@outerlayer/cli 0.33.0-next.20261022160949 → 0.33.0-next.20261022173306

package/dist/{agent-setup-2MJXGAZ5.js → agent-setup-TXC37SDW.js}

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { keepHandWritten, runAgentSetup } from './chunk-2GHI2J26.js';
+export { keepHandWritten, runAgentSetup } from './chunk-V4KIB7DX.js';
 import './chunk-JHTJPQSL.js';
 import './chunk-KT4CN6OU.js';
 import './chunk-DY7Y7UT4.js';
 import './chunk-HJYBWJAS.js';
 import './chunk-ANPNT6PM.js';
-import './chunk-JZ4FXSLI.js';
+import './chunk-VORMBXWO.js';
 import './chunk-UIUGTW5C.js';
-import './chunk-VQ2JGZSC.js';
+import './chunk-M5B7QVWU.js';
 import './chunk-PJDQPF5N.js';
-import './chunk-JT3YO5MH.js';
-import './chunk-ESP5VZBD.js';
-import './chunk-HDSDUTX4.js';
+import './chunk-IZDBVUBY.js';
+import './chunk-IX6EADX7.js';
+import './chunk-D5ZGMXUL.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-G63KT5I5.js';
@@ -26,7 +26,7 @@ import './chunk-TUSYOL2O.js';
 import './chunk-LJG6EMLJ.js';
 import './chunk-E6CO3MJE.js';
 import './chunk-VNVZDWO3.js';
-import './chunk-XD4ZCMA4.js';
+import './chunk-HACGUL52.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{bridge-3EG6Q34K.js → bridge-DMFMBDRG.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig } from './chunk-XTNMIV77.js';
-import './chunk-HDSDUTX4.js';
-import './chunk-XD4ZCMA4.js';
+export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig } from './chunk-TTACRX4N.js';
+import './chunk-D5ZGMXUL.js';
+import './chunk-HACGUL52.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{build-NCELVKHF.js → build-ZG3IYBVK.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { KEY_PREFIX, TAG_HOST, buildRepositoryImage, metadataFromLabels, prepareImageBuild, writeRecord } from './chunk-IK6M37BI.js';
-import './chunk-IPJ6HR7E.js';
+export { KEY_PREFIX, TAG_HOST, buildRepositoryImage, metadataFromLabels, prepareImageBuild, writeRecord } from './chunk-KGLEUJZO.js';
+import './chunk-FZMBBIZR.js';
 import './chunk-JBJTC3UU.js';
 export { RecipeError } from './chunk-3Z3MPR55.js';
 import './chunk-R6QCSHKC.js';
-import './chunk-ESP5VZBD.js';
-import './chunk-HDSDUTX4.js';
-import './chunk-XD4ZCMA4.js';
+import './chunk-IX6EADX7.js';
+import './chunk-D5ZGMXUL.js';
+import './chunk-HACGUL52.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{build-disk-5GIWYDOB.js → build-disk-5CI7FSX4.js}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DEFAULT_BUILD_DISK, DOCKER_CACHE_MS, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-MBE6FEQ3.js';
+export { DEFAULT_BUILD_DISK, DOCKER_CACHE_MS, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-7EBXH2LK.js';
 import './chunk-YYYRBYWG.js';
-import './chunk-S2IJQER5.js';
+import './chunk-427LS26N.js';
 import './chunk-3Z3MPR55.js';
 import './chunk-R6QCSHKC.js';
 import './chunk-YJLHUKYS.js';
 import './chunk-5DNCFOXA.js';
-import './chunk-JT3YO5MH.js';
-import './chunk-ESP5VZBD.js';
-import './chunk-HDSDUTX4.js';
+import './chunk-IZDBVUBY.js';
+import './chunk-IX6EADX7.js';
+import './chunk-D5ZGMXUL.js';
 import './chunk-E6CO3MJE.js';
-import './chunk-XD4ZCMA4.js';
+import './chunk-HACGUL52.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-22T16:11:53.196Z+8818aa0","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-22T17:35:09.987Z+d31f998","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-EELBB7SI.js → builder-6CZUYTHS.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-S2IJQER5.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-427LS26N.js';
 import './chunk-3Z3MPR55.js';
 import './chunk-R6QCSHKC.js';
 import './chunk-YJLHUKYS.js';
 import './chunk-5DNCFOXA.js';
-import './chunk-JT3YO5MH.js';
-import './chunk-ESP5VZBD.js';
-import './chunk-HDSDUTX4.js';
+import './chunk-IZDBVUBY.js';
+import './chunk-IX6EADX7.js';
+import './chunk-D5ZGMXUL.js';
 import './chunk-E6CO3MJE.js';
-import './chunk-XD4ZCMA4.js';
+import './chunk-HACGUL52.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{check-EJKRXI2N.js → check-TKBLYWSD.js}

