@outerlayer/cli 0.8.6 → 0.10.0

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # @outerlayer/cli
 
+## 0.10.0
+
+### Minor Changes
+
+- 60067bc: `outerlayer work pr` and `outerlayer work open-pr` now declare a pull request onto the work item named by `OUTERLAYER_WORK`, and refuse when the session is not on that item. The message names both item numbers and `--session-id`. A successful declaration prints the item's number and title. `outerlayer work pr <n> --withdraw --item <number>` removes a wrong declaration.
+
+## 0.9.0
+
+### Minor Changes
+
+- a44097e: A runner now reads a governed repository's control plane with a read-only GitHub App token that the gateway issues for the build, so the host needs no git login for it. A gateway with no GitHub App still uses the host's git login. `outerlayer doctor` passes `Control plane access` through the App when the gateway has one. The runner protocol is now 15.
+
+### Patch Changes
+
+- accf74c: The amend skill now answers each criterion thread a reviewer sent a note on, replying on that thread and handing it back with `--ready`, instead of answering only the general thread.
+- 680086e: `outerlayer init` now says to commit and push `.outerlayer/` whenever it left files there, even when a step failed or the repository is not linked yet. `outerlayer connect` says the same when it succeeds and `.outerlayer/` holds uncommitted files.
+- 279f42a: `outerlayer runner init` on a Mac now creates a Linux VM, installs Node and the CLI in it, and sets up the runner there. It prints a progress line every 30 seconds while the image downloads.
+- d399d98: Inside a runner build, sessions, artifacts, findings and results name the repository again, for example `github.com/acme/app`. Previously they named the runner's git relay, `127.0.0.1:<port>/github.com/acme/app`. With the relay address, `outerlayer emit artifact --pr <n>` was refused with `item_key_out_of_scope`, and a session-bound artifact never attached to its pull request. When a git `insteadOf` rule rewrites a remote onto a loopback address, the CLI now reads the remote's URL as configured. Every other rewrite, such as a shorthand alias, is still followed.
+- dfb4b76: The runner no longer maps a `gitlab` tracker to a repository host, and `gitlab` is no longer an accepted work-item tracker. GitHub, Linear and Jira remain.
+- 80174a6: `outerlayer work release --item <n>`, run inside a session with no `--host`, now releases that session's own lease on the item, so a person can review a finished local build without closing the session. It never releases another session's lease. `--session-id` names the session when it cannot be detected, and `--host` keeps the release to a host's claim. The `build` template skill runs it as its last step.
+
 ## 0.8.6
 
