@rallycry/conveyor-k3 0.1.12 → 0.1.13

package/dist/cli.js

@@ -215,6 +215,49 @@ var init_safe_arg = __esm({
   }
 });
 
+// src/lib/env.ts
+function readCliEnv(env = process.env) {
+  const apiUrl = env.CONVEYOR_API_URL ?? "";
+  const clusterToken = env.CONVEYOR_CLUSTER_TOKEN ?? "";
+  const clusterId = env.CONVEYOR_CLUSTER_ID ?? "";
+  if (!apiUrl || !clusterToken) {
+    throw new Error(
+      "This machine is not enrolled. /etc/conveyor/k3.env must set CONVEYOR_API_URL and CONVEYOR_CLUSTER_TOKEN \u2014 re-run the install command from your Conveyor profile."
+    );
+  }
+  return { apiUrl, clusterToken, clusterId };
+}
+async function preflight(exec) {
+  const problems = [];
+  if (process.platform !== "linux") {
+    problems.push(
+      `Managed personal compute requires Linux (this machine reports ${process.platform}).`
+    );
+  }
+  if (process.arch !== "x64" && process.arch !== "arm64") {
+    problems.push(`Unsupported CPU architecture ${process.arch} \u2014 amd64 or arm64 is required.`);
+  }
+  if (typeof process.getuid === "function" && process.getuid() !== 0) {
+    problems.push(
+      "This guest command requires root inside the VM. Use conveyor-k3 vm commands on the host."
+    );
+  }
+  if (!await commandExists(exec, "systemctl")) {
+    problems.push("systemd is required and `systemctl` was not found.");
+  }
+  return { ok: problems.length === 0, problems };
+}
+function checkedHostname(hostname2) {
+  return assertHostname(hostname2, "tunnel hostname");
+}
+var init_env = __esm({
+  "src/lib/env.ts"() {
+    "use strict";
+    init_safe_arg();
+    init_exec();
+  }
+});
+
 // ../../node_modules/.bun/zod@3.25.76/node_modules/zod/v3/helpers/util.js
 var util, objectUtil, ZodParsedType, getParsedType;
 var init_util = __esm({
@@ -486,104 +529,104 @@ var init_en = __esm({
     init_ZodError();
     init_util();
     errorMap = (issue, _ctx) => {
-      let message2;
+      let message3;
       switch (issue.code) {
         case ZodIssueCode.invalid_type:
           if (issue.received === ZodParsedType.undefined) {
-            message2 = "Required";
+            message3 = "Required";
           } else {
-            message2 = `Expected ${issue.expected}, received ${issue.received}`;
+            message3 = `Expected ${issue.expected}, received ${issue.received}`;
           }
           break;
         case ZodIssueCode.invalid_literal:
-          message2 = `Invalid literal value, expected ${JSON.stringify(issue.expected, util.jsonStringifyReplacer)}`;
+          message3 = `Invalid literal value, expected ${JSON.stringify(issue.expected, util.jsonStringifyReplacer)}`;
           break;
         case ZodIssueCode.unrecognized_keys:
-          message2 = `Unrecognized key(s) in object: ${util.joinValues(issue.keys, ", ")}`;
+          message3 = `Unrecognized key(s) in object: ${util.joinValues(issue.keys, ", ")}`;
           break;
         case ZodIssueCode.invalid_union:
-          message2 = `Invalid input`;
+          message3 = `Invalid input`;
           break;
         case ZodIssueCode.invalid_union_discriminator:
-          message2 = `Invalid discriminator value. Expected ${util.joinValues(issue.options)}`;
+          message3 = `Invalid discriminator value. Expected ${util.joinValues(issue.options)}`;
           break;
         case ZodIssueCode.invalid_enum_value:
-          message2 = `Invalid enum value. Expected ${util.joinValues(issue.options)}, received '${issue.received}'`;
+          message3 = `Invalid enum value. Expected ${util.joinValues(issue.options)}, received '${issue.received}'`;
           break;
         case ZodIssueCode.invalid_arguments:
-          message2 = `Invalid function arguments`;
+          message3 = `Invalid function arguments`;
           break;
         case ZodIssueCode.invalid_return_type:
-          message2 = `Invalid function return type`;
+          message3 = `Invalid function return type`;
           break;
         case ZodIssueCode.invalid_date:
-          message2 = `Invalid date`;
+          message3 = `Invalid date`;
           break;
         case ZodIssueCode.invalid_string:
           if (typeof issue.validation === "object") {
             if ("includes" in issue.validation) {
-              message2 = `Invalid input: must include "${issue.validation.includes}"`;
+              message3 = `Invalid input: must include "${issue.validation.includes}"`;
               if (typeof issue.validation.position === "number") {
-                message2 = `${message2} at one or more positions greater than or equal to ${issue.validation.position}`;
+                message3 = `${message3} at one or more positions greater than or equal to ${issue.validation.position}`;
               }
             } else if ("startsWith" in issue.validation) {
-              message2 = `Invalid input: must start with "${issue.validation.startsWith}"`;
+              message3 = `Invalid input: must start with "${issue.validation.startsWith}"`;
             } else if ("endsWith" in issue.validation) {
-              message2 = `Invalid input: must end with "${issue.validation.endsWith}"`;
+              message3 = `Invalid input: must end with "${issue.validation.endsWith}"`;
             } else {
               util.assertNever(issue.validation);
             }
           } else if (issue.validation !== "regex") {
-            message2 = `Invalid ${issue.validation}`;
+            message3 = `Invalid ${issue.validation}`;
           } else {
-            message2 = "Invalid";
+            message3 = "Invalid";
           }
           break;
         case ZodIssueCode.too_small:
           if (issue.type === "array")
-            message2 = `Array must contain ${issue.exact ? "exactly" : issue.inclusive ? `at least` : `more than`} ${issue.minimum} element(s)`;
+            message3 = `Array must contain ${issue.exact ? "exactly" : issue.inclusive ? `at least` : `more than`} ${issue.minimum} element(s)`;
           else if (issue.type === "string")
-            message2 = `String must contain ${issue.exact ? "exactly" : issue.inclusive ? `at least` : `over`} ${issue.minimum} character(s)`;
+            message3 = `String must contain ${issue.exact ? "exactly" : issue.inclusive ? `at least` : `over`} ${issue.minimum} character(s)`;
           else if (issue.type === "number")
-            message2 = `Number must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${issue.minimum}`;
+            message3 = `Number must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${issue.minimum}`;
           else if (issue.type === "bigint")
-            message2 = `Number must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${issue.minimum}`;
+            message3 = `Number must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${issue.minimum}`;
           else if (issue.type === "date")
-            message2 = `Date must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${new Date(Number(issue.minimum))}`;
+            message3 = `Date must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${new Date(Number(issue.minimum))}`;
           else
-            message2 = "Invalid input";
+            message3 = "Invalid input";
           break;
         case ZodIssueCode.too_big:
           if (issue.type === "array")
-            message2 = `Array must contain ${issue.exact ? `exactly` : issue.inclusive ? `at most` : `less than`} ${issue.maximum} element(s)`;
+            message3 = `Array must contain ${issue.exact ? `exactly` : issue.inclusive ? `at most` : `less than`} ${issue.maximum} element(s)`;
           else if (issue.type === "string")
-            message2 = `String must contain ${issue.exact ? `exactly` : issue.inclusive ? `at most` : `under`} ${issue.maximum} character(s)`;
+            message3 = `String must contain ${issue.exact ? `exactly` : issue.inclusive ? `at most` : `under`} ${issue.maximum} character(s)`;
           else if (issue.type === "number")
-            message2 = `Number must be ${issue.exact ? `exactly` : issue.inclusive ? `less than or equal to` : `less than`} ${issue.maximum}`;
+            message3 = `Number must be ${issue.exact ? `exactly` : issue.inclusive ? `less than or equal to` : `less than`} ${issue.maximum}`;
           else if (issue.type === "bigint")
-            message2 = `BigInt must be ${issue.exact ? `exactly` : issue.inclusive ? `less than or equal to` : `less than`} ${issue.maximum}`;
+            message3 = `BigInt must be ${issue.exact ? `exactly` : issue.inclusive ? `less than or equal to` : `less than`} ${issue.maximum}`;
           else if (issue.type === "date")
-            message2 = `Date must be ${issue.exact ? `exactly` : issue.inclusive ? `smaller than or equal to` : `smaller than`} ${new Date(Number(issue.maximum))}`;
+            message3 = `Date must be ${issue.exact ? `exactly` : issue.inclusive ? `smaller than or equal to` : `smaller than`} ${new Date(Number(issue.maximum))}`;
           else
-            message2 = "Invalid input";
+            message3 = "Invalid input";
           break;
         case ZodIssueCode.custom:
-          message2 = `Invalid input`;
+          message3 = `Invalid input`;
           break;
         case ZodIssueCode.invalid_intersection_types:
-          message2 = `Intersection results could not be merged`;
+          message3 = `Intersection results could not be merged`;
           break;
         case ZodIssueCode.not_multiple_of:
-          message2 = `Number must be a multiple of ${issue.multipleOf}`;
+          message3 = `Number must be a multiple of ${issue.multipleOf}`;
           break;
         case ZodIssueCode.not_finite:
-          message2 = "Number must be finite";
+          message3 = "Number must be finite";
           break;
         default:
-          message2 = _ctx.defaultError;
+          message3 = _ctx.defaultError;
           util.assertNever(issue);
       }
-      return { message: message2 };
+      return { message: message3 };
     };
     en_default = errorMap;
   }
@@ -736,8 +779,8 @@ var init_errorUtil = __esm({
   "../../node_modules/.bun/zod@3.25.76/node_modules/zod/v3/helpers/errorUtil.js"() {
     "use strict";
     (function(errorUtil2) {
-      errorUtil2.errToObj = (message2) => typeof message2 === "string" ? { message: message2 } : message2 || {};
-      errorUtil2.toString = (message2) => typeof message2 === "string" ? message2 : message2?.message;
+      errorUtil2.errToObj = (message3) => typeof message3 === "string" ? { message: message3 } : message3 || {};
+      errorUtil2.toString = (message3) => typeof message3 === "string" ? message3 : message3?.message;
     })(errorUtil || (errorUtil = {}));
   }
 });
@@ -753,16 +796,16 @@ function processCreateParams(params) {
   if (errorMap2)
     return { errorMap: errorMap2, description };
   const customMap = (iss, ctx) => {
-    const { message: message2 } = params;
+    const { message: message3 } = params;
     if (iss.code === "invalid_enum_value") {
-      return { message: message2 ?? ctx.defaultError };
+      return { message: message3 ?? ctx.defaultError };
     }
     if (typeof ctx.data === "undefined") {
-      return { message: message2 ?? required_error ?? ctx.defaultError };
+      return { message: message3 ?? required_error ?? ctx.defaultError };
     }
     if (iss.code !== "invalid_type")
       return { message: ctx.defaultError };
-    return { message: message2 ?? invalid_type_error ?? ctx.defaultError };
+    return { message: message3 ?? invalid_type_error ?? ctx.defaultError };
   };
   return { errorMap: customMap, description };
 }
@@ -1103,14 +1146,14 @@ var init_types = __esm({
         const result = await (isAsync(maybeAsyncResult) ? maybeAsyncResult : Promise.resolve(maybeAsyncResult));
         return handleResult(ctx, result);
       }
-      refine(check, message2) {
+      refine(check, message3) {
         const getIssueProperties = (val) => {
-          if (typeof message2 === "string" || typeof message2 === "undefined") {
-            return { message: message2 };
-          } else if (typeof message2 === "function") {
-            return message2(val);
+          if (typeof message3 === "string" || typeof message3 === "undefined") {
+            return { message: message3 };
+          } else if (typeof message3 === "function") {
+            return message3(val);
           } else {
-            return message2;
+            return message3;
           }
         };
         return this._refinement((val, ctx) => {
@@ -1583,11 +1626,11 @@ var init_types = __esm({
         }
         return { status: status.value, value: input.data };
       }
-      _regex(regex, validation, message2) {
+      _regex(regex, validation, message3) {
         return this.refinement((data) => regex.test(data), {
           validation,
           code: ZodIssueCode.invalid_string,
-          ...errorUtil.errToObj(message2)
+          ...errorUtil.errToObj(message3)
         });
       }
       _addCheck(check) {
@@ -1596,37 +1639,37 @@ var init_types = __esm({
           checks: [...this._def.checks, check]
         });
       }
-      email(message2) {
-        return this._addCheck({ kind: "email", ...errorUtil.errToObj(message2) });
+      email(message3) {
+        return this._addCheck({ kind: "email", ...errorUtil.errToObj(message3) });
       }
-      url(message2) {
-        return this._addCheck({ kind: "url", ...errorUtil.errToObj(message2) });
+      url(message3) {
+        return this._addCheck({ kind: "url", ...errorUtil.errToObj(message3) });
       }
-      emoji(message2) {
-        return this._addCheck({ kind: "emoji", ...errorUtil.errToObj(message2) });
+      emoji(message3) {
+        return this._addCheck({ kind: "emoji", ...errorUtil.errToObj(message3) });
       }
-      uuid(message2) {
-        return this._addCheck({ kind: "uuid", ...errorUtil.errToObj(message2) });
+      uuid(message3) {
+        return this._addCheck({ kind: "uuid", ...errorUtil.errToObj(message3) });
       }
-      nanoid(message2) {
-        return this._addCheck({ kind: "nanoid", ...errorUtil.errToObj(message2) });
+      nanoid(message3) {
+        return this._addCheck({ kind: "nanoid", ...errorUtil.errToObj(message3) });
       }
-      cuid(message2) {
-        return this._addCheck({ kind: "cuid", ...errorUtil.errToObj(message2) });
+      cuid(message3) {
+        return this._addCheck({ kind: "cuid", ...errorUtil.errToObj(message3) });
       }
-      cuid2(message2) {
-        return this._addCheck({ kind: "cuid2", ...errorUtil.errToObj(message2) });
+      cuid2(message3) {
+        return this._addCheck({ kind: "cuid2", ...errorUtil.errToObj(message3) });
       }
-      ulid(message2) {
-        return this._addCheck({ kind: "ulid", ...errorUtil.errToObj(message2) });
+      ulid(message3) {
+        return this._addCheck({ kind: "ulid", ...errorUtil.errToObj(message3) });
       }
-      base64(message2) {
-        return this._addCheck({ kind: "base64", ...errorUtil.errToObj(message2) });
+      base64(message3) {
+        return this._addCheck({ kind: "base64", ...errorUtil.errToObj(message3) });
       }
-      base64url(message2) {
+      base64url(message3) {
         return this._addCheck({
           kind: "base64url",
-          ...errorUtil.errToObj(message2)
+          ...errorUtil.errToObj(message3)
         });
       }
       jwt(options) {
@@ -1656,8 +1699,8 @@ var init_types = __esm({
           ...errorUtil.errToObj(options?.message)
         });
       }
-      date(message2) {
-        return this._addCheck({ kind: "date", message: message2 });
+      date(message3) {
+        return this._addCheck({ kind: "date", message: message3 });
       }
       time(options) {
         if (typeof options === "string") {
@@ -1673,14 +1716,14 @@ var init_types = __esm({
           ...errorUtil.errToObj(options?.message)
         });
       }
-      duration(message2) {
-        return this._addCheck({ kind: "duration", ...errorUtil.errToObj(message2) });
+      duration(message3) {
+        return this._addCheck({ kind: "duration", ...errorUtil.errToObj(message3) });
       }
-      regex(regex, message2) {
+      regex(regex, message3) {
         return this._addCheck({
           kind: "regex",
           regex,
-          ...errorUtil.errToObj(message2)
+          ...errorUtil.errToObj(message3)
         });
       }
       includes(value, options) {
@@ -1691,46 +1734,46 @@ var init_types = __esm({
           ...errorUtil.errToObj(options?.message)
         });
       }
-      startsWith(value, message2) {
+      startsWith(value, message3) {
         return this._addCheck({
           kind: "startsWith",
           value,
-          ...errorUtil.errToObj(message2)
+          ...errorUtil.errToObj(message3)
         });
       }
-      endsWith(value, message2) {
+      endsWith(value, message3) {
         return this._addCheck({
           kind: "endsWith",
           value,
-          ...errorUtil.errToObj(message2)
+          ...errorUtil.errToObj(message3)
         });
       }
-      min(minLength, message2) {
+      min(minLength, message3) {
         return this._addCheck({
           kind: "min",
           value: minLength,
-          ...errorUtil.errToObj(message2)
+          ...errorUtil.errToObj(message3)
         });
       }
-      max(maxLength, message2) {
+      max(maxLength, message3) {
         return this._addCheck({
           kind: "max",
           value: maxLength,
-          ...errorUtil.errToObj(message2)
+          ...errorUtil.errToObj(message3)
         });
       }
-      length(len, message2) {
+      length(len, message3) {
         return this._addCheck({
           kind: "length",
           value: len,
-          ...errorUtil.errToObj(message2)
+          ...errorUtil.errToObj(message3)
         });
       }
       /**
        * Equivalent to `.min(1)`
        */
-      nonempty(message2) {
-        return this.min(1, errorUtil.errToObj(message2));
+      nonempty(message3) {
+        return this.min(1, errorUtil.errToObj(message3));
       }
       trim() {
         return new _ZodString({
@@ -1915,19 +1958,19 @@ var init_types = __esm({
         }
         return { status: status.value, value: input.data };
       }
-      gte(value, message2) {
-        return this.setLimit("min", value, true, errorUtil.toString(message2));
+      gte(value, message3) {
+        return this.setLimit("min", value, true, errorUtil.toString(message3));
       }
-      gt(value, message2) {
-        return this.setLimit("min", value, false, errorUtil.toString(message2));
+      gt(value, message3) {
+        return this.setLimit("min", value, false, errorUtil.toString(message3));
       }
-      lte(value, message2) {
-        return this.setLimit("max", value, true, errorUtil.toString(message2));
+      lte(value, message3) {
+        return this.setLimit("max", value, true, errorUtil.toString(message3));
       }
-      lt(value, message2) {
-        return this.setLimit("max", value, false, errorUtil.toString(message2));
+      lt(value, message3) {
+        return this.setLimit("max", value, false, errorUtil.toString(message3));
       }
-      setLimit(kind, value, inclusive, message2) {
+      setLimit(kind, value, inclusive, message3) {
         return new _ZodNumber({
           ...this._def,
           checks: [
@@ -1936,7 +1979,7 @@ var init_types = __esm({
               kind,
               value,
               inclusive,
-              message: errorUtil.toString(message2)
+              message: errorUtil.toString(message3)
             }
           ]
         });
@@ -1947,68 +1990,68 @@ var init_types = __esm({
           checks: [...this._def.checks, check]
         });
       }
-      int(message2) {
+      int(message3) {
         return this._addCheck({
           kind: "int",
-          message: errorUtil.toString(message2)
+          message: errorUtil.toString(message3)
         });
       }
-      positive(message2) {
+      positive(message3) {
         return this._addCheck({
           kind: "min",
           value: 0,
           inclusive: false,
-          message: errorUtil.toString(message2)
+          message: errorUtil.toString(message3)
         });
       }
-      negative(message2) {
+      negative(message3) {
         return this._addCheck({
           kind: "max",
           value: 0,
           inclusive: false,
-          message: errorUtil.toString(message2)
+          message: errorUtil.toString(message3)
         });
       }
-      nonpositive(message2) {
+      nonpositive(message3) {
         return this._addCheck({
           kind: "max",
           value: 0,
           inclusive: true,
-          message: errorUtil.toString(message2)
+          message: errorUtil.toString(message3)
         });
       }
-      nonnegative(message2) {
+      nonnegative(message3) {
         return this._addCheck({
           kind: "min",
           value: 0,
           inclusive: true,
-          message: errorUtil.toString(message2)
+          message: errorUtil.toString(message3)
         });
       }
-      multipleOf(value, message2) {
+      multipleOf(value, message3) {
         return this._addCheck({
           kind: "multipleOf",
           value,
-          message: errorUtil.toString(message2)
+          message: errorUtil.toString(message3)
         });
       }
-      finite(message2) {
+      finite(message3) {
         return this._addCheck({
           kind: "finite",
-          message: errorUtil.toString(message2)
+          message: errorUtil.toString(message3)
         });
       }
-      safe(message2) {
+      safe(message3) {
         return this._addCheck({
           kind: "min",
           inclusive: true,
           value: Number.MIN_SAFE_INTEGER,
-          message: errorUtil.toString(message2)
+          message: errorUtil.toString(message3)
         })._addCheck({
           kind: "max",
           inclusive: true,
           value: Number.MAX_SAFE_INTEGER,
-          message: errorUtil.toString(message2)
+          message: errorUtil.toString(message3)
         });
       }
       get minValue() {
@@ -2131,19 +2174,19 @@ var init_types = __esm({
         });
         return INVALID;
       }
-      gte(value, message2) {
-        return this.setLimit("min", value, true, errorUtil.toString(message2));
+      gte(value, message3) {
+        return this.setLimit("min", value, true, errorUtil.toString(message3));
       }
-      gt(value, message2) {
-        return this.setLimit("min", value, false, errorUtil.toString(message2));
+      gt(value, message3) {
+        return this.setLimit("min", value, false, errorUtil.toString(message3));
       }
-      lte(value, message2) {
-        return this.setLimit("max", value, true, errorUtil.toString(message2));
+      lte(value, message3) {
+        return this.setLimit("max", value, true, errorUtil.toString(message3));
       }
-      lt(value, message2) {
-        return this.setLimit("max", value, false, errorUtil.toString(message2));
+      lt(value, message3) {
+        return this.setLimit("max", value, false, errorUtil.toString(message3));
       }
-      setLimit(kind, value, inclusive, message2) {
+      setLimit(kind, value, inclusive, message3) {
         return new _ZodBigInt({
           ...this._def,
           checks: [
@@ -2152,7 +2195,7 @@ var init_types = __esm({
               kind,
               value,
               inclusive,
-              message: errorUtil.toString(message2)
+              message: errorUtil.toString(message3)
             }
           ]
         });
@@ -2163,43 +2206,43 @@ var init_types = __esm({
           checks: [...this._def.checks, check]
         });
       }
-      positive(message2) {
+      positive(message3) {
         return this._addCheck({
           kind: "min",
           value: BigInt(0),
           inclusive: false,
-          message: errorUtil.toString(message2)
+          message: errorUtil.toString(message3)
         });
       }
-      negative(message2) {
+      negative(message3) {
         return this._addCheck({
           kind: "max",
           value: BigInt(0),
           inclusive: false,
-          message: errorUtil.toString(message2)
+          message: errorUtil.toString(message3)
         });
       }
-      nonpositive(message2) {
+      nonpositive(message3) {
         return this._addCheck({
           kind: "max",
           value: BigInt(0),
           inclusive: true,
-          message: errorUtil.toString(message2)
+          message: errorUtil.toString(message3)
         });
       }
-      nonnegative(message2) {
+      nonnegative(message3) {
         return this._addCheck({
           kind: "min",
           value: BigInt(0),
           inclusive: true,
-          message: errorUtil.toString(message2)
+          message: errorUtil.toString(message3)
         });
       }
-      multipleOf(value, message2) {
+      multipleOf(value, message3) {
         return this._addCheck({
           kind: "multipleOf",
           value,
-          message: errorUtil.toString(message2)
+          message: errorUtil.toString(message3)
         });
       }
       get minValue() {
@@ -2322,18 +2365,18 @@ var init_types = __esm({
           checks: [...this._def.checks, check]
         });
       }
-      min(minDate, message2) {
+      min(minDate, message3) {
         return this._addCheck({
           kind: "min",
           value: minDate.getTime(),
-          message: errorUtil.toString(message2)
+          message: errorUtil.toString(message3)
         });
       }
-      max(maxDate, message2) {
+      max(maxDate, message3) {
         return this._addCheck({
           kind: "max",
           value: maxDate.getTime(),
-          message: errorUtil.toString(message2)
+          message: errorUtil.toString(message3)
         });
       }
       get minDate() {
@@ -2565,26 +2608,26 @@ var init_types = __esm({
       get element() {
         return this._def.type;
       }
-      min(minLength, message2) {
+      min(minLength, message3) {
         return new _ZodArray({
           ...this._def,
-          minLength: { value: minLength, message: errorUtil.toString(message2) }
+          minLength: { value: minLength, message: errorUtil.toString(message3) }
         });
       }
-      max(maxLength, message2) {
+      max(maxLength, message3) {
         return new _ZodArray({
           ...this._def,
-          maxLength: { value: maxLength, message: errorUtil.toString(message2) }
+          maxLength: { value: maxLength, message: errorUtil.toString(message3) }
         });
       }
-      length(len, message2) {
+      length(len, message3) {
         return new _ZodArray({
           ...this._def,
-          exactLength: { value: len, message: errorUtil.toString(message2) }
+          exactLength: { value: len, message: errorUtil.toString(message3) }
         });
       }
-      nonempty(message2) {
-        return this.min(1, message2);
+      nonempty(message3) {
+        return this.min(1, message3);
       }
     };
     ZodArray.create = (schema, params) => {
@@ -2701,17 +2744,17 @@ var init_types = __esm({
       get shape() {
         return this._def.shape();
       }
-      strict(message2) {
+      strict(message3) {
         errorUtil.errToObj;
         return new _ZodObject({
           ...this._def,
           unknownKeys: "strict",
-          ...message2 !== void 0 ? {
+          ...message3 !== void 0 ? {
             errorMap: (issue, ctx) => {
               const defaultError = this._def.errorMap?.(issue, ctx).message ?? ctx.defaultError;
               if (issue.code === "unrecognized_keys")
                 return {
-                  message: errorUtil.errToObj(message2).message ?? defaultError
+                  message: errorUtil.errToObj(message3).message ?? defaultError
                 };
               return {
                 message: defaultError
@@ -3429,23 +3472,23 @@ var init_types = __esm({
           return finalizeSet(elements);
         }
       }
-      min(minSize, message2) {
+      min(minSize, message3) {
         return new _ZodSet({
           ...this._def,
-          minSize: { value: minSize, message: errorUtil.toString(message2) }
+          minSize: { value: minSize, message: errorUtil.toString(message3) }
         });
       }
-      max(maxSize, message2) {
+      max(maxSize, message3) {
         return new _ZodSet({
           ...this._def,
-          maxSize: { value: maxSize, message: errorUtil.toString(message2) }
+          maxSize: { value: maxSize, message: errorUtil.toString(message3) }
         });
       }
-      size(size, message2) {
-        return this.min(size, message2).max(size, message2);
+      size(size, message3) {
+        return this.min(size, message3).max(size, message3);
       }
-      nonempty(message2) {
-        return this.min(1, message2);
+      nonempty(message3) {
+        return this.min(1, message3);
       }
     };
     ZodSet.create = (valueType, params) => {
@@ -4331,7 +4374,7 @@ var init_zod = __esm({
   }
 });
 
