@outerlayer/cli 0.28.2 → 0.28.4

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @outerlayer/cli
 
+## 0.28.4
+
+### Patch Changes
+
+- eabcfe6: `outerlayer doctor` passes on a runner that uses a Runner key. It leaves out the Claude Code version and last-sync checks for builds in containers or microVMs. The runner no longer logs a failed relay join while the build's relay is still starting.
+- 1cde310: A container build's finished connections free their place at once, so a large package install no longer runs out of connections and fails partway through.
+
+## 0.28.3
+
+### Patch Changes
+
+- 556dd93: A container build that drops many connections at once, as package installs and test suites do, keeps its link to the runner. The runner no longer ends the build's relay session after about a thousand dropped connections.
+
 ## 0.28.2
 
 ### Patch Changes

package/dist/{agent-setup-YVR5RO56.js → agent-setup-IDF3EXM4.js}

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { keepHandWritten, runAgentSetup } from './chunk-QJFDAKRF.js';
+export { keepHandWritten, runAgentSetup } from './chunk-UXLLWIA2.js';
 import './chunk-QKXF7CLR.js';
 import './chunk-KT4CN6OU.js';
 import './chunk-SATUCMAJ.js';
 import './chunk-5B7BEQPR.js';
 import './chunk-ANPNT6PM.js';
-import './chunk-4XN5FRRJ.js';
+import './chunk-TG7FAHRP.js';
 import './chunk-P2RWZCV7.js';
-import './chunk-7CK2TJFB.js';
+import './chunk-KJIUFOC4.js';
 import './chunk-PJDQPF5N.js';
-import './chunk-YL2VDSNF.js';
-import './chunk-5K3KB4YR.js';
-import './chunk-HXAEQPZR.js';
+import './chunk-R7TMTFJP.js';
+import './chunk-DWVAG73B.js';
+import './chunk-N5EEEKT6.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-JGML2VUN.js';
@@ -27,7 +27,7 @@ import './chunk-RKOTJQVG.js';
 import './chunk-QZBXLLTV.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-XD4ZCMA4.js';
-import './chunk-JGD5TWQ2.js';
+import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 
 createRequire(import.meta.url);

package/dist/{bridge-WW2V7DTB.js → bridge-JN3VJ23L.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig } from './chunk-ZTY7HHYB.js';
-import './chunk-HXAEQPZR.js';
+export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig } from './chunk-RXFKXZJS.js';
+import './chunk-N5EEEKT6.js';
 import './chunk-XD4ZCMA4.js';
-import './chunk-JGD5TWQ2.js';
+import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 
 createRequire(import.meta.url);

package/dist/{build-5FRC3RKM.js → build-JCYOHPLL.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { buildRepositoryImage } from './chunk-T2QSWFSU.js';
-import './chunk-NUHZV3A4.js';
+export { buildRepositoryImage } from './chunk-TCBVV2JK.js';
+import './chunk-M6NNXKRM.js';
 import './chunk-JBJTC3UU.js';
 export { RecipeError } from './chunk-SJZL5F3F.js';
-import './chunk-5K3KB4YR.js';
-import './chunk-HXAEQPZR.js';
+import './chunk-DWVAG73B.js';
+import './chunk-N5EEEKT6.js';
 import './chunk-XD4ZCMA4.js';
-import './chunk-JGD5TWQ2.js';
+import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 
 createRequire(import.meta.url);

