@outerlayer/cli 0.34.0-next.20261027193835 → 0.34.0-next.20261028002917

package/dist/{agent-setup-THDNZ5ME.js → agent-setup-6FPE6EYN.js}

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { keepHandWritten, runAgentSetup } from './chunk-FVVHQIZR.js';
+export { keepHandWritten, runAgentSetup } from './chunk-6OLXDSQ6.js';
 import './chunk-TWFBOZQ5.js';
 import './chunk-KT4CN6OU.js';
 import './chunk-J7EJMIDR.js';
 import './chunk-ANPNT6PM.js';
 import './chunk-LYCJQOO2.js';
-import './chunk-36M4KVBT.js';
+import './chunk-5IUC2B6J.js';
 import './chunk-LMYRR5MO.js';
-import './chunk-62URQYCB.js';
+import './chunk-PAGB3DCI.js';
 import './chunk-PJDQPF5N.js';
-import './chunk-RJZZFAXS.js';
+import './chunk-VKYU4HHW.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-OVNF4LLC.js';
@@ -24,8 +24,8 @@ import './chunk-TUSYOL2O.js';
 import './chunk-XFJ7YOPD.js';
 import './chunk-DINRXUQA.js';
 import './chunk-VNVZDWO3.js';
-import './chunk-3VJYDWFV.js';
-import './chunk-GMKDAF37.js';
+import './chunk-AJTGTSNA.js';
+import './chunk-L2OARQKP.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{bridge-MLB57JP6.js → bridge-JGIHPGMY.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig } from './chunk-GPO7F757.js';
-import './chunk-GMKDAF37.js';
+export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig } from './chunk-QJ2SNBHL.js';
+import './chunk-L2OARQKP.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{build-25GDCEZ7.js → build-AAQ4PVP2.js}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { KEY_PREFIX, SHARED_NAME, SHARED_OWNER, SHARED_REPOSITORY, TAG_HOST, baseLines, buildRepositoryImage, metadataFromLabels, prepareImageBuild, writeRecord } from './chunk-5FHBVV25.js';
-import './chunk-CMMEJJTL.js';
-import './chunk-FLHBUQ2W.js';
-export { RecipeError } from './chunk-X7M73LKT.js';
-import './chunk-WX2HW2G2.js';
-import './chunk-3FTIUB7I.js';
+export { KEY_PREFIX, SHARED_NAME, SHARED_OWNER, SHARED_REPOSITORY, TAG_HOST, baseLines, buildRepositoryImage, metadataFromLabels, prepareImageBuild, writeRecord } from './chunk-BQ4C47K2.js';
+import './chunk-KTVZ7TZY.js';
+import './chunk-AHWMY3MS.js';
+export { RecipeError } from './chunk-CM4J53WZ.js';
+import './chunk-D3CT6XQ4.js';
+import './chunk-3X6OSXSB.js';
 import './chunk-JBJTC3UU.js';
-import './chunk-RJZZFAXS.js';
+import './chunk-VKYU4HHW.js';
 import './chunk-A6PJSNP6.js';
 import './chunk-DINRXUQA.js';
-import './chunk-3VJYDWFV.js';
-import './chunk-GMKDAF37.js';
+import './chunk-AJTGTSNA.js';
+import './chunk-L2OARQKP.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{build-disk-NFMQCZM3.js → build-disk-L7JRQA22.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK, DOCKER_CACHE_MS, allocatedBytes, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-LYX2RRSF.js';
-import './chunk-FLHBUQ2W.js';
-import './chunk-X7M73LKT.js';
-import './chunk-WX2HW2G2.js';
-import './chunk-RJZZFAXS.js';
+export { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK, DOCKER_CACHE_MS, allocatedBytes, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-EGJY6MBC.js';
+import './chunk-AHWMY3MS.js';
+import './chunk-CM4J53WZ.js';
+import './chunk-D3CT6XQ4.js';
+import './chunk-VKYU4HHW.js';
 import './chunk-A6PJSNP6.js';
 import './chunk-DINRXUQA.js';
-import './chunk-3VJYDWFV.js';
-import './chunk-GMKDAF37.js';
+import './chunk-AJTGTSNA.js';
+import './chunk-L2OARQKP.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-27T19:40:53.907Z+87ae1ec","root":"/home/runner/work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-28T00:31:49.139Z+965fd25","root":"/home/runner/work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-OWDGC3VQ.js → builder-LMLAVVVF.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-FLHBUQ2W.js';
-import './chunk-X7M73LKT.js';
-import './chunk-WX2HW2G2.js';
-import './chunk-RJZZFAXS.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-AHWMY3MS.js';
+import './chunk-CM4J53WZ.js';
+import './chunk-D3CT6XQ4.js';
+import './chunk-VKYU4HHW.js';
 import './chunk-A6PJSNP6.js';
 import './chunk-DINRXUQA.js';
-import './chunk-3VJYDWFV.js';
-import './chunk-GMKDAF37.js';
+import './chunk-AJTGTSNA.js';
+import './chunk-L2OARQKP.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{check-IFHLERRX.js → check-ZULOZVV4.js}

