@outerlayer/cli 0.8.0 → 0.8.2

package/CHANGELOG.md

@@ -1,5 +1,35 @@
 # @outerlayer/cli
 
+## 0.8.2
+
+### Patch Changes
+
+- a90aed2: Name the right command or source in three messages. A missing credential now reads "a login or OUTERLAYER_API_KEY" instead of the deprecated `--api-key` flag. `work claim` and `work renew` help says the API key holds a lease, not the host. `import capture` tells you to run `outerlayer context emit`.
+- aa88449: `outerlayer doctor` on a runner host has a new "Build hosts" check. With `builtin:container` or `builtin:vm` hooks and no `runner.build.allowHosts`, it warns that a build can reach every public host. Its fix line lists the public hosts past builds reached, read from each job's tunnel record, ready to review and paste into `allowHosts`. With the list set, the check passes.
+- 6cb841e: A host check can now read the work item, the diff and the agent's sessions from the folder that `OUTERLAYER_EVAL_INPUT` names. The code that extracts commands from a session is now exported from `@outerlayer/context-format`.
+- 0ac3dfe: `outerlayer mcp install` writes its entry into `.outerlayer/mcp.json` when that file exists, so the next `outerlayer context emit` keeps it.
+- 91fcd91: A session's local cost estimate counts a negative, NaN or infinite token count as zero tokens, so a corrupt transcript can no longer give a negative or NaN cost.
+- 75423c1: The README's privacy section says what the runner heartbeat, the npm self-update and `emit artifact` send, and how `OUTERLAYER_TIER` and a factory key affect uploads.
+- 87c0cdc: `work claim`, `work renew` and `work release` describe the lease as held by the API key, not the host, which matches how the gateway decides. `work release` help also says a lease held by a different key is refused.
+- dca9a52: A runner build whose command exits 0 while its work item has no pull request is now released `incomplete`, not `ok`. The build skill's pull request step points to a new maintained file, `.outerlayer/skills/outerlayer/references/open-pull-request.md`. It tells a runner build to open its pull request with `outerlayer work open-pr`, and a local session to use `gh pr create` and `outerlayer work pr <number>`. Run `outerlayer context emit` to pick up the new copy.
+- 3b4943d: Upgrading a runner by hand no longer needs a root restart. After `outerlayer runner install` points `current` at a different version, a runner its service started through `current` takes no new work, waits for its running builds to finish, and exits so the service starts the new version. The new version runs its checks at its first start and goes back to the previous one if they fail, as a self-update does. `runner install` says this when it moves `current`. A runner started by hand with `outerlayer runner start` keeps running and logs that a restart picks the new version up.
+- 19e8d45: `outerlayer runner status --recent` marks an attempt whose claim someone else released first as "(already released)", not "(release failed)".
+- 92b9091: `outerlayer runner init --vm` now gives the Mac's Linux VM enough CPUs for every build to have whole cores of its own. Each container build is pinned to `runner.build.cpus` cores, rounded up. The VM gets that count times `concurrency`, plus one, still capped at the Mac's CPUs. With a fractional `runner.build.cpus`, the VM was sized from the rounded-up product instead, so builds running at once shared a core. For example, four builds of 2.5 CPUs now get a 13-CPU VM rather than 11.
+
+## 0.8.1
+
+### Patch Changes
+
+- 2bfa3a8: The `amend` skill now works in a build a runner started. It posts its closing report on the work item's general thread with `outerlayer work comment`, because a build's GitHub token cannot comment on the pull request. A local session posts the report there too, and still comments on the pull request. The SSH keep-alive advice for a dropped push now applies only to a local session pushing over SSH. Run `outerlayer context emit` to pick up the new copy.
+- d2ad3fc: A microVM build's root disk and build disk are made in containers held to `runner.build.memory`, with no swap, like the build's image builds. Docker runs those containers outside the runner's own cgroup, so nothing else limited them.
+- cf56a33: Three runner fixes:
+
+  - `outerlayer runner install` no longer moves a runner back to an older version. When the CLI you run is older than the version the runner updated itself to, the command refuses and names both versions. Run `~/.local/bin/outerlayer runner install` instead, which runs the newer version. Pass `--allow-downgrade` to install the older one on purpose. `runner install --service` and `runner init` refuse the same way.
+  - Housekeeping no longer logs an error when the runner's image builder has not started yet. It leaves the build cache for a later pass and logs that it did.
+  - A container build now sees only its own CPU cores: `runner.build.cpus`, rounded up. `nproc` inside the build reports that count, not the host's. Builds running at once get different cores while the host has enough. `runner.build.cpus` stays the limit.
+
+- 857e376: Update the bundled `structured-headers` library from 2.0.3 to 2.1.0. The runner uses it to sign its requests to the gateway; signed requests are unchanged.
+
 ## 0.8.0
 
