@odla-ai/cli 0.16.3 → 0.16.5

package/dist/bin.js

@@ -2,7 +2,7 @@
 import {
   exitCodeFor,
   runCli
-} from "./chunk-YWC7F5T3.js";
+} from "./chunk-GLY5BN6D.js";
 
 // src/bin.ts
 runCli().catch((err) => {

package/dist/{chunk-YWC7F5T3.js → chunk-GLY5BN6D.js}

@@ -1775,10 +1775,11 @@ async function defaultReadOrigin(cwd) {
 }
 
 // src/code-runtime-config.ts
-var CODE_PI_IMAGE = "ghcr.io/cory/odla-pi-agent@sha256:2a52a1c8eed66ad167e7bccab4d603ed8fcd75c42dddfb320083436ed89b7c9c";
+var CODE_PI_IMAGE = "odla-ai/pi-agent:embedded";
+var CODE_NODE_IMAGE = "node:24-alpine@sha256:a0b9bf06e4e6193cf7a0f58816cc935ff8c2a908f81e6f1a95432d679c54fbfd";
 var CODE_BUILD_RECIPES = Object.freeze([{
   id: "odla-code-contracts",
-  image: "node:24-alpine@sha256:a0b9bf06e4e6193cf7a0f58816cc935ff8c2a908f81e6f1a95432d679c54fbfd",
+  image: CODE_NODE_IMAGE,
   command: [
     "node",
     // The clean source mount deliberately has no node_modules. Reuse the
@@ -1798,6 +1799,86 @@ var CODE_BUILD_RECIPES = Object.freeze([{
   pids: 128
 }]);
 
+// src/code-images.ts
+import { spawn as spawn2 } from "child_process";
+import { createHash } from "crypto";
+import { copyFile, mkdtemp, readFile, rm, writeFile } from "fs/promises";
+import { tmpdir } from "os";
+import { join as join2 } from "path";
+import { fileURLToPath } from "url";
+var runCodeImageCommand = (command, args, stdio) => new Promise((accept, reject) => {
+  const child = spawn2(command, [...args], { shell: false, stdio });
+  child.once("error", reject);
+  child.once("exit", (code, signal) => {
+    if (code === 0) accept();
+    else reject(new Error(`${command} ${args.join(" ")} exited ${code ?? signal ?? "without a status"}`));
+  });
+});
+async function prepareCodeImages(engine, images, run = runCodeImageCommand, buildEmbedded = buildEmbeddedPiImage, nameEmbedded = embeddedPiImageName) {
+  if (engine === "container") {
+    try {
+      await run(engine, ["system", "start"], "inherit");
+    } catch {
+      throw new Error("Apple container could not start; run `container system start` once to complete its lightweight VM setup, then retry");
+    }
+  }
+  const prepared = [];
+  for (const image of images) {
+    const runtimeImage = image === CODE_PI_IMAGE ? await nameEmbedded() : image;
+    const inspectArgs = ["image", "inspect", runtimeImage];
+    try {
+      await run(engine, inspectArgs, "ignore");
+      prepared.push(runtimeImage);
+      continue;
+    } catch {
+    }
+    if (image === CODE_PI_IMAGE) {
+      try {
+        await buildEmbedded(engine, runtimeImage, run);
+      } catch (error) {
+        const detail = error instanceof Error && error.message ? `: ${error.message}` : "";
+        throw new Error(`could not prepare CLI-embedded Code image${detail}`);
+      }
+      prepared.push(runtimeImage);
+      continue;
+    }
+    const args = engine === "container" ? ["image", "pull", image] : ["pull", image];
+    try {
+      await run(engine, args, "inherit");
+    } catch (error) {
+      const detail = error instanceof Error && error.message ? `: ${error.message}` : "";
+      throw new Error(`could not prepare pinned Code image ${image}${detail}`);
+    }
+    prepared.push(image);
+  }
+  return prepared;
+}
+function embeddedPiAssetPath() {
+  return fileURLToPath(new URL("./runtime/pi-agent.js", import.meta.url));
+}
+async function embeddedPiImageName() {
+  const bundle = await readFile(embeddedPiAssetPath()).catch(() => {
+    throw new Error("CLI-embedded Pi runtime is missing; reinstall this exact @odla-ai/cli version");
+  });
+  return `odla-ai/pi-agent:embedded-sha256-${createHash("sha256").update(bundle).digest("hex")}`;
+}
+async function buildEmbeddedPiImage(engine, image, run) {
+  const context = await mkdtemp(join2(tmpdir(), "odla-code-pi-"));
+  try {
+    await copyFile(embeddedPiAssetPath(), join2(context, "pi-agent.js"));
+    await writeFile(join2(context, "Dockerfile"), [
+      `FROM ${CODE_NODE_IMAGE}`,
+      "COPY pi-agent.js /opt/odla/pi-agent.js",
+      "WORKDIR /workspace",
+      'ENTRYPOINT ["node", "/opt/odla/pi-agent.js"]',
+      ""
+    ].join("\n"), { mode: 384 });
+    await run(engine, ["build", "--tag", image, context], "inherit");
+  } finally {
+    await rm(context, { recursive: true, force: true });
+  }
+}
+
 // src/code-connect.ts
 import { existsSync as existsSync4 } from "fs";
 import { cpus, hostname, totalmem } from "os";
@@ -1884,21 +1965,21 @@ function encodeAgentInput(message2) {
 `;
 }
 