@@ -1,64 +1,64 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-S5U6RKQX.js';
+import { probeCredentials } from './chunk-ILTVAD5Y.js';
 import './chunk-3JVYMD4G.js';
-import './chunk-Y4WJ4BLX.js';
+import './chunk-GMEXR6PY.js';
 import './chunk-E7R2GIAW.js';
 import './chunk-MH6QLXUO.js';
-import './chunk-UZIAZXXO.js';
-import './chunk-SKAML7GB.js';
-import './chunk-BS4CZMT6.js';
-import './chunk-Y7MF32DM.js';
+import './chunk-77D5ENBA.js';
+import './chunk-SYMBXSAT.js';
+import './chunk-GET5HKLM.js';
+import './chunk-PBI4CM4M.js';
 import './chunk-6CK2OC4Q.js';
 import './chunk-ZVB57WI6.js';
-import './chunk-5ARXP3BP.js';
+import './chunk-UEDRRWZ3.js';
 import './chunk-I3LTIAOR.js';
-import './chunk-QRIE4JZE.js';
-import './chunk-7SJNVGVC.js';
-import './chunk-RCAMBC3H.js';
+import './chunk-JXY66VYX.js';
+import './chunk-32FAPJFD.js';
+import './chunk-NOEJGR4X.js';
 import './chunk-ESVW4MJY.js';
-import './chunk-GPO7F757.js';
-import { managedProblems, managedFactsOf } from './chunk-4HA4S3U2.js';
-import './chunk-WR2GRWK3.js';
+import './chunk-QJ2SNBHL.js';
+import { managedProblems, managedFactsOf } from './chunk-3E7QAXUW.js';
+import './chunk-I4YOWQH7.js';
 import './chunk-TBT347UY.js';
-import { findServiceUnit } from './chunk-7TLGRE5F.js';
+import { findServiceUnit } from './chunk-5LUN7TTR.js';
 import './chunk-TZMDRHWB.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, HELPER_ENV, helperSocketPath, probeHelper, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-LSFP57LI.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, HELPER_ENV, helperSocketPath, probeHelper, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-VB4QD4WN.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-5FHBVV25.js';
-import './chunk-CMMEJJTL.js';
+import './chunk-BQ4C47K2.js';
+import './chunk-KTVZ7TZY.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-JVNQNKHV.js';
-import './chunk-BS3OYFAD.js';
-import './chunk-7Q7GQELE.js';
-import './chunk-CFJOONWM.js';
+import './chunk-PHIQHIRJ.js';
+import './chunk-G4SOMWXL.js';
+import './chunk-PPQTTJSW.js';
+import './chunk-LBKCYEJT.js';
 import './chunk-TQMI335S.js';
-import './chunk-OP2L7OXA.js';
-import './chunk-OHTMTMFX.js';
-import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-JWMJMQRF.js';
-import './chunk-LYX2RRSF.js';
-import './chunk-FLHBUQ2W.js';
-import './chunk-X7M73LKT.js';
-import './chunk-WX2HW2G2.js';
-import './chunk-3FTIUB7I.js';
+import './chunk-6LS62EO4.js';
+import './chunk-NBETYM32.js';
+import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-GXMMILQ4.js';
+import './chunk-EGJY6MBC.js';
+import './chunk-AHWMY3MS.js';
+import './chunk-CM4J53WZ.js';
+import './chunk-D3CT6XQ4.js';
+import './chunk-3X6OSXSB.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-KT4CN6OU.js';
 import './chunk-J7EJMIDR.js';
-import './chunk-6IMQXBTZ.js';
+import './chunk-GJYGOFF3.js';
 import './chunk-IP7BIBXJ.js';
-import './chunk-EYJRVHBN.js';
-import './chunk-NO6E72RM.js';
+import './chunk-BTDBDTUY.js';
+import './chunk-4J5GRWAY.js';
 import './chunk-NWHU5G6R.js';
 import './chunk-G2JWZDFA.js';
 import './chunk-ANPNT6PM.js';
 import './chunk-IXPH4EXK.js';
 import './chunk-LYCJQOO2.js';
-import './chunk-36M4KVBT.js';
+import './chunk-5IUC2B6J.js';
 import './chunk-LMYRR5MO.js';
-import './chunk-62URQYCB.js';
+import './chunk-PAGB3DCI.js';
 import './chunk-PJDQPF5N.js';
-import './chunk-RJZZFAXS.js';
-import './chunk-4QQJTJUN.js';
+import './chunk-VKYU4HHW.js';
+import './chunk-57WFXHCB.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-2O5KA67H.js';
 import './chunk-BKO6JEZI.js';
@@ -80,8 +80,8 @@ import './chunk-TUSYOL2O.js';
 import './chunk-XFJ7YOPD.js';
 import './chunk-DINRXUQA.js';
 import './chunk-VNVZDWO3.js';
-import './chunk-3VJYDWFV.js';
-import { claudeEnvPath, parseRunnerEnv } from './chunk-GMKDAF37.js';
+import './chunk-AJTGTSNA.js';
+import { claudeEnvPath, parseRunnerEnv } from './chunk-L2OARQKP.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';
 import { readFileSync } from 'fs';