 ### Minor Changes

package/README.md

@@ -40,7 +40,8 @@ and never upload.
 sessions.** It runs when you run it. The hooks also fire `outerlayer sync
 --quiet` in the background after each agent turn and when a session ends, at
 most once every five minutes, as soon as `outerlayer login` has saved
-credentials and `outerlayer connect` has chosen the repository's factory. So a launched session uploads while it is still running, not
+credentials and `outerlayer connect` has chosen the repository's factory,
+or a factory key is saved. So a launched session uploads while it is still running, not
 only once it is over. Set `"autoSync": false` in `~/.outerlayer/config.json`
 to leave every automatic upload — the background sync and the daemon's
 streaming below — to your own command.
@@ -99,6 +100,10 @@ content:
   the end of every poll: the host, the CLI version, the poll interval, the
   slots in use and total, and the result of that poll's own request for
   work — success, or the error code and message the platform returned.
+  After a self-update it adds the update's outcome. While the runner holds
+  off for want of disk it adds the free and needed bytes. While a check of
+  its own stops it claiming, it adds one sentence saying why, which can
+  include the host's usable memory and Docker's own error text, unscrubbed.
   When a build's command exits 0, it reads that work item once more, for its
   evidence verdict, before releasing it: it sends nothing but the request.
   Just before that read, the runner runs the repository's host checks. A host
@@ -107,6 +112,13 @@ content:
   command in a new container, and sends one `POST /v1/emitted-results` for
   each: the check's name, pass or fail, and for a fail the exit status and the
   last line of its output, scrubbed.
+  Before each check's command runs, the runner writes a read-only folder for it
+  to read: the work item, from `GET /v1/work-items/{id}` with the runner's own
+  key; the branch's diff, from `git fetch` of the build's commits with the
+  host's own git credentials; and the build's sessions, copied out of the
+  build's own container or microVM and scrubbed of every key the runner holds.
+  The check's environment holds no key and nothing in that folder leaves the
+  host.
   Before a build's command starts, the runner also runs `git ls-remote` and
   `git fetch` in the job's workdir, with the host's own git credentials, to
   put it on the branch the claim named. Nothing about the job leaves the host
@@ -116,9 +128,11 @@ content:
   (`registry.npmjs.org`) for `@outerlayer/cli` only: that version's metadata
   at once, and once no build is in flight, its tarball and its provenance
   attestation, plus an `npm install` and an `npm audit signatures` run
-  against that same registry. The calls carry no credentials and nothing
-  about the host or the factory. Set `runner.autoUpdate` to `false` to stop
-  them.
+  against that same registry. The runner's own requests carry no
+  credentials and nothing about the host or the factory. `npm install` also
+  fetches the package's dependencies, and both npm runs use this user's npm
+  configuration, including any registry token in `~/.npmrc`. Set
+  `runner.autoUpdate` to `false` to stop them.
   `runner check` makes a list call and a host-key lookup to confirm the key
   works and sends nothing else; `runner status` and `runner logs` make no network call at all.
   On a runner host, any command that uses the saved runner key signs each
@@ -142,7 +156,7 @@ content:
 - **`outerlayer work`** and **`outerlayer emit`**, in the subcommands named below, with a login and no saved
   connection for the repository send the same `GET /v1/me/factories?repository=<host/owner/name>`
   request before their own, to connect the repository when exactly one factory
-  fits. They send nothing extra with a factory key, `--app-id` or `OUTERLAYER_APP_ID`. The subcommands are `work build`, `list`, `status`, `remove` and `pr`, and `emit artifact`, `result`, `criteria`, `finding` and `findings`. Other `work` subcommands never connect.
+  fits. They send nothing extra with a factory key, `--app-id` or `OUTERLAYER_APP_ID`. The subcommands are `work build`, `list`, `status`, `remove` and `pr`, and `emit artifact`, `criteria`, `finding`, `findings` and `emit <name>`. Other `work` subcommands never connect.
 - **`outerlayer connect`**, and the first step of `outerlayer init`, send a
   request with your login's token: `GET /v1/me/factories?repository=<host/owner/name>`,
   naming this checkout's remote. The gateway answers with the factories you can
@@ -259,7 +273,10 @@ content:
   `git ls-remote` against that control plane with the host's own git
   credentials, to say whether the host can read it.
 - **`outerlayer emit artifact`** uploads the file you name — a screenshot, a
