@outerlayer/cli 0.8.3 → 0.8.4

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @outerlayer/cli
 
+## 0.8.4
+
+### Patch Changes
+
+- 3c595df: `work build`, `work pr` and the other `work` commands now choose a factory automatically by the repository `--repo` names, not by the checkout they run from. Run from a factory repository with `--repo acme/app`, they used to pick the factory linked to the factory repository and send the work there. The line they print now reads `Using factory "<name>" in <org> for <repository> (<reason>); saved for this checkout.` It no longer starts with "Connected", because the automatic step never links a repository.
+- b26e4b2: `outerlayer init` and `outerlayer init --template default` now write the code review check as a file you own, `.outerlayer/validators/code-review.yaml`, beside a policy file with no `extends` line. The check passes when a review result is recorded with `outerlayer emit code-review --item <n> --result pass --link <the review report's link>`. The maintained `emitting-evidence` skill and the `build` template skill tell agents to emit the review report with no `--for` and then record that result. The `outerlayer:recommended@v1` preset is gone: a policy file that still sets `extends` gets one policy error that says to run `outerlayer init --template default` and delete the line. An empty policy file now loads with every key at its default. A validator file can also require an attached artifact with `require: { artifact: { kind: report, for: <id> } }`.
+
 ## 0.8.3
 
 ### Patch Changes

package/dist/{agent-setup-FMTXHWWM.js → agent-setup-LEQF4V5F.js}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { addStdioMcpEntryIfAbsent } from './chunk-47RS42OZ.js';
-import { installStarterPack } from './chunk-KZ2FOICE.js';
-import { runEmit } from './chunk-OULFBETM.js';
+import { installStarterPack } from './chunk-AGMIJ725.js';
+import { runEmit } from './chunk-DSPYQUH4.js';
 import { C } from './chunk-YRYMNBGQ.js';
-import { resolveGitCommonDir, defaultGitRunner } from './chunk-4NOIKXUL.js';
+import { resolveGitCommonDir, defaultGitRunner } from './chunk-6AFQOYO3.js';
 import './chunk-ZJSNLVCE.js';
-import { pinExists, readContextManifest } from './chunk-42OX3Q3A.js';
-import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-OPSPDEVU.js';
-import { generatedHeaderSource } from './chunk-36H5BONJ.js';
+import { pinExists, readContextManifest } from './chunk-2MFYKH3C.js';
+import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-WLV4KCAW.js';
+import { generatedHeaderSource } from './chunk-NKU5OPYP.js';
 import './chunk-YO4PSLVB.js';
 import './chunk-PLMTLGYH.js';
-import './chunk-YNJEOGDL.js';
+import './chunk-PK5NANMT.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
 import './chunk-V7NIVOFD.js';
@@ -102,6 +102,8 @@ function runAgentSetup(opts) {
     for (const skill of pack.kept) kept.push(`${skillDir(skill)}/`);
     if (pack.policy === "written") written.add(POLICY_PATH);
     else kept.push(POLICY_PATH);
+    for (const path of pack.validatorsWritten) written.add(path);
+    kept.push(...pack.validatorsKept);
     if (existsSync(join(repoRoot, CONFIG_PATH))) {
       kept.push(CONFIG_PATH);
     } else {

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-05T20:03:21.908Z+3cbfa30","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-05T21:17:18.405Z+2bfc970","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-QZA2Z3M3.js → builder-5UFAF5LW.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-CLURXEWV.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-DE4GLH3P.js';
 import './chunk-CX22S5BA.js';
-import './chunk-HN2JBGSI.js';
+import './chunk-CDISNKM4.js';
 import './chunk-7RQ73DLO.js';
 import './chunk-2FWL7CE2.js';
 import './chunk-HKMPVPO7.js';
-import './chunk-YNJEOGDL.js';
+import './chunk-PK5NANMT.js';
 import './chunk-ZM2IMMYN.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{check-AFYUJ5SQ.js → check-NJX52PBN.js}