package/dist/{chunk-JO4SAEHH.js → chunk-23XAA7YD.js}

@@ -2,9 +2,9 @@
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
 import { detectActiveSession, transcriptPathForSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-EYJRVHBN.js';
+import { autoConnect } from './chunk-BTDBDTUY.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-62URQYCB.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-PAGB3DCI.js';
 import { readLatestProvenanceForSession } from './chunk-ZJSNLVCE.js';
 import { resolveRepoIdentity, defaultProjectsDir, findTranscripts, sessionIdFromPath, scrubText } from './chunk-A6PJSNP6.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';

package/dist/{chunk-7SJNVGVC.js → chunk-32FAPJFD.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { uploadSpooledSteps } from './chunk-RCAMBC3H.js';
+import { uploadSpooledSteps } from './chunk-NOEJGR4X.js';
 import { LaunchFilter } from './chunk-ESVW4MJY.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-IXPH4EXK.js';
-import { cliFetch, resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-62URQYCB.js';
+import { cliFetch, resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-PAGB3DCI.js';
 import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-PJDQPF5N.js';
-import { signerFor, signRunnerRequest } from './chunk-RJZZFAXS.js';
-import { writeSyncStatus, spoolDir } from './chunk-4QQJTJUN.js';
+import { signerFor, signRunnerRequest } from './chunk-VKYU4HHW.js';
+import { writeSyncStatus, spoolDir } from './chunk-57WFXHCB.js';
 import { readLatestProvenanceForSession, readContextProvenance } from './chunk-ZJSNLVCE.js';
 import { hookExecSpoolPath } from './chunk-2O5KA67H.js';
 import { applyReportedCost } from './chunk-BKO6JEZI.js';
@@ -19,7 +19,7 @@ import { cliInvocation } from './chunk-CRB3POP4.js';
 import { removeJournalHooks } from './chunk-TUSYOL2O.js';
 import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-DINRXUQA.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import { SCRUB_ENV_VARIABLE } from './chunk-GMKDAF37.js';
+import { SCRUB_ENV_VARIABLE } from './chunk-L2OARQKP.js';
 import { dirname, basename, join, sep } from 'path';
 import { statSync, readFileSync, readdirSync, mkdirSync, writeFileSync, renameSync, existsSync, rmSync } from 'fs';
 import { execFileSync } from 'child_process';

