openship 0.6.5 → 0.6.7

package/dist/server/migrations/0105_mail_inbound_rules.sql

@@ -0,0 +1,80 @@
+-- Inbound-mail notification rules — "mail arrives at a watched address, tell me in a channel".
+--
+-- Capture is Postfix's own `recipient_bcc_maps`, which the shipped main.cf already points
+-- at two SQL tables in the engine's `vmail` DB (main.cf.pgsql:36-38). Arming a rule is
+-- therefore ONE row in `vmail.recipient_bcc_domain` — no postmap, no reload, no container
+-- recreate, and identical on the container and legacy host flavors, so it reaches every
+-- mail box already provisioned.
+--
+-- ONE TABLE, ON PURPOSE. The obvious second table — a record of each armed collector —
+-- would only cache state the mail engine already holds authoritatively: the token is
+-- literally inside `recipient_bcc_domain.bcc_address`
+-- (`openship-hook+<token>@<domain>`), the maildir is in `vmail.mailbox`, and "a foreign
+-- BCC took the slot" is derivable by comparing that address against our own prefix. A
+-- cache of the engine's own state is a thing that goes stale; the collector is READ from
+-- vmail instead.
+--
+-- What genuinely has to persist here is the RULES: they reference
+-- `notification_channel` ids, which exist only in this database, and they are created and
+-- edited from a dashboard tab. Keeping them on the mail box would make every list and
+-- toggle an SSH round-trip, and would make the rules unreadable exactly when the mail box
+-- is unreachable.
+--
+-- No cursor table either. The BCC copy is a full message in the collector's maildir, so
+-- the read job dispatches and then DELETES the file: deletion is the cursor, and it
+-- doubles as the prune that keeps a second full copy of every watched message from
+-- growing forever on a bind mount with no quota of its own.
+CREATE TABLE IF NOT EXISTS "mail_inbound_rule" (
+  "id" text PRIMARY KEY NOT NULL,
+  "server_id" text NOT NULL REFERENCES "mail_servers"("server_id") ON DELETE CASCADE,
+  -- Carried so dispatch can fan out to the right org's channels without joining back
+  -- through `servers`. This does NOT make the table organization-scope for dump purposes
+  -- (see dump.ts): its FK targets are instance-scope.
+  "organization_id" text NOT NULL REFERENCES "organization"("id") ON DELETE CASCADE,
+  -- Operator-facing label, e.g. "Support inbox → #support".
+  "name" text NOT NULL,
+  -- mailbox | domain | all. Text, not an enum: a new scope should be a registry entry and
+  -- a UI option, not a migration.
+  "scope" text NOT NULL,
+  -- Full address for `mailbox`, the domain for `domain`, NULL for `all`.
+  --
+  -- `all` is a genuine fan-out: there is no global `always_bcc` anywhere in the shipped
+  -- Postfix config, and the domain lookup keys on exact equality with no wildcard
+  -- convention — so it arms one row per domain and needs a reconcile when a domain is
+  -- added. There is deliberately no CHECK tying scope to target: this schema has no CHECK
+  -- constraints anywhere, and the SQL and the drizzle schema are hand-maintained in
+  -- parallel. The invariant is enforced fail-closed at the write boundary and in the
+  -- filter, where a mailbox rule with no target matches NOTHING rather than everything.
+  "target" text,
+  -- Optional extra matching, applied in the control plane at filter time so editing one
+  -- never touches the mail box.  NULL = match everything.
+  "from_pattern" text,
+  "subject_pattern" text,
+  -- Spam gate, and not optional in practice. The shipped amavis policy sets
+  -- spam_lover='Y' AND bad_header_lover='Y' on the catch-all '@.' policy with empty
+  -- quarantine targets, so the global $final_spam_destiny = D_DISCARD is dead for every
+  -- recipient: spam and bad-header mail ARE delivered and therefore ARE captured.
+  -- Nothing upstream filters on our behalf.
+  "max_spam_score" real,
+  -- Channel ids as a jsonb array, deliberately NOT a join table with an FK to
+  -- notification_channel: the dump's FK_PARENT maps a bare `channelId` column to that
+  -- table unconditionally for ANY table, which would make assertDumpSelfContained reject
+  -- any dump carrying a real join row on a remap path.
+  "channel_ids" jsonb NOT NULL DEFAULT '[]'::jsonb,
+  "enabled" boolean NOT NULL DEFAULT true,
+  -- Burst control state. The notification subsystem has no rate limiting or windowed
+  -- dedup of its own — that is explicitly the producer's job — so a mailing list hitting
+  -- a watched address must not become one alert per message.
+  "paused_reason" text,
+  "last_matched_at" timestamp,
+  "created_at" timestamp NOT NULL DEFAULT now(),
+  "updated_at" timestamp NOT NULL DEFAULT now()
+);
+--> statement-breakpoint
+-- The dispatch path's read on every tick: "enabled rules for this server".
+CREATE INDEX IF NOT EXISTS "idx_mail_inbound_rule_server_enabled"
+  ON "mail_inbound_rule" ("server_id", "enabled");
+--> statement-breakpoint
+-- The rules tab lists per org.
+CREATE INDEX IF NOT EXISTS "idx_mail_inbound_rule_org"
+  ON "mail_inbound_rule" ("organization_id");