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-17T15:23:11.099Z+00ea5d3","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-17T18:42:55.566Z+c3e29e0","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-4F2XNSFC.js → builder-HCTVP2O7.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-VC5J7QPV.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-MFI55TNI.js';
 import './chunk-YJLHUKYS.js';
 import './chunk-SJZL5F3F.js';
 import './chunk-UHU7H57K.js';
-import './chunk-YL2VDSNF.js';
-import './chunk-5K3KB4YR.js';
-import './chunk-HXAEQPZR.js';
+import './chunk-R7TMTFJP.js';
+import './chunk-DWVAG73B.js';
+import './chunk-N5EEEKT6.js';
 import './chunk-QZBXLLTV.js';
 import './chunk-XD4ZCMA4.js';
-import './chunk-JGD5TWQ2.js';
+import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 
 createRequire(import.meta.url);

package/dist/{check-YEI6TCUH.js → check-WJ4X2Q44.js}

@@ -1,59 +1,59 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-O65LES4V.js';
-import './chunk-KU7QL4XW.js';
+import { probeCredentials } from './chunk-NVUO52YW.js';
+import './chunk-6P2Z5AUY.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-E7R2GIAW.js';
 import './chunk-TPKYTORP.js';
-import './chunk-IVX3U7KV.js';
+import './chunk-HWOU2HDH.js';
 import './chunk-ZVB57WI6.js';
-import './chunk-66T6XJAB.js';
-import './chunk-N7WAEEIU.js';
-import './chunk-SFJXGISY.js';
-import './chunk-MKIC65SD.js';
-import './chunk-TVZAC2NP.js';
+import './chunk-QBF462QH.js';
+import './chunk-OO6OADZN.js';
+import './chunk-YTR435DO.js';
+import './chunk-2BZTGJII.js';
+import './chunk-VM6BX2WJ.js';
 import './chunk-ESVW4MJY.js';
-import './chunk-ZTY7HHYB.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-6S4V4UIC.js';
+import './chunk-RXFKXZJS.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-ERVZGWUR.js';
 import './chunk-YYYRBYWG.js';
-import './chunk-GUXWQIEY.js';
+import './chunk-6NFXOQKZ.js';
 import './chunk-TBT347UY.js';
-import './chunk-MNHMUZGC.js';
-import './chunk-HOB7Z4JQ.js';
-import './chunk-GLL4TN2M.js';
-import './chunk-MHAR6S7B.js';
-import './chunk-WWQVKFN6.js';
-import './chunk-USJZ2LDK.js';
-import './chunk-Z3ASAXVU.js';
+import './chunk-KBB3CQTW.js';
+import './chunk-W3K6GBXY.js';
+import './chunk-5Q4NDYQP.js';
+import './chunk-WL3QF3QF.js';
+import './chunk-DIQN5SEL.js';
+import './chunk-JZJLKTZT.js';
+import './chunk-O47BTZSN.js';
 import './chunk-TQMI335S.js';
-import './chunk-F4FA3ZUT.js';
-import './chunk-MQHTM4YJ.js';
-import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-55XLX5PA.js';
+import './chunk-AV5MJY45.js';
+import './chunk-JYVBEWBC.js';
+import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-YYGXCRIW.js';
 import './chunk-UXYLWVTQ.js';
-import './chunk-T2QSWFSU.js';
