarning, detectCi } from './chunk-UMFWVGJO.js';
+import { staleBuildRefusal, staleBuildWarning, detectCi } from './chunk-6ZZHWY2Z.js';
 import { launchRefusalForSession } from './chunk-HHJDN6AU.js';
 import './chunk-TBT347UY.js';
 import './chunk-F7CU5ABH.js';
 import './chunk-BKO6JEZI.js';
+import { autoConnect } from './chunk-PUN7LMNS.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import { readEffectiveArtifactSpoolState, localArtifactIds, isArtifactTombstoned, artifactBlobsDir, appendArtifactRecord, artifactsSpoolPath, findPendingArtifactRecord, appendArtifactTombstone } from './chunk-3DEVYTNQ.js';
-import { ARTIFACT_MAX_CAPTION_LENGTH, ArtifactCriterionIdSchema, ARTIFACT_MAX_FILENAME_LENGTH, mediaTypeForArtifactPath, inferArtifactKind, resolveRepoIdentity, ARTIFACT_MAX_REPLACES_TARGETS, parseTestSelector, parseJunit, bindTests } from './chunk-ANK2B36Y.js';
+import './chunk-SSU747O6.js';
+import { readEffectiveArtifactSpoolState, localArtifactIds, isArtifactTombstoned, artifactBlobsDir, appendArtifactRecord, artifactsSpoolPath, findPendingArtifactRecord, appendArtifactTombstone } from './chunk-ZYHKJKSU.js';
+import { resolveRepoIdentity } from './chunk-D6FXM5OW.js';
+import './chunk-USO2DKBD.js';
+import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
 import './chunk-GQD22KKN.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
@@ -15,10 +19,11 @@ import './chunk-5QRP3MVS.js';
 import './chunk-ZJSNLVCE.js';
 import { defaultFetch } from './chunk-BCLJSQCV.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-BOLTI6LR.js';
+import { ARTIFACT_MAX_CAPTION_LENGTH, ArtifactCriterionIdSchema, ARTIFACT_MAX_FILENAME_LENGTH, mediaTypeForArtifactPath, inferArtifactKind, ARTIFACT_MAX_REPLACES_TARGETS, parseTestSelector, parseJunit, bindTests } from './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-M5POMKKW.js';
 import './chunk-ZM2IMMYN.js';
-import './chunk-FA2BOX4O.js';
+import './chunk-JPR2WHHF.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -319,6 +324,8 @@ async function runEmitArtifact(opts) {
       "nothing to attach this to \u2014 no recorded session, no PR, and no git repo. Run inside a recorded Claude Code session, from a git checkout, in CI with PR context, or pass --pr <number>."
     );
   }
+  const noFactory = await autoConnect({ ...opts, home, env });
+  if (noFactory !== void 0) throw new EmitArtifactError(noFactory);
   const resolved = resolveGatewayCredentials({ ...opts, home, env });
   if (!resolved.ok) throw new EmitArtifactError(resolved.message);
   const { url, credential: apiKey, appId } = resolved;

package/dist/{emit-cmd-DCERAU27.js → emit-cmd-2QRMYPYO.js}

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { EmitError, runEmit } from './chunk-H5NCNVDA.js';
-import './chunk-WO2BXCTQ.js';
-import './chunk-EMY4I27X.js';
+export { EmitError, runEmit } from './chunk-EV3M3EH7.js';
+import './chunk-VXLJORHL.js';
+import './chunk-7ZR5UPMB.js';
+import './chunk-YNJEOGDL.js';
 import './chunk-RA3O54FC.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{emit-criteria-cmd-3427XKFW.js → emit-criteria-cmd-MKI7WETO.js}

