@outerlayer/cli 0.33.0-next.20261023002325 → 0.33.0-next.20261023030517

package/dist/{chunk-AU346ENF.js → chunk-HUBRTT2C.js}

@@ -2,14 +2,14 @@
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-B2JURP6A.js';
-import { acquireSpoolLockAt } from './chunk-EWVYQLD3.js';
-import { resolveRepoIdentity } from './chunk-5DNCFOXA.js';
+import { autoConnect } from './chunk-CCOU4NXE.js';
+import { acquireSpoolLockAt } from './chunk-E4F7YE7P.js';
+import { resolveRepoIdentity } from './chunk-QQXNS4G2.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-6RKD7YZ6.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
-import { StepNameSchema, StepBodySchema } from './chunk-E6CO3MJE.js';
+import { StepNameSchema, StepBodySchema } from './chunk-V7Q5OKN7.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { randomUUID } from 'crypto';
 import { readFileSync, existsSync, mkdirSync, writeFileSync, renameSync, appendFileSync } from 'fs';

package/dist/{chunk-QPWFVE3X.js → chunk-JB4R5IFJ.js}

@@ -680,11 +680,11 @@ async function missingControlPlane(cwd, sessionId, home, env) {
   const dirs = findGitDirs(cwd);
   if (dirs === void 0) return void 0;
   if (existsSync(join(dirs.gitCommonDir, "outerlayer", "materialized.json")) || hasExcludeBlock(dirs.gitCommonDir)) {
-    const { cleanupEarlierCopies } = await import('./context-cleanup-BX5Y3AFL.js');
+    const { cleanupEarlierCopies } = await import('./context-cleanup-EKTPKJJT.js');
     cleanupEarlierCopies(dirs);
   }
   if (!contextPossiblyGoverned(cwd, home)) return void 0;
-  const { governanceOf } = await import('./control-plane-launch-A3YCHQNQ.js');
+  const { governanceOf } = await import('./control-plane-launch-NOKM6CBH.js');
   if (await governanceOf({ cwd, env, home }) !== "governed") return void 0;
   recordMissingContext(dirs, sessionId, home);
   const launcher = `${cliInvocation()} claude`;

