@outerlayer/cli 0.34.0-next.20261027193835 → 0.34.0-next.20261028010245

package/dist/{chunk-LSFP57LI.js → chunk-VB4QD4WN.js}

@@ -1,30 +1,30 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { sha256OfFile, downloadPinned, VoiceDownloadError } from './chunk-2PGI6RDE.js';
-import { readDefaultBranchHead, cloneRepository, buildRepositoryImage, prepareImageBuild, KEY_PREFIX, TAG_HOST, SHARED_OWNER, SHARED_NAME, metadataFromLabels, writeRecord } from './chunk-5FHBVV25.js';
-import { FETCHED_DIR, toolsDockerfile, FETCHED_FFMPEG, FETCHED_GH, FETCHED_TINI, FETCHED_HEADLESS_SHELL, FETCHED_PLAYWRIGHT_FFMPEG, FETCHED_VOICE_DIR } from './chunk-CMMEJJTL.js';
+import { readDefaultBranchHead, cloneRepository, buildRepositoryImage, prepareImageBuild, KEY_PREFIX, TAG_HOST, SHARED_OWNER, SHARED_NAME, metadataFromLabels, writeRecord } from './chunk-BQ4C47K2.js';
+import { FETCHED_DIR, toolsDockerfile, FETCHED_FFMPEG, FETCHED_GH, FETCHED_TINI, FETCHED_HEADLESS_SHELL, FETCHED_PLAYWRIGHT_FFMPEG, FETCHED_VOICE_DIR } from './chunk-KTVZ7TZY.js';
 import { currentCliBuild } from './chunk-OGFGZQA3.js';
-import { runExec, execCapture, waitForAgent } from './chunk-JVNQNKHV.js';
-import { GUEST_CID, linkVsockSockets } from './chunk-BS3OYFAD.js';
-import { retrySend, describeCallFailure, keepStagedContext, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, prefetchGovernedContext, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript, WORKFLOW_PERMISSION_REASON } from './chunk-7Q7GQELE.js';
-import { runnerImageVersion } from './chunk-CFJOONWM.js';
-import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-OP2L7OXA.js';
-import { optionalEgress, runnerCredentialProblem, builtinKind, allowHostProblem, systemClock, emptyEgressCounts, hostAllowed } from './chunk-JWMJMQRF.js';
-import { formatBytes, allocatedBytes } from './chunk-LYX2RRSF.js';
-import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, readDu, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun } from './chunk-FLHBUQ2W.js';
-import { RecipeError, DOCKER_FEATURE, universalImagePending, writeSanitizedRecipe, classifyProperties } from './chunk-X7M73LKT.js';
-import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, hostHelperPinned, CLAUDE_CODE_VERSION, builderDiskPinned, guestAssetsPinned, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, JAILER_BINARY_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, GUEST_ASSETS_VERSION, BUILDER_DISK_VERSION, universalImagePinned, UNIVERSAL_IMAGE, UNIVERSAL_IMAGE_DIGEST, UNIVERSAL_IMAGE_REPOSITORY, UNIVERSAL_IMAGE_SOURCE, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, GH_VERSION, TINI_SHA256, TINI_VERSION, HEADLESS_SHELL, HEADLESS_SHELL_BASE_URL, PLAYWRIGHT_FFMPEG, PLAYWRIGHT_FFMPEG_BASE_URL, VOICE_PACK_FILES, BUILDER_DISK_SHA256, BUILDER_DISK_BASE_URL, DEFAULT_BASE_IMAGE } from './chunk-WX2HW2G2.js';
+import { runExec, execCapture, waitForAgent } from './chunk-PHIQHIRJ.js';
+import { GUEST_CID, linkVsockSockets } from './chunk-G4SOMWXL.js';
+import { retrySend, describeCallFailure, keepStagedContext, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, prefetchGovernedContext, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript, WORKFLOW_PERMISSION_REASON } from './chunk-PPQTTJSW.js';
+import { runnerImageVersion } from './chunk-LBKCYEJT.js';
+import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-6LS62EO4.js';
+import { optionalEgress, runnerCredentialProblem, builtinKind, allowHostProblem, systemClock, emptyEgressCounts, hostAllowed } from './chunk-GXMMILQ4.js';
+import { formatBytes, allocatedBytes } from './chunk-EGJY6MBC.js';
+import { NETWORK_HELPER_MEMORY, createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, networkHelperName, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, mountableHome, homeCopyRunArgs, containerExecArgs, childEnvironment, readDu, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, NETWORK_READY_FILE, spawnRun, identityRunArgs, parseIdentity, networkHelperRunArgs } from './chunk-AHWMY3MS.js';
+import { RecipeError, DOCKER_FEATURE, universalImagePending, writeSanitizedRecipe, classifyProperties } from './chunk-CM4J53WZ.js';
+import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, hostHelperPinned, CLAUDE_CODE_VERSION, builderDiskPinned, guestAssetsPinned, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, JAILER_BINARY_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, GUEST_ASSETS_VERSION, BUILDER_DISK_VERSION, networkHelperPinned, NETWORK_HELPER_SHA256, universalImagePinned, UNIVERSAL_IMAGE, UNIVERSAL_IMAGE_DIGEST, UNIVERSAL_IMAGE_REPOSITORY, UNIVERSAL_IMAGE_SOURCE, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, GH_VERSION, TINI_SHA256, TINI_VERSION, HEADLESS_SHELL, HEADLESS_SHELL_BASE_URL, PLAYWRIGHT_FFMPEG, PLAYWRIGHT_FFMPEG_BASE_URL, VOICE_PACK_FILES, BUILDER_DISK_SHA256, BUILDER_DISK_BASE_URL, DEFAULT_BASE_IMAGE } from './chunk-D3CT6XQ4.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
-import { postJson, WorkCommandError, getJson } from './chunk-6IMQXBTZ.js';
+import { postJson, WorkCommandError, getJson } from './chunk-GJYGOFF3.js';
 import { sanitizeTerminal } from './chunk-IXPH4EXK.js';
-import { signerFor } from './chunk-RJZZFAXS.js';
+import { signerFor } from './chunk-VKYU4HHW.js';
 import { sharedSkillNames, skillConflictMessage } from './chunk-FGF52V4V.js';
 import { versionAtLeast, MINIMUM_CLAUDE_VERSION } from './chunk-HCVLP7XA.js';
 import { MIN_SCRUBBED_LITERAL, setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-A6PJSNP6.js';
 import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-XFJ7YOPD.js';
 import { downconvertSession } from './chunk-DINRXUQA.js';
-import { vmAssetsDir, RUNNER_DIR_MODE, rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, buildsDir, buildDir, runnerDir, deliveryDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, SHIM_DIR, vsockPath, builderCacheDiskPath, builderConsolePath } from './chunk-3VJYDWFV.js';
-import { claudeCredential, parseIsolation, proxyEnvironment, withProxyWarningHidden, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, withHooksPath, startBuildServices, BUILT_IN_NAMES, repositoriesOf, primaryOf, RELAY_PORT, repositoryPath, CHECKOUT_DIR, lifecycleWorkdir, buildEnvironment, writeBuildMavenSettings, checkEnvironment, AGENT_CREDENTIAL_MISSING, mavenSettingsXml, namesGlobalSettings, MAVEN_NO_PROXY_NOTE, mavenArgs, MAVEN_SPACE_NOTE, writeMavenSettings, checkoutPath, nodeAcceptsProxyWarningFlag, PROXY_WARNING_FLAG, JOB_MOUNT, realFdStorePort } from './chunk-GMKDAF37.js';
