@outerlayer/cli 0.34.0-next.20261027013606 → 0.34.0-next.20261027121359

package/dist/{agent-setup-2A6P2SYL.js → agent-setup-UPRMGVB7.js}

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { keepHandWritten, runAgentSetup } from './chunk-72CJOYN6.js';
+export { keepHandWritten, runAgentSetup } from './chunk-N752ZNZ5.js';
 import './chunk-TWFBOZQ5.js';
 import './chunk-KT4CN6OU.js';
 import './chunk-J7EJMIDR.js';
 import './chunk-ANPNT6PM.js';
 import './chunk-LYCJQOO2.js';
-import './chunk-66LH5QAV.js';
+import './chunk-M6YTST7G.js';
 import './chunk-LMYRR5MO.js';
-import './chunk-7QAJQDHS.js';
+import './chunk-T375XV3H.js';
 import './chunk-PJDQPF5N.js';
-import './chunk-L5VHGRQE.js';
+import './chunk-KDSKFXPE.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-OVNF4LLC.js';
@@ -24,8 +24,8 @@ import './chunk-TUSYOL2O.js';
 import './chunk-XFJ7YOPD.js';
 import './chunk-DINRXUQA.js';
 import './chunk-VNVZDWO3.js';
-import './chunk-GJ4KBHBD.js';
-import './chunk-SDAEXUIX.js';
+import './chunk-I2GHZ2VA.js';
+import './chunk-Z7THNFUU.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{bridge-F5FBQSPZ.js → bridge-GVZUP3NU.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig } from './chunk-CFFVCI2I.js';
-import './chunk-SDAEXUIX.js';
+export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig } from './chunk-XZGURZHF.js';
+import './chunk-Z7THNFUU.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{build-YSOVDTAN.js → build-ZDYL7ZGP.js}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { KEY_PREFIX, TAG_HOST, buildRepositoryImage, metadataFromLabels, prepareImageBuild, writeRecord } from './chunk-7X2G463B.js';
-import './chunk-7GY3DVIL.js';
-import './chunk-GR7ZVGNI.js';
+export { KEY_PREFIX, TAG_HOST, buildRepositoryImage, metadataFromLabels, prepareImageBuild, writeRecord } from './chunk-SGT7YU3X.js';
+import './chunk-UC4OSOQS.js';
+import './chunk-UYWGR35C.js';
 export { RecipeError } from './chunk-HDLON3RJ.js';
 import './chunk-QUOITPN7.js';
-import './chunk-LQHCNXPK.js';
+import './chunk-W5EKMK37.js';
 import './chunk-JBJTC3UU.js';
-import './chunk-L5VHGRQE.js';
+import './chunk-KDSKFXPE.js';
 import './chunk-OOD5NDQA.js';
 import './chunk-DINRXUQA.js';
-import './chunk-GJ4KBHBD.js';
-import './chunk-SDAEXUIX.js';
+import './chunk-I2GHZ2VA.js';
+import './chunk-Z7THNFUU.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{build-disk-RZ7AZKTY.js → build-disk-WMIRA4RD.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK, DOCKER_CACHE_MS, allocatedBytes, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-BLSEHKZ4.js';
-import './chunk-GR7ZVGNI.js';
+export { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK, DOCKER_CACHE_MS, allocatedBytes, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-TS2YACAQ.js';
+import './chunk-UYWGR35C.js';
 import './chunk-HDLON3RJ.js';
 import './chunk-QUOITPN7.js';
-import './chunk-L5VHGRQE.js';
+import './chunk-KDSKFXPE.js';
 import './chunk-OOD5NDQA.js';
 import './chunk-DINRXUQA.js';
-import './chunk-GJ4KBHBD.js';
-import './chunk-SDAEXUIX.js';
+import './chunk-I2GHZ2VA.js';
+import './chunk-Z7THNFUU.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-27T01:37:43.355Z+a8ae7a2","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-27T12:15:21.059Z+364ef72","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-MQIL24HI.js → builder-XTAHDFV5.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-GR7ZVGNI.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-UYWGR35C.js';
 import './chunk-HDLON3RJ.js';
 import './chunk-QUOITPN7.js';
-import './chunk-L5VHGRQE.js';
+import './chunk-KDSKFXPE.js';
 import './chunk-OOD5NDQA.js';
 import './chunk-DINRXUQA.js';
-import './chunk-GJ4KBHBD.js';
-import './chunk-SDAEXUIX.js';
+import './chunk-I2GHZ2VA.js';
+import './chunk-Z7THNFUU.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{check-JD3GVQFP.js → check-FAG4QKIX.js}

