@outerlayer/cli 0.8.0 → 0.8.2

package/dist/{command-SY3SVLAI.js → command-LIHTWJHQ.js}

@@ -1,51 +1,52 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { runRunnerInstall, launcherSummary } from './chunk-OEK4JEB3.js';
+import { runRunnerInstall, launcherSummary, restartNote } from './chunk-ERI5GBNI.js';
+import './chunk-I2UOAV7X.js';
 import { readJobFile } from './chunk-T6OIJQRT.js';
 import './chunk-PTW6W5NR.js';
 import { currentLink, execStartCommand } from './chunk-TI7B7UEO.js';
-import { detectMachine } from './chunk-TUUMW4TC.js';
-import './chunk-CM5QTKM4.js';
-import { installService, uninstallService, realTaskScheduler } from './chunk-AX23QKHS.js';
+import { detectMachine } from './chunk-LSPJHYHM.js';
+import './chunk-EQG7L6LM.js';
+import { installService, uninstallService, realTaskScheduler } from './chunk-CRLAB4PM.js';
 import './chunk-FBTE2A2X.js';
 import './chunk-JKIWMRFH.js';
 import { realLima } from './chunk-77MM5RYD.js';
 import { writeLaunchAgent, launchAgentPath } from './chunk-LF6MLJCY.js';
-import './chunk-TTNFGMHO.js';
+import './chunk-Y7UQHKFY.js';
 import './chunk-N5FOE5PS.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-U3GOI2B4.js';
+import './chunk-NPBLDMSD.js';
 import './chunk-QOZKPLVJ.js';
-import './chunk-5TNS3PL7.js';
+import './chunk-CLURXEWV.js';
 import './chunk-CX22S5BA.js';
-import './chunk-ZOAEPWGL.js';
-import './chunk-R7STSBLC.js';
-import './chunk-5QLNZGAQ.js';
-import './chunk-4ACZCY4I.js';
+import './chunk-HWMYGAKF.js';
+import './chunk-2E2MG3KW.js';
+import './chunk-R5SPFO6F.js';
+import './chunk-WMPO3SKK.js';
 import './chunk-BFESLKPP.js';
-import './chunk-ILEA3YHM.js';
+import './chunk-EWBM2USM.js';
 import './chunk-ZYHKJKSU.js';
-import './chunk-GAYWY4GI.js';
+import './chunk-HN2JBGSI.js';
 import './chunk-USO2DKBD.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
-import { runnerVmOf, loadRunnerConfig } from './chunk-PWBILI5P.js';
+import { runnerVmOf, loadRunnerConfig } from './chunk-7KI224YS.js';
 import './chunk-UXYLWVTQ.js';
 import './chunk-7RQ73DLO.js';
-import './chunk-OD2VTIHN.js';
+import './chunk-2FWL7CE2.js';
 import './chunk-HKMPVPO7.js';
 import './chunk-WZBHBH3J.js';
-import './chunk-5FWNEQNZ.js';
+import './chunk-NACLOOXP.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-ZZXLM64C.js';
-import './chunk-VXLJORHL.js';
-import './chunk-7ZR5UPMB.js';
-import './chunk-BCLJSQCV.js';
-import './chunk-BOLTI6LR.js';
+import './chunk-ZJ3WRVRG.js';
+import './chunk-JXH6LEEH.js';
+import './chunk-CMFCCIQN.js';
+import './chunk-YO4PSLVB.js';
+import './chunk-PLMTLGYH.js';
 import './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
-import './chunk-M5POMKKW.js';
+import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
@@ -142,7 +143,7 @@ function accountCannotStart(account, nodePath, entry, can) {
   return void 0;
 }
 function vmArgs(input) {
-  return [...input.print === true ? ["--print"] : [], ...input.replace === true ? ["--replace"] : [], ...input.user === void 0 ? [] : ["--user", input.user], ...input.unitName === void 0 ? [] : ["--unit-name", input.unitName]];
+  return [...input.print === true ? ["--print"] : [], ...input.replace === true ? ["--replace"] : [], ...input.allowDowngrade === true ? ["--allow-downgrade"] : [], ...input.user === void 0 ? [] : ["--user", input.user], ...input.unitName === void 0 ? [] : ["--unit-name", input.unitName]];
 }
 async function installServiceCommand(input, deps = {}) {
   const vm = runnerVmOf(input.configPath);
@@ -153,6 +154,7 @@ async function installServiceCommand(input, deps = {}) {
   const config = loadRunnerConfig(input.configPath);
   let launcherLines = [];
   let launcherNotes = [];
+  let restartLine;
   if (input.print !== true && input.layoutInstalled !== true) {
     const installed = runRunnerInstall({
       configPath: input.configPath,
@@ -160,10 +162,13 @@ async function installServiceCommand(input, deps = {}) {
       nodePath: input.nodePath,
       home: input.home,
       PATH: process.env.PATH,
-      replace: input.replace
+      replace: input.replace,
+      allowDowngrade: input.allowDowngrade,
+      command: "runner install --service"
     });
     launcherLines = [launcherSummary(installed.launcher)].filter((line) => line !== void 0);
     launcherNotes = installed.launcher.notes;
+    restartLine = restartNote(installed);
   }
   const account = input.user ?? userInfo().username;
   const serviceDeps = (deps.service ?? realServiceDeps)();
@@ -187,7 +192,8 @@ async function installServiceCommand(input, deps = {}) {
     },
     serviceDeps
   );
-  return { ok: outcome.ok, state: outcome.state, lines: [...outcome.lines, ...outcome.ok ? launcherLines : []], unit: outcome.unit, ...launcherNotes.length > 0 ? { notes: launcherNotes } : {} };
+  const restartLines = restartLine !== void 0 && (outcome.state === "current" || outcome.state === "pending-restart") ? [restartLine] : [];
+  return { ok: outcome.ok, state: outcome.state, lines: [...outcome.lines, ...outcome.ok ? [...restartLines, ...launcherLines] : []], unit: outcome.unit, ...launcherNotes.length > 0 ? { notes: launcherNotes } : {} };
 }
 async function uninstallServiceCommand(input, deps = {}) {
   const vm = runnerVmOf(input.configPath);