+import { vmAssetsDir, RUNNER_DIR_MODE, rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, buildsDir, buildDir, runnerDir, deliveryDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, SHIM_DIR, vsockPath, builderCacheDiskPath, builderConsolePath } from './chunk-AJTGTSNA.js';
+import { claudeCredential, parseIsolation, proxyEnvironment, withProxyWarningHidden, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, withHooksPath, startBuildServices, BUILT_IN_NAMES, repositoriesOf, primaryOf, RELAY_PORT, repositoryPath, CHECKOUT_DIR, lifecycleWorkdir, buildEnvironment, checkEnvironment, AGENT_CREDENTIAL_MISSING, checkoutPath, JOB_MOUNT, realFdStorePort } from './chunk-L2OARQKP.js';
 import { RELAY_USER, RELAY_ID, UNKNOWN_TRANSPORT_REASON, DOCKER_DESKTOP_REASON, MAX_MALFORMED_SESSIONS, MALFORMED_REASON, JOIN_WAIT_MS, MAX_OPEN_STREAMS, STREAM_RESET_RATE, STREAM_RESET_BURST, STREAM_WINDOW, SESSION_WINDOW, targetOfPath } from './chunk-MESOOLF4.js';
 import { spawn, spawnSync } from 'child_process';
 import { mkdirSync, existsSync, readFileSync, mkdtempSync, rmSync, chmodSync, truncateSync, statSync, accessSync, constants, readdirSync, writeFileSync, lstatSync, copyFileSync, renameSync, rmdirSync, unlinkSync, linkSync, openSync, closeSync, cpSync, writeSync, appendFileSync, createWriteStream, createReadStream } from 'fs';
@@ -166,9 +166,10 @@ function builderDiskPin(arch) {
   return { url: `${BUILDER_DISK_BASE_URL}/builder-rootfs-${arch}.ext4`, sha256: BUILDER_DISK_SHA256[arch] };
 }
 var sha256Of = (bytes) => createHash("sha256").update(bytes).digest("hex");
-function pinProblem(file, expected, actual, where) {
+var MICROVM_STOPS = "no microVM build starts";
+function pinProblem(file, expected, actual, where, stops = MICROVM_STOPS) {
   const release = file.startsWith("vmlinux-") || file.startsWith("outerlayer-guest-") ? ` (guest assets release ${GUEST_ASSETS_VERSION})` : file.startsWith("builder-rootfs-") ? ` (builder root disk release ${BUILDER_DISK_VERSION})` : "";
-  return new AssetError(file, `${file} ${where} has sha256 ${actual}, not the ${expected} this release pins${release}, so no microVM build starts`);
+  return new AssetError(file, `${file} ${where} has sha256 ${actual}, not the ${expected} this release pins${release}, so ${stops}`);
 }
 function writeAtomic(path, bytes, mode) {
   const temp = `${path}.${process.pid}.tmp`;
@@ -189,16 +190,16 @@ function keptPath(dir, sha256, name) {
   mkdirSync(join(dir, sha256), { recursive: true, mode: RUNNER_DIR_MODE });
   return join(dir, sha256, name);
 }
-async function ensureFile(dir, file, pin, fetchImpl, mode) {
+async function ensureFile(dir, file, pin, fetchImpl, mode, stops = MICROVM_STOPS) {
   const path = keptPath(dir, pin.sha256, file);
   if (existsSync(path)) {
     const actual2 = sha256Of(readFileSync(path));
-    if (actual2 !== pin.sha256) throw pinProblem(file, pin.sha256, actual2, `at ${path}`);
+    if (actual2 !== pin.sha256) throw pinProblem(file, pin.sha256, actual2, `at ${path}`, stops);
     return path;
   }
   const bytes = await download(file, pin.url, fetchImpl);
   const actual = sha256Of(bytes);
-  if (actual !== pin.sha256) throw pinProblem(file, pin.sha256, actual, `downloaded from ${pin.url}`);
+  if (actual !== pin.sha256) throw pinProblem(file, pin.sha256, actual, `downloaded from ${pin.url}`, stops);
   writeAtomic(path, bytes, mode);
   return path;
 }
@@ -282,6 +283,17 @@ async function ensureJailer(options) {
   }
   return jailer;
 }
+async function ensureNetworkHelper(options) {
+  const arch = options.arch ?? firecrackerArch(process.arch);
+  const file = `outerlayer-guest-${arch}`;
+  if (options.pin === void 0 && !networkHelperPinned(arch)) {
+    throw new AssetError(file, `no network helper is pinned for ${arch} in this release of the CLI, so container builds cannot start on this host`);
+  }
+  const pin = options.pin ?? { url: `${GUEST_ASSETS_BASE_URL}/${file}`, sha256: NETWORK_HELPER_SHA256[arch] };
+  const dir = vmAssetsDir(options.runnerDir);
+  mkdirSync(dir, { recursive: true, mode: RUNNER_DIR_MODE });
+  return { path: await ensureFile(dir, file, pin, options.fetchImpl ?? fetch, 493, "no container build starts"), sha256: pin.sha256 };
+}
 async function ensureBuilderDisk(options) {
   const arch = options.arch ?? firecrackerArch(process.arch);
   if (!MICROVM_ARCHES.includes(arch)) throw new AssetError("builder-rootfs", `no builder root disk is pinned for ${arch}, so microVM image builds run on ${MICROVM_ARCHES.join(" or ")} hosts only`);
@@ -315,6 +327,10 @@ function createContainerHost(deps = {}) {
       const result = await run("docker", ["info", "--format", "{{.OperatingSystem}}"]);
       return result.status === 0 && result.stdout.trim() !== "" ? result.stdout.trim() : null;
     },
+    async architecture() {
+      const result = await run("docker", ["version", "--format", "{{.Server.Arch}}"]);
+      return result.status === 0 && result.stdout.trim() !== "" ? result.stdout.trim() : null;
+    },
     async imageConfig(imageId) {
       const result = await run("docker", ["image", "inspect", "--format", "{{json .Config}}", imageId]);
       return result.status === 0 ? parseImageConfig(result.stdout) : { user: "", env: {} };
@@ -369,6 +385,13 @@ function createContainerHost(deps = {}) {
     },
     remove(container) {
       return run("docker", ["rm", "--force", "--volumes", container]);
+    },
+    logs(container, lines) {
+      return run("docker", ["logs", "--tail", String(lines), container]);
+    },
+    async oomKilled(container) {
+      const result = await run("docker", ["inspect", "--format", "{{.State.OOMKilled}}", container]);
+      return result.status === 0 && result.stdout.trim() === "true";
     }
   };
 }
@@ -1279,6 +1302,7 @@ async function startTunnel(socketPath, opts = {}) {
     } else {
       refusalKeys.add(key);
       refusals.push({ host, address, range });
+      if (range !== CONNECTION_RATE_RANGE && range !== OPEN_CONNECTIONS_RANGE) opts.log?.(`tunnel refused ${host} (${range === NOT_ALLOWED_RANGE ? "not in runner.build.allowHosts" : range})`);
     }
     persist();
   };
@@ -1604,6 +1628,55 @@ ${body}`);
     })
   };
 }
+var MAVEN_DIR = "maven";
+var MAVEN_SETTINGS_FILE = "settings.xml";
+var MAVEN_NO_PROXY_NOTE = "MAVEN_ARGS names its own global settings file, so the build's Maven gets no proxy from the runner";
+var MAVEN_SPACE_NOTE = "the build's directory has whitespace in its path, which Maven cannot read from MAVEN_ARGS, so its Maven gets no proxy from the runner";
+function namesGlobalSettings(args) {