@@ -1,12 +1,19 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-HHJDN6AU.js';
+import { autoConnect } from './chunk-PUN7LMNS.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import { resolveRepoIdentity, CriteriaListSchema } from './chunk-ANK2B36Y.js';
+import './chunk-SSU747O6.js';
+import './chunk-ZYHKJKSU.js';
+import { resolveRepoIdentity } from './chunk-D6FXM5OW.js';
+import './chunk-USO2DKBD.js';
+import './chunk-N6LURUEF.js';
+import './chunk-YRYMNBGQ.js';
 import { launchedItemForSession } from './chunk-GQD22KKN.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { defaultFetch } from './chunk-BCLJSQCV.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-BOLTI6LR.js';
+import { CriteriaListSchema } from './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-M5POMKKW.js';
 import './chunk-ZM2IMMYN.js';
@@ -120,6 +127,8 @@ async function runEmitCriteria(opts) {
     nowMs: now().getTime()
   });
   const target = resolveTarget({ item: opts.item, sessionId, home });
+  const refusal = await autoConnect({ url: opts.url, apiKey: opts.apiKey, appId: opts.appId, cwd, home, env, fetchImpl: opts.fetchImpl });
+  if (refusal !== void 0) throw new EmitCriteriaError(refusal);
   const resolved = resolveGatewayCredentials({ url: opts.url, apiKey: opts.apiKey, appId: opts.appId, cwd, home, env });
   if (!resolved.ok) throw new EmitCriteriaError(resolved.message);
   const { url, credential: apiKey, appId } = resolved;

package/dist/{emit-finding-cmd-GSI75K36.js → emit-finding-cmd-RMLGZASB.js}

@@ -1,13 +1,20 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-HHJDN6AU.js';
+import { autoConnect } from './chunk-PUN7LMNS.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import { FindingBatchSchema, resolveRepoIdentity } from './chunk-ANK2B36Y.js';
+import './chunk-SSU747O6.js';
+import './chunk-ZYHKJKSU.js';
+import { resolveRepoIdentity } from './chunk-D6FXM5OW.js';
+import './chunk-USO2DKBD.js';
+import './chunk-N6LURUEF.js';
+import './chunk-YRYMNBGQ.js';
 import { launchedItemForSession } from './chunk-GQD22KKN.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { readLatestProvenanceForSession } from './chunk-ZJSNLVCE.js';
 import { defaultFetch } from './chunk-BCLJSQCV.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-BOLTI6LR.js';
+import { FindingBatchSchema } from './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-M5POMKKW.js';
 import './chunk-ZM2IMMYN.js';
@@ -117,6 +124,8 @@ function resolveUploadTarget(opts) {
   return { item: { number: launchedNumber }, sessionId };
 }
 async function upload(batch, target, opts) {
+  const refusal = await autoConnect(opts);
+  if (refusal !== void 0) throw new EmitFindingError(refusal);
   const resolved = resolveGatewayCredentials(opts);
   if (!resolved.ok) throw new EmitFindingError(resolved.message);
   const { url, credential: apiKey, appId } = resolved;
@@ -187,6 +196,7 @@ async function runEmitFinding(opts) {
     url: opts.url,
     apiKey: opts.apiKey,
     appId: opts.appId,
+    cwd,
     quiet: opts.quiet,
     home,
     env,
@@ -230,6 +240,7 @@ async function runEmitFindings(opts) {
     url: opts.url,
     apiKey: opts.apiKey,
     appId: opts.appId,
+    cwd,
     quiet: opts.quiet,
     home,
     env,