 ### Patch Changes

package/README.md

@@ -74,8 +74,10 @@ content:
   hook spawns `outerlayer work link-session` when you launch a session with
   `OUTERLAYER_WORK`, naming the item and the session id — the item itself
   must already exist, created ahead of time with `outerlayer work build --local`.
-  `outerlayer work pr` sends the session id and the pull request number and
-  repository — never the session's own content. `outerlayer work open-pr`
+  `outerlayer work pr` sends the session id, the `OUTERLAYER_WORK` item
+  number and the pull request number and repository — never the session's
+  own content. With `--withdraw` it sends a DELETE naming the item, the
+  repository and the pull request number. `outerlayer work open-pr`
   sends the pull request's title and the text of the body file you name. In a
   host build, which holds an item key, it goes to the gateway, which opens or
   edits the pull request as the factory's GitHub App on the branch the claim
@@ -108,7 +110,8 @@ content:
   evidence verdict, before releasing it: it sends nothing but the request.
   Just before that read, the runner runs the repository's host checks. A host
   check is a command the repository's `where: host` validators declare. The
-  runner reads the definitions with the host's own git credentials, runs each
+  runner reads the definitions, through a control-plane token when the gateway
+  issues one and otherwise with the host's own git credentials, runs each
   command in a new container, and sends one `POST /v1/emitted-results` for
   each: the check's name, pass or fail, and for a fail the exit status and the
   last line of its output, scrubbed.
@@ -220,12 +223,17 @@ content:
 - **`outerlayer runner start` with `builtin:container` hooks** also asks your
   gateway which repository governs the item's repository (`GET
   /v1/context/source`, signed with the host key), after the recipe's
-  lifecycle commands. When one does, the runner runs `git fetch` against that
-  control plane on the host, with the host's own git credentials, and copies
-  its context into the checkout through the build's directory. The build
-  receives files and no credential for the control plane. The runner deletes
-  the staged copy before the command starts. A host that cannot read the
-  control plane fails the build at provision.
+  lifecycle commands. When one does, the runner asks your gateway for a
+  read-only token for that control plane (`POST /v1/work-items/{id}/claim/tokens`
+  with `target: control_plane`, signed with the host key), runs `git fetch`
+  against it on the host with that token, and copies its context into the
+  checkout through the build's directory. The token goes to git in its
+  environment for that one fetch, never to disk, a log or the build. The runner
+  revokes it when the attempt ends. A gateway with no GitHub App issues none,
+  and the fetch then uses the host's own git credentials. The build receives
+  files and no credential for the control plane. The runner deletes the staged
+  copy before the command starts. A host that cannot read the control plane
+  fails the build at provision.
 - **`outerlayer runner start` with `builtin:process` hooks** runs each build
   as a process under the runner's own user, with no isolation, and the
   attempt records `shared-user`. The runner clones the item's repository
@@ -269,9 +277,11 @@ content:
   say whether the version the runner's images pin is behind. The request
   names the package and nothing about the host. On a host with
   `builtin:container` hooks it also asks your gateway which repository governs
-  each repository in `repos.include` (`GET /v1/context/source`), then runs
-  `git ls-remote` against that control plane with the host's own git
-  credentials, to say whether the host can read it.
+  each repository in `repos.include` (`GET /v1/context/source`). When the
+  gateway has a GitHub App (`GET /v1/repositories/access` does not answer
+  `repository_tokens_unavailable`), builds read the control plane through it.
+  Otherwise doctor runs `git ls-remote` against the control plane with the
+  host's own git credentials, to say whether the host can read it.
 - **`outerlayer emit artifact`** uploads the file you name — a screenshot, a
   recording, a report, a log — along with its caption, its name, type, size
   and sha256, and the repository, branch, commit, pull request and CI run it
@@ -367,11 +377,11 @@ before it gives up.
 | `outerlayer work remove --issue <n>\|--pr <n> --reason <text> [--repo]` | Withdraws the caller's own addition, recording the reason. Never deletes anything; the item leaves the Work page only once no live addition remains on it. Removing again is a no-op that still succeeds. |
 | `outerlayer work status --issue <n>\|--pr <n> [--repo]` | Shows one item's stage, section, gate ledger, linked pull requests and sessions, and its additions. |
 | `outerlayer work list [--stage] [--section] [--repo] [--claimed] [--unclaimed] [--startable] [--needs amend]` | Lists live work items for the current factory, filterable by stage, section, claim state, startability and whether a comment thread is waiting on an agent. |
-| `outerlayer work pr <n> [--repo] [--session-id]` | Run inside a session on a work item: declares that pull request `<n>` in the checkout's repository belongs to that item. Idempotent — declaring the same pull request twice is a no-op. Refuses when the session is on no item, or the repository is not connected. |
+| `outerlayer work pr <n> [--repo] [--session-id] [--withdraw --item <number>]` | Run inside a session on a work item: declares that pull request `<n>` in the checkout's repository belongs to the `OUTERLAYER_WORK` item. Idempotent — declaring the same pull request twice is a no-op. Refuses when the session is not on that item, or the repository is not connected. `--withdraw --item <number>` removes that item's declaration; it needs your own login. |
 | `outerlayer work open-pr --title <text> --body-file <path> [--repo] [--session-id] [--json]` | Opens the pull request for the work item this session is on, or edits the one already open on its branch. A host build, which holds an item key, sends it to the gateway, which opens it as the factory's GitHub App from the branch the claim named; no `gh` command runs. Your own session runs `gh pr create` or `gh pr edit` under your login and then declares the pull request on the item. Run it again after changing the title or description. |
 | `outerlayer work claim --item <n>\|--issue <n> --kind implement\|amend [--repo] [--host] [--seconds]` | Records a lease for this host (default: its own hostname), so two hosts never build the same item at once. The lease belongs to the runner key that claimed it: a live lease held by a different key is refused, even under the same host name, and claiming again with the same key extends it. The first claim creates the host key (`host-key.pem` beside the config file) and binds the runner key to it; from then on every request made with that key is signed. Lease length defaults to 900 seconds, the server's own cap. |
 | `outerlayer work renew --item <n>\|--issue <n> [--repo] [--host] [--seconds]` | Extends this host's own live lease. Refused if the lease has expired, or if a different runner key holds it (403 `claim_not_held`). |
-| `outerlayer work release --item <n>\|--issue <n> [--repo] [--host] [--outcome]` | Marks the lease this API key holds released, optionally recording how the attempt ended. Releasing an already-released lease is a no-op that returns the recorded release time and outcome. |
+| `outerlayer work release --item <n>\|--issue <n> [--repo] [--host] [--session-id] [--outcome]` | Marks the lease this API key holds released, optionally recording how the attempt ended. Releasing an already-released lease is a no-op that returns the recorded release time and outcome. Run inside a session with no `--host`, it releases that session's own lease instead (`--session-id` names the session when it cannot be detected), so the item's review opens without ending the session. |
 | `outerlayer runner init [--vm\|--no-vm] [--config <path>]` | Writes a `runner` block with defaults, keeping every key the config already had. It names `builtin:vm` on a Linux machine where the user can use `/dev/kvm` and Docker Engine can build images once the guest kernel and helper are published (not yet), `builtin:container` on that machine until then, `builtin:container` on any other machine with Docker Engine, and `builtin:process` on one without, and writes no hook script. Refuses rather than overwriting an existing block. On macOS it asks whether to create a Linux VM with Lima, installs Docker Engine and the runner in it, and starts both at login; `--vm` answers yes and `--no-vm` answers no, and a run with no terminal answers no. The runner key and the host key then live only in the VM: the Mac's config loses `apiKey` and `runner` and gains a `runnerVm` note, which `outerlayer doctor` reads. |
 | `outerlayer runner check [--config <path>]` | Validates the config, the hooks and the key, prints the settings the runner would use, and exits non-zero on a problem. Takes no work and writes no pid file. |
 | `outerlayer runner start [--config <path>]` | Runs the loop: claim work, run it, sync, clean up, report, release with an outcome. Repeat. Reads the `runner` block from the config file (default `~/.outerlayer/config.json`). Refuses to start on a bad config, an unrunnable hook, or a refused key. |