-// ../shared/dist/chunk-BH4SLNGU.js
+// ../shared/dist/chunk-VSUBG7GR.js
 function formatModelId(provider, model) {
   return `${provider}/${model}`;
 }
@@ -4349,8 +4392,8 @@ function uniqueSortedArray(item, minimum = 0) {
   }).transform((values) => [...values].sort());
 }
 var DEFAULT_SONNET_MODEL, DEFAULT_OPUS_MODEL, DEFAULT_HAIKU_MODEL, FABLE_MODEL, PREVIOUS_SONNET_MODEL, PREVIOUS_OPUS_MODEL, JEV_MODEL, JEV_MODEL_ID, JEV_ZEN_MODEL, JEV_ZEN_MODEL_ID, JEV_INPUT_PRICE_PER_TOKEN, JEV_STATE_MAX_CHARS, PTY_STREAM_PORT_BASE, PTY_STREAM_PORT_ATTEMPTS, PREVIEW_PORT_DENY_LIST, checkpointPathSchema, secretNameSchema, checkpointKeySchema, checkpointDigestRefSchema, ACTIONS_PREBAKE_REGISTRY_PATTERN, actionsPrebakeRegistrySchema, projectCheckpointSettingsSchema, CARD_DESCRIPTION_MAX, CARD_DESCRIPTION_LIMIT_MESSAGE, CARD_DESCRIPTION_FIELD_HINT, MAX_MANUAL_TESTS_PER_TASK, MAX_MANUAL_TEST_TITLE_LENGTH, ManualTestItemsSchema, MAX_CI_WAIT_TIMEOUT_MINUTES;
-var init_chunk_BH4SLNGU = __esm({
-  "../shared/dist/chunk-BH4SLNGU.js"() {
+var init_chunk_VSUBG7GR = __esm({
+  "../shared/dist/chunk-VSUBG7GR.js"() {
     "use strict";
     init_zod();
     init_zod();
@@ -4476,11 +4519,11 @@ function localBakeSudoersCommands(k3sPath) {
     return `${k3sPath} ctr ${command.args.join(" ")}${suffix}`;
   });
 }
-var ACHIEVEMENT_RARITIES, RISK_LEVELS, riskLevelSchema, DEFAULT_RISK_LEVELS, LEVEL_BY_VALUE, ACTIVE_WORK_STATUSES, IDENTIFIED_WORK_STATUSES, DEFAULT_TASK_STATUS_COLOR, DEFAULT_TASK_STATUS_COLOR_INT, MAX_FILE_SIZE_BYTES, MAX_FILE_TAGS, MAX_FILE_TAG_LENGTH, ALLOWED_FILE_MIME_TYPES, ALLOWED_FILE_ACCEPT, EMBED_THRESHOLD_IMAGES, EMBED_THRESHOLD_TEXT, IDLE_HEARTBEAT_MS, TurnEndToolCallSchema, AgentTurnUsageSchema, KnownAgentEventSchema, AgentEventSchema, PtyChatAtSchema, PtyChatTurnUsageSchema, PtyChatTurnFileSchema, PTY_CHAT_TURN_FILES_MAX, PtyChatEventPayloadSchema, PtyChatEventRequestSchema, PtyChatAttachRequestSchema, PTY_EFFORT_LEVELS, SetPtyModelEffortRequestSchema, cardDescription, AgentHeartbeatSchema, CreatePRInputSchema, PostToChatInputSchema, GetTaskContextRequestSchema, GetChatMessagesRequestSchema, GetTaskFilesRequestSchema, GetTaskFileRequestSchema, DeleteTaskFileRequestSchema, SetTaskFileShowcaseRequestSchema, GetTaskRequestSchema, GetCliHistoryRequestSchema, ListSubtasksRequestSchema, GetDependenciesRequestSchema, GetSuggestionsRequestSchema, ListManualTestsRequestSchema, QueryManualTestsRequestSchema, CreatePullRequestRequestSchema, RequestFileUploadRequestSchema, ConfirmFileUploadRequestSchema, UpdateTaskStatusRequestSchema, StoreSessionIdRequestSchema, SetManualTestsRequestSchema, EditManualTestRequestSchema, RemoveManualTestRequestSchema, ApproveManualTestRequestSchema, RejectManualTestRequestSchema, SessionStartRequestSchema, SessionStopRequestSchema, EndReviewSessionRequestSchema, ConnectAgentRequestSchema, ReportAgentStatusRequestSchema, NotifyAgentVersionRequestSchema, DiscoveredPortSchema, ReportDiscoveredPortsRequestSchema, ReportBootMilestoneRequestSchema, CreateSubtaskRequestSchema, UpdateSubtaskRequestSchema, DeleteSubtaskRequestSchema, SetSubtaskParentRequestSchema, GetTaskPropertiesRequestSchema, UpdateTaskFieldsRequestSchema, UpdateTaskPropertiesRequestSchema, ListIconsRequestSchema, GenerateTaskIconRequestSchema, SearchFaIconsRequestSchema, PickFaIconRequestSchema, CreateFollowUpTaskRequestSchema, AddDependencyRequestSchema, RemoveDependencyRequestSchema, CreateSuggestionRequestSchema, VoteSuggestionRequestSchema, TriggerIdentificationRequestSchema, HandoffToImplementerRequestSchema, SubmitCodeReviewResultRequestSchema, CycleCodingAgentKeyRequestSchema, PostChildChatMessageRequestSchema, UpdateChildStatusRequestSchema, GetAgentStatusRequestSchema, GetUiCliHistoryRequestSchema, GetActivePtySessionRequestSchema, ListActivePtySessionsRequestSchema, SendSoftStopRequestSchema, StopTaskSessionRequestSchema, FlushTaskQueueRequestSchema, CancelTaskQueuedMessageRequestSchema, FlushSingleQueuedMessageRequestSchema, AnswerAgentQuestionRequestSchema, ClearAgentTodosRequestSchema, AgentQuestionOptionSchema, AgentQuestionSchema, AskUserQuestionRequestSchema, PostAgentMessageRequestSchema, EmitAgentEventRequestSchema, RefreshGithubTokenRequestSchema, ReportCredentialFailureRequestSchema, ReportReviewSpawnFailureRequestSchema, ReportBuilderSpawnFailureRequestSchema, SpawnTaskSessionRequestSchema, StartCodeReviewRequestSchema, StopCodeReviewRequestSchema, ReportSessionSpawnFailureRequestSchema, RefreshGithubTokenResponseSchema, PTY_FRAME_MAX_CHARS, PTY_MAX_DIMENSION, PtyOutputRequestSchema, PtyEndedRequestSchema, PtyInputRequestSchema, PtyResizeRequestSchema, PtyAttachRequestSchema, ReportPtyStreamRequestSchema, ReportPtyInputRequestSchema, GetPtyStreamEndpointRequestSchema, CreatePRResponseSchema, PostToChatResponseSchema, UpdateTaskStatusResponseSchema, StoreSessionIdResponseSchema, HeartbeatResponseSchema, SessionStartResponseSchema, SessionStopResponseSchema, DeleteSubtaskResponseSchema, ParkOnCheckResultRequestSchema, GIT_BRANCH_NAME_MAX, GIT_BRANCH_NAME_MESSAGE, ALLOWED_REF, cardDescription2, ListAccessibleProjectsRequestSchema, ListProjectTasksRequestSchema, GetProjectTaskRequestSchema, SearchProjectTasksRequestSchema, ListProjectTagsRequestSchema, GetProjectTagRequestSchema, ListProjectTagAttachmentsRequestSchema, SetProjectFileTagsRequestSchema, GetProjectSummaryRequestSchema, GetProjectOnboardingStatusRequestSchema, GetProjectOnboardingStepRequestSchema, GetProjectConnectUrlsRequestSchema, conveyorCapabilitySchema, GetConnectionContextRequestSchema, VerifyConnectionRequestSchema, ListAccessibleSubprojectsRequestSchema, CreateProjectTaskRequestSchema, SetProjectTaskParentRequestSchema, UpdateProjectTaskRequestSchema, TransitionProjectTaskStatusRequestSchema, MoveProjectCardRequestSchema, PostToProjectTaskChatRequestSchema, GetProjectTaskCliRequestSchema, GetProjectTaskSessionsRequestSchema, QueryProjectGcpLogsRequestSchema, QueryProjectGrafanaLogsRequestSchema, driveFileNameSchema, DRIVE_MAX_CONTENT_CHARS, ListProjectDriveFilesRequestSchema, ReadProjectDriveFileRequestSchema, CreateProjectDriveFileRequestSchema, UpdateProjectDriveFileRequestSchema, DeleteProjectDriveFileRequestSchema, CreateProjectDriveFolderRequestSchema, StartProjectBuildRequestSchema, StopProjectBuildRequestSchema, StartProjectWorkspaceRequestSchema, StopProjectWorkspaceRequestSchema, ListMyLiveSessionsRequestSchema, ListProjectSessionGroupsRequestSchema, ListMyLiveSessionsAcrossProjectsRequestSchema, ListSessionGroupsAcrossProjectsRequestSchema, GetProjectAvailableTuisRequestSchema, StartAdhocSessionRequestSchema, StopAdhocSessionRequestSchema, ResumeAdhocSessionRequestSchema, RefreshCodingAgentKeyUsageRequestSchema, ListKeysToProbeRequestSchema, CreateProjectReleaseRequestSchema, AddTasksToProjectReleaseRequestSchema, ApproveProjectMergePRRequestSchema, ListProjectSubtasksRequestSchema, CreateProjectSubtaskRequestSchema, UpdateProjectSubtaskRequestSchema, DeleteProjectSubtaskRequestSchema, GetProjectTaskChatRequestSchema, AddProjectTaskDependencyRequestSchema, RemoveProjectTaskDependencyRequestSchema, VoteProjectSuggestionRequestSchema, GetProjectTaskDependenciesRequestSchema, CreateProjectPullRequestRequestSchema, ListProjectMembersRequestSchema, AddProjectTaskReviewerRequestSchema, RemoveProjectTaskReviewerRequestSchema, ListProjectManualTestsRequestSchema, QueryProjectManualTestsRequestSchema, SetProjectManualTestsRequestSchema, EditProjectManualTestRequestSchema, RemoveProjectManualTestRequestSchema, ApproveProjectManualTestRequestSchema, RejectProjectManualTestRequestSchema, CreateProjectSuggestionRequestSchema, ListProjectChannelsRequestSchema, READ_CHANNEL_MESSAGES_MAX_LIMIT, ReadChannelMessagesRequestSchema, POST_CHANNEL_MESSAGE_MAX_CHARS, PostChannelMessageRequestSchema, GET_ANALYTICS_SUMMARY_MAX_RANGE_DAYS, GetProjectAnalyticsSummaryRequestSchema, ListProjectTaskFilesRequestSchema, GetProjectAttachmentRequestSchema, DeleteProjectTaskFileRequestSchema, SetProjectTaskFileShowcaseRequestSchema, RequestProjectFileUploadRequestSchema, ConfirmProjectFileUploadRequestSchema, RequestWorkspaceRecycleRequestSchema, ReportApiOutageRequestSchema, CONTEXT_LINK_LOCATOR_MAX, TAG_DESCRIPTION_MAX, TAG_OVERVIEW_MAX, TAG_REASON_MAX, ProjectTagContextPathSchema, hexColor, overviewPathSchema, CreateProjectTagRequestSchema, UpdateProjectTagRequestSchema, PostToProjectChatRequestSchema, StartTagAuditRequestSchema, StartTaskAuditRequestSchema, GetActiveAuditSessionsRequestSchema, ReportTaskAuditResultRequestSchema, GetTaskAuditsRequestSchema, GetTaskAuditRequestSchema, GetTaskAuditAggregatesRequestSchema, DeleteTaskAuditRequestSchema, MarkInitialPromptSubmittedRequestSchema, PERSONAL_CLUSTER_EVENTS, PERSONAL_CLUSTER_HEARTBEAT_INTERVAL_MS, DECISION_STATUS_LABELS, DECISION_OPTION_KINDS, DECISION_VOTE_SOURCES, DECISION_OPTIONS_MIN, DECISION_OPTIONS_MAX, DECISION_OPTION_LABEL_MAX, DECISION_QUESTION_MAX, DECISION_RESOLUTION_MAX, DECISION_VOTE_REASON_MAX, DECISION_DEADLINE_MIN_HOURS, DECISION_DEADLINE_MAX_DAYS, DECISION_DEADLINE_MAX_HOURS, DECISION_LIST_MAX_LIMIT, decisionIdSchema, optionInputSchema, optionsArraySchema, CreateDecisionRequestSchema, VoteDecisionRequestSchema, RemoveDecisionVoteRequestSchema, ResolveDecisionRequestSchema, CancelDecisionRequestSchema, BulkDecisionIdsRequestSchema, ReopenDecisionRequestSchema, UpdateDecisionRequestSchema, GetDecisionRequestSchema, ListDecisionsRequestSchema, optionInput, optionsInput, deadlineHours, CreateProjectDecisionRequestSchema, ListProjectDecisionsRequestSchema, GetProjectDecisionRequestSchema, VoteProjectDecisionRequestSchema, ResolveProjectDecisionRequestSchema, UpdateProjectDecisionRequestSchema, EVALUATE_MAX_QUESTIONS, EVALUATE_MAX_ITEMS, EVALUATE_ITEM_MAX_CHARS, EVALUATE_REQUEST_MAX_CHARS, TEXT_MAX, QUESTION_KEY, EvaluateQuestionSchema, EvaluateQuestionsRequestSchema, MEETING_CHECKLIST_TITLE_MAX, MEETING_TRANSCRIPT_MAX_CHARS, MEETING_TITLE_MAX, MEETING_OCCURRED_AT_MIN_YEAR, MEETING_OCCURRED_AT_MAX_FUTURE_MS, OCCURRED_AT_RANGE_MESSAGE, MeetingOccurredAtSchema, CreateMeetingFromTranscriptRequestSchema, GetMeetingRequestSchema, UpdateMeetingRequestSchema, RegenerateMeetingSummaryRequestSchema, DeleteMeetingRequestSchema, checklistTitle, ListMeetingChecklistRequestSchema, AddMeetingChecklistItemsRequestSchema, UpdateMeetingChecklistItemRequestSchema, DeleteMeetingChecklistItemRequestSchema, SetMeetingChecklistItemCheckedRequestSchema, ListMeetingsRequestSchema, ReadMeetingTranscriptRequestSchema, MEETING_SUMMARY_MAX_CHARS, AddProjectMeetingChecklistItemsRequestSchema, CheckProjectMeetingChecklistItemRequestSchema, EditProjectMeetingChecklistItemRequestSchema, RemoveProjectMeetingChecklistItemRequestSchema, CreateProjectMeetingRequestSchema, UpdateProjectMeetingRequestSchema, TASK_CHAT_HISTORY_LIMIT, PM_CHAT_HISTORY_LIMIT, AGENT_CHAT_HISTORY_FETCH_LIMIT, ANTHROPIC_CATALOG, CLAUDESPACE_WORKLOAD_LABEL, CLAUDESPACE_WORKLOAD_VALUE, CONVEYOR_POD_SELECTOR, CONTAINERD_K8S_NAMESPACE, CONTAINERD_PIN_LABEL, CONVEYOR_CONTENT_HASH_LABEL, VM_IMPORT_DISCOVERY_DIR, LOCAL_BAKE_ROOT_COMMANDS, PERSONAL_LOCAL_REGISTRY_NAMESPACE, PERSONAL_LOCAL_REGISTRY_NAME, PERSONAL_LOCAL_REGISTRY_PORT, PERSONAL_LOCAL_REGISTRY_HOST, PERSONAL_LOCAL_REGISTRY_NODE_ENDPOINT, BAKE_COMPONENT_LABEL, BAKE_COMPONENT_PREBAKE, BAKE_COMPONENT_STATE_BAKE, BAKE_COMPONENT_VALUES, MS_PER_DAY, POSTGRES_ENV, FIREBASE_EMULATOR_COMMAND, FIREBASE_EMULATOR_ENV, CATALOG, SERVICE_DEFINITIONS, SUPPORTED_CLAUDESPACE_DEPS, STATEFUL_BAKE_DEPS, MIRRORABLE_SIDECARS, LEVELS_PER_BAND, PRESTIGE_TIERS, TOP_PRESTIGE_BAND, CARD_TYPE_SURFACE, surfaceTypes, BOARD_CARD_TYPES, REPORT_CARD_TYPES, DECISION_CARD_TYPES;
+var ACHIEVEMENT_RARITIES, RISK_LEVELS, riskLevelSchema, DEFAULT_RISK_LEVELS, LEVEL_BY_VALUE, ACTIVE_WORK_STATUSES, IDENTIFIED_WORK_STATUSES, DEFAULT_TASK_STATUS_COLOR, DEFAULT_TASK_STATUS_COLOR_INT, MAX_FILE_SIZE_BYTES, MAX_FILE_TAGS, MAX_FILE_TAG_LENGTH, ALLOWED_FILE_MIME_TYPES, ALLOWED_FILE_ACCEPT, EMBED_THRESHOLD_IMAGES, EMBED_THRESHOLD_TEXT, IDLE_HEARTBEAT_MS, TurnEndToolCallSchema, AgentTurnUsageSchema, KnownAgentEventSchema, AgentEventSchema, PtyChatAtSchema, PtyChatTurnUsageSchema, PtyChatTurnFileSchema, PTY_CHAT_TURN_FILES_MAX, PtyChatEventPayloadSchema, PtyChatEventRequestSchema, PtyChatAttachRequestSchema, PTY_EFFORT_LEVELS, SetPtyModelEffortRequestSchema, cardDescription, AgentHeartbeatSchema, CreatePRInputSchema, PostToChatInputSchema, GetTaskContextRequestSchema, GetChatMessagesRequestSchema, GetTaskFilesRequestSchema, GetTaskFileRequestSchema, DeleteTaskFileRequestSchema, SetTaskFileShowcaseRequestSchema, GetTaskRequestSchema, GetCliHistoryRequestSchema, ListSubtasksRequestSchema, GetDependenciesRequestSchema, GetSuggestionsRequestSchema, ListManualTestsRequestSchema, QueryManualTestsRequestSchema, CreatePullRequestRequestSchema, RequestFileUploadRequestSchema, ConfirmFileUploadRequestSchema, UpdateTaskStatusRequestSchema, StoreSessionIdRequestSchema, SetManualTestsRequestSchema, EditManualTestRequestSchema, RemoveManualTestRequestSchema, ApproveManualTestRequestSchema, RejectManualTestRequestSchema, SessionStartRequestSchema, SessionStopRequestSchema, EndReviewSessionRequestSchema, ConnectAgentRequestSchema, ReportAgentStatusRequestSchema, NotifyAgentVersionRequestSchema, DiscoveredPortSchema, ReportDiscoveredPortsRequestSchema, ReportBootMilestoneRequestSchema, CreateSubtaskRequestSchema, UpdateSubtaskRequestSchema, DeleteSubtaskRequestSchema, SetSubtaskParentRequestSchema, GetTaskPropertiesRequestSchema, UpdateTaskFieldsRequestSchema, UpdateTaskPropertiesRequestSchema, ListIconsRequestSchema, GenerateTaskIconRequestSchema, SearchFaIconsRequestSchema, PickFaIconRequestSchema, CreateFollowUpTaskRequestSchema, AddDependencyRequestSchema, RemoveDependencyRequestSchema, CreateSuggestionRequestSchema, VoteSuggestionRequestSchema, TriggerIdentificationRequestSchema, HandoffToImplementerRequestSchema, SubmitCodeReviewResultRequestSchema, CycleCodingAgentKeyRequestSchema, PostChildChatMessageRequestSchema, UpdateChildStatusRequestSchema, GetAgentStatusRequestSchema, GetUiCliHistoryRequestSchema, GetActivePtySessionRequestSchema, ListActivePtySessionsRequestSchema, SendSoftStopRequestSchema, StopTaskSessionRequestSchema, FlushTaskQueueRequestSchema, CancelTaskQueuedMessageRequestSchema, FlushSingleQueuedMessageRequestSchema, AnswerAgentQuestionRequestSchema, ClearAgentTodosRequestSchema, AgentQuestionOptionSchema, AgentQuestionSchema, AskUserQuestionRequestSchema, PostAgentMessageRequestSchema, EmitAgentEventRequestSchema, RefreshGithubTokenRequestSchema, ReportCredentialFailureRequestSchema, ReportReviewSpawnFailureRequestSchema, ReportBuilderSpawnFailureRequestSchema, SpawnTaskSessionRequestSchema, StartCodeReviewRequestSchema, StopCodeReviewRequestSchema, ReportSessionSpawnFailureRequestSchema, RefreshGithubTokenResponseSchema, PTY_FRAME_MAX_CHARS, PTY_MAX_DIMENSION, PtyOutputRequestSchema, PtyEndedRequestSchema, PtyInputRequestSchema, PtyResizeRequestSchema, PtyAttachRequestSchema, ReportPtyStreamRequestSchema, ReportPtyInputRequestSchema, GetPtyStreamEndpointRequestSchema, CreatePRResponseSchema, PostToChatResponseSchema, UpdateTaskStatusResponseSchema, StoreSessionIdResponseSchema, HeartbeatResponseSchema, SessionStartResponseSchema, SessionStopResponseSchema, DeleteSubtaskResponseSchema, ParkOnCheckResultRequestSchema, GIT_BRANCH_NAME_MAX, GIT_BRANCH_NAME_MESSAGE, ALLOWED_REF, cardDescription2, ListAccessibleProjectsRequestSchema, ListProjectTasksRequestSchema, GetProjectTaskRequestSchema, SearchProjectTasksRequestSchema, ListProjectTagsRequestSchema, GetProjectTagRequestSchema, ListProjectTagAttachmentsRequestSchema, SetProjectFileTagsRequestSchema, GetProjectSummaryRequestSchema, GetProjectOnboardingStatusRequestSchema, GetProjectOnboardingStepRequestSchema, GetProjectConnectUrlsRequestSchema, conveyorCapabilitySchema, GetConnectionContextRequestSchema, VerifyConnectionRequestSchema, ListAccessibleSubprojectsRequestSchema, CreateProjectTaskRequestSchema, SetProjectTaskParentRequestSchema, UpdateProjectTaskRequestSchema, TransitionProjectTaskStatusRequestSchema, MoveProjectCardRequestSchema, PostToProjectTaskChatRequestSchema, GetProjectTaskCliRequestSchema, GetProjectTaskSessionsRequestSchema, QueryProjectGcpLogsRequestSchema, QueryProjectGrafanaLogsRequestSchema, driveFileNameSchema, DRIVE_MAX_CONTENT_CHARS, ListProjectDriveFilesRequestSchema, ReadProjectDriveFileRequestSchema, CreateProjectDriveFileRequestSchema, UpdateProjectDriveFileRequestSchema, DeleteProjectDriveFileRequestSchema, CreateProjectDriveFolderRequestSchema, StartProjectBuildRequestSchema, StopProjectBuildRequestSchema, StartProjectWorkspaceRequestSchema, StopProjectWorkspaceRequestSchema, ListMyLiveSessionsRequestSchema, ListProjectSessionGroupsRequestSchema, ListMyLiveSessionsAcrossProjectsRequestSchema, ListSessionGroupsAcrossProjectsRequestSchema, GetProjectAvailableTuisRequestSchema, StartAdhocSessionRequestSchema, StopAdhocSessionRequestSchema, ResumeAdhocSessionRequestSchema, RefreshCodingAgentKeyUsageRequestSchema, ListKeysToProbeRequestSchema, CreateProjectReleaseRequestSchema, AddTasksToProjectReleaseRequestSchema, ApproveProjectMergePRRequestSchema, ListProjectSubtasksRequestSchema, CreateProjectSubtaskRequestSchema, UpdateProjectSubtaskRequestSchema, DeleteProjectSubtaskRequestSchema, GetProjectTaskChatRequestSchema, AddProjectTaskDependencyRequestSchema, RemoveProjectTaskDependencyRequestSchema, VoteProjectSuggestionRequestSchema, GetProjectTaskDependenciesRequestSchema, CreateProjectPullRequestRequestSchema, ListProjectMembersRequestSchema, AddProjectTaskReviewerRequestSchema, RemoveProjectTaskReviewerRequestSchema, ListProjectManualTestsRequestSchema, QueryProjectManualTestsRequestSchema, SetProjectManualTestsRequestSchema, EditProjectManualTestRequestSchema, RemoveProjectManualTestRequestSchema, ApproveProjectManualTestRequestSchema, RejectProjectManualTestRequestSchema, CreateProjectSuggestionRequestSchema, ListProjectChannelsRequestSchema, READ_CHANNEL_MESSAGES_MAX_LIMIT, ReadChannelMessagesRequestSchema, POST_CHANNEL_MESSAGE_MAX_CHARS, PostChannelMessageRequestSchema, GET_ANALYTICS_SUMMARY_MAX_RANGE_DAYS, GetProjectAnalyticsSummaryRequestSchema, ListProjectTaskFilesRequestSchema, GetProjectAttachmentRequestSchema, DeleteProjectTaskFileRequestSchema, SetProjectTaskFileShowcaseRequestSchema, RequestProjectFileUploadRequestSchema, ConfirmProjectFileUploadRequestSchema, RequestWorkspaceRecycleRequestSchema, ReportApiOutageRequestSchema, CONTEXT_LINK_LOCATOR_MAX, TAG_DESCRIPTION_MAX, TAG_OVERVIEW_MAX, TAG_REASON_MAX, ProjectTagContextPathSchema, hexColor, overviewPathSchema, CreateProjectTagRequestSchema, UpdateProjectTagRequestSchema, PostToProjectChatRequestSchema, StartTagAuditRequestSchema, StartTaskAuditRequestSchema, GetActiveAuditSessionsRequestSchema, ReportTaskAuditResultRequestSchema, GetTaskAuditsRequestSchema, GetTaskAuditRequestSchema, GetTaskAuditAggregatesRequestSchema, DeleteTaskAuditRequestSchema, MarkInitialPromptSubmittedRequestSchema, PERSONAL_CLUSTER_EVENTS, PERSONAL_CLUSTER_HEARTBEAT_INTERVAL_MS, DECISION_STATUS_LABELS, DECISION_OPTION_KINDS, DECISION_VOTE_SOURCES, DECISION_OPTIONS_MIN, DECISION_OPTIONS_MAX, DECISION_OPTION_LABEL_MAX, DECISION_QUESTION_MAX, DECISION_RESOLUTION_MAX, DECISION_VOTE_REASON_MAX, DECISION_DEADLINE_MIN_HOURS, DECISION_DEADLINE_MAX_DAYS, DECISION_DEADLINE_MAX_HOURS, DECISION_LIST_MAX_LIMIT, decisionIdSchema, optionInputSchema, optionsArraySchema, CreateDecisionRequestSchema, VoteDecisionRequestSchema, RemoveDecisionVoteRequestSchema, ResolveDecisionRequestSchema, CancelDecisionRequestSchema, BulkDecisionIdsRequestSchema, ReopenDecisionRequestSchema, UpdateDecisionRequestSchema, GetDecisionRequestSchema, ListDecisionsRequestSchema, optionInput, optionsInput, deadlineHours, CreateProjectDecisionRequestSchema, ListProjectDecisionsRequestSchema, GetProjectDecisionRequestSchema, VoteProjectDecisionRequestSchema, ResolveProjectDecisionRequestSchema, UpdateProjectDecisionRequestSchema, EVALUATE_MAX_QUESTIONS, EVALUATE_MAX_ITEMS, EVALUATE_ITEM_MAX_CHARS, EVALUATE_REQUEST_MAX_CHARS, TEXT_MAX, QUESTION_KEY, EvaluateQuestionSchema, EvaluateQuestionsRequestSchema, MEETING_CHECKLIST_TITLE_MAX, MEETING_TRANSCRIPT_MAX_CHARS, MEETING_TITLE_MAX, MEETING_OCCURRED_AT_MIN_YEAR, MEETING_OCCURRED_AT_MAX_FUTURE_MS, OCCURRED_AT_RANGE_MESSAGE, MeetingOccurredAtSchema, CreateMeetingFromTranscriptRequestSchema, GetMeetingRequestSchema, UpdateMeetingRequestSchema, RegenerateMeetingSummaryRequestSchema, DeleteMeetingRequestSchema, checklistTitle, ListMeetingChecklistRequestSchema, AddMeetingChecklistItemsRequestSchema, UpdateMeetingChecklistItemRequestSchema, DeleteMeetingChecklistItemRequestSchema, SetMeetingChecklistItemCheckedRequestSchema, ListMeetingsRequestSchema, ReadMeetingTranscriptRequestSchema, MEETING_SUMMARY_MAX_CHARS, AddProjectMeetingChecklistItemsRequestSchema, CheckProjectMeetingChecklistItemRequestSchema, EditProjectMeetingChecklistItemRequestSchema, RemoveProjectMeetingChecklistItemRequestSchema, CreateProjectMeetingRequestSchema, UpdateProjectMeetingRequestSchema, TASK_CHAT_HISTORY_LIMIT, PM_CHAT_HISTORY_LIMIT, AGENT_CHAT_HISTORY_FETCH_LIMIT, ANTHROPIC_CATALOG, CLAUDESPACE_WORKLOAD_LABEL, CLAUDESPACE_WORKLOAD_VALUE, CONVEYOR_POD_SELECTOR, CONTAINERD_K8S_NAMESPACE, CONTAINERD_PIN_LABEL, CONVEYOR_CONTENT_HASH_LABEL, VM_IMPORT_DISCOVERY_DIR, LOCAL_BAKE_ROOT_COMMANDS, PERSONAL_LOCAL_REGISTRY_NAMESPACE, PERSONAL_LOCAL_REGISTRY_NAME, PERSONAL_LOCAL_REGISTRY_PORT, PERSONAL_LOCAL_REGISTRY_HOST, PERSONAL_LOCAL_REGISTRY_NODE_ENDPOINT, BAKE_COMPONENT_LABEL, BAKE_COMPONENT_PREBAKE, BAKE_COMPONENT_STATE_BAKE, BAKE_COMPONENT_VALUES, PERSONAL_BAKE_NAMESPACE, MS_PER_DAY, POSTGRES_ENV, FIREBASE_EMULATOR_COMMAND, FIREBASE_EMULATOR_ENV, CATALOG, SERVICE_DEFINITIONS, SUPPORTED_CLAUDESPACE_DEPS, STATEFUL_BAKE_DEPS, MIRRORABLE_SIDECARS, LEVELS_PER_BAND, PRESTIGE_TIERS, TOP_PRESTIGE_BAND, CARD_TYPE_SURFACE, surfaceTypes, BOARD_CARD_TYPES, REPORT_CARD_TYPES, DECISION_CARD_TYPES;
 var init_dist = __esm({
   "../shared/dist/index.js"() {
     "use strict";
-    init_chunk_BH4SLNGU();
+    init_chunk_VSUBG7GR();
     init_zod();
     init_zod();
     init_zod();
@@ -5026,7 +5069,8 @@ var init_dist = __esm({
       port: external_exports.number().int().min(1).max(65535),
       label: external_exports.string().min(1).max(64).optional(),
       protocol: external_exports.enum(["http", "tcp"]).optional(),
-      detectedAt: external_exports.string()
+      detectedAt: external_exports.string(),
+      hidden: external_exports.boolean().optional()
     });
     ReportDiscoveredPortsRequestSchema = external_exports.object({
       sessionId: external_exports.string(),
@@ -5173,7 +5217,11 @@ var init_dist = __esm({
     CycleCodingAgentKeyRequestSchema = external_exports.object({
       sessionId: external_exports.string(),
       rateLimitType: external_exports.string(),
-      resetsAt: external_exports.string().optional()
+      resetsAt: external_exports.string().optional(),
+      // The key the pod is actually running (CONVEYOR_CODING_AGENT_KEY_ID). Wins
+      // over the session's attribution stamp after owner validation; optional so
+      // older agents keep the session fallback.
+      codingAgentKeyId: external_exports.string().optional()
     });
     PostChildChatMessageRequestSchema = external_exports.object({
       sessionId: external_exports.string(),
@@ -5578,11 +5626,12 @@ var init_dist = __esm({
       sqlInstances: external_exports.array(external_exports.string().min(1).max(200)).max(25).optional(),
       allServices: external_exports.boolean().optional(),
       search: external_exports.string().max(256).optional(),
-      filter: external_exports.string().max(1e3).optional(),
+      filter: external_exports.string().max(2e3).optional(),
       startTime: external_exports.string().optional(),
       endTime: external_exports.string().optional(),
       limit: external_exports.number().int().min(1).max(200).optional().default(50),
-      pageToken: external_exports.string().max(4096).optional()
+      pageToken: external_exports.string().max(4096).optional(),
+      full: external_exports.boolean().optional()
     });
     QueryProjectGrafanaLogsRequestSchema = external_exports.object({
       projectId: external_exports.string(),
@@ -6511,6 +6560,7 @@ var init_dist = __esm({
     BAKE_COMPONENT_PREBAKE = "prebake";
     BAKE_COMPONENT_STATE_BAKE = "state-bake";
     BAKE_COMPONENT_VALUES = [BAKE_COMPONENT_PREBAKE, BAKE_COMPONENT_STATE_BAKE];
+    PERSONAL_BAKE_NAMESPACE = "conveyor-bakes";
     MS_PER_DAY = 24 * 60 * 60 * 1e3;
     POSTGRES_ENV = {
       POSTGRES_HOST_AUTH_METHOD: "trust",
@@ -6830,48 +6880,6 @@ exec firebase emulators:start --only=auth --project=rally-cry-dev`
   }
 });
 
