@outerlayer/cli 0.22.0 → 0.22.2

package/dist/{chunk-G2WME4RG.js → chunk-JD6GWYY7.js}

@@ -1,10 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
-import { autoConnect, detectActiveSession } from './chunk-QOALB6ZD.js';
+import { autoConnect, detectActiveSession } from './chunk-B42BIYC6.js';
 import { acquireSpoolLockAt } from './chunk-G3IJ3N6F.js';
-import { defaultFetch } from './chunk-VWLOQ6FI.js';
-import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-NTRCK4NH.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-QS43O4DR.js';
 import { resolveRepoIdentity } from './chunk-AEKSX4EY.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';

package/dist/{chunk-C3HKR67W.js → chunk-JV4YGAAW.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { compareVersions } from './chunk-I2UOAV7X.js';
-import { launcherPath, writeLauncher, LauncherWriteError, pathNotes } from './chunk-LOB2SUM3.js';
-import { currentVersion, currentLink, isInLayout, packageRootIn, versionDir, switchCurrent, execStartLine } from './chunk-4NM3I3VV.js';
-import { RUNNER_DIR_MODE } from './chunk-KIGSGZBB.js';
+import { launcherPath, writeLauncher, LauncherWriteError, pathNotes } from './chunk-EFB3FGLC.js';
+import { currentVersion, currentLink, isInLayout, packageRootIn, versionDir, switchCurrent, execStartLine } from './chunk-276D7BJ7.js';
+import { RUNNER_DIR_MODE } from './chunk-IHNQWF6F.js';
 import { realpathSync, readFileSync, mkdirSync, rmSync, cpSync, existsSync } from 'fs';
 import { dirname, sep, join } from 'path';
 

package/dist/{chunk-FGW2774C.js → chunk-KOIMUHIS.js}

@@ -1,18 +1,19 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { senderPidfile } from './chunk-ATRIVTRE.js';
-import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-UD3EXMKB.js';
-import { installScrubContext } from './chunk-34XORKFD.js';
-import { ADDED_USER, AssetError, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createBuildDisk, machineConfig, resolveAgentUser, AgentUserError, runBuildSteps, shellQuote, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, senderAliveScript, GH_CONFIG_YML, ghHostsYml, isLiteralAddress, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, copyJudgeTree } from './chunk-VX74ND77.js';
-import { readBranchHead, fetchCommit, diffBetween } from './chunk-IRBNIRQJ.js';
-import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, COMMAND_DIR, childEnvironment, judgeCommand, JUDGE_MAX_TURNS, MAX_REPORT_BYTES, JUDGE_DIR } from './chunk-WERZMIKA.js';
+import { senderPidfile } from './chunk-4542B3RR.js';
+import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-SFHR45FA.js';
+import { writeDockerClientConfig } from './chunk-WXJXHZVB.js';
+import { installScrubContext } from './chunk-U6RKHNC7.js';
+import { ADDED_USER, AssetError, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createBuildDisk, machineConfig, resolveAgentUser, AgentUserError, runBuildSteps, shellQuote, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, senderAliveScript, GH_CONFIG_YML, ghHostsYml, isLiteralAddress, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, copyJudgeTree } from './chunk-WKSBSEWT.js';
+import { readBranchHead, fetchCommit, diffBetween } from './chunk-3AZYLAJC.js';
+import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, COMMAND_DIR, childEnvironment, judgeCommand, JUDGE_MAX_TURNS, MAX_REPORT_BYTES, JUDGE_DIR } from './chunk-XR56WEA5.js';
 import { CLAUDE_CODE_VERSION } from './chunk-3W333NFO.js';
-import { waitForAgent, vmExecArgs } from './chunk-PHHBYAL6.js';
-import { socketPathProblem, vsockLinks, linkVsockSockets } from './chunk-BLW6GPBZ.js';
-import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, formatDuration, retrySend, formatClock } from './chunk-C3OVGKVJ.js';
-import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-2HT2XGJX.js';
+import { waitForAgent, vmExecArgs } from './chunk-NYTZ7HVN.js';
+import { socketPathProblem, vsockLinks, linkVsockSockets } from './chunk-2Q3PZ42G.js';
+import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, formatDuration, retrySend, formatClock } from './chunk-IMCVQF5F.js';
+import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-FQE5RDHI.js';
 import { planArtifactUpload } from './chunk-G3IJ3N6F.js';
-import { isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-2CMJLYV6.js';
+import { isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-V5CG75NX.js';
 import { parseSize } from './chunk-7RQ73DLO.js';
 import { isSameProcess, startTimeOf } from './chunk-JBJTC3UU.js';
 import { scrubText } from './chunk-AEKSX4EY.js';
@@ -21,9 +22,9 @@ import { resolvePackRoot } from './chunk-5OCIHFGE.js';
 import { parsePolicy } from './chunk-WFSUUUAN.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { resolveVersion } from './chunk-RA3O54FC.js';
-import { signerFor } from './chunk-KDHYLBRR.js';
-import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath } from './chunk-KIGSGZBB.js';
-import { claudeCredential, repositoriesOf, primaryOf, buildEnvironment, JOB_MOUNT, CHECKOUT_DIR, parseIsolation, proxyEnvironment, withProxyWarningHidden, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, withHooksPath, startBuildServices, BUILT_IN_NAMES, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, RELAY_PORT, repositoryPath, lifecycleWorkdir, checkEnvironment, EVAL_INPUT_DIR } from './chunk-V7MQKOZY.js';
+import { signerFor } from './chunk-OW52QLK3.js';
+import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath } from './chunk-IHNQWF6F.js';
+import { claudeCredential, repositoriesOf, primaryOf, buildEnvironment, JOB_MOUNT, CHECKOUT_DIR, parseIsolation, proxyEnvironment, withProxyWarningHidden, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, withHooksPath, startBuildServices, BUILT_IN_NAMES, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, RELAY_PORT, repositoryPath, lifecycleWorkdir, checkEnvironment, EVAL_INPUT_DIR } from './chunk-URWYRAIC.js';
 import { RUNNER_WORDED_REASONS, UNKNOWN_TRACKING_REASON } from './chunk-GISNHSYL.js';
 import { existsSync, statSync, appendFileSync, mkdirSync, chmodSync, writeFileSync, accessSync, constants, openSync, readFileSync, closeSync, rmSync, readdirSync, lstatSync, fstatSync, readSync, realpathSync } from 'fs';
 import { join, isAbsolute, dirname, delimiter, sep } from 'path';
@@ -413,7 +414,7 @@ async function waitForDocker(runtime, state, agentUser, now) {
       if (firstLine(granted.stderr) !== "") lastError = `giving the agent's group the Docker socket failed: ${firstLine(granted.stderr)}`;
     } else {
       const answered = await runtime.vm.exec(state.vsockPath, request);
-      if (answered.status === 0) return void 0;
+      if (answered.status === 0) return writeDockerClientConfig(asRoot.bind(null, runtime, state), agentUser);
       lastError = firstLine(answered.stderr) === "" ? "" : `docker info said: ${firstLine(answered.stderr)}`;
     }
     if (now().getTime() >= deadline) break;