package/dist/{agent-setup-LEQF4V5F.js → agent-setup-ODTDC3US.js}

@@ -1,18 +1,19 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { addStdioMcpEntryIfAbsent } from './chunk-47RS42OZ.js';
-import { installStarterPack } from './chunk-AGMIJ725.js';
-import { runEmit } from './chunk-DSPYQUH4.js';
+import { installStarterPack } from './chunk-SUMWRA7K.js';
+import { runEmit } from './chunk-YU5GL7QS.js';
 import { C } from './chunk-YRYMNBGQ.js';
-import { resolveGitCommonDir, defaultGitRunner } from './chunk-6AFQOYO3.js';
+import { resolveGitCommonDir, defaultGitRunner } from './chunk-RWQWPZB4.js';
 import './chunk-ZJSNLVCE.js';
-import { pinExists, readContextManifest } from './chunk-2MFYKH3C.js';
-import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-WLV4KCAW.js';
-import { generatedHeaderSource } from './chunk-NKU5OPYP.js';
+import { pinExists, readContextManifest } from './chunk-BMX3L7CR.js';
+import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-BGWTYRSS.js';
+import { generatedHeaderSource } from './chunk-TB7EP24C.js';
 import './chunk-YO4PSLVB.js';
 import './chunk-PLMTLGYH.js';
-import './chunk-PK5NANMT.js';
+import './chunk-YT35WGIP.js';
 import './chunk-EABW6AJQ.js';
+import './chunk-BYT5O5RV.js';
 import './chunk-RA3O54FC.js';
 import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';

package/dist/{build-3FSJR5OO.js → build-LELVCWHV.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { buildRepositoryImage } from './chunk-Y7UQHKFY.js';
+export { buildRepositoryImage } from './chunk-3FMPZPJQ.js';
 import './chunk-N5FOE5PS.js';
 export { RecipeError } from './chunk-QOZKPLVJ.js';
 import './chunk-CX22S5BA.js';
-import './chunk-HKMPVPO7.js';
+import './chunk-BYT5O5RV.js';
 import './chunk-ZM2IMMYN.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-06T01:19:33.337Z+ce11b1f","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-07T12:35:00.915Z+be9473d","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-5UFAF5LW.js → builder-5DKTBWT3.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-DE4GLH3P.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-TV36SKEN.js';
 import './chunk-CX22S5BA.js';
-import './chunk-CDISNKM4.js';
+import './chunk-LTJPX7TX.js';
 import './chunk-7RQ73DLO.js';
-import './chunk-2FWL7CE2.js';
-import './chunk-HKMPVPO7.js';
-import './chunk-PK5NANMT.js';
+import './chunk-M6G7TJVF.js';
+import './chunk-YT35WGIP.js';
+import './chunk-BYT5O5RV.js';
 import './chunk-ZM2IMMYN.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{check-443BADSD.js → check-VJRJ2KQ4.js}