@@ -1,41 +1,41 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-SPUWEK2Q.js';
+import { probeCredentials } from './chunk-LUY6I65J.js';
 import './chunk-IS4DIGBQ.js';
 import './chunk-I2UOAV7X.js';
-import './chunk-NT5M6LF3.js';
+import './chunk-4KPMIGBQ.js';
 import './chunk-T6OIJQRT.js';
 import './chunk-AIW6GLET.js';
 import './chunk-UGP76IZ5.js';
-import './chunk-SMPKFYKY.js';
+import './chunk-FCDET2U5.js';
 import './chunk-J5DPVNL3.js';
-import './chunk-YCHJIAP2.js';
+import './chunk-H6IGIE3I.js';
 import './chunk-HHJDN6AU.js';
-import { placeholderQueues, placeholderProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem } from './chunk-BORFBENT.js';
+import { placeholderQueues, placeholderProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem } from './chunk-SWGQAURM.js';
 import './chunk-TI7B7UEO.js';
 import './chunk-YYYRBYWG.js';
 import './chunk-TBT347UY.js';
-import './chunk-OCHRV5A6.js';
-import './chunk-VITHLJOZ.js';
-import './chunk-BPTAOD6W.js';
+import './chunk-IOG6LPEI.js';
+import './chunk-LKUUQ3XV.js';
+import './chunk-GJ3OWUFO.js';
 import './chunk-JKIWMRFH.js';
 import './chunk-Y7UQHKFY.js';
 import './chunk-N5FOE5PS.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-NPBLDMSD.js';
+import './chunk-WGLWDX5J.js';
 import './chunk-QOZKPLVJ.js';
-import './chunk-CLURXEWV.js';
+import './chunk-DE4GLH3P.js';
 import './chunk-CX22S5BA.js';
 import './chunk-HWMYGAKF.js';
 import './chunk-2E2MG3KW.js';
 import './chunk-F7CU5ABH.js';
 import './chunk-BKO6JEZI.js';
-import './chunk-2OZH6ZY2.js';
-import './chunk-WMPO3SKK.js';
+import './chunk-TY7EZC7U.js';
+import './chunk-MSV44EB5.js';
 import './chunk-BFESLKPP.js';
-import './chunk-EWBM2USM.js';
-import './chunk-ZYHKJKSU.js';
-import './chunk-HN2JBGSI.js';
+import './chunk-TFJGK4UB.js';
+import './chunk-BL63NBJZ.js';
+import './chunk-CDISNKM4.js';
 import './chunk-USO2DKBD.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
@@ -47,19 +47,19 @@ import './chunk-HKMPVPO7.js';
 import './chunk-GQD22KKN.js';
 import './chunk-WZBHBH3J.js';
 import './chunk-5QRP3MVS.js';
-import './chunk-4NOIKXUL.js';
+import './chunk-6AFQOYO3.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-42OX3Q3A.js';
-import './chunk-OPSPDEVU.js';
-import './chunk-36H5BONJ.js';
+import './chunk-2MFYKH3C.js';
+import './chunk-WLV4KCAW.js';
+import './chunk-NKU5OPYP.js';
 import './chunk-YO4PSLVB.js';
 import './chunk-PLMTLGYH.js';
-import './chunk-YNJEOGDL.js';
+import './chunk-PK5NANMT.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
 import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
-import './chunk-7HWIKEU5.js';
+import './chunk-K4MGMSMN.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';

package/dist/{chunk-42OX3Q3A.js → chunk-2MFYKH3C.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { CONTEXT_PIN_SCHEMA_VERSION, CONTEXT_PIN_FILENAME } from './chunk-36H5BONJ.js';
+import { CONTEXT_PIN_SCHEMA_VERSION, CONTEXT_PIN_FILENAME } from './chunk-NKU5OPYP.js';
 import { readFileSync, existsSync, writeFileSync, mkdirSync, utimesSync, statSync, unlinkSync } from 'fs';
 import { join, dirname } from 'path';
 