-// src/lib/journald.ts
-function renderJournaldDropIn() {
-  return [
-    "# Written by conveyor-k3. Caps the journal so kubelet and container logs",
-    "# cannot fill the disk the image store needs. Removed by uninstall.",
-    "[Journal]",
-    "SystemMaxUse=1G",
-    "SystemKeepFree=2G",
-    "MaxRetentionSec=14day",
-    ""
-  ].join("\n");
-}
-async function ensureJournaldCap(ports) {
-  const content = renderJournaldDropIn();
-  if (await ports.fs.readFile(JOURNALD_DROPIN) === content) return false;
-  await ports.fs.writeFile(JOURNALD_DROPIN, content, 420);
-  await runOrThrow(ports.exec, "systemctl", ["restart", "systemd-journald"], {
-    timeoutMs: 6e4
-  });
-  return true;
-}
-function journaldCapScript() {
-  const encoded = Buffer.from(renderJournaldDropIn(), "utf8").toString("base64");
-  return [
-    "set -eu",
-    `dropin=${JOURNALD_DROPIN}`,
-    'tmp="$(mktemp)"',
-    `trap 'rm -f "$tmp"' EXIT`,
-    `printf '%s' '${encoded}' | base64 -d > "$tmp"`,
-    'if cmp -s "$tmp" "$dropin"; then exit 0; fi',
-    'install -D -m 0644 "$tmp" "$dropin"',
-    "systemctl restart systemd-journald"
-  ].join("\n");
-}
-var init_journald = __esm({
-  "src/lib/journald.ts"() {
-    "use strict";
-    init_exec();
-    init_paths();
-  }
-});
-
 // src/vm/capacity.ts
 function inBounds(key, value) {
   const { min, max } = CAPACITY_BOUNDS[key];
@@ -6975,117 +6983,357 @@ var init_capacity = __esm({
   }
 });
 
-// src/vm/instance-name.ts
-function isNamedInstance(value) {
-  return typeof value === "string" && NAMED_INSTANCE.test(value) && value !== DEFAULT_INSTANCE && value !== VM_NAME;
+// src/lib/journald.ts
+function renderJournaldDropIn() {
+  return [
+    "# Written by conveyor-k3. Caps the journal so kubelet and container logs",
+    "# cannot fill the disk the image store needs. Removed by uninstall.",
+    "[Journal]",
+    "SystemMaxUse=1G",
+    "SystemKeepFree=2G",
+    "MaxRetentionSec=14day",
+    ""
+  ].join("\n");
 }
-function parseInstanceName(value) {
-  if (value === void 0 || value === DEFAULT_INSTANCE) return DEFAULT_INSTANCE;
-  if (value === true) throw new Error("Use --instance=<name>.");
-  if (value === VM_NAME)
-    throw new Error(`"${VM_NAME}" is reserved for the default VM. Omit --instance to use it.`);
-  if (!isNamedInstance(value))
-    throw new Error(
-      "Use an instance name of 1-12 lowercase letters, digits, or single hyphens, starting with a letter."
-    );
-  return value;
+async function ensureJournaldCap(ports) {
+  const content = renderJournaldDropIn();
+  if (await ports.fs.readFile(JOURNALD_DROPIN) === content) return false;
+  await ports.fs.writeFile(JOURNALD_DROPIN, content, 420);
+  await runOrThrow(ports.exec, "systemctl", ["restart", "systemd-journald"], {
+    timeoutMs: 6e4
+  });
+  return true;
 }
-function vmNameFor(instance) {
-  return instance === DEFAULT_INSTANCE ? VM_NAME : instance;
+function journaldCapScript() {
+  const encoded = Buffer.from(renderJournaldDropIn(), "utf8").toString("base64");
+  return [
+    "set -eu",
+    `dropin=${JOURNALD_DROPIN}`,
+    'tmp="$(mktemp)"',
+    `trap 'rm -f "$tmp"' EXIT`,
+    `printf '%s' '${encoded}' | base64 -d > "$tmp"`,
+    'if cmp -s "$tmp" "$dropin"; then exit 0; fi',
+    'install -D -m 0644 "$tmp" "$dropin"',
+    "systemctl restart systemd-journald"
+  ].join("\n");
 }
-var VM_NAME, DEFAULT_INSTANCE, NAMED_INSTANCE;
-var init_instance_name = __esm({
-  "src/vm/instance-name.ts"() {
+var init_journald = __esm({
+  "src/lib/journald.ts"() {
     "use strict";
-    VM_NAME = "conveyor";
-    DEFAULT_INSTANCE = "default";
-    NAMED_INSTANCE = /^(?=.{1,12}$)[a-z](?:-?[a-z0-9])*$/;
+    init_exec();
+    init_paths();
   }
 });
 
-// src/vm/host-state.ts
-import { access, chmod as chmod2, lstat, mkdir as mkdir3, readFile as readFile2, rename as rename2, rm as rm3, writeFile as writeFile3 } from "fs/promises";
-import { homedir, uptime } from "os";
-import { join } from "path";
-import { setTimeout as sleep } from "timers/promises";
-function verifiedLink(state) {
-  return state.enrolled && (state.linkVerified ?? !!(state.linkedAccountLabel || state.linkedDisplayName));
-}
-function vmProfile() {
-  const profile = process.env.CONVEYOR_VM_TEST_PROFILE;
-  if (profile !== void 0 && !/^acceptance-[a-z0-9-]{1,32}$/.test(profile)) {
-    throw new Error("Test VM profiles must match acceptance-[a-z0-9-]{1,32}.");
-  }
-  return profile;
+// src/vm/device-link.ts
+function isTransientPairingError(error) {
+  if (error instanceof DevicePairingRequestError)
+    return error.status === 429 || error.status !== void 0 && error.status >= 500;
+  return error instanceof Error && /timed out|network|fetch failed/i.test(error.message);
 }
-function instancesBase() {
-  const profile = vmProfile();
-  return join(
-    homedir(),
-    ".local",
-    "share",
-    profile ? `conveyor-k3-${profile}-vms` : "conveyor-k3-vms"
-  );
+function validPublicLabel(value) {
+  return typeof value === "string" && value.length > 0 && value.length <= 160 && [...value].every((character) => {
+    const code = character.charCodeAt(0);
+    return code >= 32 && code !== 127;
+  });
 }
-function hostPaths(instance = DEFAULT_INSTANCE) {
-  const name2 = parseInstanceName(instance);
-  if (name2 !== DEFAULT_INSTANCE) return pathsForRoot(join(instancesBase(), name2), name2);
-  const profile = vmProfile();
-  return pathsForRoot(
-    join(homedir(), ".local", "share", profile ? `conveyor-k3-${profile}` : "conveyor-k3-vm")
+function validDevicePublicKey(value) {
+  return typeof value === "string" && Buffer.byteLength(value) <= 1024 && /^-----BEGIN PUBLIC KEY-----\n(?:[A-Za-z0-9+/=]{1,128}\n)+-----END PUBLIC KEY-----\n?$/.test(
+    value
   );
 }
-function pathsForRoot(root, instance = DEFAULT_INSTANCE) {
-  const vmName = vmNameFor(parseInstanceName(instance));
-  const instanceDir = join(root, "lima", vmName);
-  return {
-    root,
-    limaHome: join(root, "lima"),
-    state: join(root, "state.json"),
-    network: join(root, "network.json"),
-    template: join(root, "conveyor.yaml"),
-    wrapper: join(root, "qemu-wrapper"),
-    wrapperJs: join(root, "vm-qemu.js"),
-    applied: join(root, "applied-network.json"),
-    guard: join(root, "guard-state.json"),
-    startRequest: join(root, "start-request.json"),
-    policyTransaction: join(root, "policy-transaction.json"),
-    lock: join(root, "operation.lock"),
-    /** Written by an owner stop, so a supervising service does not restart the VM. */
-    stopIntent: join(root, "stop-intent.json"),
-    instance,
-    vmName,
-    instanceDir,
-    limaConfig: join(instanceDir, "lima.yaml")
-  };
+function devOrigin() {
+  const value = process.env.CONVEYOR_DEVICE_LINK_DEV_ORIGIN;
+  if (!value) return void 0;
+  const url = new URL(value);
+  if (url.pathname !== "/" || url.search || url.hash || url.username || url.password)
+    throw new Error("CONVEYOR_DEVICE_LINK_DEV_ORIGIN must be an origin.");
+  if (url.protocol !== "https:" && !(url.protocol === "http:" && url.hostname === "localhost"))
+    throw new Error("The explicit development pairing origin must use HTTPS or localhost HTTP.");
+  return url.origin;
 }
-function missingVm(paths, defaultCopy = "No Conveyor VM exists. Run conveyor-k3 vm setup first.") {
-  return paths.instance === DEFAULT_INSTANCE ? defaultCopy : `No Conveyor VM named ${paths.instance} exists. Run conveyor-k3 vm setup --instance=${paths.instance} first.`;
+function devWebOrigin() {
+  const value = process.env.CONVEYOR_DEVICE_LINK_DEV_WEB_ORIGIN;
+  if (!value) return void 0;
+  const url = new URL(value);
+  if (url.pathname !== "/" || url.search || url.hash || url.username || url.password)
+    throw new Error("CONVEYOR_DEVICE_LINK_DEV_WEB_ORIGIN must be an origin.");
+  if (url.protocol !== "https:" && !(url.protocol === "http:" && url.hostname === "localhost"))
+    throw new Error("The explicit development browser origin must use HTTPS or localhost HTTP.");
+  return url.origin;
 }
-async function vmOperationInProgress(paths) {
-  const editing = await Promise.all(
-    [paths.lock, paths.policyTransaction].map(
-      (path) => access(path).then(
-        () => true,
-        () => false
-      )
-    )
-  );
-  return editing.some(Boolean);
+function trustedDeviceApiUrl(value) {
+  const requested = new URL(value ?? PRODUCTION_API);
+  const development = devOrigin();
+  const allowed = /* @__PURE__ */ new Set([PRODUCTION_API, ...development ? [development] : []]);
+  if (requested.pathname !== "/" || requested.search || requested.hash || !allowed.has(requested.origin))
+    throw new Error(
+      "Pairing API must be the production origin or the explicitly configured development origin."
+    );
+  return requested.origin;
 }
-async function privateDirectory(path) {
-  await mkdir3(path, { recursive: true, mode: 448 });
-  const stat2 = await lstat(path);
-  if (!stat2.isDirectory() || stat2.isSymbolicLink() || stat2.uid !== process.getuid?.()) {
-    throw new Error(`Refusing unsafe VM directory: ${path}`);
+function validVerificationUri(value) {
+  if (typeof value !== "string") return false;
+  try {
+    const url = new URL(value);
+    const development = devWebOrigin();
+    const allowed = /* @__PURE__ */ new Set([PRODUCTION_WEB, ...development ? [development] : []]);
+    return allowed.has(url.origin) && url.pathname === "/personal-compute/link" && url.searchParams.size === 1 && /^[A-F0-9]{4}-[A-F0-9]{4}-[A-F0-9]{4}$/.test(url.searchParams.get("code") ?? "") && !url.username && !url.password && !url.hash;
+  } catch {
+    return false;
   }
-  await chmod2(path, 448);
 }
-async function atomicPrivateWrite(path, content, mode = 384) {
-  await assertSafeExistingFile(path);
-  const temporary = `${path}.${process.pid}.tmp`;
-  await writeFile3(temporary, content, { mode, flag: "wx" });
-  try {
+async function responseJson(response) {
+  const length = Number(response.headers.get("content-length"));
+  if (Number.isFinite(length) && (length < 0 || length > MAX_RESPONSE_BYTES))
+    throw new Error("Pairing API response is too large.");
+  if (!response.body) throw new Error("Pairing API returned an empty response.");
+  const reader = response.body.getReader();
+  const chunks = [];
+  let size = 0;
+  try {
+    while (true) {
+      const next = await reader.read();
+      if (next.done) break;
+      size += next.value.byteLength;
+      if (size > MAX_RESPONSE_BYTES) throw new Error("Pairing API response is too large.");
+      chunks.push(next.value);
+    }
+  } finally {
+    reader.releaseLock();
+  }
+  const bytes = new Uint8Array(size);
+  let offset = 0;
+  for (const chunk of chunks) {
+    bytes.set(chunk, offset);
+    offset += chunk.byteLength;
+  }
+  try {
+    return JSON.parse(new TextDecoder().decode(bytes));
+  } catch {
+    throw new Error("Pairing API returned invalid JSON.");
+  }
+}
+async function request(api, path, body, signal) {
+  const timeout = AbortSignal.timeout(15e3);
+  const combined = signal ? AbortSignal.any([signal, timeout]) : timeout;
+  let response;
+  try {
+    response = await fetch(`${api}${path}`, {
+      method: "POST",
+      headers: { "content-type": "application/json", accept: "application/json" },
+      body: JSON.stringify(body),
+      redirect: "error",
+      signal: combined
+    });
+  } catch (error) {
+    if (combined.aborted)
+      throw new Error("Pairing request timed out or was cancelled.", { cause: error });
+    throw error;
+  }
+  if (!response.ok) {
+    const failure = await responseJson(response).catch(() => null);
+    const detail2 = typeof failure?.error === "string" && failure.error.length <= 300 && [...failure.error].every(
+      (character) => character.charCodeAt(0) >= 32 && character.charCodeAt(0) !== 127
+    ) ? failure.error : void 0;
+    throw new DevicePairingRequestError(
+      detail2 ?? `Pairing request failed (${response.status}).`,
+      response.status
+    );
+  }
+  return responseJson(response);
+}
+async function startPairing(api, name2, devicePublicKey, signal, options) {
+  if (!validDevicePublicKey(devicePublicKey))
+    throw new Error("Guest device public key is invalid.");
+  const value = await request(
+    api,
+    "/api/personal-compute/device/start",
+    {
+      name: name2,
+      platform: process.platform,
+      arch: process.arch,
+      devicePublicKey,
+      ...options?.runtime ? { runtime: options.runtime } : {}
+    },
+    signal
+  );
+  const interval = value.interval;
+  if (typeof value.deviceCode !== "string" || value.deviceCode.length < 24 || typeof value.userCode !== "string" || !/^[A-Z0-9-]{4,32}$/.test(value.userCode) || !validVerificationUri(value.verificationUri) || typeof value.expiresAt !== "string" || typeof interval !== "number" || !Number.isInteger(interval) || interval < 5 || interval > 60)
+    throw new Error("Pairing API returned an invalid authorization response.");
+  return value;
+}
+async function pollPairing(api, deviceCode, signal) {
+  const value = await request(
+    api,
+    "/api/personal-compute/device/poll",
+    { deviceCode },
+    signal
+  );
+  if (!["pending", "approved", "completed", "denied", "expired", "cancelled"].includes(
+    value.status ?? ""
+  ))
+    throw new Error("Pairing API returned an invalid status.");
+  if (value.status === "approved" && (typeof value.bootstrapScript !== "string" || value.bootstrapScript.length > 1e6))
+    throw new Error("Approved pairing did not include a safe bootstrap payload.");
+  if (value.accountLabel !== void 0 && !validPublicLabel(value.accountLabel) || value.displayName !== void 0 && !validPublicLabel(value.displayName))
+    throw new Error("Pairing API returned invalid public device metadata.");
+  return value;
+}
+async function cancelPairing(api, deviceCode, signal) {
+  await request(api, "/api/personal-compute/device/cancel", { deviceCode }, signal);
+}
+function pairingExpired(expiresAt) {
+  const time = Date.parse(expiresAt);
+  return !Number.isFinite(time) || time <= Date.now();
+}
+async function pollUntilResolved(poll, expiresAt, intervalSeconds, retry, sleep4 = (milliseconds) => new Promise((resolve) => {
+  setTimeout(resolve, milliseconds);
+}), accept = (result) => result.status !== "pending") {
+  let delay2 = intervalSeconds * 1e3;
+  while (!pairingExpired(expiresAt)) {
+    try {
+      const result = await poll();
+      delay2 = intervalSeconds * 1e3;
+      if (accept(result)) return result;
+    } catch (error) {
+      if (!isTransientPairingError(error)) throw error;
+      retry();
+      delay2 = Math.min(delay2 * 2, 3e4);
+    }
+    await sleep4(delay2);
+  }
+  throw new Error("Pairing expired. Start a new link request.");
+}
+var PRODUCTION_API, PRODUCTION_WEB, MAX_RESPONSE_BYTES, DevicePairingRequestError;
+var init_device_link = __esm({
+  "src/vm/device-link.ts"() {
+    "use strict";
+    PRODUCTION_API = "https://api.conveyor.rallycryapp.com";
+    PRODUCTION_WEB = "https://conveyor.rallycryapp.com";
+    MAX_RESPONSE_BYTES = 64 * 1024;
+    DevicePairingRequestError = class extends Error {
+      constructor(message3, status, options) {
+        super(message3, options);
+        this.status = status;
+        this.name = "DevicePairingRequestError";
+      }
+      status;
+    };
+  }
+});
+
+// src/vm/instance-name.ts
+function isNamedInstance(value) {
+  return typeof value === "string" && NAMED_INSTANCE.test(value) && value !== DEFAULT_INSTANCE && value !== VM_NAME;
+}
+function parseInstanceName(value) {
+  if (value === void 0 || value === DEFAULT_INSTANCE) return DEFAULT_INSTANCE;
+  if (value === true) throw new Error("Use --instance=<name>.");
+  if (value === VM_NAME)
+    throw new Error(`"${VM_NAME}" is reserved for the default VM. Omit --instance to use it.`);
+  if (!isNamedInstance(value))
+    throw new Error(
+      "Use an instance name of 1-12 lowercase letters, digits, or single hyphens, starting with a letter."
+    );
+  return value;
+}
+function vmNameFor(instance) {
+  return instance === DEFAULT_INSTANCE ? VM_NAME : instance;
+}
+var VM_NAME, DEFAULT_INSTANCE, NAMED_INSTANCE;
+var init_instance_name = __esm({
+  "src/vm/instance-name.ts"() {
+    "use strict";
+    VM_NAME = "conveyor";
+    DEFAULT_INSTANCE = "default";
+    NAMED_INSTANCE = /^(?=.{1,12}$)[a-z](?:-?[a-z0-9])*$/;
+  }
+});
+
+// src/vm/host-state.ts
+import { access, chmod as chmod3, lstat, mkdir as mkdir4, readFile as readFile2, rename as rename2, rm as rm3, writeFile as writeFile4 } from "fs/promises";
+import { homedir, uptime } from "os";
+import { join } from "path";
+import { setTimeout as sleep } from "timers/promises";
+function verifiedLink(state) {
+  return state.enrolled && (state.linkVerified ?? !!(state.linkedAccountLabel || state.linkedDisplayName));
+}
+function vmProfile() {
+  const profile = process.env.CONVEYOR_VM_TEST_PROFILE;
+  if (profile !== void 0 && !/^acceptance-[a-z0-9-]{1,32}$/.test(profile)) {
+    throw new Error("Test VM profiles must match acceptance-[a-z0-9-]{1,32}.");
+  }
+  return profile;
+}
+function instancesBase() {
+  const profile = vmProfile();
+  return join(
+    homedir(),
+    ".local",
+    "share",
+    profile ? `conveyor-k3-${profile}-vms` : "conveyor-k3-vms"
+  );
+}
+function hostPaths(instance = DEFAULT_INSTANCE) {
+  const name2 = parseInstanceName(instance);
+  if (name2 !== DEFAULT_INSTANCE) return pathsForRoot(join(instancesBase(), name2), name2);
+  const profile = vmProfile();
+  return pathsForRoot(
+    join(homedir(), ".local", "share", profile ? `conveyor-k3-${profile}` : "conveyor-k3-vm")
+  );
+}
+function pathsForRoot(root, instance = DEFAULT_INSTANCE) {
+  const vmName = vmNameFor(parseInstanceName(instance));
+  const instanceDir = join(root, "lima", vmName);
+  return {
+    root,
+    limaHome: join(root, "lima"),
+    state: join(root, "state.json"),
+    network: join(root, "network.json"),
+    template: join(root, "conveyor.yaml"),
+    wrapper: join(root, "qemu-wrapper"),
+    wrapperJs: join(root, "vm-qemu.js"),
+    applied: join(root, "applied-network.json"),
+    guard: join(root, "guard-state.json"),
+    startRequest: join(root, "start-request.json"),
+    policyTransaction: join(root, "policy-transaction.json"),
+    lock: join(root, "operation.lock"),
+    /** Written by an owner stop, so a supervising service does not restart the VM. */
+    stopIntent: join(root, "stop-intent.json"),
+    instance,
+    vmName,
+    instanceDir,
+    limaConfig: join(instanceDir, "lima.yaml")
+  };
+}
+function missingVm(paths, defaultCopy = "No Conveyor VM exists. Run conveyor-k3 vm setup first.") {
+  return paths.instance === DEFAULT_INSTANCE ? defaultCopy : `No Conveyor VM named ${paths.instance} exists. Run conveyor-k3 vm setup --instance=${paths.instance} first.`;
+}
+async function vmOperationInProgress(paths) {
+  const editing = await Promise.all(
+    [paths.lock, paths.policyTransaction].map(
+      (path) => access(path).then(
+        () => true,
+        () => false
+      )
+    )
+  );
+  return editing.some(Boolean);
+}
+async function privateDirectory(path) {
+  await mkdir4(path, { recursive: true, mode: 448 });
+  const stat2 = await lstat(path);
+  if (!stat2.isDirectory() || stat2.isSymbolicLink() || stat2.uid !== process.getuid?.()) {
+    throw new Error(`Refusing unsafe VM directory: ${path}`);
+  }
+  await chmod3(path, 448);
+}
+async function atomicPrivateWrite(path, content, mode = 384) {
+  await assertSafeExistingFile(path);
+  const temporary = `${path}.${process.pid}.tmp`;
+  await writeFile4(temporary, content, { mode, flag: "wx" });
+  try {
     await rename2(temporary, path);
   } finally {
     await rm3(temporary, { force: true });
@@ -7212,13 +7460,13 @@ async function reclaimStaleLock(paths, options) {
 }
 async function acquireHostLock(paths, options) {
   try {
-    await mkdir3(paths.lock, { mode: 448 });
+    await mkdir4(paths.lock, { mode: 448 });
     return true;
   } catch (error) {
     if (error.code !== "EEXIST") throw error;
     if (!options.reclaimStale) return false;
     await reclaimStaleLock(paths, options);
-    return await mkdir3(paths.lock, { mode: 448 }).then(
+    return await mkdir4(paths.lock, { mode: 448 }).then(
       () => true,
       () => false
     );
@@ -7235,7 +7483,7 @@ async function withHostLock(paths, fn, options = {}) {
     await sleep(500, void 0, { signal: options.signal });
   }
   try {
-    await writeFile3(join(paths.lock, "pid"), String(process.pid), { mode: 384 });
+    await writeFile4(join(paths.lock, "pid"), String(process.pid), { mode: 384 });
     return await fn();
   } finally {
     await rm3(paths.lock, { recursive: true, force: true });
@@ -7913,7 +8161,7 @@ var init_host_packages = __esm({
 import { constants } from "fs";
 import { access as access2, statfs as statfs2 } from "fs/promises";
 import { userInfo } from "os";
-import { dirname, join as join4 } from "path";
+import { dirname as dirname2, join as join4 } from "path";
 function realHost() {
   return {
     platform: process.platform,
@@ -7985,11 +8233,11 @@ async function assertLimaVersion(exec, paths, lima, host) {
 }
 async function findFirmware(qemu, arch, host, os) {
   const candidates = arch === "arm64" ? [
-    join4(dirname(qemu), "../share/qemu/edk2-aarch64-code.fd"),
+    join4(dirname2(qemu), "../share/qemu/edk2-aarch64-code.fd"),
     "/usr/share/AAVMF/AAVMF_CODE.fd",
     "/usr/share/qemu-efi-aarch64/QEMU_EFI.fd"
   ] : [
-    join4(dirname(qemu), "../share/qemu/edk2-x86_64-code.fd"),
+    join4(dirname2(qemu), "../share/qemu/edk2-x86_64-code.fd"),
     "/usr/share/edk2/x64/OVMF_CODE.4m.fd",
     "/usr/share/OVMF/OVMF_CODE_4M.fd",
     "/usr/share/OVMF/OVMF_CODE.fd"
@@ -9352,208 +9600,11 @@ var init_dev_artifact = __esm({
   }
 });
 