package/dist/{chunk-PHHBYAL6.js → chunk-NYTZ7HVN.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { EXEC_PORT } from './chunk-BLW6GPBZ.js';
+import { EXEC_PORT } from './chunk-2Q3PZ42G.js';
 import { createConnection } from 'net';
 
 createRequire(import.meta.url);

package/dist/{chunk-I66MQDXH.js → chunk-OBCFK4QD.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { builtinKind } from './chunk-2CMJLYV6.js';
+import { builtinKind } from './chunk-V5CG75NX.js';
 import { parseSize } from './chunk-7RQ73DLO.js';
-import { runnerDir } from './chunk-KIGSGZBB.js';
+import { runnerDir } from './chunk-IHNQWF6F.js';
 import { dirname } from 'path';
 import { spawnSync } from 'child_process';
 

package/dist/{chunk-KDHYLBRR.js → chunk-OW52QLK3.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { hostKeyPath, runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-KIGSGZBB.js';
+import { hostKeyPath, runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-IHNQWF6F.js';
 import { generateKeyPairSync, createPrivateKey, createPublicKey, sign } from 'crypto';
 import { existsSync, mkdirSync, writeFileSync, readFileSync } from 'fs';
 

package/dist/chunk-QS43O4DR.js

@@ -0,0 +1,113 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
+import { readCloudConfig, cloudConfigPath } from './chunk-EABW6AJQ.js';
+import { cliInvocation } from './chunk-CRB3POP4.js';
+import { homeFromEnv } from './chunk-VNVZDWO3.js';
+import { resolvePackageVersion } from './chunk-RA3O54FC.js';
+import { signRunnerRequest, signerFor } from './chunk-OW52QLK3.js';
+
+createRequire(import.meta.url);
+
+// src/credentials.ts
+var MISSING_HELP = `Run \`${cliInvocation()} login\` to sign in, or set OUTERLAYER_URL / OUTERLAYER_API_KEY / OUTERLAYER_APP_ID. Mint a key in the dashboard: Settings \u2192 API keys.`;
+var NO_FACTORY_MESSAGE = `you are logged in, but no factory is chosen for this repository. Run \`${cliInvocation()} connect\` to choose one, or pass --app-id / set OUTERLAYER_APP_ID.`;
+var NO_FACTORY_OUTSIDE_REPOSITORY_MESSAGE = "you are logged in, but this directory is not in a git repository, so no factory is chosen. Pass --app-id / set OUTERLAYER_APP_ID, or run this from inside a connected repository.";
+var LOGIN_TOKEN_PREFIX = "olu_";
+function unauthorizedMessage(credential) {
+  return credential.startsWith(LOGIN_TOKEN_PREFIX) ? `not authorized \u2014 the login is expired or was revoked. Run \`${cliInvocation()} login\` to sign in again.` : "not authorized \u2014 the API key is unknown, expired, or bound to a different factory. Mint a fresh key: dashboard \u2192 Settings \u2192 API keys.";
+}
+function resolveGatewayCredentials(sources = {}) {
+  const env = sources.env ?? process.env;
+  const config = readCloudConfig(sources.home ?? homeFromEnv(env));
+  const url = sources.url ?? env.OUTERLAYER_URL ?? config.url;
+  const key = sources.apiKey ?? (env.OUTERLAYER_API_KEY || void 0) ?? config.apiKey;
+  const kind = key ? "key" : "login";
+  const credential = key ?? config.accountToken;
+  const cwd = sources.cwd ?? process.cwd();
+  const appId = sources.appId ?? (env.OUTERLAYER_APP_ID || void 0) ?? (kind === "key" ? config.appId : readRepoConnection(cwd)?.appId);
+  if (credential && url && !appId && kind === "login") {
+    const message = findGitDirs(cwd) === void 0 ? NO_FACTORY_OUTSIDE_REPOSITORY_MESSAGE : NO_FACTORY_MESSAGE;
