@rallycry/conveyor-k3 0.1.13 → 0.1.15

package/dist/cli.js

@@ -10,7 +10,7 @@ var __export = (target2, all) => {
 };
 
 // src/lib/paths.ts
-var ETC_CONVEYOR, ENV_FILE, TUNNEL_ENV_FILE, STATE_DIR, STATE_FILE, LOCAL_REGISTRY_DATA_DIR, LOCAL_REGISTRY_MIRROR_RESTART_FILE, RANCHER_DIR, K3S_OWNER_CONFIG, K3S_CONFIG_DROPIN_DIR, K3S_CONFIG_DROPIN, REGISTRIES_FILE, K3S_CERTS_D, K3S_SERVER_CA, K3S_CONTAINERD_DIR, JOURNALD_DROPIN, CLOUDFLARED_DIR, CA_POOL_PATH, SYSTEMD_DIR, DAEMON_UNIT, TUNNEL_UNIT, UPDATE_UNIT, UPDATE_TIMER, ALL_UNITS, OWNED_FILES, RUNNERS_SUDOERS_FILE;
+var ETC_CONVEYOR, ENV_FILE, TUNNEL_ENV_FILE, STATE_DIR, STATE_FILE, LOCAL_REGISTRY_DATA_DIR, LOCAL_REGISTRY_MIRROR_RESTART_FILE, LOCAL_REGISTRY_CREDENTIALS_FILE, LOCAL_REGISTRY_AUTH_STATE_FILE, RANCHER_DIR, K3S_OWNER_CONFIG, K3S_CONFIG_DROPIN_DIR, K3S_CONFIG_DROPIN, REGISTRIES_FILE, K3S_CERTS_D, K3S_SERVER_CA, K3S_CONTAINERD_DIR, JOURNALD_DROPIN, CLOUDFLARED_DIR, CA_POOL_PATH, SYSTEMD_DIR, DAEMON_UNIT, TUNNEL_UNIT, UPDATE_UNIT, UPDATE_TIMER, ALL_UNITS, OWNED_FILES, RUNNERS_SUDOERS_FILE;
 var init_paths = __esm({
   "src/lib/paths.ts"() {
     "use strict";
@@ -21,6 +21,8 @@ var init_paths = __esm({
     STATE_FILE = `${STATE_DIR}/state.json`;
     LOCAL_REGISTRY_DATA_DIR = `${STATE_DIR}/registry`;
     LOCAL_REGISTRY_MIRROR_RESTART_FILE = `${STATE_DIR}/registry-mirror-restart`;
+    LOCAL_REGISTRY_CREDENTIALS_FILE = `${STATE_DIR}/registry-credentials.json`;
+    LOCAL_REGISTRY_AUTH_STATE_FILE = `${STATE_DIR}/registry-auth.json`;
     RANCHER_DIR = "/etc/rancher/k3s";
     K3S_OWNER_CONFIG = `${RANCHER_DIR}/config.yaml`;
     K3S_CONFIG_DROPIN_DIR = `${RANCHER_DIR}/config.yaml.d`;
@@ -216,17 +218,44 @@ var init_safe_arg = __esm({
 });
 
 // src/lib/env.ts
-function readCliEnv(env = process.env) {
-  const apiUrl = env.CONVEYOR_API_URL ?? "";
-  const clusterToken = env.CONVEYOR_CLUSTER_TOKEN ?? "";
-  const clusterId = env.CONVEYOR_CLUSTER_ID ?? "";
+import { readFileSync } from "fs";
+function parseEnvFile(content) {
+  const values = {};
+  for (const raw of content.split("\n")) {
+    const line = raw.trim();
+    if (!line || line.startsWith("#")) continue;
+    const eq = line.indexOf("=");
+    if (eq <= 0) continue;
+    const key = line.slice(0, eq).trim();
+    let value = line.slice(eq + 1).trim();
+    if (value.length >= 2 && (value[0] === '"' || value[0] === "'") && value.endsWith(value[0])) {
+      value = value.slice(1, -1);
+    }
+    values[key] = value;
+  }
+  return values;
+}
+function readCliEnv(env = process.env, readEnvFile = readEnvFileFromDisk) {
+  let source = env;
+  if (!env.CONVEYOR_API_URL || !env.CONVEYOR_CLUSTER_TOKEN) {
+    const content = readEnvFile?.() ?? null;
+    if (content !== null) source = { ...parseEnvFile(content), ...definedOnly(env) };
+  }
+  const apiUrl = source.CONVEYOR_API_URL ?? "";
+  const clusterToken = source.CONVEYOR_CLUSTER_TOKEN ?? "";
+  const clusterId = source.CONVEYOR_CLUSTER_ID ?? "";
   if (!apiUrl || !clusterToken) {
     throw new Error(
-      "This machine is not enrolled. /etc/conveyor/k3.env must set CONVEYOR_API_URL and CONVEYOR_CLUSTER_TOKEN \u2014 re-run the install command from your Conveyor profile."
+      `This machine is not enrolled. ${ENV_FILE} must set CONVEYOR_API_URL and CONVEYOR_CLUSTER_TOKEN \u2014 re-run the install command from your Conveyor profile.`
     );
   }
   return { apiUrl, clusterToken, clusterId };
 }
+function definedOnly(env) {
+  return Object.fromEntries(
+    Object.entries(env).filter((entry) => Boolean(entry[1]))
+  );
+}
 async function preflight(exec) {
   const problems = [];
   if (process.platform !== "linux") {
@@ -250,11 +279,20 @@ async function preflight(exec) {
 function checkedHostname(hostname2) {
   return assertHostname(hostname2, "tunnel hostname");
 }
+var readEnvFileFromDisk;
 var init_env = __esm({
   "src/lib/env.ts"() {
     "use strict";
     init_safe_arg();
     init_exec();
+    init_paths();
+    readEnvFileFromDisk = () => {
+      try {
+        return readFileSync(ENV_FILE, "utf8");
+      } catch {
+        return null;
+      }
+    };
   }
 });
 
@@ -4374,7 +4412,7 @@ var init_zod = __esm({
   }
 });
 
