@outerlayer/cli 0.34.0-next.20261025132734 → 0.34.0-next.20261025180645

package/dist/{chunk-ACRRO3MB.js → chunk-FD5ASWTG.js}

@@ -1,35 +1,34 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { readsJobState, READ_JOB_STATE_FORMATS, jobStateFormatOf } from './chunk-ZVB57WI6.js';
-import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-HVRQQOMH.js';
-import { writeDockerClientConfig } from './chunk-6LBSAW6I.js';
+import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-63IVRRIO.js';
 import { zodProblem } from './chunk-I3LTIAOR.js';
-import { senderPidfile } from './chunk-XFFUXXI4.js';
-import { installScrubContext } from './chunk-YGSY2NWU.js';
-import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, startHostServices, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, closeHostBuild, containerSenderCommand, hostCommandEnvironment, execArgv, signalInContainer, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, helperFirecrackerNote, stopJailed, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, ROOT_DISK_ID_PREFIX, copyJudgeTree } from './chunk-YEVPRO7L.js';
-import { readBranchHead, fetchCommit, diffBetween } from './chunk-ZVLSYWDF.js';
+import { senderPidfile } from './chunk-JBCOUY4M.js';
+import { installScrubContext } from './chunk-QANM5COC.js';
+import { writeDockerClientConfig } from './chunk-SI6WDF3U.js';
+import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, hasClaudeCredential, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, startHostServices, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, closeHostBuild, dropManagedClaudeKey, containerSenderCommand, hostCommandEnvironment, execArgv, signalInContainer, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, helperFirecrackerNote, managedClaudeKeyValues, stopJailed, deleteBuildDisk, managedClaudeKeyFor, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, ROOT_DISK_ID_PREFIX, copyJudgeTree } from './chunk-JQSZTQSK.js';
+import { readBranchHead, fetchCommit, diffBetween } from './chunk-UO4FQAOX.js';
+import { waitForAgent, vmExecArgs } from './chunk-2ILU7UAU.js';
+import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-OGPEHSNW.js';
+import { describeCallFailure, resolveGoverningSource, prefetchGovernedContext, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-RFVIQLNB.js';
+import { imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-2D6CKNR7.js';
+import { DEFAULT_CACHE_DISK, formatBytes, allocatedBytes } from './chunk-KM2HLQE3.js';
+import { parseSize, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-5AFPP3GZ.js';
+import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-4UPET3R7.js';
 import { isSameProcess, startTimeOf } from './chunk-JBJTC3UU.js';
-import { waitForAgent, vmExecArgs } from './chunk-5THSC6BD.js';
-import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-L26V6ILJ.js';
-import { describeCallFailure, resolveGoverningSource, prefetchGovernedContext, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-62LXQM7U.js';
-import { imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-3CKMB2UK.js';
-import { DEFAULT_CACHE_DISK, formatBytes, allocatedBytes } from './chunk-ZYKFYNES.js';
-import { parseSize, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-43I7PXDP.js';
-import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-ES4ULBAL.js';
-import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-Z4KWHSO4.js';
+import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-UN3SQTVL.js';
 import { planArtifactUpload } from './chunk-MECW77XP.js';
-import { scrubText } from './chunk-6ZFY2L2T.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
-import { signerFor } from './chunk-SOI6K5DY.js';
-import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath, jobConsolePath } from './chunk-PA6CK6WQ.js';
-import { JOB_MOUNT, claudeCredential, repositoriesOf, primaryOf, buildEnvironment, CHECKOUT_DIR, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, buildMavenSettingsXml, CLAUDE_CREDENTIAL_VARIABLES, currentClaudeCredential, removedClaudeCredentialValues, RELAY_PORT, repositoryPath, lifecycleWorkdir, CHECK_ITEMS_FILE, MAVEN_SETTINGS_FILE, checkEnvironment, EVAL_INPUT_DIR } from './chunk-BALIE3BA.js';
+import { signerFor } from './chunk-MOI2KDLH.js';
 import { resolvePackRoot } from './chunk-ZQSANKS4.js';
+import { scrubText } from './chunk-AJYZNISW.js';
 import { MAINTAINED_SKILLS } from './chunk-CDDED64E.js';
 import { resolveVersion } from './chunk-RA3O54FC.js';
 import { parsePolicy } from './chunk-FGXT5OXS.js';
 import { CheckItemsSchema, CHECK_ITEM_REASON_MAX_LENGTH } from './chunk-EOTMDIYC.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import { fdName } from './chunk-HACGUL52.js';
+import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath, jobConsolePath } from './chunk-PXGU3GKY.js';
+import { JOB_MOUNT, repositoriesOf, primaryOf, buildEnvironment, CHECKOUT_DIR, claudeCredential, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, fdName, buildMavenSettingsXml, CLAUDE_CREDENTIAL_VARIABLES, currentClaudeCredential, removedClaudeCredentialValues, managedClaudeCredential, RELAY_PORT, repositoryPath, lifecycleWorkdir, CHECK_ITEMS_FILE, MAVEN_SETTINGS_FILE, checkEnvironment, EVAL_INPUT_DIR } from './chunk-G4W4B33M.js';
 import { RUNNER_WORDED_REASONS, UNKNOWN_TRACKING_REASON } from './chunk-MESOOLF4.js';
 import { existsSync, statSync, appendFileSync, rmSync, mkdirSync, chmodSync, writeFileSync, openSync, readFileSync, closeSync, readdirSync, lstatSync, fstatSync, readSync, realpathSync } from 'fs';
 import { join, dirname, delimiter, sep } from 'path';
@@ -297,7 +296,7 @@ async function provisionMicroVm(input) {
   const tag = `#${item.number}`;
   const logPath = join(jobDir, "provision.log");
   const fail = (reason) => ({ ok: false, reason });
-  if (claudeCredential(runtime.hostEnv) === void 0) return fail(AGENT_CREDENTIAL_MISSING);
+  if (!hasClaudeCredential(config, runtime.hostEnv, jobDir)) return fail(AGENT_CREDENTIAL_MISSING);
   const repositories = repositoriesOf({ repositories: input.repositories, repository: item.specRepository, branch: input.branch });
   const primary = primaryOf(repositories);
   if (primary === void 0) return fail("the work item names no repository to clone");
@@ -2238,7 +2237,7 @@ async function runJudge(input) {
     const brief = check.judge.text;
     if (brief === void 0) return await fail(check, `the brief ${check.judge.brief} is not in the definitions repository`);
     if (tokens === void 0) return await fail(check, "the build's repository tokens are no longer held, so the branch cannot be fetched");
-    const credential = claudeCredential(runtime.hostEnv);
+    const credential = config.managed === true && managedClaudeKeyFor(jobDir) !== void 0 ? managedClaudeCredential() : claudeCredential(runtime.hostEnv);
     if (credential === void 0) return await fail(check, "the host holds no Claude credential for the judge");
     const branch = job.branch;
     if (branch === void 0) return await fail(check, "the build pushed no branch: the claim names none");
@@ -2635,7 +2634,7 @@ function mergeScrubConfig(a, b) {
 function releaseScrub(config, home) {
   const merged = mergeScrubConfig(config.scrub, readCloudConfig(home).scrub);
   const secrets = [...headerVariables(config.build?.destinations), ...CLAUDE_CREDENTIAL_VARIABLES].map((name) => process.env[name] ?? "");
-  const held = [currentClaudeCredential(process.env)?.value, ...removedClaudeCredentialValues()].filter((value) => value !== void 0);
+  const held = [currentClaudeCredential(process.env)?.value, ...removedClaudeCredentialValues(), ...managedClaudeKeyValues()].filter((value) => value !== void 0);
   return { literals: [...scrubList(merged?.literals), ...secrets, ...held], patterns: scrubList(merged?.patterns) };
 }
 function transcriptScrub(config, secrets) {
@@ -3222,6 +3221,7 @@ async function finishJob(job, jobDirPath, outcome, config, deps, ending) {
     await held.revokeAll();
     deps.container.credentials.delete(jobDirPath);
   }
+  dropManagedClaudeKey(jobDirPath);
   if (outcome !== void 0) {
     const fromHook = readReasonLine(jobDirPath, config);
     if (verdictReason !== void 0) {

