@outerlayer/cli 0.34.0-next.20261026145838 → 0.34.0-next.20261026161241

package/README.md

@@ -334,6 +334,12 @@ content:
   provisions the build. The runner keeps the key in memory only, gives it to
   the build's model traffic, and forgets it when the attempt ends. It never
   writes the key to disk or to a log.
+- **`outerlayer runner start` on a managed runner** also asks your gateway for
+  the factory's build settings once for each claim (`POST
+  /v1/work-items/{id}/claim/build-settings`, signed with the host key). The
+  answer holds the machine size, the hosts the factory allows and the values of
+  its build variables. The runner keeps them in memory only, passes the
+  variables to the build, and scrubs each value from what it uploads.
 - **`outerlayer runner start` with `builtin:process` hooks** runs each build
   as a process under the runner's own user, with no isolation, and the
   attempt records `shared-user`. The runner clones the item's repository

package/dist/{agent-setup-FNDKCPUP.js → agent-setup-WOEZELVB.js}

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { keepHandWritten, runAgentSetup } from './chunk-3EJBI5JW.js';
+export { keepHandWritten, runAgentSetup } from './chunk-7FQYTM7M.js';
 import './chunk-KPHRRCUY.js';
 import './chunk-KT4CN6OU.js';
 import './chunk-4P6QGMPN.js';
 import './chunk-ANPNT6PM.js';
 import './chunk-NKOM4JKY.js';
-import './chunk-CAQCDYKF.js';
+import './chunk-5JGPTYLT.js';
 import './chunk-JWNH4ZTF.js';
-import './chunk-3N77LUQI.js';
+import './chunk-7QAJQDHS.js';
 import './chunk-PJDQPF5N.js';
-import './chunk-MOI2KDLH.js';
+import './chunk-L5VHGRQE.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-ZQSANKS4.js';
@@ -24,8 +24,8 @@ import './chunk-TUSYOL2O.js';
 import './chunk-FGXT5OXS.js';
 import './chunk-EOTMDIYC.js';
 import './chunk-VNVZDWO3.js';
-import './chunk-PXGU3GKY.js';
-import './chunk-G4W4B33M.js';
+import './chunk-GJ4KBHBD.js';
+import './chunk-SDAEXUIX.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{bridge-YJBB4YA3.js → bridge-F5FBQSPZ.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig } from './chunk-SI6WDF3U.js';
-import './chunk-G4W4B33M.js';
+export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig } from './chunk-CFFVCI2I.js';
+import './chunk-SDAEXUIX.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{build-ZJK6CPNH.js → build-UDOBVX5J.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { KEY_PREFIX, TAG_HOST, buildRepositoryImage, metadataFromLabels, prepareImageBuild, writeRecord } from './chunk-VVOSUGEF.js';
-export { RecipeError } from './chunk-M3ME6TLQ.js';
+export { KEY_PREFIX, TAG_HOST, buildRepositoryImage, metadataFromLabels, prepareImageBuild, writeRecord } from './chunk-H47VGSCW.js';
+export { RecipeError } from './chunk-HVQMIZ22.js';
 import './chunk-4UPET3R7.js';
-import './chunk-YNMVVQOQ.js';
+import './chunk-LQHCNXPK.js';
 import './chunk-JBJTC3UU.js';
-import './chunk-MOI2KDLH.js';
-import './chunk-GSSVJNP2.js';
+import './chunk-L5VHGRQE.js';
+import './chunk-Z7WMU3RA.js';
 import './chunk-EOTMDIYC.js';
-import './chunk-PXGU3GKY.js';
-import './chunk-G4W4B33M.js';
+import './chunk-GJ4KBHBD.js';
+import './chunk-SDAEXUIX.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{build-disk-7HS4UF7O.js → build-disk-C3WIAHCL.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK, DOCKER_CACHE_MS, allocatedBytes, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-UONH72CJ.js';
-import './chunk-M3ME6TLQ.js';
+export { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK, DOCKER_CACHE_MS, allocatedBytes, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-IWVGALDC.js';
+import './chunk-HVQMIZ22.js';
 import './chunk-4UPET3R7.js';
-import './chunk-MOI2KDLH.js';
-import './chunk-GSSVJNP2.js';
+import './chunk-L5VHGRQE.js';
+import './chunk-Z7WMU3RA.js';
 import './chunk-EOTMDIYC.js';
-import './chunk-PXGU3GKY.js';
-import './chunk-G4W4B33M.js';
+import './chunk-GJ4KBHBD.js';
