[drewstone]

CLI images retain vulnerable OS packages and Kimi pins a vulnerable Pillow release. Rebuild both existing Dockerfiles on patched Node24.22.1/Debian13, upgrade installed OS packages, and install Kimi through the existing harness installer with an audited Pillow13 override. Remove make/g++ and their build-only compiler/header dependencies after the bridge's native addon install and typecheck; retain Python/git/curl and required runtime libraries.

Independent source review passed. Actual final bridge image scans0 critical/101 high (earlier candidate9/351); actual CLI runtime scans0 critical/84 high (earlier5/129). Unfixed/high findings remain visible; zero critical is not an all-CVE clearance claim. Both execute Node24.22.1, Kimi1.52.0 and Pillow13, including real PNG/JPEG/WEBP encode/decode roundtrips. Runtime-image proof is reused from14cf27b because its Dockerfile and installer inputs are byte-identical at final3eb38cf.

The final bridge image passed a real container HTTP/SQLite integration: unauthenticated sessions401; the actual SessionStore wrote a record through its native better-sqlite3 binding; authenticated HTTP read it, retained it across a real container restart, then deleted it through the HTTP API. Claude/Codex/OpenCode/Kimi version commands passed. This proof used local configured Codex backend and no model calls or customer credentials. Image builds include frozen dependency install and typecheck; unchanged commit/push hooks passed.

Existing deploy owners must rebuild/activate their containers through the maintained path. This PR does not restart a running bridge, migrate customer installs or claim every deployed image now uses these bytes. Scheduled fleet image coverage remains tracked in cve-runtime task10437.

Run ID: run_4b1d54cfdf2c05412b39044bf98511e1

[tangletools]

✅ Auto-approved PR — 3eb38cff

Blanket team auto-approval is intentional. This is not a code review.
No automated review runs on this PR. This approval rests on the rule above alone.

_{tangletools · auto-approval · reason: blanket_auto_approve · 2026-10-22T21:21:32Z}