@outerlayer/cli 0.27.1 → 0.28.1

package/dist/{chunk-6VFH52MP.js → chunk-KVDVNOUK.js}

@@ -1,32 +1,33 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { readsJobState, READ_JOB_STATE_FORMATS, jobStateFormatOf } from './chunk-ZVB57WI6.js';
-import { senderPidfile } from './chunk-Y7ZCHBYB.js';
-import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-6KKM7VGZ.js';
-import { writeDockerClientConfig } from './chunk-XS3FDWSZ.js';
-import { installScrubContext } from './chunk-VS27BP3E.js';
-import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, resolveAgentUser, AgentUserError, runBuildSteps, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, senderAliveScript, helperFirecrackerNote, HelperRefusal, isLiteralAddress, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, copyJudgeTree } from './chunk-R7SGBXUD.js';
-import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, keptContextTree } from './chunk-WSYXLLA5.js';
-import { fdName } from './chunk-YB3CSYXX.js';
-import { readBranchHead, fetchCommit, diffBetween } from './chunk-HWDYLXHH.js';
+import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-N7WAEEIU.js';
+import { senderPidfile } from './chunk-QWAYRAUX.js';
+import { installScrubContext } from './chunk-2YSCKEL2.js';
+import { writeDockerClientConfig } from './chunk-ZTY7HHYB.js';
+import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, resolveAgentUser, AgentUserError, runBuildSteps, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, senderAliveScript, helperFirecrackerNote, HelperRefusal, isLiteralAddress, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, copyJudgeTree } from './chunk-IKXY47R5.js';
+import { waitForAgent, vmExecArgs } from './chunk-MHAR6S7B.js';
+import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-WWQVKFN6.js';
+import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, keptContextTree } from './chunk-USJZ2LDK.js';
+import { isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-55XLX5PA.js';
+import { readBranchHead, fetchCommit, diffBetween } from './chunk-T2QSWFSU.js';
 import { isSameProcess, startTimeOf } from './chunk-JBJTC3UU.js';
-import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, judgeCommand, JUDGE_MAX_TURNS, MAX_REPORT_BYTES, JUDGE_DIR, COMMAND_DIR } from './chunk-EX5MQYEF.js';
-import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-2BTFKNTR.js';
-import { waitForAgent, vmExecArgs } from './chunk-XBPUTQ7E.js';
-import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-GLUKDQS4.js';
-import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-55GNQPO6.js';
-import { planArtifactUpload } from './chunk-BUP5N3X6.js';
-import { isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-EPPIISRD.js';
+import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, judgeCommand, JUDGE_MAX_TURNS, MAX_REPORT_BYTES, JUDGE_DIR, COMMAND_DIR } from './chunk-VC5J7QPV.js';
 import { parseSize } from './chunk-YJLHUKYS.js';
-import { resolvePackRoot, MAINTAINED_SKILLS } from './chunk-7OUOLGUV.js';
-import { scrubText } from './chunk-QE3UQAHK.js';
+import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-SJZL5F3F.js';
+import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-X52PMPOM.js';
+import { planArtifactUpload } from './chunk-BUP5N3X6.js';
+import { scrubText } from './chunk-UHU7H57K.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
+import { signerFor } from './chunk-YL2VDSNF.js';
+import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath } from './chunk-5K3KB4YR.js';
