@outerlayer/cli 0.33.0-next.20261022195547 → 0.33.0-next.20261023003700

package/dist/{chunk-L6JFFP3Q.js → chunk-PWH3BEZF.js}

@@ -1,28 +1,28 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { readsJobState, READ_JOB_STATE_FORMATS, jobStateFormatOf } from './chunk-ZVB57WI6.js';
-import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-W5DOK7BL.js';
-import { writeDockerClientConfig } from './chunk-QL3LPZ67.js';
+import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-HVRQQOMH.js';
+import { writeDockerClientConfig } from './chunk-6LBSAW6I.js';
 import { zodProblem } from './chunk-I3LTIAOR.js';
-import { senderPidfile } from './chunk-QDMMW5PC.js';
-import { installScrubContext } from './chunk-3MXPS7ED.js';
-import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, helperFirecrackerNote, isLiteralAddress, stopJailed, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, ROOT_DISK_ID_PREFIX, copyJudgeTree } from './chunk-D3HRAPNF.js';
-import { readBranchHead, fetchCommit, diffBetween } from './chunk-KLXWS5Z7.js';
+import { senderPidfile } from './chunk-Q2CMEQV7.js';
+import { installScrubContext } from './chunk-2N67C6IV.js';
+import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, startHostServices, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, closeHostBuild, containerSenderCommand, hostCommandEnvironment, execArgv, signalInContainer, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, helperFirecrackerNote, stopJailed, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, ROOT_DISK_ID_PREFIX, copyJudgeTree } from './chunk-2EGCI2VW.js';
+import { readBranchHead, fetchCommit, diffBetween } from './chunk-YXHKCHWG.js';
 import { isSameProcess, startTimeOf } from './chunk-JBJTC3UU.js';
-import { waitForAgent, vmExecArgs } from './chunk-6NWS455T.js';
-import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-LWTBE5J6.js';
-import { describeCallFailure, resolveGoverningSource, prefetchGovernedContext, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-RBJG5MM4.js';
-import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-43PV5KDB.js';
-import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-TGHBOXKJ.js';
-import { imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-5BNWAIHN.js';
-import { parseSize } from './chunk-YJLHUKYS.js';
-import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-CMKY36NV.js';
+import { waitForAgent, vmExecArgs } from './chunk-5THSC6BD.js';
+import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-L26V6ILJ.js';
+import { describeCallFailure, resolveGoverningSource, prefetchGovernedContext, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-T5REPMNL.js';
+import { imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-RQJMN5TJ.js';
+import { DEFAULT_CACHE_DISK, formatBytes, allocatedBytes } from './chunk-W2AEL4BJ.js';
+import { parseSize, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-FR7HWWCF.js';
+import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-NE63JADS.js';
+import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-VT4TTJPG.js';
 import { planArtifactUpload } from './chunk-EWVYQLD3.js';
 import { scrubText } from './chunk-5DNCFOXA.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
-import { signerFor } from './chunk-AA6LYZC4.js';
-import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath, jobConsolePath } from './chunk-AGZNCIIJ.js';
-import { JOB_MOUNT, claudeCredential, repositoriesOf, primaryOf, buildEnvironment, CHECKOUT_DIR, parseIsolation, proxyEnvironment, withProxyWarningHidden, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, withHooksPath, startBuildServices, BUILT_IN_NAMES, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, buildMavenSettingsXml, mavenSettingsXml, namesGlobalSettings, MAVEN_NO_PROXY_NOTE, mavenArgs, MAVEN_SPACE_NOTE, writeMavenSettings, RELAY_PORT, repositoryPath, lifecycleWorkdir, CHECK_ITEMS_FILE, MAVEN_SETTINGS_FILE, currentClaudeCredential, removedClaudeCredentialValues, checkEnvironment, EVAL_INPUT_DIR } from './chunk-BCCI32ME.js';