+    return { ok: false, message, url, credential, appId, kind };
+  }
+  if (!url || !credential || !appId) {
+    const missing = [!url && "--url", !credential && "a login or OUTERLAYER_API_KEY", !appId && "--app-id"].filter(Boolean).join(", ");
+    return { ok: false, message: `missing ${missing}. ${MISSING_HELP}`, url, credential, appId, kind };
+  }
+  return { ok: true, url, credential, appId, kind };
+}
+
+// src/signing-fetch.ts
+function bodyBytes(body) {
+  if (body === void 0 || body === null) return new Uint8Array(0);
+  if (typeof body === "string") return new TextEncoder().encode(body);
+  if (body instanceof Uint8Array) return body;
+  if (body instanceof ArrayBuffer) return new Uint8Array(body);
+  return void 0;
+}
+async function savedKeySigner(headers, home) {
+  const authorization = headers.get("authorization");
+  if (authorization === null || !authorization.startsWith("Bearer ")) return void 0;
+  if (headers.has("signature")) return void 0;
+  if (readCloudConfig(home).apiKey !== authorization.slice("Bearer ".length)) return void 0;
+  try {
+    return await signerFor(cloudConfigPath(home));
+  } catch {
+    return void 0;
+  }
+}
+function signedBy(base, signerOf) {
+  return (async (input, init) => {
+    if (input instanceof Request) return base(input, init);
+    const headers = new Headers(init?.headers);
+    const signer = await signerOf(headers);
+    const body = bodyBytes(init?.body);
+    if (signer === void 0 || body === void 0) return base(input, init);
+    const signature = await signRunnerRequest({ method: init?.method ?? "GET", url: input.toString(), body, signer });
+    for (const [name, value] of Object.entries(signature)) headers.set(name, value);
+    return base(input, { ...init, headers });
+  });
+}
+function signingFetch(base, home = () => homeFromEnv()) {
+  return signedBy(base, (headers) => savedKeySigner(headers, home()));
+}
+function signingFetchFor(base, configPath, apiKey) {
+  return signedBy(base, async (headers) => {
+    const authorization = headers.get("authorization");
+    if (authorization !== `Bearer ${apiKey}` || headers.has("signature")) return void 0;
+    try {
+      return await signerFor(configPath);
+    } catch {
+      return void 0;
+    }
+  });
+}
+function cliUserAgent(version = resolvePackageVersion()) {
+  return `outerlayer-cli/${version}`;
+}
+function withHeader(headers, name, value) {
+  if (headers instanceof Headers) {
+    if (headers.has(name)) return headers;
+    const copy = new Headers(headers);
+    copy.set(name, value);
+    return copy;
+  }
+  if (Array.isArray(headers)) {
+    return headers.some(([key]) => key.toLowerCase() === name) ? headers : [...headers, [name, value]];
+  }
+  const record = headers ?? {};
+  return Object.keys(record).some((key) => key.toLowerCase() === name) ? record : { ...record, [name]: value };
+}
+function withCliUserAgent(base, userAgent = () => cliUserAgent()) {
+  return ((input, init) => {
+    if (input instanceof Request) return base(input, init);
+    return base(input, { ...init, headers: withHeader(init?.headers, "user-agent", userAgent()) });
+  });
+}
+function globalFetch(input, init) {
+  return globalThis.fetch(input, init);
+}
+var cliFetch = withCliUserAgent(globalFetch);
+var defaultFetch = signingFetch(cliFetch);
+
+export { cliFetch, defaultFetch, resolveGatewayCredentials, signingFetchFor, unauthorizedMessage };