package/dist/{config-Z3USDBLU.js → config-OOBPCY7Q.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DEFAULT_CHECK_TIME_LIMIT_MINUTES, RunnerConfigError, builtinKind, checkHooks, defaultRunnerConfigPath, hasRunnerBlock, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, loadRunnerConfig, resolveBuild, resolveHousekeeping, runnerVmOf } from './chunk-PWBILI5P.js';
+export { DEFAULT_CHECK_TIME_LIMIT_MINUTES, RunnerConfigError, builtinKind, checkHooks, defaultRunnerConfigPath, hasRunnerBlock, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, loadRunnerConfig, resolveBuild, resolveHousekeeping, runnerVmOf } from './chunk-7KI224YS.js';
 import './chunk-UXYLWVTQ.js';
 import './chunk-7RQ73DLO.js';
-import './chunk-OD2VTIHN.js';
+import './chunk-2FWL7CE2.js';
 import './chunk-HKMPVPO7.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';

package/dist/{connect-cmd-PNZ6IJLJ.js → connect-cmd-NV7WVBY7.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { connectedLine, fetchFactories, promptOnTerminal, realConnectDeps, runConnect, runConnectCommand, saveFactoryConnection, selectFactory } from './chunk-ILEA3YHM.js';
+export { connectedLine, fetchFactories, promptOnTerminal, realConnectDeps, runConnect, runConnectCommand, saveFactoryConnection, selectFactory } from './chunk-EWBM2USM.js';
 import './chunk-ZYHKJKSU.js';
-import './chunk-GAYWY4GI.js';
+import './chunk-HN2JBGSI.js';
 import './chunk-USO2DKBD.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
-import './chunk-BOLTI6LR.js';
+import './chunk-PLMTLGYH.js';
 import './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-BJ3KTMDH.js';

