@otterdeploy/docker 0.2.0 → 0.3.0

package/dist/index.mjs

@@ -1,2947 +1,6 @@
-import * as fs from "node:fs";
-import * as path from "node:path";
-import * as http from "node:http";
-import { Result, TaggedError } from "better-result";
-import * as https from "node:https";
-import { Client } from "ssh2";
-import { Duplex, PassThrough, Readable } from "node:stream";
-import * as grpc from "@grpc/grpc-js";
-import * as protoLoader from "@grpc/proto-loader";
-import { randomUUID } from "node:crypto";
-import { EventEmitter } from "node:events";
-
-//#region src/errors.ts
-var DockerBadRequestError = class extends TaggedError("DockerBadRequestError")() {
-	statusCode = 400;
-};
-var DockerUnauthorizedError = class extends TaggedError("DockerUnauthorizedError")() {
-	statusCode = 401;
-};
-var DockerForbiddenError = class extends TaggedError("DockerForbiddenError")() {
-	statusCode = 403;
-};
-var DockerNotFoundError = class extends TaggedError("DockerNotFoundError")() {
-	statusCode = 404;
-};
-var DockerConflictError = class extends TaggedError("DockerConflictError")() {
-	statusCode = 409;
-};
-var DockerServerError = class extends TaggedError("DockerServerError")() {
-	statusCode = 500;
-};
-var DockerServiceUnavailableError = class extends TaggedError("DockerServiceUnavailableError")() {
-	statusCode = 503;
-};
-var DockerNetworkError = class extends TaggedError("DockerNetworkError")() {};
-var DockerTimeoutError = class extends TaggedError("DockerTimeoutError")() {};
-var DockerAbortError = class extends TaggedError("DockerAbortError")() {};
-var DockerDecodeError = class extends TaggedError("DockerDecodeError")() {};
-var DockerUnknownError = class extends TaggedError("DockerUnknownError")() {};
-/**
-* Maps an HTTP status code to the appropriate Docker error class.
-* Unknown status codes produce a DockerUnknownError.
-*/
-function statusCodeToError(statusCode, message) {
-	switch (statusCode) {
-		case 400: return new DockerBadRequestError({ message });
-		case 401: return new DockerUnauthorizedError({ message });
-		case 403: return new DockerForbiddenError({ message });
-		case 404: return new DockerNotFoundError({ message });
-		case 409: return new DockerConflictError({ message });
-		case 500: return new DockerServerError({ message });
-		case 503: return new DockerServiceUnavailableError({ message });
-		default: return new DockerUnknownError({
-			message,
-			statusCode
-		});
-	}
-}
-
-//#endregion
-//#region src/transport/helpers.ts
-/**
-* Shared helper functions used across all transport implementations.
-*/
-/**
-* Builds the request path, appending query parameters if present.
-*/
-function buildPath(path, query) {
-	if (!query || Object.keys(query).length === 0) return path;
-	const params = new URLSearchParams();
-	for (const [key, value] of Object.entries(query)) if (value !== void 0 && value !== null) params.append(key, String(value));
-	return `${path}?${params.toString()}`;
-}
-/**
-* Collects all chunks from a readable stream into a single string.
-*/
-function collectBody(stream) {
-	return new Promise((resolve, reject) => {
-		const chunks = [];
-		stream.on("data", (chunk) => chunks.push(chunk));
-		stream.on("end", () => resolve(Buffer.concat(chunks).toString("utf-8")));
-		stream.on("error", reject);
-	});
-}
-/**
-* Extracts error message from Docker API error response body.
-* Docker typically returns `{ message: "..." }`.
-*/
-function extractErrorMessage(body) {
-	try {
-		const parsed = JSON.parse(body);
-		if (typeof parsed === "object" && parsed !== null && typeof parsed.message === "string") return parsed.message;
-	} catch {}
-	return body || "Unknown error";
-}
-
-//#endregion
-//#region src/transport/unix-transport.ts
-var UnixTransport = class {
-	socketPath;
-	requestFn;
-	constructor(options) {
-		this.socketPath = options.socketPath ?? process.env.DOCKER_HOST?.replace("unix://", "") ?? "/var/run/docker.sock";
-		this.requestFn = options._requestFn ?? http.request;
-	}
-	async dial(options) {
-		return Result.tryPromise({
-			try: () => this.performRequest(options, false),
-			catch: (cause) => this.convertError(cause)
-		});
-	}
-	async dialStream(options) {
-		return Result.tryPromise({
-			try: () => this.performRequest(options, true),
-			catch: (cause) => this.convertError(cause)
-		});
-	}
-	async dialHijack(options) {
-		return Result.tryPromise({
-			try: () => this.performHijack(options),
-			catch: (cause) => this.convertError(cause)
-		});
-	}
-	destroy() {}
-	performHijack(options) {
-		return new Promise((resolve, reject) => {
-			const requestPath = buildPath(options.path, options.query);
-			const headers = {
-				Connection: "Upgrade",
-				Upgrade: "tcp",
-				...options.headers
-			};
-			if (options.authconfig) headers["X-Registry-Auth"] = Buffer.from(JSON.stringify(options.authconfig)).toString("base64");
-			const body = options.body;
-			let bodyStr;
-			if (body !== void 0 && typeof body !== "string" && !Buffer.isBuffer(body)) {
-				bodyStr = JSON.stringify(body);
-				if (!headers["Content-Type"] && !headers["content-type"]) headers["Content-Type"] = "application/json";
-				headers["Content-Length"] = Buffer.byteLength(bodyStr).toString();
-			}
-			const req = this.requestFn({
-				socketPath: this.socketPath,
-				path: requestPath,
-				method: options.method,
-				headers
-			}, (res) => {
-				reject(new DockerNetworkError({
-					message: `Expected upgrade response, got status ${res.statusCode}`,
-					cause: void 0
-				}));
-			});
-			req.on("upgrade", (_res, socket, _head) => {
-				resolve(socket);
-			});
-			req.on("error", (err) => {
-				reject(new DockerNetworkError({
-					message: `Connection error: ${err.message}`,
-					cause: err
-				}));
-			});
-			if (bodyStr !== void 0) req.write(bodyStr);
-			req.end();
-		});
-	}
-	performRequest(options, isStream) {
-		return new Promise((resolve, reject) => {
-			const requestPath = buildPath(options.path, options.query);
-			const headers = { ...options.headers };
-			if (options.authconfig) headers["X-Registry-Auth"] = Buffer.from(JSON.stringify(options.authconfig)).toString("base64");
-			if (options.registryconfig) headers["X-Registry-Config"] = Buffer.from(JSON.stringify(options.registryconfig)).toString("base64");
-			const body = options.body;
-			const isStreamBody = body !== null && body !== void 0 && typeof body === "object" && typeof body.pipe === "function";
-			const isBufferBody = Buffer.isBuffer(body);
-			const isStringBody = typeof body === "string";
-			let bodyStr;
-			if (body !== void 0 && !isStreamBody && !isBufferBody && !isStringBody) {
-				bodyStr = JSON.stringify(body);
-				if (!headers["Content-Type"] && !headers["content-type"]) headers["Content-Type"] = "application/json";
-				headers["Content-Length"] = Buffer.byteLength(bodyStr).toString();
-			} else if (isBufferBody) headers["Content-Length"] = body.length.toString();
-			else if (isStringBody) headers["Content-Length"] = Buffer.byteLength(body).toString();
-			else if (isStreamBody) headers["Transfer-Encoding"] = "chunked";
-			const req = this.requestFn({
-				socketPath: this.socketPath,
-				path: requestPath,
-				method: options.method,
-				headers
-			}, (res) => {
-				const statusCode = res.statusCode ?? 0;
-				const responseHeaders = res.headers ?? {};
-				const isSuccess = options.statusCodes[statusCode] === true;
-				if (isStream && isSuccess) {
-					resolve(res);
-					return;
-				}
-				collectBody(res).then((bodyText) => {
-					if (isSuccess) {
-						if (statusCode === 204 || bodyText.length === 0) {
-							resolve({
-								statusCode,
-								headers: responseHeaders,
-								body: null
-							});
-							return;
-						}
-						try {
-							resolve({
-								statusCode,
-								headers: responseHeaders,
-								body: JSON.parse(bodyText)
-							});
-						} catch {
-							resolve({
-								statusCode,
-								headers: responseHeaders,
-								body: bodyText
-							});
-						}
-					} else reject(statusCodeToError(statusCode, extractErrorMessage(bodyText)));
-				}).catch((collectErr) => {
-					reject(new DockerNetworkError({
-						message: `Failed to read response body: ${String(collectErr)}`,
-						cause: collectErr
-					}));
-				});
-			});
-			req.on("error", (err) => {
-				reject(new DockerNetworkError({
-					message: `Connection error: ${err.message}`,
-					cause: err
-				}));
-			});
-			if (options.timeout !== void 0) req.setTimeout(options.timeout, () => {
-				req.destroy();
-				reject(new DockerTimeoutError({
-					message: `Request timed out after ${options.timeout}ms`,
-					timeoutMs: options.timeout
-				}));
-			});
-			if (options.signal) {
-				if (options.signal.aborted) {
-					req.destroy();
-					reject(new DockerAbortError({ message: "Request aborted" }));
-					return;
-				}
-				options.signal.addEventListener("abort", () => {
-					req.destroy();
-					reject(new DockerAbortError({ message: "Request aborted" }));
-				}, { once: true });
-			}
-			if (isStreamBody) body.pipe(req);
-			else if (isBufferBody) {
-				req.write(body);
-				req.end();
-			} else if (isStringBody) {
-				req.write(body);
-				req.end();
-			} else if (bodyStr !== void 0) {
-				req.write(bodyStr);
-				req.end();
-			} else req.end();
-		});
-	}
-	/**
-	* Converts errors thrown from the inner promise back into DockerError types.
-	* Errors that are already tagged DockerErrors pass through; unknown errors
-	* become DockerNetworkError.
-	*/
-	convertError(cause) {
-		if (cause !== null && typeof cause === "object" && "_tag" in cause) return cause;
-		return new DockerNetworkError({
-			message: `Unexpected error: ${cause instanceof Error ? cause.message : String(cause)}`,
-			cause
-		});
-	}
-};
-
-//#endregion
-//#region src/transport/tcp-transport.ts
-var TcpTransport = class {
-	host;
-	port;
-	agent;
-	useHttps;
-	requestFn;
-	constructor(options) {
-		this.useHttps = !!options.tls;
-		this.host = options.host;
-		this.port = options.port ?? (this.useHttps ? 2376 : 2375);
-		if (options.tls) this.agent = new https.Agent({
-			ca: options.tls.ca,
-			cert: options.tls.cert,
-			key: options.tls.key,
-			rejectUnauthorized: options.tls.rejectUnauthorized ?? true
-		});
-		this.requestFn = options._requestFn ?? (this.useHttps ? https.request : http.request);
-	}
-	async dial(options) {
-		return Result.tryPromise({
-			try: () => this.performRequest(options, false),
-			catch: (cause) => this.convertError(cause)
-		});
-	}
-	async dialStream(options) {
-		return Result.tryPromise({
-			try: () => this.performRequest(options, true),
-			catch: (cause) => this.convertError(cause)
-		});
-	}
-	async dialHijack(options) {
-		return Result.tryPromise({
-			try: () => this.performHijack(options),
-			catch: (cause) => this.convertError(cause)
-		});
-	}
-	destroy() {
-		if (this.agent) this.agent.destroy();
-	}
-	performHijack(options) {
-		return new Promise((resolve, reject) => {
-			const requestPath = buildPath(options.path, options.query);
-			const headers = {
-				Connection: "Upgrade",
-				Upgrade: "tcp",
-				...options.headers
-			};
-			if (options.authconfig) headers["X-Registry-Auth"] = Buffer.from(JSON.stringify(options.authconfig)).toString("base64");
-			const body = options.body;
-			let bodyStr;
-			if (body !== void 0 && typeof body !== "string" && !Buffer.isBuffer(body)) {
-				bodyStr = JSON.stringify(body);
-				if (!headers["Content-Type"] && !headers["content-type"]) headers["Content-Type"] = "application/json";
-				headers["Content-Length"] = Buffer.byteLength(bodyStr).toString();
-			}
-			const requestOpts = {
-				hostname: this.host,
-				port: this.port,
-				path: requestPath,
-				method: options.method,
-				headers
-			};
-			if (this.agent) requestOpts.agent = this.agent;
-			const req = this.requestFn(requestOpts, (res) => {
-				reject(new DockerNetworkError({
-					message: `Expected upgrade response, got status ${res.statusCode}`,
-					cause: void 0
-				}));
-			});
-			req.on("upgrade", (_res, socket, _head) => {
-				resolve(socket);
-			});
-			req.on("error", (err) => {
-				reject(new DockerNetworkError({
-					message: `Connection error: ${err.message}`,
-					cause: err
-				}));
-			});
-			if (bodyStr !== void 0) req.write(bodyStr);
-			req.end();
-		});
-	}
-	performRequest(options, isStream) {
-		return new Promise((resolve, reject) => {
-			const requestPath = buildPath(options.path, options.query);
-			const headers = { ...options.headers };
-			if (options.authconfig) headers["X-Registry-Auth"] = Buffer.from(JSON.stringify(options.authconfig)).toString("base64");
-			if (options.registryconfig) headers["X-Registry-Config"] = Buffer.from(JSON.stringify(options.registryconfig)).toString("base64");
-			const body = options.body;
-			const isStreamBody = body !== null && body !== void 0 && typeof body === "object" && typeof body.pipe === "function";
-			const isBufferBody = Buffer.isBuffer(body);
-			const isStringBody = typeof body === "string";
-			let bodyStr;
-			if (body !== void 0 && !isStreamBody && !isBufferBody && !isStringBody) {
-				bodyStr = JSON.stringify(body);
-				if (!headers["Content-Type"] && !headers["content-type"]) headers["Content-Type"] = "application/json";
-				headers["Content-Length"] = Buffer.byteLength(bodyStr).toString();
-			} else if (isBufferBody) headers["Content-Length"] = body.length.toString();
-			else if (isStringBody) headers["Content-Length"] = Buffer.byteLength(body).toString();
-			else if (isStreamBody) headers["Transfer-Encoding"] = "chunked";
-			const requestOpts = {
-				hostname: this.host,
-				port: this.port,
-				path: requestPath,
-				method: options.method,
-				headers
-			};
-			if (this.agent) requestOpts.agent = this.agent;
-			const req = this.requestFn(requestOpts, (res) => {
-				const statusCode = res.statusCode ?? 0;
-				const responseHeaders = res.headers ?? {};
-				const isSuccess = options.statusCodes[statusCode] === true;
-				if (isStream && isSuccess) {
-					resolve(res);
-					return;
-				}
-				collectBody(res).then((bodyText) => {
-					if (isSuccess) {
-						if (statusCode === 204 || bodyText.length === 0) {
-							resolve({
-								statusCode,
-								headers: responseHeaders,
-								body: null
-							});
-							return;
-						}
-						try {
-							resolve({
-								statusCode,
-								headers: responseHeaders,
-								body: JSON.parse(bodyText)
-							});
-						} catch {
-							resolve({
-								statusCode,
-								headers: responseHeaders,
-								body: bodyText
-							});
-						}
-					} else reject(statusCodeToError(statusCode, extractErrorMessage(bodyText)));
-				}).catch((collectErr) => {
-					reject(new DockerNetworkError({
-						message: `Failed to read response body: ${String(collectErr)}`,
-						cause: collectErr
-					}));
-				});
-			});
-			req.on("error", (err) => {
-				reject(new DockerNetworkError({
-					message: `Connection error: ${err.message}`,
-					cause: err
-				}));
-			});
-			if (options.timeout !== void 0) req.setTimeout(options.timeout, () => {
-				req.destroy();
-				reject(new DockerTimeoutError({
-					message: `Request timed out after ${options.timeout}ms`,
-					timeoutMs: options.timeout
-				}));
-			});
-			if (options.signal) {
-				if (options.signal.aborted) {
-					req.destroy();
-					reject(new DockerAbortError({ message: "Request aborted" }));
-					return;
-				}
-				options.signal.addEventListener("abort", () => {
-					req.destroy();
-					reject(new DockerAbortError({ message: "Request aborted" }));
-				}, { once: true });
-			}
-			if (isStreamBody) body.pipe(req);
-			else if (isBufferBody) {
-				req.write(body);
-				req.end();
-			} else if (isStringBody) {
-				req.write(body);
-				req.end();
-			} else if (bodyStr !== void 0) {
-				req.write(bodyStr);
-				req.end();
-			} else req.end();
-		});
-	}
-	/**
-	* Converts errors thrown from the inner promise back into DockerError types.