package/dist/{chunk-4HA4S3U2.js → chunk-3E7QAXUW.js}

@@ -1,11 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { placeholderQueues, placeholderProblem } from './chunk-LSFP57LI.js';
-import { checkFit, RUNNER_RESERVE_BYTES } from './chunk-OHTMTMFX.js';
-import { builtinKind, EGRESS_SWITCHABLE_KEYS, imageBuildOf, keepsHostBuilder } from './chunk-JWMJMQRF.js';
-import { realBuildDiskProbe, checkDiskFit, DEFAULT_CACHE_DISK, DEFAULT_BUILD_DISK } from './chunk-LYX2RRSF.js';
-import { builderDiskPinned } from './chunk-WX2HW2G2.js';
-import { BUILD_SLICE_MEMORY_ENV, FORWARDED_CLAUDE_CREDENTIAL_VARIABLES, claudeCredentialVariablesSet, claudeCredential, claudeEnvPath, parseRunnerEnv } from './chunk-GMKDAF37.js';
+import { placeholderQueues, placeholderProblem } from './chunk-VB4QD4WN.js';
+import { checkFit, RUNNER_RESERVE_BYTES } from './chunk-NBETYM32.js';
+import { builtinKind, EGRESS_SWITCHABLE_KEYS, imageBuildOf, keepsHostBuilder } from './chunk-GXMMILQ4.js';
+import { realBuildDiskProbe, checkDiskFit, DEFAULT_CACHE_DISK, DEFAULT_BUILD_DISK, volumeBytes } from './chunk-EGJY6MBC.js';
+import { spawnRun, RUNNER_LABEL, BUILD_LABEL } from './chunk-AHWMY3MS.js';
+import { builderDiskPinned } from './chunk-D3CT6XQ4.js';
+import { BUILD_SLICE_MEMORY_ENV, FORWARDED_CLAUDE_CREDENTIAL_VARIABLES, claudeCredentialVariablesSet, claudeCredential, claudeEnvPath, parseRunnerEnv } from './chunk-L2OARQKP.js';
 import { closeSync, openSync, constants, readFileSync } from 'fs';
 import { join, dirname } from 'path';
 import { totalmem } from 'os';
@@ -198,4 +199,148 @@ function gb(bytes) {
   return `${(bytes / 1e9).toFixed(1)} GB`;
 }
 
