@outerlayer/cli 0.34.0-next.20261025132734 → 0.34.0-next.20261025133402

package/dist/{chunk-HVRQQOMH.js → chunk-HAEDLXHA.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { TUNNEL_PORT, BRIDGE_ADDRESS, BRIDGE_CIDR } from './chunk-6LBSAW6I.js';
+import { TUNNEL_PORT, BRIDGE_ADDRESS, BRIDGE_CIDR } from './chunk-75KZUBHD.js';
 import { startTimeOf } from './chunk-JBJTC3UU.js';
-import { EXEC_PORT } from './chunk-L26V6ILJ.js';
-import { RELAY_PORT } from './chunk-BALIE3BA.js';
+import { EXEC_PORT } from './chunk-2RBIW2PD.js';
+import { RELAY_PORT } from './chunk-YOBQIXX6.js';
 import { spawn, spawnSync } from 'child_process';
 import { symlinkSync, lstatSync, writeFileSync, chmodSync, mkdirSync, existsSync } from 'fs';
 

package/dist/{chunk-5THSC6BD.js → chunk-IHY457PB.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { EXEC_PORT } from './chunk-L26V6ILJ.js';
+import { EXEC_PORT } from './chunk-2RBIW2PD.js';
 import { createConnection } from 'net';
 
 createRequire(import.meta.url);

package/dist/{chunk-Z4KWHSO4.js → chunk-IW6Z337K.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-6NUPXDAA.js';
-import { workPageUrl } from './chunk-EE2ZZGQV.js';
+import { autoConnect } from './chunk-3M6UYJSR.js';
+import { workPageUrl } from './chunk-XA6PGME5.js';
 import { sanitizeTerminal } from './chunk-MECW77XP.js';
-import { resolveRepoIdentity } from './chunk-6ZFY2L2T.js';
+import { resolveRepoIdentity } from './chunk-AJYZNISW.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { resolveGatewayCredentials, unauthorizedMessage, defaultFetch } from './chunk-6RKD7YZ6.js';
-import { signRunnerRequest } from './chunk-SOI6K5DY.js';
+import { resolveGatewayCredentials, unauthorizedMessage, defaultFetch } from './chunk-TVGLNHEB.js';
+import { signRunnerRequest } from './chunk-XLJLR7EK.js';
 import { readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -446,7 +446,7 @@ async function runWorkLinkSession(opts) {
     return await linkSession(opts);
   } catch (err) {
     if (opts.logFailures) {
-      const { logHookError } = await import('./hook-fast-VQXRDS6E.js');
+      const { logHookError } = await import('./hook-fast-LVTJWAG3.js');
       const reason = err instanceof Error ? err.message : String(err);
       logHookError(opts.home ?? homeFromEnv(opts.env ?? process.env), new Error(`work link-session #${opts.number} failed: ${reason}`));
     }

package/dist/{chunk-Z5IW4DHH.js → chunk-J246WRLZ.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { currentLink } from './chunk-NBZ7XBT6.js';
+import { currentLink } from './chunk-DUPM5LVJ.js';
 import { readFileSync, statSync, chmodSync, mkdirSync, writeFileSync, renameSync, rmSync, existsSync, lstatSync, accessSync, constants, realpathSync } from 'fs';
 import { randomBytes } from 'crypto';
 import { join, dirname, delimiter, resolve } from 'path';

package/dist/{chunk-5QBUX5YZ.js → chunk-JEOPIRUR.js}

@@ -5,7 +5,7 @@ import { addStdioMcpEntryIfAbsent, addDocsMcpEntryIfAbsent, DOCS_MCP_SERVER_NAME
 import { installStarterPack } from './chunk-4P6QGMPN.js';
 import { AGENTS_MD_LAYOUT, declareAgentsMdLayout, linkClaudeSkills, SKILLS_LINK_PATH, describeSkillsLink, isAgentsMdLayout, holdsTodaysLayoutSources, discoverOuterlayerPaths } from './chunk-NKOM4JKY.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { resolveGitCommonDir, defaultGitRunner } from './chunk-O6DYCIVW.js';
+import { resolveGitCommonDir, defaultGitRunner } from './chunk-QOUR4CQ7.js';
 import { loadTemplateFiles, loadMaintainedFiles, skillDir, AGENTS_SKILLS_BASE } from './chunk-ZQSANKS4.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { linkedAgentsPath } from './chunk-DQ6YO7FH.js';

package/dist/{chunk-TDAQHYM4.js → chunk-JZD2NTRH.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-6NUPXDAA.js';
-import { resolveRepoIdentity } from './chunk-6ZFY2L2T.js';
+import { autoConnect } from './chunk-3M6UYJSR.js';
+import { resolveRepoIdentity } from './chunk-AJYZNISW.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { defaultFetch, unauthorizedMessage, resolveGatewayCredentials } from './chunk-6RKD7YZ6.js';
+import { defaultFetch, unauthorizedMessage, resolveGatewayCredentials } from './chunk-TVGLNHEB.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{chunk-XFFUXXI4.js → chunk-KDLQGTN6.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LiveUploader } from './chunk-YGSY2NWU.js';
-import { CaptureDaemon } from './chunk-6ZFY2L2T.js';
-import { spoolDir } from './chunk-65AKMFBH.js';
+import { LiveUploader } from './chunk-WIK5KUGK.js';
+import { CaptureDaemon } from './chunk-AJYZNISW.js';
+import { spoolDir } from './chunk-CXQCBAKO.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { mkdirSync, writeFileSync, rmSync } from 'fs';

