@outerlayer/cli 0.34.0-next.20261025133402 → 0.34.0-next.20261025210240

package/dist/{chunk-CCISO7EQ.js → chunk-HHFZXOBC.js}

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { checkStarterFiles, contextIsGoverned } from './chunk-AP2K4LPI.js';
-import { fleetCheck, checkBuildSkill, checkMachineSkills, checkCommittedMaintainedSkills, checkMaintainedReferences, checkIgnoredSkillFolders } from './chunk-3RAAYBSG.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-IW6Z337K.js';
-import { isLinkedRepository } from './chunk-XA6PGME5.js';
-import { sanitizeTerminal } from './chunk-MECW77XP.js';
-import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-AJYZNISW.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-UN3SQTVL.js';
+import { isLinkedRepository } from './chunk-FVCHHSHB.js';
 import { C } from './chunk-ANPNT6PM.js';
+import { fleetCheck, checkBuildSkill, checkMachineSkills, checkCommittedMaintainedSkills, checkMaintainedReferences, checkIgnoredSkillFolders } from './chunk-YHKU2NOZ.js';
+import { sanitizeTerminal } from './chunk-MECW77XP.js';
 import { checkFormerSkillNames } from './chunk-JWNH4ZTF.js';
-import { resolveGatewayCredentials, defaultFetch } from './chunk-TVGLNHEB.js';
-import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-CXQCBAKO.js';
+import { resolveGatewayCredentials, defaultFetch } from './chunk-3N77LUQI.js';
+import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-25GRRBTH.js';
 import { readStatuslineState, STATE_FRESH_MS } from './chunk-I7RZHMXW.js';
 import { hookCommandEscapesControlPlane, CONTROL_PLANE_DIR_VARIABLE } from './chunk-HCVLP7XA.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
+import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-AJYZNISW.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { readSettings, settingsPath, isOurStatuslineSlot, statuslineWrappedOriginal, REGISTERED_EVENTS, isOurHookCommand, ourCommandBins, cliBinResolvable, ourDirectScriptBins, wrappedOriginalCommand } from './chunk-URIZRCRY.js';
 import { readDeliveryRecord, readDegraded, readSourceCache } from './chunk-YQR6E6OV.js';
@@ -1195,8 +1195,8 @@ function doctorExitCode(checks) {
 
 // src/doctor-report.ts
 async function gatherDoctorChecks() {
-  const { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK } = await import('./build-disk-5ZQHYBO3.js');
-  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-UN3X6AP2.js');
+  const { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK } = await import('./build-disk-ZL46AEN3.js');
+  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-QASNKYM6.js');
   const configPath = defaultRunnerConfigPath();
   const runnerHost = hasRunnerBlock(configPath);
   const hooks = (() => {
@@ -1217,7 +1217,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-YOAF7QPL.js');
+    const { runnerHostChecks } = await import('./doctor-LK6E3XOW.js');
     const gateway = (() => {
       try {
         const { url, apiKey, appId } = loadRunnerConfig(configPath);
@@ -1244,10 +1244,8 @@ async function gatherDoctorChecks() {
     const service = await (async () => {
       const { existsSync: existsSync3 } = await import('fs');
       if (process.platform !== "linux" || !existsSync3("/run/systemd/system")) return void 0;
-      const { inspectService, realInspectProbes } = await import('./inspect-DNLXTXLA.js');
-      const { DEFAULT_UNIT_NAME } = await import('./install-QJWJFIWB.js');
-      const { dirname: dirname2 } = await import('path');
-      return inspectService(DEFAULT_UNIT_NAME, dirname2(configPath), realInspectProbes());
+      const { inspectRunnerService } = await import('./find-unit-4UR647S4.js');
+      return inspectRunnerService(configPath);
     })();
     checks.push(...await runnerHostChecks({ configPath, hooks, gateway, repos, runner, service }));
   }

