npm - @machinen/runtime - Versions diffs - 0.1.0 → 0.1.2 - Mend

@machinen/runtime 0.1.0 → 0.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (4) hide show

package/API.md CHANGED Viewed

@@ -1,11 +1,171 @@
 # @machinen/runtime
+## Contents
+### Boot a VM
+- [`boot`](#boot)
+- [`BootOptions`](#bootoptions)
+- [`attach`](#attach)
+- [`AttachOptions`](#attachoptions)
+- [`bootPty`](#bootpty)
+- [`PtyBootOptions`](#ptybootoptions)
+- [`PtyVmHandle`](#ptyvmhandle)
+- [`VmHandle`](#vmhandle)
+- [`ImageConfig`](#imageconfig)
+- [`autoSizeMemoryMib`](#autosizememorymib)
+- [`resolveVmmBinary`](#resolvevmmbinary)
+- [`warmImageConfigCache`](#warmimageconfigcache)
+- [`measureFirstByte`](#measurefirstbyte)
+### Run code in a VM
+- [`VsockExec`](#vsockexec)
+- [`VsockExecOptions`](#vsockexecoptions)
+- [`VsockExecResult`](#vsockexecresult)
+- [`VsockExecPtyHandle`](#vsockexecptyhandle)
+- [`VsockExecPtyOptions`](#vsockexecptyoptions)
+- [`VsockExecPtyResult`](#vsockexecptyresult)
+### Snapshot, restore, fork
+- [`restore`](#restore)
+- [`RestoreOptions`](#restoreoptions)
+- [`ForkOptions`](#forkoptions)
+- [`SnapshotOptions`](#snapshotoptions)
+- [`SnapshotResult`](#snapshotresult)
+- [`SnapshotMeta`](#snapshotmeta)
+- [`bootSnapshotPath`](#bootsnapshotpath)
+- [`writeBootSnapshot`](#writebootsnapshot)
+- [`detachedLogRoot`](#detachedlogroot)
+### Provision base images
+- [`provision`](#provision)
+- [`ProvisionOptions`](#provisionoptions)
+- [`ProvisionResult`](#provisionresult)
+- [`resolveBaseDtb`](#resolvebasedtb)
+- [`resolveBaseKernel`](#resolvebasekernel)
+- [`resolveBaseRootfs`](#resolvebaserootfs)
+- [`ensureRootfsImage`](#ensurerootfsimage)
+- [`EnsureRootfsImageOptions`](#ensurerootfsimageoptions)
+- [`markRootfsImageClean`](#markrootfsimageclean)
+- [`rootfsImgCacheDir`](#rootfsimgcachedir)
+- [`resolveMke2fs`](#resolvemke2fs)
+### Mount files
+- [`VsockFiles`](#vsockfiles)
+- [`VsockFilesOptions`](#vsockfilesoptions)
+- [`WriteFileOptions`](#writefileoptions)
+- [`buildWriteFileCmd`](#buildwritefilecmd)
+- [`buildWriteFileCmds`](#buildwritefilecmds)
+- [`ensureMountDiskImage`](#ensuremountdiskimage)
+- [`ensureMountDiskUpper`](#ensuremountdiskupper)
+- [`markMountDiskImageClean`](#markmountdiskimageclean)
+- [`mountdiskImgCacheDir`](#mountdiskimgcachedir)
+- [`resolveMksquashfs`](#resolvemksquashfs)
+- [`EnsureMountDiskImageOptions`](#ensuremountdiskimageoptions)
+- [`EnsureMountDiskImageResult`](#ensuremountdiskimageresult)
+- [`EnsureMountDiskUpperOptions`](#ensuremountdiskupperoptions)
+- [`EnsureMountDiskUpperResult`](#ensuremountdiskupperresult)
+### Share secrets
+- [`VsockSecrets`](#vsocksecrets)
+- [`VsockSecretsOptions`](#vsocksecretsoptions)
+### Terminal control
+- [`VsockWinsize`](#vsockwinsize)
+- [`VsockWinsizeOptions`](#vsockwinsizeoptions)
+### Manage running VMs
+- [`list`](#list)
+- [`registryRoot`](#registryroot)
+- [`RegistryEntry`](#registryentry)
+- [`runGc`](#rungc)
+- [`GcResult`](#gcresult)
+- [`RunGcOptions`](#rungcoptions)
+- [`validatePid`](#validatepid)
+- [`PidStatus`](#pidstatus)
+### Multiplex sandboxes
+- [`Sandboxes`](#sandboxes)
+- [`Supervisor`](#supervisor)
+- [`SandboxEntry`](#sandboxentry)
+- [`OnOutputListener`](#onoutputlistener)
+- [`SupervisorOptions`](#supervisoroptions)
+### Memory introspection
+- [`MemoryStats`](#memorystats)
+- [`checkForkBackpressure`](#checkforkbackpressure)
+- [`CheckForkBackpressureOptions`](#checkforkbackpressureoptions)
+- [`DEFAULT_FREE_MEMORY_THRESHOLD`](#default_free_memory_threshold)
+- [`readHostFreeBytes`](#readhostfreebytes)
+- [`readHostTotalBytes`](#readhosttotalbytes)
+- [`readHostRssBytes`](#readhostrssbytes)
+- [`readHostRssBytesMulti`](#readhostrssbytesmulti)
+- [`RssTarget`](#rsstarget)
+- [`readBalloonStats`](#readballoonstats)
+- [`BalloonCounters`](#ballooncounters)
+- [`STATS_FILE_SIZE`](#stats_file_size)
+### Logging
+- [`ChunkLogEvent`](#chunklogevent)
+- [`LogEvent`](#logevent)
+- [`OnLog`](#onlog)
+- [`PhaseLogEvent`](#phaselogevent)
+### Initramfs (advanced)
+- [`mkinitramfsBundle`](#mkinitramfsbundle)
+- [`mkinitramfsTinyBundle`](#mkinitramfstinybundle)
+- [`mkinitramfsRootfs`](#mkinitramfsrootfs)
+- [`mkinitramfsWorkspace`](#mkinitramfsworkspace)
+- [`mkinitramfsMinimal`](#mkinitramfsminimal)
+- [`mkinitramfsCli`](#mkinitramfscli)
+- [`PackBundleOptions`](#packbundleoptions)
+- [`PackTinyBundleOptions`](#packtinybundleoptions)
+- [`PackRootfsOptions`](#packrootfsoptions)
+- [`PackMinimalOptions`](#packminimaloptions)
+- [`PackWorkspaceOptions`](#packworkspaceoptions)
+### Errors
+- [`MachinenError`](#machinenerror)
+- [`BootError`](#booterror)
+- [`ExecError`](#execerror)
+- [`SnapshotError`](#snapshoterror)
+- [`ProvisionError`](#provisionerror)
+- [`RegistryError`](#registryerror)
+- [`FilesError`](#fileserror)
+- [`MountError`](#mounterror)
+- [`SecretsError`](#secretserror)
+- [`WinsizeError`](#winsizeerror)
+- [`SandboxError`](#sandboxerror)
+- [`CacheError`](#cacheerror)
+- [`GvproxyError`](#gvproxyerror)
+- [`MkinitramfsError`](#mkinitramfserror)
+- [`ParseError`](#parseerror)
+- [`ErrorCode`](#errorcode)
+- [`MachinenErrorOptions`](#machinenerroroptions)
+- [`isMachinenError`](#ismachinenerror)
+- [`formatMachinenError`](#formatmachinenerror)
+### Internal
+- [`_internal`](#_internal)
 ## Classes
 ### MachinenError
-Defined in: [errors.ts:145](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L145)
 Base class for every error raised by @machinen/runtime and
 @machinen/cli. Carries a flat `code`, a `retryable` hint, and the
 underlying cause via the standard `Error.cause` mechanism.
@@ -37,8 +197,6 @@ underlying cause via the standard `Error.cause` mechanism.
 > **new MachinenError**(`code`, `message`, `opts?`): [`MachinenError`](#machinenerror)
-Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L149)
 ###### Parameters
 ###### code
@@ -67,20 +225,14 @@ Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **code**: [`ErrorCode`](#errorcode-1)
-Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L146)
 ##### retryable
 > `readonly` **retryable**: `boolean`
-Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L147)
 ***
 ### BootError
-Defined in: [errors.ts:158](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L158)
 Base class for every error raised by @machinen/runtime and
 @machinen/cli. Carries a flat `code`, a `retryable` hint, and the
 underlying cause via the standard `Error.cause` mechanism.
@@ -95,8 +247,6 @@ underlying cause via the standard `Error.cause` mechanism.
 > **new BootError**(`code`, `message`, `opts?`): [`BootError`](#booterror)
-Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L149)
 ###### Parameters
 ###### code
@@ -125,8 +275,6 @@ Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **code**: [`ErrorCode`](#errorcode-1)
-Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L146)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`code`](#code)
@@ -135,8 +283,6 @@ Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **retryable**: `boolean`
-Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L147)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`retryable`](#retryable-1)
@@ -145,8 +291,6 @@ Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/pack
 ### ExecError
-Defined in: [errors.ts:159](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L159)
 Base class for every error raised by @machinen/runtime and
 @machinen/cli. Carries a flat `code`, a `retryable` hint, and the
 underlying cause via the standard `Error.cause` mechanism.
@@ -161,8 +305,6 @@ underlying cause via the standard `Error.cause` mechanism.
 > **new ExecError**(`code`, `message`, `opts?`): [`ExecError`](#execerror)
-Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L149)
 ###### Parameters
 ###### code
@@ -191,8 +333,6 @@ Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **code**: [`ErrorCode`](#errorcode-1)
-Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L146)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`code`](#code)
@@ -201,8 +341,6 @@ Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **retryable**: `boolean`
-Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L147)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`retryable`](#retryable-1)
@@ -211,8 +349,6 @@ Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/pack
 ### SnapshotError
-Defined in: [errors.ts:160](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L160)
 Base class for every error raised by @machinen/runtime and
 @machinen/cli. Carries a flat `code`, a `retryable` hint, and the
 underlying cause via the standard `Error.cause` mechanism.
@@ -227,8 +363,6 @@ underlying cause via the standard `Error.cause` mechanism.
 > **new SnapshotError**(`code`, `message`, `opts?`): [`SnapshotError`](#snapshoterror)
-Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L149)
 ###### Parameters
 ###### code
@@ -257,8 +391,6 @@ Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **code**: [`ErrorCode`](#errorcode-1)
-Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L146)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`code`](#code)
@@ -267,8 +399,6 @@ Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **retryable**: `boolean`
-Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L147)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`retryable`](#retryable-1)
@@ -277,8 +407,6 @@ Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/pack
 ### ProvisionError
-Defined in: [errors.ts:161](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L161)
 Base class for every error raised by @machinen/runtime and
 @machinen/cli. Carries a flat `code`, a `retryable` hint, and the
 underlying cause via the standard `Error.cause` mechanism.
@@ -293,8 +421,6 @@ underlying cause via the standard `Error.cause` mechanism.
 > **new ProvisionError**(`code`, `message`, `opts?`): [`ProvisionError`](#provisionerror)
-Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L149)
 ###### Parameters
 ###### code
@@ -323,8 +449,6 @@ Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **code**: [`ErrorCode`](#errorcode-1)
-Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L146)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`code`](#code)
@@ -333,8 +457,6 @@ Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **retryable**: `boolean`
-Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L147)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`retryable`](#retryable-1)
@@ -343,8 +465,6 @@ Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/pack
 ### RegistryError
-Defined in: [errors.ts:162](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L162)
 Base class for every error raised by @machinen/runtime and
 @machinen/cli. Carries a flat `code`, a `retryable` hint, and the
 underlying cause via the standard `Error.cause` mechanism.
@@ -359,8 +479,6 @@ underlying cause via the standard `Error.cause` mechanism.
 > **new RegistryError**(`code`, `message`, `opts?`): [`RegistryError`](#registryerror)
-Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L149)
 ###### Parameters
 ###### code
@@ -389,8 +507,6 @@ Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **code**: [`ErrorCode`](#errorcode-1)
-Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L146)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`code`](#code)
@@ -399,8 +515,6 @@ Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **retryable**: `boolean`
-Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L147)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`retryable`](#retryable-1)
@@ -409,8 +523,6 @@ Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/pack
 ### FilesError
-Defined in: [errors.ts:163](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L163)
 Base class for every error raised by @machinen/runtime and
 @machinen/cli. Carries a flat `code`, a `retryable` hint, and the
 underlying cause via the standard `Error.cause` mechanism.
@@ -425,8 +537,6 @@ underlying cause via the standard `Error.cause` mechanism.
 > **new FilesError**(`code`, `message`, `opts?`): [`FilesError`](#fileserror)
-Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L149)
 ###### Parameters
 ###### code
@@ -455,8 +565,6 @@ Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **code**: [`ErrorCode`](#errorcode-1)
-Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L146)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`code`](#code)
@@ -465,8 +573,6 @@ Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **retryable**: `boolean`
-Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L147)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`retryable`](#retryable-1)
@@ -475,8 +581,6 @@ Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/pack
 ### MountError
-Defined in: [errors.ts:164](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L164)
 Base class for every error raised by @machinen/runtime and
 @machinen/cli. Carries a flat `code`, a `retryable` hint, and the
 underlying cause via the standard `Error.cause` mechanism.
@@ -491,8 +595,6 @@ underlying cause via the standard `Error.cause` mechanism.
 > **new MountError**(`code`, `message`, `opts?`): [`MountError`](#mounterror)
-Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L149)
 ###### Parameters
 ###### code
@@ -521,8 +623,6 @@ Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **code**: [`ErrorCode`](#errorcode-1)
-Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L146)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`code`](#code)
@@ -531,8 +631,6 @@ Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **retryable**: `boolean`
-Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L147)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`retryable`](#retryable-1)
@@ -541,8 +639,6 @@ Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/pack
 ### SecretsError
-Defined in: [errors.ts:165](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L165)
 Base class for every error raised by @machinen/runtime and
 @machinen/cli. Carries a flat `code`, a `retryable` hint, and the
 underlying cause via the standard `Error.cause` mechanism.
@@ -557,8 +653,6 @@ underlying cause via the standard `Error.cause` mechanism.
 > **new SecretsError**(`code`, `message`, `opts?`): [`SecretsError`](#secretserror)
-Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L149)
 ###### Parameters
 ###### code
@@ -587,8 +681,6 @@ Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **code**: [`ErrorCode`](#errorcode-1)
-Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L146)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`code`](#code)
@@ -597,8 +689,6 @@ Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **retryable**: `boolean`
-Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L147)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`retryable`](#retryable-1)
@@ -607,8 +697,6 @@ Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/pack
 ### WinsizeError
-Defined in: [errors.ts:166](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L166)
 Base class for every error raised by @machinen/runtime and
 @machinen/cli. Carries a flat `code`, a `retryable` hint, and the
 underlying cause via the standard `Error.cause` mechanism.
@@ -623,8 +711,6 @@ underlying cause via the standard `Error.cause` mechanism.
 > **new WinsizeError**(`code`, `message`, `opts?`): [`WinsizeError`](#winsizeerror)
-Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L149)
 ###### Parameters
 ###### code
@@ -653,8 +739,6 @@ Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **code**: [`ErrorCode`](#errorcode-1)
-Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L146)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`code`](#code)
@@ -663,8 +747,6 @@ Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **retryable**: `boolean`
-Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L147)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`retryable`](#retryable-1)
@@ -673,8 +755,6 @@ Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/pack
 ### SandboxError
-Defined in: [errors.ts:167](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L167)
 Base class for every error raised by @machinen/runtime and
 @machinen/cli. Carries a flat `code`, a `retryable` hint, and the
 underlying cause via the standard `Error.cause` mechanism.
@@ -689,8 +769,6 @@ underlying cause via the standard `Error.cause` mechanism.
 > **new SandboxError**(`code`, `message`, `opts?`): [`SandboxError`](#sandboxerror)
-Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L149)
 ###### Parameters
 ###### code
@@ -719,8 +797,6 @@ Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **code**: [`ErrorCode`](#errorcode-1)
-Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L146)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`code`](#code)
@@ -729,8 +805,6 @@ Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **retryable**: `boolean`
-Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L147)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`retryable`](#retryable-1)
@@ -739,8 +813,6 @@ Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/pack
 ### CacheError
-Defined in: [errors.ts:168](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L168)
 Base class for every error raised by @machinen/runtime and
 @machinen/cli. Carries a flat `code`, a `retryable` hint, and the
 underlying cause via the standard `Error.cause` mechanism.
@@ -755,8 +827,6 @@ underlying cause via the standard `Error.cause` mechanism.
