@outerlayer/cli 0.27.1 → 0.28.1

package/dist/cli-update-notice-4DLZ3655.js

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+export { PLAIN_VERSION, isCommandInTerminal, newerRecordedVersion, recordCliVersion, removeRecordedVersion, staleMachineCopiesContext, updateNoticeContext, updateNoticeLine, updateNoticeSkipped, updateNoticeSuppressed } from './chunk-5BHIBJDA.js';
+import './chunk-CDDED64E.js';
+import './chunk-CRB3POP4.js';
+import './chunk-VNVZDWO3.js';
+import './chunk-Z5GEFMRW.js';
+
+createRequire(import.meta.url);

package/dist/{command-V7B7GTPZ.js → command-3F6GY4CK.js}

@@ -1,56 +1,58 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { runRunnerInstall, launcherSummary, restartNote } from './chunk-QKIQ2R7F.js';
-import './chunk-QHH4OSD4.js';
-import { currentLink, execStartCommand } from './chunk-MATUHHN4.js';
-import { detectMachine } from './chunk-B7DJVG25.js';
-import { helperSocketPath, ensureFirecrackerAndJailer } from './chunk-R7SGBXUD.js';
-import './chunk-WSYXLLA5.js';
-import './chunk-M3MHHIUW.js';
+import { runRunnerInstall, launcherSummary, restartNote } from './chunk-ATJOFXTE.js';
+import './chunk-CTYSTE5C.js';
+import { currentLink, execStartCommand } from './chunk-GUXWQIEY.js';
+import { detectMachine } from './chunk-T57XUI6N.js';
+import { helperSocketPath, ensureFirecrackerAndJailer } from './chunk-IKXY47R5.js';
+import './chunk-MHAR6S7B.js';
+import './chunk-WWQVKFN6.js';
+import './chunk-USJZ2LDK.js';
+import './chunk-Z3ASAXVU.js';
 import './chunk-TQMI335S.js';
-import { DEFAULT_UNIT_NAME, installService, uninstallService, realTaskScheduler, UNIT_MARKER } from './chunk-7AQ5AM7U.js';
-import './chunk-YB3CSYXX.js';
+import { DEFAULT_UNIT_NAME, installService, uninstallService, realTaskScheduler, UNIT_MARKER } from './chunk-MQHTM4YJ.js';
+import { runnerVmOf, loadRunnerConfig, builtinKind } from './chunk-55XLX5PA.js';
+import './chunk-UXYLWVTQ.js';
+import { realLima } from './chunk-77MM5RYD.js';
 import { writeLaunchAgent, launchAgentPath } from './chunk-LF6MLJCY.js';
-import './chunk-HWDYLXHH.js';
-import './chunk-D7ECMB7B.js';
+import './chunk-T2QSWFSU.js';
+import './chunk-NUHZV3A4.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import { readJobFile } from './chunk-EX5MQYEF.js';
-import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, FIRECRACKER_BINARY_SHA256, JAILER_BINARY_SHA256, HOST_HELPER_SHA256, HOST_HELPER_BASE_URL, HOST_HELPER_ASSETS_VERSION, hostHelperPinned } from './chunk-2BTFKNTR.js';
-import './chunk-XBPUTQ7E.js';
-import './chunk-GLUKDQS4.js';
-import './chunk-55GNQPO6.js';
-import './chunk-2F762IXY.js';
-import './chunk-N4D5TMVU.js';
+import { readJobFile } from './chunk-VC5J7QPV.js';
+import './chunk-YJLHUKYS.js';
+import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, FIRECRACKER_BINARY_SHA256, JAILER_BINARY_SHA256, HOST_HELPER_SHA256, HOST_HELPER_BASE_URL, HOST_HELPER_ASSETS_VERSION, hostHelperPinned } from './chunk-SJZL5F3F.js';
+import './chunk-X52PMPOM.js';
+import './chunk-LNIFYSNK.js';
+import './chunk-VU7ZJPIR.js';
 import './chunk-BUP5N3X6.js';
-import './chunk-LOKSLO25.js';
-import './chunk-6BLXUD56.js';
+import './chunk-UHU7H57K.js';
+import './chunk-5B7BEQPR.js';
+import './chunk-HOU33DW5.js';
 import './chunk-G2JWZDFA.js';
-import { runnerVmOf, loadRunnerConfig, builtinKind } from './chunk-EPPIISRD.js';
-import './chunk-UXYLWVTQ.js';
-import './chunk-YJLHUKYS.js';
-import { realLima } from './chunk-77MM5RYD.js';
-import './chunk-BPKO76QR.js';
-import './chunk-MHX7YX7Y.js';
-import './chunk-BWH36FOC.js';
+import './chunk-ANPNT6PM.js';
+import './chunk-4XN5FRRJ.js';
+import './chunk-P2RWZCV7.js';
+import './chunk-7CK2TJFB.js';
+import './chunk-PJDQPF5N.js';
+import './chunk-YL2VDSNF.js';