package/dist/{chunk-NT5M6LF3.js → chunk-4KPMIGBQ.js}

@@ -1,24 +1,24 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { writeJobFile, readJobFile } from './chunk-T6OIJQRT.js';
-import { senderPidfile } from './chunk-SMPKFYKY.js';
+import { senderPidfile } from './chunk-FCDET2U5.js';
 import { DOCKERD_LOG } from './chunk-J5DPVNL3.js';
-import { installScrubContext } from './chunk-YCHJIAP2.js';
-import { AssetError, describeCallFailure, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createBuildDisk, machineConfig, refusalCode, resolveAgentUser, AgentUserError, runBuildSteps, removeStagedContext, stageGovernedContext, shellQuote, createRunnerLog, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, formatDuration, retrySend, formatClock, containerSenderCommand, syncInContainer, copyTranscriptsFromContainer, GH_CONFIG_YML, ghHostsYml, ADDED_USER, isLiteralAddress, signalInContainer, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript } from './chunk-BPTAOD6W.js';
+import { installScrubContext } from './chunk-H6IGIE3I.js';
+import { AssetError, describeCallFailure, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createBuildDisk, machineConfig, refusalCode, resolveAgentUser, AgentUserError, runBuildSteps, removeStagedContext, stageGovernedContext, shellQuote, createRunnerLog, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, formatDuration, retrySend, formatClock, containerSenderCommand, syncInContainer, copyTranscriptsFromContainer, GH_CONFIG_YML, ghHostsYml, ADDED_USER, isLiteralAddress, signalInContainer, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript } from './chunk-GJ3OWUFO.js';
 import { readBranchHead, diffBetween, fetchCommit } from './chunk-Y7UQHKFY.js';
 import { isSameProcess, startTimeOf } from './chunk-N5FOE5PS.js';
-import { childEnvironment } from './chunk-NPBLDMSD.js';
+import { childEnvironment } from './chunk-WGLWDX5J.js';
 import { CLAUDE_CODE_VERSION } from './chunk-CX22S5BA.js';
 import { waitForAgent, vmExecArgs } from './chunk-HWMYGAKF.js';
 import { socketPathProblem, vsockLinks, linkVsockSockets } from './chunk-2E2MG3KW.js';
-import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-2OZH6ZY2.js';
-import { planArtifactUpload } from './chunk-ZYHKJKSU.js';
-import { scrubText } from './chunk-HN2JBGSI.js';
+import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-TY7EZC7U.js';
+import { planArtifactUpload } from './chunk-BL63NBJZ.js';
+import { scrubText } from './chunk-CDISNKM4.js';
 import { isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-7KI224YS.js';
 import { parseSize } from './chunk-7RQ73DLO.js';
 import { claudeCredential, buildEnvironment, JOB_MOUNT, CHECKOUT_DIR, parseIsolation, proxyEnvironment, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, startBuildServices, BUILT_IN_NAMES, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, withTunnelRecord, RELAY_PORT, checkEnvironment, EVAL_INPUT_DIR } from './chunk-2FWL7CE2.js';
 import { withHooksPath, authorEnvironment, commitIdentityRecord } from './chunk-HKMPVPO7.js';
-import { parsePolicy } from './chunk-36H5BONJ.js';
+import { parsePolicy } from './chunk-NKU5OPYP.js';
 import { readCloudConfig } from './chunk-EABW6AJQ.js';
 import { resolveVersion } from './chunk-RA3O54FC.js';
 import { signerFor } from './chunk-V7NIVOFD.js';

package/dist/{chunk-4NOIKXUL.js → chunk-6AFQOYO3.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { appendContextProvenance } from './chunk-ZJSNLVCE.js';
-import { readPin, pinExists, readBuildHold, readContextManifest, manifestFilesPresent, writeDegraded, writeSourceCache, SOURCE_CACHE_TTL_RETRY_MS, SOURCE_CACHE_TTL_SUCCESS_MS, isLastCheckFresh, readDegraded, touchLastCheck, clearDegraded, writeContextManifest, writePinIfChanged, readSourceCache, isSourceCacheFresh } from './chunk-42OX3Q3A.js';
-import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-OPSPDEVU.js';
-import { parseGoverns, normalizeRepoName, CONTEXT_SOURCE_CONFIG_PATH, parseOuterlayerConfig, classifyTree, emitTree } from './chunk-36H5BONJ.js';
+import { readPin, pinExists, readBuildHold, readContextManifest, manifestFilesPresent, writeDegraded, writeSourceCache, SOURCE_CACHE_TTL_RETRY_MS, SOURCE_CACHE_TTL_SUCCESS_MS, isLastCheckFresh, readDegraded, touchLastCheck, clearDegraded, writeContextManifest, writePinIfChanged, readSourceCache, isSourceCacheFresh } from './chunk-2MFYKH3C.js';
+import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-WLV4KCAW.js';
+import { parseGoverns, normalizeRepoName, CONTEXT_SOURCE_CONFIG_PATH, parseOuterlayerConfig, classifyTree, emitTree } from './chunk-NKU5OPYP.js';
 import { defaultFetch } from './chunk-YO4PSLVB.js';
 import { resolveGatewayCredentials } from './chunk-PLMTLGYH.js';
 import { ensureContextExcludes, ensurePreCommitGuardHook } from './chunk-XCCLFVXM.js';