 > **new CacheError**(`code`, `message`, `opts?`): [`CacheError`](#cacheerror)
-Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L149)
 ###### Parameters
 ###### code
@@ -785,8 +855,6 @@ Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **code**: [`ErrorCode`](#errorcode-1)
-Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L146)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`code`](#code)
@@ -795,8 +863,6 @@ Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **retryable**: `boolean`
-Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L147)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`retryable`](#retryable-1)
@@ -805,8 +871,6 @@ Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/pack
 ### GvproxyError
-Defined in: [errors.ts:169](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L169)
 Base class for every error raised by @machinen/runtime and
 @machinen/cli. Carries a flat `code`, a `retryable` hint, and the
 underlying cause via the standard `Error.cause` mechanism.
@@ -821,8 +885,6 @@ underlying cause via the standard `Error.cause` mechanism.
 > **new GvproxyError**(`code`, `message`, `opts?`): [`GvproxyError`](#gvproxyerror)
-Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L149)
 ###### Parameters
 ###### code
@@ -851,8 +913,6 @@ Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **code**: [`ErrorCode`](#errorcode-1)
-Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L146)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`code`](#code)
@@ -861,8 +921,6 @@ Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **retryable**: `boolean`
-Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L147)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`retryable`](#retryable-1)
@@ -871,8 +929,6 @@ Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/pack
 ### MkinitramfsError
-Defined in: [errors.ts:170](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L170)
 Base class for every error raised by @machinen/runtime and
 @machinen/cli. Carries a flat `code`, a `retryable` hint, and the
 underlying cause via the standard `Error.cause` mechanism.
@@ -887,8 +943,6 @@ underlying cause via the standard `Error.cause` mechanism.
 > **new MkinitramfsError**(`code`, `message`, `opts?`): [`MkinitramfsError`](#mkinitramfserror)
-Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L149)
 ###### Parameters
 ###### code
@@ -917,8 +971,6 @@ Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **code**: [`ErrorCode`](#errorcode-1)
-Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L146)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`code`](#code)
@@ -927,8 +979,6 @@ Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **retryable**: `boolean`
-Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L147)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`retryable`](#retryable-1)
@@ -937,8 +987,6 @@ Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/pack
 ### ParseError
-Defined in: [errors.ts:171](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L171)
 Base class for every error raised by @machinen/runtime and
 @machinen/cli. Carries a flat `code`, a `retryable` hint, and the
 underlying cause via the standard `Error.cause` mechanism.
@@ -953,8 +1001,6 @@ underlying cause via the standard `Error.cause` mechanism.
 > **new ParseError**(`code`, `message`, `opts?`): [`ParseError`](#parseerror)
-Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L149)
 ###### Parameters
 ###### code
@@ -983,8 +1029,6 @@ Defined in: [errors.ts:149](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **code**: [`ErrorCode`](#errorcode-1)
-Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L146)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`code`](#code)
@@ -993,8 +1037,6 @@ Defined in: [errors.ts:146](https://github.com/redwoodjs/machinen/blob/main/pack
 > `readonly` **retryable**: `boolean`
-Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L147)
 ###### Inherited from
 [`MachinenError`](#machinenerror).[`retryable`](#retryable-1)
@@ -1003,8 +1045,6 @@ Defined in: [errors.ts:147](https://github.com/redwoodjs/machinen/blob/main/pack
 ### Sandboxes
-Defined in: [multiplex.ts:39](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L39)
 Registry of live sandboxes. Thread-safe in the sense that there's
 only one runtime thread anyway; the class just bookkeeps handles +
 their scrollback rings so the supervisor doesn't need to.
@@ -1015,8 +1055,6 @@ their scrollback rings so the supervisor doesn't need to.
 > **new Sandboxes**(`opts?`): [`Sandboxes`](#sandboxes)
-Defined in: [multiplex.ts:51](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L51)
 ###### Parameters
 ###### opts?
@@ -1035,8 +1073,6 @@ Defined in: [multiplex.ts:51](https://github.com/redwoodjs/machinen/blob/main/pa
 > `readonly` **scrollbackBytes**: `number`
-Defined in: [multiplex.ts:49](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L49)
 Maximum bytes retained per sandbox for replay on attach. The ring
 keeps only the most recent chunk up to this limit — a reasonable
 trade between "see enough context to know what's going on" and
@@ -1048,8 +1084,6 @@ trade between "see enough context to know what's going on" and
 > **add**(`id`, `vm`): `void`
-Defined in: [multiplex.ts:55](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L55)
 ###### Parameters
 ###### id
@@ -1068,8 +1102,6 @@ Defined in: [multiplex.ts:55](https://github.com/redwoodjs/machinen/blob/main/pa
 > **remove**(`id`): `void`
-Defined in: [multiplex.ts:79](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L79)
 Remove a sandbox. Does not kill the VM — call `vm.kill()` first.
 ###### Parameters
@@ -1086,8 +1118,6 @@ Remove a sandbox. Does not kill the VM — call `vm.kill()` first.
 > **list**(): `object`[]
-Defined in: [multiplex.ts:84](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L84)
 ###### Returns
 `object`[]
@@ -1096,8 +1126,6 @@ Defined in: [multiplex.ts:84](https://github.com/redwoodjs/machinen/blob/main/pa
 > **get**(`id`): [`SandboxEntry`](#sandboxentry)
-Defined in: [multiplex.ts:91](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L91)
 ###### Parameters
 ###### id
@@ -1112,8 +1140,6 @@ Defined in: [multiplex.ts:91](https://github.com/redwoodjs/machinen/blob/main/pa
 > **send**(`id`, `data`): `boolean`
-Defined in: [multiplex.ts:96](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L96)
 Write `data` to the sandbox's stdin. No-op if the id is unknown.
 ###### Parameters
@@ -1134,8 +1160,6 @@ Write `data` to the sandbox's stdin. No-op if the id is unknown.
 > **onOutput**(`id`, `fn`): () => `void`
-Defined in: [multiplex.ts:110](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L110)
 Subscribe to `id`'s output. Returns an unsubscribe function. The
 listener fires only for NEW bytes produced after the subscription
 — use `get(id).scrollback` to replay history if you want it.
@@ -1158,8 +1182,6 @@ listener fires only for NEW bytes produced after the subscription
 ### Supervisor
-Defined in: [multiplex.ts:176](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L176)
 A minimal text-driven multiplexer. Runs until `.stop()` is called
 or the input stream ends.
@@ -1178,8 +1200,6 @@ Hit `Ctrl-] Ctrl-]` (two 0x1D bytes in a row) to detach.
 > **new Supervisor**(`opts`): [`Supervisor`](#supervisor)
-Defined in: [multiplex.ts:192](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L192)
 ###### Parameters
 ###### opts
@@ -1196,16 +1216,12 @@ Defined in: [multiplex.ts:192](https://github.com/redwoodjs/machinen/blob/main/p
 > `readonly` **sandboxes**: [`Sandboxes`](#sandboxes)
-Defined in: [multiplex.ts:177](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L177)
 #### Methods
 ##### run()
 > **run**(): `Promise`\<`void`\>
-Defined in: [multiplex.ts:206](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L206)
 Run until stopped. Resolves when input ends or stop() is called.
 ###### Returns
@@ -1216,8 +1232,6 @@ Run until stopped. Resolves when input ends or stop() is called.
 > **stop**(): `void`
-Defined in: [multiplex.ts:223](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L223)
 Programmatic stop (e.g. from a test).
 ###### Returns
@@ -1228,8 +1242,6 @@ Programmatic stop (e.g. from a test).
 > **attach**(`id`): `void`
-Defined in: [multiplex.ts:233](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L233)
 Attach to `id`. Throws if id doesn't exist.
 ###### Parameters
@@ -1246,8 +1258,6 @@ Attach to `id`. Throws if id doesn't exist.
 > **detach**(): `void`
-Defined in: [multiplex.ts:262](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L262)
 ###### Returns
 `void`
@@ -1256,16 +1266,12 @@ Defined in: [multiplex.ts:262](https://github.com/redwoodjs/machinen/blob/main/p
 ### VsockWinsize
-Defined in: [winsize.ts:37](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/winsize.ts#L37)
 #### Methods
 ##### connect()
 > `static` **connect**(`udsPath`, `opts?`): `Promise`\<[`VsockWinsize`](#vsockwinsize)\>
-Defined in: [winsize.ts:59](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/winsize.ts#L59)
 Open a host Unix socket and keep retrying until the vsock bridge
 + guest agent wire themselves up. Resolves once the TCP-like
 connect completes — the agent may still be registering the
@@ -1290,8 +1296,6 @@ buffered by the bridge's connection table.
 > **send**(`cols`, `rows`): `void`
-Defined in: [winsize.ts:86](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/winsize.ts#L86)
 Send a new size. Idempotent against the most recent send — repeats
 are dropped so a chatty SIGWINCH doesn't spam the bridge.
@@ -1313,8 +1317,6 @@ are dropped so a chatty SIGWINCH doesn't spam the bridge.
 > **close**(): `void`
-Defined in: [winsize.ts:98](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/winsize.ts#L98)
 ###### Returns
 `void`
@@ -1323,24 +1325,18 @@ Defined in: [winsize.ts:98](https://github.com/redwoodjs/machinen/blob/main/pack
 ### BalloonCounters
-Defined in: [balloon-stats.ts:23](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/balloon-stats.ts#L23)
 #### Properties
 ##### bytesReported
 > **bytesReported**: `number`
-Defined in: [balloon-stats.ts:25](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/balloon-stats.ts#L25)
 Total bytes the balloon device has reclaimed via reporting.
 ##### bytesInflated
 > **bytesInflated**: `number`
-Defined in: [balloon-stats.ts:32](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/balloon-stats.ts#L32)
 Total bytes the inflate queue has seen. We don't drive inflate
 (`num_pages` stays 0), so this stays at 0 in well-behaved
 deployments — non-zero means a buggy/hostile guest is pushing
@@ -1350,8 +1346,6 @@ pages into the balloon on its own.
 > **hostPhysFootprintBytes**: `number`
-Defined in: [balloon-stats.ts:42](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/balloon-stats.ts#L42)
 Latest sample of this VMM's Darwin `phys_footprint` (the metric
 that backs Activity Monitor's "Memory" column and excludes
 `MADV_FREE_REUSABLE` pages). Refreshed every ~500 ms by a
@@ -1364,16 +1358,12 @@ Darwin-equivalent metric and the runtime reads
 ### MachinenErrorOptions
-Defined in: [errors.ts:128](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L128)
 #### Properties
 ##### retryable?
 > `optional` **retryable?**: `boolean`
-Defined in: [errors.ts:135](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L135)
 True if retrying the same call could plausibly succeed (transient
 network blip, upstream fetch, vsock agent not listening yet). False
 for misconfiguration (missing binary, bad mount path, invalid
@@ -1383,40 +1373,30 @@ port).
 > `optional` **cause?**: `unknown`
-Defined in: [errors.ts:137](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L137)
 Underlying error preserved via the standard `Error.cause` chain.
 ***
 ### VsockExecOptions
-Defined in: [exec.ts:38](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L38)
 #### Properties
 ##### connectTimeoutMs?
 > `optional` **connectTimeoutMs?**: `number`
-Defined in: [exec.ts:40](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L40)
 How long to keep retrying the UDS connect. Default 30s.
 ##### retryMs?
 > `optional` **retryMs?**: `number`
-Defined in: [exec.ts:42](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L42)
 Poll interval in ms while retrying. Default 250.
 ##### execTimeoutMs?
 > `optional` **execTimeoutMs?**: `number`
-Defined in: [exec.ts:49](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L49)
 Wall-clock ceiling for the spawned command. Default 5 minutes.
 Pass `null` (or `Infinity`) to disable — appropriate for
 long-running siblings (dev servers, file watchers, log tailers)
@@ -1426,8 +1406,6 @@ that should live for the VM's lifetime. Mirrors `boot({ timeoutMs: null })`.
 > `optional` **onStdout?**: (`chunk`) => `void`
-Defined in: [exec.ts:51](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L51)
 Called with each stdout chunk as it arrives (pass-through tee).
 ###### Parameters
@@ -1444,8 +1422,6 @@ Called with each stdout chunk as it arrives (pass-through tee).
 > `optional` **onStderr?**: (`chunk`) => `void`
-Defined in: [exec.ts:53](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L53)
 Called with each stderr chunk as it arrives (pass-through tee).
 ###### Parameters
@@ -1462,56 +1438,40 @@ Called with each stderr chunk as it arrives (pass-through tee).
 ### VsockExecResult
-Defined in: [exec.ts:56](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L56)
 #### Properties
 ##### exitCode
 > **exitCode**: `number`
-Defined in: [exec.ts:57](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L57)
 ##### stdout
 > **stdout**: `string`
-Defined in: [exec.ts:58](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L58)
 ##### stderr
 > **stderr**: `string`
-Defined in: [exec.ts:59](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L59)
 ***
 ### VsockExecPtyOptions
-Defined in: [exec.ts:160](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L160)
 #### Properties
 ##### cols
 > **cols**: `number`
-Defined in: [exec.ts:162](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L162)
 Initial window size; the guest passes this to forkpty()'s winp.
 ##### rows
 > **rows**: `number`
-Defined in: [exec.ts:163](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L163)
 ##### stdin
 > **stdin**: `Readable`
-Defined in: [exec.ts:169](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L169)
 Host-side input source. Each `data` chunk is forwarded as an
 `I <n>\n<bytes>` frame. Caller wires `process.stdin` (in raw
 mode) here for an interactive shell.
@@ -1520,8 +1480,6 @@ mode) here for an interactive shell.
 > **stdout**: `Writable`
-Defined in: [exec.ts:174](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L174)
 Host-side sink for PTY master output (`O <n>\n<bytes>` frames).
 Caller wires `process.stdout`.
@@ -1529,38 +1487,28 @@ Caller wires `process.stdout`.
 > `optional` **connectTimeoutMs?**: `number`
-Defined in: [exec.ts:176](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L176)
 Connect timeout (ms). Default 5000 — agent should already be up.
 ***
 ### VsockExecPtyResult
-Defined in: [exec.ts:179](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L179)
 #### Properties
 ##### exitCode
 > **exitCode**: `number`
-Defined in: [exec.ts:180](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L180)
 ***
 ### VsockExecPtyHandle
-Defined in: [exec.ts:183](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L183)
 #### Properties
 ##### result
 > `readonly` **result**: `Promise`\<[`VsockExecPtyResult`](#vsockexecptyresult)\>
-Defined in: [exec.ts:185](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L185)
 Resolves with the workload's exit code once X arrives.
 #### Methods
@@ -1569,8 +1517,6 @@ Resolves with the workload's exit code once X arrives.
 > **resize**(`cols`, `rows`): `void`
-Defined in: [exec.ts:187](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L187)
 Send a TIOCSWINSZ update. Hook from host's SIGWINCH.
 ###### Parameters
@@ -1591,8 +1537,6 @@ Send a TIOCSWINSZ update. Hook from host's SIGWINCH.
 > **cancel**(): `void`
-Defined in: [exec.ts:189](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L189)
 Disconnect; agent will SIGHUP the workload.
 ###### Returns
@@ -1603,38 +1547,28 @@ Disconnect; agent will SIGHUP the workload.
 ### VsockFilesOptions
-Defined in: [files.ts:26](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/files.ts#L26)
 #### Properties
 ##### timeoutMs?
 > `optional` **timeoutMs?**: `number`
-Defined in: [files.ts:28](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/files.ts#L28)
 How long to retry the UDS connect. Default 5s.
 ##### retryMs?
 > `optional` **retryMs?**: `number`
-Defined in: [files.ts:29](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/files.ts#L29)
 ##### excludes?
 > `optional` **excludes?**: `string`[]
-Defined in: [files.ts:31](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/files.ts#L31)
 Forwarded to `tar --exclude=PATTERN`. Repeat per pattern.
 ***
 ### GcResult
-Defined in: [gc.ts:22](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/gc.ts#L22)
 Per-entry record of what `runGc` did (or would do, with dryRun).
 #### Properties
@@ -1643,58 +1577,42 @@ Per-entry record of what `runGc` did (or would do, with dryRun).