+import { runnerDir } from './chunk-5K3KB4YR.js';
+import './chunk-HXAEQPZR.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-6TRNCUM4.js';
+import './chunk-FGF52V4V.js';
 import './chunk-HCVLP7XA.js';
 import './chunk-BJ3KTMDH.js';
-import './chunk-7OUOLGUV.js';
-import './chunk-QE3UQAHK.js';
-import './chunk-ANPNT6PM.js';
-import './chunk-PJDQPF5N.js';
+import './chunk-JGML2VUN.js';
+import './chunk-5BHIBJDA.js';
+import './chunk-CDDED64E.js';
+import './chunk-RA3O54FC.js';
 import './chunk-WZBHBH3J.js';
 import './chunk-CRB3POP4.js';
 import './chunk-YQR6E6OV.js';
 import './chunk-RKOTJQVG.js';
 import './chunk-QZBXLLTV.js';
 import './chunk-VNVZDWO3.js';
-import './chunk-RA3O54FC.js';
-import './chunk-Y4OKEFAX.js';
-import { runnerDir } from './chunk-RHAGBUL5.js';
-import './chunk-2I3LIRZP.js';
+import './chunk-XD4ZCMA4.js';
 import './chunk-JGD5TWQ2.js';
 import './chunk-Z5GEFMRW.js';
 import { userInfo, totalmem, tmpdir } from 'os';
@@ -304,6 +306,12 @@ function sudoWrite(path, text) {
 function realSystemd() {
   return {
     running: () => existsSync("/run/systemd/system"),
+    version: () => {
+      const result = spawnSync("systemctl", ["--version"], { encoding: "utf8" });
+      if (result.status !== 0) return void 0;
+      const major = /^systemd (\d+)/.exec((result.stdout ?? "").split("\n")[0] ?? "")?.[1];
+      return major === void 0 ? void 0 : Number(major);
+    },
     read: readText,
     write: sudoWrite,
     remove: (path) => {
@@ -315,8 +323,16 @@ function realSystemd() {
     }
   };
 }
+function readWslConf() {
+  try {
+    return { kind: "text", text: readFileSync(WSL_CONF, "utf8") };
+  } catch (err) {
+    if (err.code === "ENOENT") return { kind: "missing" };
+    return { kind: "unreadable", message: err instanceof Error ? err.message : String(err) };
+  }
+}
 function realWslConf() {
-  return { read: () => readText(WSL_CONF), write: (text) => sudoWrite(WSL_CONF, text) };
+  return { read: readWslConf, write: (text) => sudoWrite(WSL_CONF, text) };
 }
 function buildsRunningIn(runnerDirPath) {
   const jobs = join(runnerDirPath, "jobs");

package/dist/{config-TWS5VZEN.js → config-5QYIKYUP.js}

@@ -1,10 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DEFAULT_CHECK_TIME_LIMIT_MINUTES, DEFAULT_UPDATE_MAX_WAIT_HOURS, RunnerConfigError, builtinKind, checkHooks, defaultRunnerConfigPath, hasRunnerBlock, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, loadRunnerConfig, resolveBuild, resolveHousekeeping, runnerCredentialProblem, runnerVmOf } from './chunk-EPPIISRD.js';
+export { DEFAULT_CHECK_TIME_LIMIT_MINUTES, DEFAULT_UPDATE_MAX_WAIT_HOURS, RunnerConfigError, builtinKind, checkHooks, defaultRunnerConfigPath, hasRunnerBlock, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, loadRunnerConfig, resolveBuild, resolveHousekeeping, runnerCredentialProblem, runnerVmOf } from './chunk-55XLX5PA.js';
 import './chunk-UXYLWVTQ.js';
 import './chunk-YJLHUKYS.js';
+import './chunk-HXAEQPZR.js';
 import './chunk-VNVZDWO3.js';
-import './chunk-2I3LIRZP.js';
+import './chunk-XD4ZCMA4.js';
 import './chunk-JGD5TWQ2.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{connect-cmd-HGS7YPA2.js → connect-cmd-5TYAOK5M.js}

@@ -1,24 +1,27 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { AGENTS_LAYOUT_COMMIT_LINE, COMMIT_LINE, autoConnectedLine, commitLineFor, listText as factoryListText, slug as factorySlug, fetchFactories, hasUncommittedPolicy, promptOnTerminal, realConnectDeps, runConnect, runConnectCommand, saveFactoryConnection, selectFactory } from './chunk-N4D5TMVU.js';
+export { AGENTS_LAYOUT_COMMIT_LINE, COMMIT_LINE, autoConnectedLine, commitLineFor, listText as factoryListText, slug as factorySlug, fetchFactories, hasUncommittedPolicy, promptOnTerminal, realConnectDeps, runConnect, runConnectCommand, saveFactoryConnection, selectFactory } from './chunk-VU7ZJPIR.js';