@@ -1,64 +1,64 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-EP3WBNMC.js';
+import { probeCredentials } from './chunk-LTMFHECB.js';
 import './chunk-3JVYMD4G.js';
-import './chunk-DM4EEV73.js';
+import './chunk-4IB5WUY2.js';
 import './chunk-E7R2GIAW.js';
 import './chunk-MH6QLXUO.js';
-import './chunk-HOUFCUMH.js';
-import './chunk-JM3YQ4LC.js';
-import './chunk-TS3EFB7S.js';
-import './chunk-FQOUIYBL.js';
+import './chunk-DUG3JXAT.js';
+import './chunk-W774NREK.js';
+import './chunk-PBZODW5X.js';
+import './chunk-SJY6A6EH.js';
 import './chunk-6CK2OC4Q.js';
 import './chunk-ZVB57WI6.js';
-import './chunk-P3NPTFLF.js';
+import './chunk-6SJ3DJDH.js';
 import './chunk-I3LTIAOR.js';
-import './chunk-WBTPI5MP.js';
-import './chunk-QRJIBTNQ.js';
-import './chunk-7DK2FOZ4.js';
+import './chunk-YGX72FUQ.js';
+import './chunk-B7LPFCIN.js';
+import './chunk-QBBZGVZJ.js';
 import './chunk-ESVW4MJY.js';
-import './chunk-CFFVCI2I.js';
-import { managedProblems, managedFactsOf } from './chunk-VUJURIPJ.js';
-import './chunk-YL3RWW7X.js';
+import './chunk-XZGURZHF.js';
+import { managedProblems, managedFactsOf } from './chunk-XEJ5USHY.js';
+import './chunk-J2X5CTYY.js';
 import './chunk-TBT347UY.js';
-import { findServiceUnit } from './chunk-FQGC22IP.js';
+import { findServiceUnit } from './chunk-JKOONI3H.js';
 import './chunk-TZMDRHWB.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, HELPER_ENV, helperSocketPath, probeHelper, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-AHAYHJNN.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, HELPER_ENV, helperSocketPath, probeHelper, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-ARPPH7VS.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-7X2G463B.js';
-import './chunk-7GY3DVIL.js';
+import './chunk-SGT7YU3X.js';
+import './chunk-UC4OSOQS.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-3VZTNXK5.js';
-import './chunk-6KFJIU73.js';
-import './chunk-77VBS2RT.js';
-import './chunk-SDELQEG4.js';
+import './chunk-ZV6GOXYA.js';
+import './chunk-RMJSYOSV.js';
+import './chunk-66TKWWTX.js';
+import './chunk-HO4XRLAZ.js';
 import './chunk-TQMI335S.js';
-import './chunk-Q2KGDDUX.js';
-import './chunk-7QF2EXAN.js';
-import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-DEJCZ43H.js';
-import './chunk-BLSEHKZ4.js';
-import './chunk-GR7ZVGNI.js';
+import './chunk-XSUM3E67.js';
+import './chunk-UXGWAAGQ.js';
+import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-RO2NZJHZ.js';
+import './chunk-TS2YACAQ.js';
+import './chunk-UYWGR35C.js';
 import './chunk-HDLON3RJ.js';
 import './chunk-QUOITPN7.js';
-import './chunk-LQHCNXPK.js';
+import './chunk-W5EKMK37.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-KT4CN6OU.js';
 import './chunk-J7EJMIDR.js';
-import './chunk-QABXXQ67.js';
+import './chunk-NGZBVN6F.js';
 import './chunk-IP7BIBXJ.js';
-import './chunk-OKGHWCSK.js';
-import './chunk-O7QPHJWN.js';
+import './chunk-YIBHQR3B.js';
+import './chunk-L7RPNSAA.js';
 import './chunk-NWHU5G6R.js';
 import './chunk-G2JWZDFA.js';
 import './chunk-ANPNT6PM.js';
 import './chunk-IXPH4EXK.js';
 import './chunk-LYCJQOO2.js';
-import './chunk-66LH5QAV.js';
+import './chunk-M6YTST7G.js';
 import './chunk-LMYRR5MO.js';
-import './chunk-7QAJQDHS.js';
+import './chunk-T375XV3H.js';
 import './chunk-PJDQPF5N.js';
-import './chunk-L5VHGRQE.js';
-import './chunk-CCHSD7RS.js';
+import './chunk-KDSKFXPE.js';
+import './chunk-CHDWAWQA.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-2O5KA67H.js';
 import './chunk-BKO6JEZI.js';
@@ -80,8 +80,8 @@ import './chunk-TUSYOL2O.js';
 import './chunk-XFJ7YOPD.js';
 import './chunk-DINRXUQA.js';
 import './chunk-VNVZDWO3.js';
-import './chunk-GJ4KBHBD.js';
-import { claudeEnvPath, parseRunnerEnv } from './chunk-SDAEXUIX.js';
+import './chunk-I2GHZ2VA.js';