package/dist/{chunk-57L2YAJA.js → chunk-FDJPDZSR.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-PA6CK6WQ.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-PXGU3GKY.js';
 import { readFileSync, mkdirSync, writeFileSync, renameSync } from 'fs';
 import { join } from 'path';
 

package/dist/{chunk-EE2ZZGQV.js → chunk-FVCHHSHB.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
+import { DEFAULT_DASHBOARD } from './chunk-Y5YCX6AL.js';
 import { sanitizeTerminal } from './chunk-MECW77XP.js';
-import { remoteLookupFailed } from './chunk-6ZFY2L2T.js';
 import { isAgentsMdLayout } from './chunk-NKOM4JKY.js';
-import { DEFAULT_DASHBOARD } from './chunk-Y5YCX6AL.js';
-import { cliFetch, resolveGatewayCredentials } from './chunk-6RKD7YZ6.js';
+import { cliFetch, resolveGatewayCredentials } from './chunk-3N77LUQI.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
 import { findGitDirs, writeRepoConnection, readRepoConnection } from './chunk-BJ3KTMDH.js';
+import { remoteLookupFailed } from './chunk-AJYZNISW.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { execFileSync } from 'child_process';
 import { lstatSync } from 'fs';

package/dist/{chunk-BALIE3BA.js → chunk-G4W4B33M.js}

@@ -1,14 +1,193 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { parseRunnerEnv } from './chunk-HACGUL52.js';
 import { TARGET_TUNNEL, TARGET_LEASE, destinationTarget } from './chunk-MESOOLF4.js';
-import { readFileSync, mkdirSync, writeFileSync, existsSync, unlinkSync, chmodSync } from 'fs';
+import { spawn, spawnSync } from 'child_process';
+import { statSync, readFileSync, mkdirSync, writeFileSync, existsSync, unlinkSync, chmodSync } from 'fs';
 import { join, dirname } from 'path';
 import { request as request$1, createServer } from 'http';
 import { request } from 'https';
 import { createServer as createServer$1 } from 'net';
 