@@ -1,73 +1,83 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-NQWTCX3A.js';
-import './chunk-IS4DIGBQ.js';
+import { probeCredentials } from './chunk-YCPV7FN6.js';
+import './chunk-3JVYMD4G.js';
 import './chunk-I2UOAV7X.js';
-import './chunk-ALCXFVUV.js';
+import './chunk-ABIWDUMS.js';
+import './chunk-OSKO3PAL.js';
 import './chunk-T6OIJQRT.js';
-import './chunk-AIW6GLET.js';
+import './chunk-PDTSUOVT.js';
 import './chunk-UGP76IZ5.js';
-import './chunk-FCDET2U5.js';
-import './chunk-J5DPVNL3.js';
-import './chunk-H6IGIE3I.js';
+import './chunk-VMK7I3TB.js';
+import './chunk-V42JY4F6.js';
+import './chunk-543OT6V5.js';
 import './chunk-HHJDN6AU.js';
-import { placeholderQueues, placeholderProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem } from './chunk-SWGQAURM.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem } from './chunk-XGCJNSI7.js';
 import './chunk-TI7B7UEO.js';
 import './chunk-YYYRBYWG.js';
 import './chunk-TBT347UY.js';
-import './chunk-IOG6LPEI.js';
-import './chunk-LKUUQ3XV.js';
-import './chunk-GJ3OWUFO.js';
+import './chunk-WJBJY5DQ.js';
+import './chunk-QPPPUKQJ.js';
+import './chunk-LBU4CLK5.js';
+import { parseRunnerEnv } from './chunk-6MZSX4M7.js';
 import './chunk-JKIWMRFH.js';
-import './chunk-Y7UQHKFY.js';
+import './chunk-3FMPZPJQ.js';
 import './chunk-N5FOE5PS.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-WGLWDX5J.js';
+import './chunk-FKFGQJNN.js';
 import './chunk-QOZKPLVJ.js';
-import './chunk-DE4GLH3P.js';
+import './chunk-TV36SKEN.js';
 import './chunk-CX22S5BA.js';
-import './chunk-HWMYGAKF.js';
-import './chunk-2E2MG3KW.js';
+import './chunk-6CXYORUS.js';
+import './chunk-S6IUUNCD.js';
 import './chunk-F7CU5ABH.js';
 import './chunk-BKO6JEZI.js';
-import './chunk-TY7EZC7U.js';
-import './chunk-MSV44EB5.js';
+import './chunk-KWCJLAHQ.js';
+import './chunk-KPUJGBA4.js';
 import './chunk-BFESLKPP.js';
-import './chunk-TFJGK4UB.js';
-import './chunk-BL63NBJZ.js';
-import './chunk-CDISNKM4.js';
+import './chunk-LYESSQUA.js';
+import './chunk-ZEQMTBRD.js';
+import './chunk-LTJPX7TX.js';
 import './chunk-USO2DKBD.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
-import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-7KI224YS.js';
+import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-M2PBLRB7.js';
 import './chunk-UXYLWVTQ.js';
 import './chunk-7RQ73DLO.js';
-import './chunk-2FWL7CE2.js';
-import './chunk-HKMPVPO7.js';
+import './chunk-M6G7TJVF.js';
 import './chunk-GQD22KKN.js';
 import './chunk-WZBHBH3J.js';
 import './chunk-5QRP3MVS.js';
-import './chunk-6AFQOYO3.js';
+import './chunk-RWQWPZB4.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-2MFYKH3C.js';
-import './chunk-WLV4KCAW.js';
-import './chunk-NKU5OPYP.js';
+import './chunk-BMX3L7CR.js';
+import './chunk-BGWTYRSS.js';
+import './chunk-TB7EP24C.js';
 import './chunk-YO4PSLVB.js';
 import './chunk-PLMTLGYH.js';
-import './chunk-PK5NANMT.js';
+import './chunk-YT35WGIP.js';
 import './chunk-EABW6AJQ.js';
+import './chunk-BYT5O5RV.js';
 import './chunk-RA3O54FC.js';
 import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
-import './chunk-K4MGMSMN.js';
+import './chunk-4HMXH2OA.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';
+import { readFileSync } from 'fs';
+import { join, dirname } from 'path';
 