-// src/vm/device-link.ts
-function isTransientPairingError(error) {
-  if (error instanceof DevicePairingRequestError)
-    return error.status === 429 || error.status !== void 0 && error.status >= 500;
-  return error instanceof Error && /timed out|network|fetch failed/i.test(error.message);
-}
-function validPublicLabel(value) {
-  return typeof value === "string" && value.length > 0 && value.length <= 160 && [...value].every((character) => {
-    const code = character.charCodeAt(0);
-    return code >= 32 && code !== 127;
-  });
-}
-function validDevicePublicKey(value) {
-  return typeof value === "string" && Buffer.byteLength(value) <= 1024 && /^-----BEGIN PUBLIC KEY-----\n(?:[A-Za-z0-9+/=]{1,128}\n)+-----END PUBLIC KEY-----\n?$/.test(
-    value
-  );
-}
-function devOrigin() {
-  const value = process.env.CONVEYOR_DEVICE_LINK_DEV_ORIGIN;
-  if (!value) return void 0;
-  const url = new URL(value);
-  if (url.pathname !== "/" || url.search || url.hash || url.username || url.password)
-    throw new Error("CONVEYOR_DEVICE_LINK_DEV_ORIGIN must be an origin.");
-  if (url.protocol !== "https:" && !(url.protocol === "http:" && url.hostname === "localhost"))
-    throw new Error("The explicit development pairing origin must use HTTPS or localhost HTTP.");
-  return url.origin;
-}
-function devWebOrigin() {
-  const value = process.env.CONVEYOR_DEVICE_LINK_DEV_WEB_ORIGIN;
-  if (!value) return void 0;
-  const url = new URL(value);
-  if (url.pathname !== "/" || url.search || url.hash || url.username || url.password)
-    throw new Error("CONVEYOR_DEVICE_LINK_DEV_WEB_ORIGIN must be an origin.");
-  if (url.protocol !== "https:" && !(url.protocol === "http:" && url.hostname === "localhost"))
-    throw new Error("The explicit development browser origin must use HTTPS or localhost HTTP.");
-  return url.origin;
-}
-function trustedDeviceApiUrl(value) {
-  const requested = new URL(value ?? PRODUCTION_API);
-  const development = devOrigin();
-  const allowed = /* @__PURE__ */ new Set([PRODUCTION_API, ...development ? [development] : []]);
-  if (requested.pathname !== "/" || requested.search || requested.hash || !allowed.has(requested.origin))
-    throw new Error(
-      "Pairing API must be the production origin or the explicitly configured development origin."
-    );
-  return requested.origin;
-}
-function validVerificationUri(value) {
-  if (typeof value !== "string") return false;
-  try {
-    const url = new URL(value);
-    const development = devWebOrigin();
-    const allowed = /* @__PURE__ */ new Set([PRODUCTION_WEB, ...development ? [development] : []]);
-    return allowed.has(url.origin) && url.pathname === "/personal-compute/link" && url.searchParams.size === 1 && /^[A-F0-9]{4}-[A-F0-9]{4}-[A-F0-9]{4}$/.test(url.searchParams.get("code") ?? "") && !url.username && !url.password && !url.hash;
-  } catch {
-    return false;
-  }
-}
-async function responseJson(response) {
-  const length = Number(response.headers.get("content-length"));
-  if (Number.isFinite(length) && (length < 0 || length > MAX_RESPONSE_BYTES))
-    throw new Error("Pairing API response is too large.");
-  if (!response.body) throw new Error("Pairing API returned an empty response.");
-  const reader = response.body.getReader();
-  const chunks = [];
-  let size = 0;
-  try {
-    while (true) {
-      const next = await reader.read();
-      if (next.done) break;
-      size += next.value.byteLength;
-      if (size > MAX_RESPONSE_BYTES) throw new Error("Pairing API response is too large.");
-      chunks.push(next.value);
-    }
-  } finally {
-    reader.releaseLock();
-  }
-  const bytes = new Uint8Array(size);
-  let offset = 0;
-  for (const chunk of chunks) {
-    bytes.set(chunk, offset);
-    offset += chunk.byteLength;
-  }
-  try {
-    return JSON.parse(new TextDecoder().decode(bytes));
-  } catch {
-    throw new Error("Pairing API returned invalid JSON.");
-  }
-}
-async function request(api, path, body, signal) {
-  const timeout = AbortSignal.timeout(15e3);
-  const combined = signal ? AbortSignal.any([signal, timeout]) : timeout;
-  let response;
-  try {
-    response = await fetch(`${api}${path}`, {
-      method: "POST",
-      headers: { "content-type": "application/json", accept: "application/json" },
-      body: JSON.stringify(body),
-      redirect: "error",
-      signal: combined
-    });
-  } catch (error) {
-    if (combined.aborted)
-      throw new Error("Pairing request timed out or was cancelled.", { cause: error });
-    throw error;
-  }
-  if (!response.ok) {
-    const failure = await responseJson(response).catch(() => null);
-    const detail2 = typeof failure?.error === "string" && failure.error.length <= 300 && [...failure.error].every(
-      (character) => character.charCodeAt(0) >= 32 && character.charCodeAt(0) !== 127
-    ) ? failure.error : void 0;
-    throw new DevicePairingRequestError(
-      detail2 ?? `Pairing request failed (${response.status}).`,
-      response.status
-    );
-  }
-  return responseJson(response);
-}
-async function startPairing(api, name2, devicePublicKey, signal) {
-  if (!validDevicePublicKey(devicePublicKey))
-    throw new Error("Guest device public key is invalid.");
-  const value = await request(
-    api,
-    "/api/personal-compute/device/start",
-    {
-      name: name2,
-      platform: process.platform,
-      arch: process.arch,
-      devicePublicKey
-    },
-    signal
-  );
-  const interval = value.interval;
-  if (typeof value.deviceCode !== "string" || value.deviceCode.length < 24 || typeof value.userCode !== "string" || !/^[A-Z0-9-]{4,32}$/.test(value.userCode) || !validVerificationUri(value.verificationUri) || typeof value.expiresAt !== "string" || typeof interval !== "number" || !Number.isInteger(interval) || interval < 5 || interval > 60)
-    throw new Error("Pairing API returned an invalid authorization response.");
-  return value;
-}
-async function pollPairing(api, deviceCode, signal) {
-  const value = await request(
-    api,
-    "/api/personal-compute/device/poll",
-    { deviceCode },
-    signal
-  );
-  if (!["pending", "approved", "completed", "denied", "expired", "cancelled"].includes(
-    value.status ?? ""
-  ))
-    throw new Error("Pairing API returned an invalid status.");
-  if (value.status === "approved" && (typeof value.bootstrapScript !== "string" || value.bootstrapScript.length > 1e6))
-    throw new Error("Approved pairing did not include a safe bootstrap payload.");
-  if (value.accountLabel !== void 0 && !validPublicLabel(value.accountLabel) || value.displayName !== void 0 && !validPublicLabel(value.displayName))
-    throw new Error("Pairing API returned invalid public device metadata.");
-  return value;
-}
-async function cancelPairing(api, deviceCode, signal) {
-  await request(api, "/api/personal-compute/device/cancel", { deviceCode }, signal);
-}
-function pairingExpired(expiresAt) {
-  const time = Date.parse(expiresAt);
-  return !Number.isFinite(time) || time <= Date.now();
-}
-async function pollUntilResolved(poll, expiresAt, intervalSeconds, retry, sleep4 = (milliseconds) => new Promise((resolve) => {
-  setTimeout(resolve, milliseconds);
-}), accept = (result) => result.status !== "pending") {
-  let delay2 = intervalSeconds * 1e3;
-  while (!pairingExpired(expiresAt)) {
-    try {
-      const result = await poll();
-      delay2 = intervalSeconds * 1e3;
-      if (accept(result)) return result;
-    } catch (error) {
-      if (!isTransientPairingError(error)) throw error;
-      retry();
-      delay2 = Math.min(delay2 * 2, 3e4);
-    }
-    await sleep4(delay2);
-  }
-  throw new Error("Pairing expired. Start a new link request.");
-}
-var PRODUCTION_API, PRODUCTION_WEB, MAX_RESPONSE_BYTES, DevicePairingRequestError;
-var init_device_link = __esm({
-  "src/vm/device-link.ts"() {
-    "use strict";
-    PRODUCTION_API = "https://api.conveyor.rallycryapp.com";
-    PRODUCTION_WEB = "https://conveyor.rallycryapp.com";
-    MAX_RESPONSE_BYTES = 64 * 1024;
-    DevicePairingRequestError = class extends Error {
-      constructor(message2, status, options) {
-        super(message2, options);
-        this.status = status;
-        this.name = "DevicePairingRequestError";
-      }
-      status;
-    };
-  }
-});
-
-// src/vm/instances.ts
-import { lstat as lstat2, readdir } from "fs/promises";
-import { join as join7 } from "path";
-function instanceLayout() {
-  return { defaultRoot: hostPaths().root, base: instancesBase() };
+// src/vm/instances.ts
+import { lstat as lstat2, readdir } from "fs/promises";
+import { join as join7 } from "path";
+function instanceLayout() {
+  return { defaultRoot: hostPaths().root, base: instancesBase() };
 }
 function instancePaths(layout, instance) {
   return instance === DEFAULT_INSTANCE ? pathsForRoot(layout.defaultRoot) : pathsForRoot(join7(layout.base, instance), instance);
@@ -9594,7 +9645,7 @@ var init_instances = __esm({
 });
 
 // src/vm/ledger.ts
-import { mkdir as mkdir4, rm as rm6, writeFile as writeFile4 } from "fs/promises";
+import { mkdir as mkdir5, rm as rm6, writeFile as writeFile5 } from "fs/promises";
 import { cpus as cpus2, totalmem as totalmem2 } from "os";
 import { join as join8 } from "path";
 import { setTimeout as sleep2 } from "timers/promises";
@@ -9651,7 +9702,7 @@ async function withAdmissionLock(fn, base = instancesBase(), wait = ADMISSION_WA
     await rm6(lock, { recursive: true, force: true });
   };
   try {
-    await writeFile4(join8(lock, "pid"), String(process.pid), { mode: 384 });
+    await writeFile5(join8(lock, "pid"), String(process.pid), { mode: 384 });
     return await fn(release);
   } finally {
     await release();
@@ -9659,7 +9710,7 @@ async function withAdmissionLock(fn, base = instancesBase(), wait = ADMISSION_WA
 }
 async function tryLock(path) {
   try {
-    await mkdir4(path, { mode: 448 });
+    await mkdir5(path, { mode: 448 });
     return true;
   } catch (error) {
     if (error.code === "EEXIST") return false;
@@ -9683,8 +9734,8 @@ import { Transform } from "stream";
 function isBakeRef(ref, prefix) {
   return ref.startsWith(prefix) && REF_AFTER_PREFIX.test(ref.slice(prefix.length));
 }
-function gateError(message2) {
-  const error = new Error(message2);
+function gateError(message3) {
+  const error = new Error(message3);
   error.name = GATE_ERROR;
   return error;
 }
@@ -9694,8 +9745,8 @@ function isTarGateError(error) {
 function padding(size) {
   return (BLOCK - size % BLOCK) % BLOCK;
 }
-function fail(message2) {
-  throw gateError(message2);
+function fail(message3) {
+  throw gateError(message3);
 }
 function textField(block, start, length) {
   const field = block.subarray(start, start + length);
@@ -10073,7 +10124,7 @@ var init_tar_gate = __esm({
 });
 
 // src/vm/image-import.ts
-import { spawn as spawn2 } from "child_process";
+import { spawn as spawn3 } from "child_process";
 import { statfs as statfs4 } from "fs/promises";
 import { join as join9 } from "path";
 import { Transform as Transform2 } from "stream";
@@ -10207,7 +10258,7 @@ function stallMeter(limits, stall) {
   return { meter, stop: () => clearInterval(timer) };
 }
 function spawnGuestImport(ports, state) {
-  const child = spawn2(state.lima, ["--tty=false", ...guestCtr(ports, "import")], {
+  const child = spawn3(state.lima, ["--tty=false", ...guestCtr(ports, "import")], {
     env: hostEnvironment(ports.paths),
     detached: true,
     stdio: ["pipe", "pipe", "pipe"]
@@ -10324,7 +10375,7 @@ var init_image_import = __esm({
 });
 
 // src/vm/runner-grant.ts
-import { spawn as spawn3 } from "child_process";
+import { spawn as spawn4 } from "child_process";
 import { existsSync as existsSync2, promises as fs, realpathSync } from "fs";
 import { tmpdir, userInfo as userInfo2 } from "os";
 import { join as join10 } from "path";
@@ -10408,7 +10459,7 @@ async function readGrantRecord(root) {
 }
 function runSudo(args) {
   return new Promise((resolve, reject) => {
-    const child = spawn3("sudo", ["--", "/bin/sh", "-c", INSTALL_SCRIPT, "conveyor-k3", ...args], {
+    const child = spawn4("sudo", ["--", "/bin/sh", "-c", INSTALL_SCRIPT, "conveyor-k3", ...args], {
       stdio: "inherit"
     });
     child.once("error", reject);
@@ -10704,10 +10755,12 @@ async function setupVm(ports, parsed, state) {
   if (!state) state = await createInstance(ports, parsed, url);
   await startVm(ports, state);
   if (url) await enrollVm(ports, state, url);
-  else
-    ports.log(
-      state.enrollmentAttempted ? "Enrollment may be incomplete. Regenerate the install link and retry setup --install-url-stdin." : "VM created but not enrolled. Run setup --install-url-stdin with a fresh URL from Personal Compute."
-    );
+  else ports.log(setupNextStep(state, ports.paths.instance));
+}
+function setupNextStep(state, instance) {
+  const link = instance === DEFAULT_INSTANCE ? "conveyor-k3 vm link" : `conveyor-k3 vm link --instance=${instance}`;
+  if (state.enrolled) return "The VM is running and linked to Conveyor.";
+  return state.enrollmentAttempted ? `Linking may be incomplete. Run ${link} to link the VM again.` : `VM created but not linked yet. Run ${link} to link it to your account.`;
 }
 function defaultMachineName(paths) {
   const base = `${process.platform}-${process.arch}`;
@@ -10743,6 +10796,7 @@ async function linkVm(ports, state, parsed) {
   ports.log(
     `PAIRING ${JSON.stringify({ userCode: pairing.userCode, verificationUri: pairing.verificationUri })}`
   );
+  ports.log(`Open ${pairing.verificationUri} on any device and confirm code ${pairing.userCode}.`);
   ports.log("Waiting for browser approval\u2026");
   const terminate = () => {
     void cancelPairing(api, pairing.deviceCode).finally(() => process.exit(143));
@@ -10879,9 +10933,9 @@ var init_service_unit = __esm({
 
 // src/vm/service-control.ts
 import { constants as constants2, readFileSync as readFileSync4 } from "fs";
-import { access as access5, lstat as lstat3, mkdir as mkdir5, readFile as readFile8, readdir as readdir2, rename as rename3, rm as rm7, writeFile as writeFile5 } from "fs/promises";
+import { access as access5, lstat as lstat3, mkdir as mkdir6, readFile as readFile8, readdir as readdir2, rename as rename3, rm as rm7, writeFile as writeFile6 } from "fs/promises";
 import { tmpdir as tmpdir2, userInfo as userInfo3 } from "os";
-import { dirname as dirname2, join as join12 } from "path";
+import { dirname as dirname3, join as join12 } from "path";
 import { setTimeout as sleep3 } from "timers/promises";
 function realServiceHost(exec, log2) {
   const uid = process.getuid?.() ?? -1;
@@ -10992,9 +11046,9 @@ async function writeManagedUnit(path, text) {
   if (existing !== void 0 && !existing.startsWith(MANAGED_UNIT_HEADER))
     throw new Error(`Refusing to replace ${path}: conveyor-k3 did not write it.`);
   if (existing === text) return;
-  await mkdir5(dirname2(path), { recursive: true, mode: 493 });
+  await mkdir6(dirname3(path), { recursive: true, mode: 493 });
   const temporary = `${path}.${process.pid}.tmp`;
-  await writeFile5(temporary, text, { mode: 420 });
+  await writeFile6(temporary, text, { mode: 420 });
   await rename3(temporary, path);
 }
 async function assertLinger(host) {
@@ -11199,7 +11253,7 @@ var init_service_control = __esm({
 