+import { JOB_MOUNT, claudeCredential, repositoriesOf, primaryOf, buildEnvironment, CHECKOUT_DIR, parseIsolation, proxyEnvironment, withProxyWarningHidden, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, withHooksPath, startBuildServices, BUILT_IN_NAMES, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, RELAY_PORT, repositoryPath, lifecycleWorkdir, currentClaudeCredential, removedClaudeCredentialValues, checkEnvironment, EVAL_INPUT_DIR } from './chunk-HXAEQPZR.js';
+import { resolvePackRoot } from './chunk-JGML2VUN.js';
+import { MAINTAINED_SKILLS } from './chunk-CDDED64E.js';
+import { resolveVersion } from './chunk-RA3O54FC.js';
 import { parsePolicy } from './chunk-RKOTJQVG.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import { resolveVersion } from './chunk-RA3O54FC.js';
-import { signerFor } from './chunk-Y4OKEFAX.js';
-import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath } from './chunk-RHAGBUL5.js';
-import { JOB_MOUNT, claudeCredential, repositoriesOf, primaryOf, buildEnvironment, CHECKOUT_DIR, parseIsolation, proxyEnvironment, withProxyWarningHidden, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, withHooksPath, startBuildServices, BUILT_IN_NAMES, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, RELAY_PORT, repositoryPath, lifecycleWorkdir, checkEnvironment, EVAL_INPUT_DIR } from './chunk-2I3LIRZP.js';
+import { fdName } from './chunk-XD4ZCMA4.js';
 import { RUNNER_WORDED_REASONS, UNKNOWN_TRACKING_REASON } from './chunk-JGD5TWQ2.js';
 import { existsSync, statSync, appendFileSync, rmSync, mkdirSync, chmodSync, writeFileSync, accessSync, constants, openSync, readFileSync, closeSync, readdirSync, linkSync, lstatSync, fstatSync, readSync, realpathSync } from 'fs';
 import { join, isAbsolute, dirname, delimiter, sep } from 'path';
@@ -2420,7 +2421,8 @@ function mergeScrubConfig(a, b) {
 function releaseScrub(config, home) {
   const merged = mergeScrubConfig(config.scrub, readCloudConfig(home).scrub);
   const secrets = [...headerVariables(config.build?.destinations), ...CLAUDE_CREDENTIAL_VARIABLES].map((name) => process.env[name] ?? "");
-  return { literals: [...scrubList(merged?.literals), ...secrets], patterns: scrubList(merged?.patterns) };
+  const held = [currentClaudeCredential(process.env)?.value, ...removedClaudeCredentialValues()].filter((value) => value !== void 0);
+  return { literals: [...scrubList(merged?.literals), ...secrets, ...held], patterns: scrubList(merged?.patterns) };
 }
 function transcriptScrub(config, secrets) {
   const base = releaseScrub(config, homeFromEnv());

package/dist/{chunk-2F762IXY.js → chunk-LNIFYSNK.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-N4D5TMVU.js';
-import { resolveGatewayCredentials } from './chunk-BWH36FOC.js';
+import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-VU7ZJPIR.js';
+import { resolveRepoIdentity } from './chunk-UHU7H57K.js';
+import { resolveGatewayCredentials } from './chunk-7CK2TJFB.js';
 import { findGitDirs, readRepoConnection } from './chunk-BJ3KTMDH.js';
-import { resolveRepoIdentity } from './chunk-QE3UQAHK.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { openSync, fstatSync, readSync, closeSync } from 'fs';

package/dist/{chunk-XBPUTQ7E.js → chunk-MHAR6S7B.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { EXEC_PORT } from './chunk-GLUKDQS4.js';
+import { EXEC_PORT } from './chunk-WWQVKFN6.js';
 import { createConnection } from 'net';
 
 createRequire(import.meta.url);

package/dist/{chunk-7AQ5AM7U.js → chunk-MQHTM4YJ.js}

@@ -1,10 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { FD_SLOTS_PER_BUILD, FD_STORE_ENV } from './chunk-YB3CSYXX.js';
