@outerlayer/cli 0.27.1 → 0.28.2

package/dist/{chunk-7AQ5AM7U.js → chunk-MQHTM4YJ.js}

@@ -1,10 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { FD_SLOTS_PER_BUILD, FD_STORE_ENV } from './chunk-YB3CSYXX.js';
-import { builtinKind } from './chunk-EPPIISRD.js';
+import { builtinKind } from './chunk-55XLX5PA.js';
 import { parseSize } from './chunk-YJLHUKYS.js';
-import { runnerDir } from './chunk-RHAGBUL5.js';
-import { dirname } from 'path';
+import { runnerDir } from './chunk-5K3KB4YR.js';
+import { CLAUDE_CREDENTIAL_ID, CLAUDE_ENV_FILE, credentialLineIn, withoutCredentialLines } from './chunk-HXAEQPZR.js';
+import { FD_SLOTS_PER_BUILD, FD_STORE_ENV } from './chunk-XD4ZCMA4.js';
+import { existsSync, readFileSync, writeFileSync, chmodSync, renameSync } from 'fs';
+import { dirname, join } from 'path';
 import { spawnSync } from 'child_process';
 
 createRequire(import.meta.url);
@@ -16,6 +18,9 @@ var STOP_MARGIN_MINUTES = 10;
 function escapeUnitPath(path) {
   return path.replace(/%/g, "%%").replace(/ /g, "\\x20");
 }
+function credentialPath(path) {
+  return path.replace(/%/g, "%%");
+}
 function runnerUnit(unit) {
   const helperService = unit.helper === void 0 ? void 0 : `${unit.helper.unit}.service`;
   return `${UNIT_MARKER}
@@ -31,6 +36,7 @@ ExecStart=${unit.execStart}
 ${unit.helper === void 0 ? "" : `Environment=OUTERLAYER_HELPER_SOCKET=${unit.helper.socket}
 `}${unit.fdStore === void 0 ? "" : `Environment=${FD_STORE_ENV}=${unit.fdStore}
 `}EnvironmentFile=-${escapeUnitPath(`${unit.configDir}/runner.env`)}
+${unit.credential === "load" ? `LoadCredential=${CLAUDE_CREDENTIAL_ID}:${credentialPath(`${unit.configDir}/${CLAUDE_ENV_FILE}`)}` : `EnvironmentFile=-${escapeUnitPath(`${unit.configDir}/${CLAUDE_ENV_FILE}`)}`}
 Restart=on-failure
 RestartForceExitStatus=75
 RestartSec=30
@@ -68,7 +74,7 @@ function checkFit(input) {
   };
 }
 function withSystemd(conf) {
-  const lines = (conf ?? "").split("\n");
+  const lines = conf.split("\n");
   if (lines.at(-1) === "") lines.pop();
   const boot = lines.findIndex((line) => line.trim() === "[boot]");
   if (boot === -1) {
@@ -91,6 +97,54 @@ systemd=true
   return { text: `${lines.join("\n")}
 `, changed: true };
 }
+function windowsAccessOff() {
+  return [
+    { section: "interop", key: "enabled" },
+    { section: "interop", key: "appendWindowsPath" },
+    { section: "automount", key: "enabled" }
+  ];
+}
+function withWindowsAccessOff(conf) {
+  const lines = conf.split("\n");
+  if (lines.at(-1) === "") lines.pop();
+  let changed = false;
+  for (const { section, key } of windowsAccessOff()) {
+    const header = (line) => {
+      const matched = /^\s*\[\s*([^\]]*?)\s*\]/.exec(line);
+      return matched === null ? void 0 : matched[1].toLowerCase();
+    };
+    const first = lines.findIndex((line) => header(line) === section);
+    const wanted = `${key}=false`;
+    if (first === -1) {
+      if (lines.length > 0 && lines.at(-1) !== "") lines.push("");
+      lines.push(`[${section}]`, wanted);
+      changed = true;
+      continue;
+    }
+    let found = false;
+    let inSection = false;
+    for (const [at, line] of lines.entries()) {
+      const name = header(line);
+      if (name !== void 0) {
+        inSection = name === section;
+        continue;
+      }
+      const match = inSection ? /^\s*([^=#;\s][^=]*?)\s*=\s*(.*?)\s*$/.exec(line) : null;
+      if (match === null || match[1].toLowerCase() !== key.toLowerCase()) continue;
+      found = true;
+      if (match[2].toLowerCase() !== "false") {
+        lines[at] = wanted;
+        changed = true;
+      }
+    }
+    if (!found) {
+      lines.splice(first + 1, 0, wanted);
+      changed = true;
+    }
+  }
+  return { text: `${lines.join("\n")}
+`, changed };
+}
 function taskNameFor(unitName) {
   return unitName;
 }
@@ -119,6 +173,48 @@ function defaultRun(args) {
 
