openship 0.6.6 → 0.6.8

package/dist/{chunk-UJ6JZM65.js → chunk-WEZFTL4V.js}

@@ -6,6 +6,57 @@ import {
   __export
 } from "./chunk-PXKCZB2I.js";
 
+// ../../packages/core/src/shell-split.ts
+function shellQuote(value) {
+  return `'${value.replace(/'/g, "'\\''")}'`;
+}
+function shellSplitWords(value) {
+  const words = [];
+  let current = "";
+  let quoted = false;
+  let inSingle = false;
+  let inDouble = false;
+  let escaped = false;
+  for (const char of value.trim()) {
+    if (escaped) {
+      current += char;
+      escaped = false;
+      continue;
+    }
+    if (char === "\\" && !inSingle) {
+      escaped = true;
+      continue;
+    }
+    if (char === "'" && !inDouble) {
+      inSingle = !inSingle;
+      quoted = true;
+      continue;
+    }
+    if (char === '"' && !inSingle) {
+      inDouble = !inDouble;
+      quoted = true;
+      continue;
+    }
+    if (/\s/.test(char) && !inSingle && !inDouble) {
+      if (current || quoted) {
+        words.push(current);
+        current = "";
+        quoted = false;
+      }
+      continue;
+    }
+    current += char;
+  }
+  if (escaped) current += "\\";
+  if (current || quoted) words.push(current);
+  return words;
+}
+function commandToArgv(command) {
+  if (command == null) return null;
+  if (Array.isArray(command)) return command.map((part) => String(part));
+  return shellSplitWords(command);
+}
+
 // ../../packages/core/src/stacks.ts
 var LANGUAGES = {
   javascript: {
@@ -831,6 +882,21 @@ function packageManagerEnsureCommand(packageManager) {
   if (packageManager !== "pnpm" && packageManager !== "yarn") return "";
   return `(corepack enable ${packageManager} || corepack enable || npm i -g ${packageManager}) >/dev/null 2>&1 || true`;
 }
+var NODE_BIN_PACKAGE_MANAGERS = /* @__PURE__ */ new Set(["npm", "yarn", "pnpm", "bun"]);
+function nodeBinDirs(packageManager, roots) {
+  if (!packageManager || !NODE_BIN_PACKAGE_MANAGERS.has(packageManager)) return [];
+  const dirs = [];
+  for (const root of roots) {
+    const dir = `${root.replace(/\/+$/, "")}/node_modules/.bin`;
+    if (!dirs.includes(dir)) dirs.push(dir);
+  }
+  return dirs;
+}
+function nodeBinPathExport(packageManager, roots) {
+  const dirs = nodeBinDirs(packageManager, roots);
+  if (dirs.length === 0) return "";
+  return `export PATH=${dirs.map(shellQuote).join(":")}:"$PATH"`;
+}
 var DI = "https://cdn.jsdelivr.net/gh/devicons/devicon@latest/icons";
 var STACK_ICONS = {
   // JS/TS - Frontend & Fullstack
@@ -951,6 +1017,65 @@ function ownsNetworkEndpoint(resolvedNetworkMode) {
   return !resolvedNetworkMode;
 }
 
+// ../../packages/core/src/utils.ts
+var REDIRECT_STATUSES = [301, 302, 307, 308];
+var DEFAULT_REDIRECT_STATUS = 301;
+function resolveRedirectStatus(status) {
+  return REDIRECT_STATUSES.includes(status) ? status : DEFAULT_REDIRECT_STATUS;
+}
+function isValidEmail(value) {
+  const email3 = value?.trim() ?? "";
+  if (!email3 || email3.length > 254) return false;
+  return /^[A-Za-z0-9._%+-]+@[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,}$/.test(email3);
+}
+function formatBytes(bytes, decimals = 2) {
+  if (bytes <= 0) return "0 B";
+  const k = 1024;
+  const sizes = ["B", "KB", "MB", "GB", "TB"];
+  const i = Math.min(Math.max(Math.floor(Math.log(bytes) / Math.log(k)), 0), sizes.length - 1);
+  return `${parseFloat((bytes / Math.pow(k, i)).toFixed(decimals))} ${sizes[i]}`;
+}
+function withTimeout(promise2, ms, message) {
+  if (!ms) return promise2;
+  return new Promise((resolve, reject) => {
+    const timer = setTimeout(() => reject(new Error(message)), ms);
+    promise2.then(
+      (v) => {
+        clearTimeout(timer);
+        resolve(v);
+      },
+      (e) => {
+        clearTimeout(timer);
+        reject(e);
+      }
+    );
+  });
+}
+function isValidEnvKey(key) {
+  return /^[A-Za-z_][A-Za-z0-9_]*$/.test(key);
+}
+function wrapText(text, width = 88) {
+  const out = [];
+  for (const paragraph of text.split("\n")) {
+    const words = paragraph.split(/\s+/).filter(Boolean);
+    if (words.length === 0) {
+      out.push("");
+      continue;
+    }
+    let line = "";
+    for (const word of words) {
+      if (line && line.length + 1 + word.length > width) {
+        out.push(line);
+        line = word;
+      } else {
+        line = line ? `${line} ${word}` : word;
+      }
+    }
+    if (line) out.push(line);
+  }
+  return out;
+}
+
 // ../../packages/core/src/constants.ts
 var DEFAULT_IMAGE_REGISTRY = "ghcr.io/oblien";
 
@@ -1133,62 +1258,6 @@ var SYSTEM = {
   }
 };
 
-// ../../packages/core/src/utils.ts
-var REDIRECT_STATUSES = [301, 302, 307, 308];
-var DEFAULT_REDIRECT_STATUS = 301;
-function resolveRedirectStatus(status) {
-  return REDIRECT_STATUSES.includes(status) ? status : DEFAULT_REDIRECT_STATUS;
-}
-function isValidEmail(value) {
-  const email3 = value?.trim() ?? "";
-  if (!email3 || email3.length > 254) return false;
-  return /^[A-Za-z0-9._%+-]+@[A-Za-z0-9-]+(\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,}$/.test(email3);
-}
-function formatBytes(bytes, decimals = 2) {
-  if (bytes <= 0) return "0 B";
-  const k = 1024;
-  const sizes = ["B", "KB", "MB", "GB", "TB"];
-  const i = Math.min(Math.max(Math.floor(Math.log(bytes) / Math.log(k)), 0), sizes.length - 1);
-  return `${parseFloat((bytes / Math.pow(k, i)).toFixed(decimals))} ${sizes[i]}`;
-}
-function withTimeout(promise2, ms, message) {
-  if (!ms) return promise2;
-  return new Promise((resolve, reject) => {
-    const timer = setTimeout(() => reject(new Error(message)), ms);
-    promise2.then(
-      (v) => {
-        clearTimeout(timer);
-        resolve(v);
-      },
-      (e) => {
-        clearTimeout(timer);
-        reject(e);
-      }
-    );
-  });
-}
-function wrapText(text, width = 88) {
-  const out = [];
-  for (const paragraph of text.split("\n")) {
-    const words = paragraph.split(/\s+/).filter(Boolean);
-    if (words.length === 0) {
-      out.push("");
-      continue;
-    }
-    let line = "";
-    for (const word of words) {
-      if (line && line.length + 1 + word.length > width) {
-        out.push(line);
-        line = word;
-      } else {
-        line = line ? `${line} ${word}` : word;
-      }
-    }
-    if (line) out.push(line);
-  }
-  return out;
-}
-
 // ../../packages/core/src/errors.ts
 var AppError = class extends Error {
   constructor(message, statusCode = 500, code) {
@@ -2482,6 +2551,104 @@ function hostFirewallRuleRemoval(firewall, cidrs, port) {
 
 // ../../packages/core/src/compose-spec.ts
 var asIs = (s) => s;
+var REMOTE_BUILD_CONTEXT_RE = /^(?:[A-Za-z][A-Za-z0-9+.-]*:\/\/|[^@\s]+@[^:\s]+:)/;
+var ABSOLUTE_BUILD_CONTEXT_RE = /^(?:[\\/]|~(?:[\\/]|$)|[A-Za-z]:[\\/]|\\\\)/;
+function composeOptionRequestsSomething(value) {
+  if (value === void 0 || value === null || value === false || value === "" || value === 0) {
+    return false;
+  }
+  if (Array.isArray(value)) return value.length > 0;
+  if (typeof value === "object") return Object.keys(value).length > 0;
+  return true;
+}
+function composeBuildIssues(build, options = {}) {
+  if (build === void 0 || build === null) return [];
+  const issues = [];
+  const block = (field, reason) => issues.push({ field, reason, blocking: true });
+  const validateContext = (context) => {
+    const resolved = (options.interpolate?.(context) ?? context).trim();
+    if (!resolved) {
+      block("build.context", "build.context must not be empty.");
+    } else if (REMOTE_BUILD_CONTEXT_RE.test(resolved)) {
+      block(
+        "build.context",
+        "build.context uses a remote URL, which Openship cannot build as a repository-relative context."
+      );
+    } else if (!options.allowAbsoluteContext && ABSOLUTE_BUILD_CONTEXT_RE.test(resolved)) {
+      block(
+        "build.context",
+        "build.context is absolute or home-relative; Openship requires a path inside the linked repository."
+      );
+    }
+  };
+  if (typeof build === "string") {
+    validateContext(build);
+    return issues;
+  }
+  if (typeof build !== "object" || Array.isArray(build)) {
+    block("build", "build must be a context string or an object.");
+    return issues;
+  }
+  const value = build;
+  if (value.context !== void 0) {
+    if (typeof value.context !== "string") {
+      block("build.context", "build.context must be a string.");
+    } else {
+      validateContext(value.context);
+    }
+  }
+  if (value.dockerfile !== void 0) {
+    if (typeof value.dockerfile !== "string") {
+      block("build.dockerfile", "build.dockerfile must be a string.");
+    } else {
+      const dockerfile = (options.interpolate?.(value.dockerfile) ?? value.dockerfile).trim();
+      if (!dockerfile) {
+        block("build.dockerfile", "build.dockerfile must not be empty.");
+      } else if (REMOTE_BUILD_CONTEXT_RE.test(dockerfile) || ABSOLUTE_BUILD_CONTEXT_RE.test(dockerfile) || dockerfile.split(/[\\/]/).includes("..")) {
+        block("build.dockerfile", "build.dockerfile must be a path inside its build context.");
+      }
+    }
+  }
+  const args = value.args;
+  if (args !== void 0) {
+    if (Array.isArray(args)) {
+      args.forEach((entry, index) => {
+        if (typeof entry !== "string") {
+          block(`build.args[${index}]`, "build.args list entries must be strings.");
+          return;
+        }
+        const resolvedEntry = options.interpolate?.(entry) ?? entry;
+        const equals = resolvedEntry.indexOf("=");
+        const key = (equals >= 0 ? resolvedEntry.slice(0, equals) : resolvedEntry).trim();
+        if (!isValidEnvKey(key)) {
+          block(`build.args[${index}]`, "build.args contains an invalid argument name.");
+        }
+      });
+    } else if (args && typeof args === "object") {
+      for (const [key, argValue] of Object.entries(args)) {
+        if (!isValidEnvKey(key)) {
+          block("build.args", "build.args contains an invalid argument name.");
+        }
+        if (argValue !== null && argValue !== void 0 && !["string", "number", "boolean"].includes(typeof argValue)) {
+          block(`build.args.${key}`, "build.args values must be scalar or null.");
+        }
+      }
+    } else {
+      block("build.args", "build.args must be a list of strings or a scalar/null map.");
+    }
+  }
+  const modeled = /* @__PURE__ */ new Set(["context", "dockerfile", "args"]);
+  for (const [key, optionValue] of Object.entries(value)) {
+    if (modeled.has(key) || /^x-/i.test(key) || !composeOptionRequestsSomething(optionValue)) {
+      continue;
+    }
+    block(
+      `build.${key}`,
+      `build.${key} is not supported; ignoring it could change the produced image or omit requested build behavior.`
+    );
+  }
+  return issues;
+}
 function composeMountToSpec(mount, interpolate = asIs) {
   const source = mount.source ?? mount.name;
   const target = mount.target;
@@ -2561,57 +2728,6 @@ function isAwsS3Endpoint(endpoint2) {
   return !endpoint2 || endpoint2.includes(".amazonaws.com");
 }
 
-// ../../packages/core/src/shell-split.ts
-function shellQuote(value) {
-  return `'${value.replace(/'/g, "'\\''")}'`;
-}
-function shellSplitWords(value) {
-  const words = [];
-  let current = "";
-  let quoted = false;
-  let inSingle = false;
-  let inDouble = false;
-  let escaped = false;
-  for (const char of value.trim()) {
-    if (escaped) {
-      current += char;
-      escaped = false;
-      continue;
-    }
-    if (char === "\\" && !inSingle) {
-      escaped = true;
-      continue;
-    }
-    if (char === "'" && !inDouble) {
-      inSingle = !inSingle;
-      quoted = true;
-      continue;
-    }
-    if (char === '"' && !inSingle) {
-      inDouble = !inDouble;
-      quoted = true;
-      continue;
-    }
-    if (/\s/.test(char) && !inSingle && !inDouble) {
-      if (current || quoted) {
-        words.push(current);
-        current = "";
-        quoted = false;
-      }
-      continue;
-    }
-    current += char;
-  }
-  if (escaped) current += "\\";
-  if (current || quoted) words.push(current);
-  return words;
-}
-function commandToArgv(command) {
-  if (command == null) return null;
-  if (Array.isArray(command)) return command.map((part) => String(part));
-  return shellSplitWords(command);
-}
-
 // ../../packages/core/src/mail-image-ref.ts
 function buildMailImageRef(opts) {
   return buildImageRef(opts, {
@@ -2621,6 +2737,284 @@ function buildMailImageRef(opts) {
   });
 }
 