+import { signerFor } from './chunk-SOI6K5DY.js';
+import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath, jobConsolePath } from './chunk-PA6CK6WQ.js';
+import { JOB_MOUNT, claudeCredential, repositoriesOf, primaryOf, buildEnvironment, CHECKOUT_DIR, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, buildMavenSettingsXml, RELAY_PORT, repositoryPath, lifecycleWorkdir, CHECK_ITEMS_FILE, MAVEN_SETTINGS_FILE, CLAUDE_CREDENTIAL_VARIABLES, currentClaudeCredential, removedClaudeCredentialValues, checkEnvironment, EVAL_INPUT_DIR } from './chunk-BALIE3BA.js';
 import { resolvePackRoot } from './chunk-G63KT5I5.js';
 import { MAINTAINED_SKILLS } from './chunk-CDDED64E.js';
 import { resolveVersion } from './chunk-RA3O54FC.js';
@@ -31,8 +31,8 @@ import { CheckItemsSchema, CHECK_ITEM_REASON_MAX_LENGTH } from './chunk-E6CO3MJE
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { fdName } from './chunk-HACGUL52.js';
 import { RUNNER_WORDED_REASONS, UNKNOWN_TRACKING_REASON } from './chunk-MESOOLF4.js';
-import { existsSync, statSync, appendFileSync, rmSync, mkdirSync, chmodSync, writeFileSync, accessSync, constants, openSync, readFileSync, closeSync, readdirSync, lstatSync, fstatSync, readSync, realpathSync } from 'fs';
-import { join, isAbsolute, dirname, delimiter, sep } from 'path';
+import { existsSync, statSync, appendFileSync, rmSync, mkdirSync, chmodSync, writeFileSync, openSync, readFileSync, closeSync, readdirSync, lstatSync, fstatSync, readSync, realpathSync } from 'fs';
+import { join, dirname, delimiter, sep } from 'path';
 import { once } from 'events';
 import { createServer } from 'net';
 import { spawn, spawnSync } from 'child_process';
@@ -355,7 +355,7 @@ async function provisionMicroVm(input) {
       inBuilder: {
         kernel: assets.kernel,
         firecracker: assets.firecracker,
-        limits,
+        limits: { ...limits, cacheDiskBytes: parseSize(config.build?.cacheDisk ?? DEFAULT_CACHE_DISK) ?? parseSize(DEFAULT_CACHE_DISK) },
         memory: config.build?.memory,
         allowHosts: config.build?.allowHosts,
         managed: config.managed === true,
@@ -442,7 +442,7 @@ async function provisionMicroVm(input) {
   let services;
   try {
     const gitRemote = gitRemoteFor(runtime, { repositories, tokens, buildDir: buildDir2, log: (line) => log.line(`${tag} ${line}`) });
-    services = await startServicesFor(runtime, config, buildDir2, jobDir, itemKey, true, gitRemote);
+    services = await startServicesFor(runtime, config, buildDir2, jobDir, itemKey, true, gitRemote, "socket", void 0, void 0, (line) => log.line(`${tag} ${line}`));
     runtime.tunnels.set(buildId, services);
   } catch (err) {
     return bail(`the tunnel could not start: ${describeCallFailure(err)}`);
@@ -627,7 +627,8 @@ async function provisionMicroVm(input) {
       }
     },
     removeStagedContext: () => removeStagedContext(buildDir2),
-    keepIn: jobDir
+    keepIn: jobDir,
+    ...input.requireBuildSkill === true ? { requireBuildSkill: true } : {}
   });
   if (!steps.ok) return bail(steps.reason, steps.aborted === true);
   state.startCommit = steps.startCommit;
@@ -1049,7 +1050,7 @@ async function stopBuildMicroVm(runtime, state, jobDir) {
   await runtime.vm.firecracker.stop(state.firecracker);
   if (runtime.vm.firecracker.alive(state.firecracker)) throw new Error(`the microVM (pid ${state.firecracker.pid}) is still running after it was stopped`);
 }
-async function cleanupMicroVm(runtime, state, jobDir, warn) {
+async function cleanupMicroVm(runtime, state, jobDir, warn, onBuildDisk) {
   const failures = [];
   if (jobDir !== void 0) await copyHookErrors(runtime, state, jobDir);
   if (state.jailed !== void 0) {
@@ -1073,6 +1074,13 @@ async function cleanupMicroVm(runtime, state, jobDir, warn) {
       failures.push(`the build's cgroup ${state.cgroup} was not removed: ${describeCallFailure(err)}`);