package/dist/{chunk-4JHVPFH6.js → chunk-QZX6DAAW.js}

@@ -1,20 +1,19 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { checkStarterFiles, contextIsGoverned, checkBuildSkill } from './chunk-VSUXCMMH.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-2HT2XGJX.js';
-import { isLinkedRepository } from './chunk-JRCSET55.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-FQE5RDHI.js';
+import { isLinkedRepository } from './chunk-EMUNEAQK.js';
 import { sanitizeTerminal } from './chunk-G3IJ3N6F.js';
 import { checkFormerSkillNames } from './chunk-USWVXQIH.js';
-import { defaultFetch } from './chunk-VWLOQ6FI.js';
-import { resolveGatewayCredentials } from './chunk-NTRCK4NH.js';
-import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-6IO62VJS.js';
-import { readStatuslineState, STATE_FRESH_MS } from './chunk-IZSVXRDR.js';
+import { resolveGatewayCredentials, defaultFetch } from './chunk-QS43O4DR.js';
+import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-HWZCE745.js';
+import { readStatuslineState, STATE_FRESH_MS } from './chunk-DXDF43YG.js';
 import { hookCommandEscapesControlPlane, CONTROL_PLANE_DIR_VARIABLE } from './chunk-HCVLP7XA.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
 import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-AEKSX4EY.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import { readSettings, settingsPath, isOurStatuslineSlot, statuslineWrappedOriginal, REGISTERED_EVENTS, isOurHookCommand, ourCommandBins, cliBinResolvable, ourDirectScriptBins, wrappedOriginalCommand } from './chunk-5QRP3MVS.js';
+import { readSettings, settingsPath, isOurStatuslineSlot, statuslineWrappedOriginal, REGISTERED_EVENTS, isOurHookCommand, ourCommandBins, cliBinResolvable, ourDirectScriptBins, wrappedOriginalCommand } from './chunk-GNPTU4BM.js';
 import { readDeliveryRecord, readDegraded, readSourceCache } from './chunk-YQR6E6OV.js';
 import { deadHooksState, preparePackageManagerCommand } from './chunk-TUSYOL2O.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -1175,7 +1174,7 @@ function doctorExitCode(checks) {
 
 // src/doctor-report.ts
 async function gatherDoctorChecks() {
-  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-7Q52COZ3.js');
+  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-H4QS332G.js');
   const configPath = defaultRunnerConfigPath();
   const checks = runDoctor({ runnerHost: hasRunnerBlock(configPath) });
   const credential = await credentialChecks();
@@ -1187,7 +1186,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-3SQGZVYP.js');
+    const { runnerHostChecks } = await import('./doctor-BRN4BGMA.js');
     const hooks = (() => {
       try {
         return loadRunnerConfig(configPath).hooks;
@@ -1222,7 +1221,7 @@ async function gatherDoctorChecks() {
       const { existsSync: existsSync3 } = await import('fs');
       if (process.platform !== "linux" || !existsSync3("/run/systemd/system")) return void 0;
       const { inspectService, realInspectProbes } = await import('./inspect-6UYAAXH7.js');
-      const { DEFAULT_UNIT_NAME } = await import('./install-CZUIW2AF.js');
+      const { DEFAULT_UNIT_NAME } = await import('./install-SFACZU7E.js');
       const { dirname: dirname2 } = await import('path');
       return inspectService(DEFAULT_UNIT_NAME, dirname2(configPath), realInspectProbes());
     })();

package/dist/{chunk-UD3EXMKB.js → chunk-SFHR45FA.js}

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { EXEC_PORT } from './chunk-BLW6GPBZ.js';
+import { BRIDGE_ADDRESS, TUNNEL_PORT, BRIDGE_CIDR } from './chunk-WXJXHZVB.js';
+import { EXEC_PORT } from './chunk-2Q3PZ42G.js';
 import { startTimeOf } from './chunk-JBJTC3UU.js';
-import { RELAY_PORT } from './chunk-V7MQKOZY.js';
+import { RELAY_PORT } from './chunk-URWYRAIC.js';
 import { spawn, spawnSync } from 'child_process';
 import { writeFileSync, chmodSync, mkdirSync } from 'fs';
 
