create-walle 0.10.2 → 0.10.3

package/README.md

@@ -26,7 +26,7 @@ Screenshots show the real application with fictional `acme-ledger` data and scri
 
 ### Choose the agent for the task
 
-Every session has its own agent choice. Run Claude Code, Codex, Gemini CLI, OpenCode, Cursor Agent, Wall-E or a shell side by side and move between them from the same workspace.
+Every session has its own agent choice. Run Claude Code, Codex, Gemini CLI, OpenCode, Cursor Agent, DeepSeek Harness, Wall-E or a shell side by side and move between them from the same workspace.
 
 The CLI, the model and the connection serving that model are separate decisions: the AI Providers area brings native agent options, direct provider connections and configured routers into one place, using your own accounts and credentials. Agents differ in what they support, so the available model-switching controls depend on the CLI you pick.
 
@@ -77,6 +77,8 @@ A shared MCP gateway lets eligible tool servers reuse one process across session
 
 Pair another machine running CTM and its sessions join the same list, tagged by machine. Pick the machine when you start a session, open and type into it from the hub's browser, and sign that machine's coding agents in from the Machines page, on desktop or phone.
 
+Recent Sessions and search cover every paired machine, and a session link from any of them opens wherever that session lives. Paired machines share Wall-E memory, receive the hub's skills, and can be kept up to date from the hub. A session on another machine can ask to use the hub's files, commands or browser, and it waits for your approval first.
+
 ### Review changes in one place
 
 The Review page moves between rendered HTML or Markdown, source files and diffs, and new files appear before Git tracks them. Comments collect into one message for the session responsible for the change, keeping feedback beside the files that produced it.

package/lib/release-schema.json

@@ -9,7 +9,7 @@
         21, 22, 23, 24, 25, 26, 27, 28, 29, 30,
         31, 32, 33, 34, 35, 36, 37, 38, 39, 40,
         41, 42, 43, 44, 45, 46, 47, 48, 49, 50,
-        51, 52, 53, 54, 55, 56
+        51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61
       ]
     },
     "walle": {
@@ -25,7 +25,7 @@
         71, 72, 73, 74, 75, 76, 77, 78, 79, 80,
         81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 91, 92, 93, 94, 95, 96,
         97, 98, 99, 100,
-        101
+        101, 102, 103, 104, 105
       ]
     }
   }

