@rakay-technology/kraft 0.7.4 → 0.7.6

package/dist/{local-executor-OMMDKXCM.js → local-executor-W3O5HDLM.js}

@@ -4,9 +4,9 @@ import { createRequire as __ospCreateRequire } from "node:module";
 const require = __ospCreateRequire(import.meta.url);
 import {
   LocalExecutor
-} from "./chunk-XVKUFMIB.js";
-import "./chunk-MNV2QFHW.js";
-import "./chunk-PVOWHIND.js";
+} from "./chunk-HFOE2IXZ.js";
+import "./chunk-BN23UUSF.js";
+import "./chunk-ND23EK7Y.js";
 import "./chunk-PXKCZB2I.js";
 export {
   LocalExecutor

package/dist/{nginx-VITTWZZU.js → nginx-XLDZIG4E.js}

@@ -14,18 +14,18 @@ import {
   renderProxyOptions,
   renderProxyTlsOptions,
   summarizeCertbotFailure
-} from "./chunk-Y7PVJUXJ.js";
+} from "./chunk-VFPLICBX.js";
 import "./chunk-I3DPMTSF.js";
-import "./chunk-YZUKHG3S.js";
+import "./chunk-PCOTSRS4.js";
 import "./chunk-ZVFS4LUA.js";
-import "./chunk-BQMFIXHI.js";
-import "./chunk-WYNM7L22.js";
-import "./chunk-N4OALTFK.js";
-import "./chunk-YRSZPVMB.js";
-import "./chunk-OFXBNFNL.js";
+import "./chunk-XBGSR22I.js";
+import "./chunk-2Y62WP2D.js";
+import "./chunk-3RCXJZJD.js";
+import "./chunk-ZQJU5CTZ.js";
+import "./chunk-YY5DEAZI.js";
 import "./chunk-3CJLKL6E.js";
-import "./chunk-MNV2QFHW.js";
-import "./chunk-PVOWHIND.js";
+import "./chunk-BN23UUSF.js";
+import "./chunk-ND23EK7Y.js";
 import "./chunk-PXKCZB2I.js";
 export {
   MANAGED_STATIC_BASE,

package/dist/node-bootstrap.js

@@ -1,26 +1,26 @@
 // src/node-bootstrap.ts
-import { spawnSync as spawnSync2 } from "child_process";
-import { existsSync as existsSync2 } from "fs";
-import { join as join4 } from "path";
+import { spawnSync as spawnSync3 } from "child_process";
+import { existsSync as existsSync3 } from "fs";
+import { join as join5 } from "path";
 import { createInterface } from "readline";
 
 // src/lib/node-runtime.ts
-import { execFileSync, spawnSync } from "child_process";
+import { execFileSync, spawnSync as spawnSync2 } from "child_process";
 import {
   chmodSync,
-  existsSync,
+  existsSync as existsSync2,
   lstatSync,
-  mkdirSync as mkdirSync2,
-  rmSync,
+  mkdirSync as mkdirSync3,
+  rmSync as rmSync2,
   symlinkSync,
-  writeFileSync
+  writeFileSync as writeFileSync2
 } from "fs";
-import { join as join3 } from "path";
+import { join as join4 } from "path";
 
 // src/lib/cache.ts
 import { createHash } from "crypto";
-import { createReadStream, createWriteStream, mkdirSync } from "fs";
-import { dirname, join as join2 } from "path";
+import { createReadStream, createWriteStream, mkdirSync as mkdirSync2 } from "fs";
+import { dirname, join as join3 } from "path";
 
 // src/lib/paths.ts
 import { homedir } from "os";
@@ -33,13 +33,48 @@ var LOG_DIR = join(OS_DIR, "logs");
 var AUTH_SECRET_FILE = join(OS_DIR, "auth-secret");
 var INTERNAL_TOKEN_FILE = join(OS_DIR, "internal-token");
 