@@ -12,6 +13,7 @@ var HELPER_RECORD = "/run/outerlayer-helpers";
 var KERNEL_FLAG = "outerlayer.relay";
 var DOCKER_FLAG = "outerlayer.docker";
 var DOCKERD_CONFIG = "/run/outerlayer-dockerd.json";
+var NONLOCAL_BIND = "/proc/sys/net/ipv4/ip_nonlocal_bind";
 var DOCKERD_LOG = "/run/dockerd.log";
 var DOCKER_DATA_ROOT = "/build/docker";
 var BUILD_DISK = "/dev/vdb";
@@ -32,13 +34,25 @@ function relayPortsFrom(cmdline) {
 function dockerRequestedBy(cmdline) {
   return new RegExp(`(?:^|\\s)${DOCKER_FLAG.replace(".", "\\.")}=1(?:\\s|$)`).test(cmdline);
 }
+function startBridgeForwarder(host) {
+  host.writeFile(NONLOCAL_BIND, "1");
+  host.spawnDetached([
+    "/opt/outerlayer/bin/node",
+    "/opt/outerlayer/cli/dist/index.js",
+    "vm-forward",
+    "--listen",
+    `${BRIDGE_ADDRESS}:${TUNNEL_PORT}`,
+    "--to",
+    `127.0.0.1:${TUNNEL_PORT}`
+  ]);
+}
 function startDocker(host) {
   const proxy = `http://127.0.0.1:${RELAY_PORT}`;
   host.mount({ source: "cgroup2", target: "/sys/fs/cgroup", type: "cgroup2" });
   host.mkdir(DOCKER_DATA_ROOT, 457);
   host.writeFile(
     DOCKERD_CONFIG,
-    `${JSON.stringify({ "data-root": DOCKER_DATA_ROOT, proxies: { "http-proxy": proxy, "https-proxy": proxy, "no-proxy": "localhost,127.0.0.1" } }, null, 2)}
+    `${JSON.stringify({ "data-root": DOCKER_DATA_ROOT, bip: BRIDGE_CIDR, proxies: { "http-proxy": proxy, "https-proxy": proxy, "no-proxy": "localhost,127.0.0.1" } }, null, 2)}
 `
   );
   host.spawnDetached(["/bin/sh", "-c", `exec dockerd --config-file ${DOCKERD_CONFIG} >${DOCKERD_LOG} 2>&1`]);
@@ -65,7 +79,10 @@ function runGuestInit(host, cmdline) {
   host.writeFile("/proc/sys/kernel/hostname", HOSTNAME);
   host.mount({ source: "tmpfs", target: "/outerlayer/job", type: "tmpfs", options: "mode=0755" });
   const relay = host.spawnDetached([HELPER_PATH, "relay", ...ports.flatMap((port) => ["--forward", String(port)])]);
-  if (dockerRequestedBy(cmdline)) startDocker(host);
+  if (dockerRequestedBy(cmdline)) {
+    startBridgeForwarder(host);
+    startDocker(host);
+  }
   const agent = host.spawnDetached([HELPER_PATH, "exec-agent", "--port", String(EXEC_PORT)]);
   host.writeFile(HELPER_RECORD, [relay, agent].map((started) => `${started.pid} ${started.start}
 `).join(""));

package/dist/{chunk-KOQELWQ6.js → chunk-SNVXHNU7.js}

@@ -1,15 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { removeRetiredSkills } from './chunk-USWVXQIH.js';
-import { defaultFetch } from './chunk-VWLOQ6FI.js';
-import { resolveGatewayCredentials } from './chunk-NTRCK4NH.js';
+import { defaultFetch, resolveGatewayCredentials } from './chunk-QS43O4DR.js';
 import { appendContextProvenance } from './chunk-ZJSNLVCE.js';
 import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-5OCIHFGE.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { writeDegraded, writeSourceCache, SOURCE_CACHE_TTL_RETRY_MS, writeContextManifest, SOURCE_CACHE_TTL_SUCCESS_MS, readSourceCache, isSourceCacheFresh, clearDegraded } from './chunk-YQR6E6OV.js';
 import { normalizeRepoName, parseOuterlayerConfig, classifyTree, emitTree } from './chunk-WFSUUUAN.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import { withTokenHeader } from './chunk-V7MQKOZY.js';
+import { withTokenHeader } from './chunk-URWYRAIC.js';
 import { execFileSync } from 'child_process';
 import { existsSync, mkdirSync, writeFileSync, chmodSync, lstatSync, readFileSync, copyFileSync } from 'fs';
 import { isAbsolute, join, dirname } from 'path';