 import './chunk-BUP5N3X6.js';
-import './chunk-LOKSLO25.js';
-import './chunk-6BLXUD56.js';
+import './chunk-UHU7H57K.js';
+import './chunk-5B7BEQPR.js';
+import './chunk-HOU33DW5.js';
 import './chunk-G2JWZDFA.js';
-import './chunk-BWH36FOC.js';
-import './chunk-BJ3KTMDH.js';
-import './chunk-7OUOLGUV.js';
-import './chunk-QE3UQAHK.js';
 import './chunk-ANPNT6PM.js';
+import './chunk-7CK2TJFB.js';
 import './chunk-PJDQPF5N.js';
+import './chunk-YL2VDSNF.js';
+import './chunk-5K3KB4YR.js';
+import './chunk-HXAEQPZR.js';
+import './chunk-BJ3KTMDH.js';
+import './chunk-JGML2VUN.js';
+import './chunk-5BHIBJDA.js';
+import './chunk-CDDED64E.js';
+import './chunk-RA3O54FC.js';
 import './chunk-CRB3POP4.js';
 import './chunk-RKOTJQVG.js';
 import './chunk-QZBXLLTV.js';
 import './chunk-VNVZDWO3.js';
-import './chunk-RA3O54FC.js';
-import './chunk-Y4OKEFAX.js';
-import './chunk-RHAGBUL5.js';
-import './chunk-2I3LIRZP.js';
+import './chunk-XD4ZCMA4.js';
 import './chunk-JGD5TWQ2.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{container-start-FHB2VDC4.js → container-start-P7O5XGOB.js}

@@ -1,54 +1,55 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RunnerInitError, prepareRunnerInit, writeRunnerInit } from './chunk-64GMBWAK.js';
-import { detectMachine, supportsContainerBuilds, describeMachineDocker } from './chunk-B7DJVG25.js';
-import { MIN_ENGINE_MAJOR } from './chunk-R7SGBXUD.js';
-import './chunk-WSYXLLA5.js';
-import { runnerImageVersion, IMAGE_VERSION_VARIABLE } from './chunk-M3MHHIUW.js';
+import { RunnerInitError, prepareRunnerInit, writeRunnerInit } from './chunk-R7SS5RLJ.js';
+import { detectMachine, supportsContainerBuilds, describeMachineDocker } from './chunk-T57XUI6N.js';
+import { MIN_ENGINE_MAJOR } from './chunk-IKXY47R5.js';
+import './chunk-MHAR6S7B.js';
+import './chunk-WWQVKFN6.js';
+import './chunk-USJZ2LDK.js';
+import { runnerImageVersion, IMAGE_VERSION_VARIABLE } from './chunk-Z3ASAXVU.js';
 import './chunk-TQMI335S.js';
-import { isAgentName, AGENT_COMMANDS } from './chunk-GFUE5TKO.js';
-import './chunk-7AQ5AM7U.js';
-import './chunk-YB3CSYXX.js';
-import './chunk-STSLH5EJ.js';
-import './chunk-HWDYLXHH.js';
-import './chunk-D7ECMB7B.js';
+import { isAgentName, AGENT_COMMANDS } from './chunk-F4FA3ZUT.js';
+import './chunk-MQHTM4YJ.js';
+import './chunk-55XLX5PA.js';
+import './chunk-UXYLWVTQ.js';
+import './chunk-T2QSWFSU.js';
+import './chunk-NUHZV3A4.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-EX5MQYEF.js';
-import './chunk-2BTFKNTR.js';
-import './chunk-XBPUTQ7E.js';
-import './chunk-GLUKDQS4.js';
-import './chunk-55GNQPO6.js';
-import './chunk-2F762IXY.js';
-import './chunk-N4D5TMVU.js';
+import './chunk-VC5J7QPV.js';
+import './chunk-YJLHUKYS.js';
+import './chunk-SJZL5F3F.js';
+import './chunk-X52PMPOM.js';
+import './chunk-LNIFYSNK.js';
+import './chunk-VU7ZJPIR.js';
 import './chunk-BUP5N3X6.js';
-import './chunk-LOKSLO25.js';
-import './chunk-6BLXUD56.js';
+import './chunk-UHU7H57K.js';
+import './chunk-5B7BEQPR.js';
+import './chunk-HOU33DW5.js';
 import './chunk-G2JWZDFA.js';
-import './chunk-EPPIISRD.js';
-import './chunk-UXYLWVTQ.js';
-import './chunk-YJLHUKYS.js';
-import './chunk-BPKO76QR.js';
-import './chunk-MHX7YX7Y.js';
-import './chunk-BWH36FOC.js';
+import './chunk-ANPNT6PM.js';
+import './chunk-4XN5FRRJ.js';
+import './chunk-P2RWZCV7.js';
+import './chunk-7CK2TJFB.js';
+import './chunk-PJDQPF5N.js';
+import './chunk-YL2VDSNF.js';
+import './chunk-5K3KB4YR.js';
+import { CLAUDE_CREDENTIAL_VARIABLES, readClaudeCredential } from './chunk-HXAEQPZR.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-6TRNCUM4.js';
+import './chunk-FGF52V4V.js';
