@outerlayer/cli 0.8.5 → 0.9.0

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # @outerlayer/cli
 
+## 0.9.0
+
+### Minor Changes
+
+- a44097e: A runner now reads a governed repository's control plane with a read-only GitHub App token that the gateway issues for the build, so the host needs no git login for it. A gateway with no GitHub App still uses the host's git login. `outerlayer doctor` passes `Control plane access` through the App when the gateway has one. The runner protocol is now 15.
+
+### Patch Changes
+
+- accf74c: The amend skill now answers each criterion thread a reviewer sent a note on, replying on that thread and handing it back with `--ready`, instead of answering only the general thread.
+- 680086e: `outerlayer init` now says to commit and push `.outerlayer/` whenever it left files there, even when a step failed or the repository is not linked yet. `outerlayer connect` says the same when it succeeds and `.outerlayer/` holds uncommitted files.
+- 279f42a: `outerlayer runner init` on a Mac now creates a Linux VM, installs Node and the CLI in it, and sets up the runner there. It prints a progress line every 30 seconds while the image downloads.
+- d399d98: Inside a runner build, sessions, artifacts, findings and results name the repository again, for example `github.com/acme/app`. Previously they named the runner's git relay, `127.0.0.1:<port>/github.com/acme/app`. With the relay address, `outerlayer emit artifact --pr <n>` was refused with `item_key_out_of_scope`, and a session-bound artifact never attached to its pull request. When a git `insteadOf` rule rewrites a remote onto a loopback address, the CLI now reads the remote's URL as configured. Every other rewrite, such as a shorthand alias, is still followed.
+- dfb4b76: The runner no longer maps a `gitlab` tracker to a repository host, and `gitlab` is no longer an accepted work-item tracker. GitHub, Linear and Jira remain.
+- 80174a6: `outerlayer work release --item <n>`, run inside a session with no `--host`, now releases that session's own lease on the item, so a person can review a finished local build without closing the session. It never releases another session's lease. `--session-id` names the session when it cannot be detected, and `--host` keeps the release to a host's claim. The `build` template skill runs it as its last step.
+
+## 0.8.6
+
+### Patch Changes
+
+- 30ac1c5: A runner no longer reads a person's review as a check result. A build whose OuterLayer checks pass now finishes whether or not a person has reviewed it or marked a criterion as failed.
+
 ## 0.8.5
 