package/dist/{chunk-34XORKFD.js → chunk-U6RKHNC7.js}

@@ -1,14 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { uploadSpooledSteps } from './chunk-G2WME4RG.js';
+import { uploadSpooledSteps } from './chunk-JD6GWYY7.js';
 import { LaunchFilter } from './chunk-ESVW4MJY.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
 import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-G3IJ3N6F.js';
-import { defaultFetch } from './chunk-VWLOQ6FI.js';
-import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-NTRCK4NH.js';
-import { writeSyncStatus, spoolDir } from './chunk-6IO62VJS.js';
+import { cliFetch, resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-QS43O4DR.js';
+import { writeSyncStatus, spoolDir } from './chunk-HWZCE745.js';
 import { readLatestProvenanceForSession, readContextProvenance } from './chunk-ZJSNLVCE.js';
-import { hookExecSpoolPath } from './chunk-F7CU5ABH.js';
+import { hookExecSpoolPath } from './chunk-DYEFPYME.js';
 import { applyReportedCost } from './chunk-BKO6JEZI.js';
 import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
 import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-AEKSX4EY.js';
@@ -19,7 +18,7 @@ import { cliInvocation } from './chunk-CRB3POP4.js';
 import { removeJournalHooks } from './chunk-TUSYOL2O.js';
 import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-7VUK5RFS.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import { signerFor, signRunnerRequest } from './chunk-KDHYLBRR.js';
+import { signerFor, signRunnerRequest } from './chunk-OW52QLK3.js';
 import { dirname, basename, join } from 'path';
 import { statSync, readFileSync, readdirSync, mkdirSync, writeFileSync, renameSync, existsSync, rmSync } from 'fs';
 import { execFileSync } from 'child_process';
@@ -573,7 +572,7 @@ var LiveUploader = class {
     this.stopped = false;
     this.warned = /* @__PURE__ */ new Set();
     this.home = opts.home;
-    this.fetchImpl = opts.fetchImpl ?? fetch;
+    this.fetchImpl = opts.fetchImpl ?? cliFetch;
     this.sleepImpl = opts.sleepImpl ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
     this.debounceMs = opts.debounceMs ?? DEFAULT_DEBOUNCE_MS;
     this.env = opts.env ?? process.env;

package/dist/{chunk-2J5JGLW5.js → chunk-UF5L4BAI.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-KIGSGZBB.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-IHNQWF6F.js';
 import { readFileSync, mkdirSync, writeFileSync, renameSync } from 'fs';
 import { join } from 'path';
 

package/dist/{chunk-V7MQKOZY.js → chunk-URWYRAIC.js}

@@ -645,4 +645,4 @@ function withTunnelRecord(environment, record, onlyWhenUsed = false) {
   };
 }
 
-export { AGENT_CREDENTIAL_MISSING, BUILD_HOME, BUILT_IN_NAMES, CHECKOUT_DIR, CLAUDE_CREDENTIAL_VARIABLES, CLAUDE_PORT, CLAUDE_SOCKET, DESTINATION_BASE_PORT, EVAL_INPUT_DIR, GATEWAY_PORT, GATEWAY_SOCKET, JOB_MOUNT, RELAY_PORT, authorEnvironment, buildEnvironment, builtInEnvironment, checkEnvironment, checkoutPath, claudeCredential, commitIdentityRecord, containerLocalAddress, destinationEnvironment, headerVariables, isRefusedInConfig, isReservedVariable, lifecycleWorkdir, parseClaimIdentity, parseClaimedRepositories, parseIsolation, parseUnreachable, primaryOf, proxyEnvironment, repositoriesOf, repositoryPath, resolveDestinations, sharedUserEnvironment, startBuildServices, tokenHeader, withGitConfig, withHooksPath, withProxyWarningHidden, withTokenHeader, withTunnelRecord };
+export { AGENT_CREDENTIAL_MISSING, BUILD_HOME, BUILT_IN_NAMES, CHECKOUT_DIR, CLAUDE_CREDENTIAL_VARIABLES, CLAUDE_PORT, CLAUDE_SOCKET, DESTINATION_BASE_PORT, EVAL_INPUT_DIR, GATEWAY_PORT, GATEWAY_SOCKET, JOB_MOUNT, PROXY_WARNING_FLAG, RELAY_PORT, authorEnvironment, buildEnvironment, builtInEnvironment, checkEnvironment, checkoutPath, claudeCredential, commitIdentityRecord, containerLocalAddress, destinationEnvironment, headerVariables, isRefusedInConfig, isReservedVariable, lifecycleWorkdir, parseClaimIdentity, parseClaimedRepositories, parseIsolation, parseUnreachable, primaryOf, proxyEnvironment, repositoriesOf, repositoryPath, resolveDestinations, sharedUserEnvironment, startBuildServices, tokenHeader, withGitConfig, withHooksPath, withProxyWarningHidden, withTokenHeader, withTunnelRecord };

package/dist/{chunk-2CMJLYV6.js → chunk-V5CG75NX.js}

@@ -3,7 +3,7 @@ import { createRequire } from 'node:module';
 import { MAX_ALLOW_HOSTS, allowHostProblem } from './chunk-UXYLWVTQ.js';
 import { parseSize } from './chunk-7RQ73DLO.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import { isRefusedInConfig, resolveDestinations, isReservedVariable } from './chunk-V7MQKOZY.js';
+import { isRefusedInConfig, resolveDestinations, isReservedVariable } from './chunk-URWYRAIC.js';
 import { existsSync, statSync, accessSync, constants, readFileSync } from 'fs';
 import { hostname } from 'os';
 import { join } from 'path';