-// ../harness/dist/chunk-IRFCMVKU.js
-import { execFile as execFile2, spawn as spawn2 } from "child_process";
+// ../harness/dist/chunk-IONC45N6.js
+import { execFile as execFile2, spawn as spawn3 } from "child_process";
 import { constants } from "fs";
 import { access } from "fs/promises";
-import { delimiter, join as join2 } from "path";
+import { delimiter, join as join3 } from "path";
 import { getgid, getuid } from "process";
-import { mkdir, mkdtemp, realpath, rm, writeFile } from "fs/promises";
-import { tmpdir } from "os";
+import { mkdir, mkdtemp as mkdtemp2, realpath, rm as rm2, writeFile as writeFile2 } from "fs/promises";
+import { tmpdir as tmpdir2 } from "os";
 import { join as join22, resolve as resolve3, sep } from "path";
 import { spawn as spawn22 } from "child_process";
 import { isAbsolute as isAbsolute3 } from "path";
-import { chmod, copyFile, lstat, mkdir as mkdir2, mkdtemp as mkdtemp2, readdir, realpath as realpath2, rm as rm2, stat } from "fs/promises";
-import { tmpdir as tmpdir2 } from "os";
-import { basename, join as join3, relative as relative2, resolve as resolve22, sep as sep2 } from "path";
-import { spawn as spawn3 } from "child_process";
+import { chmod, copyFile as copyFile2, lstat, mkdir as mkdir2, mkdtemp as mkdtemp22, readdir, realpath as realpath2, rm as rm22, stat } from "fs/promises";
+import { tmpdir as tmpdir22 } from "os";
+import { basename, join as join32, relative as relative2, resolve as resolve22, sep as sep2 } from "path";
+import { spawn as spawn32 } from "child_process";
 var DIGEST_IMAGE = /^[a-z0-9][a-z0-9._/-]*(?::[a-zA-Z0-9._-]+)?@sha256:[0-9a-f]{64}$/;
 function assertPinnedImage(image) {
   if (!DIGEST_IMAGE.test(image)) throw new TypeError("container image must be pinned by sha256 digest");
@@ -1906,7 +1987,7 @@ function assertPinnedImage(image) {
 async function commandAvailable(engine) {
   for (const directory of (process.env.PATH ?? "").split(delimiter).filter(Boolean)) {
     try {
-      await access(join2(directory, engine), constants.X_OK);
+      await access(join3(directory, engine), constants.X_OK);
       return true;
     } catch {
     }
@@ -1937,7 +2018,7 @@ async function selectContainerEngine(requested = "auto", options = {}) {
     throw new TypeError("no rootless Podman found; install Podman or explicitly choose --engine docker after reviewing its daemon boundary");
   }
   if (platform === "darwin") {
-    throw new TypeError("no Apple container or Podman Machine found; install one or explicitly choose --engine docker");
+    throw new TypeError("Apple container is not installed; on Apple Silicon macOS 26 run `brew install container`, then retry (Podman Machine is the fallback)");
   }
   throw new TypeError("no supported container engine found");
 }
@@ -2030,7 +2111,7 @@ async function runContainerAttempt(options) {
   await verifyContainerEngineBoundary(options.engine);
   const args = buildContainerRunArgs(options);
   const name = containerName(args);
-  const child = spawn2(options.engine, args, { stdio: ["pipe", "pipe", "pipe"], shell: false });
+  const child = spawn3(options.engine, args, { stdio: ["pipe", "pipe", "pipe"], shell: false });
   let stderr = "";
   let outputBytes = 0;
   let complete = null;
@@ -2048,7 +2129,7 @@ async function runContainerAttempt(options) {
       child.stdin.write(encodeAgentInput(cancel));
     }
