@outerlayer/cli 0.33.0-next.20261022173306 → 0.33.0-next.20261022182214

package/README.md

@@ -223,7 +223,10 @@ content:
   build uses the host's network: the build's tunnel does not carry it, and
   `runner.build.allowHosts` does not limit it.
 - **`outerlayer runner start` with `builtin:vm` hooks** runs each build in its
-  own Firecracker microVM, which has no network device. The first microVM
+  own Firecracker microVM, which has no network card. Every TCP connection
+  of every program in it goes through the runner's tunnel, whether or not the
+  program reads the proxy variables, and `runner.build.allowHosts` narrows what
+  it reaches. No DNS query or UDP packet leaves the microVM. The first microVM
   build downloads a pinned Firecracker release from github.com. It also
   downloads a guest kernel and a guest helper from the releases of the public
   repository `outerlayerai/guest-assets` on github.com. The runner checks each

package/dist/{agent-setup-TXC37SDW.js → agent-setup-4WKFXVOP.js}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { keepHandWritten, runAgentSetup } from './chunk-V4KIB7DX.js';
+export { keepHandWritten, runAgentSetup } from './chunk-VHRKGCBY.js';
 import './chunk-JHTJPQSL.js';
 import './chunk-KT4CN6OU.js';
 import './chunk-DY7Y7UT4.js';
 import './chunk-HJYBWJAS.js';
 import './chunk-ANPNT6PM.js';
-import './chunk-VORMBXWO.js';
+import './chunk-YMGSMPPW.js';
 import './chunk-UIUGTW5C.js';
-import './chunk-M5B7QVWU.js';
+import './chunk-FLFK42YF.js';
 import './chunk-PJDQPF5N.js';
-import './chunk-IZDBVUBY.js';
-import './chunk-IX6EADX7.js';
+import './chunk-634F6J3Q.js';
+import './chunk-MBGS33SL.js';
 import './chunk-D5ZGMXUL.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-BJ3KTMDH.js';

package/dist/{build-ZG3IYBVK.js → build-RBLDHQTY.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { KEY_PREFIX, TAG_HOST, buildRepositoryImage, metadataFromLabels, prepareImageBuild, writeRecord } from './chunk-KGLEUJZO.js';
-import './chunk-FZMBBIZR.js';
+export { KEY_PREFIX, TAG_HOST, buildRepositoryImage, metadataFromLabels, prepareImageBuild, writeRecord } from './chunk-MWAA3A5T.js';
+import './chunk-ZFJAQS3A.js';
 import './chunk-JBJTC3UU.js';
 export { RecipeError } from './chunk-3Z3MPR55.js';
-import './chunk-R6QCSHKC.js';
-import './chunk-IX6EADX7.js';
+import './chunk-KFA762LZ.js';
+import './chunk-MBGS33SL.js';
 import './chunk-D5ZGMXUL.js';
 import './chunk-HACGUL52.js';
 import './chunk-MESOOLF4.js';

package/dist/{build-disk-5CI7FSX4.js → build-disk-4EEKP23Z.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DEFAULT_BUILD_DISK, DOCKER_CACHE_MS, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-7EBXH2LK.js';
+export { DEFAULT_BUILD_DISK, DOCKER_CACHE_MS, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-3BGCXC3O.js';
 import './chunk-YYYRBYWG.js';
-import './chunk-427LS26N.js';
+import './chunk-5CZV4FZ5.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-R6QCSHKC.js';
+import './chunk-KFA762LZ.js';
 import './chunk-YJLHUKYS.js';
 import './chunk-5DNCFOXA.js';
-import './chunk-IZDBVUBY.js';
-import './chunk-IX6EADX7.js';
+import './chunk-634F6J3Q.js';
+import './chunk-MBGS33SL.js';
 import './chunk-D5ZGMXUL.js';
 import './chunk-E6CO3MJE.js';
 import './chunk-HACGUL52.js';

