@rakay-technology/kraft 0.7.4 → 0.7.6

package/dist/{chunk-PNNXWA2A.js → chunk-OZUFHE2T.js}

@@ -9,14 +9,14 @@ import {
   internalPost,
   mintBareInternalToken,
   waitHealthy
-} from "./chunk-RFOBMHQ7.js";
+} from "./chunk-JK7KKBXI.js";
 import {
   completeHostEdge,
   markStoppedProxyImported,
   planAndApplyHostEdge,
   previewHostEdge,
   rollbackHostEdge
-} from "./chunk-PZVKPCKE.js";
+} from "./chunk-4UITBYUK.js";
 import {
   DEFAULT_REPO,
   PORTS_FILE,
@@ -43,11 +43,11 @@ import {
   resolvePorts,
   sourceBuildDir,
   verifyHostChannel
-} from "./chunk-JSCZT76F.js";
+} from "./chunk-GABTH5TU.js";
 import {
   startUnitHint,
   thisHost
-} from "./chunk-EW4PHKB2.js";
+} from "./chunk-2UQFOUSZ.js";
 import {
   AUTH_SECRET_FILE,
   DATA_DIR,
@@ -59,16 +59,16 @@ import {
 import {
   edgeCrashReason,
   edgeIsBroken
-} from "./chunk-YZUKHG3S.js";
+} from "./chunk-PCOTSRS4.js";
 import {
   LocalExecutor
-} from "./chunk-XVKUFMIB.js";
+} from "./chunk-HFOE2IXZ.js";
 import {
   EDGE_CONTAINER_NAME
-} from "./chunk-N4OALTFK.js";
+} from "./chunk-3RCXJZJD.js";
 import {
   isValidEmail
-} from "./chunk-PVOWHIND.js";
+} from "./chunk-ND23EK7Y.js";
 
 // src/commands/up.ts
 import { Command } from "commander";
@@ -78,27 +78,150 @@ import { spawn } from "child_process";
 import { randomBytes } from "crypto";
 import {
   createWriteStream as createWriteStream2,
-  existsSync as existsSync4,
-  mkdirSync as mkdirSync5,
-  readFileSync as readFileSync3,
-  writeFileSync as writeFileSync4
+  existsSync as existsSync5,
+  mkdirSync as mkdirSync6,
+  readFileSync as readFileSync4,
+  writeFileSync as writeFileSync5
 } from "fs";
-import { dirname as dirname2, join as join5 } from "path";
+import { dirname as dirname2, join as join6 } from "path";
 import { fileURLToPath } from "url";
 
 // src/lib/dashboard.ts
-import { spawnSync } from "child_process";
-import { existsSync, mkdirSync as mkdirSync2, rmSync, writeFileSync } from "fs";
-import { join as join2 } from "path";
+import { spawnSync as spawnSync2 } from "child_process";
+import { existsSync as existsSync2, mkdirSync as mkdirSync3, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "fs";
+import { join as join3 } from "path";
 
 // src/lib/cache.ts
 import { createHash } from "crypto";
-import { createReadStream, createWriteStream, mkdirSync } from "fs";
-import { dirname, join } from "path";
-var CACHE_DIR = join(OS_DIR, "cache");
-var RELEASES_DIR = join(CACHE_DIR, "releases");
+import { createReadStream, createWriteStream, mkdirSync as mkdirSync2 } from "fs";
+import { dirname, join as join2 } from "path";
+
+// src/lib/github-auth.ts
+import {
+  mkdirSync,
+  readFileSync,
+  rmSync,
+  writeFileSync
+} from "fs";
+import { homedir } from "os";
+import { join } from "path";
+import { spawnSync } from "child_process";
+var GITHUB_TOKEN_FILENAME = ".github-token";
+function githubTokenFile(dir = OS_DIR) {
+  return join(dir, GITHUB_TOKEN_FILENAME);
+}
+function envGithubToken() {
+  return process.env.GITHUB_TOKEN?.trim() || process.env.GH_TOKEN?.trim() || void 0;
+}
+function readStoredGithubToken(dir = OS_DIR) {
+  try {
+    const raw = readFileSync(githubTokenFile(dir), "utf8").trim();
+    return raw || null;
+  } catch {
+    return null;
