openship 0.6.5 → 0.6.6

package/dist/{chunk-VDESJSG6.js → chunk-77QDF6UD.js}

@@ -9,7 +9,7 @@ import {
   resolveDockerfileCandidates,
   resolveServiceDockerfile,
   staticBuilderOutputPath
-} from "./chunk-LFCSC4IU.js";
+} from "./chunk-LUKYPVJ4.js";
 import {
   BuildCancelledError,
   BuildLogger,
@@ -20,7 +20,7 @@ import {
   shellGitSshWriter,
   sq,
   transferLocalDirectory
-} from "./chunk-TM2IQPYU.js";
+} from "./chunk-LH2PLRQO.js";
 import {
   DOCKER_DIAL_STDIO_COMMAND,
   attachDialStdioDiagnostics,
@@ -29,11 +29,11 @@ import {
   execSshCommand,
   openDockerDialStdioChannel,
   openSshUnixSocket
-} from "./chunk-5OUWIPOB.js";
+} from "./chunk-PCPVTH6M.js";
 import {
   dirOf,
   ensureOwnedDir
-} from "./chunk-WFRXYWK2.js";
+} from "./chunk-UVNMQM7W.js";
 import {
   formatCpuCores,
   formatMemoryMb,
@@ -41,9 +41,11 @@ import {
   hasMemoryLimit,
   isRuntimeNotFoundError,
   ownsNetworkEndpoint,
+  registryConfigKeys,
+  registryForImage,
   safeErrorMessage,
   withTimeout
-} from "./chunk-LEYSL46B.js";
+} from "./chunk-UJ6JZM65.js";
 import {
   __commonJS,
   __require,
@@ -313,7 +315,7 @@ var require_buffer_list = __commonJS({
         }
       }, {
         key: "join",
-        value: function join2(s) {
+        value: function join3(s) {
           if (this.length === 0) return "";
           var p = this.head;
           var ret = "" + p.data;
@@ -4608,6 +4610,82 @@ import Dockerode from "dockerode";
 import { createGzip } from "zlib";
 import { PassThrough, Writable } from "stream";
 
+// ../../packages/adapters/src/runtime/docker-auth.ts
+import { readFile } from "fs/promises";
+import { homedir } from "os";
+import { join } from "path";
+function firstPresent(values, keys) {
+  if (!values) return void 0;
+  for (const key of keys) {
+    if (Object.hasOwn(values, key)) return { key, value: values[key] };
+  }
+  return void 0;
+}
+function dockerConfigJsonFor(auth) {
+  const a = auth;
+  const registry = a.serveraddress?.trim();
+  if (!registry) return null;
+  if (a.identitytoken) {
+    return JSON.stringify({ auths: { [registry]: { identitytoken: a.identitytoken } } });
+  }
+  if (!a.username || !a.password) return null;
+  const encoded = Buffer.from(`${a.username}:${a.password}`).toString("base64");
+  return JSON.stringify({ auths: { [registry]: { auth: encoded } } });
+}
+function toAuthConfig(entry, serveraddress) {
+  if (entry.identitytoken) {
+    return { identitytoken: entry.identitytoken, serveraddress };
+  }
+  if (entry.username && entry.password) {
+    return { username: entry.username, password: entry.password, serveraddress };
+  }
+  if (!entry.auth) return void 0;
+  let decoded;
+  try {
+    decoded = Buffer.from(entry.auth, "base64").toString("utf8");
+  } catch {
+    return void 0;
+  }
+  const separator = decoded.indexOf(":");
+  if (separator < 1) return void 0;
+  return {
+    username: decoded.slice(0, separator),
+    password: decoded.slice(separator + 1),
+    serveraddress
+  };
+}
+var DockerCredentialHelperError = class extends Error {
+  constructor(registry) {
+    super(
+      `Openship can't read the credentials for ${registry}: they are stored in a Docker credential helper, which is not available inside the Openship container. Add the credentials inline to the Docker config (docker logout ${registry}, remove the credential helper for it, then docker login ${registry}), or use a public image.`
+    );
+    this.name = "DockerCredentialHelperError";
+  }
+};
+async function resolveDockerAuth(ref) {
+  const registry = registryForImage(ref);
+  const configPath = join(
+    process.env.DOCKER_CONFIG || join(homedir(), ".docker"),
+    "config.json"
+  );
+  let config;
+  try {
+    config = JSON.parse(await readFile(configPath, "utf8"));
+  } catch {
+    return void 0;
+  }
+  if (!config || typeof config !== "object") return void 0;
+  const keys = registryConfigKeys(registry);
+  const inline = firstPresent(config.auths, keys);
+  const usable = inline ? toAuthConfig(inline.value, inline.key) : void 0;
+  if (usable) return usable;
+  const helperForRegistry = firstPresent(config.credHelpers, keys);
+  if (helperForRegistry || config.credsStore && inline) {
+    throw new DockerCredentialHelperError(registry);
+  }
+  return void 0;
+}
+
 // ../../packages/adapters/src/runtime/source-tarball.ts
 function githubTarballUrl(repoUrl, ref) {
   if (!repoUrl || !ref) return null;
@@ -4792,6 +4870,9 @@ function resolveComposeCmd(config) {
   if (config.commandArgv != null) return config.commandArgv;
   return config.command ? ["sh", "-c", config.command] : void 0;
 }
+function resolveComposeEntrypoint(advanced) {
+  return advanced?.entrypoint ?? void 0;
+}
 
