openship 0.6.1 → 0.6.5

package/dist/server/migrations/0098_instance_product_mode.sql

@@ -0,0 +1,12 @@
+-- Openship Mail: which product this instance presents itself as.
+--
+-- Nullable with NO default, deliberately. The instance_settings row exists on
+-- every instance, so a NOT NULL DEFAULT 'platform' would write a concrete value
+-- everywhere and permanently shadow the OPENSHIP_PRODUCT env var — the resolver
+-- reads `settings.product_mode ?? env.OPENSHIP_PRODUCT`, so "unset" has to stay
+-- representable. NULL means "no instance override".
+--
+-- Presentation scope only: this hides nav entries and rebrands the shell. It is
+-- not an authorization boundary and no route reads it — webmail deploys through
+-- the ordinary project pipeline, so the platform endpoints stay live in mail mode.
+ALTER TABLE "instance_settings" ADD COLUMN IF NOT EXISTS "product_mode" text;

package/dist/server/migrations/0099_mail_webmail_project.sql

@@ -0,0 +1,24 @@
+-- The webmail project serving a mail server, as a stored FK.
+--
+-- Webmail is now an ordinary catalog app (packages/core/src/apps/catalog/webmail.json)
+-- installed through the SAME generic installer as every other app, so its slug is
+-- derived from the project NAME the operator typed. The link therefore cannot be a
+-- naming convention any more: the old lookup parsed `webmail-<serverId>` back out of
+-- the slug, which the generic installer never produces — and which, while it existed,
+-- mislinked any project a user happened to name "Webmail Prod" (slug `webmail-prod`,
+-- read back as mail server "prod").
+--
+-- Nullable: most servers have no webmail, and an operator may run one outside
+-- openship. ON DELETE SET NULL so deleting the webmail project clears the link and
+-- /emails falls back to the install CTA rather than pointing at a row that is gone.
+--
+-- No backfill. A pre-existing webmail project still carries the retired
+-- `mail-webmail` template id and the `webmail-<serverId>` slug; the mail status
+-- resolver keeps that legacy slug lookup as a fallback for exactly those rows, and
+-- stamps this column the first time it resolves one.
+ALTER TABLE "mail_servers" ADD COLUMN IF NOT EXISTS "webmail_project_id" text;--> statement-breakpoint
+
+DO $$ BEGIN
+  ALTER TABLE "mail_servers" ADD CONSTRAINT "mail_servers_webmail_project_id_project_id_fk"
+    FOREIGN KEY ("webmail_project_id") REFERENCES "public"."project"("id") ON DELETE set null ON UPDATE no action;
+EXCEPTION WHEN duplicate_object THEN NULL; END $$;

package/dist/server/migrations/0100_server_ssh_private_key.sql

@@ -0,0 +1,11 @@
+-- Pasted / uploaded SSH private-key material, stored encrypted at rest (enc1:).
+--
+-- Nullable with no default. The existing `ssh_key_path` points at a key file on
+-- the API host — useless on a remote / VPS instance where the operator's key
+-- lives on their own machine. This column holds the key bytes themselves so the
+-- dashboard can paste or upload a key from any browser; buildSshConfig() prefers
+-- it (decrypted) over reading `ssh_key_path` off disk.
+--
+-- Write-only: never serialized back to the client, and listed in
+-- ENCRYPTED_COLUMNS so it is stripped from any cross-host dump/restore.
+ALTER TABLE "servers" ADD COLUMN IF NOT EXISTS "ssh_private_key" text;

package/dist/server/migrations/0101_mail_resume_step.sql

@@ -0,0 +1,12 @@
+-- The setup step an incomplete mail install is paused at, mirrored from the
+-- on-host state file's `resumeStep` whenever the wizard halts (a failed step,
+-- or a DNS/PTR hold). NULL once the install completes or before it ever halts.
+--
+-- Lets the /emails server list surface WHERE an incomplete install stopped
+-- ("Stopped · step 6: Retrieve DKIM Keys") without the per-server SSH probe
+-- this table exists to avoid — only the step id is stored; the human label is
+-- derived from it against MAIL_SETUP_STEPS.
+--
+-- Nullable, no default, no backfill: a pre-existing incomplete install gets its
+-- step stamped the next time the wizard halts (or cleared on completion).
+ALTER TABLE "mail_servers" ADD COLUMN IF NOT EXISTS "resume_step" integer;