+// src/lib/github-auth.ts
+import {
+  mkdirSync,
+  readFileSync,
+  rmSync,
+  writeFileSync
+} from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join2 } from "path";
+import { spawnSync } from "child_process";
+var GITHUB_TOKEN_FILENAME = ".github-token";
+function githubTokenFile(dir = OS_DIR) {
+  return join2(dir, GITHUB_TOKEN_FILENAME);
+}
+function envGithubToken() {
+  return process.env.GITHUB_TOKEN?.trim() || process.env.GH_TOKEN?.trim() || void 0;
+}
+function readStoredGithubToken(dir = OS_DIR) {
+  try {
+    const raw = readFileSync(githubTokenFile(dir), "utf8").trim();
+    return raw || null;
+  } catch {
+    return null;
+  }
+}
+function githubToken(dir = OS_DIR) {
+  return envGithubToken() ?? readStoredGithubToken(dir) ?? void 0;
+}
+function githubAuthHeaders(dir) {
+  const token = dir === void 0 ? githubToken() : githubToken(dir);
+  return token ? { Authorization: `Bearer ${token}` } : {};
+}
+
 // src/lib/cache.ts
-var CACHE_DIR = join2(OS_DIR, "cache");
-var RELEASES_DIR = join2(CACHE_DIR, "releases");
+var CACHE_DIR = join3(OS_DIR, "cache");
+var RELEASES_DIR = join3(CACHE_DIR, "releases");
 async function downloadToFile(url, dest, onProgress) {
-  const res = await fetch(url, { headers: { "User-Agent": "kraft-cli" } });
+  const res = await fetch(url, {
+    headers: { "User-Agent": "kraft-cli", ...githubAuthHeaders() }
+  });
   if (!res.ok || !res.body) throw new Error(`HTTP ${res.status} for ${url}`);
-  mkdirSync(dirname(dest), { recursive: true });
+  mkdirSync2(dirname(dest), { recursive: true });
   const total = Number(res.headers.get("content-length")) || 0;
   const hash = createHash("sha256");
   const file = createWriteStream(dest);
@@ -69,10 +104,10 @@ async function downloadToFile(url, dest, onProgress) {
 // src/lib/node-runtime.ts
 var NODE_MAJOR = 22;
 var NODE_DIST = "https://nodejs.org/dist";
-var RUNTIME_DIR = join3(OS_DIR, "runtime");
-var RUNTIME_CURRENT = join3(RUNTIME_DIR, "current");
-var BIN_DIR = join3(OS_DIR, "bin");
-var LAUNCHER_PATH = join3(BIN_DIR, "kraft");
+var RUNTIME_DIR = join4(OS_DIR, "runtime");
+var RUNTIME_CURRENT = join4(RUNTIME_DIR, "current");
+var BIN_DIR = join4(OS_DIR, "bin");
+var LAUNCHER_PATH = join4(BIN_DIR, "kraft");
 var LAUNCHER_SH = `#!/bin/sh
 # Kraft CLI launcher \u2014 runs the tarball-installed CLI under Node.
 # Managed by scripts/install.sh and \`kraft update\`; manual edits are overwritten.
@@ -125,7 +160,7 @@ function majorOf(bin) {
 }
 function repoint(link, target) {
   try {
-    if (lstatSync(link)) rmSync(link, { recursive: true, force: true });
+    if (lstatSync(link)) rmSync2(link, { recursive: true, force: true });
   } catch {
   }
   symlinkSync(target, link);
@@ -149,8 +184,8 @@ async function fetchVendoredNode(onLog) {
   const os = nodeDistOs();
   const arch = nodeDistArch();
   const name = `node-${ver}-${os}-${arch}.tar.gz`;
-  mkdirSync2(RUNTIME_DIR, { recursive: true });
-  const tarball = join3(RUNTIME_DIR, name);
+  mkdirSync3(RUNTIME_DIR, { recursive: true });
+  const tarball = join4(RUNTIME_DIR, name);
   onLog?.(`Fetching Node ${ver} (${os}-${arch}) from nodejs.org\u2026`);
   const { sha256 } = await downloadToFile(
     `${NODE_DIST}/${ver}/${name}`,
@@ -161,32 +196,32 @@ async function fetchVendoredNode(onLog) {
     signal: AbortSignal.timeout(15e3)
   });
   if (!shaRes.ok) {
-    rmSync(tarball, { force: true });
+    rmSync2(tarball, { force: true });
     throw new Error(`Node checksum list fetch failed: HTTP ${shaRes.status}`);
   }
   const expected = (await shaRes.text()).split("\n").map((l) => l.trim()).find((l) => l.endsWith(` ${name}`) || l.endsWith(`  ${name}`))?.split(/\s+/)[0]?.toLowerCase();
   if (!expected) {
-    rmSync(tarball, { force: true });
+    rmSync2(tarball, { force: true });
     throw new Error(`No checksum for ${name} in SHASUMS256.txt`);
   }
   if (expected !== sha256) {
-    rmSync(tarball, { force: true });
+    rmSync2(tarball, { force: true });
     throw new Error(
       `Node download checksum mismatch (expected ${expected}, got ${sha256}).`
     );
   }
-  const unpacked = join3(RUNTIME_DIR, `node-${ver}-${os}-${arch}`);
-  rmSync(unpacked, { recursive: true, force: true });
-  const untar = spawnSync("tar", ["-xzf", tarball, "-C", RUNTIME_DIR], {
+  const unpacked = join4(RUNTIME_DIR, `node-${ver}-${os}-${arch}`);
+  rmSync2(unpacked, { recursive: true, force: true });
+  const untar = spawnSync2("tar", ["-xzf", tarball, "-C", RUNTIME_DIR], {
     stdio: "inherit"
   });
   if (untar.status !== 0)
     throw new Error(
       "Failed to extract the Node runtime (is `tar` available?)."
     );
-  rmSync(tarball, { force: true });
-  const nodeBin = join3(unpacked, "bin", "node");
-  if (!existsSync(nodeBin))
+  rmSync2(tarball, { force: true });
+  const nodeBin = join4(unpacked, "bin", "node");
+  if (!existsSync2(nodeBin))
     throw new Error(
       `Node unpacked but ${nodeBin} is missing (unexpected layout).`
     );
@@ -196,8 +231,8 @@ async function fetchVendoredNode(onLog) {
 async function ensureNodeRuntime(onLog) {
   if ((majorOf("node") ?? 0) >= NODE_MAJOR)
     return { node: "node", source: "system" };
-  const existing = join3(RUNTIME_CURRENT, "bin", "node");
-  if (existsSync(existing) && (majorOf(existing) ?? 0) >= NODE_MAJOR) {
+  const existing = join4(RUNTIME_CURRENT, "bin", "node");
+  if (existsSync2(existing) && (majorOf(existing) ?? 0) >= NODE_MAJOR) {
     return { node: existing, source: "vendored" };
   }
   return { node: await fetchVendoredNode(onLog), source: "vendored" };
@@ -206,9 +241,9 @@ async function ensureNodeRuntime(onLog) {
 // src/node-bootstrap.ts
 var NODE_REEXEC_ENV = "KRAFT_NODE_REEXEC";
 var VENDOR_ENV = "KRAFT_VENDOR_NODE";
-var vendoredNode = () => join4(OS_DIR, "runtime", "current", "bin", "node");
+var vendoredNode = () => join5(OS_DIR, "runtime", "current", "bin", "node");
 function majorOf2(bin) {
-  const out = spawnSync2(
+  const out = spawnSync3(
     bin,
     ["-e", "process.stdout.write(process.versions.node)"],
     {
@@ -219,7 +254,7 @@ function majorOf2(bin) {
   return Number.parseInt(out.stdout.trim().split(".")[0] ?? "", 10) || 0;
 }
 function reexec(nodeBin, cliPath) {
-  const res = spawnSync2(nodeBin, [cliPath, ...process.argv.slice(2)], {
+  const res = spawnSync3(nodeBin, [cliPath, ...process.argv.slice(2)], {
     stdio: "inherit",
     env: { ...process.env, [NODE_REEXEC_ENV]: "1" }
   });
@@ -239,7 +274,7 @@ function ask(question) {
 }
 async function recoverOldNode(opts) {
   const existing = vendoredNode();
-  if (existsSync2(existing) && majorOf2(existing) >= NODE_MAJOR) {
+  if (existsSync3(existing) && majorOf2(existing) >= NODE_MAJOR) {
     return reexec(existing, opts.cliPath);
   }
   if (!opts.offerDownload) return { handled: false };