 // src/vm/supervisor.ts
 import { setTimeout as delay } from "timers/promises";
-function message(error) {
+function message2(error) {
   return error instanceof Error ? error.message : String(error);
 }
 async function pause(ms, deps) {
@@ -11223,7 +11277,7 @@ async function readyToStart(ports) {
     );
     return state;
   } catch (error) {
-    return message(error);
+    return message2(error);
   }
 }
 async function forceStop(ports, state) {
@@ -11234,7 +11288,7 @@ async function forceStop(ports, state) {
     ["stop", "--force", ports.paths.vmName],
     void 0,
     15e3
-  ).catch((error) => ports.log(`The forced stop failed: ${message(error)}`));
+  ).catch((error) => ports.log(`The forced stop failed: ${message2(error)}`));
 }
 async function startOrAbort(ports, state, deps) {
   let booted = false;
@@ -11289,7 +11343,7 @@ async function startSupervised(ports, deps) {
       ports.log("Stopped before the VM started.");
       return SERVICE_EXIT.stopped;
     }
-    ports.log(`VM start failed: ${message(error)}`);
+    ports.log(`VM start failed: ${message2(error)}`);
     return SERVICE_EXIT.startFailed;
   });
 }
@@ -11304,7 +11358,7 @@ async function watch(ports, state, deps) {
       failures = 0;
     } catch (error) {
       failures += 1;
-      ports.log(`Could not read the VM status (${failures} in a row): ${message(error)}`);
+      ports.log(`Could not read the VM status (${failures} in a row): ${message2(error)}`);
       if (failures <= TOLERATED_STATUS_ERRORS) continue;
       await shutdown(ports, state);
       return SERVICE_EXIT.unexpectedStop;
@@ -11348,7 +11402,7 @@ async function shutdownVm(ports, state) {
     );
     ports.log("VM stopped. Its disks and workspaces are preserved.");
   } catch (error) {
-    ports.log(`The graceful stop failed (${message(error)}); forcing it.`);
+    ports.log(`The graceful stop failed (${message2(error)}); forcing it.`);
     await limaCommand(
       ports.exec,
       state,
@@ -11356,7 +11410,7 @@ async function shutdownVm(ports, state) {
       ["stop", "--force", ports.paths.vmName],
       void 0,
       2e4
-    ).catch((forced) => ports.log(`The forced stop failed: ${message(forced)}`));
+    ).catch((forced) => ports.log(`The forced stop failed: ${message2(forced)}`));
   }
 }
 async function runSupervisor(ports, deps) {
@@ -11703,7 +11757,8 @@ var init_command = __esm({
     init_command_setup();
     init_service_command();
     init_instance_list();
-    VM_HELP = `Usage: conveyor-k3 vm <setup|start|stop|status|list|link|internet|logout|pods|pod-logs|disk-usage|configure|update|allow|deny|refresh|uninstall|image import|runners grant>
+    VM_HELP = `Personal computer (VM) runtime.
+Usage: conveyor-k3 vm <setup|start|stop|status|list|link|internet|logout|pods|pod-logs|disk-usage|configure|update|allow|deny|refresh|uninstall|image import|runners grant>
   Every command but list acts on one VM: --instance=<name> selects a named VM,
   and omitting it selects this user's default VM.
   setup [--install-url-stdin] [--relink] [--cpus=4] [--memory=8] [--disk=64]
@@ -11736,6 +11791,173 @@ Run without sudo. Requires Lima 2.2+ and QEMU with HVF (macOS) or KVM (Linux).
   }
 });
 
+// src/host/command.ts
+var command_exports2 = {};
+__export(command_exports2, {
+  HOST_HELP: () => HOST_HELP,
+  runHostCommand: () => runHostCommand
+});
+import { hostname } from "os";
+function validateFlags2(parsed) {
+  const action = parsed.positional.length === 1 ? parsed.positional[0] : void 0;
+  const allowed = action === void 0 ? void 0 : ALLOWED_FLAGS.get(action);
+  if (action === void 0 || !allowed) throw new Error(HOST_HELP);
+  for (const [flag, value] of Object.entries(parsed.flags)) {
+    if (!allowed.includes(flag)) throw new Error(`Unknown flag for host ${action}: --${flag}`);
+    const boolean = BOOLEAN_FLAGS.has(flag);
+    if (boolean && value !== true) throw new Error(`Use --${flag} without a value.`);
+    if (!boolean && value === true) throw new Error(`Use --${flag}=<value>.`);
+  }
+  return action;
+}
+async function requireHostRoot(exec) {
+  if (process.getuid?.() !== 0)
+    throw new Error(
+      "Host commands change this machine's k3s and systemd units. Run them with sudo."
+    );
+  const checks = await preflight(exec);
+  if (!checks.ok) throw new Error(checks.problems.join("\n"));
+}
+async function requireApt(exec) {
+  if (await commandExists(exec, "apt-get")) return;
+  throw new Error(
+    "The host runtime installs its prerequisites with apt-get. Use Ubuntu 24.04 or Debian 12, or newer."
+  );
+}
+async function markHostRuntime(ports) {
+  const state = await ports.readState();
+  if (state.runtime !== "host") await ports.writeState({ ...state, runtime: "host" });
+}
+async function prepareHostLink(parsed, ports, log2) {
+  const api = trustedDeviceApiUrl(
+    typeof parsed.flags["api-url"] === "string" ? parsed.flags["api-url"] : void 0
+  );
+  const name2 = typeof parsed.flags.name === "string" ? parsed.flags.name.trim() : hostname();
+  if (!MACHINE_NAME.test(name2))
+    throw new Error("Use a machine name of 1-80 letters, numbers, spaces, dots, or hyphens.");
+  if (process.env.CONVEYOR_DEV_ARTIFACT || process.env.CONVEYOR_DEV_ARTIFACT_SHA256)
+    throw new Error("Development artifacts are not supported by host link.");
+  const state = await ports.readState();
+  if (state.enrolled) {
+    const current = state.hostname ?? "a Conveyor instance";
+    if (parsed.flags.relink !== true)
+      throw new Error(
+        `This server is already linked as ${current}. Re-run with --relink to move it to the account that approves the new link (its old instance stays until you Disconnect it).`
+      );
+    log2(`Relinking: this server will leave ${current}.`);
+  }
+  return { api, name: name2 };
+}
+async function completeHostLink(api, pairing, log2, ports) {
+  const poll = () => pollPairing(api, pairing.deviceCode);
+  const retry = () => log2("Securing connection\u2026 retrying pairing status.");
+  const result = await pollUntilResolved(poll, pairing.expiresAt, pairing.interval, retry);
+  if (result.status === "completed") {
+    await markHostRuntime(ports);
+    log2(
+      `This server is already linked${result.accountLabel ? ` to ${result.accountLabel}` : ""}${result.displayName ? ` as ${result.displayName}` : ""}.`
+    );
+    return;
+  }
+  if (result.status !== "approved")
+    throw new Error(`Pairing ${result.status}. Start a new link request to try again.`);
+  if (typeof result.bootstrapScript !== "string")
+    throw new Error("Approved pairing did not include a bootstrap payload.");
+  log2("Approved. Installing and enrolling this server\u2026");
+  await ports.runBootstrap(result.bootstrapScript);
+  log2("Verifying Conveyor access\u2026");
+  const completed = await pollUntilResolved(
+    poll,
+    pairing.expiresAt,
+    pairing.interval,
+    retry,
+    void 0,
+    (next) => next.status !== "pending" && next.status !== "approved"
+  );
+  if (completed.status !== "completed")
+    throw new Error(`Pairing ${completed.status}. Conveyor did not verify this server.`);
+  await markHostRuntime(ports);
+  log2(
+    `Linked to ${completed.accountLabel ?? "Conveyor"}${completed.displayName ? ` as ${completed.displayName}` : ""}.`
+  );
+}
+async function hostLink(parsed, log2, ports) {
+  const { api, name: name2 } = await prepareHostLink(parsed, ports, log2);
+  log2("Preparing this server: k3s, cloudflared, and the cluster CA\u2026");
+  await ports.prepare();
+  const devicePublicKey = await ports.ensureDevicePublicKey();
+  const pairing = await startPairing(api, name2, devicePublicKey, void 0, { runtime: "host" });
+  log2(
+    `PAIRING ${JSON.stringify({ userCode: pairing.userCode, verificationUri: pairing.verificationUri })}`
+  );
+  log2(`Open ${pairing.verificationUri} on any device and confirm code ${pairing.userCode}.`);
+  log2("Waiting for browser approval\u2026");
+  const terminate = () => {
+    void cancelPairing(api, pairing.deviceCode).finally(() => process.exit(143));
+  };
+  process.once("SIGTERM", terminate);
+  try {
+    await completeHostLink(api, pairing, log2, ports);
+  } catch (error) {
+    await cancelPairing(api, pairing.deviceCode).catch(() => void 0);
+    throw error;
+  } finally {
+    process.removeListener("SIGTERM", terminate);
+  }
+}
+async function runHostCommand(parsed, exec, log2, ports) {
+  if (parsed.positional.length === 0 || parsed.flags.help === true) {
+    log2(HOST_HELP);
+    return;
+  }
+  const action = validateFlags2(parsed);
+  if (action === "status") {
+    const asJson = parsed.flags.json === true;
+    if (!asJson && process.getuid?.() !== 0)
+      log2("Not root: this server's state file is root-only. Run sudo conveyor-k3 host status.");
+    return ports.status(asJson);
+  }
+  await requireHostRoot(exec);
+  if (action === "setup" || action === "link") await requireApt(exec);
+  if (action === "setup") return ports.setup();
+  if (action === "link") return hostLink(parsed, log2, ports);
+  await ports.uninstall({
+    purgeK3s: parsed.flags["purge-k3s"] === true,
+    confirmed: parsed.flags.yes === true
+  });
+  await ports.removeDeviceKey();
+}
+var HOST_HELP, ALLOWED_FLAGS, BOOLEAN_FLAGS, MACHINE_NAME;
+var init_command2 = __esm({
+  "src/host/command.ts"() {
+    "use strict";
+    init_env();
+    init_exec();
+    init_device_link();
+    HOST_HELP = `Dedicated server (host) runtime.
+Usage: conveyor-k3 host <setup|link|status|uninstall>
+  setup                         Install k3s, or adopt the k3s 1.29+ already here, and
+                                cloudflared. Safe to re-run.
+  link [--name=machine] [--api-url=trusted-origin] [--relink]
+                                Link this server in a browser: prints a URL and a code.
+  status [--json]               What is running, and what Conveyor knows.
+  uninstall [--purge-k3s --yes] Remove Conveyor's units, state, and device key. k3s,
+                                your config, and your workloads stay unless you purge.
+Run with sudo on a dedicated Linux server. Builds run on this server's own k3s with
+no VM boundary; Pod Security and an egress policy stand in for one. See the guide's
+"Link a dedicated server (host)" section.
+`;
+    ALLOWED_FLAGS = /* @__PURE__ */ new Map([
+      ["setup", []],
+      ["link", ["name", "api-url", "relink"]],
+      ["status", ["json"]],
+      ["uninstall", ["purge-k3s", "yes"]]
+    ]);
+    BOOLEAN_FLAGS = /* @__PURE__ */ new Set(["relink", "json", "purge-k3s", "yes"]);
+    MACHINE_NAME = /^[\w .-]{1,80}$/;
+  }
+});
+
 // src/daemon/workload-cache.ts
 init_paths();
 import { mkdir, rename, rm, writeFile } from "fs/promises";
@@ -11830,43 +12052,8 @@ var nodeFileSystem = {
   }
 };
 
-// src/lib/env.ts
-init_safe_arg();
-init_exec();
-function readCliEnv(env = process.env) {
-  const apiUrl = env.CONVEYOR_API_URL ?? "";
-  const clusterToken = env.CONVEYOR_CLUSTER_TOKEN ?? "";
-  const clusterId = env.CONVEYOR_CLUSTER_ID ?? "";
-  if (!apiUrl || !clusterToken) {
-    throw new Error(
-      "This machine is not enrolled. /etc/conveyor/k3.env must set CONVEYOR_API_URL and CONVEYOR_CLUSTER_TOKEN \u2014 re-run the install command from your Conveyor profile."
-    );
-  }
-  return { apiUrl, clusterToken, clusterId };
-}
-async function preflight(exec) {
-  const problems = [];
-  if (process.platform !== "linux") {
-    problems.push(
-      `Managed personal compute requires Linux (this machine reports ${process.platform}).`
-    );
-  }
-  if (process.arch !== "x64" && process.arch !== "arm64") {
-    problems.push(`Unsupported CPU architecture ${process.arch} \u2014 amd64 or arm64 is required.`);
-  }
-  if (typeof process.getuid === "function" && process.getuid() !== 0) {
-    problems.push(
-      "This guest command requires root inside the VM. Use conveyor-k3 vm commands on the host."
-    );
-  }
-  if (!await commandExists(exec, "systemctl")) {
-    problems.push("systemd is required and `systemctl` was not found.");
-  }
-  return { ok: problems.length === 0, problems };
-}
-function checkedHostname(hostname) {
-  return assertHostname(hostname, "tunnel hostname");
-}
+// src/cli.ts
+init_env();
 
 // src/lib/state.ts
 init_paths();
@@ -11891,6 +12078,9 @@ async function writeState(fs2, state) {
   await fs2.writeFile(STATE_FILE, `${JSON.stringify(state, null, 2)}
 `, 384);
 }
+function managesK3s(desired, state) {
+  return desired.isolation === void 0 || state.k3sInstalledByConveyor === true;
+}
 
 // src/cli.ts
 init_paths();
@@ -12775,6 +12965,255 @@ var GRANTED_COMMAND_NAMES = LOCAL_BAKE_ROOT_COMMANDS.map((command) => command.na
 
 // src/commands/uninstall.ts
 init_dist();
+
+// src/lib/isolation.ts
+init_dist();
+
+// src/lib/k3s-config.ts
+init_safe_arg();
+var IMAGE_GC_HIGH = "image-gc-high-threshold";
+var IMAGE_GC_LOW = "image-gc-low-threshold";
+var SYSTEM_RESERVED = "system-reserved";
+var K3S_DISABLED_COMPONENTS = ["traefik", "servicelb"];
+var WRITE_KUBECONFIG_MODE = "write-kubeconfig-mode";
+var KUBECONFIG_MODE = "600";
+var K3S_INSTALL_EXEC = [
+  ...K3S_DISABLED_COMPONENTS.flatMap((component) => ["--disable", component]),
+  `--${WRITE_KUBECONFIG_MODE}`,
+  KUBECONFIG_MODE
+].join(" ");
+function bareToken(token) {
+  let bare = token.trim();
+  if (bare.endsWith("\\")) bare = bare.slice(0, -1).trim();
+  const quote = bare[0];
+  if (bare.length >= 2 && (quote === "'" || quote === '"') && bare.endsWith(quote)) {
+    bare = bare.slice(1, -1);
+  }
+  return bare;
+}
+function ownerConfiguredKubeletFlags(ownerConfig) {
+  const found = /* @__PURE__ */ new Set();
+  if (!ownerConfig) return found;
+  for (const flag of [IMAGE_GC_HIGH, IMAGE_GC_LOW, SYSTEM_RESERVED]) {
+    if (new RegExp(`(^|[\\s"'-])${flag}\\s*=`, "m").test(ownerConfig)) found.add(flag);
+  }
+  return found;
+}
+function ownerConfiguredKeys(ownerConfig) {
+  const found = /* @__PURE__ */ new Set();
+  if (!ownerConfig) return found;
+  for (const key of [WRITE_KUBECONFIG_MODE]) {
+    if (new RegExp(`^${key}\\s*:`, "m").test(ownerConfig)) found.add(key);
+  }
+  return found;
+}
+function ownerImageGcHighThreshold(ownerConfig) {
+  if (!ownerConfig) return null;
+  const match = new RegExp(`(^|[\\s"'-])${IMAGE_GC_HIGH}\\s*=\\s*(\\d{1,3})`, "m").exec(
+    ownerConfig
+  );
+  if (!match) return null;
+  const value = Number.parseInt(match[2] ?? "", 10);
+  return Number.isInteger(value) && value >= 0 && value <= 100 ? value : null;
+}
+function renderK3sDropIn(kubelet, ownerConfig, options = {}) {
+  const ownerFlags = ownerConfiguredKubeletFlags(ownerConfig);
+  const ownerKeys = ownerConfiguredKeys(ownerConfig);
+  const args = [];
+  const skipped = [];
+  const add = (flag, value) => {
+    if (ownerFlags.has(flag)) {
+      skipped.push(flag);
+      return;
+    }
+    args.push(`  - "${flag}=${value}"`);
+  };
+  add(IMAGE_GC_HIGH, String(assertInteger(kubelet.imageGcHighThreshold, 1, 100, IMAGE_GC_HIGH)));
+  add(IMAGE_GC_LOW, String(assertInteger(kubelet.imageGcLowThreshold, 0, 99, IMAGE_GC_LOW)));
+  if (kubelet.systemReserved) {
+    const cpu = assertQuantity(kubelet.systemReserved.cpu, "reserveCpu");
+    const memory = assertQuantity(kubelet.systemReserved.memory, "reserveMemory");
+    add(SYSTEM_RESERVED, `cpu=${cpu},memory=${memory}`);
+  }
+  const lines2 = [
+    "# Managed by Conveyor (@rallycry/conveyor-k3). Do not edit.",
+    "# Your own /etc/rancher/k3s/config.yaml is never modified; k3s merges both.",
+    "# `kubelet-arg+` and `disable+` append rather than replacing a list you set."
+  ];
+  if (options.disableComponents !== false) {
+    lines2.push("disable+:");
+    for (const component of K3S_DISABLED_COMPONENTS) lines2.push(`  - ${component}`);
+  }
+  if (ownerKeys.has(WRITE_KUBECONFIG_MODE)) {
+    skipped.push(WRITE_KUBECONFIG_MODE);
+  } else {
+    lines2.push(`${WRITE_KUBECONFIG_MODE}: "${KUBECONFIG_MODE}"`);
+  }
+  if (args.length > 0) {
+    lines2.push("kubelet-arg+:", ...args);
+  }
+  return { content: [...lines2, ""].join("\n"), skipped };
+}
+
+// src/lib/isolation.ts
+init_safe_arg();
+var EGRESS_POLICY_NAME = "conveyor-k3-egress";
+var MANAGED_BY2 = { "app.kubernetes.io/managed-by": "conveyor-k3" };
+var NON_ROUTABLE_IPV4 = [
+  "0.0.0.0/8",
+  "10.0.0.0/8",
+  "100.64.0.0/10",
+  "127.0.0.0/8",
+  "169.254.0.0/16",
+  "172.16.0.0/12",
+  "192.0.0.0/24",
+  "192.0.2.0/24",
+  "192.88.99.0/24",
+  "192.168.0.0/16",
+  "198.18.0.0/15",
+  "198.51.100.0/24",
+  "203.0.113.0/24",
+  "224.0.0.0/4",
+  "240.0.0.0/4"
+];
+var KUBE_DNS = { namespace: "kube-system", labels: { "k8s-app": "kube-dns" } };
+var PSA_PREFIX = "pod-security.kubernetes.io";
+function psaLabels(level) {
+  const advisory = level === "baseline" ? "restricted" : level;
+  return {
+    [`${PSA_PREFIX}/enforce`]: level,
+    [`${PSA_PREFIX}/warn`]: advisory,
+    [`${PSA_PREFIX}/audit`]: advisory
+  };
+}
+var PSA_LABEL_KEYS = Object.keys(psaLabels("baseline"));
+function ipv4Value(address) {
+  const parts = address.split(".");
+  if (parts.length !== 4) return null;
+  let value = 0;
+  for (const part of parts) {
+    if (!/^\d{1,3}$/.test(part)) return null;
+    const octet = Number(part);
+    if (octet > 255) return null;
+    value = value * 256 + octet;
+  }
+  return value;
+}
+function inNonRoutableRange(address) {
+  const value = ipv4Value(address);
+  if (value === null) return false;
+  return NON_ROUTABLE_IPV4.some((cidr) => {
+    const [base = "", bits = "32"] = cidr.split("/");
+    const start = ipv4Value(base) ?? 0;
+    return value >= start && value < start + 2 ** (32 - Number(bits));
+  });
+}
+function hostAddressExceptions(addresses) {
+  const kept = /* @__PURE__ */ new Set();
+  for (const raw of addresses) {
+    const address = raw.trim();
+    if (ipv4Value(address) === null || inNonRoutableRange(address)) continue;
+    kept.add(`${address}/32`);
+  }
+  return [...kept].sort();
+}
+function renderEgressNetworkPolicy(namespace, hostAddresses) {
+  const policy = {
+    apiVersion: "networking.k8s.io/v1",
+    kind: "NetworkPolicy",
+    metadata: {
+      name: EGRESS_POLICY_NAME,
+      namespace: assertK8sName(namespace, "namespace"),
+      labels: MANAGED_BY2
+    },
+    spec: {
+      podSelector: {},
+      policyTypes: ["Egress"],
+      egress: [
+        {
+          to: [
+            {
+              namespaceSelector: {
+                matchLabels: { "kubernetes.io/metadata.name": KUBE_DNS.namespace }
+              },
+              podSelector: { matchLabels: KUBE_DNS.labels }
+            }
+          ],
+          ports: [
+            { protocol: "UDP", port: 53 },
+            { protocol: "TCP", port: 53 }
+          ]
+        },
+        {
+          // kube-router enforces after the Service's DNAT, so the registry is
+          // reached by its pods' labels, never by the service range.
+          to: [
+            {
+              namespaceSelector: {
+                matchLabels: { "kubernetes.io/metadata.name": PERSONAL_LOCAL_REGISTRY_NAMESPACE }
+              },
+              podSelector: { matchLabels: LOCAL_REGISTRY_SELECTOR }
+            }
+          ],
+          ports: [{ protocol: "TCP", port: PERSONAL_LOCAL_REGISTRY_PORT }]
+        },
+        {
+          to: [
+            {
+              ipBlock: {
+                cidr: "0.0.0.0/0",
+                except: [...NON_ROUTABLE_IPV4, ...hostAddressExceptions(hostAddresses)]
+              }
+            }
+          ]
+        }
+      ]
+    }
+  };
+  return `${JSON.stringify(policy, null, 2)}
+`;
+}
+var DISABLE_KEY = /(?:^|[\s{,])(["']?)disable-network-policy\1\s*:([^,}]*)/g;
+var DISABLE_FLAGS = /* @__PURE__ */ new Set(["--disable-network-policy", "-disable-network-policy"]);
+var FALSE_VALUES = /* @__PURE__ */ new Set(["false", "no", "off", "n", "f", "0"]);
+function setsTrue(raw) {
+  const value = bareToken(raw).trim().toLowerCase();
+  return !FALSE_VALUES.has(value);
+}
+function uncommented(line) {
+  return /^\s*#/.test(line) ? "" : line.replace(/\s#.*$/, "");
+}
+function configSetsKey(text) {
+  return text.split("\n").map(uncommented).some((line) => [...line.matchAll(DISABLE_KEY)].some((match) => setsTrue(match[2] ?? "")));
+}
+function unitLines(unitText) {
+  const lines2 = [];
+  let pending = "";
+  for (const raw of unitText.split("\n")) {
+    const line = raw.trimEnd();
+    if (/^\s*[#;]/.test(line)) continue;
+    if (line.endsWith("\\")) {
+      pending += `${line.slice(0, -1)} `;
+      continue;
+    }
+    lines2.push(pending + line);
+    pending = "";
+  }
+  return pending ? [...lines2, pending] : lines2;
+}
+function flagSetIn(line) {
+  return line.split(/\s+/).some((raw) => {
+    const token = bareToken(raw).replace(/^["']+|["']+$/g, "");
+    const [name2 = "", ...value] = token.split("=");
+    return DISABLE_FLAGS.has(name2) && (value.length === 0 || setsTrue(value.join("=")));
+  });
+}
+function networkPolicyControllerDisabled(sources) {
+  if (sources.configs.some((text) => text !== null && configSetsKey(text))) return true;
+  return unitLines(sources.unitText).some(flagSetIn);
+}
+
+// src/commands/uninstall.ts
 init_paths();
 async function removeLocalRegistry(ports) {
   const removed = await ports.exec(
@@ -12808,6 +13247,47 @@ async function removeLocalRegistry(ports) {
     `Removed the local image registry's mirror from ${REGISTRIES_FILE} (backup: ${backup}).`
   );
 }
+async function removeIsolation(ports) {
+  const [key, value] = Object.entries(MANAGED_BY2)[0] ?? [];
+  const removed = await ports.exec(
+    "k3s",
+    ["kubectl", "delete", "networkpolicy", "-A", "-l", `${key}=${value}`, "--ignore-not-found"],
+    { timeoutMs: 12e4 }
+  );
+  if (removed.exitCode !== 0) {
+    ports.log(
+      `Could not remove Conveyor's network policies: ${removed.stderr.trim().slice(0, 200)}`
+    );
+  }
+  const listed = await ports.exec("k3s", [
+    "kubectl",
+    "get",
+    "namespaces",
+    "-o",
+    "jsonpath={.items[*].metadata.name}"
+  ]);
+  if (listed.exitCode !== 0) {
+    ports.log(
+      `Could not list namespaces to remove Conveyor's Pod Security labels: ${listed.stderr.trim().slice(0, 200)}`
+    );
+    return;
+  }
+  const namespaces = listed.stdout.split(/\s+/).filter((name2) => name2.startsWith("claudespace-") || name2 === PERSONAL_BAKE_NAMESPACE);
+  for (const namespace of namespaces) {
+    const unlabelled = await ports.exec("k3s", [
+      "kubectl",
+      "label",
+      "namespace",
+      namespace,
+      ...PSA_LABEL_KEYS.map((labelKey) => `${labelKey}-`)
+    ]);
+    if (unlabelled.exitCode !== 0) {
+      ports.log(
+        `Could not remove Conveyor's Pod Security labels from ${namespace}: ${unlabelled.stderr.trim().slice(0, 200)}`
+      );
+    }
+  }
+}
 async function uninstall(ports, options = {}) {
   const result = { stoppedUnits: [], removedFiles: [], purgedK3s: false };
   if (options.purgeK3s && !options.confirmed) {
@@ -12820,6 +13300,7 @@ async function uninstall(ports, options = {}) {
     result.stoppedUnits.push(unit);
   }
   await removeLocalRegistry(ports);
+  await removeIsolation(ports);
   for (const path of OWNED_FILES) {
     await ports.fs.removeFile(path);
     result.removedFiles.push(path);
@@ -12872,121 +13353,46 @@ async function uninstall(ports, options = {}) {
   return result;
 }
 