package/dist/server/migrations/0102_project_workload_axes.sql

@@ -0,0 +1,19 @@
+-- Deployment-class axes — deconflate the legacy `has_server` / `has_build`
+-- booleans, which each mixed two independent concerns (issue #538). See
+-- @repo/core deployment-class.ts.
+--
+-- All three are EXPLICIT OVERRIDES: NULL means "derive from the legacy flags +
+-- framework + source", so every pre-existing project keeps classifying exactly
+-- as before and no backfill is needed. `has_server` / `has_build` are kept and
+-- written in sync, never dropped — rollback snapshots and every legacy reader
+-- still depend on them.
+--
+--   source_kind    text  "git" | "image" | "upload"      (git needs a clone)
+--   build_kind     text  "dockerfile" | "buildpack" | "static" | "prebuilt"
+--   workload_type  text  "web" | "worker" | "static"     (worker = portless
+--                        long-running container: no port, no route)
+ALTER TABLE "project" ADD COLUMN IF NOT EXISTS "source_kind" text;
+--> statement-breakpoint
+ALTER TABLE "project" ADD COLUMN IF NOT EXISTS "build_kind" text;
+--> statement-breakpoint
+ALTER TABLE "project" ADD COLUMN IF NOT EXISTS "workload_type" text;

package/dist/server/migrations/0103_dns_credential.sql

@@ -0,0 +1,41 @@
+-- DNS provider credentials — the token that lets Openship write a domain's records.
+--
+-- Adding a custom domain has always ended the same way: Openship computes the exact
+-- A/CNAME + `_openship-challenge` TXT records and then asks the operator to go paste
+-- them somewhere else. Every minute between "added" and "pasted" is a domain that
+-- doesn't resolve, can't pass ACME, and looks broken. With a scoped provider token we
+-- write those records ourselves and the domain verifies on its own.
+--
+-- The token is the sensitive part: Zone:Read + DNS:Edit can rewrite every record in
+-- every zone it can see, so it is stored ONLY as an `enc1:` AES-256-GCM envelope
+-- (`encryptSecretField`) and is never returned by the API — not in full, not as a
+-- prefix. `status` exists so a token that gets revoked upstream becomes visible in the
+-- UI instead of silently turning auto-provisioning off forever.
+CREATE TABLE IF NOT EXISTS "dns_credential" (
+  "id" text PRIMARY KEY NOT NULL,
+  "organization_id" text NOT NULL REFERENCES "organization"("id") ON DELETE CASCADE,
+  -- Provider name ("cloudflare"). Text, not an enum: adding a provider should be a
+  -- registry entry, not a migration.
+  "provider" text NOT NULL,
+  -- Operator-facing label, e.g. "Cloudflare production".
+  "name" text NOT NULL,
+  "api_token_enc" text NOT NULL,
+  -- active | invalid. Flipped to 'invalid' by the provisioning path when the provider
+  -- answers 401/403, which is the only moment we learn a stored token stopped working.
+  "status" text NOT NULL DEFAULT 'active',
+  "last_verified_at" timestamp,
+  "created_at" timestamp NOT NULL DEFAULT now(),
+  "updated_at" timestamp NOT NULL DEFAULT now()
+);
+--> statement-breakpoint
+-- Zone resolution runs on EVERY domain add and remove and asks one question: "this
+-- org's active credentials". Leading org column means the plain org-wide listing rides
+-- the same index as a prefix, so this is the only one the table needs.
+CREATE INDEX IF NOT EXISTS "idx_dns_credential_org_status"
+  ON "dns_credential" ("organization_id", "status");
+--> statement-breakpoint
+-- One label per provider per org. A second "Cloudflare production" is a double-submit,
+-- and two credentials that resolve the same zone makes "which token wrote this record"
+-- unanswerable at cleanup time.
+CREATE UNIQUE INDEX IF NOT EXISTS "uq_dns_credential_org_provider_name"
+  ON "dns_credential" ("organization_id", "provider", "name");

