@outerlayer/cli 0.8.2 → 0.8.3

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @outerlayer/cli
 
+## 0.8.3
+
+### Patch Changes
+
+- b5a8585: `merge_gate: on-unverifiable` in `.outerlayer/policy.yaml` is now a policy error. No check produces an unverifiable verdict, so that gate never failed. Use `on-flag` to fail the `OuterLayer evidence` check on a flagged verdict, or `none` to keep it neutral.
+
 ## 0.8.2
 
 ### Patch Changes

package/dist/{agent-setup-C5X4356W.js → agent-setup-FMTXHWWM.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { addStdioMcpEntryIfAbsent } from './chunk-47RS42OZ.js';
-import { installStarterPack } from './chunk-GXSMDL4M.js';
-import { runEmit } from './chunk-G54QHBTI.js';
+import { installStarterPack } from './chunk-KZ2FOICE.js';
+import { runEmit } from './chunk-OULFBETM.js';
 import { C } from './chunk-YRYMNBGQ.js';
-import { resolveGitCommonDir, defaultGitRunner } from './chunk-NACLOOXP.js';
+import { resolveGitCommonDir, defaultGitRunner } from './chunk-4NOIKXUL.js';
 import './chunk-ZJSNLVCE.js';
-import { pinExists, readContextManifest } from './chunk-ZJ3WRVRG.js';
-import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-JXH6LEEH.js';
-import { generatedHeaderSource } from './chunk-CMFCCIQN.js';
+import { pinExists, readContextManifest } from './chunk-42OX3Q3A.js';
+import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-OPSPDEVU.js';
+import { generatedHeaderSource } from './chunk-36H5BONJ.js';
 import './chunk-YO4PSLVB.js';
 import './chunk-PLMTLGYH.js';
 import './chunk-YNJEOGDL.js';

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-05T19:17:15.230Z+79d273b","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-05T20:03:21.908Z+3cbfa30","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{check-HQHFAOXW.js → check-AFYUJ5SQ.js}

@@ -1,23 +1,23 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-VUGDEUMM.js';
+import { probeCredentials } from './chunk-SPUWEK2Q.js';
 import './chunk-IS4DIGBQ.js';
 import './chunk-I2UOAV7X.js';
-import './chunk-M2F2RAMK.js';
+import './chunk-NT5M6LF3.js';
 import './chunk-T6OIJQRT.js';
 import './chunk-AIW6GLET.js';
 import './chunk-UGP76IZ5.js';
-import './chunk-4ZZR5SKG.js';
+import './chunk-SMPKFYKY.js';
 import './chunk-J5DPVNL3.js';
-import './chunk-YU4Z2O3W.js';
+import './chunk-YCHJIAP2.js';
 import './chunk-HHJDN6AU.js';
-import { placeholderQueues, placeholderProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem } from './chunk-QJPO42VI.js';
+import { placeholderQueues, placeholderProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem } from './chunk-BORFBENT.js';
 import './chunk-TI7B7UEO.js';
 import './chunk-YYYRBYWG.js';
 import './chunk-TBT347UY.js';
-import './chunk-MJLUWGUD.js';
-import './chunk-LSPJHYHM.js';
-import './chunk-EQG7L6LM.js';
+import './chunk-OCHRV5A6.js';
+import './chunk-VITHLJOZ.js';
+import './chunk-BPTAOD6W.js';
 import './chunk-JKIWMRFH.js';
 import './chunk-Y7UQHKFY.js';
 import './chunk-N5FOE5PS.js';
@@ -30,7 +30,7 @@ import './chunk-HWMYGAKF.js';
 import './chunk-2E2MG3KW.js';
 import './chunk-F7CU5ABH.js';
 import './chunk-BKO6JEZI.js';
-import './chunk-R5SPFO6F.js';
+import './chunk-2OZH6ZY2.js';
 import './chunk-WMPO3SKK.js';
 import './chunk-BFESLKPP.js';
 import './chunk-EWBM2USM.js';
@@ -47,11 +47,11 @@ import './chunk-HKMPVPO7.js';
 import './chunk-GQD22KKN.js';
 import './chunk-WZBHBH3J.js';
 import './chunk-5QRP3MVS.js';
-import './chunk-NACLOOXP.js';
+import './chunk-4NOIKXUL.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-ZJ3WRVRG.js';
-import './chunk-JXH6LEEH.js';
-import './chunk-CMFCCIQN.js';
+import './chunk-42OX3Q3A.js';
+import './chunk-OPSPDEVU.js';
+import './chunk-36H5BONJ.js';
 import './chunk-YO4PSLVB.js';
 import './chunk-PLMTLGYH.js';
 import './chunk-YNJEOGDL.js';
@@ -59,7 +59,7 @@ import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
 import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
-import './chunk-KI7VPNKC.js';
+import './chunk-7HWIKEU5.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';