package/dist/{chunk-AABYHGVO.js → chunk-INOUUSYI.js}

@@ -1,10 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { builtinKind } from './chunk-4XYC2663.js';
-import { parseSize } from './chunk-MPDLZCXM.js';
-import { runnerDir } from './chunk-N7LAEN3T.js';
-import { CLAUDE_CREDENTIAL_ID, CLAUDE_ENV_FILE, credentialLineIn, withoutCredentialLines } from './chunk-YOBQIXX6.js';
-import { FD_SLOTS_PER_BUILD, FD_STORE_ENV } from './chunk-HACGUL52.js';
+import { builtinKind, keepsHostBuilder } from './chunk-2D6CKNR7.js';
+import { parseSize } from './chunk-5AFPP3GZ.js';
+import { runnerDir } from './chunk-PXGU3GKY.js';
+import { FD_SLOTS_PER_BUILD, FD_STORE_ENV, BUILD_SLICE_MEMORY_ENV, CLAUDE_CREDENTIAL_ID, CLAUDE_ENV_FILE, credentialLineIn, withoutCredentialLines } from './chunk-G4W4B33M.js';
 import { existsSync, readFileSync, writeFileSync, chmodSync, renameSync } from 'fs';
 import { dirname, join } from 'path';
 import { spawnSync } from 'child_process';
@@ -35,6 +34,7 @@ User=${unit.user}
 ExecStart=${unit.execStart}
 ${unit.helper === void 0 ? "" : `Environment=OUTERLAYER_HELPER_SOCKET=${unit.helper.socket}
 `}${unit.fdStore === void 0 ? "" : `Environment=${FD_STORE_ENV}=${unit.fdStore}
+`}${unit.sliceMemoryBytes === void 0 ? "" : `Environment=${BUILD_SLICE_MEMORY_ENV}=${unit.sliceMemoryBytes}
 `}EnvironmentFile=-${escapeUnitPath(`${unit.configDir}/runner.env`)}
 ${unit.credential === "load" ? `LoadCredential=${CLAUDE_CREDENTIAL_ID}:${credentialPath(`${unit.configDir}/${CLAUDE_ENV_FILE}`)}` : `EnvironmentFile=-${escapeUnitPath(`${unit.configDir}/${CLAUDE_ENV_FILE}`)}`}
 Restart=on-failure
@@ -64,6 +64,15 @@ function checkFit(input) {
   const perBuild = parseSize(input.buildMemory);
   if (perBuild === void 0) return { fits: true };
   const neededBytes = input.concurrency * perBuild;
+  if (input.sliceBytes !== void 0) {
+    if (neededBytes <= input.sliceBytes) return { fits: true };
+    return {
+      fits: false,
+      neededBytes,
+      availableBytes: input.sliceBytes,
+      message: `runner.concurrency ${input.concurrency} times runner.build.memory ${input.buildMemory} needs ${gib(neededBytes)}, and the memory limit of the runner's build slice is ${gib(input.sliceBytes)}`
+    };
+  }
   const availableBytes = Math.max(0, input.usableBytes - RUNNER_RESERVE_BYTES);
   if (neededBytes <= availableBytes) return { fits: true };
   return {
@@ -173,6 +182,10 @@ function defaultRun(args) {
 
 // src/runner/service/install.ts
 var DEFAULT_UNIT_NAME = "outerlayer-runner";
+function unitNameProblem(name) {
+  if (/^[A-Za-z0-9][A-Za-z0-9_.-]{0,63}$/.test(name) && !name.includes("..")) return void 0;
+  return `\u2717 --unit-name ${JSON.stringify(name)} is not a unit name. Use up to 64 letters, digits, "_", "-" and ".", with no "..", starting with a letter or digit. Nothing is set up`;
+}
 var LOAD_CREDENTIAL_SINCE = 247;
 var CREDENTIAL_FILE_MODE = 384;
 function prepareCredentialFile(configDir, lines) {
@@ -235,6 +248,12 @@ function attempt(lines, step) {
   }
 }
 var OWN_HOOKS = "the hooks are the host's own executables, so the runner does not write a service for them: run `outerlayer runner install --service --print` to print the unit, and edit it for your hooks";
+function needsHostDocker(request) {
+  const provision = builtinKind(request.hooks.provision);
+  const cleanup = builtinKind(request.hooks.cleanup);
+  if (cleanup === "vm" && !keepsHostBuilder({ hooks: request.hooks, build: { imageBuild: request.imageBuild } }, request.builderDiskPinned)) return false;
+  return provision === "container" || provision === "vm" || cleanup === "container" || cleanup === "vm";
+}
 function installService(request, deps) {
   const unitName = request.unitName ?? DEFAULT_UNIT_NAME;
   const unitPath = unitPathFor(unitName);
@@ -251,10 +270,11 @@ function installService(request, deps) {
     credential,
     execStart: request.execStart,
     timeLimitMinutes: request.timeLimitMinutes,
-    docker: kind === "container" || kind === "vm" || builtinKind(request.hooks.cleanup) === "container" || builtinKind(request.hooks.cleanup) === "vm",
+    docker: needsHostDocker(request),
     ...request.helperSocket !== void 0 && request.helperUnit !== void 0 ? { helper: { unit: request.helperUnit, socket: request.helperSocket } } : {},
     // A microVM build under the helper keeps its sockets in the descriptor store, so the runner can restart and the build goes on.
-    ...kind === "vm" && request.helperSocket !== void 0 && request.helperUnit !== void 0 ? { fdStore: Math.max(1, request.concurrency) * FD_SLOTS_PER_BUILD } : {}
+    ...kind === "vm" && request.helperSocket !== void 0 && request.helperUnit !== void 0 ? { fdStore: Math.max(1, request.concurrency) * FD_SLOTS_PER_BUILD } : {},
+    sliceMemoryBytes: request.buildSliceMemoryBytes
   });
   if (request.print === true) return outcome(true, "printed", [], unit);
   if (own) return outcome(false, "refused", [OWN_HOOKS]);
@@ -281,7 +301,7 @@ function installService(request, deps) {
     return outcome(false, "refused", ["systemd was not found (/run/systemd/system is missing), so no service is set up. `--print` prints the unit for another service manager"]);
   }
   if (kind === "container" || kind === "vm") {
-    const fit = checkFit({ concurrency: request.concurrency, buildMemory: request.buildMemory, usableBytes: deps.usableMemoryBytes });
+    const fit = checkFit({ concurrency: request.concurrency, buildMemory: request.buildMemory, usableBytes: deps.usableMemoryBytes, sliceBytes: request.buildSliceMemoryBytes });
     if (!fit.fits) return outcome(false, "refused", [`${fit.message}. Nothing is set up: lower runner.concurrency or runner.build.memory, then run this again`]);
   }
   const existing = deps.systemd.read(unitPath);
@@ -441,4 +461,4 @@ function uninstallService(request, deps) {
   return outcome(true, "removed", lines);
 }
 