package/dist/chunk-LHKWWEQZ.js

@@ -0,0 +1,179 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+import { parseSize, BUILD_LABEL, RUNNER_LABEL, runnerLabelValue } from './chunk-QKEOAQ2W.js';
+import { buildsDir, rootfsDir, runnerDir, imagesDir, builderCacheDiskPath } from './chunk-PA6CK6WQ.js';
+import { spawnSync } from 'child_process';
+import { statfsSync, statSync, existsSync, readdirSync } from 'fs';
+import { dirname, join } from 'path';
+
+createRequire(import.meta.url);
+function freeBytes(path, statfs = statfsSync) {
+  let at = path;
+  for (; ; ) {
+    try {
+      const stats = statfs(at);
+      return Number(stats.bavail) * Number(stats.bsize);
+    } catch (err) {
+      if (err.code !== "ENOENT") return void 0;
+      const parent = dirname(at);
+      if (parent === at) return void 0;
+      at = parent;
+    }
+  }
+}
+var UNITS = ["B", "KB", "MB", "GB", "TB"];
+function formatBytes(bytes) {
+  let value = Math.max(0, bytes);
+  let unit = 0;
+  while (value >= 1024 && unit < UNITS.length - 1) {
+    value /= 1024;
+    unit++;
+  }
+  return unit === 0 ? `${Math.round(value)} B` : `${value.toFixed(1)} ${UNITS[unit]}`;
+}
+
+// src/runner/build-disk.ts
+var DEFAULT_CACHE_DISK = "40g";
+function checkDiskFit(input) {
+  const limit = parseSize(input.buildDisk);
+  if (limit === void 0) return { slots: input.concurrency, fits: true, oneBuildBytes: 0, neededBytes: 0, availableBytes: 0, reservedBytes: 0, message: "" };
+  const cacheLimit = parseSize(input.cacheDisk ?? DEFAULT_CACHE_DISK) ?? parseSize(DEFAULT_CACHE_DISK);
+  const { freeBytes: free, heldBytes: held, rootDiskBytes: root } = input.facts;
+  const reservedBytes = (input.facts.cacheBytes ?? []).reduce((sum, bytes) => sum + Math.max(0, cacheLimit - bytes), 0);
+  const oneBuildBytes = limit + root;
+  const neededBytes = input.concurrency * oneBuildBytes;
+  const availableBytes = Math.max(0, free + held - reservedBytes);
+  const slots = Math.min(input.concurrency, Math.floor(availableBytes / oneBuildBytes));
+  const oneBuild = root > 0 ? `runner.build.disk ${input.buildDisk} plus a root disk of ${formatBytes(root)}` : `runner.build.disk ${input.buildDisk}`;
+  const caches = reservedBytes > 0 ? `, less ${formatBytes(reservedBytes)} that the image-build caches can still grow to (runner.build.cacheDisk ${input.cacheDisk ?? DEFAULT_CACHE_DISK})` : "";
+  return {
+    slots,
+    fits: slots >= input.concurrency,
+    oneBuildBytes,
+    neededBytes,
+    availableBytes,
+    reservedBytes,
+    message: `${slots} of ${input.concurrency} ${input.concurrency === 1 ? "build" : "builds"} fit: one build can hold ${formatBytes(oneBuildBytes)} (${oneBuild}), runner.concurrency ${input.concurrency} needs ${formatBytes(neededBytes)}, and ${formatBytes(availableBytes)} is counted (${formatBytes(free)} free plus ${formatBytes(held)} held by running builds${caches})`
+  };
+}
+function allocatedBytes(path) {
+  try {
+    return statSync(path).blocks * 512;
+  } catch {
+    return 0;
+  }
+}
+function listDir(path) {
+  try {
+    return readdirSync(path);
+  } catch {
+    return void 0;
+  }
+}
+function logUnreadable(path) {
+  process.stderr.write(`outerlayer: cannot list ${path}, so the disk check does not count the image-build cache disks in it
+`);
+}
+function isBuilderDir(dir) {
+  return existsSync(join(dir, "image-builder.json"));
+}
+function cacheDiskBytes(configPath, builds, buildEntries) {
+  const cache = [];
+  const images = imagesDir(configPath);
+  if (existsSync(images)) {
+    const owners = listDir(images);
+    if (owners === void 0) {
+      logUnreadable(images);
+      return void 0;
+    }
+    for (const owner of owners) {
+      const names = listDir(join(images, owner));
+      if (names === void 0) logUnreadable(join(images, owner));
+      for (const name of names ?? []) {
+        const path = builderCacheDiskPath(configPath, owner, name);
+        if (existsSync(path)) cache.push(allocatedBytes(path));
+      }
+    }
+  }
+  for (const entry of buildEntries) {
+    if (isBuilderDir(join(builds, entry))) cache.push(allocatedBytes(join(builds, entry, "build.ext4")));
+  }
+  return cache;
+}
+function microVmFacts(configPath) {
+  const builds = buildsDir(configPath);
+  const free = freeBytes(builds);
+  if (free === void 0) return void 0;
+  let held = 0;
+  let entries = [];
+  if (existsSync(builds)) {
+    const listed = listDir(builds);
+    if (listed === void 0) return void 0;
+    entries = listed;
+    for (const entry of entries) {
+      if (!isBuilderDir(join(builds, entry))) held += allocatedBytes(join(builds, entry, "build.ext4"));
+    }
+  }
+  const cacheBytes = cacheDiskBytes(configPath, builds, entries);
+  if (cacheBytes === void 0) return void 0;
+  let root = 0;
+  const roots = rootfsDir(runnerDir(configPath));
+  if (existsSync(roots)) {
+    const rootEntries = listDir(roots);
+    if (rootEntries === void 0) return void 0;
+    for (const entry of rootEntries) {
+      if (!entry.endsWith(".ext4")) continue;
+      try {
+        root = Math.max(root, statSync(join(roots, entry)).size);
+      } catch {
+      }
+    }
+  }
+  return { freeBytes: free, heldBytes: held, rootDiskBytes: root, cacheBytes };
+}
+var DOCKER_TIMEOUT_MS = 1e4;
+var DEFAULT_BUILD_DISK = "40g";
+var DOCKER_CACHE_MS = 6e4;
+var DEFAULT_VOLUMES_DIR = "/var/lib/docker/volumes";
+function runDocker(args, spawn = spawnSync) {
+  const result = spawn("docker", args, { encoding: "utf8", timeout: DOCKER_TIMEOUT_MS });
+  return result.status === 0 ? result.stdout : void 0;
+}
+var SIZE_UNITS = { b: 1, kb: 1e3, mb: 1e6, gb: 1e9, tb: 1e12 };
+function volumeBytes(dfOutput, names) {
+  let total = 0;
+  for (const line of dfOutput.split("\n")) {
+    const [name, , size] = line.trim().split(/\s+/);
+    if (name === void 0 || size === void 0 || !names.has(name)) continue;
+    const match = /^([\d.]+)([A-Za-z]+)$/.exec(size);
+    const unit = match === null ? void 0 : SIZE_UNITS[match[2].toLowerCase()];
+    if (match !== null && unit !== void 0) total += Number(match[1]) * unit;
+  }
+  return total;
+}
+function containerFacts(cache, configPath, docker, now) {
+  if (cache.reading === void 0 || cache.reading.configPath !== configPath || now - cache.reading.at > DOCKER_CACHE_MS) {
+    const root = docker(["info", "--format", "{{.DockerRootDir}}"])?.trim();
+    const listed = docker(["volume", "ls", "--quiet", "--filter", `label=${BUILD_LABEL}`, "--filter", `label=${RUNNER_LABEL}=${runnerLabelValue(configPath)}`]);
+    const names = new Set((listed ?? "").split("\n").map((n) => n.trim()).filter((n) => n !== ""));
+    const df = listed === void 0 || names.size === 0 ? void 0 : docker(["system", "df", "-v"]);
+    const held = listed === void 0 ? void 0 : names.size === 0 ? 0 : df === void 0 ? void 0 : volumeBytes(df, names);
+    cache.reading = {
+      at: now,
+      configPath,
+      held,
+      volumes: root === void 0 || root === "" ? DEFAULT_VOLUMES_DIR : join(root, "volumes")
+    };
+  }
+  if (cache.reading.held === void 0) return void 0;
+  const free = freeBytes(cache.reading.volumes);
+  return free === void 0 ? void 0 : { freeBytes: free, heldBytes: cache.reading.held, rootDiskBytes: 0 };
+}
+function realBuildDiskProbe(deps = {}) {
+  const cache = {};
+  const docker = deps.docker ?? ((args) => runDocker(args));
+  const now = deps.now ?? Date.now;
+  return (kind, configPath) => kind === "vm" ? microVmFacts(configPath) : containerFacts(cache, configPath, docker, now());
+}
+
+export { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK, DOCKER_CACHE_MS, allocatedBytes, checkDiskFit, formatBytes, freeBytes, realBuildDiskProbe, runDocker, volumeBytes };