package/dist/{chunk-KZ2FOICE.js → chunk-AGMIJ725.js}

@@ -1,15 +1,17 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { C } from './chunk-YRYMNBGQ.js';
-import { resolvePackRoot, loadTemplateFiles, loadMaintainedFiles, TEMPLATE_SKILLS, skillDir, writeMaintainedFiles, MAINTAINED_SKILLS } from './chunk-OPSPDEVU.js';
+import { resolvePackRoot, loadTemplateFiles, loadMaintainedFiles, TEMPLATE_SKILLS, skillDir, writeMaintainedFiles, MAINTAINED_SKILLS } from './chunk-WLV4KCAW.js';
 import { resolvePackageVersion } from './chunk-RA3O54FC.js';
-import { existsSync, mkdirSync, writeFileSync } from 'fs';
+import { readFileSync, existsSync, mkdirSync, writeFileSync } from 'fs';
 import { join, dirname } from 'path';
 
 createRequire(import.meta.url);
 var DEFAULT_TEMPLATE = "default";
 var POLICY_PATH = ".outerlayer/policy.yaml";
-var POLICY_CONTENT = "extends: outerlayer:recommended@v1\nreview: required\n";
+var POLICY_CONTENT = "review: required\n";
+var VALIDATOR_FILES = ["code-review.yaml"];
+var VALIDATORS_DIR = ".outerlayer/validators";
 var StarterPackError = class extends Error {
 };
 function assertKnownTemplate(name) {
@@ -22,6 +24,10 @@ function installStarterPack(opts) {
   const version = opts.version ?? resolvePackageVersion();
   const templateFiles = loadTemplateFiles(packRoot, version);
   const maintainedFiles = loadMaintainedFiles(packRoot, version);
+  const validatorFiles = VALIDATOR_FILES.map((name) => ({
+    path: `${VALIDATORS_DIR}/${name}`,
+    content: readFileSync(join(packRoot, "validators", name), "utf8")
+  }));
   const copied = [];
   const kept = [];
   for (const skill of TEMPLATE_SKILLS) {
@@ -44,7 +50,26 @@ function installStarterPack(opts) {
     writeFileSync(policyAbs, POLICY_CONTENT);
     policy = "written";
   }
-  return { copied, kept, maintained: [...written.created, ...written.rewritten], policy };
+  const validatorsWritten = [];
+  const validatorsKept = [];
+  for (const file of validatorFiles) {
+    const abs = join(opts.repoRoot, file.path);
+    if (existsSync(abs)) {
+      validatorsKept.push(file.path);
+      continue;
+    }
+    mkdirSync(dirname(abs), { recursive: true });
+    writeFileSync(abs, file.content);
+    validatorsWritten.push(file.path);
+  }
+  return {
+    copied,
+    kept,
+    maintained: [...written.created, ...written.rewritten],
+    policy,
+    validatorsWritten,
+    validatorsKept
+  };
 }
 var skillFile = (skill) => `${skillDir(skill)}/SKILL.md`;
 function formatStarterPackOutput(result) {
@@ -60,7 +85,11 @@ function formatStarterPackOutput(result) {
   for (const skill of MAINTAINED_SKILLS) lines.push(`  ${skillFile(skill)}`);
   lines.push(
     "",
-    result.policy === "written" ? `${C.green}\u2713${C.reset} Wrote ${POLICY_PATH} (extends the recommended checks, review required)` : `${C.dim}${POLICY_PATH} already exists \u2014 left as it is${C.reset}`,
+    result.policy === "written" ? `${C.green}\u2713${C.reset} Wrote ${POLICY_PATH} (review required)` : `${C.dim}${POLICY_PATH} already exists \u2014 left as it is${C.reset}`,
+    ...result.validatorsWritten.map(
+      (path) => `${C.green}\u2713${C.reset} Wrote ${path} (yours to edit \u2014 the code review check)`
+    ),
+    ...result.validatorsKept.map((path) => `${C.dim}${path} already exists \u2014 left as it is${C.reset}`),
     "",
     `Next: create .outerlayer/config.json naming your agent tools, for example {"targets": ["claude-code"]},`,
     `then run ${C.yellow}outerlayer context emit${C.reset} to compile the skills into their native files.`