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-22T17:35:09.987Z+d31f998","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-22T18:25:50.694Z+4fc4b3d","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-6CZUYTHS.js → builder-V3KALVKL.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-427LS26N.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-5CZV4FZ5.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-R6QCSHKC.js';
+import './chunk-KFA762LZ.js';
 import './chunk-YJLHUKYS.js';
 import './chunk-5DNCFOXA.js';
-import './chunk-IZDBVUBY.js';
-import './chunk-IX6EADX7.js';
+import './chunk-634F6J3Q.js';
+import './chunk-MBGS33SL.js';
 import './chunk-D5ZGMXUL.js';
 import './chunk-E6CO3MJE.js';
 import './chunk-HACGUL52.js';

package/dist/{check-TKBLYWSD.js → check-LDDMISY6.js}

@@ -1,64 +1,64 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-KM2ZFYJ5.js';
-import './chunk-FXTYLRFW.js';
+import { probeCredentials } from './chunk-MCIPCQP3.js';
+import './chunk-IQFX5GQH.js';
 import './chunk-ZVB57WI6.js';
-import './chunk-WPVIC2ST.js';
+import './chunk-QPAPHQZ7.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-E7R2GIAW.js';
-import './chunk-7NEOLKCQ.js';
+import './chunk-W4UFGYKQ.js';
 import './chunk-YKYCE4HY.js';
-import './chunk-PETBUIR4.js';
-import './chunk-HAD7LYDL.js';
+import './chunk-5KO3TN2F.js';
+import './chunk-COLOLDY3.js';
 import './chunk-TTACRX4N.js';
 import './chunk-I3LTIAOR.js';
-import './chunk-7ZPHKBYH.js';
-import './chunk-ZU4ZY7CZ.js';
-import './chunk-25JWQ3PF.js';
+import './chunk-JUVUVXQZ.js';
+import './chunk-J6LFFZOY.js';
+import './chunk-EBX2DU2M.js';
 import './chunk-ESVW4MJY.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, managedProblems, managedFactsOf, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-CWP6P7FQ.js';
-import './chunk-USCRSIES.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, managedProblems, managedFactsOf, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-PAFSFC6Q.js';
+import './chunk-O7MSQBTH.js';
 import './chunk-TBT347UY.js';
-import './chunk-IOF4N6ED.js';
-import './chunk-NVU7QK3A.js';
-import './chunk-GMMHAUBZ.js';
-import { probeHelper, HELPER_ENV, helperSocketPath } from './chunk-6QHLXYS2.js';
+import './chunk-33SMNWZX.js';
+import './chunk-HDD3BKAE.js';
+import './chunk-F5HZT672.js';
+import { probeHelper, HELPER_ENV, helperSocketPath } from './chunk-JDKLORO3.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-KGLEUJZO.js';
-import './chunk-FZMBBIZR.js';
+import './chunk-MWAA3A5T.js';
+import './chunk-ZFJAQS3A.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
 import './chunk-XXVYHC6D.js';
 import './chunk-O5F376JJ.js';
-import './chunk-VTCV2EIC.js';
-import './chunk-ILHDLZKE.js';
+import './chunk-JKPJQNJF.js';
+import './chunk-PWB7EK4Z.js';
 import './chunk-TQMI335S.js';
-import { DEFAULT_UNIT_NAME } from './chunk-6N4CYTHB.js';
-import './chunk-7EBXH2LK.js';
+import { DEFAULT_UNIT_NAME } from './chunk-A6MLCH76.js';
+import './chunk-3BGCXC3O.js';
 import './chunk-YYYRBYWG.js';
-import './chunk-427LS26N.js';
+import './chunk-5CZV4FZ5.js';
 import './chunk-3Z3MPR55.js';
-import './chunk-R6QCSHKC.js';
+import './chunk-KFA762LZ.js';
 import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-ZQ7VRXYM.js';
 import './chunk-UXYLWVTQ.js';
 import './chunk-YJLHUKYS.js';
-import './chunk-KCRUMHSL.js';
-import './chunk-VBXNRP5E.js';
-import './chunk-DSSDKQGX.js';
+import './chunk-KQFWTTG7.js';
+import './chunk-RLGSBR56.js';
+import './chunk-CMNAAKFD.js';
 import './chunk-EWVYQLD3.js';
 import './chunk-5DNCFOXA.js';
 import './chunk-HJYBWJAS.js';
 import './chunk-NSPRS7WK.js';
 import './chunk-G2JWZDFA.js';
 import './chunk-ANPNT6PM.js';
-import './chunk-VORMBXWO.js';
+import './chunk-YMGSMPPW.js';
 import './chunk-UIUGTW5C.js';
-import './chunk-M5B7QVWU.js';
+import './chunk-FLFK42YF.js';
 import './chunk-PJDQPF5N.js';
-import './chunk-IZDBVUBY.js';
-import './chunk-IX6EADX7.js';
+import './chunk-634F6J3Q.js';
+import './chunk-MBGS33SL.js';
 import { claudeEnvPath } from './chunk-D5ZGMXUL.js';
-import './chunk-ZPSS4CVW.js';
+import './chunk-ZANK3WWF.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-2O5KA67H.js';
 import './chunk-BKO6JEZI.js';

