@outerlayer/cli 0.34.0-next.20261028152714 → 0.34.0-next.20261028164329

package/dist/{chunk-4L46A2RR.js → chunk-QI7JB2GU.js}

@@ -1,31 +1,31 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { decideInstalledSwitch } from './chunk-3JVYMD4G.js';
-import { reportFailedStart, fitImageBuildMemory } from './chunk-3PFR2WXH.js';
+import { reportFailedStart, fitImageBuildMemory } from './chunk-FUOKDHRB.js';
 import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-E7R2GIAW.js';
 import { RUNNER_PROTOCOL } from './chunk-MH6QLXUO.js';
-import { writePendingUpdate } from './chunk-TZXJSNN4.js';
-import { renderUpdateSteps } from './chunk-HUS6X5BJ.js';
-import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-JDQBJUXQ.js';
-import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, readProvisionOut, workdirProblem, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, startSender, finishJob, sampleGuest, foldSample, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, GUEST_USAGE_INTERVAL_MS, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-AJZWVXXA.js';
+import { writePendingUpdate } from './chunk-ZCZY3Q55.js';
+import { renderUpdateSteps } from './chunk-WA3HIJVK.js';
+import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-MEIDQLXQ.js';
+import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, readProvisionOut, workdirProblem, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, startSender, finishJob, sampleGuest, foldSample, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, GUEST_USAGE_INTERVAL_MS, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-IPWKT5J7.js';
 import { JOB_STATE_FORMAT, readsJobState, jobStateFormatOf } from './chunk-ZVB57WI6.js';
-import { realBlockedProbes, checkBlockedWithSlots, largeBuildMemoryBytes, LARGE_BUILD_DISK_BYTES, checkManagedRoom, sliceMemoryOf, createHousekeepingDocker, housekeepingDockerIfReachable, KIND_LABEL, RECIPE_KEY_LABEL } from './chunk-RIKXE3T5.js';
-import { writeMarker, readMarker, currentVersion, removeMarker, isInLayout, startedThroughCurrent, entryIn, versionDir, switchCurrent, cleanVersions, stagingDir } from './chunk-E3GX4WVJ.js';
+import { realBlockedProbes, checkBlockedWithSlots, largeBuildMemoryBytes, LARGE_BUILD_DISK_BYTES, checkManagedRoom, sliceMemoryOf, createHousekeepingDocker, housekeepingDockerIfReachable, KIND_LABEL, RECIPE_KEY_LABEL } from './chunk-QGEGLZSY.js';
+import { writeMarker, readMarker, currentVersion, removeMarker, isInLayout, startedThroughCurrent, entryIn, versionDir, switchCurrent, cleanVersions, stagingDir } from './chunk-KH4774QT.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, attemptNote, fetchManagedClaudeKey, holdManagedClaudeKey, fetchManagedBuildSettings, holdManagedBuildSettings, needsBuildSkill, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, provisionEnvironment, resolveHostBuild, listenOnBroker, hostEnvironment, deliverExecMaven, runWithSpawn, hostCommandEnvironment, lifecycleSteps, execArgv, lifecycleFailureReason, decideHostBuildSkill, prepareBranch, currentSkillCommand, formerSkillProblem, containerCommandExec, execCommandLine, startHostServices, HELPER_ENV, setUpRunnerCgroup, sweepImageBuilders, stoppedHelperReason, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, ensureNetworkReady, managedBuildSettingsFor, ADOPTED_FETCH_RETRY_WINDOW_MS, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-I4V2YBMA.js';
-import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, resolveGoverningSource, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-ZXQEBRCB.js';
-import { imageTag, writeUpdateStatus, pullInstruction, tagToPull } from './chunk-ORENXMHA.js';
+import { leaseTimeLeftMs, createContainerRuntime, withTunnelLog, LEASE_SECONDS, attemptNote, fetchManagedClaudeKey, holdManagedClaudeKey, fetchManagedBuildSettings, holdManagedBuildSettings, needsBuildSkill, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, provisionEnvironment, resolveHostBuild, listenOnBroker, hostEnvironment, deliverExecMaven, runWithSpawn, hostCommandEnvironment, lifecycleSteps, execArgv, lifecycleFailureReason, decideHostBuildSkill, prepareBranch, currentSkillCommand, formerSkillProblem, containerCommandExec, execCommandLine, startHostServices, HELPER_ENV, setUpRunnerCgroup, sweepImageBuilders, stoppedHelperReason, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, savedStatesDir, readRecords, removeOldestUntil, ensureNetworkReady, managedBuildSettingsFor, ADOPTED_FETCH_RETRY_WINDOW_MS, gitRemoteFor, startServicesFor, createLeaseChannel, selectStaleIncomplete, selectExpired, selectToFit, removeSavedState } from './chunk-WH3FPBPO.js';
+import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, resolveGoverningSource, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-DCBFUUDL.js';