package/dist/server/migrations/0106_mcp_call_tracking.sql

@@ -0,0 +1,23 @@
+-- MCP observability: attribute an audit row to the CLIENT that made it, and
+-- count how much a credential is used.
+--
+-- `source` already said "an AI assistant did this" (0088), unforgeably — but not
+-- WHICH assistant. With two clients connected under one user (Claude Desktop and
+-- Cursor, say) every row read the same, so "what did this agent do" could not be
+-- answered and disconnecting the wrong one was a coin flip. The column holds the
+-- canonical principal id the auth layer already mints (`oauth:<clientId>` /
+-- `pat:<tokenId>`), so it resolves to a name through existing tables.
+--
+-- The index is PARTIAL: only MCP rows ever carry a client id, and mcp.tool_called
+-- makes audit_event's highest-volume writer, so indexing the NULLs would be paid
+-- for on every insert in the table for no read.
+ALTER TABLE "audit_event" ADD COLUMN IF NOT EXISTS "source_client_id" text;--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "audit_event_org_client_idx"
+  ON "audit_event" ("organization_id", "source_client_id", "created_at" DESC)
+  WHERE "source_client_id" IS NOT NULL;--> statement-breakpoint
+
+-- Call counter for every bearer credential (manual PATs and the OAuth-binding
+-- rows behind MCP connections alike). NOT NULL DEFAULT 0 is safe here: existing
+-- rows genuinely have no counted history, and 0 alongside a non-null
+-- `last_used_at` reads correctly as "used before counting existed".
+ALTER TABLE "personal_access_token" ADD COLUMN IF NOT EXISTS "use_count" integer DEFAULT 0 NOT NULL;

package/dist/server/migrations/0107_build_minute_metering_indexes.sql

@@ -0,0 +1,20 @@
+-- Indexes for the build-minute allowance query.
+--
+-- `sumBuildMillisForOrg` joins build_session → deployment, filters on
+-- deployment.organization_id and windows on build_session.started_at. It used to
+-- run only on the billing page (once, on demand); it now runs on the plan gate in
+-- `createQueuedDeployment`, i.e. on every deploy. Neither side of that join had a
+-- supporting index — build_session carried only its primary key and
+-- deployment.organization_id had none — so the query was a double sequential scan
+-- whose cost grows with TOTAL deployment history across all orgs, not with the
+-- org being checked.
+--
+-- (domain.project_id, which the free-subdomain count joins on, is already covered
+-- by idx_domain_project.)
+CREATE INDEX IF NOT EXISTS "idx_build_session_started_at"
+  ON "build_session" ("started_at");--> statement-breakpoint
+
+-- Org scoping for the same join. Also serves the org-wide deployment listings,
+-- which had been scanning for the same reason.
+CREATE INDEX IF NOT EXISTS "idx_deployment_org"
+  ON "deployment" ("organization_id");