-import './chunk-NUHZV3A4.js';
+import './chunk-TCBVV2JK.js';
+import './chunk-M6NNXKRM.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-VC5J7QPV.js';
+import './chunk-MFI55TNI.js';
 import './chunk-YJLHUKYS.js';
 import './chunk-SJZL5F3F.js';
-import './chunk-X52PMPOM.js';
-import './chunk-LNIFYSNK.js';
-import './chunk-VU7ZJPIR.js';
+import './chunk-X7SFJZIG.js';
+import './chunk-NMIYK2G2.js';
+import './chunk-QFNFBQCG.js';
 import './chunk-BUP5N3X6.js';
 import './chunk-UHU7H57K.js';
 import './chunk-5B7BEQPR.js';
 import './chunk-HOU33DW5.js';
 import './chunk-G2JWZDFA.js';
 import './chunk-ANPNT6PM.js';
-import './chunk-4XN5FRRJ.js';
+import './chunk-TG7FAHRP.js';
 import './chunk-P2RWZCV7.js';
-import './chunk-7CK2TJFB.js';
+import './chunk-KJIUFOC4.js';
 import './chunk-PJDQPF5N.js';
-import './chunk-YL2VDSNF.js';
-import './chunk-5K3KB4YR.js';
-import { claudeEnvPath } from './chunk-HXAEQPZR.js';
-import './chunk-DKWQMPSL.js';
+import './chunk-R7TMTFJP.js';
+import './chunk-DWVAG73B.js';
+import { claudeEnvPath } from './chunk-N5EEEKT6.js';
+import './chunk-OOUHNKKX.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-2O5KA67H.js';
 import './chunk-BKO6JEZI.js';
@@ -74,7 +74,7 @@ import './chunk-RKOTJQVG.js';
 import './chunk-QZBXLLTV.js';
 import './chunk-VNVZDWO3.js';
 import { parseRunnerEnv } from './chunk-XD4ZCMA4.js';
-import './chunk-JGD5TWQ2.js';
+import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 import { readFileSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-MKIC65SD.js → chunk-2BZTGJII.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { uploadSpooledSteps } from './chunk-TVZAC2NP.js';
+import { uploadSpooledSteps } from './chunk-VM6BX2WJ.js';
 import { LaunchFilter } from './chunk-ESVW4MJY.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
 import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-BUP5N3X6.js';
 import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-UHU7H57K.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { cliFetch, resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-7CK2TJFB.js';
+import { cliFetch, resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-KJIUFOC4.js';
 import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-PJDQPF5N.js';
-import { signerFor, signRunnerRequest } from './chunk-YL2VDSNF.js';
-import { writeSyncStatus, spoolDir } from './chunk-DKWQMPSL.js';
+import { signerFor, signRunnerRequest } from './chunk-R7TMTFJP.js';
+import { writeSyncStatus, spoolDir } from './chunk-OOUHNKKX.js';
 import { readLatestProvenanceForSession, readContextProvenance } from './chunk-ZJSNLVCE.js';
 import { hookExecSpoolPath } from './chunk-2O5KA67H.js';
 import { applyReportedCost } from './chunk-BKO6JEZI.js';