+  }
+}
+function githubToken(dir = OS_DIR) {
+  return envGithubToken() ?? readStoredGithubToken(dir) ?? void 0;
+}
+function githubAuthHeaders(dir) {
+  const token = dir === void 0 ? githubToken() : githubToken(dir);
+  return token ? { Authorization: `Bearer ${token}` } : {};
+}
+function githubTokenSource(dir = OS_DIR) {
+  if (envGithubToken()) return "env";
+  if (readStoredGithubToken(dir)) return "stored";
+  return null;
+}
+function storeGithubToken(token, dir = OS_DIR) {
+  mkdirSync(dir, { recursive: true, mode: 448 });
+  writeFileSync(githubTokenFile(dir), `${token.trim()}
+`, { mode: 384 });
+}
+function clearGithubToken(dir = OS_DIR) {
+  try {
+    rmSync(githubTokenFile(dir), { force: true });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function maskToken(token) {
+  const t = token.trim();
+  if (t.length <= 8) return `${t.slice(0, 2)}\u2026`;
+  const prefix = t.split("_")[0];
+  return `${prefix}_\u2026${t.slice(-4)}`;
+}
+async function validateGithubToken(token) {
+  try {
+    const res = await fetch("https://api.github.com/rate_limit", {
+      headers: {
+        Accept: "application/vnd.github+json",
+        "User-Agent": "kraft-cli",
+        Authorization: `Bearer ${token.trim()}`
+      },
+      signal: AbortSignal.timeout(1e4)
+    });
+    return { valid: res.ok, status: res.status };
+  } catch {
+    return { valid: false, status: 0 };
+  }
+}
+async function checkRepoReleases(token, repo) {
+  try {
+    const res = await fetch(
+      `https://api.github.com/repos/${repo}/releases/latest`,
+      {
+        headers: {
+          Accept: "application/vnd.github+json",
+          "User-Agent": "kraft-cli",
+          Authorization: `Bearer ${token.trim()}`
+        },
+        signal: AbortSignal.timeout(1e4)
+      }
+    );
+    if (!res.ok) return { reachable: false, tag: null, status: res.status };
+    const data = await res.json();
+    return { reachable: true, tag: data.tag_name ?? null, status: res.status };
+  } catch {
+    return { reachable: false, tag: null, status: 0 };
+  }
+}
+function dockerHasAuthFor(host) {
+  try {
+    const raw = readFileSync(join(homedir(), ".docker", "config.json"), "utf8");
+    const cfg = JSON.parse(raw);
+    return !!cfg.auths?.[host];
+  } catch {
+    return false;
+  }
+}
+function dockerAvailable() {
+  try {
+    return spawnSync("docker", ["--version"], { stdio: "ignore" }).status === 0;
+  } catch {
+    return false;
+  }
+}
+function dockerLogin(host, username, token) {
+  try {
+    const r = spawnSync(
+      "docker",
+      ["login", host, "-u", username, "--password-stdin"],
+      { input: token, encoding: "utf8" }
+    );
+    const detail = `${r.stdout ?? ""}${r.stderr ?? ""}`.trim();
+    return { ok: r.status === 0, detail };
+  } catch (e) {
+    return { ok: false, detail: e.message };
+  }
+}
+
+// src/lib/cache.ts
+var CACHE_DIR = join2(OS_DIR, "cache");
+var RELEASES_DIR = join2(CACHE_DIR, "releases");
 function releaseDir(tag) {
-  return join(RELEASES_DIR, tag);
+  return join2(RELEASES_DIR, tag);
 }
 function parseSha256(content) {
   const token = content.trim().split(/\s+/)[0]?.toLowerCase();
@@ -111,9 +234,11 @@ async function hashFile(path) {
   return hash.digest("hex");