-export { LARGE_BUILD_DISK_BYTES, checkBlockedWithSlots, checkManagedRoom, largeBuildMemoryBytes, managedFactsOf, managedProblems, realBlockedProbes, sliceMemoryOf };
+// src/runner/housekeeping/docker.ts
+var KIND_LABEL = "ai.outerlayer.kind";
+var RECIPE_KEY_LABEL = "ai.outerlayer.recipe-key";
+var NO_BUILDER = /no builder .* found/i;
+function failure(result, what) {
+  return new Error(`${what}: ${result.stderr.trim() || `docker exited ${result.status}`}`);
+}
+function labelled(stdout, runnerId) {
+  const found = [];
+  for (const line of stdout.split("\n")) {
+    const [key = "", build = "", runner = ""] = line.replace(/\r?\n$/, "").split("	");
+    if (key.trim() === "" || build === "") continue;
+    if (runner !== "" && runner !== runnerId) continue;
+    found.push({ key: key.trim(), build, owned: runner === runnerId });
+  }
+  return found;
+}
+function decimalUnits() {
+  return { b: 1, kb: 1e3, mb: 1e6, gb: 1e9, tb: 1e12, pb: 1e15 };
+}
+function parsePrunedBytes(stdout) {
+  const match = /^Total(?: reclaimed space)?:\s*([\d.]+)\s*([A-Za-z]*)\s*$/im.exec(stdout);
+  if (match === null) return 0;
+  const unit = decimalUnits()[match[2].toLowerCase() || "b"];
+  return unit === void 0 ? 0 : Math.round(Number(match[1]) * unit);
+}
+function createHousekeepingDocker(deps) {
+  const run = deps.run ?? spawnRun;
+  return {
+    async listBuildContainers() {
+      const result = await run("docker", [
+        "ps",
+        "--all",
+        "--no-trunc",
+        "--filter",
+        `label=${BUILD_LABEL}`,
+        "--format",
+        `{{.ID}}	{{.Label "${BUILD_LABEL}"}}	{{.Label "${RUNNER_LABEL}"}}`
+      ]);
+      if (result.status !== 0) throw failure(result, "docker ps");
+      return labelled(result.stdout, deps.runnerId).map(({ key, build, owned }) => ({ id: key, build, owned }));
+    },
+    async listBuildVolumes() {
+      const result = await run("docker", [
+        "volume",
+        "ls",
+        "--filter",
+        `label=${BUILD_LABEL}`,
+        "--format",
+        `{{.Name}}	{{.Label "${BUILD_LABEL}"}}	{{.Label "${RUNNER_LABEL}"}}`
+      ]);
+      if (result.status !== 0) throw failure(result, "docker volume ls");
+      return labelled(result.stdout, deps.runnerId).map(({ key, build, owned }) => ({ name: key, build, owned }));
+    },
+    async removeContainer(id) {
+      const result = await run("docker", ["rm", "--force", "--volumes", id]);
+      if (result.status !== 0) throw failure(result, `docker rm ${id}`);
+    },
+    async removeVolume(name) {
+      const result = await run("docker", ["volume", "rm", "--force", name]);
+      if (result.status !== 0) throw failure(result, `docker volume rm ${name}`);
+    },
+    async imageState(ref) {
+      const result = await run("docker", ["image", "inspect", "--format", "{{.Id}}", ref]);
+      if (result.status === 0) return "present";
+      return /no such image|not found/i.test(result.stderr) ? "missing" : "unknown";
+    },
+    async listDanglingImages() {
+      const listed = await run("docker", [
+        "image",
+        "ls",
+        "--all",
+        "--no-trunc",
+        "--quiet",
+        "--filter",
+        "dangling=true",
+        "--filter",
+        `label=${KIND_LABEL}`,
+        "--filter",
+        `label=${RUNNER_LABEL}=${deps.runnerId}`
+      ]);
+      if (listed.status !== 0) throw failure(listed, "docker image ls");
+      const ids = [...new Set(listed.stdout.split("\n").map((l) => l.trim()).filter(Boolean))];