package/dist/server/migrations/0108_credential.sql

@@ -0,0 +1,68 @@
+-- Third-party credentials, in one place.
+--
+-- Openship needs other people's secrets for unrelated jobs — write a DNS record, pull a
+-- private image, later push a backup — and each job grew its own storage: a single token
+-- column on `dns_credential`, FIVE encrypted columns inlined on a backup destination, a
+-- channel's own on notifications. Same `enc1:` envelope in each, three shapes, three
+-- forms in the UI, and no way to reuse one credential for two features.
+--
+-- The unit here is the CREDENTIAL, deliberately not the thing that uses it. A backup
+-- destination is a place, a DNS zone is a zone, a notification channel is a route; each
+-- keeps its own row and points at a credential. That is what makes "one Cloudflare token
+-- for every zone" and "one ghcr.io login for every project" possible — the reuse is the
+-- point, fewer screens is the side effect.
+--
+-- Shape notes:
+--   • `provider` is TEXT, matching dns_credential's reasoning: adding a provider should
+--     be a registry entry in @repo/core, not a migration.
+--   • `selector` is what the credential APPLIES TO when one per provider is not enough —
+--     a registry host for `docker-registry`, NULL for an org-wide `cloudflare` token. It
+--     is stored normalized (see normalizeCredentialSelector) so the value a pull derives
+--     from an image reference matches the value the operator typed.
+--   • `secrets_enc` is ONE `enc1:` AES-256-GCM envelope over a JSON object, so a provider
+--     with several secret fields (an S3 key pair, an SFTP key + passphrase) needs no new
+--     columns. The readable half lives in `public_fields`, which is what the API can
+--     return without decrypting anything.
+--   • `status` + `last_error` exist so a credential that was revoked upstream becomes
+--     VISIBLE instead of silently failing every deploy or backup forever. `last_error` is
+--     the provider's redacted reason, never its response body.
+CREATE TABLE IF NOT EXISTS "credential" (
+  "id" text PRIMARY KEY NOT NULL,
+  "organization_id" text NOT NULL REFERENCES "organization"("id") ON DELETE CASCADE,
+  -- Provider id from CREDENTIAL_PROVIDERS ("docker-registry", "cloudflare").
+  "provider" text NOT NULL,
+  -- Operator-facing label, e.g. "GHCR read-only".
+  "name" text NOT NULL,
+  -- The resource this credential is for, normalized; NULL when the provider is org-wide.
+  "selector" text,
+  -- Non-secret fields (username, region, endpoint) — returned by the API as-is.
+  "public_fields" jsonb NOT NULL DEFAULT '{}'::jsonb,
+  -- Every secret field for this provider, as one enc1: envelope over a JSON object.
+  "secrets_enc" text NOT NULL,
+  -- active | invalid. Flipped to 'invalid' the moment a provider answers 401/403, which
+  -- is the only time we learn a stored credential stopped working.
+  "status" text NOT NULL DEFAULT 'active',
+  "last_verified_at" timestamp,
+  -- Redacted reason the last verify or use failed. Never provider response bodies.
+  "last_error" text,
+  "created_at" timestamp NOT NULL DEFAULT now(),
+  "updated_at" timestamp NOT NULL DEFAULT now()
+);
+--> statement-breakpoint
+-- The resolve path asks exactly one question — "this org's credential for this provider
+-- and this resource" — on every deploy that pulls and every domain that provisions.
+-- Leading org column means the plain org-wide listing and the per-provider listing both
+-- ride this index as prefixes, so it is the only lookup index the table needs. `status`
+-- is filtered in code: a handful of rows per org makes an extra column here dead weight.
+CREATE INDEX IF NOT EXISTS "idx_credential_org_provider_selector"
+  ON "credential" ("organization_id", "provider", "selector");
+--> statement-breakpoint
+-- One label per provider per resource per org. A second "GHCR read-only" for the same
+-- host is a double-submit, and two credentials matching one registry makes "which one
+-- authenticated this pull" unanswerable when one of them starts failing.
+--
+-- COALESCE, not a bare column: Postgres treats NULLs as DISTINCT in a unique index, so
+-- an org-wide provider (selector IS NULL — every Cloudflare token) would accept
+-- unlimited duplicates of the same name and this constraint would quietly do nothing.
+CREATE UNIQUE INDEX IF NOT EXISTS "uq_credential_org_provider_selector_name"
+  ON "credential" ("organization_id", "provider", COALESCE("selector", ''), "name");