     }
   }
+  if (state.buildDisk !== void 0 && existsSync(state.buildDisk)) {
+    try {
+      onBuildDisk?.(allocatedBytes(state.buildDisk));
+    } catch (err) {
+      failures.push(`the build disk's peak size was not recorded: ${describeCallFailure(err)}`);
+    }
+  }
   if (state.buildDisk !== void 0) deleteBuildDisk(state.buildDisk);
   runtime.leases.get(state.buildId)?.close();
   runtime.leases.delete(state.buildId);
@@ -1216,262 +1224,6 @@ async function sampleGuest(runtime, state) {
     return void 0;
   }
 }
-function provisionEnvironment(base, input) {
-  return {
-    ...base,
-    OUTERLAYER_BUILD_DIR: input.buildDir,
-    ...input.repository === void 0 || input.repository === null || input.repository === "" ? {} : { OUTERLAYER_REPOSITORY: input.repository },
-    ...input.recipeCommit === void 0 ? {} : { OUTERLAYER_RECIPE_COMMIT: input.recipeCommit },
-    OUTERLAYER_MEMORY: input.limits.memory,
-    OUTERLAYER_CPUS: String(input.limits.cpus),
-    OUTERLAYER_PIDS: String(input.limits.pids),
-    OUTERLAYER_DISK: input.limits.disk
-  };
-}
-function unspecified(address) {
-  if (!address.includes(":")) return address === "0.0.0.0";
-  const normal = new URL(`http://[${address}]/`).hostname;
-  return normal === "[::]" || normal === "[::ffff:0:0]";
-}
-function parseBroker(text2) {
-  const match = /^(?:\[([0-9a-fA-F:.]+)\]|([0-9.]+)):(\d{1,5})$/.exec(text2);
-  if (match === null) return void 0;
-  const host = match[1] ?? match[2];
-  const port = Number(match[3]);
-  if (!isLiteralAddress(host) || unspecified(host) || port < 1 || port > 65535) return void 0;
-  return { host, port, text: text2 };
-}
-function readReport(path) {
-  const named = `provision.out names recipe ${path}`;
-  if (!isAbsolute(path)) return { problem: `${named}, which is not an absolute path` };
-  let text2;
-  try {
-    text2 = readFileSync(path, "utf8");
-  } catch {
-    return { problem: `${named}, which does not exist` };
-  }
-  try {
-    const parsed = JSON.parse(text2);
-    const lifecycle = parsed.apply?.lifecycle;
-    if (typeof parsed.sourceCommit === "string" && typeof parsed.recipeKey === "string" && typeof parsed.imageId === "string" && typeof lifecycle === "object" && lifecycle !== null && Object.values(lifecycle).every((entries) => Array.isArray(entries) && entries.every((entry) => typeof entry === "object" && entry !== null))) {
-      return { report: { ...parsed, ignored: Array.isArray(parsed.ignored) ? parsed.ignored : [] } };
-    }
-  } catch {
-  }
-  return { problem: `${named}, which is not a recipe report` };
-}
-function resolveHostBuild(keys) {
-  const build = { isolation: parseIsolation(keys.isolation) };
-  if (keys.exec !== void 0) {
-    const named = `provision.out names exec ${keys.exec}`;
-    if (!isAbsolute(keys.exec)) return { ok: false, reason: `${named}, which is not an absolute path` };
-    try {
-      if (!statSync(keys.exec).isFile()) return { ok: false, reason: `${named}, which is not an executable file` };
-      accessSync(keys.exec, constants.X_OK);
-    } catch {
-      return { ok: false, reason: `${named}, which is not an executable file` };
-    }
-    build.exec = keys.exec;
-  }
-  if (keys.broker !== void 0) {
-    const broker = parseBroker(keys.broker);
-    if (broker === void 0) {
-      return { ok: false, reason: `provision.out names broker ${keys.broker}, which is not <IP>:<port> with a literal address that is not 0.0.0.0 or ::` };
-    }
-    build.broker = broker;
-  }
-  if (keys.recipe !== void 0) {
-    const read = readReport(keys.recipe);
-    if ("problem" in read) return { ok: false, reason: read.problem };
-    build.recipe = read.report;
-    build.recipePath = keys.recipe;
-  }
-  return { ok: true, build };
-}
-function hostEnvironment(build, cliVersion) {
-  const report = build.recipe;
-  return {
-    isolation: build.isolation,
