@outerlayer/cli 0.8.5 → 0.9.0

package/dist/{context-adopt-3REPEEQR.js → context-adopt-A77G67CP.js}

@@ -1,14 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { defaultGitRunner, hasSymlinkComponent } from './chunk-6AFQOYO3.js';
+import { defaultGitRunner, hasSymlinkComponent } from './chunk-RWQWPZB4.js';
 import './chunk-ZJSNLVCE.js';
-import { writeContextManifest, writePinIfChanged, touchLastCheck, clearDegraded, writeSourceCache, SOURCE_CACHE_TTL_SUCCESS_MS, writeBuildHold } from './chunk-2MFYKH3C.js';
-import './chunk-WLV4KCAW.js';
-import './chunk-NKU5OPYP.js';
+import { writeContextManifest, writePinIfChanged, touchLastCheck, clearDegraded, writeSourceCache, SOURCE_CACHE_TTL_SUCCESS_MS, writeBuildHold } from './chunk-BMX3L7CR.js';
+import './chunk-BGWTYRSS.js';
+import './chunk-TB7EP24C.js';
 import './chunk-YO4PSLVB.js';
 import './chunk-PLMTLGYH.js';
-import './chunk-PK5NANMT.js';
+import './chunk-YT35WGIP.js';
 import './chunk-EABW6AJQ.js';
+import './chunk-BYT5O5RV.js';
 import './chunk-RA3O54FC.js';
 import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';

package/dist/{context-materialize-DU6B6RXF.js → context-materialize-KQZYATQZ.js}

@@ -1,14 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { defaultGitRunner, hasSymlinkComponent, materializeContext, parseOwnerRepo, parseRemoteHost, resolveGitCommonDir } from './chunk-6AFQOYO3.js';
+export { defaultGitRunner, hasSymlinkComponent, materializeContext, parseOwnerRepo, parseRemoteHost, resolveGitCommonDir } from './chunk-RWQWPZB4.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-2MFYKH3C.js';
-import './chunk-WLV4KCAW.js';
-import './chunk-NKU5OPYP.js';
+import './chunk-BMX3L7CR.js';
+import './chunk-BGWTYRSS.js';
+import './chunk-TB7EP24C.js';
 import './chunk-YO4PSLVB.js';
 import './chunk-PLMTLGYH.js';
-import './chunk-PK5NANMT.js';
+import './chunk-YT35WGIP.js';
 import './chunk-EABW6AJQ.js';
+import './chunk-BYT5O5RV.js';
 import './chunk-RA3O54FC.js';
 import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';

package/dist/{dist-PKBWZAAL.js → dist-QY5CL5LB.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { CaptureDaemon, PRICE_TABLE_SOURCE, SECRET_PATTERNS, SOURCE_ADAPTERS, SUPPORTED_VERSIONS, StatuslineAggregator, WARNING_CODES, claudeCodeAdapter, codexAdapter, codexSessionIdFromPath, compareVersions, completePrefix, computeStatuslineState, costOfUsage, cursorAdapter, cursorChatIdFromPath, defaultCodexSessionsDir, defaultCursorChatsDir, defaultCursorProjectsDir, defaultProjectsDir, defaultRawDir, enrichSessionRepo, findCodexRollouts, findCursorChats, findTranscripts, isNewerThanSupported, isPriceKnown, normalizeErrorSignature, normalizeRemote, parseCodexRollout, parseCursorChat, parseTranscript, readStatuslineState, readSyncWatermarkMs, remoteLookupFailed, resolvePrice, resolveRepoIdentity, rootChildIds, scanAll, scrubDeep, scrubText, sessionIdFromPath, setCustomScrubbers, setLocalIdentity, setRepoRoot, statuslineStatePath, tailTranscript, workspacesByHash, writeStatuslineState } from './chunk-CDISNKM4.js';
-import './chunk-PK5NANMT.js';
+export { CaptureDaemon, PRICE_TABLE_SOURCE, SECRET_PATTERNS, SOURCE_ADAPTERS, SUPPORTED_VERSIONS, StatuslineAggregator, WARNING_CODES, claudeCodeAdapter, codexAdapter, codexSessionIdFromPath, compareVersions, completePrefix, computeStatuslineState, costOfUsage, cursorAdapter, cursorChatIdFromPath, defaultCodexSessionsDir, defaultCursorChatsDir, defaultCursorProjectsDir, defaultProjectsDir, defaultRawDir, enrichSessionRepo, findCodexRollouts, findCursorChats, findTranscripts, isNewerThanSupported, isPriceKnown, normalizeErrorSignature, normalizeRemote, parseCodexRollout, parseCursorChat, parseTranscript, readStatuslineState, readSyncWatermarkMs, remoteLookupFailed, resolvePrice, resolveRepoIdentity, rootChildIds, scanAll, scrubDeep, scrubText, sessionIdFromPath, setCustomScrubbers, setLocalIdentity, setRepoRoot, statuslineStatePath, tailTranscript, workspacesByHash, writeStatuslineState } from './chunk-LTJPX7TX.js';
+import './chunk-YT35WGIP.js';
 import './chunk-Z5GEFMRW.js';
 