+import { claudeEnvPath, parseRunnerEnv } from './chunk-Z7THNFUU.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 import { readFileSync } from 'fs';

package/dist/{chunk-MYLOOVRJ.js → chunk-3NMDGGZS.js}

@@ -2,9 +2,9 @@
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
 import { detectActiveSession, transcriptPathForSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-OKGHWCSK.js';
+import { autoConnect } from './chunk-YIBHQR3B.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-7QAJQDHS.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-T375XV3H.js';
 import { readLatestProvenanceForSession } from './chunk-ZJSNLVCE.js';
 import { resolveRepoIdentity, defaultProjectsDir, findTranscripts, sessionIdFromPath, scrubText } from './chunk-OOD5NDQA.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';

package/dist/{chunk-DM4EEV73.js → chunk-4IB5WUY2.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { scrubReason, stripTerminalControls } from './chunk-FQOUIYBL.js';
-import { checkFit, RUNNER_RESERVE_BYTES } from './chunk-7QF2EXAN.js';
-import { RunnerAlreadyRunningError, readPidFile } from './chunk-LQHCNXPK.js';
+import { scrubReason, stripTerminalControls } from './chunk-SJY6A6EH.js';
+import { checkFit, RUNNER_RESERVE_BYTES } from './chunk-UXGWAAGQ.js';
+import { RunnerAlreadyRunningError, readPidFile } from './chunk-W5EKMK37.js';
 import { isSameProcess } from './chunk-JBJTC3UU.js';
-import { isSignatureRefusal, postJson } from './chunk-QABXXQ67.js';
-import { signerFor } from './chunk-L5VHGRQE.js';
-import { pidFilePath } from './chunk-GJ4KBHBD.js';
+import { isSignatureRefusal, postJson } from './chunk-NGZBVN6F.js';
+import { signerFor } from './chunk-KDSKFXPE.js';
+import { pidFilePath } from './chunk-I2GHZ2VA.js';
 import { readFileSync } from 'fs';
 
 createRequire(import.meta.url);

package/dist/{chunk-77VBS2RT.js → chunk-66TKWWTX.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { WorkCommandError, postJson } from './chunk-QABXXQ67.js';
-import { defaultGitRunner, materializeContext, fetchControlPlaneCommit, lookupGoverningSource } from './chunk-66LH5QAV.js';
-import { signingFetchFor } from './chunk-7QAJQDHS.js';
-import { signerFor } from './chunk-L5VHGRQE.js';
+import { WorkCommandError, postJson } from './chunk-NGZBVN6F.js';
+import { defaultGitRunner, materializeContext, fetchControlPlaneCommit, lookupGoverningSource } from './chunk-M6YTST7G.js';
+import { signingFetchFor } from './chunk-T375XV3H.js';
+import { signerFor } from './chunk-KDSKFXPE.js';
 import { unsupportedLayout, layoutRefusalReason, composeDelivery } from './chunk-FGF52V4V.js';
 import { SHIM_SCRIPT, GOVERNANCE_VARIABLE } from './chunk-HCVLP7XA.js';
 import { readDegraded, readContextManifest, readSourceCache } from './chunk-YQR6E6OV.js';
-import { SHIM_DIR, stagedContextDir, contextHomeDir, deliveryDir, keptContextDir } from './chunk-GJ4KBHBD.js';
+import { SHIM_DIR, stagedContextDir, contextHomeDir, deliveryDir, keptContextDir } from './chunk-I2GHZ2VA.js';
 import { fstatSync, mkdirSync, writeFileSync, chmodSync, rmSync, cpSync, readFileSync, existsSync, lstatSync } from 'fs';
 import { relative, join, dirname } from 'path';
 

package/dist/{chunk-P3NPTFLF.js → chunk-6SJ3DJDH.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { TUNNEL_PORT, BRIDGE_ADDRESS, BRIDGE_CIDR } from './chunk-CFFVCI2I.js';
-import { EXEC_PORT } from './chunk-6KFJIU73.js';
+import { TUNNEL_PORT, BRIDGE_ADDRESS, BRIDGE_CIDR } from './chunk-XZGURZHF.js';
+import { EXEC_PORT } from './chunk-RMJSYOSV.js';
 import { startTimeOf } from './chunk-JBJTC3UU.js';
-import { RELAY_PORT } from './chunk-SDAEXUIX.js';
+import { RELAY_PORT } from './chunk-Z7THNFUU.js';
 import { spawn, spawnSync } from 'child_process';
 import { symlinkSync, lstatSync, writeFileSync, chmodSync, mkdirSync, existsSync } from 'fs';
 

package/dist/{chunk-AHAYHJNN.js → chunk-ARPPH7VS.js}