 ### Patch Changes

package/README.md

@@ -108,7 +108,8 @@ content:
   evidence verdict, before releasing it: it sends nothing but the request.
   Just before that read, the runner runs the repository's host checks. A host
   check is a command the repository's `where: host` validators declare. The
-  runner reads the definitions with the host's own git credentials, runs each
+  runner reads the definitions, through a control-plane token when the gateway
+  issues one and otherwise with the host's own git credentials, runs each
   command in a new container, and sends one `POST /v1/emitted-results` for
   each: the check's name, pass or fail, and for a fail the exit status and the
   last line of its output, scrubbed.
@@ -220,12 +221,17 @@ content:
 - **`outerlayer runner start` with `builtin:container` hooks** also asks your
   gateway which repository governs the item's repository (`GET
   /v1/context/source`, signed with the host key), after the recipe's
-  lifecycle commands. When one does, the runner runs `git fetch` against that
-  control plane on the host, with the host's own git credentials, and copies
-  its context into the checkout through the build's directory. The build
-  receives files and no credential for the control plane. The runner deletes
-  the staged copy before the command starts. A host that cannot read the
-  control plane fails the build at provision.
+  lifecycle commands. When one does, the runner asks your gateway for a
+  read-only token for that control plane (`POST /v1/work-items/{id}/claim/tokens`
+  with `target: control_plane`, signed with the host key), runs `git fetch`
+  against it on the host with that token, and copies its context into the
+  checkout through the build's directory. The token goes to git in its
+  environment for that one fetch, never to disk, a log or the build. The runner
+  revokes it when the attempt ends. A gateway with no GitHub App issues none,
+  and the fetch then uses the host's own git credentials. The build receives
+  files and no credential for the control plane. The runner deletes the staged
+  copy before the command starts. A host that cannot read the control plane
+  fails the build at provision.
 - **`outerlayer runner start` with `builtin:process` hooks** runs each build
   as a process under the runner's own user, with no isolation, and the
   attempt records `shared-user`. The runner clones the item's repository
@@ -269,9 +275,11 @@ content:
   say whether the version the runner's images pin is behind. The request
   names the package and nothing about the host. On a host with
   `builtin:container` hooks it also asks your gateway which repository governs
-  each repository in `repos.include` (`GET /v1/context/source`), then runs
-  `git ls-remote` against that control plane with the host's own git
-  credentials, to say whether the host can read it.
+  each repository in `repos.include` (`GET /v1/context/source`). When the
+  gateway has a GitHub App (`GET /v1/repositories/access` does not answer
+  `repository_tokens_unavailable`), builds read the control plane through it.
+  Otherwise doctor runs `git ls-remote` against the control plane with the
+  host's own git credentials, to say whether the host can read it.
 - **`outerlayer emit artifact`** uploads the file you name — a screenshot, a
   recording, a report, a log — along with its caption, its name, type, size
   and sha256, and the repository, branch, commit, pull request and CI run it
@@ -371,7 +379,7 @@ before it gives up.
 | `outerlayer work open-pr --title <text> --body-file <path> [--repo] [--session-id] [--json]` | Opens the pull request for the work item this session is on, or edits the one already open on its branch. A host build, which holds an item key, sends it to the gateway, which opens it as the factory's GitHub App from the branch the claim named; no `gh` command runs. Your own session runs `gh pr create` or `gh pr edit` under your login and then declares the pull request on the item. Run it again after changing the title or description. |
 | `outerlayer work claim --item <n>\|--issue <n> --kind implement\|amend [--repo] [--host] [--seconds]` | Records a lease for this host (default: its own hostname), so two hosts never build the same item at once. The lease belongs to the runner key that claimed it: a live lease held by a different key is refused, even under the same host name, and claiming again with the same key extends it. The first claim creates the host key (`host-key.pem` beside the config file) and binds the runner key to it; from then on every request made with that key is signed. Lease length defaults to 900 seconds, the server's own cap. |
 | `outerlayer work renew --item <n>\|--issue <n> [--repo] [--host] [--seconds]` | Extends this host's own live lease. Refused if the lease has expired, or if a different runner key holds it (403 `claim_not_held`). |
-| `outerlayer work release --item <n>\|--issue <n> [--repo] [--host] [--outcome]` | Marks the lease this API key holds released, optionally recording how the attempt ended. Releasing an already-released lease is a no-op that returns the recorded release time and outcome. |
+| `outerlayer work release --item <n>\|--issue <n> [--repo] [--host] [--session-id] [--outcome]` | Marks the lease this API key holds released, optionally recording how the attempt ended. Releasing an already-released lease is a no-op that returns the recorded release time and outcome. Run inside a session with no `--host`, it releases that session's own lease instead (`--session-id` names the session when it cannot be detected), so the item's review opens without ending the session. |
 | `outerlayer runner init [--vm\|--no-vm] [--config <path>]` | Writes a `runner` block with defaults, keeping every key the config already had. It names `builtin:vm` on a Linux machine where the user can use `/dev/kvm` and Docker Engine can build images once the guest kernel and helper are published (not yet), `builtin:container` on that machine until then, `builtin:container` on any other machine with Docker Engine, and `builtin:process` on one without, and writes no hook script. Refuses rather than overwriting an existing block. On macOS it asks whether to create a Linux VM with Lima, installs Docker Engine and the runner in it, and starts both at login; `--vm` answers yes and `--no-vm` answers no, and a run with no terminal answers no. The runner key and the host key then live only in the VM: the Mac's config loses `apiKey` and `runner` and gains a `runnerVm` note, which `outerlayer doctor` reads. |
 | `outerlayer runner check [--config <path>]` | Validates the config, the hooks and the key, prints the settings the runner would use, and exits non-zero on a problem. Takes no work and writes no pid file. |
 | `outerlayer runner start [--config <path>]` | Runs the loop: claim work, run it, sync, clean up, report, release with an outcome. Repeat. Reads the `runner` block from the config file (default `~/.outerlayer/config.json`). Refuses to start on a bad config, an unrunnable hook, or a refused key. |
@@ -433,9 +441,9 @@ or whose evaluation is still waiting on a session link, with the code
 commit of every pull request the item had at the time; once one of them
 moves, that pass stops counting and a fresh review is needed. The base
 branch's `review` policy key (default `required`, beside `merge_gate`)
-holds the item at "Awaiting a person's review" until a current pass
-exists. The evidence check on GitHub does not wait for that review: it
-completes once the automated checks pass and says the review is pending.
+changes only what the evidence check's title says. The check on GitHub never
+waits for the review: it completes once OuterLayer's checks pass, and under
+`merge_gate: on-flag` a person's request for changes fails it.
 
