@outerlayer/cli 0.20.0 → 0.22.1

package/CHANGELOG.md

@@ -1,5 +1,38 @@
 # @outerlayer/cli
 
+## 0.22.1
+
+### Patch Changes
+
+- 53b61f7: The `outerlayer-amend` skill watches the pull request's checks after it pushes. It fixes a failed check its own change caused, at most twice, and names any check still red in its report.
+- 75f786b: The runner's image build downloads tini and gh through the proxy your Docker client is set up to use. Before, those two downloads ignored the proxy. The image build then failed on a host that reaches the internet only through one.
+
+## 0.22.0
+
+### Minor Changes
+
+- 520123a: The build process now ships as a maintained `outerlayer-build` skill that `outerlayer init --update` rewrites with each CLI release. Your repository's `build` skill keeps only your own changes to it, and `outerlayer doctor` reports a `build` skill that no longer points at the maintained one. Run `outerlayer init --update` after upgrading to move to the new layout.
+
+### Patch Changes
+
+- 807c89d: `outerlayer work build --instructions <text>` gives the agent that runs a host build instructions from you, up to 2000 characters. The build skill reads them at intake as guidance; the issue and its criteria win when the two disagree. With `--local`, the command refuses `--instructions` before any network call.
+- 540fd26: A container build keeps running when its runner restarts or crashes, and the runner picks it up when it comes back.
+- 1a8d9ac: `outerlayer doctor` names its checks `Control plane` and `Control plane degradation`, the term the dashboard uses.
+- 5301041: On a macOS runner, a container build's session that breaks HTTP/2 framing now ends at once and counts toward ending the build. Before, the session stayed open, so a build that kept breaking framing was never ended.
+- 8697753: A container or microVM build whose command fails at once ends without a 30-second wait for its session sender. The runner asks the sender to stop again each second until the request reaches it.
+- 5301041: The runner logs a line for each repository a claim left out because its GitHub organization's App installation is suspended, and builds in the repositories it was given. It now reports runner protocol 22.
+
+## 0.21.0
+
+### Minor Changes
+
+- befe174: A container build receives its gh configuration, commit hooks, staged context and check input through `docker exec`, into `/outerlayer/job` inside the container. Nothing from the runner's disk is mounted into it. A build an older runner started keeps its mount until it ends.
+- 5481fcb: A container build reaches the runner through `docker exec`, with no socket shared through the runner's disk. The relay in the build runs as its own user, which the agent cannot be. A build an older runner started keeps working after the runner updates.
+
+### Patch Changes
+
+- f046dea: A control plane or repository can keep its skills in `.agents/skills/`. `outerlayer claude` and host builds give them to Claude Code under their own names. Every host build now starts its agent through `outerlayer claude`.
+
 ## 0.20.0
 
