CodePatrol INIT 2

INIT-2: Align session instructions with Barback host-relay

Align Bartender host and session instructions, and remaining behavior, with Barback's realized client-config. Runtime facts this Init must treat as given: OpenCode is the only session provider; guest auth is host-relay by CIDR with no BARBACK_CLIENT_KEY in the container; Apple sessions join the Barback NAT network with --network none plus an explicit join, --no-dns, and an iptables-nft allowlist to gatewayAddress:8080; Apple virtiofs cannot replace /etc/hosts so OpenCode URLs use the allowlisted gateway IP; hostProbeUrl is curled against that gateway IP, not 127.0.0.1; sessions recycle when egressGeneration changes. MCP stays only http://:8080/mcp. Do not restore OneCLI private-DNS-route as the session auth path. Do not modify barback or google-mcp. Acceptance: AGENTS.md and related operator docs match the code in src/barback-*.ts, src/drivers/apple-container-driver.ts, and container/egress-entrypoint.sh; a generation change recycles stale sessions without a manual container stop.

Status: active

Waves

• WAVE-2.1: Host and session instructions match host-relay (planning)
  • WORK-2.1.1: Operator docs describe host-relay sessions (pending)
  • WORK-2.1.2: Session agent instructions stay on Barback MCP (pending)
• WAVE-2.2: Stale egress generation is recycled by Bartender (accepted)
  • WORK-2.2.1: Stale generation sessions are not adopted (accepted)