package/dist/server/migrations/0104_instance_host_control.sql

@@ -0,0 +1,15 @@
+-- Runtime host-control toggle (#527): may OpenShip deploy to the machine it runs on?
+--
+-- Nullable with NO default, deliberately — the same contract as product_mode
+-- (0098). The instance_settings row exists on every instance, so a NOT NULL
+-- DEFAULT would write a concrete value everywhere and permanently shadow the
+-- OPENSHIP_HOST_CONTROL env var (written by `openship up --no-host-control`).
+-- The resolver reads `settings.host_control_enabled ?? env`, so "unset" has to
+-- stay representable. NULL means "no instance override, use env".
+--
+-- Unlike product_mode this DOES gate privileged behavior (host-root deploys via
+-- the container->host SSH channel + mounted docker socket), so the WRITE path is
+-- gated to the box-owning org's owner. The precedence still lets the DB override
+-- env: the operator's need is to re-enable from Settings what --no-host-control
+-- turned off.
+ALTER TABLE "instance_settings" ADD COLUMN IF NOT EXISTS "host_control_enabled" boolean;

package/dist/server/migrations/meta/_journal.json

@@ -687,6 +687,55 @@
       "when": 1787350907325,
       "tag": "0097_update_status_upstream_only",
       "breakpoints": true
+    },
+    {
+      "idx": 98,
+      "version": "7",
+      "when": 1787437307325,
+      "tag": "0098_instance_product_mode",
+      "breakpoints": true
+    },
+    {
+      "idx": 99,
+      "version": "7",
+      "when": 1787523707325,
+      "tag": "0099_mail_webmail_project",
+      "breakpoints": true
+    },
+    {
+      "idx": 100,
+      "version": "7",
+      "when": 1787610107325,
+      "tag": "0100_server_ssh_private_key",
+      "breakpoints": true
+    },
+    {
+      "idx": 101,
+      "version": "7",
+      "when": 1787696507325,
+      "tag": "0101_mail_resume_step",
+      "breakpoints": true
+    },
+    {
+      "idx": 102,
+      "version": "7",
+      "when": 1787782907325,
+      "tag": "0102_project_workload_axes",
+      "breakpoints": true
+    },
+    {
+      "idx": 103,
+      "version": "7",
+      "when": 1787869307325,
+      "tag": "0103_dns_credential",
+      "breakpoints": true
+    },
+    {
+      "idx": 104,
+      "version": "7",
+      "when": 1787955707325,
+      "tag": "0104_instance_host_control",
+      "breakpoints": true
     }
   ]
 }

package/dist/{setup-M2ZDGH3O.js → setup-WUUZURHS.js}

@@ -4,17 +4,18 @@ import { createRequire as __ospCreateRequire } from "node:module";
 const require = __ospCreateRequire(import.meta.url);
 import {
   SystemManager
-} from "./chunk-3NZICQHF.js";
-import "./chunk-IOT5ZX23.js";
-import "./chunk-IW2UKBVF.js";
-import "./chunk-ZCFVHA25.js";
-import "./chunk-EW6KB2J7.js";
+} from "./chunk-XVOBL7BC.js";
+import "./chunk-7334NSJL.js";
+import "./chunk-VLQ3UIVO.js";
 import "./chunk-I3DPMTSF.js";
-import "./chunk-VZ2ZHPS2.js";
-import "./chunk-3LDWWY7U.js";
-import "./chunk-YIPMDGG6.js";
+import "./chunk-RFWJE7ZN.js";
+import "./chunk-WE7BXW6L.js";
+import "./chunk-A7EWM2KA.js";
+import "./chunk-PZRRL5PC.js";
+import "./chunk-EZPPTWJQ.js";
+import "./chunk-WFRXYWK2.js";
 import "./chunk-ZFJXPCQP.js";
-import "./chunk-OTLSJYAC.js";
+import "./chunk-LEYSL46B.js";
 import "./chunk-PXKCZB2I.js";
 export {
   SystemManager