package/dist/{context-adopt-CE4KDXS3.js → context-adopt-PPCNSN5D.js}

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { defaultGitRunner, hasSymlinkComponent } from './chunk-5FWNEQNZ.js';
+import { defaultGitRunner, hasSymlinkComponent } from './chunk-NACLOOXP.js';
 import './chunk-ZJSNLVCE.js';
-import { writeContextManifest, writePinIfChanged, touchLastCheck, clearDegraded, writeSourceCache, SOURCE_CACHE_TTL_SUCCESS_MS, writeBuildHold } from './chunk-ZZXLM64C.js';
-import './chunk-VXLJORHL.js';
-import './chunk-7ZR5UPMB.js';
-import './chunk-BCLJSQCV.js';
-import './chunk-BOLTI6LR.js';
+import { writeContextManifest, writePinIfChanged, touchLastCheck, clearDegraded, writeSourceCache, SOURCE_CACHE_TTL_SUCCESS_MS, writeBuildHold } from './chunk-ZJ3WRVRG.js';
+import './chunk-JXH6LEEH.js';
+import './chunk-CMFCCIQN.js';
+import './chunk-YO4PSLVB.js';
+import './chunk-PLMTLGYH.js';
 import './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
-import './chunk-M5POMKKW.js';
+import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
 import { ensureContextExcludes, installPreCommitGuardInGitDir } from './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';

package/dist/{context-materialize-QL33HDJN.js → context-materialize-YR3JQCUF.js}

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { defaultGitRunner, hasSymlinkComponent, materializeContext, parseOwnerRepo, parseRemoteHost, resolveGitCommonDir } from './chunk-5FWNEQNZ.js';
+export { defaultGitRunner, hasSymlinkComponent, materializeContext, parseOwnerRepo, parseRemoteHost, resolveGitCommonDir } from './chunk-NACLOOXP.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-ZZXLM64C.js';
-import './chunk-VXLJORHL.js';
-import './chunk-7ZR5UPMB.js';
-import './chunk-BCLJSQCV.js';
-import './chunk-BOLTI6LR.js';
+import './chunk-ZJ3WRVRG.js';
+import './chunk-JXH6LEEH.js';
+import './chunk-CMFCCIQN.js';
+import './chunk-YO4PSLVB.js';
+import './chunk-PLMTLGYH.js';
 import './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
-import './chunk-M5POMKKW.js';
+import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';

package/dist/{dist-3ZTZF2TP.js → dist-2LNAXGPZ.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { CaptureDaemon, PRICE_TABLE_SOURCE, SECRET_PATTERNS, SOURCE_ADAPTERS, SUPPORTED_VERSIONS, StatuslineAggregator, WARNING_CODES, claudeCodeAdapter, codexAdapter, codexSessionIdFromPath, compareVersions, completePrefix, computeStatuslineState, costOfUsage, cursorAdapter, cursorChatIdFromPath, defaultCodexSessionsDir, defaultCursorChatsDir, defaultCursorProjectsDir, defaultProjectsDir, defaultRawDir, enrichSessionRepo, findCodexRollouts, findCursorChats, findTranscripts, isNewerThanSupported, isPriceKnown, normalizeErrorSignature, normalizeRemote, parseCodexRollout, parseCursorChat, parseTranscript, readStatuslineState, readSyncWatermarkMs, remoteLookupFailed, resolvePrice, resolveRepoIdentity, rootChildIds, scanAll, scrubDeep, scrubText, sessionIdFromPath, setCustomScrubbers, setLocalIdentity, setRepoRoot, statuslineStatePath, tailTranscript, workspacesByHash, writeStatuslineState } from './chunk-GAYWY4GI.js';
+export { CaptureDaemon, PRICE_TABLE_SOURCE, SECRET_PATTERNS, SOURCE_ADAPTERS, SUPPORTED_VERSIONS, StatuslineAggregator, WARNING_CODES, claudeCodeAdapter, codexAdapter, codexSessionIdFromPath, compareVersions, completePrefix, computeStatuslineState, costOfUsage, cursorAdapter, cursorChatIdFromPath, defaultCodexSessionsDir, defaultCursorChatsDir, defaultCursorProjectsDir, defaultProjectsDir, defaultRawDir, enrichSessionRepo, findCodexRollouts, findCursorChats, findTranscripts, isNewerThanSupported, isPriceKnown, normalizeErrorSignature, normalizeRemote, parseCodexRollout, parseCursorChat, parseTranscript, readStatuslineState, readSyncWatermarkMs, remoteLookupFailed, resolvePrice, resolveRepoIdentity, rootChildIds, scanAll, scrubDeep, scrubText, sessionIdFromPath, setCustomScrubbers, setLocalIdentity, setRepoRoot, statuslineStatePath, tailTranscript, workspacesByHash, writeStatuslineState } from './chunk-HN2JBGSI.js';
 import './chunk-YNJEOGDL.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{docker-676FD3CQ.js → docker-RSALMGPL.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { childEnvironment, createDockerHost, spawnRun } from './chunk-U3GOI2B4.js';
+export { childEnvironment, createDockerHost, spawnRun } from './chunk-NPBLDMSD.js';
 import './chunk-QOZKPLVJ.js';
-import './chunk-5TNS3PL7.js';
+import './chunk-CLURXEWV.js';
 import './chunk-CX22S5BA.js';
-import './chunk-GAYWY4GI.js';
+import './chunk-HN2JBGSI.js';
 import './chunk-7RQ73DLO.js';
-import './chunk-OD2VTIHN.js';
+import './chunk-2FWL7CE2.js';
 import './chunk-HKMPVPO7.js';
 import './chunk-YNJEOGDL.js';
 import './chunk-ZM2IMMYN.js';