 createRequire(import.meta.url);

package/dist/{docker-5DUNHNOH.js → docker-V7B6UKPF.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { childEnvironment, createDockerHost, spawnRun } from './chunk-WGLWDX5J.js';
+export { childEnvironment, createDockerHost, spawnRun } from './chunk-FKFGQJNN.js';
 import './chunk-QOZKPLVJ.js';
-import './chunk-DE4GLH3P.js';
+import './chunk-TV36SKEN.js';
 import './chunk-CX22S5BA.js';
-import './chunk-CDISNKM4.js';
+import './chunk-LTJPX7TX.js';
 import './chunk-7RQ73DLO.js';
-import './chunk-2FWL7CE2.js';
-import './chunk-HKMPVPO7.js';
-import './chunk-PK5NANMT.js';
+import './chunk-M6G7TJVF.js';
+import './chunk-YT35WGIP.js';
+import './chunk-BYT5O5RV.js';
 import './chunk-ZM2IMMYN.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{doctor-FEIBPZL7.js → doctor-PUAL5LTL.js}

@@ -1,46 +1,46 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { needsClaudeCredential, claudeCredentialCheck, missingPermissionOf, missingPermissionFix } from './chunk-SWGQAURM.js';
+import { needsClaudeCredential, claudeCredentialCheck, missingPermissionOf, missingPermissionFix } from './chunk-XGCJNSI7.js';
 import { launcherCheck } from './chunk-PTW6W5NR.js';
 import './chunk-TI7B7UEO.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import './chunk-IOG6LPEI.js';
-import { detectMachine, supportsContainerBuilds, describeMachineDocker, reachDockerStep, supportsMicroVmBuilds, microVmArchSupported, microVmAssetsPinned } from './chunk-LKUUQ3XV.js';
-import { MIN_ENGINE_MAJOR } from './chunk-GJ3OWUFO.js';
-import './chunk-Y7UQHKFY.js';
+import './chunk-WJBJY5DQ.js';
+import { detectMachine, supportsContainerBuilds, describeMachineDocker, reachDockerStep, supportsMicroVmBuilds, microVmArchSupported, microVmAssetsPinned } from './chunk-QPPPUKQJ.js';
+import { MIN_ENGINE_MAJOR } from './chunk-LBU4CLK5.js';
+import './chunk-3FMPZPJQ.js';
 import './chunk-N5FOE5PS.js';
 import './chunk-OGFGZQA3.js';
-import { resolveDevcontainerCli, spawnRun } from './chunk-WGLWDX5J.js';
+import { resolveDevcontainerCli, spawnRun } from './chunk-FKFGQJNN.js';
 import { locateRecipe, assertBuildable, readRecipe, RecipeError } from './chunk-QOZKPLVJ.js';
-import { buildxState } from './chunk-DE4GLH3P.js';
+import { buildxState } from './chunk-TV36SKEN.js';
 import { CLAUDE_CODE_VERSION } from './chunk-CX22S5BA.js';
-import './chunk-HWMYGAKF.js';
-import './chunk-2E2MG3KW.js';
-import { getJson, WorkCommandError, signatureRefusalMessage } from './chunk-TY7EZC7U.js';
-import './chunk-MSV44EB5.js';
+import './chunk-6CXYORUS.js';
+import './chunk-S6IUUNCD.js';
+import { getJson, WorkCommandError, signatureRefusalMessage } from './chunk-KWCJLAHQ.js';
+import './chunk-KPUJGBA4.js';
 import './chunk-BFESLKPP.js';
-import './chunk-TFJGK4UB.js';
-import './chunk-BL63NBJZ.js';
-import { compareVersions } from './chunk-CDISNKM4.js';
+import './chunk-LYESSQUA.js';
+import './chunk-ZEQMTBRD.js';
+import { compareVersions } from './chunk-LTJPX7TX.js';
 import './chunk-USO2DKBD.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
-import { builtinKind } from './chunk-7KI224YS.js';
+import { builtinKind } from './chunk-M2PBLRB7.js';
 import { allowHostProblem, MAX_ALLOW_HOSTS } from './chunk-UXYLWVTQ.js';
 import { parseSize } from './chunk-7RQ73DLO.js';
-import './chunk-2FWL7CE2.js';
-import './chunk-HKMPVPO7.js';
+import './chunk-M6G7TJVF.js';
 import './chunk-WZBHBH3J.js';
-import { defaultGitRunner } from './chunk-6AFQOYO3.js';
+import { defaultGitRunner } from './chunk-RWQWPZB4.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-2MFYKH3C.js';
-import './chunk-WLV4KCAW.js';
-import './chunk-NKU5OPYP.js';
+import './chunk-BMX3L7CR.js';
+import './chunk-BGWTYRSS.js';
+import './chunk-TB7EP24C.js';
 import { defaultFetch } from './chunk-YO4PSLVB.js';
 import './chunk-PLMTLGYH.js';
-import './chunk-PK5NANMT.js';