 // ../../packages/adapters/src/runtime/resource-limits.ts
 function dockerResourceLimits(resources) {
@@ -4843,8 +4924,8 @@ function describeResourceLimits(resources) {
 // ../../packages/adapters/src/runtime/docker-transport.ts
 import { createHash } from "crypto";
 import { readFileSync } from "fs";
-import { homedir } from "os";
-import { join } from "path";
+import { homedir as homedir2 } from "os";
+import { join as join2 } from "path";
 
 // ../../packages/adapters/src/runtime/docker-ssh-agent.ts
 import net2 from "net";
@@ -5317,7 +5398,7 @@ function createDockerSshBridge(opts) {
 var DEFAULT_DOCKER_SOCKET_PATH = "/var/run/docker.sock";
 var contextSocketCache = /* @__PURE__ */ new Map();
 function resolveDockerContextSocket(env) {
-  const configDir = env.DOCKER_CONFIG?.trim() || join(homedir(), ".docker");
+  const configDir = env.DOCKER_CONFIG?.trim() || join2(homedir2(), ".docker");
   let name = env.DOCKER_CONTEXT?.trim();
   const cacheKey = `${configDir}\0${name ?? ""}`;
   const cached = contextSocketCache.get(cacheKey);
@@ -5325,13 +5406,13 @@ function resolveDockerContextSocket(env) {
   let socket = null;
   try {
     if (!name) {
-      const config = JSON.parse(readFileSync(join(configDir, "config.json"), "utf8"));
+      const config = JSON.parse(readFileSync(join2(configDir, "config.json"), "utf8"));
       name = typeof config.currentContext === "string" ? config.currentContext.trim() : "";
     }
     if (name && name !== "default") {
       const digest = createHash("sha256").update(name).digest("hex");
       const meta = JSON.parse(
-        readFileSync(join(configDir, "contexts", "meta", digest, "meta.json"), "utf8")
+        readFileSync(join2(configDir, "contexts", "meta", digest, "meta.json"), "utf8")
       );
       const host = meta.Endpoints?.docker?.Host;
       if (typeof host === "string" && host.startsWith("unix://")) {
@@ -5933,7 +6014,7 @@ var DockerRuntime = class _DockerRuntime {
    */
   async estimateContextSize(dir) {
     const { stat, readdir } = await import("fs/promises");
-    const { join: join2 } = await import("path");
+    const { join: join3 } = await import("path");
     let total = 0;
     const stack = [dir];
     while (stack.length) {
@@ -5945,7 +6026,7 @@ var DockerRuntime = class _DockerRuntime {
         continue;
       }
       for (const entry of entries) {
-        const full = join2(current, entry.name);
+        const full = join3(current, entry.name);
         if (entry.isDirectory()) {
           stack.push(full);
         } else if (entry.isFile()) {
@@ -6663,12 +6744,12 @@ var DockerRuntime = class _DockerRuntime {
    */
   async extractDocRootViaBindMount(tag, docRoot, hostOutDir) {
     const { mkdir, readdir, writeFile, rm } = await import("fs/promises");
-    const { join: join2 } = await import("path");
+    const { join: join3 } = await import("path");
     const { randomBytes } = await import("crypto");
     await mkdir(hostOutDir, { recursive: true });
     const OUT = "/__openship_out";
     const probe = `.openship-extract-probe-${randomBytes(6).toString("hex")}`;
-    await writeFile(join2(hostOutDir, probe), "probe");
+    await writeFile(join3(hostOutDir, probe), "probe");
     const container = await this.docker.createContainer({
       Image: tag,
       // Override the ENTRYPOINT: builder base images (node, bun) ship a
@@ -6708,7 +6789,7 @@ var DockerRuntime = class _DockerRuntime {