-	* Errors that are already tagged DockerErrors pass through; unknown errors
-	* become DockerNetworkError.
-	*/
-	convertError(cause) {
-		if (cause !== null && typeof cause === "object" && "_tag" in cause) return cause;
-		return new DockerNetworkError({
-			message: `Unexpected error: ${cause instanceof Error ? cause.message : String(cause)}`,
-			cause
-		});
-	}
-};
-
-//#endregion
-//#region src/transport/ssh-transport.ts
-/**
-* Builds a raw HTTP/1.1 request string to send over the dial-stdio stream.
-*/
-function buildHttpRequest(options) {
-	const requestPath = buildPath(options.path, options.query);
-	const headers = {
-		Host: "docker",
-		...options.headers
-	};
-	if (options.authconfig) headers["X-Registry-Auth"] = Buffer.from(JSON.stringify(options.authconfig)).toString("base64");
-	if (options.registryconfig) headers["X-Registry-Config"] = Buffer.from(JSON.stringify(options.registryconfig)).toString("base64");
-	const body = options.body;
-	const isStreamBody = body !== null && body !== void 0 && typeof body === "object" && typeof body.pipe === "function";
-	const isBufferBody = Buffer.isBuffer(body);
-	const isStringBody = typeof body === "string";
-	let bodyStr;
-	if (body !== void 0 && !isStreamBody && !isBufferBody && !isStringBody) {
-		bodyStr = JSON.stringify(body);
-		if (!headers["Content-Type"] && !headers["content-type"]) headers["Content-Type"] = "application/json";
-		headers["Content-Length"] = Buffer.byteLength(bodyStr).toString();
-	} else if (isBufferBody) {
-		bodyStr = body.toString();
-		headers["Content-Length"] = body.length.toString();
-	} else if (isStringBody) {
-		bodyStr = body;
-		headers["Content-Length"] = Buffer.byteLength(body).toString();
-	} else if (isStreamBody) headers["Transfer-Encoding"] = "chunked";
-	let header = `${options.method} ${requestPath} HTTP/1.1\r\n`;
-	for (const [key, value] of Object.entries(headers)) header += `${key}: ${value}\r\n`;
-	header += "\r\n";
-	return {
-		header,
-		bodyStr
-	};
-}
-/**
-* Parses a raw HTTP response from the stream into status code, headers, and body.
-*/
-function parseHttpResponse(raw) {
-	const headerEndIdx = raw.indexOf("\r\n\r\n");
-	const headerSection = headerEndIdx >= 0 ? raw.slice(0, headerEndIdx) : raw;
-	const body = headerEndIdx >= 0 ? raw.slice(headerEndIdx + 4) : "";
-	const lines = headerSection.split("\r\n");
-	const statusMatch = (lines[0] ?? "").match(/^HTTP\/\d\.\d\s+(\d+)/);
-	const statusCode = statusMatch?.[1] ? Number.parseInt(statusMatch[1], 10) : 0;
-	const headers = {};
-	for (let i = 1; i < lines.length; i++) {
-		const line = lines[i];
-		if (!line) continue;
-		const colonIdx = line.indexOf(":");
-		if (colonIdx > 0) {
-			const key = line.slice(0, colonIdx).trim().toLowerCase();
-			headers[key] = line.slice(colonIdx + 1).trim();
-		}
-	}
-	return {
-		statusCode,
-		headers,
-		body
-	};
-}
-var SshTransport = class {
-	host;
-	port;
-	username;
-	privateKey;
-	passphrase;
-	clientFactory;
-	constructor(opts) {
-		this.host = opts.host;
-		this.port = opts.port ?? 22;
-		this.username = opts.username;
-		this.privateKey = opts.privateKey;
-		this.passphrase = opts.passphrase;
-		this.clientFactory = opts._clientFactory ?? (() => new Client());
-	}
-	async dial(options) {
-		return Result.tryPromise({
-			try: () => this.performRequest(options, false),
-			catch: (cause) => this.convertError(cause)
-		});
-	}
-	async dialStream(options) {
-		return Result.tryPromise({
-			try: () => this.performRequest(options, true),
-			catch: (cause) => this.convertError(cause)
-		});
-	}
-	async dialHijack(_options) {
-		return Result.err(new DockerNetworkError({
-			message: "dialHijack is not supported over SSH transport",
-			cause: void 0
-		}));
-	}
-	destroy() {}
-	/**
-	* Connects to the SSH host, runs `docker system dial-stdio`, writes an
-	* HTTP request over the resulting bidirectional stream, and parses the
-	* HTTP response.
-	*/
-	performRequest(options, isStream) {
-		return new Promise((resolve, reject) => {
-			const client = this.clientFactory();
-			client.on("ready", () => {
-				client.exec("docker system dial-stdio", (err, stream) => {
-					if (err) {
-						client.end();
-						reject(new DockerNetworkError({
-							message: `SSH exec error: ${err.message}`,
-							cause: err
-						}));
-						return;
-					}
-					const { header, bodyStr: httpBody } = buildHttpRequest(options);
-					stream.write(header);
-					const body = options.body;
-					if (body !== null && body !== void 0 && typeof body === "object" && typeof body.pipe === "function") body.pipe(stream, { end: false });
-					else if (httpBody !== void 0) stream.write(httpBody);
-					const chunks = [];
-					stream.on("data", (chunk) => {
-						chunks.push(chunk);
-					});
-					stream.on("end", () => {
-						client.end();
-						const { statusCode, headers, body } = parseHttpResponse(Buffer.concat(chunks).toString("utf-8"));
-						const isSuccess = options.statusCodes[statusCode] === true;
-						if (isStream && isSuccess) {
-							resolve(new Readable({ read() {
-								this.push(body ? Buffer.from(body) : null);
-								this.push(null);
-							} }));
-							return;
-						}
-						if (isSuccess) {
-							if (statusCode === 204 || body.length === 0) {
-								resolve({
-									statusCode,
-									headers,
-									body: null
-								});
-								return;
-							}
-							try {
-								resolve({
-									statusCode,
-									headers,
-									body: JSON.parse(body)
-								});
-							} catch {
-								resolve({
-									statusCode,
-									headers,
-									body
-								});
-							}
-						} else reject(statusCodeToError(statusCode, extractErrorMessage(body)));
-					});
-					stream.on("error", (streamErr) => {
-						client.end();
-						reject(new DockerNetworkError({
-							message: `Stream error: ${streamErr.message}`,
-							cause: streamErr
-						}));
-					});
-				});
-			});
-			client.on("error", (connErr) => {
-				reject(new DockerNetworkError({
-					message: `SSH connection error: ${connErr.message}`,
-					cause: connErr
-				}));
-			});
-			client.connect({
-				host: this.host,
-				port: this.port,
-				username: this.username,
-				privateKey: this.privateKey,
-				passphrase: this.passphrase
-			});
-		});
-	}
-	/**
-	* Converts errors thrown from the inner promise back into DockerError types.
-	* Errors that are already tagged DockerErrors pass through; unknown errors
-	* become DockerNetworkError.
-	*/
-	convertError(cause) {
-		if (cause !== null && typeof cause === "object" && "_tag" in cause) return cause;
-		return new DockerNetworkError({
-			message: `Unexpected error: ${cause instanceof Error ? cause.message : String(cause)}`,
-			cause
-		});
-	}
-};
-
-//#endregion
-//#region src/transport/npipe-transport.ts
-const DEFAULT_PIPE_PATH = "\\\\.\\pipe\\docker_engine";
-var NamedPipeTransport = class {
-	pipePath;
-	requestFn;
-	constructor(options) {
-		this.pipePath = options.path ?? DEFAULT_PIPE_PATH;
-		this.requestFn = options._requestFn ?? http.request;
-	}
-	async dial(options) {
-		return Result.tryPromise({
-			try: () => this.performRequest(options, false),
-			catch: (cause) => this.convertError(cause)
-		});
-	}
-	async dialStream(options) {
-		return Result.tryPromise({
-			try: () => this.performRequest(options, true),
-			catch: (cause) => this.convertError(cause)
-		});
-	}
-	async dialHijack(options) {
-		return Result.tryPromise({
-			try: () => this.performHijack(options),
-			catch: (cause) => this.convertError(cause)
-		});
-	}
-	destroy() {}
-	performHijack(options) {
-		return new Promise((resolve, reject) => {
-			const requestPath = buildPath(options.path, options.query);
-			const headers = {
-				Connection: "Upgrade",
-				Upgrade: "tcp",
-				...options.headers
-			};
-			if (options.authconfig) headers["X-Registry-Auth"] = Buffer.from(JSON.stringify(options.authconfig)).toString("base64");
-			const body = options.body;
-			let bodyStr;
-			if (body !== void 0 && typeof body !== "string" && !Buffer.isBuffer(body)) {
-				bodyStr = JSON.stringify(body);
-				if (!headers["Content-Type"] && !headers["content-type"]) headers["Content-Type"] = "application/json";
-				headers["Content-Length"] = Buffer.byteLength(bodyStr).toString();
-			}
-			const req = this.requestFn({
-				socketPath: this.pipePath,
-				path: requestPath,
-				method: options.method,
-				headers
-			}, (res) => {
-				reject(new DockerNetworkError({
-					message: `Expected upgrade response, got status ${res.statusCode}`,
-					cause: void 0
-				}));
-			});
-			req.on("upgrade", (_res, socket, _head) => {
-				resolve(socket);
-			});
-			req.on("error", (err) => {
-				reject(new DockerNetworkError({
-					message: `Connection error: ${err.message}`,
-					cause: err
-				}));
-			});
-			if (bodyStr !== void 0) req.write(bodyStr);
-			req.end();
-		});
-	}
-	performRequest(options, isStream) {
-		return new Promise((resolve, reject) => {
-			const requestPath = buildPath(options.path, options.query);
-			const headers = { ...options.headers };
-			if (options.authconfig) headers["X-Registry-Auth"] = Buffer.from(JSON.stringify(options.authconfig)).toString("base64");
-			if (options.registryconfig) headers["X-Registry-Config"] = Buffer.from(JSON.stringify(options.registryconfig)).toString("base64");
-			const body = options.body;
-			const isStreamBody = body !== null && body !== void 0 && typeof body === "object" && typeof body.pipe === "function";
-			const isBufferBody = Buffer.isBuffer(body);
-			const isStringBody = typeof body === "string";
-			let bodyStr;
-			if (body !== void 0 && !isStreamBody && !isBufferBody && !isStringBody) {
-				bodyStr = JSON.stringify(body);
-				if (!headers["Content-Type"] && !headers["content-type"]) headers["Content-Type"] = "application/json";
-				headers["Content-Length"] = Buffer.byteLength(bodyStr).toString();
-			} else if (isBufferBody) headers["Content-Length"] = body.length.toString();
-			else if (isStringBody) headers["Content-Length"] = Buffer.byteLength(body).toString();
-			else if (isStreamBody) headers["Transfer-Encoding"] = "chunked";
-			const req = this.requestFn({
-				socketPath: this.pipePath,
-				path: requestPath,
-				method: options.method,
-				headers
-			}, (res) => {
-				const statusCode = res.statusCode ?? 0;
-				const responseHeaders = res.headers ?? {};
-				const isSuccess = options.statusCodes[statusCode] === true;
-				if (isStream && isSuccess) {
-					resolve(res);
-					return;
-				}
-				collectBody(res).then((bodyText) => {
-					if (isSuccess) {
-						if (statusCode === 204 || bodyText.length === 0) {
-							resolve({
-								statusCode,
-								headers: responseHeaders,
-								body: null
-							});
-							return;
-						}
-						try {
-							resolve({
-								statusCode,
-								headers: responseHeaders,
-								body: JSON.parse(bodyText)
-							});
-						} catch {
-							resolve({
-								statusCode,
-								headers: responseHeaders,
-								body: bodyText
-							});
-						}
-					} else reject(statusCodeToError(statusCode, extractErrorMessage(bodyText)));
-				}).catch((collectErr) => {
-					reject(new DockerNetworkError({
-						message: `Failed to read response body: ${String(collectErr)}`,
-						cause: collectErr
-					}));
-				});
-			});
-			req.on("error", (err) => {
-				reject(new DockerNetworkError({
-					message: `Connection error: ${err.message}`,
-					cause: err
-				}));
-			});
-			if (options.timeout !== void 0) req.setTimeout(options.timeout, () => {
-				req.destroy();
-				reject(new DockerTimeoutError({
-					message: `Request timed out after ${options.timeout}ms`,
-					timeoutMs: options.timeout
-				}));
-			});
-			if (options.signal) {
-				if (options.signal.aborted) {
-					req.destroy();
-					reject(new DockerAbortError({ message: "Request aborted" }));
-					return;
-				}
-				options.signal.addEventListener("abort", () => {
-					req.destroy();
-					reject(new DockerAbortError({ message: "Request aborted" }));
-				}, { once: true });
-			}
-			if (isStreamBody) body.pipe(req);
-			else if (isBufferBody) {
-				req.write(body);
-				req.end();
-			} else if (isStringBody) {
-				req.write(body);
-				req.end();
-			} else if (bodyStr !== void 0) {
-				req.write(bodyStr);
-				req.end();
-			} else req.end();
-		});
-	}
-	convertError(cause) {
-		if (cause !== null && typeof cause === "object" && "_tag" in cause) return cause;
-		return new DockerNetworkError({
-			message: `Unexpected error: ${cause instanceof Error ? cause.message : String(cause)}`,
-			cause
-		});
-	}
-};
-
-//#endregion
-//#region src/transport/index.ts
-function createTransport(config) {
-	switch (config.type) {
-		case "unix": return new UnixTransport({ socketPath: config.socketPath });
-		case "tcp": return new TcpTransport({
-			host: config.host,
-			port: config.port,
-			tls: config.tls
-		});
-		case "ssh": return new SshTransport({
-			host: config.host,
-			port: config.port,
-			username: config.username,
-			privateKey: config.privateKey
-		});
-		case "npipe": return new NamedPipeTransport({ path: config.path });
-	}
-}
-/**
-* Create a transport by auto-detecting configuration from environment variables.