+  return args.split(/\s+/).some((token) => token === "--global-settings" || token.startsWith("--global-settings=") || token === "-gs" || token.startsWith("-gs="));
+}
+function escapeXml(text) {
+  return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+function mavenSettingsXml(proxyUrl, noProxy) {
+  const url = new URL(proxyUrl);
+  const host = escapeXml(url.hostname.replace(/^\[|\]$/g, ""));
+  const nonProxyHosts = escapeXml(noProxy.split(",").filter((entry) => entry !== "").join("|"));
+  const proxy = (protocol) => [
+    "    <proxy>",
+    `      <id>outerlayer-${protocol}</id>`,
+    "      <active>true</active>",
+    `      <protocol>${protocol}</protocol>`,
+    `      <host>${host}</host>`,
+    `      <port>${url.port}</port>`,
+    `      <nonProxyHosts>${nonProxyHosts}</nonProxyHosts>`,
+    "    </proxy>"
+  ].join("\n");
+  return [
+    '<?xml version="1.0" encoding="UTF-8"?>',
+    '<settings xmlns="http://maven.apache.org/SETTINGS/1.2.0">',
+    "  <proxies>",
+    proxy("http"),
+    proxy("https"),
+    "  </proxies>",
+    "</settings>",
+    ""
+  ].join("\n");
+}
+function writeMavenSettings(buildDir2, proxyUrl, noProxy) {
+  const dir = join(buildDir2, MAVEN_DIR);
+  mkdirSync(dir, { recursive: true });
+  const file = join(dir, MAVEN_SETTINGS_FILE);
+  writeFileSync(file, mavenSettingsXml(proxyUrl, noProxy));
+  return file;
+}
+function mavenArgs(settingsFile, team) {
+  const own = team?.trim() ?? "";
+  if (own !== "" && namesGlobalSettings(own)) return { value: team, skipped: true };
+  return { value: own === "" ? `--global-settings ${settingsFile}` : `--global-settings ${settingsFile} ${own}`, skipped: false };
+}
+
+// src/runner/host-hooks.ts
 function provisionEnvironment(base, input) {
   return {
     ...base,
@@ -1764,8 +1837,8 @@ async function deliverMavenSettings(build, workdir, base, run, timeoutMs = MAVEN
   const env = { ...base, ...execProxyEnvironment(build) };
   const ran = await run(build.exec, execArgv(workdir, ["/bin/sh", "-c", WRITE_MAVEN_SETTINGS, "sh", mavenSettingsXml(env.HTTPS_PROXY, env.NO_PROXY)]), env, timeoutMs);
   if (ran.error !== void 0) return { reason: describeCallFailure(ran.error) };
-  const said = ran.stderr.trim().split("\n")[0];
-  if (ran.status !== 0) return { reason: `the write exited ${ran.status ?? ran.signal}${said === "" ? "" : `: ${said}`}` };
+  const said2 = ran.stderr.trim().split("\n")[0];
+  if (ran.status !== 0) return { reason: `the write exited ${ran.status ?? ran.signal}${said2 === "" ? "" : `: ${said2}`}` };
   const lines = ran.stdout.trim().split("\n");
   const path = lines[lines.length - 1].trim();
   if (!isAbsolute(path)) return { reason: "the write did not report an absolute path" };
@@ -2894,6 +2967,15 @@ function lifecycleFailureReason(step, exitCode) {
   return `lifecycle command ${step.name} (${step.source}) exited ${exitCode}`;
 }
 
+// src/runner/command-output.ts
+function firstLine4(text) {
+  return text.trim().split("\n")[0] ?? "";
+}
+function said(output) {
+  const line2 = firstLine4(output);
+  return line2 === "" ? "" : `: ${line2}`;
+}
+
 // src/runner/runtimes.ts
 var RUNTIMES = ["node", "python", "go", "rust", "ruby", "java"];
 var MANIFESTS = {
@@ -2910,10 +2992,6 @@ var MANIFESTS = {
 var IMAGE_CONFIG = "/etc/mise/config.toml";
 var RUST_PIN_FILES = ["rust-toolchain.toml", "rust-toolchain"];
 var REFUSALS_NAMED2 = 3;
-var PLAIN = { withoutProxyWarning: true };
-function firstLine4(text) {
-  return text.trim().split("\n")[0] ?? "";
-}
 function toolFailure(stderr) {
   for (const l of stderr.split("\n")) {
     if (/^\S+@\S+: /.test(l)) return l;
@@ -2939,7 +3017,7 @@ function parseListing(stdout) {
   }
 }
 async function listing(context) {
-  const ran = await context.input.exec(["mise", "ls", "--current", "--json"], context.path, { quiet: true, ...PLAIN });
+  const ran = await context.input.exec(["mise", "ls", "--current", "--json"], context.path, { quiet: true });
   return ran.status === 0 ? parseListing(ran.stdout) : void 0;
 }
 function refusalNote(context) {
@@ -2952,10 +3030,10 @@ function line(context, text) {
 var installWithMise = async (context) => {
   const { input, entry, path } = context;
   context.before = await listing(context) ?? [];
-  const installed = await input.exec(["mise", "install"], path, PLAIN);
+  const installed = await input.exec(["mise", "install"], path);
   if (installed.status !== 0) {
     const missing = context.before.filter((r) => !r.installed).map((r) => `${r.tool} ${r.version} (from ${describeSource(r.source, path)})`);
-    const what = missing.length === 0 ? `mise install failed in ${entry.repository} (exit ${installed.status})${firstLine4(installed.stderr) === "" ? "" : `: ${firstLine4(installed.stderr)}`}` : `mise could not install ${missing.join(", ")} in ${entry.repository} (exit ${installed.status})${toolFailure(installed.stderr) === "" ? "" : `: ${toolFailure(installed.stderr)}`}`;
+    const what = missing.length === 0 ? `mise install failed in ${entry.repository} (exit ${installed.status})${said(installed.stderr)}` : `mise could not install ${missing.join(", ")} in ${entry.repository} (exit ${installed.status})${toolFailure(installed.stderr) === "" ? "" : `: ${toolFailure(installed.stderr)}`}`;
     return `runtime_install_failed: ${what}${refusalNote(context)}`;
   }
   const after = await listing(context);
@@ -2967,7 +3045,7 @@ var installWithMise = async (context) => {
 var goToolchain = async (context) => {
   if (!context.files.has("go.mod")) return void 0;
   const ran = await context.input.exec(["go", "version"], context.path);
-  if (ran.status !== 0) return `runtime_install_failed: go version failed in ${context.entry.repository} (exit ${ran.status})${firstLine4(ran.stderr) === "" ? "" : `: ${firstLine4(ran.stderr)}`}${refusalNote(context)}`;
+  if (ran.status !== 0) return `runtime_install_failed: go version failed in ${context.entry.repository} (exit ${ran.status})${said(ran.stderr)}${refusalNote(context)}`;
   const version = /\bgo(\d+\.\d+(?:\.\d+)?\S*)/.exec(ran.stdout)?.[1];
   line(context, `go ${version ?? firstLine4(ran.stdout)} from go.mod`);
   return void 0;
@@ -2976,7 +3054,7 @@ var rustToolchain = async (context) => {
   const pin = RUST_PIN_FILES.find((file) => context.files.has(file));
   if (pin === void 0) return void 0;
   const ran = await context.input.exec(["rustc", "--version"], context.path);
-  if (ran.status !== 0) return `runtime_install_failed: rustc --version failed in ${context.entry.repository} (exit ${ran.status})${firstLine4(ran.stderr) === "" ? "" : `: ${firstLine4(ran.stderr)}`}${refusalNote(context)}`;
