@rakay-technology/kraft 0.7.9 → 0.7.13

package/dist/{chunk-JK7KKBXI.js → chunk-KHAT3OZP.js}

@@ -7,20 +7,20 @@ import {
   composeInstallExists,
   readComposeEnvFile,
   startUnitHint
-} from "./chunk-2UQFOUSZ.js";
+} from "./chunk-B2CUYCGY.js";
 import {
   INTERNAL_TOKEN_FILE,
   OS_DIR
 } from "./chunk-5GPXMTE4.js";
 import {
   edgeCrashReason
-} from "./chunk-PCOTSRS4.js";
+} from "./chunk-QLPQ5NFE.js";
 import {
   LocalExecutor
-} from "./chunk-HFOE2IXZ.js";
+} from "./chunk-BIOW6K3V.js";
 import {
   EDGE_CONTAINER_NAME
-} from "./chunk-3RCXJZJD.js";
+} from "./chunk-E3J47WO3.js";
 
 // src/lib/edge-import.ts
 import chalk from "chalk";

package/dist/{chunk-7UKBMDUF.js → chunk-MK6GYBO4.js}

@@ -16,32 +16,32 @@ import {
   splitRuntimeEnv,
   sq,
   transferLocalDirectory
-} from "./chunk-DFVWR6JM.js";
+} from "./chunk-C74WJ3U4.js";
 import {
   LocalExecutor
-} from "./chunk-HFOE2IXZ.js";
+} from "./chunk-BIOW6K3V.js";
 import {
   privilegedExecutor
-} from "./chunk-DI54Y66N.js";
+} from "./chunk-QPUEAYB3.js";
 import {
   portOccupantDetails,
   probeListeningPort
-} from "./chunk-2Y62WP2D.js";
+} from "./chunk-QCGVPIYN.js";
 import {
   managedDeploymentUnitName,
   probeExec,
   withReason
-} from "./chunk-3RCXJZJD.js";
+} from "./chunk-E3J47WO3.js";
 import {
   HOST_STATE_DIR,
   envOps,
   hostRefusal,
   opScript
-} from "./chunk-ZQJU5CTZ.js";
+} from "./chunk-7VMXN646.js";
 import {
   ensureOwnedDir,
   resolveEnvironment
-} from "./chunk-YY5DEAZI.js";
+} from "./chunk-BQMBJ32I.js";
 import {
   formatDuration,
   isRemoteConnectionError,
@@ -51,7 +51,7 @@ import {
 import {
   sq as sq2,
   wrapLocalBuildCommand
-} from "./chunk-BN23UUSF.js";
+} from "./chunk-YXXWTBXB.js";
 import {
   DeployError,
   LANGUAGES,
@@ -65,7 +65,7 @@ import {
   refused,
   safeErrorMessage,
   shellQuote
-} from "./chunk-ND23EK7Y.js";
+} from "./chunk-G4VGNFGV.js";
 
 // ../../packages/adapters/src/system/remote-journal.ts
 var OPSH_RUN_VERSION = 1;

package/dist/{chunk-SPKRI7MF.js → chunk-N7AJ2D4I.js}

@@ -8,17 +8,17 @@ import {
 import {
   getTarCreateEnv,
   prepareSourceTarArgs
-} from "./chunk-K24SBFI2.js";
+} from "./chunk-D2IM25JV.js";
 import {
   connectSshClient,
   openDockerDialStdioChannel,
   openSftp,
   openSshUnixSocket,
   reconcileKnownHosts
-} from "./chunk-DJNKEVZ7.js";
+} from "./chunk-AADWLI2S.js";
 import {
   LocalExecutor
-} from "./chunk-HFOE2IXZ.js";
+} from "./chunk-BIOW6K3V.js";
 import {
   HostChannelUnavailableError,
   SshDisconnectedError,
@@ -33,7 +33,7 @@ import {
   hasLocalCommand,
   logEntry,
   sq
-} from "./chunk-BN23UUSF.js";
+} from "./chunk-YXXWTBXB.js";
 import {
   HOST_CHANNEL_AUTH_REJECTED,
   HOST_CHANNEL_NOT_PROVISIONED,
@@ -44,7 +44,7 @@ import {
   hostChannelAccount,
   hostFirewallRule,
   safeErrorMessage
-} from "./chunk-ND23EK7Y.js";
+} from "./chunk-G4VGNFGV.js";
 