+import { imageTag, writeUpdateStatus, pullInstruction, tagToPull } from './chunk-UXC3RQLF.js';
 import { isVersion, compareVersions, satisfiesRange } from './chunk-TQMI335S.js';
-import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, keepsHostBuilder, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-JDYBPAPP.js';
-import { freeBytes, formatBytes, allocatedBytes } from './chunk-47SFTQA5.js';
-import { writeJobFile, ensureRunnerIdentity, identityDockerFor, readJobFile, exceedsDisk, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, readJobFileChecked } from './chunk-HA46L5FG.js';
-import { claimPidFile, releasePidFile, writePidFile, readPidFile } from './chunk-64LLUVJR.js';
+import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, keepsHostBuilder, DEFAULT_SAVED_STATE_MAX_BYTES, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-YF7W7B7Y.js';
+import { formatBytes, allocatedBytes, freeBytes } from './chunk-RRXS4CWE.js';
+import { writeJobFile, ensureRunnerIdentity, identityDockerFor, readJobFile, exceedsDisk, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, readJobFileChecked } from './chunk-P2PNBDUT.js';
+import { claimPidFile, releasePidFile, writePidFile, readPidFile } from './chunk-SAAVZ2BX.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
-import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-T664NDNT.js';
-import { loadHostKey, ensureHostKey, signerFor } from './chunk-VJQQVTCS.js';
+import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-XDAMLX2L.js';
+import { loadHostKey, ensureHostKey, signerFor } from './chunk-5TXQFZHY.js';
 import { resolveVersion } from './chunk-RA3O54FC.js';
-import { RUNNER_DIR_MODE, runnerDir, buildDir, attemptStamp, jobDir, RUNNER_FILE_MODE, jobsDir, pidFilePath, spoolDir, imagesDir, rootfsDir, builderCacheDiskPath } from './chunk-2CW2QMSG.js';
-import { parseClaimIdentity, parseClaimedRepositories, parseUnreachable, repositoriesOf, primaryOf, sharedUserEnvironment, JOB_MOUNT, takeClaudeCredential, heldClaudeCredential, currentClaudeCredential, fdName } from './chunk-4N7BQBO4.js';
+import { RUNNER_DIR_MODE, runnerDir, buildDir, attemptStamp, jobDir, RUNNER_FILE_MODE, jobsDir, pidFilePath, spoolDir, imagesDir, rootfsDir, builderCacheDiskPath } from './chunk-S6UM3N4R.js';
+import { parseClaimIdentity, parseClaimedRepositories, parseUnreachable, repositoriesOf, primaryOf, sharedUserEnvironment, JOB_MOUNT, takeClaudeCredential, heldClaudeCredential, currentClaudeCredential, fdName } from './chunk-YLPJOUVF.js';
 import { COMMAND_LOST_REASON, CONTAINER_STOPPED_REASON } from './chunk-MESOOLF4.js';
 import { randomBytes, createHash } from 'crypto';
 import { mkdirSync, existsSync, chmodSync, writeFileSync, renameSync, statSync, readdirSync, readFileSync, rmSync, closeSync, lstatSync } from 'fs';
@@ -775,6 +775,7 @@ async function runHousekeeping(options) {
       }
     }
   }
+  freed += await removeSavedStates(options, nowMs, savedStatesDir(root));
   freed += removeStaleBuilderCaches(options, nowMs);
   const spoolPath = spoolDir(root);
   const spoolFiles = listDir(spoolPath).flatMap((name) => {
@@ -795,6 +796,38 @@ async function runHousekeeping(options) {
   log.line(`housekeeping: pass finished, freed ${formatBytes(freed)}`);
   return { freedBytes: freed };
 }
+async function removeSavedStates(options, nowMs, dir) {
+  const records = readRecords(dir);
+  const reasons = /* @__PURE__ */ new Map();
+  for (const record of selectStaleIncomplete(records, nowMs)) reasons.set(record.id, "its copy never finished");
+  for (const record of selectExpired(records.filter((r) => r.complete), nowMs)) reasons.set(record.id, "it is at least 7 days old");
+  if (options.savedStateMax !== void 0) {
+    const kept = records.filter((record) => record.complete && !reasons.has(record.id));
+    const max = options.savedStateMax === "off" ? 0 : options.savedStateMax;
+    for (const record of selectToFit(kept, max)) reasons.set(record.id, "the saved states pass runner.housekeeping.savedStateMax");
+  }
+  let freed = 0;
+  const docker = options.docker;
+  for (const record of records.filter((r) => reasons.has(r.id))) {
+    try {
+      await removeSavedState(record, {
+        dir,
+        removeVolume: async (name) => {
+          if (docker === void 0) throw new Error("Docker is not available");
+          await docker.removeVolume(name);
+        }
+      });
+      freed += record.bytes;
+      options.log.line(`housekeeping: removed saved state ${record.id} (${formatBytes(record.bytes)}), ${reasons.get(record.id)}`);
+    } catch (err) {