package/dist/{chunk-G63KT5I5.js → chunk-M24H6JQW.js}

@@ -2,7 +2,7 @@
 import { createRequire } from 'node:module';
 import { MAINTAINED_SKILLS } from './chunk-CDDED64E.js';
 import { resolvePackageVersion } from './chunk-RA3O54FC.js';
-import { splitRawFile } from './chunk-LJG6EMLJ.js';
+import { splitRawFile } from './chunk-PNIFQX73.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, readdirSync } from 'fs';
 import { join, dirname } from 'path';
 import { fileURLToPath } from 'url';

package/dist/{chunk-XL2XWWU7.js → chunk-M3RYZRMH.js}

@@ -2,13 +2,13 @@
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-B2JURP6A.js';
-import { resolveRepoIdentity } from './chunk-5DNCFOXA.js';
+import { autoConnect } from './chunk-CCOU4NXE.js';
+import { resolveRepoIdentity } from './chunk-QQXNS4G2.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-6RKD7YZ6.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
-import { CriteriaListSchema } from './chunk-E6CO3MJE.js';
+import { CriteriaListSchema } from './chunk-V7Q5OKN7.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { readFileSync } from 'fs';
 

package/dist/{chunk-TGHBOXKJ.js → chunk-NE63JADS.js}

@@ -44,10 +44,10 @@ function guestAssetsPinned(arch) {
 var JAILER_BINARY_SHA256 = {
   x86_64: "65ef226e96f0ceda55ba643f445801ef2cc0ea667ef67cad8ac4f406c9c8434f"
 };
-var HOST_HELPER_ASSETS_VERSION = "10";
+var HOST_HELPER_ASSETS_VERSION = "13";
 var HOST_HELPER_BASE_URL = `https://github.com/outerlayerai/guest-assets/releases/download/guest-${HOST_HELPER_ASSETS_VERSION}`;
 var HOST_HELPER_SHA256 = {
-  x86_64: "caa06b7206cceae6d8fc569781b269817ca66cb2ccfe177740fda042ed46bfcc"
+  x86_64: "0d6cdbce1e5a5e084726b1d1b1cc0bc208f6662fe8d10a1d7a91e8573035505f"
 };
 function hostHelperPinned(arch = "x86_64", hashes = HOST_HELPER_SHA256) {
   return hashes[arch] !== "0".repeat(64);

package/dist/{chunk-3DCB3GOV.js → chunk-ONUACB5C.js}

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { parseSize } from './chunk-YJLHUKYS.js';
+import { DEFAULT_CACHE_DISK, DEFAULT_BUILD_DISK } from './chunk-LHKWWEQZ.js';
+import { parseSize } from './chunk-QKEOAQ2W.js';
 import { isRefusedInConfig, resolveDestinations, isReservedVariable } from './chunk-BALIE3BA.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { existsSync, statSync, accessSync, constants, readFileSync } from 'fs';
@@ -72,12 +73,12 @@ var DEFAULT_IDLE_LIMIT_MINUTES = 30;
 var DEFAULT_CHECK_TIME_LIMIT_MINUTES = 10;
 var CHECKS_KEYS = ["timeLimitMinutes"];
 var MAX_CHECK_TIME_LIMIT_MINUTES = 240;
-var DEFAULT_BUILD = { memory: "8g", cpus: 4, pids: 4096, disk: "40g", variables: [] };
+var DEFAULT_BUILD = { memory: "8g", cpus: 4, pids: 4096, disk: DEFAULT_BUILD_DISK, cacheDisk: DEFAULT_CACHE_DISK, variables: [] };
 function imageBuildOf(config) {
   if (builtinKind(config.hooks.provision) !== "vm") return "host";
   return config.build?.imageBuild ?? "vm";
 }
-var BUILD_KEYS = ["memory", "cpus", "pids", "disk", "variables", "destinations", "allowHosts", "imageBuild"];
+var BUILD_KEYS = ["memory", "cpus", "pids", "disk", "cacheDisk", "variables", "destinations", "allowHosts", "imageBuild"];
 var HOUSEKEEPING_KEYS = ["jobsKeepDays", "buildCacheMax", "minFreeDisk"];
 var DEFAULT_JOBS_KEEP_DAYS = 30;
 var DEFAULT_BUILD_CACHE_MAX = "20g";
@@ -404,7 +405,7 @@ function resolveBuild(configPath, block) {
     const near = nearestKey(key, BUILD_KEYS);
     fail(configPath, `runner.build.${key}`, near ? `is not a key this block accepts; did you mean ${near}?` : "is not a key this block accepts");
   }
-  for (const key of ["memory", "disk"]) {
+  for (const key of ["memory", "disk", "cacheDisk"]) {
     const value = given[key];
     if (value === void 0) continue;
     if (typeof value !== "string" || parseSize(value) === void 0) fail(configPath, `runner.build.${key}`, 'must be a size such as "8g" or "512m"');
@@ -446,6 +447,7 @@ function resolveBuild(configPath, block) {
     cpus: given.cpus ?? DEFAULT_BUILD.cpus,
     pids: given.pids ?? DEFAULT_BUILD.pids,
     disk: given.disk ?? DEFAULT_BUILD.disk,
+    cacheDisk: given.cacheDisk ?? DEFAULT_BUILD.cacheDisk,
     variables,
     ...destinations.length === 0 ? {} : { destinations },
     ...allowHosts === void 0 ? {} : { allowHosts },