package/dist/{doctor-WR6TRPSU.js → doctor-PKT42NOJ.js}

@@ -1,55 +1,55 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { needsClaudeCredential, claudeCredentialCheck, missingPermissionOf, missingPermissionFix } from './chunk-IRCBTGWF.js';
+import { needsClaudeCredential, claudeCredentialCheck, missingPermissionOf, missingPermissionFix } from './chunk-QJPO42VI.js';
 import { launcherCheck } from './chunk-PTW6W5NR.js';
 import './chunk-TI7B7UEO.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import './chunk-NALVDFIS.js';
-import { detectMachine, supportsContainerBuilds, describeMachineDocker, reachDockerStep, supportsMicroVmBuilds, microVmArchSupported, microVmAssetsPinned } from './chunk-TUUMW4TC.js';
-import { MIN_ENGINE_MAJOR } from './chunk-CM5QTKM4.js';
-import './chunk-TTNFGMHO.js';
+import './chunk-MJLUWGUD.js';
+import { detectMachine, supportsContainerBuilds, describeMachineDocker, reachDockerStep, supportsMicroVmBuilds, microVmArchSupported, microVmAssetsPinned } from './chunk-LSPJHYHM.js';
+import { MIN_ENGINE_MAJOR } from './chunk-EQG7L6LM.js';
+import './chunk-Y7UQHKFY.js';
 import './chunk-N5FOE5PS.js';
 import './chunk-OGFGZQA3.js';
-import { resolveDevcontainerCli, spawnRun } from './chunk-U3GOI2B4.js';
+import { resolveDevcontainerCli, spawnRun } from './chunk-NPBLDMSD.js';
 import { locateRecipe, assertBuildable, readRecipe, RecipeError } from './chunk-QOZKPLVJ.js';
-import { buildxState } from './chunk-5TNS3PL7.js';
+import { buildxState } from './chunk-CLURXEWV.js';
 import { CLAUDE_CODE_VERSION } from './chunk-CX22S5BA.js';
-import './chunk-ZOAEPWGL.js';
-import './chunk-R7STSBLC.js';
-import { getJson, WorkCommandError, signatureRefusalMessage } from './chunk-5QLNZGAQ.js';
-import './chunk-4ACZCY4I.js';
+import './chunk-HWMYGAKF.js';
+import './chunk-2E2MG3KW.js';
+import { getJson, WorkCommandError, signatureRefusalMessage } from './chunk-R5SPFO6F.js';
+import './chunk-WMPO3SKK.js';
 import './chunk-BFESLKPP.js';
-import './chunk-ILEA3YHM.js';
+import './chunk-EWBM2USM.js';
 import './chunk-ZYHKJKSU.js';
-import { compareVersions } from './chunk-GAYWY4GI.js';
+import { compareVersions } from './chunk-HN2JBGSI.js';
 import './chunk-USO2DKBD.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
-import { builtinKind } from './chunk-PWBILI5P.js';
-import './chunk-UXYLWVTQ.js';
+import { builtinKind } from './chunk-7KI224YS.js';
+import { allowHostProblem, MAX_ALLOW_HOSTS } from './chunk-UXYLWVTQ.js';
 import { parseSize } from './chunk-7RQ73DLO.js';
-import './chunk-OD2VTIHN.js';
+import './chunk-2FWL7CE2.js';
 import './chunk-HKMPVPO7.js';
 import './chunk-WZBHBH3J.js';
-import { defaultGitRunner } from './chunk-5FWNEQNZ.js';
+import { defaultGitRunner } from './chunk-NACLOOXP.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-ZZXLM64C.js';
-import './chunk-VXLJORHL.js';
-import './chunk-7ZR5UPMB.js';
-import { defaultFetch } from './chunk-BCLJSQCV.js';
-import './chunk-BOLTI6LR.js';
+import './chunk-ZJ3WRVRG.js';
+import './chunk-JXH6LEEH.js';
+import './chunk-CMFCCIQN.js';
+import { defaultFetch } from './chunk-YO4PSLVB.js';
+import './chunk-PLMTLGYH.js';
 import './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
-import { loadHostKey } from './chunk-M5POMKKW.js';
-import { runnerDir, hostKeyPath } from './chunk-ZM2IMMYN.js';
+import { loadHostKey } from './chunk-V7NIVOFD.js';
+import { runnerDir, hostKeyPath, jobsDir } from './chunk-ZM2IMMYN.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';
 import { spawnSync } from 'child_process';
-import { existsSync, readdirSync, statSync } from 'fs';
+import { existsSync, readdirSync, statSync, readFileSync } from 'fs';
 import { totalmem, tmpdir } from 'os';
 import { join } from 'path';
 