-  recording, a report, a log — along with its caption. With no recorded
+  recording, a report, a log — along with its caption, its name, type, size
+  and sha256, and the repository, branch, commit, pull request and CI run it
+  came from. The file is sent as it is: the secret scrub applies to session
+  content, not to files you emit. With no recorded
   session to attach it to, it uploads immediately, anchored to a pull request
   or to the git checkout.
 - **`outerlayer emit <name>`** sends one check's outcome for a work item.
@@ -316,8 +333,9 @@ before it gives up.
   `full`: message text, thinking, images, and tool input/output all ship.
   `--tier redacted` strips that content client-side, keeping only structure
   (repos, branches, file paths, tool names, error signatures) and metrics;
-  `--tier metrics` strips identifiers too (the server additionally clamps to
-  your org's configured ceiling — sending more than it allows stores less).
+  `--tier metrics` strips identifiers too. `OUTERLAYER_TIER` sets the tier
+  when `--tier` is absent. The server also clamps to your org's configured
+  ceiling: sending more than it allows stores less.
 - **`--dry-run` shows exactly what would leave** — per-session rows, image
   bytes, and the precise field classes stripped at the chosen tier. Add
   `--json` to inspect the literal request payloads. Zero network calls.
@@ -353,7 +371,7 @@ before it gives up.
 | `outerlayer work open-pr --title <text> --body-file <path> [--repo] [--session-id] [--json]` | Opens the pull request for the work item this session is on, or edits the one already open on its branch. A host build, which holds an item key, sends it to the gateway, which opens it as the factory's GitHub App from the branch the claim named; no `gh` command runs. Your own session runs `gh pr create` or `gh pr edit` under your login and then declares the pull request on the item. Run it again after changing the title or description. |
 | `outerlayer work claim --item <n>\|--issue <n> --kind implement\|amend [--repo] [--host] [--seconds]` | Records a lease for this host (default: its own hostname), so two hosts never build the same item at once. The lease belongs to the runner key that claimed it: a live lease held by a different key is refused, even under the same host name, and claiming again with the same key extends it. The first claim creates the host key (`host-key.pem` beside the config file) and binds the runner key to it; from then on every request made with that key is signed. Lease length defaults to 900 seconds, the server's own cap. |
 | `outerlayer work renew --item <n>\|--issue <n> [--repo] [--host] [--seconds]` | Extends this host's own live lease. Refused if the lease has expired, or if a different runner key holds it (403 `claim_not_held`). |
-| `outerlayer work release --item <n>\|--issue <n> [--repo] [--host] [--outcome]` | Marks this host's lease released, optionally recording how the attempt ended. Releasing an already-released lease is a no-op that returns the recorded release time and outcome. |
+| `outerlayer work release --item <n>\|--issue <n> [--repo] [--host] [--outcome]` | Marks the lease this API key holds released, optionally recording how the attempt ended. Releasing an already-released lease is a no-op that returns the recorded release time and outcome. |
 | `outerlayer runner init [--vm\|--no-vm] [--config <path>]` | Writes a `runner` block with defaults, keeping every key the config already had. It names `builtin:vm` on a Linux machine where the user can use `/dev/kvm` and Docker Engine can build images once the guest kernel and helper are published (not yet), `builtin:container` on that machine until then, `builtin:container` on any other machine with Docker Engine, and `builtin:process` on one without, and writes no hook script. Refuses rather than overwriting an existing block. On macOS it asks whether to create a Linux VM with Lima, installs Docker Engine and the runner in it, and starts both at login; `--vm` answers yes and `--no-vm` answers no, and a run with no terminal answers no. The runner key and the host key then live only in the VM: the Mac's config loses `apiKey` and `runner` and gains a `runnerVm` note, which `outerlayer doctor` reads. |
 | `outerlayer runner check [--config <path>]` | Validates the config, the hooks and the key, prints the settings the runner would use, and exits non-zero on a problem. Takes no work and writes no pid file. |
 | `outerlayer runner start [--config <path>]` | Runs the loop: claim work, run it, sync, clean up, report, release with an outcome. Repeat. Reads the `runner` block from the config file (default `~/.outerlayer/config.json`). Refuses to start on a bad config, an unrunnable hook, or a refused key. |