+      if (ids.length === 0) return [];
+      const inspected = await run("docker", ["image", "inspect", ...ids]);
+      if (inspected.status !== 0) throw failure(inspected, "docker image inspect");
+      return JSON.parse(inspected.stdout).map((row) => ({
+        id: row.Id,
+        size: row.Size ?? 0,
+        labels: row.Config?.Labels ?? {}
+      }));
+    },
+    async listLabelledImages() {
+      const listed = await run("docker", ["image", "ls", "--all", "--no-trunc", "--quiet", "--filter", `label=${KIND_LABEL}`, "--filter", `label=${RUNNER_LABEL}=${deps.runnerId}`]);
+      if (listed.status !== 0) throw failure(listed, "docker image ls");
+      const ids = [...new Set(listed.stdout.split("\n").map((l) => l.trim()).filter(Boolean))];
+      if (ids.length === 0) return [];
+      const inspected = await run("docker", ["image", "inspect", ...ids]);
+      if (inspected.status !== 0) throw failure(inspected, "docker image inspect");
+      return JSON.parse(inspected.stdout).map((row) => ({
+        id: row.Id,
+        size: row.Size ?? 0,
+        labels: row.Config?.Labels ?? {},
+        tags: (row.RepoTags ?? []).filter((tag) => tag !== "<none>:<none>"),
+        createdMs: Date.parse(row.Created ?? "")
+      }));
+    },
+    async removeImage(id) {
+      const result = await run("docker", ["rmi", id]);
+      if (result.status !== 0) throw failure(result, `docker rmi ${id}`);
+    },
+    async removeBuilder() {
+      const inspected = await run("docker", ["buildx", "inspect", deps.builder]);
+      if (inspected.status !== 0 && NO_BUILDER.test(inspected.stderr)) return void 0;
+      const df = await run("docker", ["system", "df", "-v"]);
+      const freedBytes = df.status === 0 ? volumeBytes(df.stdout, /* @__PURE__ */ new Set([`buildx_buildkit_${deps.builder}0_state`])) : 0;
+      const result = await run("docker", ["buildx", "rm", deps.builder]);
+      if (result.status !== 0 && NO_BUILDER.test(result.stderr)) return void 0;
+      if (result.status !== 0) throw failure(result, "docker buildx rm");
+      return { freedBytes };
+    },
+    async builderPrune(keepBytes) {
+      const inspected = await run("docker", ["buildx", "inspect", deps.builder]);
+      if (inspected.status !== 0 && NO_BUILDER.test(inspected.stderr)) return void 0;
+      const status = inspected.status === 0 ? /^Status:\s*(\S+)/m.exec(inspected.stdout)?.[1] : void 0;
+      if (status !== void 0 && status !== "running") return void 0;
+      const result = await run("docker", ["buildx", "prune", "--builder", deps.builder, "--force", "--max-used-space", String(keepBytes)]);
+      if (result.status !== 0 && (NO_BUILDER.test(result.stderr) || /driver not running/i.test(result.stderr))) return void 0;
+      if (result.status !== 0) throw failure(result, "docker buildx prune");
+      return { freedBytes: parsePrunedBytes(result.stdout) };
+    }
+  };
+}
+async function housekeepingDockerIfReachable(deps) {
+  const run = deps.run ?? spawnRun;
+  try {
+    const answered = await run("docker", ["version", "--format", "{{.Server.Version}}"]);
+    if (answered.status !== 0) return void 0;
+  } catch {
+    return void 0;
+  }
+  return createHousekeepingDocker(deps);
+}
+
+export { KIND_LABEL, LARGE_BUILD_DISK_BYTES, RECIPE_KEY_LABEL, checkBlockedWithSlots, checkManagedRoom, createHousekeepingDocker, housekeepingDockerIfReachable, largeBuildMemoryBytes, managedFactsOf, managedProblems, realBlockedProbes, sliceMemoryOf };