@@ -1,30 +1,30 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { sha256OfFile, downloadPinned, VoiceDownloadError } from './chunk-2PGI6RDE.js';
-import { readDefaultBranchHead, cloneRepository, buildRepositoryImage, prepareImageBuild, KEY_PREFIX, TAG_HOST, metadataFromLabels, writeRecord } from './chunk-7X2G463B.js';
-import { FETCHED_DIR, toolsDockerfile, FETCHED_FFMPEG, FETCHED_GH, FETCHED_TINI, FETCHED_HEADLESS_SHELL, FETCHED_PLAYWRIGHT_FFMPEG, FETCHED_VOICE_DIR } from './chunk-7GY3DVIL.js';
+import { readDefaultBranchHead, cloneRepository, buildRepositoryImage, prepareImageBuild, KEY_PREFIX, TAG_HOST, metadataFromLabels, writeRecord } from './chunk-SGT7YU3X.js';
+import { FETCHED_DIR, toolsDockerfile, FETCHED_FFMPEG, FETCHED_GH, FETCHED_TINI, FETCHED_HEADLESS_SHELL, FETCHED_PLAYWRIGHT_FFMPEG, FETCHED_VOICE_DIR } from './chunk-UC4OSOQS.js';
 import { currentCliBuild } from './chunk-OGFGZQA3.js';
-import { runExec, execCapture, waitForAgent } from './chunk-3VZTNXK5.js';
-import { GUEST_CID, linkVsockSockets } from './chunk-6KFJIU73.js';
-import { retrySend, describeCallFailure, keepStagedContext, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, prefetchGovernedContext, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript, WORKFLOW_PERMISSION_REASON } from './chunk-77VBS2RT.js';
-import { runnerImageVersion } from './chunk-SDELQEG4.js';
-import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-Q2KGDDUX.js';
-import { runnerCredentialProblem, builtinKind, allowHostProblem, hostAllowed } from './chunk-DEJCZ43H.js';
-import { formatBytes, allocatedBytes } from './chunk-BLSEHKZ4.js';
-import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, readDu, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun } from './chunk-GR7ZVGNI.js';
+import { runExec, execCapture, waitForAgent } from './chunk-ZV6GOXYA.js';
+import { GUEST_CID, linkVsockSockets } from './chunk-RMJSYOSV.js';
+import { retrySend, describeCallFailure, keepStagedContext, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, prefetchGovernedContext, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript, WORKFLOW_PERMISSION_REASON } from './chunk-66TKWWTX.js';
+import { runnerImageVersion } from './chunk-HO4XRLAZ.js';
+import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-XSUM3E67.js';
+import { optionalEgress, runnerCredentialProblem, builtinKind, allowHostProblem, systemClock, emptyEgressCounts, hostAllowed } from './chunk-RO2NZJHZ.js';
+import { formatBytes, allocatedBytes } from './chunk-TS2YACAQ.js';
+import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, readDu, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun } from './chunk-UYWGR35C.js';
 import { RecipeError, DOCKER_FEATURE, writeSanitizedRecipe, classifyProperties } from './chunk-HDLON3RJ.js';
 import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, hostHelperPinned, CLAUDE_CODE_VERSION, builderDiskPinned, guestAssetsPinned, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, JAILER_BINARY_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, GUEST_ASSETS_VERSION, BUILDER_DISK_VERSION, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, GH_VERSION, TINI_SHA256, TINI_VERSION, HEADLESS_SHELL, HEADLESS_SHELL_BASE_URL, PLAYWRIGHT_FFMPEG, PLAYWRIGHT_FFMPEG_BASE_URL, VOICE_PACK_FILES, BUILDER_DISK_SHA256, BUILDER_DISK_BASE_URL, DEFAULT_BASE_IMAGE } from './chunk-QUOITPN7.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
-import { postJson, WorkCommandError, getJson } from './chunk-QABXXQ67.js';
+import { postJson, WorkCommandError, getJson } from './chunk-NGZBVN6F.js';
 import { sanitizeTerminal } from './chunk-IXPH4EXK.js';
-import { signerFor } from './chunk-L5VHGRQE.js';
+import { signerFor } from './chunk-KDSKFXPE.js';
 import { sharedSkillNames, skillConflictMessage } from './chunk-FGF52V4V.js';
 import { versionAtLeast, MINIMUM_CLAUDE_VERSION } from './chunk-HCVLP7XA.js';