+import './chunk-SDAEXUIX.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-26T15:00:03.094Z+e6e9c6f","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-26T16:14:37.797Z+2a1ebb8","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-MHZKDI4H.js → builder-YNXWVH2V.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-M3ME6TLQ.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-HVQMIZ22.js';
 import './chunk-4UPET3R7.js';
-import './chunk-MOI2KDLH.js';
-import './chunk-GSSVJNP2.js';
+import './chunk-L5VHGRQE.js';
+import './chunk-Z7WMU3RA.js';
 import './chunk-EOTMDIYC.js';
-import './chunk-PXGU3GKY.js';
-import './chunk-G4W4B33M.js';
+import './chunk-GJ4KBHBD.js';
+import './chunk-SDAEXUIX.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{check-4W4QUBMP.js → check-ERYYVAEM.js}

@@ -1,61 +1,61 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-PWSUNS6Y.js';
-import './chunk-CY5TCVBS.js';
-import './chunk-TFPNPS4Q.js';
-import './chunk-KRTD2F3I.js';
-import './chunk-AE3OTPUU.js';
+import { probeCredentials } from './chunk-E6OVLJTR.js';
+import './chunk-U6AWVO6L.js';
+import './chunk-HOUFCUMH.js';
+import './chunk-VWZHOFBP.js';
+import './chunk-4G4IH4A7.js';
 import './chunk-ZVB57WI6.js';
-import './chunk-FDJPDZSR.js';
+import './chunk-TS3EFB7S.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-E7R2GIAW.js';
-import './chunk-PAK5P2ND.js';
-import './chunk-63IVRRIO.js';
+import './chunk-MH6QLXUO.js';
+import './chunk-P3NPTFLF.js';
 import './chunk-I3LTIAOR.js';
-import './chunk-SKVA4KWD.js';
-import './chunk-XTYYF6P7.js';
-import './chunk-VGRCZE6U.js';
+import './chunk-LD3BHLK7.js';
+import './chunk-VUQKGBIQ.js';
+import './chunk-XSFR76J7.js';
 import './chunk-ESVW4MJY.js';
-import './chunk-SI6WDF3U.js';
-import { managedProblems, managedFactsOf } from './chunk-ZP7GKJSM.js';
-import './chunk-UMYYYF7B.js';
+import './chunk-CFFVCI2I.js';
+import { managedProblems, managedFactsOf } from './chunk-JC6AQ6PC.js';
+import './chunk-YL3RWW7X.js';
 import './chunk-TBT347UY.js';
-import { findServiceUnit } from './chunk-3RLKILPT.js';
+import { findServiceUnit } from './chunk-WE4C3ODP.js';
 import './chunk-XKJOIQ2Q.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, HELPER_ENV, helperSocketPath, probeHelper, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-7P3H4RY2.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, HELPER_ENV, helperSocketPath, probeHelper, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-CNZRUVZ5.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-VVOSUGEF.js';
+import './chunk-H47VGSCW.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-2ILU7UAU.js';
-import './chunk-OGPEHSNW.js';
-import './chunk-PP6OX4OT.js';
-import './chunk-SYVRBBLW.js';
+import './chunk-3VZTNXK5.js';
+import './chunk-6KFJIU73.js';
+import './chunk-EPFFYDNX.js';
+import './chunk-SDELQEG4.js';
 import './chunk-TQMI335S.js';
-import './chunk-7JE2WFNK.js';
-import './chunk-EMH2LNIE.js';
-import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-3EHDZTRT.js';
-import './chunk-UONH72CJ.js';
-import './chunk-M3ME6TLQ.js';
+import './chunk-HVPW272H.js';
+import './chunk-V2VJYK46.js';
+import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-ZIKZZ4LK.js';
+import './chunk-IWVGALDC.js';
+import './chunk-HVQMIZ22.js';
 import './chunk-4UPET3R7.js';
-import './chunk-YNMVVQOQ.js';
+import './chunk-LQHCNXPK.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-KT4CN6OU.js';
 import './chunk-4P6QGMPN.js';
-import './chunk-6JZXIWX7.js';
+import './chunk-JKNOJKVD.js';
 import './chunk-IP7BIBXJ.js';
-import './chunk-7DXVL7TN.js';
-import './chunk-35JMYSUD.js';
+import './chunk-IO2BBKG4.js';
+import './chunk-EUQZAH2W.js';
 import './chunk-Y5YCX6AL.js';
 import './chunk-G2JWZDFA.js';
 import './chunk-ANPNT6PM.js';
 import './chunk-MECW77XP.js';
 import './chunk-NKOM4JKY.js';
-import './chunk-CAQCDYKF.js';
+import './chunk-5JGPTYLT.js';
 import './chunk-JWNH4ZTF.js';
-import './chunk-3N77LUQI.js';
+import './chunk-7QAJQDHS.js';
 import './chunk-PJDQPF5N.js';
-import './chunk-MOI2KDLH.js';
-import './chunk-25GRRBTH.js';