@@ -1,64 +1,64 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-HVIYKGK5.js';
-import './chunk-LWODW66U.js';
+import { probeCredentials } from './chunk-KM2ZFYJ5.js';
+import './chunk-FXTYLRFW.js';
 import './chunk-ZVB57WI6.js';
-import './chunk-LH3KULPL.js';
+import './chunk-WPVIC2ST.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-E7R2GIAW.js';
-import './chunk-M5ZXOQYS.js';
+import './chunk-7NEOLKCQ.js';
 import './chunk-YKYCE4HY.js';
-import './chunk-CNRMP6EN.js';
-import './chunk-ELYHDWCC.js';
-import './chunk-XTNMIV77.js';
+import './chunk-PETBUIR4.js';
+import './chunk-HAD7LYDL.js';
+import './chunk-TTACRX4N.js';
 import './chunk-I3LTIAOR.js';
-import './chunk-QJNFO7TQ.js';
-import './chunk-WHRR55PC.js';
-import './chunk-THTBXIK5.js';
+import './chunk-7ZPHKBYH.js';
+import './chunk-ZU4ZY7CZ.js';
+import './chunk-25JWQ3PF.js';
 import './chunk-ESVW4MJY.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, managedProblems, managedFactsOf, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-XTBGPISI.js';
-import './chunk-3VGDZ23W.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, managedProblems, managedFactsOf, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-CWP6P7FQ.js';
+import './chunk-USCRSIES.js';
 import './chunk-TBT347UY.js';
-import './chunk-FQW7TKIU.js';
-import './chunk-52C3SSNF.js';
-import './chunk-AESNEWYR.js';
-import { probeHelper, HELPER_ENV, helperSocketPath } from './chunk-D7ECJX4J.js';
+import './chunk-IOF4N6ED.js';
+import './chunk-NVU7QK3A.js';
+import './chunk-GMMHAUBZ.js';
+import { probeHelper, HELPER_ENV, helperSocketPath } from './chunk-6QHLXYS2.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-IK6M37BI.js';
-import './chunk-IPJ6HR7E.js';
+import './chunk-KGLEUJZO.js';
+import './chunk-FZMBBIZR.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-QQGZ5THT.js';
-import './chunk-HIGJTX5U.js';
-import './chunk-LCVR4UIS.js';
-import './chunk-533QGXGZ.js';
+import './chunk-XXVYHC6D.js';
+import './chunk-O5F376JJ.js';
+import './chunk-VTCV2EIC.js';
+import './chunk-ILHDLZKE.js';
 import './chunk-TQMI335S.js';
-import { DEFAULT_UNIT_NAME } from './chunk-HBBCQ5NE.js';
-import './chunk-MBE6FEQ3.js';
+import { DEFAULT_UNIT_NAME } from './chunk-6N4CYTHB.js';
+import './chunk-7EBXH2LK.js';
 import './chunk-YYYRBYWG.js';
-import './chunk-S2IJQER5.js';
+import './chunk-427LS26N.js';
 import './chunk-3Z3MPR55.js';
 import './chunk-R6QCSHKC.js';
-import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-ALSE7YKX.js';
+import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-ZQ7VRXYM.js';
 import './chunk-UXYLWVTQ.js';
 import './chunk-YJLHUKYS.js';
-import './chunk-6JNCNHSV.js';
-import './chunk-C3XLVHN6.js';
-import './chunk-B3EE7OKK.js';
+import './chunk-KCRUMHSL.js';
+import './chunk-VBXNRP5E.js';
+import './chunk-DSSDKQGX.js';
 import './chunk-EWVYQLD3.js';
 import './chunk-5DNCFOXA.js';
 import './chunk-HJYBWJAS.js';
 import './chunk-NSPRS7WK.js';
 import './chunk-G2JWZDFA.js';
 import './chunk-ANPNT6PM.js';
-import './chunk-JZ4FXSLI.js';
+import './chunk-VORMBXWO.js';
 import './chunk-UIUGTW5C.js';
-import './chunk-VQ2JGZSC.js';
+import './chunk-M5B7QVWU.js';
 import './chunk-PJDQPF5N.js';
-import './chunk-JT3YO5MH.js';
-import './chunk-ESP5VZBD.js';
-import { claudeEnvPath } from './chunk-HDSDUTX4.js';
-import './chunk-L3DUKDTR.js';
+import './chunk-IZDBVUBY.js';
+import './chunk-IX6EADX7.js';
+import { claudeEnvPath } from './chunk-D5ZGMXUL.js';
+import './chunk-ZPSS4CVW.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-2O5KA67H.js';
 import './chunk-BKO6JEZI.js';
@@ -78,7 +78,7 @@ import './chunk-TUSYOL2O.js';
 import './chunk-LJG6EMLJ.js';
 import './chunk-E6CO3MJE.js';
 import './chunk-VNVZDWO3.js';
-import { parseRunnerEnv } from './chunk-XD4ZCMA4.js';
+import { parseRunnerEnv } from './chunk-HACGUL52.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 import { readFileSync } from 'fs';