 import { MIN_SCRUBBED_LITERAL, setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-OOD5NDQA.js';
 import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-XFJ7YOPD.js';
 import { downconvertSession } from './chunk-DINRXUQA.js';
-import { vmAssetsDir, RUNNER_DIR_MODE, rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, buildsDir, buildDir, runnerDir, deliveryDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, SHIM_DIR, vsockPath, builderCacheDiskPath, builderConsolePath } from './chunk-GJ4KBHBD.js';
-import { claudeCredential, parseIsolation, proxyEnvironment, withProxyWarningHidden, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, withHooksPath, startBuildServices, BUILT_IN_NAMES, repositoriesOf, primaryOf, RELAY_PORT, repositoryPath, CHECKOUT_DIR, lifecycleWorkdir, buildEnvironment, writeBuildMavenSettings, checkEnvironment, AGENT_CREDENTIAL_MISSING, mavenSettingsXml, namesGlobalSettings, MAVEN_NO_PROXY_NOTE, mavenArgs, MAVEN_SPACE_NOTE, writeMavenSettings, checkoutPath, JOB_MOUNT, realFdStorePort } from './chunk-SDAEXUIX.js';
+import { vmAssetsDir, RUNNER_DIR_MODE, rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, buildsDir, buildDir, runnerDir, deliveryDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, SHIM_DIR, vsockPath, builderCacheDiskPath, builderConsolePath } from './chunk-I2GHZ2VA.js';
+import { claudeCredential, parseIsolation, proxyEnvironment, withProxyWarningHidden, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, withHooksPath, startBuildServices, BUILT_IN_NAMES, repositoriesOf, primaryOf, RELAY_PORT, repositoryPath, CHECKOUT_DIR, lifecycleWorkdir, buildEnvironment, writeBuildMavenSettings, checkEnvironment, AGENT_CREDENTIAL_MISSING, mavenSettingsXml, namesGlobalSettings, MAVEN_NO_PROXY_NOTE, mavenArgs, MAVEN_SPACE_NOTE, writeMavenSettings, checkoutPath, JOB_MOUNT, realFdStorePort } from './chunk-Z7THNFUU.js';
 import { RELAY_USER, RELAY_ID, UNKNOWN_TRANSPORT_REASON, DOCKER_DESKTOP_REASON, MAX_MALFORMED_SESSIONS, MALFORMED_REASON, JOIN_WAIT_MS, MAX_OPEN_STREAMS, STREAM_RESET_RATE, STREAM_RESET_BURST, STREAM_WINDOW, SESSION_WINDOW, targetOfPath } from './chunk-MESOOLF4.js';
 import { spawn, spawnSync } from 'child_process';
 import { mkdirSync, existsSync, readFileSync, mkdtempSync, rmSync, chmodSync, truncateSync, statSync, accessSync, constants, readdirSync, writeFileSync, lstatSync, copyFileSync, renameSync, rmdirSync, unlinkSync, linkSync, openSync, closeSync, cpSync, writeSync, appendFileSync, createWriteStream, createReadStream } from 'fs';
@@ -32,7 +32,7 @@ import { randomBytes, createHash } from 'crypto';
 import { join, dirname, isAbsolute, relative, resolve, basename } from 'path';
 import { createConnection, connect, createServer as createServer$1, isIP } from 'net';
 import { availableParallelism, networkInterfaces, tmpdir } from 'os';
-import { Duplex, PassThrough, Transform } from 'stream';
+import { Transform, Duplex, PassThrough } from 'stream';
 import { createServer, request } from 'http';
 import { lookup } from 'dns/promises';
 import http2 from 'http2';
@@ -1111,6 +1111,9 @@ var IDLE_TIMEOUT_MS = 10 * 6e4;
 var STALLED_RESPONSE_MS = 6e4;
 var MAX_BAD_GATEWAY_LINES = 10;
 var BAD_GATEWAY_WINDOW_MS = 1e4;
+var CONNECTION_RATE_RANGE = "connection-rate";
+var OPEN_CONNECTIONS_RANGE = "open-connections";
+var COUNTS_SAVE_MS = 500;
 async function systemResolve(host) {
   const found = await lookup(host, { all: true, verbatim: true });
   return found.map((a) => ({ address: a.address }));
@@ -1145,6 +1148,8 @@ async function startTunnel(socketPath, opts = {}) {
   const connectTimeoutMs = opts.connectTimeoutMs ?? CONNECT_TIMEOUT_MS;
   const idleTimeoutMs = opts.idleTimeoutMs ?? IDLE_TIMEOUT_MS;
   const stalledResponseMs = opts.stalledResponseMs ?? STALLED_RESPONSE_MS;