package/dist/{chunk-JHTJPQSL.js → chunk-PILHDNHX.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isAgentsMdLayout, discoverOuterlayerPaths, isForeignTree, toRepoRelative } from './chunk-HJYBWJAS.js';
+import { isAgentsMdLayout, discoverOuterlayerPaths, isForeignTree, toRepoRelative } from './chunk-PJI5D2XT.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { retiredSkillPaths, removeRetiredSkills } from './chunk-UIUGTW5C.js';
-import { maintainedFilesForExistingSkills, loadMaintainedFiles, writeMaintainedFiles } from './chunk-G63KT5I5.js';
+import { retiredSkillPaths, removeRetiredSkills } from './chunk-C7WGCI77.js';
+import { maintainedFilesForExistingSkills, loadMaintainedFiles, writeMaintainedFiles } from './chunk-M24H6JQW.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import { emitTree, generatedHeaderSource, parseOuterlayerConfig, classifyTree } from './chunk-LJG6EMLJ.js';
+import { emitTree, generatedHeaderSource, parseOuterlayerConfig, classifyTree } from './chunk-PNIFQX73.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, copyFileSync, unlinkSync, rmdirSync, readdirSync } from 'fs';
 import { join, dirname } from 'path';
 

package/dist/{chunk-HJYBWJAS.js → chunk-PJI5D2XT.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { AGENTS_SKILLS_BASE, OUTERLAYER_SKILLS_BASE } from './chunk-G63KT5I5.js';
-import { normalizePath, CONTEXT_PIN_FILENAME } from './chunk-LJG6EMLJ.js';
+import { AGENTS_SKILLS_BASE, OUTERLAYER_SKILLS_BASE } from './chunk-M24H6JQW.js';
+import { normalizePath, CONTEXT_PIN_FILENAME } from './chunk-PNIFQX73.js';
 import { existsSync, readdirSync, readFileSync, mkdirSync, writeFileSync, lstatSync, readlinkSync, symlinkSync, rmdirSync } from 'fs';
 import { relative, sep, join } from 'path';
 

package/dist/{chunk-LJG6EMLJ.js → chunk-PNIFQX73.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RESERVED_EMIT_NAMES, ARTIFACT_KINDS, ArtifactCriterionIdSchema } from './chunk-E6CO3MJE.js';
+import { RESERVED_EMIT_NAMES, ARTIFACT_KINDS, ArtifactCriterionIdSchema } from './chunk-V7Q5OKN7.js';
 import { __commonJS, __require, __toESM } from './chunk-Z5GEFMRW.js';
 
 createRequire(import.meta.url);

package/dist/{chunk-GFVDC5S3.js → chunk-QKEOAQ2W.js}

@@ -1,9 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { RecipeError } from './chunk-3Z3MPR55.js';
-import { BUILDKIT_IMAGE } from './chunk-TGHBOXKJ.js';
-import { parseSize } from './chunk-YJLHUKYS.js';
-import { compareVersions } from './chunk-5DNCFOXA.js';
+import { BUILDKIT_IMAGE } from './chunk-NE63JADS.js';
+import { compareVersions } from './chunk-QQXNS4G2.js';
 import { ensureHostKey } from './chunk-SOI6K5DY.js';
 import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, runnerDir, jobsDir } from './chunk-PA6CK6WQ.js';
 import { CLAUDE_PORT, JOB_MOUNT, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_SOCKET, RELAY_PORT, DESTINATION_BASE_PORT } from './chunk-BALIE3BA.js';
@@ -17,6 +16,38 @@ import { createRequire as createRequire$1 } from 'module';
 import { fileURLToPath } from 'url';
 