-import { builtinKind } from './chunk-EPPIISRD.js';
+import { builtinKind } from './chunk-55XLX5PA.js';
 import { parseSize } from './chunk-YJLHUKYS.js';
-import { runnerDir } from './chunk-RHAGBUL5.js';
-import { dirname } from 'path';
+import { runnerDir } from './chunk-5K3KB4YR.js';
+import { CLAUDE_CREDENTIAL_ID, CLAUDE_ENV_FILE, credentialLineIn, withoutCredentialLines } from './chunk-HXAEQPZR.js';
+import { FD_SLOTS_PER_BUILD, FD_STORE_ENV } from './chunk-XD4ZCMA4.js';
+import { existsSync, readFileSync, writeFileSync, chmodSync, renameSync } from 'fs';
+import { dirname, join } from 'path';
 import { spawnSync } from 'child_process';
 
 createRequire(import.meta.url);
@@ -16,6 +18,9 @@ var STOP_MARGIN_MINUTES = 10;
 function escapeUnitPath(path) {
   return path.replace(/%/g, "%%").replace(/ /g, "\\x20");
 }
+function credentialPath(path) {
+  return path.replace(/%/g, "%%");
+}
 function runnerUnit(unit) {
   const helperService = unit.helper === void 0 ? void 0 : `${unit.helper.unit}.service`;
   return `${UNIT_MARKER}
@@ -31,6 +36,7 @@ ExecStart=${unit.execStart}
 ${unit.helper === void 0 ? "" : `Environment=OUTERLAYER_HELPER_SOCKET=${unit.helper.socket}
 `}${unit.fdStore === void 0 ? "" : `Environment=${FD_STORE_ENV}=${unit.fdStore}
 `}EnvironmentFile=-${escapeUnitPath(`${unit.configDir}/runner.env`)}
+${unit.credential === "load" ? `LoadCredential=${CLAUDE_CREDENTIAL_ID}:${credentialPath(`${unit.configDir}/${CLAUDE_ENV_FILE}`)}` : `EnvironmentFile=-${escapeUnitPath(`${unit.configDir}/${CLAUDE_ENV_FILE}`)}`}
 Restart=on-failure
 RestartForceExitStatus=75
 RestartSec=30
@@ -68,7 +74,7 @@ function checkFit(input) {
   };
 }
 function withSystemd(conf) {
-  const lines = (conf ?? "").split("\n");
+  const lines = conf.split("\n");
   if (lines.at(-1) === "") lines.pop();
   const boot = lines.findIndex((line) => line.trim() === "[boot]");
   if (boot === -1) {
@@ -91,6 +97,54 @@ systemd=true
   return { text: `${lines.join("\n")}
 `, changed: true };
 }
+function windowsAccessOff() {
+  return [
+    { section: "interop", key: "enabled" },
+    { section: "interop", key: "appendWindowsPath" },
+    { section: "automount", key: "enabled" }
+  ];
+}
+function withWindowsAccessOff(conf) {
+  const lines = conf.split("\n");
+  if (lines.at(-1) === "") lines.pop();
+  let changed = false;
+  for (const { section, key } of windowsAccessOff()) {
+    const header = (line) => {
+      const matched = /^\s*\[\s*([^\]]*?)\s*\]/.exec(line);
+      return matched === null ? void 0 : matched[1].toLowerCase();
+    };
+    const first = lines.findIndex((line) => header(line) === section);
+    const wanted = `${key}=false`;
+    if (first === -1) {
+      if (lines.length > 0 && lines.at(-1) !== "") lines.push("");
+      lines.push(`[${section}]`, wanted);
+      changed = true;
+      continue;
+    }
+    let found = false;
+    let inSection = false;
+    for (const [at, line] of lines.entries()) {
+      const name = header(line);
+      if (name !== void 0) {
+        inSection = name === section;
+        continue;
+      }
+      const match = inSection ? /^\s*([^=#;\s][^=]*?)\s*=\s*(.*?)\s*$/.exec(line) : null;
+      if (match === null || match[1].toLowerCase() !== key.toLowerCase()) continue;
+      found = true;
+      if (match[2].toLowerCase() !== "false") {
+        lines[at] = wanted;
+        changed = true;
+      }
+    }
+    if (!found) {
+      lines.splice(first + 1, 0, wanted);
+      changed = true;
+    }
+  }