 ### Minor Changes

package/README.md

@@ -225,10 +225,20 @@ content:
   connections from the host only, and the runner runs every step of the build
   through it, including the build's command (`outerlayer vm-exec` on the host).
 - **`outerlayer runner start` with `builtin:container` hooks** runs each
-  build in its own Docker container, which has no network but loopback. The
-  build reaches the network only through a tunnel the runner serves on a
-  Unix socket, which the container's own `outerlayer broker-relay` process
-  reaches from loopback. The tunnel refuses loopback, private, link-local,
+  build in its own Docker container, which has no network but loopback. A
+  container build reaches the runner through `docker exec`: the runner starts
+  `outerlayer broker-relay join` in the container and serves one HTTP/2
+  session over that process's standard input and output. The container's own
+  `outerlayer broker-relay` process, which runs as a separate unprivileged
+  user, sends each loopback connection to the runner as one stream, and no
+  socket file is shared between the runner and the container. The build's
+  files (gh's configuration with the read token, the commit hooks, the staged
+  context, a check's input) are copied into `/outerlayer/job` by piping a tar
+  stream into `docker exec -i` running `outerlayer receive-files` as that
+  unprivileged user, so nothing from the runner's disk is mounted into the
+  container and the agent cannot change what it reads. (A build an older
+  runner started keeps its mounted folder and its Unix sockets until it ends.) The build
+  reaches the network only through a tunnel the runner serves. The tunnel refuses loopback, private, link-local,
   shared-address, multicast and unique-local addresses and the host's own,
   and it terminates no TLS. The tunnel also serves the build a local git
   remote. Git in the container still shows
@@ -438,7 +448,7 @@ before it gives up.
 | `outerlayer runner check [--config <path>]` | Validates the config, the hooks and the key, prints the settings the runner would use, and exits non-zero on a problem. Takes no work and writes no pid file. |
 | `outerlayer runner start [--config <path>]` | Runs the loop: claim work, run it, sync, clean up, report, release with an outcome. Repeat. Reads the `runner` block from the config file (default `~/.outerlayer/config.json`). Refuses to start on a bad config, an unrunnable hook, or a refused key. |
 | `outerlayer runner image --repository <owner/name> [--remote <url>] [--config <path>] [--json]` | Builds the image a repository's builds run in. Fetches the head of the default branch into the runner's cache, builds its `.devcontainer/devcontainer.json` with the devcontainer CLI, ignores every setting that reaches the host or widens the container's privileges, and adds this CLI and a pinned Claude Code. Reuses the image until the recipe or the tools change, keeps the newest three, and writes `recipe.json` beside the image record. Refuses a Compose recipe (`recipe_needs_docker`) and a repository with only named configurations (`recipe_ambiguous`). |
-| `outerlayer runner stop [--config <path>] [--now]` | Takes no more work and waits for running jobs to finish, naming each every five seconds. `--now` ends them immediately with outcome `stopped`. Ctrl-C on a foreground runner drains; a second one stops now. |
+| `outerlayer runner stop [--config <path>] [--now]` | Takes no more work and waits for running jobs to finish, naming each every five seconds. `--now` ends them immediately with outcome `stopped`. Ctrl-C on a foreground runner drains; a second one stops now. A container build keeps running when its runner restarts or crashes, and stops when its lease expires with no runner. |
 | `outerlayer runner status [--config <path>] [--recent] [--json]` | A header naming the runner's own state, then a row per running job — item, queue, stage, elapsed, started, lease, job directory. `--recent` adds finished jobs, newest first, capped at 20, with their outcomes. |
 | `outerlayer runner logs <item> [--config <path>] [-f]` | Prints the newest attempt's log for one item, following it with `-f`. |
 

package/dist/{agent-setup-AM42SA2D.js → agent-setup-LTSLXPS3.js}

@@ -1,27 +1,28 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { keepHandWritten, runAgentSetup } from './chunk-CGGPS7SI.js';
-import './chunk-5VML45HH.js';
-import './chunk-YVZJ6GKF.js';
-import './chunk-6X4SQ5MY.js';
-import './chunk-ANPNT6PM.js';
-import './chunk-EAEELQVQ.js';
-import './chunk-7UWVLZXD.js';
-import './chunk-FVMYKL6L.js';
+export { keepHandWritten, runAgentSetup } from './chunk-O6RJ3QMU.js';
+import './chunk-XCRZTXRL.js';
+import './chunk-6YBLN4TR.js';
+import './chunk-USWVXQIH.js';
+import './chunk-QF7WZUU6.js';
 import './chunk-NTRCK4NH.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-BJ3KTMDH.js';
-import './chunk-NNLA7LLQ.js';
+import './chunk-DIB2WLBL.js';
 import './chunk-EABW6AJQ.js';
+import './chunk-V7SAQ645.js';
+import './chunk-5OCIHFGE.js';
+import './chunk-ANPNT6PM.js';
 import './chunk-CRB3POP4.js';
 import './chunk-YQR6E6OV.js';
 import './chunk-WFSUUUAN.js';
 import './chunk-7VUK5RFS.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-RA3O54FC.js';
-import './chunk-M2ZWWTWZ.js';
-import './chunk-N2PXGQRL.js';
-import './chunk-BQXFBI7T.js';
+import './chunk-OW52QLK3.js';
+import './chunk-IHNQWF6F.js';
+import './chunk-URWYRAIC.js';
+import './chunk-GISNHSYL.js';
 import './chunk-Z5GEFMRW.js';
 
 createRequire(import.meta.url);

package/dist/build-6WRNZPVR.js

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+export { buildRepositoryImage } from './chunk-3AZYLAJC.js';
+export { RecipeError } from './chunk-3W333NFO.js';
+import './chunk-XACXXKQ5.js';
+import './chunk-JBJTC3UU.js';
+import './chunk-IHNQWF6F.js';
+import './chunk-URWYRAIC.js';
+import './chunk-GISNHSYL.js';
+import './chunk-Z5GEFMRW.js';
+
+createRequire(import.meta.url);