package/dist/{chunk-ZYHKJKSU.js → chunk-BL63NBJZ.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { ArtifactTombstoneRecordSchema, ArtifactSpoolRecordSchema } from './chunk-YNJEOGDL.js';
+import { ArtifactTombstoneRecordSchema, ArtifactSpoolRecordSchema } from './chunk-PK5NANMT.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { mkdirSync, appendFileSync, writeFileSync, renameSync, existsSync, unlinkSync, readdirSync, readFileSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-HN2JBGSI.js → chunk-CDISNKM4.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { EVENT_TYPES, isHumanUserTurn, parseAgentSession, SCHEMA_VERSION, SPEED_MAX_LENGTH, inputBandOf, BUCKET_MODEL_MAX_LENGTH } from './chunk-YNJEOGDL.js';
+import { EVENT_TYPES, isHumanUserTurn, parseAgentSession, SCHEMA_VERSION, SPEED_MAX_LENGTH, inputBandOf, BUCKET_MODEL_MAX_LENGTH } from './chunk-PK5NANMT.js';
 import { createHash } from 'crypto';
 import { readFileSync, readdirSync, statSync, mkdirSync, copyFileSync, renameSync, unlinkSync, writeFileSync, stat as stat$1, unwatchFile, watchFile, watch as watch$1 } from 'fs';
 import { type, homedir } from 'os';

package/dist/{chunk-CLURXEWV.js → chunk-DE4GLH3P.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { BUILDKIT_IMAGE } from './chunk-CX22S5BA.js';
-import { compareVersions } from './chunk-HN2JBGSI.js';
+import { compareVersions } from './chunk-CDISNKM4.js';
 import { parseSize } from './chunk-7RQ73DLO.js';
 import { JOB_MOUNT, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_PORT, CLAUDE_SOCKET, RELAY_PORT, DESTINATION_BASE_PORT } from './chunk-2FWL7CE2.js';
 import { runnerDir } from './chunk-ZM2IMMYN.js';

package/dist/{chunk-OULFBETM.js → chunk-DSPYQUH4.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { maintainedFilesForExistingSkills, loadMaintainedFiles, writeMaintainedFiles } from './chunk-OPSPDEVU.js';
-import { emitTree, parseOuterlayerConfig, classifyTree, generatedHeaderSource, CONTEXT_PIN_FILENAME, normalizePath } from './chunk-36H5BONJ.js';
+import { maintainedFilesForExistingSkills, loadMaintainedFiles, writeMaintainedFiles } from './chunk-WLV4KCAW.js';
+import { emitTree, parseOuterlayerConfig, classifyTree, generatedHeaderSource, CONTEXT_PIN_FILENAME, normalizePath } from './chunk-NKU5OPYP.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, copyFileSync, readdirSync } from 'fs';
 import { join, dirname, relative, sep } from 'path';
 

package/dist/{chunk-SMPKFYKY.js → chunk-FCDET2U5.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LiveUploader } from './chunk-YCHJIAP2.js';
-import { CaptureDaemon } from './chunk-HN2JBGSI.js';
+import { LiveUploader } from './chunk-H6IGIE3I.js';
+import { CaptureDaemon } from './chunk-CDISNKM4.js';
 import { parseWorkItemEnv } from './chunk-GQD22KKN.js';
-import { spoolDir } from './chunk-7HWIKEU5.js';
+import { spoolDir } from './chunk-K4MGMSMN.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { mkdirSync, writeFileSync, rmSync } from 'fs';
 import { join } from 'path';