package/dist/{chunk-QMWUPRYQ.js → chunk-LMICI7AY.js}

@@ -2,11 +2,11 @@
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-6NUPXDAA.js';
+import { autoConnect } from './chunk-3M6UYJSR.js';
 import { acquireSpoolLockAt } from './chunk-MECW77XP.js';
-import { resolveRepoIdentity } from './chunk-6ZFY2L2T.js';
+import { resolveRepoIdentity } from './chunk-AJYZNISW.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-6RKD7YZ6.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-TVGLNHEB.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { StepNameSchema, StepBodySchema } from './chunk-EOTMDIYC.js';

package/dist/{chunk-43I7PXDP.js → chunk-MPDLZCXM.js}

@@ -2,10 +2,10 @@
 import { createRequire } from 'node:module';
 import { RecipeError } from './chunk-3Z3MPR55.js';
 import { BUILDKIT_IMAGE } from './chunk-ES4ULBAL.js';
-import { compareVersions } from './chunk-6ZFY2L2T.js';
-import { ensureHostKey } from './chunk-SOI6K5DY.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, runnerDir, jobsDir } from './chunk-PA6CK6WQ.js';
-import { CLAUDE_PORT, JOB_MOUNT, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_SOCKET, RELAY_PORT, DESTINATION_BASE_PORT } from './chunk-BALIE3BA.js';
+import { compareVersions } from './chunk-AJYZNISW.js';
+import { ensureHostKey } from './chunk-XLJLR7EK.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, runnerDir, jobsDir } from './chunk-N7LAEN3T.js';
+import { CLAUDE_PORT, JOB_MOUNT, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_SOCKET, RELAY_PORT, DESTINATION_BASE_PORT } from './chunk-YOBQIXX6.js';
 import { JOIN_DIR, RELAY_ID, JOIN_SOCKET, TARGET_GATEWAY, TARGET_CLAUDE, destinationTarget, RELAY_USER } from './chunk-MESOOLF4.js';
 import { createHash } from 'crypto';
 import { existsSync, mkdirSync, createWriteStream, rmSync, readFileSync, chmodSync, writeFileSync, realpathSync, readdirSync, renameSync } from 'fs';

package/dist/{chunk-PA6CK6WQ.js → chunk-N7LAEN3T.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { BUILD_HOME } from './chunk-BALIE3BA.js';
+import { BUILD_HOME } from './chunk-YOBQIXX6.js';
 import { join, dirname } from 'path';
 
 createRequire(import.meta.url);

package/dist/{chunk-57L2YAJA.js → chunk-NW5PDZYA.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-PA6CK6WQ.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-N7LAEN3T.js';
 import { readFileSync, mkdirSync, writeFileSync, renameSync } from 'fs';
 import { join } from 'path';
 

package/dist/{chunk-3IH6K7KG.js → chunk-O5G6VQGZ.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { readNewestDemo } from './chunk-ER6KQCVJ.js';
-import { runEmitArtifact } from './chunk-5HZGLLNW.js';
+import { runEmitArtifact } from './chunk-E34FRRSW.js';
 import { VoiceDownloadError, downloadPinned, sha256OfFile } from './chunk-2PGI6RDE.js';
 import { VOICE_PACK_FILES, VOICE_PACK_VERSION } from './chunk-ES4ULBAL.js';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-6NUPXDAA.js';
-import { resolveRepoIdentity } from './chunk-6ZFY2L2T.js';
+import { autoConnect } from './chunk-3M6UYJSR.js';
+import { resolveRepoIdentity } from './chunk-AJYZNISW.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { defaultFetch, resolveGatewayCredentials } from './chunk-6RKD7YZ6.js';
+import { defaultFetch, resolveGatewayCredentials } from './chunk-TVGLNHEB.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { ARTIFACT_MAX_BYTES, ARTIFACT_MAX_CAPTION_LENGTH, DEMO_RECORD_MEDIA_TYPE, ARTIFACT_MAX_REPLACES_TARGETS, DemoManifestSchema, ARTIFACT_KINDS } from './chunk-EOTMDIYC.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{chunk-DA3PLB5N.js → chunk-PAK5P2ND.js}

@@ -4,6 +4,6 @@ import { createRequire } from 'node:module';
 createRequire(import.meta.url);
 
 // src/runner/protocol.ts
-var RUNNER_PROTOCOL = 31;
+var RUNNER_PROTOCOL = 32;
 
 export { RUNNER_PROTOCOL };