package/dist/{emit-result-cmd-3PRQKB55.js → emit-result-cmd-MTXAZ2GV.js}

@@ -1,13 +1,17 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectCi } from './chunk-UMFWVGJO.js';
+import { detectCi } from './chunk-6ZZHWY2Z.js';
 import { launchRefusalForSession } from './chunk-HHJDN6AU.js';
 import './chunk-TBT347UY.js';
 import './chunk-F7CU5ABH.js';
 import './chunk-BKO6JEZI.js';
+import { autoConnect } from './chunk-PUN7LMNS.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import './chunk-3DEVYTNQ.js';
-import { EmittedNameSchema, EMITTED_RESULT_MAX_LINK_LENGTH, EMITTED_RESULTS, EMITTED_RESULT_MAX_BODY_LENGTH, resolveRepoIdentity } from './chunk-ANK2B36Y.js';
+import './chunk-SSU747O6.js';
+import './chunk-ZYHKJKSU.js';
+import { resolveRepoIdentity } from './chunk-D6FXM5OW.js';
+import './chunk-USO2DKBD.js';
+import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
 import './chunk-GQD22KKN.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
@@ -15,10 +19,11 @@ import './chunk-5QRP3MVS.js';
 import './chunk-ZJSNLVCE.js';
 import { defaultFetch } from './chunk-BCLJSQCV.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-BOLTI6LR.js';
+import { EmittedNameSchema, EMITTED_RESULT_MAX_LINK_LENGTH, EMITTED_RESULTS, EMITTED_RESULT_MAX_BODY_LENGTH } from './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-M5POMKKW.js';
 import './chunk-ZM2IMMYN.js';
-import './chunk-FA2BOX4O.js';
+import './chunk-JPR2WHHF.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -127,14 +132,16 @@ async function runEmitResult(opts) {
     );
   }
   if (sessionId !== void 0) {
-    const refusal = launchRefusalForSession(sessionId, home);
-    if (refusal !== void 0) throw new EmitResultError(refusal);
+    const refusal2 = launchRefusalForSession(sessionId, home);
+    if (refusal2 !== void 0) throw new EmitResultError(refusal2);
   }
   if (item === void 0) {
     throw new EmitResultError(
       "nothing to attach this to \u2014 no work item. Pass --item <number>; a recorded session alone does not name one."
     );
   }
+  const refusal = await autoConnect({ ...opts, home, env });
+  if (refusal !== void 0) throw new EmitResultError(refusal);
   const resolved = resolveGatewayCredentials({ ...opts, home, env });
   if (!resolved.ok) throw new EmitResultError(resolved.message);
   const { url, credential: apiKey, appId } = resolved;

package/dist/{exec-client-4XGXV3XN.js → exec-client-NPYNUAF3.js}

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { CAPTURE_LIMIT_BYTES, ExecConnectionError, HANDSHAKE_TIMEOUT_MS, execCapture, runExec, runVmExec, vmExecArgs, waitForAgent } from './chunk-W4SQCOZU.js';
-import './chunk-B2G7JHHB.js';
-import './chunk-AUFG23AA.js';
+export { CAPTURE_LIMIT_BYTES, ExecConnectionError, HANDSHAKE_TIMEOUT_MS, execCapture, runExec, runVmExec, vmExecArgs, waitForAgent } from './chunk-ZOAEPWGL.js';
+import './chunk-R7STSBLC.js';
+import './chunk-OD2VTIHN.js';
+import './chunk-HKMPVPO7.js';
 import './chunk-Z5GEFMRW.js';
 
 createRequire(import.meta.url);

package/dist/{guest-init-GENRHNP7.js → guest-init-JWNNAH2H.js}

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DOCKERD_LOG, HELPER_PATH, realGuestHost, relayPortsFrom, runGuestInit } from './chunk-CBPPJSAR.js';
-import './chunk-B2G7JHHB.js';
-import './chunk-AUFG23AA.js';
+export { DOCKERD_LOG, HELPER_PATH, realGuestHost, relayPortsFrom, runGuestInit } from './chunk-WVGSB3Z2.js';
+import './chunk-R7STSBLC.js';
+import './chunk-OD2VTIHN.js';
+import './chunk-HKMPVPO7.js';
 import './chunk-Z5GEFMRW.js';
 
 createRequire(import.meta.url);

package/dist/{hook-fast-NJBBZQ5Q.js → hook-fast-XBOZ3N6L.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { AUTO_SYNC_DEBOUNCE_MS, WORK_LEASE_RENEW_DEBOUNCE_MS, WORK_LINK_RETRIES, contextPossiblyGoverned, handleWorkLaunch, handleWorkSessionEnd, hookFiredMarkerPath, logHookError, maybeAutoSync, maybeRenewWorkLease, recordLinkExitFailure, runHookFast, spoolDir } from './chunk-FA2BOX4O.js';
+export { AUTO_SYNC_DEBOUNCE_MS, WORK_LEASE_RENEW_DEBOUNCE_MS, WORK_LINK_RETRIES, contextPossiblyGoverned, handleWorkLaunch, handleWorkSessionEnd, hookFiredMarkerPath, logHookError, maybeAutoSync, maybeRenewWorkLease, recordLinkExitFailure, runHookFast, spoolDir } from './chunk-JPR2WHHF.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';