-*
-* Environment variables:
-* - DOCKER_HOST: Docker daemon socket (unix://, tcp://, ssh://, npipe://)
-* - DOCKER_TLS_VERIFY: Set to "1" to enable TLS verification
-* - DOCKER_CERT_PATH: Directory containing ca.pem, cert.pem, key.pem
-* - DOCKER_CLIENT_TIMEOUT: Default timeout in seconds
-*/
-function createTransportFromEnv() {
-	const dockerHost = process.env.DOCKER_HOST;
-	const tlsVerify = process.env.DOCKER_TLS_VERIFY === "1";
-	const certPath = process.env.DOCKER_CERT_PATH;
-	if (!dockerHost) return new UnixTransport({});
-	if (dockerHost.startsWith("unix://")) return new UnixTransport({ socketPath: dockerHost.replace("unix://", "") });
-	if (dockerHost.startsWith("npipe://")) return new NamedPipeTransport({ path: dockerHost.replace("npipe://", "") });
-	if (dockerHost.startsWith("ssh://")) {
-		const url = new URL(dockerHost);
-		return new SshTransport({
-			host: url.hostname,
-			port: url.port ? Number.parseInt(url.port, 10) : 22,
-			username: url.username || "root"
-		});
-	}
-	if (dockerHost.startsWith("tcp://")) {
-		const url = new URL(dockerHost);
-		const host = url.hostname;
-		const port = url.port ? Number.parseInt(url.port, 10) : void 0;
-		let tls;
-		if (tlsVerify || certPath) {
-			tls = { rejectUnauthorized: tlsVerify };
-			if (certPath) {
-				const caPath = path.join(certPath, "ca.pem");
-				const certFilePath = path.join(certPath, "cert.pem");
-				const keyPath = path.join(certPath, "key.pem");
-				if (fs.existsSync(caPath)) tls.ca = fs.readFileSync(caPath, "utf-8");
-				if (fs.existsSync(certFilePath)) tls.cert = fs.readFileSync(certFilePath, "utf-8");
-				if (fs.existsSync(keyPath)) tls.key = fs.readFileSync(keyPath, "utf-8");
-			}
-		}
-		return new TcpTransport({
-			host,
-			port,
-			tls
-		});
-	}
-	return new UnixTransport({ socketPath: dockerHost });
-}
-
-//#endregion
-//#region src/client/dial.ts
-async function typedDial(transport, options) {
-	return (await transport.dial(options)).map((res) => res.body);
-}
-async function voidDial(transport, options) {
-	return (await transport.dial(options)).map(() => void 0);
-}
-
-//#endregion
-//#region src/client/system.ts
-var SystemOperations = class {
-	constructor(transport, apiVersion) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-	}
-	async ping() {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/_ping`,
-			statusCodes: {
-				200: true,
-				500: "server error"
-			}
-		});
-	}
-	async info() {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/info`,
-			statusCodes: {
-				200: true,
-				500: "server error"
-			}
-		});
-	}
-	async version() {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/version`,
-			statusCodes: {
-				200: true,
-				500: "server error"
-			}
-		});
-	}
-	async df() {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/system/df`,
-			statusCodes: {
-				200: true,
-				500: "server error"
-			}
-		});
-	}
-	async swarmInit(options) {
-		return typedDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/swarm/init`,
-			body: options,
-			statusCodes: {
-				200: true,
-				400: "bad parameter",
-				500: "server error",
-				503: "node is already part of a swarm"
-			}
-		});
-	}
-	async swarmJoin(options) {
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/swarm/join`,
-			body: options,
-			statusCodes: {
-				200: true,
-				400: "bad parameter",
-				500: "server error",
-				503: "node is already part of a swarm"
-			}
-		});
-	}
-	async swarmLeave(options) {
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/swarm/leave`,
-			query: options,
-			statusCodes: {
-				200: true,
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async swarmUpdate(options) {
-		const { version, rotateWorkerToken, rotateManagerToken, rotateManagerUnlockKey, ...body } = options;
-		const query = { version };
-		if (rotateWorkerToken !== void 0) query.rotateWorkerToken = rotateWorkerToken;
-		if (rotateManagerToken !== void 0) query.rotateManagerToken = rotateManagerToken;
-		if (rotateManagerUnlockKey !== void 0) query.rotateManagerUnlockKey = rotateManagerUnlockKey;
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/swarm/update`,
-			query,
-			body,
-			statusCodes: {
-				200: true,
-				400: "bad parameter",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async swarmInspect() {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/swarm`,
-			statusCodes: {
-				200: true,
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async events(options) {
-		return this.transport.dialStream({
-			method: "GET",
-			path: `/${this.apiVersion}/events`,
-			query: options,
-			statusCodes: {
-				200: true,
-				500: "server error"
-			}
-		});
-	}
-	async auth(options) {
-		return typedDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/auth`,
-			body: options,
-			statusCodes: {
-				200: true,
-				204: true,
-				500: "server error"
-			}
-		});
-	}
-	async pruneBuilder(options) {
-		return typedDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/build/prune`,
-			query: options,
-			statusCodes: {
-				200: true,
-				500: "server error"
-			}
-		});
-	}
-};
-
-//#endregion
-//#region src/transport/http-duplex.ts
-/**
-* HttpDuplex wraps a raw net.Socket (obtained from HTTP hijack/upgrade)
-* into a Node.js Duplex stream for bidirectional I/O.
-*
-* Used for interactive attach/exec operations where stdin needs to be
-* written to the connection while stdout/stderr is read from it.
-*/
-var HttpDuplex = class extends Duplex {
-	socket;
-	constructor(socket) {
-		super();
-		this.socket = socket;
-		socket.on("data", (chunk) => {
-			if (!this.push(chunk)) socket.pause();
-		});
-		socket.on("end", () => {
-			this.push(null);
-		});
-		socket.on("error", (err) => {
-			this.destroy(err);
-		});
-		socket.on("close", () => {
-			this.push(null);
-		});
-	}
-	_read(_size) {
-		this.socket.resume();
-	}
-	_write(chunk, _encoding, callback) {
-		this.socket.write(chunk, callback);
-	}
-	_final(callback) {
-		this.socket.end(callback);
-	}
-	_destroy(error, callback) {
-		this.socket.destroy(error ?? void 0);
-		callback(error);
-	}
-};
-
-//#endregion
-//#region src/client/exec.ts
-var Exec = class {
-	id;
-	constructor(transport, apiVersion, id) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-		this.id = id;
-	}
-	async start(options) {
-		const { stdin, ...startOpts } = options ?? {};
-		if (stdin) return (await this.transport.dialHijack({
-			method: "POST",
-			path: `/${this.apiVersion}/exec/${this.id}/start`,
-			body: startOpts,
-			hijack: true,
-			openStdin: true,
-			statusCodes: {
-				200: true,
-				101: true,
-				404: "no such exec instance",
-				409: "container is paused",
-				500: "server error"
-			}
-		})).map((socket) => new HttpDuplex(socket));
-		return this.transport.dialStream({
-			method: "POST",
-			path: `/${this.apiVersion}/exec/${this.id}/start`,
-			body: Object.keys(startOpts).length > 0 ? startOpts : void 0,
-			statusCodes: {
-				200: true,
-				404: "no such exec instance",
-				409: "container is paused",
-				500: "server error"
-			}
-		});
-	}
-	async resize(options) {
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/exec/${this.id}/resize`,
-			query: options,
-			statusCodes: {
-				200: true,
-				404: "no such exec instance",
-				500: "server error"
-			}
-		});
-	}
-	async inspect() {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/exec/${this.id}/json`,
-			statusCodes: {
-				200: true,
-				404: "no such exec instance",
-				500: "server error"
-			}
-		});
-	}
-};
-
-//#endregion
-//#region src/client/container.ts
-var Container = class {
-	id;
-	constructor(transport, apiVersion, id) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-		this.id = id;
-	}
-	async inspect() {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/containers/${this.id}/json`,
-			statusCodes: {
-				200: true,
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-	async start() {
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/containers/${this.id}/start`,
-			statusCodes: {
-				204: true,
-				304: true,
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-	async stop(options) {
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/containers/${this.id}/stop`,
-			query: options,
-			statusCodes: {
-				204: true,
-				304: true,
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-	async restart(options) {
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/containers/${this.id}/restart`,
-			query: options,
-			statusCodes: {
-				204: true,
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-	async kill(options) {
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/containers/${this.id}/kill`,
-			query: options,
-			statusCodes: {
-				204: true,
-				404: "no such container",
-				409: "container is not running",
-				500: "server error"
-			}
-		});
-	}
-	async pause() {
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/containers/${this.id}/pause`,
-			statusCodes: {
-				204: true,
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-	async unpause() {
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/containers/${this.id}/unpause`,
-			statusCodes: {
-				204: true,
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-	async remove(options) {
-		return voidDial(this.transport, {
-			method: "DELETE",
-			path: `/${this.apiVersion}/containers/${this.id}`,
-			query: options,
-			statusCodes: {
-				204: true,
-				400: "bad parameter",
-				404: "no such container",
-				409: "conflict",
-				500: "server error"
-			}
-		});
-	}
-	async rename(name) {
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/containers/${this.id}/rename`,
-			query: { name },
-			statusCodes: {
-				204: true,
-				404: "no such container",
-				409: "name already in use",
-				500: "server error"
-			}
-		});
-	}
-	async update(options) {
-		return typedDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/containers/${this.id}/update`,
-			body: options,
-			statusCodes: {
-				200: true,
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-	async top(psArgs) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/containers/${this.id}/top`,
-			query: psArgs ? { ps_args: psArgs } : void 0,
-			statusCodes: {
-				200: true,
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-	async changes() {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/containers/${this.id}/changes`,
-			statusCodes: {
-				200: true,
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-	async logs(options) {
-		return this.transport.dialStream({
-			method: "GET",
-			path: `/${this.apiVersion}/containers/${this.id}/logs`,
-			query: options,
-			statusCodes: {
-				200: true,
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-	async stats(options) {
-		return this.transport.dialStream({
-			method: "GET",
-			path: `/${this.apiVersion}/containers/${this.id}/stats`,
-			query: options,
-			statusCodes: {
-				200: true,
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-	async wait(options) {
-		return typedDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/containers/${this.id}/wait`,
-			query: options,
-			statusCodes: {
-				200: true,
-				400: "bad parameter",
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-	async resize(options) {
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/containers/${this.id}/resize`,
-			query: options,
-			statusCodes: {
-				200: true,
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-	async attach(options) {
-		if (options?.stdin) return (await this.transport.dialHijack({
-			method: "POST",
-			path: `/${this.apiVersion}/containers/${this.id}/attach`,
-			query: options,
-			hijack: true,
-			openStdin: true,
-			statusCodes: {
-				200: true,
-				101: true,
-				404: "no such container",
-				500: "server error"
-			}
-		})).map((socket) => new HttpDuplex(socket));
-		return this.transport.dialStream({
-			method: "POST",
-			path: `/${this.apiVersion}/containers/${this.id}/attach`,
-			query: options,
-			statusCodes: {
-				200: true,
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-	async exec(options) {
-		return (await typedDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/containers/${this.id}/exec`,
-			body: options,
-			statusCodes: {
-				201: true,
-				404: "no such container",
-				409: "container is paused",
-				500: "server error"
-			}
-		})).map((body) => new Exec(this.transport, this.apiVersion, body.Id));
-	}
-	async export() {
-		return this.transport.dialStream({
-			method: "GET",
-			path: `/${this.apiVersion}/containers/${this.id}/export`,
-			statusCodes: {
-				200: true,
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-	async getArchive(options) {
-		return this.transport.dialStream({
-			method: "GET",
-			path: `/${this.apiVersion}/containers/${this.id}/archive`,
-			query: { path: options.path },
-			statusCodes: {
-				200: true,
-				400: "bad parameter",
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-	async putArchive(options, stream) {
-		return voidDial(this.transport, {
-			method: "PUT",
-			path: `/${this.apiVersion}/containers/${this.id}/archive`,
-			query: { path: options.path },
-			body: stream,
-			headers: { "content-type": "application/x-tar" },
-			statusCodes: {
-				200: true,
-				400: "bad parameter",
-				403: "permission denied",
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-	async listCheckpoints() {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/containers/${this.id}/checkpoints`,
-			statusCodes: {
-				200: true,
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-	async createCheckpoint(options) {
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/containers/${this.id}/checkpoints`,
-			body: options,
-			statusCodes: {
-				201: true,
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-	async deleteCheckpoint(name) {
-		return voidDial(this.transport, {
-			method: "DELETE",
-			path: `/${this.apiVersion}/containers/${this.id}/checkpoints/${name}`,
-			statusCodes: {
-				204: true,
-				404: "no such checkpoint",
-				500: "server error"
-			}
-		});
-	}
-	async infoArchive(options) {
-		return (await this.transport.dial({
-			method: "HEAD",
-			path: `/${this.apiVersion}/containers/${this.id}/archive`,
-			query: { path: options.path },
-			statusCodes: {
-				200: true,
-				400: "bad parameter",
-				404: "no such container",
-				500: "server error"
-			}
-		})).map((res) => {
-			const statHeader = res.headers["x-docker-container-path-stat"];
-			if (statHeader) return JSON.parse(Buffer.from(statHeader, "base64").toString("utf-8"));
-			return {};
-		});
-	}
-	async commit(options) {
-		const query = { container: this.id };
-		if (options) {
-			const { repo, tag, comment, author, pause, changes, ...rest } = options;
-			if (repo !== void 0) query.repo = repo;
-			if (tag !== void 0) query.tag = tag;
-			if (comment !== void 0) query.comment = comment;
-			if (author !== void 0) query.author = author;
-			if (pause !== void 0) query.pause = pause;
-			if (changes !== void 0) query.changes = changes;
-			Object.assign(query, rest);
-		}
-		return typedDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/commit`,
-			query,
-			statusCodes: {
-				201: true,
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-};
-var ContainerOperations = class {
-	constructor(transport, apiVersion) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-	}
-	async list(options) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/containers/json`,
-			query: options,
-			statusCodes: {
-				200: true,
-				400: "bad parameter",
-				500: "server error"
-			}
-		});
-	}
-	async create(options) {
-		const { name, platform, ...body } = options;
-		const query = {};
-		if (name !== void 0) query.name = name;
-		if (platform !== void 0) query.platform = platform;
-		return (await typedDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/containers/create`,
-			query: Object.keys(query).length > 0 ? query : void 0,
-			body,
-			statusCodes: {
-				201: true,
-				400: "bad parameter",
-				404: "no such image",
-				409: "conflict",
-				500: "server error"
-			}
-		})).map((resp) => new Container(this.transport, this.apiVersion, resp.Id));
-	}
-	async inspect(id) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/containers/${id}/json`,
-			statusCodes: {
-				200: true,
-				404: "no such container",
-				500: "server error"
-			}
-		});
-	}
-	async prune(options) {
-		return typedDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/containers/prune`,
-			query: options,
-			statusCodes: {
-				200: true,
-				500: "server error"
-			}
-		});
-	}
-	getContainer(id) {
-		return new Container(this.transport, this.apiVersion, id);
-	}
-};
-
-//#endregion
-//#region src/session/index.ts
-/**
-* Establishes a BuildKit gRPC session over a hijacked HTTP connection.
-*
-* This is used for BuildKit v2 builds to provide registry credentials
-* to the builder during image builds.