 // src/runner/service/install.ts
 var DEFAULT_UNIT_NAME = "outerlayer-runner";
+var LOAD_CREDENTIAL_SINCE = 247;
+var CREDENTIAL_FILE_MODE = 384;
+function prepareCredentialFile(configDir, lines) {
+  const claudePath = join(configDir, CLAUDE_ENV_FILE);
+  const runnerPath = join(configDir, "runner.env");
+  try {
+    const stored = existsSync(claudePath) ? readFileSync(claudePath, "utf8") : void 0;
+    if (stored !== void 0 && credentialLineIn(stored) !== void 0) return true;
+    const moved = existsSync(runnerPath) ? credentialLineIn(readFileSync(runnerPath, "utf8")) : void 0;
+    if (stored !== void 0 && moved === void 0) return true;
+    const kept = stored === void 0 || stored === "" ? "" : stored.endsWith("\n") ? stored : `${stored}
+`;
+    const temporary = `${claudePath}.${process.pid}.tmp`;
+    writeFileSync(temporary, moved === void 0 ? kept : `${kept}${moved}
+`, { mode: CREDENTIAL_FILE_MODE });
+    chmodSync(temporary, CREDENTIAL_FILE_MODE);
+    renameSync(temporary, claudePath);
+    return true;
+  } catch (err) {
+    lines.push(`${claudePath} could not be written (${err instanceof Error ? err.message : String(err)}), so nothing was changed`);
+    return false;
+  }
+}
+function finishCredentialMove(configDir, lines, reload) {
+  const runnerPath = join(configDir, "runner.env");
+  try {
+    if (!existsSync(runnerPath)) return;
+    if (credentialLineIn(readFileSync(join(configDir, CLAUDE_ENV_FILE), "utf8")) === void 0) return;
+    const text = withoutCredentialLines(readFileSync(runnerPath, "utf8"));
+    if (text === void 0) return;
+    if (reload !== void 0 && !reload()) {
+      lines.push(`the Claude credential is in ${join(configDir, CLAUDE_ENV_FILE)} and is also still in ${runnerPath}, because systemd may still hold the old unit: run \`sudo systemctl daemon-reload\`, then this command again`);
+      return;
+    }
+    const temporary = `${runnerPath}.${process.pid}.tmp`;
+    writeFileSync(temporary, text, { mode: CREDENTIAL_FILE_MODE });
+    chmodSync(temporary, CREDENTIAL_FILE_MODE);
+    renameSync(temporary, runnerPath);
+  } catch (err) {
+    lines.push(`the Claude credential is in ${join(configDir, CLAUDE_ENV_FILE)} and is also still in ${runnerPath}, which could not be changed (${err instanceof Error ? err.message : String(err)}): remove its line by hand`);
+  }
+}
 function unitPathFor(unitName = DEFAULT_UNIT_NAME) {
   return `/etc/systemd/system/${unitName}.service`;
 }
@@ -146,9 +242,13 @@ function installService(request, deps) {
   const say = deps.say ?? ((line) => void lines.push(line));
   const kind = builtinKind(request.hooks.provision);
   const own = kind === "own" || builtinKind(request.hooks.cleanup) === "own";
+  const configDir = dirname(request.configPath);
+  const version = deps.systemd.version();
+  const credential = (version ?? 0) >= LOAD_CREDENTIAL_SINCE ? "load" : "environment-file";
   const unit = runnerUnit({
     user: request.user,
-    configDir: dirname(request.configPath),
+    configDir,
+    credential,
     execStart: request.execStart,
     timeLimitMinutes: request.timeLimitMinutes,
     docker: kind === "container" || kind === "vm" || builtinKind(request.hooks.cleanup) === "container" || builtinKind(request.hooks.cleanup) === "vm",
@@ -165,7 +265,9 @@ function installService(request, deps) {
   }
   if (!deps.systemd.running()) {
     if (deps.platform === "wsl2" && deps.wslConf !== void 0) {
-      const merged = withSystemd(deps.wslConf.read());
+      const current = deps.wslConf.read();
+      if (current.kind === "unreadable") return outcome(false, "refused", [unreadableConf(current.message)]);
+      const merged = withSystemd(current.kind === "text" ? current.text : "");
       if (merged.changed) {
         say("sudo tee /etc/wsl.conf");
         const wslConf = deps.wslConf;
@@ -183,57 +285,104 @@ function installService(request, deps) {