 import './chunk-HCVLP7XA.js';
 import './chunk-BJ3KTMDH.js';
-import './chunk-7OUOLGUV.js';
-import './chunk-QE3UQAHK.js';
-import './chunk-ANPNT6PM.js';
-import './chunk-PJDQPF5N.js';
+import './chunk-JGML2VUN.js';
+import './chunk-5BHIBJDA.js';
+import './chunk-CDDED64E.js';
+import './chunk-RA3O54FC.js';
 import './chunk-WZBHBH3J.js';
 import './chunk-CRB3POP4.js';
 import './chunk-YQR6E6OV.js';
 import './chunk-RKOTJQVG.js';
 import './chunk-QZBXLLTV.js';
 import './chunk-VNVZDWO3.js';
-import './chunk-RA3O54FC.js';
-import './chunk-Y4OKEFAX.js';
-import './chunk-RHAGBUL5.js';
-import { CLAUDE_CREDENTIAL_VARIABLES } from './chunk-2I3LIRZP.js';
+import './chunk-XD4ZCMA4.js';
 import './chunk-JGD5TWQ2.js';
 import './chunk-Z5GEFMRW.js';
 import { existsSync, readFileSync } from 'fs';
@@ -122,7 +123,7 @@ async function containerStart(deps) {
   if (!isAgentName(agent)) {
     return refuse(`OUTERLAYER_AGENT is ${agent}, and the image writes commands for ${Object.keys(AGENT_COMMANDS).join(", ")} only. Leave it unset to use claude.`);
   }
-  if (!CLAUDE_CREDENTIAL_VARIABLES.some((name) => set(env, name) !== void 0)) {
+  if (!CLAUDE_CREDENTIAL_VARIABLES.some((name) => set(env, name) !== void 0) && readClaudeCredential(env) === void 0) {
     missing.push(`one Claude credential: ${CLAUDE_CREDENTIAL_VARIABLES.join(", ")}`);
   }
   if (missing.length > 0) {

package/dist/{control-plane-launch-DBQA3KLJ.js → control-plane-launch-FZMD4MXX.js}

@@ -1,14 +1,20 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { parseOwnerRepo, lookupGoverningSource, defaultGitRunner, materializeContext } from './chunk-BPKO76QR.js';
-import './chunk-MHX7YX7Y.js';
-import { resolveGatewayCredentials, defaultFetch } from './chunk-BWH36FOC.js';
+import { parseOwnerRepo, lookupGoverningSource, defaultGitRunner, materializeContext } from './chunk-4XN5FRRJ.js';
+import './chunk-P2RWZCV7.js';
+import { resolveGatewayCredentials, defaultFetch } from './chunk-7CK2TJFB.js';
+import './chunk-PJDQPF5N.js';
+import './chunk-YL2VDSNF.js';
+import './chunk-5K3KB4YR.js';
+import './chunk-HXAEQPZR.js';
 import './chunk-ZJSNLVCE.js';
-import { layoutRefusalMessage, unsupportedLayout, sharedSkillNames, skillConflictMessage, composeDelivery } from './chunk-6TRNCUM4.js';
+import { layoutRefusalMessage, unsupportedLayout, sharedSkillNames, skillConflictMessage, composeDelivery } from './chunk-FGF52V4V.js';
 import './chunk-HCVLP7XA.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
-import './chunk-7OUOLGUV.js';
-import './chunk-PJDQPF5N.js';
+import './chunk-JGML2VUN.js';
+import './chunk-5BHIBJDA.js';
+import './chunk-CDDED64E.js';
+import './chunk-RA3O54FC.js';
 import './chunk-CRB3POP4.js';
 import { cleanupEarlierCopies } from './chunk-VWFOKRYS.js';
 import { readSourceCache, readDeliveryRecord, isSourceCacheFresh, writeDeliveryRecord, writeSourceCache, SOURCE_CACHE_TTL_SUCCESS_MS, clearDegraded, removeLauncherDeliveryRecord } from './chunk-YQR6E6OV.js';
@@ -16,10 +22,7 @@ import './chunk-TUSYOL2O.js';
 import './chunk-RKOTJQVG.js';
 import './chunk-QZBXLLTV.js';
 import './chunk-VNVZDWO3.js';
-import './chunk-RA3O54FC.js';
-import './chunk-Y4OKEFAX.js';
-import './chunk-RHAGBUL5.js';
-import './chunk-2I3LIRZP.js';
+import './chunk-XD4ZCMA4.js';
 import './chunk-JGD5TWQ2.js';
 import './chunk-Z5GEFMRW.js';
 import { execFileSync } from 'child_process';