package/dist/{chunk-IOF4N6ED.js → chunk-33SMNWZX.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-NVU7QK3A.js';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-GMMHAUBZ.js';
-import { MIN_ENGINE_MAJOR } from './chunk-6QHLXYS2.js';
+import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-HDD3BKAE.js';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-F5HZT672.js';
+import { MIN_ENGINE_MAJOR } from './chunk-JDKLORO3.js';
 import { runnerCredentialProblem } from './chunk-ZQ7VRXYM.js';
-import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-IX6EADX7.js';
+import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-MBGS33SL.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
 import { dirname } from 'path';
 

package/dist/{chunk-7EBXH2LK.js → chunk-3BGCXC3O.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { formatBytes, freeBytes } from './chunk-YYYRBYWG.js';
-import { BUILD_LABEL, RUNNER_LABEL, runnerLabelValue } from './chunk-427LS26N.js';
+import { BUILD_LABEL, RUNNER_LABEL, runnerLabelValue } from './chunk-5CZV4FZ5.js';
 import { parseSize } from './chunk-YJLHUKYS.js';
-import { buildsDir, rootfsDir, runnerDir } from './chunk-IX6EADX7.js';
+import { buildsDir, rootfsDir, runnerDir } from './chunk-MBGS33SL.js';
 import { spawnSync } from 'child_process';
 import { existsSync, statSync, readdirSync } from 'fs';
 import { join } from 'path';

package/dist/{chunk-IJXZFFW4.js → chunk-4AHKR3K5.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { checkStarterFiles, contextIsGoverned } from './chunk-BJQ25STI.js';
-import { fleetCheck, checkBuildSkill, checkMachineSkills, checkCommittedMaintainedSkills, checkMaintainedReferences } from './chunk-XR4HMWQI.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-KCRUMHSL.js';
-import { isLinkedRepository } from './chunk-DSSDKQGX.js';
+import { fleetCheck, checkBuildSkill, checkMachineSkills, checkCommittedMaintainedSkills, checkMaintainedReferences } from './chunk-LOYLFW4I.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-KQFWTTG7.js';
+import { isLinkedRepository } from './chunk-CMNAAKFD.js';
 import { sanitizeTerminal } from './chunk-EWVYQLD3.js';
 import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-5DNCFOXA.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { checkFormerSkillNames } from './chunk-UIUGTW5C.js';
-import { resolveGatewayCredentials, defaultFetch } from './chunk-M5B7QVWU.js';
-import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-ZPSS4CVW.js';
+import { resolveGatewayCredentials, defaultFetch } from './chunk-FLFK42YF.js';
+import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-ZANK3WWF.js';
 import { readStatuslineState, STATE_FRESH_MS } from './chunk-I7RZHMXW.js';
 import { hookCommandEscapesControlPlane, CONTROL_PLANE_DIR_VARIABLE } from './chunk-HCVLP7XA.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
@@ -1190,7 +1190,7 @@ function doctorExitCode(checks) {
 