 A criterion thread is scoped to one acceptance criterion rather than the
 whole item: an agent attaches proof with `outerlayer work comment

package/dist/{agent-setup-LEQF4V5F.js → agent-setup-ODTDC3US.js}

@@ -1,18 +1,19 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { addStdioMcpEntryIfAbsent } from './chunk-47RS42OZ.js';
-import { installStarterPack } from './chunk-AGMIJ725.js';
-import { runEmit } from './chunk-DSPYQUH4.js';
+import { installStarterPack } from './chunk-SUMWRA7K.js';
+import { runEmit } from './chunk-YU5GL7QS.js';
 import { C } from './chunk-YRYMNBGQ.js';
-import { resolveGitCommonDir, defaultGitRunner } from './chunk-6AFQOYO3.js';
+import { resolveGitCommonDir, defaultGitRunner } from './chunk-RWQWPZB4.js';
 import './chunk-ZJSNLVCE.js';
-import { pinExists, readContextManifest } from './chunk-2MFYKH3C.js';
-import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-WLV4KCAW.js';
-import { generatedHeaderSource } from './chunk-NKU5OPYP.js';
+import { pinExists, readContextManifest } from './chunk-BMX3L7CR.js';
+import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-BGWTYRSS.js';
+import { generatedHeaderSource } from './chunk-TB7EP24C.js';
 import './chunk-YO4PSLVB.js';
 import './chunk-PLMTLGYH.js';
-import './chunk-PK5NANMT.js';
+import './chunk-YT35WGIP.js';
 import './chunk-EABW6AJQ.js';
+import './chunk-BYT5O5RV.js';
 import './chunk-RA3O54FC.js';
 import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';

package/dist/{build-3FSJR5OO.js → build-LELVCWHV.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { buildRepositoryImage } from './chunk-Y7UQHKFY.js';
+export { buildRepositoryImage } from './chunk-3FMPZPJQ.js';
 import './chunk-N5FOE5PS.js';
 export { RecipeError } from './chunk-QOZKPLVJ.js';
 import './chunk-CX22S5BA.js';
-import './chunk-HKMPVPO7.js';
+import './chunk-BYT5O5RV.js';
 import './chunk-ZM2IMMYN.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-05T22:28:11.797Z+f8373f9","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-07T00:34:36.863Z+f427d9c","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-5UFAF5LW.js → builder-5DKTBWT3.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-DE4GLH3P.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-TV36SKEN.js';
 import './chunk-CX22S5BA.js';
-import './chunk-CDISNKM4.js';
+import './chunk-LTJPX7TX.js';
 import './chunk-7RQ73DLO.js';
-import './chunk-2FWL7CE2.js';
-import './chunk-HKMPVPO7.js';
-import './chunk-PK5NANMT.js';
+import './chunk-M6G7TJVF.js';
+import './chunk-YT35WGIP.js';
+import './chunk-BYT5O5RV.js';
 import './chunk-ZM2IMMYN.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{check-HWYLSMEL.js → check-VJRJ2KQ4.js}