package/dist/{chunk-THTBXIK5.js → chunk-25JWQ3PF.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
-import { autoConnect, detectActiveSession } from './chunk-C3XLVHN6.js';
+import { autoConnect, detectActiveSession } from './chunk-VBXNRP5E.js';
 import { acquireSpoolLockAt } from './chunk-EWVYQLD3.js';
 import { resolveRepoIdentity } from './chunk-5DNCFOXA.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-VQ2JGZSC.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-M5B7QVWU.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { StepNameSchema, StepBodySchema } from './chunk-E6CO3MJE.js';

package/dist/{chunk-S2IJQER5.js → chunk-427LS26N.js}

@@ -4,9 +4,9 @@ import { RecipeError } from './chunk-3Z3MPR55.js';
 import { BUILDKIT_IMAGE } from './chunk-R6QCSHKC.js';
 import { parseSize } from './chunk-YJLHUKYS.js';
 import { compareVersions } from './chunk-5DNCFOXA.js';
-import { ensureHostKey } from './chunk-JT3YO5MH.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, runnerDir, jobsDir } from './chunk-ESP5VZBD.js';
-import { CLAUDE_PORT, JOB_MOUNT, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_SOCKET, RELAY_PORT, DESTINATION_BASE_PORT } from './chunk-HDSDUTX4.js';
+import { ensureHostKey } from './chunk-IZDBVUBY.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, runnerDir, jobsDir } from './chunk-IX6EADX7.js';
+import { CLAUDE_PORT, JOB_MOUNT, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_SOCKET, RELAY_PORT, DESTINATION_BASE_PORT } from './chunk-D5ZGMXUL.js';
 import { JOIN_DIR, RELAY_ID, JOIN_SOCKET, TARGET_GATEWAY, TARGET_CLAUDE, destinationTarget, RELAY_USER } from './chunk-MESOOLF4.js';
 import { createHash } from 'crypto';
 import { existsSync, mkdirSync, createWriteStream, rmSync, readFileSync, chmodSync, writeFileSync, realpathSync, readdirSync, renameSync } from 'fs';

package/dist/{chunk-TA6TFYAN.js → chunk-64P3ZIGA.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { launcherPath, writeLauncher, LauncherWriteError, pathNotes } from './chunk-A3H27SYX.js';
-import { currentVersion, currentLink, isInLayout, packageRootIn, versionDir, switchCurrent, execStartLine } from './chunk-3VGDZ23W.js';
+import { launcherPath, writeLauncher, LauncherWriteError, pathNotes } from './chunk-CBJTDU2Z.js';
+import { currentVersion, currentLink, isInLayout, packageRootIn, versionDir, switchCurrent, execStartLine } from './chunk-USCRSIES.js';
 import { compareVersions } from './chunk-TQMI335S.js';
-import { RUNNER_DIR_MODE } from './chunk-ESP5VZBD.js';
+import { RUNNER_DIR_MODE } from './chunk-IX6EADX7.js';
 import { realpathSync, readFileSync, mkdirSync, rmSync, cpSync, existsSync } from 'fs';
 import { dirname, sep, join } from 'path';
 

package/dist/{chunk-HBBCQ5NE.js → chunk-6N4CYTHB.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { builtinKind } from './chunk-ALSE7YKX.js';
+import { builtinKind } from './chunk-ZQ7VRXYM.js';
 import { parseSize } from './chunk-YJLHUKYS.js';
-import { runnerDir } from './chunk-ESP5VZBD.js';
-import { CLAUDE_CREDENTIAL_ID, CLAUDE_ENV_FILE, credentialLineIn, withoutCredentialLines } from './chunk-HDSDUTX4.js';
-import { FD_SLOTS_PER_BUILD, FD_STORE_ENV } from './chunk-XD4ZCMA4.js';
+import { runnerDir } from './chunk-IX6EADX7.js';
+import { CLAUDE_CREDENTIAL_ID, CLAUDE_ENV_FILE, credentialLineIn, withoutCredentialLines } from './chunk-D5ZGMXUL.js';
+import { FD_SLOTS_PER_BUILD, FD_STORE_ENV } from './chunk-HACGUL52.js';
 import { existsSync, readFileSync, writeFileSync, chmodSync, renameSync } from 'fs';
 import { dirname, join } from 'path';
 import { spawnSync } from 'child_process';

