@outerlayer/cli 0.6.0 → 0.8.0

package/dist/{command-ARFK3OYF.js → command-SY3SVLAI.js}

@@ -1,37 +1,48 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { runRunnerInstall } from './chunk-JWOQNNN2.js';
-import { execStartCommand } from './chunk-YYYXRJUW.js';
+import { runRunnerInstall, launcherSummary } from './chunk-OEK4JEB3.js';
 import { readJobFile } from './chunk-T6OIJQRT.js';
-import { installService, uninstallService, realTaskScheduler } from './chunk-NQXFAGHU.js';
+import './chunk-PTW6W5NR.js';
+import { currentLink, execStartCommand } from './chunk-TI7B7UEO.js';
+import { detectMachine } from './chunk-TUUMW4TC.js';
+import './chunk-CM5QTKM4.js';
+import { installService, uninstallService, realTaskScheduler } from './chunk-AX23QKHS.js';
 import './chunk-FBTE2A2X.js';
-import './chunk-OUUINEYB.js';
+import './chunk-JKIWMRFH.js';
+import { realLima } from './chunk-77MM5RYD.js';
 import { writeLaunchAgent, launchAgentPath } from './chunk-LF6MLJCY.js';
-import { detectMachine } from './chunk-RBOMWNOG.js';
-import './chunk-RZSF5B46.js';
-import './chunk-Z62HNKEJ.js';
+import './chunk-TTNFGMHO.js';
 import './chunk-N5FOE5PS.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-774HEQL6.js';
+import './chunk-U3GOI2B4.js';
 import './chunk-QOZKPLVJ.js';
-import './chunk-W4SQCOZU.js';
-import './chunk-B2G7JHHB.js';
-import './chunk-BNMCXPG7.js';
+import './chunk-5TNS3PL7.js';
+import './chunk-CX22S5BA.js';
+import './chunk-ZOAEPWGL.js';
+import './chunk-R7STSBLC.js';
+import './chunk-5QLNZGAQ.js';
+import './chunk-4ACZCY4I.js';
 import './chunk-BFESLKPP.js';
-import './chunk-3DEVYTNQ.js';
-import './chunk-ANK2B36Y.js';
-import { runnerVmOf, loadRunnerConfig } from './chunk-3DD6AOWC.js';
-import './chunk-F6GFZXZ3.js';
-import './chunk-AUFG23AA.js';
-import { realLima } from './chunk-77MM5RYD.js';
+import './chunk-ILEA3YHM.js';
+import './chunk-ZYHKJKSU.js';
+import './chunk-GAYWY4GI.js';
+import './chunk-USO2DKBD.js';
+import './chunk-N6LURUEF.js';
+import './chunk-YRYMNBGQ.js';
+import { runnerVmOf, loadRunnerConfig } from './chunk-PWBILI5P.js';
+import './chunk-UXYLWVTQ.js';
+import './chunk-7RQ73DLO.js';
+import './chunk-OD2VTIHN.js';
+import './chunk-HKMPVPO7.js';
 import './chunk-WZBHBH3J.js';
-import './chunk-OIRNH6UO.js';
+import './chunk-5FWNEQNZ.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-WIOZAJ2W.js';
-import './chunk-WO2BXCTQ.js';
-import './chunk-EMY4I27X.js';
+import './chunk-ZZXLM64C.js';
+import './chunk-VXLJORHL.js';
+import './chunk-7ZR5UPMB.js';
 import './chunk-BCLJSQCV.js';
 import './chunk-BOLTI6LR.js';
+import './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
 import './chunk-M5POMKKW.js';
@@ -41,9 +52,9 @@ import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';
 import { userInfo, totalmem } from 'os';
+import { join } from 'path';
 import { rmSync, existsSync, readdirSync, readFileSync } from 'fs';
 import { spawnSync } from 'child_process';
-import { join } from 'path';
 
 createRequire(import.meta.url);
 async function serviceInVm(lima, instance, action, options) {
@@ -114,11 +125,22 @@ function realServiceDeps() {
     systemd: realSystemd(),
     ...platform === "wsl2" ? { tasks: realTaskScheduler(), wslConf: realWslConf(), distro: process.env.WSL_DISTRO_NAME } : {},
     usableMemoryBytes: totalmem(),
-    buildsRunning: buildsRunningIn
+    buildsRunning: buildsRunningIn,
+    // Asked as the account, through sudo, which the unit's own install needs anyway.
+    accountCan: (account, flag, path) => spawnSync("sudo", ["-n", "-u", account, "test", flag, path], { stdio: "ignore" }).status === 0
   };
 }
 