-export { DEFAULT_UNIT_NAME, RUNNER_RESERVE_BYTES, UNIT_MARKER, VM_SERVICE_NAME, checkFit, installService, realTaskScheduler, uninstallService, unitPathFor };
+export { DEFAULT_UNIT_NAME, RUNNER_RESERVE_BYTES, UNIT_MARKER, VM_SERVICE_NAME, checkFit, escapeUnitPath, installService, realTaskScheduler, uninstallService, unitNameProblem };

package/dist/{chunk-KDLQGTN6.js → chunk-JBCOUY4M.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LiveUploader } from './chunk-WIK5KUGK.js';
+import { LiveUploader } from './chunk-QANM5COC.js';
+import { spoolDir } from './chunk-25GRRBTH.js';
 import { CaptureDaemon } from './chunk-AJYZNISW.js';
-import { spoolDir } from './chunk-CXQCBAKO.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { mkdirSync, writeFileSync, rmSync } from 'fs';

package/dist/{chunk-POGPX7LI.js → chunk-JQSZTQSK.js}

@@ -1,30 +1,28 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { sha256OfFile, downloadPinned, VoiceDownloadError } from './chunk-2PGI6RDE.js';
-import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-EZ7L5IZU.js';
-import { readDefaultBranchHead, cloneRepository, buildRepositoryImage, prepareImageBuild, KEY_PREFIX, FETCHED_DIR, toolsDockerfile, TAG_HOST, metadataFromLabels, writeRecord, FETCHED_FFMPEG, FETCHED_GH, FETCHED_TINI, FETCHED_VOICE_DIR } from './chunk-3NFZN7H6.js';
-import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
+import { readDefaultBranchHead, cloneRepository, buildRepositoryImage, prepareImageBuild, KEY_PREFIX, FETCHED_DIR, toolsDockerfile, TAG_HOST, metadataFromLabels, writeRecord, FETCHED_FFMPEG, FETCHED_GH, FETCHED_TINI, FETCHED_VOICE_DIR } from './chunk-UO4FQAOX.js';
 import { currentCliBuild } from './chunk-OGFGZQA3.js';
-import { runExec, execCapture, waitForAgent } from './chunk-IHY457PB.js';
-import { GUEST_CID, linkVsockSockets } from './chunk-2RBIW2PD.js';
-import { retrySend, describeCallFailure, keepStagedContext, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, prefetchGovernedContext, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript, WORKFLOW_PERMISSION_REASON } from './chunk-AVLLJW5D.js';
-import { runnerImageVersion } from './chunk-36T6W5RA.js';
-import { runnerCredentialProblem, builtinKind, hostAllowed } from './chunk-4XYC2663.js';
-import { formatBytes, allocatedBytes } from './chunk-UC2DKBMS.js';
-import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, readDu, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun } from './chunk-MPDLZCXM.js';
-import { RecipeError, DOCKER_FEATURE, writeSanitizedRecipe, classifyProperties } from './chunk-3Z3MPR55.js';
-import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, hostHelperPinned, CLAUDE_CODE_VERSION, guestAssetsPinned, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, JAILER_BINARY_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, GUEST_ASSETS_VERSION, BUILDER_DISK_VERSION, builderDiskPinned, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, GH_VERSION, TINI_SHA256, TINI_VERSION, VOICE_PACK_FILES, BUILDER_DISK_SHA256, BUILDER_DISK_BASE_URL, DEFAULT_BASE_IMAGE } from './chunk-ES4ULBAL.js';
-import { postJson, WorkCommandError, getJson } from './chunk-IW6Z337K.js';
+import { runExec, execCapture, waitForAgent } from './chunk-2ILU7UAU.js';
+import { GUEST_CID, linkVsockSockets } from './chunk-OGPEHSNW.js';
+import { retrySend, describeCallFailure, keepStagedContext, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, prefetchGovernedContext, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript, WORKFLOW_PERMISSION_REASON } from './chunk-RFVIQLNB.js';
+import { runnerImageVersion } from './chunk-SYVRBBLW.js';
+import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-OQLF3MQQ.js';
+import { runnerCredentialProblem, builtinKind, hostAllowed } from './chunk-2D6CKNR7.js';
+import { formatBytes, allocatedBytes } from './chunk-KM2HLQE3.js';
+import { createDockerHost, builderSpec, RecipeError, DOCKER_FEATURE, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, readDu, JUDGE_DIR, MAX_ITEMS_BYTES, JUDGE_ITEMS, MAX_REPORT_BYTES, JUDGE_REPORT, spawnRun, writeSanitizedRecipe, classifyProperties } from './chunk-5AFPP3GZ.js';
+import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, hostHelperPinned, CLAUDE_CODE_VERSION, builderDiskPinned, guestAssetsPinned, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, JAILER_BINARY_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, GUEST_ASSETS_VERSION, BUILDER_DISK_VERSION, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, GH_VERSION, TINI_SHA256, TINI_VERSION, VOICE_PACK_FILES, BUILDER_DISK_SHA256, BUILDER_DISK_BASE_URL, DEFAULT_BASE_IMAGE } from './chunk-4UPET3R7.js';
+import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
+import { postJson, WorkCommandError, getJson } from './chunk-UN3SQTVL.js';
 import { sanitizeTerminal } from './chunk-MECW77XP.js';
-import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-AJYZNISW.js';
-import { signerFor } from './chunk-XLJLR7EK.js';