+import './chunk-YT35WGIP.js';
 import './chunk-EABW6AJQ.js';
+import './chunk-BYT5O5RV.js';
 import './chunk-RA3O54FC.js';
 import { loadHostKey } from './chunk-V7NIVOFD.js';
 import { runnerDir, hostKeyPath, jobsDir } from './chunk-ZM2IMMYN.js';
@@ -371,21 +371,28 @@ async function controlPlaneAccessCheck(env, fetchImpl) {
     }
     repositories.push({ host, repository: `${owner}/${repo}` });
   }
+  let listing;
+  let hasApp;
+  try {
+    const { data } = await getJson(env.gateway.url, "/v1/repositories/access", env.gateway.apiKey, env.gateway.appId, fetchImpl, signer);
+    listing = { ok: true, data };
+    hasApp = true;
+  } catch (err) {
+    listing = { ok: false, message: err instanceof Error ? err.message : String(err) };
+    hasApp = err instanceof WorkCommandError && err.code === "github_unavailable";
+  }
   if (listFactory) {
-    try {
-      const { data } = await getJson(env.gateway.url, "/v1/repositories/access", env.gateway.apiKey, env.gateway.appId, fetchImpl, signer);
+    if (!listing.ok) {
+      warnings.push(`could not list the factory's repositories: ${listing.message}`);
+    } else if (!Array.isArray(listing.data)) {
+      warnings.push("the gateway's answer listed no repositories");
+    } else {
       const filter = new RepoFilter(env.repos);
-      if (!Array.isArray(data)) {
-        warnings.push("the gateway's answer listed no repositories");
-      } else {
-        for (const row of data) {
-          if (typeof row.repository !== "string") continue;
-          const known = repositories.some((r) => r.host === "github.com" && r.repository === row.repository);
-          if (!known && filter.allows(`github.com/${row.repository}`)) repositories.push({ host: "github.com", repository: row.repository });
-        }
+      for (const row of listing.data) {
+        if (typeof row.repository !== "string") continue;
+        const known = repositories.some((r) => r.host === "github.com" && r.repository === row.repository);
+        if (!known && filter.allows(`github.com/${row.repository}`)) repositories.push({ host: "github.com", repository: row.repository });
       }
-    } catch (err) {
-      warnings.push(`could not list the factory's repositories: ${err instanceof Error ? err.message : String(err)}`);
     }
   }
   for (const { host, repository } of repositories) {
@@ -398,6 +405,10 @@ async function controlPlaneAccessCheck(env, fetchImpl) {
       continue;
     }
     for (const source of sources) {
+      if (hasApp) {
+        readable.push(source.repository);
+        continue;
+      }
       const url = env.controlPlaneUrl?.(source.repository, host) ?? `https://${host}/${source.repository}.git`;
       const listed = git(["ls-remote", url, source.ref], { cwd: tmpdir(), timeoutMs: 15e3 });
       if (listed.ok) {
@@ -419,7 +430,7 @@ async function controlPlaneAccessCheck(env, fetchImpl) {
   return {
     name,
     status: "pass",
-    detail: readable.length > 0 ? `this host's git login reads ${[...new Set(readable)].join(", ")}` : repositories.length === 0 ? "the factory has no repositories this runner builds" : `no control plane governs ${repositories.length === 1 ? "the repository" : "any of the repositories"} ${listFactory ? "connected to the factory" : "in repos.include"}`
+    detail: readable.length > 0 ? hasApp ? `the runner reads ${[...new Set(readable)].join(", ")} through the GitHub App, so this host needs no git login for it` : `this host's git login reads ${[...new Set(readable)].join(", ")}` : repositories.length === 0 ? "the factory has no repositories this runner builds" : `no control plane governs ${repositories.length === 1 ? "the repository" : "any of the repositories"} ${listFactory ? "connected to the factory" : "in repos.include"}`
   };
 }
 function imageBuildLimitCheck(state, buildMemory) {