package/dist/{chunk-R5SPFO6F.js → chunk-2OZH6ZY2.js}

@@ -347,7 +347,7 @@ async function runWorkLinkSession(opts) {
     return await linkSession(opts);
   } catch (err) {
     if (opts.logFailures) {
-      const { logHookError } = await import('./hook-fast-OCHVQZTU.js');
+      const { logHookError } = await import('./hook-fast-B7TFCJR2.js');
       const reason = err instanceof Error ? err.message : String(err);
       logHookError(opts.home ?? homeFromEnv(opts.env ?? process.env), new Error(`work link-session #${opts.number} failed: ${reason}`));
     }

package/dist/{chunk-CMFCCIQN.js → chunk-36H5BONJ.js}

@@ -8024,7 +8024,7 @@ function parseLevel(value) {
   return value === "warn" || value === "info" || value === "off" ? value : null;
 }
 function parseMergeGate(value) {
-  return value === "none" || value === "on-flag" || value === "on-unverifiable" ? value : null;
+  return value === "none" || value === "on-flag" ? value : null;
 }
 function parseReview(value) {
   return value === "required" || value === "optional" ? value : null;
@@ -8093,7 +8093,7 @@ function parsePolicyFile(file) {
     mergeGate = parseMergeGate(root["merge_gate"]);
     if (mergeGate === null) {
       return fail(
-        `merge_gate has value "${inlineText(String(root["merge_gate"]))}" \u2014 use none, on-flag, or on-unverifiable`
+        `merge_gate has value "${inlineText(String(root["merge_gate"]))}" \u2014 use none or on-flag`
       );
     }
   }

package/dist/{chunk-ZJ3WRVRG.js → chunk-42OX3Q3A.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { CONTEXT_PIN_SCHEMA_VERSION, CONTEXT_PIN_FILENAME } from './chunk-CMFCCIQN.js';
+import { CONTEXT_PIN_SCHEMA_VERSION, CONTEXT_PIN_FILENAME } from './chunk-36H5BONJ.js';
 import { readFileSync, existsSync, writeFileSync, mkdirSync, utimesSync, statSync, unlinkSync } from 'fs';
 import { join, dirname } from 'path';
 

package/dist/{chunk-3J476JZC.js → chunk-4GS22GWM.js}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { readStatuslineState, STATE_FRESH_MS } from './chunk-F47JBIAW.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-R5SPFO6F.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-2OZH6ZY2.js';
 import { isLinkedRepository } from './chunk-EWBM2USM.js';
 import { sanitizeTerminal } from './chunk-ZYHKJKSU.js';
 import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-HN2JBGSI.js';
 import { C } from './chunk-YRYMNBGQ.js';
 import { readSettings, settingsPath, isOurStatuslineSlot, statuslineWrappedOriginal, REGISTERED_EVENTS, isOurHookCommand, ourCommandBins, cliBinResolvable, ourDirectScriptBins, wrappedOriginalCommand } from './chunk-5QRP3MVS.js';
-import { readPin, readContextManifest, readDegraded, readSourceCache } from './chunk-ZJ3WRVRG.js';
+import { readPin, readContextManifest, readDegraded, readSourceCache } from './chunk-42OX3Q3A.js';
 import { defaultFetch } from './chunk-YO4PSLVB.js';
 import { resolveGatewayCredentials } from './chunk-PLMTLGYH.js';
 import { readCloudConfig } from './chunk-EABW6AJQ.js';
-import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-KI7VPNKC.js';
+import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-7HWIKEU5.js';
 import { deadHooksState, preparePackageManagerCommand, contextExcludesPresent } from './chunk-XCCLFVXM.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -1016,7 +1016,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-PKT42NOJ.js');
+    const { runnerHostChecks } = await import('./doctor-M65EXDE6.js');
     const hooks = (() => {
       try {
         return loadRunnerConfig(configPath).hooks;