package/dist/{chunk-YEVPRO7L.js → chunk-POGPX7LI.js}

@@ -1,25 +1,25 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { sha256OfFile, downloadPinned, VoiceDownloadError } from './chunk-2PGI6RDE.js';
-import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-2JB4GD34.js';
-import { readDefaultBranchHead, cloneRepository, buildRepositoryImage, prepareImageBuild, KEY_PREFIX, FETCHED_DIR, toolsDockerfile, TAG_HOST, metadataFromLabels, writeRecord, FETCHED_FFMPEG, FETCHED_GH, FETCHED_TINI, FETCHED_VOICE_DIR } from './chunk-ZVLSYWDF.js';
+import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-EZ7L5IZU.js';
+import { readDefaultBranchHead, cloneRepository, buildRepositoryImage, prepareImageBuild, KEY_PREFIX, FETCHED_DIR, toolsDockerfile, TAG_HOST, metadataFromLabels, writeRecord, FETCHED_FFMPEG, FETCHED_GH, FETCHED_TINI, FETCHED_VOICE_DIR } from './chunk-3NFZN7H6.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
 import { currentCliBuild } from './chunk-OGFGZQA3.js';
-import { runExec, execCapture, waitForAgent } from './chunk-5THSC6BD.js';
-import { GUEST_CID, linkVsockSockets } from './chunk-L26V6ILJ.js';
-import { describeCallFailure, keepStagedContext, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, prefetchGovernedContext, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript, WORKFLOW_PERMISSION_REASON } from './chunk-62LXQM7U.js';
-import { runnerImageVersion } from './chunk-MZBQTVFG.js';
-import { runnerCredentialProblem, builtinKind, hostAllowed } from './chunk-3CKMB2UK.js';
-import { formatBytes, allocatedBytes } from './chunk-ZYKFYNES.js';
-import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, readDu, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun } from './chunk-43I7PXDP.js';
+import { runExec, execCapture, waitForAgent } from './chunk-IHY457PB.js';
+import { GUEST_CID, linkVsockSockets } from './chunk-2RBIW2PD.js';
+import { retrySend, describeCallFailure, keepStagedContext, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, prefetchGovernedContext, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript, WORKFLOW_PERMISSION_REASON } from './chunk-AVLLJW5D.js';
+import { runnerImageVersion } from './chunk-36T6W5RA.js';
+import { runnerCredentialProblem, builtinKind, hostAllowed } from './chunk-4XYC2663.js';
+import { formatBytes, allocatedBytes } from './chunk-UC2DKBMS.js';
+import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, readDu, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun } from './chunk-MPDLZCXM.js';
 import { RecipeError, DOCKER_FEATURE, writeSanitizedRecipe, classifyProperties } from './chunk-3Z3MPR55.js';
 import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, hostHelperPinned, CLAUDE_CODE_VERSION, guestAssetsPinned, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, JAILER_BINARY_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, GUEST_ASSETS_VERSION, BUILDER_DISK_VERSION, builderDiskPinned, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, GH_VERSION, TINI_SHA256, TINI_VERSION, VOICE_PACK_FILES, BUILDER_DISK_SHA256, BUILDER_DISK_BASE_URL, DEFAULT_BASE_IMAGE } from './chunk-ES4ULBAL.js';
-import { WorkCommandError, getJson } from './chunk-Z4KWHSO4.js';
+import { postJson, WorkCommandError, getJson } from './chunk-IW6Z337K.js';
 import { sanitizeTerminal } from './chunk-MECW77XP.js';
-import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-6ZFY2L2T.js';
-import { signerFor } from './chunk-SOI6K5DY.js';
-import { vmAssetsDir, RUNNER_DIR_MODE, rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, buildsDir, buildDir, runnerDir, deliveryDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, SHIM_DIR, vsockPath, builderCacheDiskPath, builderConsolePath } from './chunk-PA6CK6WQ.js';
-import { parseIsolation, proxyEnvironment, withProxyWarningHidden, containerLocalAddress, destinationEnvironment, claudeCredential, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, withHooksPath, startBuildServices, BUILT_IN_NAMES, repositoriesOf, primaryOf, RELAY_PORT, repositoryPath, CHECKOUT_DIR, lifecycleWorkdir, buildEnvironment, writeBuildMavenSettings, checkEnvironment, AGENT_CREDENTIAL_MISSING, mavenSettingsXml, namesGlobalSettings, MAVEN_NO_PROXY_NOTE, mavenArgs, MAVEN_SPACE_NOTE, writeMavenSettings, checkoutPath, JOB_MOUNT } from './chunk-BALIE3BA.js';
+import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-AJYZNISW.js';
+import { signerFor } from './chunk-XLJLR7EK.js';
+import { vmAssetsDir, RUNNER_DIR_MODE, rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, buildsDir, buildDir, runnerDir, deliveryDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, SHIM_DIR, vsockPath, builderCacheDiskPath, builderConsolePath } from './chunk-N7LAEN3T.js';
+import { claudeCredential, parseIsolation, proxyEnvironment, withProxyWarningHidden, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, withHooksPath, startBuildServices, BUILT_IN_NAMES, repositoriesOf, primaryOf, RELAY_PORT, repositoryPath, CHECKOUT_DIR, lifecycleWorkdir, buildEnvironment, writeBuildMavenSettings, checkEnvironment, AGENT_CREDENTIAL_MISSING, mavenSettingsXml, namesGlobalSettings, MAVEN_NO_PROXY_NOTE, mavenArgs, MAVEN_SPACE_NOTE, writeMavenSettings, checkoutPath, JOB_MOUNT } from './chunk-YOBQIXX6.js';
 import { sharedSkillNames, skillConflictMessage } from './chunk-FGF52V4V.js';
 import { versionAtLeast, MINIMUM_CLAUDE_VERSION } from './chunk-HCVLP7XA.js';
 import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-FGXT5OXS.js';
@@ -41,6 +41,41 @@ import { pipeline, finished } from 'stream/promises';
 import { createGunzip, gunzipSync, constants as constants$1 } from 'zlib';
 