package/lib/runtime-closure-policy.json

@@ -9,6 +9,7 @@
     "coding-task-manager/bin/client-server-boundary-lint.js",
     "coding-task-manager/bin/conv-order-write-lint.js",
     "coding-task-manager/bin/conversation-provenance-lint.js",
+    "coding-task-manager/bin/credential-dir-fixture-lint.js",
     "coding-task-manager/bin/dashboard-client-source.js",
     "coding-task-manager/bin/deadline-lint.js",
     "coding-task-manager/bin/delivery-contract-lint.js",
@@ -1785,13 +1786,13 @@
     "coding-task-manager/lib/runtime-interaction-action-resolver.js": "178eebe1294c3b761da0085e0dcccef36c027bd8c08e4c7779efda2f3984aa04",
     "coding-task-manager/lib/sqlite-driver.js": "78a1cd2a604748cf895dc44547b4cf1e4a3bdec6f02d77965f4b7b21a2b8a31b",
     "coding-task-manager/lib/walle-deps-repair.js": "be85620d08795ea0fe9539820416d5cc50b654519abddab0811907fa3fe93a7f",
-    "coding-task-manager/lib/walle-mcp-auto-config.js": "b978e9b15d9dac8179dde0feb5357c14957f7b4e36dab7e6779587bcde8faeff",
+    "coding-task-manager/lib/walle-mcp-auto-config.js": "369c4d1c7d91d822510e74cfe2b6b2a85a2543e32e52e34590b4b329f6d9f64b",
     "coding-task-manager/lib/walle-native-health.js": "9fdf7f17eb77837aac4ea16140a6f4e5a97d7a568945da30f29b9a7541c3d967",
-    "coding-task-manager/lib/walle-supervisor.js": "1eb9971a2ede9735e595952404f467f6775ad9f99545137faad86e3c6fb38af9",
+    "coding-task-manager/lib/walle-supervisor.js": "f7597199724270f8fe0fabf0840606d52a568bb7e97421cf8079fd0d5cb4eded",
     "coding-task-manager/public/js/client-health-worker.js": "07e300113ee749ac7a6adaaa1461502d1562087af395b6c89cf1b885f1f5e00e",
     "coding-task-manager/public/js/image-normalize-worker.js": "37cb0758bddcf10c66060fae52088c1a842409f30e919988e789cfea7d05e2be",
-    "coding-task-manager/public/m/app.js": "8e4662e21c409003a2d61de3c044410055176b574d787b34f7ede776b62a7003",
-    "coding-task-manager/server.js": "347578d2cab77abedb122df048f60415d8d392ed4caf4bd32fc92e91a9aa3f9a",
+    "coding-task-manager/public/m/app.js": "982f3a1b5910b4fb2843cf3028afaeabde8f1cd5ad37fb6cb52511fdbf7cfcb3",
+    "coding-task-manager/server.js": "a329e948c2f8f2aefa8753a69169c826ccb5e884d6132c1f785080a1386c2d56",
     "scripts/conversation-storage-v2-migration.js": "f2620ba24893c4d2ec6c594428ddb41dc098da38b4066f1df25fb87abbfaebfa",
     "shared/storage/schema-port.js": "e41cec8c075a6167fba2efd0177d9e20a11c0cd49ae176aaf36d5b9257409e67",
     "shared/storage/schema-sync.js": "7ca080e44e35e8178a0f74317023881f920ae75bde4f7431702ce1f9fa4a1d03",
@@ -1803,7 +1804,7 @@
     "wall-e/adapters/claude-web.plugin.json": "29945817a251b14c0789ae527f7ecd345cb0097c654f851fe062b208c30a0a6b",