 // src/runner/service/command.ts
+function accountCannotStart(account, nodePath, entry, can) {
+  if (!can(account, "-x", nodePath)) {
+    return `\u2717 the service would run as ${account}, which cannot execute ${nodePath}, the Node this install runs on. Nothing is set up: run the install as ${account} with a Node it can execute, or install Node where ${account} can reach it`;
+  }
+  if (!can(account, "-r", entry)) {
+    return `\u2717 the service would run as ${account}, which cannot read ${entry}. Nothing is set up: put the runner's config where ${account} can read it, or run the install as ${account}`;
+  }
+  return void 0;
+}
 function vmArgs(input) {
   return [...input.print === true ? ["--print"] : [], ...input.replace === true ? ["--replace"] : [], ...input.user === void 0 ? [] : ["--user", input.user], ...input.unitName === void 0 ? [] : ["--unit-name", input.unitName]];
 }
@@ -129,8 +151,26 @@ async function installServiceCommand(input, deps = {}) {
     return { ok: result.ok, state: "vm", lines: result.lines };
   }
   const config = loadRunnerConfig(input.configPath);
+  let launcherLines = [];
+  let launcherNotes = [];
   if (input.print !== true && input.layoutInstalled !== true) {
-    runRunnerInstall({ configPath: input.configPath, entryPath: input.entryPath, nodePath: input.nodePath });
+    const installed = runRunnerInstall({
+      configPath: input.configPath,
+      entryPath: input.entryPath,
+      nodePath: input.nodePath,
+      home: input.home,
+      PATH: process.env.PATH,
+      replace: input.replace
+    });
+    launcherLines = [launcherSummary(installed.launcher)].filter((line) => line !== void 0);
+    launcherNotes = installed.launcher.notes;
+  }
+  const account = input.user ?? userInfo().username;
+  const serviceDeps = (deps.service ?? realServiceDeps)();
+  if (input.print !== true && account !== userInfo().username && serviceDeps.accountCan !== void 0) {
+    const entry = join(currentLink(input.configPath), "node_modules", "@outerlayer", "cli", "dist", "index.js");
+    const problem = accountCannotStart(account, input.nodePath, entry, serviceDeps.accountCan);
+    if (problem !== void 0) return { ok: false, state: "refused", lines: [problem] };
   }
   const outcome = installService(
     {
@@ -140,14 +180,14 @@ async function installServiceCommand(input, deps = {}) {
       buildMemory: config.build?.memory ?? "8g",
       timeLimitMinutes: config.timeLimitMinutes,
       execStart: execStartCommand(input.configPath, input.nodePath),
-      user: input.user ?? userInfo().username,
+      user: account,
       unitName: input.unitName,
       print: input.print,
       replace: input.replace
     },
-    (deps.service ?? realServiceDeps)()
+    serviceDeps
   );
-  return { ok: outcome.ok, state: outcome.state, lines: outcome.lines, unit: outcome.unit };
+  return { ok: outcome.ok, state: outcome.state, lines: [...outcome.lines, ...outcome.ok ? launcherLines : []], unit: outcome.unit, ...launcherNotes.length > 0 ? { notes: launcherNotes } : {} };
 }
 async function uninstallServiceCommand(input, deps = {}) {
   const vm = runnerVmOf(input.configPath);

package/dist/config-Z3USDBLU.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+export { DEFAULT_CHECK_TIME_LIMIT_MINUTES, RunnerConfigError, builtinKind, checkHooks, defaultRunnerConfigPath, hasRunnerBlock, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, loadRunnerConfig, resolveBuild, resolveHousekeeping, runnerVmOf } from './chunk-PWBILI5P.js';
+import './chunk-UXYLWVTQ.js';
+import './chunk-7RQ73DLO.js';
+import './chunk-OD2VTIHN.js';
+import './chunk-HKMPVPO7.js';
+import './chunk-VNVZDWO3.js';
+import './chunk-Z5GEFMRW.js';
+
+createRequire(import.meta.url);

package/dist/{connect-cmd-PCESZLTR.js → connect-cmd-PNZ6IJLJ.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { promptOnTerminal, realConnectDeps, runConnect, runConnectCommand } from './chunk-PMAMOSTP.js';
-import './chunk-7DBI6SNT.js';
-import './chunk-3DEVYTNQ.js';
-import './chunk-ANK2B36Y.js';
+export { connectedLine, fetchFactories, promptOnTerminal, realConnectDeps, runConnect, runConnectCommand, saveFactoryConnection, selectFactory } from './chunk-ILEA3YHM.js';
+import './chunk-ZYHKJKSU.js';
+import './chunk-GAYWY4GI.js';
 import './chunk-USO2DKBD.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
 import './chunk-BOLTI6LR.js';
+import './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';