 // src/doctor-report.ts
 async function gatherDoctorChecks() {
-  const { DEFAULT_BUILD_DISK } = await import('./build-disk-5CI7FSX4.js');
+  const { DEFAULT_BUILD_DISK } = await import('./build-disk-4EEKP23Z.js');
   const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-WAIYUZUG.js');
   const configPath = defaultRunnerConfigPath();
   const runnerHost = hasRunnerBlock(configPath);
@@ -1212,7 +1212,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-SXCEI4PK.js');
+    const { runnerHostChecks } = await import('./doctor-KT4HGALK.js');
     const gateway = (() => {
       try {
         const { url, apiKey, appId } = loadRunnerConfig(configPath);
@@ -1240,7 +1240,7 @@ async function gatherDoctorChecks() {
       const { existsSync: existsSync3 } = await import('fs');
       if (process.platform !== "linux" || !existsSync3("/run/systemd/system")) return void 0;
       const { inspectService, realInspectProbes } = await import('./inspect-DNLXTXLA.js');
-      const { DEFAULT_UNIT_NAME } = await import('./install-TWT2WXEO.js');
+      const { DEFAULT_UNIT_NAME } = await import('./install-4OPPUC72.js');
       const { dirname: dirname2 } = await import('path');
       return inspectService(DEFAULT_UNIT_NAME, dirname2(configPath), realInspectProbes());
     })();

package/dist/{chunk-427LS26N.js → chunk-5CZV4FZ5.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { RecipeError } from './chunk-3Z3MPR55.js';
-import { BUILDKIT_IMAGE } from './chunk-R6QCSHKC.js';
+import { BUILDKIT_IMAGE } from './chunk-KFA762LZ.js';
 import { parseSize } from './chunk-YJLHUKYS.js';
 import { compareVersions } from './chunk-5DNCFOXA.js';
-import { ensureHostKey } from './chunk-IZDBVUBY.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, runnerDir, jobsDir } from './chunk-IX6EADX7.js';
+import { ensureHostKey } from './chunk-634F6J3Q.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, runnerDir, jobsDir } from './chunk-MBGS33SL.js';
 import { CLAUDE_PORT, JOB_MOUNT, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_SOCKET, RELAY_PORT, DESTINATION_BASE_PORT } from './chunk-D5ZGMXUL.js';
 import { JOIN_DIR, RELAY_ID, JOIN_SOCKET, TARGET_GATEWAY, TARGET_CLAUDE, destinationTarget, RELAY_USER } from './chunk-MESOOLF4.js';
 import { createHash } from 'crypto';

package/dist/{chunk-PETBUIR4.js → chunk-5KO3TN2F.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-IX6EADX7.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-MBGS33SL.js';
 import { readFileSync, existsSync, rmSync, mkdirSync, writeFileSync, renameSync } from 'fs';
 import { join } from 'path';
 

package/dist/{chunk-IZDBVUBY.js → chunk-634F6J3Q.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { hostKeyPath, runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-IX6EADX7.js';
+import { hostKeyPath, runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-MBGS33SL.js';
 import { generateKeyPairSync, createPrivateKey, createPublicKey, sign } from 'crypto';
 import { existsSync, mkdirSync, writeFileSync, readFileSync } from 'fs';
 

package/dist/{chunk-6N4CYTHB.js → chunk-A6MLCH76.js}

@@ -2,7 +2,7 @@
 import { createRequire } from 'node:module';
 import { builtinKind } from './chunk-ZQ7VRXYM.js';
 import { parseSize } from './chunk-YJLHUKYS.js';
-import { runnerDir } from './chunk-IX6EADX7.js';
+import { runnerDir } from './chunk-MBGS33SL.js';
 import { CLAUDE_CREDENTIAL_ID, CLAUDE_ENV_FILE, credentialLineIn, withoutCredentialLines } from './chunk-D5ZGMXUL.js';
 import { FD_SLOTS_PER_BUILD, FD_STORE_ENV } from './chunk-HACGUL52.js';
 import { existsSync, readFileSync, writeFileSync, chmodSync, renameSync } from 'fs';