-// ../shared/dist/chunk-VSUBG7GR.js
+// ../shared/dist/chunk-SFSQ7NKP.js
 function formatModelId(provider, model) {
   return `${provider}/${model}`;
 }
@@ -4392,8 +4430,8 @@ function uniqueSortedArray(item, minimum = 0) {
   }).transform((values) => [...values].sort());
 }
 var DEFAULT_SONNET_MODEL, DEFAULT_OPUS_MODEL, DEFAULT_HAIKU_MODEL, FABLE_MODEL, PREVIOUS_SONNET_MODEL, PREVIOUS_OPUS_MODEL, JEV_MODEL, JEV_MODEL_ID, JEV_ZEN_MODEL, JEV_ZEN_MODEL_ID, JEV_INPUT_PRICE_PER_TOKEN, JEV_STATE_MAX_CHARS, PTY_STREAM_PORT_BASE, PTY_STREAM_PORT_ATTEMPTS, PREVIEW_PORT_DENY_LIST, checkpointPathSchema, secretNameSchema, checkpointKeySchema, checkpointDigestRefSchema, ACTIONS_PREBAKE_REGISTRY_PATTERN, actionsPrebakeRegistrySchema, projectCheckpointSettingsSchema, CARD_DESCRIPTION_MAX, CARD_DESCRIPTION_LIMIT_MESSAGE, CARD_DESCRIPTION_FIELD_HINT, MAX_MANUAL_TESTS_PER_TASK, MAX_MANUAL_TEST_TITLE_LENGTH, ManualTestItemsSchema, MAX_CI_WAIT_TIMEOUT_MINUTES;
-var init_chunk_VSUBG7GR = __esm({
-  "../shared/dist/chunk-VSUBG7GR.js"() {
+var init_chunk_SFSQ7NKP = __esm({
+  "../shared/dist/chunk-SFSQ7NKP.js"() {
     "use strict";
     init_zod();
     init_zod();
@@ -4519,11 +4557,56 @@ function localBakeSudoersCommands(k3sPath) {
     return `${k3sPath} ctr ${command.args.join(" ")}${suffix}`;
   });
 }
-var ACHIEVEMENT_RARITIES, RISK_LEVELS, riskLevelSchema, DEFAULT_RISK_LEVELS, LEVEL_BY_VALUE, ACTIVE_WORK_STATUSES, IDENTIFIED_WORK_STATUSES, DEFAULT_TASK_STATUS_COLOR, DEFAULT_TASK_STATUS_COLOR_INT, MAX_FILE_SIZE_BYTES, MAX_FILE_TAGS, MAX_FILE_TAG_LENGTH, ALLOWED_FILE_MIME_TYPES, ALLOWED_FILE_ACCEPT, EMBED_THRESHOLD_IMAGES, EMBED_THRESHOLD_TEXT, IDLE_HEARTBEAT_MS, TurnEndToolCallSchema, AgentTurnUsageSchema, KnownAgentEventSchema, AgentEventSchema, PtyChatAtSchema, PtyChatTurnUsageSchema, PtyChatTurnFileSchema, PTY_CHAT_TURN_FILES_MAX, PtyChatEventPayloadSchema, PtyChatEventRequestSchema, PtyChatAttachRequestSchema, PTY_EFFORT_LEVELS, SetPtyModelEffortRequestSchema, cardDescription, AgentHeartbeatSchema, CreatePRInputSchema, PostToChatInputSchema, GetTaskContextRequestSchema, GetChatMessagesRequestSchema, GetTaskFilesRequestSchema, GetTaskFileRequestSchema, DeleteTaskFileRequestSchema, SetTaskFileShowcaseRequestSchema, GetTaskRequestSchema, GetCliHistoryRequestSchema, ListSubtasksRequestSchema, GetDependenciesRequestSchema, GetSuggestionsRequestSchema, ListManualTestsRequestSchema, QueryManualTestsRequestSchema, CreatePullRequestRequestSchema, RequestFileUploadRequestSchema, ConfirmFileUploadRequestSchema, UpdateTaskStatusRequestSchema, StoreSessionIdRequestSchema, SetManualTestsRequestSchema, EditManualTestRequestSchema, RemoveManualTestRequestSchema, ApproveManualTestRequestSchema, RejectManualTestRequestSchema, SessionStartRequestSchema, SessionStopRequestSchema, EndReviewSessionRequestSchema, ConnectAgentRequestSchema, ReportAgentStatusRequestSchema, NotifyAgentVersionRequestSchema, DiscoveredPortSchema, ReportDiscoveredPortsRequestSchema, ReportBootMilestoneRequestSchema, CreateSubtaskRequestSchema, UpdateSubtaskRequestSchema, DeleteSubtaskRequestSchema, SetSubtaskParentRequestSchema, GetTaskPropertiesRequestSchema, UpdateTaskFieldsRequestSchema, UpdateTaskPropertiesRequestSchema, ListIconsRequestSchema, GenerateTaskIconRequestSchema, SearchFaIconsRequestSchema, PickFaIconRequestSchema, CreateFollowUpTaskRequestSchema, AddDependencyRequestSchema, RemoveDependencyRequestSchema, CreateSuggestionRequestSchema, VoteSuggestionRequestSchema, TriggerIdentificationRequestSchema, HandoffToImplementerRequestSchema, SubmitCodeReviewResultRequestSchema, CycleCodingAgentKeyRequestSchema, PostChildChatMessageRequestSchema, UpdateChildStatusRequestSchema, GetAgentStatusRequestSchema, GetUiCliHistoryRequestSchema, GetActivePtySessionRequestSchema, ListActivePtySessionsRequestSchema, SendSoftStopRequestSchema, StopTaskSessionRequestSchema, FlushTaskQueueRequestSchema, CancelTaskQueuedMessageRequestSchema, FlushSingleQueuedMessageRequestSchema, AnswerAgentQuestionRequestSchema, ClearAgentTodosRequestSchema, AgentQuestionOptionSchema, AgentQuestionSchema, AskUserQuestionRequestSchema, PostAgentMessageRequestSchema, EmitAgentEventRequestSchema, RefreshGithubTokenRequestSchema, ReportCredentialFailureRequestSchema, ReportReviewSpawnFailureRequestSchema, ReportBuilderSpawnFailureRequestSchema, SpawnTaskSessionRequestSchema, StartCodeReviewRequestSchema, StopCodeReviewRequestSchema, ReportSessionSpawnFailureRequestSchema, RefreshGithubTokenResponseSchema, PTY_FRAME_MAX_CHARS, PTY_MAX_DIMENSION, PtyOutputRequestSchema, PtyEndedRequestSchema, PtyInputRequestSchema, PtyResizeRequestSchema, PtyAttachRequestSchema, ReportPtyStreamRequestSchema, ReportPtyInputRequestSchema, GetPtyStreamEndpointRequestSchema, CreatePRResponseSchema, PostToChatResponseSchema, UpdateTaskStatusResponseSchema, StoreSessionIdResponseSchema, HeartbeatResponseSchema, SessionStartResponseSchema, SessionStopResponseSchema, DeleteSubtaskResponseSchema, ParkOnCheckResultRequestSchema, GIT_BRANCH_NAME_MAX, GIT_BRANCH_NAME_MESSAGE, ALLOWED_REF, cardDescription2, ListAccessibleProjectsRequestSchema, ListProjectTasksRequestSchema, GetProjectTaskRequestSchema, SearchProjectTasksRequestSchema, ListProjectTagsRequestSchema, GetProjectTagRequestSchema, ListProjectTagAttachmentsRequestSchema, SetProjectFileTagsRequestSchema, GetProjectSummaryRequestSchema, GetProjectOnboardingStatusRequestSchema, GetProjectOnboardingStepRequestSchema, GetProjectConnectUrlsRequestSchema, conveyorCapabilitySchema, GetConnectionContextRequestSchema, VerifyConnectionRequestSchema, ListAccessibleSubprojectsRequestSchema, CreateProjectTaskRequestSchema, SetProjectTaskParentRequestSchema, UpdateProjectTaskRequestSchema, TransitionProjectTaskStatusRequestSchema, MoveProjectCardRequestSchema, PostToProjectTaskChatRequestSchema, GetProjectTaskCliRequestSchema, GetProjectTaskSessionsRequestSchema, QueryProjectGcpLogsRequestSchema, QueryProjectGrafanaLogsRequestSchema, driveFileNameSchema, DRIVE_MAX_CONTENT_CHARS, ListProjectDriveFilesRequestSchema, ReadProjectDriveFileRequestSchema, CreateProjectDriveFileRequestSchema, UpdateProjectDriveFileRequestSchema, DeleteProjectDriveFileRequestSchema, CreateProjectDriveFolderRequestSchema, StartProjectBuildRequestSchema, StopProjectBuildRequestSchema, StartProjectWorkspaceRequestSchema, StopProjectWorkspaceRequestSchema, ListMyLiveSessionsRequestSchema, ListProjectSessionGroupsRequestSchema, ListMyLiveSessionsAcrossProjectsRequestSchema, ListSessionGroupsAcrossProjectsRequestSchema, GetProjectAvailableTuisRequestSchema, StartAdhocSessionRequestSchema, StopAdhocSessionRequestSchema, ResumeAdhocSessionRequestSchema, RefreshCodingAgentKeyUsageRequestSchema, ListKeysToProbeRequestSchema, CreateProjectReleaseRequestSchema, AddTasksToProjectReleaseRequestSchema, ApproveProjectMergePRRequestSchema, ListProjectSubtasksRequestSchema, CreateProjectSubtaskRequestSchema, UpdateProjectSubtaskRequestSchema, DeleteProjectSubtaskRequestSchema, GetProjectTaskChatRequestSchema, AddProjectTaskDependencyRequestSchema, RemoveProjectTaskDependencyRequestSchema, VoteProjectSuggestionRequestSchema, GetProjectTaskDependenciesRequestSchema, CreateProjectPullRequestRequestSchema, ListProjectMembersRequestSchema, AddProjectTaskReviewerRequestSchema, RemoveProjectTaskReviewerRequestSchema, ListProjectManualTestsRequestSchema, QueryProjectManualTestsRequestSchema, SetProjectManualTestsRequestSchema, EditProjectManualTestRequestSchema, RemoveProjectManualTestRequestSchema, ApproveProjectManualTestRequestSchema, RejectProjectManualTestRequestSchema, CreateProjectSuggestionRequestSchema, ListProjectChannelsRequestSchema, READ_CHANNEL_MESSAGES_MAX_LIMIT, ReadChannelMessagesRequestSchema, POST_CHANNEL_MESSAGE_MAX_CHARS, PostChannelMessageRequestSchema, GET_ANALYTICS_SUMMARY_MAX_RANGE_DAYS, GetProjectAnalyticsSummaryRequestSchema, ListProjectTaskFilesRequestSchema, GetProjectAttachmentRequestSchema, DeleteProjectTaskFileRequestSchema, SetProjectTaskFileShowcaseRequestSchema, RequestProjectFileUploadRequestSchema, ConfirmProjectFileUploadRequestSchema, RequestWorkspaceRecycleRequestSchema, ReportApiOutageRequestSchema, CONTEXT_LINK_LOCATOR_MAX, TAG_DESCRIPTION_MAX, TAG_OVERVIEW_MAX, TAG_REASON_MAX, ProjectTagContextPathSchema, hexColor, overviewPathSchema, CreateProjectTagRequestSchema, UpdateProjectTagRequestSchema, PostToProjectChatRequestSchema, StartTagAuditRequestSchema, StartTaskAuditRequestSchema, GetActiveAuditSessionsRequestSchema, ReportTaskAuditResultRequestSchema, GetTaskAuditsRequestSchema, GetTaskAuditRequestSchema, GetTaskAuditAggregatesRequestSchema, DeleteTaskAuditRequestSchema, MarkInitialPromptSubmittedRequestSchema, PERSONAL_CLUSTER_EVENTS, PERSONAL_CLUSTER_HEARTBEAT_INTERVAL_MS, DECISION_STATUS_LABELS, DECISION_OPTION_KINDS, DECISION_VOTE_SOURCES, DECISION_OPTIONS_MIN, DECISION_OPTIONS_MAX, DECISION_OPTION_LABEL_MAX, DECISION_QUESTION_MAX, DECISION_RESOLUTION_MAX, DECISION_VOTE_REASON_MAX, DECISION_DEADLINE_MIN_HOURS, DECISION_DEADLINE_MAX_DAYS, DECISION_DEADLINE_MAX_HOURS, DECISION_LIST_MAX_LIMIT, decisionIdSchema, optionInputSchema, optionsArraySchema, CreateDecisionRequestSchema, VoteDecisionRequestSchema, RemoveDecisionVoteRequestSchema, ResolveDecisionRequestSchema, CancelDecisionRequestSchema, BulkDecisionIdsRequestSchema, ReopenDecisionRequestSchema, UpdateDecisionRequestSchema, GetDecisionRequestSchema, ListDecisionsRequestSchema, optionInput, optionsInput, deadlineHours, CreateProjectDecisionRequestSchema, ListProjectDecisionsRequestSchema, GetProjectDecisionRequestSchema, VoteProjectDecisionRequestSchema, ResolveProjectDecisionRequestSchema, UpdateProjectDecisionRequestSchema, EVALUATE_MAX_QUESTIONS, EVALUATE_MAX_ITEMS, EVALUATE_ITEM_MAX_CHARS, EVALUATE_REQUEST_MAX_CHARS, TEXT_MAX, QUESTION_KEY, EvaluateQuestionSchema, EvaluateQuestionsRequestSchema, MEETING_CHECKLIST_TITLE_MAX, MEETING_TRANSCRIPT_MAX_CHARS, MEETING_TITLE_MAX, MEETING_OCCURRED_AT_MIN_YEAR, MEETING_OCCURRED_AT_MAX_FUTURE_MS, OCCURRED_AT_RANGE_MESSAGE, MeetingOccurredAtSchema, CreateMeetingFromTranscriptRequestSchema, GetMeetingRequestSchema, UpdateMeetingRequestSchema, RegenerateMeetingSummaryRequestSchema, DeleteMeetingRequestSchema, checklistTitle, ListMeetingChecklistRequestSchema, AddMeetingChecklistItemsRequestSchema, UpdateMeetingChecklistItemRequestSchema, DeleteMeetingChecklistItemRequestSchema, SetMeetingChecklistItemCheckedRequestSchema, ListMeetingsRequestSchema, ReadMeetingTranscriptRequestSchema, MEETING_SUMMARY_MAX_CHARS, AddProjectMeetingChecklistItemsRequestSchema, CheckProjectMeetingChecklistItemRequestSchema, EditProjectMeetingChecklistItemRequestSchema, RemoveProjectMeetingChecklistItemRequestSchema, CreateProjectMeetingRequestSchema, UpdateProjectMeetingRequestSchema, TASK_CHAT_HISTORY_LIMIT, PM_CHAT_HISTORY_LIMIT, AGENT_CHAT_HISTORY_FETCH_LIMIT, ANTHROPIC_CATALOG, CLAUDESPACE_WORKLOAD_LABEL, CLAUDESPACE_WORKLOAD_VALUE, CONVEYOR_POD_SELECTOR, CONTAINERD_K8S_NAMESPACE, CONTAINERD_PIN_LABEL, CONVEYOR_CONTENT_HASH_LABEL, VM_IMPORT_DISCOVERY_DIR, LOCAL_BAKE_ROOT_COMMANDS, PERSONAL_LOCAL_REGISTRY_NAMESPACE, PERSONAL_LOCAL_REGISTRY_NAME, PERSONAL_LOCAL_REGISTRY_PORT, PERSONAL_LOCAL_REGISTRY_HOST, PERSONAL_LOCAL_REGISTRY_NODE_ENDPOINT, BAKE_COMPONENT_LABEL, BAKE_COMPONENT_PREBAKE, BAKE_COMPONENT_STATE_BAKE, BAKE_COMPONENT_VALUES, PERSONAL_BAKE_NAMESPACE, MS_PER_DAY, POSTGRES_ENV, FIREBASE_EMULATOR_COMMAND, FIREBASE_EMULATOR_ENV, CATALOG, SERVICE_DEFINITIONS, SUPPORTED_CLAUDESPACE_DEPS, STATEFUL_BAKE_DEPS, MIRRORABLE_SIDECARS, LEVELS_PER_BAND, PRESTIGE_TIERS, TOP_PRESTIGE_BAND, CARD_TYPE_SURFACE, surfaceTypes, BOARD_CARD_TYPES, REPORT_CARD_TYPES, DECISION_CARD_TYPES;
+function relayAllowanceGiB(relaySlots = BASE_RELAY_SLOTS) {
+  return Math.max(0, relaySlots - BASE_RELAY_SLOTS) * RELAY_RSS_ALLOWANCE_MIB / 1024;
+}
+function vmHostMemoryGiB(guestGiB, relaySlots = BASE_RELAY_SLOTS) {
+  return guestGiB + Math.max(1, guestGiB / 4) + relayAllowanceGiB(relaySlots);
+}
+function maximumGuestMemoryGiBWithin(budgetGiB, relaySlots = BASE_RELAY_SLOTS) {
+  const guestBudget = budgetGiB - relayAllowanceGiB(relaySlots);
+  if (!Number.isFinite(guestBudget) || guestBudget <= 0) return 0;
+  return Math.max(0, Math.floor(Math.min(guestBudget - 1, guestBudget / 1.25)));
+}
+function vmMemoryBudgetGiB(hostMemoryGiB) {
+  return hostMemoryGiB * VM_HOST_MEMORY_SHARE;
+}
+function vmCpuBudget(hostCpus) {
+  return Math.max(1, hostCpus - 1);
+}
+function recommendedVmSize(hostMemoryGiB, hostCpus) {
+  return {
+    cpus: defaultCpus(hostCpus),
+    memoryGiB: Math.min(
+      VM_DEFAULT_MEMORY_CAP_GIB,
+      maximumGuestMemoryGiBWithin(vmMemoryBudgetGiB(hostMemoryGiB))
+    )
+  };
+}
+function defaultCpus(hostCpus) {
+  if (!Number.isFinite(hostCpus) || hostCpus < 1) return 0;
+  const cores = Math.floor(hostCpus);
+  return Math.min(VM_DEFAULT_CPU_CAP, vmCpuBudget(cores), Math.max(2, cores - 2));
+}
+function podsThatFit(size) {
+  const memory = size.memoryGiB - GUEST_SYSTEM_RESERVE_GIB;
+  const cpu = size.cpus - GUEST_SYSTEM_RESERVE_CPU;
+  const fit = (preset) => Math.max(0, Math.floor(Math.min(memory / preset.memory, cpu / preset.cpu) + 1e-9));
+  return { medium: fit(POD_SIZE_PRESETS.medium), small: fit(POD_SIZE_PRESETS.small) };
+}
+function smallestVmFor(pod) {
+  const preset = POD_SIZE_PRESETS[pod];
+  return {
+    cpus: Math.ceil(preset.cpu + GUEST_SYSTEM_RESERVE_CPU),
+    memoryGiB: Math.ceil(preset.memory + GUEST_SYSTEM_RESERVE_GIB)
+  };
+}
+var ACHIEVEMENT_RARITIES, RISK_LEVELS, riskLevelSchema, DEFAULT_RISK_LEVELS, LEVEL_BY_VALUE, ACTIVE_WORK_STATUSES, IDENTIFIED_WORK_STATUSES, DEFAULT_TASK_STATUS_COLOR, DEFAULT_TASK_STATUS_COLOR_INT, MAX_FILE_SIZE_BYTES, MAX_FILE_TAGS, MAX_FILE_TAG_LENGTH, ALLOWED_FILE_MIME_TYPES, ALLOWED_FILE_ACCEPT, EMBED_THRESHOLD_IMAGES, EMBED_THRESHOLD_TEXT, IDLE_HEARTBEAT_MS, siteAssetExtension, RequestSiteAssetUploadRequestSchema, ListSiteAssetTargetsRequestSchema, TurnEndToolCallSchema, AgentTurnUsageSchema, KnownAgentEventSchema, AgentEventSchema, PtyChatAtSchema, PtyChatTurnUsageSchema, PtyChatTurnFileSchema, PTY_CHAT_TURN_FILES_MAX, PtyChatEventPayloadSchema, PtyChatEventRequestSchema, PtyChatAttachRequestSchema, PTY_EFFORT_LEVELS, SetPtyModelEffortRequestSchema, cardDescription, AgentHeartbeatSchema, CreatePRInputSchema, PostToChatInputSchema, GetTaskContextRequestSchema, GetChatMessagesRequestSchema, GetTaskFilesRequestSchema, GetTaskFileRequestSchema, DeleteTaskFileRequestSchema, SetTaskFileShowcaseRequestSchema, GetTaskRequestSchema, GetCliHistoryRequestSchema, ListSubtasksRequestSchema, GetDependenciesRequestSchema, GetSuggestionsRequestSchema, ListManualTestsRequestSchema, QueryManualTestsRequestSchema, CreatePullRequestRequestSchema, RequestFileUploadRequestSchema, ConfirmFileUploadRequestSchema, UpdateTaskStatusRequestSchema, StoreSessionIdRequestSchema, SetManualTestsRequestSchema, EditManualTestRequestSchema, RemoveManualTestRequestSchema, ApproveManualTestRequestSchema, RejectManualTestRequestSchema, SessionStartRequestSchema, SessionStopRequestSchema, EndReviewSessionRequestSchema, ConnectAgentRequestSchema, ReportAgentStatusRequestSchema, NotifyAgentVersionRequestSchema, DiscoveredPortSchema, ReportDiscoveredPortsRequestSchema, CreateSubtaskRequestSchema, UpdateSubtaskRequestSchema, DeleteSubtaskRequestSchema, SetSubtaskParentRequestSchema, GetTaskPropertiesRequestSchema, UpdateTaskFieldsRequestSchema, UpdateTaskPropertiesRequestSchema, ListIconsRequestSchema, GenerateTaskIconRequestSchema, SearchFaIconsRequestSchema, PickFaIconRequestSchema, CreateFollowUpTaskRequestSchema, AddDependencyRequestSchema, RemoveDependencyRequestSchema, CreateSuggestionRequestSchema, VoteSuggestionRequestSchema, TriggerIdentificationRequestSchema, HandoffToImplementerRequestSchema, SubmitCodeReviewResultRequestSchema, CycleCodingAgentKeyRequestSchema, PostChildChatMessageRequestSchema, UpdateChildStatusRequestSchema, GetAgentStatusRequestSchema, GetUiCliHistoryRequestSchema, GetActivePtySessionRequestSchema, ListActivePtySessionsRequestSchema, SendSoftStopRequestSchema, StopTaskSessionRequestSchema, FlushTaskQueueRequestSchema, CancelTaskQueuedMessageRequestSchema, FlushSingleQueuedMessageRequestSchema, AnswerAgentQuestionRequestSchema, ClearAgentTodosRequestSchema, AgentQuestionOptionSchema, AgentQuestionSchema, AskUserQuestionRequestSchema, PostAgentMessageRequestSchema, EmitAgentEventRequestSchema, RefreshGithubTokenRequestSchema, ReportCredentialFailureRequestSchema, ReportReviewSpawnFailureRequestSchema, ReportBuilderSpawnFailureRequestSchema, SpawnTaskSessionRequestSchema, StartCodeReviewRequestSchema, StopCodeReviewRequestSchema, ReportSessionSpawnFailureRequestSchema, RefreshGithubTokenResponseSchema, PTY_FRAME_MAX_CHARS, PTY_MAX_DIMENSION, PtyOutputRequestSchema, PtyEndedRequestSchema, PtyInputRequestSchema, PtyResizeRequestSchema, PtyAttachRequestSchema, ReportPtyStreamRequestSchema, ReportPtyInputRequestSchema, GetPtyStreamEndpointRequestSchema, CreatePRResponseSchema, PostToChatResponseSchema, UpdateTaskStatusResponseSchema, StoreSessionIdResponseSchema, HeartbeatResponseSchema, SessionStartResponseSchema, SessionStopResponseSchema, DeleteSubtaskResponseSchema, ParkOnCheckResultRequestSchema, GIT_BRANCH_NAME_MAX, GIT_BRANCH_NAME_MESSAGE, ALLOWED_REF, cardDescription2, ListAccessibleProjectsRequestSchema, ListProjectTasksRequestSchema, GetProjectTaskRequestSchema, SearchProjectTasksRequestSchema, ListProjectTagsRequestSchema, GetProjectTagRequestSchema, ListProjectTagAttachmentsRequestSchema, SetProjectFileTagsRequestSchema, GetProjectSummaryRequestSchema, GetProjectOnboardingStatusRequestSchema, GetProjectOnboardingStepRequestSchema, GetProjectConnectUrlsRequestSchema, conveyorCapabilitySchema, GetConnectionContextRequestSchema, VerifyConnectionRequestSchema, ListAccessibleSubprojectsRequestSchema, CreateProjectTaskRequestSchema, SetProjectTaskParentRequestSchema, UpdateProjectTaskRequestSchema, TransitionProjectTaskStatusRequestSchema, MoveProjectCardRequestSchema, PostToProjectTaskChatRequestSchema, GetProjectTaskCliRequestSchema, GetProjectTaskSessionsRequestSchema, QueryProjectGcpLogsRequestSchema, QueryProjectGrafanaLogsRequestSchema, driveFileNameSchema, DRIVE_MAX_CONTENT_CHARS, ListProjectDriveFilesRequestSchema, ReadProjectDriveFileRequestSchema, CreateProjectDriveFileRequestSchema, UpdateProjectDriveFileRequestSchema, DeleteProjectDriveFileRequestSchema, CreateProjectDriveFolderRequestSchema, StartProjectBuildRequestSchema, StopProjectBuildRequestSchema, StartProjectWorkspaceRequestSchema, StopProjectWorkspaceRequestSchema, ListMyLiveSessionsRequestSchema, ListProjectSessionGroupsRequestSchema, ListMyLiveSessionsAcrossProjectsRequestSchema, ListSessionGroupsAcrossProjectsRequestSchema, GetProjectAvailableTuisRequestSchema, StartAdhocSessionRequestSchema, StopAdhocSessionRequestSchema, ResumeAdhocSessionRequestSchema, RefreshCodingAgentKeyUsageRequestSchema, ListKeysToProbeRequestSchema, CreateProjectReleaseRequestSchema, AddTasksToProjectReleaseRequestSchema, ApproveProjectMergePRRequestSchema, ListProjectSubtasksRequestSchema, CreateProjectSubtaskRequestSchema, UpdateProjectSubtaskRequestSchema, DeleteProjectSubtaskRequestSchema, GetProjectTaskChatRequestSchema, AddProjectTaskDependencyRequestSchema, RemoveProjectTaskDependencyRequestSchema, VoteProjectSuggestionRequestSchema, GetProjectTaskDependenciesRequestSchema, CreateProjectPullRequestRequestSchema, ListProjectMembersRequestSchema, AddProjectTaskReviewerRequestSchema, RemoveProjectTaskReviewerRequestSchema, ListProjectManualTestsRequestSchema, QueryProjectManualTestsRequestSchema, SetProjectManualTestsRequestSchema, EditProjectManualTestRequestSchema, RemoveProjectManualTestRequestSchema, ApproveProjectManualTestRequestSchema, RejectProjectManualTestRequestSchema, CreateProjectSuggestionRequestSchema, ListProjectChannelsRequestSchema, READ_CHANNEL_MESSAGES_MAX_LIMIT, ReadChannelMessagesRequestSchema, POST_CHANNEL_MESSAGE_MAX_CHARS, PostChannelMessageRequestSchema, GET_ANALYTICS_SUMMARY_MAX_RANGE_DAYS, GetProjectAnalyticsSummaryRequestSchema, ListProjectTaskFilesRequestSchema, GetProjectAttachmentRequestSchema, DeleteProjectTaskFileRequestSchema, SetProjectTaskFileShowcaseRequestSchema, RequestProjectFileUploadRequestSchema, ConfirmProjectFileUploadRequestSchema, RequestWorkspaceRecycleRequestSchema, ReportApiOutageRequestSchema, CONTEXT_LINK_LOCATOR_MAX, TAG_DESCRIPTION_MAX, TAG_OVERVIEW_MAX, TAG_REASON_MAX, ProjectTagContextPathSchema, hexColor, overviewPathSchema, CreateProjectTagRequestSchema, UpdateProjectTagRequestSchema, PostToProjectChatRequestSchema, StartTagAuditRequestSchema, StartTaskAuditRequestSchema, GetActiveAuditSessionsRequestSchema, ReportTaskAuditResultRequestSchema, GetTaskAuditsRequestSchema, GetTaskAuditRequestSchema, GetTaskAuditAggregatesRequestSchema, DeleteTaskAuditRequestSchema, MarkInitialPromptSubmittedRequestSchema, PERSONAL_CLUSTER_EVENTS, PERSONAL_CLUSTER_HEARTBEAT_INTERVAL_MS, DECISION_STATUS_LABELS, DECISION_OPTION_KINDS, DECISION_VOTE_SOURCES, DECISION_OPTIONS_MIN, DECISION_OPTIONS_MAX, DECISION_OPTION_LABEL_MAX, DECISION_QUESTION_MAX, DECISION_RESOLUTION_MAX, DECISION_VOTE_REASON_MAX, DECISION_DEADLINE_MIN_HOURS, DECISION_DEADLINE_MAX_DAYS, DECISION_DEADLINE_MAX_HOURS, DECISION_LIST_MAX_LIMIT, decisionIdSchema, optionInputSchema, optionsArraySchema, CreateDecisionRequestSchema, VoteDecisionRequestSchema, RemoveDecisionVoteRequestSchema, ResolveDecisionRequestSchema, CancelDecisionRequestSchema, BulkDecisionIdsRequestSchema, ReopenDecisionRequestSchema, UpdateDecisionRequestSchema, GetDecisionRequestSchema, ListDecisionsRequestSchema, optionInput, optionsInput, deadlineHours, CreateProjectDecisionRequestSchema, ListProjectDecisionsRequestSchema, GetProjectDecisionRequestSchema, VoteProjectDecisionRequestSchema, ResolveProjectDecisionRequestSchema, UpdateProjectDecisionRequestSchema, EVALUATE_MAX_QUESTIONS, EVALUATE_MAX_ITEMS, EVALUATE_ITEM_MAX_CHARS, EVALUATE_REQUEST_MAX_CHARS, TEXT_MAX, QUESTION_KEY, EvaluateQuestionSchema, EvaluateQuestionsRequestSchema, MEETING_CHECKLIST_TITLE_MAX, MEETING_TRANSCRIPT_MAX_CHARS, MEETING_TITLE_MAX, MEETING_OCCURRED_AT_MIN_YEAR, MEETING_OCCURRED_AT_MAX_FUTURE_MS, OCCURRED_AT_RANGE_MESSAGE, MeetingOccurredAtSchema, CreateMeetingFromTranscriptRequestSchema, GetMeetingRequestSchema, UpdateMeetingRequestSchema, RegenerateMeetingSummaryRequestSchema, DeleteMeetingRequestSchema, checklistTitle, ListMeetingChecklistRequestSchema, AddMeetingChecklistItemsRequestSchema, UpdateMeetingChecklistItemRequestSchema, DeleteMeetingChecklistItemRequestSchema, SetMeetingChecklistItemCheckedRequestSchema, ListMeetingsRequestSchema, ReadMeetingTranscriptRequestSchema, MEETING_SUMMARY_MAX_CHARS, AddProjectMeetingChecklistItemsRequestSchema, CheckProjectMeetingChecklistItemRequestSchema, EditProjectMeetingChecklistItemRequestSchema, RemoveProjectMeetingChecklistItemRequestSchema, CreateProjectMeetingRequestSchema, UpdateProjectMeetingRequestSchema, TASK_CHAT_HISTORY_LIMIT, PM_CHAT_HISTORY_LIMIT, AGENT_CHAT_HISTORY_FETCH_LIMIT, ANTHROPIC_CATALOG, PROJECT_ARCHIVE_RETENTION_DAYS, RETENTION_MS, CLAUDESPACE_WORKLOAD_LABEL, CLAUDESPACE_WORKLOAD_VALUE, CONVEYOR_POD_SELECTOR, CONTAINERD_K8S_NAMESPACE, CONTAINERD_PIN_LABEL, CONVEYOR_CONTENT_HASH_LABEL, VM_IMPORT_DISCOVERY_DIR, LOCAL_BAKE_ROOT_COMMANDS, PERSONAL_LOCAL_REGISTRY_NAMESPACE, PERSONAL_LOCAL_REGISTRY_NAME, PERSONAL_LOCAL_REGISTRY_PORT, PERSONAL_LOCAL_REGISTRY_HOST, PERSONAL_LOCAL_REGISTRY_NODE_ENDPOINT, PERSONAL_LOCAL_REGISTRY_PUSH_SECRET, PERSONAL_LOCAL_REGISTRY_PUSH_SECRET_KEY, BAKE_COMPONENT_LABEL, BAKE_COMPONENT_PREBAKE, BAKE_COMPONENT_STATE_BAKE, BAKE_COMPONENT_VALUES, PERSONAL_BAKE_NAMESPACE, MS_PER_DAY, POSTGRES_ENV, FIREBASE_EMULATOR_COMMAND, FIREBASE_EMULATOR_ENV, CATALOG, SERVICE_DEFINITIONS, SUPPORTED_CLAUDESPACE_DEPS, STATEFUL_BAKE_DEPS, MIRRORABLE_SIDECARS, LEVELS_PER_BAND, PRESTIGE_TIERS, TOP_PRESTIGE_BAND, POD_SIZE_PRESETS, VM_HOST_MEMORY_SHARE, RELAY_RSS_ALLOWANCE_MIB, BASE_RELAY_SLOTS, VM_DEFAULT_MEMORY_CAP_GIB, VM_DEFAULT_CPU_CAP, GUEST_SYSTEM_RESERVE_GIB, GUEST_SYSTEM_RESERVE_CPU, CARD_TYPE_SURFACE, surfaceTypes, BOARD_CARD_TYPES, REPORT_CARD_TYPES, DECISION_CARD_TYPES;
 var init_dist = __esm({
   "../shared/dist/index.js"() {
     "use strict";
-    init_chunk_VSUBG7GR();
+    init_chunk_SFSQ7NKP();
+    init_zod();
     init_zod();
     init_zod();
     init_zod();
@@ -4645,6 +4728,15 @@ var init_dist = __esm({
     EMBED_THRESHOLD_IMAGES = 5 * 1024 * 1024;
     EMBED_THRESHOLD_TEXT = 2 * 1024 * 1024;
     IDLE_HEARTBEAT_MS = 90 * 1e3;
+    siteAssetExtension = external_exports.string().regex(/^[a-z0-9]{1,10}$/);
+    RequestSiteAssetUploadRequestSchema = external_exports.object({
+      projectId: external_exports.string(),
+      siteId: external_exports.string().min(1).max(100),
+      sha256: external_exports.string().regex(/^[a-f0-9]{64}$/),
+      ext: siteAssetExtension,
+      sizeBytes: external_exports.number().int().positive()
+    });
+    ListSiteAssetTargetsRequestSchema = external_exports.object({ projectId: external_exports.string() });
     TurnEndToolCallSchema = external_exports.object({
       tool: external_exports.string(),
       input: external_exports.string().optional(),
@@ -4936,7 +5028,9 @@ var init_dist = __esm({
     GetTaskFileRequestSchema = external_exports.object({
       sessionId: external_exports.string(),
       fileId: external_exports.string(),
-      taskId: external_exports.string().optional()
+      taskId: external_exports.string().optional(),
+      /** Ask for a short-lived `agentDownloadUrl` when the bytes are not inlined. */
+      agentDownload: external_exports.boolean().optional()
     });
     DeleteTaskFileRequestSchema = external_exports.object({
       sessionId: external_exports.string(),
@@ -5076,10 +5170,6 @@ var init_dist = __esm({
       sessionId: external_exports.string(),
       ports: external_exports.array(DiscoveredPortSchema).max(64)
     });
-    ReportBootMilestoneRequestSchema = external_exports.object({
-      sessionId: external_exports.string(),
-      key: external_exports.string().max(64)
-    });
     CreateSubtaskRequestSchema = external_exports.object({
       sessionId: external_exports.string(),
       title: external_exports.string().min(1),
@@ -6532,6 +6622,8 @@ var init_dist = __esm({
       anthropicEntry(DEFAULT_HAIKU_MODEL, "Haiku 4.5", 1, 5, { supportsEffort: false }),
       anthropicEntry(FABLE_MODEL, "Fable 5.1", 10, 50)
     ];
+    PROJECT_ARCHIVE_RETENTION_DAYS = 30;
+    RETENTION_MS = PROJECT_ARCHIVE_RETENTION_DAYS * 24 * 60 * 60 * 1e3;
     CLAUDESPACE_WORKLOAD_LABEL = "rc-workload";
     CLAUDESPACE_WORKLOAD_VALUE = "claudespace";
     CONVEYOR_POD_SELECTOR = `${CLAUDESPACE_WORKLOAD_LABEL}=${CLAUDESPACE_WORKLOAD_VALUE}`;
@@ -6556,6 +6648,8 @@ var init_dist = __esm({
     PERSONAL_LOCAL_REGISTRY_PORT = 5e3;
     PERSONAL_LOCAL_REGISTRY_HOST = `${PERSONAL_LOCAL_REGISTRY_NAME}.${PERSONAL_LOCAL_REGISTRY_NAMESPACE}.svc.cluster.local:${PERSONAL_LOCAL_REGISTRY_PORT}`;
     PERSONAL_LOCAL_REGISTRY_NODE_ENDPOINT = `http://127.0.0.1:${PERSONAL_LOCAL_REGISTRY_PORT}`;
+    PERSONAL_LOCAL_REGISTRY_PUSH_SECRET = "conveyor-registry-push";
+    PERSONAL_LOCAL_REGISTRY_PUSH_SECRET_KEY = "config.json";
     BAKE_COMPONENT_LABEL = "claudespace.rallycry.com/component";
     BAKE_COMPONENT_PREBAKE = "prebake";
     BAKE_COMPONENT_STATE_BAKE = "state-bake";
@@ -6862,6 +6956,18 @@ exec firebase emulators:start --only=auth --project=rally-cry-dev`
       minLevel: (index + 1) * LEVELS_PER_BAND
     }));
     TOP_PRESTIGE_BAND = PRESTIGE_TIERS.length;
+    POD_SIZE_PRESETS = {
+      small: { cpu: 1.25, memory: 7, cpuLimit: 3 },
+      medium: { cpu: 2.25, memory: 14, cpuLimit: 7 },
+      large: { cpu: 2.4, memory: 15.5, cpuLimit: 9.5 }
+    };
+    VM_HOST_MEMORY_SHARE = 0.75;
+    RELAY_RSS_ALLOWANCE_MIB = 128;
+    BASE_RELAY_SLOTS = 16;
+    VM_DEFAULT_MEMORY_CAP_GIB = 32;
+    VM_DEFAULT_CPU_CAP = 8;
+    GUEST_SYSTEM_RESERVE_GIB = 1.5;
+    GUEST_SYSTEM_RESERVE_CPU = 0.25;
     CARD_TYPE_SURFACE = {
       task: "board",
       chat: "board",
@@ -7519,23 +7625,10 @@ var init_host_state = __esm({
 });
 