package/dist/{context-adopt-G5JAELE7.js → context-adopt-CE4KDXS3.js}

@@ -1,12 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { defaultGitRunner, hasSymlinkComponent } from './chunk-OIRNH6UO.js';
+import { defaultGitRunner, hasSymlinkComponent } from './chunk-5FWNEQNZ.js';
 import './chunk-ZJSNLVCE.js';
-import { writeContextManifest, writePinIfChanged, touchLastCheck, clearDegraded, writeSourceCache, SOURCE_CACHE_TTL_SUCCESS_MS, writeBuildHold } from './chunk-WIOZAJ2W.js';
-import './chunk-WO2BXCTQ.js';
-import './chunk-EMY4I27X.js';
+import { writeContextManifest, writePinIfChanged, touchLastCheck, clearDegraded, writeSourceCache, SOURCE_CACHE_TTL_SUCCESS_MS, writeBuildHold } from './chunk-ZZXLM64C.js';
+import './chunk-VXLJORHL.js';
+import './chunk-7ZR5UPMB.js';
 import './chunk-BCLJSQCV.js';
 import './chunk-BOLTI6LR.js';
+import './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
 import './chunk-M5POMKKW.js';

package/dist/{context-materialize-3HLPZAF6.js → context-materialize-QL33HDJN.js}

@@ -1,12 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { defaultGitRunner, hasSymlinkComponent, materializeContext, parseOwnerRepo, parseRemoteHost, resolveGitCommonDir } from './chunk-OIRNH6UO.js';
+export { defaultGitRunner, hasSymlinkComponent, materializeContext, parseOwnerRepo, parseRemoteHost, resolveGitCommonDir } from './chunk-5FWNEQNZ.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-WIOZAJ2W.js';
-import './chunk-WO2BXCTQ.js';
-import './chunk-EMY4I27X.js';
+import './chunk-ZZXLM64C.js';
+import './chunk-VXLJORHL.js';
+import './chunk-7ZR5UPMB.js';
 import './chunk-BCLJSQCV.js';
 import './chunk-BOLTI6LR.js';
+import './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
 import './chunk-M5POMKKW.js';

package/dist/{dist-RDLP4GGJ.js → dist-3ZTZF2TP.js}

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { CaptureDaemon, PRICE_TABLE_SOURCE, SECRET_PATTERNS, SOURCE_ADAPTERS, SUPPORTED_VERSIONS, StatuslineAggregator, WARNING_CODES, claudeCodeAdapter, codexAdapter, codexSessionIdFromPath, compareVersions, completePrefix, computeStatuslineState, costOfUsage, cursorAdapter, cursorChatIdFromPath, defaultCodexSessionsDir, defaultCursorChatsDir, defaultCursorProjectsDir, defaultProjectsDir, defaultRawDir, enrichSessionRepo, findCodexRollouts, findCursorChats, findTranscripts, isNewerThanSupported, isPriceKnown, normalizeErrorSignature, normalizeRemote, parseCodexRollout, parseCursorChat, parseTranscript, readStatuslineState, readSyncWatermarkMs, remoteLookupFailed, resolvePrice, resolveRepoIdentity, rootChildIds, scanAll, scrubDeep, scrubText, sessionIdFromPath, setCustomScrubbers, setLocalIdentity, setRepoRoot, statuslineStatePath, tailTranscript, workspacesByHash, writeStatuslineState } from './chunk-ANK2B36Y.js';
+export { CaptureDaemon, PRICE_TABLE_SOURCE, SECRET_PATTERNS, SOURCE_ADAPTERS, SUPPORTED_VERSIONS, StatuslineAggregator, WARNING_CODES, claudeCodeAdapter, codexAdapter, codexSessionIdFromPath, compareVersions, completePrefix, computeStatuslineState, costOfUsage, cursorAdapter, cursorChatIdFromPath, defaultCodexSessionsDir, defaultCursorChatsDir, defaultCursorProjectsDir, defaultProjectsDir, defaultRawDir, enrichSessionRepo, findCodexRollouts, findCursorChats, findTranscripts, isNewerThanSupported, isPriceKnown, normalizeErrorSignature, normalizeRemote, parseCodexRollout, parseCursorChat, parseTranscript, readStatuslineState, readSyncWatermarkMs, remoteLookupFailed, resolvePrice, resolveRepoIdentity, rootChildIds, scanAll, scrubDeep, scrubText, sessionIdFromPath, setCustomScrubbers, setLocalIdentity, setRepoRoot, statuslineStatePath, tailTranscript, workspacesByHash, writeStatuslineState } from './chunk-GAYWY4GI.js';
+import './chunk-YNJEOGDL.js';
 import './chunk-Z5GEFMRW.js';
 
 createRequire(import.meta.url);