package/dist/{chunk-NACLOOXP.js → chunk-4NOIKXUL.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { appendContextProvenance } from './chunk-ZJSNLVCE.js';
-import { readPin, pinExists, readBuildHold, readContextManifest, manifestFilesPresent, writeDegraded, writeSourceCache, SOURCE_CACHE_TTL_RETRY_MS, SOURCE_CACHE_TTL_SUCCESS_MS, isLastCheckFresh, readDegraded, touchLastCheck, clearDegraded, writeContextManifest, writePinIfChanged, readSourceCache, isSourceCacheFresh } from './chunk-ZJ3WRVRG.js';
-import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-JXH6LEEH.js';
-import { parseGoverns, normalizeRepoName, CONTEXT_SOURCE_CONFIG_PATH, parseOuterlayerConfig, classifyTree, emitTree } from './chunk-CMFCCIQN.js';
+import { readPin, pinExists, readBuildHold, readContextManifest, manifestFilesPresent, writeDegraded, writeSourceCache, SOURCE_CACHE_TTL_RETRY_MS, SOURCE_CACHE_TTL_SUCCESS_MS, isLastCheckFresh, readDegraded, touchLastCheck, clearDegraded, writeContextManifest, writePinIfChanged, readSourceCache, isSourceCacheFresh } from './chunk-42OX3Q3A.js';
+import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-OPSPDEVU.js';
+import { parseGoverns, normalizeRepoName, CONTEXT_SOURCE_CONFIG_PATH, parseOuterlayerConfig, classifyTree, emitTree } from './chunk-36H5BONJ.js';
 import { defaultFetch } from './chunk-YO4PSLVB.js';
 import { resolveGatewayCredentials } from './chunk-PLMTLGYH.js';
 import { ensureContextExcludes, ensurePreCommitGuardHook } from './chunk-XCCLFVXM.js';

package/dist/{chunk-KI7VPNKC.js → chunk-7HWIKEU5.js}

@@ -628,7 +628,7 @@ async function runHookFast(event, home = homeFromEnv(), read = readStdin, env =
       recordHookErrorsSeen(home, hookErrorsBytes);
       if (contextPossiblyGoverned(sessionCwd, home)) {
         try {
-          const { materializeContext: materialize } = await import('./context-materialize-YR3JQCUF.js');
+          const { materializeContext: materialize } = await import('./context-materialize-YBOW5YCC.js');
           const sessionId = typeof payload.session_id === "string" ? payload.session_id : "unknown";
           const result = await materialize({ cwd: sessionCwd, sessionId, home });
           materializeMessage = result.message;

package/dist/{chunk-QJPO42VI.js → chunk-BORFBENT.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isPlaceholderCommand } from './chunk-MJLUWGUD.js';
-import { describeCallFailure } from './chunk-EQG7L6LM.js';
-import { WorkCommandError, getJson } from './chunk-R5SPFO6F.js';
+import { isPlaceholderCommand } from './chunk-OCHRV5A6.js';
+import { describeCallFailure } from './chunk-BPTAOD6W.js';
+import { WorkCommandError, getJson } from './chunk-2OZH6ZY2.js';
 import { sanitizeTerminal } from './chunk-ZYHKJKSU.js';
 import { builtinKind } from './chunk-7KI224YS.js';
 import { CLAUDE_CREDENTIAL_VARIABLES, claudeCredential } from './chunk-2FWL7CE2.js';