-    ...report === void 0 ? {} : {
-      recipe: { sourceCommit: report.sourceCommit, key: report.recipeKey, path: report.recipe },
-      imageId: report.imageId,
-      ignoredProperties: report.ignored.map(({ property, source }) => ({ property, source }))
-    },
-    cliVersion
-  };
-}
-var CD_INTO_WORKDIR = 'cd -- "$0" && exec "$@"';
-function execArgv(workdir, argv) {
-  return ["/bin/sh", "-c", CD_INTO_WORKDIR, workdir, ...argv];
-}
-function execCommandLine(exec, workdir, cmdline) {
-  return [exec, ...execArgv(workdir, ["/bin/sh", "-c", cmdline])].map(shellQuote).join(" ");
-}
-function proxyUrlFor(build) {
-  if (build.broker === void 0) return `http://127.0.0.1:${RELAY_PORT}`;
-  return `http://${build.broker}`;
-}
-function withMavenArgs(env, settingsFile, note) {
-  const team = env.MAVEN_ARGS;
-  if (team !== void 0 && namesGlobalSettings(team)) {
-    note?.(MAVEN_NO_PROXY_NOTE);
-    return;
-  }
-  if (settingsFile !== void 0) env.MAVEN_ARGS = mavenArgs(settingsFile, team).value;
-}
-function hostMavenSettings(env, buildDir2, note) {
-  if (/\s/.test(buildDir2)) {
-    note?.(MAVEN_SPACE_NOTE);
-    return void 0;
-  }
-  if (!existsSync(buildDir2)) return void 0;
-  try {
-    return writeMavenSettings(buildDir2, env.HTTPS_PROXY, env.NO_PROXY);
-  } catch (err) {
-    note?.(`the build's Maven settings could not be written, so its Maven gets no proxy from the runner: ${describeCallFailure(err)}`);
-    return void 0;
-  }
-}
-function execProxyEnvironment(build) {
-  const brokerHost = build.broker === void 0 ? void 0 : build.broker.slice(0, build.broker.lastIndexOf(":")).replace(/^\[|\]$/g, "");
-  return proxyEnvironment(proxyUrlFor(build), brokerHost);
-}
-var WRITE_MAVEN_SETTINGS = 'd=$(git rev-parse --absolute-git-dir) || exit 1; d="$d/outerlayer/maven"; mkdir -p "$d" && printf "%s" "$1" > "$d/settings.xml" && printf "%s\\n" "$d/settings.xml"';
-var MAVEN_WRITE_TIMEOUT_MS = 1e4;
-function runWithSpawn(spawnFn = spawn) {
-  return (file, args, env, timeoutMs) => new Promise((resolve) => {
-    let stdout = "";
-    let stderr = "";
-    let timer;
-    let settled = false;
-    const finish = (result) => {
-      if (settled) return;
-      settled = true;
-      if (timer !== void 0) clearTimeout(timer);
-      resolve({ status: null, signal: null, stdout, stderr, ...result });
-    };
-    let child;
-    try {
-      child = spawnFn(file, args, { env, stdio: ["ignore", "pipe", "pipe"] });
-    } catch (err) {
-      finish({ error: err instanceof Error ? err : new Error(String(err)) });
-      return;
-    }
-    timer = setTimeout(() => {
-      child.kill("SIGKILL");
-      finish({ error: new Error(`it did not finish in ${timeoutMs / 1e3}s`) });
-    }, timeoutMs);
-    child.stdout?.on("data", (chunk) => {
-      stdout += String(chunk);
-    });
-    child.stderr?.on("data", (chunk) => {
-      stderr += String(chunk);
-    });
-    child.on("error", (err) => finish({ error: err }));
-    child.on("close", (status, signal) => finish({ status, signal }));
-  });
-}
-async function deliverMavenSettings(build, workdir, base, run, timeoutMs = MAVEN_WRITE_TIMEOUT_MS) {
-  if (build.exec === void 0) return { reason: "the build has no exec" };
-  const env = { ...base, ...execProxyEnvironment(build) };
-  const ran = await run(build.exec, execArgv(workdir, ["/bin/sh", "-c", WRITE_MAVEN_SETTINGS, "sh", mavenSettingsXml(env.HTTPS_PROXY, env.NO_PROXY)]), env, timeoutMs);
-  if (ran.error !== void 0) return { reason: describeCallFailure(ran.error) };
-  const said = ran.stderr.trim().split("\n")[0];
-  if (ran.status !== 0) return { reason: `the write exited ${ran.status ?? ran.signal}${said === "" ? "" : `: ${said}`}` };
-  const lines = ran.stdout.trim().split("\n");
-  const path = lines[lines.length - 1].trim();
-  if (!isAbsolute(path)) return { reason: "the write did not report an absolute path" };
-  if (/\s/.test(path)) return { reason: MAVEN_SPACE_REASON };