package/dist/{chunk-DSSDKQGX.js → chunk-CMNAAKFD.js}

@@ -4,7 +4,7 @@ import { sanitizeTerminal } from './chunk-EWVYQLD3.js';
 import { remoteLookupFailed } from './chunk-5DNCFOXA.js';
 import { isAgentsMdLayout } from './chunk-HJYBWJAS.js';
 import { DEFAULT_DASHBOARD } from './chunk-NSPRS7WK.js';
-import { cliFetch, resolveGatewayCredentials } from './chunk-M5B7QVWU.js';
+import { cliFetch, resolveGatewayCredentials } from './chunk-FLFK42YF.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
 import { findGitDirs, writeRepoConnection, readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';

package/dist/{chunk-HAD7LYDL.js → chunk-COLOLDY3.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { BRIDGE_ADDRESS, TUNNEL_PORT, BRIDGE_CIDR } from './chunk-TTACRX4N.js';
+import { TUNNEL_PORT, BRIDGE_ADDRESS, BRIDGE_CIDR } from './chunk-TTACRX4N.js';
 import { startTimeOf } from './chunk-JBJTC3UU.js';
 import { EXEC_PORT } from './chunk-O5F376JJ.js';
 import { RELAY_PORT } from './chunk-D5ZGMXUL.js';
 import { spawn, spawnSync } from 'child_process';
-import { symlinkSync, lstatSync, writeFileSync, chmodSync, mkdirSync } from 'fs';
+import { symlinkSync, lstatSync, writeFileSync, chmodSync, mkdirSync, existsSync } from 'fs';
 