+  if (ran.status !== 0) return `runtime_install_failed: rustc --version failed in ${context.entry.repository} (exit ${ran.status})${said(ran.stderr)}${refusalNote(context)}`;
   const version = /\brustc (\S+)/.exec(ran.stdout)?.[1];
   line(context, `rust ${version ?? firstLine4(ran.stdout)} from ${pin}`);
   return void 0;
@@ -2991,7 +3069,6 @@ function unpinnedIn(context) {
 }
 async function provisionRuntimes(input) {
   const unpinned = {};
-  let dropProxyWarning = false;
   for (const entry of input.repositories) {
     if (input.aborted?.() === true) return { ok: false, reason: "", aborted: true };
     const path = checkoutPath(entry);
@@ -3010,13 +3087,8 @@ async function provisionRuntimes(input) {
       if (reason !== void 0) return { ok: false, reason };
     }
     unpinned[entry.repository] = unpinnedIn(context);
-    const old = context.resolved.find((r) => r.tool === "node" && !nodeAcceptsProxyWarningFlag(r.version));
-    if (old !== void 0) {
-      dropProxyWarning = true;
-      line(context, `leaving ${PROXY_WARNING_FLAG} out of NODE_OPTIONS because node ${old.version} does not accept it`);
-    }
   }
-  return { ok: true, unpinned, dropProxyWarning };
+  return { ok: true, unpinned };
 }
 function runtimeStepInput(report, services) {
   return report.base === void 0 ? {} : { runtimes: { refusals: () => services.record().refusals } };
@@ -3027,20 +3099,6 @@ function keepUnpinnedRuntimes(state, steps) {
 
 // src/runner/build-steps.ts
 var aborted = () => ({ ok: false, reason: "", aborted: true });
-function firstLine5(text) {
-  return text.trim().split("\n")[0] ?? "";
-}
-async function nodeRejectsProxyWarningFlag(repositories, exec, log, tag) {
-  for (const entry of repositories) {
-    const ran = await exec(["node", "--version"], checkoutPath(entry), { quiet: true, withoutProxyWarning: true });
-    if (ran.status !== 0) continue;
-    const version = firstLine5(ran.stdout);
-    if (nodeAcceptsProxyWarningFlag(version)) continue;
-    log.line(`${tag} ${entry.repository}: leaving ${PROXY_WARNING_FLAG} out of NODE_OPTIONS because node ${version} does not accept it`);
-    return true;
-  }
-  return false;
-}
 function gitErrorLine(text) {
   const lines = text.split("\n").map((line2) => line2.trim()).filter((line2) => line2 !== "");
   return lines.find((line2) => /^(fatal|error):/.test(line2)) ?? lines.at(-1) ?? "";
@@ -3059,7 +3117,7 @@ var DELIVER_SCRIPT = [
 var RECORD_SCRIPT = 'd="$(git rev-parse --git-common-dir)" && mkdir -p "$d/outerlayer" && printf "%s" "$1" > "$d/outerlayer/delivery.json"';
 var WRITE_SHIM_SCRIPT = 'mkdir -p "$1" && printf "%s" "$2" > "$1/claude" && chmod 755 "$1/claude"';
 function failure(what, result) {
-  return `context_delivery_failed: ${what} (exit ${result.status})${firstLine5(result.stderr) === "" ? "" : `: ${firstLine5(result.stderr)}`}`;
+  return `context_delivery_failed: ${what} (exit ${result.status})${said(result.stderr)}`;
 }
 async function repositorySkills(input, folder) {
   const listed = await input.exec(["ls", "-1", folder], CHECKOUT_DIR, { quiet: true });
@@ -3162,14 +3220,11 @@ async function runBuildSteps(input) {
   }
   if (input.governing !== void 0) await noteIgnoredDevcontainers(input, repositories, input.governing.repository);
   let unpinnedRuntimes;
-  const ordered = [{ ...primary, primary: true }, ...repositories.filter((candidate) => candidate.repository !== primary.repository).map((entry) => ({ ...entry, primary: false }))];
   if (input.runtimes !== void 0) {
+    const ordered = [{ ...primary, primary: true }, ...repositories.filter((candidate) => candidate.repository !== primary.repository).map((entry) => ({ ...entry, primary: false }))];
     const chosen = await provisionRuntimes({ repositories: ordered, exec, log, tag, refusals: input.runtimes.refusals, aborted: input.aborted });
     if (!chosen.ok) return chosen.aborted === true ? aborted() : { ok: false, reason: chosen.reason };
     unpinnedRuntimes = chosen.unpinned;
-    if (chosen.dropProxyWarning) input.dropProxyWarning?.();
-  } else if (input.dropProxyWarning !== void 0 && await nodeRejectsProxyWarningFlag(ordered, exec, log, tag)) {
-    input.dropProxyWarning();
   }
   const lifecycleDir = lifecycleWorkdir(repositories, input.governing?.repository);
   for (const step of lifecycleSteps(input.lifecycle)) {
@@ -3224,7 +3279,7 @@ var MAX_TRANSCRIPTS = 500;
 var MAX_TOTAL_TRANSCRIPT_BYTES = 64 * 1024 * 1024;
 var TRANSCRIPT_COPY_MS = 2 * 60 * 1e3;
 var BUILD_HOME = "/build/home";
-function firstLine6(text) {
+function firstLine5(text) {
   return text.trim().split("\n")[0] ?? "";
 }
 async function copyTranscripts(run, now = Date.now) {
@@ -3236,7 +3291,7 @@ async function copyTranscripts(run, now = Date.now) {
     return { ok: false, reason: describeCallFailure(err) };
   }
   if (listed.status !== 0 && !/No such file or directory/.test(listed.stderr)) {
-    return { ok: false, reason: `listing the transcripts failed (exit ${listed.status})${firstLine6(listed.stderr) === "" ? "" : `: ${firstLine6(listed.stderr)}`}` };
+    return { ok: false, reason: `listing the transcripts failed (exit ${listed.status})${firstLine5(listed.stderr) === "" ? "" : `: ${firstLine5(listed.stderr)}`}` };
   }
   const paths = listed.stdout.split("\0").filter((entry) => entry.startsWith(`${TRANSCRIPT_ROOT}/`) && !entry.includes("\n") && !entry.slice(TRANSCRIPT_ROOT.length + 1).split("/").includes("..")).map((entry) => entry.slice(TRANSCRIPT_ROOT.length + 1)).sort();
   const copied = [];
@@ -3253,7 +3308,7 @@ async function copyTranscripts(run, now = Date.now) {
     }
     try {
       const read = await run(["head", "-c", String(MAX_TRANSCRIPT_BYTES + 1), `${TRANSCRIPT_ROOT}/${path}`]);
-      if (read.status !== 0) missed.push({ path, reason: `reading it failed (exit ${read.status})${firstLine6(read.stderr) === "" ? "" : `: ${firstLine6(read.stderr)}`}` });
+      if (read.status !== 0) missed.push({ path, reason: `reading it failed (exit ${read.status})${firstLine5(read.stderr) === "" ? "" : `: ${firstLine5(read.stderr)}`}` });
       else if (Buffer.byteLength(read.stdout) > MAX_TRANSCRIPT_BYTES) missed.push({ path, reason: `it is larger than ${MAX_TRANSCRIPT_BYTES / (1024 * 1024)} MiB` });
       else if (total + Buffer.byteLength(read.stdout) > MAX_TOTAL_TRANSCRIPT_BYTES) missed.push({ path, reason: `copying it would take the transcripts past ${MAX_TOTAL_TRANSCRIPT_BYTES / (1024 * 1024)} MiB` });
       else {
@@ -3708,7 +3763,6 @@ var RECEIVE_ARGV = ["/opt/outerlayer/bin/node", "/opt/outerlayer/cli/dist/index.