 createRequire(import.meta.url);
+
+// src/runner/container/disk.ts
+var UNITS = { "": 1, k: 1024, m: 1024 ** 2, g: 1024 ** 3 };
+function parseSize(text) {
+  const match = /^(\d+(?:\.\d+)?)([kKmMgG]?)$/.exec(text);
+  if (match === null) return void 0;
+  const bytes = Number(match[1]) * UNITS[match[2].toLowerCase()];
+  return bytes > 0 ? bytes : void 0;
+}
+function exceedsDisk(usedKilobytes, limit) {
+  const bytes = parseSize(limit);
+  return usedKilobytes * 1024 > (bytes ?? Number.POSITIVE_INFINITY);
+}
+var TOTAL = /^(\d+)\t\/build$/;
+var GONE = /: No such file or directory$/;
+var LINE_MAX = 200;
+function readDu(result) {
+  const stdoutLines = result.stdout.split("\n");
+  const totalAt = stdoutLines.map((line) => TOTAL.test(line)).lastIndexOf(true);
+  const kib = totalAt === -1 ? void 0 : Number(TOTAL.exec(stdoutLines[totalAt])[1]);
+  const lines2 = [...result.stderr.split("\n"), ...stdoutLines.filter((_, index) => index !== totalAt)].map((line) => line.trim()).filter((line) => line !== "");
+  const other = lines2.find((line) => !GONE.test(line));
+  if (kib !== void 0 && result.status === 0) return { kib };
+  if (kib !== void 0 && other === void 0 && lines2.length > 0) return { kib };
+  const detail = other === void 0 ? "" : `: ${cut(other.replace(/[\u0000-\u001f\u007f]/g, " "))}`;
+  return { ...kib === void 0 ? {} : { kib }, failure: `docker exec exited ${result.status}${detail}` };
+}
+function cut(line) {
+  const head = line.slice(0, LINE_MAX);
+  const last = head.charCodeAt(head.length - 1);
+  return last >= 55296 && last <= 56319 ? head.slice(0, -1) : head;
+}
 var PACKAGE = "@devcontainers/cli";
 function buildRootFromDist(moduleDir = dirname(fileURLToPath(import.meta.url))) {
   try {
@@ -732,4 +763,4 @@ function ensureBuilder(rawRun, spec, options = {}) {
   );
 }
 
-export { BUILD_LABEL, COMMAND_DIR, HASH_ARGV, JUDGE_DIR, JUDGE_ITEMS, JUDGE_MAX_TURNS, JUDGE_PROGRAM, JUDGE_REPORT, MAX_ITEMS_BYTES, MAX_REPORT_BYTES, MIN_BUILDX_VERSION, RUNNER_LABEL, builderName, builderNameFor, builderSpec, buildxState, childEnvironment, containerExecArgs, containerRunArgs, createDockerHost, dockerIdentity, ensureBuilder, ensureFailureCount, ensureRunnerIdentity, isOutOfMemory, judgeCommand, parseProgramHash, pathLabelValue, prepareRunArgs, proxyEnvironment, readJobFile, readJobFileChecked, readRunnerIdentity, resolveDevcontainerCli, runnerLabelValue, spawnRun, trackImageBuild, withAnswerProtocol, writeJobFile };
+export { BUILD_LABEL, COMMAND_DIR, HASH_ARGV, JUDGE_DIR, JUDGE_ITEMS, JUDGE_MAX_TURNS, JUDGE_PROGRAM, JUDGE_REPORT, MAX_ITEMS_BYTES, MAX_REPORT_BYTES, MIN_BUILDX_VERSION, RUNNER_LABEL, builderName, builderNameFor, builderSpec, buildxState, childEnvironment, containerExecArgs, containerRunArgs, createDockerHost, dockerIdentity, ensureBuilder, ensureFailureCount, ensureRunnerIdentity, exceedsDisk, isOutOfMemory, judgeCommand, parseProgramHash, parseSize, pathLabelValue, prepareRunArgs, proxyEnvironment, readDu, readJobFile, readJobFileChecked, readRunnerIdentity, resolveDevcontainerCli, runnerLabelValue, spawnRun, trackImageBuild, withAnswerProtocol, writeJobFile };

package/dist/{chunk-5DNCFOXA.js → chunk-QQXNS4G2.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { EVENT_TYPES, isHumanUserTurn, INPUT_BAND_BOUNDARIES, parseAgentSession, SCHEMA_VERSION, SPEED_MAX_LENGTH, inputBandOf, BUCKET_MODEL_MAX_LENGTH } from './chunk-E6CO3MJE.js';
+import { EVENT_TYPES, isHumanUserTurn, INPUT_BAND_BOUNDARIES, parseAgentSession, SCHEMA_VERSION, SPEED_MAX_LENGTH, inputBandOf, BUCKET_MODEL_MAX_LENGTH } from './chunk-V7Q5OKN7.js';
 import { createHash } from 'crypto';
 import { readFileSync, readdirSync, statSync, mkdirSync, copyFileSync, renameSync, unlinkSync, writeFileSync, stat as stat$1, unwatchFile, watchFile, watch as watch$1 } from 'fs';
 import { type, homedir } from 'os';