 }
 async function downloadToFile(url, dest, onProgress) {
-  const res = await fetch(url, { headers: { "User-Agent": "kraft-cli" } });
+  const res = await fetch(url, {
+    headers: { "User-Agent": "kraft-cli", ...githubAuthHeaders() }
+  });
   if (!res.ok || !res.body) throw new Error(`HTTP ${res.status} for ${url}`);
-  mkdirSync(dirname(dest), { recursive: true });
+  mkdirSync2(dirname(dest), { recursive: true });
   const total = Number(res.headers.get("content-length")) || 0;
   const hash = createHash("sha256");
   const file = createWriteStream(dest);
@@ -152,29 +277,43 @@ function formatBytes(n) {
 }
 
 // src/lib/github-releases.ts
-var REPO = "rakay-technology/kraft";
-var RELEASES = `https://github.com/${REPO}/releases`;
-var LATEST_API = `https://api.github.com/repos/${REPO}/releases/latest`;
+var DEFAULT_GITHUB_REPO = "rakay-technology/kraft";
+function githubRepo() {
+  return process.env.KRAFT_GITHUB_REPO?.trim() || DEFAULT_GITHUB_REPO;
+}
+var RELEASES = `https://github.com/${DEFAULT_GITHUB_REPO}/releases`;
+function releasesPage() {
+  return `https://github.com/${githubRepo()}/releases`;
+}
+function latestApiUrl() {
+  return `https://api.github.com/repos/${githubRepo()}/releases/latest`;
+}
+function privateRepoHint(status) {
+  return ` (HTTP ${status} \u2014 for a PRIVATE repo set KRAFT_GITHUB_REPO=<owner/repo> and GITHUB_TOKEN (or GH_TOKEN) with Contents:read, then re-run)`;
+}
 async function resolveLatestTag() {
-  const res = await fetch(LATEST_API, {
+  const res = await fetch(latestApiUrl(), {
     headers: {
       Accept: "application/vnd.github+json",
-      "User-Agent": "kraft-cli"
+      "User-Agent": "kraft-cli",
+      ...githubAuthHeaders()
     },
     signal: AbortSignal.timeout(1e4)
   });
   if (!res.ok)
-    throw new Error(`GitHub latest-release lookup failed: HTTP ${res.status}`);
+    throw new Error(
+      `GitHub latest-release lookup failed for ${githubRepo()}` + (res.status === 401 || res.status === 403 || res.status === 404 ? privateRepoHint(res.status) : `: HTTP ${res.status}`)
+    );
   const data = await res.json();
   if (!data.tag_name) throw new Error("Latest release has no tag_name");
   return data.tag_name;
 }
 function assetUrl(tag, name) {
-  return `${RELEASES}/download/${tag}/${name}`;
+  return `${releasesPage()}/download/${tag}/${name}`;
 }
 async function fetchSidecar(url) {
   const res = await fetch(url, {
-    headers: { "User-Agent": "kraft-cli" },
+    headers: { "User-Agent": "kraft-cli", ...githubAuthHeaders() },
     signal: AbortSignal.timeout(15e3)
   });
   if (res.status === 404) return null;
@@ -187,20 +326,20 @@ async function expectedSha256(tag, name) {
 }
 
 // src/lib/dashboard.ts
-var DASHBOARD_CACHE = join2(CACHE_DIR, "dashboard");
+var DASHBOARD_CACHE = join3(CACHE_DIR, "dashboard");
 function assetName(tag) {
   return `kraft-dashboard-${tag}.tar.gz`;
 }
 function resolveDashboardEntry(cwd) {
-  const wrapped = join2(cwd, "standalone-server.mjs");
-  return existsSync(wrapped) ? wrapped : join2(cwd, "server.js");
+  const wrapped = join3(cwd, "standalone-server.mjs");
+  return existsSync2(wrapped) ? wrapped : join3(cwd, "server.js");
 }
 async function ensureDashboard(opts = {}) {