 var REASON_LINE_MAX = 240;
 var STEPS = {
   gh: "the build's gh configuration",
-  maven: "the build's Maven settings",
   "git-hooks": "the commit hooks",
   context: "the staged context",
   "eval-input": "the checks' input"
@@ -4359,6 +4413,67 @@ function createCpuAllocator(cores) {
     }
   };
 }
+var NETWORK_READY_ATTEMPTS = 60;
+var NETWORK_READY_PAUSE_MS = 500;
+var LOG_LINES = 20;
+async function helperReason(runtime, name) {
+  const logs = await runtime.host.logs(name, LOG_LINES);
+  const lines = `${logs.stdout}
+${logs.stderr}`.split("\n").map((line2) => line2.trim());
+  return lines.filter((line2) => line2.startsWith("net: ")).at(-1) ?? lines.filter((line2) => line2 !== "").at(-1) ?? "";
+}
+async function waitForNetwork(runtime, name) {
+  for (let attempt = 0; attempt < NETWORK_READY_ATTEMPTS; attempt++) {
+    const probe = await runtime.host.exec({ container: name, user: "0:0", env: { literals: {}, passed: {} }, argv: ["cat", NETWORK_READY_FILE] });
+    if (probe.status === 0) return void 0;
+    const state = await runtime.host.state(name);
+    if (state === "stopped" || state === "missing") {
+      return `the build's network helper container stopped before its network was ready${said(await helperReason(runtime, name))}`;
+    }
+    await runtime.sleep(NETWORK_READY_PAUSE_MS);
+  }
+  return `the build's network helper container was not ready within ${NETWORK_READY_ATTEMPTS * NETWORK_READY_PAUSE_MS / 1e3} seconds${said(await helperReason(runtime, name))}`;
+}
+async function startNetworkHelper(runtime, input, logPath) {
+  const started = await runtime.host.run(networkHelperRunArgs(input), { logPath });
+  if (started.status !== 0) {
+    return `starting the build's network helper container failed (exit ${started.status})${said(started.stderr)}`;
+  }
+  return waitForNetwork(runtime, input.name);
+}
+async function ensureNetworkReady(runtime, state) {
+  if (state.network === void 0) return void 0;
+  const current = await runtime.host.state(state.network);
+  if (current === "running") return void 0;
+  if (current === "missing") return `the build's network helper container ${state.network} is gone`;
+  const started = await runtime.host.start(state.network);
+  if (started.status !== 0) {
+    return `starting the build's network helper container again failed (exit ${started.status})${said(started.stderr)}`;
+  }
+  return waitForNetwork(runtime, state.network);
+}
+async function stoppedHelperReason(runtime, name) {
+  if (await runtime.host.oomKilled(name)) return `the build's network helper container ran out of memory (${NETWORK_HELPER_MEMORY})`;
+  return `the build's network helper container stopped${said(await helperReason(runtime, name))}`;
+}
+async function removeNetworkHelper(runtime, state) {
+  if (state.network === void 0) return void 0;
+  const removed = await runtime.host.remove(state.network);
+  if (removed.status !== 0 && !/no such container/i.test(removed.stderr)) return `container ${state.network} was not removed: ${removed.stderr.trim()}`;
+  return void 0;
+}
+function kernelHasIpv6(exists = existsSync, platform = process.platform) {
+  return platform !== "linux" || exists("/proc/sys/net/ipv6");
+}
+function helperArchOf(engineArch) {
+  if (engineArch === "amd64") return "x86_64";
+  if (engineArch === "arm64") return "aarch64";
+  return engineArch;
+}
+async function engineNetworkHelper(host, runnerDir2, ensure = ensureNetworkHelper) {
+  const engine = await host.architecture();
+  return ensure({ runnerDir: runnerDir2, ...engine === null ? {} : { arch: helperArchOf(engine) } });
+}
 
 // src/runner/container/lease-channel.ts
 var LEASE_SECONDS = 900;
@@ -4409,8 +4524,9 @@ function createContainerRuntime(opts = {}) {
   const { cli, remoteFor } = opts;
   const vm = createMicroVmPorts(opts.vm);
   const sleep = opts.sleep ?? ((ms) => new Promise((resolve2) => setTimeout(resolve2, ms)));
+  const host = opts.host ?? createContainerHost();
   return {
-    host: opts.host ?? createContainerHost(),
+    host,
     cpus: opts.cpus ?? createCpuAllocator(usableCpus()),
     tunnels: opts.tunnels ?? /* @__PURE__ */ new Map(),
     relays: opts.relays ?? /* @__PURE__ */ new Map(),
@@ -4446,7 +4562,9 @@ function createContainerRuntime(opts = {}) {
     destinationOptions: opts.destinationOptions,
     claudeUpstream: opts.claudeUpstream,
     vm,
-    cliBuild: () => cli ?? currentCliBuild()
+    cliBuild: () => cli ?? currentCliBuild(),
+    networkHelper: opts.networkHelper ?? ((dir) => engineNetworkHelper(host, dir)),
+    ipv6: opts.ipv6 ?? kernelHasIpv6()
   };
 }
 var REPORT_READ_TIMEOUT_MS = 6e4;
@@ -4509,9 +4627,6 @@ function gitRemoteFor(runtime, input) {
     ...input.readOnly === true ? { readOnly: true } : {}
   });
 }
-function firstLine7(text) {
-  return text.trim().split("\n")[0] ?? "";
-}
 var NO_ENV = { literals: {}, passed: {} };
 function transportOf(state) {
   const recorded = state.transport;
@@ -4640,6 +4755,12 @@ async function provisionContainer(input) {
     if (unfetched !== void 0) return fail(unfetched);
   }
   const imageRepository = governingSource.kind === "governed" ? governingSource.repository : repository;
+  let networkHelper;
+  try {
+    networkHelper = await runtime.networkHelper(runnerDir(config.configPath));
+  } catch (err) {
+    return fail(err instanceof AssetError ? err.message : `the network helper could not be had: ${describeCallFailure(err)}`);
+  }
   const obtained = await obtainImage({
     config,
     runtime,
@@ -4651,7 +4772,8 @@ async function provisionContainer(input) {
     log,
     aborted: input.aborted,
     deadlineMs: input.deadlineMs,
-    now: input.now
+    now: input.now,
+    guestHelper: networkHelper
   });
   if (!obtained.ok) return obtained.aborted === true ? { ok: false, reason: obtained.reason, aborted: true } : fail(obtained.reason);
   const built = obtained.built;
@@ -4711,7 +4833,7 @@ async function provisionContainer(input) {
     }
     return aborted2 ? { ok: false, reason: "ended before provision finished", aborted: true } : fail(reason);
   };
-  const dockerFailed = (what, result) => bail(`${what} failed (exit ${result.status})${firstLine7(result.stderr) === "" ? "" : `: ${firstLine7(result.stderr)}`}`);
+  const dockerFailed = (what, result) => bail(`${what} failed (exit ${result.status})${said(result.stderr)}`);
   if (input.aborted()) return bail("", true);
   mkdirSync(buildDir2, { recursive: true });
   const ghDir = ghConfigDir(buildDir2);