     const removeArgs = options.engine === "container" ? ["delete", "--force", name] : ["rm", "-f", name];
-    const killer = spawn2(options.engine, removeArgs, { stdio: "ignore", shell: false });
+    const killer = spawn3(options.engine, removeArgs, { stdio: "ignore", shell: false });
     killer.unref();
   };
   const abort = () => stop("runner_cancelled");
@@ -2201,7 +2282,7 @@ async function materializeGitTree(source, commitSha, options = {}) {
     return match && allowedWorkspacePath(match[3]) ? [{ mode: match[1], hash: match[2], path: match[3] }] : [];
   });
   if (entries.length > maxFiles) throw new Error(`workspace exceeds ${maxFiles} files`);
-  const root = await mkdtemp(join22(options.tempRoot ?? tmpdir(), "odla-git-tree-"));
+  const root = await mkdtemp2(join22(options.tempRoot ?? tmpdir2(), "odla-git-tree-"));
   const targetRoot = join22(root, "source");
   await mkdir(targetRoot);
   let byteCount = 0;
@@ -2214,17 +2295,17 @@ async function materializeGitTree(source, commitSha, options = {}) {
       const target = resolve3(targetRoot, entry.path);
       if (!target.startsWith(`${resolve3(targetRoot)}${sep}`)) throw new TypeError("Git tree path escapes workspace");
       await mkdir(resolve3(target, ".."), { recursive: true });
-      await writeFile(target, content, { flag: "wx", mode: entry.mode === "100755" ? 493 : 420 });
+      await writeFile2(target, content, { flag: "wx", mode: entry.mode === "100755" ? 493 : 420 });
     }
     return {
       root,
       sourceDir: targetRoot,
       fileCount: entries.length,
       byteCount,
-      cleanup: () => rm(root, { recursive: true, force: true })
+      cleanup: () => rm2(root, { recursive: true, force: true })
     };
   } catch (error) {
-    await rm(root, { recursive: true, force: true });
+    await rm2(root, { recursive: true, force: true });
     throw error;
   }
 }
@@ -2235,7 +2316,7 @@ async function sourceFiles(sourceDir, maxFiles, maxBytes) {
     for (const entry of await readdir(dir, { withFileTypes: true })) {
       if (entry.isDirectory() && SKIP_WORKSPACE_DIRS.has(entry.name)) continue;
       if (!entry.isDirectory() && SECRET_WORKSPACE_FILE.test(entry.name)) continue;
-      const path = join3(dir, entry.name);
+      const path = join32(dir, entry.name);
       if (entry.isSymbolicLink()) continue;
       if (entry.isDirectory()) {
         await walk(path);
@@ -2258,7 +2339,7 @@ async function sourceFiles(sourceDir, maxFiles, maxBytes) {
   return files.sort((left, right) => left.relativePath.localeCompare(right.relativePath));
 }
 async function gitSourceFiles(sourceDir, maxFiles, maxBytes) {
-  const child = spawn3("git", ["ls-files", "-z", "--cached", "--others", "--exclude-standard"], {
+  const child = spawn32("git", ["ls-files", "-z", "--cached", "--others", "--exclude-standard"], {
     cwd: sourceDir,
     stdio: ["ignore", "pipe", "pipe"],
     shell: false
@@ -2305,14 +2386,14 @@ async function gitSourceFiles(sourceDir, maxFiles, maxBytes) {
 }
 async function copyTree(files, destination) {
   for (const file of files) {
-    const target = join3(destination, file.relativePath);
+    const target = join32(destination, file.relativePath);
     await mkdir2(resolve22(target, ".."), { recursive: true });
-    await copyFile(file.source, target);
+    await copyFile2(file.source, target);
     await chmod(target, file.mode);
   }
 }
 async function captureGitDiff(root, maxBytes) {
-  const child = spawn3("git", [