@@ -1,73 +1,83 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-ZMKXBWIK.js';
-import './chunk-IS4DIGBQ.js';
+import { probeCredentials } from './chunk-YCPV7FN6.js';
+import './chunk-3JVYMD4G.js';
 import './chunk-I2UOAV7X.js';
-import './chunk-4KPMIGBQ.js';
+import './chunk-ABIWDUMS.js';
+import './chunk-OSKO3PAL.js';
 import './chunk-T6OIJQRT.js';
-import './chunk-AIW6GLET.js';
+import './chunk-PDTSUOVT.js';
 import './chunk-UGP76IZ5.js';
-import './chunk-FCDET2U5.js';
-import './chunk-J5DPVNL3.js';
-import './chunk-H6IGIE3I.js';
+import './chunk-VMK7I3TB.js';
+import './chunk-V42JY4F6.js';
+import './chunk-543OT6V5.js';
 import './chunk-HHJDN6AU.js';
-import { placeholderQueues, placeholderProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem } from './chunk-SWGQAURM.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem } from './chunk-XGCJNSI7.js';
 import './chunk-TI7B7UEO.js';
 import './chunk-YYYRBYWG.js';
 import './chunk-TBT347UY.js';
-import './chunk-IOG6LPEI.js';
-import './chunk-LKUUQ3XV.js';
-import './chunk-GJ3OWUFO.js';
+import './chunk-WJBJY5DQ.js';
+import './chunk-QPPPUKQJ.js';
+import './chunk-LBU4CLK5.js';
+import { parseRunnerEnv } from './chunk-6MZSX4M7.js';
 import './chunk-JKIWMRFH.js';
-import './chunk-Y7UQHKFY.js';
+import './chunk-3FMPZPJQ.js';
 import './chunk-N5FOE5PS.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-WGLWDX5J.js';
+import './chunk-FKFGQJNN.js';
 import './chunk-QOZKPLVJ.js';
-import './chunk-DE4GLH3P.js';
+import './chunk-TV36SKEN.js';
 import './chunk-CX22S5BA.js';
-import './chunk-HWMYGAKF.js';
-import './chunk-2E2MG3KW.js';
+import './chunk-6CXYORUS.js';
+import './chunk-S6IUUNCD.js';
 import './chunk-F7CU5ABH.js';
 import './chunk-BKO6JEZI.js';
-import './chunk-TY7EZC7U.js';
-import './chunk-MSV44EB5.js';
+import './chunk-KWCJLAHQ.js';
+import './chunk-KPUJGBA4.js';
 import './chunk-BFESLKPP.js';
-import './chunk-TFJGK4UB.js';
-import './chunk-BL63NBJZ.js';
-import './chunk-CDISNKM4.js';
+import './chunk-LYESSQUA.js';
+import './chunk-ZEQMTBRD.js';
+import './chunk-LTJPX7TX.js';
 import './chunk-USO2DKBD.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
-import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-7KI224YS.js';
+import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-M2PBLRB7.js';
 import './chunk-UXYLWVTQ.js';
 import './chunk-7RQ73DLO.js';
-import './chunk-2FWL7CE2.js';
-import './chunk-HKMPVPO7.js';
+import './chunk-M6G7TJVF.js';
 import './chunk-GQD22KKN.js';
 import './chunk-WZBHBH3J.js';
 import './chunk-5QRP3MVS.js';
-import './chunk-6AFQOYO3.js';
+import './chunk-RWQWPZB4.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-2MFYKH3C.js';
-import './chunk-WLV4KCAW.js';
-import './chunk-NKU5OPYP.js';
+import './chunk-BMX3L7CR.js';
+import './chunk-BGWTYRSS.js';
+import './chunk-TB7EP24C.js';
 import './chunk-YO4PSLVB.js';
 import './chunk-PLMTLGYH.js';
-import './chunk-PK5NANMT.js';
+import './chunk-YT35WGIP.js';
 import './chunk-EABW6AJQ.js';
+import './chunk-BYT5O5RV.js';
 import './chunk-RA3O54FC.js';
 import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
-import './chunk-K4MGMSMN.js';
+import './chunk-4HMXH2OA.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';
+import { readFileSync } from 'fs';
+import { join, dirname } from 'path';
 