package/dist/{agent-setup-C7PLRXZO.js → agent-setup-C5X4356W.js}

@@ -1,20 +1,20 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { addStdioMcpEntryIfAbsent } from './chunk-MQ3IPHIZ.js';
-import { installStarterPack } from './chunk-M3SQ4YGD.js';
-import { runEmit } from './chunk-EV3M3EH7.js';
+import { addStdioMcpEntryIfAbsent } from './chunk-47RS42OZ.js';
+import { installStarterPack } from './chunk-GXSMDL4M.js';
+import { runEmit } from './chunk-G54QHBTI.js';
 import { C } from './chunk-YRYMNBGQ.js';
-import { resolveGitCommonDir, defaultGitRunner } from './chunk-5FWNEQNZ.js';
+import { resolveGitCommonDir, defaultGitRunner } from './chunk-NACLOOXP.js';
 import './chunk-ZJSNLVCE.js';
-import { pinExists, readContextManifest } from './chunk-ZZXLM64C.js';
-import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-VXLJORHL.js';
-import { generatedHeaderSource } from './chunk-7ZR5UPMB.js';
-import './chunk-BCLJSQCV.js';
-import './chunk-BOLTI6LR.js';
+import { pinExists, readContextManifest } from './chunk-ZJ3WRVRG.js';
+import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-JXH6LEEH.js';
+import { generatedHeaderSource } from './chunk-CMFCCIQN.js';
+import './chunk-YO4PSLVB.js';
+import './chunk-PLMTLGYH.js';
 import './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
-import './chunk-M5POMKKW.js';
+import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';

package/dist/{build-MS34XEGN.js → build-3FSJR5OO.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { buildRepositoryImage } from './chunk-TTNFGMHO.js';
+export { buildRepositoryImage } from './chunk-Y7UQHKFY.js';
 import './chunk-N5FOE5PS.js';
 export { RecipeError } from './chunk-QOZKPLVJ.js';
 import './chunk-CX22S5BA.js';

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-05T12:31:55.812Z+ff35a38","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-05T19:17:15.230Z+79d273b","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-G52A6GW2.js → builder-QZA2Z3M3.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-5TNS3PL7.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-CLURXEWV.js';
 import './chunk-CX22S5BA.js';
-import './chunk-GAYWY4GI.js';
+import './chunk-HN2JBGSI.js';
 import './chunk-7RQ73DLO.js';
-import './chunk-OD2VTIHN.js';
+import './chunk-2FWL7CE2.js';
 import './chunk-HKMPVPO7.js';
 import './chunk-YNJEOGDL.js';
 import './chunk-ZM2IMMYN.js';