package/dist/{chunk-EQG7L6LM.js → chunk-BPTAOD6W.js}

@@ -9,14 +9,14 @@ import { builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArg
 import { CLAUDE_CODE_VERSION, firecrackerArch, MICROVM_ARCHES, DEFAULT_BASE_IMAGE, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, FIRECRACKER_VERSION, GUEST_ASSETS_VERSION } from './chunk-CX22S5BA.js';
 import { execCapture } from './chunk-HWMYGAKF.js';
 import { GUEST_CID } from './chunk-2E2MG3KW.js';
-import { WorkCommandError, postJson } from './chunk-R5SPFO6F.js';
+import { WorkCommandError, postJson } from './chunk-2OZH6ZY2.js';
 import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-HN2JBGSI.js';
 import { hostAllowed } from './chunk-UXYLWVTQ.js';
 import { parseDuKilobytes } from './chunk-7RQ73DLO.js';
 import { RELAY_PORT, CHECKOUT_DIR, JOB_MOUNT, claudeCredential, buildEnvironment, startBuildServices, checkEnvironment, AGENT_CREDENTIAL_MISSING } from './chunk-2FWL7CE2.js';
-import { defaultGitRunner, materializeContext } from './chunk-NACLOOXP.js';
-import { readContextManifest, readSourceCache } from './chunk-ZJ3WRVRG.js';
-import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-CMFCCIQN.js';
+import { defaultGitRunner, materializeContext } from './chunk-4NOIKXUL.js';
+import { readContextManifest, readSourceCache } from './chunk-42OX3Q3A.js';
+import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-36H5BONJ.js';
 import { signingFetchFor } from './chunk-YO4PSLVB.js';
 import { downconvertSession } from './chunk-YNJEOGDL.js';
 import { signerFor } from './chunk-V7NIVOFD.js';

package/dist/{chunk-GXSMDL4M.js → chunk-KZ2FOICE.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { C } from './chunk-YRYMNBGQ.js';
-import { resolvePackRoot, loadTemplateFiles, loadMaintainedFiles, TEMPLATE_SKILLS, skillDir, writeMaintainedFiles, MAINTAINED_SKILLS } from './chunk-JXH6LEEH.js';
+import { resolvePackRoot, loadTemplateFiles, loadMaintainedFiles, TEMPLATE_SKILLS, skillDir, writeMaintainedFiles, MAINTAINED_SKILLS } from './chunk-OPSPDEVU.js';
 import { resolvePackageVersion } from './chunk-RA3O54FC.js';
 import { existsSync, mkdirSync, writeFileSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-M2F2RAMK.js → chunk-NT5M6LF3.js}

@@ -1,24 +1,24 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { writeJobFile, readJobFile } from './chunk-T6OIJQRT.js';
-import { senderPidfile } from './chunk-4ZZR5SKG.js';
+import { senderPidfile } from './chunk-SMPKFYKY.js';
 import { DOCKERD_LOG } from './chunk-J5DPVNL3.js';
-import { installScrubContext } from './chunk-YU4Z2O3W.js';
-import { AssetError, describeCallFailure, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createBuildDisk, machineConfig, refusalCode, resolveAgentUser, AgentUserError, runBuildSteps, removeStagedContext, stageGovernedContext, shellQuote, createRunnerLog, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, formatDuration, retrySend, formatClock, containerSenderCommand, syncInContainer, copyTranscriptsFromContainer, GH_CONFIG_YML, ghHostsYml, ADDED_USER, isLiteralAddress, signalInContainer, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript } from './chunk-EQG7L6LM.js';
+import { installScrubContext } from './chunk-YCHJIAP2.js';
+import { AssetError, describeCallFailure, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createBuildDisk, machineConfig, refusalCode, resolveAgentUser, AgentUserError, runBuildSteps, removeStagedContext, stageGovernedContext, shellQuote, createRunnerLog, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, formatDuration, retrySend, formatClock, containerSenderCommand, syncInContainer, copyTranscriptsFromContainer, GH_CONFIG_YML, ghHostsYml, ADDED_USER, isLiteralAddress, signalInContainer, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript } from './chunk-BPTAOD6W.js';
 import { readBranchHead, diffBetween, fetchCommit } from './chunk-Y7UQHKFY.js';
 import { isSameProcess, startTimeOf } from './chunk-N5FOE5PS.js';
 import { childEnvironment } from './chunk-NPBLDMSD.js';
 import { CLAUDE_CODE_VERSION } from './chunk-CX22S5BA.js';
 import { waitForAgent, vmExecArgs } from './chunk-HWMYGAKF.js';
 import { socketPathProblem, vsockLinks, linkVsockSockets } from './chunk-2E2MG3KW.js';
-import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-R5SPFO6F.js';
+import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-2OZH6ZY2.js';
 import { planArtifactUpload } from './chunk-ZYHKJKSU.js';
 import { scrubText } from './chunk-HN2JBGSI.js';
 import { isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-7KI224YS.js';
 import { parseSize } from './chunk-7RQ73DLO.js';
 import { claudeCredential, buildEnvironment, JOB_MOUNT, CHECKOUT_DIR, parseIsolation, proxyEnvironment, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, startBuildServices, BUILT_IN_NAMES, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, withTunnelRecord, RELAY_PORT, checkEnvironment, EVAL_INPUT_DIR } from './chunk-2FWL7CE2.js';
 import { withHooksPath, authorEnvironment, commitIdentityRecord } from './chunk-HKMPVPO7.js';
-import { parsePolicy } from './chunk-CMFCCIQN.js';
+import { parsePolicy } from './chunk-36H5BONJ.js';
 import { readCloudConfig } from './chunk-EABW6AJQ.js';
 import { resolveVersion } from './chunk-RA3O54FC.js';
 import { signerFor } from './chunk-V7NIVOFD.js';