 createRequire(import.meta.url);
-
-// src/runner/check.ts
+function readRunnerEnv(path) {
+  try {
+    return { env: parseRunnerEnv(readFileSync(path, "utf8")) };
+  } catch (err) {
+    if (err.code === "ENOENT") return { env: {} };
+    return { error: err instanceof Error ? err.message : String(err) };
+  }
+}
 async function runRunnerCheck(configPath, deps = {}) {
   let config;
   try {
@@ -81,11 +91,35 @@ async function runRunnerCheck(configPath, deps = {}) {
   if (placeholders.length > 0) {
     return { ok: false, check: "placeholders", message: `${configPath}: ${placeholderProblem(placeholders)}` };
   }
+  const modeProblems = permissionModeProblems(config);
+  if (modeProblems.length > 0) {
+    return { ok: false, check: "permission mode", message: `${configPath}: ${permissionModeProblem(modeProblems)}` };
+  }
+  let credentialLine;
   if (needsClaudeCredential(config.hooks)) {
-    const credential = claudeCredentialCheck(deps.env ?? process.env);
+    const env = deps.env ?? process.env;
+    const runnerEnvPath = join(dirname(configPath), "runner.env");
+    const inShell = claudeCredentialCheck(env);
+    let credential = inShell;
+    if (inShell.status !== "pass") {
+      const fromFile = readRunnerEnv(runnerEnvPath);
+      if ("error" in fromFile) {
+        return {
+          ok: false,
+          check: "claude credential",
+          message: `the Claude credential is not in this shell, and ${runnerEnvPath} could not be read to look for it: ${fromFile.error}`
+        };
+      }
+      credential = claudeCredentialCheck(fromFile.env);
+    }
     if (credential.status === "fail") {
-      return { ok: false, check: "claude credential", message: `${credential.detail}. ${credential.fix}` };
+      return {
+        ok: false,
+        check: "claude credential",
+        message: `${credential.detail}, in this shell or in ${runnerEnvPath}. ${credential.fix}`
+      };
     }
+    credentialLine = `claude credential   ${credential.detail}${inShell.status === "pass" ? "" : ` (read from ${runnerEnvPath})`}`;
   }
   const probe = await probeCredentials(config, deps.fetchImpl);
   if (!probe.ok && probe.fatal) return { ok: false, check: "credentials", message: probe.reason };
@@ -103,6 +137,7 @@ async function runRunnerCheck(configPath, deps = {}) {
     `time limit          ${config.timeLimitMinutes}m`,
     `idle limit          ${config.idleLimitMinutes}m`,
     `auto update         ${config.autoUpdate ? "on" : "off"}`,
+    ...credentialLine === void 0 ? [] : [credentialLine],
     ...config.queues.map((queue) => `command ${queue.padEnd(11)} ${config.commands[queue] ?? "(none)"}`),
     `hook provision      ${config.hooks.provision}`,
     `hook cleanup        ${config.hooks.cleanup}`,

package/dist/{chunk-Y7UQHKFY.js → chunk-3FMPZPJQ.js}

@@ -3,7 +3,7 @@ import { createRequire } from 'node:module';
 import { startTimeOf, claimPidFile, RunnerAlreadyRunningError, releasePidFile } from './chunk-N5FOE5PS.js';
 import { RecipeError, locateRecipe, readRecipe, assertBuildable, writeSanitizedRecipe, classifyProperties, SANITIZED_NAME } from './chunk-QOZKPLVJ.js';
 import { CLAUDE_CODE_VERSION, NODE_IMAGE, DEFAULT_BASE_IMAGE, TINI_VERSION, GH_VERSION, GH_SHA256, TINI_SHA256 } from './chunk-CX22S5BA.js';
-import { withGitConfig } from './chunk-HKMPVPO7.js';
+import { withGitConfig, tokenHeader } from './chunk-BYT5O5RV.js';
 import { RUNNER_DIR_MODE, repoCacheDir, imagesDir, attemptStamp, runnerDir, rootfsPathFor, RUNNER_FILE_MODE } from './chunk-ZM2IMMYN.js';
 import { mkdirSync, rmSync, existsSync, mkdtempSync, cpSync, readFileSync, writeFileSync, readdirSync, lstatSync, readlinkSync } from 'fs';
 import { tmpdir } from 'os';
@@ -18,9 +18,6 @@ function gitEnvironment(base) {
   for (const name of INHERITED_REPOSITORY_VARIABLES) delete env[name];
   return env;
 }
-function tokenHeader(token) {
-  return `Authorization: Basic ${Buffer.from(`x-access-token:${token}`).toString("base64")}`;
-}
 function tokenSettings(remote, token) {
   return (env) => withGitConfig(env, `http.${remote}.extraHeader`, tokenHeader(token));
 }

package/dist/chunk-3JVYMD4G.js

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+
+createRequire(import.meta.url);
+
+// src/runner/update/installed-switch.ts
+function decideInstalledSwitch(input) {
+  const to = input.current;
+  if (to === void 0 || to === input.own || !input.fromCurrent) return { kind: "none" };
+  if (!input.installed) return { kind: "missing", to };
+  if (!input.underService) return { kind: "foreground", to };
+  return { kind: "restart", to };
+}
+function startedByService(env, parentPid) {
+  return (env.INVOCATION_ID ?? "") !== "" && parentPid === 1;
+}
+
+export { decideInstalledSwitch, startedByService };