package/dist/{check-FOF3PUKI.js → check-HQHFAOXW.js}

@@ -1,64 +1,65 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-IJBVPLZZ.js';
-import './chunk-ABIWDUMS.js';
-import './chunk-7VNURP6M.js';
+import { probeCredentials } from './chunk-VUGDEUMM.js';
+import './chunk-IS4DIGBQ.js';
+import './chunk-I2UOAV7X.js';
+import './chunk-M2F2RAMK.js';
 import './chunk-T6OIJQRT.js';
 import './chunk-AIW6GLET.js';
 import './chunk-UGP76IZ5.js';
-import './chunk-3S4P55NE.js';
-import './chunk-WVGSB3Z2.js';
-import './chunk-AIL2R4SI.js';
+import './chunk-4ZZR5SKG.js';
+import './chunk-J5DPVNL3.js';
+import './chunk-YU4Z2O3W.js';
 import './chunk-HHJDN6AU.js';
-import { placeholderQueues, placeholderProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem } from './chunk-IRCBTGWF.js';
+import { placeholderQueues, placeholderProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem } from './chunk-QJPO42VI.js';
 import './chunk-TI7B7UEO.js';
 import './chunk-YYYRBYWG.js';
 import './chunk-TBT347UY.js';
-import './chunk-NALVDFIS.js';
-import './chunk-TUUMW4TC.js';
-import './chunk-CM5QTKM4.js';
+import './chunk-MJLUWGUD.js';
+import './chunk-LSPJHYHM.js';
+import './chunk-EQG7L6LM.js';
 import './chunk-JKIWMRFH.js';
-import './chunk-TTNFGMHO.js';
+import './chunk-Y7UQHKFY.js';
 import './chunk-N5FOE5PS.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-U3GOI2B4.js';
+import './chunk-NPBLDMSD.js';
 import './chunk-QOZKPLVJ.js';
-import './chunk-5TNS3PL7.js';
+import './chunk-CLURXEWV.js';
 import './chunk-CX22S5BA.js';
-import './chunk-ZOAEPWGL.js';
-import './chunk-R7STSBLC.js';
+import './chunk-HWMYGAKF.js';
+import './chunk-2E2MG3KW.js';
 import './chunk-F7CU5ABH.js';
 import './chunk-BKO6JEZI.js';
-import './chunk-5QLNZGAQ.js';
-import './chunk-4ACZCY4I.js';
+import './chunk-R5SPFO6F.js';
+import './chunk-WMPO3SKK.js';
 import './chunk-BFESLKPP.js';
-import './chunk-ILEA3YHM.js';
+import './chunk-EWBM2USM.js';
 import './chunk-ZYHKJKSU.js';
-import './chunk-GAYWY4GI.js';
+import './chunk-HN2JBGSI.js';
 import './chunk-USO2DKBD.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
-import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-PWBILI5P.js';
+import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-7KI224YS.js';
 import './chunk-UXYLWVTQ.js';
 import './chunk-7RQ73DLO.js';
-import './chunk-OD2VTIHN.js';
+import './chunk-2FWL7CE2.js';
 import './chunk-HKMPVPO7.js';
 import './chunk-GQD22KKN.js';
 import './chunk-WZBHBH3J.js';
 import './chunk-5QRP3MVS.js';
-import './chunk-5FWNEQNZ.js';
+import './chunk-NACLOOXP.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-ZZXLM64C.js';
-import './chunk-VXLJORHL.js';
-import './chunk-7ZR5UPMB.js';
-import './chunk-BCLJSQCV.js';
-import './chunk-BOLTI6LR.js';
+import './chunk-ZJ3WRVRG.js';
+import './chunk-JXH6LEEH.js';
+import './chunk-CMFCCIQN.js';
+import './chunk-YO4PSLVB.js';
+import './chunk-PLMTLGYH.js';
 import './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
-import './chunk-M5POMKKW.js';
+import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
-import './chunk-JPR2WHHF.js';
+import './chunk-KI7VPNKC.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';

package/dist/{chunk-R7STSBLC.js → chunk-2E2MG3KW.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RELAY_PORT, GATEWAY_SOCKET, GATEWAY_PORT, CLAUDE_SOCKET, CLAUDE_PORT, DESTINATION_BASE_PORT } from './chunk-OD2VTIHN.js';
+import { RELAY_PORT, GATEWAY_SOCKET, GATEWAY_PORT, CLAUDE_SOCKET, CLAUDE_PORT, DESTINATION_BASE_PORT } from './chunk-2FWL7CE2.js';
 import { symlinkSync, unlinkSync } from 'fs';
 import { join } from 'path';
 