package/dist/docker-676FD3CQ.js

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+export { childEnvironment, createDockerHost, spawnRun } from './chunk-U3GOI2B4.js';
+import './chunk-QOZKPLVJ.js';
+import './chunk-5TNS3PL7.js';
+import './chunk-CX22S5BA.js';
+import './chunk-GAYWY4GI.js';
+import './chunk-7RQ73DLO.js';
+import './chunk-OD2VTIHN.js';
+import './chunk-HKMPVPO7.js';
+import './chunk-YNJEOGDL.js';
+import './chunk-ZM2IMMYN.js';
+import './chunk-Z5GEFMRW.js';
+
+createRequire(import.meta.url);

package/dist/{doctor-VOMYOHQU.js → doctor-WR6TRPSU.js}

@@ -1,40 +1,52 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { needsClaudeCredential, claudeCredentialCheck, missingPermissionOf, missingPermissionFix } from './chunk-MXB5VB4Y.js';
+import { needsClaudeCredential, claudeCredentialCheck, missingPermissionOf, missingPermissionFix } from './chunk-IRCBTGWF.js';
+import { launcherCheck } from './chunk-PTW6W5NR.js';
+import './chunk-TI7B7UEO.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import './chunk-4NLKY4WR.js';
-import { detectMachine, supportsContainerBuilds, describeMachineDocker, reachDockerStep, supportsMicroVmBuilds, microVmArchSupported, microVmAssetsPinned } from './chunk-RBOMWNOG.js';
-import { MIN_ENGINE_MAJOR } from './chunk-RZSF5B46.js';
-import { CLAUDE_CODE_VERSION } from './chunk-Z62HNKEJ.js';
+import './chunk-NALVDFIS.js';
+import { detectMachine, supportsContainerBuilds, describeMachineDocker, reachDockerStep, supportsMicroVmBuilds, microVmArchSupported, microVmAssetsPinned } from './chunk-TUUMW4TC.js';
+import { MIN_ENGINE_MAJOR } from './chunk-CM5QTKM4.js';
+import './chunk-TTNFGMHO.js';
 import './chunk-N5FOE5PS.js';
 import './chunk-OGFGZQA3.js';
-import { resolveDevcontainerCli } from './chunk-774HEQL6.js';
+import { resolveDevcontainerCli, spawnRun } from './chunk-U3GOI2B4.js';
 import { locateRecipe, assertBuildable, readRecipe, RecipeError } from './chunk-QOZKPLVJ.js';
-import './chunk-W4SQCOZU.js';
-import './chunk-B2G7JHHB.js';
-import { getJson, WorkCommandError, signatureRefusalMessage } from './chunk-BNMCXPG7.js';
+import { buildxState } from './chunk-5TNS3PL7.js';
+import { CLAUDE_CODE_VERSION } from './chunk-CX22S5BA.js';
+import './chunk-ZOAEPWGL.js';
+import './chunk-R7STSBLC.js';
+import { getJson, WorkCommandError, signatureRefusalMessage } from './chunk-5QLNZGAQ.js';
+import './chunk-4ACZCY4I.js';
 import './chunk-BFESLKPP.js';
-import './chunk-3DEVYTNQ.js';
-import { compareVersions } from './chunk-ANK2B36Y.js';
-import { builtinKind } from './chunk-3DD6AOWC.js';
-import { parseSize } from './chunk-F6GFZXZ3.js';
-import './chunk-AUFG23AA.js';
+import './chunk-ILEA3YHM.js';
+import './chunk-ZYHKJKSU.js';
+import { compareVersions } from './chunk-GAYWY4GI.js';
+import './chunk-USO2DKBD.js';
+import './chunk-N6LURUEF.js';
+import './chunk-YRYMNBGQ.js';
+import { builtinKind } from './chunk-PWBILI5P.js';
+import './chunk-UXYLWVTQ.js';
+import { parseSize } from './chunk-7RQ73DLO.js';
+import './chunk-OD2VTIHN.js';
+import './chunk-HKMPVPO7.js';
 import './chunk-WZBHBH3J.js';
-import { defaultGitRunner } from './chunk-OIRNH6UO.js';
+import { defaultGitRunner } from './chunk-5FWNEQNZ.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-WIOZAJ2W.js';
-import './chunk-WO2BXCTQ.js';
-import './chunk-EMY4I27X.js';
+import './chunk-ZZXLM64C.js';
+import './chunk-VXLJORHL.js';
+import './chunk-7ZR5UPMB.js';
 import { defaultFetch } from './chunk-BCLJSQCV.js';
 import './chunk-BOLTI6LR.js';
+import './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
 import { loadHostKey } from './chunk-M5POMKKW.js';
 import { runnerDir, hostKeyPath } from './chunk-ZM2IMMYN.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
-import './chunk-VNVZDWO3.js';
+import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';