+import './chunk-L5VHGRQE.js';
+import './chunk-NHEU5CON.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-2O5KA67H.js';
 import './chunk-BKO6JEZI.js';
@@ -63,7 +63,7 @@ import './chunk-FGF52V4V.js';
 import './chunk-HCVLP7XA.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-ZQSANKS4.js';
-import './chunk-GSSVJNP2.js';
+import './chunk-Z7WMU3RA.js';
 import './chunk-5BHIBJDA.js';
 import './chunk-CDDED64E.js';
 import './chunk-RA3O54FC.js';
@@ -77,8 +77,8 @@ import './chunk-TUSYOL2O.js';
 import './chunk-FGXT5OXS.js';
 import './chunk-EOTMDIYC.js';
 import './chunk-VNVZDWO3.js';
-import './chunk-PXGU3GKY.js';
-import { claudeEnvPath, parseRunnerEnv } from './chunk-G4W4B33M.js';
+import './chunk-GJ4KBHBD.js';
+import { claudeEnvPath, parseRunnerEnv } from './chunk-SDAEXUIX.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 import { readFileSync } from 'fs';

package/dist/{chunk-2ILU7UAU.js → chunk-3VZTNXK5.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { EXEC_PORT } from './chunk-OGPEHSNW.js';
+import { EXEC_PORT } from './chunk-6KFJIU73.js';
 import { createConnection } from 'net';
 
 createRequire(import.meta.url);

package/dist/{chunk-AE3OTPUU.js → chunk-4G4IH4A7.js}

@@ -1,35 +1,35 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { readsJobState, READ_JOB_STATE_FORMATS, jobStateFormatOf } from './chunk-ZVB57WI6.js';
-import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-63IVRRIO.js';
+import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-P3NPTFLF.js';
 import { zodProblem } from './chunk-I3LTIAOR.js';
-import { senderPidfile } from './chunk-SKVA4KWD.js';
-import { installScrubContext } from './chunk-XTYYF6P7.js';
-import { writeDockerClientConfig } from './chunk-SI6WDF3U.js';
+import { senderPidfile } from './chunk-LD3BHLK7.js';
+import { installScrubContext } from './chunk-VUQKGBIQ.js';
+import { writeDockerClientConfig } from './chunk-CFFVCI2I.js';
 import { upgradedStarterText } from './chunk-XKJOIQ2Q.js';
-import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, hasClaudeCredential, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, startHostServices, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, closeHostBuild, dropManagedClaudeKey, containerSenderCommand, hostCommandEnvironment, execArgv, signalInContainer, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, helperFirecrackerNote, managedClaudeKeyValues, stopJailed, deleteBuildDisk, managedClaudeKeyFor, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, ROOT_DISK_ID_PREFIX, copyJudgeTree } from './chunk-7P3H4RY2.js';
-import { readBranchHead, fetchCommit, diffBetween } from './chunk-VVOSUGEF.js';
-import { waitForAgent, vmExecArgs } from './chunk-2ILU7UAU.js';
-import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-OGPEHSNW.js';
-import { describeCallFailure, resolveGoverningSource, prefetchGovernedContext, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-PP6OX4OT.js';
-import { imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-3EHDZTRT.js';
-import { DEFAULT_CACHE_DISK, formatBytes, allocatedBytes } from './chunk-UONH72CJ.js';
-import { parseSize, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-M3ME6TLQ.js';
+import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, hasClaudeCredential, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, startHostServices, LEASE_SECONDS, managedBuildSettingsFor, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, closeHostBuild, dropManagedClaudeKey, dropManagedBuildSettings, containerSenderCommand, hostCommandEnvironment, execArgv, signalInContainer, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, managedMachineLimits, withFactoryHosts, helperFirecrackerNote, managedClaudeKeyValues, managedBuildSettingValues, stopJailed, deleteBuildDisk, managedClaudeKeyFor, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, ROOT_DISK_ID_PREFIX, copyJudgeTree } from './chunk-CNZRUVZ5.js';
+import { readBranchHead, fetchCommit, diffBetween } from './chunk-H47VGSCW.js';