package/dist/{chunk-4GS22GWM.js → chunk-FTW6C2E7.js}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { readStatuslineState, STATE_FRESH_MS } from './chunk-F47JBIAW.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-2OZH6ZY2.js';
-import { isLinkedRepository } from './chunk-EWBM2USM.js';
-import { sanitizeTerminal } from './chunk-ZYHKJKSU.js';
-import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-HN2JBGSI.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-TY7EZC7U.js';
+import { isLinkedRepository } from './chunk-TFJGK4UB.js';
+import { sanitizeTerminal } from './chunk-BL63NBJZ.js';
+import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-CDISNKM4.js';
 import { C } from './chunk-YRYMNBGQ.js';
 import { readSettings, settingsPath, isOurStatuslineSlot, statuslineWrappedOriginal, REGISTERED_EVENTS, isOurHookCommand, ourCommandBins, cliBinResolvable, ourDirectScriptBins, wrappedOriginalCommand } from './chunk-5QRP3MVS.js';
-import { readPin, readContextManifest, readDegraded, readSourceCache } from './chunk-42OX3Q3A.js';
+import { readPin, readContextManifest, readDegraded, readSourceCache } from './chunk-2MFYKH3C.js';
 import { defaultFetch } from './chunk-YO4PSLVB.js';
 import { resolveGatewayCredentials } from './chunk-PLMTLGYH.js';
 import { readCloudConfig } from './chunk-EABW6AJQ.js';
-import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-7HWIKEU5.js';
+import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-K4MGMSMN.js';
 import { deadHooksState, preparePackageManagerCommand, contextExcludesPresent } from './chunk-XCCLFVXM.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -1016,7 +1016,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-M65EXDE6.js');
+    const { runnerHostChecks } = await import('./doctor-FEIBPZL7.js');
     const hooks = (() => {
       try {
         return loadRunnerConfig(configPath).hooks;

package/dist/{chunk-BPTAOD6W.js → chunk-GJ3OWUFO.js}

@@ -3,22 +3,22 @@ import { createRequire } from 'node:module';
 import { readDefaultBranchHead, cloneRepository, buildRepositoryImage } from './chunk-Y7UQHKFY.js';
 import { startTimeOf, isSameProcess } from './chunk-N5FOE5PS.js';
 import { currentCliBuild } from './chunk-OGFGZQA3.js';
-import { createDockerHost, childEnvironment, spawnRun } from './chunk-NPBLDMSD.js';
+import { createDockerHost, childEnvironment, spawnRun } from './chunk-WGLWDX5J.js';
 import { RecipeError } from './chunk-QOZKPLVJ.js';
-import { builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, containerExecArgs } from './chunk-CLURXEWV.js';
+import { builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, containerExecArgs } from './chunk-DE4GLH3P.js';
 import { CLAUDE_CODE_VERSION, firecrackerArch, MICROVM_ARCHES, DEFAULT_BASE_IMAGE, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, FIRECRACKER_VERSION, GUEST_ASSETS_VERSION } from './chunk-CX22S5BA.js';
 import { execCapture } from './chunk-HWMYGAKF.js';
 import { GUEST_CID } from './chunk-2E2MG3KW.js';
-import { WorkCommandError, postJson } from './chunk-2OZH6ZY2.js';
-import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-HN2JBGSI.js';
+import { WorkCommandError, postJson } from './chunk-TY7EZC7U.js';
+import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-CDISNKM4.js';
 import { hostAllowed } from './chunk-UXYLWVTQ.js';
 import { parseDuKilobytes } from './chunk-7RQ73DLO.js';
 import { RELAY_PORT, CHECKOUT_DIR, JOB_MOUNT, claudeCredential, buildEnvironment, startBuildServices, checkEnvironment, AGENT_CREDENTIAL_MISSING } from './chunk-2FWL7CE2.js';
-import { defaultGitRunner, materializeContext } from './chunk-4NOIKXUL.js';
-import { readContextManifest, readSourceCache } from './chunk-42OX3Q3A.js';
-import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-36H5BONJ.js';
+import { defaultGitRunner, materializeContext } from './chunk-6AFQOYO3.js';
+import { readContextManifest, readSourceCache } from './chunk-2MFYKH3C.js';
+import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-NKU5OPYP.js';
 import { signingFetchFor } from './chunk-YO4PSLVB.js';
-import { downconvertSession } from './chunk-YNJEOGDL.js';
+import { downconvertSession } from './chunk-PK5NANMT.js';
 import { signerFor } from './chunk-V7NIVOFD.js';
 import { rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, stagedContextDir, contextHomeDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, buildDir, RUNNER_DIR_MODE, vmAssetsDir } from './chunk-ZM2IMMYN.js';
 import { relative, join, dirname, basename } from 'path';