package/dist/build-command-ND2ENDBS.js

@@ -0,0 +1,50 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+import './chunk-Z5GEFMRW.js';
+import { spawn } from 'child_process';
+import { mkdirSync, openSync, closeSync, writeFileSync, renameSync } from 'fs';
+import { constants } from 'os';
+import { join } from 'path';
+
+createRequire(import.meta.url);
+var COMMAND_LOG_FILE = "command.log";
+var COMMAND_PID_FILE = "command.pid";
+var COMMAND_EXIT_FILE = "exit-code";
+var NOT_FOUND = 127;
+var NOT_RUNNABLE = 126;
+function writeWhole(dir, name, text) {
+  const partial = join(dir, `${name}.partial`);
+  writeFileSync(partial, text);
+  renameSync(partial, join(dir, name));
+}
+function runBuildCommand(input) {
+  const { dir, argv } = input;
+  mkdirSync(dir, { recursive: true });
+  writeWhole(dir, COMMAND_PID_FILE, `${process.pid}
+`);
+  const log = openSync(join(dir, COMMAND_LOG_FILE), "a");
+  return new Promise((resolve) => {
+    const [program, ...args] = argv;
+    const child = spawn(program, args, { stdio: ["ignore", log, log], env: process.env });
+    const forwarded = ["SIGTERM", "SIGINT", "SIGHUP"];
+    const forward = (signal) => void child.kill(signal);
+    for (const signal of forwarded) process.on(signal, forward);
+    let settled = false;
+    const finish = (status) => {
+      if (settled) return;
+      settled = true;
+      for (const signal of forwarded) process.off(signal, forward);
+      closeSync(log);
+      try {
+        writeWhole(dir, COMMAND_EXIT_FILE, `${status}
+`);
+      } catch {
+      }
+      resolve(status);
+    };
+    child.once("error", (err) => finish(err.code === "ENOENT" ? NOT_FOUND : NOT_RUNNABLE));
+    child.once("close", (code, signal) => finish(code ?? 128 + (signal === null ? 0 : constants.signals[signal] ?? 0)));
+  });
+}
+
+export { runBuildCommand };

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-14T00:32:09.011Z+25b1e13","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-14T20:11:05.380Z+7c03e06","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-C4QNTYMS.js → builder-G3MLDMTI.js}

@@ -1,12 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-3UZTIRLF.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-XR56WEA5.js';
+import './chunk-3W333NFO.js';
 import './chunk-7RQ73DLO.js';
-import './chunk-CX22S5BA.js';
-import './chunk-QNLX477Q.js';
+import './chunk-AEKSX4EY.js';
 import './chunk-7VUK5RFS.js';
-import './chunk-N2PXGQRL.js';
-import './chunk-BQXFBI7T.js';
+import './chunk-OW52QLK3.js';
+import './chunk-IHNQWF6F.js';
+import './chunk-URWYRAIC.js';
+import './chunk-GISNHSYL.js';
 import './chunk-Z5GEFMRW.js';
 
 createRequire(import.meta.url);