-  return { path };
-}
-var MAVEN_SPACE_REASON = "the settings file's path has whitespace in it, which Maven cannot read from MAVEN_ARGS";
-async function deliverExecMaven(build, workdir, base, run, note) {
-  if (build?.exec === void 0) return;
-  const delivered = await deliverMavenSettings(build, workdir, base, run);
-  if ("path" in delivered) build.mavenSettings = delivered.path;
-  else note(`the build's Maven gets no proxy from the runner: ${delivered.reason}`);
-}
-function onceNote(write) {
-  const seen = /* @__PURE__ */ new Set();
-  return (line) => {
-    if (seen.has(line)) return;
-    seen.add(line);
-    write(line);
-  };
-}
-function attemptNote(log, tag) {
-  return onceNote((line) => log.line(`${tag} ${line}`));
-}
-function hostCommandEnvironment(base, build, config, hooksPath, note) {
-  let env = { ...base };
-  if (build.exec !== void 0) {
-    Object.assign(env, execProxyEnvironment(build));
-    withMavenArgs(env, build.mavenSettings, note);
-  } else if (build.proxyPort !== void 0) {
-    Object.assign(env, proxyEnvironment(`http://127.0.0.1:${build.proxyPort}`));
-    env.NODE_OPTIONS = withProxyWarningHidden(env.NODE_OPTIONS);
-    withMavenArgs(env, hostMavenSettings(env, build.buildDir, note), note);
-  }
-  const ports = build.destinations ?? [];
-  const portOf = (name) => ports.find((entry) => entry.name === name)?.port;
-  (config.build?.destinations ?? []).forEach((destination, index) => {
-    const port = portOf(destination.name);
-    const address = build.exec !== void 0 ? containerLocalAddress(index) : port === void 0 ? void 0 : `http://127.0.0.1:${port}/`;
-    if (address !== void 0) Object.assign(env, destinationEnvironment([destination], () => address));
-  });
-  if (build.builtIns === true) {
-    const credential = claudeCredential(base);
-    for (const name of CLAUDE_CREDENTIAL_VARIABLES) delete env[name];
-    Object.assign(env, builtInEnvironment((name) => `http://127.0.0.1:${portOf(name) ?? 0}`, credential));
-  }
-  if (build.exec === void 0 && hooksPath !== void 0) env = withHooksPath(env, hooksPath);
-  return env;
-}
-async function startHostServices(input) {
-  const { runtime, config, build } = input;
-  const destinations = config.build?.destinations ?? [];
-  const services = await startBuildServices({
-    startTunnel: runtime.startTunnel,
-    tunnelOptions: runtime.tunnelOptions,
-    buildDir: build.buildDir,
-    jobDir: input.jobDir,
-    destinations,
-    allowHosts: config.build?.allowHosts,
-    serve: input.process ? "tcp" : "both",
-    proxy: input.process,
-    ...input.process ? { builtIns: { gatewayUrl: config.url, itemKey: input.itemKey, claudeUpstream: runtime.claudeUpstream } } : {},
-    ports: {
-      proxy: build.proxyPort,
-      destinations: build.destinations?.filter((d) => !BUILT_IN_NAMES.includes(d.name)).map((d) => d.port),
-      builtIns: Object.fromEntries((build.destinations ?? []).filter((d) => BUILT_IN_NAMES.includes(d.name)).map((d) => [d.name, d.port]))
-    },
-    hostEnv: runtime.hostEnv,
-    destinationOptions: runtime.destinationOptions
-  });
-  build.proxyPort = services.proxyPort;
-  build.destinations = [
-    ...destinations.map((destination, index) => ({ name: destination.name, port: services.destinationPorts[index] })),
-    ...Object.entries(services.builtInPorts).map(([name, port]) => ({ name, port }))
-  ];
-  if (input.process) build.builtIns = true;
-  runtime.tunnels.set(build.buildId, services);
-  if (build.broker !== void 0) await listenOnBroker(services, build.broker);
-  return services;
-}
-async function listenOnBroker(tunnel, broker) {
-  const parsed = parseBroker(broker);
-  if (parsed === void 0) throw new Error(`${broker} is not a broker address`);
-  await tunnel.listenTcp({ host: parsed.host, port: parsed.port });
-}
-async function closeHostBuild(runtime, build) {
-  const tunnel = runtime.tunnels.get(build.buildId);