 // src/vm/memory-budget.ts
-function relayAllowanceGiB(relaySlots = BASE_RELAY_SLOTS) {
-  return Math.max(0, relaySlots - BASE_RELAY_SLOTS) * RELAY_RSS_ALLOWANCE_MIB / 1024;
-}
-function vmHostMemoryGiB(guestGiB, relaySlots = BASE_RELAY_SLOTS) {
-  return guestGiB + Math.max(1, guestGiB / 4) + relayAllowanceGiB(relaySlots);
-}
-function maximumGuestMemoryGiBWithin(budgetGiB, relaySlots = BASE_RELAY_SLOTS) {
-  const guestBudget = budgetGiB - relayAllowanceGiB(relaySlots);
-  if (!Number.isFinite(guestBudget) || guestBudget <= 0) return 0;
-  return Math.max(0, Math.floor(Math.min(guestBudget - 1, guestBudget / 1.25)));
-}
-var RELAY_RSS_ALLOWANCE_MIB, BASE_RELAY_SLOTS;
 var init_memory_budget = __esm({
   "src/vm/memory-budget.ts"() {
     "use strict";
-    RELAY_RSS_ALLOWANCE_MIB = 128;
-    BASE_RELAY_SLOTS = 16;
+    init_dist();
   }
 });
 
@@ -7543,10 +7636,10 @@ var init_memory_budget = __esm({
 import { cpus, freemem, totalmem } from "os";
 import { stringify as stringify2 } from "yaml";
 function cpuBudget(hostCpus) {
-  return Math.max(1, hostCpus - 1);
+  return vmCpuBudget(hostCpus);
 }
 function memoryBudgetGiB(hostBytes) {
-  return hostBytes / GIB2 * 0.75;
+  return vmMemoryBudgetGiB(hostBytes / GIB2);
 }
 function reservedHostMemoryGiB(allocations2) {
   return allocations2.reduce(
@@ -7574,7 +7667,7 @@ function validateResources(resources, host = { cpus: cpus().length, memory: tota
     );
   }
   const hostGiB = vmHostMemoryGiB(memoryGiB, relaySlots) + reservedHostMemoryGiB(others);
-  if (!Number.isInteger(memoryGiB) || memoryGiB < 2 || hostGiB * GIB2 > host.memory * 0.75) {
+  if (!Number.isInteger(memoryGiB) || memoryGiB < 2 || hostGiB > memoryBudgetGiB(host.memory)) {
     throw new Error(
       `VM memory must be at least 2 GiB and leave 25% of host memory available, including QEMU and relay overhead.${sharedTotals(others, `${hostGiB.toFixed(1)} of ${memoryBudgetGiB(host.memory).toFixed(1)} GiB of host memory`)}${relayNote(relaySlots)}`
     );
@@ -7616,20 +7709,6 @@ function renderVmTemplate(arch, resources, dnsScript, firmware) {
     provision: [{ mode: "system", script: dnsScript }]
   });
 }
-function parseInstallUrl(value) {
-  const url = new URL(value.trim());
-  if (url.protocol !== "https:" || url.username || url.password || url.hash || url.port) {
-    throw new Error(
-      "Enrollment requires an HTTPS install URL on port 443 without userinfo or fragments."
-    );
-  }
-  if (!/^\/api\/personal-clusters\/[a-z0-9]+\/install\.sh$/.test(url.pathname)) {
-    throw new Error("Use the install URL from Personal Compute settings.");
-  }
-  if (!url.searchParams.get("token"))
-    throw new Error("Install URL is missing its enrollment token.");
-  return url;
-}
 function validateStartupMemory(memoryGiB, hostBytes = totalmem(), others = [], relaySlots) {
   const budgetGiB = memoryBudgetGiB(hostBytes) - reservedHostMemoryGiB(others);
   if (memoryGiB > maximumGuestMemoryGiBWithin(budgetGiB, relaySlots)) {
@@ -7642,6 +7721,7 @@ var GIB2, IMAGES;
 var init_config = __esm({
   "src/vm/config.ts"() {
     "use strict";
+    init_dist();
     init_memory_budget();
     init_instance_name();
     GIB2 = 1024 ** 3;
@@ -7754,7 +7834,7 @@ var init_host_env = __esm({
 });
 
 // src/vm/endpoints.ts
-var CONTROL_PLANE_HOSTS, DEFAULT_ENDPOINTS, GUEST_ENROLL, GUEST_CLI, TUNNEL_TCP;
+var CONTROL_PLANE_HOSTS, DEFAULT_ENDPOINTS, GUEST_CLI, TUNNEL_TCP;
 var init_endpoints = __esm({
   "src/vm/endpoints.ts"() {
     "use strict";
@@ -7815,15 +7895,6 @@ var init_endpoints = __esm({
       host,
       ports: host.endsWith(".ubuntu.com") || host === "deb.debian.org" ? [80, 443] : [443]
     }));
-    GUEST_ENROLL = `set -euo pipefail
-IFS= read -r install_url
-umask 077
-installer=$(mktemp /run/conveyor-installer.XXXXXX)
-trap 'rm -f "$installer"' EXIT
-curl --proto '=https' --tlsv1.2 --fail --silent --show-error --max-time 120 "$install_url" -o "$installer"
-unset install_url
-bash "$installer"
-`;
     GUEST_CLI = `set -euo pipefail
 set -a
 . /etc/conveyor/k3.env
@@ -8041,7 +8112,7 @@ var init_public_web = __esm({
 // src/vm/relay.ts
 import { kill } from "process";
 import { execFileSync } from "child_process";
-import { lstatSync as lstatSync2, mkdirSync, readFileSync as readFileSync3, rmSync, writeFileSync } from "fs";
+import { lstatSync as lstatSync2, mkdirSync, readFileSync as readFileSync4, rmSync, writeFileSync } from "fs";
 import { join as join3 } from "path";
 import { Socket } from "net";
 function validPid2(value) {
@@ -8082,7 +8153,7 @@ function stoppedSlotRecord(root, slot) {
   }
   try {
     const record2 = JSON.parse(
-      readFileSync3(join3(path, "owner.json"), "utf8")
+      readFileSync4(join3(path, "owner.json"), "utf8")
     );
     if (!validPid2(record2.pid)) throw new Error("missing process ID");
     return record2;
@@ -8153,7 +8224,7 @@ var init_host_packages = __esm({
       "firmware-x64": "ovmf",
       "firmware-arm64": "qemu-efi-aarch64"
     };
-    LIMA_INSTALL_HINT = "Lima 2.2+ (2.x) is not in apt: download lima-<version>-Linux-<x86_64|aarch64>.tar.gz from https://github.com/lima-vm/lima/releases and run sudo tar -C /usr/local -xzf <file> (or tar -C ~/.local -xzf <file>). The CLI searches ~/.local/bin, /usr/local/bin, and /usr/bin, not /home/linuxbrew.";
+    LIMA_INSTALL_HINT = "Lima 2.2+ (2.x) is not in apt: download lima-<version>-Linux-<x86_64|aarch64>.tar.gz from https://github.com/lima-vm/lima/releases and run tar -C ~/.local -xzf <file> (preferred) or sudo tar --no-same-owner --no-same-permissions -C /usr/local -xzf <file>; a plain sudo tar hands /usr/local/bin to the uid that built the archive. The CLI searches ~/.local/bin, /usr/local/bin, and /usr/bin, not /home/linuxbrew.";
   }
 });
 