 createRequire(import.meta.url);
+
+// src/runner/managed-claude-key.ts
+var FETCH_RETRY_WINDOW_MS = 3e4;
+var ADOPTED_FETCH_RETRY_WINDOW_MS = 3e5;
+async function fetchManagedClaudeKey(config, item, deps = {}) {
+  const fetchImpl = deps.fetchImpl ?? fetch;
+  const outcome = await retrySend(
+    async () => postJson(config.url, `/v1/work-items/${item}/claim/anthropic-key`, config.apiKey, config.appId, {}, fetchImpl, void 0, await signerFor(config.configPath)),
+    { now: deps.now, sleep: deps.sleep, windowMs: deps.windowMs ?? FETCH_RETRY_WINDOW_MS }
+  );
+  if (!outcome.ok) return { ok: false, code: outcome.code, reason: outcome.message ?? outcome.reason, retryable: outcome.retryable };
+  const apiKey = outcome.value.data.apiKey;
+  if (typeof apiKey !== "string" || apiKey === "") {
+    return { ok: false, code: "malformed_key_response", reason: "the gateway's answer carried no Anthropic key", retryable: false };
+  }
+  return { ok: true, apiKey };
+}
+var held = /* @__PURE__ */ new Map();
+var everHeld = /* @__PURE__ */ new Set();
+function holdManagedClaudeKey(jobDir, apiKey) {
+  held.set(jobDir, apiKey);
+  everHeld.add(apiKey);
+}
+function managedClaudeKeyFor(jobDir) {
+  return held.get(jobDir);
+}
+function dropManagedClaudeKey(jobDir) {
+  held.delete(jobDir);
+}
+function managedClaudeKeyValues() {
+  return [...everHeld];
+}
+function hasClaudeCredential(config, hostEnv, jobDir) {
+  return config.managed === true ? managedClaudeKeyFor(jobDir) !== void 0 : claudeCredential(hostEnv) !== void 0;
+}
 var AssetError = class extends Error {
   constructor(file, message) {
     super(message);
@@ -2454,8 +2489,8 @@ function claudeCredentialCheck(env, options = {}) {
     }
     return { name, status: "pass", detail: `${variables[0]} is set in the claude.env or runner.env of the service ${unit}` };
   }
-  const held = claudeCredential(env, { ignoreHeld: options.ignoreHeld === true });
-  if (held === void 0) {
+  const held2 = claudeCredential(env, { ignoreHeld: options.ignoreHeld === true });
+  if (held2 === void 0) {
     return {
       name,
       status: "fail",
@@ -2464,7 +2499,7 @@ function claudeCredentialCheck(env, options = {}) {
     };
   }
   const sameVariables = options.shell === true ? "; the runner must be started with the same variable" : "";
-  return { name, status: "pass", detail: `${held.variable} is set${sameVariables}` };
+  return { name, status: "pass", detail: `${held2.variable} is set${sameVariables}` };
 }
 function missingPermissionOf(err) {
   if (!(err instanceof WorkCommandError) || err.status !== 403) return void 0;
@@ -2762,10 +2797,10 @@ async function runBuildSteps(input) {
   if (staged.kind === "refused") return { ok: false, reason: staged.reason };
   let controlPlane;
   if (input.requireBuildSkill === true && !(staged.kind === "staged" && stagedHasBuildSkill(staged))) {
-    const held = await checkoutHasBuildSkill(input);
-    if (held !== true) {
+    const held2 = await checkoutHasBuildSkill(input);
+    if (held2 !== true) {
       if (staged.kind === "staged") input.removeStagedContext();
-      if (held !== false) return { ok: false, reason: held.failed };
+      if (held2 !== false) return { ok: false, reason: held2.failed };
       return { ok: false, reason: missingBuildSkillReason(staged.kind === "staged" ? { repository: staged.repository, commit: staged.sha } : void 0) };
     }
   }
@@ -3629,17 +3664,17 @@ async function drain(req) {
 }
 function readPrefix(req, gzip) {
   return new Promise((resolve2, reject) => {
-    const held = [];
+    const held2 = [];
     const finish = (section) => {
       req.off("data", onData);
       req.off("end", onEnd);
       req.off("error", reject);
       req.pause();
-      resolve2({ held, section });
+      resolve2({ held: held2, section });
     };
     const onData = (chunk) => {
-      held.push(chunk);
-      const section = readCommandSection(Buffer.concat(held), gzip);
+      held2.push(chunk);