package/dist/{chunk-OOCAF3ID.js → chunk-RLAKWXDK.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { checkFit, RUNNER_RESERVE_BYTES } from './chunk-LYE3KB6L.js';
+import { checkFit, RUNNER_RESERVE_BYTES } from './chunk-7HZH5D7H.js';
 import { readFileSync } from 'fs';
 
 createRequire(import.meta.url);

package/dist/{chunk-2N67C6IV.js → chunk-T4S2DVOA.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { uploadSpooledSteps } from './chunk-AU346ENF.js';
+import { uploadSpooledSteps } from './chunk-HUBRTT2C.js';
 import { LaunchFilter } from './chunk-ESVW4MJY.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-EWVYQLD3.js';
-import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-5DNCFOXA.js';
+import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-E4F7YE7P.js';
+import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-QQXNS4G2.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { cliFetch, resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-6RKD7YZ6.js';
 import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-PJDQPF5N.js';
 import { signerFor, signRunnerRequest } from './chunk-SOI6K5DY.js';
-import { writeSyncStatus, spoolDir } from './chunk-QPWFVE3X.js';
+import { writeSyncStatus, spoolDir } from './chunk-JB4R5IFJ.js';
 import { readLatestProvenanceForSession, readContextProvenance } from './chunk-ZJSNLVCE.js';
 import { hookExecSpoolPath } from './chunk-2O5KA67H.js';
 import { applyReportedCost } from './chunk-BKO6JEZI.js';
@@ -17,7 +17,7 @@ import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
 import { readLaunchSpoolState, launchStatusIsDecisive, launchedItemsBySession, launchesPath } from './chunk-T2Q7ISPE.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { removeJournalHooks } from './chunk-TUSYOL2O.js';
-import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-E6CO3MJE.js';
+import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-V7Q5OKN7.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { dirname, basename, join, sep } from 'path';
 import { statSync, readFileSync, readdirSync, mkdirSync, writeFileSync, renameSync, existsSync, rmSync } from 'fs';

package/dist/{chunk-GFYEMCPP.js → chunk-T4TT76GG.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { loadMachineSkillFiles, resolvePackRoot } from './chunk-G63KT5I5.js';
+import { loadMachineSkillFiles, resolvePackRoot } from './chunk-M24H6JQW.js';
 import { MAINTAINED_SKILLS, maintainedLineVersion } from './chunk-CDDED64E.js';
 import { resolvePackageVersion } from './chunk-RA3O54FC.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{chunk-BKADJZ7F.js → chunk-UAJYWZ2F.js}

@@ -2,15 +2,15 @@
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
 import { detectActiveSession, transcriptPathForSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-B2JURP6A.js';
-import { resolveRepoIdentity, defaultProjectsDir, findTranscripts, sessionIdFromPath, scrubText } from './chunk-5DNCFOXA.js';
+import { autoConnect } from './chunk-CCOU4NXE.js';
+import { resolveRepoIdentity, defaultProjectsDir, findTranscripts, sessionIdFromPath, scrubText } from './chunk-QQXNS4G2.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-6RKD7YZ6.js';
 import { readLatestProvenanceForSession } from './chunk-ZJSNLVCE.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import { FindingBatchSchema, FindingsResponseSchema, SAME_PROBLEM_RULES } from './chunk-E6CO3MJE.js';
+import { FindingBatchSchema, FindingsResponseSchema, SAME_PROBLEM_RULES } from './chunk-V7Q5OKN7.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { readFileSync, existsSync } from 'fs';
 import { join, dirname, basename } from 'path';

package/dist/{chunk-YERR22SY.js → chunk-UHFU3CBN.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { DEFAULT_UNIT_NAME } from './chunk-LYE3KB6L.js';
+import { DEFAULT_UNIT_NAME } from './chunk-7HZH5D7H.js';
 import { RUNNER_FILE_MODE } from './chunk-PA6CK6WQ.js';
 import { claudeEnvPath, withoutCredentialLines } from './chunk-BALIE3BA.js';
 import { parseRunnerEnv } from './chunk-HACGUL52.js';