+  return { text: `${lines.join("\n")}
+`, changed };
+}
 function taskNameFor(unitName) {
   return unitName;
 }
@@ -119,6 +173,48 @@ function defaultRun(args) {
 
 // src/runner/service/install.ts
 var DEFAULT_UNIT_NAME = "outerlayer-runner";
+var LOAD_CREDENTIAL_SINCE = 247;
+var CREDENTIAL_FILE_MODE = 384;
+function prepareCredentialFile(configDir, lines) {
+  const claudePath = join(configDir, CLAUDE_ENV_FILE);
+  const runnerPath = join(configDir, "runner.env");
+  try {
+    const stored = existsSync(claudePath) ? readFileSync(claudePath, "utf8") : void 0;
+    if (stored !== void 0 && credentialLineIn(stored) !== void 0) return true;
+    const moved = existsSync(runnerPath) ? credentialLineIn(readFileSync(runnerPath, "utf8")) : void 0;
+    if (stored !== void 0 && moved === void 0) return true;
+    const kept = stored === void 0 || stored === "" ? "" : stored.endsWith("\n") ? stored : `${stored}
+`;
+    const temporary = `${claudePath}.${process.pid}.tmp`;
+    writeFileSync(temporary, moved === void 0 ? kept : `${kept}${moved}
+`, { mode: CREDENTIAL_FILE_MODE });
+    chmodSync(temporary, CREDENTIAL_FILE_MODE);
+    renameSync(temporary, claudePath);
+    return true;
+  } catch (err) {
+    lines.push(`${claudePath} could not be written (${err instanceof Error ? err.message : String(err)}), so nothing was changed`);
+    return false;
+  }
+}
+function finishCredentialMove(configDir, lines, reload) {
+  const runnerPath = join(configDir, "runner.env");
+  try {
+    if (!existsSync(runnerPath)) return;
+    if (credentialLineIn(readFileSync(join(configDir, CLAUDE_ENV_FILE), "utf8")) === void 0) return;
+    const text = withoutCredentialLines(readFileSync(runnerPath, "utf8"));
+    if (text === void 0) return;
+    if (reload !== void 0 && !reload()) {
+      lines.push(`the Claude credential is in ${join(configDir, CLAUDE_ENV_FILE)} and is also still in ${runnerPath}, because systemd may still hold the old unit: run \`sudo systemctl daemon-reload\`, then this command again`);
+      return;
+    }
+    const temporary = `${runnerPath}.${process.pid}.tmp`;
+    writeFileSync(temporary, text, { mode: CREDENTIAL_FILE_MODE });
+    chmodSync(temporary, CREDENTIAL_FILE_MODE);
+    renameSync(temporary, runnerPath);
+  } catch (err) {
+    lines.push(`the Claude credential is in ${join(configDir, CLAUDE_ENV_FILE)} and is also still in ${runnerPath}, which could not be changed (${err instanceof Error ? err.message : String(err)}): remove its line by hand`);
+  }
+}
 function unitPathFor(unitName = DEFAULT_UNIT_NAME) {
   return `/etc/systemd/system/${unitName}.service`;
 }
@@ -146,9 +242,13 @@ function installService(request, deps) {
   const say = deps.say ?? ((line) => void lines.push(line));
   const kind = builtinKind(request.hooks.provision);
   const own = kind === "own" || builtinKind(request.hooks.cleanup) === "own";
+  const configDir = dirname(request.configPath);
+  const version = deps.systemd.version();
+  const credential = (version ?? 0) >= LOAD_CREDENTIAL_SINCE ? "load" : "environment-file";
   const unit = runnerUnit({
     user: request.user,
-    configDir: dirname(request.configPath),
+    configDir,
+    credential,
     execStart: request.execStart,
     timeLimitMinutes: request.timeLimitMinutes,
     docker: kind === "container" || kind === "vm" || builtinKind(request.hooks.cleanup) === "container" || builtinKind(request.hooks.cleanup) === "vm",
@@ -165,7 +265,9 @@ function installService(request, deps) {
   }
   if (!deps.systemd.running()) {