+      const section = readCommandSection(Buffer.concat(held2), gzip);
       if (section.kind !== "need-more") finish(section);
     };
     const onEnd = () => finish({ kind: "need-more" });
@@ -3727,7 +3762,7 @@ function createGitRemote(options) {
   async function push(req, res, route, target) {
     const encoding = req.headers["content-encoding"];
     const gzip = encoding === "gzip";
-    const { held, section } = await readPrefix(req, gzip);
+    const { held: held2, section } = await readPrefix(req, gzip);
     const refuse = async (reason) => {
       log(`push refused: ${reason}`);
       await drain(req);
@@ -3757,7 +3792,7 @@ function createGitRemote(options) {
         const file = createWriteStream(bodyPath);
         const cap = options.maxPushBytes ?? 2 * 1024 ** 3;
         let size = 0;
-        for (const chunk of held) {
+        for (const chunk of held2) {
           size += chunk.length;
           file.write(chunk);
         }
@@ -3803,7 +3838,7 @@ function createGitRemote(options) {
             createReadStream(spooled).pipe(upstream);
             return;
           }
-          for (const chunk of held) upstream.write(chunk);
+          for (const chunk of held2) upstream.write(chunk);
           req.pipe(upstream);
         }
       });
@@ -3914,27 +3949,27 @@ function usableCpus(deps = {}) {
 }
 function createCpuAllocator(cores) {
   const usable = [...new Set(cores)].sort((a, b) => a - b);
-  const held = /* @__PURE__ */ new Map();
+  const held2 = /* @__PURE__ */ new Map();
   const holders = (core) => {
     let count = 0;
-    for (const set of held.values()) if (set.includes(core)) count++;
+    for (const set of held2.values()) if (set.includes(core)) count++;
     return count;
   };
   return {
     acquire(buildId, cpus) {
-      const existing = held.get(buildId);
+      const existing = held2.get(buildId);
       if (existing !== void 0) return existing;
       const wanted = Math.min(Math.ceil(cpus), usable.length);
       const ranked = usable.map((core) => ({ core, count: holders(core) })).sort((a, b) => a.count - b.count);
       const chosen = ranked.slice(0, wanted).map(({ core }) => core).sort((a, b) => a - b);
-      held.set(buildId, chosen);
+      held2.set(buildId, chosen);
       return chosen;
     },
     hold(buildId, set) {
-      held.set(buildId, [...set]);
+      held2.set(buildId, [...set]);
     },
     release(buildId) {
-      held.delete(buildId);
+      held2.delete(buildId);
     }
   };
 }
@@ -4189,7 +4224,7 @@ async function provisionContainer(input) {
   const tag = `#${item.number}`;
   const logPath = join(jobDir, "provision.log");
   const fail = (reason) => ({ ok: false, reason });
-  if (claudeCredential(runtime.hostEnv) === void 0) return fail(AGENT_CREDENTIAL_MISSING);
+  if (!hasClaudeCredential(config, runtime.hostEnv, jobDir)) return fail(AGENT_CREDENTIAL_MISSING);
   const repositories = repositoriesOf({ repositories: input.repositories, repository: item.specRepository, branch: input.branch });
   const primary = primaryOf(repositories);
   if (primary === void 0) return fail("the work item names no repository to clone");
@@ -4541,7 +4576,7 @@ async function startServicesFor(runtime, config, buildDir2, jobDir, itemKey, bui
     ...lease === void 0 ? {} : { lease },
     ...inherit === void 0 ? {} : { inherit },
     ...routeLog === void 0 ? {} : { log: routeLog },
-    ...builtIns ? { builtIns: { gatewayUrl: config.url, itemKey, claudeUpstream: runtime.claudeUpstream } } : {},
+    ...builtIns ? { builtIns: { gatewayUrl: config.url, itemKey, claudeUpstream: runtime.claudeUpstream, claudeApiKey: managedClaudeKeyFor(jobDir) } } : {},
     hostEnv: runtime.hostEnv,
     destinationOptions: runtime.destinationOptions
   });
@@ -4964,4 +4999,4 @@ function describeMachineDocker(machine) {
   return `Docker Engine ${version ?? "of no known version"}, older than the ${MIN_ENGINE_MAJOR} that container builds need`;
 }
 