 // ../../packages/adapters/src/system/executor.ts
 import { existsSync, readFileSync } from "fs";
@@ -1483,7 +1483,95 @@ import { randomBytes as randomBytes2 } from "crypto";
 
 // ../../packages/adapters/src/system/system-ssh.ts
 import { randomBytes } from "crypto";
+var SSH_ARGS_MAX_CHARS = 512;
+var SSH_JUMP_HOST_MAX_CHARS = 1024;
+function validateSshJumpHost(raw) {
+  const trimmed = raw?.trim() ?? "";
+  if (!trimmed) return "";
+  if (trimmed.length > SSH_JUMP_HOST_MAX_CHARS) {
+    throw new Error(
+      `sshJumpHost: exceeds ${SSH_JUMP_HOST_MAX_CHARS} chars (got ${trimmed.length})`
+    );
+  }
+  if (trimmed.includes("\0") || trimmed.includes("\n") || trimmed.includes("\r")) {
+    throw new Error("sshJumpHost: contains illegal characters");
+  }
+  if (/\s/.test(trimmed)) {
+    throw new Error("sshJumpHost: must not contain whitespace");
+  }
+  if (trimmed.includes("\\") || /\$\{|\$\(|`/.test(trimmed) || trimmed.startsWith("-")) {
+    throw new Error("sshJumpHost: shell expansions and flags are not allowed");
+  }
+  const hops = trimmed.split(",");
+  if (hops.length === 0) throw new Error("sshJumpHost: is empty");
+  const HOP_RE = /^(?:[A-Za-z0-9._~-]+@)?(?:[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?|\[[0-9A-Fa-f:.]+\]|%[hr])$/;
+  for (const hop of hops) {
+    if (!HOP_RE.test(hop)) {
+      throw new Error(`sshJumpHost: invalid hop "${hop.slice(0, 64)}"`);
+    }
+  }
+  return trimmed;
+}
 var CONNECT_TIMEOUT_SECONDS = 15;
+var ALLOWED_SSH_OPTION_KEYS = /* @__PURE__ */ new Set([
+  "BatchMode",
+  "ConnectTimeout",
+  "IPQoS",
+  "ServerAliveCountMax",
+  "ServerAliveInterval",
+  "StrictHostKeyChecking"
+]);
+var SSH_ARG_VALUE_RE = /^[A-Za-z0-9._-]+$/;
+var DANGEROUS_SSH_OPTION_RE = /^(proxycommand|localcommand|permitlocalcommand|forwardagent|proxyjump|proxyusefdpass|localforward|remoteforward|dynamicforward|controlpath|controlmaster|controlpersist|identityfile|certificatefile|userknownhostsfile|globalknownhostsfile|pkcs11provider|securitykeyprovider)$/i;
+function validateSshArgs(raw) {
+  if (!raw?.trim()) return [];
+  const trimmed = raw.trim();
+  if (trimmed.length > SSH_ARGS_MAX_CHARS) {
+    throw new Error(
+      `sshArgs: exceeds ${SSH_ARGS_MAX_CHARS} chars (got ${trimmed.length})`
+    );
+  }
+  if (trimmed.includes("\0") || trimmed.includes("\n") || trimmed.includes("\r")) {
+    throw new Error("sshArgs: contains illegal characters");
+  }
+  if (/\$\{|\$\(|`/.test(trimmed) || trimmed.includes("\\")) {
+    throw new Error("sshArgs: shell expansions are not allowed");
+  }
+  const tokens = trimmed.split(/\s+/);
+  const out = [];
+  for (let i = 0; i < tokens.length; i++) {
+    const flag = tokens[i];
+    if (flag !== "-o") {
+      throw new Error(
+        `sshArgs: only "-o Key=Value" options are allowed (got "${flag.slice(0, 32)}")`
+      );
+    }
+    const kv = tokens[++i];
+    if (!kv || !kv.includes("=")) {
+      throw new Error('sshArgs: "-o" must be followed by Key=Value');
+    }
+    const eq = kv.indexOf("=");
+    const key = kv.slice(0, eq);
+    const value = kv.slice(eq + 1);
+    if (!key || !value) {
+      throw new Error('sshArgs: "-o" must be followed by Key=Value');
+    }
+    if (DANGEROUS_SSH_OPTION_RE.test(key)) {
+      throw new Error(`sshArgs: option "${key}" is not allowed`);
+    }
+    if (!ALLOWED_SSH_OPTION_KEYS.has(key)) {
+      throw new Error(`sshArgs: option "${key}" is not allowed`);
+    }
+    if (!SSH_ARG_VALUE_RE.test(value)) {
+      throw new Error(`sshArgs: invalid value for "${key}"`);
+    }
+    if ((key === "ConnectTimeout" || key === "ServerAliveInterval" || key === "ServerAliveCountMax") && !/^\d{1,3}$/.test(value)) {
+      throw new Error(`sshArgs: "${key}" must be a number (got "${value}")`);
+    }
+    out.push("-o", `${key}=${value}`);
+  }
+  return out;
+}
 function makeControlPath() {
   return `/tmp/kraft-ssh-${process.pid}-${randomBytes(6).toString("hex")}.sock`;
 }
@@ -1514,13 +1602,9 @@ function buildBaseSshArgs(config, controlPath) {
     "ControlPersist=300"
   ];
   if (config.sshJumpHost?.trim()) {
-    args.push("-J", config.sshJumpHost.trim());
-  }
-  if (config.sshArgs?.trim()) {
-    for (const token of config.sshArgs.trim().split(/\s+/)) {
-      if (token) args.push(token);
-    }
+    args.push("-J", validateSshJumpHost(config.sshJumpHost));
   }
+  args.push(...validateSshArgs(config.sshArgs));
   return args;
 }
 function sshTarget(config) {
@@ -2353,7 +2437,7 @@ async function verifyHostChannelAuth(config) {
   let hint = null;
   let forwarding = "unknown";
   try {
-    const { connectSshClient: connectSshClient2 } = await import("./ssh-client-LOCZTEUC.js");
+    const { connectSshClient: connectSshClient2 } = await import("./ssh-client-NRBHQJVZ.js");
     const client = await connectSshClient2({
       host: config.host,
       port: config.port,