     "wall-e/adapters/codex-memory.js": "18d6d0af08d9d48d5c92621a16b2b9a597d30b3993c534f88a4bc8b3d60c0d71",
     "wall-e/adapters/codex-memory.plugin.json": "4cbc6a0f2023264a59ec703ec7553ed9997b1e55626831342bf3ee60f3828663",
-    "wall-e/adapters/imessage.js": "fea412e60c8f69fa034d0b95f1bce703ef6f20a0f4492504c104dd94778ecd7d",
+    "wall-e/adapters/imessage.js": "b689b538abb809df08c3f6f2a08673d6c38a6cb50d2f1d49aa693de28e0b11bd",
     "wall-e/adapters/imessage.plugin.json": "28dc369a489ea44bd2063d6f9eae998099134b9de5db76118808f5def8534bb1",
     "wall-e/adapters/plaintext.js": "3a834c50ef76b746987819c8fd453f0161ffb70a1c588e5c4161b1f102190599",
     "wall-e/adapters/plaintext.plugin.json": "de4b6c6d151fdabf897be9856f6357cbb83cdff14a62186096de55e495cd4352",
@@ -1846,7 +1847,7 @@
     "wall-e/llm/typesafe.plugin.json": "93109b5f27dcf0fb25cb18d461eda3bc6b294ebdd1614740da0bc2cee715948e",
     "wall-e/llm/zai.js": "f94c77663cd450b2e54dc7450f0c24666b1fd5ced795e685c6d94d6f09d3931d",
     "wall-e/llm/zai.plugin.json": "d9c6408fca68fed17a3a94f27d9119b947eadeb01f4a40a00e27e59faa942e00",
-    "wall-e/memory/ctm-session-context.js": "77beef286d87439141160ecfc95f279d7f5fd2f5c909d8133e3ff76f26ab1a2c",
+    "wall-e/memory/ctm-session-context.js": "635225f1070ea7bc95a057090122720450000aac52257f0b46a5ba089b5a3ed6",
     "wall-e/plugins/discovery.js": "44dfc422e9cf570d1d300c4ebfe4be63ab8f2709d38da1d35f30f6a7e65b20bb",
     "wall-e/plugins/manifest-loader.js": "501d3098c2356c35a0650def273e7c65cb076d986fe4bb0d4eba3189a08c5c52",
     "wall-e/plugins/manifest-schema.js": "59b5dd76f0f85cc136a6511e2f4945a9d1fc16133495c9b5c64df097b47a6571",
@@ -1868,7 +1869,7 @@
     "wall-e/skills/_bundled/model-trainer/index.js": "1c0e5f039dc7b06624c14631ea8427af956b243354da2ebd9930f6d382eee5bc",
     "wall-e/skills/_bundled/morning-briefing/run.js": "e09ca88ed0a65570b11c8007d27a4cd42990a35df3343443fc560df90564f50d",
     "wall-e/skills/skill-loader.js": "8572c97cb88bcc9fc78a89ed10bf5134b57cbc838dd06dd5cf46509bfcfd54be",
-    "wall-e/workers/mcp-gateway-process.js": "f49701ef19cc892ed5b23a498c88b86f98acdc78f0821cabdeec6090a1b15ae1"
+    "wall-e/workers/mcp-gateway-process.js": "3a5a22e2c620911510d452c7ce4714a6908682a1c0fa303f0e24f2eb31e20380"
   },
   "discoveryInventories": [
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-walle",
-  "version": "0.10.2",
+  "version": "0.10.3",
   "description": "CTM + Wall-E: one workspace for coding agents, worktrees and review, with shared session context and a personal agent.",
   "homepage": "https://walle.sh",
   "bin": {