 createRequire(import.meta.url);
+var FD_STORE_ENV = "OUTERLAYER_FD_STORE";
+var MIN_SYSTEMD = 254;
+var LISTEN_FDS_START = 3;
+var FD_SLOTS_PER_BUILD = 64;
+function fdName(buildId, socket) {
+  return `ol-${buildId}-${socket}`;
+}
+function listenFdOf(server) {
+  const handle = server._handle;
+  return typeof handle?.fd === "number" && handle.fd >= 0 ? handle.fd : void 0;
+}
+function parseListenFds(env, pid) {
+  const found = /* @__PURE__ */ new Map();
+  if (env.LISTEN_PID !== String(pid)) return found;
+  const count = Number(env.LISTEN_FDS);
+  if (!Number.isInteger(count) || count <= 0) return found;
+  const names = (env.LISTEN_FDNAMES ?? "").split(":");
+  for (let index = 0; index < count; index++) {
+    const name = names[index];
+    if (name !== void 0 && name !== "" && name !== "stored") found.set(name, LISTEN_FDS_START + index);
+  }
+  return found;
+}
+function listenOnFd(server, fd) {
+  return new Promise((resolve, reject) => {
+    server.once("error", reject);
+    server.listen({ fd }, () => {
+      server.off("error", reject);
+      resolve();
+    });
+  });
+}
+function run(spawnFn, command, args, fd) {
+  return new Promise((resolve) => {
+    let stdout = "";
+    let stderr = "";
+    let child;
+    try {
+      child = spawnFn(command, args, { stdio: ["ignore", "pipe", "pipe", ...fd === void 0 ? [] : [fd]] });
+    } catch (err) {
+      resolve({ status: null, stdout, stderr: err instanceof Error ? err.message : String(err) });
+      return;
+    }
+    child.stdout?.on("data", (chunk) => stdout += chunk.toString("utf8"));
+    child.stderr?.on("data", (chunk) => stderr += chunk.toString("utf8"));
+    child.on("error", (err) => resolve({ status: null, stdout, stderr: err.message }));
+    child.on("close", (status) => resolve({ status, stdout, stderr }));
+  });
+}
+function systemdVersion(ran) {
+  const match = /^systemd (\d+)/.exec(ran.stdout);
+  return ran.status === 0 && match !== null ? Number(match[1]) : void 0;
+}
+function realFdStorePort(options = {}) {
+  const env = options.env ?? process.env;
+  const pid = options.pid ?? process.pid;
+  const command = options.command ?? "systemd-notify";
+  const spawnFn = options.spawn ?? spawn;
+  let inherited;
+  let held2;
+  let version;
+  const inheritedNames = () => inherited ??= parseListenFds(env, pid);
+  const heldNames = () => held2 ??= new Set(inheritedNames().keys());
+  return {
+    async status() {
+      if (env.NOTIFY_SOCKET === void 0 || env.NOTIFY_SOCKET === "") return { ok: false, reason: "NOTIFY_SOCKET is not set, so this runner was not started by a service that accepts descriptors" };
+      const size = Number(env[FD_STORE_ENV]);
+      if (!Number.isInteger(size) || size <= 0) return { ok: false, reason: `${FD_STORE_ENV} is not set, so the service's unit keeps no descriptor store` };
+      version ??= run(spawnFn, command, ["--version"]).then(systemdVersion);
+      const found = await version;
+      if (found === void 0) return { ok: false, reason: `${command} could not be run, so no descriptor can be stored` };
+      if (found < MIN_SYSTEMD) return { ok: false, reason: `systemd ${found} cannot store a descriptor sent from a child process: it needs systemd ${MIN_SYSTEMD} or later` };
+      return { ok: true };
+    },
+    async push(name, server) {
+      const fd = listenFdOf(server);
+      if (fd === void 0) throw new Error(`${name} has no descriptor to store`);
+      const size = Number(env[FD_STORE_ENV]);
+      const names = heldNames();
+      if (Number.isInteger(size) && names.size >= size) {
+        throw new Error(`the descriptor store is full: it holds ${names.size} descriptors, the size the service's unit sets (FileDescriptorStoreMax=${size})`);
+      }
+      const ran = await run(spawnFn, command, [`--fd=${LISTEN_FDS_START}`, `--fdname=${name}`, "FDSTORE=1"], fd);
+      if (ran.status !== 0) throw new Error(`storing ${name} failed${ran.status === null ? "" : ` (exit ${ran.status})`}: ${ran.stderr.trim().split("\n")[0] ?? ""}`);
+      names.add(name);
+    },
+    async remove(name) {
+      const ran = await run(spawnFn, command, ["FDSTOREREMOVE=1", `FDNAME=${name}`]);
+      if (ran.status !== 0) throw new Error(`removing ${name} from the store failed${ran.status === null ? "" : ` (exit ${ran.status})`}: ${ran.stderr.trim().split("\n")[0] ?? ""}`);
+      heldNames().delete(name);
+    },
+    inherited() {
+      return inheritedNames();
+    },
+    listenOn: listenOnFd
+  };
+}
+
+// src/runner/service/slice.ts
+var BUILD_SLICE_MEMORY_ENV = "OUTERLAYER_BUILD_SLICE_MEMORY";
+
+// src/runner/service/inspect.ts
+var CREDENTIAL_VARIABLES = ["CLAUDE_CODE_OAUTH_TOKEN", "ANTHROPIC_API_KEY"];
+function property(shown, name) {
+  return new RegExp(`^${name}=(.*)$`, "m").exec(shown)?.[1]?.trim();
+}
+function holdsGroup(status, gid) {
+  const primary = /^Gid:\s+(\d+)/m.exec(status)?.[1];
+  const supplementary = /^Groups:[ \t]*(.*)$/m.exec(status)?.[1]?.trim().split(/\s+/).filter((g) => g !== "") ?? [];
+  return [primary, ...supplementary].some((g) => g !== void 0 && Number(g) === gid);
+}
+function parseRunnerEnv(text) {
+  const env = {};
+  for (const line of text.split("\n")) {
+    const match = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)=(.*)$/.exec(line);
+    if (match === null) continue;
+    env[match[1]] = match[2].trim().replace(/^(["'])(.*)\1$/, "$2");
+  }
+  return env;
+}
+function credentialNames(env) {
+  const set = parseRunnerEnv(env ?? "");
+  return CREDENTIAL_VARIABLES.filter((name) => (set[name] ?? "").trim() !== "");
+}
+function startedWithStore(environ) {
+  const vars = new Map(environ.split("\0").map((entry) => [entry.slice(0, entry.indexOf("=")), entry.slice(entry.indexOf("=") + 1)]));
+  return (vars.get("NOTIFY_SOCKET") ?? "") !== "" && Number(vars.get(FD_STORE_ENV)) > 0;
+}