package/dist/{chunk-3FTIUB7I.js → chunk-3X6OSXSB.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { isSameProcess } from './chunk-JBJTC3UU.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-3VJYDWFV.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-AJTGTSNA.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, rmSync } from 'fs';
 import { dirname } from 'path';
 

package/dist/{chunk-3RRYEZAC.js → chunk-3XOLOV5A.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { staleBuildRefusal, staleBuildWarning, detectCi } from './chunk-7SJNVGVC.js';
+import { staleBuildRefusal, staleBuildWarning, detectCi } from './chunk-32FAPJFD.js';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-EYJRVHBN.js';
+import { autoConnect } from './chunk-BTDBDTUY.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { readEffectiveArtifactSpoolState, localArtifactIds, isArtifactTombstoned, artifactBlobsDir, appendArtifactRecord, artifactsSpoolPath, findPendingArtifactRecord, sanitizeTerminal, appendArtifactTombstone } from './chunk-IXPH4EXK.js';
-import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-62URQYCB.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-PAGB3DCI.js';
 import { resolveRepoIdentity } from './chunk-A6PJSNP6.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';

package/dist/{chunk-PMIW6OGQ.js → chunk-4A5OJOCR.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { checkStarterFiles, contextIsGoverned } from './chunk-TZMDRHWB.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-6IMQXBTZ.js';
-import { isLinkedRepository } from './chunk-NO6E72RM.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-GJYGOFF3.js';
+import { isLinkedRepository } from './chunk-4J5GRWAY.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { fleetCheck, checkBuildSkill, checkMachineSkills, checkCommittedMaintainedSkills, checkMaintainedReferences, checkIgnoredSkillFolders } from './chunk-T6ALNN3H.js';
+import { fleetCheck, checkBuildSkill, checkMachineSkills, checkCommittedMaintainedSkills, checkMaintainedReferences, checkIgnoredSkillFolders } from './chunk-F3BGTGQC.js';
 import { sanitizeTerminal } from './chunk-IXPH4EXK.js';
 import { checkFormerSkillNames } from './chunk-LMYRR5MO.js';
-import { resolveGatewayCredentials, defaultFetch } from './chunk-62URQYCB.js';
-import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-4QQJTJUN.js';
+import { resolveGatewayCredentials, defaultFetch } from './chunk-PAGB3DCI.js';
+import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-57WFXHCB.js';
 import { readStatuslineState, STATE_FRESH_MS } from './chunk-I7RZHMXW.js';
 import { hookCommandEscapesControlPlane, CONTROL_PLANE_DIR_VARIABLE } from './chunk-HCVLP7XA.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
@@ -1195,8 +1195,8 @@ function doctorExitCode(checks) {
 
 // src/doctor-report.ts
 async function gatherDoctorChecks() {
-  const { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK } = await import('./build-disk-NFMQCZM3.js');
-  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-5NWSCHIO.js');
+  const { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK } = await import('./build-disk-L7JRQA22.js');
+  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-YPUOOZB6.js');
   const configPath = defaultRunnerConfigPath();
   const runnerHost = hasRunnerBlock(configPath);
   const hooks = (() => {
@@ -1217,7 +1217,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-N4I6IEKP.js');
+    const { runnerHostChecks } = await import('./doctor-O2EJAPZB.js');
     const gateway = (() => {
       try {
         const { url, apiKey, appId } = loadRunnerConfig(configPath);
@@ -1244,7 +1244,7 @@ async function gatherDoctorChecks() {
     const service = await (async () => {
       const { existsSync: existsSync3 } = await import('fs');
       if (process.platform !== "linux" || !existsSync3("/run/systemd/system")) return void 0;
-      const { inspectRunnerService } = await import('./find-unit-YGDFVHVU.js');
+      const { inspectRunnerService } = await import('./find-unit-ACTOZVVS.js');
       return inspectRunnerService(configPath);
     })();
     checks.push(...await runnerHostChecks({ configPath, hooks, gateway, repos, runner, service }));

package/dist/{chunk-NO6E72RM.js → chunk-4J5GRWAY.js}

@@ -3,7 +3,7 @@ import { createRequire } from 'node:module';
 import { DEFAULT_DASHBOARD } from './chunk-NWHU5G6R.js';
 import { sanitizeTerminal } from './chunk-IXPH4EXK.js';
 import { isAgentsMdLayout } from './chunk-LYCJQOO2.js';
-import { cliFetch, resolveGatewayCredentials } from './chunk-62URQYCB.js';
+import { cliFetch, resolveGatewayCredentials } from './chunk-PAGB3DCI.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
 import { findGitDirs, writeRepoConnection, readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { remoteLookupFailed } from './chunk-A6PJSNP6.js';

package/dist/{chunk-4QQJTJUN.js → chunk-57WFXHCB.js}

@@ -684,7 +684,7 @@ async function missingControlPlane(cwd, sessionId, home, env) {
     cleanupEarlierCopies(dirs);
   }
   if (!contextPossiblyGoverned(cwd, home)) return void 0;
-  const { governanceOf } = await import('./control-plane-launch-TS4DFJF4.js');
+  const { governanceOf } = await import('./control-plane-launch-55CJGYBK.js');
   if (await governanceOf({ cwd, env, home }) !== "governed") return void 0;
   recordMissingContext(dirs, sessionId, home);
   const launcher = `${cliInvocation()} claude`;