     if (deps.platform === "wsl2" && deps.wslConf !== void 0) {
-      const merged = withSystemd(deps.wslConf.read());
+      const current = deps.wslConf.read();
+      if (current.kind === "unreadable") return outcome(false, "refused", [unreadableConf(current.message)]);
+      const merged = withSystemd(current.kind === "text" ? current.text : "");
       if (merged.changed) {
         say("sudo tee /etc/wsl.conf");
         const wslConf = deps.wslConf;
@@ -183,57 +285,104 @@ function installService(request, deps) {
     if (!fit.fits) return outcome(false, "refused", [`${fit.message}. Nothing is set up: lower runner.concurrency or runner.build.memory, then run this again`]);
   }
   const existing = deps.systemd.read(unitPath);
+  const fallbackNote = () => {
+    if (credential === "load") return;
+    lines.push(
+      `the Claude credential stays in the service's environment: ${version === void 0 ? "the systemd version could not be read" : `systemd ${version} is older than ${LOAD_CREDENTIAL_SINCE}`}, and LoadCredential= needs ${LOAD_CREDENTIAL_SINCE} or later, so the unit loads claude.env with EnvironmentFile=`
+    );
+  };
   const write = () => {
     say(`sudo tee ${unitPath}`);
     return attempt(lines, () => deps.systemd.write(unitPath, unit));
   };
   const running = () => deps.systemd.systemctl(["is-enabled", unitName]).status === 0 && deps.systemd.systemctl(["is-active", unitName]).status === 0;
-  const ensureTask = () => {
-    if (deps.platform === "wsl2") lines.push(...ensureLoginTask(deps, unitName));
+  const windowsSteps = () => {
+    if (deps.platform !== "wsl2") return true;
+    lines.push(...ensureLoginTask(deps, unitName));
+    return ensureWindowsAccessOff(deps, unitName, say, lines);
   };
   if (existing === unit) {
+    if (!prepareCredentialFile(configDir, lines)) return outcome(false, "refused", lines);
     const wasRunning = running();
     if (!wasRunning && !asRoot(deps, lines, say, ["enable", "--now", unitName])) return outcome(false, "refused", lines);
+    finishCredentialMove(configDir, lines, () => asRoot(deps, lines, say, ["daemon-reload"]));
     if (wasRunning && request.restart === true) {
-      ensureTask();
+      const windowsOk2 = windowsSteps();
+      const finish2 = (state) => windowsOk2 ? outcome(true, state, lines) : outcome(false, "refused", lines);
       if (deps.buildsRunning(runnerDir(request.configPath))) {
-        lines.push(`the service ${unitName} is current; a build is running, so it was not restarted and reads runner.env at its next restart`);
-        return outcome(true, "pending-restart", lines);
+        lines.push(`the service ${unitName} is current; a build is running, so it was not restarted and reads claude.env and runner.env at its next restart`);
+        fallbackNote();
+        return finish2("pending-restart");
       }
       if (!asRoot(deps, lines, say, ["restart", unitName])) return outcome(false, "refused", lines);
-      lines.push(`restarted the service ${unitName}, so it reads runner.env`);
-      return outcome(true, "updated", lines);
+      lines.push(`restarted the service ${unitName}, so it reads claude.env and runner.env`);
+      fallbackNote();
+      return finish2("updated");
     }
     lines.push(`the service ${unitName} is current: the unit already matches the config, so nothing was changed`);
-    ensureTask();
+    fallbackNote();
+    if (!windowsSteps()) return outcome(false, "refused", lines);
     return outcome(true, "current", lines);
   }
   if (existing === void 0) {