package/dist/{emit-artifact-cmd-S3CASUQK.js → emit-artifact-cmd-P3IWNSQY.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { staleBuildRefusal, staleBuildWarning, detectCi } from './chunk-H6IGIE3I.js';
+import { staleBuildRefusal, staleBuildWarning, detectCi } from './chunk-543OT6V5.js';
 import { launchRefusalForSession } from './chunk-HHJDN6AU.js';
 import './chunk-TBT347UY.js';
 import './chunk-F7CU5ABH.js';
 import './chunk-BKO6JEZI.js';
-import { autoConnect } from './chunk-MSV44EB5.js';
+import { autoConnect } from './chunk-KPUJGBA4.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import './chunk-TFJGK4UB.js';
-import { readEffectiveArtifactSpoolState, localArtifactIds, isArtifactTombstoned, artifactBlobsDir, appendArtifactRecord, artifactsSpoolPath, findPendingArtifactRecord, appendArtifactTombstone } from './chunk-BL63NBJZ.js';
-import { resolveRepoIdentity } from './chunk-CDISNKM4.js';
+import './chunk-LYESSQUA.js';
+import { readEffectiveArtifactSpoolState, localArtifactIds, isArtifactTombstoned, artifactBlobsDir, appendArtifactRecord, artifactsSpoolPath, findPendingArtifactRecord, appendArtifactTombstone } from './chunk-ZEQMTBRD.js';
+import { resolveRepoIdentity } from './chunk-LTJPX7TX.js';
 import './chunk-USO2DKBD.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
@@ -19,11 +19,11 @@ import './chunk-5QRP3MVS.js';
 import './chunk-ZJSNLVCE.js';
 import { defaultFetch } from './chunk-YO4PSLVB.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-PLMTLGYH.js';
-import { ARTIFACT_MAX_CAPTION_LENGTH, ArtifactCriterionIdSchema, ARTIFACT_MAX_FILENAME_LENGTH, mediaTypeForArtifactPath, inferArtifactKind, ARTIFACT_MAX_REPLACES_TARGETS, parseTestSelector, parseJunit, bindTests } from './chunk-PK5NANMT.js';
+import { ARTIFACT_MAX_CAPTION_LENGTH, ArtifactCriterionIdSchema, ARTIFACT_MAX_FILENAME_LENGTH, mediaTypeForArtifactPath, inferArtifactKind, ARTIFACT_MAX_REPLACES_TARGETS, parseTestSelector, parseJunit, bindTests } from './chunk-YT35WGIP.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
-import './chunk-K4MGMSMN.js';
+import './chunk-4HMXH2OA.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{emit-cmd-ETI47BA6.js → emit-cmd-SU62J2PB.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { EmitError, runEmit } from './chunk-DSPYQUH4.js';
-import './chunk-WLV4KCAW.js';
-import './chunk-NKU5OPYP.js';
-import './chunk-PK5NANMT.js';
+export { EmitError, runEmit } from './chunk-YU5GL7QS.js';
+import './chunk-BGWTYRSS.js';
+import './chunk-TB7EP24C.js';
+import './chunk-YT35WGIP.js';
 import './chunk-RA3O54FC.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{emit-criteria-cmd-ZTUP7OGA.js → emit-criteria-cmd-GOSP6X74.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-HHJDN6AU.js';
-import { autoConnect } from './chunk-MSV44EB5.js';
+import { autoConnect } from './chunk-KPUJGBA4.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import './chunk-TFJGK4UB.js';
-import './chunk-BL63NBJZ.js';
-import { resolveRepoIdentity } from './chunk-CDISNKM4.js';
+import './chunk-LYESSQUA.js';
+import './chunk-ZEQMTBRD.js';
+import { resolveRepoIdentity } from './chunk-LTJPX7TX.js';
 import './chunk-USO2DKBD.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
@@ -13,7 +13,7 @@ import { launchedItemForSession } from './chunk-GQD22KKN.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { defaultFetch } from './chunk-YO4PSLVB.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-PLMTLGYH.js';
-import { CriteriaListSchema } from './chunk-PK5NANMT.js';
+import { CriteriaListSchema } from './chunk-YT35WGIP.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';