package/dist/{chunk-ZNVAHQRY.js → chunk-Q7FAE2MB.js}

@@ -28,11 +28,11 @@ import {
   sq,
   staticBuilderOutputPath,
   transferLocalDirectory
-} from "./chunk-DFVWR6JM.js";
+} from "./chunk-C74WJ3U4.js";
 import {
   getTarCreateEnv,
   prepareSourceTarArgs
-} from "./chunk-K24SBFI2.js";
+} from "./chunk-D2IM25JV.js";
 import {
   DOCKER_DIAL_STDIO_COMMAND,
   attachDialStdioDiagnostics,
@@ -41,14 +41,14 @@ import {
   execSshCommand,
   openDockerDialStdioChannel,
   openSshUnixSocket
-} from "./chunk-DJNKEVZ7.js";
+} from "./chunk-AADWLI2S.js";
 import {
   KRAFT_LABEL
-} from "./chunk-3RCXJZJD.js";
+} from "./chunk-E3J47WO3.js";
 import {
   dirOf,
   ensureOwnedDir
-} from "./chunk-YY5DEAZI.js";
+} from "./chunk-BQMBJ32I.js";
 import {
   isRuntimeNotFoundError
 } from "./chunk-3CJLKL6E.js";
@@ -63,7 +63,7 @@ import {
   registryForImage,
   safeErrorMessage,
   withTimeout
-} from "./chunk-ND23EK7Y.js";
+} from "./chunk-G4VGNFGV.js";
 import {
   __commonJS,
   __require,