-*/
-async function withSession(transport, apiVersion, auth) {
-	const sessionId = randomUUID();
-	const socketResult = await transport.dialHijack({
-		method: "POST",
-		path: `/${apiVersion}/session`,
-		hijack: true,
-		headers: {
-			Upgrade: "h2c",
-			"X-Docker-Expose-Session-Uuid": sessionId,
-			"X-Docker-Expose-Session-Name": "docker-sdk"
-		},
-		statusCodes: {
-			200: true,
-			101: true,
-			500: "server error"
-		}
-	});
-	if (socketResult.isErr()) return socketResult;
-	const socket = socketResult.value;
-	try {
-		const server = new grpc.Server();
-		const creds = grpc.ServerCredentials.createInsecure();
-		server.createConnectionInjector(creds).injectConnection(socket);
-		const protoPath = path.resolve(import.meta.dirname, "auth.proto");
-		const pkg = protoLoader.loadSync(protoPath);
-		const authService = grpc.loadPackageDefinition(pkg).moby?.filesync?.v1?.Auth?.service;
-		if (authService) server.addService(authService, {
-			Credentials({ request: _request }, callback) {
-				if (auth) callback(null, {
-					Username: auth.username ?? "",
-					Secret: auth.password ?? ""
-				});
-				else callback(null, {});
-			},
-			FetchToken(_call, callback) {
-				callback(null, {});
-			},
-			GetTokenAuthority(_call, callback) {
-				callback(null, {});
-			},
-			VerifyTokenAuthority(_call, callback) {
-				callback(null, {});
-			}
-		});
-		const close = () => {
-			server.forceShutdown();
-			socket.end();
-		};
-		return Result.ok({
-			sessionId,
-			close
-		});
-	} catch (err) {
-		socket.end();
-		return Result.err(new DockerNetworkError({
-			message: `Failed to create gRPC session: ${err instanceof Error ? err.message : String(err)}`,
-			cause: err
-		}));
-	}
-}
-
-//#endregion
-//#region src/client/image.ts
-var Image = class {
-	name;
-	constructor(transport, apiVersion, name) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-		this.name = name;
-	}
-	async inspect() {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/images/${this.name}/json`,
-			statusCodes: {
-				200: true,
-				404: "no such image",
-				500: "server error"
-			}
-		});
-	}
-	async history() {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/images/${this.name}/history`,
-			statusCodes: {
-				200: true,
-				404: "no such image",
-				500: "server error"
-			}
-		});
-	}
-	async push(options) {
-		return this.transport.dialStream({
-			method: "POST",
-			path: `/${this.apiVersion}/images/${this.name}/push`,
-			query: options,
-			statusCodes: {
-				200: true,
-				404: "no such image",
-				500: "server error"
-			}
-		});
-	}
-	async tag(options) {
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/images/${this.name}/tag`,
-			query: options,
-			statusCodes: {
-				201: true,
-				400: "bad parameter",
-				404: "no such image",
-				409: "conflict",
-				500: "server error"
-			}
-		});
-	}
-	async remove(options) {
-		return typedDial(this.transport, {
-			method: "DELETE",
-			path: `/${this.apiVersion}/images/${this.name}`,
-			query: options,
-			statusCodes: {
-				200: true,
-				404: "no such image",
-				409: "conflict",
-				500: "server error"
-			}
-		});
-	}
-	async get() {
-		return this.transport.dialStream({
-			method: "GET",
-			path: `/${this.apiVersion}/images/${this.name}/get`,
-			statusCodes: {
-				200: true,
-				500: "server error"
-			}
-		});
-	}
-	async distribution() {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/distribution/${this.name}/json`,
-			statusCodes: {
-				200: true,
-				401: "authentication required",
-				500: "server error"
-			}
-		});
-	}
-};
-var ImageOperations = class {
-	constructor(transport, apiVersion) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-	}
-	async list(options) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/images/json`,
-			query: options,
-			statusCodes: {
-				200: true,
-				500: "server error"
-			}
-		});
-	}
-	async create(options) {
-		return this.transport.dialStream({
-			method: "POST",
-			path: `/${this.apiVersion}/images/create`,
-			query: options,
-			statusCodes: {
-				200: true,
-				404: "no such image",
-				500: "server error"
-			}
-		});
-	}
-	async build(context, options) {
-		const { authconfig, registryconfig, ...queryOpts } = options ?? {};
-		if (queryOpts.version === "2") {
-			const sessionResult = await withSession(this.transport, this.apiVersion, authconfig);
-			if (sessionResult.isErr()) return sessionResult;
-			const { sessionId, close } = sessionResult.value;
-			queryOpts.session = sessionId;
-			const buildResult = await this.transport.dialStream({
-				method: "POST",
-				path: `/${this.apiVersion}/build`,
-				query: Object.keys(queryOpts).length > 0 ? queryOpts : void 0,
-				body: context,
-				headers: { "Content-Type": "application/x-tar" },
-				registryconfig,
-				statusCodes: {
-					200: true,
-					400: "bad parameter",
-					500: "server error"
-				}
-			});
-			if (buildResult.isErr()) {
-				close();
-				return buildResult;
-			}
-			const stream = buildResult.value;
-			stream.on("end", close);
-			stream.on("error", close);
-			return buildResult;
-		}
-		return this.transport.dialStream({
-			method: "POST",
-			path: `/${this.apiVersion}/build`,
-			query: Object.keys(queryOpts).length > 0 ? queryOpts : void 0,
-			body: context,
-			headers: { "Content-Type": "application/x-tar" },
-			authconfig,
-			registryconfig,
-			statusCodes: {
-				200: true,
-				400: "bad parameter",
-				500: "server error"
-			}
-		});
-	}
-	async load(stream) {
-		return this.transport.dialStream({
-			method: "POST",
-			path: `/${this.apiVersion}/images/load`,
-			body: stream,
-			headers: { "Content-Type": "application/x-tar" },
-			statusCodes: {
-				200: true,
-				500: "server error"
-			}
-		});
-	}
-	async import(stream, options) {
-		return this.transport.dialStream({
-			method: "POST",
-			path: `/${this.apiVersion}/images/create`,
-			query: {
-				fromSrc: "-",
-				...options
-			},
-			body: stream,
-			headers: { "Content-Type": "application/x-tar" },
-			statusCodes: {
-				200: true,
-				500: "server error"
-			}
-		});
-	}
-	async search(options) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/images/search`,
-			query: options,
-			statusCodes: {
-				200: true,
-				500: "server error"
-			}
-		});
-	}
-	async prune(options) {
-		return typedDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/images/prune`,
-			query: options,
-			statusCodes: {
-				200: true,
-				500: "server error"
-			}
-		});
-	}
-	getImage(name) {
-		return new Image(this.transport, this.apiVersion, name);
-	}
-};
-
-//#endregion
-//#region src/client/volume.ts
-var VolumeEntity = class {
-	name;
-	constructor(transport, apiVersion, name) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-		this.name = name;
-	}
-	async inspect() {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/volumes/${this.name}`,
-			statusCodes: {
-				200: true,
-				404: "no such volume",
-				500: "server error"
-			}
-		});
-	}
-	async remove(options) {
-		return voidDial(this.transport, {
-			method: "DELETE",
-			path: `/${this.apiVersion}/volumes/${this.name}`,
-			query: options,
-			statusCodes: {
-				204: true,
-				404: "no such volume",
-				409: "volume in use",
-				500: "server error"
-			}
-		});
-	}
-};
-var VolumeOperations = class {
-	constructor(transport, apiVersion) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-	}
-	async list(options) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/volumes`,
-			query: options,
-			statusCodes: {
-				200: true,
-				500: "server error"
-			}
-		});
-	}
-	async create(options) {
-		return typedDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/volumes/create`,
-			body: options,
-			statusCodes: {
-				201: true,
-				500: "server error"
-			}
-		});
-	}
-	async inspect(name) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/volumes/${name}`,
-			statusCodes: {
-				200: true,
-				404: "no such volume",
-				500: "server error"
-			}
-		});
-	}
-	async prune(options) {
-		return typedDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/volumes/prune`,
-			query: options,
-			statusCodes: {
-				200: true,
-				500: "server error"
-			}
-		});
-	}
-	getVolume(name) {
-		return new VolumeEntity(this.transport, this.apiVersion, name);
-	}
-};
-
-//#endregion
-//#region src/client/network.ts
-var NetworkEntity = class {
-	id;
-	constructor(transport, apiVersion, id) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-		this.id = id;
-	}
-	async inspect() {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/networks/${this.id}`,
-			statusCodes: {
-				200: true,
-				404: "network not found",
-				500: "server error"
-			}
-		});
-	}
-	async remove() {
-		return voidDial(this.transport, {
-			method: "DELETE",
-			path: `/${this.apiVersion}/networks/${this.id}`,
-			statusCodes: {
-				204: true,
-				403: "operation forbidden",
-				404: "no such network",
-				500: "server error"
-			}
-		});
-	}
-	async connect(options) {
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/networks/${this.id}/connect`,
-			body: options,
-			statusCodes: {
-				200: true,
-				400: "bad parameter",
-				403: "operation forbidden",
-				404: "network or container not found",
-				500: "server error"
-			}
-		});
-	}
-	async disconnect(options) {
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/networks/${this.id}/disconnect`,
-			body: options,
-			statusCodes: {
-				200: true,
-				403: "operation forbidden",
-				404: "network or container not found",
-				500: "server error"
-			}
-		});
-	}
-};
-var NetworkOperations = class {
-	constructor(transport, apiVersion) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-	}
-	async list(options) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/networks`,
-			query: options,
-			statusCodes: {
-				200: true,
-				500: "server error"
-			}
-		});
-	}
-	async create(options) {
-		return typedDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/networks/create`,
-			body: options,
-			statusCodes: {
-				201: true,
-				400: "bad parameter",
-				403: "operation forbidden",
-				404: "plugin not found",
-				500: "server error"
-			}
-		});
-	}
-	async inspect(id) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/networks/${id}`,
-			statusCodes: {
-				200: true,
-				404: "network not found",
-				500: "server error"
-			}
-		});
-	}
-	async prune(options) {
-		return typedDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/networks/prune`,
-			query: options,
-			statusCodes: {
-				200: true,
-				500: "server error"
-			}
-		});
-	}
-	getNetwork(id) {
-		return new NetworkEntity(this.transport, this.apiVersion, id);
-	}
-};
-
-//#endregion
-//#region src/client/service.ts
-var ServiceEntity = class {
-	id;
-	constructor(transport, apiVersion, id) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-		this.id = id;
-	}
-	async inspect() {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/services/${this.id}`,
-			statusCodes: {
-				200: true,
-				404: "no such service",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async update(options) {
-		const { version, registryAuthFrom, rollback, ...body } = options;
-		const query = { version };
-		if (registryAuthFrom !== void 0) query.registryAuthFrom = registryAuthFrom;
-		if (rollback !== void 0) query.rollback = rollback;
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/services/${this.id}/update`,
-			query,
-			body,
-			statusCodes: {
-				200: true,
-				400: "bad parameter",
-				404: "no such service",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async remove() {
-		return voidDial(this.transport, {
-			method: "DELETE",
-			path: `/${this.apiVersion}/services/${this.id}`,
-			statusCodes: {
-				200: true,
-				404: "no such service",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async logs(options) {
-		return this.transport.dialStream({
-			method: "GET",
-			path: `/${this.apiVersion}/services/${this.id}/logs`,
-			query: options,
-			statusCodes: {
-				200: true,
-				404: "no such service",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-};
-var ServiceOperations = class {
-	constructor(transport, apiVersion) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-	}
-	async list(options) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/services`,
-			query: options,
-			statusCodes: {
-				200: true,
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async create(options) {
-		const { ...body } = options;
-		return typedDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/services/create`,
-			body,
-			statusCodes: {
-				201: true,
-				400: "bad parameter",
-				403: "forbidden",
-				409: "name conflicts",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async inspect(id) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/services/${id}`,
-			statusCodes: {
-				200: true,
-				404: "no such service",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	getService(id) {
-		return new ServiceEntity(this.transport, this.apiVersion, id);
-	}
-};
-
-//#endregion
-//#region src/client/task.ts
-var TaskEntity = class {
-	id;
-	constructor(transport, apiVersion, id) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-		this.id = id;
-	}
-	async inspect() {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/tasks/${this.id}`,
-			statusCodes: {
-				200: true,
-				404: "no such task",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async logs(options) {
-		return this.transport.dialStream({
-			method: "GET",
-			path: `/${this.apiVersion}/tasks/${this.id}/logs`,
-			query: options,
-			statusCodes: {
-				200: true,
-				404: "no such task",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-};
-var TaskOperations = class {
-	constructor(transport, apiVersion) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-	}
-	async list(options) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/tasks`,
-			query: options,
-			statusCodes: {
-				200: true,
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async inspect(id) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/tasks/${id}`,
-			statusCodes: {
-				200: true,
-				404: "no such task",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	getTask(id) {
-		return new TaskEntity(this.transport, this.apiVersion, id);
-	}
-};
-
-//#endregion
-//#region src/client/node.ts
-var NodeEntity = class {
-	id;
-	constructor(transport, apiVersion, id) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-		this.id = id;
-	}
-	async inspect() {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/nodes/${this.id}`,
-			statusCodes: {
-				200: true,
-				404: "no such node",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async update(options) {
-		const { version, ...body } = options;
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/nodes/${this.id}/update`,
-			query: { version },
-			body,
-			statusCodes: {
-				200: true,
-				400: "bad parameter",
-				404: "no such node",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async remove(options) {
-		return voidDial(this.transport, {
-			method: "DELETE",
-			path: `/${this.apiVersion}/nodes/${this.id}`,
-			query: options,
-			statusCodes: {
-				200: true,
-				404: "no such node",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-};
-var NodeOperations = class {
