@rakay-technology/kraft 0.7.9 → 0.7.13

package/dist/{chunk-YY5DEAZI.js → chunk-BQMBJ32I.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-3CJLKL6E.js";
 import {
   sq
-} from "./chunk-BN23UUSF.js";
+} from "./chunk-YXXWTBXB.js";
 import {
   assessHostSupport,
   classifyDistro,
@@ -17,7 +17,7 @@ import {
   parseSystemArch,
   parseSystemOs,
   safeErrorMessage
-} from "./chunk-ND23EK7Y.js";
+} from "./chunk-G4VGNFGV.js";
 
 // ../../packages/adapters/src/system/elevated-executor.ts
 import { randomBytes } from "crypto";

package/dist/{chunk-ULEEWX5M.js → chunk-C3LRTROB.js}

@@ -10,28 +10,28 @@ import {
   readComposeEnvFile,
   resolveLocalEnvironmentSync,
   thisHost
-} from "./chunk-2UQFOUSZ.js";
+} from "./chunk-B2CUYCGY.js";
 import {
   OS_DIR
 } from "./chunk-5GPXMTE4.js";
 import {
   systemCatalog
-} from "./chunk-MOSINQAM.js";
+} from "./chunk-AFUXAAFQ.js";
 import {
   invalidateEdgeContainer,
   sanitizeEdgeVhosts
-} from "./chunk-PCOTSRS4.js";
+} from "./chunk-QLPQ5NFE.js";
 import {
   DEFAULT_DOCKER_SOCKET_PATH,
   resolveLocalDockerSocketPath
-} from "./chunk-ZNVAHQRY.js";
+} from "./chunk-Q7FAE2MB.js";
 import {
   LocalExecutor
-} from "./chunk-HFOE2IXZ.js";
+} from "./chunk-BIOW6K3V.js";
 import {
   EDGE_CONTAINER_MOUNTS,
   EDGE_HOST_STATE_DIR
-} from "./chunk-XBGSR22I.js";
+} from "./chunk-XAEYWDBX.js";
 import {
   DEFAULT_IMAGE_REGISTRY,
   HOST_CHANNEL_BLOCKED,
@@ -51,7 +51,7 @@ import {
   hostFirewallRule,
   hostFirewallRuleRemoval,
   wrapText
-} from "./chunk-ND23EK7Y.js";
+} from "./chunk-G4VGNFGV.js";
 
 // src/lib/host-channel-preflight.ts
 import { spawnSync as spawnSync4 } from "child_process";
@@ -648,10 +648,15 @@ async function ensureDocker(opts = {}) {
   return false;
 }
 var COMPOSE_YAML = `# Managed by \`kraft up\` \u2014 do not edit; re-run \`kraft up\` to regenerate.
+# Prod hygiene: log rotation on every service, memory bounds, healthchecks incl.
+# dashboard + edge (mgmt /health \u2014 the :80/:443 catch-alls 404 by design).
 services:
   postgres:
     image: postgres:16-alpine
     restart: unless-stopped
+    logging: { driver: json-file, options: { max-size: "10m", max-file: "3" } }
+    mem_limit: 1g
+    mem_reservation: 256m
     environment:
       # Keep the data dir in a subdirectory of the volume so a fresh install never
       # runs initdb against a bare mount root (which fails on quirky host
@@ -673,6 +678,9 @@ services:
   redis:
     image: redis:7-alpine
     restart: unless-stopped
+    logging: { driver: json-file, options: { max-size: "10m", max-file: "3" } }
+    mem_limit: 512m
+    mem_reservation: 128m
     command: ["redis-server", "--appendonly", "yes"]
     expose: ["6379"]
     volumes: [redis_data:/data]
@@ -685,6 +693,9 @@ services:
   api:
     image: \${KRAFT_IMAGE_REGISTRY:-ghcr.io/rakay-technology}/kraft-api:\${KRAFT_VERSION:-latest}
     restart: unless-stopped
+    logging: { driver: json-file, options: { max-size: "10m", max-file: "3" } }
+    mem_limit: 1g
+    mem_reservation: 256m
     # Loopback by default \u2014 the host-net edge reaches it over loopback, so nothing
     # sits on a public interface. KRAFT_BIND_ADDR opts into a public/LAN interface
     # (set by \`kraft up\` when a public URL is configured for off-box access).
@@ -744,6 +755,9 @@ ${edgeVolumeYaml("      ")}
   dashboard:
     image: \${KRAFT_IMAGE_REGISTRY:-ghcr.io/rakay-technology}/kraft-dashboard:\${KRAFT_VERSION:-latest}
     restart: unless-stopped
+    logging: { driver: json-file, options: { max-size: "10m", max-file: "3" } }
+    mem_limit: 512m
+    mem_reservation: 128m
     # Loopback by default (see api note); KRAFT_BIND_ADDR opts into a public interface.
     ports: ["\${KRAFT_BIND_ADDR:-127.0.0.1}:\${DASHBOARD_PORT:-3001}:\${DASHBOARD_PORT:-3001}"]
     env_file: [.env]
@@ -753,6 +767,12 @@ ${edgeVolumeYaml("      ")}
       INTERNAL_API_URL: http://api:\${API_PORT:-4000}
     depends_on:
       api: { condition: service_healthy }
+    healthcheck:
+      test: ["CMD-SHELL", "node -e \\"fetch('http://127.0.0.1:\${DASHBOARD_PORT:-3001}/').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))\\""]
+      interval: 15s
+      timeout: 5s
+      retries: 12
+      start_period: 60s
 