@@ -8248,13 +8319,25 @@ async function findFirmware(qemu, arch, host, os) {
   const hint = packageHint(arch === "arm64" ? "firmware-arm64" : "firmware-x64", os);
   throw new Error(`Install QEMU UEFI firmware before creating the VM${hint ? `: ${hint}` : "."}`);
 }
-async function preflightHost(exec, paths, resources, host = realHost()) {
+async function warnOnForeignPrefixOwner(exec, log2) {
+  const result = await exec("/usr/bin/stat", ["-c", "%u %U %n", ...ROOT_OWNED_PREFIX]).catch(
+    () => void 0
+  );
+  const foreign = (result?.stdout ?? "").split("\n").map((line) => /^(\d+) (\S+) (\/\S*)$/.exec(line.trim())).filter((match) => !!match && match[1] !== "0").map(([, uid, name2, path]) => `${path} (uid ${uid}${name2 === "UNKNOWN" ? "" : `, ${name2}`})`);
+  if (foreign.length === 0) return;
+  log2(
+    `Warning: ${foreign.join(", ")} is not owned by root, so that account can replace programs root runs from /usr/local/bin. A sudo tar extraction without --no-same-owner causes this. Fix it with: sudo chown root:root ${ROOT_OWNED_PREFIX.join(" ")}`
+  );
+}
+async function preflightHost(exec, paths, resources, host = realHost(), log2 = () => {
+}) {
   if (!["darwin", "linux"].includes(host.platform) || host.uid === 0) {
     throw new Error("Run the VM launcher as an ordinary user on macOS or Linux, without sudo.");
   }
   const arch = vmArch(host.arch);
   const os = host.platform === "linux" ? await host.osRelease() : void 0;
   if (host.platform === "linux") await assertKvm(host);
+  if (host.platform === "linux") await warnOnForeignPrefixOwner(exec, log2);
   const { lima, qemu, nc } = await locateTools(exec, paths, arch, host, os);
   await assertLimaVersion(exec, paths, lima, host);
   const acceleration = await runOrThrow(exec, qemu, ["-accel", "help"]);
@@ -8268,6 +8351,7 @@ async function preflightHost(exec, paths, resources, host = realHost()) {
   const firmware = await findFirmware(qemu, arch, host, os);
   return { arch, lima, qemu, nc, firmware };
 }
+var ROOT_OWNED_PREFIX;
 var init_preflight = __esm({
   "src/vm/preflight.ts"() {
     "use strict";
@@ -8275,16 +8359,17 @@ var init_preflight = __esm({
     init_config();
     init_host_env();
     init_host_packages();
+    ROOT_OWNED_PREFIX = ["/usr/local", "/usr/local/bin", "/usr/local/share"];
   }
 });
 
 // src/vm/host-runtime.ts
 import { readFile as readFile5 } from "fs/promises";
-import { createHash as createHash2, randomUUID as randomUUID2 } from "crypto";
+import { createHash as createHash4, randomUUID as randomUUID2 } from "crypto";
 import { join as join5 } from "path";
 import { fileURLToPath } from "url";
 function hashText(value) {
-  return createHash2("sha256").update(value).digest("hex");
+  return createHash4("sha256").update(value).digest("hex");
 }
 function newVmRunId() {
   return randomUUID2();
@@ -8824,7 +8909,6 @@ __export(manager_exports, {
   configureVm: () => configureVm,
   createVm: () => createVm,
   denyEndpoint: () => denyEndpoint,
-  enrollVm: () => enrollVm,
   enrollVmBootstrap: () => enrollVmBootstrap,
   ensureVmDevicePublicKey: () => ensureVmDevicePublicKey,
   internetMode: () => internetMode,
@@ -8850,16 +8934,15 @@ async function saveState(paths, state) {
   await atomicPrivateWrite(paths.state, `${JSON.stringify(state, null, 2)}
 `);
 }
-async function createVm(ports, resources, installUrl) {
+async function createVm(ports, resources) {
   validateResources(resources, void 0, await ports.otherAllocations?.() ?? []);
   const { paths, exec, log: log2 } = ports;
-  const runtime = await preflightHost(exec, paths, resources);
+  const runtime = await preflightHost(exec, paths, resources, void 0, log2);
   const endpoints = [
     ...DEFAULT_ENDPOINTS,
     { host: "region1.v2.argotunnel.com", ports: [7844] },
     { host: "region2.v2.argotunnel.com", ports: [7844] }
   ];
-  if (installUrl) endpoints.push({ host: parseInstallUrl(installUrl).hostname, ports: [443] });
   const network = withHostSettings(await resolveNetwork(endpoints), {});
   const template = renderVmTemplate(
     runtime.arch,
@@ -8978,29 +9061,6 @@ async function beginEnrollment(ports, state) {
   delete state.linkedDisplayName;
   await saveState(ports.paths, state);
 }
-async function enrollVm(ports, state, input) {
-  const url = parseInstallUrl(input);
-  if (!state.endpoints.some(
-    (endpoint) => endpoint.host === url.hostname && endpoint.ports.includes(443)
-  )) {
-    throw new Error(
-      `Approve ${url.hostname}:443 with vm allow while the VM is stopped, then retry.`
-    );
-  }
-  await beginEnrollment(ports, state);
-  ports.log("Preparing guest prerequisites and enrolling inside the VM.");
-  await guestCommand(
-    ports.exec,
-    state,
-    ports.paths,
-    "set -e; export DEBIAN_FRONTEND=noninteractive; apt-get update -qq; apt-get install -y -qq curl unzip ca-certificates"
-  );
-  await guestCommand(ports.exec, state, ports.paths, GUEST_ENROLL, `${url.href}
-`);
-  state.enrolled = true;
-  await saveState(ports.paths, state);
-  ports.log("Guest enrollment completed. Check Personal Compute for cluster health.");
-}
 async function enrollVmBootstrap(ports, state, bootstrapScript) {
   if (bootstrapScript.length === 0 || bootstrapScript.length > 1e6)
     throw new Error("Pairing bootstrap payload is invalid.");
@@ -9556,7 +9616,7 @@ done
 });
 
 // src/vm/dev-artifact.ts
-import { createHash as createHash3 } from "crypto";
+import { createHash as createHash5 } from "crypto";
 import { readFile as readFile7, stat } from "fs/promises";
 async function readDevArtifact() {
   const file = process.env.CONVEYOR_DEV_ARTIFACT;
@@ -9570,7 +9630,7 @@ async function readDevArtifact() {
   if (!info.isFile() || info.size > 32 * 1024 * 1024)
     throw new Error("Development artifact must be a file of at most 32 MiB.");
   const bytes = await readFile7(file);
-  if (bytes.length > 32 * 1024 * 1024 || createHash3("sha256").update(bytes).digest("hex") !== digest)
+  if (bytes.length > 32 * 1024 * 1024 || createHash5("sha256").update(bytes).digest("hex") !== digest)
     throw new Error("Development artifact checksum mismatch.");
   return { bytes, sha256: digest };
 }
@@ -10665,14 +10725,6 @@ function commandPorts(exec, instance, log2, layout) {
     otherAllocations: async () => (await readOtherAllocations(paths, layout)).map((other) => other.resources)
   };
 }
-async function readInstallInput() {
-  let input = "";
-  for await (const chunk of process.stdin) {
-    input += String(chunk);
-    if (input.length > 16384) throw new Error("Install URL exceeds the input limit.");
-  }
-  return input.trim();
-}
 function resourceFlag(flags, key, fallback) {
   if (flags[key] === void 0) return fallback;
   if (typeof flags[key] !== "string" || !/^\d+$/.test(flags[key]))
@@ -10693,25 +10745,47 @@ function setupDefaults(others, host = hostCapacity()) {
       `Your other VMs already reserve this computer's CPU or memory budget: ${reservations}. Stop one and lower it with vm configure --instance=<name> --cpus=<n> --memory=<GiB> or --profile=default, then retry.`
     );
   }
+  const wanted = recommendedVmSize(host.memory / GIB2, host.cpus);
   return {
-    cpus: Math.min(4, room.cpus),
-    memoryGiB: Math.min(8, Math.floor(host.memory / GIB2 / 2), room.memoryGiB),
+    cpus: Math.min(wanted.cpus, room.cpus),
+    memoryGiB: Math.min(wanted.memoryGiB, room.memoryGiB),
     diskGiB: 64
   };
 }
-async function createInstance(ports, parsed, url) {
+function setupResources(flags, defaults) {
+  return {
+    cpus: resourceFlag(flags, "cpus", defaults.cpus),
+    memoryGiB: resourceFlag(flags, "memory", defaults.memoryGiB),
+    diskGiB: resourceFlag(flags, "disk", defaults.diskGiB)
+  };
+}
+function setupSizeNotice(resources, sizedToHost) {
+  const fit = podsThatFit(resources);
+  const pods = `${fit.medium} medium or ${fit.small} small pod${fit.small === 1 ? "" : "s"}`;
+  const vm = `${resources.memoryGiB} GiB, ${resources.cpus}-CPU VM`;
+  const lines2 = [
+    sizedToHost ? `Creating a ${vm} sized to this computer. It fits ${pods} at a time. Pass --memory and --cpus to choose another size.` : `Creating a ${vm}. It fits ${pods} at a time.`
+  ];
+  if (fit.small === 0) {
+    const smallest = smallestVmFor("small");
+    lines2.push(
+      `No Conveyor pod fits in this VM, so builds skip it and use project compute. A small pod needs a VM with at least ${smallest.memoryGiB} GiB and ${smallest.cpus} CPUs.`
+    );
+  } else if (fit.medium === 0) {
+    lines2.push(
+      "Only small pods fit in this VM. Builds that need a medium pod use project compute."
+    );
+  }
+  return lines2;
+}
+async function createInstance(ports, parsed) {
   if (ports.paths.instance !== DEFAULT_INSTANCE) assertInstancePathFits(ports.paths);
   return await withAdmissionLock(async (release) => {
     const defaults = setupDefaults(await readOtherAllocations(ports.paths, ports.layout));
-    return await createVm(
-      { ...ports, reserved: release },
-      {
-        cpus: resourceFlag(parsed.flags, "cpus", defaults.cpus),
-        memoryGiB: resourceFlag(parsed.flags, "memory", defaults.memoryGiB),
-        diskGiB: resourceFlag(parsed.flags, "disk", defaults.diskGiB)
-      },
-      url
-    );
+    const resources = setupResources(parsed.flags, defaults);
+    const sizedToHost = parsed.flags.cpus === void 0 && parsed.flags.memory === void 0;
+    for (const line of setupSizeNotice(resources, sizedToHost)) ports.log(line);
+    return await createVm({ ...ports, reserved: release }, resources);
   }, ports.layout.base);
 }
 async function configureWithAdmission(ports, state, parsed) {
@@ -10745,17 +10819,12 @@ function relinkNotice(state, relink) {
   );
 }
 async function setupVm(ports, parsed, state) {
-  const url = parsed.flags["install-url-stdin"] === true ? await readInstallInput() : void 0;
-  if (url !== void 0) parseInstallUrl(url);
   if (state && RESOURCE_FLAGS.some((key) => parsed.flags[key] !== void 0)) {
     throw new Error("This VM already exists; setup resource flags only apply at creation.");
   }
-  const notice = state && url ? relinkNotice(state, parsed.flags.relink === true) : void 0;
-  if (notice) ports.log(notice);
-  if (!state) state = await createInstance(ports, parsed, url);
+  if (!state) state = await createInstance(ports, parsed);
   await startVm(ports, state);
-  if (url) await enrollVm(ports, state, url);
-  else ports.log(setupNextStep(state, ports.paths.instance));
+  ports.log(setupNextStep(state, ports.paths.instance));
 }
 function setupNextStep(state, instance) {
   const link = instance === DEFAULT_INSTANCE ? "conveyor-k3 vm link" : `conveyor-k3 vm link --instance=${instance}`;
@@ -10859,6 +10928,7 @@ var RESOURCE_FLAGS;
 var init_command_setup = __esm({
   "src/vm/command-setup.ts"() {
     "use strict";
+    init_dist();
     init_config();
     init_dev_artifact();
     init_device_link();
@@ -10932,7 +11002,7 @@ var init_service_unit = __esm({
 });
 
 // src/vm/service-control.ts
-import { constants as constants2, readFileSync as readFileSync4 } from "fs";
+import { constants as constants2, readFileSync as readFileSync5 } from "fs";
 import { access as access5, lstat as lstat3, mkdir as mkdir6, readFile as readFile8, readdir as readdir2, rename as rename3, rm as rm7, writeFile as writeFile6 } from "fs/promises";
 import { tmpdir as tmpdir2, userInfo as userInfo3 } from "os";
 import { dirname as dirname3, join as join12 } from "path";
@@ -10966,7 +11036,7 @@ function realServiceHost(exec, log2) {
 function cliVersion() {
   try {
     const url = new URL("../package.json", import.meta.url);
-    return JSON.parse(readFileSync4(url, "utf8")).version ?? "<version>";
+    return JSON.parse(readFileSync5(url, "utf8")).version ?? "<version>";
   } catch {
     return "<version>";
   }
@@ -11616,7 +11686,7 @@ function validateFlags(parsed) {
   const action = actionOf(parsed);
   const allowed = {
     ...BAKE_VERBS,
-    setup: ["install-url-stdin", "cpus", "memory", "disk", "relink"],
+    setup: ["cpus", "memory", "disk"],
     start: [],
     configure: [...RESOURCE_FLAGS2, ...CAPACITY_FLAGS],
     stop: ["force"],
@@ -11640,7 +11710,7 @@ function validateFlags(parsed) {
   for (const flag of Object.keys(parsed.flags)) {
     if (!accepted.includes(flag)) throw new Error(`Unknown flag for vm ${action}: --${flag}`);
   }
-  const booleanFlags = /* @__PURE__ */ new Set(["install-url-stdin", "force", "json", "purge", "yes", "relink"]);
+  const booleanFlags = /* @__PURE__ */ new Set(["force", "json", "purge", "yes", "relink"]);
   for (const [flag, value] of Object.entries(parsed.flags)) {
     if (booleanFlags.has(flag) && value !== true) throw new Error(`Use --${flag} without a value.`);
   }
@@ -11761,7 +11831,8 @@ var init_command = __esm({
 Usage: conveyor-k3 vm <setup|start|stop|status|list|link|internet|logout|pods|pod-logs|disk-usage|configure|update|allow|deny|refresh|uninstall|image import|runners grant>
   Every command but list acts on one VM: --instance=<name> selects a named VM,
   and omitting it selects this user's default VM.
-  setup [--install-url-stdin] [--relink] [--cpus=4] [--memory=8] [--disk=64]
+  setup [--cpus=<n>] [--memory=<GiB>] [--disk=64]  Without --cpus and --memory, sizes the VM
+            to this computer: the largest the budget allows, up to 32 GiB and 8 CPUs.
   configure --cpus=4 --memory=8 [--disk=64]     Changes allocation while stopped.
   configure --profile=default|server [--relay-slots=96] [--relay-max-gib=8]
             [--disk-mbps=1000] [--disk-iops=20000]  Changes network and disk capacity while stopped.
@@ -11795,6 +11866,7 @@ Run without sudo. Requires Lima 2.2+ and QEMU with HVF (macOS) or KVM (Linux).
 var command_exports2 = {};
 __export(command_exports2, {
   HOST_HELP: () => HOST_HELP,
+  hostNextStep: () => hostNextStep,
   runHostCommand: () => runHostCommand
 });
 import { hostname } from "os";
@@ -11848,6 +11920,11 @@ async function prepareHostLink(parsed, ports, log2) {
   }
   return { api, name: name2 };
 }
+function hostNextStep(state) {
+  if (state.k3sInstalledByConveyor === true)
+    return "Next: in Conveyor open this instance, set Keep for this machine (CPU and memory), max concurrent and projects, and Save. Conveyor restarts k3s once to apply them, while no build runs.";
+  return "Next: in Conveyor open this instance, set Keep for this machine (CPU and memory), max concurrent and projects, Save, then run `sudo systemctl restart k3s` once while no build runs. Conveyor never restarts a k3s it did not install.";
+}
 async function completeHostLink(api, pairing, log2, ports) {
   const poll = () => pollPairing(api, pairing.deviceCode);
   const retry = () => log2("Securing connection\u2026 retrying pairing status.");
@@ -11880,6 +11957,7 @@ async function completeHostLink(api, pairing, log2, ports) {
   log2(
     `Linked to ${completed.accountLabel ?? "Conveyor"}${completed.displayName ? ` as ${completed.displayName}` : ""}.`
   );
+  log2(hostNextStep(await ports.readState()));
 }
 async function hostLink(parsed, log2, ports) {
   const { api, name: name2 } = await prepareHostLink(parsed, ports, log2);
@@ -11944,8 +12022,10 @@ Usage: conveyor-k3 host <setup|link|status|uninstall>
   uninstall [--purge-k3s --yes] Remove Conveyor's units, state, and device key. k3s,
                                 your config, and your workloads stay unless you purge.
 Run with sudo on a dedicated Linux server. Builds run on this server's own k3s with
-no VM boundary; Pod Security and an egress policy stand in for one. See the guide's
-"Link a dedicated server (host)" section.
+no VM boundary; Pod Security and an egress policy stand in for one. After link, on a
+k3s you installed yourself: set Keep for this machine in Conveyor and Save, then run
+sudo systemctl restart k3s once. Conveyor never restarts a k3s it did not install.
+See the guide's "Link a dedicated server (host)" section.
 `;
     ALLOWED_FLAGS = /* @__PURE__ */ new Map([
       ["setup", []],
@@ -12026,7 +12106,7 @@ async function writeWorkloads(data) {
 