     } finally {
       await container.remove({ force: true }).catch(() => {
       });
-      await rm(join2(hostOutDir, probe), { force: true }).catch(() => {
+      await rm(join3(hostOutDir, probe), { force: true }).catch(() => {
       });
     }
   }
@@ -7425,13 +7506,39 @@ var DockerRuntime = class _DockerRuntime {
     }
     const executor = this.connectionOptions?.executor;
     if (executor) {
-      await executor.exec(`docker pull ${sq(ref)}`, { timeout: 10 * 6e4 });
+      const timeout = 10 * 6e4;
+      const auth = await this.connectionOptions?.resolveRegistryAuth?.(ref);
+      const config = auth ? dockerConfigJsonFor(auth) : null;
+      if (!config) {
+        await executor.exec(`docker pull ${sq(ref)}`, { timeout });
+        return;
+      }
+      const dir = `/tmp/openship-pull-${crypto.randomUUID()}`;
+      try {
+        await executor.exec(`mkdir -m 700 ${sq(dir)}`);
+        await executor.writeFile(`${dir}/config.json`, config);
+        await executor.exec(`chmod 600 ${sq(dir)}/config.json`);
+        await executor.exec(
+          `DOCKER_CONFIG=${sq(dir)} docker pull ${sq(ref)}; rc=$?; rm -rf ${sq(dir)}; exit $rc`,
+          { timeout }
+        );
+      } finally {
+        await executor.exec(`rm -rf ${sq(dir)}`).catch(() => {
+        });
+      }
       return;
     }
-    const stream = await this.docker.pull(ref);
-    await new Promise((resolve, reject) => {
-      this.docker.modem.followProgress(stream, (err) => err ? reject(err) : resolve());
-    });
+    const authconfig = this.connectionOptions?.resolveRegistryAuth ? await this.connectionOptions.resolveRegistryAuth(ref) : await resolveDockerAuth(ref);
+    try {
+      const stream = await this.docker.pull(ref, authconfig ? { authconfig } : {});
+      await new Promise((resolve, reject) => {
+        this.docker.modem.followProgress(stream, (err) => err ? reject(err) : resolve());
+      });
+    } catch (err) {
+      throw new Error(
+        `Failed to pull ${ref} from ${registryForImage(ref)}: ${safeErrorMessage(err)}`
+      );
+    }
   }
   /** Is this image tag present on THIS daemon? Distinguishes a locally-built
    *  image (must be transferred cross-server) from a registry tag (the target
@@ -8217,6 +8324,7 @@ var DockerRuntime = class _DockerRuntime {
       ...Object.entries(config.environment).map(([k, v]) => `${k}=${v}`)
     ];
     const cmd = resolveComposeCmd(config);
+    const entrypoint = resolveComposeEntrypoint(config.advanced);
     const sharedNetwork = config.namespaces?.network;
     const sharesNetns = !!sharedNetwork && sharedNetwork !== "none";
     const ownsProjectEndpoint = ownsNetworkEndpoint(sharedNetwork);
@@ -8282,6 +8390,12 @@ var DockerRuntime = class _DockerRuntime {
       name: containerName,
       Image: config.image,
       Cmd: cmd,
+      // Entrypoint (#575). SPREAD rather than assigned, because `undefined` and `[]`
+      // must reach Docker differently: absent leaves the image's own ENTRYPOINT
+      // alone, while `Entrypoint: []` clears it. Assigning `undefined` would send the
+      // key, and the same conditional-spread shape is why `toStopConfig` returns an
+      // object instead of nullable fields.
+      ...entrypoint === void 0 ? {} : { Entrypoint: entrypoint },
       Env: env,
       // Docker rejects an explicit hostname when the network namespace is another
       // container's — that container owns the UTS identity too.