+function inspectService(unit, configDir, probes) {
+  const shown = probes.show(unit);
+  if (shown === void 0 || property(shown, "LoadState") !== "loaded") return void 0;
+  const pid = Number(property(shown, "MainPID") ?? "0");
+  const mainPid = Number.isInteger(pid) && pid > 0 ? pid : void 0;
+  const delegate = property(shown, "Delegate");
+  const storeMax = Number(property(shown, "FileDescriptorStoreMax"));
+  const status = mainPid === void 0 ? void 0 : probes.readFile(`/proc/${mainPid}/status`);
+  const environ = mainPid === void 0 ? void 0 : probes.readFile(`/proc/${mainPid}/environ`);
+  const systemd = Number(/^systemd (\d+)/.exec(probes.systemctlVersion?.() ?? "")?.[1]);
+  const kvm = probes.kvmGid();
+  const sliceMemory = Number(new RegExp(`(?:^|\\s)${BUILD_SLICE_MEMORY_ENV}=(\\d+)(?:\\s|$)`).exec(property(shown, "Environment") ?? "")?.[1]);
+  return {
+    unit,
+    ...Number.isSafeInteger(sliceMemory) && sliceMemory > 0 ? { buildSliceMemory: sliceMemory } : {},
+    mainPid,
+    delegate: delegate === void 0 ? void 0 : delegate !== "no",
+    ...Number.isInteger(storeMax) && property(shown, "FileDescriptorStoreMax") !== void 0 ? { fdStoreMax: storeMax } : {},
+    hasKvmGroup: status === void 0 || kvm === void 0 ? void 0 : holdsGroup(status, kvm),
+    ...environ === void 0 ? {} : { startedWithStore: startedWithStore(environ) },
+    ...systemd > 0 ? { systemdVersion: systemd } : {},
+    // `claude.env` first, where the service loads the credential from; `runner.env` holds one that was never moved.
+    credentialVariables: [.../* @__PURE__ */ new Set([...credentialNames(probes.readFile(join(configDir, "claude.env"))), ...credentialNames(probes.readFile(join(configDir, "runner.env")))])]
+  };
+}
+function realInspectProbes() {
+  return {
+    show: (unit) => {
+      const result = spawnSync("systemctl", ["show", "--property=LoadState,MainPID,Delegate,FileDescriptorStoreMax,Environment", unit], { encoding: "utf8", timeout: 1e4 });
+      return result.status === 0 ? result.stdout : void 0;
+    },
+    readFile: (path) => {
+      try {
+        return readFileSync(path, "utf8");
+      } catch {
+        return void 0;
+      }
+    },
+    systemctlVersion: () => {
+      const result = spawnSync("systemctl", ["--version"], { encoding: "utf8", timeout: 1e4 });
+      return result.status === 0 ? result.stdout : void 0;
+    },
+    kvmGid: () => {
+      try {
+        return statSync("/dev/kvm").gid;
+      } catch {
+        return void 0;
+      }
+    }
+  };
+}
 var CLAUDE_CREDENTIAL_ID = "claude";
 var CLAUDE_ENV_FILE = "claude.env";
 function claudeEnvPath(configPath) {
@@ -125,6 +304,9 @@ function claudeCredential(hostEnv, options = {}) {
   if (credential === void 0) return void 0;
   return { variable: credential.variable, placeholder: credential.variable === "CLAUDE_CODE_OAUTH_TOKEN" ? OAUTH_PLACEHOLDER : API_KEY_PLACEHOLDER };
 }
+function managedClaudeCredential() {
+  return { variable: "ANTHROPIC_API_KEY", placeholder: API_KEY_PLACEHOLDER };
+}
 function gatewayUpstream(gatewayUrl) {
   return `${new URL(gatewayUrl).origin}/`;
 }
@@ -142,8 +324,9 @@ function forwardedEnvironment(hostEnv) {
   return env;
 }
 function builtInDestinations(input) {
-  const credential = claudeCredential(input.hostEnv);
-  const apiKeyMode = credential?.variable === "ANTHROPIC_API_KEY";
+  const managedKey = input.claudeApiKey !== void 0 && input.claudeApiKey !== "";
+  const credential = managedKey ? void 0 : claudeCredential(input.hostEnv);
+  const apiKeyMode = managedKey || credential?.variable === "ANTHROPIC_API_KEY";
   return [
     {
       destination: {
@@ -163,7 +346,7 @@ function builtInDestinations(input) {
         header: apiKeyMode ? { name: "x-api-key", value: "${ANTHROPIC_API_KEY}", variables: ["ANTHROPIC_API_KEY"] } : { name: "Authorization", value: "Bearer ${CLAUDE_CODE_OAUTH_TOKEN}", variables: ["CLAUDE_CODE_OAUTH_TOKEN"] },
         env: {}
       },
-      hostEnv: forwardedEnvironment(input.hostEnv),
+      hostEnv: managedKey ? { ANTHROPIC_API_KEY: input.claudeApiKey } : forwardedEnvironment(input.hostEnv),
       // A build's own key in either header would sit beside the runner's, and the upstream takes one of them.
       drop: ["x-api-key", "authorization"],
       socket: CLAUDE_SOCKET
@@ -471,7 +654,7 @@ async function startBuildServices(input) {
       targets.set(destinationTarget(index), (stream) => server.acceptStream(stream));
       if (server.port !== void 0) destinationPorts.push(server.port);
     }
-    const builtIns = input.builtIns === void 0 ? [] : builtInDestinations({ gatewayUrl: input.builtIns.gatewayUrl, itemKey: input.builtIns.itemKey, hostEnv: input.hostEnv, claudeUpstream: input.builtIns.claudeUpstream });
+    const builtIns = input.builtIns === void 0 ? [] : builtInDestinations({ gatewayUrl: input.builtIns.gatewayUrl, itemKey: input.builtIns.itemKey, hostEnv: input.hostEnv, claudeUpstream: input.builtIns.claudeUpstream, claudeApiKey: input.builtIns.claudeApiKey });
     for (const builtIn of builtIns) {
       const server = await startDestination({
         destination: builtIn.destination,
@@ -776,7 +959,7 @@ function buildEnvironment(input) {
     if (skipped) notices.push(MAVEN_NO_PROXY_NOTE);
   }
   const destinations = destinationEnvironment(input.config.build?.destinations, containerLocalAddress);
-  const builtInLiterals = builtIns ? builtInEnvironment(containerBuiltInAddress, claudeCredential(input.hostEnv)) : {};
+  const builtInLiterals = builtIns ? builtInEnvironment(containerBuiltInAddress, input.config.managed === true ? managedClaudeCredential() : claudeCredential(input.hostEnv)) : {};
   const hooksPath = input.identity?.hooksPath;
   const hooks = {};
   if (hooksPath !== void 0) {
@@ -867,4 +1050,4 @@ function routesOf(counts) {
   return routes.length === 0 ? {} : { routes };
 }
 