+// ../../packages/core/src/backup-catalog.ts
+var PAYLOAD_KINDS = [
+  "pg_dump",
+  "mysql_dump",
+  "redis_rdb",
+  "mongo_dump",
+  "custom_command",
+  "path",
+  "volume"
+];
+var PAYLOAD_CONFIG_KEYS = [
+  "sourceIds",
+  "exclude",
+  "quiesce",
+  "compression",
+  "paths",
+  "clearPath",
+  "produceCommand",
+  "command",
+  "restoreCommand",
+  "artifactName"
+];
+var UNIVERSAL_PAYLOAD_CONFIG_KEYS = ["verifyOnPrepare", "mail"];
+var ALL_PAYLOAD_CONFIG_KEYS = [
+  ...PAYLOAD_CONFIG_KEYS,
+  ...UNIVERSAL_PAYLOAD_CONFIG_KEYS
+];
+var HOUR_MS = 60 * 60 * 1e3;
+var BACKUP_PAYLOADS = {
+  pg_dump: {
+    kind: "pg_dump",
+    label: "PostgreSQL",
+    method: "pg_dump",
+    shape: "database",
+    images: { names: ["postgres", "postgis/postgis"] },
+    restoreNeedsLiveContainer: true,
+    restoreAppliesAfterBounce: false,
+    restoreTimeoutMs: HOUR_MS,
+    // Inert: `pg_restore --clean --if-exists` owns replacement.
+    restoreClearsTargetByDefault: false,
+    // The only kind that can claim this, and only since `producers/pg-dump.ts` restores
+    // under `--single-transaction`. Before that flag, a DROP blocked by a dependent view
+    // was skipped and the archive's rows were loaded ON TOP of the live ones — one table
+    // holding a merge of two points in time, reported as "errors ignored on restore".
+    restoreFailureLeavesTargetIntact: true,
+    requiresRestoreCommand: false,
+    operatorSelectable: true,
+    configKeys: []
+  },
+  mysql_dump: {
+    kind: "mysql_dump",
+    label: "MySQL/MariaDB",
+    method: "mysqldump",
+    shape: "database",
+    // `percona/percona-server` and `percona/percona-server-mongodb` are kept apart by
+    // the `(:|$)` anchor: what follows `percona-server` in the MongoDB image is `-`,
+    // which is neither a tag separator nor the end of the string.
+    images: { names: ["mysql", "mariadb", "percona/percona-server"] },
+    restoreNeedsLiveContainer: true,
+    restoreAppliesAfterBounce: false,
+    restoreTimeoutMs: HOUR_MS,
+    restoreClearsTargetByDefault: false,
+    // MySQL has no transactional DDL: replaying a dump commits each statement as it
+    // goes, so a failure halfway leaves half the schema and part of the data.
+    restoreFailureLeavesTargetIntact: false,
+    requiresRestoreCommand: false,
+    operatorSelectable: true,
+    configKeys: []
+  },
+  redis_rdb: {
+    kind: "redis_rdb",
+    label: "Redis",
+    method: "RDB snapshot",
+    shape: "database",
+    images: { names: ["redis"], namespaces: ["redis"] },
+    restoreNeedsLiveContainer: true,
+    // The one kind whose write is inert until the service restarts. See the field doc.
+    restoreAppliesAfterBounce: true,
+    restoreTimeoutMs: 30 * 60 * 1e3,
+    restoreClearsTargetByDefault: false,
+    // The write is a stream into `dump.rdb`. A failure halfway leaves a TRUNCATED
+    // snapshot — which the running server has not read (see restoreAppliesAfterBounce)
+    // but the next start will, and refuse.
+    restoreFailureLeavesTargetIntact: false,
+    requiresRestoreCommand: false,
+    operatorSelectable: true,
+    configKeys: []
+  },
+  mongo_dump: {
+    kind: "mongo_dump",
+    label: "MongoDB",
+    method: "mongodump",
+    shape: "database",
+    images: { names: ["mongo", "percona/percona-server-mongodb"] },
+    restoreNeedsLiveContainer: true,
+    restoreAppliesAfterBounce: false,
+    restoreTimeoutMs: HOUR_MS,
+    restoreClearsTargetByDefault: false,
+    // `mongorestore --drop` drops and reloads per collection, so a failure between two
+    // collections leaves one restored and the next dropped.
+    restoreFailureLeavesTargetIntact: false,
+    requiresRestoreCommand: false,
+    operatorSelectable: true,
+    configKeys: []
+  },
+  custom_command: {
+    kind: "custom_command",
+    label: "Custom command",
+    method: "your command",
+    shape: "opaque",
+    restoreNeedsLiveContainer: true,
+    restoreAppliesAfterBounce: false,
+    restoreTimeoutMs: HOUR_MS,
+    // Inert: the operator's own inverse command decides what it replaces.
+    restoreClearsTargetByDefault: false,
+    // We cannot reason about someone else's command. `opaque` in, opaque out.
+    restoreFailureLeavesTargetIntact: false,
+    requiresRestoreCommand: true,
+    operatorSelectable: true,
+    configKeys: ["produceCommand", "command", "restoreCommand", "artifactName"]
+  },
+  path: {
+    kind: "path",
+    label: "Files and folders",
+    method: "tar",
+    shape: "filesystem",
+    // Explicit-only: a path is something the operator names. Nothing about an image
+    // says "back up /var/www", and guessing would either miss the data or archive an
+    // OS.
+    restoreNeedsLiveContainer: true,
+    restoreAppliesAfterBounce: false,
+    // Matches the docker helper's own absolute ceiling for the volume directions, so
+    // one number covers all three: a tree big enough to need hours to capture needs
+    // hours to restore.
+    restoreTimeoutMs: 6 * HOUR_MS,
+    // Merge, unless the policy sets `clearPath`. A folder is not necessarily this
+    // artifact's alone.
+    restoreClearsTargetByDefault: false,
+    // `tar -x` writes file by file: a failure halfway leaves the tree part-updated,
+    // and with `clearPath` set it leaves it part-updated on top of an emptied folder.
+    restoreFailureLeavesTargetIntact: false,
+    requiresRestoreCommand: false,
+    operatorSelectable: true,
+    configKeys: ["paths", "exclude", "compression", "clearPath"]
+  },
+  volume: {
+    kind: "volume",
+    label: "Volume snapshot",
+    method: "tar",
+    shape: "filesystem",
+    // No `images`: this is the fallback the registry uses when nothing else detects,
+    // not a match on anything.
+    //
+    // A volume restore extracts through a SEPARATE helper container mounted on the
+    // volume, so it is the only kind that can restore into a service whose container
+    // is gone — or that never deployed.
+    restoreNeedsLiveContainer: false,
+    restoreAppliesAfterBounce: false,
+    restoreTimeoutMs: 6 * HOUR_MS,
+    // Replace: a volume is a single-purpose store, so a merge would leave files this
+    // artifact never held.
+    restoreClearsTargetByDefault: true,
+    // Clear-then-extract, and the clear happens in the helper's PRELUDE — so by the
+    // time any error escapes, the volume is already empty. This is the case the
+    // orchestrator's old inference was built around, and it is still exactly right.
+    restoreFailureLeavesTargetIntact: false,
+    requiresRestoreCommand: false,
+    operatorSelectable: true,
+    configKeys: ["sourceIds", "exclude", "quiesce", "compression"]
+  }
+};
+function payloadSpec(kind) {
+  const spec = BACKUP_PAYLOADS[kind];
+  if (!spec) {
+    throw new Error(
+      `Unknown backup payload kind "${kind}". Known kinds: ${PAYLOAD_KINDS.join(", ")}.`
+    );
+  }
+  return spec;
+}
+function payloadSpecs() {
+  return PAYLOAD_KINDS.map((k) => BACKUP_PAYLOADS[k]);
+}
+function imageDetectableSpecs() {
+  return payloadSpecs().filter(
+    (s) => !!s.images
+  );
+}
+var SYSTEM_ROOTS = [
+  "/bin",
+  "/boot",
+  "/dev",
+  "/etc",
+  "/lib",
+  "/lib32",
+  "/lib64",
+  "/libx32",
+  "/proc",
+  "/root",
+  "/run",
+  "/sbin",
+  "/sys",
+  "/usr",
+  "/var"
+];
+function normalizeBackupPath(input) {
+  const collapsed = input.trim().replace(/\/{2,}/g, "/");
+  if (collapsed === "/") return "/";
+  return collapsed.replace(/\/+$/, "");
+}
+function validateBackupPath(input) {
+  const path = normalizeBackupPath(input);
+  if (path === "") return "A backup path cannot be empty.";
+  if (!path.startsWith("/")) {
+    return `Backup path "${input}" must be absolute \u2014 it is resolved inside the service, where there is no meaningful working directory.`;
+  }
+  if (path.includes("\0")) return `Backup path "${input}" contains a NUL byte.`;
+  if (path.split("/").includes("..")) {
+    return `Backup path "${input}" contains "..". Name the directory you mean directly; a traversal segment would archive somewhere other than what is shown here.`;
+  }
+  if (path === "/") {
+    return "Refusing to archive `/` \u2014 that is the whole filesystem, including /proc and /sys. Name the data directory instead.";
+  }
+  return null;
+}
+function validateClearPath(input) {
+  const path = normalizeBackupPath(input);
+  const invalid = validateBackupPath(path);
+  if (invalid) return invalid;
+  const segments = path.split("/").filter(Boolean);
+  if (segments.length < 2) {
+    return `Refusing to clear "${path}" before restoring: it is a top-level directory. Name a subdirectory, or leave clearing off so the restore extracts over the existing files.`;
+  }
+  const top = `/${segments[0]}`;
+  if (SYSTEM_ROOTS.includes(top)) {
+    return `Refusing to clear "${path}" before restoring: it is inside ${top}, which holds the operating system rather than your data. Leave clearing off, or restore into a path you own.`;
+  }
+  return null;
+}
+
+// ../../packages/core/src/backup-image-detect.ts
+var escapeRe = (n) => n.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+function matcherFor(names, namespaces = []) {
+  const exact = `^(?:${names.map(escapeRe).join("|")})(?::|$)`;
+  if (namespaces.length === 0) return new RegExp(exact, "i");
+  return new RegExp(`${exact}|^(?:${namespaces.map(escapeRe).join("|")})/`, "i");
+}
+var MATCHERS = imageDetectableSpecs().map(
+  (spec) => ({
+    re: matcherFor(spec.images.names, spec.images.namespaces),
+    match: { payloadKind: spec.kind, label: spec.label, method: spec.method }
+  })
+);
+function normalizeImageRef(image) {
+  let ref = image.trim();
+  const at = ref.indexOf("@");
+  if (at > 0) ref = ref.slice(0, at);
+  const parts = ref.split("/");
+  const first = parts[0] ?? "";
+  if (parts.length > 1 && (first.includes(".") || first.includes(":") || first === "localhost")) {
+    parts.shift();
+  }
+  const library = parts.lastIndexOf("library");
+  if (library >= 0 && library < parts.length - 1) parts.splice(0, library + 1);
+  return parts.join("/");
+}
+function detectDbImage(image) {
+  const img = normalizeImageRef(image ?? "");
+  if (!img) return null;
+  for (const { re, match } of MATCHERS) {
+    if (re.test(img)) return match;
+  }
+  return null;
+}
+function isDbImage(image, kind) {
+  return detectDbImage(image)?.payloadKind === kind;
+}
+
 // ../../packages/core/src/runtime-config.ts
 var DEFAULT_PORT = {
   web: 3e3,
@@ -5809,6 +6203,7 @@ COMMIT;
     {
       available: true,
       verified: true,
+      minEngine: "0.6.6",
       id: "minio",
       name: "MinIO",
       description: "S3-compatible object storage with a web console \u2014 point any S3 client (aws-cli, SDKs) at it, or bind a bucket straight into another project's uploads.",
@@ -6303,6 +6698,7 @@ COMMIT;
     {
       available: true,
       verified: false,
+      minEngine: "0.6.6",
       minResources: {
         memoryMb: 4096,
         cpuCores: 2
@@ -6484,6 +6880,7 @@ Two things worth knowing, both upstream behaviour: if the console shows a branch
     {
       available: true,
       verified: false,
+      minEngine: "0.6.6",
       minResources: {
         memoryMb: 16384,
         cpuCores: 4
@@ -7306,6 +7703,7 @@ Two things worth knowing, both upstream behaviour: if the console shows a branch
     {
       available: true,
       verified: false,
+      minEngine: "0.6.6",
       id: "redis",
       name: "Valkey (Redis)",
       description: "In-memory data store for caching, sessions, rate limits, and queues \u2014 Valkey, the open-source Redis fork. Drop-in Redis-compatible: point any redis client at it. Ships with RedisInsight, a browser UI that arrives already connected to this instance.",
@@ -7784,6 +8182,7 @@ Two things worth knowing, both upstream behaviour: if the console shows a branch
     {
       available: true,
       verified: false,
+      minEngine: "0.6.6",
       id: "clickhouse",
       name: "ClickHouse",
       description: "The columnar SQL database for analytics \u2014 billions of rows scanned per second. Ships with the CH-UI console, so you get a SQL editor, schema browser and dashboards the moment it installs: sign in with the ClickHouse user and password below, no extra setup.",
@@ -7958,96 +8357,268 @@ Two things worth knowing, both upstream behaviour: if the console shows a branch
             help: "ClickHouse's HTTP interface (port 8123) \u2014 what clickhouse-connect, clickhouse-js, the JDBC/ODBC drivers and plain curl talk to. Send the user and password as basic auth. Switch to Internal for apps on the same project network; Public only resolves if you gave this port a domain."
           },
           {
-            id: "httpDsn",
-            label: "HTTP DSN",
-            source: "template:http://{{env:clickhouse:CLICKHOUSE_USER}}:{{env:clickhouse:CLICKHOUSE_PASSWORD}}@clickhouse:8123/{{env:clickhouse:CLICKHOUSE_DB}}",
-            sourceLabel: "Internal",
-            service: "clickhouse",
-            secret: true,
-            envKey: "CLICKHOUSE_HTTP_DSN",
+            id: "httpDsn",
+            label: "HTTP DSN",
+            source: "template:http://{{env:clickhouse:CLICKHOUSE_USER}}:{{env:clickhouse:CLICKHOUSE_PASSWORD}}@clickhouse:8123/{{env:clickhouse:CLICKHOUSE_DB}}",
+            sourceLabel: "Internal",
+            service: "clickhouse",
+            secret: true,
+            envKey: "CLICKHOUSE_HTTP_DSN",
+            recommended: true,
+            help: "One string with the credentials baked in, over the private project network. For a client outside this server, use the public HTTP endpoint above plus the user and password."
+          },
+          {
+            id: "nativeDsn",
+            label: "Native TCP DSN",
+            source: "template:clickhouse://{{env:clickhouse:CLICKHOUSE_USER}}:{{env:clickhouse:CLICKHOUSE_PASSWORD}}@clickhouse:9000/{{env:clickhouse:CLICKHOUSE_DB}}",
+            sourceLabel: "Internal",
+            service: "clickhouse",
+            secret: true,
+            envKey: "CLICKHOUSE_DSN",
+            help: "ClickHouse's native protocol (port 9000) \u2014 faster and what clickhouse-client, clickhouse-go and clickhouse-driver prefer. Reachable from inside the project only; the port is never published to the host."
+          },
+          {
+            id: "user",
+            label: "User",
+            source: "env:clickhouse:CLICKHOUSE_USER",
+            service: "clickhouse",
+            envKey: "CLICKHOUSE_USER",
+            recommended: true,
+            width: "half"
+          },
+          {
+            id: "password",
+            label: "Password",
+            source: "env:clickhouse:CLICKHOUSE_PASSWORD",
+            service: "clickhouse",
+            envKey: "CLICKHOUSE_PASSWORD",
+            secret: true,
+            recommended: true,
+            width: "half"
+          },
+          {
+            id: "database",
+            label: "Database",
+            source: "env:clickhouse:CLICKHOUSE_DB",
+            service: "clickhouse",
+            envKey: "CLICKHOUSE_DATABASE",
+            width: "half"
+          }
+        ]
+      },
+      provides: [
+        {
+          id: "clickhouse",
+          outputRefs: [
+            "httpUrl",
+            "httpDsn",
+            "user",
+            "password",
+            "database"
+          ],
+          category: "database"
+        }
+      ],
+      endpoints: [
+        {
+          service: "ch-ui",
+          port: 3488,
+          label: "Console",
+          kind: "http",
+          required: true,
+          scope: "public",
+          defaultMode: "domain"
+        },
+        {
+          service: "clickhouse",
+          port: 8123,
+          label: "HTTP API",
+          kind: "http",
+          scope: "public",
+          defaultMode: "port"
+        },
+        {
+          service: "clickhouse",
+          port: 9e3,
+          label: "Native protocol",
+          kind: "tcp",
+          scope: "internal",
+          defaultMode: "internal",
+          allowedModes: [
+            "internal"
+          ]
+        }
+      ]
+    },
+    {
+      available: true,
+      verified: true,
+      id: "mindwire",
+      name: "MindWire",
+      description: "Run coding-agent runtimes behind a self-hosted control plane. MindWire keeps the runtime private and gives you one console to manage agents, credentials, and sessions.",
+      repository: "https://github.com/oblien/mindwire",
+      kind: "template",
+      logo: "mindwire",
+      category: "automation",
+      tags: [
+        "ai",
+        "agents",
+        "coding",
+        "control-plane"
+      ],
+      framework: "docker-compose",
+      services: [
+        {
+          name: "runtime",
+          image: "ghcr.io/oblien/mindwire-runtime:0.1.3",
+          environment: {
+            ADDR: "0.0.0.0:8790",
+            AGENT_TYPE: "claude-code",
+            DAEMON_TOKEN: "{{config:MINDWIRE_RUNTIME_TOKEN}}"
+          },
+          secretEnv: [
+            "DAEMON_TOKEN"
+          ],
+          volumes: [
+            "mindwire_runtime:/home/node"
+          ],
+          restart: "unless-stopped"
+        },
+        {
+          name: "console",
+          image: "ghcr.io/oblien/mindwire-console:0.1.3",
+          exposedPort: 8787,
+          exposed: true,
+          routes: [
+            {
+              port: 8787
+            }
+          ],
+          dependsOn: [
+            "runtime"
+          ],
+          environment: {
+            NODE_ENV: "production",
+            PORT: "8787",
+            BASE_URL: "{{publicUrl:console}}",
+            AUTH_DB_PATH: "/data/auth.db",
+            CONSOLE_MODE: "self-hosted",
+            CONSOLE_USERNAME: "{{config:CONSOLE_USERNAME}}",
+            CONSOLE_PASSWORD: "{{config:CONSOLE_PASSWORD}}",
+            AUTH_SECRET: "{{config:AUTH_SECRET}}",
+            SECRETS_ENCRYPTION_KEY: "{{config:SECRETS_ENCRYPTION_KEY}}",
+            ALLOW_LOCAL_RUNTIME: "true",
+            ALLOW_SSH_RUNTIME: "true",
+            ALLOW_DOCKER_RUNTIME: "true",
+            ALLOW_REMOTE_RUNTIME: "true",
+            DAEMON_URL: "http://runtime:8790",
+            MINDWIRE_RUNTIME_TOKEN: "{{config:MINDWIRE_RUNTIME_TOKEN}}",
+            SEED_DEFAULT_DAEMON: "true"
+          },
+          secretEnv: [
+            "CONSOLE_PASSWORD",
+            "AUTH_SECRET",
+            "SECRETS_ENCRYPTION_KEY",
+            "MINDWIRE_RUNTIME_TOKEN"
+          ],
+          volumes: [
+            "mindwire_console:/data"
+          ],
+          healthcheck: {
+            test: [
+              "CMD-SHELL",
+              `node -e "fetch('http://127.0.0.1:8787/api/ping').then(r => process.exit(r.ok ? 0 : 1)).catch(() => process.exit(1))"`
+            ],
+            interval: "10s",
+            timeout: "5s",
+            retries: 12,
+            startPeriod: "20s"
+          },
+          restart: "unless-stopped"
+        }
+      ],
+      configFields: [
+        {
+          key: "CONSOLE_USERNAME",
+          service: "console",
+          label: "Console username",
+          help: "The single owner account for this self-hosted console.",
+          default: "admin",
+          required: true
+        },
+        {
+          key: "CONSOLE_PASSWORD",
+          service: "console",
+          label: "Console password",
+          help: "Auto-generated. Use this with the owner username to sign in.",
+          type: "password",
+          generate: "secret",
+          secret: true
+        },
+        {
+          key: "AUTH_SECRET",
+          service: "console",
+          label: "Session signing secret",
+          help: "Auto-generated. Keep it stable so existing sign-in sessions remain valid after upgrades.",
+          generate: "secret",
+          secret: true
+        },
+        {
+          key: "SECRETS_ENCRYPTION_KEY",
+          service: "console",
+          label: "Credential vault key",
+          help: "Auto-generated 32-byte key used to encrypt provider and runtime credentials at rest.",
+          generate: "secret",
+          secret: true
+        },
+        {
+          key: "MINDWIRE_RUNTIME_TOKEN",
+          service: "runtime",
+          label: "Runtime bearer token",
+          help: "Auto-generated. Authenticates the Console to the private MindWire runtime.",
+          generate: "secret",
+          secret: true
+        }
+      ],
+      management: {
+        kind: "schema"
+      },
+      connection: {
+        title: "Sign in to MindWire",
+        description: "Open the Console and sign in with the generated owner credentials. The runtime stays private to this deployment.",
+        guide: {
+          intro: "MindWire gives you a production control plane for coding-agent runtimes without exposing the runtime API to the public internet.",
+          defaultMode: "public"
+        },
+        outputs: [
+          {
+            id: "console",
+            label: "MindWire Console",
+            source: "publicUrl:console",
+            kind: "url",
             recommended: true,
-            help: "One string with the credentials baked in, over the private project network. For a client outside this server, use the public HTTP endpoint above plus the user and password."
-          },
-          {
-            id: "nativeDsn",
-            label: "Native TCP DSN",
-            source: "template:clickhouse://{{env:clickhouse:CLICKHOUSE_USER}}:{{env:clickhouse:CLICKHOUSE_PASSWORD}}@clickhouse:9000/{{env:clickhouse:CLICKHOUSE_DB}}",
-            sourceLabel: "Internal",
-            service: "clickhouse",
-            secret: true,
-            envKey: "CLICKHOUSE_DSN",
-            help: "ClickHouse's native protocol (port 9000) \u2014 faster and what clickhouse-client, clickhouse-go and clickhouse-driver prefer. Reachable from inside the project only; the port is never published to the host."
+            help: "Open the control plane in your browser."
           },
           {
-            id: "user",
-            label: "User",
-            source: "env:clickhouse:CLICKHOUSE_USER",
-            service: "clickhouse",
-            envKey: "CLICKHOUSE_USER",
-            recommended: true,
-            width: "half"
+            id: "username",
+            label: "Owner username",
+            source: "env:console:CONSOLE_USERNAME"
           },
           {
             id: "password",
-            label: "Password",
-            source: "env:clickhouse:CLICKHOUSE_PASSWORD",
-            service: "clickhouse",
-            envKey: "CLICKHOUSE_PASSWORD",
-            secret: true,
-            recommended: true,
-            width: "half"
-          },
-          {
-            id: "database",
-            label: "Database",
-            source: "env:clickhouse:CLICKHOUSE_DB",
-            service: "clickhouse",
-            envKey: "CLICKHOUSE_DATABASE",
-            width: "half"
+            label: "Owner password",
+            source: "env:console:CONSOLE_PASSWORD",
+            secret: true
           }
         ]
       },
-      provides: [
-        {
-          id: "clickhouse",
-          outputRefs: [
-            "httpUrl",
-            "httpDsn",
-            "user",
-            "password",
-            "database"
-          ],
-          category: "database"
-        }
-      ],
       endpoints: [
         {
-          service: "ch-ui",
-          port: 3488,
-          label: "Console",
+          service: "console",
+          port: 8787,
+          label: "MindWire Console",
           kind: "http",
-          required: true,
-          scope: "public",
           defaultMode: "domain"
-        },
-        {
-          service: "clickhouse",
-          port: 8123,
-          label: "HTTP API",
-          kind: "http",
-          scope: "public",
-          defaultMode: "port"
-        },
-        {
-          service: "clickhouse",
-          port: 9e3,
-          label: "Native protocol",
-          kind: "tcp",
-          scope: "internal",
-          defaultMode: "internal",
-          allowedModes: [
-            "internal"
-          ]
         }
       ]
     }
@@ -22928,6 +23499,25 @@ var planLimitsSchema = external_exports.object({
    * `null` = uncapped (enterprise).
    */
   maxResourceTier: external_exports.enum(RESOURCE_TIER_ORDER).nullable(),
+  /**
+   * App runtime included per month, in COMPUTE MINUTES — one minute of a `low`
+   * machine. Bigger machines burn proportionally more (`computeUnitsPerMinute`:
+   * medium 2×, high 4×, xlarge 8×), so one published number covers every size
+   * without quoting a separate allowance per tier of machine.
+   *
+   * This replaced an authored `credits` blob whose numbers meant nothing: 60,000
+   * credits against a 43,200-minute month, on a tier advertising 50 running
+   * services — i.e. not enough to run ONE app around the clock. The unit now has
+   * a definition, and `planMonthlyCredits()` derives the Oblien grant from it.
+   *
+   * `runningServices` is a CONCURRENCY cap, this is the METER. A tier may allow
+   * more always-on apps than its minutes cover; that is what "up to" means and is
+   * how metered compute works everywhere.
+   *
+   * 0 is meaningful and correct for a static-only tier: the edge serves static
+   * sites, `runningServices` is already 0, so no app compute is consumed.
+   */
+  computeMinutesPerMonth: limitNumber,
   buildMinutesPerMonth: limitNumber,
   freeSubdomains: limitNumber,
   customDomains: limitNumber,
@@ -22949,10 +23539,6 @@ var planSchema = external_exports.object({
   support: external_exports.enum(["community", "email", "priority", "dedicated"]),
   /** Tier whose features this one builds on — drives the "Everything in X" line. */
   inherits: external_exports.string().min(1).optional(),
-  credits: external_exports.object({
-    /** Milli-credits granted per period; null = granted by hand (enterprise). */
-    monthlyMilli: external_exports.number().int().positive().nullable()
-  }),
   limits: planLimitsSchema,
   /** Copy keys, in display order. Each must exist in `locales/en.json#features`. */
   features: external_exports.array(external_exports.string().min(1)).min(1)
@@ -23025,6 +23611,20 @@ var pricingCatalogSchema = external_exports.object({
   campaigns: external_exports.array(campaignSchema),
   plans: external_exports.array(planSchema).min(1),
   creditPacks: external_exports.array(creditPackSchema),
+  /**
+   * Copy for what EVERY cloud tier includes, stated once instead of repeated
+   * down each column.
+   *
+   * This exists because the per-tier lists had become the differentiator, and
+   * they were differentiating on nothing: the audit log, live logs and metrics
+   * are ungated for everyone, so listing them only under Team implied a paywall
+   * that no code enforces. A tier's bullets are now its NUMBERS; anything true
+   * everywhere belongs here.
+   *
+   * Only put a key here that is actually shipped and reachable on cloud — the
+   * defect this block replaces was advertising capability, not describing it.
+   */
+  standard: external_exports.object({ features: external_exports.array(external_exports.string().min(1)).min(1) }),
   selfHosted: external_exports.object({ features: external_exports.array(external_exports.string().min(1)).min(1) })
 }).superRefine((data, ctx) => {
   if (data.schemaVersion > MAX_SUPPORTED_PRICING_SCHEMA) {
@@ -23123,7 +23723,13 @@ var pricingCopySchema = external_exports.object({
     billedMonthly: external_exports.string(),
     campaignBadge: external_exports.string(),
     campaignEnds: external_exports.string(),
-    wasPrice: external_exports.string()
+    wasPrice: external_exports.string(),
+    /** Heading over the `standard.features` block. Lives here, not in an app
+     *  dictionary, because the marketing site has no i18n framework. */
+    standardTitle: external_exports.string(),
+    /** What a top-up pack buys, in recognisable units. Interpolates
+     *  `{appHours}` and `{buildMinutes}`, both derived from the catalog. */
+    creditPackNote: external_exports.string()
   }).partial().optional()
 });
 