-// src/lib/k3s-config.ts
-init_safe_arg();
-var IMAGE_GC_HIGH = "image-gc-high-threshold";
-var IMAGE_GC_LOW = "image-gc-low-threshold";
-var SYSTEM_RESERVED = "system-reserved";
-var K3S_DISABLED_COMPONENTS = ["traefik", "servicelb"];
-var WRITE_KUBECONFIG_MODE = "write-kubeconfig-mode";
-var KUBECONFIG_MODE = "600";
-var K3S_INSTALL_EXEC = [
-  ...K3S_DISABLED_COMPONENTS.flatMap((component) => ["--disable", component]),
-  `--${WRITE_KUBECONFIG_MODE}`,
-  KUBECONFIG_MODE
-].join(" ");
-function ownerConfiguredKubeletFlags(ownerConfig) {
-  const found = /* @__PURE__ */ new Set();
-  if (!ownerConfig) return found;
-  for (const flag of [IMAGE_GC_HIGH, IMAGE_GC_LOW, SYSTEM_RESERVED]) {
-    if (new RegExp(`(^|[\\s"'-])${flag}\\s*=`, "m").test(ownerConfig)) found.add(flag);
+// src/commands/update.ts
+init_paths();
+var CLOUDFLARED_UPDATED_EXIT = 11;
+function readExecStart(unit) {
+  const lines2 = unit.split("\n");
+  const start = lines2.findIndex((line) => line.trimStart().startsWith("ExecStart="));
+  if (start < 0) return "";
+  const collected = [];
+  for (let index = start; index < lines2.length; index += 1) {
+    const line = lines2[index] ?? "";
+    collected.push(line);
+    if (!line.trimEnd().endsWith("\\")) break;
   }
-  return found;
+  return collected.join(" ");
 }
-function ownerConfiguredKeys(ownerConfig) {
-  const found = /* @__PURE__ */ new Set();
-  if (!ownerConfig) return found;
-  for (const key of [WRITE_KUBECONFIG_MODE]) {
-    if (new RegExp(`^${key}\\s*:`, "m").test(ownerConfig)) found.add(key);
+function parseForeignExecFlags(execStart) {
+  const ours = new Set(K3S_INSTALL_EXEC.split(/\s+/).filter((token) => token.startsWith("--")));
+  const foreign = [];
+  for (const raw of execStart.split(/\s+/)) {
+    const token = bareToken(raw);
+    if (!token.startsWith("--")) continue;
+    const name2 = token.split("=")[0] ?? token;
+    if (!ours.has(name2) && !foreign.includes(name2)) foreign.push(name2);
   }
-  return found;
+  return foreign;
 }
-function ownerImageGcHighThreshold(ownerConfig) {
-  if (!ownerConfig) return null;
-  const match = new RegExp(`(^|[\\s"'-])${IMAGE_GC_HIGH}\\s*=\\s*(\\d{1,3})`, "m").exec(
-    ownerConfig
-  );
-  if (!match) return null;
-  const value = Number.parseInt(match[2] ?? "", 10);
-  return Number.isInteger(value) && value >= 0 && value <= 100 ? value : null;
-}
-function renderK3sDropIn(kubelet, ownerConfig) {
-  const ownerFlags = ownerConfiguredKubeletFlags(ownerConfig);
-  const ownerKeys = ownerConfiguredKeys(ownerConfig);
-  const args = [];
-  const skipped = [];
-  const add = (flag, value) => {
-    if (ownerFlags.has(flag)) {
-      skipped.push(flag);
-      return;
-    }
-    args.push(`  - "${flag}=${value}"`);
-  };
-  add(IMAGE_GC_HIGH, String(assertInteger(kubelet.imageGcHighThreshold, 1, 100, IMAGE_GC_HIGH)));
-  add(IMAGE_GC_LOW, String(assertInteger(kubelet.imageGcLowThreshold, 0, 99, IMAGE_GC_LOW)));
-  if (kubelet.systemReserved) {
-    const cpu = assertQuantity(kubelet.systemReserved.cpu, "reserveCpu");
-    const memory = assertQuantity(kubelet.systemReserved.memory, "reserveMemory");
-    add(SYSTEM_RESERVED, `cpu=${cpu},memory=${memory}`);
-  }
-  const lines2 = [
-    "# Managed by Conveyor (@rallycry/conveyor-k3). Do not edit.",
-    "# Your own /etc/rancher/k3s/config.yaml is never modified; k3s merges both.",
-    "# `kubelet-arg+` and `disable+` append rather than replacing a list you set."
-  ];
-  lines2.push("disable+:");
-  for (const component of K3S_DISABLED_COMPONENTS) lines2.push(`  - ${component}`);
-  if (ownerKeys.has(WRITE_KUBECONFIG_MODE)) {
-    skipped.push(WRITE_KUBECONFIG_MODE);
-  } else {
-    lines2.push(`${WRITE_KUBECONFIG_MODE}: "${KUBECONFIG_MODE}"`);
-  }
-  if (args.length > 0) {
-    lines2.push("kubelet-arg+:", ...args);
-  }
-  return { content: [...lines2, ""].join("\n"), skipped };
-}
-
-// src/commands/update.ts
-init_paths();
-var CLOUDFLARED_UPDATED_EXIT = 11;
-function readExecStart(unit) {
-  const lines2 = unit.split("\n");
-  const start = lines2.findIndex((line) => line.trimStart().startsWith("ExecStart="));
-  if (start < 0) return "";
-  const collected = [];
-  for (let index = start; index < lines2.length; index += 1) {
-    const line = lines2[index] ?? "";
-    collected.push(line);
-    if (!line.trimEnd().endsWith("\\")) break;
-  }
-  return collected.join(" ");
-}
-function bareToken(token) {
-  let bare = token.trim();
-  if (bare.endsWith("\\")) bare = bare.slice(0, -1).trim();
-  if (bare.length >= 2 && bare.startsWith("'") && bare.endsWith("'")) bare = bare.slice(1, -1);
-  return bare;
-}
-function parseForeignExecFlags(execStart) {
-  const ours = new Set(K3S_INSTALL_EXEC.split(/\s+/).filter((token) => token.startsWith("--")));
-  const foreign = [];
-  for (const raw of execStart.split(/\s+/)) {
-    const token = bareToken(raw);
-    if (!token.startsWith("--")) continue;
-    const name2 = token.split("=")[0] ?? token;
-    if (!ours.has(name2) && !foreign.includes(name2)) foreign.push(name2);
-  }
-  return foreign;
-}
-async function foreignK3sExecFlags(exec) {
-  const unit = await exec("systemctl", ["cat", "k3s.service"], { timeoutMs: 1e4 }).catch(
-    () => null
+async function foreignK3sExecFlags(exec) {
+  const unit = await exec("systemctl", ["cat", "k3s.service"], { timeoutMs: 1e4 }).catch(
+    () => null
   );
   if (!unit || unit.exitCode !== 0) return [];
   return parseForeignExecFlags(readExecStart(unit.stdout));
 }
 function decideK3sUpgrade(input) {
+  if (input.managesK3s === false) {
+    return {
+      upgrade: false,
+      reason: "Conveyor did not install this server's k3s, so its owner upgrades it"
+    };
+  }
   if (!input.autoUpgradeK3s) {
     return { upgrade: false, reason: "automatic k3s upgrades are turned off for this machine" };
   }
@@ -13083,6 +13489,7 @@ async function runUpdate(ports, decision, channel, targetVersion) {
 
 // src/commands/setup.ts
 init_exec();
+init_env();
 init_paths();
 
 // src/lib/systemd.ts
@@ -13221,6 +13628,8 @@ async function ensureK3s(ports) {
     }
   });
   ports.log("k3s installed.");
+  await ports.fs.ensureDir(STATE_DIR);
+  await writeState(ports.fs, { ...await readState(ports.fs), k3sInstalledByConveyor: true });
 }
 async function ensureCloudflared(ports) {
   if (await commandExists(ports.exec, "cloudflared")) {
@@ -13306,11 +13715,12 @@ async function installUnits(ports, bundle, cloudflaredBin, maintenanceHour) {
   await runOrThrow(ports.exec, "systemctl", ["enable", DAEMON_UNIT]);
   await runOrThrow(ports.exec, "systemctl", ["enable", UPDATE_TIMER]);
 }
-async function recordSetupState(ports, bundle, appliedVersion, bins) {
+async function recordSetupState(ports, bundle, appliedVersion, bins, recorded = {}) {
   await ports.fs.ensureDir(STATE_DIR);
   const state = await readState(ports.fs);
   await writeState(ports.fs, {
     ...state,
+    ...recorded,
     hostname: checkedHostname(bundle.hostname),
     enrolled: true,
     appliedDesiredStateVersion: appliedVersion,
@@ -13323,86 +13733,6 @@ async function resolveBunBin(ports) {
   return found?.startsWith("/") ? found : "/root/.bun/bin/bun";
 }
 
-// src/lib/bins.ts
-var INSTALLER_PATHS = {
-  bun: "/root/.bun/bin/bun",
-  cli: "/root/.bun/bin/conveyor-k3",
-  cloudflared: "/usr/local/bin/cloudflared"
-};
-async function whichOrNull(exec, bin) {
-  const result = await exec("which", [bin]).catch(() => null);
-  if (!result || result.exitCode !== 0) return null;
-  const path = result.stdout.trim().split("\n")[0]?.trim();
-  return path && path.startsWith("/") ? path : null;
-}
-async function resolveBinaries(exec, state, selfPath) {
-  const recorded = state.bins;
-  const cliSelf = selfPath?.startsWith("/") ? selfPath : null;
-  return {
-    bun: recorded?.bun ?? await whichOrNull(exec, "bun") ?? INSTALLER_PATHS.bun,
-    // `cli` prefers the running process's own path: if this code is executing,
-    // that path is by definition correct.
-    cli: cliSelf ?? recorded?.cli ?? await whichOrNull(exec, "conveyor-k3") ?? INSTALLER_PATHS.cli,
-    cloudflared: recorded?.cloudflared ?? await whichOrNull(exec, "cloudflared") ?? INSTALLER_PATHS.cloudflared
-  };
-}
-
-// src/cli.ts
-init_journald();
-
-// src/commands/setup-session.ts
-init_exec();
-init_paths();
-async function withSetupConnection(ports, connection, enroll) {
-  for (const unit of [UPDATE_TIMER, UPDATE_UNIT, DAEMON_UNIT]) {
-    if (await ports.fs.readFile(`${SYSTEMD_DIR}/${unit}`))
-      await runOrThrow(ports.exec, "systemctl", ["stop", unit]);
-  }
-  let result;
-  try {
-    await connection.connect();
-    result = await enroll();
-  } finally {
-    connection.disconnect();
-  }
-  await runOrThrow(ports.exec, "systemctl", ["start", DAEMON_UNIT]);
-  await runOrThrow(ports.exec, "systemctl", ["start", UPDATE_TIMER]);
-  return result;
-}
-
-// src/lib/guest-vm.ts
-async function requireGuestVm(exec) {
-  try {
-    const result = await exec("systemd-detect-virt", ["--vm", "--quiet"]);
-    if (result.exitCode === 0) return;
-  } catch {
-  }
-  throw new Error("Refusing to run guest setup on a physical host; use `conveyor-k3 vm setup`");
-}
-
-// src/lib/k3s-channel.ts
-var CHANNELS_URL = "https://update.k3s.io/v1-release/channels";
-var REQUEST_TIMEOUT_MS2 = 15e3;
-function parseChannelVersion(version) {
-  const match = /v?(\d+)\.(\d+)\./.exec(version);
-  if (!match) return null;
-  return [Number(match[1]), Number(match[2])];
-}
-async function resolveChannelLatest(channel, fetchImpl = fetch) {
-  try {
-    const response = await fetchImpl(CHANNELS_URL, {
-      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS2),
-      headers: { Accept: "application/json" }
-    });
-    if (!response.ok) return null;
-    const body = await response.json();
-    const match = body.data?.find((entry) => entry.id === channel || entry.name === channel);
-    return match?.latest ? parseChannelVersion(match.latest) : null;
-  } catch {
-    return null;
-  }
-}
-
 // src/daemon/connection.ts
 import { io } from "socket.io-client";
 
@@ -13435,27 +13765,27 @@ function readControlFile(path) {
 }
 function controlAlias(apiUrl, text) {
   if (!text) return void 0;
-  let hostname;
+  let hostname2;
   let aliases;
   try {
-    hostname = new URL(apiUrl).hostname.toLowerCase();
+    hostname2 = new URL(apiUrl).hostname.toLowerCase();
     aliases = JSON.parse(text);
   } catch {
     return void 0;
   }
   if (typeof aliases !== "object" || aliases === null || Array.isArray(aliases)) return void 0;
-  const alias = aliases[hostname];
-  return typeof alias === "string" && CONTROL_ALIAS_IP.test(alias) ? { hostname, alias } : void 0;
+  const alias = aliases[hostname2];
+  return typeof alias === "string" && CONTROL_ALIAS_IP.test(alias) ? { hostname: hostname2, alias } : void 0;
 }
 function controlPlaneRoute(apiUrl, readFile9 = readControlFile, fileExists = existsSync) {
   if (!fileExists(CONTROL_FILE)) return void 0;
   let skipAlias = false;
   let usedAlias = false;
-  const lookup = (hostname, options, callback) => {
+  const lookup = (hostname2, options, callback) => {
     const target2 = skipAlias ? void 0 : controlAlias(apiUrl, readFile9(CONTROL_FILE));
-    usedAlias = target2 !== void 0 && hostname.toLowerCase() === target2.hostname;
+    usedAlias = target2 !== void 0 && hostname2.toLowerCase() === target2.hostname;
     if (!target2 || !usedAlias) {
-      dnsLookup(hostname, options, callback);
+      dnsLookup(hostname2, options, callback);
       return;
     }
     if (options.all) {
@@ -13500,7 +13830,7 @@ function createClusterProof(apiUrl, clusterToken, key) {
   const origin = new URL(apiUrl).origin;
   const timestamp = Date.now();
   const nonce = randomBytes(32).toString("base64url");
-  const message2 = `conveyor-device-v1
+  const message3 = `conveyor-device-v1
 ${origin}
 ${clusterToken}
 ${timestamp}
@@ -13508,7 +13838,7 @@ ${nonce}`;
   return {
     timestamp,
     nonce,
-    signature: sign(null, Buffer.from(message2, "utf8"), key).toString("base64url")
+    signature: sign(null, Buffer.from(message3, "utf8"), key).toString("base64url")
   };
 }
 function deviceClusterAuth(apiUrl, clusterToken, keyPath = DEVICE_KEY_PATH, ownerUid = 0) {
@@ -13522,6 +13852,8 @@ function deviceClusterAuth(apiUrl, clusterToken, keyPath = DEVICE_KEY_PATH, owne
 
 // src/daemon/connection.ts
 init_dist();
+var REDIAL_FIRST_MS = 5e3;
+var REDIAL_MAX_MS = 5 * 6e4;
 function unwrap(ack, what) {
   if (!ack?.ok || ack.data === void 0) {
     throw new Error(`${what} failed: ${ack?.error ?? "no response"}`);
@@ -13531,6 +13863,8 @@ function unwrap(ack, what) {
 var ClusterConnection = class {
   socket = null;
   config;
+  redialDelayMs = REDIAL_FIRST_MS;
+  redialTimer = null;
   /** Called when Conveyor says the desired state changed. */
   onSyncRequested = null;
   /** Called when Conveyor asks the machine to remove itself. */
@@ -13566,6 +13900,7 @@ var ClusterConnection = class {
       });
       this.socket = socket;
       socket.on("connect", () => {
+        this.redialDelayMs = REDIAL_FIRST_MS;
         if (!settled) {
           settled = true;
           resolve();
@@ -13584,6 +13919,9 @@ var ClusterConnection = class {
       socket.on("disconnect", (reason) => {
         process.stderr.write(`[conveyor-k3] disconnected: ${reason}
 `);
+        if (reason === "io server disconnect" && this.config.reconnectWhenReplaced) {
+          this.redial(socket);
+        }
       });
       socket.on(PERSONAL_CLUSTER_EVENTS.syncRequested, () => {
         this.onSyncRequested?.();
@@ -13645,217 +13983,68 @@ var ClusterConnection = class {
     } catch {
     }
   }
+  /** Dial again after the server closed the socket, waiting longer each time. */
+  redial(socket) {
+    if (this.redialTimer) return;
+    const delay2 = this.redialDelayMs;
+    this.redialDelayMs = Math.min(delay2 * 2, REDIAL_MAX_MS);
+    this.redialTimer = setTimeout(() => {
+      this.redialTimer = null;
+      if (this.socket === socket && !socket.connected) socket.connect();
+    }, delay2);
+    this.redialTimer.unref?.();
+  }
   disconnect() {
+    if (this.redialTimer) clearTimeout(this.redialTimer);
+    this.redialTimer = null;
     this.socket?.disconnect();
     this.socket = null;
   }
 };
 
-// src/daemon/runner.ts
-init_dist();
-
-// src/lib/images.ts
-init_dist();
-init_exec();
-init_safe_arg();
-function parseSize(size) {
-  const n = Number.parseInt(size ?? "0", 10);
-  return Number.isFinite(n) ? n : 0;
-}
-function refsOf(image) {
-  return [...image.repoTags ?? [], ...image.repoDigests ?? []];
-}
-function selectStrandedImages(inventory, wantedImages) {
-  const wanted = new Set(wantedImages);
-  const candidates = [];
-  for (const image of inventory.images) {
-    const tags = image.repoTags ?? [];
-    if (tags.length > 0) continue;
-    if (inventory.referencedIds.has(image.id)) continue;
-    if (refsOf(image).some((ref) => wanted.has(ref))) continue;
-    candidates.push({ id: image.id, sizeBytes: parseSize(image.size) });
-  }
-  return candidates;
-}
-async function readImageInventory(exec) {
-  const imagesResult = await exec("crictl", ["images", "-o", "json"]);
-  const containersResult = await exec("crictl", ["ps", "-a", "-o", "json"]);
-  if (imagesResult.exitCode !== 0) {
-    throw new Error(
-      `could not read the image list: ${imagesResult.stderr.trim().slice(0, 120) || `crictl images exited ${imagesResult.exitCode}`}`
-    );
-  }
-  let images = [];
+// src/lib/manifest-guard.ts
+import { isMap, isScalar, parseAllDocuments } from "yaml";
+var ALLOWED_MANIFEST_KINDS = [
+  "Namespace",
+  "Role",
+  "RoleBinding",
+  "ClusterRole",
+  "ClusterRoleBinding",
+  "PriorityClass"
+];
+var ALLOWED = new Set(ALLOWED_MANIFEST_KINDS);
+var MISSING_KIND = "(missing kind)";
+var UNPARSEABLE = "(unparseable)";
+function findDisallowedKinds(manifest) {
+  let documents;
   try {
-    const parsed = JSON.parse(imagesResult.stdout || "{}");
-    images = parsed.images ?? [];
+    documents = parseAllDocuments(manifest);
   } catch {
-    images = [];
+    return [UNPARSEABLE];
   }
-  const referencedIds = /* @__PURE__ */ new Set();
-  try {
-    const parsed = JSON.parse(containersResult.stdout || "{}");
-    for (const container of parsed.containers ?? []) {
-      if (container.imageRef) referencedIds.add(container.imageRef);
-      if (container.image?.image) referencedIds.add(container.image.image);
+  const disallowed = [];
+  const record2 = (kind) => {
+    if (!disallowed.includes(kind)) disallowed.push(kind);
+  };
+  for (const doc of documents) {
+    if (doc.errors.length > 0) {
+      record2(UNPARSEABLE);
+      continue;
     }
-  } catch {
-    throw new Error("could not read the container list; skipping prune this cycle");
-  }
-  return { images, referencedIds };
-}
-async function pruneStrandedImages(exec, inventory, wantedImages) {
-  const candidates = selectStrandedImages(inventory, wantedImages);
-  const result = { removed: 0, bytesReclaimed: 0, failures: [] };
-  for (const candidate of candidates) {
-    const removal = await exec("crictl", ["rmi", candidate.id]);
-    if (removal.exitCode === 0) {
-      result.removed += 1;
-      result.bytesReclaimed += candidate.sizeBytes;
-    } else {
-      result.failures.push(`${candidate.id}: ${removal.stderr.trim().slice(0, 120)}`);
+    if (doc.contents === null || doc.contents === void 0) continue;
+    if (isScalar(doc.contents) && doc.contents.value === null) continue;
+    if (!isMap(doc.contents)) {
+      record2(MISSING_KIND);
+      continue;
+    }
+    const kind = doc.get("kind");
+    if (typeof kind !== "string" || kind.length === 0) {
+      record2(MISSING_KIND);
+      continue;
     }
+    if (!ALLOWED.has(kind)) record2(kind);
   }
-  return result;
-}
-async function warmImages(exec, wantedImages, unauthenticatedHosts) {
-  const blocked = new Set(unauthenticatedHosts);
-  const result = { pulled: [], skipped: [], failures: [], skippedArtifactRegistry: 0 };
-  for (const ref of wantedImages) {
-    const host = ref.split("/")[0] ?? "";
-    if (host === "localhost" || host.startsWith("localhost:")) {
-      result.skipped.push(ref);
-      continue;
-    }
-    if (isArtifactRegistryHost(host)) {
-      result.skipped.push(ref);
-      result.skippedArtifactRegistry += 1;
-      continue;
-    }
-    if (blocked.has(host)) {
-      result.skipped.push(ref);
-      continue;
-    }
-    try {
-      assertImageRef(ref);
-    } catch {
-      result.failures.push(`${ref}: not a valid image reference`);
-      continue;
-    }
-    const pull = await exec("crictl", ["pull", ref], { timeoutMs: 15 * 6e4 });
-    if (pull.exitCode === 0) {
-      result.pulled.push(ref);
-    } else {
-      result.failures.push(`${ref}: ${pull.stderr.trim().slice(0, 120)}`);
-    }
-  }
-  return result;
-}
-var PIN_LABEL = "io.cri-containerd.pinned";
-async function resolveImageLabelTool(exec) {
-  if (await commandExists(exec, "k3s")) {
-    return { bin: "k3s", args: ["ctr", "--namespace", "k8s.io", "images", "label"] };
-  }
-  if (await commandExists(exec, "ctr")) {
-    return { bin: "ctr", args: ["--namespace", "k8s.io", "images", "label"] };
-  }
-  return null;
-}
-function refsPresent(inventory) {
-  const present = /* @__PURE__ */ new Set();
-  for (const image of inventory.images) {
-    for (const ref of refsOf(image)) present.add(ref);
-  }
-  return present;
-}
-async function pinWantedImages(exec, wantedImages, inventory, previouslyPinned = []) {
-  const result = { pinned: [], unpinned: [], absent: [], failures: [] };
-  const wanted = new Set(wantedImages);
-  const present = refsPresent(inventory);
-  const toPin = wantedImages.filter((ref) => present.has(ref));
-  const toUnpin = previouslyPinned.filter((ref) => !wanted.has(ref) && present.has(ref));
-  for (const ref of wantedImages) if (!present.has(ref)) result.absent.push(ref);
-  if (toPin.length === 0 && toUnpin.length === 0) return result;
-  const tool = await resolveImageLabelTool(exec);
-  if (!tool) {
-    result.warning = "No `k3s ctr` or `ctr` on this machine, so Conveyor cannot pin its images against kubelet garbage collection. A freshly baked image can be deleted before the first pod runs it.";
-    return result;
-  }
-  const label2 = async (ref, value) => {
-    try {
-      assertImageRef(ref);
-    } catch {
-      result.failures.push(`${ref}: not a valid image reference`);
-      return false;
-    }
-    const run = await exec(tool.bin, [...tool.args, ref, `${PIN_LABEL}=${value}`], {
-      timeoutMs: 3e4
-    });
-    if (run.exitCode === 0) return true;
-    result.failures.push(`${ref}: ${run.stderr.trim().slice(0, 120)}`);
-    return false;
-  };
-  for (const ref of toPin) {
-    if (await label2(ref, "pinned")) result.pinned.push(ref);
-  }
-  for (const ref of toUnpin) {
-    if (await label2(ref, "")) result.unpinned.push(ref);
-  }
-  return result;
-}
-function countPinnedWanted(inventory, wantedImages) {
-  const wanted = new Set(wantedImages);
-  return inventory.images.filter(
-    (image) => image.pinned === true && refsOf(image).some((ref) => wanted.has(ref))
-  ).length;
-}
-
-// src/daemon/runner.ts
-init_paths();
-
-// src/lib/manifest-guard.ts
-import { isMap, isScalar, parseAllDocuments } from "yaml";
-var ALLOWED_MANIFEST_KINDS = [
-  "Namespace",
-  "Role",
-  "RoleBinding",
-  "ClusterRole",
-  "ClusterRoleBinding",
-  "PriorityClass"
-];
-var ALLOWED = new Set(ALLOWED_MANIFEST_KINDS);
-var MISSING_KIND = "(missing kind)";
-var UNPARSEABLE = "(unparseable)";
-function findDisallowedKinds(manifest) {
-  let documents;
-  try {
-    documents = parseAllDocuments(manifest);
-  } catch {
-    return [UNPARSEABLE];
-  }
-  const disallowed = [];
-  const record2 = (kind) => {
-    if (!disallowed.includes(kind)) disallowed.push(kind);
-  };
-  for (const doc of documents) {
-    if (doc.errors.length > 0) {
-      record2(UNPARSEABLE);
-      continue;
-    }
-    if (doc.contents === null || doc.contents === void 0) continue;
-    if (isScalar(doc.contents) && doc.contents.value === null) continue;
-    if (!isMap(doc.contents)) {
-      record2(MISSING_KIND);
-      continue;
-    }
-    const kind = doc.get("kind");
-    if (typeof kind !== "string" || kind.length === 0) {
-      record2(MISSING_KIND);
-      continue;
-    }
-    if (!ALLOWED.has(kind)) record2(kind);
-  }
-  return disallowed;
+  return disallowed;
 }
 