   const override = process.env.KRAFT_DASHBOARD_DIR?.trim();
   if (override) {
-    const cwd = join2(override, "apps", "dashboard");
-    const serverJs = join2(cwd, "server.js");
-    if (!existsSync(serverJs)) {
+    const cwd = join3(override, "apps", "dashboard");
+    const serverJs = join3(cwd, "server.js");
+    if (!existsSync2(serverJs)) {
       throw new Error(
         `KRAFT_DASHBOARD_DIR=${override} but ${serverJs} is missing \u2014 build the dashboard standalone first (see docs).`
       );
@@ -221,17 +360,17 @@ async function ensureDashboard(opts = {}) {
   }
 }
 async function fetchBundle(tag, onProgress) {
-  const dir = join2(DASHBOARD_CACHE, tag);
-  const cwd = join2(dir, "apps", "dashboard");
-  const serverJs = join2(cwd, "server.js");
-  const marker = join2(dir, ".extracted");
-  if (existsSync(marker) && existsSync(serverJs)) {
+  const dir = join3(DASHBOARD_CACHE, tag);
+  const cwd = join3(dir, "apps", "dashboard");
+  const serverJs = join3(cwd, "server.js");
+  const marker = join3(dir, ".extracted");
+  if (existsSync2(marker) && existsSync2(serverJs)) {
     return { tag, entry: resolveDashboardEntry(cwd), cwd };
   }
-  rmSync(dir, { recursive: true, force: true });
-  mkdirSync2(dir, { recursive: true });
+  rmSync2(dir, { recursive: true, force: true });
+  mkdirSync3(dir, { recursive: true });
   const name = assetName(tag);
-  const tarball = join2(dir, name);
+  const tarball = join3(dir, name);
   const { sha256 } = await downloadToFile(
     assetUrl(tag, name),
     tarball,
@@ -244,12 +383,12 @@ async function fetchBundle(tag, onProgress) {
     );
   }
   if (expected !== sha256) {
-    rmSync(dir, { recursive: true, force: true });
+    rmSync2(dir, { recursive: true, force: true });
     throw new Error(
       `Dashboard bundle checksum mismatch (expected ${expected}, got ${sha256}).`
     );
   }
-  const untar = spawnSync("tar", ["-xzf", tarball, "-C", dir], {
+  const untar = spawnSync2("tar", ["-xzf", tarball, "-C", dir], {
     stdio: "inherit"
   });
   if (untar.status !== 0) {
@@ -257,32 +396,32 @@ async function fetchBundle(tag, onProgress) {
       "Failed to extract the dashboard bundle (is `tar` available?)."
     );
   }
-  rmSync(tarball, { force: true });
-  if (!existsSync(serverJs)) {
+  rmSync2(tarball, { force: true });
+  if (!existsSync2(serverJs)) {
     throw new Error(
       `Dashboard bundle extracted but ${serverJs} is missing (unexpected layout).`
     );
   }
-  writeFileSync(marker, `${tag}
+  writeFileSync2(marker, `${tag}
 `);
   return { tag, entry: resolveDashboardEntry(cwd), cwd };
 }
 
 // src/lib/service.ts
-import { spawnSync as spawnSync2 } from "child_process";
+import { spawnSync as spawnSync3 } from "child_process";
 import {
-  existsSync as existsSync3,
-  mkdirSync as mkdirSync4,
-  writeFileSync as writeFileSync3,
-  rmSync as rmSync2
+  existsSync as existsSync4,
+  mkdirSync as mkdirSync5,
+  writeFileSync as writeFileSync4,
+  rmSync as rmSync3
 } from "fs";
-import { homedir } from "os";
-import { join as join4, resolve } from "path";
+import { homedir as homedir2 } from "os";
+import { join as join5, resolve } from "path";
 
 // src/lib/cli-install.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync3, readFileSync, writeFileSync as writeFileSync2 } from "fs";