+  const child = spawn32("git", [
     "diff",
     "--no-index",
     "--binary",
@@ -2342,15 +2423,15 @@ async function captureGitDiff(root, maxBytes) {
   if (code !== 0 && code !== 1) {
     throw new Error(`git diff failed: ${Buffer.concat(stderr).toString("utf8").slice(0, 1e3)}`);
   }
-  return Buffer.concat(stdout).toString("utf8").replaceAll("a/baseline/", "a/").replaceAll("b/workspace/", "b/").replaceAll("--- a/baseline", "--- a").replaceAll("+++ b/workspace", "+++ b");
+  return Buffer.concat(stdout).toString("utf8").replaceAll("a/baseline/", "a/").replaceAll("a/workspace/", "a/").replaceAll("b/baseline/", "b/").replaceAll("b/workspace/", "b/").replaceAll("--- a/baseline", "--- a").replaceAll("+++ b/workspace", "+++ b");
 }
 async function stageWorkspace(source, options = {}) {
   const sourceDir = await realpath2(resolve22(source));
   const sourceStat = await stat(sourceDir);
   if (!sourceStat.isDirectory()) throw new TypeError("workspace source must be a directory");
-  const root = await mkdtemp2(join3(options.tempRoot ?? tmpdir2(), "odla-harness-"));
-  const baselineDir = join3(root, "baseline");
-  const workspaceDir = join3(root, "workspace");
+  const root = await mkdtemp22(join32(options.tempRoot ?? tmpdir22(), "odla-harness-"));
+  const baselineDir = join32(root, "baseline");
+  const workspaceDir = join32(root, "workspace");
   await Promise.all([mkdir2(baselineDir), mkdir2(workspaceDir)]);
   try {
     const maxFiles = options.maxFiles ?? 2e4;
@@ -2364,10 +2445,10 @@ async function stageWorkspace(source, options = {}) {
       fileCount: files.length,
       byteCount: files.reduce((sum, file) => sum + file.bytes, 0),
       patch: (maxBytes2) => captureGitDiff(root, maxBytes2),
-      cleanup: () => rm2(root, { recursive: true, force: true })
+      cleanup: () => rm22(root, { recursive: true, force: true })
     };
   } catch (error) {
-    await rm2(root, { recursive: true, force: true });
+    await rm22(root, { recursive: true, force: true });
     throw error;
   }
 }
@@ -2380,9 +2461,9 @@ async function stageWorkspacePair(baselineSource, workspaceSource, options = {})
     sourceFiles(baselineDirSource, maxFiles, maxBytes),
     sourceFiles(workspaceDirSource, maxFiles, maxBytes)
   ]);
-  const root = await mkdtemp2(join3(options.tempRoot ?? tmpdir2(), "odla-harness-"));
-  const baselineDir = join3(root, "baseline");
-  const workspaceDir = join3(root, "workspace");
+  const root = await mkdtemp22(join32(options.tempRoot ?? tmpdir22(), "odla-harness-"));
+  const baselineDir = join32(root, "baseline");
+  const workspaceDir = join32(root, "workspace");
   await Promise.all([mkdir2(baselineDir), mkdir2(workspaceDir)]);
   try {
     await Promise.all([copyTree(baselineFiles, baselineDir), copyTree(workspaceFiles, workspaceDir)]);
@@ -2393,17 +2474,17 @@ async function stageWorkspacePair(baselineSource, workspaceSource, options = {})
       fileCount: workspaceFiles.length,
       byteCount: workspaceFiles.reduce((sum, file) => sum + file.bytes, 0),
       patch: (maxPatchBytes) => captureGitDiff(root, maxPatchBytes),
-      cleanup: () => rm2(root, { recursive: true, force: true })
+      cleanup: () => rm22(root, { recursive: true, force: true })
     };
   } catch (error) {
-    await rm2(root, { recursive: true, force: true });
+    await rm22(root, { recursive: true, force: true });
     throw error;
   }
 }
 