package/dist/{check-BR5D27CX.js → check-UYKEMQNR.js}

@@ -1,77 +1,75 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-AD3EYI7P.js';
-import './chunk-B6SCN5NY.js';
-import './chunk-SADUQSO4.js';
-import './chunk-MTP2QEVO.js';
-import './chunk-S5PCA3SN.js';
+import { probeCredentials } from './chunk-7FEY33MY.js';
+import './chunk-FOCML5FI.js';
 import './chunk-3JVYMD4G.js';
-import './chunk-YETTWTAY.js';
 import './chunk-I2UOAV7X.js';
-import './chunk-ZX4I2MEK.js';
-import './chunk-JHGEBPLE.js';
-import './chunk-XNGMQ27R.js';
-import './chunk-R22NZSGA.js';
-import './chunk-KYS3TQAG.js';
+import './chunk-YETTWTAY.js';
+import './chunk-TPKYTORP.js';
+import './chunk-CQAEV3Z5.js';
+import './chunk-UF5L4BAI.js';
+import './chunk-BOMRFYTZ.js';
+import './chunk-JZGFDTNC.js';
+import './chunk-URAKVDSI.js';
+import './chunk-56X5TOJY.js';
 import './chunk-ESVW4MJY.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-GEMQLBMW.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-ENTHEUKT.js';
 import './chunk-YYYRBYWG.js';
-import './chunk-AMFWYESY.js';
+import './chunk-276D7BJ7.js';
 import './chunk-TBT347UY.js';
-import './chunk-PIZRPNKR.js';
-import './chunk-7YP7T6GV.js';
-import './chunk-LW7G5TJB.js';
-import './chunk-3ZR7Y23Y.js';
-import './chunk-OGFGZQA3.js';
-import './chunk-VMJPFQNE.js';
-import './chunk-3UZTIRLF.js';
-import './chunk-GGOMT6KF.js';
-import './chunk-X5H2WYMB.js';
-import './chunk-XZ4H4X5F.js';
-import './chunk-QEFKA2QD.js';
+import './chunk-ZPSLJFGL.js';
+import './chunk-4AVDD7VX.js';
+import './chunk-OBCFK4QD.js';
 import { parseRunnerEnv } from './chunk-6MZSX4M7.js';
-import './chunk-FBTGMSQF.js';
-import './chunk-IF2OSI5T.js';
-import './chunk-CG36IONK.js';
+import './chunk-FRNYCJ4W.js';
+import './chunk-5NJIWKD4.js';
+import './chunk-3AZYLAJC.js';
+import './chunk-OGFGZQA3.js';
+import './chunk-XR56WEA5.js';
+import './chunk-3W333NFO.js';
+import './chunk-NYTZ7HVN.js';
+import './chunk-2Q3PZ42G.js';
+import './chunk-CUFFDEF3.js';
+import './chunk-BET347JZ.js';
+import './chunk-QOALB6ZD.js';
+import './chunk-JRCSET55.js';
 import './chunk-G3IJ3N6F.js';
-import './chunk-BM63HB2M.js';
-import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-P53VEAOF.js';
+import './chunk-EAQSOE62.js';
+import './chunk-F35VMF5M.js';
+import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-V5CG75NX.js';
 import './chunk-UXYLWVTQ.js';
 import './chunk-7RQ73DLO.js';
-import './chunk-3CWUOFV6.js';
-import './chunk-QOZKPLVJ.js';
-import './chunk-CX22S5BA.js';
-import './chunk-ECODQ7II.js';
+import './chunk-XACXXKQ5.js';
 import './chunk-JBJTC3UU.js';
-import './chunk-PSN33ERW.js';
+import './chunk-6YBLN4TR.js';
+import './chunk-USWVXQIH.js';
+import './chunk-QF7WZUU6.js';
+import './chunk-NTRCK4NH.js';
+import './chunk-QC72I5GQ.js';
+import './chunk-ZJSNLVCE.js';
 import './chunk-F7CU5ABH.js';
 import './chunk-BKO6JEZI.js';
-import './chunk-QNLX477Q.js';
-import './chunk-GOSFARMS.js';
+import './chunk-ZNPE7FW5.js';
+import './chunk-HCVLP7XA.js';
+import './chunk-BJ3KTMDH.js';
+import './chunk-AEKSX4EY.js';
+import './chunk-EABW6AJQ.js';
+import './chunk-5OCIHFGE.js';
 import './chunk-ANPNT6PM.js';
 import './chunk-T2Q7ISPE.js';
 import './chunk-WZBHBH3J.js';
-import './chunk-5QRP3MVS.js';
-import './chunk-LLM3I5YU.js';
-import './chunk-EAEELQVQ.js';
-import './chunk-7UWVLZXD.js';
-import './chunk-FVMYKL6L.js';
-import './chunk-NTRCK4NH.js';
-import './chunk-ZJSNLVCE.js';
-import './chunk-BJ3KTMDH.js';
-import './chunk-G2YNJIGF.js';
-import './chunk-NNLA7LLQ.js';
-import './chunk-EABW6AJQ.js';
 import './chunk-CRB3POP4.js';
+import './chunk-5QRP3MVS.js';
 import './chunk-YQR6E6OV.js';
 import './chunk-TUSYOL2O.js';
 import './chunk-WFSUUUAN.js';
 import './chunk-7VUK5RFS.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-RA3O54FC.js';
-import './chunk-M2ZWWTWZ.js';
-import './chunk-N2PXGQRL.js';
-import './chunk-BQXFBI7T.js';
+import './chunk-OW52QLK3.js';
+import './chunk-IHNQWF6F.js';
+import './chunk-URWYRAIC.js';
+import './chunk-GISNHSYL.js';
 import './chunk-Z5GEFMRW.js';
 import { readFileSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-AMFWYESY.js → chunk-276D7BJ7.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-N2PXGQRL.js';
+import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-IHNQWF6F.js';
 import { readlinkSync, realpathSync, mkdirSync, unlinkSync, symlinkSync, renameSync, readFileSync, writeFileSync, rmSync, existsSync, readdirSync } from 'fs';
 import { join, basename, sep, resolve } from 'path';
 