 // src/cli.ts
 init_exec();
-import { readFileSync as readFileSync5 } from "fs";
+import { readFileSync as readFileSync6 } from "fs";
 
 // src/lib/fs-port.ts
 import { chmod, mkdir as mkdir2, readFile, rm as rm2, writeFile as writeFile2 } from "fs/promises";
@@ -12040,7 +12120,7 @@ var nodeFileSystem = {
   },
   async writeFile(path, content, mode) {
     await mkdir2(path.slice(0, path.lastIndexOf("/")), { recursive: true });
-    await writeFile2(path, content, "utf8");
+    await writeFile2(path, content, { encoding: "utf8", ...mode === void 0 ? {} : { mode } });
     if (mode !== void 0) await chmod(path, mode);
   },
   async removeFile(path) {
@@ -12091,11 +12171,235 @@ init_dist();
 // src/lib/local-registry.ts
 init_dist();
 init_paths();
+import { createHash as createHash2 } from "crypto";
+
+// src/lib/registry-credentials.ts
+import { createHash, randomBytes } from "crypto";
+
+// src/lib/bcrypt.ts
+var P_WORDS = 18;
+var S_WORDS = 1024;
+var MAGIC = "OrpheanBeholderScryDoubt";
+var ALPHABET = "./ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
+var MAX_KEY_BYTES = 72;
+var BCRYPT_SALT_BYTES = 16;
+function scaledAtanInverse(x, one) {
+  const xSquared = x * x;
+  let power = one / x;
+  let sum = 0n;
+  for (let n = 0n; power !== 0n; n++) {
+    const term = power / (2n * n + 1n);
+    sum = n % 2n === 0n ? sum + term : sum - term;
+    power /= xSquared;
+  }
+  return sum;
+}
+function piFractionWords(count) {
+  const guard = 64n;
+  const bits = BigInt(count * 32) + guard;
+  const one = 1n << bits;
+  const pi = 16n * scaledAtanInverse(5n, one) - 4n * scaledAtanInverse(239n, one);
+  const fraction = pi - 3n * one >> guard;
+  const words = new Uint32Array(count);
+  for (let index = 0; index < count; index++) {
+    words[index] = Number(fraction >> BigInt(32 * (count - 1 - index)) & 0xffffffffn);
+  }
+  return words;
+}
+var initialState = null;
+function blowfishInitialState() {
+  if (!initialState) {
+    const words = piFractionWords(P_WORDS + S_WORDS);
+    initialState = { p: words.slice(0, P_WORDS), s: words.slice(P_WORDS) };
+  }
+  return initialState;
+}
+function word(array, index) {
+  return array[index] ?? 0;
+}
+function round(s, x) {
+  const mixed = word(s, x >>> 24) + word(s, 256 + (x >>> 16 & 255)) ^ word(s, 512 + (x >>> 8 & 255));
+  return mixed + word(s, 768 + (x & 255)) | 0;
+}
+function encipher(state, data, offset) {
+  const { p, s } = state;
+  let left = word(data, offset) ^ word(p, 0);
+  let right = word(data, offset + 1);
+  for (let index = 1; index <= 16; index += 2) {
+    right ^= round(s, left) ^ word(p, index);
+    left ^= round(s, right) ^ word(p, index + 1);
+  }
+  data[offset] = right ^ word(p, 17);
+  data[offset + 1] = left;
+}
+function wordStream(bytes) {
+  let position = 0;
+  return () => {
+    let value = 0;
+    for (let index = 0; index < 4; index++) {
+      value = value << 8 | (bytes[position] ?? 0);
+      position = (position + 1) % bytes.length;
+    }
+    return value >>> 0;
+  };
+}
+function expandKey(state, key, salt) {
+  const nextKeyWord = wordStream(key);
+  for (let index = 0; index < P_WORDS; index++) {
+    state.p[index] = word(state.p, index) ^ nextKeyWord();
+  }
+  const nextSaltWord = salt ? wordStream(salt) : () => 0;
+  const block = new Uint32Array(2);
+  const fill = (target2, length) => {
+    for (let index = 0; index < length; index += 2) {
+      block[0] = word(block, 0) ^ nextSaltWord();
+      block[1] = word(block, 1) ^ nextSaltWord();
+      encipher(state, block, 0);
+      target2[index] = word(block, 0);
+      target2[index + 1] = word(block, 1);
+    }
+  };
+  fill(state.p, P_WORDS);
+  fill(state.s, S_WORDS);
+}
+function encodeBase64(bytes, length) {
+  let out = "";
+  let offset = 0;
+  while (offset < length) {
+    let first = bytes[offset++] ?? 0;
+    out += ALPHABET[first >> 2];
+    first = (first & 3) << 4;
+    if (offset >= length) {
+      out += ALPHABET[first];
+      break;
+    }
+    let second = bytes[offset++] ?? 0;
+    out += ALPHABET[first | second >> 4];
+    first = (second & 15) << 2;
+    if (offset >= length) {
+      out += ALPHABET[first];
+      break;
+    }
+    second = bytes[offset++] ?? 0;
+    out += ALPHABET[first | second >> 6];
+    out += ALPHABET[second & 63];
+  }
+  return out;
+}
+function bcryptHash(password, cost, salt) {
+  if (!Number.isInteger(cost) || cost < 4 || cost > 31) {
+    throw new Error(`bcrypt cost must be an integer from 4 to 31, not ${cost}`);
+  }
+  if (salt.length !== BCRYPT_SALT_BYTES) {
+    throw new Error(`bcrypt needs a ${BCRYPT_SALT_BYTES}-byte salt`);
+  }
+  const passwordBytes = new TextEncoder().encode(password).slice(0, MAX_KEY_BYTES);
+  const key = new Uint8Array(passwordBytes.length + 1);
+  key.set(passwordBytes);
+  const base = blowfishInitialState();
+  const state = { p: base.p.slice(), s: base.s.slice() };
+  expandKey(state, key, salt);
+  for (let rounds = 2 ** cost; rounds > 0; rounds--) {
+    expandKey(state, key, null);
+    expandKey(state, salt, null);
+  }
+  const magic = new TextEncoder().encode(MAGIC);
+  const nextMagicWord = wordStream(magic);
+  const block = Uint32Array.from({ length: 6 }, () => nextMagicWord());
+  for (let pass = 0; pass < 64; pass++) {
+    for (let offset = 0; offset < 6; offset += 2) encipher(state, block, offset);
+  }
+  const digest = new Uint8Array(24);
+  block.forEach((value, index) => {
+    digest[index * 4] = value >>> 24;
+    digest[index * 4 + 1] = value >>> 16 & 255;
+    digest[index * 4 + 2] = value >>> 8 & 255;
+    digest[index * 4 + 3] = value & 255;
+  });
+  const costText = String(cost).padStart(2, "0");
+  return `$2y$${costText}$${encodeBase64(salt, BCRYPT_SALT_BYTES)}${encodeBase64(digest, 23)}`;
+}
+
+// src/lib/registry-credentials.ts
+init_paths();
+var LOCAL_REGISTRY_USERNAME = "conveyor";
+var BCRYPT_COST = 5;
+var USERNAME = /^[a-z][a-z0-9-]{0,31}$/;
+var PASSWORD = /^[A-Za-z0-9_-]{32,128}$/;
+function generateRegistryCredentials(random = randomBytes) {
+  const username = LOCAL_REGISTRY_USERNAME;
+  const password = Buffer.from(random(32)).toString("base64url");
+  const hash = bcryptHash(password, BCRYPT_COST, random(BCRYPT_SALT_BYTES));
+  return { username, password, htpasswd: `${username}:${hash}` };
+}
+function parseRegistryCredentials(raw) {
+  if (!raw) return null;
+  try {
+    const value = JSON.parse(raw);
+    const { username, password, htpasswd } = value ?? {};
+    if (typeof username !== "string" || !USERNAME.test(username)) return null;
+    if (typeof password !== "string" || !PASSWORD.test(password)) return null;
+    if (typeof htpasswd !== "string" || !htpasswd.startsWith(`${username}:$2`)) return null;
+    if (htpasswd.includes("\n")) return null;
+    return { username, password, htpasswd };
+  } catch {
+    return null;
+  }
+}
+async function loadOrCreateRegistryCredentials(fs2, random) {
+  const stored = parseRegistryCredentials(await fs2.readFile(LOCAL_REGISTRY_CREDENTIALS_FILE));
+  if (stored) return stored;
+  const created = generateRegistryCredentials(random);
+  await fs2.writeFile(LOCAL_REGISTRY_CREDENTIALS_FILE, `${JSON.stringify(created)}
+`, 384);
+  return created;
+}
+function credentialFingerprint(credentials) {
+  return createHash("sha256").update(`${credentials.username}:${credentials.password}`).digest("hex").slice(0, 16);
+}
+function basicAuthorization(credentials) {
+  return `Basic ${Buffer.from(`${credentials.username}:${credentials.password}`).toString("base64")}`;
+}
+function registryDockerConfig(credentials, host) {
+  const auth = Buffer.from(`${credentials.username}:${credentials.password}`).toString("base64");
+  return JSON.stringify({ auths: { [host]: { auth } } });
+}
+function parseRegistryAuthState(raw) {
+  if (!raw) return null;
+  try {
+    const value = JSON.parse(raw);
+    if (typeof value?.credential !== "string") return null;
+    const writtenAt = typeof value.writtenAt === "string" && !Number.isNaN(Date.parse(value.writtenAt)) ? value.writtenAt : null;
+    return { credential: value.credential, writtenAt, enforced: value.enforced === true };
+  } catch {
+    return null;
+  }
+}
+async function registryAuthEnforced(readFile9) {
+  return parseRegistryAuthState(await readFile9(LOCAL_REGISTRY_AUTH_STATE_FILE))?.enforced === true;
+}
+function withRegistryCredentials(fetchImpl, readFile9) {
+  let credentials = null;
+  return async (url, init) => {
+    credentials ??= readFile9(LOCAL_REGISTRY_CREDENTIALS_FILE).then(parseRegistryCredentials);
+    const stored = await credentials;
+    if (!stored) return fetchImpl(url, init);
+    const headers = new Headers(init?.headers);
+    headers.set("Authorization", basicAuthorization(stored));
+    return fetchImpl(url, { ...init, headers });
+  };
+}
+
+// src/lib/local-registry.ts
 var LOCAL_REGISTRY_IMAGE = "docker.io/library/registry:3.1.2@sha256:c87f33837722a100572e95d7dc4bf539fc42cf68202b13c3bc03c0ff54c3a649";
 var LOCAL_REGISTRY_CONFIG = "/etc/distribution/config.yml";
 var LOCAL_REGISTRY_GC_JOB = "conveyor-registry-gc";
+var LOCAL_REGISTRY_HTPASSWD_SECRET = "conveyor-registry-htpasswd";
+var HTPASSWD_KEY = "htpasswd";
+var AUTH_MOUNT = "/etc/distribution/auth";
 var LOCAL_REGISTRY_SELECTOR = { "app.kubernetes.io/name": PERSONAL_LOCAL_REGISTRY_NAME };
 var MANAGED_BY = { "app.kubernetes.io/managed-by": "conveyor-k3" };
+var AUTH_CHECKSUM_ANNOTATION = "conveyor.rallycry.com/registry-auth";
 var DATA_MOUNT = "/var/lib/registry";
 var REGISTRY_ENV = [
   { name: "REGISTRY_STORAGE_DELETE_ENABLED", value: "true" },
@@ -12110,6 +12414,23 @@ var VOLUME_MOUNTS = [
   { name: "data", mountPath: DATA_MOUNT },
   { name: "tmp", mountPath: "/tmp" }
 ];
+var AUTH_ENV = [
+  { name: "REGISTRY_AUTH", value: "htpasswd" },
+  { name: "REGISTRY_AUTH_HTPASSWD_REALM", value: "conveyor" },
+  { name: "REGISTRY_AUTH_HTPASSWD_PATH", value: `${AUTH_MOUNT}/${HTPASSWD_KEY}` }
+];
+var AUTH_VOLUME = {
+  name: "auth",
+  secret: {
+    secretName: LOCAL_REGISTRY_HTPASSWD_SECRET,
+    items: [{ key: HTPASSWD_KEY, path: HTPASSWD_KEY }],
+    defaultMode: 256
+  }
+};
+var AUTH_VOLUME_MOUNT = { name: "auth", mountPath: AUTH_MOUNT, readOnly: true };
+function htpasswdChecksum(htpasswd) {
+  return createHash2("sha256").update(htpasswd).digest("hex").slice(0, 16);
+}
 var VOLUMES = [
   { name: "data", hostPath: { path: LOCAL_REGISTRY_DATA_DIR, type: "Directory" } },
   { name: "tmp", emptyDir: { sizeLimit: "64Mi" } }
@@ -12146,7 +12467,34 @@ function registryNetworkPolicy(metadata) {
     }
   };
 }
-function renderLocalRegistryManifests() {
+function renderLocalRegistrySecrets(credentials) {
+  const encode = (value) => Buffer.from(value).toString("base64");
+  const secret = (namespace, name2, key, value) => ({
+    apiVersion: "v1",
+    kind: "Secret",
+    metadata: { name: name2, namespace, labels: { ...MANAGED_BY } },
+    type: "Opaque",
+    data: { [key]: encode(value) }
+  });
+  const items = [
+    secret(
+      PERSONAL_LOCAL_REGISTRY_NAMESPACE,
+      LOCAL_REGISTRY_HTPASSWD_SECRET,
+      HTPASSWD_KEY,
+      `${credentials.htpasswd}
+`
+    ),
+    secret(
+      PERSONAL_BAKE_NAMESPACE,
+      PERSONAL_LOCAL_REGISTRY_PUSH_SECRET,
+      PERSONAL_LOCAL_REGISTRY_PUSH_SECRET_KEY,
+      registryDockerConfig(credentials, PERSONAL_LOCAL_REGISTRY_HOST)
+    )
+  ];
+  return `${JSON.stringify({ apiVersion: "v1", kind: "List", items }, null, 2)}
+`;
+}
+function renderLocalRegistryManifests(auth = null) {
   const metadata = {
     name: PERSONAL_LOCAL_REGISTRY_NAME,
     namespace: PERSONAL_LOCAL_REGISTRY_NAMESPACE,
@@ -12162,15 +12510,19 @@ function renderLocalRegistryManifests() {
       strategy: { type: "Recreate" },
       selector: { matchLabels: LOCAL_REGISTRY_SELECTOR },
       template: {
-        metadata: { labels: metadata.labels },
+        metadata: {
+          labels: metadata.labels,
+          ...auth ? { annotations: { [AUTH_CHECKSUM_ANNOTATION]: htpasswdChecksum(auth.htpasswd) } } : {}
+        },
         spec: {
           ...POD_BASE,
+          ...auth ? { volumes: [...VOLUMES, AUTH_VOLUME] } : {},
           containers: [
             {
               name: "registry",
               image: LOCAL_REGISTRY_IMAGE,
               imagePullPolicy: "IfNotPresent",
-              env: REGISTRY_ENV,
+              env: auth ? [...REGISTRY_ENV, ...AUTH_ENV] : REGISTRY_ENV,
               ports: [
                 {
                   name: "registry",
@@ -12182,8 +12534,10 @@ function renderLocalRegistryManifests() {
                   protocol: "TCP"
                 }
               ],
+              // A TCP check: once the credential is enforced, `/v2/` answers
+              // 401 to a probe that does not carry it.
               readinessProbe: {
-                httpGet: { path: "/v2/", port: PERSONAL_LOCAL_REGISTRY_PORT },
+                tcpSocket: { port: PERSONAL_LOCAL_REGISTRY_PORT },
                 periodSeconds: 10
               },
               resources: {
@@ -12191,7 +12545,7 @@ function renderLocalRegistryManifests() {
                 limits: { memory: "512Mi" }
               },
               securityContext: CONTAINER_SECURITY,
-              volumeMounts: VOLUME_MOUNTS
+              volumeMounts: auth ? [...VOLUME_MOUNTS, AUTH_VOLUME_MOUNT] : VOLUME_MOUNTS
             }
           ]
         }
@@ -12282,11 +12636,18 @@ async function registryAnswers(fetchImpl = fetch) {
 }
 async function localRegistryReady(ports) {
   const [answers, mirrored] = await Promise.all([
-    registryAnswers(ports.fetch),
+    registryAnswers(withRegistryCredentials(ports.fetch ?? fetch, ports.readFile)),
     mirrorLoaded(ports.readFile)
   ]);
   return answers && mirrored;
 }
+async function localRegistryStatus(ports) {
+  const [ready, authEnforced] = await Promise.all([
+    localRegistryReady(ports),
+    registryAuthEnforced(ports.readFile)
+  ]);
+  return { ready, authEnforced };
+}
 