+  const limits2 = opts.egress ?? { connectionsPerSecond: 0, connectionBurst: 1, openConnections: 0, sendBytesPerSecond: 0, flagHosts: 0 };
+  const clock = opts.clock ?? systemClock;
   let windowStartedMs = 0;
   let linesInWindow = 0;
   let suppressed = 0;
@@ -1173,6 +1178,15 @@ async function startTunnel(socketPath, opts = {}) {
   const extraRefusalKeys = /* @__PURE__ */ new Set();
   let refusalsMore = 0;
   const destinations = [];
+  const counts = emptyEgressCounts();
+  let openNow = 0;
+  let secondOf = 0;
+  let openedInSecond = 0;
+  let tokens = limits2.connectionBurst;
+  let refilledAt = clock.now();
+  let nextSendFree = 0;
+  let lastSendClock = 0;
+  const limitLogged = /* @__PURE__ */ new Set();
   const routes = /* @__PURE__ */ Object.create(null);
   if (opts.recordPath !== void 0 && existsSync(opts.recordPath)) {
     try {
@@ -1183,8 +1197,12 @@ async function startTunnel(socketPath, opts = {}) {
       }
       hostsMore = saved.hostsMore ?? 0;
       for (const name of saved.destinations ?? []) destinations.push(name);
-      for (const [name, counts] of Object.entries(saved.routes ?? {})) routes[name] = { requests: counts.requests, failures: counts.failures };
+      for (const [name, counts2] of Object.entries(saved.routes ?? {})) routes[name] = { requests: counts2.requests, failures: counts2.failures };
       refusalsMore = saved.refusalsMore ?? 0;
+      if (saved.egress !== void 0) {
+        const kept = saved.egress;
+        Object.assign(counts, kept, { refused: { ...counts.refused, ...kept.refused } });
+      }
       for (const refusal of saved.refusals ?? []) {
         refusals.push(refusal);
         refusalKeys.add(`${refusal.host}|${refusal.address}|${refusal.range}`);
@@ -1198,8 +1216,9 @@ async function startTunnel(socketPath, opts = {}) {
     refusalsMore,
     refusals: refusals.map((r) => ({ ...r })),
     destinations: [...destinations],
+    egress: { ...counts, refused: { ...counts.refused } },
     // Absent until a route is served, so a record of a tunnel that served none is the shape an older runner wrote.
-    ...Object.keys(routes).length === 0 ? {} : { routes: Object.fromEntries(Object.entries(routes).map(([name, counts]) => [name, { ...counts }])) }
+    ...Object.keys(routes).length === 0 ? {} : { routes: Object.fromEntries(Object.entries(routes).map(([name, counts2]) => [name, { ...counts2 }])) }
   });
   const persist = () => {
     if (opts.recordPath === void 0) return;
@@ -1208,6 +1227,15 @@ async function startTunnel(socketPath, opts = {}) {
     } catch {
     }
   };
+  let saveTimer;
+  const persistSoon = () => {
+    if (opts.recordPath === void 0 || saveTimer !== void 0) return;
+    saveTimer = setTimeout(() => {
+      saveTimer = void 0;
+      persist();
+    }, COUNTS_SAVE_MS);
+    saveTimer.unref();
+  };
   const destinationUsed = (name) => {
     if (destinations.includes(name)) return;
     destinations.push(name);
@@ -1219,9 +1247,9 @@ async function startTunnel(socketPath, opts = {}) {
     persist();
   };
   const routeFinished = (name, ok) => {
-    const counts = routes[name] ??= { requests: 0, failures: 0 };
-    counts.requests++;
-    if (!ok) counts.failures++;
+    const counts2 = routes[name] ??= { requests: 0, failures: 0 };
+    counts2.requests++;
+    if (!ok) counts2.failures++;
     persist();
   };
   const reached = (host) => {
@@ -1235,6 +1263,10 @@ async function startTunnel(socketPath, opts = {}) {
       hosts.push(name);
       seen.add(name);
     }
+    if (limits2.flagHosts > 0 && !counts.hostsFlagged && hosts.length + hostsMore > limits2.flagHosts) {
+      counts.hostsFlagged = true;
+      opts.log?.(`tunnel: this build reached more than ${limits2.flagHosts} distinct remote hosts`);
+    }
     persist();
   };
   const refused2 = (host, address, range) => {
@@ -1250,6 +1282,64 @@ async function startTunnel(socketPath, opts = {}) {
     }
     persist();