package/dist/server/migrations/meta/_journal.json

@@ -736,6 +736,34 @@
       "when": 1787955707325,
       "tag": "0104_instance_host_control",
       "breakpoints": true
+    },
+    {
+      "idx": 105,
+      "version": "7",
+      "when": 1788042107325,
+      "tag": "0105_mail_inbound_rules",
+      "breakpoints": true
+    },
+    {
+      "idx": 106,
+      "version": "7",
+      "when": 1788128507325,
+      "tag": "0106_mcp_call_tracking",
+      "breakpoints": true
+    },
+    {
+      "idx": 107,
+      "version": "7",
+      "when": 1788214907325,
+      "tag": "0107_build_minute_metering_indexes",
+      "breakpoints": true
+    },
+    {
+      "idx": 108,
+      "version": "7",
+      "when": 1788301307325,
+      "tag": "0108_credential",
+      "breakpoints": true
     }
   ]
 }

package/dist/setup-I5AJC6NJ.js

@@ -0,0 +1,25 @@
+#!/usr/bin/env sh
+":" //# ; exec "$(command -v node || command -v bun)" "$0" "$@"
+import { createRequire as __ospCreateRequire } from "node:module";
+const require = __ospCreateRequire(import.meta.url);
+import {
+  SystemManager
+} from "./chunk-FYPFEDPZ.js";
+import "./chunk-ZPJ74LXE.js";
+import "./chunk-NRTJRNAE.js";
+import "./chunk-QHMDCYZ3.js";
+import "./chunk-I3DPMTSF.js";
+import "./chunk-R4VDPFLS.js";
+import "./chunk-PVP4RGWT.js";
+import "./chunk-BLEXTYRK.js";
+import "./chunk-FZ6QCF6B.js";
+import "./chunk-H3WT3A6R.js";
+import "./chunk-GIPJNNI5.js";
+import "./chunk-VSTFHUCV.js";
+import "./chunk-UWEV6XTS.js";
+import "./chunk-N5YZMO33.js";
+import "./chunk-2VSW6Q6C.js";
+import "./chunk-PXKCZB2I.js";
+export {
+  SystemManager
+};

package/dist/ssh-client-625VWGKP.js

@@ -0,0 +1,29 @@
+#!/usr/bin/env sh
+":" //# ; exec "$(command -v node || command -v bun)" "$0" "$@"
+import { createRequire as __ospCreateRequire } from "node:module";
+const require = __ospCreateRequire(import.meta.url);
+import {
+  DOCKER_DIAL_STDIO_COMMAND,
+  attachDialStdioDiagnostics,
+  connectSshClient,
+  dialStdioDiagnostics,
+  execSshCommand,
+  openDockerDialStdioChannel,
+  openSftp,
+  openSshExecChannel,
+  openSshUnixSocket
+} from "./chunk-5T4UVOM3.js";
+import "./chunk-N5YZMO33.js";
+import "./chunk-2VSW6Q6C.js";
+import "./chunk-PXKCZB2I.js";
+export {
+  DOCKER_DIAL_STDIO_COMMAND,
+  attachDialStdioDiagnostics,
+  connectSshClient,
+  dialStdioDiagnostics,
+  execSshCommand,
+  openDockerDialStdioChannel,
+  openSftp,
+  openSshExecChannel,
+  openSshUnixSocket
+};