package/dist/{chunk-E6CO3MJE.js → chunk-V7Q5OKN7.js}

@@ -22710,7 +22710,16 @@ var DemoManifestV2Schema = external_exports.strictObject({
   ...manifestFields,
   chapters: external_exports.array(DemoChapterV2Schema).min(1).max(DEMO_CHAPTERS_MAX)
 });
-var DemoManifestSchema = external_exports.discriminatedUnion("schemaVersion", [DemoManifestV1Schema, DemoManifestV2Schema]);
+var DemoTestPathSchema = external_exports.string().min(1).max(500).refine((path) => !path.startsWith("/") && !path.split("/").includes(".."), {
+  message: "a test path must be relative to the repository's root and stay inside it"
+});
+var DemoManifestV3Schema = external_exports.strictObject({
+  schemaVersion: external_exports.literal(3),
+  test: DemoTestPathSchema,
+  ...manifestFields,
+  chapters: external_exports.array(DemoChapterV2Schema).min(1).max(DEMO_CHAPTERS_MAX)
+});
+var DemoManifestSchema = external_exports.discriminatedUnion("schemaVersion", [DemoManifestV1Schema, DemoManifestV2Schema, DemoManifestV3Schema]);
 var DemoRecordChapterSchema = external_exports.strictObject({
   ...chapterFields,
   /** The `clientArtifactId` of the chapter's clip. */
@@ -22766,6 +22775,8 @@ var DemoRecordVideoSchema = external_exports.union([
 ]);
 var DemoRecordV3Schema = external_exports.strictObject({
   schemaVersion: external_exports.literal(3),
+  /** The test that recorded the demo. Absent from a demo stored before the manifest named its test. */
+  test: DemoTestPathSchema.optional(),
   video: DemoRecordVideoSchema,
   chapters: external_exports.array(DemoRecordChapterV3Schema).min(1).max(DEMO_CHAPTERS_MAX)
 });

package/dist/{chunk-2WMZPJVE.js → chunk-VJGQEASF.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { sanitizeTerminal } from './chunk-EWVYQLD3.js';
-import { remoteLookupFailed } from './chunk-5DNCFOXA.js';
-import { isAgentsMdLayout } from './chunk-HJYBWJAS.js';
-import { DEFAULT_DASHBOARD } from './chunk-NSPRS7WK.js';
+import { sanitizeTerminal } from './chunk-E4F7YE7P.js';
+import { remoteLookupFailed } from './chunk-QQXNS4G2.js';
+import { isAgentsMdLayout } from './chunk-PJI5D2XT.js';
+import { DEFAULT_DASHBOARD } from './chunk-X37GC7DM.js';
 import { cliFetch, resolveGatewayCredentials } from './chunk-6RKD7YZ6.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
 import { findGitDirs, writeRepoConnection, readRepoConnection } from './chunk-BJ3KTMDH.js';

package/dist/{chunk-NSPRS7WK.js → chunk-X37GC7DM.js}

@@ -5,7 +5,7 @@ import { C } from './chunk-ANPNT6PM.js';
 import { readCloudConfigStrict, CloudConfigError, readCloudConfig, writeCloudConfig, cloudConfigPath } from './chunk-PJDQPF5N.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import { CLI_LOGIN_MACHINE_NAME_MAX, CliLoginPollResponseSchema, CLI_LOGIN_KIND, CliLoginRefusalSchema, CliLoginStartedSchema } from './chunk-E6CO3MJE.js';
+import { CLI_LOGIN_MACHINE_NAME_MAX, CliLoginPollResponseSchema, CLI_LOGIN_KIND, CliLoginRefusalSchema, CliLoginStartedSchema } from './chunk-V7Q5OKN7.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { generateKeyPairSync, privateDecrypt, constants, createPrivateKey } from 'crypto';
 import { spawn } from 'child_process';

package/dist/{chunk-LJUIG5K4.js → chunk-X62C7V4B.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { checkStarterFiles, contextIsGoverned } from './chunk-BJQ25STI.js';
-import { fleetCheck, checkBuildSkill, checkMachineSkills, checkCommittedMaintainedSkills, checkMaintainedReferences, checkIgnoredSkillFolders } from './chunk-HXA5GIHK.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-VT4TTJPG.js';
-import { isLinkedRepository } from './chunk-2WMZPJVE.js';
-import { sanitizeTerminal } from './chunk-EWVYQLD3.js';
-import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-5DNCFOXA.js';
+import { checkStarterFiles, contextIsGoverned } from './chunk-35DSTT37.js';
+import { fleetCheck, checkBuildSkill, checkMachineSkills, checkCommittedMaintainedSkills, checkMaintainedReferences, checkIgnoredSkillFolders } from './chunk-6ANIBEQ6.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-5FSVA3CO.js';
+import { isLinkedRepository } from './chunk-VJGQEASF.js';
+import { sanitizeTerminal } from './chunk-E4F7YE7P.js';
+import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-QQXNS4G2.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { checkFormerSkillNames } from './chunk-UIUGTW5C.js';
+import { checkFormerSkillNames } from './chunk-C7WGCI77.js';
 import { resolveGatewayCredentials, defaultFetch } from './chunk-6RKD7YZ6.js';
-import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-QPWFVE3X.js';
+import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-JB4R5IFJ.js';
 import { readStatuslineState, STATE_FRESH_MS } from './chunk-I7RZHMXW.js';
 import { hookCommandEscapesControlPlane, CONTROL_PLANE_DIR_VARIABLE } from './chunk-HCVLP7XA.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
@@ -1195,8 +1195,8 @@ function doctorExitCode(checks) {
 