package/dist/{chunk-X5H2WYMB.js → chunk-2Q3PZ42G.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RELAY_PORT, GATEWAY_SOCKET, GATEWAY_PORT, CLAUDE_SOCKET, CLAUDE_PORT, DESTINATION_BASE_PORT } from './chunk-BQXFBI7T.js';
+import { RELAY_PORT, GATEWAY_SOCKET, GATEWAY_PORT, CLAUDE_SOCKET, CLAUDE_PORT, DESTINATION_BASE_PORT } from './chunk-URWYRAIC.js';
 import { symlinkSync, unlinkSync } from 'fs';
 import { join } from 'path';
 

package/dist/{chunk-3CWUOFV6.js → chunk-3AZYLAJC.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RecipeError, locateRecipe, readRecipe, assertBuildable, writeSanitizedRecipe, classifyProperties, SANITIZED_NAME } from './chunk-QOZKPLVJ.js';
-import { CLAUDE_CODE_VERSION, NODE_IMAGE, DEFAULT_BASE_IMAGE, TINI_VERSION, GH_VERSION, GH_SHA256, TINI_SHA256 } from './chunk-CX22S5BA.js';
-import { claimPidFile, RunnerAlreadyRunningError, releasePidFile } from './chunk-ECODQ7II.js';
+import { CLAUDE_CODE_VERSION, NODE_IMAGE, DEFAULT_BASE_IMAGE, RecipeError, locateRecipe, readRecipe, assertBuildable, TINI_VERSION, GH_VERSION, writeSanitizedRecipe, classifyProperties, GH_SHA256, TINI_SHA256, SANITIZED_NAME } from './chunk-3W333NFO.js';
+import { claimPidFile, RunnerAlreadyRunningError, releasePidFile } from './chunk-XACXXKQ5.js';
 import { startTimeOf } from './chunk-JBJTC3UU.js';
-import { RUNNER_DIR_MODE, repoCacheDir, imagesDir, attemptStamp, runnerDir, rootfsPathFor, RUNNER_FILE_MODE } from './chunk-N2PXGQRL.js';
-import { withGitConfig, tokenHeader } from './chunk-BQXFBI7T.js';
+import { RUNNER_DIR_MODE, repoCacheDir, imagesDir, attemptStamp, runnerDir, rootfsPathFor, RUNNER_FILE_MODE } from './chunk-IHNQWF6F.js';
+import { withGitConfig, tokenHeader, PROXY_WARNING_FLAG } from './chunk-URWYRAIC.js';
+import { RELAY_ID, RELAY_USER } from './chunk-GISNHSYL.js';
 import { mkdirSync, rmSync, existsSync, mkdtempSync, cpSync, readFileSync, writeFileSync, readdirSync, lstatSync, readlinkSync } from 'fs';
 import { tmpdir } from 'os';
 import { dirname, join } from 'path';
@@ -176,7 +176,7 @@ function toolsDockerfile(parts) {
       ["SessionStart", "SessionEnd", "Stop", "PostToolUse"].map((event) => [event, [{ hooks: [{ type: "command", command: `outerlayer hook ${event}` }] }]])
     )
   });
-  const download = `node -e 'fetch(process.argv[1]).then((r)=>{if(!r.ok)throw new Error(process.argv[1]+" "+r.status);return r.arrayBuffer()}).then((b)=>require("fs").writeFileSync(process.argv[2],Buffer.from(b)))'`;
+  const download = `NODE_USE_ENV_PROXY=1 node ${PROXY_WARNING_FLAG} -e 'fetch(process.argv[1]).then((r)=>{if(!r.ok)throw new Error(process.argv[1]+" "+r.status);return r.arrayBuffer()}).then((b)=>require("fs").writeFileSync(process.argv[2],Buffer.from(b)))'`;
   return [
     `FROM ${recipeImage} AS recipe`,
     `FROM ${nodeImage} AS stage`,
@@ -216,10 +216,15 @@ function toolsDockerfile(parts) {
     "COPY --from=recipe /etc/group /tmp/recipe-group",
     `RUN uid=$(awk -F: 'BEGIN{m=1499} $3>=1500 && $3<60000 && $3>m{m=$3} END{print m+1}' /tmp/recipe-passwd) \\`,
     ` && gid=$(awk -F: 'BEGIN{m=1499} $3>=1500 && $3<60000 && $3>m{m=$3} END{print m+1}' /tmp/recipe-group) \\`,
-    " && { grep -v '^ol-agent:' /tmp/recipe-passwd > /out/etc/passwd || true; } \\",
-    " && { grep -v '^ol-agent:' /tmp/recipe-group > /out/etc/group || true; } \\",
+    " && { grep -v -e '^ol-agent:' -e '^ol-relay:' /tmp/recipe-passwd > /out/etc/passwd || true; } \\",
+    " && { grep -v -e '^ol-agent:' -e '^ol-relay:' /tmp/recipe-group > /out/etc/group || true; } \\",
+    // The relay's id is fixed because the runner names it in the container's `--tmpfs` options before the container exists.
+    ` && if awk -F: '$3==${RELAY_ID}{found=1} END{exit !found}' /out/etc/passwd; then echo "uid ${RELAY_ID} is taken by a user of the recipe image, and the relay needs it" >&2; exit 1; fi \\`,
+    ` && if awk -F: '$3==${RELAY_ID}{found=1} END{exit !found}' /out/etc/group; then echo "gid ${RELAY_ID} is taken by a group of the recipe image, and the relay needs it" >&2; exit 1; fi \\`,
     ` && printf '%s\\n' "ol-agent:x:$uid:$gid::/build/home:/bin/sh" >> /out/etc/passwd \\`,
     ` && printf '%s\\n' "ol-agent:x:$gid:" >> /out/etc/group \\`,
+    ` && printf '%s\\n' "${RELAY_USER}:x:${RELAY_ID}:${RELAY_ID}::/nonexistent:/usr/sbin/nologin" >> /out/etc/passwd \\`,
+    ` && printf '%s\\n' "${RELAY_USER}:x:${RELAY_ID}:" >> /out/etc/group \\`,
     " && chmod 0644 /out/etc/passwd /out/etc/group \\",
     " && chmod -R a+rX /out",
     `FROM ${recipeImage}`,