   edge:
     image: \${KRAFT_IMAGE_REGISTRY:-ghcr.io/rakay-technology}/kraft-edge:\${KRAFT_VERSION:-latest}
@@ -766,8 +786,19 @@ ${edgeVolumeYaml("      ")}
     container_name: kraft-edge
     restart: unless-stopped
     network_mode: host
+    logging: { driver: json-file, options: { max-size: "10m", max-file: "3" } }
+    mem_limit: 512m
+    mem_reservation: 64m
     volumes:
 ${edgeVolumeYaml("      ")}
+    # Continuous edge liveness: mgmt /health answers "ok" on loopback (the
+    # :80/:443 catch-alls 404 by design, so never probe those with curl -f).
+    healthcheck:
+      test: ["CMD-SHELL", "curl -f http://127.0.0.1:9145/health || exit 1"]
+      interval: 15s
+      timeout: 5s
+      retries: 3
+      start_period: 20s
 
 volumes:
   postgres_data:
@@ -1776,7 +1807,7 @@ function operatorEnvPassthrough(managed, prev) {
 }
 var PRESERVED_ENV_HEADER = "# Preserved from your existing .env \u2014 set by you, not by `kraft up` (#485).";
 function resolveImageVersion(opts) {
-  return opts.version?.trim() || process.env.KRAFT_VERSION?.trim() || (true ? "0.7.9" : "latest");
+  return opts.version?.trim() || process.env.KRAFT_VERSION?.trim() || (true ? "0.7.13" : "latest");
 }
 function managedEnvLines(opts, host, cfg, prev) {
   const lines = [

package/dist/{chunk-DFVWR6JM.js → chunk-C74WJ3U4.js}

@@ -4,14 +4,14 @@ import { createRequire as __ospCreateRequire } from "node:module";
 const require = __ospCreateRequire(import.meta.url);
 import {
   sq
-} from "./chunk-BN23UUSF.js";
+} from "./chunk-YXXWTBXB.js";
 import {
   nodeBinDirs,
   nodeBinPathExport,
   packageManagerEnsureCommand,
   safeErrorMessage,
   shellQuote
-} from "./chunk-ND23EK7Y.js";
+} from "./chunk-G4VGNFGV.js";
 
 // ../../packages/adapters/src/runtime/git-clone.ts
 var sq2 = shellQuote;

package/dist/{chunk-K24SBFI2.js → chunk-D2IM25JV.js}

@@ -4,7 +4,7 @@ import { createRequire as __ospCreateRequire } from "node:module";
 const require = __ospCreateRequire(import.meta.url);
 import {
   PACKAGE_ROOT_ONLY_EXCLUDES
-} from "./chunk-ND23EK7Y.js";
+} from "./chunk-G4VGNFGV.js";
 
 // ../../packages/adapters/src/archive.ts
 import { execFile } from "child_process";

package/dist/{chunk-MC4X55BW.js → chunk-DNC4A3MZ.js}

@@ -8,14 +8,14 @@ import {
 } from "./chunk-I3DPMTSF.js";
 import {
   edgeFailureReason
-} from "./chunk-PCOTSRS4.js";
+} from "./chunk-QLPQ5NFE.js";
 import {
   LocalExecutor
-} from "./chunk-HFOE2IXZ.js";
+} from "./chunk-BIOW6K3V.js";
 import {
   logEntry,
   sq
-} from "./chunk-BN23UUSF.js";
+} from "./chunk-YXXWTBXB.js";
 
 // ../../packages/adapters/src/system/docker-edge-executor.ts
 import Dockerode from "dockerode";

package/dist/{chunk-3RCXJZJD.js → chunk-E3J47WO3.js}

@@ -10,7 +10,7 @@ import {
 import {
   safeErrorMessage,
   shellQuote
-} from "./chunk-ND23EK7Y.js";
+} from "./chunk-G4VGNFGV.js";
 
 // ../../packages/adapters/src/system/probe-exec.ts
 async function tryExec(executor, command, opts) {