 createRequire(import.meta.url);
-
-// src/runner/check.ts
+function readRunnerEnv(path) {
+  try {
+    return { env: parseRunnerEnv(readFileSync(path, "utf8")) };
+  } catch (err) {
+    if (err.code === "ENOENT") return { env: {} };
+    return { error: err instanceof Error ? err.message : String(err) };
+  }
+}
 async function runRunnerCheck(configPath, deps = {}) {
   let config;
   try {
@@ -81,11 +91,35 @@ async function runRunnerCheck(configPath, deps = {}) {
   if (placeholders.length > 0) {
     return { ok: false, check: "placeholders", message: `${configPath}: ${placeholderProblem(placeholders)}` };
   }
+  const modeProblems = permissionModeProblems(config);
+  if (modeProblems.length > 0) {
+    return { ok: false, check: "permission mode", message: `${configPath}: ${permissionModeProblem(modeProblems)}` };
+  }
+  let credentialLine;
   if (needsClaudeCredential(config.hooks)) {
-    const credential = claudeCredentialCheck(deps.env ?? process.env);
+    const env = deps.env ?? process.env;
+    const runnerEnvPath = join(dirname(configPath), "runner.env");
+    const inShell = claudeCredentialCheck(env);
+    let credential = inShell;
+    if (inShell.status !== "pass") {
+      const fromFile = readRunnerEnv(runnerEnvPath);
+      if ("error" in fromFile) {
+        return {
+          ok: false,
+          check: "claude credential",
+          message: `the Claude credential is not in this shell, and ${runnerEnvPath} could not be read to look for it: ${fromFile.error}`
+        };
+      }
+      credential = claudeCredentialCheck(fromFile.env);
+    }
     if (credential.status === "fail") {
-      return { ok: false, check: "claude credential", message: `${credential.detail}. ${credential.fix}` };
+      return {
+        ok: false,
+        check: "claude credential",
+        message: `${credential.detail}, in this shell or in ${runnerEnvPath}. ${credential.fix}`
+      };
     }
+    credentialLine = `claude credential   ${credential.detail}${inShell.status === "pass" ? "" : ` (read from ${runnerEnvPath})`}`;
   }
   const probe = await probeCredentials(config, deps.fetchImpl);
   if (!probe.ok && probe.fatal) return { ok: false, check: "credentials", message: probe.reason };
@@ -103,6 +137,7 @@ async function runRunnerCheck(configPath, deps = {}) {
     `time limit          ${config.timeLimitMinutes}m`,
     `idle limit          ${config.idleLimitMinutes}m`,
     `auto update         ${config.autoUpdate ? "on" : "off"}`,
+    ...credentialLine === void 0 ? [] : [credentialLine],
     ...config.queues.map((queue) => `command ${queue.padEnd(11)} ${config.commands[queue] ?? "(none)"}`),
     `hook provision      ${config.hooks.provision}`,
     `hook cleanup        ${config.hooks.cleanup}`,

package/dist/{chunk-Y7UQHKFY.js → chunk-3FMPZPJQ.js}

@@ -3,7 +3,7 @@ import { createRequire } from 'node:module';
 import { startTimeOf, claimPidFile, RunnerAlreadyRunningError, releasePidFile } from './chunk-N5FOE5PS.js';
 import { RecipeError, locateRecipe, readRecipe, assertBuildable, writeSanitizedRecipe, classifyProperties, SANITIZED_NAME } from './chunk-QOZKPLVJ.js';
 import { CLAUDE_CODE_VERSION, NODE_IMAGE, DEFAULT_BASE_IMAGE, TINI_VERSION, GH_VERSION, GH_SHA256, TINI_SHA256 } from './chunk-CX22S5BA.js';
-import { withGitConfig } from './chunk-HKMPVPO7.js';
+import { withGitConfig, tokenHeader } from './chunk-BYT5O5RV.js';
 import { RUNNER_DIR_MODE, repoCacheDir, imagesDir, attemptStamp, runnerDir, rootfsPathFor, RUNNER_FILE_MODE } from './chunk-ZM2IMMYN.js';
 import { mkdirSync, rmSync, existsSync, mkdtempSync, cpSync, readFileSync, writeFileSync, readdirSync, lstatSync, readlinkSync } from 'fs';
 import { tmpdir } from 'os';
@@ -18,9 +18,6 @@ function gitEnvironment(base) {
   for (const name of INHERITED_REPOSITORY_VARIABLES) delete env[name];
   return env;
 }
-function tokenHeader(token) {
-  return `Authorization: Basic ${Buffer.from(`x-access-token:${token}`).toString("base64")}`;
-}
 function tokenSettings(remote, token) {
   return (env) => withGitConfig(env, `http.${remote}.extraHeader`, tokenHeader(token));
 }

package/dist/chunk-3JVYMD4G.js

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+
+createRequire(import.meta.url);
+
+// src/runner/update/installed-switch.ts
+function decideInstalledSwitch(input) {
+  const to = input.current;
+  if (to === void 0 || to === input.own || !input.fromCurrent) return { kind: "none" };
+  if (!input.installed) return { kind: "missing", to };
+  if (!input.underService) return { kind: "foreground", to };
+  return { kind: "restart", to };
+}
+function startedByService(env, parentPid) {
+  return (env.INVOCATION_ID ?? "") !== "" && parentPid === 1;
+}
+
+export { decideInstalledSwitch, startedByService };