 // src/daemon/registry-gc.ts
 init_paths();
@@ -12683,7 +13044,10 @@ async function collectRegistryGarbage(ports, options) {
     blobsCollected: false
   });
   const now = ports.now ?? Date.now;
-  const fetchImpl = ports.fetch ?? fetch;
+  const fetchImpl = withRegistryCredentials(
+    ports.fetch ?? fetch,
+    ports.readFile ?? ((path) => nodeFileSystem.readFile(path))
+  );
   const retain = await readRetainList(ports);
   if (typeof retain === "string") return skip(retain);
   const blocked = await registryBlocker(ports, now());
@@ -12750,6 +13114,16 @@ function upsertRegistryAuth(file, host, auth) {
   next.configs = configs;
   return next;
 }
+function removeRegistryAuth(file, host) {
+  const existing = file.configs?.[host];
+  if (!existing?.auth) return file;
+  const { auth: _auth, ...rest } = existing;
+  const { [host]: _removed, ...others } = file.configs ?? {};
+  const configs = Object.keys(rest).length > 0 ? { ...others, [host]: rest } : others;
+  const next = { ...file, configs };
+  if (Object.keys(configs).length === 0) delete next.configs;
+  return next;
+}
 function mirrorEndpoints(file, host) {
   const entry = file.mirrors?.[host];
   if (!entry || typeof entry !== "object" || Array.isArray(entry)) return [];
@@ -12966,6 +13340,126 @@ var GRANTED_COMMAND_NAMES = LOCAL_BAKE_ROOT_COMMANDS.map((command) => command.na
 // src/commands/uninstall.ts
 init_dist();
 
+// src/daemon/pod-cpu-quota.ts
+init_safe_arg();
+var POD_SLICE = "kubepods.slice";
+function cpuMillicores(quantity) {
+  const checked = assertQuantity(quantity, "reserveCpu");
+  const match = /^(\d+(?:\.\d+)?)(m?)$/.exec(checked);
+  if (!match?.[1])
+    throw new Error(`Invalid reserveCpu: ${JSON.stringify(checked)} is not a CPU amount`);
+  const amount = Number.parseFloat(match[1]);
+  return Math.round(match[2] === "m" ? amount : amount * 1e3);
+}
+function podCpuQuotaPercent(cores, reservedMillicores) {
+  const left = cores * 1e3 - reservedMillicores;
+  if (left < 10) return null;
+  return Math.floor(left / 10);
+}
+function setQuota(exec, value) {
+  return exec("systemctl", ["set-property", POD_SLICE, `CPUQuota=${value}`]);
+}
+async function liftPodCpuQuota(exec) {
+  const shown = await exec("systemctl", ["show", POD_SLICE, "-p", "CPUQuotaPerSecUSec", "--value"]);
+  if (shown.exitCode !== 0 || ["", "infinity"].includes(shown.stdout.trim())) return null;
+  const cleared = await setQuota(exec, "");
+  return cleared.exitCode === 0 ? null : cleared.stderr.trim().slice(0, 200);
+}
+async function reconcilePodCpuQuota(exec, desired, warnings) {
+  const reserve = desired.kubelet.systemReserved?.cpu;
+  if (!reserve) {
+    const failure = await liftPodCpuQuota(exec);
+    if (failure) warnings.push(`Could not lift the CPU cap on ${POD_SLICE}: ${failure}`);
+    return void 0;
+  }
+  const reserved = cpuMillicores(reserve);
+  const state = await exec("systemctl", ["show", POD_SLICE, "-p", "ActiveState", "--value"]);
+  if (state.exitCode !== 0 || state.stdout.trim() !== "active") {
+    warnings.push(
+      `Pods do not run under ${POD_SLICE} (k3s is not using the systemd cgroup driver), so the CPU you keep for this machine is weighted, not capped.`
+    );
+    return false;
+  }
+  const nproc = await exec("nproc", []);
+  const cores = Number.parseInt(nproc.stdout.trim(), 10);
+  if (nproc.exitCode !== 0 || !Number.isInteger(cores) || cores <= 0) {
+    warnings.push(
+      "Could not count this machine's CPUs, so the CPU you keep is weighted, not capped."
+    );
+    return false;
+  }
+  const percent = podCpuQuotaPercent(cores, reserved);
+  if (percent === null) {
+    warnings.push(
+      `The CPU you keep (${reserve}) leaves no CPU for builds on this ${cores}-CPU machine. Lower it in your Conveyor profile.`
+    );
+    return false;
+  }
+  const set = await setQuota(exec, `${percent}%`);
+  if (set.exitCode !== 0) {
+    warnings.push(
+      `Could not cap pod CPU at ${percent / 100} CPUs: ${set.stderr.trim().slice(0, 200)}`
+    );
+    return false;
+  }
+  return true;
+}
+
+// src/daemon/registry-auth.ts
+init_dist();
+init_paths();
+var LOCAL_REGISTRY_AUTH_HOSTS = [
+  PERSONAL_LOCAL_REGISTRY_HOST,
+  new URL(PERSONAL_LOCAL_REGISTRY_NODE_ENDPOINT).host
+];
+function registryAuthConfigured(file, credentials) {
+  return LOCAL_REGISTRY_AUTH_HOSTS.every((host) => {
+    const auth = file.configs?.[host]?.auth;
+    return auth?.username === credentials.username && auth.password === credentials.password && auth.auth === void 0 && auth.identitytoken === void 0;
+  });
+}
+function withLocalRegistryAuth(file, credentials) {
+  return LOCAL_REGISTRY_AUTH_HOSTS.reduce(
+    (next, host) => upsertRegistryAuth(next, host, {
+      username: credentials.username,
+      password: credentials.password
+    }),
+    file
+  );
+}
+function monotonicNowUs() {
+  return Number(process.hrtime.bigint() / 1000n);
+}
+async function k3sStartedAtMs(exec, nowMs, monotonicNow = monotonicNowUs) {
+  const result = await exec(
+    "systemctl",
+    ["show", "k3s", "--property=ActiveEnterTimestampMonotonic", "--value"],
+    { timeoutMs: 1e4 }
+  ).catch(() => null);
+  if (!result || result.exitCode !== 0) return null;
+  const startedUs = Number.parseInt(result.stdout.trim(), 10);
+  if (!Number.isFinite(startedUs) || startedUs <= 0) return null;
+  return nowMs - (monotonicNow() - startedUs) / 1e3;
+}
+async function settleRegistryAuth(ctx, credentials, written) {
+  const now = (ctx.now ?? (() => /* @__PURE__ */ new Date()))();
+  const raw = await ctx.fs.readFile(LOCAL_REGISTRY_AUTH_STATE_FILE);
+  const credential = credentialFingerprint(credentials);
+  const stored = parseRegistryAuthState(raw);
+  const state = stored?.credential === credential ? stored : { credential, writtenAt: null, enforced: false };
+  if (!state.enforced && (written || state.writtenAt === null)) {
+    state.writtenAt = now.toISOString();
+  }
+  if (!state.enforced && state.writtenAt !== null) {
+    const startedAt = await k3sStartedAtMs(ctx.exec, now.getTime(), ctx.monotonicNowUs);
+    if (startedAt !== null && startedAt > Date.parse(state.writtenAt)) state.enforced = true;
+  }
+  const next = `${JSON.stringify(state)}
+`;
+  if (next !== raw) await ctx.fs.writeFile(LOCAL_REGISTRY_AUTH_STATE_FILE, next, 384);
+  return state.enforced;
+}
+
 // src/lib/isolation.ts
 init_dist();
 
@@ -13234,17 +13728,36 @@ async function removeLocalRegistry(ports) {
       `Could not remove the local image registry from the cluster: ${removed.stderr.trim().slice(0, 200)}`
     );
   }
+  for (const [namespace, name2] of [
+    [PERSONAL_LOCAL_REGISTRY_NAMESPACE, LOCAL_REGISTRY_HTPASSWD_SECRET],
+    [PERSONAL_BAKE_NAMESPACE, PERSONAL_LOCAL_REGISTRY_PUSH_SECRET]
+  ]) {
+    const secret = await ports.exec(
+      "k3s",
+      ["kubectl", "-n", namespace, "delete", "secret", name2, "--ignore-not-found"],
+      { timeoutMs: 6e4 }
+    );
+    if (secret.exitCode !== 0) {
+      ports.log(
+        `Could not remove the local image registry's Secret ${namespace}/${name2}: ${secret.stderr.trim().slice(0, 200)}`
+      );
+    }
+  }
   const raw = await ports.fs.readFile(REGISTRIES_FILE);
   const parsed = parseRegistries(raw);
-  if (mirrorEndpoints(parsed, PERSONAL_LOCAL_REGISTRY_HOST).length === 0) return;
+  const next = LOCAL_REGISTRY_AUTH_HOSTS.reduce(
+    removeRegistryAuth,
+    removeRegistryMirror(parsed, PERSONAL_LOCAL_REGISTRY_HOST)
+  );
+  if (serializeRegistries(next) === serializeRegistries(parsed)) return;
   const backup = await writeRegistriesWithBackup(
     ports.fs,
     raw,
-    removeRegistryMirror(parsed, PERSONAL_LOCAL_REGISTRY_HOST),
+    next,
     (ports.now ?? (() => /* @__PURE__ */ new Date()))()
   );
   ports.log(
-    `Removed the local image registry's mirror from ${REGISTRIES_FILE} (backup: ${backup}).`
+    `Removed the local image registry's mirror and credential from ${REGISTRIES_FILE} (backup: ${backup}).`
   );
 }
 async function removeIsolation(ports) {
@@ -13301,6 +13814,10 @@ async function uninstall(ports, options = {}) {
   }
   await removeLocalRegistry(ports);
   await removeIsolation(ports);
+  const lifted = await liftPodCpuQuota(ports.exec).catch(
+    (error) => error instanceof Error ? error.message : String(error)
+  );
+  if (lifted) ports.log(`Could not lift Conveyor's CPU cap on kubepods.slice: ${lifted}`);
   for (const path of OWNED_FILES) {
     await ports.fs.removeFile(path);
     result.removedFiles.push(path);
@@ -13353,6 +13870,74 @@ async function uninstall(ports, options = {}) {
   return result;
 }
 
+// src/lib/bins.ts
+var INSTALLER_PATHS = {
+  bun: "/root/.bun/bin/bun",
+  cli: "/root/.bun/bin/conveyor-k3",
+  cloudflared: "/usr/local/bin/cloudflared"
+};
+async function whichOrNull(exec, bin) {
+  const result = await exec("which", [bin]).catch(() => null);
+  if (!result || result.exitCode !== 0) return null;
+  const path = result.stdout.trim().split("\n")[0]?.trim();
+  return path && path.startsWith("/") ? path : null;
+}
+async function resolveBinaries(exec, state, selfPath) {
+  const recorded = state.bins;
+  const cliSelf = selfPath?.startsWith("/") ? selfPath : null;
+  return {
+    bun: recorded?.bun ?? await whichOrNull(exec, "bun") ?? INSTALLER_PATHS.bun,
+    // `cli` prefers the running process's own path: if this code is executing,
+    // that path is by definition correct.
+    cli: cliSelf ?? recorded?.cli ?? await whichOrNull(exec, "conveyor-k3") ?? INSTALLER_PATHS.cli,
+    cloudflared: recorded?.cloudflared ?? await whichOrNull(exec, "cloudflared") ?? INSTALLER_PATHS.cloudflared
+  };
+}
+var CLI_PATH_LINK = "/usr/local/bin/conveyor-k3";
+async function linkCliOnPath(exec, target2 = INSTALLER_PATHS.cli) {
+  if (target2 === CLI_PATH_LINK) return { linked: false };
+  const present = await exec("test", ["-x", target2]).catch(() => null);
+  if (present?.exitCode !== 0) return { linked: false };
+  const link = await exec("ln", ["-sfn", target2, CLI_PATH_LINK]).catch(() => null);
+  if (link?.exitCode === 0) return { linked: true };
+  return {
+    linked: false,
+    problem: `Could not link ${CLI_PATH_LINK} to ${target2}: ${link?.stderr.trim().slice(0, 200) || "ln failed"}`
+  };
+}
+var NPM_GLOBAL_PACKAGE_DIRS = [
+  "/usr/local/lib/node_modules/@rallycry/conveyor-k3",
+  "/usr/lib/node_modules/@rallycry/conveyor-k3"
+];
+async function npmCopyHint(readFile9) {
+  for (const dir of NPM_GLOBAL_PACKAGE_DIRS) {
+    if (await readFile9(`${dir}/package.json`) !== null) {
+      return `An npm copy of conveyor-k3 is installed at ${dir}. Conveyor runs and updates its own copy (${INSTALLER_PATHS.cli}, linked from ${CLI_PATH_LINK}), so you can remove it: sudo npm uninstall -g @rallycry/conveyor-k3`;
+    }
+  }
+  return null;
+}
+
+// src/lib/cloudflared.ts
+var PACKAGE_MANAGER_REFUSAL = "installed by a package manager";
+async function resolveRealPath(exec, bin) {
+  const result = await exec("readlink", ["-f", bin]).catch(() => null);
+  const resolved = result?.exitCode === 0 ? result.stdout.trim() : "";
+  return resolved.startsWith("/") ? resolved : bin;
+}
+async function cloudflaredUpdater(exec, bin) {
+  const real = await resolveRealPath(exec, bin);
+  const owner = await exec("dpkg", ["-S", real]).catch(() => null);
+  return owner?.exitCode === 0 ? "package-manager" : "conveyor";
+}
+function isPackageManagerRefusal(output) {
+  return `${output.stdout}
+${output.stderr}`.toLowerCase().includes(PACKAGE_MANAGER_REFUSAL);
+}
+function describeCloudflaredUpdater(updater) {
+  return updater === "package-manager" ? "cloudflared is updated by your package manager, not by Conveyor" : "cloudflared is updated by Conveyor's daily update";
+}
+
 // src/commands/update.ts
 init_paths();
 var CLOUDFLARED_UPDATED_EXIT = 11;
@@ -13441,7 +14026,22 @@ async function updatePackage(ports, result, targetVersion) {
   await ports.exec("systemctl", ["restart", DAEMON_UNIT]);
 }
 async function updateCloudflared(ports, result) {
+  const packaged = () => {
+    result.cloudflaredUpdater = "package-manager";
+    result.notes.push(
+      `cloudflared update skipped: ${describeCloudflaredUpdater("package-manager")}`
+    );
+  };
+  if (await cloudflaredUpdater(ports.exec, ports.bins.cloudflared) === "package-manager") {
+    packaged();
+    return;
+  }
   const update = await ports.exec(ports.bins.cloudflared, ["update"], { timeoutMs: 5 * 6e4 });
+  if (isPackageManagerRefusal(update)) {
+    packaged();
+    return;
+  }
+  result.cloudflaredUpdater = "conveyor";
   if (update.exitCode !== CLOUDFLARED_UPDATED_EXIT) return;
   result.cloudflaredUpdated = true;
   ports.log("cloudflared was updated; restarting the tunnel.");
@@ -13451,10 +14051,13 @@ async function runUpdate(ports, decision, channel, targetVersion) {
   const result = {
     packageUpdated: false,
     cloudflaredUpdated: false,
+    cloudflaredUpdater: null,
     k3sUpgraded: false,
     notes: []
   };
   await updatePackage(ports, result, targetVersion);
+  const linked = await linkCliOnPath(ports.exec);
+  if (linked.problem) result.notes.push(linked.problem);
   await updateCloudflared(ports, result);
   if (!decision.upgrade) {
     result.notes.push(`k3s upgrade skipped: ${decision.reason}`);
@@ -13656,7 +14259,7 @@ async function ensureCaPool(ports) {
   const existing = await ports.fs.readFile(CA_POOL_PATH);
   if (existing !== ca) await ports.fs.writeFile(CA_POOL_PATH, ca, 420);
 }
-async function mintServiceAccountToken(ports) {
+async function ensureServiceAccount(ports) {
   await runOrThrow(ports.exec, "k3s", [
     "kubectl",
     "create",
@@ -13685,6 +14288,9 @@ async function mintServiceAccountToken(ports) {
       stdin: result.stdout
     });
   });
+}
+async function mintServiceAccountToken(ports) {
+  await ensureServiceAccount(ports);
   const token = await runOrThrow(ports.exec, "k3s", [
     "kubectl",
     "-n",
@@ -13752,13 +14358,13 @@ function buildConveyorSocketOptions(auth) {
 