-export { AGENT_CREDENTIAL_MISSING, BUILD_HOME, BUILT_IN_NAMES, CHECKOUT_DIR, CHECK_ITEMS_FILE, CLAUDE_CREDENTIAL_ID, CLAUDE_CREDENTIAL_VARIABLES, CLAUDE_ENV_FILE, CLAUDE_PORT, CLAUDE_SOCKET, DESTINATION_BASE_PORT, EVAL_INPUT_DIR, FORWARDED_CLAUDE_CREDENTIAL_VARIABLES, GATEWAY_PORT, GATEWAY_SOCKET, JOB_MOUNT, MAVEN_NO_PROXY_NOTE, MAVEN_SETTINGS_FILE, MAVEN_SPACE_NOTE, PROXY_WARNING_FLAG, RELAY_PORT, authorEnvironment, buildEnvironment, buildMavenSettingsXml, builtInEnvironment, checkEnvironment, checkoutPath, claudeCredential, claudeCredentialVariablesSet, claudeEnvPath, commitIdentityRecord, containerLocalAddress, credentialLineIn, currentClaudeCredential, destinationEnvironment, headerVariables, heldClaudeCredential, isRefusedInConfig, isReservedVariable, lifecycleWorkdir, mavenArgs, mavenSettingsXml, namesGlobalSettings, parseClaimIdentity, parseClaimedRepositories, parseIsolation, parseUnreachable, primaryOf, proxyEnvironment, readClaudeCredential, removedClaudeCredentialValues, repositoriesOf, repositoryPath, resolveDestinations, sharedUserEnvironment, startBuildServices, takeClaudeCredential, tokenHeader, withGitConfig, withHooksPath, withProxyWarningHidden, withTokenHeader, withTunnelRecord, withoutCredentialLines, writeBuildMavenSettings, writeMavenSettings };
+export { AGENT_CREDENTIAL_MISSING, BUILD_HOME, BUILD_SLICE_MEMORY_ENV, BUILT_IN_NAMES, CHECKOUT_DIR, CHECK_ITEMS_FILE, CLAUDE_CREDENTIAL_ID, CLAUDE_CREDENTIAL_VARIABLES, CLAUDE_ENV_FILE, CLAUDE_PORT, CLAUDE_SOCKET, DESTINATION_BASE_PORT, EVAL_INPUT_DIR, FD_SLOTS_PER_BUILD, FD_STORE_ENV, FORWARDED_CLAUDE_CREDENTIAL_VARIABLES, GATEWAY_PORT, GATEWAY_SOCKET, JOB_MOUNT, MAVEN_NO_PROXY_NOTE, MAVEN_SETTINGS_FILE, MAVEN_SPACE_NOTE, MIN_SYSTEMD, PROXY_WARNING_FLAG, RELAY_PORT, authorEnvironment, buildEnvironment, buildMavenSettingsXml, builtInEnvironment, checkEnvironment, checkoutPath, claudeCredential, claudeCredentialVariablesSet, claudeEnvPath, commitIdentityRecord, containerLocalAddress, credentialLineIn, currentClaudeCredential, destinationEnvironment, fdName, headerVariables, heldClaudeCredential, inspectService, isRefusedInConfig, isReservedVariable, lifecycleWorkdir, managedClaudeCredential, mavenArgs, mavenSettingsXml, namesGlobalSettings, parseClaimIdentity, parseClaimedRepositories, parseIsolation, parseRunnerEnv, parseUnreachable, primaryOf, proxyEnvironment, readClaudeCredential, realFdStorePort, realInspectProbes, removedClaudeCredentialValues, repositoriesOf, repositoryPath, resolveDestinations, sharedUserEnvironment, startBuildServices, takeClaudeCredential, tokenHeader, withGitConfig, withHooksPath, withProxyWarningHidden, withTokenHeader, withTunnelRecord, withoutCredentialLines, writeBuildMavenSettings, writeMavenSettings };