 createRequire(import.meta.url);
 var HELPER_PATH = "/opt/outerlayer/bin/outerlayer-guest";
@@ -19,9 +19,17 @@ var DOCKER_DATA_ROOT = "/build/docker";
 var BUILD_DISK = "/dev/vdb";
 var HOSTNAME = "outerlayer-build";
 var HOSTS = "127.0.0.1 localhost\n::1 localhost ip6-localhost ip6-loopback\n";
-var RESOLV_CONF = "# This microVM has no network device. Names are resolved by the runner's proxy.\n";
+var NAME_SERVER = "127.0.0.53";
+var RESOLV_CONF = `# The guest helper answers every lookup. The runner's tunnel resolves a name when a program connects to it.
+nameserver ${NAME_SERVER}
+`;
+var NSSWITCH_CONF = "hosts: files dns\n";
+var NSSWITCH_PATH = "/etc/nsswitch.conf";
+var NET_READY = "/run/outerlayer-net.ready";
+var TUN_DEVICE = "tun0";
 var BUILD_DIRECTORIES = ["/build/tmp", "/build/home", "/build/work"];
 var WORLD_WRITABLE = 1023;
+var NET_READY_TIMEOUT_MS = 3e4;
 function relayPortsFrom(cmdline) {
   const value = new RegExp(`(?:^|\\s)${KERNEL_FLAG.replace(".", "\\.")}=(\\S*)`).exec(cmdline)?.[1];
   if (value === void 0 || value === "") return [];
@@ -89,6 +97,7 @@ function runGuestInit(host, cmdline) {
 `],
     ["resolv.conf", RESOLV_CONF]
   ];
+  if (!host.exists(NSSWITCH_PATH)) files.push(["nsswitch.conf", NSSWITCH_CONF]);
   for (const [name, text] of files) {
     host.writeFile(`/run/${name}`, text);
     host.mount({ source: `/run/${name}`, target: `/etc/${name}`, bind: true });
@@ -96,15 +105,32 @@ function runGuestInit(host, cmdline) {
   host.writeFile("/proc/sys/kernel/hostname", HOSTNAME);
   host.mount({ source: "tmpfs", target: "/outerlayer/job", type: "tmpfs", options: "mode=0755" });
   const relay = host.spawnDetached([HELPER_PATH, "relay", ...ports.flatMap((port) => ["--forward", String(port)])]);
+  const net = host.spawnDetached([HELPER_PATH, "net", "--tun", TUN_DEVICE, "--dns", `${NAME_SERVER}:53`, "--tunnel-port", String(TUNNEL_PORT)]);
+  host.waitForFile(NET_READY);
   if (dockerRequestedBy(cmdline)) {
     startBridgeForwarder(host);
     startDocker(host);
   }
   const agent = host.spawnDetached([HELPER_PATH, "exec-agent", "--port", String(EXEC_PORT)]);
-  host.writeFile(HELPER_RECORD, [relay, agent].map((started) => `${started.pid} ${started.start}
+  host.writeFile(HELPER_RECORD, [relay, net, agent].map((started) => `${started.pid} ${started.start}
 `).join(""));
 }
-function realGuestHost() {
+var PAUSE_MS = 20;
+function realProbe() {
+  return {
+    now: () => Date.now(),
+    exists: (path) => existsSync(path),
+    sleep: (ms) => void Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms)
+  };
+}
+function waitForPath(path, timeoutMs, probe = realProbe()) {
+  const deadline = probe.now() + timeoutMs;
+  while (!probe.exists(path)) {
+    if (probe.now() > deadline) throw new Error(`${path} did not appear within ${timeoutMs / 1e3} seconds; the guest helper's network stack did not start`);
+    probe.sleep(PAUSE_MS);
+  }
+}
+function realGuestHost(netReadyTimeoutMs = NET_READY_TIMEOUT_MS) {
   return {
     mount(args) {
       const argv = ["mount", "--target", args.target];
@@ -127,6 +153,7 @@ function realGuestHost() {
       }
     },
     symlink: (target, path) => symlinkSync(target, path),
+    waitForFile: (path) => waitForPath(path, netReadyTimeoutMs),
     warn: (text) => void process.stderr.write(`${text}
 `),
     spawnDetached(argv) {
@@ -141,4 +168,4 @@ function realGuestHost() {
   };
 }
 
-export { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD, realGuestHost, relayPortsFrom, runGuestInit };
+export { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD, realGuestHost, relayPortsFrom, runGuestInit, waitForPath };

package/dist/{chunk-64P3ZIGA.js → chunk-DZGLRVS3.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { launcherPath, writeLauncher, LauncherWriteError, pathNotes } from './chunk-CBJTDU2Z.js';
-import { currentVersion, currentLink, isInLayout, packageRootIn, versionDir, switchCurrent, execStartLine } from './chunk-USCRSIES.js';
+import { launcherPath, writeLauncher, LauncherWriteError, pathNotes } from './chunk-Y53T3QZM.js';
+import { currentVersion, currentLink, isInLayout, packageRootIn, versionDir, switchCurrent, execStartLine } from './chunk-O7MSQBTH.js';
 import { compareVersions } from './chunk-TQMI335S.js';
-import { RUNNER_DIR_MODE } from './chunk-IX6EADX7.js';
+import { RUNNER_DIR_MODE } from './chunk-MBGS33SL.js';
 import { realpathSync, readFileSync, mkdirSync, rmSync, cpSync, existsSync } from 'fs';
 import { dirname, sep, join } from 'path';
 

package/dist/{chunk-25JWQ3PF.js → chunk-EBX2DU2M.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
-import { autoConnect, detectActiveSession } from './chunk-VBXNRP5E.js';
+import { autoConnect, detectActiveSession } from './chunk-RLGSBR56.js';
 import { acquireSpoolLockAt } from './chunk-EWVYQLD3.js';
 import { resolveRepoIdentity } from './chunk-5DNCFOXA.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-M5B7QVWU.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-FLFK42YF.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { StepNameSchema, StepBodySchema } from './chunk-E6CO3MJE.js';