package/dist/{openresty-lua-6I3Z6PEQ.js → openresty-lua-ZNE6IBYU.js}

@@ -40,14 +40,14 @@ import {
   ensureOpenRestyConfig,
   luaSourceAvailable,
   parseNginxVersion
-} from "./chunk-BQMFIXHI.js";
-import "./chunk-WYNM7L22.js";
-import "./chunk-N4OALTFK.js";
-import "./chunk-YRSZPVMB.js";
-import "./chunk-OFXBNFNL.js";
+} from "./chunk-XBGSR22I.js";
+import "./chunk-2Y62WP2D.js";
+import "./chunk-3RCXJZJD.js";
+import "./chunk-ZQJU5CTZ.js";
+import "./chunk-YY5DEAZI.js";
 import "./chunk-3CJLKL6E.js";
-import "./chunk-MNV2QFHW.js";
-import "./chunk-PVOWHIND.js";
+import "./chunk-BN23UUSF.js";
+import "./chunk-ND23EK7Y.js";
 import "./chunk-PXKCZB2I.js";
 export {
   ACME_CHALLENGE_LOCATION,

package/dist/{privilege-UQAI2HV4.js → privilege-IMARWVU2.js}

@@ -6,12 +6,12 @@ import {
   privilegedExecutor,
   rootChecked,
   rootOrDegrade
-} from "./chunk-S3QBGGVP.js";
-import "./chunk-YRSZPVMB.js";
-import "./chunk-OFXBNFNL.js";
+} from "./chunk-DI54Y66N.js";
+import "./chunk-ZQJU5CTZ.js";
+import "./chunk-YY5DEAZI.js";
 import "./chunk-3CJLKL6E.js";
-import "./chunk-MNV2QFHW.js";
-import "./chunk-PVOWHIND.js";
+import "./chunk-BN23UUSF.js";
+import "./chunk-ND23EK7Y.js";
 import "./chunk-PXKCZB2I.js";
 export {
   privilegedExecutor,