@@ -23159,9 +23765,6 @@ var pricing_default = {
       popular: false,
       contactSales: null,
       support: "community",
-      credits: {
-        monthlyMilli: 5e5
-      },
       limits: {
         workloads: [
           "static"
@@ -23170,7 +23773,8 @@ var pricing_default = {
         runningServices: 0,
         maxProjects: 3,
         maxResourceTier: "low",
-        buildMinutesPerMonth: 15,
+        computeMinutesPerMonth: 0,
+        buildMinutesPerMonth: 500,
         freeSubdomains: 10,
         customDomains: null,
         seats: null
@@ -23178,10 +23782,8 @@ var pricing_default = {
       features: [
         "staticOnly",
         "buildMinutes",
-        "freeSubdomains",
-        "customDomains",
         "projects",
-        "unlimitedSeats",
+        "freeSubdomains",
         "communitySupport"
       ]
     },
@@ -23199,9 +23801,6 @@ var pricing_default = {
       contactSales: null,
       support: "email",
       inherits: "free",
-      credits: {
-        monthlyMilli: 2e6
-      },
       limits: {
         workloads: [
           "static",
@@ -23210,9 +23809,10 @@ var pricing_default = {
         ],
         services: true,
         runningServices: 3,
-        maxProjects: 5,
+        maxProjects: 10,
         maxResourceTier: "medium",
-        buildMinutesPerMonth: 400,
+        computeMinutesPerMonth: 15e4,
+        buildMinutesPerMonth: 3e3,
         freeSubdomains: 25,
         customDomains: null,
         seats: null
@@ -23220,15 +23820,11 @@ var pricing_default = {
       features: [
         "everythingIn",
         "anyWorkload",
-        "managedServices",
         "runningServices",
+        "computeMinutes",
+        "buildMinutes",
         "power",
         "projects",
-        "buildMinutes",
-        "credits",
-        "meteredCredits",
-        "freeSubdomains",
-        "previewDeploys",
         "emailSupport"
       ]
     },
@@ -23246,9 +23842,6 @@ var pricing_default = {
       contactSales: null,
       support: "priority",
       inherits: "starter",
-      credits: {
-        monthlyMilli: 1e7
-      },
       limits: {
         workloads: [
           "static",
@@ -23257,9 +23850,10 @@ var pricing_default = {
         ],
         services: true,
         runningServices: 10,
-        maxProjects: 25,
+        maxProjects: 50,
         maxResourceTier: "high",
-        buildMinutesPerMonth: 2e3,
+        computeMinutesPerMonth: 6e5,
+        buildMinutesPerMonth: 12e3,
         freeSubdomains: 100,
         customDomains: null,
         seats: null
@@ -23267,15 +23861,10 @@ var pricing_default = {
       features: [
         "everythingIn",
         "runningServices",
+        "computeMinutes",
+        "buildMinutes",
         "power",
         "projects",
-        "buildMinutes",
-        "credits",
-        "meteredCredits",
-        "freeSubdomains",
-        "backups",
-        "observability",
-        "mailServer",
         "prioritySupport"
       ]
     },
@@ -23293,9 +23882,6 @@ var pricing_default = {
       contactSales: null,
       support: "priority",
       inherits: "pro",
-      credits: {
-        monthlyMilli: 6e7
-      },
       limits: {
         workloads: [
           "static",
@@ -23306,7 +23892,8 @@ var pricing_default = {
         runningServices: 50,
         maxProjects: null,
         maxResourceTier: "xlarge",
-        buildMinutesPerMonth: 6e3,
+        computeMinutesPerMonth: 22e5,
+        buildMinutesPerMonth: 36e3,
         freeSubdomains: null,
         customDomains: null,
         seats: null
@@ -23314,14 +23901,11 @@ var pricing_default = {
       features: [
         "everythingIn",
         "runningServices",
+        "computeMinutes",
+        "buildMinutes",
         "power",
         "projectsUnlimited",
-        "buildMinutes",
-        "credits",
-        "meteredCredits",
         "freeSubdomainsUnlimited",
-        "auditLog",
-        "sharedChannel",
         "prioritySupport"
       ]
     },
@@ -23339,9 +23923,6 @@ var pricing_default = {
       contactSales: "mailto:sales@openship.io",
       support: "dedicated",
       inherits: "team",
-      credits: {
-        monthlyMilli: null
-      },
       limits: {
         workloads: [
           "static",
@@ -23352,6 +23933,7 @@ var pricing_default = {
         runningServices: null,
         maxProjects: null,
         maxResourceTier: null,
+        computeMinutesPerMonth: null,
         buildMinutesPerMonth: null,
         freeSubdomains: null,
         customDomains: null,
@@ -23390,6 +23972,15 @@ var pricing_default = {
       sortOrder: 30
     }
   ],
+  standard: {
+    features: [
+      "gitDeploys",
+      "customDomains",
+      "deployLogs",
+      "auditLog",
+      "unlimitedSeats"
+    ]
+  },
   selfHosted: {
     features: [
       "selfHostedOpenSource",
@@ -23429,20 +24020,20 @@ var en_default2 = {
   features: {
     everythingIn: "Everything in {inherited}, plus:",
     staticOnly: "Static sites only \u2014 SSG, SPA, and plain HTML",
-    anyWorkload: "Run anything \u2014 containers, Compose stacks, and workers",
-    managedServices: "Managed Postgres, Redis, and the full app catalog",
+    anyWorkload: "Run anything \u2014 containers, Compose, workers, Postgres, Redis",
+    runningServices: "{runningServices} running apps, databases or workers",
+    computeMinutes: "{computeMinutes} compute minutes per month",
     buildMinutes: "{buildMinutes} build minutes per month",
-    credits: "{credits} compute credits per month",
+    power: "Up to {powerCpu} vCPU and {powerRamGb} GB RAM per app",
+    projects: "{maxProjects} projects",
+    projectsUnlimited: "Unlimited projects",
     freeSubdomains: "{freeSubdomains} free {freeDomainSuffix} subdomains",
     freeSubdomainsUnlimited: "Unlimited free {freeDomainSuffix} subdomains",
+    gitDeploys: "Deploy from GitHub, GitLab, or any Git remote",
     customDomains: "Unlimited custom domains, TLS included",
+    deployLogs: "Live build and deploy logs",
+    auditLog: "Audit log of every change",
     unlimitedSeats: "Unlimited team members \u2014 never pay per seat",
-    previewDeploys: "Preview deploys on every push",
-    backups: "Daily backups with point-in-time recovery",
-    observability: "Live logs, metrics, and health alerts",
-    mailServer: "Built-in mail server \u2014 SMTP, IMAP, and webmail",
-    auditLog: "Audit log with extended retention",
-    sharedChannel: "Shared Slack or Discord channel",
     sso: "SSO and SAML",
     customLimits: "Custom limits, negotiated per contract",
     dedicatedInfra: "Dedicated infrastructure and regions",
@@ -23455,12 +24046,7 @@ var en_default2 = {
     selfHostedUnlimited: "Unlimited deploys, projects, servers, and domains",
     selfHostedServices: "Every managed service \u2014 Postgres, Redis, mail",
     selfHostedClients: "CLI, web, and desktop \u2014 one backend",
-    selfHostedFreeSubdomains: "{freeSubdomains} free {freeDomainSuffix} subdomains when you connect to Cloud",
-    runningServices: "{runningServices} running services \u2014 apps, databases, workers",
-    power: "Up to {powerCpu} vCPU and {powerRamGb} GB RAM per service",
-    projects: "{maxProjects} projects",
-    projectsUnlimited: "Unlimited projects",
-    meteredCredits: "Compute, bandwidth and storage all draw from your monthly credits"
+    selfHostedFreeSubdomains: "{freeSubdomains} free {freeDomainSuffix} subdomains when you connect to Cloud"
   },
   selfHosted: {
     name: "Self-hosted",
@@ -23470,9 +24056,9 @@ var en_default2 = {
     cta: "Start self-hosting"
   },
   creditPacks: {
-    pack_5k: "{credits} credits",
-    pack_25k: "{credits} credits",
-    pack_100k: "{credits} credits"
+    pack_5k: "{computeMinutes} compute minutes",
+    pack_25k: "{computeMinutes} compute minutes",
+    pack_100k: "{computeMinutes} compute minutes"
   },
   ui: {
     perMonth: "/mo",
@@ -23488,7 +24074,9 @@ var en_default2 = {
     billedMonthly: "billed monthly, cancel anytime",
     campaignBadge: "{percentOff}% off",
     campaignEnds: "Offer ends {date}",
-    wasPrice: "was {price}"
+    wasPrice: "was {price}",
+    standardTitle: "In every plan",
+    creditPackNote: "\u2248 {appHours} hours of a small app, or {buildMinutes} build minutes"
   }
 };
 