package/dist/{chunk-7334NSJL.js → chunk-A4GXYE4L.js}

@@ -9,12 +9,28 @@ import {
   readDeclaredPair,
   readMaybeInContainer,
   validateCertFor
-} from "./chunk-VLQ3UIVO.js";
+} from "./chunk-QVW76WDL.js";
+import {
+  EDGE_CHALLENGE_HOST_DIR,
+  EDGE_CONTAINER_MOUNTS,
+  EDGE_HOST_PATHS,
+  OPENRESTY_DEFAULT_PATHS
+} from "./chunk-RSR7PFIQ.js";
 import {
   privilegedExecutor,
   rootChecked,
   rootOrDegrade
-} from "./chunk-RFWJE7ZN.js";
+} from "./chunk-4I2BM2DT.js";
+import {
+  envOps,
+  opScript
+} from "./chunk-YMMQRE5J.js";
+import {
+  resolveEnvironment
+} from "./chunk-UVNMQM7W.js";
+import {
+  sq
+} from "./chunk-ZFJXPCQP.js";
 import {
   EDGE_CONTAINER_NAME,
   EdgeConflictError,
@@ -29,29 +45,13 @@ import {
   sanitizeEdgeVhosts,
   sq as sq2,
   stopTargetsForStatus
-} from "./chunk-WE7BXW6L.js";
+} from "./chunk-2YM3NI2E.js";
 import {
   probeExec,
   tryExec,
   waitForPortListening,
   withReason
-} from "./chunk-A7EWM2KA.js";
-import {
-  EDGE_CHALLENGE_HOST_DIR,
-  EDGE_CONTAINER_MOUNTS,
-  EDGE_HOST_PATHS,
-  OPENRESTY_DEFAULT_PATHS
-} from "./chunk-PZRRL5PC.js";
-import {
-  envOps,
-  opScript
-} from "./chunk-EZPPTWJQ.js";
-import {
-  resolveEnvironment
-} from "./chunk-WFRXYWK2.js";
-import {
-  sq
-} from "./chunk-ZFJXPCQP.js";
+} from "./chunk-SM26HDS2.js";
 import {
   AppError,
   PROXY_DIRECTIVES,
@@ -63,7 +63,7 @@ import {
   safeErrorMessage,
   sanitizeProxySettings,
   systemDebug
-} from "./chunk-LEYSL46B.js";
+} from "./chunk-UJ6JZM65.js";
 