 > **pid**: `number`
-Defined in: [gc.ts:23](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/gc.ts#L23)
 ##### name?
 > `optional` **name?**: `string`
-Defined in: [gc.ts:24](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/gc.ts#L24)
 ##### status
 > **status**: [`PidStatus`](#pidstatus)
-Defined in: [gc.ts:25](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/gc.ts#L25)
 ##### removedPaths
 > **removedPaths**: `string`[]
-Defined in: [gc.ts:27](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/gc.ts#L27)
 Paths removed (or that would be removed under `dryRun`).
 ##### failedPaths
 > **failedPaths**: `string`[]
-Defined in: [gc.ts:29](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/gc.ts#L29)
 Paths the gc tried to rm but couldn't (already gone, EPERM, …).
 ##### registryRemoved
 > **registryRemoved**: `boolean`
-Defined in: [gc.ts:31](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/gc.ts#L31)
 True if the registry entry was (or would be) dropped.
 ***
 ### RunGcOptions
-Defined in: [gc.ts:34](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/gc.ts#L34)
 #### Properties
 ##### dryRun?
 > `optional` **dryRun?**: `boolean`
-Defined in: [gc.ts:39](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/gc.ts#L39)
 When true, list what would be cleaned without touching the disk
 or registry. Used by `machinen gc --dry-run` and tests.
@@ -1702,8 +1620,6 @@ or registry. Used by `machinen gc --dry-run` and tests.
 > `optional` **pid?**: `number`
-Defined in: [gc.ts:44](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/gc.ts#L44)
 Only act on this single entry (skip everything else in the
 registry). Used by `machinen stop` after killing a specific VM.
@@ -1711,16 +1627,12 @@ registry). Used by `machinen stop` after killing a specific VM.
 ### CheckForkBackpressureOptions
-Defined in: [host-mem.ts:103](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/host-mem.ts#L103)
 #### Properties
 ##### threshold
 > **threshold**: `number`
-Defined in: [host-mem.ts:110](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/host-mem.ts#L110)
 Fraction of host total memory that must remain free for a fork
 to proceed. Pass `0` (or any non-positive number) to disable the
 gate entirely. Capped at `1` — `0.5` already means "refuse
@@ -1730,8 +1642,6 @@ unless half the host is free."
 > `optional` **readFree?**: () => `Promise`\<`number`\>
-Defined in: [host-mem.ts:112](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/host-mem.ts#L112)
 Pluggable for tests; defaults to [readHostFreeBytes](#readhostfreebytes).
 ###### Returns
@@ -1742,24 +1652,18 @@ Pluggable for tests; defaults to [readHostFreeBytes](#readhostfreebytes).
 > `optional` **totalBytes?**: `number`
-Defined in: [host-mem.ts:114](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/host-mem.ts#L114)
 Pluggable for tests; defaults to [readHostTotalBytes](#readhosttotalbytes).
 ***
 ### ChunkLogEvent
-Defined in: [log.ts:19](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/log.ts#L19)
 #### Properties
 ##### source
 > **source**: `"guest-console"` \| `"exec-stdout"` \| `"exec-stderr"`
-Defined in: [log.ts:26](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/log.ts#L26)
 Where the chunk came from:
   - `guest-console` — kernel / PL011 console bytes (VMM stderr)
   - `exec-stdout`   — stdout of an exec invocation
@@ -1769,94 +1673,70 @@ Where the chunk came from:
 > `optional` **cmd?**: `string`
-Defined in: [log.ts:28](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/log.ts#L28)
 Command string; set when `source` is `exec-stdout` or `exec-stderr`.
 ##### chunk
 > **chunk**: `Buffer`
-Defined in: [log.ts:30](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/log.ts#L30)
 Raw bytes as they arrive — not line-split, not decoded.
 ***
 ### PhaseLogEvent
-Defined in: [log.ts:33](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/log.ts#L33)
 #### Properties
 ##### source
 > **source**: `"phase"`
-Defined in: [log.ts:34](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/log.ts#L34)
 ##### kind
 > **kind**: `"boot"` \| `"provision"` \| `"snapshot"` \| `"restore"`
-Defined in: [log.ts:36](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/log.ts#L36)
 Which runtime entry point produced these phases.
 ##### phases
 > **phases**: `ReadonlyMap`\<`string`, `number`\>
-Defined in: [log.ts:38](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/log.ts#L38)
 Phase name → wall-clock ms. Insertion order = timeline order.
 ##### totalMs
 > **totalMs**: `number`
-Defined in: [log.ts:40](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/log.ts#L40)
 Wall-clock between PhaseTimer construction and flush.
 ***
 ### PackBundleOptions
-Defined in: [mkinitramfs.ts:326](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L326)
 #### Properties
 ##### bundle
 > **bundle**: `string`
-Defined in: [mkinitramfs.ts:328](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L328)
 Bundle directory with rootfs/ + machinen-config.json.
 ##### out
 > **out**: `string`
-Defined in: [mkinitramfs.ts:330](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L330)
 Path to the initramfs cpio to write.
 ##### base?
 > `optional` **base?**: `string`
-Defined in: [mkinitramfs.ts:332](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L332)
 Optional base rootfs tarball (rootfs-debian-arm64.tar.gz).
 ##### mount?
 > `optional` **mount?**: `object`
-Defined in: [mkinitramfs.ts:339](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L339)
 A single host directory copied into the guest between the base
 tarball and the bundle's rootfs. Bundle files win on path
 collisions. The caller is responsible for validating host exists
@@ -1874,8 +1754,6 @@ and is a directory, and that guest lives under `/mnt/`. See #64.
 > `optional` **env?**: `Record`\<`string`, `string`\>
-Defined in: [mkinitramfs.ts:346](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L346)
 Extra env vars to merge into the bundle's machinen-config.json `env`
 field before packing. The bundle's on-disk env wins on key collision
 (same precedence as the mount overlay — bundle always gets the last
@@ -1885,24 +1763,18 @@ word). See #89.
 > `optional` **excludes?**: `string`[]
-Defined in: [mkinitramfs.ts:348](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L348)
 fnmatch patterns matched against each rootfs-relative path.
 ##### initPath?
 > `optional` **initPath?**: `string`
-Defined in: [mkinitramfs.ts:350](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L350)
 Optional path to the compiled /init. Default: ../microvm/test-fixtures/init relative to this file.
 ##### fuseAgentPath?
 > `optional` **fuseAgentPath?**: `string`
-Defined in: [mkinitramfs.ts:356](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L356)
 Optional host path to the compiled fuse-agent binary. When set,
 the binary is injected at `/fuse-agent` (mode 0755) inside the
 initramfs so /init can fork it per live-share mount. See #78.
@@ -1911,8 +1783,6 @@ initramfs so /init can fork it per live-share mount. See #78.
 > `optional` **execAgentPath?**: `string`
-Defined in: [mkinitramfs.ts:362](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L362)
 Optional path to the compiled /exec-agent. Default: same dir as
 /init under packages/microvm/test-fixtures/. Used to override the
 stale /exec-agent that may live in a re-provisioned base tarball.
@@ -1921,40 +1791,30 @@ stale /exec-agent that may live in a re-provisioned base tarball.
 ### PackTinyBundleOptions
-Defined in: [mkinitramfs.ts:497](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L497)
 #### Properties
 ##### bundle
 > **bundle**: `string`
-Defined in: [mkinitramfs.ts:499](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L499)
 Bundle directory with machinen-config.json. The bundle's rootfs/ is ignored — the on-disk rootfs is on /dev/vda.
 ##### out
 > **out**: `string`
-Defined in: [mkinitramfs.ts:501](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L501)
 Path to the initramfs cpio to write.
 ##### env?
 > `optional` **env?**: `Record`\<`string`, `string`\>
-Defined in: [mkinitramfs.ts:503](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L503)
 Extra env merged into the bundle's machinen-config.json. Bundle keys win on collision.
 ##### mountGuest?
 > `optional` **mountGuest?**: `string`
-Defined in: [mkinitramfs.ts:511](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L511)
 Guest mountpoint for the `--mount` overlay (#272). When set, the
 cpio carries `/etc/machinen-mountdisk-guest` with this path so
 /init knows where to layer the squashfs+ext4 overlay after the
@@ -1965,156 +1825,112 @@ not in the cpio. Must be an absolute path under `/mnt/`.
 > `optional` **initPath?**: `string`
-Defined in: [mkinitramfs.ts:513](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L513)
 Optional override for the compiled /init. Default: ../microvm/test-fixtures/init relative to this file.
 ##### fuseAgentPath?
 > `optional` **fuseAgentPath?**: `string`
-Defined in: [mkinitramfs.ts:515](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L515)
 Optional path to the compiled fuse-agent; staged at /fuse-agent when set.
 ***
 ### PackRootfsOptions
-Defined in: [mkinitramfs.ts:560](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L560)
 #### Properties
 ##### rootfs
 > **rootfs**: `string`
-Defined in: [mkinitramfs.ts:561](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L561)
 ##### out
 > **out**: `string`
-Defined in: [mkinitramfs.ts:562](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L562)
 ##### config?
 > `optional` **config?**: `string`
-Defined in: [mkinitramfs.ts:563](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L563)
 ##### excludes?
 > `optional` **excludes?**: `string`[]
-Defined in: [mkinitramfs.ts:564](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L564)
 ##### initPath?
 > `optional` **initPath?**: `string`
-Defined in: [mkinitramfs.ts:565](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L565)
 ***
 ### PackMinimalOptions
-Defined in: [mkinitramfs.ts:582](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L582)
 #### Properties
 ##### out
 > **out**: `string`
-Defined in: [mkinitramfs.ts:583](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L583)
 ##### initPath?
 > `optional` **initPath?**: `string`
-Defined in: [mkinitramfs.ts:584](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L584)
 ##### config?
 > `optional` **config?**: `string`
-Defined in: [mkinitramfs.ts:585](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L585)
 ***
 ### PackWorkspaceOptions
-Defined in: [mkinitramfs.ts:603](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L603)
 #### Properties
 ##### workspace
 > **workspace**: `string`
-Defined in: [mkinitramfs.ts:604](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L604)
 ##### out
 > **out**: `string`
-Defined in: [mkinitramfs.ts:605](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L605)
 ##### mountpoint?
 > `optional` **mountpoint?**: `string`
-Defined in: [mkinitramfs.ts:607](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L607)
 Directory name inside the cpio (default `workspace`).
 ##### excludes?
 > `optional` **excludes?**: `Iterable`\<`string`\>
-Defined in: [mkinitramfs.ts:609](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L609)
 Basename-matched excludes. Default: DEFAULT_WORKSPACE_EXCLUDES.
 ##### maxMb?
 > `optional` **maxMb?**: `number`
-Defined in: [mkinitramfs.ts:611](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L611)
 Max final size in MiB (default 500). Throws if exceeded.
 ***
 ### EnsureMountDiskImageOptions
-Defined in: [mountdisk-img.ts:120](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mountdisk-img.ts#L120)
 #### Properties
 ##### cacheDir?
 > `optional` **cacheDir?**: `string`
-Defined in: [mountdisk-img.ts:122](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mountdisk-img.ts#L122)
 Override the cache directory. Default: `~/.cache/machinen/mountdisk`.
 ##### force?
 > `optional` **force?**: `boolean`
-Defined in: [mountdisk-img.ts:124](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mountdisk-img.ts#L124)
 Force re-materialization. Mostly for debugging the materializer.
 ##### onPhase?
 > `optional` **onPhase?**: (`name`, `ms`) => `void`
-Defined in: [mountdisk-img.ts:131](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mountdisk-img.ts#L131)
 Sub-phase callback for the caller's PhaseTimer. Fires for each
 measurable internal step: `manifest-hash`, `mksquashfs`,
 `staging-rename`. The caller usually does
@@ -2138,40 +1954,30 @@ measurable internal step: `manifest-hash`, `mksquashfs`,
 ### EnsureMountDiskImageResult
-Defined in: [mountdisk-img.ts:134](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mountdisk-img.ts#L134)
 #### Properties
 ##### lowerPath
 > **lowerPath**: `string`
-Defined in: [mountdisk-img.ts:136](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mountdisk-img.ts#L136)
 Absolute path to the cached squashfs lower.
 ##### key
 > **key**: `string`
-Defined in: [mountdisk-img.ts:138](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mountdisk-img.ts#L138)
 Tree-manifest sha256 — also the cache key. Useful for tests.
 ***
 ### EnsureMountDiskUpperOptions
-Defined in: [mountdisk-img.ts:275](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mountdisk-img.ts#L275)
 #### Properties
 ##### sizeBytes?
 > `optional` **sizeBytes?**: `number`
-Defined in: [mountdisk-img.ts:282](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mountdisk-img.ts#L282)
 Target size in bytes. Default 4 GiB. Sparse, so unused capacity
 costs nothing on the host disk. Mirrors `rootDiskSizeBytes` —
 over-provision to give the guest room to write without
@@ -2181,68 +1987,48 @@ having to grow the file mid-VM.
 ### EnsureMountDiskUpperResult
-Defined in: [mountdisk-img.ts:285](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mountdisk-img.ts#L285)
 #### Properties
 ##### upperPath
 > **upperPath**: `string`
-Defined in: [mountdisk-img.ts:287](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mountdisk-img.ts#L287)
 Absolute path to the per-VM ext4 upper image.
 ##### sizeBytes
 > **sizeBytes**: `number`
-Defined in: [mountdisk-img.ts:289](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mountdisk-img.ts#L289)
 Size in bytes the file was allocated at.
 ***
 ### SandboxEntry
-Defined in: [multiplex.ts:23](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L23)
 #### Properties
 ##### id
 > **id**: `string`
-Defined in: [multiplex.ts:24](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L24)
 ##### vm
 > **vm**: [`VmHandle`](#vmhandle)
-Defined in: [multiplex.ts:25](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L25)
 ##### scrollback
 > **scrollback**: `Buffer`
-Defined in: [multiplex.ts:26](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L26)
 ##### addedAt
 > `readonly` **addedAt**: `number`
-Defined in: [multiplex.ts:27](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L27)
 ***
 ### OnOutputListener()
-Defined in: [multiplex.ts:30](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L30)
 > **OnOutputListener**(`chunk`, `source`): `void`
-Defined in: [multiplex.ts:31](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L31)
 #### Parameters
 ##### chunk
@@ -2261,48 +2047,36 @@ Defined in: [multiplex.ts:31](https://github.com/redwoodjs/machinen/blob/main/pa
 ### SupervisorOptions
-Defined in: [multiplex.ts:140](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L140)
 #### Properties
 ##### sandboxes
 > **sandboxes**: [`Sandboxes`](#sandboxes)
-Defined in: [multiplex.ts:142](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L142)
 Registry to draw sandboxes from.
 ##### input?
 > `optional` **input?**: `ReadableStream`
-Defined in: [multiplex.ts:144](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L144)
 Input byte stream. Defaults to `process.stdin`.
 ##### output?
 > `optional` **output?**: `Writable`
-Defined in: [multiplex.ts:146](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L146)
 Output byte stream. Defaults to `process.stdout`.
 ##### commandPrefix?
 > `optional` **commandPrefix?**: `string`
-Defined in: [multiplex.ts:148](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L148)
 Prefix for slash-commands. Default `/`.
 ##### rawTtyOnAttach?
 > `optional` **rawTtyOnAttach?**: `boolean`
-Defined in: [multiplex.ts:154](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L154)
 Flip the terminal into raw mode while a sandbox is attached, and
 restore it on detach. Enabled by default when `input` is a TTY.
 Set to `false` in tests where `input` is a plain PassThrough.
@@ -2311,8 +2085,6 @@ Set to `false` in tests where `input` is a plain PassThrough.
 > `optional` **forwardResize?**: `boolean`
-Defined in: [multiplex.ts:160](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/multiplex.ts#L160)
 Forward SIGWINCH on the parent process (terminal resize) to any
 attached sandbox that implements `.resize(cols, rows)`. Enabled
 by default when `output` is a TTY.
@@ -2321,8 +2093,6 @@ by default when `output` is a TTY.
 ### RssTarget
-Defined in: [proc-rss.ts:35](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/proc-rss.ts#L35)
 A pid plus the absolute path to its stats file (when available).
 #### Properties
@@ -2331,14 +2101,10 @@ A pid plus the absolute path to its stats file (when available).
 > **pid**: `number`
-Defined in: [proc-rss.ts:36](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/proc-rss.ts#L36)
 ##### statsPath?
 > `optional` **statsPath?**: `string`
-Defined in: [proc-rss.ts:43](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/proc-rss.ts#L43)
 MACHINEN_STATS_FILE path for this VMM (registry entry's
 `statsPath`). On Darwin we read `phys_footprint` from this file
 in preference to `ps -o rss=`. Optional / undefined for arbitrary
@@ -2348,16 +2114,12 @@ pids that aren't machinen-managed; those fall back to ps.