package/template/coding-task-manager/api-prompts.js

@@ -24,6 +24,9 @@ const { resolveWallePermissionV2 } = require('./lib/walle-permission-reply');
 const claudeDesktopSessions = require('./lib/claude-desktop-sessions');
 const desktopFork = require('./lib/desktop-fork');
 const skillAutocomplete = require('./lib/skill-autocomplete');
+// WP-9 (§9 S-9, AC-9d): the machine filter is applied HERE, on the main thread — the read pool runs
+// the query in another process and holds none of the registry's in-memory machine state.
+const skillAutocompleteQuery = require('./lib/skill-autocomplete-query');
 const storageMigration = require('./lib/storage-migration');
 const perfTracker = require('./lib/perf-tracker');
 const { runSync } = perfTracker;
@@ -95,7 +98,16 @@ function _shouldLogWalleMigrationStep(sessionId, result = {}, nowMs = Date.now()
     Number(result.sourceSize || 0),
   ]);
   const prior = walleMigrationLogState.get(id);
-  if (prior?.signature === signature
+  // D-10 (docs/temp-file-leaks-disk-full-2026-10-25.html §5): a step that made no progress and whose
+  // disposition is already `complete` is a settled fact about the session, not a clock-driven event.
+  // Re-logging it every 5 minutes per session was 64% of ctm.log (605k lines in 26.8 d). Log it once
+  // per session per process: only when this session has no prior state, or the signature changed.
+  // Every other step keeps the 5-minute deferred repeat below.
+  if (!_walleMigrationMadeProgress(result)
+      && String(result.action || '') === 'noop'
+      && resolveMigrationDisposition(result) === MIGRATION_DISPOSITIONS.complete) {
+    if (prior?.signature === signature) return false;
+  } else if (prior?.signature === signature
       && nowMs - prior.loggedAtMs < WALLE_MIGRATION_DEFERRED_LOG_INTERVAL_MS) return false;
   if (!prior && walleMigrationLogState.size >= WALLE_MIGRATION_LOG_STATE_LIMIT) {
     walleMigrationLogState.delete(walleMigrationLogState.keys().next().value);
@@ -830,7 +842,15 @@ function handlePromptApi(req, res, url, deps = {}) {
   }
   if (p === '/api/images/ingest-path' && m === 'POST') return handleIngestImagePath(req, res);
   if (p === '/api/mobile/attachments/upload' && m === 'POST') return handleUploadMobileAttachment(req, res, url);
-  if (p === '/api/session/image-refs' && m === 'POST') return handleSessionImageRefs(req, res);
+  // R-1 (docs/composer-image-chip-stuck-submission-recovery-2026-10-30.html): session-scoped so a MIRROR id is answered by the box.
+  const imageRefsMatch = /^\/api\/sessions\/([^/]+)\/image-refs$/.exec(p);
+  if (imageRefsMatch && m === 'POST') {
+    let sessionId = '';
+    try { sessionId = decodeURIComponent(imageRefsMatch[1]); } catch { return jsonResponse(res, 400, { error: 'Invalid session id' }); }
+    if (!remoteSessionForward.isMirrorSessionRequest(req, url, sessionId)) return handleSessionImageRefs(req, res, sessionId);
+    return remoteSessionForward.maybeForwardSessionRequest(req, res, url, sessionId)
+      .then((forwarded) => (forwarded ? undefined : handleSessionImageRefs(req, res, sessionId)));
+  }
   if (p.match(/^\/api\/images\/\d+$/) && m === 'GET') return handleGetImage(req, res, url);
   if (p.match(/^\/api\/images\/\d+\/annotations$/) && m === 'PUT') return handleUpdateAnnotations(req, res, url);
   if (p.match(/^\/api\/images\/\d+$/) && m === 'DELETE') return handleDeleteImage(req, res, url);
@@ -850,9 +870,9 @@ function handlePromptApi(req, res, url, deps = {}) {
   if (p === '/api/permissions/log' && m === 'GET') return handleListPermLog(req, res, url);
 