package/dist/up-XEO3SR6Z.js

@@ -0,0 +1,58 @@
+#!/usr/bin/env sh
+":" //# ; exec "$(command -v node || command -v bun)" "$0" "$@"
+import { createRequire as __ospCreateRequire } from "node:module";
+const require = __ospCreateRequire(import.meta.url);
+import {
+  ensureInternalToken,
+  normalizeUrl,
+  runHeadlessProvision,
+  startService,
+  upCommand
+} from "./chunk-7S4USQYF.js";
+import "./chunk-6HOA5JT7.js";
+import "./chunk-HPXP6LXZ.js";
+import "./chunk-XRNRT37W.js";
+import "./chunk-QLX7NBEA.js";
+import "./chunk-QWHBRY2K.js";
+import "./chunk-ELGRMZOW.js";
+import "./chunk-ONKEYSMY.js";
+import "./chunk-XZYFZ6A5.js";
+import "./chunk-PDW4L3NV.js";
+import "./chunk-DOD2BXHQ.js";
+import "./chunk-42WQABXM.js";
+import "./chunk-DRK3MEDS.js";
+import "./chunk-3NQQXMDR.js";
+import "./chunk-ZWLDLTJP.js";
+import "./chunk-6JELW75A.js";
+import "./chunk-3ZAGC5NT.js";
+import "./chunk-WNWQBB7F.js";
+import "./chunk-2GWYYHOR.js";
+import "./chunk-RXQBD4ZY.js";
+import "./chunk-XVOBL7BC.js";
+import "./chunk-7334NSJL.js";
+import "./chunk-VLQ3UIVO.js";
+import "./chunk-I3DPMTSF.js";
+import "./chunk-VDESJSG6.js";
+import "./chunk-LFCSC4IU.js";
+import "./chunk-GRTXMUHA.js";
+import "./chunk-MSZUCNPV.js";
+import "./chunk-TM2IQPYU.js";
+import "./chunk-VHMOQL5Y.js";
+import "./chunk-5OUWIPOB.js";
+import "./chunk-6FH4AXVY.js";
+import "./chunk-RFWJE7ZN.js";
+import "./chunk-WE7BXW6L.js";
+import "./chunk-A7EWM2KA.js";
+import "./chunk-PZRRL5PC.js";
+import "./chunk-EZPPTWJQ.js";
+import "./chunk-WFRXYWK2.js";
+import "./chunk-ZFJXPCQP.js";
+import "./chunk-LEYSL46B.js";
+import "./chunk-PXKCZB2I.js";
+export {
+  ensureInternalToken,
+  normalizeUrl,
+  runHeadlessProvision,
+  startService,
+  upCommand
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openship",
-  "version": "0.6.1",
+  "version": "0.6.5",
   "description": "Openship CLI - deploy, manage, and open your Openship platform from the terminal",
   "license": "Apache-2.0",
   "repository": {
@@ -20,6 +20,9 @@
   "bin": {
     "openship": "./dist/node-entry.js"
   },
+  "engines": {
+    "node": ">=22"
+  },
   "files": [
     "dist",
     "README.md"
@@ -42,7 +45,6 @@
     "commander": "^14.0.3",
     "dockerode": "^4.0.9",
     "open": "^10.2.0",
-    "openship": "^0.5.0",
     "ora": "^9.3.0",
     "ssh2": "^1.17.0"
   },