package/dist/{chunk-2Y62WP2D.js → chunk-QCGVPIYN.js}

@@ -7,10 +7,10 @@ import {
   isContainerPortForwarder,
   managedDeploymentIdFromUnit,
   tryExec
-} from "./chunk-3RCXJZJD.js";
+} from "./chunk-E3J47WO3.js";
 import {
   shellQuote
-} from "./chunk-ND23EK7Y.js";
+} from "./chunk-G4VGNFGV.js";
 
 // ../../packages/adapters/src/system/port-listen.ts
 var PROC_NET_TCP_FILES = ["/proc/net/tcp", "/proc/net/tcp6"];

package/dist/{chunk-PCOTSRS4.js → chunk-QLPQ5NFE.js}

@@ -6,7 +6,7 @@ import {
   describeProcess,
   probeListeningPort,
   waitForPortFree
-} from "./chunk-2Y62WP2D.js";
+} from "./chunk-QCGVPIYN.js";
 import {
   EDGE_CONTAINER_NAME,
   classifyProxy,
@@ -16,11 +16,11 @@ import {
   resolveContainerPublishingPort,
   stopContainerDurably,
   tryExec
-} from "./chunk-3RCXJZJD.js";
+} from "./chunk-E3J47WO3.js";
 import {
   AppError,
   shellQuote
-} from "./chunk-ND23EK7Y.js";
+} from "./chunk-G4VGNFGV.js";
 
 // ../../packages/adapters/src/system/proxy/detect.ts
 var EDGE_PORTS = [80, 443];

package/dist/{chunk-DI54Y66N.js → chunk-QPUEAYB3.js}

@@ -4,15 +4,15 @@ import { createRequire as __ospCreateRequire } from "node:module";
 const require = __ospCreateRequire(import.meta.url);
 import {
   hostRefusal
-} from "./chunk-ZQJU5CTZ.js";
+} from "./chunk-7VMXN646.js";
 import {
   elevatedExecutor,
   resolveEnvironment
-} from "./chunk-YY5DEAZI.js";
+} from "./chunk-BQMBJ32I.js";
 import {
   answered,
   refused
-} from "./chunk-ND23EK7Y.js";
+} from "./chunk-G4VGNFGV.js";
 
 // ../../packages/adapters/src/system/privilege.ts
 function rootChecked(executor, why) {

package/dist/{chunk-XBGSR22I.js → chunk-XAEYWDBX.js}

@@ -5,23 +5,23 @@ const require = __ospCreateRequire(import.meta.url);
 import {
   describeProcess,
   probeListeningPortOwners
-} from "./chunk-2Y62WP2D.js";
+} from "./chunk-QCGVPIYN.js";
 import {
   envOps,
   opScript
-} from "./chunk-ZQJU5CTZ.js";
+} from "./chunk-7VMXN646.js";
 import {
   resolveEnvironment
-} from "./chunk-YY5DEAZI.js";
+} from "./chunk-BQMBJ32I.js";
 import {
   sq
-} from "./chunk-BN23UUSF.js";
+} from "./chunk-YXXWTBXB.js";
 import {
   SYSTEM,
   answered,
   refused,
   safeErrorMessage
-} from "./chunk-ND23EK7Y.js";
+} from "./chunk-G4VGNFGV.js";
 