package/dist/{chunk-ZW6L275N.js → chunk-HHFZXOBC.js}

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { checkStarterFiles, contextIsGoverned } from './chunk-AP2K4LPI.js';
-import { fleetCheck, checkBuildSkill, checkMachineSkills, checkCommittedMaintainedSkills, checkMaintainedReferences, checkIgnoredSkillFolders } from './chunk-272AKVRP.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-Z4KWHSO4.js';
-import { isLinkedRepository } from './chunk-EE2ZZGQV.js';
-import { sanitizeTerminal } from './chunk-MECW77XP.js';
-import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-6ZFY2L2T.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-UN3SQTVL.js';
+import { isLinkedRepository } from './chunk-FVCHHSHB.js';
 import { C } from './chunk-ANPNT6PM.js';
+import { fleetCheck, checkBuildSkill, checkMachineSkills, checkCommittedMaintainedSkills, checkMaintainedReferences, checkIgnoredSkillFolders } from './chunk-YHKU2NOZ.js';
+import { sanitizeTerminal } from './chunk-MECW77XP.js';
 import { checkFormerSkillNames } from './chunk-JWNH4ZTF.js';
-import { resolveGatewayCredentials, defaultFetch } from './chunk-6RKD7YZ6.js';
-import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-65AKMFBH.js';
+import { resolveGatewayCredentials, defaultFetch } from './chunk-3N77LUQI.js';
+import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-25GRRBTH.js';
 import { readStatuslineState, STATE_FRESH_MS } from './chunk-I7RZHMXW.js';
 import { hookCommandEscapesControlPlane, CONTROL_PLANE_DIR_VARIABLE } from './chunk-HCVLP7XA.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
+import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-AJYZNISW.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { readSettings, settingsPath, isOurStatuslineSlot, statuslineWrappedOriginal, REGISTERED_EVENTS, isOurHookCommand, ourCommandBins, cliBinResolvable, ourDirectScriptBins, wrappedOriginalCommand } from './chunk-URIZRCRY.js';
 import { readDeliveryRecord, readDegraded, readSourceCache } from './chunk-YQR6E6OV.js';
@@ -1195,8 +1195,8 @@ function doctorExitCode(checks) {
 
