Repository navigation
Adds images --max-size <size>, the mirror of --min-size: images that would free more are evicted only once nothing else is left. With --lru, --stale-after <duration> (no default) lets images unused for longer go by age alone, so replaced builds don't hold disk. Order with --lru: stale, the rest, under --min-size, over --max-size, oldest first within each group.
On cork's workers, re-pulling evicted builds accounts for 67% of pull wait. The worst re-pulls are 2–3.5 GB images at 20–46 s each, against about 0.5 s for a small one. Measured deletes cost per file rather than per byte, and several small deletes stall container creates less than one large one.
The use record gains a # began <secs> first line, which 1.4.0 skips. Images seeded when the record started age from that time, so a new or deleted record doesn't make every image stale at once. A record showing no use within --stale-after triggers a warning instead of making everything stale. Bad --target/--threshold or size bounds are now refused at startup; before, a pass logged the error and exited 0 without evicting anything.