package/dist/{chunk-MJLUWGUD.js → chunk-OCHRV5A6.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-LSPJHYHM.js';
-import { MIN_ENGINE_MAJOR } from './chunk-EQG7L6LM.js';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-VITHLJOZ.js';
+import { MIN_ENGINE_MAJOR } from './chunk-BPTAOD6W.js';
 import { RUNNER_DIR_MODE, runnerDir, RUNNER_FILE_MODE } from './chunk-ZM2IMMYN.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
 import { dirname } from 'path';

package/dist/{chunk-JXH6LEEH.js → chunk-OPSPDEVU.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { splitRawFile } from './chunk-CMFCCIQN.js';
+import { splitRawFile } from './chunk-36H5BONJ.js';
 import { resolvePackageVersion } from './chunk-RA3O54FC.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, readdirSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-G54QHBTI.js → chunk-OULFBETM.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { maintainedFilesForExistingSkills, loadMaintainedFiles, writeMaintainedFiles } from './chunk-JXH6LEEH.js';
-import { emitTree, parseOuterlayerConfig, classifyTree, generatedHeaderSource, CONTEXT_PIN_FILENAME, normalizePath } from './chunk-CMFCCIQN.js';
+import { maintainedFilesForExistingSkills, loadMaintainedFiles, writeMaintainedFiles } from './chunk-OPSPDEVU.js';
+import { emitTree, parseOuterlayerConfig, classifyTree, generatedHeaderSource, CONTEXT_PIN_FILENAME, normalizePath } from './chunk-36H5BONJ.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, copyFileSync, readdirSync } from 'fs';
 import { join, dirname, relative, sep } from 'path';
 

package/dist/{chunk-4ZZR5SKG.js → chunk-SMPKFYKY.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LiveUploader } from './chunk-YU4Z2O3W.js';
+import { LiveUploader } from './chunk-YCHJIAP2.js';
 import { CaptureDaemon } from './chunk-HN2JBGSI.js';
 import { parseWorkItemEnv } from './chunk-GQD22KKN.js';
-import { spoolDir } from './chunk-KI7VPNKC.js';
+import { spoolDir } from './chunk-7HWIKEU5.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { mkdirSync, writeFileSync, rmSync } from 'fs';
 import { join } from 'path';