   // --- Session Conversations ---
-  if (p === '/api/conversations' && m === 'GET') return handleListConversations(req, res, url);
+  if (p === '/api/conversations' && m === 'GET') return (handleListConversations.fleet ||= require('./lib/fleet-session-lists').fleetRouted('GET /api/conversations', handleListConversations, require('./lib/fleet-conversation-route').conversationsFleetSpec))(req, res, url); // fleet WP-4, wrapped once
   if (p === '/api/conversations/import' && m === 'POST') return handleImportConversations(req, res);
-  if (p.match(/^\/api\/conversations\/[a-f0-9-]+$/) && m === 'GET') return handleGetConversation(req, res, url);
+  if (p.match(/^\/api\/conversations\/[a-f0-9-]+$/) && m === 'GET') return (handleGetConversation.byMachine ||= require('./lib/remote-machine-proxy').machineRouted('GET /api/conversations/:id', handleGetConversation))(req, res, url); // fleet WP-4: ?machine= -> owner box
 
   // --- Templates ---
   if (p === '/api/templates' && m === 'GET') return handleListTemplates(req, res);
@@ -1822,7 +1842,7 @@ async function handleUploadMobileAttachment(req, res, url) {
   }
 }
 
-async function handleSessionImageRefs(req, res) {
+async function handleSessionImageRefs(req, res, pathSessionId) {
   try {
     const body = await readBody(req, 256 * 1024);
     // The media-write-behind draft store keeps terminal image drafts in its own
@@ -1833,7 +1853,13 @@ async function handleSessionImageRefs(req, res) {
     // survive) and hand over a plain, pre-resolved Map so the resolver can bridge to it.
     // Best-effort: falls through to the legacy SQL path unchanged when the draft service
     // is unavailable (e.g. write-behind off) or a given attachment isn't a terminal draft.
-    const sessionId = String((body && (body.sessionId || body.session_id)) || '').trim();
+    // R-1: the PATH is the routing key; a body naming a different session is refused.
+    const bodySessionId = String((body && (body.sessionId || body.session_id)) || '').trim();
+    const routeSessionId = String(pathSessionId || '').trim();
+    if (routeSessionId && bodySessionId && bodySessionId !== routeSessionId) {
+      throw tagRouteValidationError(new Error('Session id in body does not match the route'), { status: 400, code: 'CTM_SESSION_IMAGE_REF_SESSION_MISMATCH' });
+    }
+    const sessionId = bodySessionId || routeSessionId;
     const images = Array.isArray(body && body.images) ? body.images
       : Array.isArray(body && body.attachments) ? body.attachments : [];
     const mediaDrafts = new Map();
@@ -8052,7 +8078,19 @@ async function handleSkillAutocomplete(req, res, url) {
     const { rows } = await _readRequestControl('skillAutocomplete', {
       cwd, agent, includeSessionSeen, query,
     });
-    jsonResponse(res, 200, rows);
+    // WP-9 (§9 S-9, AC-9d): a session that runs on a REMOTE machine has its own skill list — the hub
+    // drops what that box held back and adds what only that box has. A local/absent session reads a
+    // null view and the rows cross untouched.
+    // The box-only names it adds go back through the SAME query match and ranking a local request
+    // gets, and the same 20-row cap, so a box name never appears for a query it does not match.
+    const sessionId = url.searchParams.get('sessionId') || url.searchParams.get('session') || '';
+    const view = skillAutocompleteQuery.machineSkillViewFor(sessionId);
+    const list = Array.isArray(rows) ? rows : [];
+    jsonResponse(res, 200, view
+      ? skillAutocomplete.filterAndSortSkillAutocompleteItems(
+        skillAutocompleteQuery.applyMachineSkillView(list, view), query, agent || 'all',
+      ).slice(0, 20)
+      : list);
   } catch (e) { promptRouteError(res, e); }
 }
 

package/template/coding-task-manager/bin/claude-hook.js

@@ -13,6 +13,8 @@
 
 const http = require('http');
 const crypto = require('crypto');
+const fs = require('fs');
+const path = require('path');
 const modelGeneration = require('../lib/env-flags').strFlag('CTM_MODEL_PROCESS_GENERATION', '');
 
 // Only these routes can carry a notice back to the model (Claude hook stdout JSON). `stop` is
@@ -32,6 +34,42 @@ function formatHookOutput(responseText, hookEventName) {
   return JSON.stringify({ hookSpecificOutput: { hookEventName, additionalContext: texts.join('\n') } });
 }
 