+import { waitForAgent, vmExecArgs } from './chunk-3VZTNXK5.js';
+import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-6KFJIU73.js';
+import { describeCallFailure, resolveGoverningSource, prefetchGovernedContext, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-EPFFYDNX.js';
+import { imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-ZIKZZ4LK.js';
+import { formatBytes, DEFAULT_CACHE_DISK, allocatedBytes } from './chunk-IWVGALDC.js';
+import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, parseSize, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-HVQMIZ22.js';
 import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-4UPET3R7.js';
 import { isSameProcess, startTimeOf } from './chunk-JBJTC3UU.js';
-import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-6JZXIWX7.js';
+import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-JKNOJKVD.js';
 import { planArtifactUpload } from './chunk-MECW77XP.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
-import { signerFor } from './chunk-MOI2KDLH.js';
+import { signerFor } from './chunk-L5VHGRQE.js';
 import { resolvePackRoot, AGENTS_SKILLS_BASE, OUTERLAYER_SKILLS_BASE } from './chunk-ZQSANKS4.js';
-import { scrubText } from './chunk-GSSVJNP2.js';
+import { scrubText } from './chunk-Z7WMU3RA.js';
 import { MAINTAINED_SKILLS } from './chunk-CDDED64E.js';
 import { resolveVersion } from './chunk-RA3O54FC.js';
 import { parsePolicy } from './chunk-FGXT5OXS.js';
 import { CheckItemsSchema, CHECK_ITEM_REASON_MAX_LENGTH } from './chunk-EOTMDIYC.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath, jobConsolePath } from './chunk-PXGU3GKY.js';
-import { JOB_MOUNT, repositoriesOf, primaryOf, buildEnvironment, CHECKOUT_DIR, claudeCredential, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, fdName, buildMavenSettingsXml, CLAUDE_CREDENTIAL_VARIABLES, currentClaudeCredential, removedClaudeCredentialValues, managedClaudeCredential, RELAY_PORT, repositoryPath, lifecycleWorkdir, CHECK_ITEMS_FILE, MAVEN_SETTINGS_FILE, checkEnvironment, EVAL_INPUT_DIR } from './chunk-G4W4B33M.js';
+import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath, jobConsolePath } from './chunk-GJ4KBHBD.js';
+import { JOB_MOUNT, repositoriesOf, primaryOf, buildEnvironment, CHECKOUT_DIR, claudeCredential, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, fdName, buildMavenSettingsXml, CLAUDE_CREDENTIAL_VARIABLES, currentClaudeCredential, removedClaudeCredentialValues, managedClaudeCredential, RELAY_PORT, repositoryPath, lifecycleWorkdir, CHECK_ITEMS_FILE, MAVEN_SETTINGS_FILE, checkEnvironment, EVAL_INPUT_DIR } from './chunk-SDAEXUIX.js';
 import { RUNNER_WORDED_REASONS, UNKNOWN_TRACKING_REASON } from './chunk-MESOOLF4.js';
 import { existsSync, statSync, appendFileSync, rmSync, mkdirSync, chmodSync, writeFileSync, openSync, readFileSync, closeSync, readdirSync, lstatSync, fstatSync, readSync, realpathSync } from 'fs';
 import { join, dirname, delimiter, sep } from 'path';
@@ -193,6 +193,37 @@ var GUEST_MAVEN_DIR = `${JOB_MOUNT}/maven`;
 function buildMemoryBytes(config) {
   return parseSize(config.build?.memory ?? DEFAULT_MEMORY) ?? parseSize(DEFAULT_MEMORY);
 }
+function machineLimits(config, jobDir) {
+  const settings = managedBuildSettingsFor(jobDir);
+  if (settings !== void 0) return managedMachineLimits(settings);
+  return {
+    cpus: config.build?.cpus ?? DEFAULT_CPUS,
+    memoryBytes: buildMemoryBytes(config),
+    diskBytes: parseSize(config.build?.disk ?? DEFAULT_DISK) ?? parseSize(DEFAULT_DISK)
+  };
+}
+function recordedLimits(limits) {
+  return { memoryBytes: limits.memoryBytes, diskBytes: limits.diskBytes };
+}
+function memoryTextOf(config, jobDir, limits) {
+  return managedBuildSettingsFor(jobDir) === void 0 ? config.build?.memory : `${limits.memoryBytes / 1024 ** 3}g`;
+}
+function builderMachineFor(config, jobDir, assets, limits) {
+  return {
+    kernel: assets.kernel,
+    firecracker: assets.firecracker,
+    limits: { ...limits, cacheDiskBytes: parseSize(config.build?.cacheDisk ?? DEFAULT_CACHE_DISK) ?? parseSize(DEFAULT_CACHE_DISK) },