-import { vmAssetsDir, RUNNER_DIR_MODE, rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, buildsDir, buildDir, runnerDir, deliveryDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, SHIM_DIR, vsockPath, builderCacheDiskPath, builderConsolePath } from './chunk-N7LAEN3T.js';
-import { claudeCredential, parseIsolation, proxyEnvironment, withProxyWarningHidden, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, withHooksPath, startBuildServices, BUILT_IN_NAMES, repositoriesOf, primaryOf, RELAY_PORT, repositoryPath, CHECKOUT_DIR, lifecycleWorkdir, buildEnvironment, writeBuildMavenSettings, checkEnvironment, AGENT_CREDENTIAL_MISSING, mavenSettingsXml, namesGlobalSettings, MAVEN_NO_PROXY_NOTE, mavenArgs, MAVEN_SPACE_NOTE, writeMavenSettings, checkoutPath, JOB_MOUNT } from './chunk-YOBQIXX6.js';
+import { signerFor } from './chunk-MOI2KDLH.js';
 import { sharedSkillNames, skillConflictMessage } from './chunk-FGF52V4V.js';
 import { versionAtLeast, MINIMUM_CLAUDE_VERSION } from './chunk-HCVLP7XA.js';
+import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-AJYZNISW.js';
 import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-FGXT5OXS.js';
 import { downconvertSession } from './chunk-EOTMDIYC.js';
-import { realFdStorePort } from './chunk-HACGUL52.js';
+import { vmAssetsDir, RUNNER_DIR_MODE, rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, buildsDir, buildDir, runnerDir, deliveryDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, SHIM_DIR, vsockPath, builderCacheDiskPath, builderConsolePath } from './chunk-PXGU3GKY.js';
+import { claudeCredential, parseIsolation, proxyEnvironment, withProxyWarningHidden, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, withHooksPath, startBuildServices, BUILT_IN_NAMES, repositoriesOf, primaryOf, RELAY_PORT, repositoryPath, CHECKOUT_DIR, lifecycleWorkdir, buildEnvironment, writeBuildMavenSettings, checkEnvironment, AGENT_CREDENTIAL_MISSING, mavenSettingsXml, namesGlobalSettings, MAVEN_NO_PROXY_NOTE, mavenArgs, MAVEN_SPACE_NOTE, writeMavenSettings, checkoutPath, JOB_MOUNT, realFdStorePort } from './chunk-G4W4B33M.js';
 import { RELAY_USER, RELAY_ID, UNKNOWN_TRANSPORT_REASON, DOCKER_DESKTOP_REASON, MAX_MALFORMED_SESSIONS, MALFORMED_REASON, JOIN_WAIT_MS, MAX_OPEN_STREAMS, STREAM_RESET_RATE, STREAM_RESET_BURST, STREAM_WINDOW, SESSION_WINDOW, targetOfPath } from './chunk-MESOOLF4.js';
 import { spawn, spawnSync } from 'child_process';
 import { mkdirSync, existsSync, readFileSync, mkdtempSync, rmSync, chmodSync, truncateSync, statSync, accessSync, constants, readdirSync, writeFileSync, lstatSync, copyFileSync, renameSync, rmdirSync, unlinkSync, linkSync, openSync, closeSync, cpSync, writeSync, appendFileSync, createWriteStream, createReadStream } from 'fs';
@@ -329,14 +327,6 @@ function converterScript(workDir = "/tmp/rootfs") {
     ...workDir === "/tmp/rootfs" ? [] : ['rm -rf "$rootfs"']
   ].join("\n");
 }
-function templateScript() {
-  return [
-    "set -eu",
-    'truncate -s "$BYTES" "/out/$OUT_NAME"',
-    'mke2fs -q -F -t ext4 -m 0 -E lazy_itable_init=1,lazy_journal_init=1,nodiscard "/out/$OUT_NAME"',
-    'chown "$HOST_UID:$HOST_GID" "/out/$OUT_NAME"'
-  ].join("\n");
-}
 var ids = () => ({ uid: String(process.getuid?.() ?? 0), gid: String(process.getgid?.() ?? 0) });
 function converterArgs(dest, memoryBytes, extra, script) {
   const { uid, gid } = ids();
@@ -405,8 +395,11 @@ function createRootfsHost() {
         await spawnRun("docker", ["rm", "--force", "--volumes", container], { env: env() });
       }
     },
-    async makeTemplate({ bytes, dest, memoryBytes }) {
-      const made = await spawnRun("docker", converterArgs(dest, memoryBytes, ["-e", `BYTES=${bytes}`], templateScript()), { env: env() });
+    async makeTemplate({ bytes, dest }) {
+      writeFileSync(dest, "", { mode: RUNNER_FILE_MODE });
+      truncateSync(dest, bytes);
+      const path = [process.env.PATH, "/usr/sbin", "/sbin"].filter((entry) => entry !== void 0 && entry !== "").join(":");
+      const made = await spawnRun("mke2fs", ["-q", "-F", "-t", "ext4", "-m", "0", "-E", "lazy_itable_init=1,lazy_journal_init=1,nodiscard", dest], { env: { ...env(), PATH: path } });
       if (made.status !== 0) throw new Error(`making the empty build disk failed: ${firstLine(made.stderr)}`);
     },
     async imageConfig(imageId) {
@@ -4964,8 +4957,9 @@ function supportsContainerBuilds(machine) {
   if (kind !== "engine" && !(kind === "desktop" && machine.inImage === true)) return false;
   return Number.parseInt(version ?? "", 10) >= MIN_ENGINE_MAJOR;
 }
-function supportsMicroVmBuilds(machine) {
-  return machine.platform === "linux" && machine.kvm?.state === "usable" && supportsContainerBuilds(machine) && microVmAssetsPinned(machine);
+function supportsMicroVmBuilds(machine, imageBuild = "vm") {
+  if (!(machine.platform === "linux" && machine.kvm?.state === "usable" && microVmAssetsPinned(machine))) return false;
+  return supportsContainerBuilds(machine) || imageBuild === "vm" && builderDiskPinned(machine.arch);
 }
 function microVmArchSupported(machine) {
   return MICROVM_ARCHES.includes(machine.arch ?? "");