-export { ADDED_USER, AgentUserError, AssetError, DeliveryFailure, EVAL_INPUT_NAME, GH_CONFIG_YML, HELPER_ENV, LEASE_SECONDS, MANAGED_UNJAILED_REASON, MIN_ENGINE_MAJOR, PLACEHOLDER_MARKER, ROOT_DISK_ID_PREFIX, RunnerInitError, attemptNote, claimPermissionProblem, claudeCredentialCheck, cleanupContainer, closeHostBuild, containerCommandExec, containerJudgeEnvironment, containerSenderCommand, copyJudgeTree, copyTranscripts, copyTranscriptsFromContainer, createBuildDisk, createContainerRuntime, createLeaseChannel, currentSkillCommand, decideHostBuildSkill, deleteBuildDisk, deliverContainerHooks, deliverExecMaven, describeMachineDocker, detectMachine, ensureFirecrackerAndJailer, ensureRootfs, ensureTunnel, execArgv, execCommandLine, filesAreCopied, formerSkillProblem, formerSkillQueues, ghHostsYml, gitRemoteFor, helperFirecrackerNote, helperSocketPath, hostCommandEnvironment, hostEnvironment, isPlaceholderCommand, keepGhConfigCurrent, leaseExpiresAtMs, leaseTimeLeftMs, lifecycleFailureReason, lifecycleSteps, listenOnBroker, machineConfig, makeBuildsDirPrivate, measureDisk, microVmArchSupported, microVmAssetsPinned, missingPermissionFix, missingPermissionOf, needsBuildSkill, needsClaudeCredential, obtainImage, outOfMemoryReason, parseCpuList, permissionModeProblem, permissionModeProblems, placeholderProblem, placeholderQueues, prepareBranch, prepareRunnerInit, probeHelper, provisionContainer, provisionEnvironment, reachDockerStep, readConfigObject, resolveAgentUser, resolveHostBuild, runBuildSteps, runRunnerInit, runWithSpawn, senderAliveScript, senderSignalScript, setUpRunnerCgroup, shellQuote, signalInContainer, startCheckContainer, startHostServices, startJailedInto, startServicesFor, stopContainer, stopJailed, supportsContainerBuilds, supportsMicroVmBuilds, sweepImageBuilders, syncInContainer, withTunnelLog, writeEvalInput, writeRunnerInit };
+export { ADDED_USER, ADOPTED_FETCH_RETRY_WINDOW_MS, AgentUserError, AssetError, DeliveryFailure, EVAL_INPUT_NAME, GH_CONFIG_YML, HELPER_ENV, LEASE_SECONDS, MANAGED_UNJAILED_REASON, MIN_ENGINE_MAJOR, PLACEHOLDER_MARKER, ROOT_DISK_ID_PREFIX, RunnerInitError, attemptNote, claimPermissionProblem, claudeCredentialCheck, cleanupContainer, closeHostBuild, containerCommandExec, containerJudgeEnvironment, containerSenderCommand, copyJudgeTree, copyTranscripts, copyTranscriptsFromContainer, createBuildDisk, createContainerRuntime, createLeaseChannel, currentSkillCommand, decideHostBuildSkill, deleteBuildDisk, deliverContainerHooks, deliverExecMaven, describeMachineDocker, detectMachine, dropManagedClaudeKey, ensureFirecrackerAndJailer, ensureRootfs, ensureTunnel, execArgv, execCommandLine, fetchManagedClaudeKey, filesAreCopied, formerSkillProblem, formerSkillQueues, ghHostsYml, gitRemoteFor, hasClaudeCredential, helperFirecrackerNote, helperSocketPath, holdManagedClaudeKey, hostCommandEnvironment, hostEnvironment, isPlaceholderCommand, keepGhConfigCurrent, leaseExpiresAtMs, leaseTimeLeftMs, lifecycleFailureReason, lifecycleSteps, listenOnBroker, machineConfig, makeBuildsDirPrivate, managedClaudeKeyFor, managedClaudeKeyValues, measureDisk, microVmArchSupported, microVmAssetsPinned, missingPermissionFix, missingPermissionOf, needsBuildSkill, needsClaudeCredential, obtainImage, outOfMemoryReason, parseCpuList, permissionModeProblem, permissionModeProblems, placeholderProblem, placeholderQueues, prepareBranch, prepareRunnerInit, probeHelper, provisionContainer, provisionEnvironment, reachDockerStep, readConfigObject, resolveAgentUser, resolveHostBuild, runBuildSteps, runRunnerInit, runWithSpawn, senderAliveScript, senderSignalScript, setUpRunnerCgroup, shellQuote, signalInContainer, startCheckContainer, startHostServices, startJailedInto, startServicesFor, stopContainer, stopJailed, supportsContainerBuilds, supportsMicroVmBuilds, sweepImageBuilders, syncInContainer, withTunnelLog, writeEvalInput, writeRunnerInit };