package/dist/{chunk-K4MGMSMN.js → chunk-4HMXH2OA.js}

@@ -439,6 +439,12 @@ async function missingRenewalHookContext(home, cwd) {
   }
 }
 var WORK_LEASE_RENEW_DEBOUNCE_MS = 5 * 60 * 1e3;
+function markWorkLeaseRenewed(sessionId, home = homeFromEnv(), now = Date.now()) {
+  try {
+    writeFileSync(join(spoolDir(home), `work-lease-renew-${sessionId}`), String(now));
+  } catch {
+  }
+}
 async function maybeRenewWorkLease(event, sessionId, home = homeFromEnv(), env = process.env, spawnImpl = spawnDetached, now = Date.now(), cwd = process.cwd()) {
   try {
     if (event !== "PostToolUse") return;
@@ -628,7 +634,7 @@ async function runHookFast(event, home = homeFromEnv(), read = readStdin, env =
       recordHookErrorsSeen(home, hookErrorsBytes);
       if (contextPossiblyGoverned(sessionCwd, home)) {
         try {
-          const { materializeContext: materialize } = await import('./context-materialize-DU6B6RXF.js');
+          const { materializeContext: materialize } = await import('./context-materialize-KQZYATQZ.js');
           const sessionId = typeof payload.session_id === "string" ? payload.session_id : "unknown";
           const result = await materialize({ cwd: sessionCwd, sessionId, home });
           materializeMessage = result.message;
@@ -693,4 +699,4 @@ function recordLinkExitFailure(argv, home = homeFromEnv(), target = process) {
   });
 }
 
-export { AUTO_SYNC_DEBOUNCE_MS, SYNC_STALE_AFTER_MS, WORK_LEASE_RENEW_DEBOUNCE_MS, WORK_LINK_RETRIES, assessSyncHealth, checkInstalledCliStaleness, contextPossiblyGoverned, formatAgo, handleWorkLaunch, handleWorkSessionEnd, hookFiredMarkerPath, installedCliDistDir, logHookError, maybeAutoSync, maybeRenewWorkLease, readSyncStatus, recordLinkExitFailure, refreshCommand, runHookFast, sanitizeForContext, spoolDir, workspaceRootOf, writeSyncStatus };
+export { AUTO_SYNC_DEBOUNCE_MS, SYNC_STALE_AFTER_MS, WORK_LEASE_RENEW_DEBOUNCE_MS, WORK_LINK_RETRIES, assessSyncHealth, checkInstalledCliStaleness, contextPossiblyGoverned, formatAgo, handleWorkLaunch, handleWorkSessionEnd, hookFiredMarkerPath, installedCliDistDir, logHookError, markWorkLeaseRenewed, maybeAutoSync, maybeRenewWorkLease, readSyncStatus, recordLinkExitFailure, refreshCommand, runHookFast, sanitizeForContext, spoolDir, workspaceRootOf, writeSyncStatus };

package/dist/{chunk-H6IGIE3I.js → chunk-543OT6V5.js}

@@ -4,17 +4,17 @@ import { LaunchFilter } from './chunk-HHJDN6AU.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
 import { hookExecSpoolPath } from './chunk-F7CU5ABH.js';
 import { applyReportedCost } from './chunk-BKO6JEZI.js';
-import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-BL63NBJZ.js';
-import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-CDISNKM4.js';
+import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-ZEQMTBRD.js';
+import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-LTJPX7TX.js';
 import { C } from './chunk-YRYMNBGQ.js';
 import { readLaunchSpoolState, launchStatusIsDecisive, launchedItemsBySession, launchesPath } from './chunk-GQD22KKN.js';
 import { readLatestProvenanceForSession, readContextProvenance } from './chunk-ZJSNLVCE.js';
 import { defaultFetch } from './chunk-YO4PSLVB.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-PLMTLGYH.js';
-import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-PK5NANMT.js';
+import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-YT35WGIP.js';
 import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-EABW6AJQ.js';
 import { signerFor, signRunnerRequest } from './chunk-V7NIVOFD.js';
-import { writeSyncStatus, spoolDir } from './chunk-K4MGMSMN.js';
+import { writeSyncStatus, spoolDir } from './chunk-4HMXH2OA.js';
 import { removeJournalHooks } from './chunk-XCCLFVXM.js';
 import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{chunk-PVC36MFI.js → chunk-5MF73XCV.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { autoConnect } from './chunk-MSV44EB5.js';
+import { autoConnect } from './chunk-KPUJGBA4.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import { resolveRepoIdentity } from './chunk-CDISNKM4.js';
+import { resolveRepoIdentity } from './chunk-LTJPX7TX.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { defaultFetch } from './chunk-YO4PSLVB.js';
 import { unauthorizedMessage, resolveGatewayCredentials } from './chunk-PLMTLGYH.js';