 // ../../packages/adapters/src/system/managed-image.ts
 import { posix } from "path";
@@ -396,6 +396,14 @@ async function dumpResolvedConfig(executor, bins) {
   }
   return null;
 }
+async function nginxPrefix(executor, bins) {
+  for (const bin of bins) {
+    const out = await tryExec(executor, `${bin} -V 2>&1`);
+    const prefix = out?.match(/--prefix=(\S+)/)?.[1];
+    if (prefix) return prefix;
+  }
+  return null;
+}
 async function loadNginxConfig(executor) {
   const dumped = await dumpResolvedConfig(executor, ["nginx", "openresty"]);
   if (dumped) return dumped;
@@ -511,9 +519,24 @@ function parseProxyDirectives(body) {
     ...Object.keys(raw).length > 0 ? { raw } : {}
   };
 }
-function parseServer(body, source, upstreams) {
+var LOOPBACK_SERVER_NAMES = /* @__PURE__ */ new Set([
+  "localhost",
+  "localhost.localdomain",
+  "ip6-localhost",
+  "ip6-loopback"
+]);
+function resolveStaticRoot(root, prefix) {
+  if (root.startsWith("/")) return { root };
+  if (!prefix) {
+    return {
+      reason: `static root "${root}" is relative to nginx's compiled prefix, which this host didn't report`
+    };
+  }
+  return { root: `${prefix.replace(/\/+$/, "")}/${root}` };
+}
+function parseServer(body, source, upstreams, prefix) {
   const warnings = [];
-  const names = firstDirective(body, "server_name")?.split(/\s+/).filter((n) => n && n !== "_" && !n.startsWith("~")) ?? [];
+  const names = firstDirective(body, "server_name")?.split(/\s+/).filter((n) => n && n !== "_" && !n.startsWith("~") && !LOOPBACK_SERVER_NAMES.has(n.toLowerCase())) ?? [];
   const listens = [...body.matchAll(/(?:^|[;{\s])listen\s+([^;]+);/g)].map((m) => m[1]);
   const ssl = listens.some((l) => /\bssl\b/.test(l) || /\b443\b/.test(l));
   const root = firstDirective(body, "root");
@@ -540,7 +563,12 @@ function parseServer(body, source, upstreams) {
   } else if (isHttpsUpgradeForSelf(body, names)) {
     return { warnings: [] };
   } else if (root && !isAcmeWebrootOnly(body)) {
-    target = { kind: "static", root: root.replace(/;$/, "") };
+    const resolved2 = resolveStaticRoot(root.replace(/;$/, ""), prefix);
+    if ("reason" in resolved2) {
+      warnings.push(`nginx: ${names[0]} \u2014 ${resolved2.reason} (skipped)`);
+      return { warnings };
+    }
+    target = { kind: "static", root: resolved2.root };
   } else if (root) {
     return { warnings: [] };
   } else {
@@ -555,7 +583,7 @@ function parseServer(body, source, upstreams) {
   if (tunables.raw) site.proxyRaw = tunables.raw;
   return { site, warnings };
 }
-function parseNginxConfig(raw) {
+function parseNginxConfig(raw, prefix) {
   const warnings = [];
   const sites = [];
   if (!raw.trim()) {
@@ -568,7 +596,7 @@ function parseNginxConfig(raw) {
     warnings.push("nginx: no server blocks found");
   }
   for (const body of blocks) {
-    const { site, warnings: blockWarnings } = parseServer(body, "nginx", upstreams);
+    const { site, warnings: blockWarnings } = parseServer(body, "nginx", upstreams, prefix);
     warnings.push(...blockWarnings);
     if (site) sites.push(site);
   }
@@ -580,7 +608,10 @@ function parseNginxConfig(raw) {
   return { proxy: "nginx", sites: kept, warnings };
 }
 async function scanNginx(executor) {
-  return parseNginxConfig(await loadNginxConfig(executor));
+  const raw = await loadNginxConfig(executor);
+  const relativeRoot = /(?:^|[;{\s])root\s+[^/;\s]/.test(raw);
+  const prefix = relativeRoot ? await nginxPrefix(executor, ["nginx", "openresty"]) : null;
+  return parseNginxConfig(raw, prefix ?? void 0);
 }
 var OUR_EDGE_SITE_GLOBS = [
   `${EDGE_HOST_PATHS.sitesDir}/*.conf`,
@@ -2277,7 +2308,7 @@ function edgeHostExecutor(executor) {
   });
 }
 async function containerEdgeProvider(executor, container, opts) {
-  const { NginxProvider: Provider } = await import("./nginx-NSAHWGJV.js");
+  const { NginxProvider: Provider } = await import("./nginx-KUFMLMAC.js");
   return new Provider({
     ...opts,
     // Vhosts go to the BIND-MOUNTED HOST dir (so every host-side reader — the
@@ -2301,8 +2332,8 @@ async function containerEdgeProvider(executor, container, opts) {
   });
 }
 async function localContainerEdgeProvider(container, opts) {
-  const { DockerEdgeExecutor } = await import("./docker-edge-executor-YZZ6P7IC.js");
-  const { NginxProvider: Provider } = await import("./nginx-NSAHWGJV.js");
+  const { DockerEdgeExecutor } = await import("./docker-edge-executor-22IBXNYJ.js");
+  const { NginxProvider: Provider } = await import("./nginx-KUFMLMAC.js");
   return new Provider({
     ...opts,
     paths: OPENRESTY_DEFAULT_PATHS,
@@ -2434,8 +2465,13 @@ async function ensureContainerEdge(executor, opts) {
       );
     }
   }
+  const hostState = await rootOrDegrade(executor, {
+    purpose: "Creating the edge's state directories",
+    consequence: "Docker will create them empty, so vhosts and certificates may not persist.",
+    report: (message) => onLog(log5(message, "warn"))
+  });
   for (const mount of EDGE_CONTAINER_MOUNTS) {
-    await executor.exec(`mkdir -p ${sq(mount.host)}`).catch((err) => {
+    await hostState.exec(`mkdir -p ${sq(mount.host)}`).catch((err) => {
       onLog(
         log5(
           `Could not create the edge state directory ${mount.host}: ${safeErrorMessage(err)}. Docker will create it empty, so vhosts and certificates may not persist.`,