package/dist/{chunk-JZD2NTRH.js → chunk-K2UAQWYO.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-3M6UYJSR.js';
-import { resolveRepoIdentity } from './chunk-AJYZNISW.js';
+import { autoConnect } from './chunk-AVPLEFQR.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { defaultFetch, unauthorizedMessage, resolveGatewayCredentials } from './chunk-TVGLNHEB.js';
+import { defaultFetch, unauthorizedMessage, resolveGatewayCredentials } from './chunk-3N77LUQI.js';
+import { resolveRepoIdentity } from './chunk-AJYZNISW.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{chunk-UC2DKBMS.js → chunk-KM2HLQE3.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { parseSize, BUILD_LABEL, RUNNER_LABEL, runnerLabelValue } from './chunk-MPDLZCXM.js';
-import { buildsDir, rootfsDir, runnerDir, imagesDir, builderCacheDiskPath } from './chunk-N7LAEN3T.js';
+import { parseSize, BUILD_LABEL, RUNNER_LABEL, runnerLabelValue } from './chunk-5AFPP3GZ.js';
+import { buildsDir, rootfsDir, runnerDir, imagesDir, builderCacheDiskPath } from './chunk-PXGU3GKY.js';
 import { spawnSync } from 'child_process';
 import { statfsSync, statSync, existsSync, readdirSync } from 'fs';
 import { dirname, join } from 'path';

package/dist/{chunk-XLJLR7EK.js → chunk-MOI2KDLH.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { hostKeyPath, runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-N7LAEN3T.js';
+import { hostKeyPath, runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-PXGU3GKY.js';
 import { generateKeyPairSync, createPrivateKey, createPublicKey, sign } from 'crypto';
 import { existsSync, mkdirSync, writeFileSync, readFileSync } from 'fs';
 

package/dist/{chunk-BUF6DSSM.js → chunk-NW26E4YU.js}

@@ -2,11 +2,11 @@
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
 import { detectActiveSession, transcriptPathForSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-3M6UYJSR.js';
-import { resolveRepoIdentity, defaultProjectsDir, findTranscripts, sessionIdFromPath, scrubText } from './chunk-AJYZNISW.js';
+import { autoConnect } from './chunk-AVPLEFQR.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-TVGLNHEB.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-3N77LUQI.js';
 import { readLatestProvenanceForSession } from './chunk-ZJSNLVCE.js';
+import { resolveRepoIdentity, defaultProjectsDir, findTranscripts, sessionIdFromPath, scrubText } from './chunk-AJYZNISW.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';