 ### ProvisionOptions
-Defined in: [provision.ts:55](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L55)
 #### Properties
 ##### base?
 > `optional` **base?**: `string`
-Defined in: [provision.ts:65](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L65)
 Path to the base rootfs tarball to start from. Typically the
 `rootfs-debian-arm64.tar.gz` produced by
 `scripts/build-base-assets.sh` or shipped in a machinen release.
@@ -2370,8 +2132,6 @@ cache at `~/.machinen/@machinen/runtime@<version>/bases/debian-arm64/`).
 > **install**: (`vm`) => `Promise`\<`void`\>
-Defined in: [provision.ts:70](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L70)
 User-supplied provisioning steps. Runs inside the guest via vsock.
 ###### Parameters
@@ -2388,8 +2148,6 @@ User-supplied provisioning steps. Runs inside the guest via vsock.
 > **out**: `string`
-Defined in: [provision.ts:76](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L76)
 Output path for the resulting rootfs tarball. Will be overwritten.
 Consumed via `boot({ image: out })`.
@@ -2397,8 +2155,6 @@ Consumed via `boot({ image: out })`.
 > `optional` **cmd?**: `string`[]
-Defined in: [provision.ts:84](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L84)
 Default cmd baked into the image as `/machinen-config.json`.
 When the image is later booted via `boot({ image })` without a
 user-supplied `cmd`, the guest runs this. User-supplied `cmd` on
@@ -2408,8 +2164,6 @@ user-supplied `cmd`, the guest runs this. User-supplied `cmd` on
 > `optional` **env?**: `Record`\<`string`, `string`\>
-Defined in: [provision.ts:91](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L91)
 Default guest env baked into the image alongside `cmd`. Merged
 with `boot({ env })` at boot time, with the caller's `env`
 overriding on key collision.
@@ -2418,8 +2172,6 @@ overriding on key collision.
 > `optional` **binary?**: `string`
-Defined in: [provision.ts:97](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L97)
 Optional VMM binary path. Same lookup rules as `boot()` — if
 omitted, resolves `@machinen/vmm-<arch>-<os>`.
@@ -2427,16 +2179,12 @@ omitted, resolves `@machinen/vmm-<arch>-<os>`.
 > `optional` **cwd?**: `string`
-Defined in: [provision.ts:100](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L100)
 Working directory. Defaults to process.cwd().
 ##### scratchDiskSizeBytes?
 > `optional` **scratchDiskSizeBytes?**: `number`
-Defined in: [provision.ts:107](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L107)
 Size of the scratch disk used to ferry the tarball from guest to
 host. Must be larger than the expected post-install rootfs size.
 Default: 1 GiB (sparse, so it doesn't actually take that space).
@@ -2445,8 +2193,6 @@ Default: 1 GiB (sparse, so it doesn't actually take that space).
 > `optional` **timeoutMs?**: `number`
-Defined in: [provision.ts:114](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L114)
 Wall-clock ceiling for the whole build. If the install hook plus
 the final archive + shutdown doesn't finish in this window, we
 SIGKILL the VMM and fail. Default: 10 minutes.
@@ -2455,8 +2201,6 @@ SIGKILL the VMM and fail. Default: 10 minutes.
 > `optional` **vmmEnv?**: `Record`\<`string`, `string`\>
-Defined in: [provision.ts:121](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L121)
 Extra env passed to the VMM process on the host side. Useful for
 dev overrides like `MACHINEN_BOOT_TEST`. Distinct from `env`,
 which bakes guest-workload env into the produced image.
@@ -2465,8 +2209,6 @@ which bakes guest-workload env into the produced image.
 > `optional` **kernel?**: `string`
-Defined in: [provision.ts:129](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L129)
 Path to the guest kernel. Optional — when omitted, `provision()`
 resolves it via `resolveBaseKernel()` (MACHINEN_ASSETS_DIR override,
 falling back to the `@machinen/cli` cache). Same semantics as
@@ -2476,8 +2218,6 @@ falling back to the `@machinen/cli` cache). Same semantics as
 > `optional` **dtb?**: `string`
-Defined in: [provision.ts:135](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L135)
 Path to the guest DTB. Optional — when omitted, resolved via
 `resolveBaseDtb()` from the same fallback chain as `kernel`.
@@ -2485,8 +2225,6 @@ Path to the guest DTB. Optional — when omitted, resolved via
 > `optional` **onLog?**: [`OnLog`](#onlog)
-Defined in: [provision.ts:143](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L143)
 Streaming log callback — fires for every byte of guest output
 during the build: guest kernel console, every `vm.exec()` call
 the install hook makes, and the internal tar / poweroff execs.
@@ -2496,124 +2234,90 @@ See `LogEvent.source` to tell them apart. See #83.
 ### ProvisionResult
-Defined in: [provision.ts:146](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L146)
 #### Properties
 ##### imagePath
 > **imagePath**: `string`
-Defined in: [provision.ts:148](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L148)
 Absolute path to the output tarball.
 ##### sizeBytes
 > **sizeBytes**: `number`
-Defined in: [provision.ts:151](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L151)
 Size of the output tarball in bytes.
 ##### elapsedMs
 > **elapsedMs**: `number`
-Defined in: [provision.ts:154](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L154)
 Wall-clock time from build() entry to return.
 ***
 ### PtyBootOptions
-Defined in: [pty.ts:91](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pty.ts#L91)
 #### Properties
 ##### binary
 > **binary**: `string`
-Defined in: [pty.ts:93](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pty.ts#L93)
 Absolute or cwd-relative path to the binary to fork.
 ##### env?
 > `optional` **env?**: `Record`\<`string`, `string`\>
-Defined in: [pty.ts:95](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pty.ts#L95)
 Extra env. Merged over process.env.
 ##### cwd?
 > `optional` **cwd?**: `string`
-Defined in: [pty.ts:96](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pty.ts#L96)
 ##### args?
 > `optional` **args?**: `string`[]
-Defined in: [pty.ts:97](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pty.ts#L97)
 ##### cols?
 > `optional` **cols?**: `number`
-Defined in: [pty.ts:99](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pty.ts#L99)
 Initial terminal size. Defaults to 80x24.
 ##### rows?
 > `optional` **rows?**: `number`
-Defined in: [pty.ts:100](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pty.ts#L100)
 ##### name?
 > `optional` **name?**: `string`
-Defined in: [pty.ts:102](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pty.ts#L102)
 TERM value. Default `xterm-256color` — the CC banner wants colors.
 ***
 ### PtyVmHandle
-Defined in: [pty.ts:105](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pty.ts#L105)
 #### Properties
 ##### pid
 > `readonly` **pid**: `number`
-Defined in: [pty.ts:106](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pty.ts#L106)
 ##### stdin
 > `readonly` **stdin**: `Writable`
-Defined in: [pty.ts:107](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pty.ts#L107)
 ##### stdout
 > `readonly` **stdout**: `Readable`
-Defined in: [pty.ts:108](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pty.ts#L108)
 ##### stderr
 > `readonly` **stderr**: `Readable`
-Defined in: [pty.ts:110](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pty.ts#L110)
 Same stream as `stdout`. A pty merges stdout + stderr in the kernel.
 #### Methods
@@ -2622,8 +2326,6 @@ Same stream as `stdout`. A pty merges stdout + stderr in the kernel.
 > **resize**(`cols`, `rows`): `void`
-Defined in: [pty.ts:112](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pty.ts#L112)
 Tell the kernel the terminal is now `cols`x`rows`. Triggers SIGWINCH in the child.
 ###### Parameters
@@ -2644,8 +2346,6 @@ Tell the kernel the terminal is now `cols`x`rows`. Triggers SIGWINCH in the chil
 > **wait**(): `Promise`\<\{ `code`: `number`; `signal`: `Signals`; \}\>
-Defined in: [pty.ts:113](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pty.ts#L113)
 ###### Returns
 `Promise`\<\{ `code`: `number`; `signal`: `Signals`; \}\>
@@ -2654,8 +2354,6 @@ Defined in: [pty.ts:113](https://github.com/redwoodjs/machinen/blob/main/package
 > **kill**(): `Promise`\<`void`\>
-Defined in: [pty.ts:114](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pty.ts#L114)
 ###### Returns
 `Promise`\<`void`\>
@@ -2664,8 +2362,6 @@ Defined in: [pty.ts:114](https://github.com/redwoodjs/machinen/blob/main/package
 > **output**(): `Promise`\<`string`\>
-Defined in: [pty.ts:115](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pty.ts#L115)
 ###### Returns
 `Promise`\<`string`\>
@@ -2674,8 +2370,6 @@ Defined in: [pty.ts:115](https://github.com/redwoodjs/machinen/blob/main/package
 > **errorOutput**(): `Promise`\<`string`\>
-Defined in: [pty.ts:117](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pty.ts#L117)
 Alias of output() — a pty gives us one merged stream.
 ###### Returns
@@ -2686,48 +2380,36 @@ Alias of output() — a pty gives us one merged stream.
 ### RegistryEntry
-Defined in: [registry.ts:42](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L42)
 #### Properties
 ##### pid
 > **pid**: `number`
-Defined in: [registry.ts:44](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L44)
 PID of the VMM process on this host — primary key.
 ##### name?
 > `optional` **name?**: `string`
-Defined in: [registry.ts:46](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L46)
 Optional human-friendly name (from `boot({ name })`). Path-shaped allowed.
 ##### socketPath
 > **socketPath**: `string`
-Defined in: [registry.ts:48](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L48)
 Host-side vsock UDS the exec-agent is reachable on.
 ##### imagePath?
 > `optional` **imagePath?**: `string`
-Defined in: [registry.ts:50](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L50)
 Path to the image the VM was booted from (diagnostic only).
 ##### diskPath?
 > `optional` **diskPath?**: `string`
-Defined in: [registry.ts:56](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L56)
 Host-side path of the scratch disk attached to the guest. Used by
 `attach().snapshot()` so an attach-owned handle can find the
 guest-side scratch disk that backs the in-VM dump.
@@ -2736,8 +2418,6 @@ guest-side scratch disk that backs the in-VM dump.
 > `optional` **forkedFrom?**: `string`
-Defined in: [registry.ts:61](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L61)
 Absolute path to the snapshot directory this VM was forked from
 (set by `restore({ snapDir })`). Visible in `ls`; informational.
@@ -2745,8 +2425,6 @@ Absolute path to the snapshot directory this VM was forked from
 > `optional` **bootLogPath?**: `string`
-Defined in: [registry.ts:69](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L69)
 Path to the one-shot boot-console snapshot written at detach time
 (issue #150 phase 2). Only set on entries booted with
 `--detached`; live post-detach console bytes are dropped on the
@@ -2757,8 +2435,6 @@ of the boot sequence on a detached VM.
 > `optional` **cleanupPaths?**: `string`[]
-Defined in: [registry.ts:78](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L78)
 Per-boot artifacts that need to be removed when the VMM exits.
 Today the in-process exit hook handles this for non-detached
 boots. After detach (#150 phase 2) the parent is gone before the
@@ -2770,8 +2446,6 @@ file (per-boot disk image) or a directory (bundle / vsock UDS).
 > `optional` **vmmExe?**: `string`
-Defined in: [registry.ts:86](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L86)
 Absolute path to the VMM binary that was spawned. `machinen gc`
 compares this against `/proc/<pid>/exe` (Linux) or `ps -o comm=`
 (macOS) before treating an entry as live — without it, a recycled
@@ -2782,8 +2456,6 @@ to `kill(pid, 0)` and the entry would be kept around forever.
 > `optional` **gvproxyPid?**: `number`
-Defined in: [registry.ts:95](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L95)
 PID of the gvproxy process spawned alongside this VMM (issue #150
 phase 2 PR3). Recorded so `machinen stop` can SIGTERM gvproxy at
 the same time as the VMM, and so `machinen gc` can validate /
@@ -2795,8 +2467,6 @@ pre-set by the caller).
 > `optional` **gvproxyExe?**: `string`
-Defined in: [registry.ts:102](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L102)
 Absolute path to the gvproxy binary spawned for this VM. Used by
 `machinen stop` for the same anti-recycling check the VMM gets
 via `vmmExe` — we don't want to SIGTERM whatever process inherits
@@ -2806,8 +2476,6 @@ gvproxy's pid weeks later.
 > `optional` **portForward?**: `object`[]
-Defined in: [registry.ts:109](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L109)
 Host→guest port forwards configured at boot/fork time. Surfaced
 in `machinen ls` so users can see which host port maps to which
 VM without re-reading the launch command. Undefined when the VM
@@ -2829,8 +2497,6 @@ was booted without `-p` / `portForward: []`.
 > `optional` **memoryCeilingMib?**: `number`
-Defined in: [registry.ts:119](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L119)
 Guest RAM ceiling in MiB, as resolved by `boot()` (either the
 caller's `memory:` option or `autoSizeMemoryMib()` for this host
 — see #263 phase A). Surfaced in `machinen ls` (MEM column) and
@@ -2843,8 +2509,6 @@ computed our own.
 > `optional` **statsPath?**: `string`
-Defined in: [registry.ts:128](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L128)
 Absolute path to the shared stats file the VMM writes balloon
 counters to (#274). 16 bytes, mmaped MAP_SHARED on the VMM side
 via `MACHINEN_STATS_FILE`. Persisted so an attach-owned handle
@@ -2856,8 +2520,6 @@ env var).
 > `optional` **lazyPagesTotal?**: `number`
-Defined in: [registry.ts:135](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L135)
 Total pages the lazy-pages rewriter (#266) marked PE_LAZY when
 the VM was restored. Set on restore-derived entries, undefined
 for plain boots and eager restores. Surfaced via
@@ -2867,8 +2529,6 @@ for plain boots and eager restores. Surfaced via
 > `optional` **lazyPagesMountRoot?**: `string`
-Defined in: [registry.ts:143](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L143)
 Absolute path under which the lazy-restore FUSE mount serves
 `pages-*.img` reads. The mount-server tracks bytes served below
 this prefix; `vm.memoryStats()` divides that by 4096 and
@@ -2879,8 +2539,6 @@ Undefined when the VM wasn't lazy-restored.
 > `optional` **mountDisk?**: `object`
-Defined in: [registry.ts:154](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L154)
 #272: when the VM was booted with `mount: { host, guest }`, the
 runtime materialized a squashfs RO lower + ext4 RW upper. Persist
 those host paths so an attach-owned `vm.snapshot()` /
@@ -2906,8 +2564,6 @@ silently boots without the overlay.
 > `optional` **liveMounts?**: `object`[]
-Defined in: [registry.ts:170](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L170)
 #273: live-share FUSE mounts (`liveMounts: [...]` at boot) the
 VM was started with. Persisted so an attach-owned `vm.snapshot()`
 / `vm.fork()` can record the same `meta.liveMounts` block in the
@@ -2934,8 +2590,6 @@ to bind anything).
 > `optional` **liveMountServers?**: `object`[]
-Defined in: [registry.ts:181](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L181)
 #150 phase 3: pids + exes of the detached mount-server helpers
 spawned alongside this VMM, one per live-mount. The helpers die
 with the VMM via `pdeathsig --watch-pid` already, but `machinen
@@ -2957,24 +2611,18 @@ without `liveMounts`.
 > **startedAt**: `number`
-Defined in: [registry.ts:183](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L183)
 ms epoch when the entry was created.
 ***
 ### EnsureRootfsImageOptions
-Defined in: [rootfs-img.ts:134](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/rootfs-img.ts#L134)
 #### Properties
 ##### cacheDir?
 > `optional` **cacheDir?**: `string`
-Defined in: [rootfs-img.ts:139](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/rootfs-img.ts#L139)
 Override the cache directory. Default: `~/.cache/machinen/rootfs`.
 Useful for tests.
@@ -2982,8 +2630,6 @@ Useful for tests.
 > `optional` **force?**: `boolean`
-Defined in: [rootfs-img.ts:144](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/rootfs-img.ts#L144)
 Force re-materialization even if a cached image is already present.
 Mostly for debugging the materializer.
@@ -2991,8 +2637,6 @@ Mostly for debugging the materializer.