package/dist/{dist-QPHZE47F.js → dist-JFVKLUHL.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { CaptureDaemon, PRICE_TABLE_SOURCE, SECRET_PATTERNS, SOURCE_ADAPTERS, SUPPORTED_VERSIONS, StatuslineAggregator, WARNING_CODES, claudeCodeAdapter, codexAdapter, codexSessionIdFromPath, compareVersions, completePrefix, computeStatuslineState, costOfUsage, cursorAdapter, cursorChatIdFromPath, defaultCodexSessionsDir, defaultCursorChatsDir, defaultCursorProjectsDir, defaultProjectsDir, defaultRawDir, enrichSessionRepo, findCodexRollouts, findCursorChats, findTranscripts, isNewerThanSupported, isPriceKnown, normalizeErrorSignature, normalizeRemote, parseCodexRollout, parseCursorChat, parseTranscript, readStatuslineState, readSyncWatermarkMs, remoteLookupFailed, resolvePrice, resolveRepoIdentity, rootChildIds, scanAll, scrubDeep, scrubText, sessionIdFromPath, setCustomScrubbers, setLocalIdentity, setRepoRoot, statuslineStatePath, tailTranscript, workspacesByHash, writeStatuslineState } from './chunk-QE3UQAHK.js';
+export { CaptureDaemon, PRICE_TABLE_SOURCE, SECRET_PATTERNS, SOURCE_ADAPTERS, SUPPORTED_VERSIONS, StatuslineAggregator, WARNING_CODES, claudeCodeAdapter, codexAdapter, codexSessionIdFromPath, compareVersions, completePrefix, computeStatuslineState, costOfUsage, cursorAdapter, cursorChatIdFromPath, defaultCodexSessionsDir, defaultCursorChatsDir, defaultCursorProjectsDir, defaultProjectsDir, defaultRawDir, enrichSessionRepo, findCodexRollouts, findCursorChats, findTranscripts, isNewerThanSupported, isPriceKnown, normalizeErrorSignature, normalizeRemote, parseCodexRollout, parseCursorChat, parseTranscript, readStatuslineState, readSyncWatermarkMs, remoteLookupFailed, resolvePrice, resolveRepoIdentity, rootChildIds, scanAll, scrubDeep, scrubText, sessionIdFromPath, setCustomScrubbers, setLocalIdentity, setRepoRoot, statuslineStatePath, tailTranscript, workspacesByHash, writeStatuslineState } from './chunk-UHU7H57K.js';
 import './chunk-QZBXLLTV.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{docker-YT6Z3LXI.js → docker-ZTC4EIU4.js}

@@ -1,13 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { childEnvironment, createDockerHost, spawnRun } from './chunk-EX5MQYEF.js';
-import './chunk-2BTFKNTR.js';
+export { childEnvironment, createDockerHost, spawnRun } from './chunk-VC5J7QPV.js';
 import './chunk-YJLHUKYS.js';
-import './chunk-QE3UQAHK.js';
+import './chunk-SJZL5F3F.js';
+import './chunk-UHU7H57K.js';
+import './chunk-YL2VDSNF.js';
+import './chunk-5K3KB4YR.js';
+import './chunk-HXAEQPZR.js';
 import './chunk-QZBXLLTV.js';
-import './chunk-Y4OKEFAX.js';
-import './chunk-RHAGBUL5.js';
-import './chunk-2I3LIRZP.js';
+import './chunk-XD4ZCMA4.js';
 import './chunk-JGD5TWQ2.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{doctor-Y4NCNSJM.js → doctor-QPQDF7FB.js}

@@ -1,65 +1,66 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { launcherCheck } from './chunk-QHH4OSD4.js';
-import { needsClaudeCredential, claudeCredentialCheck, missingPermissionOf, missingPermissionFix } from './chunk-ZFBJUOYT.js';
-import './chunk-MATUHHN4.js';
+import { launcherCheck } from './chunk-CTYSTE5C.js';
+import { needsClaudeCredential, claudeCredentialCheck, missingPermissionOf, missingPermissionFix } from './chunk-W3FSGH2M.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
+import './chunk-GUXWQIEY.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import './chunk-64GMBWAK.js';
-import { detectMachine, supportsContainerBuilds, describeMachineDocker, reachDockerStep, supportsMicroVmBuilds, microVmArchSupported, microVmAssetsPinned } from './chunk-B7DJVG25.js';
-import { MIN_ENGINE_MAJOR, helperFirecrackerNote, probeHelper, helperSocketPath } from './chunk-R7SGBXUD.js';
-import './chunk-WSYXLLA5.js';
-import { runnerImageVersion, imageAdvice, readUpdateStatus, imageTag, pullInstruction } from './chunk-M3MHHIUW.js';
+import './chunk-R7SS5RLJ.js';
+import { detectMachine, supportsContainerBuilds, describeMachineDocker, reachDockerStep, supportsMicroVmBuilds, microVmArchSupported, microVmAssetsPinned } from './chunk-T57XUI6N.js';
+import { MIN_ENGINE_MAJOR, helperFirecrackerNote, probeHelper, helperSocketPath } from './chunk-IKXY47R5.js';