package/dist/{chunk-OD2VTIHN.js → chunk-2FWL7CE2.js}

@@ -348,6 +348,7 @@ async function startBuildServices(input) {
 // src/runner/container/environment.ts
 var RELAY_PORT = 3128;
 var JOB_MOUNT = "/outerlayer/job";
+var EVAL_INPUT_DIR = `${JOB_MOUNT}/eval-input`;
 var CHECKOUT_DIR = "/build/work/checkout";
 var MAX_HOSTS = 200;
 function tokenVariables() {
@@ -464,7 +465,7 @@ function checkEnvironment(input) {
     builtIns: false
   });
   const withheld = /* @__PURE__ */ new Set(["OUTERLAYER_URL", "OUTERLAYER_API_KEY", ...CLAUDE_CREDENTIAL_VARIABLES]);
-  const literals = {};
+  const literals = { OUTERLAYER_EVAL_INPUT: EVAL_INPUT_DIR };
   for (const [name, value] of Object.entries(env.literals)) if (!withheld.has(name)) literals[name] = value;
   const passed = {};
   for (const [name, value] of Object.entries(env.passed)) if (!withheld.has(name)) passed[name] = value;
@@ -503,4 +504,4 @@ function withTunnelRecord(environment, record, onlyWhenUsed = false) {
   };
 }
 
-export { AGENT_CREDENTIAL_MISSING, BUILT_IN_NAMES, CHECKOUT_DIR, CLAUDE_CREDENTIAL_VARIABLES, CLAUDE_PORT, CLAUDE_SOCKET, DESTINATION_BASE_PORT, GATEWAY_PORT, GATEWAY_SOCKET, JOB_MOUNT, RELAY_PORT, buildEnvironment, builtInEnvironment, checkEnvironment, claudeCredential, containerLocalAddress, destinationEnvironment, headerVariables, isRefusedInConfig, isReservedVariable, parseIsolation, proxyEnvironment, resolveDestinations, sharedUserEnvironment, startBuildServices, withTunnelRecord };
+export { AGENT_CREDENTIAL_MISSING, BUILT_IN_NAMES, CHECKOUT_DIR, CLAUDE_CREDENTIAL_VARIABLES, CLAUDE_PORT, CLAUDE_SOCKET, DESTINATION_BASE_PORT, EVAL_INPUT_DIR, GATEWAY_PORT, GATEWAY_SOCKET, JOB_MOUNT, RELAY_PORT, buildEnvironment, builtInEnvironment, checkEnvironment, claudeCredential, containerLocalAddress, destinationEnvironment, headerVariables, isRefusedInConfig, isReservedVariable, parseIsolation, proxyEnvironment, resolveDestinations, sharedUserEnvironment, startBuildServices, withTunnelRecord };

package/dist/{chunk-K35RW5HP.js → chunk-33GOCSRO.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { autoConnect } from './chunk-4ACZCY4I.js';
+import { autoConnect } from './chunk-WMPO3SKK.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import { resolveRepoIdentity } from './chunk-GAYWY4GI.js';
+import { resolveRepoIdentity } from './chunk-HN2JBGSI.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
-import { defaultFetch } from './chunk-BCLJSQCV.js';
-import { unauthorizedMessage, resolveGatewayCredentials } from './chunk-BOLTI6LR.js';
+import { defaultFetch } from './chunk-YO4PSLVB.js';
+import { unauthorizedMessage, resolveGatewayCredentials } from './chunk-PLMTLGYH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 
 createRequire(import.meta.url);