 // src/daemon/reconcile.ts
@@ -13933,6 +14122,80 @@ async function loadRegistryMirror(ctx) {
   return { restarted: true, warning: null };
 }
 
+// src/daemon/namespace-upkeep.ts
+init_dist();
+init_exec();
+init_safe_arg();
+
+// src/daemon/isolation-probes.ts
+init_paths();
+var CONTROLLER_DISABLED_WARNING = "k3s runs with its network policy controller disabled, so the egress policy Conveyor applies here is not enforced. Remove disable-network-policy from the k3s config or unit and restart k3s. Until then this server is not isolated; Conveyor checks again within 10 minutes.";
+var CONTROLLER_UNKNOWN_WARNING = "Could not read the k3s unit or its config files to check that its network policy controller is on, so this server does not count as isolated. Check `systemctl cat k3s.service` and /etc/rancher/k3s; Conveyor checks again within 10 minutes.";
+var NODE_ADDRESSES_JSONPATH = '{range .items[*]}{range .status.addresses[?(@.type=="InternalIP")]}{.address}{"\\n"}{end}{range .status.addresses[?(@.type=="ExternalIP")]}{.address}{"\\n"}{end}{end}';
+var API_ENDPOINTS_JSONPATH = "{.items[*].endpoints[*].addresses[*]}";
+var IPV4_ON_INTERFACE = /\binet (\d{1,3}(?:\.\d{1,3}){3})(?:\/| peer )/g;
+async function stdoutOf(exec, bin, args) {
+  const run = await exec(bin, args, { timeoutMs: 1e4 }).catch(() => null);
+  return run && run.exitCode === 0 ? run.stdout : null;
+}
+async function readK3sConfigs(ctx) {
+  const listed = await stdoutOf(ctx.exec, "find", [
+    "-L",
+    K3S_CONFIG_DROPIN_DIR,
+    "-maxdepth",
+    "1",
+    "-type",
+    "f",
+    "(",
+    "-iname",
+    "*.yaml",
+    "-o",
+    "-iname",
+    "*.yml",
+    ")"
+  ]);
+  if (listed === null) return null;
+  const paths = listed.split("\n").map((path) => path.trim()).filter(Boolean).sort();
+  const dropIns = await Promise.all(paths.map((path) => ctx.fs.readFile(path)));
+  if (dropIns.some((text) => text === null)) return null;
+  return [await ctx.fs.readFile(K3S_OWNER_CONFIG), ...dropIns];
+}
+async function controllerProblem(ctx) {
+  const unitText = await stdoutOf(ctx.exec, "systemctl", ["cat", "k3s.service"]);
+  const configs = unitText === null ? null : await readK3sConfigs(ctx);
+  if (unitText === null || configs === null) return CONTROLLER_UNKNOWN_WARNING;
+  return networkPolicyControllerDisabled({ configs, unitText }) ? CONTROLLER_DISABLED_WARNING : null;
+}
+async function readHostAddresses(exec) {
+  const nodes = await stdoutOf(exec, "k3s", [
+    "kubectl",
+    "get",
+    "nodes",
+    "-o",
+    `jsonpath=${NODE_ADDRESSES_JSONPATH}`
+  ]);
+  const interfaces = await stdoutOf(exec, "ip", ["-o", "-4", "addr", "show"]);
+  const api = await stdoutOf(exec, "k3s", [
+    "kubectl",
+    "get",
+    "endpointslices",
+    "-n",
+    "default",
+    "-l",
+    "kubernetes.io/service-name=kubernetes",
+    "-o",
+    `jsonpath=${API_ENDPOINTS_JSONPATH}`
+  ]);
+  if (nodes === null || interfaces === null || api === null) return null;
+  const onInterfaces = [...interfaces.matchAll(IPV4_ON_INTERFACE)].map((match) => match[1] ?? "");
+  return [...nodes.split(/\s+/), ...onInterfaces, ...api.split(/\s+/)].filter(Boolean);
+}
+async function recheckIsolation(ctx, reconciled) {
+  if (reconciled?.applied !== true) return { isolation: reconciled, warnings: [] };
+  const problem = await controllerProblem(ctx);
+  return problem ? { isolation: { applied: false }, warnings: [problem] } : { isolation: reconciled, warnings: [] };
+}
+
 // src/daemon/prune-namespaces.ts
 init_safe_arg();
 var POOL_NAMESPACE_PREFIX = "claudespace-";
@@ -13996,6 +14259,143 @@ async function pruneStaleNamespaces(ctx, desired, result) {
   }
 }
 
+// src/daemon/namespace-upkeep.ts
+function message(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+function renderLimitRange(namespace, limits) {
+  const ns = assertK8sName(namespace, "namespace");
+  const values = [
+    assertQuantity(limits.defaultRequest.cpu, "defaultRequest.cpu"),
+    assertQuantity(limits.defaultRequest.memory, "defaultRequest.memory"),
+    assertQuantity(limits.default.cpu, "default.cpu"),
+    assertQuantity(limits.default.memory, "default.memory")
+  ];
+  return [
+    "apiVersion: v1",
+    "kind: LimitRange",
+    "metadata:",
+    "  name: conveyor-k3-defaults",
+    `  namespace: ${ns}`,
+    "spec:",
+    "  limits:",
+    "  - type: Container",
+    "    defaultRequest:",
+    `      cpu: "${values[0]}"`,
+    `      memory: "${values[1]}"`,
+    "    default:",
+    `      cpu: "${values[2]}"`,
+    `      memory: "${values[3]}"`,
+    ""
+  ].join("\n");
+}
+async function reconcileNamespaces(ctx, desired, result) {
+  for (const namespace of desired.namespaces) {
+    try {
+      await kubectlApply(ctx.exec, renderLimitRange(namespace.name, namespace.limitRange));
+    } catch (error) {
+      result.warnings.push(
+        `Could not apply resource defaults to ${namespace.name} (${namespace.projectName}): ${message(error)}`
+      );
+    }
+  }
+}
+async function ensureBakeNamespace(ctx, desired) {
+  const found = await ctx.exec(
+    "k3s",
+    ["kubectl", "get", "namespace", PERSONAL_BAKE_NAMESPACE],
+    KUBECTL_TIMEOUT2
+  );
+  if (found.exitCode !== 0) {
+    await runOrThrow(
+      ctx.exec,
+      "k3s",
+      ["kubectl", "create", "namespace", PERSONAL_BAKE_NAMESPACE],
+      KUBECTL_TIMEOUT2
+    );
+  }
+  const limitRange = desired.namespaces[0]?.limitRange;
+  if (limitRange) {
+    await kubectlApply(ctx.exec, renderLimitRange(PERSONAL_BAKE_NAMESPACE, limitRange));
+  }
+}
+function knownStance(isolation) {
+  const { podSecurity, egress, ...rest } = { ...isolation };
+  const extra = Object.keys(rest);
+  if (podSecurity === "baseline" && egress === "no-private" && extra.length === 0) return null;
+  const named = `Pod Security "${String(podSecurity).slice(0, 40)}", egress "${String(egress).slice(0, 40)}"`;
+  return extra.length === 0 ? named : `${named}, and ${extra.slice(0, 3).join(", ").slice(0, 80)}`;
+}
+var KUBECTL_TIMEOUT2 = { timeoutMs: 3e4 };
+var RECHECK = "Conveyor checks again within 10 minutes.";
+async function isolateNamespace(ctx, namespace, isolation, fail2) {
+  const ns = assertK8sName(namespace, "namespace");
+  const labels = Object.entries(psaLabels(isolation.podSecurity)).map(
+    ([key, value]) => `${key}=${value}`
+  );
+  const labelled = await ctx.exec(
+    "k3s",
+    ["kubectl", "label", "namespace", ns, "--overwrite", ...labels],
+    KUBECTL_TIMEOUT2
+  );
+  if (labelled.exitCode !== 0) {
+    fail2(
+      `Could not apply Pod Security labels to ${ns}: ${labelled.stderr.trim().slice(0, 200)} ${RECHECK}`
+    );
+  }
+  if (isolation.hostAddresses === null) return;
+  try {
+    await kubectlApply(ctx.exec, renderEgressNetworkPolicy(ns, isolation.hostAddresses));
+  } catch (error) {
+    fail2(`Could not apply the egress policy to ${ns}: ${message(error).slice(0, 200)} ${RECHECK}`);
+  }
+}
+async function reconcileIsolation(ctx, desired, result) {
+  try {
+    await ensureBakeNamespace(ctx, desired);
+  } catch (error) {
+    result.warnings.push(
+      `Could not prepare the bake namespace ${PERSONAL_BAKE_NAMESPACE}: ${message(error)}`
+    );
+  }
+  const isolation = desired.isolation;
+  if (!isolation) {
+    result.isolation = void 0;
+    return;
+  }
+  const unknown = knownStance(isolation);
+  if (unknown) {
+    result.warnings.push(
+      `Conveyor asks for pod isolation this version of conveyor-k3 does not know (${unknown}), so nothing was changed and this server does not count as isolated. Run \`sudo conveyor-k3 update\`.`
+    );
+    result.isolation = { applied: false };
+    return;
+  }
+  let applied = true;
+  const fail2 = (warning) => {
+    applied = false;
+    result.warnings.push(warning);
+  };
+  const problem = await controllerProblem(ctx);
+  if (problem) fail2(problem);
+  const hostAddresses = await readHostAddresses(ctx.exec);
+  if (hostAddresses === null) {
+    fail2(
+      `Could not read every address this server answers on, so the egress policies in place were left as they are and this server does not count as isolated. ${RECHECK}`
+    );
+  }
+  for (const namespace of desired.namespaces) {
+    await isolateNamespace(ctx, namespace.name, { podSecurity: "baseline", hostAddresses }, fail2);
+  }
+  await isolateNamespace(
+    ctx,
+    PERSONAL_BAKE_NAMESPACE,
+    { podSecurity: "privileged", hostAddresses },
+    fail2
+  );
+  result.isolation = { applied };
+}
+
 // src/daemon/telemetry.ts
 init_dist();
 import { statfs } from "fs/promises";
@@ -14028,30 +14428,186 @@ async function inspectContentHash(exec, imageId) {
     return void 0;
   }
 }
-async function reportLocalImages(exec, inventory, wantedImages, cache) {
-  if (!inventory) return void 0;
+async function reportLocalImages(exec, inventory, wantedImages, cache) {
+  if (!inventory) return void 0;
+  const wanted = new Set(wantedImages);
+  const held = inventory.images.flatMap(
+    (image) => (image.repoTags ?? []).filter((ref) => ref.startsWith("localhost/") && isImageRef(ref)).map((ref) => ({ ref, imageId: image.id }))
+  );
+  held.sort(
+    (a, b) => Number(wanted.has(b.ref)) - Number(wanted.has(a.ref)) || (a.ref < b.ref ? -1 : a.ref > b.ref ? 1 : 0)
+  );
+  const reported = held.slice(0, MAX_LOCAL_IMAGES);
+  const live = new Set(reported.map((entry) => entry.imageId));
+  for (const id2 of [...cache.keys()]) if (!live.has(id2)) cache.delete(id2);
+  const images = [];
+  let inspections = 0;
+  for (const entry of reported) {
+    let contentHash = cache.get(entry.imageId);
+    if (contentHash === void 0 && inspections < MAX_INSPECTIONS_PER_BEAT) {
+      inspections += 1;
+      contentHash = await inspectContentHash(exec, entry.imageId);
+      if (contentHash !== void 0) cache.set(entry.imageId, contentHash);
+    }
+    images.push({ ...entry, contentHash: contentHash ?? null });
+  }
+  return images;
+}
+
+// src/lib/images.ts
+init_dist();
+init_exec();
+init_safe_arg();
+function parseSize(size) {
+  const n = Number.parseInt(size ?? "0", 10);
+  return Number.isFinite(n) ? n : 0;
+}
+function refsOf(image) {
+  return [...image.repoTags ?? [], ...image.repoDigests ?? []];
+}
+function selectStrandedImages(inventory, wantedImages) {
+  const wanted = new Set(wantedImages);
+  const candidates = [];
+  for (const image of inventory.images) {
+    const tags = image.repoTags ?? [];
+    if (tags.length > 0) continue;
+    if (inventory.referencedIds.has(image.id)) continue;
+    if (refsOf(image).some((ref) => wanted.has(ref))) continue;
+    candidates.push({ id: image.id, sizeBytes: parseSize(image.size) });
+  }
+  return candidates;
+}
+async function readImageInventory(exec) {
+  const imagesResult = await exec("crictl", ["images", "-o", "json"]);
+  const containersResult = await exec("crictl", ["ps", "-a", "-o", "json"]);
+  if (imagesResult.exitCode !== 0) {
+    throw new Error(
+      `could not read the image list: ${imagesResult.stderr.trim().slice(0, 120) || `crictl images exited ${imagesResult.exitCode}`}`
+    );
+  }
+  let images = [];
+  try {
+    const parsed = JSON.parse(imagesResult.stdout || "{}");
+    images = parsed.images ?? [];
+  } catch {
+    images = [];
+  }
+  const referencedIds = /* @__PURE__ */ new Set();
+  try {
+    const parsed = JSON.parse(containersResult.stdout || "{}");
+    for (const container of parsed.containers ?? []) {
+      if (container.imageRef) referencedIds.add(container.imageRef);
+      if (container.image?.image) referencedIds.add(container.image.image);
+    }
+  } catch {
+    throw new Error("could not read the container list; skipping prune this cycle");
+  }
+  return { images, referencedIds };
+}
+async function pruneStrandedImages(exec, inventory, wantedImages) {
+  const candidates = selectStrandedImages(inventory, wantedImages);
+  const result = { removed: 0, bytesReclaimed: 0, failures: [] };
+  for (const candidate of candidates) {
+    const removal = await exec("crictl", ["rmi", candidate.id]);
+    if (removal.exitCode === 0) {
+      result.removed += 1;
+      result.bytesReclaimed += candidate.sizeBytes;
+    } else {
+      result.failures.push(`${candidate.id}: ${removal.stderr.trim().slice(0, 120)}`);
+    }
+  }
+  return result;
+}
+async function warmImages(exec, wantedImages, unauthenticatedHosts) {
+  const blocked = new Set(unauthenticatedHosts);
+  const result = { pulled: [], skipped: [], failures: [], skippedArtifactRegistry: 0 };
+  for (const ref of wantedImages) {
+    const host = ref.split("/")[0] ?? "";
+    if (host === "localhost" || host.startsWith("localhost:")) {
+      result.skipped.push(ref);
+      continue;
+    }
+    if (isArtifactRegistryHost(host)) {
+      result.skipped.push(ref);
+      result.skippedArtifactRegistry += 1;
+      continue;
+    }
+    if (blocked.has(host)) {
+      result.skipped.push(ref);
+      continue;
+    }
+    try {
+      assertImageRef(ref);
+    } catch {
+      result.failures.push(`${ref}: not a valid image reference`);
+      continue;
+    }
+    const pull = await exec("crictl", ["pull", ref], { timeoutMs: 15 * 6e4 });
+    if (pull.exitCode === 0) {
+      result.pulled.push(ref);
+    } else {
+      result.failures.push(`${ref}: ${pull.stderr.trim().slice(0, 120)}`);
+    }
+  }
+  return result;
+}
+var PIN_LABEL = "io.cri-containerd.pinned";
+async function resolveImageLabelTool(exec) {
+  if (await commandExists(exec, "k3s")) {
+    return { bin: "k3s", args: ["ctr", "--namespace", "k8s.io", "images", "label"] };
+  }
+  if (await commandExists(exec, "ctr")) {
+    return { bin: "ctr", args: ["--namespace", "k8s.io", "images", "label"] };
+  }
+  return null;
+}
+function refsPresent(inventory) {
+  const present = /* @__PURE__ */ new Set();
+  for (const image of inventory.images) {
+    for (const ref of refsOf(image)) present.add(ref);
+  }
+  return present;
+}
+async function pinWantedImages(exec, wantedImages, inventory, previouslyPinned = []) {
+  const result = { pinned: [], unpinned: [], absent: [], failures: [] };
+  const wanted = new Set(wantedImages);
+  const present = refsPresent(inventory);
+  const toPin = wantedImages.filter((ref) => present.has(ref));
+  const toUnpin = previouslyPinned.filter((ref) => !wanted.has(ref) && present.has(ref));
+  for (const ref of wantedImages) if (!present.has(ref)) result.absent.push(ref);
+  if (toPin.length === 0 && toUnpin.length === 0) return result;
+  const tool = await resolveImageLabelTool(exec);
+  if (!tool) {
+    result.warning = "No `k3s ctr` or `ctr` on this machine, so Conveyor cannot pin its images against kubelet garbage collection. A freshly baked image can be deleted before the first pod runs it.";
+    return result;
+  }
+  const label2 = async (ref, value) => {
+    try {
+      assertImageRef(ref);
+    } catch {
+      result.failures.push(`${ref}: not a valid image reference`);
+      return false;
+    }
+    const run = await exec(tool.bin, [...tool.args, ref, `${PIN_LABEL}=${value}`], {
+      timeoutMs: 3e4
+    });
+    if (run.exitCode === 0) return true;
+    result.failures.push(`${ref}: ${run.stderr.trim().slice(0, 120)}`);
+    return false;
+  };
+  for (const ref of toPin) {
+    if (await label2(ref, "pinned")) result.pinned.push(ref);
+  }
+  for (const ref of toUnpin) {
+    if (await label2(ref, "")) result.unpinned.push(ref);
+  }
+  return result;
+}
+function countPinnedWanted(inventory, wantedImages) {
   const wanted = new Set(wantedImages);
-  const held = inventory.images.flatMap(
-    (image) => (image.repoTags ?? []).filter((ref) => ref.startsWith("localhost/") && isImageRef(ref)).map((ref) => ({ ref, imageId: image.id }))
-  );
-  held.sort(
-    (a, b) => Number(wanted.has(b.ref)) - Number(wanted.has(a.ref)) || (a.ref < b.ref ? -1 : a.ref > b.ref ? 1 : 0)
-  );
-  const reported = held.slice(0, MAX_LOCAL_IMAGES);
-  const live = new Set(reported.map((entry) => entry.imageId));
-  for (const id2 of [...cache.keys()]) if (!live.has(id2)) cache.delete(id2);
-  const images = [];
-  let inspections = 0;
-  for (const entry of reported) {
-    let contentHash = cache.get(entry.imageId);
-    if (contentHash === void 0 && inspections < MAX_INSPECTIONS_PER_BEAT) {
-      inspections += 1;
-      contentHash = await inspectContentHash(exec, entry.imageId);
-      if (contentHash !== void 0) cache.set(entry.imageId, contentHash);
-    }
-    images.push({ ...entry, contentHash: contentHash ?? null });
-  }
-  return images;
+  return inventory.images.filter(
+    (image) => image.pinned === true && refsOf(image).some((ref) => wanted.has(ref))
+  ).length;
 }
 
 // src/daemon/telemetry.ts
@@ -14189,14 +14745,22 @@ async function collectHeartbeat(ports, state, inventory) {
     ...runnerUsers.length > 0 ? { runnerUsers } : {},
     ...localImages ? { localImages } : {},
     ...registry.fields,
-    localWarnings: [
+    ...state.isolation ? { isolation: state.isolation } : {},
+    localWarnings: withinHeartbeatBounds([
       ...state.localWarnings,
       ...gcWarning ? [gcWarning] : [],
       ...ungranted.length > 0 ? [ungrantedRunnersWarning(ungranted)] : [],
       ...registry.warnings
-    ]
+    ])
   };
 }
+var HEARTBEAT_LIST_MAX = 64;
+var HEARTBEAT_STRING_MAX = 512;
+function withinHeartbeatBounds(warnings) {
+  return warnings.slice(0, HEARTBEAT_LIST_MAX).map(
+    (warning) => warning.length > HEARTBEAT_STRING_MAX ? `${warning.slice(0, HEARTBEAT_STRING_MAX - 1)}\u2026` : warning
+  );
+}
 async function readPodIdentities(exec) {
   const result = await exec(
     "k3s",
@@ -14278,9 +14842,12 @@ async function runRegistryUpkeep(ports, lastGcAt, maintenanceHour) {
 }
 
 // src/daemon/reconcile.ts
-async function reconcileKubelet(ctx, desired, result) {
+function ownerRestartWarning(change) {
+  return `${change} Conveyor did not install this server's k3s, so it never restarts it: run \`sudo systemctl restart k3s\` when no build runs.`;
+}
+async function reconcileKubelet(ctx, desired, result, managed) {
   const ownerConfig = await ctx.fs.readFile(K3S_OWNER_CONFIG);
-  const rendered = renderK3sDropIn(desired.kubelet, ownerConfig);
+  const rendered = renderK3sDropIn(desired.kubelet, ownerConfig, { disableComponents: managed });
   result.skippedKubeletFlags = rendered.skipped;
   result.effectiveImageGcHighThreshold = rendered.skipped.includes("image-gc-high-threshold") ? ownerImageGcHighThreshold(ownerConfig) : desired.kubelet.imageGcHighThreshold;
   for (const flag of rendered.skipped) {
@@ -14296,6 +14863,10 @@ async function reconcileKubelet(ctx, desired, result) {
   if (current === rendered.content) return;
   await ctx.fs.ensureDir(K3S_CONFIG_DROPIN.slice(0, K3S_CONFIG_DROPIN.lastIndexOf("/")));
   await ctx.fs.writeFile(K3S_CONFIG_DROPIN, rendered.content, 420);
+  if (!managed) {
+    result.warnings.push(ownerRestartWarning("Kubelet settings changed."));
+    return;
+  }
   if (!mayDisrupt(ctx.runningConveyorPods)) {
     result.warnings.push(
       `Kubelet settings changed but ${busyReason(ctx.runningConveyorPods)} \u2014 the restart is deferred until the machine is idle.`
@@ -14346,43 +14917,6 @@ async function reconcilePriorityClass(ctx, desired, result) {
     );
   }
 }
-function renderLimitRange(namespace, limits) {
-  const ns = assertK8sName(namespace, "namespace");
-  const values = [
-    assertQuantity(limits.defaultRequest.cpu, "defaultRequest.cpu"),
-    assertQuantity(limits.defaultRequest.memory, "defaultRequest.memory"),
-    assertQuantity(limits.default.cpu, "default.cpu"),
-    assertQuantity(limits.default.memory, "default.memory")
-  ];
-  return [
-    "apiVersion: v1",
-    "kind: LimitRange",
-    "metadata:",
-    "  name: conveyor-k3-defaults",
-    `  namespace: ${ns}`,
-    "spec:",
-    "  limits:",
-    "  - type: Container",
-    "    defaultRequest:",
-    `      cpu: "${values[0]}"`,
-    `      memory: "${values[1]}"`,
-    "    default:",
-    `      cpu: "${values[2]}"`,
-    `      memory: "${values[3]}"`,
-    ""
-  ].join("\n");
-}
-async function reconcileNamespaces(ctx, desired, result) {
-  for (const namespace of desired.namespaces) {
-    try {
-      await kubectlApply(ctx.exec, renderLimitRange(namespace.name, namespace.limitRange));
-    } catch (error) {
-      result.warnings.push(
-        `Could not apply resource defaults to ${namespace.name} (${namespace.projectName}): ${error instanceof Error ? error.message : String(error)}`
-      );
-    }
-  }
-}
 async function step(result, label2, run) {
   try {
     await run();
@@ -14419,6 +14953,12 @@ async function reconcile(ctx, desired) {
     "Could not apply namespace defaults",
     () => reconcileNamespaces(ctx, desired, result)
   );
+  await step(
+    result,
+    "Could not apply pod isolation",
+    () => reconcileIsolation(ctx, desired, result)
+  );
+  if (desired.isolation && result.isolation === void 0) result.isolation = { applied: false };
   if (manifestAccepted) {
     await step(
       result,
@@ -14427,6 +14967,7 @@ async function reconcile(ctx, desired) {
     );
   }
   const registry = desired.localRegistry?.enabled === true;
+  const managed = managesK3s(desired, await readState(ctx.fs).catch(() => ({})));
   if (registry) {
     await step(result, "Could not reconcile the local image registry", async () => {
       await deployLocalRegistry(ctx);
@@ -14435,10 +14976,15 @@ async function reconcile(ctx, desired) {
   await step(
     result,
     "Could not apply kubelet settings",
-    () => reconcileKubelet(ctx, desired, result)
+    () => reconcileKubelet(ctx, desired, result, managed)
   );
   if (registry && !result.restartedK3s) {
     await step(result, "Could not load the local image registry mirror", async () => {
+      if (!managed) {
+        if (await registryMirrorPending(ctx.fs))
+          result.warnings.push(ownerRestartWarning("The local image registry's mirror is new."));
+        return;
+      }
       const loaded = await loadRegistryMirror(ctx);
       result.restartedK3s = loaded.restarted;
       if (loaded.warning) result.warnings.push(loaded.warning);
@@ -14447,10 +14993,138 @@ async function reconcile(ctx, desired) {
   return result;
 }
 