@@ -4724,11 +4846,6 @@ async function provisionContainer(input) {
       err instanceof WorkCommandError ? `the build's read token could not be had: ${refusalCode(err)}` : `the build's gh configuration could not be written: ${describeCallFailure(err)}`
     );
   }
-  try {
-    writeBuildMavenSettings(buildDir2);
-  } catch (err) {
-    return bail(`the build's Maven settings could not be written: ${describeCallFailure(err)}`);
-  }
   for (const entry of repositories) {
     if (entry.repository === primary.repository) continue;
     try {
@@ -4768,12 +4885,23 @@ async function provisionContainer(input) {
   };
   const prepared = await host.run(prepareRunArgs(runInput), { logPath });
   if (prepared.status !== 0) return dockerFailed("preparing the build's volume", prepared);
-  const started = await host.run(containerRunArgs(runInput), { logPath });
+  const imageConfig = await host.imageConfig(report.imageId);
+  const resolved = await resolveBuildUser(runtime, runInput, { remoteUser: report.apply.remoteUser, imageUser: imageConfig.user }, logPath);
+  if (!resolved.ok) return bail(resolved.reason);
+  state.agentUser = resolved.user;
+  if (resolved.home !== void 0) state.home = resolved.home;
+  const agentUser = resolved.user;
+  state.network = networkHelperName(name);
+  input.save(state, environment);
+  const notReady = await startNetworkHelper(runtime, { name: state.network, buildId, runnerId, image: report.imageId, limits: limits2, ipv6: runtime.ipv6 }, logPath);
+  if (notReady !== void 0) return bail(notReady);
+  if (input.aborted()) return bail("", true);
+  const started = await host.run(containerRunArgs({ ...runInput, network: state.network, home: state.home }), { logPath });
   if (started.status !== 0) return dockerFailed("starting the build's container", started);
   joinBuild(runtime, state, services, (line2) => log.line(`${tag} ${line2}`));
   if (input.aborted()) return bail("", true);
   if (!await waitForRelay(runtime, state)) return bail("the relay in the build's container did not start");
-  const ghDelivered = await deliverJobFiles(runtime, state, ["gh", "maven"], secrets);
+  const ghDelivered = await deliverJobFiles(runtime, state, ["gh"], secrets);
   if (!ghDelivered.ok) return bail(ghDelivered.reason);
   keepGhConfigCurrent(tokens, buildDir2, (err) => log.error(`${tag} the read token could not be written for gh: ${describeCallFailure(err)}`), {
     runtime,
@@ -4782,24 +4910,6 @@ async function provisionContainer(input) {
     delivered: readToken,
     onFailure: (reason) => log.error(`${tag} ${reason}`)
   });
-  const imageConfig = await host.imageConfig(report.imageId);
-  state.imageEnv = imageConfig.env;
-  let agentUser;
-  try {
-    agentUser = await resolveAgentUser({
-      remoteUser: report.apply.remoteUser,
-      imageUser: imageConfig.user,
-      probe: async (user) => {
-        const probe = await host.exec({ container: name, user: ADDED_USER, env: NO_ENV, argv: ["id", "-u", user] });
-        const uid = Number(probe.stdout);
-        return probe.status === 0 && Number.isInteger(uid) ? uid : null;
-      }
-    });
-  } catch (err) {
-    if (err instanceof AgentUserError) return bail(err.message);
-    throw err;
-  }
-  state.agentUser = agentUser;
   const tools = await host.exec({ container: name, user: ADDED_USER, env: NO_ENV, argv: ["cat", "/opt/outerlayer/tools.json"] });
   const agentVersion = agentVersionOf(tools.status === 0 ? tools.stdout : "");
   environment.agentVersion = agentVersion;
@@ -4807,10 +4917,7 @@ async function provisionContainer(input) {
   const hashed = program.status === 0 ? parseProgramHash(program.stdout) : void 0;
   if (hashed !== void 0) state.judgeProgram = { path: JUDGE_PROGRAM, sha256: hashed };
   input.save(state, environment);
-  let execEnv = buildEnvironment({ ...envInput, imageEnv: state.imageEnv });
-  for (const notice of execEnv.notices) log.line(`${tag} ${notice}`);
-  const plainEnv = buildEnvironment({ ...envInput, imageEnv: state.imageEnv, proxyWarning: false });
-  const exec = (argv, workdir, opts) => host.exec({ container: name, user: agentUser, workdir, env: opts?.withoutProxyWarning === true ? plainEnv : execEnv, argv }, opts?.quiet === true ? void 0 : { logPath });
+  const exec = (argv, workdir, opts) => host.exec({ container: name, user: agentUser, workdir, env, argv }, opts?.quiet === true ? void 0 : { logPath });
   const steps = await runBuildSteps({
     repository,
     branch: primary.branch,
@@ -4843,11 +4950,7 @@ async function provisionContainer(input) {
     keepIn: jobDir,
     ...input.requireBuildSkill === true ? { requireBuildSkill: true } : {},
     // A repository with no devcontainer file builds on the universal image, whose runtimes the build chooses and installs.
-    ...runtimeStepInput(report, services),
-    dropProxyWarning: () => {
-      state.proxyWarningDropped = true;
-      execEnv = plainEnv;
-    }
+    ...runtimeStepInput(report, services)
   });
   if (!steps.ok) return bail(steps.reason, steps.aborted === true);
   state.startCommit = steps.startCommit;
@@ -4855,6 +4958,37 @@ async function provisionContainer(input) {
   if (steps.controlPlane !== void 0) environment.controlPlane = steps.controlPlane;
   return { ok: true, workdir: CHECKOUT_DIR, state, environment };
 }
+async function resolveBuildUser(runtime, runInput, named, logPath) {
+  const lookups = /* @__PURE__ */ new Map();
+  const lookup2 = async (user2) => {
+    const known = lookups.get(user2);
+    if (known !== void 0) return known;
+    const ran = await runtime.host.run(identityRunArgs({ ...runInput, user: ADDED_USER }, user2));
+    const found = parseIdentity(ran.stdout);
+    if (ran.status !== 0 || found === void 0) {
+      throw new AgentUserError(`reading the build's user from the image failed (exit ${ran.status})${said(ran.stderr)}`);
+    }
+    lookups.set(user2, found);
+    return found;
+  };
+  let user;
+  let home;
+  try {
+    user = await resolveAgentUser({ ...named, probe: async (name) => (await lookup2(name))?.uid ?? null });
+    home = user === ADDED_USER ? void 0 : mountableHome((await lookup2(user))?.home);
+  } catch (err) {
+    if (err instanceof AgentUserError) return { ok: false, reason: err.message };
+    throw err;
+  }
+  if (home === void 0) return { ok: true, user };
+  const copied = await copyBuildHome(runtime, { ...runInput, user }, home, logPath);
+  return copied === void 0 ? { ok: true, user, home } : { ok: false, reason: copied };