package/dist/{chunk-D7ECJX4J.js → chunk-6QHLXYS2.js}

@@ -1,28 +1,28 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { sha256OfFile, downloadPinned, VoiceDownloadError } from './chunk-2PGI6RDE.js';
-import { readDefaultBranchHead, cloneRepository, buildRepositoryImage, prepareImageBuild, KEY_PREFIX, FETCHED_DIR, toolsDockerfile, TAG_HOST, metadataFromLabels, writeRecord, FETCHED_FFMPEG, FETCHED_GH, FETCHED_TINI, FETCHED_VOICE_DIR } from './chunk-IK6M37BI.js';
+import { readDefaultBranchHead, cloneRepository, buildRepositoryImage, prepareImageBuild, KEY_PREFIX, FETCHED_DIR, toolsDockerfile, TAG_HOST, metadataFromLabels, writeRecord, FETCHED_FFMPEG, FETCHED_GH, FETCHED_TINI, FETCHED_VOICE_DIR } from './chunk-KGLEUJZO.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
 import { currentCliBuild } from './chunk-OGFGZQA3.js';
-import { runExec, execCapture, waitForAgent } from './chunk-QQGZ5THT.js';
-import { GUEST_CID, linkVsockSockets } from './chunk-HIGJTX5U.js';
-import { describeCallFailure, keepStagedContext, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript, WORKFLOW_PERMISSION_REASON } from './chunk-LCVR4UIS.js';
-import { runnerImageVersion } from './chunk-533QGXGZ.js';
+import { runExec, execCapture, waitForAgent } from './chunk-XXVYHC6D.js';
+import { GUEST_CID, linkVsockSockets } from './chunk-O5F376JJ.js';
+import { describeCallFailure, keepStagedContext, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript, WORKFLOW_PERMISSION_REASON } from './chunk-VTCV2EIC.js';
+import { runnerImageVersion } from './chunk-ILHDLZKE.js';
 import { formatBytes } from './chunk-YYYRBYWG.js';
-import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun } from './chunk-S2IJQER5.js';
+import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun } from './chunk-427LS26N.js';
 import { RecipeError, DOCKER_FEATURE, writeSanitizedRecipe, classifyProperties } from './chunk-3Z3MPR55.js';
 import { FIRECRACKER_VERSION, hostHelperPinned, firecrackerArch, MICROVM_ARCHES, CLAUDE_CODE_VERSION, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, JAILER_BINARY_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, GUEST_ASSETS_VERSION, BUILDER_DISK_VERSION, builderDiskPinned, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, GH_VERSION, TINI_SHA256, TINI_VERSION, VOICE_PACK_FILES, BUILDER_DISK_SHA256, BUILDER_DISK_BASE_URL, DEFAULT_BASE_IMAGE } from './chunk-R6QCSHKC.js';
 import { hostAllowed } from './chunk-UXYLWVTQ.js';
 import { readDu } from './chunk-YJLHUKYS.js';
-import { WorkCommandError } from './chunk-6JNCNHSV.js';
+import { WorkCommandError } from './chunk-KCRUMHSL.js';
 import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-5DNCFOXA.js';
-import { rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, buildsDir, buildDir, vmAssetsDir, RUNNER_DIR_MODE, deliveryDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, SHIM_DIR, runnerDir, vsockPath, builderCacheDiskPath } from './chunk-ESP5VZBD.js';
-import { repositoriesOf, primaryOf, RELAY_PORT, repositoryPath, CHECKOUT_DIR, lifecycleWorkdir, claudeCredential, buildEnvironment, startBuildServices, checkEnvironment, AGENT_CREDENTIAL_MISSING, checkoutPath, JOB_MOUNT } from './chunk-HDSDUTX4.js';
+import { rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, buildsDir, buildDir, vmAssetsDir, RUNNER_DIR_MODE, deliveryDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, SHIM_DIR, runnerDir, vsockPath, builderCacheDiskPath } from './chunk-IX6EADX7.js';
+import { repositoriesOf, primaryOf, RELAY_PORT, repositoryPath, CHECKOUT_DIR, lifecycleWorkdir, claudeCredential, buildEnvironment, startBuildServices, checkEnvironment, AGENT_CREDENTIAL_MISSING, checkoutPath, JOB_MOUNT } from './chunk-D5ZGMXUL.js';
 import { sharedSkillNames, skillConflictMessage } from './chunk-FGF52V4V.js';
 import { versionAtLeast, MINIMUM_CLAUDE_VERSION } from './chunk-HCVLP7XA.js';
 import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-LJG6EMLJ.js';
 import { downconvertSession } from './chunk-E6CO3MJE.js';
-import { realFdStorePort } from './chunk-XD4ZCMA4.js';
+import { realFdStorePort } from './chunk-HACGUL52.js';
 import { RELAY_USER, RELAY_ID, UNKNOWN_TRANSPORT_REASON, DOCKER_DESKTOP_REASON, MAX_MALFORMED_SESSIONS, MALFORMED_REASON, JOIN_WAIT_MS, MAX_OPEN_STREAMS, STREAM_RESET_RATE, STREAM_RESET_BURST, STREAM_WINDOW, SESSION_WINDOW, targetOfPath } from './chunk-MESOOLF4.js';
 import { readFileSync, existsSync, mkdirSync, chmodSync, truncateSync, rmSync, statSync, readdirSync, mkdtempSync, writeFileSync, lstatSync, copyFileSync, accessSync, constants, rmdirSync, renameSync, unlinkSync, linkSync, openSync, closeSync, cpSync, writeSync, appendFileSync, createWriteStream, createReadStream } from 'fs';
 import { join, dirname, relative, resolve, basename } from 'path';