-  if (tunnel !== void 0) {
-    runtime.tunnels.delete(build.buildId);
-    await tunnel.close();
-  }
-  rmSync(build.buildDir, { recursive: true, force: true });
-  if (build.workDir !== void 0) rmSync(build.workDir, { recursive: true, force: true });
-}
 
 // src/runner/verdict.ts
 var VERDICT_SETTLE_MS = 5 * 6e4;
@@ -1564,6 +1316,7 @@ function isTailedStage(stage) {
   const tailed = ["provision", "sync", "cleanup", "report"];
   return tailed.includes(stage);
 }
+var PROVISION_PROBLEM = /\b(warn(ing)?|error|fail(ed|ure)?|refused)\b/i;
 var READ_LIMIT_BYTES = 1048576;
 var ITEM_LINE = /^#(\d+)\b/;
 var AttemptLogBook = class {
@@ -1668,6 +1421,11 @@ function buildReleaseLog(jobDirPath, endStage, scrub) {
     const tail = stage === void 0 ? [] : lastLines(stage);
     if (tail.length > 0) parts.push(`--- the last ${tail.length} lines of ${file} ---`, ...tail);
   }
+  if (endStage !== "provision") {
+    const provision = readEnd(join(jobDirPath, "provision.log"), READ_LIMIT_BYTES);
+    const problems = provision === void 0 ? [] : provision.split("\n").filter((line) => PROVISION_PROBLEM.test(line)).slice(-50);
+    if (problems.length > 0) parts.push(`--- provision problems (${problems.length} lines of provision.log) ---`, ...problems);
+  }
   if (parts.length === 0) return void 0;
   return capRunnerLog(scrub(parts.join("\n")) + "\n");
 }
@@ -1696,7 +1454,7 @@ async function provisionProcess(input) {
   mkdirSync(buildDir2, { recursive: true });
   chmodSync(buildDir2, 493);
   try {
-    await startHostServices({ runtime, config, build: state, jobDir, itemKey: input.itemKey, process: true });
+    await startHostServices({ runtime, config, build: state, jobDir, itemKey: input.itemKey, process: true, routeLog: (line) => input.log.line(`#${item.number} ${line}`) });
   } catch (err) {
     return bail(`the tunnel could not start: ${describeCallFailure(err)}`);
   }
@@ -2919,7 +2677,8 @@ function scrubTunnelRecord(record, config) {
     hostsMore: record.hostsMore,
     refusalsMore: record.refusalsMore,
     refusals: record.refusals.map((r) => ({ ...r, host: scrubText(r.host) })),
-    destinations: (record.destinations ?? []).map((name) => scrubText(name))
+    destinations: (record.destinations ?? []).map((name) => scrubText(name)),
+    ...record.routes === void 0 ? {} : { routes: Object.fromEntries(Object.entries(record.routes).map(([name, counts]) => [scrubText(name), counts])) }
   };
 }
 function runCommand(cmdline, env, cwd, logPath, spawnFn = spawn) {
@@ -3054,6 +2813,9 @@ async function releaseLease(config, item, outcome, detail, fetchImpl) {
         sent = "ok";
       } else if (log !== void 0 && /\blog\b/.test(err.message)) {
         log = void 0;
+      } else if (environment?.routes !== void 0) {
+        const { routes: _omittedRoutes, ...withoutRoutes } = environment;
+        environment = withoutRoutes;
       } else if (environment?.guestUsage !== void 0) {
         const { guestUsage: _omittedUsage, ...withoutUsage } = environment;
         environment = withoutUsage;
@@ -3324,7 +3086,17 @@ async function finishJob(job, jobDirPath, outcome, config, deps, ending) {
       let cleanedUp = true;
       tunnelRecord = vmBuild.runtime.tunnels.get(vmBuild.state.buildId)?.record();
       try {
-        await cleanupMicroVm(vmBuild.runtime, vmBuild.state, jobDirPath, (text2) => log.error(`${tag} ${text2}`));
+        await cleanupMicroVm(
+          vmBuild.runtime,
+          vmBuild.state,
+          jobDirPath,
+          (text2) => log.error(`${tag} ${text2}`),
+          (bytes) => {
+            job.buildDiskPeakBytes = bytes;
+            writeJobFile(join(jobDirPath, "job.json"), job);
+            log.line(`${tag} build disk peak ${formatBytes(bytes)}`);
+          }
+        );
       } catch (err) {
         cleanedUp = false;
         log.error(`${tag} cleanup failed: ${describeCallFailure(err)} \xB7 continuing`);