package/dist/{chunk-GMMHAUBZ.js → chunk-F5HZT672.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { MIN_ENGINE_MAJOR } from './chunk-6QHLXYS2.js';
-import { runnerImageVersion } from './chunk-ILHDLZKE.js';
-import { firecrackerArch, MICROVM_ARCHES, guestAssetsPinned } from './chunk-R6QCSHKC.js';
+import { MIN_ENGINE_MAJOR } from './chunk-JDKLORO3.js';
+import { runnerImageVersion } from './chunk-PWB7EK4Z.js';
+import { firecrackerArch, MICROVM_ARCHES, guestAssetsPinned } from './chunk-KFA762LZ.js';
 import { spawnSync } from 'child_process';
 import { existsSync, accessSync, constants, statSync, readFileSync } from 'fs';
 

package/dist/{chunk-M5B7QVWU.js → chunk-FLFK42YF.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { readCloudConfigStrict, readCloudConfig, cloudConfigPath } from './chunk-PJDQPF5N.js';
-import { signRunnerRequest, signerFor } from './chunk-IZDBVUBY.js';
+import { signRunnerRequest, signerFor } from './chunk-634F6J3Q.js';
 import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
 import { PLAIN_VERSION, recordCliVersion, removeRecordedVersion } from './chunk-5BHIBJDA.js';
 import { resolvePackageVersion } from './chunk-RA3O54FC.js';

package/dist/{chunk-QY7BNRS6.js → chunk-FSFAP7GA.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
-import { detectActiveSession, autoConnect, transcriptPathForSession } from './chunk-VBXNRP5E.js';
+import { detectActiveSession, autoConnect, transcriptPathForSession } from './chunk-RLGSBR56.js';
 import { resolveRepoIdentity, defaultProjectsDir, findTranscripts, sessionIdFromPath, scrubText } from './chunk-5DNCFOXA.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-M5B7QVWU.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-FLFK42YF.js';
 import { readLatestProvenanceForSession } from './chunk-ZJSNLVCE.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';

package/dist/{chunk-NVU7QK3A.js → chunk-HDD3BKAE.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { DEFAULT_UNIT_NAME } from './chunk-6N4CYTHB.js';
-import { RUNNER_FILE_MODE } from './chunk-IX6EADX7.js';
+import { DEFAULT_UNIT_NAME } from './chunk-A6MLCH76.js';
+import { RUNNER_FILE_MODE } from './chunk-MBGS33SL.js';
 import { claudeEnvPath, withoutCredentialLines } from './chunk-D5ZGMXUL.js';
 import { parseRunnerEnv } from './chunk-HACGUL52.js';
 import { existsSync, readFileSync, writeFileSync, renameSync, rmSync } from 'fs';