 // src/doctor-report.ts
 async function gatherDoctorChecks() {
-  const { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK } = await import('./build-disk-LEZ6LAM3.js');
-  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-WRHQDGVI.js');
+  const { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK } = await import('./build-disk-ZL46AEN3.js');
+  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-QASNKYM6.js');
   const configPath = defaultRunnerConfigPath();
   const runnerHost = hasRunnerBlock(configPath);
   const hooks = (() => {
@@ -1217,7 +1217,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-UR76MCGI.js');
+    const { runnerHostChecks } = await import('./doctor-LK6E3XOW.js');
     const gateway = (() => {
       try {
         const { url, apiKey, appId } = loadRunnerConfig(configPath);
@@ -1244,10 +1244,8 @@ async function gatherDoctorChecks() {
     const service = await (async () => {
       const { existsSync: existsSync3 } = await import('fs');
       if (process.platform !== "linux" || !existsSync3("/run/systemd/system")) return void 0;
-      const { inspectService, realInspectProbes } = await import('./inspect-DNLXTXLA.js');
-      const { DEFAULT_UNIT_NAME } = await import('./install-OCBERTPQ.js');
-      const { dirname: dirname2 } = await import('path');
-      return inspectService(DEFAULT_UNIT_NAME, dirname2(configPath), realInspectProbes());
+      const { inspectRunnerService } = await import('./find-unit-4UR647S4.js');
+      return inspectRunnerService(configPath);
     })();
     checks.push(...await runnerHostChecks({ configPath, hooks, gateway, repos, runner, service }));
   }

package/dist/{chunk-AMEM2ZLL.js → chunk-INOUUSYI.js}

@@ -1,10 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { builtinKind } from './chunk-3CKMB2UK.js';
-import { parseSize } from './chunk-43I7PXDP.js';
-import { runnerDir } from './chunk-PA6CK6WQ.js';
-import { CLAUDE_CREDENTIAL_ID, CLAUDE_ENV_FILE, credentialLineIn, withoutCredentialLines } from './chunk-BALIE3BA.js';
-import { FD_SLOTS_PER_BUILD, FD_STORE_ENV } from './chunk-HACGUL52.js';
+import { builtinKind, keepsHostBuilder } from './chunk-2D6CKNR7.js';
+import { parseSize } from './chunk-5AFPP3GZ.js';
+import { runnerDir } from './chunk-PXGU3GKY.js';
+import { FD_SLOTS_PER_BUILD, FD_STORE_ENV, BUILD_SLICE_MEMORY_ENV, CLAUDE_CREDENTIAL_ID, CLAUDE_ENV_FILE, credentialLineIn, withoutCredentialLines } from './chunk-G4W4B33M.js';
 import { existsSync, readFileSync, writeFileSync, chmodSync, renameSync } from 'fs';
 import { dirname, join } from 'path';
 import { spawnSync } from 'child_process';
@@ -35,6 +34,7 @@ User=${unit.user}
 ExecStart=${unit.execStart}
 ${unit.helper === void 0 ? "" : `Environment=OUTERLAYER_HELPER_SOCKET=${unit.helper.socket}
 `}${unit.fdStore === void 0 ? "" : `Environment=${FD_STORE_ENV}=${unit.fdStore}
+`}${unit.sliceMemoryBytes === void 0 ? "" : `Environment=${BUILD_SLICE_MEMORY_ENV}=${unit.sliceMemoryBytes}
 `}EnvironmentFile=-${escapeUnitPath(`${unit.configDir}/runner.env`)}
 ${unit.credential === "load" ? `LoadCredential=${CLAUDE_CREDENTIAL_ID}:${credentialPath(`${unit.configDir}/${CLAUDE_ENV_FILE}`)}` : `EnvironmentFile=-${escapeUnitPath(`${unit.configDir}/${CLAUDE_ENV_FILE}`)}`}
 Restart=on-failure
@@ -64,6 +64,15 @@ function checkFit(input) {
   const perBuild = parseSize(input.buildMemory);
   if (perBuild === void 0) return { fits: true };
   const neededBytes = input.concurrency * perBuild;
+  if (input.sliceBytes !== void 0) {
+    if (neededBytes <= input.sliceBytes) return { fits: true };
+    return {
+      fits: false,
+      neededBytes,
+      availableBytes: input.sliceBytes,
+      message: `runner.concurrency ${input.concurrency} times runner.build.memory ${input.buildMemory} needs ${gib(neededBytes)}, and the memory limit of the runner's build slice is ${gib(input.sliceBytes)}`
+    };
+  }
   const availableBytes = Math.max(0, input.usableBytes - RUNNER_RESERVE_BYTES);
   if (neededBytes <= availableBytes) return { fits: true };
   return {
@@ -173,6 +182,10 @@ function defaultRun(args) {
 