+// src/commands/setup-run.ts
+init_journald();
+init_paths();
+
+// src/commands/setup-session.ts
+init_exec();
+init_paths();
+async function withSetupConnection(ports, connection, enroll) {
+  for (const unit of [UPDATE_TIMER, UPDATE_UNIT, DAEMON_UNIT]) {
+    if (await ports.fs.readFile(`${SYSTEMD_DIR}/${unit}`))
+      await runOrThrow(ports.exec, "systemctl", ["stop", unit]);
+  }
+  let result;
+  try {
+    await connection.connect();
+    result = await enroll();
+  } finally {
+    connection.disconnect();
+  }
+  await runOrThrow(ports.exec, "systemctl", ["start", DAEMON_UNIT]);
+  await runOrThrow(ports.exec, "systemctl", ["start", UPDATE_TIMER]);
+  return result;
+}
+
+// src/commands/setup-run.ts
+function requiredAuthHosts(namespaces) {
+  return [...new Set(namespaces.flatMap((ns) => ns.authRequiredHosts))].sort();
+}
+async function prepareMachine(ports) {
+  await ensureK3s(ports);
+  await ensureJournaldCap(ports).catch((error) => {
+    ports.log(
+      `Could not cap the system journal; setup continues: ${error instanceof Error ? error.message : String(error)}`
+    );
+  });
+  const cloudflaredBin = await ensureCloudflared(ports);
+  await ensureCaPool(ports);
+  return { cloudflaredBin };
+}
+async function enrollMachine(ports, env, cloudflaredBin, recorded = {}) {
+  const { exec, fs: fs2, log: log2 } = ports;
+  const connection = new ClusterConnection({ apiUrl: env.apiUrl, clusterToken: env.clusterToken });
+  const bundle = await withSetupConnection(ports, connection, async () => {
+    const enrollment = await connection.enroll();
+    log2(`Enrolled as ${enrollment.hostname}.`);
+    await installUnits(ports, enrollment, cloudflaredBin, enrollment.desiredState.maintenance.hour);
+    const runningConveyorPods = await countRunningConveyorPods(exec);
+    const result = await reconcile({ exec, fs: fs2, runningConveyorPods }, enrollment.desiredState);
+    for (const warning of result.warnings) log2(warning);
+    const saToken = await mintServiceAccountToken(ports);
+    await connection.completeEnrollment({ saToken });
+    await recordSetupState(
+      ports,
+      enrollment,
+      result.appliedVersion,
+      { bun: await resolveBunBin(ports), cli: ports.cliBin, cloudflared: cloudflaredBin },
+      recorded
+    );
+    return enrollment;
+  });
+  const registries = parseRegistries(await fs2.readFile(REGISTRIES_FILE));
+  const missing = missingAuthHosts(registries, requiredAuthHosts(bundle.desiredState.namespaces));
+  log2("");
+  log2(`This machine is ready. Conveyor reaches it at ${bundle.hostname}.`);
+  for (const line of renderRegistryAuthSummary(missing)) log2(line);
+}
+
+// src/lib/bins.ts
+var INSTALLER_PATHS = {
+  bun: "/root/.bun/bin/bun",
+  cli: "/root/.bun/bin/conveyor-k3",
+  cloudflared: "/usr/local/bin/cloudflared"
+};
+async function whichOrNull(exec, bin) {
+  const result = await exec("which", [bin]).catch(() => null);
+  if (!result || result.exitCode !== 0) return null;
+  const path = result.stdout.trim().split("\n")[0]?.trim();
+  return path && path.startsWith("/") ? path : null;
+}
+async function resolveBinaries(exec, state, selfPath) {
+  const recorded = state.bins;
+  const cliSelf = selfPath?.startsWith("/") ? selfPath : null;
+  return {
+    bun: recorded?.bun ?? await whichOrNull(exec, "bun") ?? INSTALLER_PATHS.bun,
+    // `cli` prefers the running process's own path: if this code is executing,
+    // that path is by definition correct.
+    cli: cliSelf ?? recorded?.cli ?? await whichOrNull(exec, "conveyor-k3") ?? INSTALLER_PATHS.cli,
+    cloudflared: recorded?.cloudflared ?? await whichOrNull(exec, "cloudflared") ?? INSTALLER_PATHS.cloudflared
+  };
+}
+
+// src/lib/guest-vm.ts
+async function requireGuestVm(exec) {
+  try {
+    const result = await exec("systemd-detect-virt", ["--vm", "--quiet"]);
+    if (result.exitCode === 0) return;
+  } catch {
+  }
+  throw new Error("Refusing to run guest setup on a physical host; use `conveyor-k3 vm setup`");
+}
+
+// src/lib/k3s-channel.ts
+var CHANNELS_URL = "https://update.k3s.io/v1-release/channels";
+var REQUEST_TIMEOUT_MS2 = 15e3;
+function parseChannelVersion(version) {
+  const match = /v?(\d+)\.(\d+)\./.exec(version);
+  if (!match) return null;
+  return [Number(match[1]), Number(match[2])];
+}
+async function resolveChannelLatest(channel, fetchImpl = fetch) {
+  try {
+    const response = await fetchImpl(CHANNELS_URL, {
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS2),
+      headers: { Accept: "application/json" }
+    });
+    if (!response.ok) return null;
+    const body = await response.json();
+    const match = body.data?.find((entry) => entry.id === channel || entry.name === channel);
+    return match?.latest ? parseChannelVersion(match.latest) : null;
+  } catch {
+    return null;
+  }
+}
+
 // src/daemon/runner.ts
+init_dist();
+init_paths();
 var HOUR_MS2 = 60 * 6e4;
 var DAY_MS = 24 * HOUR_MS2;
 var STORE_MEASURE_INTERVAL_MS = 55 * 6e4;
+var ISOLATION_RETRY_FIRST_MS = 6e4;
+var ISOLATION_RETRY_MAX_MS = 10 * 6e4;
 var DISK_PRESSURE_FREE_FRACTION = 0.2;
 var STRANDED_PRUNE_BYTES = 20 * 1024 ** 3;
 function flattenWanted(desired) {
@@ -14491,12 +15165,22 @@ var ClusterDaemon = class {
   localImageHashes = /* @__PURE__ */ new Map();
   /** How long the in-cluster registry has been not ready, across beats. */
   registryWatch = { notReadySince: null };
+  /**
+   * Whether pod isolation is in force, from the last reconcile; undefined
+   * while desired state does not ask for it. Every heartbeat checks it again
+   * against k3s's own settings before reporting it.
+   */
+  isolation = void 0;
   timers = [];
   /** When the last store walk started, so one that failed is not retried on every reconcile. */
   storeWalkStartedAt = 0;
   /** Serializes reconcile against itself — a sync nudge during a reconcile
    *  must queue, not interleave two kubectl applies of the same manifests. */
   reconciling = null;
+  /** The run queued behind the running one, until it starts. At most one waits. */
+  queuedRun = null;
+  /** The next reconcile while pod isolation is not applied; `dueAt` 0 = none. */
+  isolationRetry = { delayMs: ISOLATION_RETRY_FIRST_MS, dueAt: 0 };
   constructor(ports) {
     this.ports = ports;
   }
@@ -14532,10 +15216,27 @@ var ClusterDaemon = class {
   }
   /** Fetch the desired state and converge to it. Queued, never concurrent. */
   syncAndReconcile() {
-    const run = (this.reconciling ?? Promise.resolve()).then(() => this.runReconcile());
+    if (this.queuedRun) return this.queuedRun;
+    const run = (this.reconciling ?? Promise.resolve()).then(() => {
+      this.queuedRun = null;
+      return this.runReconcile();
+    });
+    this.queuedRun = run;
     this.reconciling = run.catch(() => void 0);
     return run;
   }
+  /** Reconcile again later while pod isolation is not applied; stop once it is. */
+  scheduleIsolationRetry() {
+    if (this.isolation?.applied !== false) {
+      this.isolationRetry = { delayMs: ISOLATION_RETRY_FIRST_MS, dueAt: 0 };
+      return;
+    }
+    const { delayMs } = this.isolationRetry;
+    this.isolationRetry = {
+      delayMs: Math.min(delayMs * 2, ISOLATION_RETRY_MAX_MS),
+      dueAt: Date.now() + delayMs
+    };
+  }
   async runReconcile() {
     try {
       this.desired = await this.ports.connection.requestDesiredState();
@@ -14551,6 +15252,8 @@ var ClusterDaemon = class {
       this.desired
     );
     this.warnings = result.warnings;
+    this.isolation = result.isolation;
+    this.scheduleIsolationRetry();
     for (const warning of result.warnings) this.ports.log(warning);
     if (result.prunedNamespaces.length > 0) {
       this.ports.log(
@@ -14721,6 +15424,10 @@ var ClusterDaemon = class {
     const inventory = await readImageInventory(this.ports.exec).catch(() => null);
     const registryOn = this.desired?.localRegistry?.enabled === true;
     if (!registryOn) this.registryWatch.notReadySince = null;
+    const isolation = await recheckIsolation(
+      { exec: this.ports.exec, fs: this.ports.fs },
+      this.isolation
+    );
     return await collectHeartbeat(
       {
         exec: this.ports.exec,
@@ -14735,10 +15442,11 @@ var ClusterDaemon = class {
         lastPruneAt: this.state?.lastPruneAt ?? null,
         lastWarmAt: this.state?.lastWarmAt ?? null,
         lastUpdateAt: this.state?.lastUpdateAt ?? null,
-        localWarnings: [...this.warnings, ...this.warmWarnings],
+        localWarnings: [...this.warnings, ...this.warmWarnings, ...isolation.warnings],
         imageGcHighThreshold: this.effectiveImageGcHigh,
         localImageHashes: this.localImageHashes,
         ...registryOn ? { localRegistry: this.registryWatch } : {},
+        ...isolation.isolation ? { isolation: isolation.isolation } : {},
         k3sStoreBytes: this.measuredStoreBytes
       },
       inventory
@@ -14763,6 +15471,10 @@ var ClusterDaemon = class {
     return this.beating;
   }
   async runBeat() {
+    if (this.isolationRetry.dueAt > 0 && Date.now() >= this.isolationRetry.dueAt) {
+      this.isolationRetry.dueAt = 0;
+      void this.syncAndReconcile();
+    }
     try {
       const workloads = await this.ports.connection.sendHeartbeat({
         ...await this.buildHeartbeat(),
@@ -14776,12 +15488,64 @@ var ClusterDaemon = class {
   }
 };
 
-// src/cli.ts
-init_paths();
+// src/host/bootstrap.ts
+import { spawn as spawn2 } from "child_process";
+var RUN_BOOTSTRAP = `set -euo pipefail; umask 077; installer=$(mktemp /run/conveyor-pairing.XXXXXX); trap 'rm -f "$installer"' EXIT; cat > "$installer"; bash "$installer"`;
+var DEV_ARTIFACT_ENV = ["CONVEYOR_DEV_ARTIFACT", "CONVEYOR_DEV_ARTIFACT_SHA256"];
+function runHostBootstrap(script, command = ["bash", "-c", RUN_BOOTSTRAP]) {
+  if (script.length === 0 || script.length > 1e6)
+    return Promise.reject(new Error("Pairing bootstrap payload is invalid."));
+  const env = { ...process.env };
+  for (const name2 of DEV_ARTIFACT_ENV) delete env[name2];
+  const [bin, ...args] = command;
+  return new Promise((resolve, reject) => {
+    const child = spawn2(bin, args, { stdio: ["pipe", "inherit", "inherit"], env });
+    child.on("error", reject);
+    child.on("close", (code, signal) => {
+      if (code === 0) {
+        resolve();
+        return;
+      }
+      reject(
+        new Error(
+          `The installer stopped (${signal ?? `exit ${code}`}). Fix the error above, then run sudo conveyor-k3 host link again.`
+        )
+      );
+    });
+    child.stdin.on("error", () => void 0);
+    child.stdin.end(script);
+  });
+}
+
+// src/host/device-key.ts
+import { createPublicKey, generateKeyPairSync } from "crypto";
+import { chmod as chmod2, mkdir as mkdir3, writeFile as writeFile3 } from "fs/promises";
+import { dirname } from "path";
+init_device_link();
+async function createDeviceKey(keyPath) {
+  const directory = dirname(keyPath);
+  await mkdir3(directory, { recursive: true, mode: 448 });
+  await chmod2(directory, 448);
+  const { privateKey } = generateKeyPairSync("ed25519");
+  await writeFile3(keyPath, privateKey.export({ type: "pkcs8", format: "pem" }), {
+    mode: 384,
+    flag: "wx"
+  });
+  await chmod2(keyPath, 384);
+  return privateKey;
+}
+async function ensureHostDevicePublicKey(keyPath = DEVICE_KEY_PATH, ownerUid = 0) {
+  const key = privateDeviceKey(keyPath, ownerUid) ?? await createDeviceKey(keyPath);
+  const publicKey = createPublicKey(key).export({ type: "spki", format: "pem" }).toString();
+  if (!validDevicePublicKey(publicKey))
+    throw new Error("This server's device key produced an invalid public key.");
+  return publicKey;
+}
 
 // src/verbs.ts
 var VERBS = [
   "vm",
+  "host",
   "setup",
   "start",
   "stop",
@@ -14814,14 +15578,22 @@ function parseArgs(argv) {
   }
   return { verb, positional, flags };
 }
-var HELP = `conveyor-k3 \u2014 managed personal compute for Conveyor
+var HELP = `conveyor-k3 \u2014 Personal Compute for Conveyor
 
 Usage: conveyor-k3 <command> [options]
 
-Commands:
-  vm                    Manage isolated compute on macOS or Linux.
-                        Run conveyor-k3 vm for host lifecycle commands.
-  setup                 Install and enrol this machine. Safe to re-run.
+One product, two runtimes. Pick the one that fits the machine:
+
+On your computer or server:
+  vm                    Personal computer runtime: an isolated VM on macOS or
+                        Linux. Run conveyor-k3 vm for its commands.
+  host                  Dedicated server runtime: k3s and the daemon on this
+                        Linux machine, with no VM. Root only. Run
+                        conveyor-k3 host for its commands.
+
+Inside a linked machine (the VM guest, or the server itself):
+  setup                 VM guest only: install and enrol this machine. Safe
+                        to re-run. On a server, use conveyor-k3 host setup.
   start                 Start the tunnel and the daemon.
   stop                  Stop both, and tell Conveyor at once so your next
                         build goes straight to project compute.
@@ -14846,10 +15618,12 @@ Commands:
                         into this node and pin it. Writes one file under
                         /etc/sudoers.d, checked with visudo first. Needed only
                         when a project has Bake Locally turned on.
-  uninstall             Remove Conveyor's units, environment, state, and image
-                        registry. Your k3s config, your own registries.yaml
-                        entries, your workloads, and the registry's data are
-                        left alone.
+  uninstall             VM guest only: remove Conveyor's units, environment,
+                        state, and image registry. Your k3s config, your own
+                        registries.yaml entries, your workloads, and the
+                        registry's data are left alone. On a server, use
+                        conveyor-k3 host uninstall: it also removes the
+                        device key.
                           --purge-k3s --yes     also remove k3s itself and the
                                                 registry's data
   daemon                Run in the foreground (what the systemd unit calls).
@@ -14882,56 +15656,56 @@ async function requireRoot(exec) {
 `);
   process.exit(1);
 }
-function requiredAuthHosts(namespaces) {
-  return [...new Set(namespaces.flatMap((ns) => ns.authRequiredHosts))].sort();
+function setupPorts(exec) {
+  return { exec, fs: nodeFileSystem, cliBin: process.argv[1] ?? "conveyor-k3", log };
 }
 async function runSetup(exec) {
   await requireRoot(exec);
   await requireGuestVm(exec);
   const env = readCliEnv();
-  const ports = {
-    exec,
-    fs: nodeFileSystem,
-    cliBin: process.argv[1] ?? "conveyor-k3",
-    log
-  };
-  await ensureK3s(ports);
-  await ensureJournaldCap(ports).catch((error) => {
+  const ports = setupPorts(exec);
+  const { cloudflaredBin } = await prepareMachine(ports);
+  await enrollMachine(ports, env, cloudflaredBin);
+}
+async function runHostSetup(exec) {
+  const ports = setupPorts(exec);
+  const { cloudflaredBin } = await prepareMachine(ports);
+  let env;
+  try {
+    env = readCliEnv();
+  } catch {
+    const state = await readState(nodeFileSystem);
     log(
-      `Could not cap the system journal; setup continues: ${error instanceof Error ? error.message : String(error)}`
-    );
-  });
-  const cloudflaredBin = await ensureCloudflared(ports);
-  await ensureCaPool(ports);
-  const connection = new ClusterConnection({ apiUrl: env.apiUrl, clusterToken: env.clusterToken });
-  const bundle = await withSetupConnection(ports, connection, async () => {
-    const enrollment = await connection.enroll();
-    log(`Enrolled as ${enrollment.hostname}.`);
-    await installUnits(ports, enrollment, cloudflaredBin, enrollment.desiredState.maintenance.hour);
-    const runningConveyorPods = await countRunningConveyorPods(exec);
-    const result = await reconcile(
-      { exec, fs: nodeFileSystem, runningConveyorPods },
-      enrollment.desiredState
+      state.enrolled ? `Prepared. This server is already linked as ${state.hostname}; its daemon keeps it current. To move it to another account, run: sudo conveyor-k3 host link --relink` : "Prepared. This server is not linked yet \u2014 run: sudo conveyor-k3 host link --name=<name>"
     );
-    for (const warning of result.warnings) log(warning);
-    const saToken = await mintServiceAccountToken(ports);
-    await connection.completeEnrollment({ saToken });
-    await recordSetupState(ports, enrollment, result.appliedVersion, {
-      bun: await resolveBunBin(ports),
-      cli: ports.cliBin,
-      cloudflared: cloudflaredBin
-    });
-    return enrollment;
-  });
-  const registries = parseRegistries(await nodeFileSystem.readFile(REGISTRIES_FILE));
-  const missing = missingAuthHosts(registries, requiredAuthHosts(bundle.desiredState.namespaces));
-  log("");
-  log(`This machine is ready. Conveyor reaches it at ${bundle.hostname}.`);
-  for (const line of renderRegistryAuthSummary(missing)) log(line);
+    return;
+  }
+  await enrollMachine(ports, env, cloudflaredBin, { runtime: "host" });
+}
+function hostPorts(exec) {
+  return {
+    prepare: async () => {
+      await prepareMachine(setupPorts(exec));
+    },
+    setup: () => runHostSetup(exec),
+    status: (asJson) => runStatus(exec, asJson, "sudo conveyor-k3 host link --name=<name>"),
+    uninstall: async (options) => {
+      await uninstall({ exec, fs: nodeFileSystem, log }, options);
+    },
+    runBootstrap: (script) => runHostBootstrap(script),
+    ensureDevicePublicKey: () => ensureHostDevicePublicKey(),
+    removeDeviceKey: () => nodeFileSystem.removeFile(DEVICE_KEY_PATH),
+    readState: () => readState(nodeFileSystem),
+    writeState: (state) => writeState(nodeFileSystem, state)
+  };
 }
 async function runDaemon(exec) {
   const env = readCliEnv();
-  const connection = new ClusterConnection({ apiUrl: env.apiUrl, clusterToken: env.clusterToken });
+  const connection = new ClusterConnection({
+    apiUrl: env.apiUrl,
+    clusterToken: env.clusterToken,
+    reconnectWhenReplaced: true
+  });
   const daemon = new ClusterDaemon({
     exec,
     fs: nodeFileSystem,
@@ -14972,7 +15746,7 @@ async function runStop(exec) {
   }
   log("Stopped. Your builds go to project compute until you run `conveyor-k3 start`.");
 }
-async function runStatus(exec, asJson) {
+async function runStatus(exec, asJson, notEnrolledHint = "conveyor-k3 setup") {
   const state = await readState(nodeFileSystem);
   const units = {};
   for (const unit of ALL_UNITS) {
@@ -14990,14 +15764,18 @@ async function runStatus(exec, asJson) {
     units,
     lastWarmAt: state.lastWarmAt,
     lastPruneAt: state.lastPruneAt,
-    runningConveyorPods: await countRunningConveyorPods(exec)
+    runningConveyorPods: await countRunningConveyorPods(exec),
+    ...state.runtime ? { runtime: state.runtime } : {}
   };
   if (asJson) {
     log(JSON.stringify(report, null, 2));
     return;
   }
   log(`conveyor-k3 ${report.cliVersion}`);
-  log(report.enrolled ? `Enrolled as ${report.hostname}` : "Not enrolled \u2014 run: conveyor-k3 setup");
+  log(
+    report.enrolled ? `Enrolled as ${report.hostname}` : `Not enrolled \u2014 run: ${notEnrolledHint}`
+  );
+  if (state.runtime) log(`runtime: ${state.runtime}`);
   log(`k3s: ${report.k3sVersion ?? "not detected"}`);
   for (const [unit, active] of Object.entries(units)) log(`${unit}: ${active}`);
   log(`Settings version applied: ${report.appliedSettingsVersion}`);
@@ -15009,9 +15787,9 @@ async function runSync(exec) {
   const connection = new ClusterConnection({ apiUrl: env.apiUrl, clusterToken: env.clusterToken });
   await connection.connect();
   const desired = await connection.requestDesiredState();
+  connection.disconnect();
   const runningConveyorPods = await countRunningConveyorPods(exec);
   const result = await reconcile({ exec, fs: nodeFileSystem, runningConveyorPods }, desired);
-  connection.disconnect();
   log(`Applied settings version ${result.appliedVersion}.`);
   for (const warning of result.warnings) log(warning);
 }
@@ -15023,8 +15801,10 @@ async function runUpdateVerb(exec) {
   const desired = await connection.requestDesiredState();
   connection.disconnect();
   const installed = await exec("k3s", ["--version"]).catch(() => null);
+  const state = await readState(nodeFileSystem);
   const decision = decideK3sUpgrade({
     autoUpgradeK3s: desired.maintenance.autoUpgradeK3s,
+    managesK3s: managesK3s(desired, state),
     runningConveyorPods: await countRunningConveyorPods(exec),
     installedK3s: installed ? parseK3sVersion(installed.stdout || installed.stderr) : null,
     // The channel's REAL current version, from Rancher. Comparing against the
@@ -15032,7 +15812,7 @@ async function runUpdateVerb(exec) {
     // which left the profile's auto-upgrade switch controlling nothing.
     channelLatestK3s: await resolveChannelLatest(desired.k3s.channel)
   });
-  const bins = await resolveBinaries(exec, await readState(nodeFileSystem), process.argv[1]);
+  const bins = await resolveBinaries(exec, state, process.argv[1]);
   const result = await runUpdate(
     { exec, log, bins },
     decision,
@@ -15118,6 +15898,10 @@ async function dispatch(verb, parsed, exec) {
       const { runVmCommand: runVmCommand2 } = await Promise.resolve().then(() => (init_command(), command_exports));
       return runVmCommand2(parsed, exec, log);
     }
+    case "host": {
+      const { runHostCommand: runHostCommand2 } = await Promise.resolve().then(() => (init_command2(), command_exports2));
+      return runHostCommand2(parsed, exec, log, hostPorts(exec));
+    }
     case "setup":
       return await runSetup(exec);
     case "daemon":