-import { join as join3 } from "path";
-var MARKER = join3(OS_DIR, "cli-install.json");
+import { existsSync as existsSync3, mkdirSync as mkdirSync4, readFileSync as readFileSync2, writeFileSync as writeFileSync3 } from "fs";
+import { join as join4 } from "path";
+var MARKER = join4(OS_DIR, "cli-install.json");
 function parseCliInstall(raw) {
   try {
     const obj = JSON.parse(raw);
@@ -291,7 +430,7 @@ function parseCliInstall(raw) {
     return {
       method: "tarball",
       tag: obj.tag,
-      launcher: typeof obj.launcher === "string" ? obj.launcher : join3(OS_DIR, "bin", "kraft"),
+      launcher: typeof obj.launcher === "string" ? obj.launcher : join4(OS_DIR, "bin", "kraft"),
       runtime: obj.runtime === "vendored" ? "vendored" : "system"
     };
   } catch {
@@ -299,29 +438,29 @@ function parseCliInstall(raw) {
   }
 }
 function readCliInstall() {
-  if (!existsSync2(MARKER)) return null;
+  if (!existsSync3(MARKER)) return null;
   try {
-    return parseCliInstall(readFileSync(MARKER, "utf8"));
+    return parseCliInstall(readFileSync2(MARKER, "utf8"));
   } catch {
     return null;
   }
 }
 function writeCliInstall(info) {
-  mkdirSync3(OS_DIR, { recursive: true });
-  writeFileSync2(MARKER, `${JSON.stringify(info, null, 2)}
+  mkdirSync4(OS_DIR, { recursive: true });
+  writeFileSync3(MARKER, `${JSON.stringify(info, null, 2)}
 `);
 }
 
 // src/lib/service.ts
-var HOME = homedir();
-var KRAFT_BIN = join4(OS_DIR, "bin");
+var HOME = homedir2();
+var KRAFT_BIN = join5(OS_DIR, "bin");
 var MAC_LABEL = IS_ALT_HOME ? "io.kraft-dev.up" : "io.kraft.up";
-var MAC_PLIST = join4(HOME, "Library", "LaunchAgents", `${MAC_LABEL}.plist`);
+var MAC_PLIST = join5(HOME, "Library", "LaunchAgents", `${MAC_LABEL}.plist`);
 var SYSTEMD_NAME = IS_ALT_HOME ? "kraft-dev" : "kraft";
 var WIN_TASK = IS_ALT_HOME ? "KraftDev" : "Kraft";
 function selfInvocation() {
   const cli = readCliInstall();
-  if (cli?.method === "tarball" && existsSync3(cli.launcher)) {
+  if (cli?.method === "tarball" && existsSync4(cli.launcher)) {
     return { runtime: cli.launcher, args: [] };
   }
   const runtime = process.execPath;
@@ -348,7 +487,7 @@ function runArgv(flags) {
   return [runtime, ...args, ...upArgs(flags)];
 }
 function run(cmd, args) {
-  const r = spawnSync2(cmd, args, { encoding: "utf8" });
+  const r = spawnSync3(cmd, args, { encoding: "utf8" });
   return {
     ok: r.status === 0,
     out: `${r.stdout ?? ""}${r.stderr ?? ""}`.trim()
@@ -395,7 +534,7 @@ function serviceEnv() {
 function plist(flags) {
   const argv = runArgv(flags);
   const items = argv.map((a) => `      <string>${xmlEscape(a)}</string>`).join("\n");
-  const runtimeBin = readCliInstall()?.method === "tarball" ? KRAFT_BIN : join4(HOME, ".bun/bin");
+  const runtimeBin = readCliInstall()?.method === "tarball" ? KRAFT_BIN : join5(HOME, ".bun/bin");
   const path = [
     "/opt/homebrew/bin",
     "/usr/local/bin",
@@ -417,8 +556,8 @@ ${items}
   </array>
   <key>RunAtLoad</key><true/>
   <key>KeepAlive</key><true/>
-  <key>StandardOutPath</key><string>${join4(LOG_DIR, "up.log")}</string>
-  <key>StandardErrorPath</key><string>${join4(LOG_DIR, "up.err.log")}</string>