@@ -446,6 +446,39 @@ function freeDiskCheck(configPath, minFreeDisk, freeBytes2) {
     fix: "free disk space on the runner's file system, or lower runner.housekeeping.minFreeDisk; the runner takes work again by itself once there is room"
   };
 }
+function hostsPastBuildsReached(configPath) {
+  const jobs = jobsDir(configPath);
+  if (!existsSync(jobs)) return [];
+  const hosts = /* @__PURE__ */ new Set();
+  for (const entry of readdirSync(jobs)) {
+    const recordPath = join(jobs, entry, "tunnel.json");
+    if (!existsSync(recordPath)) continue;
+    try {
+      const record = JSON.parse(readFileSync(recordPath, "utf8"));
+      if (!Array.isArray(record.hosts)) continue;
+      for (const host of record.hosts) if (allowHostProblem(host) === void 0) hosts.add(host.toLowerCase());
+    } catch {
+    }
+  }
+  return [...hosts].sort().slice(0, MAX_ALLOW_HOSTS);
+}
+function allowHostsCheck(configPath, allowHosts) {
+  const name = "Build hosts";
+  if (allowHosts !== void 0) {
+    return {
+      name,
+      status: "pass",
+      detail: allowHosts.length === 0 ? "runner.build.allowHosts is empty, so builds reach no public host" : `builds reach only the ${allowHosts.length} public ${allowHosts.length === 1 ? "host" : "hosts"} in runner.build.allowHosts`
+    };
+  }
+  const reached = hostsPastBuildsReached(configPath);
+  return {
+    name,
+    status: "warn",
+    detail: "runner.build.allowHosts is not set, so a build can reach every public host and send what it reads, such as its read token, to any of them",
+    fix: reached.length === 0 ? "list the public hosts your builds need in runner.build.allowHosts; once a few builds have run, doctor lists the hosts they reached" : `review the hosts past builds reached and set runner.build.allowHosts to the ones they need: ${JSON.stringify(reached)}`
+  };
+}
 function launcherCheckOf(env) {
   return launcherCheck({ home: env.home ?? homeFromEnv(), PATH: env.PATH ?? process.env.PATH });
 }
@@ -471,6 +504,7 @@ async function runnerHostChecks(env) {
       ...env.runner === void 0 ? [] : [memoryCheck({ concurrency: env.runner.concurrency, buildMemory: env.runner.buildMemory, hostMemory: env.hostMemory ?? totalmem() })]
     ] : [],
     ...env.hooks !== void 0 && ["container", "vm"].includes(builtinKind(env.hooks.provision)) ? [imageBuildLimitCheck(await (env.buildx ?? (() => buildxState(spawnRun)))(), env.runner?.buildMemory)] : [],
+    ...env.runner !== void 0 && env.hooks !== void 0 && ["container", "vm"].includes(builtinKind(env.hooks.provision)) ? [allowHostsCheck(env.configPath, env.runner.allowHosts)] : [],
     ...env.runner?.minFreeDisk === void 0 ? [] : [freeDiskCheck(env.configPath, env.runner.minFreeDisk, env.freeBytes ?? freeBytes)],
     ...env.hooks !== void 0 && needsClaudeCredential(env.hooks) ? [claudeCredentialCheck(env.env ?? process.env, env.service === void 0 ? { shell: true } : { service: { unit: env.service.unit, variables: env.service.credentialVariables } })] : [],
     ...env.gateway === void 0 ? [] : [await hostKeyBindingCheck(env.configPath, env.gateway, env.fetchImpl ?? defaultFetch)],