package/dist/{emit-finding-cmd-TTXBZ4B7.js → emit-finding-cmd-D554IQKU.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-HHJDN6AU.js';
-import { autoConnect } from './chunk-MSV44EB5.js';
+import { autoConnect } from './chunk-KPUJGBA4.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import './chunk-TFJGK4UB.js';
-import './chunk-BL63NBJZ.js';
-import { resolveRepoIdentity } from './chunk-CDISNKM4.js';
+import './chunk-LYESSQUA.js';
+import './chunk-ZEQMTBRD.js';
+import { resolveRepoIdentity } from './chunk-LTJPX7TX.js';
 import './chunk-USO2DKBD.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
@@ -14,7 +14,7 @@ import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { readLatestProvenanceForSession } from './chunk-ZJSNLVCE.js';
 import { defaultFetch } from './chunk-YO4PSLVB.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-PLMTLGYH.js';
-import { FindingBatchSchema } from './chunk-PK5NANMT.js';
+import { FindingBatchSchema } from './chunk-YT35WGIP.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';

package/dist/{emit-result-cmd-34OC6TI5.js → emit-result-cmd-QACXTIBV.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectCi } from './chunk-H6IGIE3I.js';
+import { detectCi } from './chunk-543OT6V5.js';
 import { launchRefusalForSession } from './chunk-HHJDN6AU.js';
 import './chunk-TBT347UY.js';
 import './chunk-F7CU5ABH.js';
 import './chunk-BKO6JEZI.js';
-import { autoConnect } from './chunk-MSV44EB5.js';
+import { autoConnect } from './chunk-KPUJGBA4.js';
 import { detectActiveSession } from './chunk-BFESLKPP.js';
-import './chunk-TFJGK4UB.js';
-import './chunk-BL63NBJZ.js';
-import { resolveRepoIdentity } from './chunk-CDISNKM4.js';
+import './chunk-LYESSQUA.js';
+import './chunk-ZEQMTBRD.js';
+import { resolveRepoIdentity } from './chunk-LTJPX7TX.js';
 import './chunk-USO2DKBD.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
@@ -19,11 +19,11 @@ import './chunk-5QRP3MVS.js';
 import './chunk-ZJSNLVCE.js';
 import { defaultFetch } from './chunk-YO4PSLVB.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-PLMTLGYH.js';
-import { EmittedNameSchema, EMITTED_RESULT_MAX_LINK_LENGTH, EMITTED_RESULTS, EMITTED_RESULT_MAX_BODY_LENGTH } from './chunk-PK5NANMT.js';
+import { EmittedNameSchema, EMITTED_RESULT_MAX_LINK_LENGTH, EMITTED_RESULTS, EMITTED_RESULT_MAX_BODY_LENGTH } from './chunk-YT35WGIP.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
-import './chunk-K4MGMSMN.js';
+import './chunk-4HMXH2OA.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{exec-client-2UX6NHAO.js → exec-client-QTUO6TZT.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { CAPTURE_LIMIT_BYTES, ExecConnectionError, HANDSHAKE_TIMEOUT_MS, execCapture, runExec, runVmExec, vmExecArgs, waitForAgent } from './chunk-HWMYGAKF.js';
-import './chunk-2E2MG3KW.js';
-import './chunk-2FWL7CE2.js';
-import './chunk-HKMPVPO7.js';
+export { CAPTURE_LIMIT_BYTES, ExecConnectionError, HANDSHAKE_TIMEOUT_MS, execCapture, runExec, runVmExec, vmExecArgs, waitForAgent } from './chunk-6CXYORUS.js';
+import './chunk-S6IUUNCD.js';
+import './chunk-M6G7TJVF.js';
+import './chunk-BYT5O5RV.js';
 import './chunk-Z5GEFMRW.js';
 
 createRequire(import.meta.url);