 import { spawnSync } from 'child_process';
 import { existsSync, readdirSync, statSync } from 'fs';
@@ -410,6 +422,18 @@ async function controlPlaneAccessCheck(env, fetchImpl) {
     detail: readable.length > 0 ? `this host's git login reads ${[...new Set(readable)].join(", ")}` : repositories.length === 0 ? "the factory has no repositories this runner builds" : `no control plane governs ${repositories.length === 1 ? "the repository" : "any of the repositories"} ${listFactory ? "connected to the factory" : "in repos.include"}`
   };
 }
+function imageBuildLimitCheck(state, buildMemory) {
+  const name = "Image build limit";
+  if (state === "usable") {
+    return { name, status: "pass", detail: `image builds run in the runner's own builder${buildMemory === void 0 ? "" : `, limited to runner.build.memory (${buildMemory})`}` };
+  }
+  return {
+    name,
+    status: "fail",
+    detail: `image builds cannot be limited, so this runner claims nothing: ${state.problem}`,
+    fix: "install Docker's Buildx plugin: docker-buildx-plugin (Docker's apt repository) or docker-buildx (Ubuntu's own packages), then run outerlayer doctor again; the runner takes work again by itself"
+  };
+}
 function freeDiskCheck(configPath, minFreeDisk, freeBytes2) {
   const name = "Free disk";
   const free = freeBytes2(runnerDir(configPath));
@@ -422,9 +446,13 @@ function freeDiskCheck(configPath, minFreeDisk, freeBytes2) {
     fix: "free disk space on the runner's file system, or lower runner.housekeeping.minFreeDisk; the runner takes work again by itself once there is room"
   };
 }
+function launcherCheckOf(env) {
+  return launcherCheck({ home: env.home ?? homeFromEnv(), PATH: env.PATH ?? process.env.PATH });
+}
 async function runnerHostChecks(env) {
   const dockerAvailable = env.dockerAvailable ?? (() => spawnSync("docker", ["info"], { stdio: "ignore" }).status === 0);
   const devcontainerRunnable = env.devcontainerRunnable ?? (() => devcontainerCliRunnable());
+  const pathCheck = launcherCheckOf(env);
   const reposDir = join(runnerDir(env.configPath), "repos");
   const recipes = existsSync(reposDir) ? directories(reposDir).flatMap(
     (owner) => directories(join(reposDir, owner)).filter((name) => existsSync(join(reposDir, owner, name, ".git"))).map((name) => recipeCheck(reposDir, owner, name))
@@ -442,10 +470,12 @@ async function runnerHostChecks(env) {
       ...env.service === void 0 ? [] : [delegationCheck(env.service)],
       ...env.runner === void 0 ? [] : [memoryCheck({ concurrency: env.runner.concurrency, buildMemory: env.runner.buildMemory, hostMemory: env.hostMemory ?? totalmem() })]
     ] : [],
+    ...env.hooks !== void 0 && ["container", "vm"].includes(builtinKind(env.hooks.provision)) ? [imageBuildLimitCheck(await (env.buildx ?? (() => buildxState(spawnRun)))(), env.runner?.buildMemory)] : [],
     ...env.runner?.minFreeDisk === void 0 ? [] : [freeDiskCheck(env.configPath, env.runner.minFreeDisk, env.freeBytes ?? freeBytes)],
     ...env.hooks !== void 0 && needsClaudeCredential(env.hooks) ? [claudeCredentialCheck(env.env ?? process.env, env.service === void 0 ? { shell: true } : { service: { unit: env.service.unit, variables: env.service.credentialVariables } })] : [],
     ...env.gateway === void 0 ? [] : [await hostKeyBindingCheck(env.configPath, env.gateway, env.fetchImpl ?? defaultFetch)],
     ...env.gateway === void 0 || env.hooks === void 0 || !["container", "vm"].includes(builtinKind(env.hooks.provision)) ? [] : [await controlPlaneAccessCheck({ ...env, gateway: env.gateway }, env.fetchImpl ?? defaultFetch)],
+    ...pathCheck === void 0 ? [] : [pathCheck],
     devcontainerRunnable() ? { name: "Devcontainer CLI", status: "pass", detail: "installed beside the outerlayer CLI" } : {
       name: "Devcontainer CLI",
       status: "fail",