@@ -3775,4 +3547,4 @@ async function stopSender(input) {
   }
 }
 
-export { ALREADY_RELEASED, AttemptLogBook, EXIT_CODE_FILE, GUEST_USAGE_INTERVAL_MS, MICROVM_COMMAND_DIR, RENEW_INTERVAL_SECONDS, appendCommandLog, attemptNote, commandLogOffset, deliverCommitHooks, deliverExecMaven, describeHookEnd, execArgv, execCommandLine, finishJob, foldSample, hookLimitsFor, hostCommandEnvironment, hostEnvironment, inTeardown, isContainerTracked, isGroupAlive, isIdle, isMicroVmTracked, isReadable, isTimedOut, isTracked, isUnfinished, jobEnv, judgeProbe, listAdoptableJobs, listTrackedJobs, listUnreadableJobs, listenOnBroker, microVmCommandLine, microVmOomKills, needsRenew, outcomeFromExitCode, probeCommand, probeMicroVmCommand, provisionEnvironment, provisionMicroVm, provisionProcess, readCpuUsec, readProvisionOut, recoverLostJobs, releaseLease, renewLease, resolveHostBuild, restartSender, retryFailedReleases, runCommand, runHook, runWithSpawn, sampleGuest, serveLease, setStage, startHostServices, startMicroVmCommand, startSender, stopOrphanedMicroVms, unfinishedJobs, vmAlive, workdirProblem, writeGuestGhConfig };
+export { ALREADY_RELEASED, AttemptLogBook, EXIT_CODE_FILE, GUEST_USAGE_INTERVAL_MS, MICROVM_COMMAND_DIR, RENEW_INTERVAL_SECONDS, appendCommandLog, commandLogOffset, deliverCommitHooks, describeHookEnd, finishJob, foldSample, hookLimitsFor, inTeardown, isContainerTracked, isGroupAlive, isIdle, isMicroVmTracked, isReadable, isTimedOut, isTracked, isUnfinished, jobEnv, judgeProbe, listAdoptableJobs, listTrackedJobs, listUnreadableJobs, microVmCommandLine, microVmOomKills, needsRenew, outcomeFromExitCode, probeCommand, probeMicroVmCommand, provisionMicroVm, provisionProcess, readCpuUsec, readProvisionOut, recoverLostJobs, releaseLease, renewLease, restartSender, retryFailedReleases, runCommand, runHook, sampleGuest, serveLease, setStage, startMicroVmCommand, startSender, stopOrphanedMicroVms, unfinishedJobs, vmAlive, workdirProblem, writeGuestGhConfig };

package/dist/{chunk-QDMMW5PC.js → chunk-Q2CMEQV7.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LiveUploader } from './chunk-3MXPS7ED.js';
+import { LiveUploader } from './chunk-2N67C6IV.js';
 import { CaptureDaemon } from './chunk-5DNCFOXA.js';
-import { spoolDir } from './chunk-DJWKUQLO.js';
+import { spoolDir } from './chunk-QPWFVE3X.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { mkdirSync, writeFileSync, rmSync } from 'fs';

package/dist/{chunk-DJWKUQLO.js → chunk-QPWFVE3X.js}

@@ -684,7 +684,7 @@ async function missingControlPlane(cwd, sessionId, home, env) {
     cleanupEarlierCopies(dirs);
   }
   if (!contextPossiblyGoverned(cwd, home)) return void 0;
-  const { governanceOf } = await import('./control-plane-launch-SMHL6MWW.js');
+  const { governanceOf } = await import('./control-plane-launch-A3YCHQNQ.js');
   if (await governanceOf({ cwd, env, home }) !== "governed") return void 0;
   recordMissingContext(dirs, sessionId, home);
   const launcher = `${cliInvocation()} claude`;

package/dist/{chunk-5BNWAIHN.js → chunk-RQJMN5TJ.js}

@@ -1,14 +1,53 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { MAX_ALLOW_HOSTS, allowHostProblem } from './chunk-UXYLWVTQ.js';
-import { parseSize } from './chunk-YJLHUKYS.js';
-import { isRefusedInConfig, resolveDestinations, isReservedVariable } from './chunk-BCCI32ME.js';
+import { DEFAULT_CACHE_DISK, DEFAULT_BUILD_DISK } from './chunk-W2AEL4BJ.js';
+import { parseSize } from './chunk-FR7HWWCF.js';
+import { isRefusedInConfig, resolveDestinations, isReservedVariable } from './chunk-BALIE3BA.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { existsSync, statSync, accessSync, constants, readFileSync } from 'fs';
 import { hostname } from 'os';
 import { join } from 'path';
 
 createRequire(import.meta.url);
+
+// src/runner/allow-hosts.ts
+var MAX_ALLOW_HOSTS = 500;
+var LABEL = /^(?!-)[a-z0-9-]{1,63}(?<!-)$/;
+var IPV4 = /^(?:(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)$/;