package/dist/{guest-init-VHQNFCFS.js → guest-init-4UW4HM6N.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DOCKERD_LOG, HELPER_PATH, realGuestHost, relayPortsFrom, runGuestInit } from './chunk-J5DPVNL3.js';
-import './chunk-2E2MG3KW.js';
-import './chunk-2FWL7CE2.js';
-import './chunk-HKMPVPO7.js';
+export { DOCKERD_LOG, HELPER_PATH, realGuestHost, relayPortsFrom, runGuestInit } from './chunk-V42JY4F6.js';
+import './chunk-S6IUUNCD.js';
+import './chunk-M6G7TJVF.js';
+import './chunk-BYT5O5RV.js';
 import './chunk-Z5GEFMRW.js';
 
 createRequire(import.meta.url);

package/dist/{hook-fast-CFLLVMSV.js → hook-fast-AQCAQIA6.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { AUTO_SYNC_DEBOUNCE_MS, WORK_LEASE_RENEW_DEBOUNCE_MS, WORK_LINK_RETRIES, contextPossiblyGoverned, handleWorkLaunch, handleWorkSessionEnd, hookFiredMarkerPath, logHookError, maybeAutoSync, maybeRenewWorkLease, recordLinkExitFailure, runHookFast, spoolDir } from './chunk-K4MGMSMN.js';
+export { AUTO_SYNC_DEBOUNCE_MS, WORK_LEASE_RENEW_DEBOUNCE_MS, WORK_LINK_RETRIES, contextPossiblyGoverned, handleWorkLaunch, handleWorkSessionEnd, hookFiredMarkerPath, logHookError, markWorkLeaseRenewed, maybeAutoSync, maybeRenewWorkLease, recordLinkExitFailure, runHookFast, spoolDir } from './chunk-4HMXH2OA.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';

package/dist/{import-capture-cmd-Z3232HR4.js → import-capture-cmd-5NJVL2HN.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-WLV4KCAW.js';
-import './chunk-NKU5OPYP.js';
-import './chunk-PK5NANMT.js';
+import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-BGWTYRSS.js';
+import './chunk-TB7EP24C.js';
+import './chunk-YT35WGIP.js';
 import './chunk-RA3O54FC.js';
 import './chunk-Z5GEFMRW.js';
 import { statSync, existsSync, readFileSync, writeFileSync } from 'fs';

package/dist/{import-ruler-cmd-2PLXZXM7.js → import-ruler-cmd-TUK3MRPC.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { normalizePath } from './chunk-NKU5OPYP.js';
-import './chunk-PK5NANMT.js';
+import { normalizePath } from './chunk-TB7EP24C.js';
+import './chunk-YT35WGIP.js';
 import './chunk-Z5GEFMRW.js';
 import { existsSync, readdirSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/index.js

@@ -6,7 +6,7 @@ createRequire(import.meta.url);
 // src/index.ts
 var argv = process.argv.slice(2);
 if (argv[0] === "hook") {
-  const { runHookFast } = await import('./hook-fast-CFLLVMSV.js');
+  const { runHookFast } = await import('./hook-fast-AQCAQIA6.js');
   await runHookFast(argv[1]);
   process.exit(0);
 }
@@ -21,6 +21,6 @@ if (argv[0] === "statusline") {
   await runStatuslineFast(argv.slice(1));
   process.exit(0);
 }
-(await import('./hook-fast-CFLLVMSV.js')).recordLinkExitFailure(argv);
-var { runCli } = await import('./cli-5QAP7N4A.js');
+(await import('./hook-fast-AQCAQIA6.js')).recordLinkExitFailure(argv);
+var { runCli } = await import('./cli-7RQYILJT.js');
 await runCli(process.argv);