-	constructor(transport, apiVersion) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-	}
-	async list(options) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/nodes`,
-			query: options,
-			statusCodes: {
-				200: true,
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async inspect(id) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/nodes/${id}`,
-			statusCodes: {
-				200: true,
-				404: "no such node",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	getNode(id) {
-		return new NodeEntity(this.transport, this.apiVersion, id);
-	}
-};
-
-//#endregion
-//#region src/client/secret.ts
-var SecretEntity = class {
-	id;
-	constructor(transport, apiVersion, id) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-		this.id = id;
-	}
-	async inspect() {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/secrets/${this.id}`,
-			statusCodes: {
-				200: true,
-				404: "no such secret",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async update(options) {
-		const { version, ...body } = options;
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/secrets/${this.id}/update`,
-			query: { version },
-			body,
-			statusCodes: {
-				200: true,
-				400: "bad parameter",
-				404: "no such secret",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async remove() {
-		return voidDial(this.transport, {
-			method: "DELETE",
-			path: `/${this.apiVersion}/secrets/${this.id}`,
-			statusCodes: {
-				204: true,
-				404: "no such secret",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-};
-var SecretOperations = class {
-	constructor(transport, apiVersion) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-	}
-	async list(options) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/secrets`,
-			query: options,
-			statusCodes: {
-				200: true,
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async create(options) {
-		return typedDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/secrets/create`,
-			body: options,
-			statusCodes: {
-				201: true,
-				409: "name conflicts",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async inspect(id) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/secrets/${id}`,
-			statusCodes: {
-				200: true,
-				404: "no such secret",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	getSecret(id) {
-		return new SecretEntity(this.transport, this.apiVersion, id);
-	}
-};
-
-//#endregion
-//#region src/client/config.ts
-var ConfigEntity = class {
-	id;
-	constructor(transport, apiVersion, id) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-		this.id = id;
-	}
-	async inspect() {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/configs/${this.id}`,
-			statusCodes: {
-				200: true,
-				404: "no such config",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async update(options) {
-		const { version, ...body } = options;
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/configs/${this.id}/update`,
-			query: { version },
-			body,
-			statusCodes: {
-				200: true,
-				400: "bad parameter",
-				404: "no such config",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async remove() {
-		return voidDial(this.transport, {
-			method: "DELETE",
-			path: `/${this.apiVersion}/configs/${this.id}`,
-			statusCodes: {
-				204: true,
-				404: "no such config",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-};
-var ConfigOperations = class {
-	constructor(transport, apiVersion) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-	}
-	async list(options) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/configs`,
-			query: options,
-			statusCodes: {
-				200: true,
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async create(options) {
-		return typedDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/configs/create`,
-			body: options,
-			statusCodes: {
-				201: true,
-				409: "name conflicts",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	async inspect(id) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/configs/${id}`,
-			statusCodes: {
-				200: true,
-				404: "no such config",
-				500: "server error",
-				503: "node is not part of a swarm"
-			}
-		});
-	}
-	getConfig(id) {
-		return new ConfigEntity(this.transport, this.apiVersion, id);
-	}
-};
-
-//#endregion
-//#region src/client/plugin.ts
-var PluginEntity = class {
-	name;
-	constructor(transport, apiVersion, name) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-		this.name = name;
-	}
-	async inspect() {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/plugins/${this.name}/json`,
-			statusCodes: {
-				200: true,
-				404: "plugin is not found",
-				500: "server error"
-			}
-		});
-	}
-	async remove(options) {
-		return typedDial(this.transport, {
-			method: "DELETE",
-			path: `/${this.apiVersion}/plugins/${this.name}`,
-			query: options,
-			statusCodes: {
-				200: true,
-				404: "plugin is not found",
-				500: "server error"
-			}
-		});
-	}
-	async enable(options) {
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/plugins/${this.name}/enable`,
-			query: options,
-			statusCodes: {
-				200: true,
-				404: "plugin is not installed",
-				500: "server error"
-			}
-		});
-	}
-	async disable(options) {
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/plugins/${this.name}/disable`,
-			body: options,
-			statusCodes: {
-				200: true,
-				404: "plugin is not installed",
-				500: "server error"
-			}
-		});
-	}
-	async push() {
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/plugins/${this.name}/push`,
-			statusCodes: {
-				200: true,
-				404: "plugin is not found",
-				500: "server error"
-			}
-		});
-	}
-	async configure(options) {
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/plugins/${this.name}/set`,
-			body: options.env,
-			statusCodes: {
-				204: true,
-				404: "plugin is not found",
-				500: "server error"
-			}
-		});
-	}
-	async upgrade(options) {
-		return this.transport.dialStream({
-			method: "POST",
-			path: `/${this.apiVersion}/plugins/${this.name}/upgrade`,
-			query: { remote: options.remote },
-			statusCodes: {
-				200: true,
-				404: "plugin is not found",
-				500: "server error"
-			}
-		});
-	}
-};
-var PluginOperations = class {
-	constructor(transport, apiVersion) {
-		this.transport = transport;
-		this.apiVersion = apiVersion;
-	}
-	async list(options) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/plugins`,
-			query: options,
-			statusCodes: {
-				200: true,
-				500: "server error"
-			}
-		});
-	}
-	async privileges(options) {
-		return typedDial(this.transport, {
-			method: "GET",
-			path: `/${this.apiVersion}/plugins/privileges`,
-			query: { remote: options.remote },
-			statusCodes: {
-				200: true,
-				500: "server error"
-			}
-		});
-	}
-	async install(options) {
-		const query = { remote: options.remote };
-		if (options.name !== void 0) query.name = options.name;
-		return this.transport.dialStream({
-			method: "POST",
-			path: `/${this.apiVersion}/plugins/pull`,
-			query,
-			statusCodes: {
-				204: true,
-				500: "server error"
-			}
-		});
-	}
-	async create(options) {
-		return voidDial(this.transport, {
-			method: "POST",
-			path: `/${this.apiVersion}/plugins/create`,
-			query: { name: options.name },
-			statusCodes: {
-				204: true,
-				500: "server error"
-			}
-		});
-	}
-	getPlugin(name) {
-		return new PluginEntity(this.transport, this.apiVersion, name);
-	}
-};
-
-//#endregion
-//#region src/client/index.ts
-var Docker = class Docker {
-	system;
-	containers;
-	images;
-	volumes;
-	networks;
-	services;
-	tasks;
-	nodes;
-	secrets;
-	configs;
-	plugins;
-	transport;
-	apiVersion;
-	constructor(config) {
-		this.transport = createTransport(config.transport);
-		this.apiVersion = config.apiVersion;
-		const v = config.apiVersion;
-		this.system = new SystemOperations(this.transport, v);
-		this.containers = new ContainerOperations(this.transport, v);
-		this.images = new ImageOperations(this.transport, v);
-		this.volumes = new VolumeOperations(this.transport, v);
-		this.networks = new NetworkOperations(this.transport, v);
-		this.services = new ServiceOperations(this.transport, v);
-		this.tasks = new TaskOperations(this.transport, v);
-		this.nodes = new NodeOperations(this.transport, v);
-		this.secrets = new SecretOperations(this.transport, v);
-		this.configs = new ConfigOperations(this.transport, v);
-		this.plugins = new PluginOperations(this.transport, v);
-	}
-	/** Create Docker client with pre-existing transport (for testing). */
-	static fromTransport(transport, opts) {
-		const instance = Object.create(Docker.prototype);
-		const v = opts.apiVersion;
-		instance.transport = transport;
-		instance.apiVersion = v;
-		instance.system = new SystemOperations(transport, v);
-		instance.containers = new ContainerOperations(transport, v);
-		instance.images = new ImageOperations(transport, v);
-		instance.volumes = new VolumeOperations(transport, v);
-		instance.networks = new NetworkOperations(transport, v);
-		instance.services = new ServiceOperations(transport, v);
-		instance.tasks = new TaskOperations(transport, v);
-		instance.nodes = new NodeOperations(transport, v);
-		instance.secrets = new SecretOperations(transport, v);
-		instance.configs = new ConfigOperations(transport, v);
-		instance.plugins = new PluginOperations(transport, v);
-		return instance;
-	}
-	/**
-	* Create Docker client from environment variables.
-	* Reads DOCKER_HOST, DOCKER_TLS_VERIFY, DOCKER_CERT_PATH, DOCKER_CLIENT_TIMEOUT.
-	*/
-	static fromEnv(opts) {
-		const transport = createTransportFromEnv();
-		const apiVersion = opts?.apiVersion ?? "v1.47";
-		const instance = Object.create(Docker.prototype);
-		instance.transport = transport;
-		instance.apiVersion = apiVersion;
-		instance.system = new SystemOperations(transport, apiVersion);
-		instance.containers = new ContainerOperations(transport, apiVersion);
-		instance.images = new ImageOperations(transport, apiVersion);
-		instance.volumes = new VolumeOperations(transport, apiVersion);
-		instance.networks = new NetworkOperations(transport, apiVersion);
-		instance.services = new ServiceOperations(transport, apiVersion);
-		instance.tasks = new TaskOperations(transport, apiVersion);
-		instance.nodes = new NodeOperations(transport, apiVersion);
-		instance.secrets = new SecretOperations(transport, apiVersion);
-		instance.configs = new ConfigOperations(transport, apiVersion);
-		instance.plugins = new PluginOperations(transport, apiVersion);
-		return instance;
-	}
-	/**
-	* Pull an image from a registry.
-	* Returns a progress stream of newline-delimited JSON.
-	*/
-	async pull(repoTag, options) {
-		const parts = repoTag.split(":");
-		const tag = parts.length > 1 ? parts.pop() : "latest";
-		const repository = parts.join(":");
-		return this.transport.dialStream({
-			method: "POST",
-			path: `/${this.apiVersion}/images/create`,
-			query: {
-				fromImage: repository,
-				tag
-			},
-			authconfig: options?.authconfig,
-			statusCodes: {
-				200: true,
-				404: "no such image",
-				500: "server error"
-			}
-		});
-	}
-	/**
-	* Create and run a container, waiting for it to exit.
-	* Returns the wait result and the container instance.
-	*/
-	async run(image, cmd, options) {
-		const { autoRemove, ...createOpts } = options ?? {};
-		const createResult = await this.containers.create({
-			...createOpts,
-			Image: image,
-			Cmd: cmd,
-			AttachStdout: true,
-			AttachStderr: true
-		});
-		if (createResult.isErr()) return createResult;
-		const container = createResult.value;
-		const attachResult = await container.attach({
-			stream: true,
-			stdout: true,
-			stderr: true
-		});
-		if (attachResult.isErr()) return attachResult;
-		const startResult = await container.start();
-		if (startResult.isErr()) return startResult;
-		const waitResult = await container.wait();
-		if (waitResult.isErr()) return waitResult;
-		if (autoRemove) await container.remove({ force: true });
-		return waitResult.map((output) => ({
-			output,
-			container
-		}));
-	}
-	destroy() {
-		this.transport.destroy();
-	}
-};
-
-//#endregion
-//#region src/transport/stream-utils.ts
-var DockerStream = class extends EventEmitter {
-	isTty;
-	source;
-	constructor(source, isTty) {
-		super();
-		this.source = source;
-		this.isTty = isTty;
-		source.on("data", (chunk) => this.emit("data", chunk));
-		source.on("end", () => this.emit("end"));
-		source.on("error", (err) => this.emit("error", err));
-	}
-	/**
-	* Destroys the underlying source stream.
-	*/
-	destroy() {
-		if ("destroy" in this.source && typeof this.source.destroy === "function") this.source.destroy();
-	}
-};
-const HEADER_SIZE = 8;
-/**
-* Separates a Docker multiplexed stream into stdout and stderr PassThrough
-* streams based on the Docker stream multiplexing protocol.
-*
-* Docker multiplexed format: 8-byte header per frame
-* - Byte 0: stream type (0=stdin, 1=stdout, 2=stderr)
-* - Bytes 1-3: padding (0)
-* - Bytes 4-7: payload size (big-endian uint32)
-* - Followed by `size` bytes of payload
-*/
-function demuxStream(source) {
-	const stdout = new PassThrough();
-	const stderr = new PassThrough();
-	let buffer = Buffer.alloc(0);
-	function processBuffer() {
-		while (buffer.length >= HEADER_SIZE) {
-			const streamType = buffer.readUInt8(0);
-			const payloadSize = buffer.readUInt32BE(4);
-			if (buffer.length < HEADER_SIZE + payloadSize) break;
-			const payload = buffer.subarray(HEADER_SIZE, HEADER_SIZE + payloadSize);
-			switch (streamType) {
-				case 1:
-					stdout.write(payload);
-					break;
-				case 2:
-					stderr.write(payload);
-					break;
-			}
-			buffer = buffer.subarray(HEADER_SIZE + payloadSize);
-		}
-	}
-	source.on("data", (chunk) => {
-		buffer = Buffer.concat([buffer, chunk]);
-		processBuffer();
-	});
-	source.on("end", () => {
-		stdout.end();
-		stderr.end();
-	});
-	source.on("error", (err) => {
-		stdout.destroy(err);
-		stderr.destroy(err);
-	});
-	return {
-		stdout,
-		stderr
-	};
-}
-/**
-* Follows a newline-delimited JSON progress stream (e.g., from pull/push/build).
-* Accumulates all events and calls onFinished when the stream ends.
-* Optionally calls onProgress for each event as it arrives.
-*/
-function followProgress(stream, onFinished, onProgress) {
-	const output = [];
-	let buffer = "";
-	stream.on("data", (chunk) => {
-		buffer += typeof chunk === "string" ? chunk : chunk.toString("utf-8");
-		const lines = buffer.split("\n");
-		buffer = lines.pop() ?? "";
-		for (const line of lines) {
-			const trimmed = line.trim();
-			if (trimmed.length === 0) continue;
-			try {
-				const obj = JSON.parse(trimmed);
-				output.push(obj);
-				if (onProgress) onProgress(obj);
-			} catch {}
-		}
-	});
-	stream.on("end", () => {
-		if (buffer.trim().length > 0) try {
-			const obj = JSON.parse(buffer.trim());
-			output.push(obj);
-			if (onProgress) onProgress(obj);
-		} catch {}
-		onFinished(null, output);
-	});
-	stream.on("error", (err) => {
-		onFinished(err, output);
-	});
-}
-
-//#endregion