   };
+  const limitText = (range) => range === CONNECTION_RATE_RANGE ? `${limits2.connectionsPerSecond} new connections per second, burst ${limits2.connectionBurst}` : `${limits2.openConnections} open connections`;
+  const admit = () => {
+    const now = clock.now();
+    if (limits2.openConnections > 0 && openNow >= limits2.openConnections) return OPEN_CONNECTIONS_RANGE;
+    if (limits2.connectionsPerSecond > 0) {
+      tokens = Math.min(limits2.connectionBurst, tokens + Math.max(0, now - refilledAt) / 1e3 * limits2.connectionsPerSecond);
+      refilledAt = now;
+      if (tokens < 1) return CONNECTION_RATE_RANGE;
+      tokens -= 1;
+    }
+    counts.connectionsOpened++;
+    openNow++;
+    counts.peakOpenConnections = Math.max(counts.peakOpenConnections, openNow);
+    const second = Math.floor(now / 1e3);
+    if (second !== secondOf) {
+      secondOf = second;
+      openedInSecond = 0;
+    }
+    openedInSecond++;
+    counts.peakConnectionsPerSecond = Math.max(counts.peakConnectionsPerSecond, openedInSecond);
+    persistSoon();
+    return void 0;
+  };
+  const release = () => {
+    openNow--;
+  };
+  const refuseOverLimit = (host, range) => {
+    if (range === CONNECTION_RATE_RANGE) counts.refused.connectionRate++;
+    else counts.refused.openConnections++;
+    refused2(host, NOT_RESOLVED, range);
+    if (!limitLogged.has(range)) {
+      limitLogged.add(range);
+      opts.log?.(`tunnel refused ${host}: over the ${range} limit of ${limitText(range)}. Later refusals of this kind are counted when the build ends`);
+    }
+    persistSoon();
+    return { status: 429, body: `refused: this build is over the ${range} limit of ${limitText(range)}
+` };
+  };
+  const waitToSend = async (n) => {
+    const now = clock.now();
+    if (now < lastSendClock) nextSendFree = Math.max(0, nextSendFree - (lastSendClock - now));
+    lastSendClock = now;
+    nextSendFree = Math.max(nextSendFree, now) + n * 1e3 / limits2.sendBytesPerSecond;
+    await clock.sleep(nextSendFree - now);
+  };
+  const meter = () => new Transform({
+    highWaterMark: 64 * 1024,
+    transform(chunk, _encoding, done) {
+      waitToSend(chunk.length).then(
+        () => {
+          counts.bytesSent += chunk.length;
+          persistSoon();
+          done(null, chunk);
+        },
+        (err) => done(err)
+      );
+    }
+  });
   async function decide(host, port) {
     if (opts.allowHosts !== void 0 && !hostAllowed(host, opts.allowHosts)) {
       refused2(host, NOT_RESOLVED, NOT_ALLOWED_RANGE);
@@ -1294,7 +1384,7 @@ async function startTunnel(socketPath, opts = {}) {
   server.on("connect", (req, client, head) => {
     void tunnelConnect(req, client, head);
   });
-  const statusLine = (status) => `HTTP/1.1 ${status} ${status === 403 ? "Forbidden" : "Bad Gateway"}`;
+  const statusLine = (status) => `HTTP/1.1 ${status} ${status === 403 ? "Forbidden" : status === 429 ? "Too Many Requests" : "Bad Gateway"}`;
   const reply = (client, status, body) => {
     client.end(`${statusLine(status)}\r
 Content-Type: text/plain\r
@@ -1310,6 +1400,13 @@ ${body}`);
       client.end("HTTP/1.1 400 Bad Request\r\nConnection: close\r\nContent-Length: 0\r\n\r\n");
       return;
     }
+    const over = admit();
+    if (over !== void 0) {
+      const refusal = refuseOverLimit(target.host, over);
+      reply(client, refusal.status, refusal.body);
+      return;
+    }
+    client.once("close", release);
     const decision = await decide(target.host, target.port);
     if (!decision.ok) {
       reply(client, decision.status, decision.body);
@@ -1336,16 +1433,33 @@ ${body}`);
         if (!upstream.readableEnded && !client.writableEnded) client.destroy(abortedError("the tunnel closed the connection to the server before it ended"));
         else client.resume();
       });
-      client.once("end", () => {