+    if (!prepareCredentialFile(configDir, lines)) return outcome(false, "refused", lines);
     if (!write()) return outcome(false, "refused", lines);
     if (!asRoot(deps, lines, say, ["daemon-reload"]) || !asRoot(deps, lines, say, ["enable", "--now", unitName])) {
       say(`sudo rm ${unitPath}`);
       if (attempt(lines, () => deps.systemd.remove(unitPath))) deps.systemd.systemctl(["daemon-reload"], { sudo: true });
       return outcome(false, "refused", lines);
     }
+    finishCredentialMove(configDir, lines);
     lines.push(`installed and started the service ${unitName}: the runner starts at boot and after a crash`);
-    ensureTask();
+    fallbackNote();
+    if (!windowsSteps()) return outcome(false, "refused", lines);
     return outcome(true, "installed", lines);
   }
   if (!existing.startsWith(UNIT_MARKER) && request.replace !== true) {
     lines.push(`${unitPath} differs from what this command writes, and it was not written by it, so it was left alone. Pass --replace to replace it, or \`--print\` to compare`);
     return outcome(false, "differs", lines);
   }
+  if (!prepareCredentialFile(configDir, lines)) return outcome(false, "refused", lines);
   if (!write()) return outcome(false, "refused", lines);
   if (!asRoot(deps, lines, say, ["daemon-reload"])) return outcome(false, "refused", lines);
   if ((!existing.startsWith(UNIT_MARKER) || !running()) && !asRoot(deps, lines, say, ["enable", "--now", unitName])) return outcome(false, "refused", lines);
-  ensureTask();
+  finishCredentialMove(configDir, lines);
+  fallbackNote();
+  const windowsOk = windowsSteps();
+  const finish = (state) => windowsOk ? outcome(true, state, lines) : outcome(false, "refused", lines);
   if (deps.buildsRunning(runnerDir(request.configPath))) {
     lines.push(`rewrote ${unitPath}; a build is running, so the service was not restarted and the new unit applies at the next restart`);
-    return outcome(true, "pending-restart", lines);
+    return finish("pending-restart");
   }
   if (!asRoot(deps, lines, say, ["restart", unitName])) return outcome(false, "refused", lines);
   lines.push(`rewrote ${unitPath} and restarted the service ${unitName}`);
-  return outcome(true, "updated", lines);
+  return finish("updated");
+}
+var WINDOWS_ACCESS_SETTINGS = "`[interop] enabled=false`, `[interop] appendWindowsPath=false` and `[automount] enabled=false`, each key under the section header it names";
+function unreadableConf(message) {
+  return `/etc/wsl.conf exists and could not be read (${message}), so it was not changed. Add ${WINDOWS_ACCESS_SETTINGS} to /etc/wsl.conf by hand, then restart the distribution`;
+}
+function ensureWindowsAccessOff(deps, unitName, say, lines) {
+  const host = deps.wslConf;
+  if (host === void 0) return true;
+  const current = host.read();
+  if (current.kind === "unreadable") {
+    lines.push(unreadableConf(current.message));
+    return false;
+  }
+  const merged = withWindowsAccessOff(current.kind === "text" ? current.text : "");
+  if (!merged.changed) return true;
+  say("sudo tee /etc/wsl.conf");
+  const written = attempt(lines, () => host.write(merged.text));
+  if (!written) {
+    lines.push(`/etc/wsl.conf was not changed. Add ${WINDOWS_ACCESS_SETTINGS} to /etc/wsl.conf by hand, then restart the distribution`);
+    return false;
+  }
+  const distro = deps.distro === void 0 || deps.distro === "" ? "<distribution>" : deps.distro;
+  lines.push(