package/dist/{emit-artifact-cmd-TBF46VXZ.js → emit-artifact-cmd-AVM4YXMQ.js}

@@ -1,13 +1,17 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { staleBuildRefusal, staleBuildWarning, detectCi } from './chunk-UMFWVGJO.js';
+import { staleBuildRefusal, staleBuildWarning, detectCi } from './chunk-AIL2R4SI.js';
 import { launchRefusalForSession } from './chunk-HHJDN6AU.js';
 import './chunk-TBT347UY.js';
 import './chunk-F7CU5ABH.js';
 import './chunk-BKO6JEZI.js';
+import { autoConnect } from './chunk-4ACZCY4I.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import { readEffectiveArtifactSpoolState, localArtifactIds, isArtifactTombstoned, artifactBlobsDir, appendArtifactRecord, artifactsSpoolPath, findPendingArtifactRecord, appendArtifactTombstone } from './chunk-3DEVYTNQ.js';
-import { ARTIFACT_MAX_CAPTION_LENGTH, ArtifactCriterionIdSchema, ARTIFACT_MAX_FILENAME_LENGTH, mediaTypeForArtifactPath, inferArtifactKind, resolveRepoIdentity, ARTIFACT_MAX_REPLACES_TARGETS, parseTestSelector, parseJunit, bindTests } from './chunk-ANK2B36Y.js';
+import './chunk-ILEA3YHM.js';
+import { readEffectiveArtifactSpoolState, localArtifactIds, isArtifactTombstoned, artifactBlobsDir, appendArtifactRecord, artifactsSpoolPath, findPendingArtifactRecord, appendArtifactTombstone } from './chunk-ZYHKJKSU.js';
+import { resolveRepoIdentity } from './chunk-GAYWY4GI.js';
+import './chunk-USO2DKBD.js';
+import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
 import './chunk-GQD22KKN.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
@@ -15,10 +19,11 @@ import './chunk-5QRP3MVS.js';
 import './chunk-ZJSNLVCE.js';
 import { defaultFetch } from './chunk-BCLJSQCV.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-BOLTI6LR.js';
+import { ARTIFACT_MAX_CAPTION_LENGTH, ArtifactCriterionIdSchema, ARTIFACT_MAX_FILENAME_LENGTH, mediaTypeForArtifactPath, inferArtifactKind, ARTIFACT_MAX_REPLACES_TARGETS, parseTestSelector, parseJunit, bindTests } from './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-M5POMKKW.js';
 import './chunk-ZM2IMMYN.js';
-import './chunk-FA2BOX4O.js';
+import './chunk-JPR2WHHF.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -319,6 +324,8 @@ async function runEmitArtifact(opts) {
       "nothing to attach this to \u2014 no recorded session, no PR, and no git repo. Run inside a recorded Claude Code session, from a git checkout, in CI with PR context, or pass --pr <number>."
     );
   }
+  const noFactory = await autoConnect({ ...opts, home, env });
+  if (noFactory !== void 0) throw new EmitArtifactError(noFactory);
   const resolved = resolveGatewayCredentials({ ...opts, home, env });
   if (!resolved.ok) throw new EmitArtifactError(resolved.message);
   const { url, credential: apiKey, appId } = resolved;

package/dist/{emit-cmd-DCERAU27.js → emit-cmd-2QRMYPYO.js}

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { EmitError, runEmit } from './chunk-H5NCNVDA.js';
-import './chunk-WO2BXCTQ.js';
-import './chunk-EMY4I27X.js';
+export { EmitError, runEmit } from './chunk-EV3M3EH7.js';
+import './chunk-VXLJORHL.js';
+import './chunk-7ZR5UPMB.js';
+import './chunk-YNJEOGDL.js';
 import './chunk-RA3O54FC.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{emit-criteria-cmd-3427XKFW.js → emit-criteria-cmd-LDBE4YDS.js}

@@ -1,12 +1,19 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-HHJDN6AU.js';
+import { autoConnect } from './chunk-4ACZCY4I.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import { resolveRepoIdentity, CriteriaListSchema } from './chunk-ANK2B36Y.js';
+import './chunk-ILEA3YHM.js';
+import './chunk-ZYHKJKSU.js';
+import { resolveRepoIdentity } from './chunk-GAYWY4GI.js';
+import './chunk-USO2DKBD.js';
+import './chunk-N6LURUEF.js';
+import './chunk-YRYMNBGQ.js';
 import { launchedItemForSession } from './chunk-GQD22KKN.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { defaultFetch } from './chunk-BCLJSQCV.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-BOLTI6LR.js';
+import { CriteriaListSchema } from './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-M5POMKKW.js';
 import './chunk-ZM2IMMYN.js';
@@ -120,6 +127,8 @@ async function runEmitCriteria(opts) {
     nowMs: now().getTime()
   });
   const target = resolveTarget({ item: opts.item, sessionId, home });
+  const refusal = await autoConnect({ url: opts.url, apiKey: opts.apiKey, appId: opts.appId, cwd, home, env, fetchImpl: opts.fetchImpl });
+  if (refusal !== void 0) throw new EmitCriteriaError(refusal);
   const resolved = resolveGatewayCredentials({ url: opts.url, apiKey: opts.apiKey, appId: opts.appId, cwd, home, env });
   if (!resolved.ok) throw new EmitCriteriaError(resolved.message);
   const { url, credential: apiKey, appId } = resolved;