+      const buildEnded = () => {
         upstream.destroy();
         client.end();
-      });
+      };
+      const metered = limits2.sendBytesPerSecond > 0 ? meter() : void 0;
+      if (metered === void 0) client.once("end", buildEnded);
+      else metered.once("end", buildEnded);
       reached(target.host);
       client.write("HTTP/1.1 200 Connection Established\r\n\r\n");
-      upstream.write(head);
+      if (metered !== void 0) {
+        if (head.length > 0) metered.write(head);
+      } else {
+        counts.bytesSent += head.length;
+        upstream.write(head);
+      }
       releaseWhenStalled(client, upstream);
       upstream.pipe(client);
-      client.pipe(upstream);
+      if (metered === void 0) {
+        client.on("data", (chunk) => {
+          counts.bytesSent += chunk.length;
+          persistSoon();
+        });
+        client.pipe(upstream);
+      } else {
+        client.once("close", () => metered.destroy());
+        client.pipe(metered).pipe(upstream);
+      }
     };
     if (upstream.readyState === "open") established();
     else upstream.once("connect", established);
@@ -1395,6 +1509,14 @@ ${body}`);
     }
     const host = url.hostname.replace(/^\[|\]$/g, "");
     const port = url.port === "" ? 80 : Number(url.port);
+    const over = admit();
+    if (over !== void 0) {
+      const refusal = refuseOverLimit(host, over);
+      res.writeHead(refusal.status, { "Content-Type": "text/plain", Connection: "close" });
+      res.end(refusal.body);
+      return;
+    }
+    res.once("close", release);
     const decision = await decide(host, port);
     if (!decision.ok) {
       res.writeHead(decision.status, { "Content-Type": "text/plain", Connection: "close" });
@@ -1430,7 +1552,17 @@ ${body}`);
         res.destroy();
       }
     });
-    req.pipe(upstream);
+    if (limits2.sendBytesPerSecond > 0) {
+      const metered = meter();
+      res.once("close", () => metered.destroy());
+      req.pipe(metered).pipe(upstream);
+    } else {
+      req.on("data", (chunk) => {
+        counts.bytesSent += chunk.length;
+        persistSoon();
+      });
+      req.pipe(upstream);
+    }
   }
   if (opts.socket !== false) {
     if (opts.listenOn !== void 0) {
@@ -1463,6 +1595,9 @@ ${body}`);
       return { port: tcp.address().port };
     },
     close: () => new Promise((resolveClose) => {
+      clearTimeout(saveTimer);
+      saveTimer = void 0;
+      persist();
       for (const socket of sockets) socket.destroy();
       for (const tcp of tcpServers) tcp.close();
       server.close(() => resolveClose());
@@ -1690,6 +1825,7 @@ async function startHostServices(input) {
     jobDir: input.jobDir,
     destinations,
     allowHosts: config.build?.allowHosts,
+    ...optionalEgress(config),
     serve: input.process ? "tcp" : "both",
     proxy: input.process,
     ...input.process ? { builtIns: { gatewayUrl: config.url, itemKey: input.itemKey, claudeUpstream: runtime.claudeUpstream } } : {},
@@ -2126,6 +2262,7 @@ async function buildInBuilder(opts, deps, prepared) {
     tunnel = await deps.startTunnel(join(dir, TUNNEL_SOCKET), {
       ...deps.tunnelOptions,
       ...opts.allowHosts === void 0 ? {} : { allowHosts: opts.allowHosts },
+      ...opts.egress === void 0 ? {} : { egress: opts.egress },
       recordPath: join(dir, "tunnel.json")
     });
     const configPath = join(dir, "vm.json");
@@ -4658,6 +4795,7 @@ async function startServicesFor(runtime, config, buildDir2, jobDir, itemKey, bui
     destinations: config.build?.destinations ?? [],
     // A managed build's tunnel allows the factory's hosts beside the runner's own.
     allowHosts: withFactoryHosts(config.build?.allowHosts, managedBuildSettingsFor(settingsDir ?? jobDir)),
+    ...optionalEgress(config),
     serve,
     ...lease === void 0 ? {} : { lease },
     ...inherit === void 0 ? {} : { inherit },