+      options.log.error(`housekeeping: could not remove saved state ${record.id} (${describeSaved(record)}): ${describeCallFailure(err)}`);
+    }
+  }
+  return freed;
+}
+function describeSaved(record) {
+  return record.volume ?? record.path ?? record.kind;
+}
 async function removeStaleRootDisks(root, unfinished, options, docker) {
   const dir = rootfsDir(root);
   const inUse = new Set(unfinished.flatMap((job) => job.microvm?.rootfs === void 0 ? [] : [job.microvm.rootfs]));
@@ -1416,6 +1449,34 @@ function holdWithoutRoomForLarge(state) {
   }
   return false;
 }
+async function freeDiskFromSavedStates(state, root, readFree) {
+  const dir = savedStatesDir(root);
+  const records = readRecords(dir).filter((record) => record.complete);
+  if (records.length === 0) return readFree();
+  const log = logOf(state);
+  const minimum = state.config.housekeeping?.minFreeDisk ?? 0;
+  try {
+    state.deps.housekeeping ??= {};
+    const names = { run: state.deps.housekeeping.run, runnerId: runnerLabelValue(state.config.configPath), builder: builderName(state.config.configPath) };
+    const hostBuilder = keepsHostBuilder(state.config, state.deps.blocked?.builderDiskPinned);
+    const docker = state.deps.housekeeping.docker ?? (hostBuilder ? createHousekeepingDocker(names) : await housekeepingDockerIfReachable(names));
+    await removeOldestUntil({
+      records,
+      deps: {
+        dir,
+        removeVolume: async (name) => {
+          if (docker === void 0) throw new Error("Docker is not available");
+          await docker.removeVolume(name);
+        }
+      },
+      enough: () => readFree() >= minimum,
+      log: (line) => log.line(`freeing disk: ${line}`)
+    });
+  } catch (err) {
+    log.error(`saved states could not be removed to free disk: ${describeCallFailure(err)}`);
+  }
+  return readFree();
+}
 function recordPendingUpdate(state, record) {
   const text = record === void 0 ? "none" : JSON.stringify(record);
   if (state.updateRecord === text) return;
@@ -1723,11 +1784,13 @@ function holdWhenBlocked(state, jailer) {
   }
   return false;
 }
-function holdOffForDisk(state) {
+async function holdOffForDisk(state) {
   const minimum = state.config.housekeeping?.minFreeDisk ?? 0;
   const root = runnerDir(state.config.configPath);
-  const free = minimum === 0 ? Number.POSITIVE_INFINITY : (state.deps.freeBytes ?? freeBytes)(root) ?? Number.POSITIVE_INFINITY;
+  const readFree = () => minimum === 0 ? Number.POSITIVE_INFINITY : (state.deps.freeBytes ?? freeBytes)(root) ?? Number.POSITIVE_INFINITY;
+  let free = readFree();
   const log = logOf(state);
+  if (free < minimum) free = await freeDiskFromSavedStates(state, root, readFree);
   if (free < minimum) {
     if (state.lowDisk === void 0) {
       log.line(
@@ -1769,6 +1832,7 @@ async function housekeepingPass(state) {
       configPath: state.config.configPath,
       keepDays: config.jobsKeepDays,
       buildCacheMax: config.buildCacheMax,
+      savedStateMax: config.savedStateMax ?? DEFAULT_SAVED_STATE_MAX_BYTES,
       removeHostBuilder: !hostBuilder,
       docker,
       now: state.deps.now ?? (() => /* @__PURE__ */ new Date()),
@@ -1797,7 +1861,7 @@ async function runTick(state) {
   }
   const jailer = state.config.managed === true && state.deps.blocked?.jailer === void 0 ? await jailerState(state) : void 0;
   if (holdWhenBlocked(state, jailer)) return;
-  if (holdOffForDisk(state)) return;
+  if (await holdOffForDisk(state)) return;
   if (holdWithoutRoomForLarge(state)) return;
   const log = logOf(state);
   const repoFilter = new RepoFilter(state.config.repos);
@@ -1858,7 +1922,7 @@ var CLAIM_REFUSAL_CODES = new Set(
   "pull_request_from_fork pull_request_on_default_branch pull_request_ambiguous pull_request_repository_not_connected repository_not_reachable branch_claimed_elsewhere".split(" ")
 );
 async function tryClaimAndStart(state, item, queue) {
-  const { postJson: postJson2 } = await import('./work-cmd-KLPPJG4U.js');
+  const { postJson: postJson2 } = await import('./work-cmd-VSHZCXHQ.js');
   const log = logOf(state);
   const hostKey = await loadHostKey(state.config.configPath);
   const claim = await retrySend(
@@ -3191,7 +3255,7 @@ async function startRunner(configPath, deps, startup) {
       check: update.check ? () => update.check(configPath) : async () => {
         const held = heldClaudeCredential();
         const env = held === void 0 ? process.env : { ...process.env, [held.variable]: held.value };
-        return (await import('./check-AMTV6RTN.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
+        return (await import('./check-SPMUN5C4.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl, env });
       },
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log