package/dist/{chunk-ZV2JJPDS.js → chunk-O4Z2MNNL.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { scrubReason, stripTerminalControls } from './chunk-RNVBSRZZ.js';
-import { RunnerAlreadyRunningError, readPidFile } from './chunk-ENFBYN4A.js';
+import { scrubReason, stripTerminalControls } from './chunk-FD5ASWTG.js';
+import { checkFit, RUNNER_RESERVE_BYTES } from './chunk-INOUUSYI.js';
+import { RunnerAlreadyRunningError, readPidFile } from './chunk-YNMVVQOQ.js';
 import { isSameProcess } from './chunk-JBJTC3UU.js';
-import { checkFit, RUNNER_RESERVE_BYTES } from './chunk-AABYHGVO.js';
-import { isSignatureRefusal, postJson } from './chunk-IW6Z337K.js';
-import { signerFor } from './chunk-XLJLR7EK.js';
-import { pidFilePath } from './chunk-N7LAEN3T.js';
+import { isSignatureRefusal, postJson } from './chunk-UN3SQTVL.js';
+import { signerFor } from './chunk-MOI2KDLH.js';
+import { pidFilePath } from './chunk-PXGU3GKY.js';
 import { readFileSync } from 'fs';
 
 createRequire(import.meta.url);

package/dist/{chunk-2RBIW2PD.js → chunk-OGPEHSNW.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RELAY_PORT, GATEWAY_SOCKET, GATEWAY_PORT, CLAUDE_SOCKET, CLAUDE_PORT, DESTINATION_BASE_PORT } from './chunk-YOBQIXX6.js';
+import { RELAY_PORT, GATEWAY_SOCKET, GATEWAY_PORT, CLAUDE_SOCKET, CLAUDE_PORT, DESTINATION_BASE_PORT } from './chunk-G4W4B33M.js';
 import { symlinkSync, unlinkSync } from 'fs';
 import { join } from 'path';
 

package/dist/{chunk-EZ7L5IZU.js → chunk-OQLF3MQQ.js}

@@ -1,9 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { DEFAULT_UNIT_NAME } from './chunk-AABYHGVO.js';
-import { RUNNER_FILE_MODE } from './chunk-N7LAEN3T.js';
-import { claudeEnvPath, withoutCredentialLines } from './chunk-YOBQIXX6.js';
-import { parseRunnerEnv } from './chunk-HACGUL52.js';
+import { DEFAULT_UNIT_NAME } from './chunk-INOUUSYI.js';
+import { RUNNER_FILE_MODE } from './chunk-PXGU3GKY.js';
+import { claudeEnvPath, withoutCredentialLines, parseRunnerEnv } from './chunk-G4W4B33M.js';
 import { existsSync, readFileSync, writeFileSync, renameSync, rmSync } from 'fs';
 import { join, dirname } from 'path';
 

package/dist/{chunk-J246WRLZ.js → chunk-OS7DJOQJ.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { currentLink } from './chunk-DUPM5LVJ.js';
+import { currentLink } from './chunk-UMYYYF7B.js';
 import { readFileSync, statSync, chmodSync, mkdirSync, writeFileSync, renameSync, rmSync, existsSync, lstatSync, accessSync, constants, realpathSync } from 'fs';
 import { randomBytes } from 'crypto';
 import { join, dirname, delimiter, resolve } from 'path';

package/dist/{chunk-O5G6VQGZ.js → chunk-PFHTT4PP.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { readNewestDemo } from './chunk-ER6KQCVJ.js';
-import { runEmitArtifact } from './chunk-E34FRRSW.js';
+import { runEmitArtifact } from './chunk-TBKV4L2W.js';
 import { VoiceDownloadError, downloadPinned, sha256OfFile } from './chunk-2PGI6RDE.js';
-import { VOICE_PACK_FILES, VOICE_PACK_VERSION } from './chunk-ES4ULBAL.js';
+import { VOICE_PACK_FILES, VOICE_PACK_VERSION } from './chunk-4UPET3R7.js';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-3M6UYJSR.js';
-import { resolveRepoIdentity } from './chunk-AJYZNISW.js';
+import { autoConnect } from './chunk-AVPLEFQR.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { defaultFetch, resolveGatewayCredentials } from './chunk-TVGLNHEB.js';
+import { defaultFetch, resolveGatewayCredentials } from './chunk-3N77LUQI.js';
+import { resolveRepoIdentity } from './chunk-AJYZNISW.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { ARTIFACT_MAX_BYTES, ARTIFACT_MAX_CAPTION_LENGTH, DEMO_RECORD_MEDIA_TYPE, ARTIFACT_MAX_REPLACES_TARGETS, DemoManifestSchema, ARTIFACT_KINDS } from './chunk-EOTMDIYC.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{chunk-N7LAEN3T.js → chunk-PXGU3GKY.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { BUILD_HOME } from './chunk-YOBQIXX6.js';
+import { BUILD_HOME } from './chunk-G4W4B33M.js';
 import { join, dirname } from 'path';
 