package/dist/{chunk-VUGDEUMM.js → chunk-SPUWEK2Q.js}

@@ -2,20 +2,20 @@
 import { createRequire } from 'node:module';
 import { decideInstalledSwitch, fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-IS4DIGBQ.js';
 import { compareVersions, satisfiesRange } from './chunk-I2UOAV7X.js';
-import { LEASE_SECONDS, releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, ALREADY_RELEASED } from './chunk-M2F2RAMK.js';
+import { LEASE_SECONDS, releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, ALREADY_RELEASED } from './chunk-NT5M6LF3.js';
 import { writeJobFile, readJobFile, readJobFileChecked } from './chunk-T6OIJQRT.js';
 import { RUNNER_PROTOCOL } from './chunk-AIW6GLET.js';
 import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-UGP76IZ5.js';
-import { placeholderQueues, placeholderProblem } from './chunk-QJPO42VI.js';
+import { placeholderQueues, placeholderProblem } from './chunk-BORFBENT.js';
 import { currentVersion, entryIn, versionDir, startedThroughCurrent, writeMarker, readMarker, removeMarker, switchCurrent, cleanVersions, isInLayout, stagingDir } from './chunk-TI7B7UEO.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, provisionContainer, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandLine, BuildTokens, classifyRefusal, refusalCode, measureDisk, createRunnerLog, setUpRunnerCgroup, parseCpuList, ensureTunnel, keepGhConfigCurrent, createContainerRuntime, formatClock } from './chunk-EQG7L6LM.js';
+import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, provisionContainer, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandLine, BuildTokens, classifyRefusal, refusalCode, measureDisk, createRunnerLog, setUpRunnerCgroup, parseCpuList, ensureTunnel, keepGhConfigCurrent, createContainerRuntime, formatClock } from './chunk-BPTAOD6W.js';
 import { checkFit } from './chunk-JKIWMRFH.js';
 import { startTimeOf, claimPidFile, readPidFile, isSameProcess, releasePidFile } from './chunk-N5FOE5PS.js';
 import { spawnRun } from './chunk-NPBLDMSD.js';
 import { builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, BUILD_LABEL, RUNNER_LABEL } from './chunk-CLURXEWV.js';
-import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-R5SPFO6F.js';
+import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-2OZH6ZY2.js';
 import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind } from './chunk-7KI224YS.js';
 import { exceedsDisk } from './chunk-7RQ73DLO.js';
 import { sharedUserEnvironment, JOB_MOUNT, claudeCredential } from './chunk-2FWL7CE2.js';
@@ -1232,7 +1232,7 @@ var CLAIM_REFUSAL_CODES = new Set(
   "pull_request_from_fork pull_request_on_default_branch pull_request_ambiguous branch_claimed_elsewhere".split(" ")
 );
 async function tryClaimAndStart(state, item, queue) {
-  const { postJson: postJson2 } = await import('./work-cmd-W4GQUUBC.js');
+  const { postJson: postJson2 } = await import('./work-cmd-66GA4ETV.js');
   const log = logOf(state);
   const hostKey = await loadHostKey(state.config.configPath);
   const claim = await retrySend(
@@ -1956,7 +1956,7 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
     const outcome = await onStartUnderMarker({
       configPath,
       own: ownVersionOf(deps),
-      check: update.check ? () => update.check(configPath) : async () => (await import('./check-HQHFAOXW.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
+      check: update.check ? () => update.check(configPath) : async () => (await import('./check-AFYUJ5SQ.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log
     });

package/dist/{chunk-LSPJHYHM.js → chunk-VITHLJOZ.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { MIN_ENGINE_MAJOR } from './chunk-EQG7L6LM.js';
+import { MIN_ENGINE_MAJOR } from './chunk-BPTAOD6W.js';
 import { firecrackerArch, MICROVM_ARCHES, guestAssetsPinned } from './chunk-CX22S5BA.js';
 import { spawnSync } from 'child_process';
 import { existsSync, accessSync, constants, statSync, readFileSync } from 'fs';

package/dist/{chunk-YU4Z2O3W.js → chunk-YCHJIAP2.js}

@@ -14,7 +14,7 @@ import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-PLMTLGYH
 import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-YNJEOGDL.js';
 import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-EABW6AJQ.js';
 import { signerFor, signRunnerRequest } from './chunk-V7NIVOFD.js';
-import { writeSyncStatus, spoolDir } from './chunk-KI7VPNKC.js';
+import { writeSyncStatus, spoolDir } from './chunk-7HWIKEU5.js';
 import { removeJournalHooks } from './chunk-XCCLFVXM.js';
 import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';