+    memory: memoryTextOf(config, jobDir, limits),
+    allowHosts: withFactoryHosts(config.build?.allowHosts, managedBuildSettingsFor(jobDir)),
+    managed: config.managed === true,
+    timeLimitMinutes: config.timeLimitMinutes
+  };
+}
+function factoryVariablesOf(config, jobDir) {
+  const held = managedBuildSettingsFor(jobDir)?.variables;
+  if (held !== void 0) return held;
+  return config.managed === true ? [] : void 0;
+}
 function firstLine(text2) {
   return text2.trim().split("\n")[0] ?? "";
 }
@@ -327,11 +358,8 @@ async function provisionMicroVm(input) {
     });
     if (unfetched !== void 0) return fail(unfetched);
   }
-  const limits = {
-    cpus: config.build?.cpus ?? DEFAULT_CPUS,
-    memoryBytes: buildMemoryBytes(config),
-    diskBytes: parseSize(config.build?.disk ?? DEFAULT_DISK) ?? parseSize(DEFAULT_DISK)
-  };
+  const limits = machineLimits(config, jobDir);
+  const memoryText = memoryTextOf(config, jobDir, limits);
   let buildsInBuilder = imageBuildOf(config) === "vm";
   if (buildsInBuilder && !vm.builderDiskPinned()) {
     if (config.managed === true) return fail(MANAGED_NO_BUILDER_DISK_REASON);
@@ -351,17 +379,7 @@ async function provisionMicroVm(input) {
     deadlineMs: input.deadlineMs,
     now: input.now,
     guestHelper: { path: assets.helper, sha256: assets.helperSha256 },
-    ...buildsInBuilder ? {
-      inBuilder: {
-        kernel: assets.kernel,
-        firecracker: assets.firecracker,
-        limits: { ...limits, cacheDiskBytes: parseSize(config.build?.cacheDisk ?? DEFAULT_CACHE_DISK) ?? parseSize(DEFAULT_CACHE_DISK) },
-        memory: config.build?.memory,
-        allowHosts: config.build?.allowHosts,
-        managed: config.managed === true,
-        timeLimitMinutes: config.timeLimitMinutes
-      }
-    } : {}
+    ...buildsInBuilder ? { inBuilder: builderMachineFor(config, jobDir, assets, limits) } : {}
   });
   if (!obtained.ok) return obtained.aborted === true ? { ok: false, reason: obtained.reason, aborted: true } : fail(obtained.reason);
   const { report } = obtained.built;
@@ -375,6 +393,7 @@ async function provisionMicroVm(input) {
     imageId: report.imageId,
     containerEnv: report.apply.containerEnv,
     builtIns: true,
+    limits: recordedLimits(limits),
     lifecycle: report.apply.lifecycle,
     ...governingSource.kind === "governed" ? { governing: { repository: governingSource.repository, ref: governingSource.ref, commit: governingSource.sha } } : {},
     ...report.docker === true ? { docker: true } : {}
@@ -387,7 +406,8 @@ async function provisionMicroVm(input) {
     repositories,
     hostEnv: runtime.hostEnv,
     containerEnv: report.apply.containerEnv,
-    builtIns: true
+    builtIns: true,
+    factoryVariables: factoryVariablesOf(config, jobDir)
   };
   const env = buildEnvironment(envInput);
   if (env.skippedTokenVariables.length > 0) {
@@ -406,7 +426,7 @@ async function provisionMicroVm(input) {
     let why = reason;
     if (!aborted && (state.cgroup !== void 0 || state.jailed !== void 0)) {
       try {
-        if (await microVmOomKills(runtime, state) > 0) why = outOfMemoryReason(config.build?.memory);
+        if (await microVmOomKills(runtime, state) > 0) why = outOfMemoryReason(memoryText);
       } catch (err) {
         log.error(`${tag} could not read the build's memory events: ${describeCallFailure(err)} \xB7 continuing`);
       }
@@ -425,7 +445,7 @@ async function provisionMicroVm(input) {
     imageConfig = { env: madeInBuilder.env, user: madeInBuilder.user };
   } else {
     try {
-      state.rootfs = await ensureRootfs({ host: vm.rootfs, runnerDir: runnerDirPath, imageId: report.imageId, memoryBytes: buildMemoryBytes(config) });
+      state.rootfs = await ensureRootfs({ host: vm.rootfs, runnerDir: runnerDirPath, imageId: report.imageId, memoryBytes: limits.memoryBytes });
       imageConfig = await vm.rootfs.imageConfig(report.imageId);
     } catch (err) {