package/dist/{init-AHQHM56A.js → init-TMBE3BRN.js}

@@ -1,40 +1,40 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { PLACEHOLDER_MARKER, RunnerInitError, isPlaceholderCommand, readConfigObject, runRunnerInit } from './chunk-IOG6LPEI.js';
-import './chunk-LKUUQ3XV.js';
-import './chunk-GJ3OWUFO.js';
-import './chunk-Y7UQHKFY.js';
+export { PLACEHOLDER_MARKER, RunnerInitError, isPlaceholderCommand, readConfigObject, runRunnerInit } from './chunk-WJBJY5DQ.js';
+import './chunk-QPPPUKQJ.js';
+import './chunk-LBU4CLK5.js';
+import './chunk-3FMPZPJQ.js';
 import './chunk-N5FOE5PS.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-WGLWDX5J.js';
+import './chunk-FKFGQJNN.js';
 import './chunk-QOZKPLVJ.js';
-import './chunk-DE4GLH3P.js';
+import './chunk-TV36SKEN.js';
 import './chunk-CX22S5BA.js';
-import './chunk-HWMYGAKF.js';
-import './chunk-2E2MG3KW.js';
-import './chunk-TY7EZC7U.js';
-import './chunk-MSV44EB5.js';
+import './chunk-6CXYORUS.js';
+import './chunk-S6IUUNCD.js';
+import './chunk-KWCJLAHQ.js';
+import './chunk-KPUJGBA4.js';
 import './chunk-BFESLKPP.js';
-import './chunk-TFJGK4UB.js';
-import './chunk-BL63NBJZ.js';
-import './chunk-CDISNKM4.js';
+import './chunk-LYESSQUA.js';
+import './chunk-ZEQMTBRD.js';
+import './chunk-LTJPX7TX.js';
 import './chunk-USO2DKBD.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
 import './chunk-UXYLWVTQ.js';
 import './chunk-7RQ73DLO.js';
-import './chunk-2FWL7CE2.js';
-import './chunk-HKMPVPO7.js';
+import './chunk-M6G7TJVF.js';
 import './chunk-WZBHBH3J.js';
-import './chunk-6AFQOYO3.js';
+import './chunk-RWQWPZB4.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-2MFYKH3C.js';
-import './chunk-WLV4KCAW.js';
-import './chunk-NKU5OPYP.js';
+import './chunk-BMX3L7CR.js';
+import './chunk-BGWTYRSS.js';
+import './chunk-TB7EP24C.js';
 import './chunk-YO4PSLVB.js';
 import './chunk-PLMTLGYH.js';
-import './chunk-PK5NANMT.js';
+import './chunk-YT35WGIP.js';
 import './chunk-EABW6AJQ.js';
+import './chunk-BYT5O5RV.js';
 import './chunk-RA3O54FC.js';
 import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';