     if (!fit.fits) return outcome(false, "refused", [`${fit.message}. Nothing is set up: lower runner.concurrency or runner.build.memory, then run this again`]);
   }
   const existing = deps.systemd.read(unitPath);
+  const fallbackNote = () => {
+    if (credential === "load") return;
+    lines.push(
+      `the Claude credential stays in the service's environment: ${version === void 0 ? "the systemd version could not be read" : `systemd ${version} is older than ${LOAD_CREDENTIAL_SINCE}`}, and LoadCredential= needs ${LOAD_CREDENTIAL_SINCE} or later, so the unit loads claude.env with EnvironmentFile=`
+    );
+  };
   const write = () => {
     say(`sudo tee ${unitPath}`);
     return attempt(lines, () => deps.systemd.write(unitPath, unit));
   };
   const running = () => deps.systemd.systemctl(["is-enabled", unitName]).status === 0 && deps.systemd.systemctl(["is-active", unitName]).status === 0;
-  const ensureTask = () => {
-    if (deps.platform === "wsl2") lines.push(...ensureLoginTask(deps, unitName));
+  const windowsSteps = () => {
+    if (deps.platform !== "wsl2") return true;
+    lines.push(...ensureLoginTask(deps, unitName));
+    return ensureWindowsAccessOff(deps, unitName, say, lines);
   };
   if (existing === unit) {
+    if (!prepareCredentialFile(configDir, lines)) return outcome(false, "refused", lines);
     const wasRunning = running();
     if (!wasRunning && !asRoot(deps, lines, say, ["enable", "--now", unitName])) return outcome(false, "refused", lines);
+    finishCredentialMove(configDir, lines, () => asRoot(deps, lines, say, ["daemon-reload"]));
     if (wasRunning && request.restart === true) {
-      ensureTask();
+      const windowsOk2 = windowsSteps();
+      const finish2 = (state) => windowsOk2 ? outcome(true, state, lines) : outcome(false, "refused", lines);
       if (deps.buildsRunning(runnerDir(request.configPath))) {
-        lines.push(`the service ${unitName} is current; a build is running, so it was not restarted and reads runner.env at its next restart`);
-        return outcome(true, "pending-restart", lines);
+        lines.push(`the service ${unitName} is current; a build is running, so it was not restarted and reads claude.env and runner.env at its next restart`);
+        fallbackNote();
+        return finish2("pending-restart");
       }
       if (!asRoot(deps, lines, say, ["restart", unitName])) return outcome(false, "refused", lines);
-      lines.push(`restarted the service ${unitName}, so it reads runner.env`);
-      return outcome(true, "updated", lines);
+      lines.push(`restarted the service ${unitName}, so it reads claude.env and runner.env`);
+      fallbackNote();
+      return finish2("updated");
     }
     lines.push(`the service ${unitName} is current: the unit already matches the config, so nothing was changed`);
-    ensureTask();
+    fallbackNote();
+    if (!windowsSteps()) return outcome(false, "refused", lines);
     return outcome(true, "current", lines);
   }
   if (existing === void 0) {
+    if (!prepareCredentialFile(configDir, lines)) return outcome(false, "refused", lines);
     if (!write()) return outcome(false, "refused", lines);
     if (!asRoot(deps, lines, say, ["daemon-reload"]) || !asRoot(deps, lines, say, ["enable", "--now", unitName])) {
       say(`sudo rm ${unitPath}`);
       if (attempt(lines, () => deps.systemd.remove(unitPath))) deps.systemd.systemctl(["daemon-reload"], { sudo: true });
       return outcome(false, "refused", lines);
     }
+    finishCredentialMove(configDir, lines);
     lines.push(`installed and started the service ${unitName}: the runner starts at boot and after a crash`);
-    ensureTask();
+    fallbackNote();
+    if (!windowsSteps()) return outcome(false, "refused", lines);
     return outcome(true, "installed", lines);
   }