       return bail(`the image could not be converted to a root disk: ${describeCallFailure(err)}`);
@@ -678,7 +698,8 @@ function vmExecFor(input, argv) {
     containerEnv: state.containerEnv ?? {},
     builtIns: state.builtIns === true,
     identity: input.job.commitIdentity,
-    imageEnv: state.imageEnv
+    imageEnv: state.imageEnv,
+    factoryVariables: factoryVariablesOf(input.config, input.jobDir)
   });
   const options = {
     socket: state.vsockPath,
@@ -707,7 +728,8 @@ async function startMicroVmCommand(input) {
     containerEnv: state.containerEnv ?? {},
     builtIns: state.builtIns === true,
     identity: input.job.commitIdentity,
-    imageEnv: state.imageEnv
+    imageEnv: state.imageEnv,
+    factoryVariables: factoryVariablesOf(input.config, input.jobDir)
   });
   const started = await input.runtime.vm.exec(state.vsockPath, {
     argv: ["/bin/sh", "-c", commandWithShim(input.job, input.cmdline)],
@@ -749,7 +771,8 @@ async function syncInMicroVm(input) {
       containerEnv: state.containerEnv ?? {},
       builtIns: state.builtIns === true,
       identity: job.commitIdentity,
-      imageEnv: state.imageEnv
+      imageEnv: state.imageEnv,
+      factoryVariables: factoryVariablesOf(input.config, input.jobDir)
     });
     const result = await runtime.vm.exec(state.vsockPath, {
       argv: ["outerlayer", "sync"],
@@ -873,6 +896,7 @@ async function startCheckMicroVm(input) {
   const { config, runtime, job, jobDir, tokens, log } = input;
   const { vm } = runtime;
   const tag = `#${job.item}`;
+  const limits = machineLimits(config, jobDir);
   const built = job.microvm;
   const repository = built?.repository ?? job.repository;
   if (built === void 0 || built.imageId === void 0 || repository === void 0 || job.branch === void 0) {
@@ -922,7 +946,7 @@ async function startCheckMicroVm(input) {
     state.rootfs = built.rootfs;
   } else {
     try {
-      state.rootfs = await ensureRootfs({ host: vm.rootfs, runnerDir: runnerDirPath, imageId: built.imageId, memoryBytes: buildMemoryBytes(config) });
+      state.rootfs = await ensureRootfs({ host: vm.rootfs, runnerDir: runnerDirPath, imageId: built.imageId, memoryBytes: limits.memoryBytes });
     } catch (err) {
       return fail(`the image could not be converted to a root disk: ${describeCallFailure(err)}`);
     }
@@ -940,16 +964,11 @@ async function startCheckMicroVm(input) {
       log: (line) => log.line(`${tag} ${line}`),
       readOnly: true
     });
-    runtime.tunnels.set(buildId, await startServicesFor(runtime, config, buildDir2, checksDir, void 0, false, gitRemote));
+    runtime.tunnels.set(buildId, await startServicesFor(runtime, config, buildDir2, checksDir, void 0, false, gitRemote, "socket", void 0, void 0, void 0, jobDir));
   } catch (err) {
     return fail(`the tunnel could not start: ${describeCallFailure(err)}`);
   }
   if (abandoned()) return fail(ABANDONED);
-  const limits = {
-    cpus: config.build?.cpus ?? DEFAULT_CPUS,
-    memoryBytes: buildMemoryBytes(config),
-    diskBytes: parseSize(config.build?.disk ?? DEFAULT_DISK) ?? parseSize(DEFAULT_DISK)
-  };
   const links = vsockLinks({ destinations: config.build?.destinations?.length ?? 0, builtIns: false });
   const configPath = join(buildDir2, "vm.json");
   const helper = await helperFor(runtime, (line) => log.line(`${tag} ${line}`), config.managed === true);
@@ -1009,7 +1028,16 @@ async function startCheckMicroVm(input) {
   const failed = await boot();
   if (failed !== void 0) return fail(failed);
   if (abandoned()) return fail(ABANDONED);
-  const env = checkEnvironment({ config, item: job.item, repository, hostEnv: runtime.hostEnv, containerEnv: built.containerEnv ?? {}, imageEnv: built.imageEnv });
+  const env = checkEnvironment({
+    config,
+    item: job.item,
+    repository,
+    hostEnv: runtime.hostEnv,
+    containerEnv: built.containerEnv ?? {},
+    imageEnv: built.imageEnv,
+    // The checks of a managed build get its factory's variables, as its command did, and none of the runner's own.