@@ -23519,20 +24107,20 @@ var ar_default2 = {
   features: {
     everythingIn: "\u0643\u0644 \u0645\u0627 \u0641\u064A \u062E\u0637\u0629 \xAB{inherited}\xBB\u060C \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649:",
     staticOnly: "\u0627\u0644\u0645\u0648\u0627\u0642\u0639 \u0627\u0644\u062B\u0627\u0628\u062A\u0629 \u0641\u0642\u0637 \u2014 SSG \u0648SPA \u0648HTML \u0639\u0627\u062F\u064A",
-    anyWorkload: "\u0634\u063A\u0651\u0644 \u0623\u064A \u0634\u064A\u0621 \u2014 \u062D\u0627\u0648\u064A\u0627\u062A \u0648\u062D\u0650\u0632\u0645 Compose \u0648\u0639\u0645\u0644\u064A\u0627\u062A \u062E\u0644\u0641\u064A\u0629",
-    managedServices: "\u062E\u062F\u0645\u0627\u062A Postgres \u0648Redis \u0645\u064F\u062F\u0627\u0631\u0629\u060C \u0645\u0639 \u0643\u062A\u0627\u0644\u0648\u062C \u0627\u0644\u062A\u0637\u0628\u064A\u0642\u0627\u062A \u0627\u0644\u0643\u0627\u0645\u0644",
+    anyWorkload: "\u0634\u063A\u0651\u0644 \u0623\u064A \u0634\u064A\u0621 \u2014 \u062D\u0627\u0648\u064A\u0627\u062A \u0648Compose \u0648\u0639\u0645\u0644\u064A\u0627\u062A \u062E\u0644\u0641\u064A\u0629 \u0648Postgres \u0648Redis",
+    runningServices: "{runningServices} \u062A\u0637\u0628\u064A\u0642 \u0623\u0648 \u0642\u0627\u0639\u062F\u0629 \u0628\u064A\u0627\u0646\u0627\u062A \u0623\u0648 \u0639\u0645\u0644\u064A\u0629 \u062E\u0644\u0641\u064A\u0629 \u0642\u064A\u062F \u0627\u0644\u062A\u0634\u063A\u064A\u0644",
+    computeMinutes: "{computeMinutes} \u062F\u0642\u064A\u0642\u0629 \u062D\u0648\u0633\u0628\u0629 \u0634\u0647\u0631\u064A\u064B\u0627",
     buildMinutes: "{buildMinutes} \u062F\u0642\u064A\u0642\u0629 \u0628\u0646\u0627\u0621 \u0634\u0647\u0631\u064A\u064B\u0627",
-    credits: "{credits} \u0648\u062D\u062F\u0629 \u0631\u0635\u064A\u062F \u062D\u0648\u0633\u0628\u0629 \u0634\u0647\u0631\u064A\u064B\u0627",
+    power: "\u062D\u062A\u0649 {powerCpu} vCPU \u0648{powerRamGb} GB RAM \u0644\u0643\u0644 \u062A\u0637\u0628\u064A\u0642",
+    projects: "{maxProjects} \u0645\u0634\u0631\u0648\u0639",
+    projectsUnlimited: "\u0645\u0634\u0627\u0631\u064A\u0639 \u063A\u064A\u0631 \u0645\u062D\u062F\u0648\u062F\u0629",
     freeSubdomains: "{freeSubdomains} \u0646\u0637\u0627\u0642 \u0641\u0631\u0639\u064A \u0645\u062C\u0627\u0646\u064A \u0639\u0644\u0649 {freeDomainSuffix}",
     freeSubdomainsUnlimited: "\u0646\u0637\u0627\u0642\u0627\u062A \u0641\u0631\u0639\u064A\u0629 \u0645\u062C\u0627\u0646\u064A\u0629 \u063A\u064A\u0631 \u0645\u062D\u062F\u0648\u062F\u0629 \u0639\u0644\u0649 {freeDomainSuffix}",
+    gitDeploys: "\u0627\u0644\u0646\u0634\u0631 \u0645\u0646 GitHub \u0623\u0648 GitLab \u0623\u0648 \u0623\u064A \u0645\u0633\u062A\u0648\u062F\u0639 Git",
     customDomains: "\u0646\u0637\u0627\u0642\u0627\u062A \u0645\u062E\u0635\u0651\u0635\u0629 \u063A\u064A\u0631 \u0645\u062D\u062F\u0648\u062F\u0629\u060C \u0645\u0639 TLS",
+    deployLogs: "\u0633\u062C\u0644\u0627\u062A \u062D\u064A\u0651\u0629 \u0644\u0644\u0628\u0646\u0627\u0621 \u0648\u0627\u0644\u0646\u0634\u0631",
+    auditLog: "\u0633\u062C\u0644 \u062A\u062F\u0642\u064A\u0642 \u0644\u0643\u0644 \u062A\u063A\u064A\u064A\u0631",
     unlimitedSeats: "\u0623\u0639\u0636\u0627\u0621 \u0641\u0631\u064A\u0642 \u063A\u064A\u0631 \u0645\u062D\u062F\u0648\u062F\u064A\u0646 \u2014 \u0628\u0644\u0627 \u0631\u0633\u0648\u0645 \u0639\u0644\u0649 \u0643\u0644 \u0645\u0633\u062A\u062E\u062F\u0645",
-    previewDeploys: "\u0646\u0634\u0631 \u0645\u0639\u0627\u064A\u0646\u0629 \u0639\u0646\u062F \u0643\u0644 \u062F\u0641\u0639 \u0644\u0644\u0643\u0648\u062F",
-    backups: "\u0646\u0633\u062E \u0627\u062D\u062A\u064A\u0627\u0637\u064A \u064A\u0648\u0645\u064A \u0645\u0639 \u0627\u0633\u062A\u0639\u0627\u062F\u0629 \u0625\u0644\u0649 \u0644\u062D\u0638\u0629 \u0632\u0645\u0646\u064A\u0629 \u0645\u062D\u062F\u0651\u062F\u0629",
-    observability: "\u0633\u062C\u0644\u0627\u062A \u062D\u064A\u0651\u0629 \u0648\u0645\u0642\u0627\u064A\u064A\u0633 \u0648\u062A\u0646\u0628\u064A\u0647\u0627\u062A \u0644\u0635\u062D\u0629 \u0627\u0644\u062E\u062F\u0645\u0629",
-    mailServer: "\u062E\u0627\u062F\u0645 \u0628\u0631\u064A\u062F \u0645\u062F\u0645\u062C \u2014 SMTP \u0648IMAP \u0648\u0628\u0631\u064A\u062F \u0639\u0644\u0649 \u0627\u0644\u0648\u064A\u0628",
-    auditLog: "\u0633\u062C\u0644 \u062A\u062F\u0642\u064A\u0642 \u0628\u0645\u062F\u0629 \u062D\u0641\u0638 \u0645\u0645\u062A\u062F\u0629",
-    sharedChannel: "\u0642\u0646\u0627\u0629 \u0645\u0634\u062A\u0631\u0643\u0629 \u0639\u0644\u0649 Slack \u0623\u0648 Discord",
     sso: "SSO \u0648SAML",
     customLimits: "\u062D\u062F\u0648\u062F \u0645\u062E\u0635\u0651\u0635\u0629 \u064A\u064F\u062A\u0641\u0642 \u0639\u0644\u064A\u0647\u0627 \u0641\u064A \u0627\u0644\u0639\u0642\u062F",
     dedicatedInfra: "\u0628\u0646\u064A\u0629 \u062A\u062D\u062A\u064A\u0629 \u0648\u0645\u0646\u0627\u0637\u0642 \u0645\u062E\u0635\u0651\u0635\u0629",
@@ -23545,12 +24133,7 @@ var ar_default2 = {
     selfHostedUnlimited: "\u0639\u0645\u0644\u064A\u0627\u062A \u0646\u0634\u0631 \u0648\u0645\u0634\u0627\u0631\u064A\u0639 \u0648\u062E\u0648\u0627\u062F\u0645 \u0648\u0646\u0637\u0627\u0642\u0627\u062A \u063A\u064A\u0631 \u0645\u062D\u062F\u0648\u062F\u0629",
     selfHostedServices: "\u0643\u0644 \u0627\u0644\u062E\u062F\u0645\u0627\u062A \u0627\u0644\u0645\u064F\u062F\u0627\u0631\u0629 \u2014 Postgres \u0648Redis \u0648\u0627\u0644\u0628\u0631\u064A\u062F",
     selfHostedClients: "CLI \u0648\u0648\u0627\u062C\u0647\u0629 \u0648\u064A\u0628 \u0648\u062A\u0637\u0628\u064A\u0642 \u0633\u0637\u062D \u0645\u0643\u062A\u0628 \u2014 \u062E\u062F\u0645\u0629 \u062E\u0644\u0641\u064A\u0629 \u0648\u0627\u062D\u062F\u0629",
-    selfHostedFreeSubdomains: "{freeSubdomains} \u0646\u0637\u0627\u0642 \u0641\u0631\u0639\u064A \u0645\u062C\u0627\u0646\u064A \u0639\u0644\u0649 {freeDomainSuffix} \u0639\u0646\u062F \u0627\u0644\u0631\u0628\u0637 \u0645\u0639 Openship Cloud",
-    runningServices: "{runningServices} \u062E\u062F\u0645\u0629 \u0642\u064A\u062F \u0627\u0644\u062A\u0634\u063A\u064A\u0644 \u2014 \u062A\u0637\u0628\u064A\u0642\u0627\u062A \u0648\u0642\u0648\u0627\u0639\u062F \u0628\u064A\u0627\u0646\u0627\u062A \u0648\u0639\u0645\u0644\u064A\u0627\u062A \u062E\u0644\u0641\u064A\u0629",
-    power: "\u062D\u062A\u0649 {powerCpu} vCPU \u0648{powerRamGb} GB RAM \u0644\u0643\u0644 \u062E\u062F\u0645\u0629",
-    projects: "{maxProjects} \u0645\u0634\u0631\u0648\u0639",
-    projectsUnlimited: "\u0645\u0634\u0627\u0631\u064A\u0639 \u063A\u064A\u0631 \u0645\u062D\u062F\u0648\u062F\u0629",
-    meteredCredits: "\u0627\u0644\u062D\u0648\u0633\u0628\u0629 \u0648\u0627\u0644\u0646\u0637\u0627\u0642 \u0627\u0644\u062A\u0631\u062F\u062F\u064A \u0648\u0627\u0644\u062A\u062E\u0632\u064A\u0646 \u062A\u064F\u062E\u0635\u0645 \u0643\u0644\u0647\u0627 \u0645\u0646 \u0631\u0635\u064A\u062F\u0643 \u0627\u0644\u0634\u0647\u0631\u064A"
+    selfHostedFreeSubdomains: "{freeSubdomains} \u0646\u0637\u0627\u0642 \u0641\u0631\u0639\u064A \u0645\u062C\u0627\u0646\u064A \u0639\u0644\u0649 {freeDomainSuffix} \u0639\u0646\u062F \u0627\u0644\u0631\u0628\u0637 \u0645\u0639 Openship Cloud"
   },
   selfHosted: {
     name: "\u0627\u0633\u062A\u0636\u0627\u0641\u0629 \u0630\u0627\u062A\u064A\u0629",
@@ -23560,9 +24143,9 @@ var ar_default2 = {
     cta: "\u0627\u0628\u062F\u0623 \u0627\u0644\u0627\u0633\u062A\u0636\u0627\u0641\u0629 \u0627\u0644\u0630\u0627\u062A\u064A\u0629"
   },
   creditPacks: {
-    pack_5k: "{credits} \u0648\u062D\u062F\u0629 \u0631\u0635\u064A\u062F",
-    pack_25k: "{credits} \u0648\u062D\u062F\u0629 \u0631\u0635\u064A\u062F",
-    pack_100k: "{credits} \u0648\u062D\u062F\u0629 \u0631\u0635\u064A\u062F"
+    pack_5k: "{computeMinutes} \u062F\u0642\u064A\u0642\u0629 \u062D\u0648\u0633\u0628\u0629",
+    pack_25k: "{computeMinutes} \u062F\u0642\u064A\u0642\u0629 \u062D\u0648\u0633\u0628\u0629",
+    pack_100k: "{computeMinutes} \u062F\u0642\u064A\u0642\u0629 \u062D\u0648\u0633\u0628\u0629"
   },
   ui: {
     perMonth: "/\u0634\u0647\u0631",
@@ -23578,7 +24161,9 @@ var ar_default2 = {
     billedMonthly: "\u0641\u0627\u062A\u0648\u0631\u0629 \u0634\u0647\u0631\u064A\u0629\u060C \u0648\u0627\u0644\u0625\u0644\u063A\u0627\u0621 \u0645\u062A\u0627\u062D \u0641\u064A \u0623\u064A \u0648\u0642\u062A",
     campaignBadge: "\u062E\u0635\u0645 {percentOff}%",
     campaignEnds: "\u064A\u0646\u062A\u0647\u064A \u0627\u0644\u0639\u0631\u0636 \u0641\u064A {date}",
-    wasPrice: "\u0633\u0627\u0628\u0642\u064B\u0627 {price}"
+    wasPrice: "\u0633\u0627\u0628\u0642\u064B\u0627 {price}",
+    standardTitle: "\u0641\u064A \u0643\u0644 \u0627\u0644\u062E\u0637\u0637",
+    creditPackNote: "\u2248 {appHours} \u0633\u0627\u0639\u0629 \u0644\u062A\u0637\u0628\u064A\u0642 \u0635\u063A\u064A\u0631\u060C \u0623\u0648 {buildMinutes} \u062F\u0642\u064A\u0642\u0629 \u0628\u0646\u0627\u0621"
   }
 };
 