package/dist/{chunk-36M4KVBT.js → chunk-5IUC2B6J.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { removeRetiredSkills } from './chunk-LMYRR5MO.js';
-import { defaultFetch, resolveGatewayCredentials } from './chunk-62URQYCB.js';
+import { defaultFetch, resolveGatewayCredentials } from './chunk-PAGB3DCI.js';
 import { appendContextProvenance } from './chunk-ZJSNLVCE.js';
 import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-OVNF4LLC.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { writeDegraded, writeSourceCache, SOURCE_CACHE_TTL_RETRY_MS, writeContextManifest, SOURCE_CACHE_TTL_SUCCESS_MS, readSourceCache, isSourceCacheFresh, clearDegraded } from './chunk-YQR6E6OV.js';
 import { normalizeRepoName, parseOuterlayerConfig, classifyTree, emitTree } from './chunk-XFJ7YOPD.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import { withTokenHeader } from './chunk-GMKDAF37.js';
+import { withTokenHeader } from './chunk-L2OARQKP.js';
 import { execFileSync } from 'child_process';
 import { existsSync, mkdirSync, writeFileSync, chmodSync, lstatSync, readFileSync, copyFileSync } from 'fs';
 import { isAbsolute, join, dirname } from 'path';

package/dist/{chunk-7TLGRE5F.js → chunk-5LUN7TTR.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { escapeUnitPath, UNIT_MARKER, DEFAULT_UNIT_NAME } from './chunk-OHTMTMFX.js';
-import { inspectService, realInspectProbes } from './chunk-GMKDAF37.js';
+import { escapeUnitPath, UNIT_MARKER, DEFAULT_UNIT_NAME } from './chunk-NBETYM32.js';
+import { inspectService, realInspectProbes } from './chunk-L2OARQKP.js';
 import { realpathSync, readFileSync, readdirSync } from 'fs';
 import { resolve, dirname, join } from 'path';
 

package/dist/{chunk-OP2L7OXA.js → chunk-6LS62EO4.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { DEFAULT_UNIT_NAME } from './chunk-OHTMTMFX.js';
-import { RUNNER_FILE_MODE } from './chunk-3VJYDWFV.js';
-import { claudeEnvPath, withoutCredentialLines, parseRunnerEnv } from './chunk-GMKDAF37.js';
+import { DEFAULT_UNIT_NAME } from './chunk-NBETYM32.js';
+import { RUNNER_FILE_MODE } from './chunk-AJTGTSNA.js';
+import { claudeEnvPath, withoutCredentialLines, parseRunnerEnv } from './chunk-L2OARQKP.js';
 import { existsSync, readFileSync, writeFileSync, renameSync, rmSync } from 'fs';
 import { join, dirname } from 'path';
 

package/dist/{chunk-FVVHQIZR.js → chunk-6OLXDSQ6.js}

@@ -5,7 +5,7 @@ import { addStdioMcpEntryIfAbsent, addDocsMcpEntryIfAbsent, DOCS_MCP_SERVER_NAME
 import { installStarterPack } from './chunk-J7EJMIDR.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { AGENTS_MD_LAYOUT, declareAgentsMdLayout, linkClaudeSkills, SKILLS_LINK_PATH, describeSkillsLink, isAgentsMdLayout, holdsTodaysLayoutSources, discoverOuterlayerPaths } from './chunk-LYCJQOO2.js';
-import { resolveGitCommonDir, defaultGitRunner } from './chunk-36M4KVBT.js';
+import { resolveGitCommonDir, defaultGitRunner } from './chunk-5IUC2B6J.js';
 import { loadTemplateFiles, loadMaintainedFiles, skillDir, AGENTS_SKILLS_BASE } from './chunk-OVNF4LLC.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { linkedAgentsPath } from './chunk-UPA5KOOX.js';

package/dist/{chunk-AV5T7HV3.js → chunk-6Q7O4MRI.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { currentLink } from './chunk-WR2GRWK3.js';
+import { currentLink } from './chunk-I4YOWQH7.js';
 import { readFileSync, statSync, chmodSync, mkdirSync, writeFileSync, renameSync, rmSync, existsSync, lstatSync, accessSync, constants, realpathSync } from 'fs';
 import { randomBytes } from 'crypto';
 import { join, dirname, delimiter, resolve } from 'path';

package/dist/{chunk-UZIAZXXO.js → chunk-77D5ENBA.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-3VJYDWFV.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-AJTGTSNA.js';
 import { readFileSync, existsSync, rmSync, mkdirSync, writeFileSync, renameSync } from 'fs';
 import { join } from 'path';