package/dist/{emit-finding-cmd-GSI75K36.js → emit-finding-cmd-6R5WBPCH.js}

@@ -1,13 +1,20 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-HHJDN6AU.js';
+import { autoConnect } from './chunk-4ACZCY4I.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import { FindingBatchSchema, resolveRepoIdentity } from './chunk-ANK2B36Y.js';
+import './chunk-ILEA3YHM.js';
+import './chunk-ZYHKJKSU.js';
+import { resolveRepoIdentity } from './chunk-GAYWY4GI.js';
+import './chunk-USO2DKBD.js';
+import './chunk-N6LURUEF.js';
+import './chunk-YRYMNBGQ.js';
 import { launchedItemForSession } from './chunk-GQD22KKN.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { readLatestProvenanceForSession } from './chunk-ZJSNLVCE.js';
 import { defaultFetch } from './chunk-BCLJSQCV.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-BOLTI6LR.js';
+import { FindingBatchSchema } from './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-M5POMKKW.js';
 import './chunk-ZM2IMMYN.js';
@@ -117,6 +124,8 @@ function resolveUploadTarget(opts) {
   return { item: { number: launchedNumber }, sessionId };
 }
 async function upload(batch, target, opts) {
+  const refusal = await autoConnect(opts);
+  if (refusal !== void 0) throw new EmitFindingError(refusal);
   const resolved = resolveGatewayCredentials(opts);
   if (!resolved.ok) throw new EmitFindingError(resolved.message);
   const { url, credential: apiKey, appId } = resolved;
@@ -187,6 +196,7 @@ async function runEmitFinding(opts) {
     url: opts.url,
     apiKey: opts.apiKey,
     appId: opts.appId,
+    cwd,
     quiet: opts.quiet,
     home,
     env,
@@ -230,6 +240,7 @@ async function runEmitFindings(opts) {
     url: opts.url,
     apiKey: opts.apiKey,
     appId: opts.appId,
+    cwd,
     quiet: opts.quiet,
     home,
     env,

package/dist/{emit-result-cmd-3PRQKB55.js → emit-result-cmd-2DMN6O6U.js}

@@ -1,13 +1,17 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectCi } from './chunk-UMFWVGJO.js';
+import { detectCi } from './chunk-AIL2R4SI.js';
 import { launchRefusalForSession } from './chunk-HHJDN6AU.js';
 import './chunk-TBT347UY.js';
 import './chunk-F7CU5ABH.js';
 import './chunk-BKO6JEZI.js';
+import { autoConnect } from './chunk-4ACZCY4I.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import './chunk-3DEVYTNQ.js';
-import { EmittedNameSchema, EMITTED_RESULT_MAX_LINK_LENGTH, EMITTED_RESULTS, EMITTED_RESULT_MAX_BODY_LENGTH, resolveRepoIdentity } from './chunk-ANK2B36Y.js';
+import './chunk-ILEA3YHM.js';
+import './chunk-ZYHKJKSU.js';
+import { resolveRepoIdentity } from './chunk-GAYWY4GI.js';
+import './chunk-USO2DKBD.js';
+import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
 import './chunk-GQD22KKN.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
@@ -15,10 +19,11 @@ import './chunk-5QRP3MVS.js';
 import './chunk-ZJSNLVCE.js';
 import { defaultFetch } from './chunk-BCLJSQCV.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-BOLTI6LR.js';
+import { EmittedNameSchema, EMITTED_RESULT_MAX_LINK_LENGTH, EMITTED_RESULTS, EMITTED_RESULT_MAX_BODY_LENGTH } from './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-M5POMKKW.js';
 import './chunk-ZM2IMMYN.js';
-import './chunk-FA2BOX4O.js';
+import './chunk-JPR2WHHF.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -127,14 +132,16 @@ async function runEmitResult(opts) {
     );
   }
   if (sessionId !== void 0) {
-    const refusal = launchRefusalForSession(sessionId, home);
-    if (refusal !== void 0) throw new EmitResultError(refusal);
+    const refusal2 = launchRefusalForSession(sessionId, home);
+    if (refusal2 !== void 0) throw new EmitResultError(refusal2);
   }
   if (item === void 0) {
     throw new EmitResultError(
       "nothing to attach this to \u2014 no work item. Pass --item <number>; a recorded session alone does not name one."
     );
   }
+  const refusal = await autoConnect({ ...opts, home, env });
+  if (refusal !== void 0) throw new EmitResultError(refusal);
   const resolved = resolveGatewayCredentials({ ...opts, home, env });
   if (!resolved.ok) throw new EmitResultError(resolved.message);
   const { url, credential: apiKey, appId } = resolved;