 createRequire(import.meta.url);

package/dist/{chunk-WIK5KUGK.js → chunk-QANM5COC.js}

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { uploadSpooledSteps } from './chunk-LMICI7AY.js';
+import { uploadSpooledSteps } from './chunk-EGVHFHY4.js';
 import { LaunchFilter } from './chunk-ESVW4MJY.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-MECW77XP.js';
-import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-AJYZNISW.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { cliFetch, resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-TVGLNHEB.js';
+import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-MECW77XP.js';
+import { cliFetch, resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-3N77LUQI.js';
 import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-PJDQPF5N.js';
-import { signerFor, signRunnerRequest } from './chunk-XLJLR7EK.js';
-import { writeSyncStatus, spoolDir } from './chunk-CXQCBAKO.js';
+import { signerFor, signRunnerRequest } from './chunk-MOI2KDLH.js';
+import { writeSyncStatus, spoolDir } from './chunk-25GRRBTH.js';
 import { readLatestProvenanceForSession, readContextProvenance } from './chunk-ZJSNLVCE.js';
 import { hookExecSpoolPath } from './chunk-2O5KA67H.js';
 import { applyReportedCost } from './chunk-BKO6JEZI.js';
 import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
+import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-AJYZNISW.js';
 import { readLaunchSpoolState, launchStatusIsDecisive, launchedItemsBySession, launchesPath } from './chunk-T2Q7ISPE.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { removeJournalHooks } from './chunk-TUSYOL2O.js';

package/dist/{chunk-PSXVAOEB.js → chunk-QQP3S5FU.js}

@@ -2,10 +2,10 @@
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-3M6UYJSR.js';
-import { resolveRepoIdentity } from './chunk-AJYZNISW.js';
+import { autoConnect } from './chunk-AVPLEFQR.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-TVGLNHEB.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-3N77LUQI.js';
+import { resolveRepoIdentity } from './chunk-AJYZNISW.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { CriteriaListSchema } from './chunk-EOTMDIYC.js';

package/dist/{chunk-AVLLJW5D.js → chunk-RFVIQLNB.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { WorkCommandError, postJson } from './chunk-IW6Z337K.js';
-import { defaultGitRunner, materializeContext, fetchControlPlaneCommit, lookupGoverningSource } from './chunk-QOUR4CQ7.js';
-import { signingFetchFor } from './chunk-TVGLNHEB.js';
-import { signerFor } from './chunk-XLJLR7EK.js';
-import { SHIM_DIR, stagedContextDir, contextHomeDir, deliveryDir, keptContextDir } from './chunk-N7LAEN3T.js';
+import { WorkCommandError, postJson } from './chunk-UN3SQTVL.js';
+import { defaultGitRunner, materializeContext, fetchControlPlaneCommit, lookupGoverningSource } from './chunk-CAQCDYKF.js';
+import { signingFetchFor } from './chunk-3N77LUQI.js';
+import { signerFor } from './chunk-MOI2KDLH.js';
 import { unsupportedLayout, layoutRefusalReason, composeDelivery } from './chunk-FGF52V4V.js';
 import { SHIM_SCRIPT, GOVERNANCE_VARIABLE } from './chunk-HCVLP7XA.js';
 import { readDegraded, readContextManifest, readSourceCache } from './chunk-YQR6E6OV.js';
+import { SHIM_DIR, stagedContextDir, contextHomeDir, deliveryDir, keptContextDir } from './chunk-PXGU3GKY.js';
 import { fstatSync, mkdirSync, writeFileSync, chmodSync, rmSync, cpSync, readFileSync, existsSync, lstatSync } from 'fs';
 import { relative, join, dirname } from 'path';
 

package/dist/{chunk-Z76GVJGQ.js → chunk-RHV5SRI2.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { stripTerminalControls } from './chunk-RNVBSRZZ.js';
-import { tagToPull, imageTag, pullInstruction, readUpdateStatus, runnerImageVersion } from './chunk-36T6W5RA.js';
+import { stripTerminalControls } from './chunk-FD5ASWTG.js';
+import { tagToPull, imageTag, pullInstruction, readUpdateStatus, runnerImageVersion } from './chunk-SYVRBBLW.js';
 import { readFileSync } from 'fs';
 
 createRequire(import.meta.url);
@@ -55,7 +55,7 @@ function envNamesOf(row, imageEnv) {
   return [...new Set(names)].sort();
 }
 async function readOwnContainer(deps = {}) {
-  const run = deps.run ?? (await import('./docker-YZKRM7IP.js')).spawnRun;
+  const run = deps.run ?? (await import('./docker-TAC6G4VU.js')).spawnRun;
   const ids = candidateIds(deps.env ?? process.env, deps.readFile ?? ((path) => readFileSync(path, "utf8")));
   if (ids.length === 0) return { ok: false, reason: "the runner cannot tell which container it runs in: HOSTNAME is empty and /proc/self/mountinfo names none" };
   let problem = "";