 > `optional` **sizeMultiplier?**: `number`
-Defined in: [rootfs-img.ts:154](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/rootfs-img.ts#L154)
 Slack multiplier above the unpacked tarball size when sizing the
 ext4 filesystem. Default: 2.5 — leaves enough room for the guest
 to install a few hundred MB of packages on top of the base rootfs
@@ -3005,8 +2649,6 @@ to fill the filesystem.
 > `optional` **minSizeBytes?**: `number`
-Defined in: [rootfs-img.ts:162](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/rootfs-img.ts#L162)
 Minimum image size in bytes. The materializer enforces at least
 this for small rootfs where the multiplier alone would leave
 insufficient room for a real workload. Default: 2 GiB — boot-time
@@ -3017,8 +2659,6 @@ insufficient room for a real workload. Default: 2 GiB — boot-time
 > `optional` **sizeBytes?**: `number`
-Defined in: [rootfs-img.ts:170](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/rootfs-img.ts#L170)
 Absolute target size in bytes. When set, overrides `sizeMultiplier`
 and `minSizeBytes` entirely — fresh materializations get exactly
 this size, cached `.img`s smaller than this are sparse-extended
@@ -3029,8 +2669,6 @@ For the user-facing `boot({ rootDiskSizeBytes })` knob (#131).
 > `optional` **onPhase?**: (`name`, `ms`) => `void`
-Defined in: [rootfs-img.ts:178](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/rootfs-img.ts#L178)
 Sub-phase callback for the caller's PhaseTimer (#233 follow-up).
 Fires for each measurable internal step: `sha256`, `e2fsck`,
 `sparse-extend`, `tar-extract`, `mke2fs`, `gunzip-prebake`. The
@@ -3055,40 +2693,30 @@ the breakdown shows up alongside the parent phase.
 ### VsockSecretsOptions
-Defined in: [secrets.ts:26](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/secrets.ts#L26)
 #### Properties
 ##### timeoutMs?
 > `optional` **timeoutMs?**: `number`
-Defined in: [secrets.ts:28](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/secrets.ts#L28)
 How long to keep retrying the UDS connect. Default 10s.
 ##### retryMs?
 > `optional` **retryMs?**: `number`
-Defined in: [secrets.ts:30](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/secrets.ts#L30)
 Poll interval in ms while retrying. Default 250.
 ***
 ### VmHandle
-Defined in: [vm-handle.ts:16](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L16)
 #### Properties
 ##### pid
 > `readonly` **pid**: `number`
-Defined in: [vm-handle.ts:23](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L23)
 PID of the host-side VMM process — primary identifier across
 boot/attach. Kernel-unique while alive; reused after exit, so
 pass it to `attach({ pid })` while the VM is live (or use
@@ -3098,36 +2726,26 @@ pass it to `attach({ pid })` while the VM is live (or use
 > `readonly` `optional` **name?**: `string`
-Defined in: [vm-handle.ts:25](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L25)
 Optional human-friendly name passed to `boot({ name })`.
 ##### stdin
 > `readonly` **stdin**: `Writable`
-Defined in: [vm-handle.ts:26](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L26)
 ##### stdout
 > `readonly` **stdout**: `Readable`
-Defined in: [vm-handle.ts:27](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L27)
 ##### stderr
 > `readonly` **stderr**: `Readable`
-Defined in: [vm-handle.ts:28](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L28)
 #### Methods
 ##### wait()
 > **wait**(): `Promise`\<\{ `code`: `number`; `signal`: `Signals`; \}\>
-Defined in: [vm-handle.ts:31](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L31)
 Resolves when the VM process exits. Rejects on timeout.
 ###### Returns
@@ -3138,8 +2756,6 @@ Resolves when the VM process exits. Rejects on timeout.
 > **kill**(): `Promise`\<`void`\>
-Defined in: [vm-handle.ts:34](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L34)
 Send SIGKILL to the VM. Resolves once it's really gone.
 ###### Returns
@@ -3150,8 +2766,6 @@ Send SIGKILL to the VM. Resolves once it's really gone.
 > **detach**(): `Promise`\<`void`\>
-Defined in: [vm-handle.ts:42](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L42)
 Drop this host-side handle without killing the VMM. The VM keeps
 running and can be re-attached from another process. For locally-
 booted handles this closes captured streams; `wait()` and
@@ -3165,8 +2779,6 @@ booted handles this closes captured streams; `wait()` and
 > **output**(): `Promise`\<`string`\>
-Defined in: [vm-handle.ts:50](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L50)
 Buffer stdout until the process exits; return it as a UTF-8 string.
 Capped at ~1 MiB tail — long-running VMs keep only the most recent
 bytes (issue #150). Sufficient for kernel boot console + test
@@ -3180,8 +2792,6 @@ assertions; not a full transcript.
 > **errorOutput**(): `Promise`\<`string`\>
-Defined in: [vm-handle.ts:53](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L53)
 Same as `output()` but for stderr (where guest console lands).
 ###### Returns
@@ -3192,8 +2802,6 @@ Same as `output()` but for stderr (where guest console lands).
 > **exec**(`cmd`, `opts?`): `Promise`\<[`VsockExecResult`](#vsockexecresult)\>
-Defined in: [vm-handle.ts:64](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L64)
 Run a shell command inside the guest via the vsock exec-agent. Throws
 BootError on non-zero exit; callers who want to inspect failure
 should use `execRaw`.
@@ -3220,8 +2828,6 @@ automatically by `boot()` unless the caller pre-set MACHINEN_VSOCK.
 > **execRaw**(`cmd`, `opts?`): `Promise`\<[`VsockExecResult`](#vsockexecresult)\>
-Defined in: [vm-handle.ts:67](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L67)
 Like `exec()` but returns non-zero exit codes instead of throwing.
 ###### Parameters
@@ -3242,8 +2848,6 @@ Like `exec()` but returns non-zero exit codes instead of throwing.
 > **execPty**(`cmd`, `opts`): [`VsockExecPtyHandle`](#vsockexecptyhandle)
-Defined in: [vm-handle.ts:80](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L80)
 Run a shell command inside a pseudoterminal. Bidirectional bytes
 flow between `opts.stdin` and `opts.stdout`; the returned handle's
 `.resize(cols, rows)` propagates window-size changes (hook your
@@ -3272,8 +2876,6 @@ untranslated bytes. See #133.
 > **writeFile**(`guestPath`, `contents`, `opts?`): `Promise`\<`void`\>
-Defined in: [vm-handle.ts:101](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L101)
 Write `contents` to `guestPath` inside the VM. Convenience over
 `vm.exec(...)` for the common "drop a config file from the host"
 case — no quoting/heredoc gymnastics, binary-safe via base64.
@@ -3316,8 +2918,6 @@ EXEC_VSOCK_UNAVAILABLE | EXEC_NONZERO_EXIT |
 > **snapshot**(`opts`): `Promise`\<[`SnapshotResult`](#snapshotresult)\>
-Defined in: [vm-handle.ts:147](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L147)
 Freeze this VM with CRIU and write a snapshot bundle into
 `opts.outDir`. The bundle is a directory containing:
@@ -3375,8 +2975,6 @@ and the bundle can be restored into a sibling VM (`vm.fork()`).
 > **memoryStats**(): `Promise`\<[`MemoryStats`](#memorystats-1)\>
-Defined in: [vm-handle.ts:176](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L176)
 Read the host's view of this VM's memory: the ceiling the VMM was
 sized at, the host RSS the VMM is currently holding, the bytes
 the virtio-balloon device has reported back to the host, and the
@@ -3411,8 +3009,6 @@ Pure read, no side effects. The numbers come from:
 > **fork**(`opts?`): `Promise`\<[`VmHandle`](#vmhandle)\>
-Defined in: [vm-handle.ts:199](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L199)
 Snapshot this VM without killing it and immediately restore the
 bundle into a new sibling VM. Both source and fork keep running,
 independently addressable. See #216.
@@ -3447,8 +3043,6 @@ written to a temp dir and removed when the fork exits.
 ### MemoryStats
-Defined in: [vm-handle.ts:206](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L206)
 Host-observable memory state for one VM (#274). All four fields are
 snapshots of "now" — call `memoryStats()` again to refresh.
@@ -3458,8 +3052,6 @@ snapshots of "now" — call `memoryStats()` again to refresh.
 > **ceilingMib**: `number`
-Defined in: [vm-handle.ts:215](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L215)
 Ceiling the VMM was sized at (MiB). The actual RSS climbs into
 this on demand and is reclaimed by the balloon (#263 phase B);
 the ceiling itself is fixed for the lifetime of the VM. `null`
@@ -3471,8 +3063,6 @@ number we don't own.
 > **hostRssBytes**: `number`
-Defined in: [vm-handle.ts:221](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L221)
 Resident bytes the host kernel sees the VMM holding. `null`
 when the VMM has exited or `/proc/<pid>/status` / `ps` couldn't
 be read.
@@ -3481,8 +3071,6 @@ be read.
 > **balloonInflatedBytes**: `number`
-Defined in: [vm-handle.ts:230](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L230)
 Bytes the virtio-balloon device has reclaimed via free-page
 reporting since the VMM started. Strictly increases over the
 VMM's lifetime; if `hostRssBytes` is well below ceiling, balloon
@@ -3494,8 +3082,6 @@ without that env var.
 > **lazyPagesPending**: `number`
-Defined in: [vm-handle.ts:237](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L237)
 Pages the lazy-restore path (#266) has registered as PE_LAZY but
 the guest hasn't faulted in yet. Approximated as
 `entriesFlagged - bytesServedFromPagesImg / 4096`, clamped to
@@ -3505,40 +3091,30 @@ the guest hasn't faulted in yet. Approximated as
 ### WriteFileOptions
-Defined in: [vm-handle.ts:240](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L240)
 #### Properties
 ##### mode?
 > `optional` **mode?**: `number`
-Defined in: [vm-handle.ts:242](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L242)
 Octal mode for the destination file (e.g. `0o755`). Default: leave as-is.
 ##### recursive?
 > `optional` **recursive?**: `boolean`
-Defined in: [vm-handle.ts:244](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L244)
 `mkdir -p` the parent directory before writing. Default: true.
 ##### append?
 > `optional` **append?**: `boolean`
-Defined in: [vm-handle.ts:246](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L246)
 Append to the file instead of overwriting. Default: false.
 ***
 ### SnapshotOptions
-Defined in: [vm-handle.ts:260](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L260)
 Options for `vm.snapshot(opts)`.
 Live-share mount note (#273): VMs booted with `liveMounts: [...]`
@@ -3555,8 +3131,6 @@ the `liveMounts` doc on `BootOptions` for the full contract.
 > **outDir**: `string`
-Defined in: [vm-handle.ts:266](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L266)
 Directory the snapshot bundle is written to. Created if missing
 and required to be empty (or absent) so a previous snapshot
 can't be silently overwritten.
@@ -3565,8 +3139,6 @@ can't be silently overwritten.
 > `optional` **dumpCmd?**: `string`
-Defined in: [vm-handle.ts:271](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L271)
 Command to run in the guest to trigger the CRIU dump. Defaults to
 `/sbin/machinen-dump`.
@@ -3574,8 +3146,6 @@ Command to run in the guest to trigger the CRIU dump. Defaults to
 > `optional` **timeoutMs?**: `number`
-Defined in: [vm-handle.ts:276](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L276)
 Wall-clock ceiling for the dump + shutdown. If the VMM hasn't exited
 in this window we SIGKILL it and fail. Default 90s.
@@ -3583,8 +3153,6 @@ in this window we SIGKILL it and fail. Default 90s.
 > `optional` **onLog?**: [`OnLog`](#onlog)
-Defined in: [vm-handle.ts:282](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L282)
 Streaming log callback — fires for every byte the dump emits
 (guest console + the dump exec). See #83. When both the snapshot
 call and `boot({ onLog })` have a callback set, both fire.
@@ -3593,8 +3161,6 @@ call and `boot({ onLog })` have a callback set, both fire.
 > `optional` **leaveRunning?**: `boolean`
-Defined in: [vm-handle.ts:291](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L291)
 Pass `--leave-running` to `criu dump` so the source workload
 survives the snapshot. The VMM stays up after the dump; success
 is signalled by the dump exec returning 0 instead of by VMM exit.
@@ -3606,8 +3172,6 @@ Default: false (current destructive snapshot behavior).
 > `optional` **tcpClose?**: `boolean`
-Defined in: [vm-handle.ts:301](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L301)
 Omit `--tcp-established` from `criu dump`. Restored sockets come
 back in CLOSED state — the workload sees ECONNRESET on first
 I/O, which is the right semantic when the dump is the source for
@@ -3620,48 +3184,36 @@ Default: false (preserve TCP — current snapshot/restore behavior).
 ### SnapshotResult
-Defined in: [vm-handle.ts:304](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L304)
 #### Properties
 ##### snapDir
 > **snapDir**: `string`
-Defined in: [vm-handle.ts:306](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L306)
 Absolute path to the snapshot bundle directory.
 ##### imgDir
 > **imgDir**: `string`
-Defined in: [vm-handle.ts:308](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L308)
 Absolute path to the CRIU image directory inside the bundle.
 ##### elapsedMs
 > **elapsedMs**: `number`
-Defined in: [vm-handle.ts:310](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L310)
 Time from `snapshot()` entry to VMM exit, in milliseconds.
 ##### consoleLog
 > **consoleLog**: `string`
-Defined in: [vm-handle.ts:312](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L312)
 Guest console output captured during the dump.
 ***
 ### SnapshotMeta
-Defined in: [vm-handle.ts:319](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L319)
 On-disk shape of the bundle's `meta.json`. Read by `restore()`
 to reconstruct the source VM's name when registering the fork.
@@ -3671,16 +3223,12 @@ to reconstruct the source VM's name when registering the fork.
 > `optional` **sourceName?**: `string`
-Defined in: [vm-handle.ts:321](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L321)
 Name passed to `boot({ name })` when the source VM was started.
 ##### sourceImage?
 > `optional` **sourceImage?**: `string`
-Defined in: [vm-handle.ts:330](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L330)
 Absolute path of the rootfs tarball the source VM was booted with
 (`boot({ image })` or its restored equivalent). `restore()` uses
 this as the default rootfs, so the same-host quickstart works
@@ -3692,16 +3240,12 @@ explicit `image` override.
 > **snappedAt**: `number`
-Defined in: [vm-handle.ts:332](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L332)
 ms epoch when `vm.snapshot()` returned.
 ##### mountDisk?
 > `optional` **mountDisk?**: `object`
-Defined in: [vm-handle.ts:342](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L342)
 #272: when the source VM was booted with `mount: { host, guest }`,
 the snapshot bundle includes both halves of the overlay so a
 restore (same- or cross-host) can mount the same overlay without
@@ -3726,8 +3270,6 @@ consulting the host source dir.
 > `optional` **liveMounts?**: `object`[]
-Defined in: [vm-handle.ts:366](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L366)
 #273: live-share FUSE mounts (`liveMounts: [...]` at boot) the
 source VM had at snapshot time. Unlike `mountDisk`, no bytes are
 captured — `host` is the path on the host that was being live-
@@ -3762,8 +3304,6 @@ users remap with the override knob.
 ### ForkOptions
-Defined in: [vm-handle.ts:384](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L384)
 Fork = `vm.snapshot({ leaveRunning: true })` + `restore(...)` rolled
 into one call. The shape mirrors `RestoreOptions` (so anything you
 could pass to `restore()` works on a fork) plus two fork-only knobs:
@@ -3788,8 +3328,6 @@ instead of the boot/restore ones.
 > `optional` **outDir?**: `string`
-Defined in: [vm-handle.ts:391](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L391)
 If set, the snapshot bundle is written here and kept after the
 fork exits — re-restore from this path to spawn another sibling.
 If omitted, the bundle is written to a temp dir and removed
@@ -3799,8 +3337,6 @@ when the fork's VMM exits.
 > `optional` **tcpKeep?**: `boolean`
-Defined in: [vm-handle.ts:398](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L398)
 Default false: omit `--tcp-established` from the dump so the
 fork sees ECONNRESET on sockets the source had open. Set true
 to clone live TCP state into the fork (both VMs then race on
@@ -3810,8 +3346,6 @@ the same connection — only correct in narrow scenarios).
 > `optional` **name?**: `string`
-Defined in: [vm-handle.ts:403](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L403)
 Name for the forked VM. When omitted, restore()'s auto-naming
 kicks in: `<sourceName>/<fork.pid>`.