package/dist/{chunk-HWMYGAKF.js → chunk-6CXYORUS.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { EXEC_PORT } from './chunk-2E2MG3KW.js';
+import { EXEC_PORT } from './chunk-S6IUUNCD.js';
 import { createConnection } from 'net';
 
 createRequire(import.meta.url);

package/dist/{inspect-XAUSB7L3.js → chunk-6MZSX4M7.js}

@@ -1,6 +1,5 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import './chunk-Z5GEFMRW.js';
 import { spawnSync } from 'child_process';
 import { statSync, readFileSync } from 'fs';
 import { join } from 'path';
@@ -15,11 +14,18 @@ function holdsGroup(status, gid) {
   const supplementary = /^Groups:[ \t]*(.*)$/m.exec(status)?.[1]?.trim().split(/\s+/).filter((g) => g !== "") ?? [];
   return [primary, ...supplementary].some((g) => g !== void 0 && Number(g) === gid);
 }
+function parseRunnerEnv(text) {
+  const env = {};
+  for (const line of text.split("\n")) {
+    const match = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)=(.*)$/.exec(line);
+    if (match === null) continue;
+    env[match[1]] = match[2].trim().replace(/^(["'])(.*)\1$/, "$2");
+  }
+  return env;
+}
 function credentialNames(env) {
-  const set = new Set(
-    (env ?? "").split("\n").map((line) => /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)=(.+)$/.exec(line)).flatMap((m) => m === null || m[2].trim() === "" ? [] : [m[1]])
-  );
-  return CREDENTIAL_VARIABLES.filter((name) => set.has(name));
+  const set = parseRunnerEnv(env ?? "");
+  return CREDENTIAL_VARIABLES.filter((name) => (set[name] ?? "").trim() !== "");
 }
 function inspectService(unit, configDir, probes) {
   const shown = probes.show(unit);
@@ -60,4 +66,4 @@ function realInspectProbes() {
   };
 }
 
-export { inspectService, realInspectProbes };
+export { inspectService, parseRunnerEnv, realInspectProbes };

package/dist/{chunk-IS4DIGBQ.js → chunk-ABIWDUMS.js}

@@ -6,18 +6,6 @@ import { join, dirname } from 'path';
 import { createHash } from 'crypto';
 
 createRequire(import.meta.url);
-
-// src/runner/update/installed-switch.ts
-function decideInstalledSwitch(input) {
-  const to = input.current;
-  if (to === void 0 || to === input.own || !input.fromCurrent) return { kind: "none" };
-  if (!input.installed) return { kind: "missing", to };
-  if (!input.underService) return { kind: "foreground", to };
-  return { kind: "restart", to };
-}
-function startedByService(env, parentPid) {
-  return (env.INVOCATION_ID ?? "") !== "" && parentPid === 1;
-}
 var REGISTRY_URL = "https://registry.npmjs.org";
 var PACKAGE_NAME = "@outerlayer/cli";
 var PACKAGE_PATH = "@outerlayer%2fcli";
@@ -113,4 +101,4 @@ async function auditSignatures(runNpm, dir) {
   return { ok: true };
 }
 
-export { auditSignatures, decideInstalledSwitch, fetchProvenance, fetchTarballDigest, fetchVersionMeta, installVersion, npmSupportsProvenance, npmVersion, realRunNode, realRunNpm, startedByService };
+export { auditSignatures, fetchProvenance, fetchTarballDigest, fetchVersionMeta, installVersion, npmSupportsProvenance, npmVersion, realRunNode, realRunNpm };