@@ -23609,20 +24194,20 @@ var de_default2 = {
   features: {
     everythingIn: "Alles aus {inherited}, plus:",
     staticOnly: "Nur statische Websites \u2013 SSG, SPA und reines HTML",
-    anyWorkload: "Beliebige Workloads \u2013 Container, Compose-Stacks und Worker",
-    managedServices: "Managed Postgres, Redis und der komplette App-Katalog",
+    anyWorkload: "Beliebige Workloads \u2013 Container, Compose, Worker, Postgres, Redis",
+    runningServices: "{runningServices} laufende Apps, Datenbanken oder Worker",
+    computeMinutes: "{computeMinutes} Compute-Minuten pro Monat",
     buildMinutes: "{buildMinutes} Build-Minuten pro Monat",
-    credits: "{credits} Compute-Credits pro Monat",
+    power: "Bis zu {powerCpu} vCPU und {powerRamGb} GB RAM pro App",
+    projects: "{maxProjects} Projekte",
+    projectsUnlimited: "Unbegrenzt viele Projekte",
     freeSubdomains: "{freeSubdomains} kostenlose Subdomains unter {freeDomainSuffix}",
     freeSubdomainsUnlimited: "Unbegrenzt viele kostenlose Subdomains unter {freeDomainSuffix}",
+    gitDeploys: "Deployen von GitHub, GitLab oder jedem Git-Remote",
     customDomains: "Unbegrenzt viele eigene Domains, TLS inklusive",
+    deployLogs: "Live-Logs f\xFCr Build und Deployment",
+    auditLog: "Audit-Log f\xFCr jede \xC4nderung",
     unlimitedSeats: "Unbegrenzt viele Teammitglieder \u2013 nie Kosten pro Nutzer",
-    previewDeploys: "Preview-Deploys bei jedem Push",
-    backups: "T\xE4gliche Backups mit Point-in-Time-Recovery",
-    observability: "Live-Logs, Metriken und Health-Alerts",
-    mailServer: "Integrierter Mailserver \u2013 SMTP, IMAP und Webmail",
-    auditLog: "Audit-Log mit verl\xE4ngerter Aufbewahrungsdauer",
-    sharedChannel: "Gemeinsamer Slack- oder Discord-Channel",
     sso: "SSO und SAML",
     customLimits: "Individuelle Limits, vertraglich vereinbart",
     dedicatedInfra: "Dedizierte Infrastruktur und Regionen",
@@ -23635,12 +24220,7 @@ var de_default2 = {
     selfHostedUnlimited: "Unbegrenzt viele Deploys, Projekte, Server und Domains",
     selfHostedServices: "Alle Managed Services \u2013 Postgres, Redis, Mail",
     selfHostedClients: "CLI, Web und Desktop \u2013 ein Backend",
-    selfHostedFreeSubdomains: "{freeSubdomains} kostenlose Subdomains unter {freeDomainSuffix} bei Verbindung mit Openship Cloud",
-    runningServices: "{runningServices} laufende Services \u2013 Apps, Datenbanken, Worker",
-    power: "Bis zu {powerCpu} vCPU und {powerRamGb} GB RAM pro Service",
-    projects: "{maxProjects} Projekte",
-    projectsUnlimited: "Unbegrenzt viele Projekte",
-    meteredCredits: "Compute, Daten\xFCbertragung und Speicher werden alle \xFCber die monatlichen Credits abgerechnet"
+    selfHostedFreeSubdomains: "{freeSubdomains} kostenlose Subdomains unter {freeDomainSuffix} bei Verbindung mit Openship Cloud"
   },
   selfHosted: {
     name: "Selbst gehostet",
@@ -23650,9 +24230,9 @@ var de_default2 = {
     cta: "Self-Hosting starten"
   },
   creditPacks: {
-    pack_5k: "{credits} Credits",
-    pack_25k: "{credits} Credits",
-    pack_100k: "{credits} Credits"
+    pack_5k: "{computeMinutes} Compute-Minuten",
+    pack_25k: "{computeMinutes} Compute-Minuten",
+    pack_100k: "{computeMinutes} Compute-Minuten"
   },
   ui: {
     perMonth: "/Mon.",
@@ -23668,7 +24248,9 @@ var de_default2 = {
     billedMonthly: "monatliche Abrechnung, jederzeit k\xFCndbar",
     campaignBadge: "{percentOff} % Rabatt",
     campaignEnds: "Angebot endet am {date}",
-    wasPrice: "vorher {price}"
+    wasPrice: "vorher {price}",
+    standardTitle: "In jedem Plan enthalten",
+    creditPackNote: "\u2248 {appHours} Stunden einer kleinen App oder {buildMinutes} Build-Minuten"
   }
 };
 
@@ -23699,20 +24281,20 @@ var es_default2 = {
   features: {
     everythingIn: "Todo lo de {inherited}, y adem\xE1s:",
     staticOnly: "Solo sitios est\xE1ticos: SSG, SPA y HTML puro",
-    anyWorkload: "Ejecuta lo que sea: contenedores, stacks de Compose y workers",
-    managedServices: "Postgres y Redis gestionados, y el cat\xE1logo completo de apps",
+    anyWorkload: "Ejecuta lo que sea: contenedores, Compose, workers, Postgres, Redis",
+    runningServices: "{runningServices} apps, bases de datos o workers en ejecuci\xF3n",
+    computeMinutes: "{computeMinutes} minutos de c\xF3mputo al mes",
     buildMinutes: "{buildMinutes} minutos de build al mes",
-    credits: "{credits} cr\xE9ditos de c\xF3mputo al mes",
+    power: "Hasta {powerCpu} vCPU y {powerRamGb} GB de RAM por app",
+    projects: "{maxProjects} proyectos",
+    projectsUnlimited: "Proyectos ilimitados",
     freeSubdomains: "{freeSubdomains} subdominios {freeDomainSuffix} gratis",
     freeSubdomainsUnlimited: "Subdominios {freeDomainSuffix} gratis e ilimitados",
+    gitDeploys: "Despliega desde GitHub, GitLab o cualquier remoto Git",
     customDomains: "Dominios propios ilimitados, con TLS incluido",
+    deployLogs: "Logs en vivo de build y despliegue",
+    auditLog: "Registro de auditor\xEDa de cada cambio",
     unlimitedSeats: "Miembros de equipo ilimitados: nunca pagas por usuario",
-    previewDeploys: "Despliegues de vista previa en cada push",
-    backups: "Copias de seguridad diarias con recuperaci\xF3n a un punto en el tiempo",
-    observability: "Logs en vivo, m\xE9tricas y alertas de estado",
-    mailServer: "Servidor de correo integrado: SMTP, IMAP y webmail",
-    auditLog: "Registro de auditor\xEDa con retenci\xF3n ampliada",
-    sharedChannel: "Canal compartido en Slack o Discord",
     sso: "SSO y SAML",
     customLimits: "L\xEDmites a medida, negociados por contrato",
     dedicatedInfra: "Infraestructura y regiones dedicadas",
@@ -23725,12 +24307,7 @@ var es_default2 = {
     selfHostedUnlimited: "Despliegues, proyectos, servidores y dominios ilimitados",
     selfHostedServices: "Todos los servicios gestionados: Postgres, Redis, correo",
     selfHostedClients: "CLI, web y escritorio: un solo backend",
-    selfHostedFreeSubdomains: "{freeSubdomains} subdominios {freeDomainSuffix} gratis al conectarte a Cloud",
-    runningServices: "{runningServices} servicios en ejecuci\xF3n: apps, bases de datos, workers",
-    power: "Hasta {powerCpu} vCPU y {powerRamGb} GB de RAM por servicio",
-    projects: "{maxProjects} proyectos",
-    projectsUnlimited: "Proyectos ilimitados",
-    meteredCredits: "El c\xF3mputo, el ancho de banda y el almacenamiento se descuentan de tus cr\xE9ditos mensuales"
+    selfHostedFreeSubdomains: "{freeSubdomains} subdominios {freeDomainSuffix} gratis al conectarte a Cloud"
   },
   selfHosted: {
     name: "Autoalojado",
@@ -23740,9 +24317,9 @@ var es_default2 = {
     cta: "Empezar a autoalojar"
   },
   creditPacks: {
-    pack_5k: "{credits} cr\xE9ditos",
-    pack_25k: "{credits} cr\xE9ditos",
-    pack_100k: "{credits} cr\xE9ditos"
+    pack_5k: "{computeMinutes} minutos de c\xF3mputo",
+    pack_25k: "{computeMinutes} minutos de c\xF3mputo",
+    pack_100k: "{computeMinutes} minutos de c\xF3mputo"
   },
   ui: {
     perMonth: "/mes",
@@ -23758,7 +24335,9 @@ var es_default2 = {
     billedMonthly: "facturaci\xF3n mensual, cancela cuando quieras",
     campaignBadge: "{percentOff}% de descuento",
     campaignEnds: "La oferta termina el {date}",
-    wasPrice: "antes {price}"
+    wasPrice: "antes {price}",
+    standardTitle: "En todos los planes",
+    creditPackNote: "\u2248 {appHours} horas de una app peque\xF1a, o {buildMinutes} minutos de build"
   }
 };
 