package/dist/{chunk-LRG3ZMZD.js → chunk-3V5C64Y5.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { autoConnect, detectActiveSession } from './chunk-IF2OSI5T.js';
-import { resolveRepoIdentity } from './chunk-QNLX477Q.js';
+import { autoConnect, detectActiveSession } from './chunk-QOALB6ZD.js';
+import { defaultFetch } from './chunk-QF7WZUU6.js';
+import { unauthorizedMessage, resolveGatewayCredentials } from './chunk-NTRCK4NH.js';
+import { resolveRepoIdentity } from './chunk-AEKSX4EY.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
-import { defaultFetch } from './chunk-FVMYKL6L.js';
-import { unauthorizedMessage, resolveGatewayCredentials } from './chunk-NTRCK4NH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 
 createRequire(import.meta.url);

package/dist/{chunk-QOZKPLVJ.js → chunk-3W333NFO.js}

@@ -223,4 +223,43 @@ function writeSanitizedRecipe(checkoutDir, location, recipe) {
 }
 var SANITIZED_NAME = "outerlayer-recipe.json";
 
-export { RecipeError, SANITIZED_NAME, assertBuildable, classifyProperties, locateRecipe, readRecipe, writeSanitizedRecipe };
+// src/runner/image/pins.ts
+var CLAUDE_CODE_VERSION = "2.1.284";
+var DEFAULT_BASE_IMAGE = "ubuntu:24.04@sha256:008173c23f95b170204355c12626cb5a965d779a7e1283b09e9cffbb1bf33ca3";
+var NODE_IMAGE = "node:22-bookworm-slim@sha256:43ac6c60b8f89723f746e8a92ce91abd5017e627ce1ddfe4238355d3a30b772c";
+var BUILDKIT_IMAGE = "moby/buildkit:v0.33.1@sha256:cec9f139f45e93c5c69c60f8b07cfad9f43f4ef6b6a6cd917527fea5ff2e3dea";
+var GH_VERSION = "2.101.0";
+var GH_SHA256 = {
+  amd64: "9bca2d1c16825f109907a23307628a2f0698fbf99662b73a5cf0b020293072b8",
+  arm64: "b57e8063f18862647c9d22727c32e9da1b963f8bf9db648fe123a6975695640f"
+};
+var TINI_VERSION = "0.19.0";
+var TINI_SHA256 = {
+  amd64: "c5b0666b4cb676901f90dfcb37106783c5fe2077b04590973b885950611b30ee",
+  arm64: "eae1d3aa50c48fb23b8cbdf4e369d0910dfc538566bfd09df89a774aa84a48b9"
+};
+var MICROVM_ARCHES = ["x86_64"];
+function firecrackerArch(nodeArch) {
+  return nodeArch === "x64" ? "x86_64" : nodeArch === "arm64" ? "aarch64" : nodeArch;
+}
+var FIRECRACKER_VERSION = "1.13.1";
+var FIRECRACKER_SHA256 = {
+  x86_64: "59450b9171ff2ebdf2f9a25be3a248a7ba79fb6371aec51a9d6d8eefca7b4faf"
+};
+var FIRECRACKER_BINARY_SHA256 = {
+  x86_64: "7d3924e0c8761edafbf85cb2a94c268ffad249644a40fd02d4e15cde4c206f6e"
+};
+var GUEST_ASSETS_VERSION = "1";