 // ../../packages/adapters/src/infra/openresty-lua.ts
 import { createHash, randomBytes } from "crypto";
@@ -448,6 +448,25 @@ var OPENRESTY_SITE_LUALIB = OPENRESTY_LUA_DIR.replace(/\/[^/]+$/, "");
 var EDGE_LUA_PACKAGE_PATH = `${OPENRESTY_SITE_LUALIB}/?.lua;;`;
 var EDGE_SERVER_NAMES_HASH_BUCKET_SIZE = 128;
 var EDGE_CLIENT_MAX_BODY_SIZE = "50m";
+var EDGE_LISTEN_80 = "listen 80;\n    listen [::]:80;";
+var EDGE_LISTEN_443 = "listen 443 ssl;\n    listen [::]:443 ssl;";
+var EDGE_LISTEN_80_DEFAULT = "listen 80 default_server;\n    listen [::]:80 default_server;";
+var EDGE_LISTEN_443_DEFAULT = "listen 443 ssl default_server;\n    listen [::]:443 ssl default_server;";
+var EDGE_TLS_HTTP_CONF = `    # See EDGE_TLS_HTTP_CONF \u2014 TLS floor every vhost inherits (C2). A vhost's own
+    # value still wins (server beats http), so this is a floor, not a ceiling.
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256;
+    ssl_prefer_server_ciphers on;
+    ssl_session_cache shared:SSL:10m;
+    ssl_session_timeout 10m;
+    ssl_stapling on;
+    resolver 1.1.1.1 8.8.8.8 valid=300s;`;
+var EDGE_LOG_FORMAT_NAME = "kraft_json";
+var EDGE_LOG_FORMAT_CONF = `    # See EDGE_LOG_FORMAT_CONF \u2014 one JSON line per request (C9). \`escape=json\`
+    # keeps a quote in a User-Agent from breaking the line; \`request_id\` is the
+    # join key with the app's own logs (vhosts forward it as X-Request-ID).
+    log_format ${EDGE_LOG_FORMAT_NAME} escape=json '{"time":"$time_iso8601","request_id":"$request_id","remote_addr":"$remote_addr","host":"$host","method":"$request_method","uri":"$request_uri","status":$status,"bytes_sent":$bytes_sent,"referer":"$http_referer","user_agent":"$http_user_agent","request_time":$request_time,"scheme":"$scheme","forwarded_for":"$http_x_forwarded_for"}';
+    access_log logs/access.json ${EDGE_LOG_FORMAT_NAME};`;
 var EDGE_SHARED_DICTS = [
   /** Analytics counters. */
   { name: "analytics", size: "256m" },
@@ -647,6 +666,21 @@ async function ensureOpenRestyConfig(executor, paths) {
       `sed -i '/http *{/a \\    client_max_body_size ${EDGE_CLIENT_MAX_BODY_SIZE};' ${paths.confPath}`
     );
   }
+  const hasTlsFloor = await executor.exec(`grep -qE '^[[:space:]]*ssl_protocols' ${paths.confPath}`).then(() => true).catch(() => false);
+  if (!hasTlsFloor) {
+    await executor.exec(
+      `sed -i '/http *{/a \\${toSedAppend(EDGE_TLS_HTTP_CONF)}' ${paths.confPath}`
+    );
+  }
+  const hasLogFormat = await executor.exec(`grep -qF 'log_format ${EDGE_LOG_FORMAT_NAME}' ${paths.confPath}`).then(() => true).catch(() => false);
+  if (!hasLogFormat) {
+    await executor.exec(
+      `sed -i '/http *{/a \\${toSedAppend(EDGE_LOG_FORMAT_CONF)}' ${paths.confPath}`
+    );
+  }
+}
+function toSedAppend(block) {
+  return block.replace(/\n/g, "\\n");
 }
 function MINIMAL_NGINX_CONF(confDir, sitesDir) {
   return `# Auto-generated by Kraft - safe to extend
@@ -666,6 +700,9 @@ http {
     # See EDGE_CLIENT_MAX_BODY_SIZE \u2014 nginx's 1 MB default 413s an upload before the app
     # ever sees it. A project's own value overrides this (server beats http).
     client_max_body_size ${EDGE_CLIENT_MAX_BODY_SIZE};
+${EDGE_TLS_HTTP_CONF}
+
+${EDGE_LOG_FORMAT_CONF}
     include ${sitesDir}/*.conf;
 }
 `;
@@ -740,7 +777,7 @@ function edgeChallengeVhostConf(host) {
 # routing target. Everything else gets the shared not-found page - this is
 # scaffolding, not a site.
 server {
-    listen 80;
+    ${EDGE_LISTEN_80}
     server_name ${host};
 