package/dist/{chunk-DKIZDYUX.js → chunk-ROQPDCRU.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RELAY_PORT, GATEWAY_SOCKET, GATEWAY_PORT, CLAUDE_SOCKET, CLAUDE_PORT, DESTINATION_BASE_PORT } from './chunk-4N7BQBO4.js';
+import { RELAY_PORT, GATEWAY_SOCKET, GATEWAY_PORT, CLAUDE_SOCKET, CLAUDE_PORT, DESTINATION_BASE_PORT } from './chunk-YLPJOUVF.js';
 import { symlinkSync, unlinkSync } from 'fs';
 import { join } from 'path';
 

package/dist/{chunk-47SFTQA5.js → chunk-RRXS4CWE.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { parseSize, BUILD_LABEL, RUNNER_LABEL, runnerLabelValue } from './chunk-HA46L5FG.js';
-import { buildsDir, rootfsDir, runnerDir, imagesDir, builderCacheDiskPath } from './chunk-2CW2QMSG.js';
+import { parseSize, BUILD_LABEL, RUNNER_LABEL, runnerLabelValue } from './chunk-P2PNBDUT.js';
+import { buildsDir, rootfsDir, runnerDir, imagesDir, builderCacheDiskPath } from './chunk-S6UM3N4R.js';
 import { spawnSync } from 'child_process';
 import { statfsSync, statSync, existsSync, readdirSync } from 'fs';
 import { dirname, join } from 'path';

package/dist/{chunk-2CW2QMSG.js → chunk-S6UM3N4R.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { BUILD_HOME } from './chunk-4N7BQBO4.js';
+import { BUILD_HOME } from './chunk-YLPJOUVF.js';
 import { join, dirname } from 'path';
 
 createRequire(import.meta.url);

package/dist/{chunk-64LLUVJR.js → chunk-SAAVZ2BX.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { isSameProcess } from './chunk-JBJTC3UU.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-2CW2QMSG.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-S6UM3N4R.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, rmSync } from 'fs';
 import { dirname } from 'path';
 

package/dist/{chunk-V64BEF6E.js → chunk-T3XPLCJG.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { GH_VERSION, VOICE_PACK_FILES, VOICE_PACK_VERSION, FFMPEG_STATIC, FFMPEG_BUILD_TAG, GH_SHA256, TINI_SHA256, TINI_VERSION, HEADLESS_SHELL_REVISION, HEADLESS_SHELL_BASE_URL, PLAYWRIGHT_FFMPEG_BASE_URL, PLAYWRIGHT_FFMPEG_REVISION, HEADLESS_SHELL, PLAYWRIGHT_FFMPEG, PLAYWRIGHT_VERSION } from './chunk-D3CT6XQ4.js';
-import { PROXY_WARNING_FLAG } from './chunk-4N7BQBO4.js';
+import { PROXY_WARNING_FLAG } from './chunk-YLPJOUVF.js';
 import { RELAY_ID, RELAY_USER } from './chunk-MESOOLF4.js';
 
 createRequire(import.meta.url);