package/dist/up-QXTOOVXC.js

@@ -0,0 +1,61 @@
+#!/usr/bin/env sh
+":" //# ; exec "$(command -v node || command -v bun)" "$0" "$@"
+import { createRequire as __ospCreateRequire } from "node:module";
+const require = __ospCreateRequire(import.meta.url);
+import {
+  normalizeUrl,
+  runHeadlessProvision,
+  startService,
+  upCommand
+} from "./chunk-DDFUESPJ.js";
+import "./chunk-PPEBIY5F.js";
+import "./chunk-RDXT4BQB.js";
+import "./chunk-VQM6JHJB.js";
+import "./chunk-QWHBRY2K.js";
+import "./chunk-J2XM3QSP.js";
+import "./chunk-ELGRMZOW.js";
+import "./chunk-FYPFEDPZ.js";
+import "./chunk-ONKEYSMY.js";
+import "./chunk-XZYFZ6A5.js";
+import "./chunk-PDW4L3NV.js";
+import "./chunk-DOD2BXHQ.js";
+import "./chunk-42WQABXM.js";
+import "./chunk-DRK3MEDS.js";
+import "./chunk-3NQQXMDR.js";
+import "./chunk-ZWLDLTJP.js";
+import "./chunk-J3K6XABC.js";
+import "./chunk-CIJV43LH.js";
+import "./chunk-ZPJ74LXE.js";
+import "./chunk-NRTJRNAE.js";
+import "./chunk-QHMDCYZ3.js";
+import "./chunk-I3DPMTSF.js";
+import "./chunk-WNWQBB7F.js";
+import "./chunk-2GWYYHOR.js";
+import "./chunk-RXQBD4ZY.js";
+import "./chunk-LHFXSC36.js";
+import "./chunk-XWHWTHEL.js";
+import "./chunk-S6B2Z3OO.js";
+import "./chunk-MEE6OZFP.js";
+import "./chunk-WU54BXFE.js";
+import "./chunk-H4FS5BED.js";
+import "./chunk-GGIAIGUL.js";
+import "./chunk-R4VDPFLS.js";
+import "./chunk-2ANV5ZQ5.js";
+import "./chunk-5T4UVOM3.js";
+import "./chunk-E2X26PXR.js";
+import "./chunk-PVP4RGWT.js";
+import "./chunk-BLEXTYRK.js";
+import "./chunk-FZ6QCF6B.js";
+import "./chunk-H3WT3A6R.js";
+import "./chunk-GIPJNNI5.js";
+import "./chunk-VSTFHUCV.js";
+import "./chunk-UWEV6XTS.js";
+import "./chunk-N5YZMO33.js";
+import "./chunk-2VSW6Q6C.js";
+import "./chunk-PXKCZB2I.js";
+export {
+  normalizeUrl,
+  runHeadlessProvision,
+  startService,
+  upCommand
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openship",
-  "version": "0.6.5",
+  "version": "0.6.7",
   "description": "Openship CLI - deploy, manage, and open your Openship platform from the terminal",
   "license": "Apache-2.0",
   "repository": {

package/dist/bare-XQIPDO4R.js

@@ -1,24 +0,0 @@
-#!/usr/bin/env sh
-":" //# ; exec "$(command -v node || command -v bun)" "$0" "$@"
-import { createRequire as __ospCreateRequire } from "node:module";
-const require = __ospCreateRequire(import.meta.url);
-import {
-  BareRuntime,
-  STATIC_RELEASE_BASE
-} from "./chunk-GRTXMUHA.js";
-import "./chunk-MSZUCNPV.js";
-import "./chunk-TM2IQPYU.js";
-import "./chunk-VHMOQL5Y.js";
-import "./chunk-5OUWIPOB.js";
-import "./chunk-6FH4AXVY.js";
-import "./chunk-RFWJE7ZN.js";
-import "./chunk-A7EWM2KA.js";
-import "./chunk-EZPPTWJQ.js";
-import "./chunk-WFRXYWK2.js";
-import "./chunk-ZFJXPCQP.js";
-import "./chunk-LEYSL46B.js";
-import "./chunk-PXKCZB2I.js";
-export {
-  BareRuntime,
-  STATIC_RELEASE_BASE
-};