+// A command that already declares its own lifetime somewhere on the line: an absolute, relative or
+// quoted path to bounded.js followed by `--deadline-ms N` (whitespace or `=`). This is guidance for
+// honest agents, not a security boundary — a command can always spell its way around a regex.
+const BOUNDED_DEADLINE_RE = /bounded\.js['"]?\s+--deadline-ms(?:\s+|=)\d+/;
+// Session-host/durable-jobs design D-8 (§6.4): bounded.js dies with the agent session, so a declared lifetime past
+// 2 h belongs to bin/durable-job.js instead (its job is owned by the service manager, not by this session).
+const DURABLE_THRESHOLD_MS = 7_200_000;
+const BOUNDED_DEADLINE_VALUE_RE = /bounded\.js['"]?\s+--deadline-ms(?:\s+|=)(\d+)/;
+
+// L1 declare (docs/background-gate-watchers-bounded-observation-2026-10-26.html §5 R1-R2, §6.3, §8
+// WP-2): a Bash command launched with `run_in_background: true` must name its own lifetime, so there is
+// always a clock its launcher chose. The decision is made here in the bridge rather than in CTM: it
+// takes effect on the next hook invocation (no restart), it can name the absolute path of bounded.js
+// for an agent whose cwd is another repo, and it fails open when bounded.js was never installed.
+// Returns the deny reason, or null to allow (and print nothing).
+function backgroundDeadlineDenial(hook, { boundedPath, boundedExists, durablePath, durableExists } = {}) {
+  if (!hook || typeof hook !== 'object' || Array.isArray(hook)) return null;
+  if (hook.hook_event_name !== 'PreToolUse' || hook.tool_name !== 'Bash') return null;
+  const input = hook.tool_input;
+  if (!input || typeof input !== 'object' || Array.isArray(input)) return null;
+  if (input.run_in_background !== true) return null;
+  if (boundedExists !== true) return null;
+  if (BOUNDED_DEADLINE_RE.test(String(input.command || ''))) {
+    const long = BOUNDED_DEADLINE_VALUE_RE.exec(String(input.command || ''));
+    if (long && Number(long[1]) > DURABLE_THRESHOLD_MS && durableExists === true && durablePath) {
+      const durableShown = /\s/.test(String(durablePath)) ? `'${durablePath}'` : String(durablePath);
+      return 'A background job longer than 2 h must not live inside this agent session (a CTM restart or the agent process exiting kills it). '
+        + `Launch it with: node ${durableShown} start --name <slug> --deadline-ms ${long[1]} -- <command>   `
+        + 'then wait with Monitor until the printed receipt= file exists.';
+    }
+    return null;
+  }
+  const shown = /\s/.test(String(boundedPath)) ? `'${boundedPath}'` : String(boundedPath);
+  return `Background Bash commands must declare their own lifetime. Re-run it as: node ${shown} --deadline-ms <N> -- <command>   (N = its honest worst case in ms, at most 86400000 = 24 h; e.g. 5400000 for a commit gate; use -- sh -c '<…>' for a compound command). Foreground commands are not affected.`;
+}
+
 function post(port, route, body, onResponse) {
   const req = http.request({
     hostname: 'localhost',
@@ -56,7 +94,7 @@ function post(port, route, body, onResponse) {
   return req;
 }
 
-module.exports = { post, formatHookOutput };
+module.exports = { post, formatHookOutput, backgroundDeadlineDenial };
 
 if (require.main === module) {
   const port = parseInt(process.argv[2], 10) || parseInt(process.env.CTM_PORT, 10);
@@ -132,6 +170,22 @@ if (require.main === module) {
       prompt_head: hook.prompt == null ? undefined : String(hook.prompt).slice(0, 1024),
       payload: parsed ? forwardedPayload(hook, stdin) : (stdin.trim() || undefined),
     });
+    // The menu route (the `.*` PreToolUse matcher) refuses an explicit background Bash launch with no
+    // declared lifetime. The POST below is unchanged — still sent, its response still ignored.
+    if (route === 'menu') {
+      const boundedPath = path.resolve(__dirname, '..', '..', 'bin', 'bounded.js');
+      let boundedExists = false;
+      try { boundedExists = fs.existsSync(boundedPath); } catch { /* expected: a path we cannot stat means no wrapper to name, so the gate stays open */ }
+      const durablePath = path.resolve(__dirname, '..', '..', 'bin', 'durable-job.js');
+      let durableExists = false;
+      try { durableExists = fs.existsSync(durablePath); } catch { /* expected: an unstat-able durable-job.js means nothing to name, so the long-deadline gate stays open */ }
+      const reason = parsed ? backgroundDeadlineDenial(hook, { boundedPath, boundedExists, durablePath, durableExists }) : null;
+      if (reason) {
+        process.stdout.write(JSON.stringify({
+          hookSpecificOutput: { hookEventName: 'PreToolUse', permissionDecision: 'deny', permissionDecisionReason: reason },
+        }) + '\n');
+      }
+    }
     if (!NOTICE_ROUTES.has(route)) { post(port, route, body); return; }
     post(port, route, body, (text) => {
       const out = formatHookOutput(text, str(hook.hook_event_name));

package/template/coding-task-manager/bin/ctm-relay-client.js

@@ -263,26 +263,43 @@ function ensureDir(dir) {
   fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
 }
 