package/dist/{chunk-K4MGMSMN.js → chunk-4HMXH2OA.js}

@@ -439,6 +439,12 @@ async function missingRenewalHookContext(home, cwd) {
   }
 }
 var WORK_LEASE_RENEW_DEBOUNCE_MS = 5 * 60 * 1e3;
+function markWorkLeaseRenewed(sessionId, home = homeFromEnv(), now = Date.now()) {
+  try {
+    writeFileSync(join(spoolDir(home), `work-lease-renew-${sessionId}`), String(now));
+  } catch {
+  }
+}
 async function maybeRenewWorkLease(event, sessionId, home = homeFromEnv(), env = process.env, spawnImpl = spawnDetached, now = Date.now(), cwd = process.cwd()) {
   try {
     if (event !== "PostToolUse") return;
@@ -628,7 +634,7 @@ async function runHookFast(event, home = homeFromEnv(), read = readStdin, env =
       recordHookErrorsSeen(home, hookErrorsBytes);
       if (contextPossiblyGoverned(sessionCwd, home)) {
         try {
-          const { materializeContext: materialize } = await import('./context-materialize-DU6B6RXF.js');
+          const { materializeContext: materialize } = await import('./context-materialize-KQZYATQZ.js');
           const sessionId = typeof payload.session_id === "string" ? payload.session_id : "unknown";
           const result = await materialize({ cwd: sessionCwd, sessionId, home });
           materializeMessage = result.message;
@@ -693,4 +699,4 @@ function recordLinkExitFailure(argv, home = homeFromEnv(), target = process) {
   });
 }
 
-export { AUTO_SYNC_DEBOUNCE_MS, SYNC_STALE_AFTER_MS, WORK_LEASE_RENEW_DEBOUNCE_MS, WORK_LINK_RETRIES, assessSyncHealth, checkInstalledCliStaleness, contextPossiblyGoverned, formatAgo, handleWorkLaunch, handleWorkSessionEnd, hookFiredMarkerPath, installedCliDistDir, logHookError, maybeAutoSync, maybeRenewWorkLease, readSyncStatus, recordLinkExitFailure, refreshCommand, runHookFast, sanitizeForContext, spoolDir, workspaceRootOf, writeSyncStatus };
+export { AUTO_SYNC_DEBOUNCE_MS, SYNC_STALE_AFTER_MS, WORK_LEASE_RENEW_DEBOUNCE_MS, WORK_LINK_RETRIES, assessSyncHealth, checkInstalledCliStaleness, contextPossiblyGoverned, formatAgo, handleWorkLaunch, handleWorkSessionEnd, hookFiredMarkerPath, installedCliDistDir, logHookError, markWorkLeaseRenewed, maybeAutoSync, maybeRenewWorkLease, readSyncStatus, recordLinkExitFailure, refreshCommand, runHookFast, sanitizeForContext, spoolDir, workspaceRootOf, writeSyncStatus };

package/dist/{chunk-H6IGIE3I.js → chunk-543OT6V5.js}

@@ -4,17 +4,17 @@ import { LaunchFilter } from './chunk-HHJDN6AU.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
 import { hookExecSpoolPath } from './chunk-F7CU5ABH.js';
 import { applyReportedCost } from './chunk-BKO6JEZI.js';
-import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-BL63NBJZ.js';
-import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-CDISNKM4.js';
+import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-ZEQMTBRD.js';
+import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-LTJPX7TX.js';
 import { C } from './chunk-YRYMNBGQ.js';
 import { readLaunchSpoolState, launchStatusIsDecisive, launchedItemsBySession, launchesPath } from './chunk-GQD22KKN.js';
 import { readLatestProvenanceForSession, readContextProvenance } from './chunk-ZJSNLVCE.js';
 import { defaultFetch } from './chunk-YO4PSLVB.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-PLMTLGYH.js';
-import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-PK5NANMT.js';
+import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-YT35WGIP.js';
 import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-EABW6AJQ.js';
 import { signerFor, signRunnerRequest } from './chunk-V7NIVOFD.js';
-import { writeSyncStatus, spoolDir } from './chunk-K4MGMSMN.js';
+import { writeSyncStatus, spoolDir } from './chunk-4HMXH2OA.js';
 import { removeJournalHooks } from './chunk-XCCLFVXM.js';
 import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/chunk-5K3IUOPJ.js