@@ -23789,20 +24368,20 @@ var fr_default2 = {
   features: {
     everythingIn: "Tout ce que contient {inherited}, plus :",
     staticOnly: "Sites statiques uniquement \u2014 SSG, SPA et HTML brut",
-    anyWorkload: "Ex\xE9cutez ce que vous voulez \u2014 conteneurs, stacks Compose et workers",
-    managedServices: "Postgres et Redis manag\xE9s, et tout le catalogue d'applications",
+    anyWorkload: "Ex\xE9cutez tout \u2014 conteneurs, Compose, workers, Postgres, Redis",
+    runningServices: "{runningServices} applications, bases de donn\xE9es ou workers actifs",
+    computeMinutes: "{computeMinutes} minutes de calcul par mois",
     buildMinutes: "{buildMinutes} minutes de build par mois",
-    credits: "{credits} cr\xE9dits de calcul par mois",
+    power: "Jusqu'\xE0 {powerCpu} vCPU et {powerRamGb} GB de RAM par application",
+    projects: "{maxProjects} projets",
+    projectsUnlimited: "Projets illimit\xE9s",
     freeSubdomains: "{freeSubdomains} sous-domaines {freeDomainSuffix} gratuits",
     freeSubdomainsUnlimited: "Sous-domaines {freeDomainSuffix} gratuits en illimit\xE9",
+    gitDeploys: "D\xE9ployez depuis GitHub, GitLab ou n'importe quel d\xE9p\xF4t Git",
     customDomains: "Domaines personnalis\xE9s illimit\xE9s, TLS inclus",
+    deployLogs: "Logs de build et de d\xE9ploiement en direct",
+    auditLog: "Journal d'audit de chaque modification",
     unlimitedSeats: "Membres d'\xE9quipe illimit\xE9s \u2014 jamais de facturation par utilisateur",
-    previewDeploys: "D\xE9ploiements de pr\xE9visualisation \xE0 chaque push",
-    backups: "Sauvegardes quotidiennes avec restauration \xE0 un instant pr\xE9cis",
-    observability: "Logs en direct, m\xE9triques et alertes de sant\xE9",
-    mailServer: "Serveur mail int\xE9gr\xE9 \u2014 SMTP, IMAP et webmail",
-    auditLog: "Journal d'audit avec r\xE9tention \xE9tendue",
-    sharedChannel: "Canal Slack ou Discord partag\xE9",
     sso: "SSO et SAML",
     customLimits: "Limites sur mesure, n\xE9goci\xE9es par contrat",
     dedicatedInfra: "Infrastructure et r\xE9gions d\xE9di\xE9es",
@@ -23815,12 +24394,7 @@ var fr_default2 = {
     selfHostedUnlimited: "D\xE9ploiements, projets, serveurs et domaines illimit\xE9s",
     selfHostedServices: "Tous les services manag\xE9s \u2014 Postgres, Redis, mail",
     selfHostedClients: "CLI, web et desktop \u2014 un seul backend",
-    selfHostedFreeSubdomains: "{freeSubdomains} sous-domaines {freeDomainSuffix} gratuits en vous connectant au Cloud",
-    runningServices: "{runningServices} services actifs \u2014 applications, bases de donn\xE9es, workers",
-    power: "Jusqu'\xE0 {powerCpu} vCPU et {powerRamGb} GB de RAM par service",
-    projects: "{maxProjects} projets",
-    projectsUnlimited: "Projets illimit\xE9s",
-    meteredCredits: "Le calcul, la bande passante et le stockage sont tous d\xE9duits de vos cr\xE9dits mensuels"
+    selfHostedFreeSubdomains: "{freeSubdomains} sous-domaines {freeDomainSuffix} gratuits en vous connectant au Cloud"
   },
   selfHosted: {
     name: "Auto-h\xE9berg\xE9",
@@ -23830,9 +24404,9 @@ var fr_default2 = {
     cta: "Commencer l'auto-h\xE9bergement"
   },
   creditPacks: {
-    pack_5k: "{credits} cr\xE9dits",
-    pack_25k: "{credits} cr\xE9dits",
-    pack_100k: "{credits} cr\xE9dits"
+    pack_5k: "{computeMinutes} minutes de calcul",
+    pack_25k: "{computeMinutes} minutes de calcul",
+    pack_100k: "{computeMinutes} minutes de calcul"
   },
   ui: {
     perMonth: "/mois",
@@ -23848,7 +24422,9 @@ var fr_default2 = {
     billedMonthly: "factur\xE9 mensuellement, r\xE9siliable \xE0 tout moment",
     campaignBadge: "{percentOff} % de remise",
     campaignEnds: "L'offre se termine le {date}",
-    wasPrice: "avant {price}"
+    wasPrice: "avant {price}",
+    standardTitle: "Dans tous les forfaits",
+    creditPackNote: "\u2248 {appHours} heures d'une petite application, ou {buildMinutes} minutes de build"
   }
 };
 
@@ -23879,20 +24455,20 @@ var ja_default2 = {
   features: {
     everythingIn: "{inherited} \u306E\u5168\u6A5F\u80FD\u306B\u52A0\u3048\u3066:",
     staticOnly: "\u9759\u7684\u30B5\u30A4\u30C8\u306E\u307F \u2014 SSG\u3001SPA\u3001\u7D20\u306E HTML",
-    anyWorkload: "\u4F55\u3067\u3082\u52D5\u304B\u305B\u308B \u2014 \u30B3\u30F3\u30C6\u30CA\u3001Compose \u30B9\u30BF\u30C3\u30AF\u3001\u30EF\u30FC\u30AB\u30FC",
-    managedServices: "\u30DE\u30CD\u30FC\u30B8\u30C9\u306E Postgres \u3068 Redis\u3001\u30A2\u30D7\u30EA\u30AB\u30BF\u30ED\u30B0\u3059\u3079\u3066",
+    anyWorkload: "\u4F55\u3067\u3082\u52D5\u304B\u305B\u308B \u2014 \u30B3\u30F3\u30C6\u30CA\u3001Compose\u3001\u30EF\u30FC\u30AB\u30FC\u3001Postgres\u3001Redis",
+    runningServices: "\u540C\u6642\u306B\u7A3C\u50CD\u3059\u308B\u30A2\u30D7\u30EA\u30FB\u30C7\u30FC\u30BF\u30D9\u30FC\u30B9\u30FB\u30EF\u30FC\u30AB\u30FC {runningServices} \u500B",
+    computeMinutes: "\u6BCE\u6708 {computeMinutes} \u30B3\u30F3\u30D4\u30E5\u30FC\u30C8\u5206",
     buildMinutes: "\u6BCE\u6708 {buildMinutes} \u5206\u306E\u30D3\u30EB\u30C9\u6642\u9593",
-    credits: "\u6BCE\u6708 {credits} \u30B3\u30F3\u30D4\u30E5\u30FC\u30C8\u30AF\u30EC\u30B8\u30C3\u30C8",
+    power: "\u30A2\u30D7\u30EA 1 \u3064\u3042\u305F\u308A\u6700\u5927 {powerCpu} vCPU \u3068 {powerRamGb} GB RAM",
+    projects: "\u30D7\u30ED\u30B8\u30A7\u30AF\u30C8 {maxProjects} \u500B",
+    projectsUnlimited: "\u30D7\u30ED\u30B8\u30A7\u30AF\u30C8\u306F\u7121\u5236\u9650",
     freeSubdomains: "\u7121\u6599\u306E {freeDomainSuffix} \u30B5\u30D6\u30C9\u30E1\u30A4\u30F3 {freeSubdomains} \u500B",
     freeSubdomainsUnlimited: "\u7121\u6599\u306E {freeDomainSuffix} \u30B5\u30D6\u30C9\u30E1\u30A4\u30F3\u304C\u7121\u5236\u9650",
+    gitDeploys: "GitHub\u3001GitLab\u3001\u4EFB\u610F\u306E Git \u30EA\u30E2\u30FC\u30C8\u304B\u3089\u30C7\u30D7\u30ED\u30A4",
     customDomains: "\u30AB\u30B9\u30BF\u30E0\u30C9\u30E1\u30A4\u30F3\u306F\u7121\u5236\u9650\u3001TLS \u8FBC\u307F",
+    deployLogs: "\u30D3\u30EB\u30C9\u3068\u30C7\u30D7\u30ED\u30A4\u306E\u30E9\u30A4\u30D6\u30ED\u30B0",
+    auditLog: "\u3059\u3079\u3066\u306E\u5909\u66F4\u3092\u8A18\u9332\u3059\u308B\u76E3\u67FB\u30ED\u30B0",
     unlimitedSeats: "\u30C1\u30FC\u30E0\u30E1\u30F3\u30D0\u30FC\u306F\u7121\u5236\u9650 \u2014 \u4EBA\u6570\u8AB2\u91D1\u306F\u4E00\u5207\u306A\u3057",
-    previewDeploys: "\u30D7\u30C3\u30B7\u30E5\u3054\u3068\u306B\u30D7\u30EC\u30D3\u30E5\u30FC\u30C7\u30D7\u30ED\u30A4",
-    backups: "\u65E5\u6B21\u30D0\u30C3\u30AF\u30A2\u30C3\u30D7\u3068\u30DD\u30A4\u30F3\u30C8\u30A4\u30F3\u30BF\u30A4\u30E0\u30EA\u30AB\u30D0\u30EA",
-    observability: "\u30E9\u30A4\u30D6\u30ED\u30B0\u3001\u30E1\u30C8\u30EA\u30AF\u30B9\u3001\u30D8\u30EB\u30B9\u30A2\u30E9\u30FC\u30C8",
-    mailServer: "\u30E1\u30FC\u30EB\u30B5\u30FC\u30D0\u30FC\u5185\u8535 \u2014 SMTP\u3001IMAP\u3001\u30A6\u30A7\u30D6\u30E1\u30FC\u30EB",
-    auditLog: "\u4FDD\u6301\u671F\u9593\u3092\u5EF6\u9577\u3057\u305F\u76E3\u67FB\u30ED\u30B0",
-    sharedChannel: "Slack \u307E\u305F\u306F Discord \u306E\u5171\u6709\u30C1\u30E3\u30F3\u30CD\u30EB",
     sso: "SSO \u3068 SAML",
     customLimits: "\u5951\u7D04\u3054\u3068\u306B\u8ABF\u6574\u3059\u308B\u30AB\u30B9\u30BF\u30E0\u306E\u4E0A\u9650",
     dedicatedInfra: "\u5C02\u7528\u30A4\u30F3\u30D5\u30E9\u3068\u5C02\u7528\u30EA\u30FC\u30B8\u30E7\u30F3",
@@ -23905,12 +24481,7 @@ var ja_default2 = {
     selfHostedUnlimited: "\u30C7\u30D7\u30ED\u30A4\u3001\u30D7\u30ED\u30B8\u30A7\u30AF\u30C8\u3001\u30B5\u30FC\u30D0\u30FC\u3001\u30C9\u30E1\u30A4\u30F3\u3059\u3079\u3066\u7121\u5236\u9650",
     selfHostedServices: "\u30DE\u30CD\u30FC\u30B8\u30C9\u30B5\u30FC\u30D3\u30B9\u306F\u3059\u3079\u3066\u5229\u7528\u53EF\u80FD \u2014 Postgres\u3001Redis\u3001\u30E1\u30FC\u30EB",
     selfHostedClients: "CLI\u3001Web\u3001\u30C7\u30B9\u30AF\u30C8\u30C3\u30D7 \u2014 \u30D0\u30C3\u30AF\u30A8\u30F3\u30C9\u306F\u4E00\u3064",
-    selfHostedFreeSubdomains: "Openship Cloud \u306B\u63A5\u7D9A\u3059\u308B\u3068\u3001\u7121\u6599\u306E {freeDomainSuffix} \u30B5\u30D6\u30C9\u30E1\u30A4\u30F3\u304C {freeSubdomains} \u500B",
-    runningServices: "\u540C\u6642\u306B\u7A3C\u50CD\u3059\u308B\u30B5\u30FC\u30D3\u30B9 {runningServices} \u500B \u2014 \u30A2\u30D7\u30EA\u3001\u30C7\u30FC\u30BF\u30D9\u30FC\u30B9\u3001\u30EF\u30FC\u30AB\u30FC",
-    power: "\u30B5\u30FC\u30D3\u30B9 1 \u3064\u3042\u305F\u308A\u6700\u5927 {powerCpu} vCPU \u3068 {powerRamGb} GB RAM",
-    projects: "\u30D7\u30ED\u30B8\u30A7\u30AF\u30C8 {maxProjects} \u500B",
-    projectsUnlimited: "\u30D7\u30ED\u30B8\u30A7\u30AF\u30C8\u306F\u7121\u5236\u9650",
-    meteredCredits: "\u30B3\u30F3\u30D4\u30E5\u30FC\u30C8\u3001\u5E2F\u57DF\u5E45\u3001\u30B9\u30C8\u30EC\u30FC\u30B8\u306F\u3059\u3079\u3066\u6BCE\u6708\u306E\u30AF\u30EC\u30B8\u30C3\u30C8\u304B\u3089\u6D88\u8CBB\u3055\u308C\u307E\u3059"
+    selfHostedFreeSubdomains: "Openship Cloud \u306B\u63A5\u7D9A\u3059\u308B\u3068\u3001\u7121\u6599\u306E {freeDomainSuffix} \u30B5\u30D6\u30C9\u30E1\u30A4\u30F3\u304C {freeSubdomains} \u500B"
   },
   selfHosted: {
     name: "\u30BB\u30EB\u30D5\u30DB\u30B9\u30C8",
@@ -23920,9 +24491,9 @@ var ja_default2 = {
     cta: "\u30BB\u30EB\u30D5\u30DB\u30B9\u30C8\u3092\u59CB\u3081\u308B"
   },
   creditPacks: {
-    pack_5k: "{credits} \u30AF\u30EC\u30B8\u30C3\u30C8",
-    pack_25k: "{credits} \u30AF\u30EC\u30B8\u30C3\u30C8",
-    pack_100k: "{credits} \u30AF\u30EC\u30B8\u30C3\u30C8"
+    pack_5k: "{computeMinutes} \u30B3\u30F3\u30D4\u30E5\u30FC\u30C8\u5206",
+    pack_25k: "{computeMinutes} \u30B3\u30F3\u30D4\u30E5\u30FC\u30C8\u5206",
+    pack_100k: "{computeMinutes} \u30B3\u30F3\u30D4\u30E5\u30FC\u30C8\u5206"
   },
   ui: {
     perMonth: "/\u6708",
@@ -23938,7 +24509,9 @@ var ja_default2 = {
     billedMonthly: "\u6708\u984D\u8ACB\u6C42\u3001\u3044\u3064\u3067\u3082\u30AD\u30E3\u30F3\u30BB\u30EB\u53EF\u80FD",
     campaignBadge: "{percentOff}% \u30AA\u30D5",
     campaignEnds: "\u30AD\u30E3\u30F3\u30DA\u30FC\u30F3\u306F {date} \u307E\u3067",
-    wasPrice: "\u901A\u5E38 {price}"
+    wasPrice: "\u901A\u5E38 {price}",
+    standardTitle: "\u3059\u3079\u3066\u306E\u30D7\u30E9\u30F3\u306B\u542B\u307E\u308C\u308B\u3082\u306E",
+    creditPackNote: "\u5C0F\u898F\u6A21\u30A2\u30D7\u30EA\u7D04 {appHours} \u6642\u9593\u3001\u307E\u305F\u306F\u30D3\u30EB\u30C9 {buildMinutes} \u5206"
   }
 };
 