+  <key>StandardOutPath</key><string>${join5(LOG_DIR, "up.log")}</string>
+  <key>StandardErrorPath</key><string>${join5(LOG_DIR, "up.err.log")}</string>
   <key>EnvironmentVariables</key>
   <dict><key>PATH</key><string>${path}</string>${extraEnv}</dict>
 </dict>
@@ -469,7 +608,7 @@ function preview(flags) {
   if (kind === "systemd-user")
     return {
       kind,
-      path: join4(HOME, ".config/systemd/user", `${SYSTEMD_NAME}.service`),
+      path: join5(HOME, ".config/systemd/user", `${SYSTEMD_NAME}.service`),
       content: systemdUnit(flags)
     };
   if (kind === "systemd-system")
@@ -483,15 +622,15 @@ function preview(flags) {
   return { kind, path: "", content: "" };
 }
 function installAndStart(flags) {
-  mkdirSync4(LOG_DIR, { recursive: true });
+  mkdirSync5(LOG_DIR, { recursive: true });
   const kind = detectKind();
   if (kind === "launchd") {
-    mkdirSync4(join4(HOME, "Library", "LaunchAgents"), { recursive: true });
+    mkdirSync5(join5(HOME, "Library", "LaunchAgents"), { recursive: true });
     run("launchctl", [
       "bootout",
       `gui/${process.getuid?.() ?? ""}/${MAC_LABEL}`
     ]);
-    writeFileSync3(MAC_PLIST, plist(flags));
+    writeFileSync4(MAC_PLIST, plist(flags));
     const uid = String(process.getuid?.() ?? "");
     let r = run("launchctl", ["bootstrap", `gui/${uid}`, MAC_PLIST]);
     if (!r.ok) r = run("launchctl", ["load", "-w", MAC_PLIST]);
@@ -500,11 +639,11 @@ function installAndStart(flags) {
   }
   if (kind === "systemd-user" || kind === "systemd-system") {
     const sysArgs = kind === "systemd-user" ? ["--user"] : [];
-    const unitPath = kind === "systemd-user" ? join4(HOME, ".config/systemd/user", `${SYSTEMD_NAME}.service`) : `/etc/systemd/system/${SYSTEMD_NAME}.service`;
-    mkdirSync4(unitPath.slice(0, unitPath.lastIndexOf("/")), {
+    const unitPath = kind === "systemd-user" ? join5(HOME, ".config/systemd/user", `${SYSTEMD_NAME}.service`) : `/etc/systemd/system/${SYSTEMD_NAME}.service`;
+    mkdirSync5(unitPath.slice(0, unitPath.lastIndexOf("/")), {
       recursive: true
     });
-    writeFileSync3(unitPath, systemdUnit(flags));
+    writeFileSync4(unitPath, systemdUnit(flags));
     run("systemctl", [...sysArgs, "daemon-reload"]);
     const r = run("systemctl", [...sysArgs, "enable", "--now", SYSTEMD_NAME]);
     if (!r.ok) throw new Error(`systemctl enable failed: ${r.out}`);
@@ -544,7 +683,7 @@ function installAndStart(flags) {
 function restart() {
   const kind = detectKind();
   if (kind === "launchd") {
-    if (!existsSync3(MAC_PLIST))
+    if (!existsSync4(MAC_PLIST))
       return { restarted: false, detail: "no launchd agent installed" };
     const uid = String(process.getuid?.() ?? "");
     const r = run("launchctl", ["kickstart", "-k", `gui/${uid}/${MAC_LABEL}`]);
@@ -566,8 +705,8 @@ function restart() {
   }
   if (kind === "systemd-user" || kind === "systemd-system") {
     const sysArgs = kind === "systemd-user" ? ["--user"] : [];
-    const unitPath = kind === "systemd-user" ? join4(HOME, ".config/systemd/user", `${SYSTEMD_NAME}.service`) : `/etc/systemd/system/${SYSTEMD_NAME}.service`;
-    if (!existsSync3(unitPath))
+    const unitPath = kind === "systemd-user" ? join5(HOME, ".config/systemd/user", `${SYSTEMD_NAME}.service`) : `/etc/systemd/system/${SYSTEMD_NAME}.service`;