   if (!existing.startsWith(UNIT_MARKER) && request.replace !== true) {
     lines.push(`${unitPath} differs from what this command writes, and it was not written by it, so it was left alone. Pass --replace to replace it, or \`--print\` to compare`);
     return outcome(false, "differs", lines);
   }
+  if (!prepareCredentialFile(configDir, lines)) return outcome(false, "refused", lines);
   if (!write()) return outcome(false, "refused", lines);
   if (!asRoot(deps, lines, say, ["daemon-reload"])) return outcome(false, "refused", lines);
   if ((!existing.startsWith(UNIT_MARKER) || !running()) && !asRoot(deps, lines, say, ["enable", "--now", unitName])) return outcome(false, "refused", lines);
-  ensureTask();
+  finishCredentialMove(configDir, lines);
+  fallbackNote();
+  const windowsOk = windowsSteps();
+  const finish = (state) => windowsOk ? outcome(true, state, lines) : outcome(false, "refused", lines);
   if (deps.buildsRunning(runnerDir(request.configPath))) {
     lines.push(`rewrote ${unitPath}; a build is running, so the service was not restarted and the new unit applies at the next restart`);
-    return outcome(true, "pending-restart", lines);
+    return finish("pending-restart");
   }
   if (!asRoot(deps, lines, say, ["restart", unitName])) return outcome(false, "refused", lines);
   lines.push(`rewrote ${unitPath} and restarted the service ${unitName}`);
-  return outcome(true, "updated", lines);
+  return finish("updated");
+}
+var WINDOWS_ACCESS_SETTINGS = "`[interop] enabled=false`, `[interop] appendWindowsPath=false` and `[automount] enabled=false`, each key under the section header it names";
+function unreadableConf(message) {
+  return `/etc/wsl.conf exists and could not be read (${message}), so it was not changed. Add ${WINDOWS_ACCESS_SETTINGS} to /etc/wsl.conf by hand, then restart the distribution`;
+}
+function ensureWindowsAccessOff(deps, unitName, say, lines) {
+  const host = deps.wslConf;
+  if (host === void 0) return true;
+  const current = host.read();
+  if (current.kind === "unreadable") {
+    lines.push(unreadableConf(current.message));
+    return false;
+  }
+  const merged = withWindowsAccessOff(current.kind === "text" ? current.text : "");
+  if (!merged.changed) return true;
+  say("sudo tee /etc/wsl.conf");
+  const written = attempt(lines, () => host.write(merged.text));
+  if (!written) {
+    lines.push(`/etc/wsl.conf was not changed. Add ${WINDOWS_ACCESS_SETTINGS} to /etc/wsl.conf by hand, then restart the distribution`);
+    return false;
+  }
+  const distro = deps.distro === void 0 || deps.distro === "" ? "<distribution>" : deps.distro;
+  lines.push(
+    `Windows interop and drive mounts stay on in this distribution until it restarts. A restart stops any running build. From Windows, run: \`wsl --terminate ${distro}\`, then \`schtasks /Run /TN ${taskNameFor(unitName)}\`${distro === "<distribution>" ? ", with the name `wsl -l` shows" : ""}`
+  );
+  return true;
 }
 function ensureLoginTask(deps, unitName) {
   const tasks = deps.tasks;
@@ -245,7 +394,9 @@ function ensureLoginTask(deps, unitName) {
   const command = taskCommand(deps.distro);
   const manual = `from Windows, run: schtasks /Create /F /TN ${name} /SC ONLOGON /TR "${command}"`;
   if (tasks === void 0 || !tasks.available()) {
-    return [`Windows interop is off, so the scheduled task that starts WSL2 at login was not made: ${manual}`];
+    return [
+      `schtasks.exe cannot start from this distribution, so the scheduled task ${name} is neither checked nor made. From Windows, run \`schtasks /Query /TN ${name}\` to check for it, and if it is not there, run: schtasks /Create /F /TN ${name} /SC ONLOGON /TR "${command}"`
+    ];
   }
   if (tasks.exists(name)) return [`the scheduled task ${name} already starts WSL2 at login`];
   const created = tasks.create(name, command);