package/dist/{chunk-K5Q6T7SE.js → chunk-PSXVAOEB.js}

@@ -2,10 +2,10 @@
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-6NUPXDAA.js';
-import { resolveRepoIdentity } from './chunk-6ZFY2L2T.js';
+import { autoConnect } from './chunk-3M6UYJSR.js';
+import { resolveRepoIdentity } from './chunk-AJYZNISW.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-6RKD7YZ6.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-TVGLNHEB.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { CriteriaListSchema } from './chunk-EOTMDIYC.js';

package/dist/{chunk-O6DYCIVW.js → chunk-QOUR4CQ7.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { removeRetiredSkills } from './chunk-JWNH4ZTF.js';
-import { defaultFetch, resolveGatewayCredentials } from './chunk-6RKD7YZ6.js';
-import { withTokenHeader } from './chunk-BALIE3BA.js';
+import { defaultFetch, resolveGatewayCredentials } from './chunk-TVGLNHEB.js';
+import { withTokenHeader } from './chunk-YOBQIXX6.js';
 import { appendContextProvenance } from './chunk-ZJSNLVCE.js';
 import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-ZQSANKS4.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';

package/dist/{chunk-ACRRO3MB.js → chunk-RNVBSRZZ.js}

@@ -1,28 +1,28 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { readsJobState, READ_JOB_STATE_FORMATS, jobStateFormatOf } from './chunk-ZVB57WI6.js';
-import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-HVRQQOMH.js';
-import { writeDockerClientConfig } from './chunk-6LBSAW6I.js';
+import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-HAEDLXHA.js';
+import { writeDockerClientConfig } from './chunk-75KZUBHD.js';
 import { zodProblem } from './chunk-I3LTIAOR.js';
-import { senderPidfile } from './chunk-XFFUXXI4.js';
-import { installScrubContext } from './chunk-YGSY2NWU.js';
-import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, startHostServices, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, closeHostBuild, containerSenderCommand, hostCommandEnvironment, execArgv, signalInContainer, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, helperFirecrackerNote, stopJailed, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, ROOT_DISK_ID_PREFIX, copyJudgeTree } from './chunk-YEVPRO7L.js';
-import { readBranchHead, fetchCommit, diffBetween } from './chunk-ZVLSYWDF.js';
+import { senderPidfile } from './chunk-KDLQGTN6.js';
+import { installScrubContext } from './chunk-WIK5KUGK.js';
+import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, hasClaudeCredential, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, startHostServices, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, closeHostBuild, dropManagedClaudeKey, containerSenderCommand, hostCommandEnvironment, execArgv, signalInContainer, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, helperFirecrackerNote, managedClaudeKeyValues, stopJailed, deleteBuildDisk, managedClaudeKeyFor, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, ROOT_DISK_ID_PREFIX, copyJudgeTree } from './chunk-POGPX7LI.js';
+import { readBranchHead, fetchCommit, diffBetween } from './chunk-3NFZN7H6.js';
 import { isSameProcess, startTimeOf } from './chunk-JBJTC3UU.js';
-import { waitForAgent, vmExecArgs } from './chunk-5THSC6BD.js';
-import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-L26V6ILJ.js';
-import { describeCallFailure, resolveGoverningSource, prefetchGovernedContext, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-62LXQM7U.js';
-import { imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-3CKMB2UK.js';
-import { DEFAULT_CACHE_DISK, formatBytes, allocatedBytes } from './chunk-ZYKFYNES.js';
-import { parseSize, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-43I7PXDP.js';
+import { waitForAgent, vmExecArgs } from './chunk-IHY457PB.js';
+import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-2RBIW2PD.js';
+import { describeCallFailure, resolveGoverningSource, prefetchGovernedContext, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-AVLLJW5D.js';
+import { imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-4XYC2663.js';
+import { DEFAULT_CACHE_DISK, formatBytes, allocatedBytes } from './chunk-UC2DKBMS.js';
+import { parseSize, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-MPDLZCXM.js';
 import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-ES4ULBAL.js';
-import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-Z4KWHSO4.js';
+import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-IW6Z337K.js';
 import { planArtifactUpload } from './chunk-MECW77XP.js';
-import { scrubText } from './chunk-6ZFY2L2T.js';
+import { scrubText } from './chunk-AJYZNISW.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
-import { signerFor } from './chunk-SOI6K5DY.js';
-import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath, jobConsolePath } from './chunk-PA6CK6WQ.js';
-import { JOB_MOUNT, claudeCredential, repositoriesOf, primaryOf, buildEnvironment, CHECKOUT_DIR, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, buildMavenSettingsXml, CLAUDE_CREDENTIAL_VARIABLES, currentClaudeCredential, removedClaudeCredentialValues, RELAY_PORT, repositoryPath, lifecycleWorkdir, CHECK_ITEMS_FILE, MAVEN_SETTINGS_FILE, checkEnvironment, EVAL_INPUT_DIR } from './chunk-BALIE3BA.js';
+import { signerFor } from './chunk-XLJLR7EK.js';
+import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath, jobConsolePath } from './chunk-N7LAEN3T.js';
+import { JOB_MOUNT, repositoriesOf, primaryOf, buildEnvironment, CHECKOUT_DIR, claudeCredential, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, buildMavenSettingsXml, CLAUDE_CREDENTIAL_VARIABLES, currentClaudeCredential, removedClaudeCredentialValues, managedClaudeCredential, RELAY_PORT, repositoryPath, lifecycleWorkdir, CHECK_ITEMS_FILE, MAVEN_SETTINGS_FILE, checkEnvironment, EVAL_INPUT_DIR } from './chunk-YOBQIXX6.js';
 import { resolvePackRoot } from './chunk-ZQSANKS4.js';
 import { MAINTAINED_SKILLS } from './chunk-CDDED64E.js';
 import { resolveVersion } from './chunk-RA3O54FC.js';
@@ -297,7 +297,7 @@ async function provisionMicroVm(input) {
   const tag = `#${item.number}`;
   const logPath = join(jobDir, "provision.log");
   const fail = (reason) => ({ ok: false, reason });
-  if (claudeCredential(runtime.hostEnv) === void 0) return fail(AGENT_CREDENTIAL_MISSING);
+  if (!hasClaudeCredential(config, runtime.hostEnv, jobDir)) return fail(AGENT_CREDENTIAL_MISSING);
   const repositories = repositoriesOf({ repositories: input.repositories, repository: item.specRepository, branch: input.branch });
   const primary = primaryOf(repositories);
   if (primary === void 0) return fail("the work item names no repository to clone");
@@ -2238,7 +2238,7 @@ async function runJudge(input) {
     const brief = check.judge.text;
     if (brief === void 0) return await fail(check, `the brief ${check.judge.brief} is not in the definitions repository`);
     if (tokens === void 0) return await fail(check, "the build's repository tokens are no longer held, so the branch cannot be fetched");
-    const credential = claudeCredential(runtime.hostEnv);
+    const credential = config.managed === true && managedClaudeKeyFor(jobDir) !== void 0 ? managedClaudeCredential() : claudeCredential(runtime.hostEnv);
     if (credential === void 0) return await fail(check, "the host holds no Claude credential for the judge");
     const branch = job.branch;
     if (branch === void 0) return await fail(check, "the build pushed no branch: the claim names none");
@@ -2635,7 +2635,7 @@ function mergeScrubConfig(a, b) {
 function releaseScrub(config, home) {
   const merged = mergeScrubConfig(config.scrub, readCloudConfig(home).scrub);
   const secrets = [...headerVariables(config.build?.destinations), ...CLAUDE_CREDENTIAL_VARIABLES].map((name) => process.env[name] ?? "");
-  const held = [currentClaudeCredential(process.env)?.value, ...removedClaudeCredentialValues()].filter((value) => value !== void 0);
+  const held = [currentClaudeCredential(process.env)?.value, ...removedClaudeCredentialValues(), ...managedClaudeKeyValues()].filter((value) => value !== void 0);
   return { literals: [...scrubList(merged?.literals), ...secrets, ...held], patterns: scrubList(merged?.patterns) };
 }
 function transcriptScrub(config, secrets) {
@@ -3222,6 +3222,7 @@ async function finishJob(job, jobDirPath, outcome, config, deps, ending) {
     await held.revokeAll();
     deps.container.credentials.delete(jobDirPath);
   }
+  dropManagedClaudeKey(jobDirPath);
   if (outcome !== void 0) {
     const fromHook = readReasonLine(jobDirPath, config);
     if (verdictReason !== void 0) {