+import './chunk-MHAR6S7B.js';
+import './chunk-WWQVKFN6.js';
+import './chunk-USJZ2LDK.js';
+import { runnerImageVersion, imageAdvice, readUpdateStatus, imageTag, pullInstruction } from './chunk-Z3ASAXVU.js';
 import './chunk-TQMI335S.js';
-import './chunk-GFUE5TKO.js';
-import './chunk-7AQ5AM7U.js';
-import './chunk-YB3CSYXX.js';
-import './chunk-STSLH5EJ.js';
-import './chunk-HWDYLXHH.js';
-import './chunk-D7ECMB7B.js';
+import './chunk-F4FA3ZUT.js';
+import './chunk-MQHTM4YJ.js';
+import { builtinKind } from './chunk-55XLX5PA.js';
+import { allowHostProblem, MAX_ALLOW_HOSTS } from './chunk-UXYLWVTQ.js';
+import './chunk-T2QSWFSU.js';
+import './chunk-NUHZV3A4.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import { resolveDevcontainerCli, buildxState, spawnRun } from './chunk-EX5MQYEF.js';
-import { locateRecipe, assertBuildable, readRecipe, RecipeError, FIRECRACKER_VERSION, CLAUDE_CODE_VERSION } from './chunk-2BTFKNTR.js';
-import './chunk-XBPUTQ7E.js';
-import './chunk-GLUKDQS4.js';
-import { getJson, WorkCommandError, signatureRefusalMessage } from './chunk-55GNQPO6.js';
-import './chunk-2F762IXY.js';
-import './chunk-N4D5TMVU.js';
+import { resolveDevcontainerCli, buildxState, spawnRun } from './chunk-VC5J7QPV.js';
+import { parseSize } from './chunk-YJLHUKYS.js';
+import { locateRecipe, assertBuildable, readRecipe, RecipeError, FIRECRACKER_VERSION, CLAUDE_CODE_VERSION } from './chunk-SJZL5F3F.js';
+import { getJson, WorkCommandError, signatureRefusalMessage } from './chunk-X52PMPOM.js';
+import './chunk-LNIFYSNK.js';
+import './chunk-VU7ZJPIR.js';
 import './chunk-BUP5N3X6.js';
-import './chunk-LOKSLO25.js';
-import './chunk-6BLXUD56.js';
+import { compareVersions } from './chunk-UHU7H57K.js';
+import './chunk-5B7BEQPR.js';
+import './chunk-HOU33DW5.js';
 import './chunk-G2JWZDFA.js';
-import { builtinKind } from './chunk-EPPIISRD.js';
-import { allowHostProblem, MAX_ALLOW_HOSTS } from './chunk-UXYLWVTQ.js';
-import { parseSize } from './chunk-YJLHUKYS.js';
-import { defaultGitRunner } from './chunk-BPKO76QR.js';
-import './chunk-MHX7YX7Y.js';
-import { defaultFetch } from './chunk-BWH36FOC.js';
+import './chunk-ANPNT6PM.js';
+import { defaultGitRunner } from './chunk-4XN5FRRJ.js';
+import './chunk-P2RWZCV7.js';
+import { defaultFetch } from './chunk-7CK2TJFB.js';
+import './chunk-PJDQPF5N.js';
+import { loadHostKey } from './chunk-YL2VDSNF.js';
+import { runnerDir, buildsDir, hostKeyPath, jobsDir } from './chunk-5K3KB4YR.js';
+import './chunk-HXAEQPZR.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-6TRNCUM4.js';
+import './chunk-FGF52V4V.js';
 import './chunk-HCVLP7XA.js';
 import './chunk-BJ3KTMDH.js';
-import './chunk-7OUOLGUV.js';
-import { compareVersions } from './chunk-QE3UQAHK.js';
-import './chunk-ANPNT6PM.js';
-import './chunk-PJDQPF5N.js';
+import './chunk-JGML2VUN.js';
+import './chunk-5BHIBJDA.js';
+import './chunk-CDDED64E.js';
+import './chunk-RA3O54FC.js';
 import './chunk-WZBHBH3J.js';
 import './chunk-CRB3POP4.js';
 import './chunk-YQR6E6OV.js';
 import './chunk-RKOTJQVG.js';
 import './chunk-QZBXLLTV.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import './chunk-RA3O54FC.js';
-import { loadHostKey } from './chunk-Y4OKEFAX.js';
-import { runnerDir, buildsDir, hostKeyPath, jobsDir } from './chunk-RHAGBUL5.js';
-import './chunk-2I3LIRZP.js';
+import { MIN_SYSTEMD } from './chunk-XD4ZCMA4.js';
 import './chunk-JGD5TWQ2.js';
 import './chunk-Z5GEFMRW.js';
 import { spawnSync } from 'child_process';
-import { existsSync, readdirSync, statSync, readFileSync } from 'fs';
+import { existsSync, readdirSync, statSync, readFileSync, realpathSync } from 'fs';
 import { totalmem, tmpdir } from 'os';
-import { join } from 'path';