@@ -0,0 +1,178 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+import { autoConnect } from './chunk-KPUJGBA4.js';
+import { detectActiveSession } from './chunk-BFESLKPP.js';
+import { resolveRepoIdentity } from './chunk-LTJPX7TX.js';
+import { parseWorkItemEnv } from './chunk-GQD22KKN.js';
+import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
+import { defaultFetch } from './chunk-YO4PSLVB.js';
+import { unauthorizedMessage, resolveGatewayCredentials } from './chunk-PLMTLGYH.js';
+import { homeFromEnv } from './chunk-VNVZDWO3.js';
+
+createRequire(import.meta.url);
+
+// src/work-pr-cmd.ts
+var GREEN = "\x1B[32m";
+var DIM = "\x1B[2m";
+var RESET = "\x1B[0m";
+var WorkPrCommandError = class extends Error {
+};
+function resolveCredentials(opts) {
+  const resolved = resolveGatewayCredentials(opts);
+  if (!resolved.ok) throw new WorkPrCommandError(resolved.message);
+  return { url: resolved.url, apiKey: resolved.credential, appId: resolved.appId };
+}
+function resolveRepository(repoFlag, cwd) {
+  if (repoFlag) return repoFlag;
+  const identity = resolveRepoIdentity(cwd);
+  if (identity.gitRepo) return identity.gitRepo;
+  throw new WorkPrCommandError(
+    "no repository. Pass --repo <owner/name>, or run from a git checkout with a remote."
+  );
+}
+function resolvePrNumber(raw) {
+  const n = parseTrackerNumber(raw);
+  if (n === void 0) throw new WorkPrCommandError(trackerNumberError("<n>", raw ?? ""));
+  return n;
+}
+var SESSION_ID_HINT = "pass --session-id <id> to name the session that was launched on the item";
+function sessionNotOnItemMessage(error, sessionId) {
+  const on = error.sessionItems;
+  const onText = on === void 0 ? "" : `; it is on ${on.length === 0 ? "no work item" : on.map((n) => `item ${n}`).join(", ")}`;
+  return `session ${sessionId} is not on item ${error.workItem ?? "?"} (OUTERLAYER_WORK)${onText}. Nothing was declared. If another session was launched for item ${error.workItem ?? "?"}, ${SESSION_ID_HINT}.`;
+}
+function itemLabel(data) {
+  if (data.workItemNumber == null) return data.workItemId;
+  return data.workItemTitle ? `item ${data.workItemNumber} ${DIM}\xB7${RESET} ${data.workItemTitle}` : `item ${data.workItemNumber}`;
+}
+async function runWorkPrWithdraw(opts, ctx) {
+  const itemNumber = parseTrackerNumber(opts.item);
+  if (itemNumber === void 0) {
+    throw new WorkPrCommandError("--withdraw needs --item <number>, the item to remove the declaration from.");
+  }
+  const { creds, prNumber, repository, sessionId } = ctx;
+  const fetchImpl = opts.fetchImpl ?? defaultFetch;
+  const query = sessionId === void 0 ? "" : `?sessionId=${encodeURIComponent(sessionId)}`;
+  const endpoint = new URL(
+    `/v1/work-items/${itemNumber}/pull-requests/${encodeURIComponent(repository)}/${prNumber}${query}`,
+    creds.url
+  ).toString();
+  let response;
+  try {
+    response = await fetchImpl(endpoint, {
+      method: "DELETE",
+      headers: { authorization: `Bearer ${creds.apiKey}`, "x-outerlayer-app-id": creds.appId }
+    });
+  } catch (err) {
+    throw new WorkPrCommandError(`network error reaching ${endpoint}: ${String(err)}`);
+  }
+  if (response.status === 401) throw new WorkPrCommandError(unauthorizedMessage(creds.apiKey));
+  let json;
+  try {
+    json = await response.json();
+  } catch {
+    throw new WorkPrCommandError(
+      `${endpoint} answered ${response.status} with a body that is not JSON \u2014 the request may not have reached the gateway`
+    );
+  }
+  if (!response.ok || !json.data) {
+    if (json.error?.code === "withdraw_needs_person") {
+      throw new WorkPrCommandError("only a person can withdraw a declaration; run this from your own login, not an agent session or a factory key.");
+    }
+    if (json.error?.code === "declaration_not_found") {
+      throw new WorkPrCommandError(`item ${itemNumber} has no declaration of ${repository}#${prNumber}.`);
+    }
+    if (json.error?.code === "work_item_not_found") {
+      throw new WorkPrCommandError(`item ${itemNumber} does not exist in this factory.`);
+    }