package/dist/chunk-IW2UKBVF.js

@@ -1,144 +0,0 @@
-#!/usr/bin/env sh
-":" //# ; exec "$(command -v node || command -v bun)" "$0" "$@"
-import { createRequire as __ospCreateRequire } from "node:module";
-const require = __ospCreateRequire(import.meta.url);
-import {
-  formatDuration,
-  isRemoteConnectionError,
-  systemDebug
-} from "./chunk-ZCFVHA25.js";
-import {
-  safeErrorMessage
-} from "./chunk-OTLSJYAC.js";
-
-// ../../packages/adapters/src/system/environment.ts
-var profileCache = /* @__PURE__ */ new WeakMap();
-async function execSafe(executor, command, timeout = 5e3) {
-  const startedAt = Date.now();
-  systemDebug("environment", `exec:start ${command}`);
-  try {
-    const result = await executor.exec(command, { timeout });
-    systemDebug(
-      "environment",
-      `exec:ok ${command} (${formatDuration(startedAt)})`
-    );
-    return result;
-  } catch (err) {
-    if (isRemoteConnectionError(err)) {
-      systemDebug(
-        "environment",
-        `exec:abort ${command} (${formatDuration(startedAt)}) ${safeErrorMessage(err)}`
-      );
-      throw err;
-    }
-    const msg = safeErrorMessage(err);
-    systemDebug(
-      "environment",
-      `exec:fail ${command} (${formatDuration(startedAt)}) ${msg}`
-    );
-    return null;
-  }
-}
-function parseOs(uname) {
-  const value = uname?.trim().toLowerCase();
-  if (value === "linux") return "linux";
-  if (value === "darwin") return "darwin";
-  return "unknown";
-}
-function parseArch(uname) {
-  const value = uname?.trim().toLowerCase() ?? "";
-  if (["x86_64", "amd64"].includes(value)) return "amd64";
-  if (["aarch64", "arm64"].includes(value)) return "arm64";
-  return "unknown";
-}
-function parseDistro(osRelease) {
-  if (!osRelease) return null;
-  const lower = osRelease.toLowerCase();
-  const match = lower.match(/^id=(.+)$/m);
-  const id = match?.[1]?.replaceAll('"', "").trim();
-  switch (id) {
-    case "ubuntu":
-      return "ubuntu";
-    case "debian":
-      return "debian";
-    case "fedora":
-      return "fedora";
-    case "rhel":
-    case "rhel server":
-      return "rhel";
-    case "centos":
-      return "centos";
-    case "alpine":
-      return "alpine";
-    default:
-      return "unknown";
-  }
-}
-async function detectPackageManager(executor) {
-  const checks = [
-    ["apt", "command -v apt-get"],
-    ["dnf", "command -v dnf"],
-    ["yum", "command -v yum"],
-    ["apk", "command -v apk"],
-    ["brew", "command -v brew"]
-  ];
-  for (const [pm, command] of checks) {
-    if (await execSafe(executor, command)) return pm;
-  }
-  return "none";
-}
-async function detectServiceManager(executor) {
-  if (await execSafe(executor, "command -v systemctl")) return "systemd";
-  if (await execSafe(executor, "command -v launchctl")) return "launchd";
-  return "none";
-}
-async function detectPrivilege(executor) {
-  const uid = await execSafe(executor, "id -u");
-  const isRoot = uid?.trim() === "0";
-  if (isRoot) return { isRoot: true, canSudo: false };
-  const sudo = await execSafe(
-    executor,
-    "sudo -n true 2>/dev/null && echo yes || echo no"
-  );
-  return { isRoot: false, canSudo: sudo?.trim() === "yes" };
-}
-async function detectProfile(executor) {
-  const startedAt = Date.now();
-  systemDebug("environment", "detect:start");
-  const unameOs = await execSafe(executor, "uname -s");
-  const unameArch = await execSafe(executor, "uname -m");
-  const osRelease = await execSafe(executor, "cat /etc/os-release");
-  const packageManager = await detectPackageManager(executor);
-  const serviceManager = await detectServiceManager(executor);
-  const { isRoot, canSudo } = await detectPrivilege(executor);
-  const os = parseOs(unameOs);
-  const profile = {
-    os,
-    arch: parseArch(unameArch),
-    distro: os === "linux" ? parseDistro(osRelease) : null,
-    packageManager,
-    serviceManager,
-    isRoot,
-    canSudo
-  };
-  systemDebug(
-    "environment",
-    `detect:done (${formatDuration(startedAt)}) ${JSON.stringify(profile)}`
-  );
-  return profile;
-}
-async function resolveEnvironment(executor) {
-  let promise = profileCache.get(executor);
-  if (!promise) {
-    systemDebug("environment", "cache:miss");
-    promise = detectProfile(executor);
-    profileCache.set(executor, promise);
-  } else {
-    systemDebug("environment", "cache:hit");
-  }
-  return promise;
-}
-
-export {
-  resolveEnvironment
-};