+    `Windows interop and drive mounts stay on in this distribution until it restarts. A restart stops any running build. From Windows, run: \`wsl --terminate ${distro}\`, then \`schtasks /Run /TN ${taskNameFor(unitName)}\`${distro === "<distribution>" ? ", with the name `wsl -l` shows" : ""}`
+  );
+  return true;
 }
 function ensureLoginTask(deps, unitName) {
   const tasks = deps.tasks;
@@ -245,7 +394,9 @@ function ensureLoginTask(deps, unitName) {
   const command = taskCommand(deps.distro);
   const manual = `from Windows, run: schtasks /Create /F /TN ${name} /SC ONLOGON /TR "${command}"`;
   if (tasks === void 0 || !tasks.available()) {
-    return [`Windows interop is off, so the scheduled task that starts WSL2 at login was not made: ${manual}`];
+    return [
+      `schtasks.exe cannot start from this distribution, so the scheduled task ${name} is neither checked nor made. From Windows, run \`schtasks /Query /TN ${name}\` to check for it, and if it is not there, run: schtasks /Create /F /TN ${name} /SC ONLOGON /TR "${command}"`
+    ];
   }
   if (tasks.exists(name)) return [`the scheduled task ${name} already starts WSL2 at login`];
   const created = tasks.create(name, command);
@@ -258,7 +409,12 @@ function uninstallService(request, deps) {
   const say = deps.say ?? ((line) => void lines.push(line));
   const taskName = taskNameFor(unitName);
   const removeTask = () => {
-    if (deps.platform !== "wsl2" || deps.tasks === void 0 || !deps.tasks.available() || !deps.tasks.exists(taskName)) return;
+    if (deps.platform !== "wsl2") return;
+    if (deps.tasks === void 0 || !deps.tasks.available()) {
+      lines.push(`schtasks.exe cannot start from this distribution, so the scheduled task ${taskName} is neither checked nor removed: from Windows, run: schtasks /Delete /F /TN ${taskName}`);
+      return;
+    }
+    if (!deps.tasks.exists(taskName)) return;
     const removed = deps.tasks.remove(taskName);
     lines.push(removed.ok ? `removed the scheduled task ${taskName}` : `the scheduled task ${taskName} was not removed (${removed.message ?? "schtasks.exe failed"}): from Windows, run: schtasks /Delete /F /TN ${taskName}`);
   };

package/dist/{chunk-6KKM7VGZ.js → chunk-N7WAEEIU.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { BRIDGE_ADDRESS, TUNNEL_PORT, BRIDGE_CIDR } from './chunk-XS3FDWSZ.js';
+import { BRIDGE_ADDRESS, TUNNEL_PORT, BRIDGE_CIDR } from './chunk-ZTY7HHYB.js';
+import { EXEC_PORT } from './chunk-WWQVKFN6.js';
 import { startTimeOf } from './chunk-JBJTC3UU.js';
-import { EXEC_PORT } from './chunk-GLUKDQS4.js';
-import { RELAY_PORT } from './chunk-2I3LIRZP.js';
+import { RELAY_PORT } from './chunk-HXAEQPZR.js';
 import { spawn, spawnSync } from 'child_process';
 import { symlinkSync, lstatSync, writeFileSync, chmodSync, mkdirSync } from 'fs';
 

package/dist/{chunk-D7ECMB7B.js → chunk-NUHZV3A4.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { isSameProcess } from './chunk-JBJTC3UU.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-RHAGBUL5.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-5K3KB4YR.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, rmSync } from 'fs';
 import { dirname } from 'path';
 

package/dist/{chunk-MHX7YX7Y.js → chunk-P2RWZCV7.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { skillDir, FORMER_MAINTAINED_NAMES, isMaintainedCopy } from './chunk-7OUOLGUV.js';
+import { skillDir, FORMER_MAINTAINED_NAMES, isMaintainedCopy } from './chunk-JGML2VUN.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { emitTree, ALL_TARGET_IDS, classifyTree } from './chunk-RKOTJQVG.js';
 import { readFileSync, existsSync, unlinkSync, rmdirSync, readdirSync } from 'fs';