package/dist/{chunk-VX74ND77.js → chunk-WKSBSEWT.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { readDefaultBranchHead, cloneRepository, buildRepositoryImage } from './chunk-IRBNIRQJ.js';
+import { readDefaultBranchHead, cloneRepository, buildRepositoryImage } from './chunk-3AZYLAJC.js';
 import { currentCliBuild } from './chunk-OGFGZQA3.js';
-import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, JUDGE_DIR, JUDGE_REPORT, MAX_REPORT_BYTES, spawnRun } from './chunk-WERZMIKA.js';
+import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, JUDGE_DIR, JUDGE_REPORT, MAX_REPORT_BYTES, spawnRun } from './chunk-XR56WEA5.js';
 import { RecipeError, CLAUDE_CODE_VERSION, firecrackerArch, MICROVM_ARCHES, DEFAULT_BASE_IMAGE, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, FIRECRACKER_VERSION, GUEST_ASSETS_VERSION } from './chunk-3W333NFO.js';
-import { execCapture } from './chunk-PHHBYAL6.js';
-import { GUEST_CID } from './chunk-BLW6GPBZ.js';
-import { describeCallFailure, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript } from './chunk-C3OVGKVJ.js';
-import { WorkCommandError } from './chunk-2HT2XGJX.js';
+import { execCapture } from './chunk-NYTZ7HVN.js';
+import { GUEST_CID } from './chunk-2Q3PZ42G.js';
+import { describeCallFailure, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript } from './chunk-IMCVQF5F.js';
+import { WorkCommandError } from './chunk-FQE5RDHI.js';
 import { hostAllowed } from './chunk-UXYLWVTQ.js';
 import { parseDuKilobytes } from './chunk-7RQ73DLO.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
@@ -16,8 +16,8 @@ import { versionAtLeast, MINIMUM_CLAUDE_VERSION } from './chunk-HCVLP7XA.js';
 import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-AEKSX4EY.js';
 import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-WFSUUUAN.js';
 import { downconvertSession } from './chunk-7VUK5RFS.js';
-import { rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, deliveryDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, buildDir, RUNNER_DIR_MODE, SHIM_DIR, vmAssetsDir } from './chunk-KIGSGZBB.js';
-import { repositoriesOf, primaryOf, RELAY_PORT, repositoryPath, CHECKOUT_DIR, lifecycleWorkdir, claudeCredential, buildEnvironment, startBuildServices, checkEnvironment, AGENT_CREDENTIAL_MISSING, checkoutPath, JOB_MOUNT } from './chunk-V7MQKOZY.js';
+import { rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, deliveryDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, buildDir, RUNNER_DIR_MODE, SHIM_DIR, vmAssetsDir } from './chunk-IHNQWF6F.js';
+import { repositoriesOf, primaryOf, RELAY_PORT, repositoryPath, CHECKOUT_DIR, lifecycleWorkdir, claudeCredential, buildEnvironment, startBuildServices, checkEnvironment, AGENT_CREDENTIAL_MISSING, checkoutPath, JOB_MOUNT } from './chunk-URWYRAIC.js';
 import { RELAY_USER, RELAY_ID, UNKNOWN_TRANSPORT_REASON, MAX_MALFORMED_SESSIONS, MALFORMED_REASON, MAX_OPEN_STREAMS, STREAM_WINDOW, SESSION_WINDOW, targetOfPath } from './chunk-GISNHSYL.js';
 import { readFileSync, existsSync, mkdirSync, chmodSync, truncateSync, rmSync, writeFileSync, readdirSync, lstatSync, copyFileSync, accessSync, constants, statSync, rmdirSync, renameSync, unlinkSync, openSync, closeSync, mkdtempSync, createWriteStream, createReadStream } from 'fs';
 import { join, dirname, basename } from 'path';