package/dist/chunk-ZCFVHA25.js

@@ -1,89 +0,0 @@
-#!/usr/bin/env sh
-":" //# ; exec "$(command -v node || command -v bun)" "$0" "$@"
-import { createRequire as __ospCreateRequire } from "node:module";
-const require = __ospCreateRequire(import.meta.url);
-
-// ../../packages/adapters/src/system/errors.ts
-var SSH_AUTH_ERROR_PATTERNS = [
-  "All configured authentication methods failed"
-];
-var RETRYABLE_CONNECTION_ERROR_PATTERNS = [
-  "ECONNRESET",
-  "ECONNREFUSED",
-  "ETIMEDOUT",
-  "EHOSTUNREACH",
-  "ENETUNREACH",
-  "Timed out",
-  "Not connected",
-  "Connection lost",
-  "read ECONNRESET",
-  "Handshake failed",
-  "keepalive timeout",
-  "SSH connection closed before ready",
-  // ssh2 emits "Channel open failure: open failed" / "Channel open failure: …"
-  // when the SSH SERVER refuses a new channel - typically because the cached
-  // connection has gone half-dead (peer-side LOGOUT, network blip,
-  // remote sshd MaxSessions). The inner SshExecutor retries `exec`/
-  // `streamExec` on this, but `pipeLocal`, `transferIn`, and any other
-  // channel-bearing op bubble it up. Listing it here lets `withExecutor`
-  // drop the dead connection and retry transparently - fixes the
-  // "first redeploy fails, second click works" pattern.
-  "Channel open failure",
-  "open failed"
-];
-var SshDisconnectedError = class extends Error {
-  constructor(message = "SSH connection lost") {
-    super(message);
-    this.name = "SshDisconnectedError";
-  }
-};
-function isSshDisconnectedError(err) {
-  return err instanceof SshDisconnectedError || err instanceof Error && err.name === "SshDisconnectedError";
-}
-function isSshAuthError(err) {
-  if (!(err instanceof Error)) return false;
-  return SSH_AUTH_ERROR_PATTERNS.some((pattern) => err.message.includes(pattern));
-}
-function isRetryableRemoteConnectionError(err) {
-  if (isSshDisconnectedError(err)) return true;
-  if (!(err instanceof Error)) return false;
-  return RETRYABLE_CONNECTION_ERROR_PATTERNS.some(
-    (pattern) => err.message.includes(pattern)
-  );
-}
-function isRemoteConnectionError(err) {
-  return isSshAuthError(err) || isRetryableRemoteConnectionError(err);
-}
-function isRuntimeNotFoundError(err) {
-  if (!err || typeof err !== "object") return false;
-  const e = err;
-  if (e.statusCode === 404) return true;
-  return typeof e.message === "string" && /no such (container|image|volume|network)/i.test(e.message);
-}
-
-// ../../packages/adapters/src/system/debug.ts
-function isTruthy(value) {
-  if (!value) return false;
-  return ["1", "true", "yes", "on", "debug"].includes(value.toLowerCase());
-}
-function isSystemDebugEnabled() {
-  return isTruthy(process.env.SYSTEM_DEBUG_LOGS);
-}
-function systemDebug(scope, message) {
-  if (!isSystemDebugEnabled()) return;
-  const timestamp = (/* @__PURE__ */ new Date()).toISOString();
-  console.log(`[system-debug] ${timestamp} [${scope}] ${message}`);
-}
-function formatDuration(startMs) {
-  return `${Date.now() - startMs}ms`;
-}
-
-export {
-  SshDisconnectedError,
-  isSshAuthError,
-  isRetryableRemoteConnectionError,
-  isRemoteConnectionError,
-  isRuntimeNotFoundError,
-  systemDebug,
-  formatDuration
-};

package/dist/cloud-M2YLWEXO.js

@@ -1,31 +0,0 @@
-#!/usr/bin/env sh
-":" //# ; exec "$(command -v node || command -v bun)" "$0" "$@"
-import { createRequire as __ospCreateRequire } from "node:module";
-const require = __ospCreateRequire(import.meta.url);
-import {
-  CloudRuntime,
-  PAGE_CONTAINER_PREFIX,
-  provisionCloudWorkspace
-} from "./chunk-RRJJGVKE.js";
-import "./chunk-IOT5ZX23.js";
-import "./chunk-EMXI4UCU.js";
-import "./chunk-JIMUYEKN.js";
-import "./chunk-IW2UKBVF.js";
-import "./chunk-VDDMADOF.js";
-import "./chunk-UC7YIEHT.js";
-import "./chunk-6ODUBKUB.js";
-import "./chunk-ZCFVHA25.js";
-import "./chunk-6FH4AXVY.js";
-import "./chunk-EW6KB2J7.js";
-import "./chunk-I3DPMTSF.js";
-import "./chunk-VZ2ZHPS2.js";
-import "./chunk-3LDWWY7U.js";
-import "./chunk-YIPMDGG6.js";
-import "./chunk-ZFJXPCQP.js";
-import "./chunk-OTLSJYAC.js";
-import "./chunk-PXKCZB2I.js";
-export {
-  CloudRuntime,
-  PAGE_CONTAINER_PREFIX,
-  provisionCloudWorkspace
-};