+    factoryVariables: factoryVariablesOf(config, jobDir)
+  });
   const evalInput = { dir: join(checksDir, EVAL_INPUT_NAME), delivered: false };
   const deliverEvalInput = async () => {
     await unpackIntoGuest(runtime, state, evalInput.dir, EVAL_INPUT_DIR, { readOnly: true });
@@ -2650,7 +2678,7 @@ function mergeScrubConfig(a, b) {
 function releaseScrub(config, home) {
   const merged = mergeScrubConfig(config.scrub, readCloudConfig(home).scrub);
   const secrets = [...headerVariables(config.build?.destinations), ...CLAUDE_CREDENTIAL_VARIABLES].map((name) => process.env[name] ?? "");
-  const held = [currentClaudeCredential(process.env)?.value, ...removedClaudeCredentialValues(), ...managedClaudeKeyValues()].filter((value) => value !== void 0);
+  const held = [currentClaudeCredential(process.env)?.value, ...removedClaudeCredentialValues(), ...managedClaudeKeyValues(), ...managedBuildSettingValues()].filter((value) => value !== void 0);
   return { literals: [...scrubList(merged?.literals), ...secrets, ...held], patterns: scrubList(merged?.patterns) };
 }
 function transcriptScrub(config, secrets) {
@@ -2927,6 +2955,15 @@ function readTunnelRecord(path) {
     return void 0;
   }
 }
+var VALUES_NOT_HELD = "the runner restarted and could not read this build's variables from its factory again, so it cannot remove their values from what it uploads";
+var SCRUBBED_RELEASE_LOG = "release-log.txt";
+function readScrubbedReleaseLog(jobDirPath) {
+  try {
+    return readFileSync(join(jobDirPath, SCRUBBED_RELEASE_LOG), "utf8");
+  } catch {
+    return void 0;
+  }
+}
 async function finishJob(job, jobDirPath, outcome, config, deps, ending) {
   const spawnFn = deps.spawnFn ?? spawn;
   const now = deps.now ?? (() => /* @__PURE__ */ new Date());
@@ -2935,6 +2972,7 @@ async function finishJob(job, jobDirPath, outcome, config, deps, ending) {
   const logPath = join(jobDirPath, "command.log");
   const tag = `#${job.item}`;
   deps.attemptLogs?.open(job.item, jobDirPath);
+  const valuesNotHeld = (job.managedVariables?.length ?? 0) > 0 && managedBuildSettingsFor(jobDirPath) === void 0;
   if (job.sender !== void 0) {
     await stopSender({ job, deps: { spawnFn, runtime: deps.container, log } });
     delete job.sender;
@@ -2978,6 +3016,10 @@ async function finishJob(job, jobDirPath, outcome, config, deps, ending) {
     writeJobFile(jobFilePath, job);
   }
   const uploadSessions = async (workdir) => {
+    if (valuesNotHeld) {
+      log.error(`${tag} sync skipped: ${VALUES_NOT_HELD}`);
+      return;
+    }
     if (job.container === void 0 && job.microvm === void 0 && job.build?.exec === void 0 && workdirProblem(workdir) !== void 0) {
       log.line(`${tag} sync skipped: workdir ${workdir} is gone`);
     } else if (job.itemKey === void 0) {
@@ -3036,7 +3078,8 @@ async function finishJob(job, jobDirPath, outcome, config, deps, ending) {
       log.error(`${tag} removing an earlier attempt's check environment failed: ${describeCallFailure(err)} \xB7 continuing`);
     }
   }
-  if (outcome === "ok" && !job.cleanupRan && job.judgeRan !== true) {
+  if (valuesNotHeld && outcome === "ok" && !job.cleanupRan) log.error(`${tag} the host's judge and checks skipped: ${VALUES_NOT_HELD}`);
+  if (outcome === "ok" && !job.cleanupRan && job.judgeRan !== true && !valuesNotHeld) {
     setStage(job, jobDirPath, "judge");
     job.judgeRan = true;
     writeJobFile(jobFilePath, job);
@@ -3051,7 +3094,7 @@ async function finishJob(job, jobDirPath, outcome, config, deps, ending) {
       log.error(`${tag} the host's judge stopped: ${describeCallFailure(err)} \xB7 continuing`);
     }
   }
-  if (outcome === "ok" && !job.cleanupRan && job.checksRan !== true) {
+  if (outcome === "ok" && !job.cleanupRan && job.checksRan !== true && !valuesNotHeld) {
     setStage(job, jobDirPath, "checks");
     job.checksRan = true;
     writeJobFile(jobFilePath, job);
@@ -3265,12 +3308,17 @@ async function finishJob(job, jobDirPath, outcome, config, deps, ending) {
     writeJobFile(jobFilePath, job);
   }
   const sentAtMs = now().getTime();
-  const runnerLog = releaseLogFor(jobDirPath, job, config);
+  const runnerLog = valuesNotHeld ? `The runner sends no log for this attempt: ${VALUES_NOT_HELD}.