-// ../harness/dist/chunk-4MOSEKB6.js
-import { createHash } from "crypto";
-import { readFile, readdir as readdir2 } from "fs/promises";
+// ../harness/dist/chunk-QGDLTDYH.js
+import { createHash as createHash2 } from "crypto";
+import { readFile as readFile2, readdir as readdir2 } from "fs/promises";
 import { relative as relative3, resolve as resolve4 } from "path";
 
 // ../camel/dist/chunk-7FHPOQVP.js
@@ -2738,21 +2819,21 @@ function validateSnapshot(snapshot, limits) {
   }
 }
 
-// ../harness/dist/chunk-4MOSEKB6.js
+// ../harness/dist/chunk-QGDLTDYH.js
 import { spawn as spawn4 } from "child_process";
 import { lstat as lstat2 } from "fs/promises";
 import { resolve as resolve23, sep as sep3 } from "path";
 import { spawn as spawn23 } from "child_process";
 import { getgid as getgid2, getuid as getuid2 } from "process";
 import { randomUUID } from "crypto";
-import { createHash as createHash2, randomUUID as randomUUID2 } from "crypto";
+import { createHash as createHash22, randomUUID as randomUUID2 } from "crypto";
 import { createReadStream } from "fs";
 import { lstat as lstat22 } from "fs/promises";
 import { join as join4 } from "path";
-import { mkdir as mkdir3, mkdtemp as mkdtemp3, rm as rm3, writeFile as writeFile2 } from "fs/promises";
+import { mkdir as mkdir3, mkdtemp as mkdtemp3, rm as rm3, writeFile as writeFile3 } from "fs/promises";
 import { tmpdir as tmpdir3 } from "os";
 import { dirname as dirname4, join as join23, resolve as resolve32, sep as sep22 } from "path";
-import { readFile as readFile2, readdir as readdir22, stat as stat2 } from "fs/promises";
+import { readFile as readFile22, readdir as readdir22, stat as stat2 } from "fs/promises";
 import { relative as relative22, resolve as resolve42 } from "path";
 
 // ../camel/dist/chunk-LAXU2AVK.js
@@ -3031,7 +3112,7 @@ function looksLikeDestination(value) {
   return /^(?:[a-z][a-z0-9+.-]*:\/\/|\/|\\\\)/i.test(text) || /^[\w.-]+\.[a-z]{2,}(?:[/:]|$)/i.test(text);
 }
 