package/dist/{chunk-YCHJIAP2.js → chunk-H6IGIE3I.js}

@@ -4,17 +4,17 @@ import { LaunchFilter } from './chunk-HHJDN6AU.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
 import { hookExecSpoolPath } from './chunk-F7CU5ABH.js';
 import { applyReportedCost } from './chunk-BKO6JEZI.js';
-import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-ZYHKJKSU.js';
-import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-HN2JBGSI.js';
+import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-BL63NBJZ.js';
+import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-CDISNKM4.js';
 import { C } from './chunk-YRYMNBGQ.js';
 import { readLaunchSpoolState, launchStatusIsDecisive, launchedItemsBySession, launchesPath } from './chunk-GQD22KKN.js';
 import { readLatestProvenanceForSession, readContextProvenance } from './chunk-ZJSNLVCE.js';
 import { defaultFetch } from './chunk-YO4PSLVB.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-PLMTLGYH.js';
-import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-YNJEOGDL.js';
+import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-PK5NANMT.js';
 import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-EABW6AJQ.js';
 import { signerFor, signRunnerRequest } from './chunk-V7NIVOFD.js';
-import { writeSyncStatus, spoolDir } from './chunk-7HWIKEU5.js';
+import { writeSyncStatus, spoolDir } from './chunk-K4MGMSMN.js';
 import { removeJournalHooks } from './chunk-XCCLFVXM.js';
 import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{chunk-OCHRV5A6.js → chunk-IOG6LPEI.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-VITHLJOZ.js';
-import { MIN_ENGINE_MAJOR } from './chunk-BPTAOD6W.js';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-LKUUQ3XV.js';
+import { MIN_ENGINE_MAJOR } from './chunk-GJ3OWUFO.js';
 import { RUNNER_DIR_MODE, runnerDir, RUNNER_FILE_MODE } from './chunk-ZM2IMMYN.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
 import { dirname } from 'path';

package/dist/{chunk-7HWIKEU5.js → chunk-K4MGMSMN.js}

@@ -628,7 +628,7 @@ async function runHookFast(event, home = homeFromEnv(), read = readStdin, env =
       recordHookErrorsSeen(home, hookErrorsBytes);
       if (contextPossiblyGoverned(sessionCwd, home)) {
         try {
-          const { materializeContext: materialize } = await import('./context-materialize-YBOW5YCC.js');
+          const { materializeContext: materialize } = await import('./context-materialize-DU6B6RXF.js');
           const sessionId = typeof payload.session_id === "string" ? payload.session_id : "unknown";
           const result = await materialize({ cwd: sessionCwd, sessionId, home });
           materializeMessage = result.message;

package/dist/{chunk-VITHLJOZ.js → chunk-LKUUQ3XV.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { MIN_ENGINE_MAJOR } from './chunk-BPTAOD6W.js';
+import { MIN_ENGINE_MAJOR } from './chunk-GJ3OWUFO.js';
 import { firecrackerArch, MICROVM_ARCHES, guestAssetsPinned } from './chunk-CX22S5BA.js';
 import { spawnSync } from 'child_process';
 import { existsSync, accessSync, constants, statSync, readFileSync } from 'fs';