-export { ConfigEntity, ConfigOperations, Container, ContainerOperations, Docker, DockerAbortError, DockerBadRequestError, DockerConflictError, DockerDecodeError, DockerForbiddenError, DockerNetworkError, DockerNotFoundError, DockerServerError, DockerServiceUnavailableError, DockerStream, DockerTimeoutError, DockerUnauthorizedError, DockerUnknownError, Exec, HttpDuplex, Image, ImageOperations, NamedPipeTransport, NetworkEntity, NetworkOperations, NodeEntity, NodeOperations, PluginEntity, PluginOperations, SecretEntity, SecretOperations, ServiceEntity, ServiceOperations, SystemOperations, TaskEntity, TaskOperations, VolumeEntity, VolumeOperations, createTransport, createTransportFromEnv, demuxStream, followProgress, statusCodeToError, withSession };
-//# sourceMappingURL=index.mjs.map
+import*as e from"node:fs";import*as t from"node:path";import*as n from"node:http";import{Result as r,TaggedError as i}from"better-result";import*as a from"node:https";import{Client as o}from"ssh2";import{Duplex as s,PassThrough as c,Readable as l}from"node:stream";import*as u from"@grpc/grpc-js";import*as d from"@grpc/proto-loader";import{randomUUID as f}from"node:crypto";import{EventEmitter as ee}from"node:events";var p=class extends i(`DockerBadRequestError`)(){statusCode=400},m=class extends i(`DockerUnauthorizedError`)(){statusCode=401},h=class extends i(`DockerForbiddenError`)(){statusCode=403},g=class extends i(`DockerNotFoundError`)(){statusCode=404},_=class extends i(`DockerConflictError`)(){statusCode=409},v=class extends i(`DockerServerError`)(){statusCode=500},y=class extends i(`DockerServiceUnavailableError`)(){statusCode=503},b=class extends i(`DockerNetworkError`)(){},x=class extends i(`DockerTimeoutError`)(){},S=class extends i(`DockerAbortError`)(){},te=class extends i(`DockerDecodeError`)(){},C=class extends i(`DockerUnknownError`)(){};function w(e,t){switch(e){case 400:return new p({message:t});case 401:return new m({message:t});case 403:return new h({message:t});case 404:return new g({message:t});case 409:return new _({message:t});case 500:return new v({message:t});case 503:return new y({message:t});default:return new C({message:t,statusCode:e})}}function T(e,t){if(!t||Object.keys(t).length===0)return e;let n=new URLSearchParams;for(let[e,r]of Object.entries(t))r!=null&&n.append(e,String(r));return`${e}?${n.toString()}`}function E(e){return new Promise((t,n)=>{let r=[];e.on(`data`,e=>r.push(e)),e.on(`end`,()=>t(Buffer.concat(r).toString(`utf-8`))),e.on(`error`,n)})}function D(e){try{let t=JSON.parse(e);if(typeof t==`object`&&t&&typeof t.message==`string`)return t.message}catch{}return e||`Unknown error`}var O=class{socketPath;requestFn;constructor(e){this.socketPath=e.socketPath??process.env.DOCKER_HOST?.replace(`unix://`,``)??`/var/run/docker.sock`,this.requestFn=e._requestFn??n.request}async dial(e){return r.tryPromise({try:()=>this.performRequest(e,!1),catch:e=>this.convertError(e)})}async dialStream(e){return r.tryPromise({try:()=>this.performRequest(e,!0),catch:e=>this.convertError(e)})}async dialHijack(e){return r.tryPromise({try:()=>this.performHijack(e),catch:e=>this.convertError(e)})}destroy(){}performHijack(e){return new Promise((t,n)=>{let r=T(e.path,e.query),i={Connection:`Upgrade`,Upgrade:`tcp`,...e.headers};e.authconfig&&(i[`X-Registry-Auth`]=Buffer.from(JSON.stringify(e.authconfig)).toString(`base64`));let a=e.body,o;a!==void 0&&typeof a!=`string`&&!Buffer.isBuffer(a)&&(o=JSON.stringify(a),!i[`Content-Type`]&&!i[`content-type`]&&(i[`Content-Type`]=`application/json`),i[`Content-Length`]=Buffer.byteLength(o).toString());let s=this.requestFn({socketPath:this.socketPath,path:r,method:e.method,headers:i},e=>{n(new b({message:`Expected upgrade response, got status ${e.statusCode}`,cause:void 0}))});s.on(`upgrade`,(e,n,r)=>{t(n)}),s.on(`error`,e=>{n(new b({message:`Connection error: ${e.message}`,cause:e}))}),o!==void 0&&s.write(o),s.end()})}performRequest(e,t){return new Promise((n,r)=>{let i=T(e.path,e.query),a={...e.headers};e.authconfig&&(a[`X-Registry-Auth`]=Buffer.from(JSON.stringify(e.authconfig)).toString(`base64`)),e.registryconfig&&(a[`X-Registry-Config`]=Buffer.from(JSON.stringify(e.registryconfig)).toString(`base64`));let o=e.body,s=typeof o==`object`&&!!o&&typeof o.pipe==`function`,c=Buffer.isBuffer(o),l=typeof o==`string`,u;o!==void 0&&!s&&!c&&!l?(u=JSON.stringify(o),!a[`Content-Type`]&&!a[`content-type`]&&(a[`Content-Type`]=`application/json`),a[`Content-Length`]=Buffer.byteLength(u).toString()):c?a[`Content-Length`]=o.length.toString():l?a[`Content-Length`]=Buffer.byteLength(o).toString():s&&(a[`Transfer-Encoding`]=`chunked`);let d=this.requestFn({socketPath:this.socketPath,path:i,method:e.method,headers:a},i=>{let a=i.statusCode??0,o=i.headers??{},s=e.statusCodes[a]===!0;if(t&&s){n(i);return}E(i).then(e=>{if(s){if(a===204||e.length===0){n({statusCode:a,headers:o,body:null});return}try{n({statusCode:a,headers:o,body:JSON.parse(e)})}catch{n({statusCode:a,headers:o,body:e})}}else r(w(a,D(e)))}).catch(e=>{r(new b({message:`Failed to read response body: ${String(e)}`,cause:e}))})});if(d.on(`error`,e=>{r(new b({message:`Connection error: ${e.message}`,cause:e}))}),e.timeout!==void 0&&d.setTimeout(e.timeout,()=>{d.destroy(),r(new x({message:`Request timed out after ${e.timeout}ms`,timeoutMs:e.timeout}))}),e.signal){if(e.signal.aborted){d.destroy(),r(new S({message:`Request aborted`}));return}e.signal.addEventListener(`abort`,()=>{d.destroy(),r(new S({message:`Request aborted`}))},{once:!0})}s?o.pipe(d):c||l?(d.write(o),d.end()):(u===void 0||d.write(u),d.end())})}convertError(e){return typeof e==`object`&&e&&`_tag`in e?e:new b({message:`Unexpected error: ${e instanceof Error?e.message:String(e)}`,cause:e})}},k=class{host;port;agent;useHttps;requestFn;constructor(e){this.useHttps=!!e.tls,this.host=e.host,this.port=e.port??(this.useHttps?2376:2375),e.tls&&(this.agent=new a.Agent({ca:e.tls.ca,cert:e.tls.cert,key:e.tls.key,rejectUnauthorized:e.tls.rejectUnauthorized??!0})),this.requestFn=e._requestFn??(this.useHttps?a.request:n.request)}async dial(e){return r.tryPromise({try:()=>this.performRequest(e,!1),catch:e=>this.convertError(e)})}async dialStream(e){return r.tryPromise({try:()=>this.performRequest(e,!0),catch:e=>this.convertError(e)})}async dialHijack(e){return r.tryPromise({try:()=>this.performHijack(e),catch:e=>this.convertError(e)})}destroy(){this.agent&&this.agent.destroy()}performHijack(e){return new Promise((t,n)=>{let r=T(e.path,e.query),i={Connection:`Upgrade`,Upgrade:`tcp`,...e.headers};e.authconfig&&(i[`X-Registry-Auth`]=Buffer.from(JSON.stringify(e.authconfig)).toString(`base64`));let a=e.body,o;a!==void 0&&typeof a!=`string`&&!Buffer.isBuffer(a)&&(o=JSON.stringify(a),!i[`Content-Type`]&&!i[`content-type`]&&(i[`Content-Type`]=`application/json`),i[`Content-Length`]=Buffer.byteLength(o).toString());let s={hostname:this.host,port:this.port,path:r,method:e.method,headers:i};this.agent&&(s.agent=this.agent);let c=this.requestFn(s,e=>{n(new b({message:`Expected upgrade response, got status ${e.statusCode}`,cause:void 0}))});c.on(`upgrade`,(e,n,r)=>{t(n)}),c.on(`error`,e=>{n(new b({message:`Connection error: ${e.message}`,cause:e}))}),o!==void 0&&c.write(o),c.end()})}performRequest(e,t){return new Promise((n,r)=>{let i=T(e.path,e.query),a={...e.headers};e.authconfig&&(a[`X-Registry-Auth`]=Buffer.from(JSON.stringify(e.authconfig)).toString(`base64`)),e.registryconfig&&(a[`X-Registry-Config`]=Buffer.from(JSON.stringify(e.registryconfig)).toString(`base64`));let o=e.body,s=typeof o==`object`&&!!o&&typeof o.pipe==`function`,c=Buffer.isBuffer(o),l=typeof o==`string`,u;o!==void 0&&!s&&!c&&!l?(u=JSON.stringify(o),!a[`Content-Type`]&&!a[`content-type`]&&(a[`Content-Type`]=`application/json`),a[`Content-Length`]=Buffer.byteLength(u).toString()):c?a[`Content-Length`]=o.length.toString():l?a[`Content-Length`]=Buffer.byteLength(o).toString():s&&(a[`Transfer-Encoding`]=`chunked`);let d={hostname:this.host,port:this.port,path:i,method:e.method,headers:a};this.agent&&(d.agent=this.agent);let f=this.requestFn(d,i=>{let a=i.statusCode??0,o=i.headers??{},s=e.statusCodes[a]===!0;if(t&&s){n(i);return}E(i).then(e=>{if(s){if(a===204||e.length===0){n({statusCode:a,headers:o,body:null});return}try{n({statusCode:a,headers:o,body:JSON.parse(e)})}catch{n({statusCode:a,headers:o,body:e})}}else r(w(a,D(e)))}).catch(e=>{r(new b({message:`Failed to read response body: ${String(e)}`,cause:e}))})});if(f.on(`error`,e=>{r(new b({message:`Connection error: ${e.message}`,cause:e}))}),e.timeout!==void 0&&f.setTimeout(e.timeout,()=>{f.destroy(),r(new x({message:`Request timed out after ${e.timeout}ms`,timeoutMs:e.timeout}))}),e.signal){if(e.signal.aborted){f.destroy(),r(new S({message:`Request aborted`}));return}e.signal.addEventListener(`abort`,()=>{f.destroy(),r(new S({message:`Request aborted`}))},{once:!0})}s?o.pipe(f):c||l?(f.write(o),f.end()):(u===void 0||f.write(u),f.end())})}convertError(e){return typeof e==`object`&&e&&`_tag`in e?e:new b({message:`Unexpected error: ${e instanceof Error?e.message:String(e)}`,cause:e})}};function ne(e){let t=T(e.path,e.query),n={Host:`docker`,...e.headers};e.authconfig&&(n[`X-Registry-Auth`]=Buffer.from(JSON.stringify(e.authconfig)).toString(`base64`)),e.registryconfig&&(n[`X-Registry-Config`]=Buffer.from(JSON.stringify(e.registryconfig)).toString(`base64`));let r=e.body,i=typeof r==`object`&&!!r&&typeof r.pipe==`function`,a=Buffer.isBuffer(r),o=typeof r==`string`,s;r!==void 0&&!i&&!a&&!o?(s=JSON.stringify(r),!n[`Content-Type`]&&!n[`content-type`]&&(n[`Content-Type`]=`application/json`),n[`Content-Length`]=Buffer.byteLength(s).toString()):a?(s=r.toString(),n[`Content-Length`]=r.length.toString()):o?(s=r,n[`Content-Length`]=Buffer.byteLength(r).toString()):i&&(n[`Transfer-Encoding`]=`chunked`);let c=`${e.method} ${t} HTTP/1.1\r\n`;for(let[e,t]of Object.entries(n))c+=`${e}: ${t}\r\n`;return c+=`\r
+`,{header:c,bodyStr:s}}function re(e){let t=e.indexOf(`\r
+\r
+`),n=t>=0?e.slice(0,t):e,r=t>=0?e.slice(t+4):``,i=n.split(`\r
+`),a=(i[0]??``).match(/^HTTP\/\d\.\d\s+(\d+)/),o=a?.[1]?Number.parseInt(a[1],10):0,s={};for(let e=1;e<i.length;e++){let t=i[e];if(!t)continue;let n=t.indexOf(`:`);if(n>0){let e=t.slice(0,n).trim().toLowerCase();s[e]=t.slice(n+1).trim()}}return{statusCode:o,headers:s,body:r}}var ie=class{host;port;username;privateKey;passphrase;clientFactory;constructor(e){this.host=e.host,this.port=e.port??22,this.username=e.username,this.privateKey=e.privateKey,this.passphrase=e.passphrase,this.clientFactory=e._clientFactory??(()=>new o)}async dial(e){return r.tryPromise({try:()=>this.performRequest(e,!1),catch:e=>this.convertError(e)})}async dialStream(e){return r.tryPromise({try:()=>this.performRequest(e,!0),catch:e=>this.convertError(e)})}async dialHijack(e){return r.err(new b({message:`dialHijack is not supported over SSH transport`,cause:void 0}))}destroy(){}performRequest(e,t){return new Promise((n,r)=>{let i=this.clientFactory();i.on(`ready`,()=>{i.exec(`docker system dial-stdio`,(a,o)=>{if(a){i.end(),r(new b({message:`SSH exec error: ${a.message}`,cause:a}));return}let{header:s,bodyStr:c}=ne(e);o.write(s);let u=e.body;typeof u==`object`&&u&&typeof u.pipe==`function`?u.pipe(o,{end:!1}):c!==void 0&&o.write(c);let d=[];o.on(`data`,e=>{d.push(e)}),o.on(`end`,()=>{i.end();let{statusCode:a,headers:o,body:s}=re(Buffer.concat(d).toString(`utf-8`)),c=e.statusCodes[a]===!0;if(t&&c){n(new l({read(){this.push(s?Buffer.from(s):null),this.push(null)}}));return}if(c){if(a===204||s.length===0){n({statusCode:a,headers:o,body:null});return}try{n({statusCode:a,headers:o,body:JSON.parse(s)})}catch{n({statusCode:a,headers:o,body:s})}}else r(w(a,D(s)))}),o.on(`error`,e=>{i.end(),r(new b({message:`Stream error: ${e.message}`,cause:e}))})})}),i.on(`error`,e=>{r(new b({message:`SSH connection error: ${e.message}`,cause:e}))}),i.connect({host:this.host,port:this.port,username:this.username,privateKey:this.privateKey,passphrase:this.passphrase})})}convertError(e){return typeof e==`object`&&e&&`_tag`in e?e:new b({message:`Unexpected error: ${e instanceof Error?e.message:String(e)}`,cause:e})}},A=class{pipePath;requestFn;constructor(e){this.pipePath=e.path??`\\\\.\\pipe\\docker_engine`,this.requestFn=e._requestFn??n.request}async dial(e){return r.tryPromise({try:()=>this.performRequest(e,!1),catch:e=>this.convertError(e)})}async dialStream(e){return r.tryPromise({try:()=>this.performRequest(e,!0),catch:e=>this.convertError(e)})}async dialHijack(e){return r.tryPromise({try:()=>this.performHijack(e),catch:e=>this.convertError(e)})}destroy(){}performHijack(e){return new Promise((t,n)=>{let r=T(e.path,e.query),i={Connection:`Upgrade`,Upgrade:`tcp`,...e.headers};e.authconfig&&(i[`X-Registry-Auth`]=Buffer.from(JSON.stringify(e.authconfig)).toString(`base64`));let a=e.body,o;a!==void 0&&typeof a!=`string`&&!Buffer.isBuffer(a)&&(o=JSON.stringify(a),!i[`Content-Type`]&&!i[`content-type`]&&(i[`Content-Type`]=`application/json`),i[`Content-Length`]=Buffer.byteLength(o).toString());let s=this.requestFn({socketPath:this.pipePath,path:r,method:e.method,headers:i},e=>{n(new b({message:`Expected upgrade response, got status ${e.statusCode}`,cause:void 0}))});s.on(`upgrade`,(e,n,r)=>{t(n)}),s.on(`error`,e=>{n(new b({message:`Connection error: ${e.message}`,cause:e}))}),o!==void 0&&s.write(o),s.end()})}performRequest(e,t){return new Promise((n,r)=>{let i=T(e.path,e.query),a={...e.headers};e.authconfig&&(a[`X-Registry-Auth`]=Buffer.from(JSON.stringify(e.authconfig)).toString(`base64`)),e.registryconfig&&(a[`X-Registry-Config`]=Buffer.from(JSON.stringify(e.registryconfig)).toString(`base64`));let o=e.body,s=typeof o==`object`&&!!o&&typeof o.pipe==`function`,c=Buffer.isBuffer(o),l=typeof o==`string`,u;o!==void 0&&!s&&!c&&!l?(u=JSON.stringify(o),!a[`Content-Type`]&&!a[`content-type`]&&(a[`Content-Type`]=`application/json`),a[`Content-Length`]=Buffer.byteLength(u).toString()):c?a[`Content-Length`]=o.length.toString():l?a[`Content-Length`]=Buffer.byteLength(o).toString():s&&(a[`Transfer-Encoding`]=`chunked`);let d=this.requestFn({socketPath:this.pipePath,path:i,method:e.method,headers:a},i=>{let a=i.statusCode??0,o=i.headers??{},s=e.statusCodes[a]===!0;if(t&&s){n(i);return}E(i).then(e=>{if(s){if(a===204||e.length===0){n({statusCode:a,headers:o,body:null});return}try{n({statusCode:a,headers:o,body:JSON.parse(e)})}catch{n({statusCode:a,headers:o,body:e})}}else r(w(a,D(e)))}).catch(e=>{r(new b({message:`Failed to read response body: ${String(e)}`,cause:e}))})});if(d.on(`error`,e=>{r(new b({message:`Connection error: ${e.message}`,cause:e}))}),e.timeout!==void 0&&d.setTimeout(e.timeout,()=>{d.destroy(),r(new x({message:`Request timed out after ${e.timeout}ms`,timeoutMs:e.timeout}))}),e.signal){if(e.signal.aborted){d.destroy(),r(new S({message:`Request aborted`}));return}e.signal.addEventListener(`abort`,()=>{d.destroy(),r(new S({message:`Request aborted`}))},{once:!0})}s?o.pipe(d):c||l?