+    if (!existsSync4(unitPath))
       return { restarted: false, detail: "no systemd unit installed" };
     const r = run("systemctl", [...sysArgs, "restart", SYSTEMD_NAME]);
     return {
@@ -587,16 +726,16 @@ function serviceStatus() {
   if (kind === "launchd") {
     return {
       kind,
-      installed: existsSync3(MAC_PLIST),
+      installed: existsSync4(MAC_PLIST),
       running: launchdPid() != null
     };
   }
   if (kind === "systemd-user" || kind === "systemd-system") {
     const sysArgs = kind === "systemd-user" ? ["--user"] : [];
-    const unitPath = kind === "systemd-user" ? join4(HOME, ".config/systemd/user", `${SYSTEMD_NAME}.service`) : `/etc/systemd/system/${SYSTEMD_NAME}.service`;
+    const unitPath = kind === "systemd-user" ? join5(HOME, ".config/systemd/user", `${SYSTEMD_NAME}.service`) : `/etc/systemd/system/${SYSTEMD_NAME}.service`;
     return {
       kind,
-      installed: existsSync3(unitPath),
+      installed: existsSync4(unitPath),
       running: run("systemctl", [...sysArgs, "is-active", SYSTEMD_NAME]).out.trim() === "active"
     };
   }
@@ -636,13 +775,13 @@ function stop() {
       "bootout",
       `gui/${process.getuid?.() ?? ""}/${MAC_LABEL}`
     ]);
-    if (existsSync3(MAC_PLIST)) rmSync2(MAC_PLIST, { force: true });
+    if (existsSync4(MAC_PLIST)) rmSync3(MAC_PLIST, { force: true });
     result = { kind, detail: `launchd agent ${MAC_LABEL} stopped + removed` };
   } else if (kind === "systemd-user" || kind === "systemd-system") {
     const sysArgs = kind === "systemd-user" ? ["--user"] : [];
     run("systemctl", [...sysArgs, "disable", "--now", SYSTEMD_NAME]);
-    const unitPath = kind === "systemd-user" ? join4(HOME, ".config/systemd/user", `${SYSTEMD_NAME}.service`) : `/etc/systemd/system/${SYSTEMD_NAME}.service`;
-    if (existsSync3(unitPath)) rmSync2(unitPath, { force: true });
+    const unitPath = kind === "systemd-user" ? join5(HOME, ".config/systemd/user", `${SYSTEMD_NAME}.service`) : `/etc/systemd/system/${SYSTEMD_NAME}.service`;
+    if (existsSync4(unitPath)) rmSync3(unitPath, { force: true });
     run("systemctl", [...sysArgs, "daemon-reload"]);
     result = {
       kind,
@@ -1150,13 +1289,13 @@ function normalizePublicUrl(raw) {
   return url;
 }
 var DIST_DIR = dirname2(fileURLToPath(import.meta.url));
-var SERVER_DIR = join5(DIST_DIR, "server");
+var SERVER_DIR = join6(DIST_DIR, "server");
 function ensureAuthSecret() {
   const path = AUTH_SECRET_FILE;
-  if (existsSync4(path)) return readFileSync3(path, "utf8").trim();
-  mkdirSync5(OS_DIR, { recursive: true, mode: 448 });
+  if (existsSync5(path)) return readFileSync4(path, "utf8").trim();
+  mkdirSync6(OS_DIR, { recursive: true, mode: 448 });
   const secret = randomBytes(32).toString("hex");
-  writeFileSync4(path, secret, { mode: 384 });
+  writeFileSync5(path, secret, { mode: 384 });
   return secret;
 }
 var upCommand = new Command("up").description(
@@ -1657,8 +1796,8 @@ async function runForeground(opts, source) {
     apiArgs = ["run", "src/index.ts"];
     apiCwd = source.apiDir;
   } else {
-    const serverEntry = join5(SERVER_DIR, "index.js");
-    if (!existsSync4(serverEntry)) {
+    const serverEntry = join6(SERVER_DIR, "index.js");