+import { join, dirname, basename } from 'path';
 
 createRequire(import.meta.url);
 var NESTED_FILES = [
@@ -108,6 +109,104 @@ function nestedVirtualizationCheck(probes = {}) {
   const first = found[0];
   return { name, status: "pass", detail: `${first.module} does not allow nested virtualization (${first.path} is ${first.value}), so no microVM build sees ${first.feature}` };
 }
+function deviceNumber(dev) {
+  const [b8, b12, b32, m12, mff] = [BigInt(8), BigInt(12), BigInt(32), BigInt(4095), BigInt(255)];
+  const [highMajor, highMinor] = [BigInt(4294963200), BigInt(4294967040)];
+  const major = dev >> b8 & m12 | dev >> b32 & highMajor;
+  const minor = dev & mff | dev >> b12 & highMinor;
+  return `${major}:${minor}`;
+}
+function hostDeviceOf(path, stat = (p) => statSync(p, { bigint: true })) {
+  let dir = path;
+  for (; ; ) {
+    try {
+      return deviceNumber(stat(dir).dev);
+    } catch {
+      const parent = dirname(dir);
+      if (parent === dir) return void 0;
+      dir = parent;
+    }
+  }
+}
+function diskSharingCheck(probes = {}) {
+  const name = "Disk I/O sharing";
+  const read = probes.readHostFile ?? readText;
+  const list = probes.listHostDir ?? ((path) => readdirSync(path));
+  const real = probes.realHostPath ?? ((path) => realpathSync(path));
+  const cannotTell = (why) => ({
+    name,
+    status: "warn",
+    detail: `${why}, so doctor cannot tell whether microVM builds share the disk`,
+    fix: "read the scheduler of the disk under the runner's directory by hand: `cat /sys/block/<disk>/queue/scheduler`"
+  });
+  const device = (probes.deviceOf ?? hostDeviceOf)(probes.buildsDir ?? ".");
+  if (device === void 0) return cannotTell("doctor found no device for the directory of the build disks");
+  const disks = /* @__PURE__ */ new Map();
+  const visit = (entry, depth) => {
+    if (depth > 8) throw new Error(`${entry} nests too deep`);
+    let path = real(entry);
+    let isPartition = true;
+    try {
+      read(`${entry}/partition`);
+    } catch (err) {
+      if (err.code !== "ENOENT") throw err;
+      isPartition = false;
+    }
+    if (isPartition) path = dirname(path);
+    const disk = basename(path);
+    let slaves = [];
+    if (!isPartition) {
+      try {
+        slaves = list(`${entry}/slaves`);
+      } catch (err) {
+        if (err.code !== "ENOENT") throw err;
+      }
+    }
+    if (slaves.length > 0) {
+      for (const slave of slaves) visit(`/sys/class/block/${slave}`, depth + 1);
+      return;
+    }
+    disks.set(disk, read(`/sys/block/${disk}/dev`).trim());
+  };
+  try {
+    visit(`/sys/dev/block/${device}`, 0);
+  } catch (err) {
+    return cannotTell(`doctor could not find the disk under device ${device}: ${err.code === "ENOENT" ? "no block device entry for it" : reasonOf(err)}`);
+  }
+  let costLines;
+  try {
+    costLines = read("/sys/fs/cgroup/io.cost.qos").split("\n");
+  } catch (err) {
+    if (err.code !== "ENOENT") return cannotTell(`doctor could not read /sys/fs/cgroup/io.cost.qos: ${reasonOf(err)}`);
+    costLines = [];
+  }
+  const facts = [];
+  for (const [disk, number] of disks) {
+    let scheduler;
+    try {
+      scheduler = /\[([^\]]+)\]/.exec(read(`/sys/block/${disk}/queue/scheduler`))?.[1];
+    } catch {
+      scheduler = void 0;
+    }
+    const iocost = costLines.some((l) => l.startsWith(`${number} `) && /\benable=1\b/.test(l));
+    facts.push({ name: disk, number, scheduler, iocost });
+  }
+  const ignoring = facts.filter((f) => f.scheduler !== "bfq" && !f.iocost);
+  if (ignoring.length === 0) {
+    const names = facts.map((f) => f.name).join(", ");
+    return { name, status: "pass", detail: `${names} acts on I/O weights (BFQ or iocost), so microVM builds share the disk equally` };