package/dist/{emit-artifact-cmd-AVM4YXMQ.js → emit-artifact-cmd-BZYXRBCV.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { staleBuildRefusal, staleBuildWarning, detectCi } from './chunk-AIL2R4SI.js';
+import { staleBuildRefusal, staleBuildWarning, detectCi } from './chunk-YU4Z2O3W.js';
 import { launchRefusalForSession } from './chunk-HHJDN6AU.js';
 import './chunk-TBT347UY.js';
 import './chunk-F7CU5ABH.js';
 import './chunk-BKO6JEZI.js';
-import { autoConnect } from './chunk-4ACZCY4I.js';
+import { autoConnect } from './chunk-WMPO3SKK.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import './chunk-ILEA3YHM.js';
+import './chunk-EWBM2USM.js';
 import { readEffectiveArtifactSpoolState, localArtifactIds, isArtifactTombstoned, artifactBlobsDir, appendArtifactRecord, artifactsSpoolPath, findPendingArtifactRecord, appendArtifactTombstone } from './chunk-ZYHKJKSU.js';
-import { resolveRepoIdentity } from './chunk-GAYWY4GI.js';
+import { resolveRepoIdentity } from './chunk-HN2JBGSI.js';
 import './chunk-USO2DKBD.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
@@ -17,13 +17,13 @@ import './chunk-GQD22KKN.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import './chunk-5QRP3MVS.js';
 import './chunk-ZJSNLVCE.js';
-import { defaultFetch } from './chunk-BCLJSQCV.js';
-import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-BOLTI6LR.js';
+import { defaultFetch } from './chunk-YO4PSLVB.js';
+import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-PLMTLGYH.js';
 import { ARTIFACT_MAX_CAPTION_LENGTH, ArtifactCriterionIdSchema, ARTIFACT_MAX_FILENAME_LENGTH, mediaTypeForArtifactPath, inferArtifactKind, ARTIFACT_MAX_REPLACES_TARGETS, parseTestSelector, parseJunit, bindTests } from './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
-import './chunk-M5POMKKW.js';
+import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
-import './chunk-JPR2WHHF.js';
+import './chunk-KI7VPNKC.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{emit-cmd-2QRMYPYO.js → emit-cmd-IRYNFHPM.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { EmitError, runEmit } from './chunk-EV3M3EH7.js';
-import './chunk-VXLJORHL.js';
-import './chunk-7ZR5UPMB.js';
+export { EmitError, runEmit } from './chunk-G54QHBTI.js';
+import './chunk-JXH6LEEH.js';
+import './chunk-CMFCCIQN.js';
 import './chunk-YNJEOGDL.js';
 import './chunk-RA3O54FC.js';
 import './chunk-Z5GEFMRW.js';

package/dist/{emit-criteria-cmd-LDBE4YDS.js → emit-criteria-cmd-PSZYZ32B.js}

@@ -1,21 +1,21 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-HHJDN6AU.js';
-import { autoConnect } from './chunk-4ACZCY4I.js';
+import { autoConnect } from './chunk-WMPO3SKK.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import './chunk-ILEA3YHM.js';
+import './chunk-EWBM2USM.js';
 import './chunk-ZYHKJKSU.js';
-import { resolveRepoIdentity } from './chunk-GAYWY4GI.js';
+import { resolveRepoIdentity } from './chunk-HN2JBGSI.js';
 import './chunk-USO2DKBD.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
 import { launchedItemForSession } from './chunk-GQD22KKN.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
-import { defaultFetch } from './chunk-BCLJSQCV.js';
-import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-BOLTI6LR.js';
+import { defaultFetch } from './chunk-YO4PSLVB.js';
+import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-PLMTLGYH.js';
 import { CriteriaListSchema } from './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
-import './chunk-M5POMKKW.js';
+import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
 import './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{emit-finding-cmd-6R5WBPCH.js → emit-finding-cmd-VTSYDJYZ.js}