@@ -23969,20 +24542,20 @@ var pt_default2 = {
   features: {
     everythingIn: "Tudo do {inherited}, e mais:",
     staticOnly: "Somente sites est\xE1ticos: SSG, SPA e HTML puro",
-    anyWorkload: "Execute qualquer coisa: cont\xEAineres, stacks do Compose e workers",
-    managedServices: "Postgres e Redis gerenciados, e o cat\xE1logo completo de apps",
+    anyWorkload: "Execute qualquer coisa: cont\xEAineres, Compose, workers, Postgres, Redis",
+    runningServices: "{runningServices} apps, bancos de dados ou workers em execu\xE7\xE3o",
+    computeMinutes: "{computeMinutes} minutos de computa\xE7\xE3o por m\xEAs",
     buildMinutes: "{buildMinutes} minutos de build por m\xEAs",
-    credits: "{credits} cr\xE9ditos de computa\xE7\xE3o por m\xEAs",
+    power: "At\xE9 {powerCpu} vCPU e {powerRamGb} GB de RAM por app",
+    projects: "{maxProjects} projetos",
+    projectsUnlimited: "Projetos ilimitados",
     freeSubdomains: "{freeSubdomains} subdom\xEDnios {freeDomainSuffix} gratuitos",
     freeSubdomainsUnlimited: "Subdom\xEDnios {freeDomainSuffix} gratuitos e ilimitados",
+    gitDeploys: "Fa\xE7a deploy do GitHub, GitLab ou qualquer remoto Git",
     customDomains: "Dom\xEDnios pr\xF3prios ilimitados, com TLS inclu\xEDdo",
+    deployLogs: "Logs de build e deploy em tempo real",
+    auditLog: "Log de auditoria de cada altera\xE7\xE3o",
     unlimitedSeats: "Membros de equipe ilimitados: nunca pague por usu\xE1rio",
-    previewDeploys: "Deploys de pr\xE9-visualiza\xE7\xE3o a cada push",
-    backups: "Backups di\xE1rios com recupera\xE7\xE3o para um ponto no tempo",
-    observability: "Logs em tempo real, m\xE9tricas e alertas de sa\xFAde",
-    mailServer: "Servidor de e-mail integrado: SMTP, IMAP e webmail",
-    auditLog: "Log de auditoria com reten\xE7\xE3o estendida",
-    sharedChannel: "Canal compartilhado no Slack ou Discord",
     sso: "SSO e SAML",
     customLimits: "Limites sob medida, negociados por contrato",
     dedicatedInfra: "Infraestrutura e regi\xF5es dedicadas",
@@ -23995,12 +24568,7 @@ var pt_default2 = {
     selfHostedUnlimited: "Deploys, projetos, servidores e dom\xEDnios ilimitados",
     selfHostedServices: "Todos os servi\xE7os gerenciados: Postgres, Redis, e-mail",
     selfHostedClients: "CLI, web e desktop: um \xFAnico backend",
-    selfHostedFreeSubdomains: "{freeSubdomains} subdom\xEDnios {freeDomainSuffix} gratuitos ao conectar \xE0 Cloud",
-    runningServices: "{runningServices} servi\xE7os em execu\xE7\xE3o: apps, bancos de dados, workers",
-    power: "At\xE9 {powerCpu} vCPU e {powerRamGb} GB de RAM por servi\xE7o",
-    projects: "{maxProjects} projetos",
-    projectsUnlimited: "Projetos ilimitados",
-    meteredCredits: "Computa\xE7\xE3o, largura de banda e armazenamento consomem os seus cr\xE9ditos mensais"
+    selfHostedFreeSubdomains: "{freeSubdomains} subdom\xEDnios {freeDomainSuffix} gratuitos ao conectar \xE0 Cloud"
   },
   selfHosted: {
     name: "Auto-hospedado",
@@ -24010,9 +24578,9 @@ var pt_default2 = {
     cta: "Come\xE7ar a auto-hospedar"
   },
   creditPacks: {
-    pack_5k: "{credits} cr\xE9ditos",
-    pack_25k: "{credits} cr\xE9ditos",
-    pack_100k: "{credits} cr\xE9ditos"
+    pack_5k: "{computeMinutes} minutos de computa\xE7\xE3o",
+    pack_25k: "{computeMinutes} minutos de computa\xE7\xE3o",
+    pack_100k: "{computeMinutes} minutos de computa\xE7\xE3o"
   },
   ui: {
     perMonth: "/m\xEAs",
@@ -24028,7 +24596,9 @@ var pt_default2 = {
     billedMonthly: "cobran\xE7a mensal, cancele quando quiser",
     campaignBadge: "{percentOff}% de desconto",
     campaignEnds: "Oferta termina em {date}",
-    wasPrice: "antes {price}"
+    wasPrice: "antes {price}",
+    standardTitle: "Em todos os planos",
+    creditPackNote: "\u2248 {appHours} horas de um app pequeno, ou {buildMinutes} minutos de build"
   }
 };
 
@@ -24059,20 +24629,20 @@ var tr_default2 = {
   features: {
     everythingIn: "{inherited} plan\u0131ndaki her \u015Fey, ayr\u0131ca:",
     staticOnly: "Yaln\u0131zca statik siteler \u2014 SSG, SPA ve d\xFCz HTML",
-    anyWorkload: "Her \u015Feyi \xE7al\u0131\u015Ft\u0131r\u0131n \u2014 container'lar, Compose y\u0131\u011F\u0131nlar\u0131 ve worker'lar",
-    managedServices: "Y\xF6netilen Postgres, Redis ve uygulama katalo\u011Funun tamam\u0131",
+    anyWorkload: "Her \u015Feyi \xE7al\u0131\u015Ft\u0131r\u0131n \u2014 container, Compose, worker, Postgres, Redis",
+    runningServices: "{runningServices} \xE7al\u0131\u015Fan uygulama, veritaban\u0131 veya worker",
+    computeMinutes: "Ayda {computeMinutes} hesaplama dakikas\u0131",
     buildMinutes: "Ayda {buildMinutes} build dakikas\u0131",
-    credits: "Ayda {credits} hesaplama kredisi",
+    power: "Uygulama ba\u015F\u0131na en fazla {powerCpu} vCPU ve {powerRamGb} GB RAM",
+    projects: "{maxProjects} proje",
+    projectsUnlimited: "S\u0131n\u0131rs\u0131z proje",
     freeSubdomains: "{freeSubdomains} \xFCcretsiz {freeDomainSuffix} alt alan ad\u0131",
     freeSubdomainsUnlimited: "S\u0131n\u0131rs\u0131z \xFCcretsiz {freeDomainSuffix} alt alan ad\u0131",
+    gitDeploys: "GitHub, GitLab veya herhangi bir Git uzak deposundan da\u011F\u0131t\u0131n",
     customDomains: "S\u0131n\u0131rs\u0131z \xF6zel alan ad\u0131, TLS dahil",
+    deployLogs: "Canl\u0131 derleme ve da\u011F\u0131t\u0131m loglar\u0131",
+    auditLog: "Her de\u011Fi\u015Fikli\u011Fin denetim kayd\u0131",
     unlimitedSeats: "S\u0131n\u0131rs\u0131z ekip \xFCyesi \u2014 kullan\u0131c\u0131 ba\u015F\u0131na \xF6deme yok",
-    previewDeploys: "Her push'ta \xF6nizleme da\u011F\u0131t\u0131m\u0131",
-    backups: "G\xFCnl\xFCk yedekler ve belirli bir ana geri d\xF6n\xFC\u015F",
-    observability: "Canl\u0131 loglar, metrikler ve sa\u011Fl\u0131k uyar\u0131lar\u0131",
-    mailServer: "Dahili posta sunucusu \u2014 SMTP, IMAP ve webmail",
-    auditLog: "Denetim kayd\u0131, uzat\u0131lm\u0131\u015F saklama s\xFCresiyle",
-    sharedChannel: "Payla\u015F\u0131ml\u0131 Slack veya Discord kanal\u0131",
     sso: "SSO ve SAML",
     customLimits: "S\xF6zle\u015Fmeye g\xF6re belirlenen \xF6zel limitler",
     dedicatedInfra: "Size ayr\u0131lm\u0131\u015F altyap\u0131 ve b\xF6lgeler",
@@ -24085,12 +24655,7 @@ var tr_default2 = {
     selfHostedUnlimited: "S\u0131n\u0131rs\u0131z da\u011F\u0131t\u0131m, proje, sunucu ve alan ad\u0131",
     selfHostedServices: "T\xFCm y\xF6netilen servisler \u2014 Postgres, Redis, posta",
     selfHostedClients: "CLI, web ve masa\xFCst\xFC \u2014 tek backend",
-    selfHostedFreeSubdomains: "Cloud'a ba\u011Fland\u0131\u011F\u0131n\u0131zda {freeSubdomains} \xFCcretsiz {freeDomainSuffix} alt alan ad\u0131",
-    runningServices: "{runningServices} \xE7al\u0131\u015Fan servis \u2014 uygulamalar, veritabanlar\u0131, worker'lar",
-    power: "Servis ba\u015F\u0131na en fazla {powerCpu} vCPU ve {powerRamGb} GB RAM",
-    projects: "{maxProjects} proje",
-    projectsUnlimited: "S\u0131n\u0131rs\u0131z proje",
-    meteredCredits: "Hesaplama, bant geni\u015Fli\u011Fi ve depolaman\u0131n tamam\u0131 ayl\u0131k kredilerinizden d\xFC\u015Fer"
+    selfHostedFreeSubdomains: "Cloud'a ba\u011Fland\u0131\u011F\u0131n\u0131zda {freeSubdomains} \xFCcretsiz {freeDomainSuffix} alt alan ad\u0131"
   },
   selfHosted: {
     name: "Kendi sunucunuzda",
@@ -24100,9 +24665,9 @@ var tr_default2 = {
     cta: "Kendi sunucunuzda ba\u015Flay\u0131n"
   },
   creditPacks: {
-    pack_5k: "{credits} kredi",
-    pack_25k: "{credits} kredi",
-    pack_100k: "{credits} kredi"
+    pack_5k: "{computeMinutes} hesaplama dakikas\u0131",
+    pack_25k: "{computeMinutes} hesaplama dakikas\u0131",
+    pack_100k: "{computeMinutes} hesaplama dakikas\u0131"
   },
   ui: {
     perMonth: "/ay",
@@ -24118,7 +24683,9 @@ var tr_default2 = {
     billedMonthly: "ayl\u0131k faturalan\u0131r, istedi\u011Finiz zaman iptal edin",
     campaignBadge: "%{percentOff} indirim",
     campaignEnds: "Kampanya {date} tarihinde sona eriyor",
-    wasPrice: "eski fiyat {price}"
+    wasPrice: "eski fiyat {price}",
+    standardTitle: "T\xFCm planlarda",
+    creditPackNote: "\u2248 K\xFC\xE7\xFCk bir uygulama i\xE7in {appHours} saat veya {buildMinutes} derleme dakikas\u0131"
   }
 };
 
@@ -24149,20 +24716,20 @@ var zh_default = {
   features: {
     everythingIn: "\u5305\u542B {inherited} \u7684\u5168\u90E8\u529F\u80FD,\u53E6\u6709:",
     staticOnly: "\u4EC5\u652F\u6301\u9759\u6001\u7AD9\u70B9:SSG\u3001SPA \u548C\u7EAF HTML",
-    anyWorkload: "\u4EFB\u610F\u5DE5\u4F5C\u8D1F\u8F7D\u90FD\u80FD\u8FD0\u884C:\u5BB9\u5668\u3001Compose \u7F16\u6392\u548C\u540E\u53F0\u4EFB\u52A1",
-    managedServices: "\u6258\u7BA1\u7684 Postgres\u3001Redis \u548C\u5B8C\u6574\u5E94\u7528\u76EE\u5F55",
+    anyWorkload: "\u4EFB\u610F\u5DE5\u4F5C\u8D1F\u8F7D:\u5BB9\u5668\u3001Compose\u3001\u540E\u53F0\u4EFB\u52A1\u3001Postgres\u3001Redis",
+    runningServices: "{runningServices} \u4E2A\u540C\u65F6\u8FD0\u884C\u7684\u5E94\u7528\u3001\u6570\u636E\u5E93\u6216\u540E\u53F0\u4EFB\u52A1",
+    computeMinutes: "\u6BCF\u6708 {computeMinutes} \u8BA1\u7B97\u5206\u949F",
     buildMinutes: "\u6BCF\u6708 {buildMinutes} \u5206\u949F\u6784\u5EFA\u65F6\u957F",
-    credits: "\u6BCF\u6708 {credits} \u8BA1\u7B97\u79EF\u5206",
+    power: "\u6BCF\u4E2A\u5E94\u7528\u6700\u9AD8\u53EF\u8FBE {powerCpu} vCPU \u548C {powerRamGb} GB RAM",
+    projects: "{maxProjects} \u4E2A\u9879\u76EE",
+    projectsUnlimited: "\u9879\u76EE\u4E0D\u9650\u6570\u91CF",
     freeSubdomains: "{freeSubdomains} \u4E2A\u514D\u8D39 {freeDomainSuffix} \u5B50\u57DF\u540D",
     freeSubdomainsUnlimited: "\u514D\u8D39 {freeDomainSuffix} \u5B50\u57DF\u540D\u4E0D\u9650\u6570\u91CF",
+    gitDeploys: "\u4ECE GitHub\u3001GitLab \u6216\u4EFB\u610F Git \u8FDC\u7AEF\u90E8\u7F72",
     customDomains: "\u81EA\u5B9A\u4E49\u57DF\u540D\u4E0D\u9650\u6570\u91CF,\u542B TLS",
+    deployLogs: "\u5B9E\u65F6\u6784\u5EFA\u4E0E\u90E8\u7F72\u65E5\u5FD7",
+    auditLog: "\u8BB0\u5F55\u6BCF\u4E00\u6B21\u53D8\u66F4\u7684\u5BA1\u8BA1\u65E5\u5FD7",
     unlimitedSeats: "\u56E2\u961F\u6210\u5458\u4E0D\u9650\u4EBA\u6570,\u6C38\u4E0D\u6309\u5E2D\u4F4D\u8BA1\u8D39",
-    previewDeploys: "\u6BCF\u6B21\u63A8\u9001\u90FD\u751F\u6210\u9884\u89C8\u90E8\u7F72",
-    backups: "\u6BCF\u65E5\u5907\u4EFD,\u652F\u6301\u6309\u65F6\u95F4\u70B9\u6062\u590D",
-    observability: "\u5B9E\u65F6\u65E5\u5FD7\u3001\u6307\u6807\u548C\u5065\u5EB7\u544A\u8B66",
-    mailServer: "\u5185\u7F6E\u90AE\u4EF6\u670D\u52A1\u5668:SMTP\u3001IMAP \u548C\u7F51\u9875\u90AE\u7BB1",
-    auditLog: "\u5BA1\u8BA1\u65E5\u5FD7,\u4FDD\u7559\u671F\u66F4\u957F",
-    sharedChannel: "\u5171\u4EAB\u7684 Slack \u6216 Discord \u9891\u9053",
     sso: "SSO \u4E0E SAML",
     customLimits: "\u81EA\u5B9A\u4E49\u914D\u989D,\u6309\u5408\u540C\u5546\u5B9A",
     dedicatedInfra: "\u4E13\u5C5E\u57FA\u7840\u8BBE\u65BD\u4E0E\u4E13\u5C5E\u533A\u57DF",
@@ -24175,12 +24742,7 @@ var zh_default = {
     selfHostedUnlimited: "\u90E8\u7F72\u3001\u9879\u76EE\u3001\u670D\u52A1\u5668\u548C\u57DF\u540D\u5747\u4E0D\u9650\u6570\u91CF",
     selfHostedServices: "\u5168\u90E8\u6258\u7BA1\u670D\u52A1:Postgres\u3001Redis\u3001\u90AE\u4EF6\u670D\u52A1",
     selfHostedClients: "CLI\u3001\u7F51\u9875\u7AEF\u548C\u684C\u9762\u7AEF,\u5171\u7528\u4E00\u4E2A\u540E\u7AEF",
-    selfHostedFreeSubdomains: "\u8FDE\u63A5 Cloud \u540E\u53EF\u83B7\u5F97 {freeSubdomains} \u4E2A\u514D\u8D39 {freeDomainSuffix} \u5B50\u57DF\u540D",
-    runningServices: "{runningServices} \u4E2A\u540C\u65F6\u8FD0\u884C\u7684\u670D\u52A1:\u5E94\u7528\u3001\u6570\u636E\u5E93\u3001\u540E\u53F0\u4EFB\u52A1",
-    power: "\u6BCF\u4E2A\u670D\u52A1\u6700\u9AD8\u53EF\u8FBE {powerCpu} vCPU \u548C {powerRamGb} GB RAM",
-    projects: "{maxProjects} \u4E2A\u9879\u76EE",
-    projectsUnlimited: "\u9879\u76EE\u4E0D\u9650\u6570\u91CF",
-    meteredCredits: "\u8BA1\u7B97\u3001\u6D41\u91CF\u548C\u5B58\u50A8\u90FD\u4ECE\u4F60\u7684\u6BCF\u6708\u79EF\u5206\u4E2D\u6263\u9664"
+    selfHostedFreeSubdomains: "\u8FDE\u63A5 Cloud \u540E\u53EF\u83B7\u5F97 {freeSubdomains} \u4E2A\u514D\u8D39 {freeDomainSuffix} \u5B50\u57DF\u540D"
   },
   selfHosted: {
     name: "\u81EA\u6258\u7BA1",
@@ -24190,9 +24752,9 @@ var zh_default = {
     cta: "\u5F00\u59CB\u81EA\u6258\u7BA1"
   },
   creditPacks: {
-    pack_5k: "{credits} \u79EF\u5206",
-    pack_25k: "{credits} \u79EF\u5206",
-    pack_100k: "{credits} \u79EF\u5206"
+    pack_5k: "{computeMinutes} \u8BA1\u7B97\u5206\u949F",
+    pack_25k: "{computeMinutes} \u8BA1\u7B97\u5206\u949F",
+    pack_100k: "{computeMinutes} \u8BA1\u7B97\u5206\u949F"
   },
   ui: {
     perMonth: "/\u6708",
@@ -24208,7 +24770,9 @@ var zh_default = {
     billedMonthly: "\u6309\u6708\u8BA1\u8D39,\u53EF\u968F\u65F6\u53D6\u6D88",
     campaignBadge: "\u7ACB\u51CF {percentOff}%",
     campaignEnds: "\u4F18\u60E0\u622A\u6B62 {date}",
-    wasPrice: "\u539F\u4EF7 {price}"
+    wasPrice: "\u539F\u4EF7 {price}",
+    standardTitle: "\u6240\u6709\u5957\u9910\u5747\u5305\u542B",
+    creditPackNote: "\u2248 \u5C0F\u578B\u5E94\u7528\u8FD0\u884C {appHours} \u5C0F\u65F6,\u6216 {buildMinutes} \u6784\u5EFA\u5206\u949F"
   }
 };
 