 ${EDGE_CHALLENGE_LOCATION}
@@ -761,7 +798,7 @@ var EDGE_HTTPS_REJECT_BLOCK = `# HTTPS catch-all. WITHOUT a 443 default_server,
 # edgeHttpsDefaultBlock. ssl_reject_handshake (OpenResty/nginx >= 1.19.4; our
 # installer pulls the newest LTS) needs no certificate.
 server {
-    listen 443 ssl default_server;
+    ${EDGE_LISTEN_443_DEFAULT}
     ssl_reject_handshake on;
 }`;
 function edgeHttpsDefaultBlock(cert) {
@@ -780,7 +817,7 @@ function edgeHttpsDefaultBlock(cert) {
 # what stops it from becoming the cross-serving it prevents. And never set
 # ssl_certificate at http scope: this block would inherit a real domain's cert.
 server {
-    listen 443 ssl default_server;
+    ${EDGE_LISTEN_443_DEFAULT}
     server_name _;
 
     ssl_certificate ${cert.certPath};
@@ -794,7 +831,7 @@ function edgeDefaultCatchAllConf(cert) {
 # stops an unmatched Host/SNI from being served the first real vhost by default.
 # Auto-generated - do not edit manually
 server {
-    listen 80 default_server;
+    ${EDGE_LISTEN_80_DEFAULT}
     server_name _;
 
 ${ACME_CHALLENGE_LOCATION}
@@ -942,6 +979,13 @@ export {
   EDGE_LUA_PACKAGE_PATH,
   EDGE_SERVER_NAMES_HASH_BUCKET_SIZE,
   EDGE_CLIENT_MAX_BODY_SIZE,
+  EDGE_LISTEN_80,
+  EDGE_LISTEN_443,
+  EDGE_LISTEN_80_DEFAULT,
+  EDGE_LISTEN_443_DEFAULT,
+  EDGE_TLS_HTTP_CONF,
+  EDGE_LOG_FORMAT_NAME,
+  EDGE_LOG_FORMAT_CONF,
   EDGE_SHARED_DICTS,
   parseNginxVersion,
   OPENRESTY_DEFAULT_PATHS,

package/dist/{chunk-HLF5PMKE.js → chunk-Y2MET6MX.js}

@@ -7,7 +7,7 @@ import {
   COMPONENT_INSTALLERS,
   checkAll,
   checkComponents
-} from "./chunk-MOSINQAM.js";
+} from "./chunk-AFUXAAFQ.js";
 
 // ../../packages/adapters/src/system/requirements.ts
 var REMOTE_SERVER_REQUIRED_COMPONENTS = ["docker", "git"];

package/dist/{chunk-BN23UUSF.js → chunk-YXXWTBXB.js}

@@ -4,7 +4,7 @@ import { createRequire as __ospCreateRequire } from "node:module";
 const require = __ospCreateRequire(import.meta.url);
 import {
   shellQuote
-} from "./chunk-ND23EK7Y.js";
+} from "./chunk-G4VGNFGV.js";
 