+    if (!existsSync5(serverEntry)) {
       console.error(
         chalk2.red("\n  Bundled server not found in this install.") + chalk2.dim(
           "\n  Reinstall with `kraft update` (or `npm i -g @rakay-technology/kraft`).\n"
@@ -1677,9 +1816,9 @@ async function runForeground(opts, source) {
   const publicUrl = effectivePublicUrl(opts.publicUrl);
   const managedEdge = Boolean(opts.managedEdge && publicUrl);
   const dataDir = opts.dataDir || DATA_DIR;
-  mkdirSync5(dataDir, { recursive: true });
-  mkdirSync5(LOG_DIR, { recursive: true });
-  const instanceLogPath = join5(LOG_DIR, "instance.log");
+  mkdirSync6(dataDir, { recursive: true });
+  mkdirSync6(LOG_DIR, { recursive: true });
+  const instanceLogPath = join6(LOG_DIR, "instance.log");
   const instanceLog = createWriteStream2(instanceLogPath, { flags: "w" });
   const env = {
     ...process.env,
@@ -1707,10 +1846,10 @@ async function runForeground(opts, source) {
     BETTER_AUTH_SECRET: ensureAuthSecret()
   };
   if (!source) {
-    env.KRAFT_MIGRATIONS_DIR = join5(SERVER_DIR, "migrations");
-    env.KRAFT_PGLITE_ASSETS_DIR = join5(SERVER_DIR, "pglite");
-    const engineDir = join5(SERVER_DIR, "engine");
-    if (existsSync4(engineDir)) env.MAIL_SERVER_ENGINE_DIR = engineDir;
+    env.KRAFT_MIGRATIONS_DIR = join6(SERVER_DIR, "migrations");
+    env.KRAFT_PGLITE_ASSETS_DIR = join6(SERVER_DIR, "pglite");
+    const engineDir = join6(SERVER_DIR, "engine");
+    if (existsSync5(engineDir)) env.MAIL_SERVER_ENGINE_DIR = engineDir;
   }
   env.KRAFT_REQUIRE_AUTH = "true";
   env.INTERNAL_TOKEN = mintBareInternalToken();
@@ -1803,7 +1942,7 @@ async function runForeground(opts, source) {
     const uiSpinner = ora("Preparing the dashboard\u2026").start();
     try {
       const bundle = await ensureDashboard({
-        tag: source ? "local" : opts.uiVersion || `v${"0.7.4"}`,
+        tag: source ? "local" : opts.uiVersion || `v${"0.7.6"}`,
         onProgress: (received, total) => {
           if (total) {
             uiSpinner.text = `Downloading dashboard\u2026 ${Math.round(received / total * 100)}%`;
@@ -1920,6 +2059,17 @@ async function runForeground(opts, source) {
 }
 
 export {
+  readStoredGithubToken,
+  githubToken,
+  githubTokenSource,
+  storeGithubToken,
+  clearGithubToken,
+  maskToken,
+  validateGithubToken,
+  checkRepoReleases,
+  dockerHasAuthFor,
+  dockerAvailable,
+  dockerLogin,
   CACHE_DIR,
   RELEASES_DIR,
   releaseDir,
@@ -1927,7 +2077,8 @@ export {
   hashFile,
   downloadToFile,
   formatBytes,
-  RELEASES,
+  githubRepo,
+  releasesPage,
   resolveLatestTag,
   assetUrl,
   fetchSidecar,

package/dist/{chunk-YZUKHG3S.js → chunk-PCOTSRS4.js}

@@ -6,7 +6,7 @@ import {
   describeProcess,
   probeListeningPort,
   waitForPortFree
-} from "./chunk-WYNM7L22.js";
+} from "./chunk-2Y62WP2D.js";
 import {
   EDGE_CONTAINER_NAME,
   classifyProxy,
@@ -16,11 +16,11 @@ import {
   resolveContainerPublishingPort,
   stopContainerDurably,
   tryExec
-} from "./chunk-N4OALTFK.js";
+} from "./chunk-3RCXJZJD.js";
 import {
   AppError,
   shellQuote
-} from "./chunk-PVOWHIND.js";
+} from "./chunk-ND23EK7Y.js";
 
 // ../../packages/adapters/src/system/proxy/detect.ts
 var EDGE_PORTS = [80, 443];