package/dist/{chunk-75KZUBHD.js → chunk-SI6WDF3U.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RELAY_PORT, BUILD_HOME } from './chunk-YOBQIXX6.js';
+import { RELAY_PORT, BUILD_HOME } from './chunk-G4W4B33M.js';
 import { createServer, connect } from 'net';
 
 createRequire(import.meta.url);

package/dist/chunk-SUOZYOWO.js

@@ -0,0 +1,51 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+import { escapeUnitPath, UNIT_MARKER, DEFAULT_UNIT_NAME } from './chunk-INOUUSYI.js';
+import { inspectService, realInspectProbes } from './chunk-G4W4B33M.js';
+import { realpathSync, readFileSync, readdirSync } from 'fs';
+import { resolve, dirname, join } from 'path';
+
+createRequire(import.meta.url);
+function realUnitFiles(directory = "/etc/systemd/system") {
+  return {
+    list: () => {
+      try {
+        return readdirSync(directory).filter((name) => name.endsWith(".service")).map((name) => name.slice(0, -".service".length));
+      } catch {
+        return [];
+      }
+    },
+    read: (name) => {
+      try {
+        return readFileSync(join(directory, `${name}.service`), "utf8");
+      } catch {
+        return void 0;
+      }
+    }
+  };
+}
+function findServiceUnit(configDir, units = realUnitFiles()) {
+  const absolute = resolve(configDir);
+  const folders = /* @__PURE__ */ new Set([absolute, resolvedOr(absolute)]);
+  const lines = [...folders].map((folder) => `EnvironmentFile=-${escapeUnitPath(`${folder}/runner.env`)}`);
+  for (const name of units.list()) {
+    const text = units.read(name);
+    if (text?.startsWith(UNIT_MARKER) !== true) continue;
+    const have = text.split("\n");
+    if (lines.some((line) => have.includes(line))) return name;
+  }
+  return DEFAULT_UNIT_NAME;
+}
+function resolvedOr(path) {
+  try {
+    return realpathSync(path);
+  } catch {
+    return path;
+  }
+}
+function inspectRunnerService(configPath, probes = realInspectProbes(), units = realUnitFiles()) {
+  const configDir = dirname(configPath);
+  return inspectService(findServiceUnit(configDir, units), configDir, probes);
+}
+
+export { findServiceUnit, inspectRunnerService };

package/dist/{chunk-36T6W5RA.js → chunk-SYVRBBLW.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { isVersion, compareVersions } from './chunk-TQMI335S.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-N7LAEN3T.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-PXGU3GKY.js';
 import { readFileSync, mkdirSync, writeFileSync, renameSync } from 'fs';
 import { join } from 'path';
 

package/dist/{chunk-E34FRRSW.js → chunk-TBKV4L2W.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { staleBuildRefusal, staleBuildWarning, detectCi } from './chunk-WIK5KUGK.js';
+import { staleBuildRefusal, staleBuildWarning, detectCi } from './chunk-QANM5COC.js';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-3M6UYJSR.js';
+import { autoConnect } from './chunk-AVPLEFQR.js';
+import { C } from './chunk-ANPNT6PM.js';
 import { readEffectiveArtifactSpoolState, localArtifactIds, isArtifactTombstoned, artifactBlobsDir, appendArtifactRecord, artifactsSpoolPath, findPendingArtifactRecord, sanitizeTerminal, appendArtifactTombstone } from './chunk-MECW77XP.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-3N77LUQI.js';
 import { resolveRepoIdentity } from './chunk-AJYZNISW.js';
-import { C } from './chunk-ANPNT6PM.js';
-import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-TVGLNHEB.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { ARTIFACT_MAX_CAPTION_LENGTH, ArtifactCriterionIdSchema, ARTIFACT_MAX_BYTES, ARTIFACT_MAX_FILENAME_LENGTH, mediaTypeForArtifactPath, inferArtifactKind, ARTIFACT_MAX_REPLACES_TARGETS, parseTestSelector, parseJunit, bindTests } from './chunk-EOTMDIYC.js';

package/dist/{chunk-56ZHWIR2.js → chunk-TFPNPS4Q.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-N7LAEN3T.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-PXGU3GKY.js';
 import { readFileSync, existsSync, rmSync, mkdirSync, writeFileSync, renameSync } from 'fs';
 import { join } from 'path';
 

package/dist/{chunk-DUPM5LVJ.js → chunk-UMYYYF7B.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-N7LAEN3T.js';
+import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-PXGU3GKY.js';
 import { readlinkSync, realpathSync, mkdirSync, unlinkSync, symlinkSync, renameSync, readFileSync, writeFileSync, rmSync, existsSync, readdirSync } from 'fs';
 import { join, basename, sep, resolve } from 'path';