(d.write(o),d.end()):(u===void 0||d.write(u),d.end())})}convertError(e){return typeof e==`object`&&e&&`_tag`in e?e:new b({message:`Unexpected error: ${e instanceof Error?e.message:String(e)}`,cause:e})}};function ae(e){switch(e.type){case`unix`:return new O({socketPath:e.socketPath});case`tcp`:return new k({host:e.host,port:e.port,tls:e.tls});case`ssh`:return new ie({host:e.host,port:e.port,username:e.username,privateKey:e.privateKey});case`npipe`:return new A({path:e.path})}}function oe(){let n=process.env.DOCKER_HOST,r=process.env.DOCKER_TLS_VERIFY===`1`,i=process.env.DOCKER_CERT_PATH;if(!n)return new O({});if(n.startsWith(`unix://`))return new O({socketPath:n.replace(`unix://`,``)});if(n.startsWith(`npipe://`))return new A({path:n.replace(`npipe://`,``)});if(n.startsWith(`ssh://`)){let e=new URL(n);return new ie({host:e.hostname,port:e.port?Number.parseInt(e.port,10):22,username:e.username||`root`})}if(n.startsWith(`tcp://`)){let a=new URL(n),o=a.hostname,s=a.port?Number.parseInt(a.port,10):void 0,c;if((r||i)&&(c={rejectUnauthorized:r},i)){let n=t.join(i,`ca.pem`),r=t.join(i,`cert.pem`),a=t.join(i,`key.pem`);e.existsSync(n)&&(c.ca=e.readFileSync(n,`utf-8`)),e.existsSync(r)&&(c.cert=e.readFileSync(r,`utf-8`)),e.existsSync(a)&&(c.key=e.readFileSync(a,`utf-8`))}return new k({host:o,port:s,tls:c})}return new O({socketPath:n})}async function j(e,t){return(await e.dial(t)).map(e=>e.body)}async function M(e,t){return(await e.dial(t)).map(()=>void 0)}var N=class{constructor(e,t){this.transport=e,this.apiVersion=t}async ping(){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/_ping`,statusCodes:{200:!0,500:`server error`}})}async info(){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/info`,statusCodes:{200:!0,500:`server error`}})}async version(){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/version`,statusCodes:{200:!0,500:`server error`}})}async df(){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/system/df`,statusCodes:{200:!0,500:`server error`}})}async swarmInit(e){return j(this.transport,{method:`POST`,path:`/${this.apiVersion}/swarm/init`,body:e,statusCodes:{200:!0,400:`bad parameter`,500:`server error`,503:`node is already part of a swarm`}})}async swarmJoin(e){return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/swarm/join`,body:e,statusCodes:{200:!0,400:`bad parameter`,500:`server error`,503:`node is already part of a swarm`}})}async swarmLeave(e){return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/swarm/leave`,query:e,statusCodes:{200:!0,500:`server error`,503:`node is not part of a swarm`}})}async swarmUpdate(e){let{version:t,rotateWorkerToken:n,rotateManagerToken:r,rotateManagerUnlockKey:i,...a}=e,o={version:t};return n!==void 0&&(o.rotateWorkerToken=n),r!==void 0&&(o.rotateManagerToken=r),i!==void 0&&(o.rotateManagerUnlockKey=i),M(this.transport,{method:`POST`,path:`/${this.apiVersion}/swarm/update`,query:o,body:a,statusCodes:{200:!0,400:`bad parameter`,500:`server error`,503:`node is not part of a swarm`}})}async swarmInspect(){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/swarm`,statusCodes:{200:!0,500:`server error`,503:`node is not part of a swarm`}})}async events(e){return this.transport.dialStream({method:`GET`,path:`/${this.apiVersion}/events`,query:e,statusCodes:{200:!0,500:`server error`}})}async auth(e){return j(this.transport,{method:`POST`,path:`/${this.apiVersion}/auth`,body:e,statusCodes:{200:!0,204:!0,500:`server error`}})}async pruneBuilder(e){return j(this.transport,{method:`POST`,path:`/${this.apiVersion}/build/prune`,query:e,statusCodes:{200:!0,500:`server error`}})}},P=class extends s{socket;constructor(e){super(),this.socket=e,e.on(`data`,t=>{this.push(t)||e.pause()}),e.on(`end`,()=>{this.push(null)}),e.on(`error`,e=>{this.destroy(e)}),e.on(`close`,()=>{this.push(null)})}_read(e){this.socket.resume()}_write(e,t,n){this.socket.write(e,n)}_final(e){this.socket.end(e)}_destroy(e,t){this.socket.destroy(e??void 0),t(e)}},F=class{id;constructor(e,t,n){this.transport=e,this.apiVersion=t,this.id=n}async start(e){let{stdin:t,...n}=e??{};return t?(await this.transport.dialHijack({method:`POST`,path:`/${this.apiVersion}/exec/${this.id}/start`,body:n,hijack:!0,openStdin:!0,statusCodes:{200:!0,101:!0,404:`no such exec instance`,409:`container is paused`,500:`server error`}})).map(e=>new P(e)):this.transport.dialStream({method:`POST`,path:`/${this.apiVersion}/exec/${this.id}/start`,body:Object.keys(n).length>0?n:void 0,statusCodes:{200:!0,404:`no such exec instance`,409:`container is paused`,500:`server error`}})}async resize(e){return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/exec/${this.id}/resize`,query:e,statusCodes:{200:!0,404:`no such exec instance`,500:`server error`}})}async inspect(){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/exec/${this.id}/json`,statusCodes:{200:!0,404:`no such exec instance`,500:`server error`}})}},I=class{id;constructor(e,t,n){this.transport=e,this.apiVersion=t,this.id=n}async inspect(){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/containers/${this.id}/json`,statusCodes:{200:!0,404:`no such container`,500:`server error`}})}async start(){return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/containers/${this.id}/start`,statusCodes:{204:!0,304:!0,404:`no such container`,500:`server error`}})}async stop(e){return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/containers/${this.id}/stop`,query:e,statusCodes:{204:!0,304:!0,404:`no such container`,500:`server error`}})}async restart(e){return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/containers/${this.id}/restart`,query:e,statusCodes:{204:!0,404:`no such container`,500:`server error`}})}async kill(e){return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/containers/${this.id}/kill`,query:e,statusCodes:{204:!0,404:`no such container`,409:`container is not running`,500:`server error`}})}async pause(){return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/containers/${this.id}/pause`,statusCodes:{204:!0,404:`no such container`,500:`server error`}})}async unpause(){return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/containers/${this.id}/unpause`,statusCodes:{204:!0,404:`no such container`,500:`server error`}})}async remove(e){return M(this.transport,{method:`DELETE`,path:`/${this.apiVersion}/containers/${this.id}`,query:e,statusCodes:{204:!0,400:`bad parameter`,404:`no such container`,409:`conflict`,500:`server error`}})}async rename(e){return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/containers/${this.id}/rename`,query:{name:e},statusCodes:{204:!0,404:`no such container`,409:`name already in use`,500:`server error`}})}async update(e){return j(this.transport,{method:`POST`,path:`/${this.apiVersion}/containers/${this.id}/update`,body:e,statusCodes:{200:!0,404:`no such container`,500:`server error`}})}async top(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/containers/${this.id}/top`,query:e?{ps_args:e}:void 0,statusCodes:{200:!0,404:`no such container`,500:`server error`}})}async changes(){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/containers/${this.id}/changes`,statusCodes:{200:!0,404:`no such container`,500:`server error`}})}async logs(e){return this.transport.dialStream({method:`GET`,path:`/${this.apiVersion}/containers/${this.id}/logs`,query:e,statusCodes:{200:!0,404:`no such container`,500:`server error`}})}async stats(e){return this.transport.dialStream({method:`GET`,path:`/${this.apiVersion}/containers/${this.id}/stats`,query:e,statusCodes:{200:!0,404:`no such container`,500:`server error`}})}async wait(e){return j(this.transport,{method:`POST`,path:`/${this.apiVersion}/containers/${this.id}/wait`,query:e,statusCodes:{200:!0,400:`bad parameter`,404:`no such container`,500:`server error`}})}async resize(e){return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/containers/${this.id}/resize`,query:e,statusCodes:{200:!0,404:`no such container`,500:`server error`}})}async attach(e){return e?.stdin?(await this.transport.dialHijack({method:`POST`,path:`/${this.apiVersion}/containers/${this.id}/attach`,query:e,hijack:!0,openStdin:!0,statusCodes:{200:!0,101:!0,404:`no such container`,500:`server error`}})).map(e=>new P(e)):this.transport.dialStream({method:`POST`,path:`/${this.apiVersion}/containers/${this.id}/attach`,query:e,statusCodes:{200:!0,404:`no such container`,500:`server error`}})}async exec(e){return(await j(this.transport,{method:`POST`,path:`/${this.apiVersion}/containers/${this.id}/exec`,body:e,statusCodes:{201:!0,404:`no such container`,409:`container is paused`,500:`server error`}})).map(e=>new F(this.transport,this.apiVersion,e.Id))}async export(){return this.transport.dialStream({method:`GET`,path:`/${this.apiVersion}/containers/${this.id}/export`,statusCodes:{200:!0,404:`no such container`,500:`server error`}})}async getArchive(e){return this.transport.dialStream({method:`GET`,path:`/${this.apiVersion}/containers/${this.id}/archive`,query:{path:e.path},statusCodes:{200:!0,400:`bad parameter`,404:`no such container`,500:`server error`}})}async putArchive(e,t){return M(this.transport,{method:`PUT`,path:`/${this.apiVersion}/containers/${this.id}/archive`,query:{path:e.path},body:t,headers:{"content-type":`application/x-tar`},statusCodes:{200:!0,400:`bad parameter`,403:`permission denied`,404:`no such container`,500:`server error`}})}async listCheckpoints(){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/containers/${this.id}/checkpoints`,statusCodes:{200:!0,404:`no such container`,500:`server error`}})}async createCheckpoint(e){return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/containers/${this.id}/checkpoints`,body:e,statusCodes:{201:!0,404:`no such container`,500:`server error`}})}async deleteCheckpoint(e){return M(this.transport,{method:`DELETE`,path:`/${this.apiVersion}/containers/${this.id}/checkpoints/${e}`,statusCodes:{204:!0,404:`no such checkpoint`,500:`server error`}})}async infoArchive(e){return(await this.transport.dial({method:`HEAD`,path:`/${this.apiVersion}/containers/${this.id}/archive`,query:{path:e.path},statusCodes:{200:!0,400:`bad parameter`,404:`no such container`,500:`server error`}})).map(e=>{let t=e.headers[`x-docker-container-path-stat`];return t?JSON.parse(Buffer.from(t,`base64`).toString(`utf-8`)):{}})}async commit(e){let t={container:this.id};if(e){let{repo:n,tag:r,comment:i,author:a,pause:o,changes:s,...c}=e;n!==void 0&&(t.repo=n),r!==void 0&&(t.tag=r),i!==void 0&&(t.comment=i),a!==void 0&&(t.author=a),o!==void 0&&(t.pause=o),s!==void 0&&(t.changes=s),Object.assign(t,c)}return j(this.transport,{method:`POST`,path:`/${this.apiVersion}/commit`,query:t,statusCodes:{201:!0,404:`no such container`,500:`server error`}})}},L=class{constructor(e,t){this.transport=e,this.apiVersion=t}async list(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/containers/json`,query:e,statusCodes:{200:!0,400:`bad parameter`,500:`server error`}})}async create(e){let{name:t,platform:n,...r}=e,i={};return t!==void 0&&(i.name=t),n!==void 0&&(i.platform=n),(await j(this.transport,{method:`POST`,path:`/${this.apiVersion}/containers/create`,query:Object.keys(i).length>0?i:void 0,body:r,statusCodes:{201:!0,400:`bad parameter`,404:`no such image`,409:`conflict`,500:`server error`}})).map(e=>new I(this.transport,this.apiVersion,e.Id))}async inspect(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/containers/${e}/json`,statusCodes:{200:!0,404:`no such container`,500:`server error`}})}async prune(e){return j(this.transport,{method:`POST`,path:`/${this.apiVersion}/containers/prune`,query:e,statusCodes:{200:!0,500:`server error`}})}getContainer(e){return new I(this.transport,this.apiVersion,e)}};async function R(e,n,i){let a=f(),o=await e.dialHijack({method:`POST`,path:`/${n}/session`,hijack:!0,headers:{Upgrade:`h2c`,"X-Docker-Expose-Session-Uuid":a,"X-Docker-Expose-Session-Name":`docker-sdk`},statusCodes:{200:!0,101:!0,500:`server error`}});if(o.isErr())return o;let s=o.value;try{let e=new u.Server,n=u.ServerCredentials.createInsecure();e.createConnectionInjector(n).injectConnection(s);let o=t.resolve(import.meta.dirname,`auth.proto`),c=d.loadSync(o),l=u.loadPackageDefinition(c).moby?.filesync?.v1?.Auth?.service;return l&&e.addService(l,{Credentials({request:e},t){i?t(null,{Username:i.username??``,Secret:i.password??``}):t(null,{})},FetchToken(e,t){t(null,{})},GetTokenAuthority(e,t){t(null,{})},VerifyTokenAuthority(e,t){t(null,{})}}),r.ok({sessionId:a,close:()=>{e.forceShutdown(),s.end()}})}catch(e){return s.end(),r.err(new b({message:`Failed to create gRPC session: ${e instanceof Error?e.message:String(e)}`,cause:e}))}}var z=class{name;constructor(e,t,n){this.transport=e,this.apiVersion=t,this.name=n}async inspect(){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/images/${this.name}/json`,statusCodes:{200:!0,404:`no such image`,500:`server error`}})}async history(){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/images/${this.name}/history`,statusCodes:{200:!0,404:`no such image`,500:`server error`}})}async push(e){return this.transport.dialStream({method:`POST`,path:`/${this.apiVersion}/images/${this.name}/push`,query:e,statusCodes:{200:!0,404:`no such image`,500:`server error`}})}async tag(e){return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/images/${this.name}/tag`,query:e,statusCodes:{201:!0,400:`bad parameter`,404:`no such image`,409:`conflict`,500:`server error`}})}async remove(e){return j(this.transport,{method:`DELETE`,path:`/${this.apiVersion}/images/${this.name}`,query:e,statusCodes:{200:!0,404:`no such image`,409:`conflict`,500:`server error`}})}async get(){return this.transport.dialStream({method:`GET`,path:`/${this.apiVersion}/images/${this.name}/get`,statusCodes:{200:!0,500:`server error`}})}async distribution(){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/distribution/${this.name}/json`,statusCodes:{200:!0,401:`authentication required`,500:`server error`}})}},B=class{constructor(e,t){this.transport=e,this.apiVersion=t}async list(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/images/json`,query:e,statusCodes:{200:!0,500:`server error`}})}async create(e){return this.transport.dialStream({method:`POST`,path:`/${this.apiVersion}/images/create`,query:e,statusCodes:{200:!0,404:`no such image`,500:`server error`}})}async build(e,t){let{authconfig:n,registryconfig:r,...i}=t??