package/dist/{init-UZ5TXACM.js → init-WX5XE6L3.js}

@@ -1,44 +1,45 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { readConfigObject, RunnerInitError } from './chunk-IOG6LPEI.js';
-import './chunk-LKUUQ3XV.js';
-import './chunk-GJ3OWUFO.js';
+import { npmSupportsProvenance } from './chunk-ABIWDUMS.js';
+import { readConfigObject, RunnerInitError } from './chunk-WJBJY5DQ.js';
+import './chunk-QPPPUKQJ.js';
+import './chunk-LBU4CLK5.js';
 import { VM_SERVICE_NAME } from './chunk-FBTE2A2X.js';
 import { checkFit, RUNNER_RESERVE_BYTES } from './chunk-JKIWMRFH.js';
 import { writeLaunchAgent } from './chunk-LF6MLJCY.js';
-import './chunk-Y7UQHKFY.js';
+import './chunk-3FMPZPJQ.js';
 import './chunk-N5FOE5PS.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-WGLWDX5J.js';
+import './chunk-FKFGQJNN.js';
 import './chunk-QOZKPLVJ.js';
-import './chunk-DE4GLH3P.js';
+import './chunk-TV36SKEN.js';
 import './chunk-CX22S5BA.js';
-import './chunk-HWMYGAKF.js';
-import './chunk-2E2MG3KW.js';
-import './chunk-TY7EZC7U.js';
-import './chunk-MSV44EB5.js';
+import './chunk-6CXYORUS.js';
+import './chunk-S6IUUNCD.js';
+import './chunk-KWCJLAHQ.js';
+import './chunk-KPUJGBA4.js';
 import './chunk-BFESLKPP.js';
-import './chunk-TFJGK4UB.js';
-import './chunk-BL63NBJZ.js';
-import './chunk-CDISNKM4.js';
+import './chunk-LYESSQUA.js';
+import './chunk-ZEQMTBRD.js';
+import './chunk-LTJPX7TX.js';
 import './chunk-USO2DKBD.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
-import { resolveBuild, resolveHousekeeping } from './chunk-7KI224YS.js';
+import { resolveBuild, resolveHousekeeping } from './chunk-M2PBLRB7.js';
 import './chunk-UXYLWVTQ.js';
 import { parseSize } from './chunk-7RQ73DLO.js';
-import './chunk-2FWL7CE2.js';
-import './chunk-HKMPVPO7.js';
+import './chunk-M6G7TJVF.js';
 import './chunk-WZBHBH3J.js';
-import './chunk-6AFQOYO3.js';
+import './chunk-RWQWPZB4.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-2MFYKH3C.js';
-import './chunk-WLV4KCAW.js';
-import './chunk-NKU5OPYP.js';
+import './chunk-BMX3L7CR.js';
+import './chunk-BGWTYRSS.js';
+import './chunk-TB7EP24C.js';
 import './chunk-YO4PSLVB.js';
 import './chunk-PLMTLGYH.js';
-import './chunk-PK5NANMT.js';
+import './chunk-YT35WGIP.js';
 import './chunk-EABW6AJQ.js';
+import './chunk-BYT5O5RV.js';
 import './chunk-RA3O54FC.js';
 import './chunk-V7NIVOFD.js';
 import { hostKeyPath } from './chunk-ZM2IMMYN.js';
@@ -80,6 +81,11 @@ var VmInitError = class extends Error {
 var MIN_NODE_MAJOR = 22;
 var TARBALL_IN_VM = "/tmp/outerlayer-cli.tgz";
 var NODE_VERSION = /^v(\d+)\./;
+var NPM_PACKAGE = "npm@10";
+var NODE_PREFIX = "/usr";
+var APT_NPM_DIVERTED = "/usr/bin/npm.distrib";
+var NPM_BESIDE_NODE = '"$(dirname "$(command -v node)")/npm" --version';
+var PROGRESS_INTERVAL_MS = 3e4;
 var quote = (text) => `'${text.replace(/'/g, `'\\''`)}'`;
 async function runVmInit(configPath, deps) {
   const { lima } = deps;
@@ -130,11 +136,23 @@ async function runVmInit(configPath, deps) {
     if (result.status !== 0) throw failed(`the VM step \`${argv.join(" ")}\``, result);
     return result.stdout;
   };
+  const stillRunning = async (what, step) => {
+    const startedAt = Date.now();
+    const timer = setInterval(() => {
+      const seconds = Math.floor((Date.now() - startedAt) / 1e3);
+      progress(`still ${what}: ${seconds < 60 ? `${seconds} s` : `${Math.floor(seconds / 60)} min`} so far`);
+    }, deps.progressIntervalMs ?? PROGRESS_INTERVAL_MS);
+    try {
+      return await step;
+    } finally {
+      clearInterval(timer);
+    }
+  };
   progress(`creating the Linux VM ${instance}: this downloads an image and can take several minutes`);
-  const created = await lima.create({ instance, cpus: size.cpus, memoryGiB: size.memoryGiB, diskGiB: size.diskGiB });
+  const created = await stillRunning("creating the VM", lima.create({ instance, cpus: size.cpus, memoryGiB: size.memoryGiB, diskGiB: size.diskGiB }));
   if (created.status !== 0) throw failed("`limactl create`", created);
   progress("starting the VM");
-  const started = await lima.start(instance);
+  const started = await stillRunning("starting the VM", lima.start(instance));
   if (started.status !== 0) throw failed("`limactl start`", started);
   const user = (await sh(["id", "-un"])).trim();
   const home = (await sh(["printenv", "HOME"])).trim();
@@ -145,6 +163,12 @@ async function runVmInit(configPath, deps) {
   if (!(Number(NODE_VERSION.exec(node)?.[1]) >= MIN_NODE_MAJOR)) {
     throw new VmInitError(`the VM's Node is ${node}, and the runner needs Node ${MIN_NODE_MAJOR} or later. ${leftBehind}`);
   }
+  for (const bin of ["/usr/bin/npm", "/usr/bin/npx"]) await sh(["sudo", "dpkg-divert", "--local", "--rename", "--add", bin]);
+  await sh(["sudo", APT_NPM_DIVERTED, "install", "--global", NPM_PACKAGE, "--prefix", NODE_PREFIX]);
+  const npm = (await sh(["sh", "-c", NPM_BESIDE_NODE])).trim();
+  if (!npmSupportsProvenance(npm)) {
+    throw new VmInitError(`the VM's npm is ${npm}, and the runner's self-update needs npm 9.5 or later to verify a release's provenance. ${leftBehind}`);
+  }
   if (deps.cliPackage === void 0) {
     await sh(["sudo", "npm", "install", "--global", `@outerlayer/cli@${deps.version}`]);
   } else {