package/dist/{chunk-GLL4TN2M.js → chunk-5Q4NDYQP.js}

@@ -1,26 +1,26 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { execCapture } from './chunk-MHAR6S7B.js';
-import { GUEST_CID } from './chunk-WWQVKFN6.js';
-import { keepStagedContext, describeCallFailure, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript } from './chunk-USJZ2LDK.js';
-import { runnerImageVersion } from './chunk-Z3ASAXVU.js';
+import { execCapture } from './chunk-WL3QF3QF.js';
+import { GUEST_CID } from './chunk-DIQN5SEL.js';
+import { keepStagedContext, describeCallFailure, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript } from './chunk-JZJLKTZT.js';
+import { runnerImageVersion } from './chunk-O47BTZSN.js';
 import { hostAllowed } from './chunk-UXYLWVTQ.js';
-import { readDefaultBranchHead, cloneRepository, buildRepositoryImage } from './chunk-T2QSWFSU.js';
+import { readDefaultBranchHead, cloneRepository, buildRepositoryImage } from './chunk-TCBVV2JK.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
 import { currentCliBuild } from './chunk-OGFGZQA3.js';
-import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, JUDGE_DIR, JUDGE_REPORT, MAX_REPORT_BYTES, spawnRun } from './chunk-VC5J7QPV.js';
+import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, JUDGE_DIR, JUDGE_REPORT, MAX_REPORT_BYTES, spawnRun } from './chunk-MFI55TNI.js';
 import { readDu } from './chunk-YJLHUKYS.js';
 import { FIRECRACKER_VERSION, hostHelperPinned, firecrackerArch, MICROVM_ARCHES, RecipeError, DOCKER_FEATURE, CLAUDE_CODE_VERSION, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, JAILER_BINARY_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, GUEST_ASSETS_VERSION, DEFAULT_BASE_IMAGE } from './chunk-SJZL5F3F.js';
-import { WorkCommandError } from './chunk-X52PMPOM.js';
+import { WorkCommandError } from './chunk-X7SFJZIG.js';
 import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-UHU7H57K.js';
-import { vmAssetsDir, RUNNER_DIR_MODE, rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, deliveryDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, buildDir, SHIM_DIR } from './chunk-5K3KB4YR.js';
-import { repositoriesOf, primaryOf, RELAY_PORT, repositoryPath, CHECKOUT_DIR, lifecycleWorkdir, claudeCredential, buildEnvironment, startBuildServices, checkEnvironment, AGENT_CREDENTIAL_MISSING, checkoutPath, JOB_MOUNT } from './chunk-HXAEQPZR.js';
+import { vmAssetsDir, RUNNER_DIR_MODE, rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, deliveryDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, buildDir, SHIM_DIR } from './chunk-DWVAG73B.js';
+import { repositoriesOf, primaryOf, RELAY_PORT, repositoryPath, CHECKOUT_DIR, lifecycleWorkdir, claudeCredential, buildEnvironment, startBuildServices, checkEnvironment, AGENT_CREDENTIAL_MISSING, checkoutPath, JOB_MOUNT } from './chunk-N5EEEKT6.js';
 import { sharedSkillNames, skillConflictMessage } from './chunk-FGF52V4V.js';
 import { versionAtLeast, MINIMUM_CLAUDE_VERSION } from './chunk-HCVLP7XA.js';
 import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-RKOTJQVG.js';
 import { downconvertSession } from './chunk-QZBXLLTV.js';
 import { realFdStorePort } from './chunk-XD4ZCMA4.js';
-import { RELAY_USER, RELAY_ID, UNKNOWN_TRANSPORT_REASON, DOCKER_DESKTOP_REASON, MAX_MALFORMED_SESSIONS, MALFORMED_REASON, MAX_OPEN_STREAMS, STREAM_WINDOW, SESSION_WINDOW, targetOfPath } from './chunk-JGD5TWQ2.js';