@@ -1,22 +1,22 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-HHJDN6AU.js';
-import { autoConnect } from './chunk-4ACZCY4I.js';
+import { autoConnect } from './chunk-WMPO3SKK.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import './chunk-ILEA3YHM.js';
+import './chunk-EWBM2USM.js';
 import './chunk-ZYHKJKSU.js';
-import { resolveRepoIdentity } from './chunk-GAYWY4GI.js';
+import { resolveRepoIdentity } from './chunk-HN2JBGSI.js';
 import './chunk-USO2DKBD.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
 import { launchedItemForSession } from './chunk-GQD22KKN.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { readLatestProvenanceForSession } from './chunk-ZJSNLVCE.js';
-import { defaultFetch } from './chunk-BCLJSQCV.js';
-import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-BOLTI6LR.js';
+import { defaultFetch } from './chunk-YO4PSLVB.js';
+import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-PLMTLGYH.js';
 import { FindingBatchSchema } from './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
-import './chunk-M5POMKKW.js';
+import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
 import './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{emit-result-cmd-2DMN6O6U.js → emit-result-cmd-5P7ZFWMZ.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectCi } from './chunk-AIL2R4SI.js';
+import { detectCi } from './chunk-YU4Z2O3W.js';
 import { launchRefusalForSession } from './chunk-HHJDN6AU.js';
 import './chunk-TBT347UY.js';
 import './chunk-F7CU5ABH.js';
 import './chunk-BKO6JEZI.js';
-import { autoConnect } from './chunk-4ACZCY4I.js';
+import { autoConnect } from './chunk-WMPO3SKK.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import './chunk-ILEA3YHM.js';
+import './chunk-EWBM2USM.js';
 import './chunk-ZYHKJKSU.js';
-import { resolveRepoIdentity } from './chunk-GAYWY4GI.js';
+import { resolveRepoIdentity } from './chunk-HN2JBGSI.js';
 import './chunk-USO2DKBD.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
@@ -17,13 +17,13 @@ import './chunk-GQD22KKN.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import './chunk-5QRP3MVS.js';
 import './chunk-ZJSNLVCE.js';
-import { defaultFetch } from './chunk-BCLJSQCV.js';
-import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-BOLTI6LR.js';
+import { defaultFetch } from './chunk-YO4PSLVB.js';
+import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-PLMTLGYH.js';
 import { EmittedNameSchema, EMITTED_RESULT_MAX_LINK_LENGTH, EMITTED_RESULTS, EMITTED_RESULT_MAX_BODY_LENGTH } from './chunk-YNJEOGDL.js';
 import './chunk-EABW6AJQ.js';
-import './chunk-M5POMKKW.js';
+import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
-import './chunk-JPR2WHHF.js';
+import './chunk-KI7VPNKC.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{exec-client-NPYNUAF3.js → exec-client-2UX6NHAO.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { CAPTURE_LIMIT_BYTES, ExecConnectionError, HANDSHAKE_TIMEOUT_MS, execCapture, runExec, runVmExec, vmExecArgs, waitForAgent } from './chunk-ZOAEPWGL.js';
-import './chunk-R7STSBLC.js';
-import './chunk-OD2VTIHN.js';
+export { CAPTURE_LIMIT_BYTES, ExecConnectionError, HANDSHAKE_TIMEOUT_MS, execCapture, runExec, runVmExec, vmExecArgs, waitForAgent } from './chunk-HWMYGAKF.js';
+import './chunk-2E2MG3KW.js';
+import './chunk-2FWL7CE2.js';
 import './chunk-HKMPVPO7.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{guest-init-JWNNAH2H.js → guest-init-VHQNFCFS.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DOCKERD_LOG, HELPER_PATH, realGuestHost, relayPortsFrom, runGuestInit } from './chunk-WVGSB3Z2.js';
-import './chunk-R7STSBLC.js';
-import './chunk-OD2VTIHN.js';
+export { DOCKERD_LOG, HELPER_PATH, realGuestHost, relayPortsFrom, runGuestInit } from './chunk-J5DPVNL3.js';
+import './chunk-2E2MG3KW.js';
+import './chunk-2FWL7CE2.js';
 import './chunk-HKMPVPO7.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{hook-fast-XBOZ3N6L.js → hook-fast-OCHVQZTU.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { AUTO_SYNC_DEBOUNCE_MS, WORK_LEASE_RENEW_DEBOUNCE_MS, WORK_LINK_RETRIES, contextPossiblyGoverned, handleWorkLaunch, handleWorkSessionEnd, hookFiredMarkerPath, logHookError, maybeAutoSync, maybeRenewWorkLease, recordLinkExitFailure, runHookFast, spoolDir } from './chunk-JPR2WHHF.js';
+export { AUTO_SYNC_DEBOUNCE_MS, WORK_LEASE_RENEW_DEBOUNCE_MS, WORK_LINK_RETRIES, contextPossiblyGoverned, handleWorkLaunch, handleWorkSessionEnd, hookFiredMarkerPath, logHookError, maybeAutoSync, maybeRenewWorkLease, recordLinkExitFailure, runHookFast, spoolDir } from './chunk-KI7VPNKC.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';