package/dist/{chunk-HPXP6LXZ.js → chunk-CBLD2HS5.js}

@@ -19,13 +19,13 @@ import {
   rollbackEdgeTakeover,
   scanImportableSites,
   unreachableStaticRoots
-} from "./chunk-7334NSJL.js";
+} from "./chunk-A4GXYE4L.js";
 import {
   LocalExecutor
 } from "./chunk-6FH4AXVY.js";
 import {
   ourEdgeContainerRunning
-} from "./chunk-WE7BXW6L.js";
+} from "./chunk-2YM3NI2E.js";
 
 // src/lib/edge-preflight.ts
 import { spawnSync } from "child_process";
@@ -240,7 +240,7 @@ async function repairEdgeConflict(mode, apiPort, onLog) {
   }
   spawnSync("docker", ["restart", "openship-edge"], { stdio: "ignore" });
   if (mode === "migrate" && scan.sites.length > 0) {
-    const { importMigratedSites } = await import("./edge-import-MCJNVTZ2.js");
+    const { importMigratedSites } = await import("./edge-import-WJUB4M7F.js");
     const outcome = await importMigratedSites(apiPort, scan.sites, certPems);
     if (outcome.registered.length === 0) {
       return {

package/dist/{chunk-6JELW75A.js → chunk-FE7ZZQSE.js}

@@ -9,13 +9,13 @@ import {
 import {
   LocalExecutor
 } from "./chunk-6FH4AXVY.js";
-import {
-  edgeFailureReason
-} from "./chunk-WE7BXW6L.js";
 import {
   logEntry,
   sq
 } from "./chunk-ZFJXPCQP.js";
+import {
+  edgeFailureReason
+} from "./chunk-2YM3NI2E.js";
 