+}
+async function copyBuildHome(runtime, runInput, home, logPath) {
+  const copied = await runtime.host.run(homeCopyRunArgs(runInput, home), { logPath });
+  if (copied.status === 0) return void 0;
+  return `copying ${home} into the build's home failed (exit ${copied.status})${said(copied.stderr)}`;
+}
 function agentVersionOf(toolsJson) {
   try {
     const version = JSON.parse(toolsJson).claudeCodeVersion;
@@ -4879,9 +5013,7 @@ function containerCommandExec(input) {
     containerEnv: state.containerEnv ?? {},
     unpinnedRuntimes: state.unpinnedRuntimes,
     builtIns: state.builtIns === true,
-    identity: input.job.commitIdentity,
-    imageEnv: state.imageEnv,
-    proxyWarning: state.proxyWarningDropped !== true
+    identity: input.job.commitIdentity
   });
   return {
     container: state.container,
@@ -4905,9 +5037,7 @@ function containerSenderCommand(input) {
     containerEnv: state.containerEnv ?? {},
     unpinnedRuntimes: state.unpinnedRuntimes,
     builtIns: state.builtIns === true,
-    identity: input.job.commitIdentity,
-    imageEnv: state.imageEnv,
-    proxyWarning: state.proxyWarningDropped !== true
+    identity: input.job.commitIdentity
   });
   const args = containerExecArgs({
     container: state.container,
@@ -5007,7 +5137,7 @@ async function ensureTunnel(runtime, state, jobDir, config, itemKey, branch, rep
 }
 async function redeliver(runtime, state, jobDir) {
   if (!filesAreCopied(state)) return { ok: true };
-  const parts = ["gh", "maven", "git-hooks", "context"];
+  const parts = ["gh", "git-hooks", "context"];
   return deliverJobFiles(runtime, state, parts, secretsOf(runtime, jobDir));
 }
 async function deliverContainerHooks(runtime, state, jobDir) {
@@ -5020,6 +5150,8 @@ async function syncInContainer(input) {
   try {
     await ensureTunnel(runtime, state, input.jobDir, input.config, job.itemKey, job.branch, job.repositories, input.log, () => leaseExpiresAtMs(job));
     if (state.stopped) {
+      const network = await ensureNetworkReady(runtime, state);
+      if (network !== void 0) return { ok: false, reason: network };
       await runtime.host.start(state.container);
       state.stopped = false;
       if (!await waitForRelay(runtime, state)) return { ok: false, reason: "the relay did not start again" };
@@ -5038,9 +5170,7 @@ async function syncInContainer(input) {
       containerEnv: state.containerEnv ?? {},
       unpinnedRuntimes: state.unpinnedRuntimes,
       builtIns: state.builtIns === true,
-      identity: job.commitIdentity,
-      imageEnv: state.imageEnv,
-      proxyWarning: state.proxyWarningDropped !== true
+      identity: job.commitIdentity
     });
     const result = await runtime.host.exec(
       { container: state.container, user: state.agentUser ?? ADDED_USER, workdir: job.workdir ?? CHECKOUT_DIR, env, argv: ["outerlayer", "sync"] },
@@ -5054,6 +5184,8 @@ async function syncInContainer(input) {
 async function copyTranscriptsFromContainer(runtime, state) {
   try {
     if (state.stopped) {
+      const network = await ensureNetworkReady(runtime, state);
+      if (network !== void 0) return { ok: false, reason: network };
       const started = await runtime.host.start(state.container);
       if (started.status !== 0) return { ok: false, reason: `the build's container could not be started again (exit ${started.status})` };
       state.stopped = false;
@@ -5067,6 +5199,7 @@ var HOOK_ERRORS_IN_CONTAINER = "/build/home/.outerlayer/spool/hook-errors.log";
 async function copyHookErrors(runtime, state, jobDir) {
   try {
     if (state.stopped) {
+      if (await ensureNetworkReady(runtime, state) !== void 0) return;
       const started = await runtime.host.start(state.container);
       if (started.status !== 0) return;
     }
@@ -5086,6 +5219,8 @@ async function cleanupContainer(runtime, state, jobDir) {
   if (removedContainer.status !== 0 && !/no such container/i.test(removedContainer.stderr)) {
     failures.push(`container ${state.container} was not removed: ${removedContainer.stderr.trim()}`);
   }
+  const helperLeft = await removeNetworkHelper(runtime, state);
+  if (helperLeft !== void 0) failures.push(helperLeft);
   let volumeGone = false;
   for (let attempt = 0; attempt < VOLUME_REMOVE_ATTEMPTS && !volumeGone; attempt++) {
     const removed = await runtime.host.removeVolume(state.volume);
@@ -5115,13 +5250,15 @@ function containerJudgeEnvironment(input) {
       env: NO_ENV,
       argv: ["/bin/sh", "-c", `[ -f ${file} ] && [ ! -L ${file} ] && head -c ${maxBytes + 1} ${file}`]
     }, { timeoutMs: REPORT_READ_TIMEOUT_MS });
-    if (read.status > 1) throw new Error(`reading the judge's ${name} exited ${read.status}: ${firstLine7(read.stderr)}`);
+    if (read.status > 1) throw new Error(`reading the judge's ${name} exited ${read.status}: ${firstLine4(read.stderr)}`);
     return read.status === 0 && Buffer.byteLength(read.stdout) <= maxBytes ? read.stdout : void 0;
   };
   return {
     stop: async () => {
       if (input.config !== void 0) await ensureTunnel(runtime, state, input.jobDir, input.config, job.itemKey, job.branch, job.repositories, input.log);
       await stopContainer(runtime, state);
+      const network = await ensureNetworkReady(runtime, state);
+      if (network !== void 0) throw new Error(network);
       const started = await runtime.host.start(state.container);
       if (started.status !== 0) throw new Error(`the build's container could not be started again (exit ${started.status})`);
       state.stopped = false;
@@ -5133,7 +5270,7 @@ function containerJudgeEnvironment(input) {
     hashProgram: async () => {
       const ran = await runtime.host.exec({ container: state.container, user: ADDED_USER, env: NO_ENV, argv: [...HASH_ARGV] });
       const sha256 = ran.status === 0 ? parseProgramHash(ran.stdout) : void 0;
-      return sha256 === void 0 ? { ok: false, reason: firstLine7(ran.stderr) || `the hash could not be taken (exit ${ran.status})` } : { ok: true, sha256 };
+      return sha256 === void 0 ? { ok: false, reason: firstLine4(ran.stderr) || `the hash could not be taken (exit ${ran.status})` } : { ok: true, sha256 };
     },
     prepare: async (files, tree) => {
       if (filesAreCopied(state)) {
@@ -5166,7 +5303,7 @@ function containerJudgeEnvironment(input) {
     // host. Every capability is dropped in the container, so root there could not either; the build's user removes its own, and the runner removes the rest.