 // src/runner/service/install.ts
 var DEFAULT_UNIT_NAME = "outerlayer-runner";
+function unitNameProblem(name) {
+  if (/^[A-Za-z0-9][A-Za-z0-9_.-]{0,63}$/.test(name) && !name.includes("..")) return void 0;
+  return `\u2717 --unit-name ${JSON.stringify(name)} is not a unit name. Use up to 64 letters, digits, "_", "-" and ".", with no "..", starting with a letter or digit. Nothing is set up`;
+}
 var LOAD_CREDENTIAL_SINCE = 247;
 var CREDENTIAL_FILE_MODE = 384;
 function prepareCredentialFile(configDir, lines) {
@@ -235,6 +248,12 @@ function attempt(lines, step) {
   }
 }
 var OWN_HOOKS = "the hooks are the host's own executables, so the runner does not write a service for them: run `outerlayer runner install --service --print` to print the unit, and edit it for your hooks";
+function needsHostDocker(request) {
+  const provision = builtinKind(request.hooks.provision);
+  const cleanup = builtinKind(request.hooks.cleanup);
+  if (cleanup === "vm" && !keepsHostBuilder({ hooks: request.hooks, build: { imageBuild: request.imageBuild } }, request.builderDiskPinned)) return false;
+  return provision === "container" || provision === "vm" || cleanup === "container" || cleanup === "vm";
+}
 function installService(request, deps) {
   const unitName = request.unitName ?? DEFAULT_UNIT_NAME;
   const unitPath = unitPathFor(unitName);
@@ -251,10 +270,11 @@ function installService(request, deps) {
     credential,
     execStart: request.execStart,
     timeLimitMinutes: request.timeLimitMinutes,
-    docker: kind === "container" || kind === "vm" || builtinKind(request.hooks.cleanup) === "container" || builtinKind(request.hooks.cleanup) === "vm",
+    docker: needsHostDocker(request),
     ...request.helperSocket !== void 0 && request.helperUnit !== void 0 ? { helper: { unit: request.helperUnit, socket: request.helperSocket } } : {},
     // A microVM build under the helper keeps its sockets in the descriptor store, so the runner can restart and the build goes on.
-    ...kind === "vm" && request.helperSocket !== void 0 && request.helperUnit !== void 0 ? { fdStore: Math.max(1, request.concurrency) * FD_SLOTS_PER_BUILD } : {}
+    ...kind === "vm" && request.helperSocket !== void 0 && request.helperUnit !== void 0 ? { fdStore: Math.max(1, request.concurrency) * FD_SLOTS_PER_BUILD } : {},
+    sliceMemoryBytes: request.buildSliceMemoryBytes
   });
   if (request.print === true) return outcome(true, "printed", [], unit);
   if (own) return outcome(false, "refused", [OWN_HOOKS]);
@@ -281,7 +301,7 @@ function installService(request, deps) {
     return outcome(false, "refused", ["systemd was not found (/run/systemd/system is missing), so no service is set up. `--print` prints the unit for another service manager"]);
   }
   if (kind === "container" || kind === "vm") {
-    const fit = checkFit({ concurrency: request.concurrency, buildMemory: request.buildMemory, usableBytes: deps.usableMemoryBytes });
+    const fit = checkFit({ concurrency: request.concurrency, buildMemory: request.buildMemory, usableBytes: deps.usableMemoryBytes, sliceBytes: request.buildSliceMemoryBytes });
     if (!fit.fits) return outcome(false, "refused", [`${fit.message}. Nothing is set up: lower runner.concurrency or runner.build.memory, then run this again`]);
   }
   const existing = deps.systemd.read(unitPath);
@@ -441,4 +461,4 @@ function uninstallService(request, deps) {
   return outcome(true, "removed", lines);
 }
 
-export { DEFAULT_UNIT_NAME, RUNNER_RESERVE_BYTES, UNIT_MARKER, VM_SERVICE_NAME, checkFit, installService, realTaskScheduler, uninstallService, unitPathFor };
+export { DEFAULT_UNIT_NAME, RUNNER_RESERVE_BYTES, UNIT_MARKER, VM_SERVICE_NAME, checkFit, escapeUnitPath, installService, realTaskScheduler, uninstallService, unitNameProblem };

package/dist/{chunk-XFFUXXI4.js → chunk-JBCOUY4M.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LiveUploader } from './chunk-YGSY2NWU.js';
-import { CaptureDaemon } from './chunk-6ZFY2L2T.js';
-import { spoolDir } from './chunk-65AKMFBH.js';
+import { LiveUploader } from './chunk-QANM5COC.js';
+import { spoolDir } from './chunk-25GRRBTH.js';
+import { CaptureDaemon } from './chunk-AJYZNISW.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { mkdirSync, writeFileSync, rmSync } from 'fs';