package/dist/{chunk-6MLX26T4.js → chunk-TDCHUEKY.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LiveUploader } from './chunk-FG564H3C.js';
-import { spoolDir } from './chunk-WHONZ53R.js';
+import { LiveUploader } from './chunk-I2MFIT6X.js';
+import { spoolDir } from './chunk-V2S2WRGD.js';
 import { CaptureDaemon } from './chunk-GH2HEEOH.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{chunk-ORENXMHA.js → chunk-UXC3RQLF.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { isVersion, compareVersions } from './chunk-TQMI335S.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-2CW2QMSG.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-S6UM3N4R.js';
 import { readFileSync, mkdirSync, writeFileSync, renameSync } from 'fs';
 import { join } from 'path';
 

package/dist/{chunk-X2ZJL7GA.js → chunk-UZEIBWTP.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { removeRetiredSkills } from './chunk-RPST2GNG.js';
-import { defaultFetch, resolveGatewayCredentials } from './chunk-IZKUPAXF.js';
+import { defaultFetch, resolveGatewayCredentials } from './chunk-3KGXXTMN.js';
 import { appendContextProvenance } from './chunk-ZJSNLVCE.js';
 import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-HH3BQG65.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { writeDegraded, writeSourceCache, SOURCE_CACHE_TTL_RETRY_MS, writeContextManifest, SOURCE_CACHE_TTL_SUCCESS_MS, readSourceCache, isSourceCacheFresh, clearDegraded } from './chunk-YQR6E6OV.js';
 import { normalizeRepoName, parseOuterlayerConfig, classifyTree, emitTree } from './chunk-2EEW6FJN.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import { withTokenHeader } from './chunk-4N7BQBO4.js';
+import { withTokenHeader } from './chunk-YLPJOUVF.js';
 import { execFileSync } from 'child_process';
 import { existsSync, mkdirSync, writeFileSync, chmodSync, lstatSync, readFileSync, copyFileSync } from 'fs';
 import { isAbsolute, join, dirname } from 'path';

package/dist/{chunk-WHONZ53R.js → chunk-V2S2WRGD.js}

@@ -684,7 +684,7 @@ async function missingControlPlane(cwd, sessionId, home, env) {
     cleanupEarlierCopies(dirs);
   }
   if (!contextPossiblyGoverned(cwd, home)) return void 0;
-  const { governanceOf } = await import('./control-plane-launch-4WRFVYNP.js');
+  const { governanceOf } = await import('./control-plane-launch-3MBWPYWZ.js');
   if (await governanceOf({ cwd, env, home }) !== "governed") return void 0;
   recordMissingContext(dirs, sessionId, home);
   const launcher = `${cliInvocation()} claude`;

package/dist/{chunk-BEILLR5Q.js → chunk-W7E6IMEW.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { staleBuildRefusal, staleBuildWarning, detectCi } from './chunk-FG564H3C.js';
+import { staleBuildRefusal, staleBuildWarning, detectCi } from './chunk-I2MFIT6X.js';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-BRBZKIZG.js';
+import { autoConnect } from './chunk-MRLJK4GZ.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { readEffectiveArtifactSpoolState, localArtifactIds, isArtifactTombstoned, artifactBlobsDir, appendArtifactRecord, artifactsSpoolPath, findPendingArtifactRecord, sanitizeTerminal, appendArtifactTombstone } from './chunk-VEVNGDTP.js';
-import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-IZKUPAXF.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-3KGXXTMN.js';
 import { resolveRepoIdentity } from './chunk-GH2HEEOH.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';

package/dist/{chunk-HUS6X5BJ.js → chunk-WA3HIJVK.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { stripTerminalControls } from './chunk-AJZWVXXA.js';
-import { tagToPull, imageTag, pullInstruction, readUpdateStatus, runnerImageVersion } from './chunk-ORENXMHA.js';
+import { stripTerminalControls } from './chunk-IPWKT5J7.js';
+import { tagToPull, imageTag, pullInstruction, readUpdateStatus, runnerImageVersion } from './chunk-UXC3RQLF.js';
 import { readFileSync } from 'fs';
 
 createRequire(import.meta.url);
@@ -55,7 +55,7 @@ function envNamesOf(row, imageEnv) {
   return [...new Set(names)].sort();
 }
 async function readOwnContainer(deps = {}) {
-  const run = deps.run ?? (await import('./docker-UP7EFFLL.js')).spawnRun;
+  const run = deps.run ?? (await import('./docker-YMRPMDOW.js')).spawnRun;
   const ids = candidateIds(deps.env ?? process.env, deps.readFile ?? ((path) => readFileSync(path, "utf8")));
   if (ids.length === 0) return { ok: false, reason: "the runner cannot tell which container it runs in: HOSTNAME is empty and /proc/self/mountinfo names none" };
   let problem = "";