+import { RELAY_USER, RELAY_ID, UNKNOWN_TRANSPORT_REASON, DOCKER_DESKTOP_REASON, MAX_MALFORMED_SESSIONS, MALFORMED_REASON, JOIN_WAIT_MS, MAX_OPEN_STREAMS, STREAM_RESET_RATE, STREAM_RESET_BURST, STREAM_WINDOW, SESSION_WINDOW, targetOfPath } from './chunk-MESOOLF4.js';
 import { readFileSync, mkdirSync, existsSync, mkdtempSync, rmSync, chmodSync, truncateSync, writeFileSync, readdirSync, lstatSync, copyFileSync, accessSync, constants, statSync, rmdirSync, renameSync, unlinkSync, openSync, closeSync, createWriteStream, createReadStream, writeSync } from 'fs';
 import { join, dirname, resolve, basename } from 'path';
 import { isIP, createConnection, connect, createServer as createServer$1 } from 'net';
@@ -1440,7 +1440,11 @@ function serveSession(transport, services, opts = {}) {
   outbound.pipe(transport);
   const wire = Duplex.from({ readable: transport, writable: outbound });
   wire.on("error", noop);
-  const session = http2.performServerHandshake(wire, { settings: { initialWindowSize: STREAM_WINDOW, enablePush: false } });
+  const session = http2.performServerHandshake(wire, {
+    settings: { initialWindowSize: STREAM_WINDOW, enablePush: false },
+    streamResetBurst: STREAM_RESET_BURST,
+    streamResetRate: STREAM_RESET_RATE
+  });
   try {
     session.setLocalWindowSize(SESSION_WINDOW);
   } catch {
@@ -1484,6 +1488,7 @@ var FIRST_BACKOFF_MS = 200;
 var LONGEST_BACKOFF_MS = 5e3;
 var JOINED_AFTER_MS = 2e3;
 var EXIT_WAIT_MS = 5e3;
+var SOCKET_NOT_READY = /\b(ENOENT|ECONNREFUSED)\b/;
 function exitedWithin(stream, ms) {
   let timer;
   const late = new Promise((resolve2) => {
@@ -1495,6 +1500,8 @@ function exitedWithin(stream, ms) {
 function superviseRelay(input) {
   const sleep = input.sleep ?? ((ms) => new Promise((resolve2) => setTimeout(resolve2, ms)));
   const exitWaitMs = input.exitWaitMs ?? EXIT_WAIT_MS;
+  const now = input.now ?? Date.now;
+  const startedAt = now();
   let closed = false;
   let fatal;
   let running;
@@ -1538,9 +1545,12 @@ function superviseRelay(input) {
           return;
         }
       } else if (!joined && !failing) {
-        failing = true;
         const reason = stream.stderrTail?.().trim() ?? "";
-        input.log?.(`could not join the relay in ${input.container}${status === 0 || status === void 0 ? "" : ` (exec exited ${status})`}${reason === "" ? "" : `: ${reason}`} \xB7 trying again`);
+        const starting = SOCKET_NOT_READY.test(reason) && now() - startedAt < JOIN_WAIT_MS;
+        if (!starting) {
+          failing = true;
+          input.log?.(`could not join the relay in ${input.container}${status === 0 || status === void 0 ? "" : ` (exec exited ${status})`}${reason === "" ? "" : `: ${reason}`} \xB7 trying again`);
+        }
       }
       if (closed) return;
       await Promise.race([sleep(backoff), new Promise((resolve2) => wake = resolve2)]);
@@ -2521,6 +2531,7 @@ ${body}`);
       upstream.on("error", (err) => client.destroy(err));
       upstream.on("close", () => {
         if (!upstream.readableEnded && !client.writableEnded) client.destroy(abortedError("the tunnel closed the connection to the server before it ended"));
+        else client.resume();
       });
       client.once("end", () => {
         upstream.destroy();