package/dist/{import-capture-cmd-AVZ4VIVJ.js → import-capture-cmd-T4556ELW.js}

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-WO2BXCTQ.js';
-import './chunk-EMY4I27X.js';
+import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-VXLJORHL.js';
+import './chunk-7ZR5UPMB.js';
+import './chunk-YNJEOGDL.js';
 import './chunk-RA3O54FC.js';
 import './chunk-Z5GEFMRW.js';
 import { statSync, existsSync, readFileSync, writeFileSync } from 'fs';

package/dist/{import-ruler-cmd-GUHL6IY5.js → import-ruler-cmd-SG3UVGI7.js}

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { normalizePath } from './chunk-EMY4I27X.js';
+import { normalizePath } from './chunk-7ZR5UPMB.js';
+import './chunk-YNJEOGDL.js';
 import './chunk-Z5GEFMRW.js';
 import { existsSync, readdirSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/index.js

@@ -6,7 +6,7 @@ createRequire(import.meta.url);
 // src/index.ts
 var argv = process.argv.slice(2);
 if (argv[0] === "hook") {
-  const { runHookFast } = await import('./hook-fast-NJBBZQ5Q.js');
+  const { runHookFast } = await import('./hook-fast-XBOZ3N6L.js');
   await runHookFast(argv[1]);
   process.exit(0);
 }
@@ -21,6 +21,6 @@ if (argv[0] === "statusline") {
   await runStatuslineFast(argv.slice(1));
   process.exit(0);
 }
-(await import('./hook-fast-NJBBZQ5Q.js')).recordLinkExitFailure(argv);
-var { runCli } = await import('./cli-7WCNPBYC.js');
+(await import('./hook-fast-XBOZ3N6L.js')).recordLinkExitFailure(argv);
+var { runCli } = await import('./cli-LEVCGAQV.js');
 await runCli(process.argv);

package/dist/{init-WVR4BZQ4.js → init-BACXESVV.js}

@@ -1,29 +1,36 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { PLACEHOLDER_MARKER, RunnerInitError, isPlaceholderCommand, readConfigObject, runRunnerInit } from './chunk-4NLKY4WR.js';
-import './chunk-RBOMWNOG.js';
-import './chunk-RZSF5B46.js';
-import './chunk-Z62HNKEJ.js';
+export { PLACEHOLDER_MARKER, RunnerInitError, isPlaceholderCommand, readConfigObject, runRunnerInit } from './chunk-6QWV3YDJ.js';
+import './chunk-AQ54MKSQ.js';
+import './chunk-E4PIFIC3.js';
+import './chunk-CEBIA5FD.js';
 import './chunk-N5FOE5PS.js';
 import './chunk-OGFGZQA3.js';
 import './chunk-774HEQL6.js';
 import './chunk-QOZKPLVJ.js';
-import './chunk-W4SQCOZU.js';
-import './chunk-B2G7JHHB.js';
-import './chunk-BNMCXPG7.js';
+import './chunk-ZOAEPWGL.js';
+import './chunk-R7STSBLC.js';
+import './chunk-DGAIVMMN.js';
+import './chunk-PUN7LMNS.js';
 import './chunk-BFESLKPP.js';
-import './chunk-3DEVYTNQ.js';
-import './chunk-ANK2B36Y.js';
+import './chunk-SSU747O6.js';
+import './chunk-ZYHKJKSU.js';
+import './chunk-D6FXM5OW.js';
+import './chunk-USO2DKBD.js';
+import './chunk-N6LURUEF.js';
+import './chunk-YRYMNBGQ.js';
 import './chunk-F6GFZXZ3.js';
-import './chunk-AUFG23AA.js';
+import './chunk-OD2VTIHN.js';
+import './chunk-HKMPVPO7.js';
 import './chunk-WZBHBH3J.js';
-import './chunk-OIRNH6UO.js';
+import './chunk-5FWNEQNZ.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-WIOZAJ2W.js';
-import './chunk-WO2BXCTQ.js';
-import './chunk-EMY4I27X.js';
+import './chunk-ZZXLM64C.js';
+import './chunk-VXLJORHL.js';
+import './chunk-7ZR5UPMB.js';
 import './chunk-BCLJSQCV.js';
 import './chunk-BOLTI6LR.js';
+import './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
 import './chunk-M5POMKKW.js';