package/dist/{host-key-KDYZ5ECC.js → host-key-YMLXY6QB.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { ensureHostKey, loadHostKey, signerFor } from './chunk-M5POMKKW.js';
+export { ensureHostKey, loadHostKey, signerFor } from './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{import-capture-cmd-T4556ELW.js → import-capture-cmd-2QFLZQFY.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-VXLJORHL.js';
-import './chunk-7ZR5UPMB.js';
+import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-JXH6LEEH.js';
+import './chunk-CMFCCIQN.js';
 import './chunk-YNJEOGDL.js';
 import './chunk-RA3O54FC.js';
 import './chunk-Z5GEFMRW.js';
@@ -51,7 +51,7 @@ function runImportCapture(opts = {}) {
     if (files.length === 0 && rewritten.length === 0 && !appendedAgentsMd) {
       lines.push(`${DIM}capture pack already installed \u2014 nothing to write${RESET}`);
     }
-    lines.push(`Run ${YELLOW}\`outerlayer emit\`${RESET} to compile the pack into your agent's native files.`);
+    lines.push(`Run ${YELLOW}\`outerlayer context emit\`${RESET} to compile the pack into your agent's native files.`);
     output = lines.join("\n");
   }
   if (!opts.quiet) {

package/dist/{import-ruler-cmd-SG3UVGI7.js → import-ruler-cmd-BD22GUJS.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { normalizePath } from './chunk-7ZR5UPMB.js';
+import { normalizePath } from './chunk-CMFCCIQN.js';
 import './chunk-YNJEOGDL.js';
 import './chunk-Z5GEFMRW.js';
 import { existsSync, readdirSync, readFileSync, mkdirSync, writeFileSync } from 'fs';

package/dist/index.js

@@ -6,7 +6,7 @@ createRequire(import.meta.url);
 // src/index.ts
 var argv = process.argv.slice(2);
 if (argv[0] === "hook") {
-  const { runHookFast } = await import('./hook-fast-XBOZ3N6L.js');
+  const { runHookFast } = await import('./hook-fast-OCHVQZTU.js');
   await runHookFast(argv[1]);
   process.exit(0);
 }
@@ -21,6 +21,6 @@ if (argv[0] === "statusline") {
   await runStatuslineFast(argv.slice(1));
   process.exit(0);
 }
-(await import('./hook-fast-XBOZ3N6L.js')).recordLinkExitFailure(argv);
-var { runCli } = await import('./cli-AOJPAVFX.js');
+(await import('./hook-fast-OCHVQZTU.js')).recordLinkExitFailure(argv);
+var { runCli } = await import('./cli-OWM54BIU.js');
 await runCli(process.argv);