package/dist/{chunk-MBE6FEQ3.js → chunk-7EBXH2LK.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { formatBytes, freeBytes } from './chunk-YYYRBYWG.js';
-import { BUILD_LABEL, RUNNER_LABEL, runnerLabelValue } from './chunk-S2IJQER5.js';
+import { BUILD_LABEL, RUNNER_LABEL, runnerLabelValue } from './chunk-427LS26N.js';
 import { parseSize } from './chunk-YJLHUKYS.js';
-import { buildsDir, rootfsDir, runnerDir } from './chunk-ESP5VZBD.js';
+import { buildsDir, rootfsDir, runnerDir } from './chunk-IX6EADX7.js';
 import { spawnSync } from 'child_process';
 import { existsSync, statSync, readdirSync } from 'fs';
 import { join } from 'path';

package/dist/{chunk-M5ZXOQYS.js → chunk-7NEOLKCQ.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { checkFit, RUNNER_RESERVE_BYTES } from './chunk-HBBCQ5NE.js';
+import { checkFit, RUNNER_RESERVE_BYTES } from './chunk-6N4CYTHB.js';
 import { readFileSync } from 'fs';
 
 createRequire(import.meta.url);

package/dist/{chunk-QJNFO7TQ.js → chunk-7ZPHKBYH.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LiveUploader } from './chunk-WHRR55PC.js';
+import { LiveUploader } from './chunk-ZU4ZY7CZ.js';
 import { CaptureDaemon } from './chunk-5DNCFOXA.js';
-import { spoolDir } from './chunk-L3DUKDTR.js';
+import { spoolDir } from './chunk-ZPSS4CVW.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { mkdirSync, writeFileSync, rmSync } from 'fs';

package/dist/{chunk-OJ63GRZ2.js → chunk-BZZIW2A3.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { autoConnect, detectActiveSession } from './chunk-C3XLVHN6.js';
+import { autoConnect, detectActiveSession } from './chunk-VBXNRP5E.js';
 import { resolveRepoIdentity } from './chunk-5DNCFOXA.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { defaultFetch, unauthorizedMessage, resolveGatewayCredentials } from './chunk-VQ2JGZSC.js';
+import { defaultFetch, unauthorizedMessage, resolveGatewayCredentials } from './chunk-M5B7QVWU.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{chunk-A3H27SYX.js → chunk-CBJTDU2Z.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { currentLink } from './chunk-3VGDZ23W.js';
+import { currentLink } from './chunk-USCRSIES.js';
 import { readFileSync, statSync, chmodSync, mkdirSync, writeFileSync, renameSync, rmSync, existsSync, lstatSync, accessSync, constants, realpathSync } from 'fs';
 import { randomBytes } from 'crypto';
 import { join, dirname, delimiter, resolve } from 'path';

