bundler-npm passes

well, most of the time. the final parallelism test fails a lot, but i
think it's due to the fundamental raciness of renameDirAlmostAtomically.