@@ -3823,8 +3357,6 @@ kicks in: `<sourceName>/<fork.pid>`.
 > `optional` **portForward?**: `object`[]
-Defined in: [vm-handle.ts:409](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L409)
 Host→guest port forwards for the fork. NOT inherited from the
 source — host ports are global and source + fork would race on
 the same bind. Pass explicitly when the fork needs forwards.
@@ -3849,8 +3381,6 @@ the same bind. Pass explicitly when the fork needs forwards.
 > `optional` **timeoutMs?**: `number`
-Defined in: [vm-handle.ts:418](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L418)
 Wall-clock ceiling for the restored fork's `wait()`. Defaults to
 `null` (forever) — forks are typically long-lived sibling VMs and
 interactive sessions can sit idle. Set a finite deadline if you
@@ -3866,8 +3396,6 @@ configurable here.
 > `optional` **onLog?**: [`OnLog`](#onlog)
-Defined in: [vm-handle.ts:423](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L423)
 Streaming log callback for the snapshot half. Same shape as
 `vm.snapshot({ onLog })`. Also used by the restore boot.
@@ -3879,8 +3407,6 @@ Streaming log callback for the snapshot half. Same shape as
 > `optional` **lazy?**: `boolean`
-Defined in: [vm-handle.ts:437](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L437)
 Opt into lazy-pages restore for the fork — vsock-FUSE-mounted
 bundle + `criu restore --lazy-pages`. Default false: the runtime
 packs the CRIU image into a tar on `/dev/vdb` and the guest does
@@ -3901,8 +3427,6 @@ phase 3); the runtime falls back to eager in that case.
 > `optional` **freeMemoryThreshold?**: `number`
-Defined in: [vm-handle.ts:453](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm-handle.ts#L453)
 Backpressure gate (#274). Fraction of host total memory that must
 be free before `vm.fork()` is allowed to proceed; if `MemAvailable`
 (Linux) / `vm_stat free+speculative+purgeable` (Darwin) drops below
@@ -3921,8 +3445,6 @@ edge).
 > `optional` **env?**: `Record`\<`string`, `string`\>
-Defined in: [vm/boot.ts:89](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L89)
 Env vars exposed to the guest workload. Packed into the synthesized
 `/machinen-config.json`. Distinct from `vmmEnv`, which only affects
 the host-side VMM process.
@@ -3935,8 +3457,6 @@ the host-side VMM process.
 > `optional` **guestCwd?**: `string`
-Defined in: [vm/boot.ts:101](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L101)
 Working directory for the guest cmd. Lands as `cwd` in the
 synthesized `/machinen-config.json`; `/init` calls `chdir()` to
 this path before exec'ing the cmd. Useful with `mount` /
@@ -3955,8 +3475,6 @@ image-baked `cwd` is overridden by this field when both are set.
 > `optional` **rootDisk?**: `string` \| `boolean`
-Defined in: [vm/boot.ts:146](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L146)
 Boot the guest with the rootfs on a virtio-blk device (`/dev/vda`)
 instead of inflating the whole rootfs into a RAM-backed tmpfs via
 the initramfs. See #114.
@@ -3985,8 +3503,6 @@ running the user cmd. Materialization needs `mke2fs` (or
 > `optional` **rootDiskSizeBytes?**: `number`
-Defined in: [vm/boot.ts:163](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L163)
 Absolute target size (bytes) for the materialized rootdisk image.
 Defaults to `max(2 GiB, treeBytes * 2.5)` — generous enough that
 boot-time `npm install -g <large package>` / `apt install ...`
@@ -4010,8 +3526,6 @@ image is taken as-is) or `rootDisk: false`. See #131.
 > `optional` **forkedFrom?**: `string`
-Defined in: [vm/boot.ts:176](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L176)
 Bookkeeping: absolute path to the snapshot bundle this VM was
 forked from. Set by `restore({ snapDir })`; visible in
 `machinen ls`. Plain `boot()` leaves it undefined.
@@ -4024,8 +3538,6 @@ forked from. Set by `restore({ snapDir })`; visible in
 > `optional` **mount?**: `object`
-Defined in: [vm/boot.ts:203](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L203)
 A single host directory exposed to the guest as a writable
 filesystem rooted under `/mnt/<guest>/`. Guest writes survive
 snapshot/restore but never leak to the host source dir.
@@ -4067,8 +3579,6 @@ relocation; same shape), #272 (this overlay relocation).
 > `optional` **mountDiskUpperSizeBytes?**: `number`
-Defined in: [vm/boot.ts:213](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L213)
 Absolute target size (bytes) for the per-VM ext4 RW upper of
 the `--mount` overlay (#272). Sparse, so unused capacity costs
 nothing on the host disk. Mirrors `rootDiskSizeBytes` (#131) —
@@ -4085,8 +3595,6 @@ Must be a positive multiple of 4096. Default 4 GiB.
 > `optional` **liveMounts?**: `object`[]
-Defined in: [vm/boot.ts:272](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L272)
 Host directories exposed to the guest as live-share FUSE mounts
 (#78). Unlike `mount` (copy-once into the boot rootfs), these stay
 connected to the host: the guest reads on demand via a vsock FUSE
@@ -4147,8 +3655,6 @@ inputs you don't need write-through on.
 > `optional` **binary?**: `string`
-Defined in: [vm/boot.ts:286](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L286)
 Absolute or cwd-relative path to the VMM binary. Optional —
 if omitted, `boot()` resolves it via `resolveVmmBinary()`.
@@ -4160,8 +3666,6 @@ if omitted, `boot()` resolves it via `resolveVmmBinary()`.
 > `optional` **cwd?**: `string`
-Defined in: [vm/boot.ts:288](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L288)
 Working directory for the VMM (for finding fixture files).
 ###### Inherited from
@@ -4172,8 +3676,6 @@ Working directory for the VMM (for finding fixture files).
 > `optional` **args?**: `string`[]
-Defined in: [vm/boot.ts:290](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L290)
 Extra argv for the VMM.
 ###### Inherited from
@@ -4184,8 +3686,6 @@ Extra argv for the VMM.
 > `optional` **kernel?**: `string`
-Defined in: [vm/boot.ts:292](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L292)
 Path to the guest kernel Image. Forwarded as `MACHINEN_KERNEL`.
 ###### Inherited from
@@ -4196,8 +3696,6 @@ Path to the guest kernel Image. Forwarded as `MACHINEN_KERNEL`.
 > `optional` **dtb?**: `string`
-Defined in: [vm/boot.ts:294](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L294)
 Path to the guest device-tree blob. Forwarded as `MACHINEN_DTB`.
 ###### Inherited from
@@ -4208,8 +3706,6 @@ Path to the guest device-tree blob. Forwarded as `MACHINEN_DTB`.
 > `optional` **memory?**: `number`
-Defined in: [vm/boot.ts:307](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L307)
 Guest RAM ceiling, in MiB (decimal integer; no unit suffixes). The
 VMM reads this as `MACHINEN_MEMORY` (#263 phase A). Defaults to
 `min(host_ram_mib / 2, 16384)` with a floor of 512 — sized for
@@ -4229,8 +3725,6 @@ need to set it.
 > `optional` **pdeathsig?**: `boolean`
-Defined in: [vm/boot.ts:318](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L318)
 Wrap the VMM through the parent-death shim so it dies with this
 runtime process. Default true — the right answer for the common
 "boot, do work, exit" CLI flow.
@@ -4248,8 +3742,6 @@ shim catches the CLI exit and SIGTERMs the fork mid-startup.
 > `optional` **vmmEnv?**: `Record`\<`string`, `string`\>
-Defined in: [vm/boot.ts:328](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L328)
 Env passed to the VMM process on the host side (not exposed to the
 guest workload). Mostly for dev/test flags like `MACHINEN_BOOT_TEST`.
@@ -4261,8 +3753,6 @@ guest workload). Mostly for dev/test flags like `MACHINEN_BOOT_TEST`.
 > `optional` **detached?**: `boolean`
-Defined in: [vm/boot.ts:361](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L361)
 Detach the VMM from the runtime parent so the parent can exit
 while the VM keeps running (issue #150 phase 2). When set, `boot()`
 blocks only until the guest produces its first console byte
@@ -4294,8 +3784,6 @@ the registry entry stays live, the vsock UDS is still listening.
 > `optional` **image?**: `string`
-Defined in: [vm/restore.ts:53](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/restore.ts#L53)
 Override the rootfs image used for the restore boot. Defaults
 to whatever caller passes through `image`-equivalent — but
 `restore()` always needs a base rootfs in the initramfs to
@@ -4310,16 +3798,12 @@ release rootfs path here.
 ### AttachOptions
-Defined in: [vm/attach.ts:18](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/attach.ts#L18)
 #### Properties
 ##### pid?
 > `optional` **pid?**: `number`
-Defined in: [vm/attach.ts:24](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/attach.ts#L24)
 Look up a VM by the host pid of its VMM process. Kernel-unique
 while alive; mutually exclusive with `name`. Exactly one of
 `pid` / `name` is required.
@@ -4328,16 +3812,12 @@ while alive; mutually exclusive with `name`. Exactly one of
 > `optional` **name?**: `string`
-Defined in: [vm/attach.ts:26](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/attach.ts#L26)
 Look up a VM by the name passed to `boot({ name })`.
 ##### onLog?
 > `optional` **onLog?**: [`OnLog`](#onlog)
-Defined in: [vm/attach.ts:33](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/attach.ts#L33)
 Streaming log callback — fires for every byte of output from execs
 made through the returned handle. See #83. Guest kernel console is
 not available on attach handles (it belongs to the process that
@@ -4347,16 +3827,12 @@ called `boot()`), so only `exec-stdout` / `exec-stderr` sources fire.
 ### BootOptions
-Defined in: [vm/boot.ts:70](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L70)
 #### Properties
 ##### image?
 > `optional` **image?**: `string`
-Defined in: [vm/boot.ts:77](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L77)
 Path to a rootfs tarball to boot from (e.g. the output of
 `provision()`, or `rootfs-debian-arm64.tar.gz` shipped in releases).
 Paired with `cmd` — both required, or neither (test-mode binary
@@ -4366,8 +3842,6 @@ boots and snapshot-only restores both skip initramfs packing).
 > `optional` **cmd?**: `string`[]
-Defined in: [vm/boot.ts:83](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L83)
 Command to run inside the guest. Packed into the synthesized
 `/machinen-config.json`. Paired with `image` — both required, or
 neither.
@@ -4376,8 +3850,6 @@ neither.
 > `optional` **env?**: `Record`\<`string`, `string`\>
-Defined in: [vm/boot.ts:89](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L89)
 Env vars exposed to the guest workload. Packed into the synthesized
 `/machinen-config.json`. Distinct from `vmmEnv`, which only affects
 the host-side VMM process.
@@ -4386,8 +3858,6 @@ the host-side VMM process.
 > `optional` **guestCwd?**: `string`
-Defined in: [vm/boot.ts:101](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L101)
 Working directory for the guest cmd. Lands as `cwd` in the
 synthesized `/machinen-config.json`; `/init` calls `chdir()` to
 this path before exec'ing the cmd. Useful with `mount` /
@@ -4402,8 +3872,6 @@ image-baked `cwd` is overridden by this field when both are set.
 > `optional` **snapshot?**: `string` \| `false`
-Defined in: [vm/boot.ts:124](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L124)
 Attach a scratch virtio-blk device (`/dev/vdb`, or `/dev/vda` on
 pre-#114 layouts) so this VM can be CRIU-snapshotted later via
 `vm.snapshot()`. Three forms:
@@ -4429,8 +3897,6 @@ pre-#114 layouts) so this VM can be CRIU-snapshotted later via
 > `optional` **rootDisk?**: `string` \| `boolean`
-Defined in: [vm/boot.ts:146](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L146)
 Boot the guest with the rootfs on a virtio-blk device (`/dev/vda`)
 instead of inflating the whole rootfs into a RAM-backed tmpfs via
 the initramfs. See #114.
@@ -4455,8 +3921,6 @@ running the user cmd. Materialization needs `mke2fs` (or
 > `optional` **rootDiskSizeBytes?**: `number`
-Defined in: [vm/boot.ts:163](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L163)
 Absolute target size (bytes) for the materialized rootdisk image.
 Defaults to `max(2 GiB, treeBytes * 2.5)` — generous enough that
 boot-time `npm install -g <large package>` / `apt install ...`
@@ -4476,8 +3940,6 @@ image is taken as-is) or `rootDisk: false`. See #131.
 > `optional` **name?**: `string`
-Defined in: [vm/boot.ts:170](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L170)
 Optional name to register this VM under (`attach({ name })`
 lookup key). Path-shaped strings ("worker/9012") are allowed.
 Names are unique while live — `boot()` throws
@@ -4487,8 +3949,6 @@ Names are unique while live — `boot()` throws
 > `optional` **forkedFrom?**: `string`
-Defined in: [vm/boot.ts:176](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L176)
 Bookkeeping: absolute path to the snapshot bundle this VM was
 forked from. Set by `restore({ snapDir })`; visible in
 `machinen ls`. Plain `boot()` leaves it undefined.
@@ -4497,8 +3957,6 @@ forked from. Set by `restore({ snapDir })`; visible in
 > `optional` **mount?**: `object`
-Defined in: [vm/boot.ts:203](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L203)
 A single host directory exposed to the guest as a writable
 filesystem rooted under `/mnt/<guest>/`. Guest writes survive
 snapshot/restore but never leak to the host source dir.
@@ -4536,8 +3994,6 @@ relocation; same shape), #272 (this overlay relocation).
 > `optional` **mountDiskUpperSizeBytes?**: `number`
-Defined in: [vm/boot.ts:213](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L213)
 Absolute target size (bytes) for the per-VM ext4 RW upper of
 the `--mount` overlay (#272). Sparse, so unused capacity costs
 nothing on the host disk. Mirrors `rootDiskSizeBytes` (#131) —
@@ -4550,8 +4006,6 @@ Must be a positive multiple of 4096. Default 4 GiB.
 > `optional` **liveMounts?**: `object`[]
-Defined in: [vm/boot.ts:272](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L272)
 Host directories exposed to the guest as live-share FUSE mounts
 (#78). Unlike `mount` (copy-once into the boot rootfs), these stay
 connected to the host: the guest reads on demand via a vsock FUSE
@@ -4608,8 +4062,6 @@ inputs you don't need write-through on.
 > `optional` **portForward?**: `object`[]
-Defined in: [vm/boot.ts:278](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L278)
 Host -> guest TCP port forwards installed via gvproxy's control
 API. Each entry maps `hostPort` on the host (bound to `hostAddr`,
 default `127.0.0.1`) to `guestPort` inside the guest.
@@ -4630,8 +4082,6 @@ default `127.0.0.1`) to `guestPort` inside the guest.
 > `optional` **binary?**: `string`
-Defined in: [vm/boot.ts:286](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L286)
 Absolute or cwd-relative path to the VMM binary. Optional —
 if omitted, `boot()` resolves it via `resolveVmmBinary()`.
@@ -4639,40 +4089,30 @@ if omitted, `boot()` resolves it via `resolveVmmBinary()`.
 > `optional` **cwd?**: `string`
-Defined in: [vm/boot.ts:288](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L288)
 Working directory for the VMM (for finding fixture files).
 ##### args?
 > `optional` **args?**: `string`[]
-Defined in: [vm/boot.ts:290](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L290)
 Extra argv for the VMM.
 ##### kernel?
 > `optional` **kernel?**: `string`
-Defined in: [vm/boot.ts:292](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L292)
 Path to the guest kernel Image. Forwarded as `MACHINEN_KERNEL`.
 ##### dtb?
 > `optional` **dtb?**: `string`
-Defined in: [vm/boot.ts:294](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L294)
 Path to the guest device-tree blob. Forwarded as `MACHINEN_DTB`.
 ##### memory?
 > `optional` **memory?**: `number`
-Defined in: [vm/boot.ts:307](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L307)
 Guest RAM ceiling, in MiB (decimal integer; no unit suffixes). The
 VMM reads this as `MACHINEN_MEMORY` (#263 phase A). Defaults to
 `min(host_ram_mib / 2, 16384)` with a floor of 512 — sized for
@@ -4688,8 +4128,6 @@ need to set it.