package/dist/{chunk-FXTYLRFW.js → chunk-IQFX5GQH.js}

@@ -1,27 +1,27 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { readsJobState, READ_JOB_STATE_FORMATS, jobStateFormatOf } from './chunk-ZVB57WI6.js';
-import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-HAD7LYDL.js';
+import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-COLOLDY3.js';
 import { writeDockerClientConfig } from './chunk-TTACRX4N.js';
 import { zodProblem } from './chunk-I3LTIAOR.js';
-import { senderPidfile } from './chunk-7ZPHKBYH.js';
-import { installScrubContext } from './chunk-ZU4ZY7CZ.js';
-import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, helperFirecrackerNote, isLiteralAddress, stopJailed, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, ROOT_DISK_ID_PREFIX, copyJudgeTree } from './chunk-6QHLXYS2.js';
-import { readBranchHead, fetchCommit, diffBetween } from './chunk-KGLEUJZO.js';
+import { senderPidfile } from './chunk-JUVUVXQZ.js';
+import { installScrubContext } from './chunk-J6LFFZOY.js';
+import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, helperFirecrackerNote, isLiteralAddress, stopJailed, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, ROOT_DISK_ID_PREFIX, copyJudgeTree } from './chunk-JDKLORO3.js';
+import { readBranchHead, fetchCommit, diffBetween } from './chunk-MWAA3A5T.js';
 import { isSameProcess, startTimeOf } from './chunk-JBJTC3UU.js';
 import { waitForAgent, vmExecArgs } from './chunk-XXVYHC6D.js';
 import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-O5F376JJ.js';
-import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-VTCV2EIC.js';
-import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-427LS26N.js';
-import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-R6QCSHKC.js';
+import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-JKPJQNJF.js';
+import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-5CZV4FZ5.js';
+import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-KFA762LZ.js';
 import { imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-ZQ7VRXYM.js';
 import { parseSize } from './chunk-YJLHUKYS.js';
-import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-KCRUMHSL.js';
+import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-KQFWTTG7.js';
 import { planArtifactUpload } from './chunk-EWVYQLD3.js';
 import { scrubText } from './chunk-5DNCFOXA.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
-import { signerFor } from './chunk-IZDBVUBY.js';
-import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath } from './chunk-IX6EADX7.js';
+import { signerFor } from './chunk-634F6J3Q.js';
+import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath, jobConsolePath } from './chunk-MBGS33SL.js';
 import { JOB_MOUNT, claudeCredential, repositoriesOf, primaryOf, buildEnvironment, CHECKOUT_DIR, parseIsolation, proxyEnvironment, withProxyWarningHidden, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, withHooksPath, startBuildServices, BUILT_IN_NAMES, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, RELAY_PORT, repositoryPath, lifecycleWorkdir, CHECK_ITEMS_FILE, currentClaudeCredential, removedClaudeCredentialValues, checkEnvironment, EVAL_INPUT_DIR } from './chunk-D5ZGMXUL.js';
 import { resolvePackRoot } from './chunk-G63KT5I5.js';
 import { MAINTAINED_SKILLS } from './chunk-CDDED64E.js';
@@ -476,7 +476,7 @@ async function provisionMicroVm(input) {
     }
     if (state.cgroup !== void 0) input.save(state, environment);
   }
-  const consolePath = join(jobDir, "vm-console.log");
+  const consolePath = jobConsolePath(jobDir);
   if (helper !== void 0) {
     try {
       await startJailedInto(
@@ -872,7 +872,7 @@ async function startCheckMicroVm(input) {
   };
   const checksDir = join(jobDir, "checks");
   mkdirSync(checksDir, { recursive: true });
-  const consolePath = join(checksDir, "vm-console.log");
+  const consolePath = jobConsolePath(checksDir);
   input.save(state);
   const fail = async (reason) => {
     try {

package/dist/{chunk-ZU4ZY7CZ.js → chunk-J6LFFZOY.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { uploadSpooledSteps } from './chunk-25JWQ3PF.js';
+import { uploadSpooledSteps } from './chunk-EBX2DU2M.js';
 import { LaunchFilter } from './chunk-ESVW4MJY.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
 import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-EWVYQLD3.js';
 import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-5DNCFOXA.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { cliFetch, resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-M5B7QVWU.js';
+import { cliFetch, resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-FLFK42YF.js';
 import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-PJDQPF5N.js';
-import { signerFor, signRunnerRequest } from './chunk-IZDBVUBY.js';
-import { writeSyncStatus, spoolDir } from './chunk-ZPSS4CVW.js';
+import { signerFor, signRunnerRequest } from './chunk-634F6J3Q.js';
+import { writeSyncStatus, spoolDir } from './chunk-ZANK3WWF.js';
 import { readLatestProvenanceForSession, readContextProvenance } from './chunk-ZJSNLVCE.js';
 import { hookExecSpoolPath } from './chunk-2O5KA67H.js';
 import { applyReportedCost } from './chunk-BKO6JEZI.js';