 // src/doctor-report.ts
 async function gatherDoctorChecks() {
-  const { DEFAULT_BUILD_DISK } = await import('./build-disk-3GL3KKEB.js');
-  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-LZSFW2O3.js');
+  const { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK } = await import('./build-disk-55M4ZMDX.js');
+  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-RRY7DIJG.js');
   const configPath = defaultRunnerConfigPath();
   const runnerHost = hasRunnerBlock(configPath);
   const hooks = (() => {
@@ -1217,7 +1217,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-GRCEYJXA.js');
+    const { runnerHostChecks } = await import('./doctor-LYOFFCQS.js');
     const gateway = (() => {
       try {
         const { url, apiKey, appId } = loadRunnerConfig(configPath);
@@ -1236,7 +1236,7 @@ async function gatherDoctorChecks() {
     const runner = (() => {
       try {
         const { concurrency, build, housekeeping, managed } = loadRunnerConfig(configPath);
-        return { concurrency, buildMemory: build?.memory ?? "8g", buildDisk: build?.disk ?? DEFAULT_BUILD_DISK, minFreeDisk: housekeeping?.minFreeDisk, allowHosts: build?.allowHosts, ...build?.imageBuild === void 0 ? {} : { imageBuild: build.imageBuild }, ...managed === true ? { managed } : {} };
+        return { concurrency, buildMemory: build?.memory ?? "8g", buildDisk: build?.disk ?? DEFAULT_BUILD_DISK, cacheDisk: build?.cacheDisk ?? DEFAULT_CACHE_DISK, minFreeDisk: housekeeping?.minFreeDisk, allowHosts: build?.allowHosts, ...build?.imageBuild === void 0 ? {} : { imageBuild: build.imageBuild }, ...managed === true ? { managed } : {} };
       } catch {
         return void 0;
       }
@@ -1245,7 +1245,7 @@ async function gatherDoctorChecks() {
       const { existsSync: existsSync3 } = await import('fs');
       if (process.platform !== "linux" || !existsSync3("/run/systemd/system")) return void 0;
       const { inspectService, realInspectProbes } = await import('./inspect-DNLXTXLA.js');
-      const { DEFAULT_UNIT_NAME } = await import('./install-GQUCHIGE.js');
+      const { DEFAULT_UNIT_NAME } = await import('./install-5BQ3TFBT.js');
       const { dirname: dirname2 } = await import('path');
       return inspectService(DEFAULT_UNIT_NAME, dirname2(configPath), realInspectProbes());
     })();

package/dist/{chunk-DY7Y7UT4.js → chunk-XMPE5TT4.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { C } from './chunk-ANPNT6PM.js';
-import { resolvePackRoot, OUTERLAYER_SKILLS_BASE, loadTemplateFiles, AGENTS_SKILLS_BASE, loadMaintainedFiles, rewriteSkillPaths, TEMPLATE_SKILLS, skillDir, writeMaintainedFiles, MACHINE_SKILL_PATH } from './chunk-G63KT5I5.js';
+import { resolvePackRoot, OUTERLAYER_SKILLS_BASE, loadTemplateFiles, AGENTS_SKILLS_BASE, loadMaintainedFiles, rewriteSkillPaths, TEMPLATE_SKILLS, skillDir, writeMaintainedFiles, MACHINE_SKILL_PATH } from './chunk-M24H6JQW.js';
 import { MAINTAINED_SKILLS } from './chunk-CDDED64E.js';
 import { resolvePackageVersion } from './chunk-RA3O54FC.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import { linkedAgentsPath } from './chunk-AVTI3FL5.js';
+import { linkedAgentsPath } from './chunk-6ZLI652Y.js';
 import { readFileSync, existsSync, mkdirSync, writeFileSync } from 'fs';
 import { join, dirname } from 'path';
 

package/dist/{chunk-JPG43G6Y.js → chunk-YXHKCHWG.js}

@@ -3,7 +3,7 @@ import { createRequire } from 'node:module';
 import { claimPidFile, RunnerAlreadyRunningError, releasePidFile } from './chunk-F5UL23I2.js';
 import { startTimeOf } from './chunk-JBJTC3UU.js';
 import { RecipeError, locateRecipe, readRecipe, assertBuildable, writeSanitizedRecipe, classifyProperties, SANITIZED_NAME } from './chunk-3Z3MPR55.js';
-import { GH_VERSION, VOICE_PACK_FILES, VOICE_PACK_VERSION, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, TINI_SHA256, TINI_VERSION, CLAUDE_CODE_VERSION, NODE_IMAGE, DEFAULT_BASE_IMAGE, MEDIA_PINS, PLAYWRIGHT_VERSION } from './chunk-TGHBOXKJ.js';
+import { GH_VERSION, VOICE_PACK_FILES, VOICE_PACK_VERSION, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, TINI_SHA256, TINI_VERSION, CLAUDE_CODE_VERSION, NODE_IMAGE, DEFAULT_BASE_IMAGE, MEDIA_PINS, PLAYWRIGHT_VERSION } from './chunk-NE63JADS.js';
 import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, repoCacheDir, imagesDir, imageBuildLogsDir, attemptStamp, runnerDir, rootfsPathFor } from './chunk-PA6CK6WQ.js';
 import { PROXY_WARNING_FLAG, withGitConfig, tokenHeader } from './chunk-BALIE3BA.js';
 import { RELAY_ID, RELAY_USER } from './chunk-MESOOLF4.js';