 > `optional` **pdeathsig?**: `boolean`
-Defined in: [vm/boot.ts:318](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L318)
 Wrap the VMM through the parent-death shim so it dies with this
 runtime process. Default true — the right answer for the common
 "boot, do work, exit" CLI flow.
@@ -4703,8 +4141,6 @@ shim catches the CLI exit and SIGTERMs the fork mid-startup.
 > `optional` **timeoutMs?**: `number`
-Defined in: [vm/boot.ts:323](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L323)
 Milliseconds to wait in `wait()` before giving up and rejecting.
 Defaults to 60s. Pass `null` to wait forever.
@@ -4712,8 +4148,6 @@ Defaults to 60s. Pass `null` to wait forever.
 > `optional` **vmmEnv?**: `Record`\<`string`, `string`\>
-Defined in: [vm/boot.ts:328](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L328)
 Env passed to the VMM process on the host side (not exposed to the
 guest workload). Mostly for dev/test flags like `MACHINEN_BOOT_TEST`.
@@ -4721,8 +4155,6 @@ guest workload). Mostly for dev/test flags like `MACHINEN_BOOT_TEST`.
 > `optional` **onLog?**: [`OnLog`](#onlog)
-Defined in: [vm/boot.ts:336](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L336)
 Streaming log callback — fires for every byte of guest output:
 kernel console (VMM stderr) and every exec invocation made through
 the returned handle. See `LogEvent.source` to tell them apart. See
@@ -4733,8 +4165,6 @@ the returned handle. See `LogEvent.source` to tell them apart. See
 > `optional` **detached?**: `boolean`
-Defined in: [vm/boot.ts:361](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L361)
 Detach the VMM from the runtime parent so the parent can exit
 while the VM keeps running (issue #150 phase 2). When set, `boot()`
 blocks only until the guest produces its first console byte
@@ -4762,8 +4192,6 @@ the registry entry stays live, the vsock UDS is still listening.
 ### RestoreOptions
-Defined in: [vm/restore.ts:40](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/restore.ts#L40)
 #### Extends
 - `Omit`\<[`BootOptions`](#bootoptions), `"snapshot"` \| `"image"` \| `"cmd"` \| `"name"`\>
@@ -4774,8 +4202,6 @@ Defined in: [vm/restore.ts:40](https://github.com/redwoodjs/machinen/blob/main/p
 > `optional` **env?**: `Record`\<`string`, `string`\>
-Defined in: [vm/boot.ts:89](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L89)
 Env vars exposed to the guest workload. Packed into the synthesized
 `/machinen-config.json`. Distinct from `vmmEnv`, which only affects
 the host-side VMM process.
@@ -4788,8 +4214,6 @@ the host-side VMM process.
 > `optional` **guestCwd?**: `string`
-Defined in: [vm/boot.ts:101](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L101)
 Working directory for the guest cmd. Lands as `cwd` in the
 synthesized `/machinen-config.json`; `/init` calls `chdir()` to
 this path before exec'ing the cmd. Useful with `mount` /
@@ -4808,8 +4232,6 @@ image-baked `cwd` is overridden by this field when both are set.
 > `optional` **rootDisk?**: `string` \| `boolean`
-Defined in: [vm/boot.ts:146](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L146)
 Boot the guest with the rootfs on a virtio-blk device (`/dev/vda`)
 instead of inflating the whole rootfs into a RAM-backed tmpfs via
 the initramfs. See #114.
@@ -4838,8 +4260,6 @@ running the user cmd. Materialization needs `mke2fs` (or
 > `optional` **rootDiskSizeBytes?**: `number`
-Defined in: [vm/boot.ts:163](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L163)
 Absolute target size (bytes) for the materialized rootdisk image.
 Defaults to `max(2 GiB, treeBytes * 2.5)` — generous enough that
 boot-time `npm install -g <large package>` / `apt install ...`
@@ -4863,8 +4283,6 @@ image is taken as-is) or `rootDisk: false`. See #131.
 > `optional` **forkedFrom?**: `string`
-Defined in: [vm/boot.ts:176](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L176)
 Bookkeeping: absolute path to the snapshot bundle this VM was
 forked from. Set by `restore({ snapDir })`; visible in
 `machinen ls`. Plain `boot()` leaves it undefined.
@@ -4877,8 +4295,6 @@ forked from. Set by `restore({ snapDir })`; visible in
 > `optional` **mount?**: `object`
-Defined in: [vm/boot.ts:203](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L203)
 A single host directory exposed to the guest as a writable
 filesystem rooted under `/mnt/<guest>/`. Guest writes survive
 snapshot/restore but never leak to the host source dir.
@@ -4920,8 +4336,6 @@ relocation; same shape), #272 (this overlay relocation).
 > `optional` **mountDiskUpperSizeBytes?**: `number`
-Defined in: [vm/boot.ts:213](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L213)
 Absolute target size (bytes) for the per-VM ext4 RW upper of
 the `--mount` overlay (#272). Sparse, so unused capacity costs
 nothing on the host disk. Mirrors `rootDiskSizeBytes` (#131) —
@@ -4938,8 +4352,6 @@ Must be a positive multiple of 4096. Default 4 GiB.
 > `optional` **liveMounts?**: `object`[]
-Defined in: [vm/boot.ts:272](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L272)
 Host directories exposed to the guest as live-share FUSE mounts
 (#78). Unlike `mount` (copy-once into the boot rootfs), these stay
 connected to the host: the guest reads on demand via a vsock FUSE
@@ -5000,8 +4412,6 @@ inputs you don't need write-through on.
 > `optional` **portForward?**: `object`[]
-Defined in: [vm/boot.ts:278](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L278)
 Host -> guest TCP port forwards installed via gvproxy's control
 API. Each entry maps `hostPort` on the host (bound to `hostAddr`,
 default `127.0.0.1`) to `guestPort` inside the guest.
@@ -5026,8 +4436,6 @@ default `127.0.0.1`) to `guestPort` inside the guest.
 > `optional` **binary?**: `string`
-Defined in: [vm/boot.ts:286](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L286)
 Absolute or cwd-relative path to the VMM binary. Optional —
 if omitted, `boot()` resolves it via `resolveVmmBinary()`.
@@ -5039,8 +4447,6 @@ if omitted, `boot()` resolves it via `resolveVmmBinary()`.
 > `optional` **cwd?**: `string`
-Defined in: [vm/boot.ts:288](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L288)
 Working directory for the VMM (for finding fixture files).
 ###### Inherited from
@@ -5051,8 +4457,6 @@ Working directory for the VMM (for finding fixture files).
 > `optional` **args?**: `string`[]
-Defined in: [vm/boot.ts:290](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L290)
 Extra argv for the VMM.
 ###### Inherited from
@@ -5063,8 +4467,6 @@ Extra argv for the VMM.
 > `optional` **kernel?**: `string`
-Defined in: [vm/boot.ts:292](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L292)
 Path to the guest kernel Image. Forwarded as `MACHINEN_KERNEL`.
 ###### Inherited from
@@ -5075,8 +4477,6 @@ Path to the guest kernel Image. Forwarded as `MACHINEN_KERNEL`.
 > `optional` **dtb?**: `string`
-Defined in: [vm/boot.ts:294](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L294)
 Path to the guest device-tree blob. Forwarded as `MACHINEN_DTB`.
 ###### Inherited from
@@ -5087,8 +4487,6 @@ Path to the guest device-tree blob. Forwarded as `MACHINEN_DTB`.
 > `optional` **memory?**: `number`
-Defined in: [vm/boot.ts:307](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L307)
 Guest RAM ceiling, in MiB (decimal integer; no unit suffixes). The
 VMM reads this as `MACHINEN_MEMORY` (#263 phase A). Defaults to
 `min(host_ram_mib / 2, 16384)` with a floor of 512 — sized for
@@ -5108,8 +4506,6 @@ need to set it.
 > `optional` **pdeathsig?**: `boolean`
-Defined in: [vm/boot.ts:318](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L318)
 Wrap the VMM through the parent-death shim so it dies with this
 runtime process. Default true — the right answer for the common
 "boot, do work, exit" CLI flow.
@@ -5127,8 +4523,6 @@ shim catches the CLI exit and SIGTERMs the fork mid-startup.
 > `optional` **timeoutMs?**: `number`
-Defined in: [vm/boot.ts:323](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L323)
 Milliseconds to wait in `wait()` before giving up and rejecting.
 Defaults to 60s. Pass `null` to wait forever.
@@ -5140,8 +4534,6 @@ Defaults to 60s. Pass `null` to wait forever.
 > `optional` **vmmEnv?**: `Record`\<`string`, `string`\>
-Defined in: [vm/boot.ts:328](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L328)
 Env passed to the VMM process on the host side (not exposed to the
 guest workload). Mostly for dev/test flags like `MACHINEN_BOOT_TEST`.
@@ -5153,8 +4545,6 @@ guest workload). Mostly for dev/test flags like `MACHINEN_BOOT_TEST`.
 > `optional` **onLog?**: [`OnLog`](#onlog)
-Defined in: [vm/boot.ts:336](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L336)
 Streaming log callback — fires for every byte of guest output:
 kernel console (VMM stderr) and every exec invocation made through
 the returned handle. See `LogEvent.source` to tell them apart. See
@@ -5169,8 +4559,6 @@ the returned handle. See `LogEvent.source` to tell them apart. See
 > `optional` **detached?**: `boolean`
-Defined in: [vm/boot.ts:361](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L361)
 Detach the VMM from the runtime parent so the parent can exit
 while the VM keeps running (issue #150 phase 2). When set, `boot()`
 blocks only until the guest produces its first console byte
@@ -5202,8 +4590,6 @@ the registry entry stays live, the vsock UDS is still listening.
 > **snapDir**: `string`
-Defined in: [vm/restore.ts:45](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/restore.ts#L45)
 Snapshot bundle directory produced by `vm.snapshot()`.
 Must contain `img/<crius>` and `meta.json`.
@@ -5211,8 +4597,6 @@ Must contain `img/<crius>` and `meta.json`.
 > `optional` **image?**: `string`
-Defined in: [vm/restore.ts:53](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/restore.ts#L53)
 Override the rootfs image used for the restore boot. Defaults
 to whatever caller passes through `image`-equivalent — but
 `restore()` always needs a base rootfs in the initramfs to
@@ -5223,8 +4607,6 @@ release rootfs path here.
 > `optional` **name?**: `string`
-Defined in: [vm/restore.ts:59](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/restore.ts#L59)
 Optional explicit name for the restored VM. When omitted, the
 fork is auto-named `<sourceName>/<pid>` after spawn so it stays
 unique under the source's namespace.
@@ -5233,8 +4615,6 @@ unique under the source's namespace.
 > `optional` **lazy?**: `boolean`
-Defined in: [vm/restore.ts:75](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/restore.ts#L75)
 Opt into lazy-pages restore — bundle is vsock-FUSE-mounted into
 the guest read-only and `criu restore --lazy-pages` faults pages
 on demand (#266). Default false: the runtime packs the CRIU
@@ -5253,24 +4633,18 @@ merge.
 ### VsockWinsizeOptions
-Defined in: [winsize.ts:30](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/winsize.ts#L30)
 #### Properties
 ##### timeoutMs?
 > `optional` **timeoutMs?**: `number`
-Defined in: [winsize.ts:32](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/winsize.ts#L32)
 How long to keep retrying the UDS connect. Default 10s.
 ##### retryMs?
 > `optional` **retryMs?**: `number`
-Defined in: [winsize.ts:34](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/winsize.ts#L34)
 Poll interval in ms while retrying. Default 250.
 ## Type Aliases
@@ -5279,24 +4653,18 @@ Poll interval in ms while retrying. Default 250.
 > **ErrorCode** = *typeof* [`ErrorCode`](#errorcode)\[keyof *typeof* [`ErrorCode`](#errorcode)\]
-Defined in: [errors.ts:23](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L23)
 ***
 ### LogEvent
 > **LogEvent** = [`ChunkLogEvent`](#chunklogevent) \| [`PhaseLogEvent`](#phaselogevent)
-Defined in: [log.ts:43](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/log.ts#L43)
 ***
 ### OnLog
 > **OnLog** = (`evt`) => `void`
-Defined in: [log.ts:45](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/log.ts#L45)
 #### Parameters
 ##### evt
@@ -5313,8 +4681,6 @@ Defined in: [log.ts:45](https://github.com/redwoodjs/machinen/blob/main/packages
 > **PidStatus** = `"alive"` \| `"dead"` \| `"recycled"`
-Defined in: [pid-validate.ts:44](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pid-validate.ts#L44)
 Result of `validatePid` — easy to switch on at the call site.
 ***
@@ -5323,8 +4689,6 @@ Result of `validatePid` — easy to switch on at the call site.
 > **ImageConfig** = `object`
-Defined in: [vm/image-config.ts:19](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/image-config.ts#L19)
 Shape of the optional `./machinen-config.json` baked into a rootfs
 tarball by `provision({ cmd, env })`. `boot()` reads it via
 `readImageConfig()` so callers don't need to re-pass `cmd`/`env` on
@@ -5337,36 +4701,26 @@ tarball-producing tool can pre-populate the lookup cache.
 > `optional` **cmd?**: `string`[]
-Defined in: [vm/image-config.ts:19](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/image-config.ts#L19)
 ##### env?
 > `optional` **env?**: `Record`\<`string`, `string`\>
-Defined in: [vm/image-config.ts:19](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/image-config.ts#L19)
 ##### cwd?
 > `optional` **cwd?**: `string`
-Defined in: [vm/image-config.ts:19](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/image-config.ts#L19)
 ## Variables
 ### STATS\_FILE\_SIZE
 > `const` **STATS\_FILE\_SIZE**: `24` = `24`
-Defined in: [balloon-stats.ts:21](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/balloon-stats.ts#L21)
 ***
 ### ErrorCode
 > `const` **ErrorCode**: `object`
-Defined in: [errors.ts:23](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L23)
 #### Type Declaration
 ##### BOOT\_VMM\_MISSING
@@ -5639,8 +4993,6 @@ Defined in: [errors.ts:23](https://github.com/redwoodjs/machinen/blob/main/packa
 > `const` **VsockExec**: `object`
-Defined in: [exec.ts:62](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/exec.ts#L62)
 #### Type Declaration
 ##### run()
@@ -5717,8 +5069,6 @@ surfacing — not a transient bring-up race like the `run()` path.
 > `const` **VsockFiles**: `object`
-Defined in: [files.ts:34](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/files.ts#L34)
 #### Type Declaration
 ##### push()
@@ -5786,8 +5136,6 @@ Stream a tar of `guestPath` from the guest and untar into
 > `const` **DEFAULT\_FREE\_MEMORY\_THRESHOLD**: `0.01` = `0.01`
-Defined in: [host-mem.ts:101](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/host-mem.ts#L101)
 Default fraction of host memory we require to be free before
 `vm.fork()` is allowed to proceed. The gate exists to keep a
 runaway script from OOM-killing arbitrary host processes — not
@@ -5808,8 +5156,6 @@ loops; anything looser stops being a meaningful gate.
 > `const` **VsockSecrets**: `object`
-Defined in: [secrets.ts:33](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/secrets.ts#L33)
 #### Type Declaration
 ##### send()
@@ -5847,8 +5193,6 @@ the guest agent skips entries that don't match.
 > `const` **\_internal**: `object`
-Defined in: [vm/index.ts:53](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/index.ts#L53)
 #### Type Declaration
 ##### collect
@@ -5893,8 +5237,6 @@ Defined in: [vm/index.ts:53](https://github.com/redwoodjs/machinen/blob/main/pac
 > **readBalloonStats**(`path`): [`BalloonCounters`](#ballooncounters)
-Defined in: [balloon-stats.ts:54](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/balloon-stats.ts#L54)
 Read the balloon-stats file at `path`. Returns `null` when:
   - the file is missing (VMM was launched without
     `MACHINEN_STATS_FILE`, or the path is stale),
@@ -5919,8 +5261,6 @@ Read the balloon-stats file at `path`. Returns `null` when:
 > **detachedLogRoot**(): `string`
-Defined in: [detached-log.ts:28](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/detached-log.ts#L28)
 Default directory for `<pid>.boot.log` snapshots. Honors
 `MACHINEN_DETACHED_LOG_DIR` so tests can scope writes to a tmpdir
 without scribbling under `$HOME`.
@@ -5935,8 +5275,6 @@ without scribbling under `$HOME`.