@@ -258,7 +409,12 @@ function uninstallService(request, deps) {
   const say = deps.say ?? ((line) => void lines.push(line));
   const taskName = taskNameFor(unitName);
   const removeTask = () => {
-    if (deps.platform !== "wsl2" || deps.tasks === void 0 || !deps.tasks.available() || !deps.tasks.exists(taskName)) return;
+    if (deps.platform !== "wsl2") return;
+    if (deps.tasks === void 0 || !deps.tasks.available()) {
+      lines.push(`schtasks.exe cannot start from this distribution, so the scheduled task ${taskName} is neither checked nor removed: from Windows, run: schtasks /Delete /F /TN ${taskName}`);
+      return;
+    }
+    if (!deps.tasks.exists(taskName)) return;
     const removed = deps.tasks.remove(taskName);
     lines.push(removed.ok ? `removed the scheduled task ${taskName}` : `the scheduled task ${taskName} was not removed (${removed.message ?? "schtasks.exe failed"}): from Windows, run: schtasks /Delete /F /TN ${taskName}`);
   };

package/dist/{chunk-6KKM7VGZ.js → chunk-N7WAEEIU.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { BRIDGE_ADDRESS, TUNNEL_PORT, BRIDGE_CIDR } from './chunk-XS3FDWSZ.js';
+import { BRIDGE_ADDRESS, TUNNEL_PORT, BRIDGE_CIDR } from './chunk-ZTY7HHYB.js';
+import { EXEC_PORT } from './chunk-WWQVKFN6.js';
 import { startTimeOf } from './chunk-JBJTC3UU.js';
-import { EXEC_PORT } from './chunk-GLUKDQS4.js';
-import { RELAY_PORT } from './chunk-2I3LIRZP.js';
+import { RELAY_PORT } from './chunk-HXAEQPZR.js';
 import { spawn, spawnSync } from 'child_process';
 import { symlinkSync, lstatSync, writeFileSync, chmodSync, mkdirSync } from 'fs';
 

package/dist/{chunk-D7ECMB7B.js → chunk-NUHZV3A4.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { isSameProcess } from './chunk-JBJTC3UU.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-RHAGBUL5.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-5K3KB4YR.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, rmSync } from 'fs';
 import { dirname } from 'path';
 

package/dist/{chunk-5VMDGJGH.js → chunk-O65LES4V.js}

@@ -1,32 +1,32 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-6VFH52MP.js';
-import { writePendingUpdate } from './chunk-RHGF73IU.js';
-import { JOB_STATE_FORMAT, readsJobState, jobStateFormatOf } from './chunk-ZVB57WI6.js';
-import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-ABXQBEYK.js';
+import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-KU7QL4XW.js';
 import { decideInstalledSwitch } from './chunk-3JVYMD4G.js';
-import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-YETTWTAY.js';
+import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-E7R2GIAW.js';
 import { RUNNER_PROTOCOL } from './chunk-TPKYTORP.js';
-import { currentSkillCommand, formerSkillProblem, placeholderQueues, placeholderProblem } from './chunk-ZFBJUOYT.js';
-import { writeMarker, readMarker, currentVersion, removeMarker, entryIn, versionDir, startedThroughCurrent, switchCurrent, isInLayout, cleanVersions, stagingDir } from './chunk-MATUHHN4.js';
+import { writePendingUpdate } from './chunk-IVX3U7KV.js';
+import { JOB_STATE_FORMAT, readsJobState, jobStateFormatOf } from './chunk-ZVB57WI6.js';
+import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-66T6XJAB.js';
+import { currentSkillCommand, formerSkillProblem, placeholderQueues, placeholderProblem } from './chunk-6S4V4UIC.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
+import { writeMarker, readMarker, currentVersion, removeMarker, entryIn, versionDir, startedThroughCurrent, switchCurrent, isInLayout, cleanVersions, stagingDir } from './chunk-GUXWQIEY.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { leaseTimeLeftMs, LEASE_SECONDS, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandExec, setUpRunnerCgroup, createContainerRuntime, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-R7SGBXUD.js';
-import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-WSYXLLA5.js';