+    throw new WorkPrCommandError(json.error?.message ?? `request failed (${response.status})`);
+  }
+  const data = json.data;
+  const output = opts.json ? JSON.stringify(data) : `${GREEN}\u2713${RESET} withdrawn ${DIM}\xB7${RESET} ${data.repository}#${data.prNumber} ${DIM}from${RESET} item ${itemNumber}`;
+  if (!opts.quiet) process.stdout.write(output + "\n");
+  return { data, output };
+}
+async function runWorkPr(opts) {
+  const cwd = opts.cwd ?? process.cwd();
+  const env = opts.env ?? process.env;
+  const home = opts.home ?? homeFromEnv(env);
+  const refusal = await autoConnect({ ...opts, repository: opts.repo });
+  if (refusal !== void 0) throw new WorkPrCommandError(refusal);
+  const creds = resolveCredentials(opts);
+  const prNumber = resolvePrNumber(opts.number);
+  const repository = resolveRepository(opts.repo, cwd);
+  const identity = resolveRepoIdentity(cwd);
+  const sessionId = opts.sessionId ?? detectActiveSession({
+    env,
+    home,
+    cwds: identity.repoRoot !== void 0 ? [identity.repoRoot, cwd] : [cwd],
+    nowMs: Date.now()
+  });
+  if (opts.withdraw) return runWorkPrWithdraw(opts, { creds, prNumber, repository, sessionId });
+  let workItem;
+  if (env.OUTERLAYER_WORK !== void 0) {
+    const parsed = parseWorkItemEnv(env.OUTERLAYER_WORK);
+    if (!("number" in parsed)) throw new WorkPrCommandError(parsed.reason);
+    workItem = parsed.number;
+  }
+  if (sessionId === void 0) {
+    throw new WorkPrCommandError(
+      `no active session detected. \`work pr\` declares a pull request from inside the session that opened it, or ${SESSION_ID_HINT}.`
+    );
+  }
+  const fetchImpl = opts.fetchImpl ?? defaultFetch;
+  const headers = {
+    "content-type": "application/json",
+    authorization: `Bearer ${creds.apiKey}`,
+    "x-outerlayer-app-id": creds.appId
+  };
+  const endpoint = new URL("/v1/work-items/pull-requests", creds.url).toString();
+  let response;
+  try {
+    response = await fetchImpl(endpoint, {
+      method: "POST",
+      headers,
+      body: JSON.stringify({
+        sessionId,
+        workItem,
+        // JSON.stringify omits it when undefined
+        pullRequest: { repository, number: prNumber }
+      })
+    });
+  } catch (err) {
+    throw new WorkPrCommandError(`network error reaching ${endpoint}: ${String(err)}`);
+  }
+  if (response.status === 401) {
+    throw new WorkPrCommandError(
+      unauthorizedMessage(creds.apiKey)
+    );
+  }
+  let json;
+  try {
+    json = await response.json();
+  } catch {
+    throw new WorkPrCommandError(
+      `${endpoint} answered ${response.status} with a body that is not JSON \u2014 the request may not have reached the gateway`
+    );
+  }
+  if (!response.ok || !json.data) {
+    if (json.error?.code === "session_not_on_item") {
+      if (response.status === 409) throw new WorkPrCommandError(sessionNotOnItemMessage(json.error, sessionId));
+      throw new WorkPrCommandError("this session is not launched on a work item.");
+    }
+    if (json.error?.code === "work_item_not_found" && workItem !== void 0) {
+      throw new WorkPrCommandError(`OUTERLAYER_WORK names item ${workItem}, which does not exist in this factory.`);
+    }
+    if (json.error?.code === "repository_not_connected") {
+      throw new WorkPrCommandError(`${repository} is not a workpiece of this factory.`);
+    }
+    throw new WorkPrCommandError(json.error?.message ?? `request failed (${response.status})`);
+  }
+  const data = json.data;
+  const verb = data.created ? "declared" : "already declared";
+  const output = opts.json ? JSON.stringify(data) : `${GREEN}\u2713${RESET} ${verb} ${DIM}\xB7${RESET} ${data.repository}#${data.prNumber} ${DIM}\u2192${RESET} ${itemLabel(data)}`;
+  if (!opts.quiet) process.stdout.write(output + "\n");
+  return { data, output };
+}
+
+export { WorkPrCommandError, itemLabel, runWorkPr };

package/dist/{chunk-HWMYGAKF.js → chunk-6CXYORUS.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { EXEC_PORT } from './chunk-2E2MG3KW.js';
+import { EXEC_PORT } from './chunk-S6IUUNCD.js';
 import { createConnection } from 'net';
 
 createRequire(import.meta.url);