+` : releaseLogFor(jobDirPath, job, config);
   const detail = outcome === void 0 ? { log: runnerLog } : { stage: job.endStage, exitCode: job.endExitCode, reason: job.reason, environment: job.environment, log: runnerLog };
   const release = await retrySend(() => releaseLease(config, job.item, outcome, detail, deps.fetchImpl), {
     now: deps.now,
     sleep: deps.sleep
   });
+  if (!release.ok && release.retryable && job.managedVariables !== void 0 && runnerLog !== void 0) {
+    writeFileSync(join(jobDirPath, SCRUBBED_RELEASE_LOG), runnerLog, { mode: RUNNER_FILE_MODE });
+  }
+  dropManagedBuildSettings(jobDirPath);
   const alreadyReleased = release.ok && wasAlreadyReleased(release.value, outcome, sentAtMs);
   const endedAt = now();
   job.outcome = outcome;
@@ -3323,13 +3371,14 @@ async function retryFailedReleases(jobsDirPath, config, deps) {
     if (!job || job.releaseFailed === void 0 || job.releaseFailed === ALREADY_RELEASED || isUnfinished(job)) {
       continue;
     }
-    const runnerLog = releaseLogFor(dirPath, job, config);
+    const runnerLog = readScrubbedReleaseLog(dirPath) ?? releaseLogFor(dirPath, job, config);
     const detail = job.outcome === void 0 ? { log: runnerLog } : { stage: job.endStage, exitCode: job.endExitCode, reason: job.reason, environment: job.environment, log: runnerLog };
     const release = await retrySend(() => releaseLease(config, job.item, job.outcome, detail, deps.fetchImpl), {
       now: deps.now,
       sleep: deps.sleep
     });
     if (release.ok || !release.retryable) {
+      rmSync(join(dirPath, SCRUBBED_RELEASE_LOG), { force: true });
       job.releaseFailed = void 0;
       writeJobFile(jobFilePath, job);
     } else {
@@ -3452,7 +3501,7 @@ function launchFor(config, job, jobDir, deps) {
   if (job.microvm !== void 0) {
     const runtime = deps.runtime ?? createContainerRuntime();
     const cli = deps.cliPath ?? join(runtime.cliBuild().distDir, "index.js");
-    return { ...microVmSenderCommand({ job, runtime, config, cli }), cwd: jobDir };
+    return { ...microVmSenderCommand({ job, jobDir, runtime, config, cli }), cwd: jobDir };
   }
   if (job.container !== void 0) {
     return { ...containerSenderCommand({ job, runtime: deps.runtime ?? createContainerRuntime(), config }), cwd: jobDir };

package/dist/{chunk-4YFMNF5Y.js → chunk-4J2FF5HZ.js}

@@ -2,11 +2,11 @@
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
 import { detectActiveSession, transcriptPathForSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-7DXVL7TN.js';
+import { autoConnect } from './chunk-IO2BBKG4.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-3N77LUQI.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-7QAJQDHS.js';
 import { readLatestProvenanceForSession } from './chunk-ZJSNLVCE.js';
-import { resolveRepoIdentity, defaultProjectsDir, findTranscripts, sessionIdFromPath, scrubText } from './chunk-GSSVJNP2.js';
+import { resolveRepoIdentity, defaultProjectsDir, findTranscripts, sessionIdFromPath, scrubText } from './chunk-Z7WMU3RA.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';

package/dist/{chunk-CAQCDYKF.js → chunk-5JGPTYLT.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { removeRetiredSkills } from './chunk-JWNH4ZTF.js';
-import { defaultFetch, resolveGatewayCredentials } from './chunk-3N77LUQI.js';
+import { defaultFetch, resolveGatewayCredentials } from './chunk-7QAJQDHS.js';
 import { appendContextProvenance } from './chunk-ZJSNLVCE.js';
 import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-ZQSANKS4.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { writeDegraded, writeSourceCache, SOURCE_CACHE_TTL_RETRY_MS, writeContextManifest, SOURCE_CACHE_TTL_SUCCESS_MS, readSourceCache, isSourceCacheFresh, clearDegraded } from './chunk-YQR6E6OV.js';
 import { normalizeRepoName, parseOuterlayerConfig, classifyTree, emitTree } from './chunk-FGXT5OXS.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import { withTokenHeader } from './chunk-G4W4B33M.js';
+import { withTokenHeader } from './chunk-SDAEXUIX.js';
 import { execFileSync } from 'child_process';
 import { existsSync, mkdirSync, writeFileSync, chmodSync, lstatSync, readFileSync, copyFileSync } from 'fs';
 import { isAbsolute, join, dirname } from 'path';