-import { tagToPull, pullInstruction, imageTag, writeUpdateStatus } from './chunk-M3MHHIUW.js';
+import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandExec, setUpRunnerCgroup, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-GLL4TN2M.js';
+import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-USJZ2LDK.js';
+import { tagToPull, pullInstruction, imageTag, writeUpdateStatus } from './chunk-Z3ASAXVU.js';
 import { isVersion, compareVersions, satisfiesRange } from './chunk-TQMI335S.js';
-import { checkFit } from './chunk-7AQ5AM7U.js';
-import { fdName } from './chunk-YB3CSYXX.js';
-import { claimPidFile, writePidFile, readPidFile, releasePidFile } from './chunk-D7ECMB7B.js';
+import { checkFit } from './chunk-MQHTM4YJ.js';
+import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-55XLX5PA.js';
+import { claimPidFile, writePidFile, readPidFile, releasePidFile } from './chunk-NUHZV3A4.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
-import { writeJobFile, ensureRunnerIdentity, readJobFile, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, BUILD_LABEL, RUNNER_LABEL, readJobFileChecked } from './chunk-EX5MQYEF.js';
-import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-55GNQPO6.js';
-import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-EPPIISRD.js';
+import { writeJobFile, ensureRunnerIdentity, readJobFile, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, BUILD_LABEL, RUNNER_LABEL, readJobFileChecked } from './chunk-VC5J7QPV.js';
 import { exceedsDisk } from './chunk-YJLHUKYS.js';
+import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-X52PMPOM.js';
+import { loadHostKey, ensureHostKey, signerFor } from './chunk-YL2VDSNF.js';
+import { RUNNER_DIR_MODE, runnerDir, buildDir, attemptStamp, jobDir, RUNNER_FILE_MODE, jobsDir, pidFilePath, spoolDir, rootfsDir } from './chunk-5K3KB4YR.js';
+import { parseClaimIdentity, parseClaimedRepositories, parseUnreachable, repositoriesOf, primaryOf, sharedUserEnvironment, JOB_MOUNT, takeClaudeCredential, heldClaudeCredential, claudeCredential, currentClaudeCredential } from './chunk-HXAEQPZR.js';
 import { resolveVersion } from './chunk-RA3O54FC.js';
-import { loadHostKey, ensureHostKey, signerFor } from './chunk-Y4OKEFAX.js';
-import { RUNNER_DIR_MODE, runnerDir, buildDir, attemptStamp, jobDir, RUNNER_FILE_MODE, jobsDir, pidFilePath, spoolDir, rootfsDir } from './chunk-RHAGBUL5.js';
-import { parseClaimIdentity, parseClaimedRepositories, parseUnreachable, repositoriesOf, primaryOf, sharedUserEnvironment, JOB_MOUNT, claudeCredential } from './chunk-2I3LIRZP.js';
+import { fdName } from './chunk-XD4ZCMA4.js';
 import { COMMAND_LOST_REASON, CONTAINER_STOPPED_REASON } from './chunk-JGD5TWQ2.js';
 import { randomBytes } from 'crypto';
 import { mkdirSync, existsSync, chmodSync, writeFileSync, renameSync, statSync, readdirSync, readFileSync, closeSync, rmSync, openSync, constants, lstatSync } from 'fs';
@@ -76,7 +76,7 @@ function checkBlocked(config, probes) {
   }
   if (kind !== "own" && claudeCredential(probes.env) === void 0) {
     return {
-      reason: "there is no Claude credential in the runner's environment. Put CLAUDE_CODE_OAUTH_TOKEN (from `claude setup-token`) or ANTHROPIC_API_KEY in the runner.env beside the config, then restart the service"
+      reason: "there is no Claude credential in the runner's environment. Store CLAUDE_CODE_OAUTH_TOKEN (from `claude setup-token`) or ANTHROPIC_API_KEY with `outerlayer runner init --agent claude`, which writes the claude.env beside the config, then restart the service"
     };
   }
   return void 0;
@@ -482,7 +482,9 @@ async function prepareUpdate(args) {
     return finish(args, retryFailure(version, err));
   }
   if (!verified.ok) return finish(args, { outcome: verified.outcome, reason: verified.reason });