package/dist/{exec-client-4XGXV3XN.js → exec-client-NPYNUAF3.js}

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { CAPTURE_LIMIT_BYTES, ExecConnectionError, HANDSHAKE_TIMEOUT_MS, execCapture, runExec, runVmExec, vmExecArgs, waitForAgent } from './chunk-W4SQCOZU.js';
-import './chunk-B2G7JHHB.js';
-import './chunk-AUFG23AA.js';
+export { CAPTURE_LIMIT_BYTES, ExecConnectionError, HANDSHAKE_TIMEOUT_MS, execCapture, runExec, runVmExec, vmExecArgs, waitForAgent } from './chunk-ZOAEPWGL.js';
+import './chunk-R7STSBLC.js';
+import './chunk-OD2VTIHN.js';
+import './chunk-HKMPVPO7.js';
 import './chunk-Z5GEFMRW.js';
 
 createRequire(import.meta.url);

package/dist/{guest-init-GENRHNP7.js → guest-init-JWNNAH2H.js}

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DOCKERD_LOG, HELPER_PATH, realGuestHost, relayPortsFrom, runGuestInit } from './chunk-CBPPJSAR.js';
-import './chunk-B2G7JHHB.js';
-import './chunk-AUFG23AA.js';
+export { DOCKERD_LOG, HELPER_PATH, realGuestHost, relayPortsFrom, runGuestInit } from './chunk-WVGSB3Z2.js';
+import './chunk-R7STSBLC.js';
+import './chunk-OD2VTIHN.js';
+import './chunk-HKMPVPO7.js';
 import './chunk-Z5GEFMRW.js';
 
 createRequire(import.meta.url);

package/dist/{hook-fast-NJBBZQ5Q.js → hook-fast-XBOZ3N6L.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { AUTO_SYNC_DEBOUNCE_MS, WORK_LEASE_RENEW_DEBOUNCE_MS, WORK_LINK_RETRIES, contextPossiblyGoverned, handleWorkLaunch, handleWorkSessionEnd, hookFiredMarkerPath, logHookError, maybeAutoSync, maybeRenewWorkLease, recordLinkExitFailure, runHookFast, spoolDir } from './chunk-FA2BOX4O.js';
+export { AUTO_SYNC_DEBOUNCE_MS, WORK_LEASE_RENEW_DEBOUNCE_MS, WORK_LINK_RETRIES, contextPossiblyGoverned, handleWorkLaunch, handleWorkSessionEnd, hookFiredMarkerPath, logHookError, maybeAutoSync, maybeRenewWorkLease, recordLinkExitFailure, runHookFast, spoolDir } from './chunk-JPR2WHHF.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';

package/dist/{import-capture-cmd-AVZ4VIVJ.js → import-capture-cmd-T4556ELW.js}

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-WO2BXCTQ.js';
-import './chunk-EMY4I27X.js';
+import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-VXLJORHL.js';
+import './chunk-7ZR5UPMB.js';
+import './chunk-YNJEOGDL.js';
 import './chunk-RA3O54FC.js';
 import './chunk-Z5GEFMRW.js';
 import { statSync, existsSync, readFileSync, writeFileSync } from 'fs';

package/dist/{import-ruler-cmd-GUHL6IY5.js → import-ruler-cmd-SG3UVGI7.js}

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { normalizePath } from './chunk-EMY4I27X.js';
+import { normalizePath } from './chunk-7ZR5UPMB.js';
+import './chunk-YNJEOGDL.js';
 import './chunk-Z5GEFMRW.js';
 import { existsSync, readdirSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/index.js

@@ -6,7 +6,7 @@ createRequire(import.meta.url);
 // src/index.ts
 var argv = process.argv.slice(2);
 if (argv[0] === "hook") {
-  const { runHookFast } = await import('./hook-fast-NJBBZQ5Q.js');
+  const { runHookFast } = await import('./hook-fast-XBOZ3N6L.js');
   await runHookFast(argv[1]);
   process.exit(0);
 }
@@ -21,6 +21,6 @@ if (argv[0] === "statusline") {
   await runStatuslineFast(argv.slice(1));
   process.exit(0);
 }
-(await import('./hook-fast-NJBBZQ5Q.js')).recordLinkExitFailure(argv);
-var { runCli } = await import('./cli-7WCNPBYC.js');
+(await import('./hook-fast-XBOZ3N6L.js')).recordLinkExitFailure(argv);
+var { runCli } = await import('./cli-AOJPAVFX.js');
 await runCli(process.argv);