package/dist/{chunk-XTBGPISI.js → chunk-CWP6P7FQ.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isPlaceholderCommand } from './chunk-FQW7TKIU.js';
-import { describeCallFailure } from './chunk-LCVR4UIS.js';
-import { checkFit } from './chunk-HBBCQ5NE.js';
-import { realBuildDiskProbe, checkDiskFit, DEFAULT_BUILD_DISK } from './chunk-MBE6FEQ3.js';
+import { isPlaceholderCommand } from './chunk-IOF4N6ED.js';
+import { describeCallFailure } from './chunk-VTCV2EIC.js';
+import { checkFit } from './chunk-6N4CYTHB.js';
+import { realBuildDiskProbe, checkDiskFit, DEFAULT_BUILD_DISK } from './chunk-7EBXH2LK.js';
 import { builderDiskPinned } from './chunk-R6QCSHKC.js';
-import { builtinKind, imageBuildOf } from './chunk-ALSE7YKX.js';
-import { WorkCommandError, getJson } from './chunk-6JNCNHSV.js';
+import { builtinKind, imageBuildOf } from './chunk-ZQ7VRXYM.js';
+import { WorkCommandError, getJson } from './chunk-KCRUMHSL.js';
 import { sanitizeTerminal } from './chunk-EWVYQLD3.js';
-import { signerFor } from './chunk-JT3YO5MH.js';
-import { CLAUDE_CREDENTIAL_VARIABLES, claudeCredential, claudeCredentialVariablesSet } from './chunk-HDSDUTX4.js';
+import { signerFor } from './chunk-IZDBVUBY.js';
+import { CLAUDE_CREDENTIAL_VARIABLES, claudeCredential, claudeCredentialVariablesSet } from './chunk-D5ZGMXUL.js';
 import { closeSync, openSync, constants } from 'fs';
 import { totalmem } from 'os';
 

package/dist/{chunk-HDSDUTX4.js → chunk-D5ZGMXUL.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { parseRunnerEnv } from './chunk-XD4ZCMA4.js';
+import { parseRunnerEnv } from './chunk-HACGUL52.js';
 import { TARGET_TUNNEL, TARGET_LEASE, destinationTarget } from './chunk-MESOOLF4.js';
 import { readFileSync, existsSync, unlinkSync, chmodSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-B3EE7OKK.js → chunk-DSSDKQGX.js}

@@ -4,7 +4,7 @@ import { sanitizeTerminal } from './chunk-EWVYQLD3.js';
 import { remoteLookupFailed } from './chunk-5DNCFOXA.js';
 import { isAgentsMdLayout } from './chunk-HJYBWJAS.js';
 import { DEFAULT_DASHBOARD } from './chunk-NSPRS7WK.js';
-import { cliFetch, resolveGatewayCredentials } from './chunk-VQ2JGZSC.js';
+import { cliFetch, resolveGatewayCredentials } from './chunk-M5B7QVWU.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
 import { findGitDirs, writeRepoConnection, readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';