+// The TLS seam (WP-11b): the rev 2 edge routes on SNI, so a request that reaches
+// the relay by address (`https://127.0.0.1:<port>`) still has to name the control
+// host and carry a test CA. `deps.tls` is a test seam only — nothing reads TLS
+// settings from argv, env or the config file.
+function tlsRequestOptions(url, host, tls) {
+  const options = tls && typeof tls === 'object' ? Object.assign({}, tls) : {};
+  if (options.servername) return options;
+  if (new URL(url).protocol !== 'https:') return options;
+  if (typeof host !== 'string' || host.length === 0) return options;
+  options.servername = host.split(':')[0];
+  return options;
+}
+
 // The relay routes by Host (`r.walle.sh` = control, `<slug>.r.walle.sh` =
 // tenant), so a request that reaches the socket by address still has to name the
 // control host. Production derives it from the relay URL; `deps.relayHost` is the
 // same seam the engine exposes for tests and for a relay reached through a proxy.
 function defaultRequest(
   url,
-  { method = 'GET', headers = {}, body = null, timeoutMs = HTTP_TIMEOUT_MS, host = null } = {},
+  { method = 'GET', headers = {}, body = null, timeoutMs = HTTP_TIMEOUT_MS, host = null, tls = null } = {},
 ) {
   return new Promise((resolve, reject) => {
     const parsed = new URL(url);
-    const mod = parsed.protocol === 'https:' ? https : http;
+    const secure = parsed.protocol === 'https:';
+    const mod = secure ? https : http;
     const req = mod.request(
-      {
-        protocol: parsed.protocol,
-        hostname: parsed.hostname,
-        port: parsed.port,
-        path: `${parsed.pathname}${parsed.search}`,
-        method,
-        headers: host ? Object.assign({ host }, headers) : headers,
-      },
+      Object.assign(
+        {
+          protocol: parsed.protocol,
+          hostname: parsed.hostname,
+          port: parsed.port,
+          path: `${parsed.pathname}${parsed.search}`,
+          method,
+          headers: host ? Object.assign({ host }, headers) : headers,
+        },
+        secure ? tlsRequestOptions(url, host, tls) : {},
+      ),
       (res) => {
         const chunks = [];
         res.on('data', (chunk) => chunks.push(chunk));
@@ -310,8 +327,10 @@ function parseJsonBody(text) {
 
 function requestJson(deps, url, options) {
   const requestFn = deps.requestFn || defaultRequest;
-  const withHost = deps.relayHost ? Object.assign({ host: deps.relayHost }, options) : options;
-  return requestFn(url, withHost);
+  const seam = {};
+  if (deps.relayHost) seam.host = deps.relayHost;
+  if (deps.tls) seam.tls = deps.tls;
+  return requestFn(url, Object.assign(seam, options));
 }
 
 function readConfig(configPath) {
@@ -406,6 +425,7 @@ function buildClient(args, deps, config) {
   return createRelayClient({
     relayUrl: args.relay || config.relay || DEFAULT_RELAY,
     relayHost: deps.relayHost,
+    tls: deps.tls,
     token: config.token,
     localTarget: target,
     stateFile: statePath,
@@ -477,6 +497,9 @@ async function cmdInstall(args, deps) {
   if (plan.method === 'launchd') {
     ensureDir(path.dirname(plan.plistPath));
     atomicWriteFileSync(plan.plistPath, plan.plist, { mode: 0o644 });
+    // The create mode is masked by the process umask (077 under the nightly gate rendered it 0600);
+    // the job file is 0644 exactly, whatever umask the installer runs under.
+    fs.chmodSync(plan.plistPath, 0o644);
     if (await launchdLoaded(execFile, domain, plan.label)) {
       await execFile('launchctl', ['kickstart', '-k', `${domain}/${plan.label}`], { encoding: 'utf8' });
     } else {