+function isAddress(text) {
+  if (IPV4.test(text)) return true;
+  try {
+    new URL(`http://[${text}]/`);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function isHostName(text) {
+  const labels = text.split(".");
+  return text.length <= 253 && labels.every((label) => LABEL.test(label)) && !/^\d+$/.test(labels.at(-1));
+}
+function allowHostProblem(entry) {
+  if (typeof entry !== "string") return "is not a string";
+  const text = entry.toLowerCase();
+  if (isAddress(text)) return void 0;
+  if (text.startsWith("*.")) {
+    const domain = text.slice(2);
+    if (!isHostName(domain)) return "is not a host name after *.";
+    if (!domain.includes(".")) return "is too broad: a pattern needs a domain with at least two labels after *.";
+    return void 0;
+  }
+  return isHostName(text) ? void 0 : "is not a host name, a *. pattern or an IP address";
+}
+function hostAllowed(host, allowHosts) {
+  const name = host.toLowerCase().replace(/\.$/, "");
+  return allowHosts.some((entry) => {
+    const pattern = entry.toLowerCase();
+    return pattern.startsWith("*.") ? name.endsWith(pattern.slice(1)) : name === pattern;
+  });
+}
+
+// src/runner/config.ts
 var BUILTIN_CONTAINER = "builtin:container";
 var BUILTIN_PROCESS = "builtin:process";
 var BUILTIN_VM = "builtin:vm";
@@ -34,12 +73,12 @@ var DEFAULT_IDLE_LIMIT_MINUTES = 30;
 var DEFAULT_CHECK_TIME_LIMIT_MINUTES = 10;
 var CHECKS_KEYS = ["timeLimitMinutes"];
 var MAX_CHECK_TIME_LIMIT_MINUTES = 240;
-var DEFAULT_BUILD = { memory: "8g", cpus: 4, pids: 4096, disk: "40g", variables: [] };
+var DEFAULT_BUILD = { memory: "8g", cpus: 4, pids: 4096, disk: DEFAULT_BUILD_DISK, cacheDisk: DEFAULT_CACHE_DISK, variables: [] };
 function imageBuildOf(config) {
   if (builtinKind(config.hooks.provision) !== "vm") return "host";
   return config.build?.imageBuild ?? "vm";
 }
-var BUILD_KEYS = ["memory", "cpus", "pids", "disk", "variables", "destinations", "allowHosts", "imageBuild"];
+var BUILD_KEYS = ["memory", "cpus", "pids", "disk", "cacheDisk", "variables", "destinations", "allowHosts", "imageBuild"];
 var HOUSEKEEPING_KEYS = ["jobsKeepDays", "buildCacheMax", "minFreeDisk"];
 var DEFAULT_JOBS_KEEP_DAYS = 30;
 var DEFAULT_BUILD_CACHE_MAX = "20g";
@@ -366,7 +405,7 @@ function resolveBuild(configPath, block) {
     const near = nearestKey(key, BUILD_KEYS);
     fail(configPath, `runner.build.${key}`, near ? `is not a key this block accepts; did you mean ${near}?` : "is not a key this block accepts");
   }
-  for (const key of ["memory", "disk"]) {
+  for (const key of ["memory", "disk", "cacheDisk"]) {
     const value = given[key];
     if (value === void 0) continue;
     if (typeof value !== "string" || parseSize(value) === void 0) fail(configPath, `runner.build.${key}`, 'must be a size such as "8g" or "512m"');
@@ -408,6 +447,7 @@ function resolveBuild(configPath, block) {
     cpus: given.cpus ?? DEFAULT_BUILD.cpus,
     pids: given.pids ?? DEFAULT_BUILD.pids,
     disk: given.disk ?? DEFAULT_BUILD.disk,
+    cacheDisk: given.cacheDisk ?? DEFAULT_BUILD.cacheDisk,
     variables,
     ...destinations.length === 0 ? {} : { destinations },
     ...allowHosts === void 0 ? {} : { allowHosts },
@@ -415,4 +455,4 @@ function resolveBuild(configPath, block) {
   };
 }
 
-export { DEFAULT_CHECK_TIME_LIMIT_MINUTES, DEFAULT_UPDATE_MAX_WAIT_HOURS, RunnerConfigError, builtinKind, checkHooks, defaultRunnerConfigPath, hasRunnerBlock, imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, loadRunnerConfig, resolveBuild, resolveHousekeeping, runnerCredentialProblem, runnerVmOf };
+export { DEFAULT_CHECK_TIME_LIMIT_MINUTES, DEFAULT_UPDATE_MAX_WAIT_HOURS, MAX_ALLOW_HOSTS, RunnerConfigError, allowHostProblem, builtinKind, checkHooks, defaultRunnerConfigPath, hasRunnerBlock, hostAllowed, imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, loadRunnerConfig, resolveBuild, resolveHousekeeping, runnerCredentialProblem, runnerVmOf };