package/dist/{chunk-LWODW66U.js → chunk-FXTYLRFW.js}

@@ -1,35 +1,35 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { readsJobState, READ_JOB_STATE_FORMATS, jobStateFormatOf } from './chunk-ZVB57WI6.js';
-import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-ELYHDWCC.js';
-import { writeDockerClientConfig } from './chunk-XTNMIV77.js';
+import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-HAD7LYDL.js';
+import { writeDockerClientConfig } from './chunk-TTACRX4N.js';
 import { zodProblem } from './chunk-I3LTIAOR.js';
-import { senderPidfile } from './chunk-QJNFO7TQ.js';
-import { installScrubContext } from './chunk-WHRR55PC.js';
-import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, helperFirecrackerNote, isLiteralAddress, stopJailed, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, ROOT_DISK_ID_PREFIX, copyJudgeTree } from './chunk-D7ECJX4J.js';
-import { readBranchHead, fetchCommit, diffBetween } from './chunk-IK6M37BI.js';
+import { senderPidfile } from './chunk-7ZPHKBYH.js';
+import { installScrubContext } from './chunk-ZU4ZY7CZ.js';
+import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, helperFirecrackerNote, isLiteralAddress, stopJailed, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, ROOT_DISK_ID_PREFIX, copyJudgeTree } from './chunk-6QHLXYS2.js';
+import { readBranchHead, fetchCommit, diffBetween } from './chunk-KGLEUJZO.js';
 import { isSameProcess, startTimeOf } from './chunk-JBJTC3UU.js';
-import { waitForAgent, vmExecArgs } from './chunk-QQGZ5THT.js';
-import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-HIGJTX5U.js';
-import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-LCVR4UIS.js';
-import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-S2IJQER5.js';
+import { waitForAgent, vmExecArgs } from './chunk-XXVYHC6D.js';
+import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-O5F376JJ.js';
+import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-VTCV2EIC.js';
+import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-427LS26N.js';
 import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-R6QCSHKC.js';
-import { imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-ALSE7YKX.js';
+import { imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-ZQ7VRXYM.js';
 import { parseSize } from './chunk-YJLHUKYS.js';
-import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-6JNCNHSV.js';
+import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-KCRUMHSL.js';
 import { planArtifactUpload } from './chunk-EWVYQLD3.js';
 import { scrubText } from './chunk-5DNCFOXA.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
-import { signerFor } from './chunk-JT3YO5MH.js';
-import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath } from './chunk-ESP5VZBD.js';
-import { JOB_MOUNT, claudeCredential, repositoriesOf, primaryOf, buildEnvironment, CHECKOUT_DIR, parseIsolation, proxyEnvironment, withProxyWarningHidden, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, withHooksPath, startBuildServices, BUILT_IN_NAMES, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, RELAY_PORT, repositoryPath, lifecycleWorkdir, CHECK_ITEMS_FILE, currentClaudeCredential, removedClaudeCredentialValues, checkEnvironment, EVAL_INPUT_DIR } from './chunk-HDSDUTX4.js';
+import { signerFor } from './chunk-IZDBVUBY.js';
+import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath } from './chunk-IX6EADX7.js';
+import { JOB_MOUNT, claudeCredential, repositoriesOf, primaryOf, buildEnvironment, CHECKOUT_DIR, parseIsolation, proxyEnvironment, withProxyWarningHidden, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, withHooksPath, startBuildServices, BUILT_IN_NAMES, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, RELAY_PORT, repositoryPath, lifecycleWorkdir, CHECK_ITEMS_FILE, currentClaudeCredential, removedClaudeCredentialValues, checkEnvironment, EVAL_INPUT_DIR } from './chunk-D5ZGMXUL.js';
 import { resolvePackRoot } from './chunk-G63KT5I5.js';
 import { MAINTAINED_SKILLS } from './chunk-CDDED64E.js';
 import { resolveVersion } from './chunk-RA3O54FC.js';
 import { parsePolicy } from './chunk-LJG6EMLJ.js';
 import { CheckItemsSchema, CHECK_ITEM_REASON_MAX_LENGTH } from './chunk-E6CO3MJE.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import { fdName } from './chunk-XD4ZCMA4.js';
+import { fdName } from './chunk-HACGUL52.js';
 import { RUNNER_WORDED_REASONS, UNKNOWN_TRACKING_REASON } from './chunk-MESOOLF4.js';
 import { existsSync, statSync, appendFileSync, rmSync, mkdirSync, chmodSync, writeFileSync, accessSync, constants, openSync, readFileSync, closeSync, readdirSync, lstatSync, fstatSync, readSync, realpathSync } from 'fs';
 import { join, isAbsolute, dirname, delimiter, sep } from 'path';
@@ -280,7 +280,7 @@ async function keepSockets(runtime, buildId, listeners, leaseServer, line, error
     }
   } catch (err) {
     error(`this build ends with its runner: its sockets could not be kept for the next one: ${describeCallFailure(err)}`);
-    for (const name of stored) await store.remove(name).catch(() => void 0);
+    for (const name of stored) await store.remove(name).catch((removeErr) => error(`the descriptor ${name} could not be taken out of the store: ${describeCallFailure(removeErr)}`));
     return [];
   }
   return stored;
@@ -1024,7 +1024,7 @@ async function stopBuildMicroVm(runtime, state, jobDir) {
   await runtime.vm.firecracker.stop(state.firecracker);
   if (runtime.vm.firecracker.alive(state.firecracker)) throw new Error(`the microVM (pid ${state.firecracker.pid}) is still running after it was stopped`);
 }
-async function cleanupMicroVm(runtime, state, jobDir) {
+async function cleanupMicroVm(runtime, state, jobDir, warn) {
   const failures = [];
   if (jobDir !== void 0) await copyHookErrors(runtime, state, jobDir);
   if (state.jailed !== void 0) {
@@ -1056,7 +1056,9 @@ async function cleanupMicroVm(runtime, state, jobDir) {
     runtime.tunnels.delete(state.buildId);
     await tunnel.close();
   }
-  for (const name of state.fdStore ?? []) await runtime.vm.fdStore.remove(name).catch(() => void 0);
+  for (const name of state.fdStore ?? []) {
+    await runtime.vm.fdStore.remove(name).catch((err) => warn?.(`the descriptor ${name} could not be taken out of the store: ${describeCallFailure(err)}`));
+  }
   rmSync(state.buildDir, { recursive: true, force: true });
   if (failures.length > 0) throw new Error(failures.join("; "));
 }
@@ -3205,7 +3207,7 @@ async function finishJob(job, jobDirPath, outcome, config, deps, ending) {
       let cleanedUp = true;
       tunnelRecord = vmBuild.runtime.tunnels.get(vmBuild.state.buildId)?.record();
       try {
-        await cleanupMicroVm(vmBuild.runtime, vmBuild.state, jobDirPath);
+        await cleanupMicroVm(vmBuild.runtime, vmBuild.state, jobDirPath, (text2) => log.error(`${tag} ${text2}`));
       } catch (err) {
         cleanedUp = false;
         log.error(`${tag} cleanup failed: ${describeCallFailure(err)} \xB7 continuing`);