-// ../harness/dist/chunk-4MOSEKB6.js
+// ../harness/dist/chunk-QGDLTDYH.js
 import { createHash as createHash3 } from "crypto";
 async function digestStagedWorkspace(root, limits) {
   const files = [];
@@ -3048,10 +3129,10 @@ async function digestStagedWorkspace(root, limits) {
     }
   };
   await walk(resolve4(root));
-  const hash = createHash("sha256");
+  const hash = createHash2("sha256");
   let bytes = 0;
   for (const file of files.sort((left, right) => left.path.localeCompare(right.path))) {
-    const content = await readFile(file.target);
+    const content = await readFile2(file.target);
     bytes += Buffer.byteLength(file.path) + content.byteLength;
     if (bytes > limits.maxBytes) throw new TypeError("workspace digest exceeds its byte bound");
     hash.update(`${Buffer.byteLength(file.path)}:${file.path}:${content.byteLength}:`);
@@ -3685,7 +3766,7 @@ async function inspectArtifacts(workspaceDir, recipe2) {
 }
 function hashFile(path) {
   return new Promise((accept, reject) => {
-    const hash = createHash2("sha256");
+    const hash = createHash22("sha256");
     const stream = createReadStream(path);
     stream.on("data", (chunk) => {
       hash.update(chunk);
@@ -3743,7 +3824,7 @@ function digestJson(value) {
   return digestBytes(JSON.stringify(value));
 }
 function digestBytes(value) {
-  return `sha256:${createHash2("sha256").update(value).digest("hex")}`;
+  return `sha256:${createHash22("sha256").update(value).digest("hex")}`;
 }
 function integer(value, minimum, maximum) {
   return Number.isSafeInteger(value) && value >= minimum && value <= maximum;
@@ -3864,7 +3945,7 @@ async function materializeCodeRuntimeSource(snapshot, tempRoot = tmpdir3()) {
       const target = resolve32(sourceDir, file.path);
       if (!target.startsWith(`${resolve32(sourceDir)}${sep22}`)) throw new TypeError("Code source path escapes its root");
       await mkdir3(dirname4(target), { recursive: true });
-      await writeFile2(target, file.content, { flag: "wx", mode: 420 });
+      await writeFile3(target, file.content, { flag: "wx", mode: 420 });
     }
     for (const reference of snapshot.references ?? []) {
       validateAlias(reference.alias);
@@ -3879,7 +3960,7 @@ async function materializeCodeRuntimeSource(snapshot, tempRoot = tmpdir3()) {
         const target = resolve32(sourceDir, path);
         if (!target.startsWith(`${resolve32(sourceDir)}${sep22}`)) throw new TypeError("Code reference path escapes its root");
         await mkdir3(dirname4(target), { recursive: true });
-        await writeFile2(target, file.content, { flag: "wx", mode: 292 });
+        await writeFile3(target, file.content, { flag: "wx", mode: 292 });
       }
     }
     return { sourceDir, cleanup: () => rm3(root, { recursive: true, force: true }) };
@@ -3906,7 +3987,7 @@ async function attachCodeRuntimeReferences(workspace, references) {
         const target = resolve32(root, path);
         if (!target.startsWith(`${resolve32(root)}${sep22}`)) throw new TypeError("Code reference path escapes its root");
         await mkdir3(dirname4(target), { recursive: true });
-        await writeFile2(target, file.content, { flag: "wx", mode: 292 });
+        await writeFile3(target, file.content, { flag: "wx", mode: 292 });
       }
     }
   }
@@ -4096,7 +4177,7 @@ async function read(context, request, options, policy) {
   if (!info.isFile() || info.size > Math.max(options.maxReadBytes ?? 128 * 1024, 2 * 1024 * 1024)) {
     throw new TypeError("file is not a bounded regular source file");
   }
-  const source = await readFile2(target);
+  const source = await readFile22(target);
   if (source.includes(0)) throw new TypeError("binary files are not readable through this tool");
   const lines = source.toString("utf8").split("\n");
   const content = lines.slice(startLine - 1, endLine).join("\n");
@@ -4397,6 +4478,7 @@ function runtimeResultError(value) {
 var CodePiRuntimeEngine = class {
   constructor(options) {
     this.options = options;
+    if (options.imageAuthorization === "cli_embedded" && !/^odla-ai\/pi-agent:embedded-sha256-[0-9a-f]{64}$/.test(options.image)) throw new TypeError("CLI-embedded Pi image must use its content-addressed local tag");
     this.#run = options.runAttempt ?? runContainerAttempt;
     this.#buildPolicyDigest = digestRuntimeValue(JSON.stringify(options.recipes));
     this.#checkpoints = new CodeRuntimeCheckpointManager({
@@ -4562,6 +4644,7 @@ var CodePiRuntimeEngine = class {
     const result = await this.#run({
       engine: this.options.engine,
       image: this.options.image,
+      allowUnpinnedImage: this.options.imageAuthorization === "cli_embedded",
       workspaceDir: active.workspace.workspaceDir,
       workspaceAccess: "none",
       task: lease.task,
@@ -4855,20 +4938,6 @@ function digestText(value) {
   return `sha256:${createHash4("sha256").update(value).digest("hex")}`;
 }
 