package/dist/{chunk-WLV4KCAW.js → chunk-BGWTYRSS.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { splitRawFile } from './chunk-NKU5OPYP.js';
+import { splitRawFile } from './chunk-TB7EP24C.js';
 import { resolvePackageVersion } from './chunk-RA3O54FC.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, readdirSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-2MFYKH3C.js → chunk-BMX3L7CR.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { CONTEXT_PIN_SCHEMA_VERSION, CONTEXT_PIN_FILENAME } from './chunk-NKU5OPYP.js';
+import { CONTEXT_PIN_SCHEMA_VERSION, CONTEXT_PIN_FILENAME } from './chunk-TB7EP24C.js';
 import { readFileSync, existsSync, writeFileSync, mkdirSync, utimesSync, statSync, unlinkSync } from 'fs';
 import { join, dirname } from 'path';
 

package/dist/{chunk-HKMPVPO7.js → chunk-BYT5O5RV.js}

@@ -42,6 +42,12 @@ function withGitConfig(env, key, value) {
     [`GIT_CONFIG_VALUE_${at}`]: value
   };
 }
+function tokenHeader(token) {
+  return `Authorization: Basic ${Buffer.from(`x-access-token:${token}`).toString("base64")}`;
+}
+function withTokenHeader(env, url, token) {
+  return withGitConfig(env, `http.${url}.extraHeader`, tokenHeader(token));
+}
 function withHooksPath(env, dir) {
   return withGitConfig(env, "core.hooksPath", dir);
 }
@@ -52,4 +58,4 @@ function commitIdentityRecord(identity) {
   };
 }
 
-export { authorEnvironment, commitIdentityRecord, parseClaimIdentity, withGitConfig, withHooksPath };
+export { authorEnvironment, commitIdentityRecord, parseClaimIdentity, tokenHeader, withGitConfig, withHooksPath, withTokenHeader };

package/dist/{chunk-WGLWDX5J.js → chunk-FKFGQJNN.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { RecipeError } from './chunk-QOZKPLVJ.js';
-import { trackImageBuild, isOutOfMemory, ensureBuilder } from './chunk-DE4GLH3P.js';
+import { trackImageBuild, isOutOfMemory, ensureBuilder } from './chunk-TV36SKEN.js';
 import { spawn } from 'child_process';
 import { existsSync, mkdirSync, createWriteStream, rmSync, readFileSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-MSV44EB5.js → chunk-KPUJGBA4.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-TFJGK4UB.js';
-import { resolveRepoIdentity } from './chunk-CDISNKM4.js';
+import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-LYESSQUA.js';
+import { resolveRepoIdentity } from './chunk-LTJPX7TX.js';
 import { resolveGatewayCredentials } from './chunk-PLMTLGYH.js';
 import { findGitDirs, readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{chunk-TY7EZC7U.js → chunk-KWCJLAHQ.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { autoConnect } from './chunk-MSV44EB5.js';
+import { autoConnect } from './chunk-KPUJGBA4.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import { sanitizeTerminal } from './chunk-BL63NBJZ.js';
-import { resolveRepoIdentity } from './chunk-CDISNKM4.js';
+import { sanitizeTerminal } from './chunk-ZEQMTBRD.js';
+import { resolveRepoIdentity } from './chunk-LTJPX7TX.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { defaultFetch } from './chunk-YO4PSLVB.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-PLMTLGYH.js';
@@ -347,7 +347,7 @@ async function runWorkLinkSession(opts) {
     return await linkSession(opts);
   } catch (err) {
     if (opts.logFailures) {
-      const { logHookError } = await import('./hook-fast-CFLLVMSV.js');
+      const { logHookError } = await import('./hook-fast-AQCAQIA6.js');
       const reason = err instanceof Error ? err.message : String(err);
       logHookError(opts.home ?? homeFromEnv(opts.env ?? process.env), new Error(`work link-session #${opts.number} failed: ${reason}`));
     }
@@ -505,4 +505,4 @@ async function runWorkList(opts) {
   return { data, output };
 }
 
-export { WorkCommandError, findLiveItem, getJson, isSignatureRefusal, parsePositiveInt, postJson, resolveCredentials, resolveRepository, runWorkBuild, runWorkLinkSession, runWorkList, runWorkRemove, runWorkStatus, signatureRefusalMessage };
+export { WorkCommandError, environmentFacts, findLiveItem, getJson, isSignatureRefusal, parsePositiveInt, postJson, resolveCredentials, resolveRepository, runWorkBuild, runWorkLinkSession, runWorkList, runWorkRemove, runWorkStatus, signatureRefusalMessage };