+  }
+  const unread = ignoring.find((f) => f.scheduler === void 0);
+  if (unread !== void 0) return cannotTell(`doctor could not read the scheduler of ${unread.name}`);
+  const first = ignoring[0];
+  const summary = ignoring.map((f) => `${f.name} uses the ${f.scheduler} scheduler and has iocost off`).join("; ");
+  return {
+    name,
+    status: "warn",
+    detail: `${summary}. So the kernel ignores each microVM build's I/O weight, and one build can take most of the disk's time`,
+    fix: `turn on iocost for the disk: \`echo '${first.number} enable=1' | sudo tee /sys/fs/cgroup/io.cost.qos\`. Do this again at each boot, for example from a systemd unit. Or use the bfq scheduler for the disk`
+  };
+}
 function vmscapeCheck(probes = {}) {
   const name = "VMScape";
   let value;
@@ -271,6 +370,14 @@ function helperCheck(facts) {
   if (facts.present && facts.firecracker !== FIRECRACKER_VERSION) {
     return { name, status: "warn", detail: helperFirecrackerNote(facts.firecracker), fix: REINSTALL };
   }
+  if (facts.present && facts.systemdVersion !== void 0 && facts.systemdVersion < MIN_SYSTEMD) {
+    return {
+      name,
+      status: "warn",
+      detail: `microVM builds will not survive a restart of the runner: this host runs systemd ${facts.systemdVersion}, and the runner keeps a build's sockets in the descriptor store only on systemd ${MIN_SYSTEMD} or later, so every build ends with its runner and an update waits for every build`,
+      fix: `upgrade the host's systemd to ${MIN_SYSTEMD} or later, for example with a newer release of the distribution`
+    };
+  }
   if (facts.present && facts.fdStoreMax === 0) {
     return {
       name,
@@ -279,6 +386,14 @@ function helperCheck(facts) {
       fix: "run `outerlayer runner install --service --replace` to write the unit this CLI generates, which keeps those sockets in the service manager's descriptor store"
     };
   }
+  if (facts.present && facts.restartUnit !== void 0) {
+    return {
+      name,
+      status: "warn",
+      detail: `microVM builds will not survive a restart of the runner: the running runner started without its unit's descriptor store (its environment lacks NOTIFY_SOCKET or OUTERLAYER_FD_STORE, as a runner started before its unit was replaced does), so it cannot keep a build's sockets in the descriptor store, every build it starts ends with it, and an update waits for every build`,
+      fix: `restart the service while no build runs, so it starts under its current unit: sudo systemctl restart ${facts.restartUnit}`
+    };
+  }
   if (facts.present) {
     return {
       name,
@@ -710,7 +825,9 @@ async function helperFactsOf(env) {
     present: true,
     firecracker: probe.firecracker,
     ...stat !== void 0 && (stat.mode & 18) !== 0 ? { writableBuildsDir: builds } : {},
-    ...env.service?.fdStoreMax === void 0 ? {} : { fdStoreMax: env.service.fdStoreMax }
+    ...env.service?.fdStoreMax === void 0 ? {} : { fdStoreMax: env.service.fdStoreMax },
+    ...env.service?.startedWithStore === false ? { restartUnit: env.service.unit } : {},
+    ...env.service?.systemdVersion === void 0 ? {} : { systemdVersion: env.service.systemdVersion }
   };
 }
 async function runnerHostChecks(env) {
@@ -740,6 +857,7 @@ async function runnerHostChecks(env) {
       helperCheck(await helperFactsOf(env)),
       nestedVirtualizationCheck(env),
       vmscapeCheck(env),
+      diskSharingCheck({ ...env, buildsDir: buildsDir(env.configPath) }),
       ...env.runner === void 0 ? [] : [memoryCheck({ concurrency: env.runner.concurrency, buildMemory: env.runner.buildMemory, hostMemory: env.hostMemory ?? totalmem() })]
     ] : [],
     ...env.hooks !== void 0 && builtinKind(env.hooks.provision) === "container" ? [runcCheck(env)] : [],