 // ../../packages/adapters/src/system/local-shell.ts
 import { execFile } from "child_process";

package/dist/{detect-N4HFQZ6Y.js → detect-NDVA2MAF.js}

@@ -17,15 +17,15 @@ import {
   sanitizeEdgeVhosts,
   sq,
   stopTargetsForStatus
-} from "./chunk-PCOTSRS4.js";
-import "./chunk-2Y62WP2D.js";
+} from "./chunk-QLPQ5NFE.js";
+import "./chunk-QCGVPIYN.js";
 import {
   EDGE_CONTAINER_NAME,
   classifyProxy,
   isOurEdgeContainer
-} from "./chunk-3RCXJZJD.js";
+} from "./chunk-E3J47WO3.js";
 import "./chunk-3CJLKL6E.js";
-import "./chunk-ND23EK7Y.js";
+import "./chunk-G4VGNFGV.js";
 import "./chunk-PXKCZB2I.js";
 export {
   EDGE_CONTAINER_NAME,

package/dist/{docker-DU7JA2AK.js → docker-Z2ILAC7A.js}

@@ -15,15 +15,15 @@ import {
   splitDockerFrames,
   toDockerHealthcheck,
   toStopConfig
-} from "./chunk-ZNVAHQRY.js";
-import "./chunk-DFVWR6JM.js";
-import "./chunk-K24SBFI2.js";
-import "./chunk-DJNKEVZ7.js";
-import "./chunk-3RCXJZJD.js";
-import "./chunk-YY5DEAZI.js";
+} from "./chunk-Q7FAE2MB.js";
+import "./chunk-C74WJ3U4.js";
+import "./chunk-D2IM25JV.js";
+import "./chunk-AADWLI2S.js";
+import "./chunk-E3J47WO3.js";
+import "./chunk-BQMBJ32I.js";
 import "./chunk-3CJLKL6E.js";
-import "./chunk-BN23UUSF.js";
-import "./chunk-ND23EK7Y.js";
+import "./chunk-YXXWTBXB.js";
+import "./chunk-G4VGNFGV.js";
 import "./chunk-PXKCZB2I.js";
 export {
   DockerRuntime,

package/dist/{docker-edge-executor-MPIPQHNF.js → docker-edge-executor-JID2Q2HZ.js}

@@ -4,15 +4,15 @@ import { createRequire as __ospCreateRequire } from "node:module";
 const require = __ospCreateRequire(import.meta.url);
 import {
   DockerEdgeExecutor
-} from "./chunk-MC4X55BW.js";
+} from "./chunk-DNC4A3MZ.js";
 import "./chunk-I3DPMTSF.js";
-import "./chunk-PCOTSRS4.js";
-import "./chunk-HFOE2IXZ.js";
-import "./chunk-2Y62WP2D.js";
-import "./chunk-3RCXJZJD.js";
+import "./chunk-QLPQ5NFE.js";
+import "./chunk-BIOW6K3V.js";
+import "./chunk-QCGVPIYN.js";
+import "./chunk-E3J47WO3.js";
 import "./chunk-3CJLKL6E.js";
-import "./chunk-BN23UUSF.js";
-import "./chunk-ND23EK7Y.js";
+import "./chunk-YXXWTBXB.js";
+import "./chunk-G4VGNFGV.js";
 import "./chunk-PXKCZB2I.js";
 export {
   DockerEdgeExecutor