+var GUEST_ASSETS_BASE_URL = `https://github.com/outerlayerai/guest-assets/releases/download/guest-${GUEST_ASSETS_VERSION}`;
+var GUEST_KERNEL_SHA256 = {
+  x86_64: "5a2d716d301615c69fefc2f9574954e838269f14d5e8b0d1bad88b680cd372ee"
+};
+var GUEST_HELPER_SHA256 = {
+  x86_64: "4175e89ae8cb633113b5f69ef8b6e206093954411fe53edf86357bc1b7e822f9"
+};
+function guestAssetsPinned(arch) {
+  const zero = "0".repeat(64);
+  return GUEST_KERNEL_SHA256[arch] !== zero && GUEST_HELPER_SHA256[arch] !== zero;
+}
+
+export { BUILDKIT_IMAGE, CLAUDE_CODE_VERSION, DEFAULT_BASE_IMAGE, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, FIRECRACKER_VERSION, GH_SHA256, GH_VERSION, GUEST_ASSETS_BASE_URL, GUEST_ASSETS_VERSION, GUEST_HELPER_SHA256, GUEST_KERNEL_SHA256, MICROVM_ARCHES, NODE_IMAGE, RecipeError, SANITIZED_NAME, TINI_SHA256, TINI_VERSION, assertBuildable, classifyProperties, firecrackerArch, guestAssetsPinned, locateRecipe, readRecipe, writeSanitizedRecipe };

package/dist/{chunk-7YP7T6GV.js → chunk-4AVDD7VX.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { DEFAULT_UNIT_NAME } from './chunk-QEFKA2QD.js';
+import { DEFAULT_UNIT_NAME } from './chunk-OBCFK4QD.js';
 import { parseRunnerEnv } from './chunk-6MZSX4M7.js';
-import { RUNNER_FILE_MODE } from './chunk-N2PXGQRL.js';
+import { RUNNER_FILE_MODE } from './chunk-IHNQWF6F.js';
 import { existsSync, readFileSync, writeFileSync, renameSync, rmSync } from 'fs';
 import { join, dirname } from 'path';
 

package/dist/{chunk-KYS3TQAG.js → chunk-56X5TOJY.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
-import { autoConnect, detectActiveSession } from './chunk-IF2OSI5T.js';
+import { autoConnect, detectActiveSession } from './chunk-QOALB6ZD.js';
 import { acquireSpoolLockAt } from './chunk-G3IJ3N6F.js';
-import { resolveRepoIdentity } from './chunk-QNLX477Q.js';
+import { defaultFetch } from './chunk-QF7WZUU6.js';
+import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-NTRCK4NH.js';
+import { resolveRepoIdentity } from './chunk-AEKSX4EY.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
-import { defaultFetch } from './chunk-FVMYKL6L.js';
-import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-NTRCK4NH.js';
 import { StepNameSchema, StepBodySchema } from './chunk-7VUK5RFS.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { randomUUID } from 'crypto';