 // src/daemon/control-endpoint.ts
 import { lookup as dnsLookup } from "dns";
-import { existsSync, readFileSync } from "fs";
+import { existsSync, readFileSync as readFileSync2 } from "fs";
 import { Agent } from "https";
 var CONTROL_FILE = "/etc/conveyor-vm/control.json";
 var CONTROL_ALIAS_IP = /^192\.168\.5\.24[0-7]$/;
 function readControlFile(path) {
   try {
-    return readFileSync(path, "utf8");
+    return readFileSync2(path, "utf8");
   } catch {
     return null;
   }
@@ -13804,8 +14410,8 @@ function controlPlaneRoute(apiUrl, readFile9 = readControlFile, fileExists = exi
 }
 
 // src/daemon/device-proof.ts
-import { lstatSync, readFileSync as readFileSync2 } from "fs";
-import { createPrivateKey, randomBytes, sign } from "crypto";
+import { lstatSync, readFileSync as readFileSync3 } from "fs";
+import { createPrivateKey, randomBytes as randomBytes2, sign } from "crypto";
 var DEVICE_KEY_PATH = "/etc/conveyor/device-key.pem";
 function privateDeviceKey(path, ownerUid) {
   let stat2;
@@ -13819,7 +14425,7 @@ function privateDeviceKey(path, ownerUid) {
     throw new Error("Conveyor device key must be a regular file.");
   if ((stat2.mode & 511) !== 384 || stat2.uid !== ownerUid)
     throw new Error("Conveyor device key must be owned by root with mode 0600.");
-  const pem = readFileSync2(path, "utf8");
+  const pem = readFileSync3(path, "utf8");
   if (Buffer.byteLength(pem) > 16 * 1024) throw new Error("Conveyor device key is too large.");
   const key = createPrivateKey(pem);
   if (key.asymmetricKeyType !== "ed25519")
@@ -13829,7 +14435,7 @@ function privateDeviceKey(path, ownerUid) {
 function createClusterProof(apiUrl, clusterToken, key) {
   const origin = new URL(apiUrl).origin;
   const timestamp = Date.now();
-  const nonce = randomBytes(32).toString("base64url");
+  const nonce = randomBytes2(32).toString("base64url");
   const message3 = `conveyor-device-v1
 ${origin}
 ${clusterToken}
@@ -14003,7 +14609,7 @@ var ClusterConnection = class {
 };
 
 // src/lib/manifest-guard.ts
-import { isMap, isScalar, parseAllDocuments } from "yaml";
+import { isAlias, isMap, isScalar, parseAllDocuments } from "yaml";
 var ALLOWED_MANIFEST_KINDS = [
   "Namespace",
   "Role",
@@ -14015,6 +14621,14 @@ var ALLOWED_MANIFEST_KINDS = [
 var ALLOWED = new Set(ALLOWED_MANIFEST_KINDS);
 var MISSING_KIND = "(missing kind)";
 var UNPARSEABLE = "(unparseable)";
+var LIST_SHAPED = "(list-shaped document)";
+function isListShaped(map) {
+  return map.items.some(({ key }) => {
+    if (isAlias(key)) return true;
+    const name2 = isScalar(key) ? key.value : key;
+    return typeof name2 === "string" && (name2 === "<<" || name2.toLowerCase() === "items");
+  });
+}
 function findDisallowedKinds(manifest) {
   let documents;
   try {
@@ -14037,6 +14651,10 @@ function findDisallowedKinds(manifest) {
       record2(MISSING_KIND);
       continue;
     }
+    if (isListShaped(doc.contents)) {
+      record2(LIST_SHAPED);
+      continue;
+    }
     const kind = doc.get("kind");
     if (typeof kind !== "string" || kind.length === 0) {
       record2(MISSING_KIND);
@@ -14046,14 +14664,64 @@ function findDisallowedKinds(manifest) {
   }
   return disallowed;
 }
+function withoutKind(manifest, kind) {
+  return parseAllDocuments(manifest).filter((doc) => !(isMap(doc.contents) && doc.get("kind") === kind)).map((doc) => doc.toString()).join("---\n");
+}
+function declaresPriorityClass(manifest, name2, value) {
+  return parseAllDocuments(manifest).some(
+    (doc) => isMap(doc.contents) && doc.get("kind") === "PriorityClass" && doc.getIn(["metadata", "name"]) === name2 && doc.get("value") === value
+  );
+}
 
 // src/daemon/reconcile.ts
 init_safe_arg();
+
+// src/daemon/kubelet-upkeep.ts
 init_paths();
+function ownerRestartWarning(change) {
+  return `${change} Conveyor did not install this server's k3s, so it never restarts it: run \`sudo systemctl restart k3s\` when no build runs.`;
+}
+async function reconcileKubelet(ctx, desired, result, managed) {
+  const ownerConfig = await ctx.fs.readFile(K3S_OWNER_CONFIG);
+  const rendered = renderK3sDropIn(desired.kubelet, ownerConfig, { disableComponents: managed });
+  result.skippedKubeletFlags = rendered.skipped;
+  result.effectiveImageGcHighThreshold = rendered.skipped.includes("image-gc-high-threshold") ? ownerImageGcHighThreshold(ownerConfig) : desired.kubelet.imageGcHighThreshold;
+  for (const flag of rendered.skipped) {
+    result.warnings.push(
+      `Left \`${flag}\` to your own /etc/rancher/k3s/config.yaml \u2014 Conveyor does not override a setting you chose.`
+    );
+  }
+  const current = await ctx.fs.readFile(K3S_CONFIG_DROPIN);
+  if (rendered.content === null) {
+    if (current !== null) await ctx.fs.removeFile(K3S_CONFIG_DROPIN);
+    return;
+  }
+  if (current === rendered.content) return;
+  await ctx.fs.ensureDir(K3S_CONFIG_DROPIN.slice(0, K3S_CONFIG_DROPIN.lastIndexOf("/")));
+  await ctx.fs.writeFile(K3S_CONFIG_DROPIN, rendered.content, 420);
+  if (!managed) {
+    result.warnings.push(ownerRestartWarning("Kubelet settings changed."));
+    return;
+  }
+  if (!mayDisrupt(ctx.runningConveyorPods)) {
+    result.warnings.push(
+      `Kubelet settings changed but ${busyReason(ctx.runningConveyorPods)} \u2014 the restart is deferred until the machine is idle.`
+    );
+    return;
+  }
+  const restart = await ctx.exec("systemctl", ["restart", "k3s"], { timeoutMs: 12e4 });
+  if (restart.exitCode === 0) {
+    result.restartedK3s = true;
+  } else {
+    result.warnings.push(
+      `Could not restart k3s to apply new kubelet settings: ${restart.stderr.trim().slice(0, 200)}`
+    );
+  }
+}
 
 // src/daemon/local-registry-upkeep.ts
 init_dist();
-import { createHash } from "crypto";
+import { createHash as createHash3 } from "crypto";
 init_paths();
 function nowDate() {
   return /* @__PURE__ */ new Date();
@@ -14062,33 +14730,47 @@ function mirrorConfigured(raw) {
   const endpoints = mirrorEndpoints(parseRegistries(raw), PERSONAL_LOCAL_REGISTRY_HOST);
   return endpoints.length === 1 && endpoints[0] === PERSONAL_LOCAL_REGISTRY_NODE_ENDPOINT;
 }
-async function applyUnlessCollecting(ctx) {
+async function applyUnlessCollecting(ctx, auth) {
   const deployment = await readRegistryDeployment(ctx.exec);
   if (!deployment) throw new Error("the registry's Deployment could not be read");
   if (gcMarkIsLive(deployment.mark, (ctx.now ?? nowDate)().getTime(), ctx.isAlive)) return false;
   if (deployment.mark !== null && !await deleteSweepJob(ctx.exec)) {
     throw new Error("a stopped cleanup's Job could not be deleted, so the registry stays stopped");
   }
-  await kubectlApply(ctx.exec, renderLocalRegistryManifests());
+  await kubectlApply(ctx.exec, renderLocalRegistryManifests(auth));
   if (deployment.mark !== null) await clearGcMark(ctx.exec);
   return true;
 }
 async function deployLocalRegistry(ctx) {
   await ctx.fs.ensureDir(LOCAL_REGISTRY_DATA_DIR, 448);
-  const applied = await applyUnlessCollecting(ctx);
+  const credentials = await loadOrCreateRegistryCredentials(ctx.fs, ctx.random);
   const raw = await ctx.fs.readFile(REGISTRIES_FILE);
-  if (mirrorConfigured(raw)) return { applied, mirrorWritten: false, backupPath: null };
-  const next = upsertRegistryMirror(parseRegistries(raw), PERSONAL_LOCAL_REGISTRY_HOST, [
-    PERSONAL_LOCAL_REGISTRY_NODE_ENDPOINT
-  ]);
-  const backupPath = await writeRegistriesWithBackup(ctx.fs, raw, next, (ctx.now ?? nowDate)());
-  return { applied, mirrorWritten: true, backupPath };
+  let file = parseRegistries(raw);
+  const mirrorWritten = !mirrorConfigured(raw);
+  const authWritten = !registryAuthConfigured(file, credentials);
+  let backupPath = null;
+  if (mirrorWritten) {
+    file = upsertRegistryMirror(file, PERSONAL_LOCAL_REGISTRY_HOST, [
+      PERSONAL_LOCAL_REGISTRY_NODE_ENDPOINT
+    ]);
+  }
+  if (authWritten) file = withLocalRegistryAuth(file, credentials);
+  if (mirrorWritten || authWritten) {
+    backupPath = await writeRegistriesWithBackup(ctx.fs, raw, file, (ctx.now ?? nowDate)());
+  }
+  const authEnforced = await settleRegistryAuth(ctx, credentials, authWritten);
+  await kubectlApply(ctx.exec, renderLocalRegistrySecrets(credentials));
+  const applied = await applyUnlessCollecting(ctx, authEnforced ? credentials : null);
+  return { applied, mirrorWritten, authWritten, backupPath, authEnforced };
 }
 async function readMirrorState(fs2) {
   const raw = await fs2.readFile(REGISTRIES_FILE);
-  const fingerprint = createHash("sha256").update(raw ?? "").digest("hex");
+  const authPending = !await registryAuthEnforced((path) => fs2.readFile(path));
+  const fingerprint = createHash3("sha256").update(raw ?? "").digest("hex");
   if (!mirrorConfigured(raw)) return { state: "absent", fingerprint };
-  if (await mirrorLoaded((path) => fs2.readFile(path))) return { state: "loaded", fingerprint };
+  if (!authPending && await mirrorLoaded((path) => fs2.readFile(path))) {
+    return { state: "loaded", fingerprint };
+  }
   const tried = (await fs2.readFile(LOCAL_REGISTRY_MIRROR_RESTART_FILE))?.trim() === fingerprint;
   return { state: tried ? "tried" : "owed", fingerprint };
 }
@@ -14100,14 +14782,14 @@ async function loadRegistryMirror(ctx) {
   if (state === "tried") {
     return {
       restarted: false,
-      warning: `k3s restarted but did not load the local image registry's mirror, so pods cannot pull from that registry. Conveyor restarts k3s for it again only after /etc/rancher/k3s/registries.yaml changes. Check that k3s reads that file and keeps its data in the default directory: the mirror should appear under ${K3S_CERTS_D}.`
+      warning: `k3s restarted but did not load the local image registry's mirror or credential, so pods cannot pull from that registry or the registry stays open to every account on this machine. Conveyor restarts k3s for it again only after /etc/rancher/k3s/registries.yaml changes. Check that k3s reads that file and keeps its data in the default directory: the mirror should appear under ${K3S_CERTS_D}.`
     };
   }
   if (state !== "owed") return { restarted: false, warning: null };
   if (!mayDisrupt(ctx.runningConveyorPods)) {
     return {
       restarted: false,
-      warning: `The local image registry needs a k3s restart to load its mirror, but ${busyReason(ctx.runningConveyorPods)} \u2014 the restart is deferred until the machine is idle.`
+      warning: `The local image registry needs a k3s restart to load its mirror or credential, but ${busyReason(ctx.runningConveyorPods)} \u2014 the restart is deferred until the machine is idle.`
     };
   }
   const restart = await ctx.exec("systemctl", ["restart", "k3s"], { timeoutMs: 12e4 });
@@ -14138,7 +14820,18 @@ async function stdoutOf(exec, bin, args) {
   const run = await exec(bin, args, { timeoutMs: 1e4 }).catch(() => null);
   return run && run.exitCode === 0 ? run.stdout : null;
 }
+async function dropInDirExists(exec) {
+  const run = await exec("test", ["-d", K3S_CONFIG_DROPIN_DIR], { timeoutMs: 1e4 }).catch(
+    () => null
+  );
+  if (run === null) return null;
+  if (run.exitCode === 0) return true;
+  return run.exitCode === 1 && run.stderr.trim() === "" ? false : null;
+}
 async function readK3sConfigs(ctx) {
+  const dirExists = await dropInDirExists(ctx.exec);
+  if (dirExists === null) return null;
+  if (!dirExists) return [await ctx.fs.readFile(K3S_OWNER_CONFIG)];
   const listed = await stdoutOf(ctx.exec, "find", [
     "-L",
     K3S_CONFIG_DROPIN_DIR,
@@ -14432,7 +15125,7 @@ async function reportLocalImages(exec, inventory, wantedImages, cache) {
   if (!inventory) return void 0;
   const wanted = new Set(wantedImages);
   const held = inventory.images.flatMap(
-    (image) => (image.repoTags ?? []).filter((ref) => ref.startsWith("localhost/") && isImageRef(ref)).map((ref) => ({ ref, imageId: image.id }))
+    (image) => (image.repoTags ?? []).filter((ref) => (ref.startsWith("localhost/") || wanted.has(ref)) && isImageRef(ref)).map((ref) => ({ ref, imageId: image.id }))
   );
   held.sort(
     (a, b) => Number(wanted.has(b.ref)) - Number(wanted.has(a.ref)) || (a.ref < b.ref ? -1 : a.ref > b.ref ? 1 : 0)
@@ -14504,14 +15197,22 @@ async function readImageInventory(exec) {
   }
   return { images, referencedIds };
 }
+var CRICTL_RMI_TIMEOUT = "120s";
+var RMI_EXEC_TIMEOUT_MS = 15e4;
+var DEADLINE_EXCEEDED = "context deadline exceeded";
 async function pruneStrandedImages(exec, inventory, wantedImages) {
   const candidates = selectStrandedImages(inventory, wantedImages);
-  const result = { removed: 0, bytesReclaimed: 0, failures: [] };
+  const result = { removed: 0, bytesReclaimed: 0, failures: [], pending: [] };
   for (const candidate of candidates) {
-    const removal = await exec("crictl", ["rmi", candidate.id]);
+    const removal = await exec("crictl", ["--timeout", CRICTL_RMI_TIMEOUT, "rmi", candidate.id], {
+      timeoutMs: RMI_EXEC_TIMEOUT_MS
+    });
     if (removal.exitCode === 0) {
       result.removed += 1;
       result.bytesReclaimed += candidate.sizeBytes;
+    } else if (`${removal.stderr}
+${removal.stdout}`.includes(DEADLINE_EXCEEDED)) {
+      result.pending.push(candidate.id);
     } else {
       result.failures.push(`${candidate.id}: ${removal.stderr.trim().slice(0, 120)}`);
     }
@@ -14613,17 +15314,26 @@ function countPinnedWanted(inventory, wantedImages) {
 // src/daemon/telemetry.ts
 init_paths();
 var LOCAL_REGISTRY_WARN_AFTER_MS = 10 * 6e4;
+var LOCAL_REGISTRY_OPEN_WARNING = "The local image registry is open to every account on this machine: any of them can read and replace the images your workspaces start from. It requires its credential once k3s restarts and loads it.";
 async function reportLocalRegistry(ports, watch2, now = Date.now()) {
   if (!watch2) return { fields: {}, warnings: [] };
-  const ready = await localRegistryReady({ readFile: ports.readFile, fetch: ports.fetch });
+  const { ready, authEnforced } = await localRegistryStatus({
+    readFile: ports.readFile,
+    fetch: ports.fetch
+  });
   const paused = (watch2.pausedUntil ?? 0) > now;
   watch2.notReadySince = ready || paused ? null : watch2.notReadySince ?? now;
   const stuckMs = watch2.notReadySince === null ? 0 : now - watch2.notReadySince;
-  return {
-    fields: { localRegistry: { host: PERSONAL_LOCAL_REGISTRY_HOST, ready } },
-    warnings: stuckMs >= LOCAL_REGISTRY_WARN_AFTER_MS ? [
+  const warnings = [];
+  if (stuckMs >= LOCAL_REGISTRY_WARN_AFTER_MS) {
+    warnings.push(
       `The local image registry has not been ready for ${Math.floor(stuckMs / 6e4)} minutes, so shadow bakes cannot use it yet. Check its pod with \`k3s kubectl -n conveyor-system get pods -l app.kubernetes.io/name=conveyor-registry\`. If the pod is running, k3s has not loaded the registry's mirror yet: it restarts k3s for that only while no Conveyor pod runs.`
-    ] : []
+    );
+  }
+  if (!authEnforced) warnings.push(LOCAL_REGISTRY_OPEN_WARNING);
+  return {
+    fields: { localRegistry: { host: PERSONAL_LOCAL_REGISTRY_HOST, ready, authEnforced } },
+    warnings
   };
 }
 var VM_CAPACITY_FILE = "/etc/conveyor-vm/capacity.json";
@@ -14746,6 +15456,7 @@ async function collectHeartbeat(ports, state, inventory) {
     ...localImages ? { localImages } : {},
     ...registry.fields,
     ...state.isolation ? { isolation: state.isolation } : {},
+    ...state.cpuQuotaApplied === void 0 ? {} : { cpuQuotaApplied: state.cpuQuotaApplied },
     localWarnings: withinHeartbeatBounds([
       ...state.localWarnings,
       ...gcWarning ? [gcWarning] : [],
@@ -14796,7 +15507,15 @@ async function collect(ports, now) {
   if (watch2) watch2.pausedUntil = now.getTime() + REGISTRY_GC_MARK_TTL_MS;
   try {
     const outcome = await collectRegistryGarbage(
-      { exec, log: log2, requestDesiredState, fetch: fetch2, sleep: sleep4, isAlive },
+      {
+        exec,
+        log: log2,
+        requestDesiredState,
+        fetch: fetch2,
+        readFile: (path) => ports.fs.readFile(path),
+        sleep: sleep4,
+        isAlive
+      },
       { dryRun: false }
     );
     if (outcome.skipped) return outcome.skipped;
@@ -14842,48 +15561,7 @@ async function runRegistryUpkeep(ports, lastGcAt, maintenanceHour) {
 }
 