package/dist/{chunk-7WM7K2DY.js → chunk-SMMNU65K.js}

@@ -1,12 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { placeholderQueues, placeholderProblem } from './chunk-YEVPRO7L.js';
-import { checkFit } from './chunk-AMEM2ZLL.js';
-import { builtinKind, imageBuildOf } from './chunk-3CKMB2UK.js';
-import { realBuildDiskProbe, checkDiskFit, DEFAULT_CACHE_DISK, DEFAULT_BUILD_DISK } from './chunk-ZYKFYNES.js';
+import { placeholderQueues, placeholderProblem } from './chunk-POGPX7LI.js';
+import { checkFit } from './chunk-AABYHGVO.js';
+import { builtinKind, imageBuildOf } from './chunk-4XYC2663.js';
+import { realBuildDiskProbe, checkDiskFit, DEFAULT_CACHE_DISK, DEFAULT_BUILD_DISK } from './chunk-UC2DKBMS.js';
 import { builderDiskPinned } from './chunk-ES4ULBAL.js';
-import { claudeCredentialVariablesSet, claudeCredential } from './chunk-BALIE3BA.js';
-import { closeSync, openSync, constants } from 'fs';
+import { FORWARDED_CLAUDE_CREDENTIAL_VARIABLES, claudeCredentialVariablesSet, claudeCredential, claudeEnvPath } from './chunk-YOBQIXX6.js';
+import { parseRunnerEnv } from './chunk-HACGUL52.js';
+import { closeSync, openSync, constants, readFileSync } from 'fs';
+import { join, dirname } from 'path';
 import { totalmem } from 'os';
 
 createRequire(import.meta.url);
@@ -38,15 +40,11 @@ function managedProblems(facts) {
     const advice = problem.includes("pins no helper") || problem.includes("runner install") ? "" : ". Run `outerlayer runner install --service --replace` to install the root helper, then restart the service";
     problems.push({ condition: "jailer", reason: `builds would run without the jailer, which a managed runner does not allow: ${problem}${advice}` });
   }
-  if (facts.credentials.has("CLAUDE_CODE_OAUTH_TOKEN")) {
+  const held = FORWARDED_CLAUDE_CREDENTIAL_VARIABLES.filter((variable) => facts.credentials.has(variable));
+  if (held.length > 0) {
     problems.push({
       condition: "credential",
-      reason: "CLAUDE_CODE_OAUTH_TOKEN is set in the runner's environment or credentials directory, and a managed runner accepts only ANTHROPIC_API_KEY. Remove CLAUDE_CODE_OAUTH_TOKEN from the claude.env and runner.env beside the config, store ANTHROPIC_API_KEY, then restart the service"
-    });
-  } else if (!facts.credentials.has("ANTHROPIC_API_KEY")) {
-    problems.push({
-      condition: "credential",
-      reason: "there is no Claude credential in the runner's environment, and a managed runner needs ANTHROPIC_API_KEY. Store ANTHROPIC_API_KEY with `outerlayer runner init --agent claude`, which writes the claude.env beside the config, then restart the service"
+      reason: `a managed runner holds no Claude credential of its own: it gets the factory's Anthropic API key from each claim. ${held.join(" and ")} ${held.length === 1 ? "is" : "are"} set in the runner's environment, runner.env or claude.env. Remove ${held.length === 1 ? "it" : "them"} from the environment and from the runner.env and claude.env beside the config, then restart the service`
     });
   }
   if (facts.allowHosts === void 0) {
@@ -70,11 +68,26 @@ function managedProblems(facts) {
   }
   return problems;
 }
+function credentialsInFiles(configPath) {
+  const found = /* @__PURE__ */ new Set();
+  if (configPath === void 0) return found;
+  for (const path of [join(dirname(configPath), "runner.env"), claudeEnvPath(configPath)]) {
+    let text;
+    try {
+      text = readFileSync(path, "utf8");
+    } catch {
+      continue;
+    }
+    const values = parseRunnerEnv(text);
+    for (const variable of FORWARDED_CLAUDE_CREDENTIAL_VARIABLES) if ((values[variable] ?? "").trim() !== "") found.add(variable);
+  }
+  return found;
+}
 function managedFactsOf(config, probes) {
   return {
     provision: config.hooks.provision,
     jailer: probes.jailer ?? "unknown",
-    credentials: claudeCredentialVariablesSet(probes.env),
+    credentials: /* @__PURE__ */ new Set([...claudeCredentialVariablesSet(probes.env), ...credentialsInFiles(config.configPath)]),
     allowHosts: config.build?.allowHosts,
     imageBuild: imageBuildOf(config),
     builderDiskPinned: probes.builderDiskPinned ?? builderDiskPinned()
@@ -132,7 +145,7 @@ function checkBlockedWithSlots(config, probes) {
     }
     if (builder !== "usable") return { blocked: { reason: `${builder.problem}. The runner takes work again once its image builder works` }, slots };
   }
-  if (kind !== "own" && claudeCredential(probes.env) === void 0) {
+  if (kind !== "own" && config.managed !== true && claudeCredential(probes.env) === void 0) {
     return {
       slots,
       blocked: {

package/dist/{chunk-DXJTBU7A.js → chunk-T7N3BAOO.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { launcherPath, writeLauncher, LauncherWriteError, pathNotes } from './chunk-Z5IW4DHH.js';
-import { currentVersion, currentLink, isInLayout, packageRootIn, versionDir, switchCurrent, execStartLine } from './chunk-NBZ7XBT6.js';
+import { launcherPath, writeLauncher, LauncherWriteError, pathNotes } from './chunk-J246WRLZ.js';
+import { currentVersion, currentLink, isInLayout, packageRootIn, versionDir, switchCurrent, execStartLine } from './chunk-DUPM5LVJ.js';
 import { compareVersions } from './chunk-TQMI335S.js';
-import { RUNNER_DIR_MODE } from './chunk-PA6CK6WQ.js';
+import { RUNNER_DIR_MODE } from './chunk-N7LAEN3T.js';
 import { realpathSync, readFileSync, mkdirSync, rmSync, cpSync, existsSync } from 'fs';
 import { dirname, sep, join } from 'path';