 // ../../packages/adapters/src/system/docker-edge-executor.ts
 import Dockerode from "dockerode";

package/dist/{chunk-XVOBL7BC.js → chunk-HKRQXPTI.js}

@@ -7,7 +7,7 @@ import {
   COMPONENT_INSTALLERS,
   checkAll,
   checkComponents
-} from "./chunk-7334NSJL.js";
+} from "./chunk-A4GXYE4L.js";
 
 // ../../packages/adapters/src/system/state.ts
 var DEFAULT_STATE_PATH = "/etc/openship/setup-state.json";

package/dist/{chunk-GRTXMUHA.js → chunk-LFE5KQ7Y.js}

@@ -7,7 +7,7 @@ import {
   resolveProjectDir,
   resolveStaticOutputPath,
   runLocalBuild
-} from "./chunk-MSZUCNPV.js";
+} from "./chunk-YIMOCZBZ.js";
 import {
   BuildCancelledError,
   BuildLogger,
@@ -17,32 +17,32 @@ import {
   runBuildPipeline,
   sq,
   transferLocalDirectory
-} from "./chunk-TM2IQPYU.js";
+} from "./chunk-LH2PLRQO.js";
 import {
   LocalExecutor
 } from "./chunk-6FH4AXVY.js";
 import {
   privilegedExecutor
-} from "./chunk-RFWJE7ZN.js";
-import {
-  probeExec,
-  probeListeningPort,
-  withReason
-} from "./chunk-A7EWM2KA.js";
+} from "./chunk-4I2BM2DT.js";
 import {
   HOST_STATE_DIR,
   envOps,
   hostRefusal,
   opScript
-} from "./chunk-EZPPTWJQ.js";
+} from "./chunk-YMMQRE5J.js";
 import {
   ensureOwnedDir,
   resolveEnvironment
-} from "./chunk-WFRXYWK2.js";
+} from "./chunk-UVNMQM7W.js";
 import {
   sq as sq2,
   wrapLocalBuildCommand
 } from "./chunk-ZFJXPCQP.js";
+import {
+  probeExec,
+  probeListeningPort,
+  withReason
+} from "./chunk-SM26HDS2.js";
 import {
   DeployError,
   LANGUAGES,
@@ -59,7 +59,7 @@ import {
   safeErrorMessage,
   shellQuote,
   systemDebug
-} from "./chunk-LEYSL46B.js";
+} from "./chunk-UJ6JZM65.js";
 
 // ../../packages/adapters/src/system/remote-journal.ts
 var OPSH_RUN_VERSION = 1;

package/dist/{chunk-TM2IQPYU.js → chunk-LH2PLRQO.js}

@@ -5,12 +5,12 @@ const require = __ospCreateRequire(import.meta.url);
 import {
   getTarCreateEnv,
   prepareSourceTarArgs
-} from "./chunk-5OUWIPOB.js";
+} from "./chunk-Q7WGTQQ5.js";
 import {
   TRANSFER_EXCLUDES,
   packageManagerEnsureCommand,
   safeErrorMessage
-} from "./chunk-LEYSL46B.js";
+} from "./chunk-UJ6JZM65.js";
 
 // ../../packages/adapters/src/runtime/git-clone.ts
 function sq(value) {

package/dist/{chunk-LFCSC4IU.js → chunk-LUKYPVJ4.js}

@@ -7,14 +7,14 @@ import {
   localGitSshWriter,
   materializeGitSsh,
   sq
-} from "./chunk-TM2IQPYU.js";
+} from "./chunk-LH2PLRQO.js";
 import {
   getTarCreateEnv,
   prepareSourceTarArgs
-} from "./chunk-5OUWIPOB.js";
+} from "./chunk-Q7WGTQQ5.js";
 import {
   packageManagerEnsureCommand
-} from "./chunk-LEYSL46B.js";
+} from "./chunk-UJ6JZM65.js";
 import {
   __commonJS,
   __toESM