 > **bootSnapshotPath**(`pid`): `string`
-Defined in: [detached-log.ts:33](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/detached-log.ts#L33)
 Path the next snapshot for `pid` will be written to.
 #### Parameters
@@ -5955,8 +5293,6 @@ Path the next snapshot for `pid` will be written to.
 > **writeBootSnapshot**(`path`, `contents`): `boolean`
-Defined in: [detached-log.ts:44](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/detached-log.ts#L44)
 Atomically write the captured boot console to `path`. Best-effort:
 a failure here must not block the detach — the VMM is already
 running and the boot succeeded, so a missing snapshot is a
@@ -5983,8 +5319,6 @@ success, `false` if the write was skipped or failed.
 > **isMachinenError**(`err`, `code?`): `err is MachinenError`
-Defined in: [errors.ts:177](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L177)
 Narrowing type guard. Pass a specific `code` to check both identity
 and discriminant in one call.
@@ -6008,8 +5342,6 @@ and discriminant in one call.
 > **formatMachinenError**(`err`): `string`
-Defined in: [errors.ts:186](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/errors.ts#L186)
 Format a MachinenError for CLI stderr. Shows the code inline and walks
 the `cause` chain. Used by the CLI's unified `handleError`; exported so
 library callers can adopt the same format if they want to.
@@ -6030,8 +5362,6 @@ library callers can adopt the same format if they want to.
 > **runGc**(`opts?`): [`GcResult`](#gcresult)[]
-Defined in: [gc.ts:52](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/gc.ts#L52)
 Walk the registry; for each entry that's dead or pid-recycled,
 remove its cleanupPaths + bootLog + registry entry. Returns one
 result per entry processed (live entries are skipped silently).
@@ -6052,8 +5382,6 @@ result per entry processed (live entries are skipped silently).
 > **readHostFreeBytes**(): `Promise`\<`number`\>
-Defined in: [host-mem.ts:34](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/host-mem.ts#L34)
 Bytes of memory the OS reports as available right now. "Available"
 is the loose union the kernel exposes:
   - Linux  → /proc/meminfo MemAvailable (post-3.14 kernels — every
@@ -6077,8 +5405,6 @@ is the loose union the kernel exposes:
 > **readHostTotalBytes**(): `number`
-Defined in: [host-mem.ts:49](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/host-mem.ts#L49)
 Total physical memory in bytes. Thin wrapper over `os.totalmem()`
 exported alongside the free reader so tests and the backpressure
 check pull both numbers from the same module.
@@ -6093,8 +5419,6 @@ check pull both numbers from the same module.
 > **checkForkBackpressure**(`opts`): `Promise`\<`void`\>
-Defined in: [host-mem.ts:124](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/host-mem.ts#L124)
 Refuse a fork when the host is under memory pressure. Throws
 `BootError("FORK_MEMORY_BACKPRESSURE")` when free < total *
 threshold, modeled on the throw-immediately shape of #267's
@@ -6117,8 +5441,6 @@ retry policy.
 > **mkinitramfsBundle**(`opts`): `void`
-Defined in: [mkinitramfs.ts:365](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L365)
 #### Parameters
 ##### opts
@@ -6135,8 +5457,6 @@ Defined in: [mkinitramfs.ts:365](https://github.com/redwoodjs/machinen/blob/main
 > **mkinitramfsTinyBundle**(`opts`): `void`
-Defined in: [mkinitramfs.ts:539](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L539)
 Build the tiny initramfs used by every user-facing boot() (#119).
 Layout:
@@ -6173,8 +5493,6 @@ straight into /dev/vda without a finit_module pass.
 > **mkinitramfsRootfs**(`opts`): `void`
-Defined in: [mkinitramfs.ts:568](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L568)
 #### Parameters
 ##### opts
@@ -6191,8 +5509,6 @@ Defined in: [mkinitramfs.ts:568](https://github.com/redwoodjs/machinen/blob/main
 > **mkinitramfsMinimal**(`opts`): `void`
-Defined in: [mkinitramfs.ts:588](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L588)
 #### Parameters
 ##### opts
@@ -6209,8 +5525,6 @@ Defined in: [mkinitramfs.ts:588](https://github.com/redwoodjs/machinen/blob/main
 > **mkinitramfsWorkspace**(`opts`): `void`
-Defined in: [mkinitramfs.ts:614](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L614)
 #### Parameters
 ##### opts
@@ -6227,8 +5541,6 @@ Defined in: [mkinitramfs.ts:614](https://github.com/redwoodjs/machinen/blob/main
 > **mkinitramfsCli**(`argv`): `void`
-Defined in: [mkinitramfs.ts:796](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mkinitramfs.ts#L796)
 Invoked by the CLI shim at packages/microvm/test-fixtures/assets/mkinitramfs.ts.
 Kept argv-compatible with the old Python script so shell fixtures
 (smoke.sh, try.sh, handoff.sh) don't need deeper changes.
@@ -6249,8 +5561,6 @@ Kept argv-compatible with the old Python script so shell fixtures
 > **mountdiskImgCacheDir**(): `string`
-Defined in: [mountdisk-img.ts:78](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mountdisk-img.ts#L78)
 Default cache root: `~/.cache/machinen/mountdisk`.
 #### Returns
@@ -6263,8 +5573,6 @@ Default cache root: `~/.cache/machinen/mountdisk`.
 > **markMountDiskImageClean**(`imgPath`): `void`
-Defined in: [mountdisk-img.ts:94](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mountdisk-img.ts#L94)
 Mark a cached squashfs lower as "cleanly released," same idiom as
 `markRootfsImageClean()`. The lower is read-only inside the guest
 so corruption is unlikely, but a host crash mid-write during the
@@ -6288,8 +5596,6 @@ No-op when the image doesn't exist. Failures are swallowed.
 > **ensureMountDiskImage**(`hostAbs`, `opts?`): [`EnsureMountDiskImageResult`](#ensuremountdiskimageresult)
-Defined in: [mountdisk-img.ts:165](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mountdisk-img.ts#L165)
 Resolve `hostAbs` to a content-addressed squashfs lower image,
 materializing it on first call. Returns the absolute path to the
 cached `.sqfs`.
@@ -6335,8 +5641,6 @@ BOOT_MOUNTDISK_TOOL_MISSING when no mksquashfs
 > **ensureMountDiskUpper**(`opts?`): [`EnsureMountDiskUpperResult`](#ensuremountdiskupperresult)
-Defined in: [mountdisk-img.ts:308](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mountdisk-img.ts#L308)
 Materialize a per-VM ext4 RW upper image for the mount overlay.
 Each call returns a fresh sparse file in `tmpdir()` — the upper is
 specific to one VM and gets cleaned up alongside the per-boot
@@ -6370,8 +5674,6 @@ BOOT_MOUNTDISK_TOOL_MISSING when no mke2fs is
 > **resolveMksquashfs**(): `string`
-Defined in: [mountdisk-img.ts:355](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/mountdisk-img.ts#L355)
 Resolve the mksquashfs binary path using the same lookup order as
 `ensureMountDiskImage` itself: env override → bundled package →
 PATH → Homebrew opt prefix. Returns `undefined` when no binary is
@@ -6387,8 +5689,6 @@ available.
 > **validatePid**(`pid`, `expected`): [`PidStatus`](#pidstatus)
-Defined in: [pid-validate.ts:60](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pid-validate.ts#L60)
 Return whether the running process at `pid` is still our VMM.
 - `alive`     — pid is alive AND the exe + start-time match.
@@ -6428,8 +5728,6 @@ behaviour we had before.
 > **readHostRssBytes**(`pid`, `statsPath?`): `number`
-Defined in: [proc-rss.ts:47](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/proc-rss.ts#L47)
 RSS bytes for one pid, or null if not readable.
 #### Parameters
@@ -6452,8 +5750,6 @@ RSS bytes for one pid, or null if not readable.
 > **readHostRssBytesMulti**(`targets`): `Map`\<`number`, `number`\>
-Defined in: [proc-rss.ts:67](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/proc-rss.ts#L67)
 Bulk variant for `machinen ls`: one syscall (Linux) or one
 subprocess (Darwin) for every live VM, instead of N. Pids that
 can't be read are simply absent from the result map — caller
@@ -6475,8 +5771,6 @@ readonly (`number` \| [`RssTarget`](#rsstarget))[]
 > **resolveBaseRootfs**(`explicit?`, `cwd?`): `string`
-Defined in: [provision.ts:203](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L203)
 Resolve the path to the base rootfs tarball, in the same order
 `provision()` itself does:
@@ -6516,8 +5810,6 @@ PROVISION_BASE_NOT_FOUND | PROVISION_ASSETS_DIR_INVALID
 > **resolveBaseKernel**(`explicit?`, `cwd?`): `string`
-Defined in: [provision.ts:226](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L226)
 Resolve the path to the guest kernel Image. Same fallback chain as
 `resolveBaseRootfs`: explicit → `MACHINEN_ASSETS_DIR/Image-arm64` →
 `@machinen/cli` cache at `<base>/Image`. Exported for callers that
@@ -6548,8 +5840,6 @@ PROVISION_KERNEL_NOT_FOUND |
 > **resolveBaseDtb**(`explicit?`, `cwd?`): `string`
-Defined in: [provision.ts:248](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L248)
 Resolve the path to the guest DTB. Same fallback chain as
 `resolveBaseRootfs`: explicit → `MACHINEN_ASSETS_DIR/virt-arm64.dtb` →
 `@machinen/cli` cache at `<base>/virt.dtb`.
@@ -6579,8 +5869,6 @@ PROVISION_DTB_NOT_FOUND |
 > **provision**(`opts`): `Promise`\<[`ProvisionResult`](#provisionresult)\>
-Defined in: [provision.ts:328](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/provision.ts#L328)
 Boot the base rootfs, run the user install hook, and freeze the
 resulting filesystem state to a new tarball at `opts.out`.
@@ -6611,8 +5899,6 @@ see `boot()` — propagated from the inner boot
 > **bootPty**(`opts`): [`PtyVmHandle`](#ptyvmhandle)
-Defined in: [pty.ts:125](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/pty.ts#L125)
 Fork `binary` under a new pty pair. The returned handle is wire-
 compatible with `VmHandle` from index.ts so the existing Sandboxes
 registry can hold it.
@@ -6633,8 +5919,6 @@ registry can hold it.
 > **registryRoot**(): `string`
-Defined in: [registry.ts:192](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L192)
 Absolute path to the registry root. Honors `MACHINEN_REGISTRY_DIR`
 so tests can point at a scratch dir without stomping on real entries.
@@ -6648,8 +5932,6 @@ so tests can point at a scratch dir without stomping on real entries.
 > **list**(): [`RegistryEntry`](#registryentry)[]
-Defined in: [registry.ts:378](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/registry.ts#L378)
 List all registry entries whose pid is still alive. Prunes stale
 entries (pid no longer alive) and orphaned name pins as a side
 effect, so a crashed VMM doesn't leave a stuck record behind.
@@ -6664,8 +5946,6 @@ effect, so a crashed VMM doesn't leave a stuck record behind.
 > **rootfsImgCacheDir**(): `string`
-Defined in: [rootfs-img.ts:85](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/rootfs-img.ts#L85)
 Default cache root: `~/.cache/machinen/rootfs`.
 #### Returns
@@ -6678,8 +5958,6 @@ Default cache root: `~/.cache/machinen/rootfs`.
 > **markRootfsImageClean**(`imgPath`): `void`
-Defined in: [rootfs-img.ts:105](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/rootfs-img.ts#L105)
 Mark a cached rootfs image as "cleanly released" by writing the
 sentinel that `ensureRootfsImage()` looks for on the next boot.
 Called by the runtime after a VMM child exits without a signal —
@@ -6707,8 +5985,6 @@ but never wrong.
 > **ensureRootfsImage**(`tarPath`, `opts?`): `string`
-Defined in: [rootfs-img.ts:204](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/rootfs-img.ts#L204)
 Resolve `tarPath` to a cached ext4 `.img`, materializing it on first
 call. Returns the absolute path to the cached image.
@@ -6753,8 +6029,6 @@ ROOTFS_IMG_TOOL_MISSING (no e2fsprogs found)
 > **resolveMke2fs**(): `string`
-Defined in: [rootfs-img.ts:717](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/rootfs-img.ts#L717)
 Resolve the mke2fs binary path using the same lookup order as
 `ensureRootfsImage` itself: env override → bundled package → PATH →
 Homebrew keg-only. Returns `undefined` when no binary is available
@@ -6773,8 +6047,6 @@ resolve the binary through the same lookup chain.
 > **attach**(`opts`): `Promise`\<[`VmHandle`](#vmhandle)\>
-Defined in: [vm/attach.ts:49](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/attach.ts#L49)
 Reconnect to a running VM registered by an earlier `boot()` call
 (possibly from a different process). Returns a `VmHandle` that can
 `exec()`, `snapshot()`, and `kill()` the remote VM via the vsock
@@ -6805,8 +6077,6 @@ REGISTRY_VM_NOT_FOUND
 > **boot**(`opts?`): `Promise`\<[`VmHandle`](#vmhandle)\>
-Defined in: [vm/boot.ts:383](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/boot.ts#L383)
 Boot a microVM and return a handle to interact with it.
 #### Parameters
@@ -6836,8 +6106,6 @@ BOOT_VMM_MISSING | BOOT_VMM_PACKAGE_BROKEN |
 > **measureFirstByte**(`vm`): `Promise`\<`number`\>
-Defined in: [vm/fork.ts:138](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/fork.ts#L138)
 Time-to-first-output-byte for a boot. Useful for measuring how
 much the snapshot path is (or isn't) buying us.
@@ -6857,8 +6125,6 @@ much the snapshot path is (or isn't) buying us.
 > **autoSizeMemoryMib**(`hostBytes?`): `number`
-Defined in: [vm/helpers.ts:54](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/helpers.ts#L54)
 #### Parameters
 ##### hostBytes?
@@ -6875,8 +6141,6 @@ Defined in: [vm/helpers.ts:54](https://github.com/redwoodjs/machinen/blob/main/p
 > **resolveVmmBinary**(): `string`
-Defined in: [vm/helpers.ts:86](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/helpers.ts#L86)
 Locate the VMM binary using the same lookup order as `@machinen/cli`:
   1. `MACHINEN_VMM` env var (dev-mode override)
   2. `require.resolve("@machinen/vmm-<arch>-<os>")` → `binary` export
@@ -6897,8 +6161,6 @@ BOOT_VMM_MISSING | BOOT_VMM_PACKAGE_BROKEN
 > **buildWriteFileCmd**(`guestPath`, `contents`, `opts?`): `string`
-Defined in: [vm/helpers.ts:197](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/helpers.ts#L197)
 Build the shell pipeline that `vm.writeFile()` ships through the
 exec-agent. Stays single-line so it works against the legacy EXEC
 opcode too (no need for the EXEC2 multi-line frame, which only newer
@@ -6936,8 +6198,6 @@ Returns a single cmd string. For payloads that would exceed Linux's
 > **buildWriteFileCmds**(`guestPath`, `contents`, `opts?`): `string`[]
-Defined in: [vm/helpers.ts:239](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/helpers.ts#L239)
 Plan the cmd sequence `vm.writeFile()` issues for `contents`.
 Small payloads (base64 ≤ `WRITE_FILE_B64_CHUNK_BYTES`) collapse to a
 single cmd identical to `buildWriteFileCmd`'s output. Larger payloads
@@ -6968,8 +6228,6 @@ end, so no individual cmd line approaches `MAX_ARG_STRLEN`.
 > **warmImageConfigCache**(`imagePath`, `config`): `void`
-Defined in: [vm/image-config.ts:61](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/image-config.ts#L61)
 Pre-populate the image-config cache for a freshly-written tarball.
 Lets `provision()` (and other tarball producers) skip the slow
 `tar -xzOf` lookup that the next `boot()` would otherwise pay —
@@ -7001,8 +6259,6 @@ none was baked).
 > **restore**(`opts`): `Promise`\<[`VmHandle`](#vmhandle)\>
-Defined in: [vm/restore.ts:112](https://github.com/redwoodjs/machinen/blob/main/packages/runtime/src/vm/restore.ts#L112)
 Restore a microVM from a snapshot bundle produced by
 `vm.snapshot({ outDir })`. Reads the bundle's `meta.json` to
 recover the source name, tars the CRIU image directory into a