package/dist/chunk-WXJXHZVB.js

@@ -0,0 +1,73 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+import { RELAY_PORT, BUILD_HOME } from './chunk-URWYRAIC.js';
+import { createServer, connect } from 'net';
+
+createRequire(import.meta.url);
+var BRIDGE_ADDRESS = "172.17.0.1";
+var BRIDGE_CIDR = "172.17.0.1/16";
+var TUNNEL_PORT = RELAY_PORT;
+var CONTAINER_PROXY = `http://${BRIDGE_ADDRESS}:${TUNNEL_PORT}`;
+var CONTAINER_NO_PROXY = ["localhost", "127.0.0.1", "::1", "10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16"];
+function dockerClientConfig() {
+  const proxies = { default: { httpProxy: CONTAINER_PROXY, httpsProxy: CONTAINER_PROXY, noProxy: CONTAINER_NO_PROXY.join(",") } };
+  return `${JSON.stringify({ proxies }, null, 2)}
+`;
+}
+async function writeDockerClientConfig(run, agentUser) {
+  const dir = `${BUILD_HOME}/.docker`;
+  const script = [
+    "set -e",
+    "umask 077",
+    `mkdir -p ${dir}`,
+    `cat > ${dir}/config.json.partial`,
+    `mv ${dir}/config.json.partial ${dir}/config.json`,
+    `chown "$(id -u "$1"):$(id -g "$1")" ${dir} ${dir}/config.json`,
+    `chmod 700 ${dir}`,
+    `chmod 600 ${dir}/config.json`
+  ].join("\n");
+  const result = await run(["/bin/sh", "-c", script, "sh", agentUser], dockerClientConfig());
+  if (result.status === 0) return void 0;
+  return `the Docker client configuration could not be written in the microVM (exit ${result.status}): ${result.stderr.trim().split("\n")[0]}`;
+}
+function parseAddress(text) {
+  const match = /^(.+):(\d+)$/.exec(text);
+  const port = Number(match?.[2]);
+  if (match === null || port > 65535) throw new Error(`${JSON.stringify(text)} is not host:port`);
+  return { host: match[1], port };
+}
+async function startBridgeForward(opts) {
+  const listen = parseAddress(opts.listen);
+  const to = parseAddress(opts.to);
+  const open = /* @__PURE__ */ new Set();
+  const server = createServer({ allowHalfOpen: true }, (client) => {
+    const upstream = connect({ host: to.host, port: to.port, allowHalfOpen: true });
+    open.add(client);
+    client.on("error", () => void 0);
+    upstream.on("error", () => void 0);
+    client.on("close", () => {
+      open.delete(client);
+      upstream.destroy();
+    });
+    upstream.on("close", () => client.destroy());
+    client.pipe(upstream);
+    upstream.pipe(client);
+  });
+  await new Promise((resolve, reject) => {
+    server.once("error", reject);
+    server.listen(listen.port, listen.host, () => {
+      resolve();
+    });
+  });
+  server.on("error", (error) => process.stderr.write(`outerlayer: the bridge forwarder hit an error: ${error.message}
+`));
+  return {
+    port: server.address().port,
+    close: () => new Promise((resolve) => {
+      for (const socket of open) socket.destroy();
+      server.close(() => resolve());
+    })
+  };
+}
+
+export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig };

package/dist/{chunk-ZFLOGMUC.js → chunk-XACXXKQ5.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { isSameProcess } from './chunk-JBJTC3UU.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-KIGSGZBB.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-IHNQWF6F.js';
 import { existsSync, readFileSync, rmSync, mkdirSync, writeFileSync } from 'fs';
 import { dirname } from 'path';
 

package/dist/{chunk-WERZMIKA.js → chunk-XR56WEA5.js}

@@ -3,9 +3,9 @@ import { createRequire } from 'node:module';
 import { RecipeError, BUILDKIT_IMAGE } from './chunk-3W333NFO.js';
 import { parseSize } from './chunk-7RQ73DLO.js';
 import { compareVersions } from './chunk-AEKSX4EY.js';
-import { ensureHostKey } from './chunk-KDHYLBRR.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, runnerDir, jobsDir } from './chunk-KIGSGZBB.js';
-import { CLAUDE_PORT, JOB_MOUNT, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_SOCKET, RELAY_PORT, DESTINATION_BASE_PORT } from './chunk-V7MQKOZY.js';
+import { ensureHostKey } from './chunk-OW52QLK3.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, runnerDir, jobsDir } from './chunk-IHNQWF6F.js';
+import { CLAUDE_PORT, JOB_MOUNT, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_SOCKET, RELAY_PORT, DESTINATION_BASE_PORT } from './chunk-URWYRAIC.js';
 import { JOIN_DIR, RELAY_ID, JOIN_SOCKET, TARGET_GATEWAY, TARGET_CLAUDE, destinationTarget, RELAY_USER } from './chunk-GISNHSYL.js';
 import { StringDecoder } from 'string_decoder';
 import { spawn } from 'child_process';

package/dist/{chunk-4QKLMNI3.js → chunk-ZCXP35T3.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-7V7KG3YM.js';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-EXV37PKS.js';
-import { MIN_ENGINE_MAJOR } from './chunk-VX74ND77.js';
-import { runnerCredentialProblem } from './chunk-2CMJLYV6.js';
-import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-KIGSGZBB.js';
+import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-4AVDD7VX.js';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-FVDVC2GF.js';
+import { MIN_ENGINE_MAJOR } from './chunk-WKSBSEWT.js';
+import { runnerCredentialProblem } from './chunk-V5CG75NX.js';
+import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-IHNQWF6F.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
 import { dirname } from 'path';
 

package/dist/{claude-launcher-4BQNXYAF.js → claude-launcher-QD3C427Y.js}

@@ -236,7 +236,7 @@ async function runClaudeLauncher(args, deps = {}) {
       return 1;
     }
   } else {
-    const { resolveLaunchPlane } = await import('./control-plane-launch-SZTE4TUS.js');
+    const { resolveLaunchPlane } = await import('./control-plane-launch-HE6OSWKO.js');
     const plane = env[GOVERNANCE_VARIABLE] === "self" ? { kind: "none" } : await resolveLaunchPlane({ cwd, env, home, fetchImpl: deps.fetchImpl, stderr });
     if (plane.kind === "none") {
       const own2 = ownSkillsDirFor(cwd, home, [], stderr);