package/dist/chunk-6HOA5JT7.js

@@ -1,124 +0,0 @@
-#!/usr/bin/env sh
-":" //# ; exec "$(command -v node || command -v bun)" "$0" "$@"
-import { createRequire as __ospCreateRequire } from "node:module";
-const require = __ospCreateRequire(import.meta.url);
-import {
-  composeInternalToken,
-  startUnitHint
-} from "./chunk-QLX7NBEA.js";
-import {
-  LocalExecutor
-} from "./chunk-6FH4AXVY.js";
-import {
-  EDGE_CONTAINER_NAME,
-  edgeCrashReason
-} from "./chunk-WE7BXW6L.js";
-
-// src/lib/edge-import.ts
-import chalk from "chalk";
-import ora from "ora";
-async function waitForApiHealth(port, tries) {
-  for (let i = 0; i < tries; i++) {
-    try {
-      const r = await fetch(`http://127.0.0.1:${port}/api/health`, { signal: AbortSignal.timeout(2e3) });
-      if (r.ok) return true;
-    } catch {
-    }
-    await new Promise((r) => setTimeout(r, 1e3));
-  }
-  return false;
-}
-async function waitForEdgeRunning(tries) {
-  const exec = new LocalExecutor();
-  for (let i = 0; i < tries; i++) {
-    const out = await exec.exec(`docker inspect -f '{{.State.Running}}' ${EDGE_CONTAINER_NAME}`).catch(() => "");
-    if (out.trim() === "true") return true;
-    await new Promise((r) => setTimeout(r, 1e3));
-  }
-  return false;
-}
-async function importMigratedSites(apiPort, sites, certPems, staticRootOverrides) {
-  const token = composeInternalToken();
-  if (!token) {
-    const error = "couldn't read the stack's internal token";
-    console.log(chalk.yellow(`  Skipping site import \u2014 ${error}. Re-run to retry.
-`));
-    return { ok: false, registered: [], error };
-  }
-  const spinner = ora(
-    `Importing ${sites.length} migrated site${sites.length === 1 ? "" : "s"} into the edge\u2026`
-  ).start();
-  if (!await waitForApiHealth(apiPort, 60)) {
-    const error = "API didn't become healthy in time";
-    spinner.warn(`${error} \u2014 migrated sites not imported. Re-run \`openship up\` to retry.`);
-    return { ok: false, registered: [], error };
-  }
-  if (!await waitForEdgeRunning(60)) {
-    const error = `the ${EDGE_CONTAINER_NAME} container isn't running yet`;
-    spinner.warn(`${error} \u2014 migrated sites not imported. Re-run \`openship up\` to retry.`);
-    return { ok: false, registered: [], error };
-  }
-  try {
-    const r = await fetch(`http://127.0.0.1:${apiPort}/api/system/edge/import-sites`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json", "X-Internal-Token": token },
-      body: JSON.stringify({ sites, certPems, staticRootOverrides }),
-      signal: AbortSignal.timeout(12e4)
-    });
-    const data = await r.json().catch(() => ({}));
-    if (!r.ok) {
-      const error = data.error ?? `HTTP ${r.status}`;
-      spinner.warn(`Site import failed: ${error}. Re-run to retry.`);
-      return { ok: false, registered: [], error };
-    }
-    const registered = data.registered ?? [];
-    const warnings = data.warnings ?? [];
-    const missed = sites.length - registered.length;
-    if (sites.length > 0 && registered.length === 0) {
-      spinner.fail(
-        `Migrated NONE of the ${sites.length} site${sites.length === 1 ? "" : "s"} \u2014 Openship holds :80/:443 and ${sites.length === 1 ? "that hostname is" : "those hostnames are"} NOT being served.`
-      );
-      for (const w of warnings.slice(0, 8)) console.log(chalk.red(`    \u2022 ${w}`));
-      const edgeLog = await edgeCrashReason(new LocalExecutor());
-      if (edgeLog) {
-        console.log(chalk.red(`
-  The edge container is not running. Its log says:`));
-        console.log(chalk.red(`    ${edgeLog}`));
-      }
-      const back = startUnitHint("nginx");
-      console.log(
-        chalk.yellow(
-          `
-  Retry the import with \`openship up\` once the cause above is fixed, or put your
-` + (back ? `  previous proxy back:  docker stop ${EDGE_CONTAINER_NAME} && ${back}
-` : `  previous proxy back by stopping ${EDGE_CONTAINER_NAME} and starting it the way
-  this host starts services.
-`)
-        )
-      );
-      return { ok: false, registered, error: warnings[0] ?? "no sites were registered" };
-    }
-    if (missed > 0) {
-      spinner.warn(
-        `Migrated ${registered.length}/${sites.length} sites \u2014 ${missed} not served (see below).`
-      );
-      for (const w of warnings.slice(0, 8)) console.log(chalk.yellow(`    \u2022 ${w}`));
-      return { ok: false, registered, error: `${missed} site(s) not registered` };
-    }
-    spinner.succeed(
-      `Migrated ${registered.length} site${registered.length === 1 ? "" : "s"} into Openship's edge.`
-    );
-    for (const w of warnings.slice(0, 8)) console.log(chalk.dim(`    \u2022 ${w}`));
-    return { ok: true, registered };
-  } catch (e) {
-    const error = e.message;
-    spinner.warn(`Site import failed: ${error}. Re-run to retry.`);
-    return { ok: false, registered: [], error };
-  }
-}
-
-export {
-  waitForApiHealth,
-  waitForEdgeRunning,
-  importMigratedSites
-};