package/dist/{chunk-GUXWQIEY.js → chunk-6NFXOQKZ.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-5K3KB4YR.js';
+import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-DWVAG73B.js';
 import { readlinkSync, realpathSync, mkdirSync, unlinkSync, symlinkSync, renameSync, readFileSync, writeFileSync, rmSync, existsSync, readdirSync } from 'fs';
 import { join, basename, sep, resolve } from 'path';
 

package/dist/{chunk-KU7QL4XW.js → chunk-6P2Z5AUY.js}

@@ -1,34 +1,34 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { readsJobState, READ_JOB_STATE_FORMATS, jobStateFormatOf } from './chunk-ZVB57WI6.js';
-import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-N7WAEEIU.js';
-import { senderPidfile } from './chunk-SFJXGISY.js';
-import { installScrubContext } from './chunk-MKIC65SD.js';
-import { writeDockerClientConfig } from './chunk-ZTY7HHYB.js';
-import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, resolveAgentUser, AgentUserError, runBuildSteps, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, senderAliveScript, helperFirecrackerNote, HelperRefusal, isLiteralAddress, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, copyJudgeTree } from './chunk-GLL4TN2M.js';
-import { waitForAgent, vmExecArgs } from './chunk-MHAR6S7B.js';
-import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-WWQVKFN6.js';
-import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, keptContextTree } from './chunk-USJZ2LDK.js';
-import { isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-55XLX5PA.js';
-import { readBranchHead, fetchCommit, diffBetween } from './chunk-T2QSWFSU.js';
+import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-OO6OADZN.js';
+import { senderPidfile } from './chunk-YTR435DO.js';
+import { installScrubContext } from './chunk-2BZTGJII.js';
+import { writeDockerClientConfig } from './chunk-RXFKXZJS.js';
+import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, resolveAgentUser, AgentUserError, runBuildSteps, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, senderAliveScript, helperFirecrackerNote, HelperRefusal, isLiteralAddress, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, copyJudgeTree } from './chunk-5Q4NDYQP.js';
+import { waitForAgent, vmExecArgs } from './chunk-WL3QF3QF.js';
+import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-DIQN5SEL.js';
+import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, keptContextTree } from './chunk-JZJLKTZT.js';
+import { isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-YYGXCRIW.js';
+import { readBranchHead, fetchCommit, diffBetween } from './chunk-TCBVV2JK.js';
 import { isSameProcess, startTimeOf } from './chunk-JBJTC3UU.js';
-import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, judgeCommand, JUDGE_MAX_TURNS, MAX_REPORT_BYTES, JUDGE_DIR, COMMAND_DIR } from './chunk-VC5J7QPV.js';
+import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, judgeCommand, JUDGE_MAX_TURNS, MAX_REPORT_BYTES, JUDGE_DIR, COMMAND_DIR } from './chunk-MFI55TNI.js';
 import { parseSize } from './chunk-YJLHUKYS.js';
 import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-SJZL5F3F.js';
-import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-X52PMPOM.js';
+import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-X7SFJZIG.js';
 import { planArtifactUpload } from './chunk-BUP5N3X6.js';
 import { scrubText } from './chunk-UHU7H57K.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
-import { signerFor } from './chunk-YL2VDSNF.js';
-import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath } from './chunk-5K3KB4YR.js';
-import { JOB_MOUNT, claudeCredential, repositoriesOf, primaryOf, buildEnvironment, CHECKOUT_DIR, parseIsolation, proxyEnvironment, withProxyWarningHidden, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, withHooksPath, startBuildServices, BUILT_IN_NAMES, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, RELAY_PORT, repositoryPath, lifecycleWorkdir, currentClaudeCredential, removedClaudeCredentialValues, checkEnvironment, EVAL_INPUT_DIR } from './chunk-HXAEQPZR.js';
+import { signerFor } from './chunk-R7TMTFJP.js';
+import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath } from './chunk-DWVAG73B.js';
+import { JOB_MOUNT, claudeCredential, repositoriesOf, primaryOf, buildEnvironment, CHECKOUT_DIR, parseIsolation, proxyEnvironment, withProxyWarningHidden, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, withHooksPath, startBuildServices, BUILT_IN_NAMES, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, RELAY_PORT, repositoryPath, lifecycleWorkdir, currentClaudeCredential, removedClaudeCredentialValues, checkEnvironment, EVAL_INPUT_DIR } from './chunk-N5EEEKT6.js';
 import { resolvePackRoot } from './chunk-JGML2VUN.js';
 import { MAINTAINED_SKILLS } from './chunk-CDDED64E.js';
 import { resolveVersion } from './chunk-RA3O54FC.js';
 import { parsePolicy } from './chunk-RKOTJQVG.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { fdName } from './chunk-XD4ZCMA4.js';
-import { RUNNER_WORDED_REASONS, UNKNOWN_TRACKING_REASON } from './chunk-JGD5TWQ2.js';
+import { RUNNER_WORDED_REASONS, UNKNOWN_TRACKING_REASON } from './chunk-MESOOLF4.js';
 import { existsSync, statSync, appendFileSync, rmSync, mkdirSync, chmodSync, writeFileSync, accessSync, constants, openSync, readFileSync, closeSync, readdirSync, linkSync, lstatSync, fstatSync, readSync, realpathSync } from 'fs';
 import { join, isAbsolute, dirname, delimiter, sep } from 'path';
 import { once } from 'events';