package/dist/{chunk-4A5E2G4E.js → chunk-3J476JZC.js}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { readStatuslineState, STATE_FRESH_MS } from './chunk-F47JBIAW.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-5QLNZGAQ.js';
-import { isLinkedRepository } from './chunk-ILEA3YHM.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-R5SPFO6F.js';
+import { isLinkedRepository } from './chunk-EWBM2USM.js';
 import { sanitizeTerminal } from './chunk-ZYHKJKSU.js';
-import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-GAYWY4GI.js';
+import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-HN2JBGSI.js';
 import { C } from './chunk-YRYMNBGQ.js';
 import { readSettings, settingsPath, isOurStatuslineSlot, statuslineWrappedOriginal, REGISTERED_EVENTS, isOurHookCommand, ourCommandBins, cliBinResolvable, ourDirectScriptBins, wrappedOriginalCommand } from './chunk-5QRP3MVS.js';
-import { readPin, readContextManifest, readDegraded, readSourceCache } from './chunk-ZZXLM64C.js';
-import { defaultFetch } from './chunk-BCLJSQCV.js';
-import { resolveGatewayCredentials } from './chunk-BOLTI6LR.js';
+import { readPin, readContextManifest, readDegraded, readSourceCache } from './chunk-ZJ3WRVRG.js';
+import { defaultFetch } from './chunk-YO4PSLVB.js';
+import { resolveGatewayCredentials } from './chunk-PLMTLGYH.js';
 import { readCloudConfig } from './chunk-EABW6AJQ.js';
-import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-JPR2WHHF.js';
+import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-KI7VPNKC.js';
 import { deadHooksState, preparePackageManagerCommand, contextExcludesPresent } from './chunk-XCCLFVXM.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -1004,7 +1004,7 @@ function doctorExitCode(checks) {
 
 // src/doctor-report.ts
 async function gatherDoctorChecks() {
-  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-Z3USDBLU.js');
+  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-OOBPCY7Q.js');
   const configPath = defaultRunnerConfigPath();
   const checks = runDoctor({ runnerHost: hasRunnerBlock(configPath) });
   const credential = await credentialChecks();
@@ -1016,7 +1016,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-WR6TRPSU.js');
+    const { runnerHostChecks } = await import('./doctor-PKT42NOJ.js');
     const hooks = (() => {
       try {
         return loadRunnerConfig(configPath).hooks;
@@ -1042,7 +1042,7 @@ async function gatherDoctorChecks() {
     const runner = (() => {
       try {
         const { concurrency, build, housekeeping } = loadRunnerConfig(configPath);
-        return { concurrency, buildMemory: build?.memory ?? "8g", minFreeDisk: housekeeping?.minFreeDisk };
+        return { concurrency, buildMemory: build?.memory ?? "8g", minFreeDisk: housekeeping?.minFreeDisk, allowHosts: build?.allowHosts };
       } catch {
         return void 0;
       }
@@ -1051,7 +1051,7 @@ async function gatherDoctorChecks() {
       const { existsSync: existsSync2 } = await import('fs');
       if (process.platform !== "linux" || !existsSync2("/run/systemd/system")) return void 0;
       const { inspectService, realInspectProbes } = await import('./inspect-XAUSB7L3.js');
-      const { DEFAULT_UNIT_NAME } = await import('./install-FHTVJZS6.js');
+      const { DEFAULT_UNIT_NAME } = await import('./install-C33LT5KQ.js');
       const { dirname: dirname2 } = await import('path');
       return inspectService(DEFAULT_UNIT_NAME, dirname2(configPath), realInspectProbes());
     })();

package/dist/{chunk-MQ3IPHIZ.js → chunk-47RS42OZ.js}

@@ -2,7 +2,7 @@
 import { createRequire } from 'node:module';
 import { C } from './chunk-YRYMNBGQ.js';
 import { readCloudConfig } from './chunk-EABW6AJQ.js';
-import { existsSync, mkdirSync, writeFileSync, readFileSync } from 'fs';
+import { mkdirSync, writeFileSync, existsSync, readFileSync } from 'fs';
 import { join, dirname } from 'path';
 