 // src/daemon/reconcile.ts
-function ownerRestartWarning(change) {
-  return `${change} Conveyor did not install this server's k3s, so it never restarts it: run \`sudo systemctl restart k3s\` when no build runs.`;
-}
-async function reconcileKubelet(ctx, desired, result, managed) {
-  const ownerConfig = await ctx.fs.readFile(K3S_OWNER_CONFIG);
-  const rendered = renderK3sDropIn(desired.kubelet, ownerConfig, { disableComponents: managed });
-  result.skippedKubeletFlags = rendered.skipped;
-  result.effectiveImageGcHighThreshold = rendered.skipped.includes("image-gc-high-threshold") ? ownerImageGcHighThreshold(ownerConfig) : desired.kubelet.imageGcHighThreshold;
-  for (const flag of rendered.skipped) {
-    result.warnings.push(
-      `Left \`${flag}\` to your own /etc/rancher/k3s/config.yaml \u2014 Conveyor does not override a setting you chose.`
-    );
-  }
-  const current = await ctx.fs.readFile(K3S_CONFIG_DROPIN);
-  if (rendered.content === null) {
-    if (current !== null) await ctx.fs.removeFile(K3S_CONFIG_DROPIN);
-    return;
-  }
-  if (current === rendered.content) return;
-  await ctx.fs.ensureDir(K3S_CONFIG_DROPIN.slice(0, K3S_CONFIG_DROPIN.lastIndexOf("/")));
-  await ctx.fs.writeFile(K3S_CONFIG_DROPIN, rendered.content, 420);
-  if (!managed) {
-    result.warnings.push(ownerRestartWarning("Kubelet settings changed."));
-    return;
-  }
-  if (!mayDisrupt(ctx.runningConveyorPods)) {
-    result.warnings.push(
-      `Kubelet settings changed but ${busyReason(ctx.runningConveyorPods)} \u2014 the restart is deferred until the machine is idle.`
-    );
-    return;
-  }
-  const restart = await ctx.exec("systemctl", ["restart", "k3s"], { timeoutMs: 12e4 });
-  if (restart.exitCode === 0) {
-    result.restartedK3s = true;
-  } else {
-    result.warnings.push(
-      `Could not restart k3s to apply new kubelet settings: ${restart.stderr.trim().slice(0, 200)}`
-    );
-  }
-}
-async function reconcilePriorityClass(ctx, desired, result) {
-  const name2 = assertK8sName(desired.priorityClass.name, "priorityClass.name");
+async function livePriorityClassValue(ctx, name2) {
   const read = await ctx.exec("k3s", [
     "kubectl",
     "get",
@@ -14892,30 +15570,59 @@ async function reconcilePriorityClass(ctx, desired, result) {
     "-o",
     "jsonpath={.value}"
   ]);
-  if (read.exitCode !== 0) return;
-  const existingValue = Number.parseInt(read.stdout.trim(), 10);
-  if (existingValue === desired.priorityClass.value) return;
+  const value = Number.parseInt(read.stdout.trim(), 10);
+  return read.exitCode === 0 && Number.isFinite(value) ? value : null;
+}
+async function reconcilePriorityClass(ctx, desired, result) {
+  const name2 = assertK8sName(desired.priorityClass.name, "priorityClass.name");
+  const wanted = desired.priorityClass.value;
+  const existingValue = await livePriorityClassValue(ctx, name2);
+  if (existingValue === null || existingValue === wanted) return "ready";
+  if (!declaresPriorityClass(desired.rbacManifest, name2, wanted)) {
+    result.warnings.push(
+      `The \`${name2}\` PriorityClass has value ${existingValue}, but Conveyor's manifest does not declare it at ${wanted}, so it is left as it is. This should never happen; report it.`
+    );
+    return "kept";
+  }
   if (!mayDisrupt(ctx.runningConveyorPods)) {
     result.warnings.push(
-      `The \`${name2}\` PriorityClass has value ${existingValue}, but Conveyor needs ${desired.priorityClass.value}. The value is immutable, so it must be recreated \u2014 deferred because ${busyReason(ctx.runningConveyorPods)}.`
+      `The \`${name2}\` PriorityClass has value ${existingValue}, but Conveyor needs ${wanted}. The value is immutable, so it must be recreated \u2014 deferred because ${busyReason(ctx.runningConveyorPods)}.`
     );
-    return;
+    return "kept";
   }
-  const removed = await ctx.exec("k3s", ["kubectl", "delete", "priorityclass", name2]);
+  const removed = await ctx.exec("k3s", [
+    "kubectl",
+    "delete",
+    "priorityclass",
+    name2,
+    "--ignore-not-found"
+  ]);
   if (removed.exitCode !== 0) {
     result.warnings.push(
-      `Could not replace the \`${name2}\` PriorityClass (value ${existingValue}, needs ${desired.priorityClass.value}): ${removed.stderr.trim().slice(0, 160)}`
+      `Could not replace the \`${name2}\` PriorityClass (value ${existingValue}, needs ${wanted}): ${removed.stderr.trim().slice(0, 160)}`
     );
-    return;
+    return "kept";
   }
+  return "removed";
+}
+async function applyRbac(ctx, desired, result) {
+  const outcome = await reconcilePriorityClass(ctx, desired, result);
+  const manifest = outcome === "kept" ? withoutKind(desired.rbacManifest, "PriorityClass") : desired.rbacManifest;
   try {
-    await kubectlApply(ctx.exec, desired.rbacManifest);
-    result.recreatedPriorityClass = true;
+    await kubectlApply(ctx.exec, manifest);
   } catch (error) {
+    if (outcome !== "removed") throw error;
+    const value = await livePriorityClassValue(ctx, desired.priorityClass.name).catch(() => null);
+    if (value === desired.priorityClass.value) {
+      result.recreatedPriorityClass = true;
+      throw error;
+    }
     result.warnings.push(
-      `The \`${name2}\` PriorityClass was removed to change its value but could not be recreated: ${error instanceof Error ? error.message : String(error)}. No build can start on this machine until it exists \u2014 run \`conveyor-k3 sync\`.`
+      `The \`${desired.priorityClass.name}\` PriorityClass was removed to change its value but could not be recreated: ${error instanceof Error ? error.message : String(error)}. No build can start on this machine until it exists \u2014 run \`conveyor-k3 sync\`.`
     );
+    return;
   }
+  if (outcome === "removed") result.recreatedPriorityClass = true;
 }
 async function step(result, label2, run) {
   try {
@@ -14941,12 +15648,7 @@ async function reconcile(ctx, desired) {
       `Conveyor sent a cluster manifest containing disallowed kind(s) ${disallowedKinds.join(", ")} \u2014 refused. RBAC and PriorityClass steps skipped; this should never happen, report it.`
     );
   } else {
-    await step(result, "Could not apply RBAC", () => kubectlApply(ctx.exec, desired.rbacManifest));
-    await step(
-      result,
-      "Could not reconcile the PriorityClass",
-      () => reconcilePriorityClass(ctx, desired, result)
-    );
+    await step(result, "Could not apply RBAC", () => applyRbac(ctx, desired, result));
   }
   await step(
     result,
@@ -14978,11 +15680,23 @@ async function reconcile(ctx, desired) {
     "Could not apply kubelet settings",
     () => reconcileKubelet(ctx, desired, result, managed)
   );
+  if (desired.isolation !== void 0) {
+    await step(result, "Could not cap pod CPU", async () => {
+      result.cpuQuotaApplied = await reconcilePodCpuQuota(ctx.exec, desired, result.warnings);
+    });
+    if (desired.kubelet.systemReserved?.cpu && result.cpuQuotaApplied === void 0) {
+      result.cpuQuotaApplied = false;
+    }
+  }
   if (registry && !result.restartedK3s) {
     await step(result, "Could not load the local image registry mirror", async () => {
       if (!managed) {
         if (await registryMirrorPending(ctx.fs))
-          result.warnings.push(ownerRestartWarning("The local image registry's mirror is new."));
+          result.warnings.push(
+            ownerRestartWarning(
+              "The local image registry's mirror or credential is new, and the registry stays open to every account on this machine until k3s loads it."
+            )
+          );
         return;
       }
       const loaded = await loadRegistryMirror(ctx);
@@ -15039,6 +15753,7 @@ async function enrollMachine(ports, env, cloudflaredBin, recorded = {}) {
     const enrollment = await connection.enroll();
     log2(`Enrolled as ${enrollment.hostname}.`);
     await installUnits(ports, enrollment, cloudflaredBin, enrollment.desiredState.maintenance.hour);
+    await ensureServiceAccount(ports);
     const runningConveyorPods = await countRunningConveyorPods(exec);
     const result = await reconcile({ exec, fs: fs2, runningConveyorPods }, enrollment.desiredState);
     for (const warning of result.warnings) log2(warning);
@@ -15060,30 +15775,6 @@ async function enrollMachine(ports, env, cloudflaredBin, recorded = {}) {
   for (const line of renderRegistryAuthSummary(missing)) log2(line);
 }
 
-// src/lib/bins.ts
-var INSTALLER_PATHS = {
-  bun: "/root/.bun/bin/bun",
-  cli: "/root/.bun/bin/conveyor-k3",
-  cloudflared: "/usr/local/bin/cloudflared"
-};
-async function whichOrNull(exec, bin) {
-  const result = await exec("which", [bin]).catch(() => null);
-  if (!result || result.exitCode !== 0) return null;
-  const path = result.stdout.trim().split("\n")[0]?.trim();
-  return path && path.startsWith("/") ? path : null;
-}
-async function resolveBinaries(exec, state, selfPath) {
-  const recorded = state.bins;
-  const cliSelf = selfPath?.startsWith("/") ? selfPath : null;
-  return {
-    bun: recorded?.bun ?? await whichOrNull(exec, "bun") ?? INSTALLER_PATHS.bun,
-    // `cli` prefers the running process's own path: if this code is executing,
-    // that path is by definition correct.
-    cli: cliSelf ?? recorded?.cli ?? await whichOrNull(exec, "conveyor-k3") ?? INSTALLER_PATHS.cli,
-    cloudflared: recorded?.cloudflared ?? await whichOrNull(exec, "cloudflared") ?? INSTALLER_PATHS.cloudflared
-  };
-}
-
 // src/lib/guest-vm.ts
 async function requireGuestVm(exec) {
   try {
@@ -15171,6 +15862,8 @@ var ClusterDaemon = class {
    * against k3s's own settings before reporting it.
    */
   isolation = void 0;
+  /** Whether the pod slice's CPU cap is in force, from the last reconcile. */
+  cpuQuotaApplied = void 0;
   timers = [];
   /** When the last store walk started, so one that failed is not retried on every reconcile. */
   storeWalkStartedAt = 0;
@@ -15253,6 +15946,7 @@ var ClusterDaemon = class {
     );
     this.warnings = result.warnings;
     this.isolation = result.isolation;
+    this.cpuQuotaApplied = result.cpuQuotaApplied;
     this.scheduleIsolationRetry();
     for (const warning of result.warnings) this.ports.log(warning);
     if (result.prunedNamespaces.length > 0) {
@@ -15409,6 +16103,11 @@ var ClusterDaemon = class {
         );
       }
       for (const failure of result.failures) this.ports.log(`Image prune failed \u2014 ${failure}`);
+      if (result.pending.length > 0) {
+        this.ports.log(
+          `Image removal still in progress for ${result.pending.length} image(s); the next prune re-checks them.`
+        );
+      }
     } catch (error) {
       this.ports.log(
         `Skipping image prune: ${error instanceof Error ? error.message : String(error)}`
@@ -15447,6 +16146,7 @@ var ClusterDaemon = class {
         localImageHashes: this.localImageHashes,
         ...registryOn ? { localRegistry: this.registryWatch } : {},
         ...isolation.isolation ? { isolation: isolation.isolation } : {},
+        cpuQuotaApplied: this.cpuQuotaApplied,
         k3sStoreBytes: this.measuredStoreBytes
       },
       inventory
@@ -15643,7 +16343,7 @@ var log = (line) => {
 function resolveVersion() {
   try {
     const url = new URL("../package.json", import.meta.url);
-    const pkg = JSON.parse(readFileSync5(url, "utf8"));
+    const pkg = JSON.parse(readFileSync6(url, "utf8"));
     return pkg.version ?? "0.0.0";
   } catch {
     return "0.0.0";
@@ -15662,7 +16362,7 @@ function setupPorts(exec) {
 async function runSetup(exec) {
   await requireRoot(exec);
   await requireGuestVm(exec);
-  const env = readCliEnv();
+  const env = readCliEnv(process.env, null);
   const ports = setupPorts(exec);
   const { cloudflaredBin } = await prepareMachine(ports);
   await enrollMachine(ports, env, cloudflaredBin);
@@ -15672,15 +16372,23 @@ async function runHostSetup(exec) {
   const { cloudflaredBin } = await prepareMachine(ports);
   let env;
   try {
-    env = readCliEnv();
+    env = readCliEnv(process.env, null);
   } catch {
     const state = await readState(nodeFileSystem);
     log(
       state.enrolled ? `Prepared. This server is already linked as ${state.hostname}; its daemon keeps it current. To move it to another account, run: sudo conveyor-k3 host link --relink` : "Prepared. This server is not linked yet \u2014 run: sudo conveyor-k3 host link --name=<name>"
     );
+    await reportCliInstall(exec);
     return;
   }
   await enrollMachine(ports, env, cloudflaredBin, { runtime: "host" });
+  await reportCliInstall(exec);
+}
+async function reportCliInstall(exec) {
+  const linked = await linkCliOnPath(exec);
+  if (linked.problem) log(linked.problem);
+  const hint = await npmCopyHint((path) => nodeFileSystem.readFile(path));
+  if (hint) log(hint);
 }
 function hostPorts(exec) {
   return {
@@ -15755,6 +16463,8 @@ async function runStatus(exec, asJson, notEnrolledHint = "conveyor-k3 setup") {
   }
   const k3s = await exec("k3s", ["--version"]).catch(() => null);
   const version = k3s ? parseK3sVersion(k3s.stdout || k3s.stderr) : null;
+  const bins = await resolveBinaries(exec, state, process.argv[1]);
+  const cloudflaredUpdates = await cloudflaredUpdater(exec, bins.cloudflared);
   const report = {
     cliVersion: resolveVersion(),
     hostname: state.hostname,
@@ -15765,6 +16475,7 @@ async function runStatus(exec, asJson, notEnrolledHint = "conveyor-k3 setup") {
     lastWarmAt: state.lastWarmAt,
     lastPruneAt: state.lastPruneAt,
     runningConveyorPods: await countRunningConveyorPods(exec),
+    cloudflaredUpdates,
     ...state.runtime ? { runtime: state.runtime } : {}
   };
   if (asJson) {
@@ -15778,6 +16489,7 @@ async function runStatus(exec, asJson, notEnrolledHint = "conveyor-k3 setup") {
   if (state.runtime) log(`runtime: ${state.runtime}`);
   log(`k3s: ${report.k3sVersion ?? "not detected"}`);
   for (const [unit, active] of Object.entries(units)) log(`${unit}: ${active}`);
+  log(describeCloudflaredUpdater(cloudflaredUpdates));
   log(`Settings version applied: ${report.appliedSettingsVersion}`);
   log(`Conveyor pods running: ${report.runningConveyorPods}`);
 }