package/dist/{edge-import-RZD7MMOE.js → edge-import-WRU5JQ43.js}

@@ -6,8 +6,8 @@ import {
   importMigratedSites,
   waitForApiHealth,
   waitForEdgeRunning
-} from "./chunk-JK7KKBXI.js";
-import "./chunk-2UQFOUSZ.js";
+} from "./chunk-KHAT3OZP.js";
+import "./chunk-B2CUYCGY.js";
 import "./chunk-5GPXMTE4.js";
 import "./chunk-XZYFZ6A5.js";
 import "./chunk-QWHBRY2K.js";
@@ -17,31 +17,31 @@ import "./chunk-42WQABXM.js";
 import "./chunk-DRK3MEDS.js";
 import "./chunk-3NQQXMDR.js";
 import "./chunk-RHLNVZMS.js";
-import "./chunk-MC4X55BW.js";
-import "./chunk-HLF5PMKE.js";
-import "./chunk-MOSINQAM.js";
-import "./chunk-VFPLICBX.js";
+import "./chunk-DNC4A3MZ.js";
+import "./chunk-Y2MET6MX.js";
+import "./chunk-AFUXAAFQ.js";
+import "./chunk-3AZY56JP.js";
 import "./chunk-I3DPMTSF.js";
-import "./chunk-PCOTSRS4.js";
+import "./chunk-QLPQ5NFE.js";
 import "./chunk-ONKEYSMY.js";
 import "./chunk-ZWLDLTJP.js";
-import "./chunk-ZNVAHQRY.js";
-import "./chunk-7UKBMDUF.js";
-import "./chunk-DFVWR6JM.js";
-import "./chunk-SPKRI7MF.js";
+import "./chunk-Q7FAE2MB.js";
+import "./chunk-MK6GYBO4.js";
+import "./chunk-C74WJ3U4.js";
+import "./chunk-N7AJ2D4I.js";
 import "./chunk-ZVFS4LUA.js";
-import "./chunk-K24SBFI2.js";
-import "./chunk-DJNKEVZ7.js";
-import "./chunk-HFOE2IXZ.js";
-import "./chunk-DI54Y66N.js";
-import "./chunk-XBGSR22I.js";
-import "./chunk-2Y62WP2D.js";
-import "./chunk-3RCXJZJD.js";
-import "./chunk-ZQJU5CTZ.js";
-import "./chunk-YY5DEAZI.js";
+import "./chunk-D2IM25JV.js";
+import "./chunk-AADWLI2S.js";
+import "./chunk-BIOW6K3V.js";
+import "./chunk-QPUEAYB3.js";
+import "./chunk-XAEYWDBX.js";
+import "./chunk-QCGVPIYN.js";
+import "./chunk-E3J47WO3.js";
+import "./chunk-7VMXN646.js";
+import "./chunk-BQMBJ32I.js";
 import "./chunk-3CJLKL6E.js";
-import "./chunk-BN23UUSF.js";
-import "./chunk-ND23EK7Y.js";
+import "./chunk-YXXWTBXB.js";
+import "./chunk-G4VGNFGV.js";
 import "./chunk-PXKCZB2I.js";
 export {
   importMigratedSites,

package/dist/{edge-preflight-6YO27PPQ.js → edge-preflight-6FYNGFIH.js}

@@ -13,23 +13,23 @@ import {
   renderEdgeConflict,
   repairEdgeConflict,
   rollbackHostEdge
-} from "./chunk-IGTODKUA.js";
+} from "./chunk-5RWL7EFH.js";
 import "./chunk-5GPXMTE4.js";
-import "./chunk-MOSINQAM.js";
-import "./chunk-VFPLICBX.js";
+import "./chunk-AFUXAAFQ.js";
+import "./chunk-3AZY56JP.js";
 import "./chunk-I3DPMTSF.js";
-import "./chunk-PCOTSRS4.js";
+import "./chunk-QLPQ5NFE.js";
 import "./chunk-ZVFS4LUA.js";
-import "./chunk-HFOE2IXZ.js";
-import "./chunk-DI54Y66N.js";
-import "./chunk-XBGSR22I.js";
-import "./chunk-2Y62WP2D.js";
-import "./chunk-3RCXJZJD.js";
-import "./chunk-ZQJU5CTZ.js";
-import "./chunk-YY5DEAZI.js";
+import "./chunk-BIOW6K3V.js";
+import "./chunk-QPUEAYB3.js";
+import "./chunk-XAEYWDBX.js";
+import "./chunk-QCGVPIYN.js";
+import "./chunk-E3J47WO3.js";
+import "./chunk-7VMXN646.js";
+import "./chunk-BQMBJ32I.js";
 import "./chunk-3CJLKL6E.js";
-import "./chunk-BN23UUSF.js";
-import "./chunk-ND23EK7Y.js";
+import "./chunk-YXXWTBXB.js";
+import "./chunk-G4VGNFGV.js";
 import "./chunk-PXKCZB2I.js";
 export {
   completeHostEdge,