package/dist/{chunk-IPJ6HR7E.js → chunk-FZMBBIZR.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { isSameProcess } from './chunk-JBJTC3UU.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-ESP5VZBD.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-IX6EADX7.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, rmSync } from 'fs';
 import { dirname } from 'path';
 

package/dist/{chunk-AESNEWYR.js → chunk-GMMHAUBZ.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { MIN_ENGINE_MAJOR } from './chunk-D7ECJX4J.js';
-import { runnerImageVersion } from './chunk-533QGXGZ.js';
+import { MIN_ENGINE_MAJOR } from './chunk-6QHLXYS2.js';
+import { runnerImageVersion } from './chunk-ILHDLZKE.js';
 import { firecrackerArch, MICROVM_ARCHES, guestAssetsPinned } from './chunk-R6QCSHKC.js';
 import { spawnSync } from 'child_process';
 import { existsSync, accessSync, constants, statSync, readFileSync } from 'fs';

package/dist/{chunk-XD4ZCMA4.js → chunk-HACGUL52.js}

@@ -64,7 +64,10 @@ function realFdStorePort(options = {}) {
   const command = options.command ?? "systemd-notify";
   const spawnFn = options.spawn ?? spawn;
   let inherited;
+  let held;
   let version;
+  const inheritedNames = () => inherited ??= parseListenFds(env, pid);
+  const heldNames = () => held ??= new Set(inheritedNames().keys());
   return {
     async status() {
       if (env.NOTIFY_SOCKET === void 0 || env.NOTIFY_SOCKET === "") return { ok: false, reason: "NOTIFY_SOCKET is not set, so this runner was not started by a service that accepts descriptors" };
@@ -79,16 +82,22 @@ function realFdStorePort(options = {}) {
     async push(name, server) {
       const fd = listenFdOf(server);
       if (fd === void 0) throw new Error(`${name} has no descriptor to store`);
+      const size = Number(env[FD_STORE_ENV]);
+      const names = heldNames();
+      if (Number.isInteger(size) && names.size >= size) {
+        throw new Error(`the descriptor store is full: it holds ${names.size} descriptors, the size the service's unit sets (FileDescriptorStoreMax=${size})`);
+      }
       const ran = await run(spawnFn, command, [`--fd=${LISTEN_FDS_START}`, `--fdname=${name}`, "FDSTORE=1"], fd);
       if (ran.status !== 0) throw new Error(`storing ${name} failed${ran.status === null ? "" : ` (exit ${ran.status})`}: ${ran.stderr.trim().split("\n")[0] ?? ""}`);
+      names.add(name);
     },
     async remove(name) {
-      const ran = await run(spawnFn, command, [`--fdname=${name}`, "FDSTOREREMOVE=1"]);
+      const ran = await run(spawnFn, command, ["FDSTOREREMOVE=1", `FDNAME=${name}`]);
       if (ran.status !== 0) throw new Error(`removing ${name} from the store failed${ran.status === null ? "" : ` (exit ${ran.status})`}: ${ran.stderr.trim().split("\n")[0] ?? ""}`);
+      heldNames().delete(name);
     },
     inherited() {
-      inherited ??= parseListenFds(env, pid);
-      return inherited;
+      return inheritedNames();
     },
     listenOn: listenOnFd
   };

package/dist/{chunk-ELYHDWCC.js → chunk-HAD7LYDL.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { BRIDGE_ADDRESS, TUNNEL_PORT, BRIDGE_CIDR } from './chunk-XTNMIV77.js';
+import { BRIDGE_ADDRESS, TUNNEL_PORT, BRIDGE_CIDR } from './chunk-TTACRX4N.js';
 import { startTimeOf } from './chunk-JBJTC3UU.js';
-import { EXEC_PORT } from './chunk-HIGJTX5U.js';
-import { RELAY_PORT } from './chunk-HDSDUTX4.js';
+import { EXEC_PORT } from './chunk-O5F376JJ.js';
+import { RELAY_PORT } from './chunk-D5ZGMXUL.js';
 import { spawn, spawnSync } from 'child_process';
 import { symlinkSync, lstatSync, writeFileSync, chmodSync, mkdirSync } from 'fs';