 createRequire(import.meta.url);
@@ -44,8 +44,11 @@ function readMcpDoc(absPath, relPath) {
   }
   return doc;
 }
+function mcpTargetPath(repoRoot) {
+  return existsSync(join(repoRoot, ".outerlayer", "mcp.json")) ? ".outerlayer/mcp.json" : ".mcp.json";
+}
 function addStdioMcpEntryIfAbsent(repoRoot, name = "outerlayer") {
-  const relPath = existsSync(join(repoRoot, ".outerlayer", "mcp.json")) ? ".outerlayer/mcp.json" : ".mcp.json";
+  const relPath = mcpTargetPath(repoRoot);
   const absPath = join(repoRoot, relPath);
   const doc = readMcpDoc(absPath, relPath);
   const servers = doc.mcpServers;
@@ -66,7 +69,7 @@ function runMcpInstall(opts = {}) {
   const name = opts.name ?? "outerlayer";
   const transport = opts.transport ?? DEFAULT_MCP_TRANSPORT;
   const url = transport === "http" ? opts.url ?? defaultMcpUrl(opts.home) : opts.url ?? null;
-  const relPath = ".mcp.json";
+  const relPath = mcpTargetPath(cwd);
   const absPath = join(cwd, relPath);
   const doc = readMcpDoc(absPath, relPath);
   const existingServers = doc.mcpServers && typeof doc.mcpServers === "object" && !Array.isArray(doc.mcpServers) ? doc.mcpServers : {};

package/dist/{chunk-3S4P55NE.js → chunk-4ZZR5SKG.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LiveUploader } from './chunk-AIL2R4SI.js';
-import { CaptureDaemon } from './chunk-GAYWY4GI.js';
+import { LiveUploader } from './chunk-YU4Z2O3W.js';
+import { CaptureDaemon } from './chunk-HN2JBGSI.js';
 import { parseWorkItemEnv } from './chunk-GQD22KKN.js';
-import { spoolDir } from './chunk-JPR2WHHF.js';
+import { spoolDir } from './chunk-KI7VPNKC.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { mkdirSync, writeFileSync, rmSync } from 'fs';
 import { join } from 'path';

package/dist/{chunk-PWBILI5P.js → chunk-7KI224YS.js}

@@ -2,7 +2,7 @@
 import { createRequire } from 'node:module';
 import { MAX_ALLOW_HOSTS, allowHostProblem } from './chunk-UXYLWVTQ.js';
 import { parseSize } from './chunk-7RQ73DLO.js';
-import { isRefusedInConfig, resolveDestinations, isReservedVariable } from './chunk-OD2VTIHN.js';
+import { isRefusedInConfig, resolveDestinations, isReservedVariable } from './chunk-2FWL7CE2.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { existsSync, statSync, accessSync, constants, readFileSync } from 'fs';
 import { hostname } from 'os';

package/dist/{chunk-5TNS3PL7.js → chunk-CLURXEWV.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { BUILDKIT_IMAGE } from './chunk-CX22S5BA.js';
-import { compareVersions } from './chunk-GAYWY4GI.js';
+import { compareVersions } from './chunk-HN2JBGSI.js';
 import { parseSize } from './chunk-7RQ73DLO.js';
-import { JOB_MOUNT, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_PORT, CLAUDE_SOCKET, RELAY_PORT, DESTINATION_BASE_PORT } from './chunk-OD2VTIHN.js';
+import { JOB_MOUNT, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_PORT, CLAUDE_SOCKET, RELAY_PORT, DESTINATION_BASE_PORT } from './chunk-2FWL7CE2.js';
 import { runnerDir } from './chunk-ZM2IMMYN.js';
 import { createHash } from 'crypto';
 import { realpathSync } from 'fs';
@@ -27,7 +27,7 @@ function runnerLabelValue(configPath) {
   return createHash("sha256").update(resolvedRunnerDir(configPath)).digest("hex").slice(0, 12);
 }
 function hardened(input) {
-  const { memory, cpus, pids } = input.limits;
+  const { memory, cpus, pids, cpuset } = input.limits;
   return [
     "--label",
     `${BUILD_LABEL}=${input.buildId}`,
@@ -49,6 +49,7 @@ function hardened(input) {
     memory,
     "--cpus",
     String(cpus),
+    ...cpuset === void 0 ? [] : ["--cpuset-cpus", cpuset],
     "--pids-limit",
     String(pids)
   ];