package/dist/{chunk-SPUWEK2Q.js → chunk-LUY6I65J.js}

@@ -2,20 +2,20 @@
 import { createRequire } from 'node:module';
 import { decideInstalledSwitch, fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-IS4DIGBQ.js';
 import { compareVersions, satisfiesRange } from './chunk-I2UOAV7X.js';
-import { LEASE_SECONDS, releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, ALREADY_RELEASED } from './chunk-NT5M6LF3.js';
+import { LEASE_SECONDS, releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, ALREADY_RELEASED } from './chunk-4KPMIGBQ.js';
 import { writeJobFile, readJobFile, readJobFileChecked } from './chunk-T6OIJQRT.js';
 import { RUNNER_PROTOCOL } from './chunk-AIW6GLET.js';
 import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-UGP76IZ5.js';
-import { placeholderQueues, placeholderProblem } from './chunk-BORFBENT.js';
+import { placeholderQueues, placeholderProblem } from './chunk-SWGQAURM.js';
 import { currentVersion, entryIn, versionDir, startedThroughCurrent, writeMarker, readMarker, removeMarker, switchCurrent, cleanVersions, isInLayout, stagingDir } from './chunk-TI7B7UEO.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, provisionContainer, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandLine, BuildTokens, classifyRefusal, refusalCode, measureDisk, createRunnerLog, setUpRunnerCgroup, parseCpuList, ensureTunnel, keepGhConfigCurrent, createContainerRuntime, formatClock } from './chunk-BPTAOD6W.js';
+import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, provisionContainer, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandLine, BuildTokens, classifyRefusal, refusalCode, measureDisk, createRunnerLog, setUpRunnerCgroup, parseCpuList, ensureTunnel, keepGhConfigCurrent, createContainerRuntime, formatClock } from './chunk-GJ3OWUFO.js';
 import { checkFit } from './chunk-JKIWMRFH.js';
 import { startTimeOf, claimPidFile, readPidFile, isSameProcess, releasePidFile } from './chunk-N5FOE5PS.js';
-import { spawnRun } from './chunk-NPBLDMSD.js';
-import { builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, BUILD_LABEL, RUNNER_LABEL } from './chunk-CLURXEWV.js';
-import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-2OZH6ZY2.js';
+import { spawnRun } from './chunk-WGLWDX5J.js';
+import { builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, BUILD_LABEL, RUNNER_LABEL } from './chunk-DE4GLH3P.js';
+import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-TY7EZC7U.js';
 import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind } from './chunk-7KI224YS.js';
 import { exceedsDisk } from './chunk-7RQ73DLO.js';
 import { sharedUserEnvironment, JOB_MOUNT, claudeCredential } from './chunk-2FWL7CE2.js';
@@ -1232,7 +1232,7 @@ var CLAIM_REFUSAL_CODES = new Set(
   "pull_request_from_fork pull_request_on_default_branch pull_request_ambiguous branch_claimed_elsewhere".split(" ")
 );
 async function tryClaimAndStart(state, item, queue) {
-  const { postJson: postJson2 } = await import('./work-cmd-66GA4ETV.js');
+  const { postJson: postJson2 } = await import('./work-cmd-SBKQJBJ2.js');
   const log = logOf(state);
   const hostKey = await loadHostKey(state.config.configPath);
   const claim = await retrySend(
@@ -1956,7 +1956,7 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
     const outcome = await onStartUnderMarker({
       configPath,
       own: ownVersionOf(deps),
-      check: update.check ? () => update.check(configPath) : async () => (await import('./check-AFYUJ5SQ.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
+      check: update.check ? () => update.check(configPath) : async () => (await import('./check-NJX52PBN.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log
     });

package/dist/{chunk-WMPO3SKK.js → chunk-MSV44EB5.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { fetchFactories, selectFactory, saveFactoryConnection, connectedLine } from './chunk-EWBM2USM.js';
-import { resolveRepoIdentity } from './chunk-HN2JBGSI.js';
+import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-TFJGK4UB.js';
+import { resolveRepoIdentity } from './chunk-CDISNKM4.js';
 import { resolveGatewayCredentials } from './chunk-PLMTLGYH.js';
 import { findGitDirs, readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -16,7 +16,7 @@ async function autoConnect(opts) {
   const resolved = resolveGatewayCredentials({ url: opts.url, apiKey: opts.apiKey, appId: opts.appId, home, env, cwd });
   if (resolved.ok || resolved.kind !== "login" || !resolved.credential || !resolved.url) return void 0;
   const dirs = findGitDirs(cwd);
-  const repository = resolveRepoIdentity(cwd).gitRepo;
+  const repository = opts.repository ?? resolveRepoIdentity(cwd).gitRepo;
   if (dirs === void 0 || repository === void 0) return void 0;
   const listed = await fetchFactories(opts.fetchImpl ?? fetch, resolved.url, resolved.credential, repository);
   if (!listed.ok || listed.factories.length === 0) return void 0;
@@ -31,7 +31,7 @@ Or pass --app-id / set OUTERLAYER_APP_ID.`;
   } catch {
     return void 0;
   }
-  process.stderr.write(`${connectedLine(repository, chosen.factory, chosen.reason)}
+  process.stderr.write(`${autoConnectedLine(repository, chosen.factory, chosen.reason)}
 `);
   return void 0;
 }