-// src/code-images.ts
-import { execFile as execFile4 } from "child_process";
-async function prepareCodeImages(engine, images) {
-  for (const image of images) {
-    await new Promise((accept, reject) => {
-      const args = engine === "container" ? ["image", "pull", image] : ["pull", image];
-      execFile4(engine, args, { encoding: "utf8", maxBuffer: 2 * 1024 * 1024, timeout: 10 * 6e4 }, (error) => {
-        if (error) reject(new Error(`could not prepare pinned Code image ${image}`));
-        else accept();
-      });
-    });
-  }
-}
-
 // src/code-connect.ts
 async function codeConnect(options) {
   const cwd = options.cwd ?? process.cwd();
@@ -4901,10 +4970,11 @@ async function codeConnect(options) {
   const out = options.stdout ?? console;
   const doFetch = options.fetch ?? fetch;
   const engine = await (options.selectEngine ?? selectContainerEngine)(options.engine ?? "auto");
-  await (options.prepareImages ?? prepareCodeImages)(engine, [
-    CODE_PI_IMAGE,
-    ...new Set(CODE_BUILD_RECIPES.map((recipe2) => recipe2.image))
-  ]);
+  const [piImage] = await (options.prepareImages ?? prepareCodeImages)(
+    engine,
+    [CODE_PI_IMAGE, ...new Set(CODE_BUILD_RECIPES.map((recipe2) => recipe2.image))]
+  );
+  if (!piImage || !/^odla-ai\/pi-agent:embedded-sha256-[0-9a-f]{64}$/.test(piImage)) throw new Error("Code image preflight did not produce the content-addressed embedded Pi runtime");
   const hostPlatform = process.platform === "darwin" ? "macos" : "linux";
   const hostName = (options.name ?? hostname()).trim();
   if (!hostName || hostName.length > 120) throw new Error("--name must contain 1 to 120 characters");
@@ -4948,7 +5018,8 @@ async function codeConnect(options) {
       source: descriptor2,
       images: {
         ready: true,
-        pi: CODE_PI_IMAGE,
+        pi: piImage,
+        piSource: "cli_embedded",
         recipes: CODE_BUILD_RECIPES.map((recipe2) => ({ id: recipe2.id, image: recipe2.image }))
       }
     };
@@ -4963,6 +5034,7 @@ async function codeConnect(options) {
       engine,
       capabilities,
       localSource,
+      piImage,
       heartbeatMs,
       once: options.once === true,
       signal: options.signal,
@@ -4992,7 +5064,8 @@ async function runCodeRuntime(input) {
   const commandEngine = new CodePiRuntimeEngine({
     control,
     engine: input.engine,
-    image: CODE_PI_IMAGE,
+    image: input.piImage ?? input.capabilities.images.pi,
+    imageAuthorization: "cli_embedded",
     recipes: CODE_BUILD_RECIPES,
     recipeAuthorization: "registered_recipe",
     localSource: input.localSource,
@@ -6370,7 +6443,7 @@ function securityExecutionDigest(value) {
 import { existsSync as existsSync8, lstatSync, mkdirSync as mkdirSync3, readFileSync as readFileSync6, readdirSync, writeFileSync as writeFileSync3 } from "fs";
 import { homedir } from "os";
 import { dirname as dirname6, isAbsolute as isAbsolute5, join as join7, relative as relative5, resolve as resolve9, sep as sep5 } from "path";
-import { fileURLToPath } from "url";
+import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/skill-adapters.ts
 var PROJECT_INSTRUCTIONS = `<!-- odla-ai agent setup:start -->
@@ -6426,7 +6499,7 @@ runbook. Do not substitute a remote documentation page for the installed copy.
 var AGENT_HARNESSES = ["claude", "codex", "cursor", "copilot", "gemini", "agents"];
 function installSkill(options = {}) {
   const out = options.stdout ?? console;
-  const sourceDir = options.sourceDir ?? fileURLToPath(new URL("../skills", import.meta.url));
+  const sourceDir = options.sourceDir ?? fileURLToPath2(new URL("../skills", import.meta.url));
   const files = listFiles(sourceDir);
   if (files.length === 0) throw new Error(`no bundled skills found at ${sourceDir}`);
   const harnesses = normalizeHarnesses(options.harnesses, options.global === true);
@@ -7813,6 +7886,7 @@ export {
   inferGitHubRepository,
   CODE_PI_IMAGE,
   CODE_BUILD_RECIPES,
+  prepareCodeImages,
   codeConnect,
   runCodeRuntime,
   doctor,
@@ -7836,4 +7910,4 @@ export {
   exitCodeFor,
   runCli
 };
-//# sourceMappingURL=chunk-YWC7F5T3.js.map
+//# sourceMappingURL=chunk-GLY5BN6D.js.map