{};if(i.version===`2`){let t=await R(this.transport,this.apiVersion,n);if(t.isErr())return t;let{sessionId:a,close:o}=t.value;i.session=a;let s=await this.transport.dialStream({method:`POST`,path:`/${this.apiVersion}/build`,query:Object.keys(i).length>0?i:void 0,body:e,headers:{"Content-Type":`application/x-tar`},registryconfig:r,statusCodes:{200:!0,400:`bad parameter`,500:`server error`}});if(s.isErr())return o(),s;let c=s.value;return c.on(`end`,o),c.on(`error`,o),s}return this.transport.dialStream({method:`POST`,path:`/${this.apiVersion}/build`,query:Object.keys(i).length>0?i:void 0,body:e,headers:{"Content-Type":`application/x-tar`},authconfig:n,registryconfig:r,statusCodes:{200:!0,400:`bad parameter`,500:`server error`}})}async load(e){return this.transport.dialStream({method:`POST`,path:`/${this.apiVersion}/images/load`,body:e,headers:{"Content-Type":`application/x-tar`},statusCodes:{200:!0,500:`server error`}})}async import(e,t){return this.transport.dialStream({method:`POST`,path:`/${this.apiVersion}/images/create`,query:{fromSrc:`-`,...t},body:e,headers:{"Content-Type":`application/x-tar`},statusCodes:{200:!0,500:`server error`}})}async search(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/images/search`,query:e,statusCodes:{200:!0,500:`server error`}})}async prune(e){return j(this.transport,{method:`POST`,path:`/${this.apiVersion}/images/prune`,query:e,statusCodes:{200:!0,500:`server error`}})}getImage(e){return new z(this.transport,this.apiVersion,e)}},V=class{name;constructor(e,t,n){this.transport=e,this.apiVersion=t,this.name=n}async inspect(){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/volumes/${this.name}`,statusCodes:{200:!0,404:`no such volume`,500:`server error`}})}async remove(e){return M(this.transport,{method:`DELETE`,path:`/${this.apiVersion}/volumes/${this.name}`,query:e,statusCodes:{204:!0,404:`no such volume`,409:`volume in use`,500:`server error`}})}},H=class{constructor(e,t){this.transport=e,this.apiVersion=t}async list(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/volumes`,query:e,statusCodes:{200:!0,500:`server error`}})}async create(e){return j(this.transport,{method:`POST`,path:`/${this.apiVersion}/volumes/create`,body:e,statusCodes:{201:!0,500:`server error`}})}async inspect(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/volumes/${e}`,statusCodes:{200:!0,404:`no such volume`,500:`server error`}})}async prune(e){return j(this.transport,{method:`POST`,path:`/${this.apiVersion}/volumes/prune`,query:e,statusCodes:{200:!0,500:`server error`}})}getVolume(e){return new V(this.transport,this.apiVersion,e)}},U=class{id;constructor(e,t,n){this.transport=e,this.apiVersion=t,this.id=n}async inspect(){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/networks/${this.id}`,statusCodes:{200:!0,404:`network not found`,500:`server error`}})}async remove(){return M(this.transport,{method:`DELETE`,path:`/${this.apiVersion}/networks/${this.id}`,statusCodes:{204:!0,403:`operation forbidden`,404:`no such network`,500:`server error`}})}async connect(e){return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/networks/${this.id}/connect`,body:e,statusCodes:{200:!0,400:`bad parameter`,403:`operation forbidden`,404:`network or container not found`,500:`server error`}})}async disconnect(e){return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/networks/${this.id}/disconnect`,body:e,statusCodes:{200:!0,403:`operation forbidden`,404:`network or container not found`,500:`server error`}})}},W=class{constructor(e,t){this.transport=e,this.apiVersion=t}async list(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/networks`,query:e,statusCodes:{200:!0,500:`server error`}})}async create(e){return j(this.transport,{method:`POST`,path:`/${this.apiVersion}/networks/create`,body:e,statusCodes:{201:!0,400:`bad parameter`,403:`operation forbidden`,404:`plugin not found`,500:`server error`}})}async inspect(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/networks/${e}`,statusCodes:{200:!0,404:`network not found`,500:`server error`}})}async prune(e){return j(this.transport,{method:`POST`,path:`/${this.apiVersion}/networks/prune`,query:e,statusCodes:{200:!0,500:`server error`}})}getNetwork(e){return new U(this.transport,this.apiVersion,e)}},G=class{id;constructor(e,t,n){this.transport=e,this.apiVersion=t,this.id=n}async inspect(){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/services/${this.id}`,statusCodes:{200:!0,404:`no such service`,500:`server error`,503:`node is not part of a swarm`}})}async update(e){let{version:t,registryAuthFrom:n,rollback:r,...i}=e,a={version:t};return n!==void 0&&(a.registryAuthFrom=n),r!==void 0&&(a.rollback=r),M(this.transport,{method:`POST`,path:`/${this.apiVersion}/services/${this.id}/update`,query:a,body:i,statusCodes:{200:!0,400:`bad parameter`,404:`no such service`,500:`server error`,503:`node is not part of a swarm`}})}async remove(){return M(this.transport,{method:`DELETE`,path:`/${this.apiVersion}/services/${this.id}`,statusCodes:{200:!0,404:`no such service`,500:`server error`,503:`node is not part of a swarm`}})}async logs(e){return this.transport.dialStream({method:`GET`,path:`/${this.apiVersion}/services/${this.id}/logs`,query:e,statusCodes:{200:!0,404:`no such service`,500:`server error`,503:`node is not part of a swarm`}})}},K=class{constructor(e,t){this.transport=e,this.apiVersion=t}async list(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/services`,query:e,statusCodes:{200:!0,500:`server error`,503:`node is not part of a swarm`}})}async create(e){let{...t}=e;return j(this.transport,{method:`POST`,path:`/${this.apiVersion}/services/create`,body:t,statusCodes:{201:!0,400:`bad parameter`,403:`forbidden`,409:`name conflicts`,500:`server error`,503:`node is not part of a swarm`}})}async inspect(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/services/${e}`,statusCodes:{200:!0,404:`no such service`,500:`server error`,503:`node is not part of a swarm`}})}getService(e){return new G(this.transport,this.apiVersion,e)}},q=class{id;constructor(e,t,n){this.transport=e,this.apiVersion=t,this.id=n}async inspect(){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/tasks/${this.id}`,statusCodes:{200:!0,404:`no such task`,500:`server error`,503:`node is not part of a swarm`}})}async logs(e){return this.transport.dialStream({method:`GET`,path:`/${this.apiVersion}/tasks/${this.id}/logs`,query:e,statusCodes:{200:!0,404:`no such task`,500:`server error`,503:`node is not part of a swarm`}})}},J=class{constructor(e,t){this.transport=e,this.apiVersion=t}async list(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/tasks`,query:e,statusCodes:{200:!0,500:`server error`,503:`node is not part of a swarm`}})}async inspect(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/tasks/${e}`,statusCodes:{200:!0,404:`no such task`,500:`server error`,503:`node is not part of a swarm`}})}getTask(e){return new q(this.transport,this.apiVersion,e)}},se=class{id;constructor(e,t,n){this.transport=e,this.apiVersion=t,this.id=n}async inspect(){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/nodes/${this.id}`,statusCodes:{200:!0,404:`no such node`,500:`server error`,503:`node is not part of a swarm`}})}async update(e){let{version:t,...n}=e;return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/nodes/${this.id}/update`,query:{version:t},body:n,statusCodes:{200:!0,400:`bad parameter`,404:`no such node`,500:`server error`,503:`node is not part of a swarm`}})}async remove(e){return M(this.transport,{method:`DELETE`,path:`/${this.apiVersion}/nodes/${this.id}`,query:e,statusCodes:{200:!0,404:`no such node`,500:`server error`,503:`node is not part of a swarm`}})}},Y=class{constructor(e,t){this.transport=e,this.apiVersion=t}async list(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/nodes`,query:e,statusCodes:{200:!0,500:`server error`,503:`node is not part of a swarm`}})}async inspect(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/nodes/${e}`,statusCodes:{200:!0,404:`no such node`,500:`server error`,503:`node is not part of a swarm`}})}getNode(e){return new se(this.transport,this.apiVersion,e)}},ce=class{id;constructor(e,t,n){this.transport=e,this.apiVersion=t,this.id=n}async inspect(){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/secrets/${this.id}`,statusCodes:{200:!0,404:`no such secret`,500:`server error`,503:`node is not part of a swarm`}})}async update(e){let{version:t,...n}=e;return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/secrets/${this.id}/update`,query:{version:t},body:n,statusCodes:{200:!0,400:`bad parameter`,404:`no such secret`,500:`server error`,503:`node is not part of a swarm`}})}async remove(){return M(this.transport,{method:`DELETE`,path:`/${this.apiVersion}/secrets/${this.id}`,statusCodes:{204:!0,404:`no such secret`,500:`server error`,503:`node is not part of a swarm`}})}},X=class{constructor(e,t){this.transport=e,this.apiVersion=t}async list(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/secrets`,query:e,statusCodes:{200:!0,500:`server error`,503:`node is not part of a swarm`}})}async create(e){return j(this.transport,{method:`POST`,path:`/${this.apiVersion}/secrets/create`,body:e,statusCodes:{201:!0,409:`name conflicts`,500:`server error`,503:`node is not part of a swarm`}})}async inspect(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/secrets/${e}`,statusCodes:{200:!0,404:`no such secret`,500:`server error`,503:`node is not part of a swarm`}})}getSecret(e){return new ce(this.transport,this.apiVersion,e)}},Z=class{id;constructor(e,t,n){this.transport=e,this.apiVersion=t,this.id=n}async inspect(){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/configs/${this.id}`,statusCodes:{200:!0,404:`no such config`,500:`server error`,503:`node is not part of a swarm`}})}async update(e){let{version:t,...n}=e;return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/configs/${this.id}/update`,query:{version:t},body:n,statusCodes:{200:!0,400:`bad parameter`,404:`no such config`,500:`server error`,503:`node is not part of a swarm`}})}async remove(){return M(this.transport,{method:`DELETE`,path:`/${this.apiVersion}/configs/${this.id}`,statusCodes:{204:!0,404:`no such config`,500:`server error`,503:`node is not part of a swarm`}})}},Q=class{constructor(e,t){this.transport=e,this.apiVersion=t}async list(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/configs`,query:e,statusCodes:{200:!0,500:`server error`,503:`node is not part of a swarm`}})}async create(e){return j(this.transport,{method:`POST`,path:`/${this.apiVersion}/configs/create`,body:e,statusCodes:{201:!0,409:`name conflicts`,500:`server error`,503:`node is not part of a swarm`}})}async inspect(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/configs/${e}`,statusCodes:{200:!0,404:`no such config`,500:`server error`,503:`node is not part of a swarm`}})}getConfig(e){return new Z(this.transport,this.apiVersion,e)}},le=class{name;constructor(e,t,n){this.transport=e,this.apiVersion=t,this.name=n}async inspect(){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/plugins/${this.name}/json`,statusCodes:{200:!0,404:`plugin is not found`,500:`server error`}})}async remove(e){return j(this.transport,{method:`DELETE`,path:`/${this.apiVersion}/plugins/${this.name}`,query:e,statusCodes:{200:!0,404:`plugin is not found`,500:`server error`}})}async enable(e){return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/plugins/${this.name}/enable`,query:e,statusCodes:{200:!0,404:`plugin is not installed`,500:`server error`}})}async disable(e){return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/plugins/${this.name}/disable`,body:e,statusCodes:{200:!0,404:`plugin is not installed`,500:`server error`}})}async push(){return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/plugins/${this.name}/push`,statusCodes:{200:!0,404:`plugin is not found`,500:`server error`}})}async configure(e){return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/plugins/${this.name}/set`,body:e.env,statusCodes:{204:!0,404:`plugin is not found`,500:`server error`}})}async upgrade(e){return this.transport.dialStream({method:`POST`,path:`/${this.apiVersion}/plugins/${this.name}/upgrade`,query:{remote:e.remote},statusCodes:{200:!0,404:`plugin is not found`,500:`server error`}})}},$=class{constructor(e,t){this.transport=e,this.apiVersion=t}async list(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/plugins`,query:e,statusCodes:{200:!0,500:`server error`}})}async privileges(e){return j(this.transport,{method:`GET`,path:`/${this.apiVersion}/plugins/privileges`,query:{remote:e.remote},statusCodes:{200:!0,500:`server error`}})}async install(e){let t={remote:e.remote};return e.name!==void 0&&(t.name=e.name),this.transport.dialStream({method:`POST`,path:`/${this.apiVersion}/plugins/pull`,query:t,statusCodes:{204:!0,500:`server error`}})}async create(e){return M(this.transport,{method:`POST`,path:`/${this.apiVersion}/plugins/create`,query:{name:e.name},statusCodes:{204:!0,500:`server error`}})}getPlugin(e){return new le(this.transport,this.apiVersion,e)}},ue=class e{system;containers;images;volumes;networks;services;tasks;nodes;secrets;configs;plugins;transport;apiVersion;constructor(e){this.transport=ae(e.transport),this.apiVersion=e.apiVersion;let t=e.apiVersion;this.system=new N(this.transport,t),this.containers=new L(this.transport,t),this.images=new B(this.transport,t),this.volumes=new H(this.transport,t),this.networks=new W(this.transport,t),this.services=new K(this.transport,t),this.tasks=new J(this.transport,t),this.nodes=new Y(this.transport,t),this.secrets=new X(this.transport,t),this.configs=new Q(this.transport,t),this.plugins=new $(this.transport,t)}static fromTransport(t,n){let r=Object.create(e.prototype),i=n.apiVersion;return r.transport=t,r.apiVersion=i,r.system=new N(t,i),r.containers=new L(t,i),r.images=new B(t,i),r.volumes=new H(t,i),r.networks=new W(t,i),r.services=new K(t,i),r.tasks=new J(t,i),r.nodes=new Y(t,i),r.secrets=new X(t,i),r.configs=new Q(t,i),r.plugins=new $(t,i),r}static fromEnv(t){let n=oe(),r=t?.apiVersion??`v1.47`,i=Object.create(e.prototype);return i.transport=n,i.apiVersion=r,i.system=new N(n,r),i.containers=new L(n,r),i.images=new B(n,r),i.volumes=new H(n,r),i.networks=new W(n,r),i.services=new K(n,r),i.tasks=new J(n,r),i.nodes=new Y(n,r),i.secrets=new X(n,r),i.configs=new Q(n,r),i.plugins=new $(n,r),i}async pull(e,t){let n=e.split(`:`),r=n.length>1?n.pop():`latest`,i=n.join(`:`);return this.transport.dialStream({method:`POST`,path:`/${this.apiVersion}/images/create`,query:{fromImage:i,tag:r},authconfig:t?.authconfig,statusCodes:{200:!0,404:`no such image`,500:`server error`}})}async run(e,t,n){let{autoRemove:r,...i}=n??{},a=await this.containers.create({...i,Image:e,Cmd:t,AttachStdout:!0,AttachStderr:!0});if(a.isErr())return a;let o=a.value,s=await o.attach({stream:!0,stdout:!0,stderr:!0});if(s.isErr())return s;let c=await o.start();if(c.isErr())return c;let l=await o.wait();return l.isErr()?l:(r&&await o.remove({force:!0}),l.map(e=>({output:e,container:o})))}destroy(){this.transport.destroy()}},de=class extends ee{isTty;source;constructor(e,t){super(),this.source=e,this.isTty=t,e.on(`data`,e=>this.emit(`data`,e)),e.on(`end`,()=>this.emit(`end`)),e.on(`error`,e=>this.emit(`error`,e))}destroy(){`destroy`in this.source&&typeof this.source.destroy==`function`&&this.source.destroy()}};function fe(e){let t=new c,n=new c,r=Buffer.alloc(0);function i(){for(;r.length>=8;){let e=r.readUInt8(0),i=r.readUInt32BE(4);if(r.length<8+i)break;let a=r.subarray(8,8+i);switch(e){case 1:t.write(a);break;case 2:n.write(a);break}r=r.subarray(8+i)}}return e.on(`data`,e=>{r=Buffer.concat([r,e]),i()}),e.on(`end`,()=>{t.end(),n.end()}),e.on(`error`,e=>{t.destroy(e),n.destroy(e)}),{stdout:t,stderr:n}}function pe(e,t,n){let r=[],i=``;e.on(`data`,e=>{i+=typeof e==`string`?e:e.toString(`utf-8`);let t=i.split(`
+`);i=t.pop()??``;for(let e of t){let t=e.trim();if(t.length!==0)try{let e=JSON.parse(t);r.push(e),n&&n(e)}catch{}}}),e.on(`end`,()=>{if(i.trim().length>0)try{let e=JSON.parse(i.trim());r.push(e),n&&n(e)}catch{}t(null,r)}),e.on(`error`,e=>{t(e,r)})}export{Z as ConfigEntity,Q as ConfigOperations,I as Container,L as ContainerOperations,ue as Docker,S as DockerAbortError,p as DockerBadRequestError,_ as DockerConflictError,te as DockerDecodeError,h as DockerForbiddenError,b as DockerNetworkError,g as DockerNotFoundError,v as DockerServerError,y as DockerServiceUnavailableError,de as DockerStream,x as DockerTimeoutError,m as DockerUnauthorizedError,C as DockerUnknownError,F as Exec,P as HttpDuplex,z as Image,B as ImageOperations,A as NamedPipeTransport,U as NetworkEntity,W as NetworkOperations,se as NodeEntity,Y as NodeOperations,le as PluginEntity,$ as PluginOperations,ce as SecretEntity,X as SecretOperations,G as ServiceEntity,K as ServiceOperations,N as SystemOperations,q as TaskEntity,J as TaskOperations,V as VolumeEntity,H as VolumeOperations,ae as createTransport,oe as createTransportFromEnv,fe as demuxStream,pe as followProgress,w as statusCodeToError,R as withSession};