     clear: async () => {
       const removed = await runtime.host.exec({ container: state.container, user, env: NO_ENV, argv: ["find", JUDGE_DIR, "-mindepth", "1", "-user", user, "-delete"] });
-      if (removed.status !== 0) throw new Error(`find exited ${removed.status}: ${firstLine7(removed.stderr)}`);
+      if (removed.status !== 0) throw new Error(`find exited ${removed.status}: ${firstLine4(removed.stderr)}`);
       if (!filesAreCopied(state)) return;
       const emptied = await clearJudgeFolder(runtime, state, secretsOf(runtime, input.jobDir));
       if (!emptied.ok) throw new Error(emptied.reason);
@@ -5204,11 +5341,12 @@ async function startCheckContainer(input) {
     buildDir: buildDir2,
     repository,
     imageId: built.imageId,
-    imageEnv: built.imageEnv,
     agentUser,
     cpuset,
     transport,
-    ...transport === "exec" ? { jobFiles: "copied" } : {}
+    ...transport === "exec" ? { jobFiles: "copied" } : {},
+    ...built.network === void 0 ? {} : { network: networkHelperName(name) },
+    ...built.home === void 0 ? {} : { home: built.home }
   };
   const checksDir = join(jobDir, "checks");
   mkdirSync(checksDir, { recursive: true });
@@ -5222,7 +5360,7 @@ async function startCheckContainer(input) {
     }
     return { ok: false, reason };
   };
-  const dockerFailed = (what, result) => fail(`${what} failed (exit ${result.status})${firstLine7(result.stderr) === "" ? "" : `: ${firstLine7(result.stderr)}`}`);
+  const dockerFailed = (what, result) => fail(`${what} failed (exit ${result.status})${said(result.stderr)}`);
   mkdirSync(buildDir2, { recursive: true });
   if (!filesAreCopied(state)) chmodSync(buildDir2, 493);
   let services;
@@ -5258,11 +5396,19 @@ async function startCheckContainer(input) {
   };
   const prepared = await host.run(prepareRunArgs(runInput), { logPath });
   if (prepared.status !== 0) return dockerFailed("preparing the check environment's volume", prepared);
-  const started = await host.run(containerRunArgs(runInput), { logPath });
+  if (state.home !== void 0) {
+    const copied = await copyBuildHome(runtime, { ...runInput, user: agentUser }, state.home, logPath);
+    if (copied !== void 0) return fail(copied);
+  }
+  if (state.network !== void 0) {
+    const notReady = await startNetworkHelper(runtime, { name: state.network, buildId, runnerId, image: built.imageId, limits: limits2, ipv6: runtime.ipv6 }, logPath);
+    if (notReady !== void 0) return fail(notReady);
+  }
+  const started = await host.run(containerRunArgs({ ...runInput, network: state.network, home: state.home }), { logPath });
   if (started.status !== 0) return dockerFailed("starting the check environment's container", started);
   if (transport === "exec") joinBuild(runtime, state, services, (line2) => log.line(`${tag} ${line2}`));
   if (!await waitForRelay(runtime, state)) return fail("the relay in the check environment's container did not start");
-  const env = checkEnvironment({ config, item: job.item, repository, hostEnv: runtime.hostEnv, containerEnv: built.containerEnv ?? {}, imageEnv: built.imageEnv });
+  const env = checkEnvironment({ config, item: job.item, repository, hostEnv: runtime.hostEnv, containerEnv: built.containerEnv ?? {} });
   const secrets = () => tokens.issuedTokens();
   let delivered = false;
   const deliverInput = async () => {
@@ -5287,6 +5433,11 @@ async function startCheckContainer(input) {
       restart: async () => {
         await leaveBuild(runtime, state);
         await host.stop(name);
+        const network = await ensureNetworkReady(runtime, state);
+        if (network !== void 0) {
+          log.error(`${tag} ${network}`);
+          return false;
+        }
         const again = await host.start(name);
         if (again.status !== 0 || !await waitForRelay(runtime, state)) return false;
         rejoinBuild(runtime, state, (line2) => log.line(`${tag} ${line2}`));
@@ -5402,4 +5553,4 @@ function describeMachineDocker(machine) {
   return `Docker Engine ${version ?? "of no known version"}, older than the ${MIN_ENGINE_MAJOR} that container builds need`;
 }
 
-export { ADDED_USER, ADOPTED_FETCH_RETRY_WINDOW_MS, AgentUserError, AssetError, DeliveryFailure, EVAL_INPUT_NAME, GH_CONFIG_YML, HELPER_ENV, LEASE_SECONDS, MANAGED_UNJAILED_REASON, MIN_ENGINE_MAJOR, PLACEHOLDER_MARKER, ROOT_DISK_ID_PREFIX, RunnerInitError, attemptNote, claimPermissionProblem, claudeCredentialCheck, cleanupContainer, closeHostBuild, containerCommandExec, containerJudgeEnvironment, containerSenderCommand, copyJudgeTree, copyTranscripts, copyTranscriptsFromContainer, createBuildDisk, createContainerRuntime, createLeaseChannel, currentSkillCommand, decideHostBuildSkill, deleteBuildDisk, deliverContainerHooks, deliverExecMaven, describeMachineDocker, detectMachine, dropManagedBuildSettings, dropManagedClaudeKey, ensureFirecrackerAndJailer, ensureRootfs, ensureTunnel, execArgv, execCommandLine, fetchManagedBuildSettings, fetchManagedClaudeKey, filesAreCopied, formerSkillProblem, formerSkillQueues, ghHostsYml, gitRemoteFor, hasClaudeCredential, helperFirecrackerNote, helperSocketPath, holdManagedBuildSettings, holdManagedClaudeKey, hostCommandEnvironment, hostEnvironment, isPlaceholderCommand, keepGhConfigCurrent, keepUnpinnedRuntimes, leaseExpiresAtMs, leaseTimeLeftMs, lifecycleFailureReason, lifecycleSteps, listenOnBroker, machineConfig, makeBuildsDirPrivate, managedBuildSettingValues, managedBuildSettingsFor, managedClaudeKeyFor, managedClaudeKeyValues, managedMachineLimits, measureDisk, microVmArchSupported, microVmAssetsPinned, missingPermissionFix, missingPermissionOf, needsBuildSkill, needsClaudeCredential, obtainImage, outOfMemoryReason, parseCpuList, permissionModeProblem, permissionModeProblems, placeholderProblem, placeholderQueues, prepareBranch, prepareRunnerInit, probeHelper, provisionContainer, provisionEnvironment, reachDockerStep, readConfigObject, resolveAgentUser, resolveHostBuild, runBuildSteps, runRunnerInit, runWithSpawn, runtimeStepInput, senderAliveScript, senderSignalScript, setUpRunnerCgroup, shellQuote, signalInContainer, startCheckContainer, startHostServices, startJailedInto, startServicesFor, stopContainer, stopJailed, supportsContainerBuilds, supportsMicroVmBuilds, sweepImageBuilders, syncInContainer, withFactoryHosts, withTunnelLog, writeEvalInput, writeRunnerInit };
+export { ADDED_USER, ADOPTED_FETCH_RETRY_WINDOW_MS, AgentUserError, AssetError, DeliveryFailure, EVAL_INPUT_NAME, GH_CONFIG_YML, HELPER_ENV, LEASE_SECONDS, MANAGED_UNJAILED_REASON, MIN_ENGINE_MAJOR, PLACEHOLDER_MARKER, ROOT_DISK_ID_PREFIX, RunnerInitError, attemptNote, claimPermissionProblem, claudeCredentialCheck, cleanupContainer, closeHostBuild, containerCommandExec, containerJudgeEnvironment, containerSenderCommand, copyJudgeTree, copyTranscripts, copyTranscriptsFromContainer, createBuildDisk, createContainerRuntime, createLeaseChannel, currentSkillCommand, decideHostBuildSkill, deleteBuildDisk, deliverContainerHooks, deliverExecMaven, describeMachineDocker, detectMachine, dropManagedBuildSettings, dropManagedClaudeKey, ensureFirecrackerAndJailer, ensureNetworkReady, ensureRootfs, ensureTunnel, execArgv, execCommandLine, fetchManagedBuildSettings, fetchManagedClaudeKey, filesAreCopied, firstLine4 as firstLine, formerSkillProblem, formerSkillQueues, ghHostsYml, gitRemoteFor, hasClaudeCredential, helperFirecrackerNote, helperSocketPath, holdManagedBuildSettings, holdManagedClaudeKey, hostCommandEnvironment, hostEnvironment, isPlaceholderCommand, keepGhConfigCurrent, keepUnpinnedRuntimes, leaseExpiresAtMs, leaseTimeLeftMs, lifecycleFailureReason, lifecycleSteps, listenOnBroker, machineConfig, makeBuildsDirPrivate, managedBuildSettingValues, managedBuildSettingsFor, managedClaudeKeyFor, managedClaudeKeyValues, managedMachineLimits, measureDisk, microVmArchSupported, microVmAssetsPinned, missingPermissionFix, missingPermissionOf, needsBuildSkill, needsClaudeCredential, obtainImage, outOfMemoryReason, parseCpuList, permissionModeProblem, permissionModeProblems, placeholderProblem, placeholderQueues, prepareBranch, prepareRunnerInit, probeHelper, provisionContainer, provisionEnvironment, reachDockerStep, readConfigObject, resolveAgentUser, resolveHostBuild, runBuildSteps, runRunnerInit, runWithSpawn, runtimeStepInput, said, senderAliveScript, senderSignalScript, setUpRunnerCgroup, shellQuote, signalInContainer, startCheckContainer, startHostServices, startJailedInto, startServicesFor, stopContainer, stopJailed, stoppedHelperReason, supportsContainerBuilds, supportsMicroVmBuilds, sweepImageBuilders, syncInContainer, withFactoryHosts, withTunnelLog, writeEvalInput, writeRunnerInit };