-  const staged = await deps.runNode([entryIn(verified.dir), "runner", "check", "--config", configPath], verified.dir);
+  const held = currentClaudeCredential(process.env);
+  const stagedEnv = held === void 0 ? void 0 : { ...process.env, [held.variable]: held.value };
+  const staged = await deps.runNode([entryIn(verified.dir), "runner", "check", "--config", configPath], verified.dir, stagedEnv);
   if (staged.status !== 0) {
     removeStaging(verified.dir);
     return finish(args, {
@@ -1089,7 +1091,7 @@ function leaseTimeLeftFor(state, active) {
   return () => (state.deps.leaseTimeLeftMs ?? leaseTimeLeftMs)(active.job, nowOf(state).getTime());
 }
 function runtimeOf(state) {
-  state.containerRuntime ??= createContainerRuntime(state.deps.container);
+  state.containerRuntime ??= createContainerRuntime(withTunnelLog(state.deps.container, (line) => logOf(state).line(line)));
   return state.containerRuntime;
 }
 function finishDepsOf(state) {
@@ -1777,7 +1779,7 @@ var CLAIM_REFUSAL_CODES = new Set(
   "pull_request_from_fork pull_request_on_default_branch pull_request_ambiguous pull_request_repository_not_connected repository_not_reachable branch_claimed_elsewhere".split(" ")
 );
 async function tryClaimAndStart(state, item, queue) {
-  const { postJson: postJson2 } = await import('./work-cmd-VECTYST6.js');
+  const { postJson: postJson2 } = await import('./work-cmd-COESFSHE.js');
   const log = logOf(state);
   const hostKey = await loadHostKey(state.config.configPath);
   const claim = await retrySend(
@@ -2935,14 +2937,26 @@ async function logUnusableHelper(config, runtime, log) {
   if (helper.reason === "unsupported") log.line(helper.detail);
   else if (helper.unreachable === true) log.line(`${helper.detail}, so microVM builds run without the jailer`);
 }
+function hooksOf(configPath) {
+  try {
+    return loadRunnerConfig(configPath).hooks;
+  } catch {
+    return { provision: "builtin:container" };
+  }
+}
 async function start(configPath, deps = { fetchImpl: fetch }) {
   const log = deps.log ??= createRunnerLog(deps.now ?? (() => /* @__PURE__ */ new Date()));
+  takeClaudeCredential(process.env, hooksOf(configPath));
   const update = deps.update;
   if (update !== void 0) {
     const outcome = await onStartUnderMarker({
       configPath,
       own: ownVersionOf(deps),
-      check: update.check ? () => update.check(configPath) : async () => (await import('./check-YTXFVWK7.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
+      check: update.check ? () => update.check(configPath) : async () => {
+        const held = heldClaudeCredential();
+        const env = held === void 0 ? process.env : { ...process.env, [held.variable]: held.value };
+        return (await import('./check-YEI6TCUH.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
+      },
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log
     });
@@ -3256,4 +3270,4 @@ function runnerProcessState(configPath) {
   return isSameProcess(entry.pid, entry.start) ? { state: "running", pid: entry.pid } : { state: "stale", pid: entry.pid };
 }
 
-export { RunnerStartError, leaseTimeLeftFor, listJobFiles, logUnusableHelper, probeBuild, probeCredentials, requestStop, runnerProcessState, start, tick, watchTick };
+export { RunnerStartError, leaseTimeLeftFor, listJobFiles, logUnusableHelper, probeBuild, probeCredentials, requestStop, runnerProcessState, runtimeOf, start, tick, watchTick };

package/dist/{chunk-MHX7YX7Y.js → chunk-P2RWZCV7.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { skillDir, FORMER_MAINTAINED_NAMES, isMaintainedCopy } from './chunk-7OUOLGUV.js';
+import { skillDir, FORMER_MAINTAINED_NAMES, isMaintainedCopy } from './chunk-JGML2VUN.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { emitTree, ALL_TARGET_IDS, classifyTree } from './chunk-RKOTJQVG.js';
 import { readFileSync, existsSync, unlinkSync, rmdirSync, readdirSync } from 'fs';