package/dist/{chunk-F4FA3ZUT.js → chunk-AV5MJY45.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { DEFAULT_UNIT_NAME } from './chunk-MQHTM4YJ.js';
-import { RUNNER_FILE_MODE } from './chunk-5K3KB4YR.js';
-import { claudeEnvPath, withoutCredentialLines } from './chunk-HXAEQPZR.js';
+import { DEFAULT_UNIT_NAME } from './chunk-JYVBEWBC.js';
+import { RUNNER_FILE_MODE } from './chunk-DWVAG73B.js';
+import { claudeEnvPath, withoutCredentialLines } from './chunk-N5EEEKT6.js';
 import { parseRunnerEnv } from './chunk-XD4ZCMA4.js';
 import { existsSync, readFileSync, writeFileSync, renameSync, rmSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-WWQVKFN6.js → chunk-DIQN5SEL.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RELAY_PORT, GATEWAY_SOCKET, GATEWAY_PORT, CLAUDE_SOCKET, CLAUDE_PORT, DESTINATION_BASE_PORT } from './chunk-HXAEQPZR.js';
+import { RELAY_PORT, GATEWAY_SOCKET, GATEWAY_PORT, CLAUDE_SOCKET, CLAUDE_PORT, DESTINATION_BASE_PORT } from './chunk-N5EEEKT6.js';
 import { symlinkSync, unlinkSync } from 'fs';
 import { join } from 'path';
 

package/dist/{chunk-CTYSTE5C.js → chunk-DSKOHPXN.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { currentLink } from './chunk-GUXWQIEY.js';
+import { currentLink } from './chunk-6NFXOQKZ.js';
 import { readFileSync, statSync, chmodSync, mkdirSync, writeFileSync, renameSync, rmSync, existsSync, lstatSync, accessSync, constants, realpathSync } from 'fs';
 import { randomBytes } from 'crypto';
 import { join, dirname, delimiter, resolve } from 'path';

package/dist/{chunk-5K3KB4YR.js → chunk-DWVAG73B.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { BUILD_HOME } from './chunk-HXAEQPZR.js';
+import { BUILD_HOME } from './chunk-N5EEEKT6.js';
 import { join, dirname } from 'path';
 
 createRequire(import.meta.url);

package/dist/{chunk-6S4V4UIC.js → chunk-ERVZGWUR.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isPlaceholderCommand } from './chunk-MNHMUZGC.js';
-import { describeCallFailure } from './chunk-USJZ2LDK.js';
-import { builtinKind } from './chunk-55XLX5PA.js';
-import { WorkCommandError, getJson } from './chunk-X52PMPOM.js';
+import { isPlaceholderCommand } from './chunk-KBB3CQTW.js';
+import { describeCallFailure } from './chunk-JZJLKTZT.js';
+import { builtinKind } from './chunk-YYGXCRIW.js';
+import { WorkCommandError, getJson } from './chunk-X7SFJZIG.js';
 import { sanitizeTerminal } from './chunk-BUP5N3X6.js';
-import { signerFor } from './chunk-YL2VDSNF.js';
-import { CLAUDE_CREDENTIAL_VARIABLES, claudeCredential } from './chunk-HXAEQPZR.js';
+import { signerFor } from './chunk-R7TMTFJP.js';
+import { CLAUDE_CREDENTIAL_VARIABLES, claudeCredential } from './chunk-N5EEEKT6.js';
 
 createRequire(import.meta.url);
 

package/dist/{chunk-ATJOFXTE.js → chunk-EZ3DZXUH.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { launcherPath, writeLauncher, LauncherWriteError, pathNotes } from './chunk-CTYSTE5C.js';
-import { currentVersion, currentLink, isInLayout, packageRootIn, versionDir, switchCurrent, execStartLine } from './chunk-GUXWQIEY.js';
+import { launcherPath, writeLauncher, LauncherWriteError, pathNotes } from './chunk-DSKOHPXN.js';
+import { currentVersion, currentLink, isInLayout, packageRootIn, versionDir, switchCurrent, execStartLine } from './chunk-6NFXOQKZ.js';
 import { compareVersions } from './chunk-TQMI335S.js';
-import { RUNNER_DIR_MODE } from './chunk-5K3KB4YR.js';
+import { RUNNER_DIR_MODE } from './chunk-DWVAG73B.js';
 import { realpathSync, readFileSync, mkdirSync, rmSync, cpSync, existsSync } from 'fs';
 import { dirname, sep, join } from 'path';