@@ -24258,6 +24822,17 @@ function featureTemplate(key, locale) {
   return copyFor(locale).features?.[key] ?? en_default2.features[key] ?? null;
 }
 var PLAN_BY_ID = new Map(PRICING.plans.map((p) => [p.id, p]));
+var MILLI_PER_COMPUTE_MINUTE = 1e3;
+function buildUnitsPerMinute() {
+  return PRICING.oblien.buildResources.cpuCores / RESOURCE_TIER_SPECS.low.cpuCores;
+}
+function planMonthlyCredits(planId) {
+  const plan = PLAN_BY_ID.get(planId ?? "") ?? PLAN_BY_ID.get(DEFAULT_PLAN_TIER);
+  const { computeMinutesPerMonth, buildMinutesPerMonth } = plan.limits;
+  if (computeMinutesPerMonth === null || buildMinutesPerMonth === null) return null;
+  const units = computeMinutesPerMonth + buildMinutesPerMonth * buildUnitsPerMinute();
+  return Math.round(units * MILLI_PER_COMPUTE_MINUTE);
+}
 function toOblienLimits(limits) {
   const { runningServices, maxResourceTier } = limits;
   if (runningServices === null && maxResourceTier === null) return null;
@@ -24287,11 +24862,12 @@ function placeholders(plan, locale) {
     powerCpu: svc ? formatDecimal(svc.cpuCores, locale) : unlimited,
     powerRamGb: svc ? formatDecimal(svc.memoryMb / 1024, locale) : unlimited,
     powerDiskGb: svc ? formatCount(Math.round(svc.diskMb / 1024), locale) : unlimited,
-    credits: plan.credits.monthlyMilli === null ? unlimited : formatCount(plan.credits.monthlyMilli / 1e3, locale),
+    computeMinutes: n(limits.computeMinutesPerMonth),
     inherited: plan.inherits ? planName(plan.inherits, locale) : "",
     freeDomainSuffix: PRICING.freeDomainSuffix
   };
 }
+var EVERYTHING_IN_KEY = "everythingIn";
 function resolvePlan(planId, locale = "en") {
   const plan = PLAN_BY_ID.get(planId) ?? PLAN_BY_ID.get(DEFAULT_PLAN_TIER);
   const values = placeholders(plan, locale);
@@ -24300,10 +24876,14 @@ function resolvePlan(planId, locale = "en") {
     name: planName(plan.id, locale),
     description: planTagline(plan.id, locale),
     price: plan.price,
-    monthlyCredits: plan.credits.monthlyMilli,
+    monthlyCredits: planMonthlyCredits(plan.id),
     oblienLimits: toOblienLimits(plan.limits),
     limits: plan.limits,
-    features: plan.features.map((key) => {
+    ...(() => {
+      const lead = plan.features.includes(EVERYTHING_IN_KEY) ? featureTemplate(EVERYTHING_IN_KEY, locale) : null;
+      return lead === null ? {} : { inheritedFrom: fill(lead, values) };
+    })(),
+    features: plan.features.filter((key) => key !== EVERYTHING_IN_KEY).map((key) => {
       const template = featureTemplate(key, locale);
       return template === null ? null : fill(template, values);
     }).filter((s) => s !== null),
@@ -24317,10 +24897,17 @@ var PLANS = Object.fromEntries(
 );
 function resolveCreditPacks(locale = "en") {
   return [...PRICING.creditPacks].sort((a, b) => a.sortOrder - b.sortOrder).map((pack) => {
-    const template = copyFor(locale).creditPacks?.[pack.id] ?? en_default2.creditPacks[pack.id] ?? "{credits}";
+    const template = copyFor(locale).creditPacks?.[pack.id] ?? en_default2.creditPacks[pack.id] ?? "{computeMinutes}";
+    const minutes = pack.creditsMilli / MILLI_PER_COMPUTE_MINUTE;
+    const amount = formatCount(minutes, locale);
+    const noteTemplate = copyFor(locale).ui?.creditPackNote ?? en_default2.ui.creditPackNote;
     return {
       id: pack.id,
-      name: fill(template, { credits: formatCount(pack.creditsMilli / 1e3, locale) }),
+      name: fill(template, { computeMinutes: amount, credits: amount }),
+      explains: fill(noteTemplate, {
+        appHours: formatCount(Math.round(minutes / 60), locale),
+        buildMinutes: formatCount(Math.round(minutes / buildUnitsPerMinute()), locale)
+      }),
       credits_milli: pack.creditsMilli,
       price_cents: pack.priceCents,
       sortOrder: pack.sortOrder
@@ -24332,6 +24919,240 @@ var ANNUAL_ENABLED = PRICING.annual.enabled;
 var ANNUAL_MONTHS_FREE = PRICING.annual.monthsFree;
 var FREE_DOMAIN_SUFFIX = PRICING.freeDomainSuffix;
 
+// ../../packages/core/src/project-source.ts
+var MAX_IMAGE_NAME_LENGTH = 255;
+var MAX_IMAGE_TAG_LENGTH = 128;
+var IMAGE_PATH_COMPONENT_RE = /^[a-z0-9]+(?:(?:[._]|__|-+)[a-z0-9]+)*$/;
+var IMAGE_TAG_RE = /^[A-Za-z0-9_][A-Za-z0-9_.-]{0,127}$/;
+var IMAGE_DIGEST_RE = /^([A-Za-z][A-Za-z0-9]*(?:[+._-][A-Za-z][A-Za-z0-9]*)*):([A-Za-z0-9=_-]+)$/;
+var IMAGE_DOMAIN_LABEL_RE = /^[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?$/;
+function validateImageReference(ref) {
+  if (typeof ref !== "string") return "Container image reference must be a string.";
+  if (!ref) return "Container image reference cannot be empty.";
+  if (ref !== ref.trim()) return "Container image reference cannot have surrounding whitespace.";
+  if (/\s/.test(ref))
+    return `Container image reference ${JSON.stringify(ref)} cannot contain whitespace.`;
+  if (ref.includes("\0"))
+    return `Container image reference ${JSON.stringify(ref)} contains a NUL byte.`;
+  if (ref.includes("://")) {
+    return `Container image reference ${JSON.stringify(ref)} must not include a URL scheme.`;
+  }
+  const at = ref.indexOf("@");
+  if (at !== -1 && at !== ref.lastIndexOf("@")) {
+    return `Container image reference ${JSON.stringify(ref)} contains more than one digest separator (@).`;
+  }
+  const nameAndTag = at === -1 ? ref : ref.slice(0, at);
+  const digest = at === -1 ? null : ref.slice(at + 1);
+  if (!nameAndTag)
+    return `Container image reference ${JSON.stringify(ref)} is missing a repository name.`;
+  if (digest !== null) {
+    const parsed = IMAGE_DIGEST_RE.exec(digest);
+    if (!parsed) {
+      return `Container image reference ${JSON.stringify(ref)} has an invalid OCI digest.`;
+    }
+    if (parsed[1].toLowerCase() === "sha256" && !/^[a-fA-F0-9]{64}$/.test(parsed[2])) {
+      return `Container image reference ${JSON.stringify(ref)} has an invalid sha256 digest (expected 64 hexadecimal characters).`;
+    }
+  }
+  const lastSlash = nameAndTag.lastIndexOf("/");
+  const lastColon = nameAndTag.lastIndexOf(":");
+  const hasTag = lastColon > lastSlash;
+  const name = hasTag ? nameAndTag.slice(0, lastColon) : nameAndTag;
+  const tag = hasTag ? nameAndTag.slice(lastColon + 1) : null;
+  if (!name)
+    return `Container image reference ${JSON.stringify(ref)} is missing a repository name.`;
+  if (name.length > MAX_IMAGE_NAME_LENGTH) {
+    return `Container image repository name is too long (${name.length}; maximum ${MAX_IMAGE_NAME_LENGTH}).`;
+  }
+  if (tag !== null) {
+    if (!tag) return `Container image reference ${JSON.stringify(ref)} has an empty tag.`;
+    if (tag.length > MAX_IMAGE_TAG_LENGTH || !IMAGE_TAG_RE.test(tag)) {
+      return `Container image reference ${JSON.stringify(ref)} has an invalid tag; tags must be 1-${MAX_IMAGE_TAG_LENGTH} ASCII letters, digits, underscores, periods, or hyphens and cannot start with a period or hyphen.`;
+    }
+  }
+  const parts = name.split("/");
+  if (parts.some((part) => !part)) {
+    return `Container image reference ${JSON.stringify(ref)} contains an empty repository path component.`;
+  }
+  const first = parts[0];
+  const hasRegistry = parts.length > 1 && (first.includes(".") || first.includes(":") || first === "localhost" || first.startsWith("["));
+  const path = hasRegistry ? parts.slice(1) : parts;
+  if (path.length === 0 || path.some((part) => !IMAGE_PATH_COMPONENT_RE.test(part))) {
+    return `Container image reference ${JSON.stringify(ref)} has an invalid repository path; repository names must be lowercase OCI path components.`;
+  }
+  if (hasRegistry) {
+    const registryError = validateImageRegistry(first);
+    if (registryError) return `Container image reference ${JSON.stringify(ref)} ${registryError}`;
+  }
+  return null;
+}
+function validateReleaseVersionUrl(value) {
+  if (typeof value !== "string" || !value.trim()) {
+    return "Release version URL cannot be empty.";
+  }
+  if (value !== value.trim()) {
+    return "Release version URL cannot have surrounding whitespace.";
+  }
+  let url2;
+  try {
+    url2 = new URL(value);
+  } catch {
+    return "Release version URL must be a valid HTTPS URL.";
+  }
+  if (url2.protocol !== "https:") {
+    return "Release version URL must use HTTPS.";
+  }
+  if (url2.username || url2.password) {
+    return "Release version URL must not include embedded credentials.";
+  }
+  return null;
+}
+function validateReleaseRepository(value) {
+  if (typeof value !== "string" || !value.trim()) {
+    return 'GitHub release repository must use the "owner/repository" format.';
+  }
+  if (value !== value.trim()) {
+    return "GitHub release repository cannot have surrounding whitespace.";
+  }
+  const parts = value.split("/");
+  if (parts.length !== 2) {
+    return 'GitHub release repository must use the "owner/repository" format.';
+  }
+  const [owner, repository] = parts;
+  const ownerValid = owner.length <= 39 && /^[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?$/.test(owner);
+  const repositoryValid = repository.length <= 100 && repository !== "." && repository !== ".." && /^[A-Za-z0-9_.-]+$/.test(repository);
+  if (!ownerValid || !repositoryValid) {
+    return "GitHub release repository contains an invalid owner or repository name.";
+  }
+  return null;
+}
+function isValidBracketedIpv6Host(host) {
+  if (!/^\[[0-9a-fA-F:]+\]$/.test(host)) return false;
+  try {
+    const parsed = new URL(`http://${host}/`);
+    return parsed.hostname.startsWith("[") && parsed.hostname.endsWith("]");
+  } catch {
+    return false;
+  }
+}
+function validateImageRegistry(registry2) {
+  let host = registry2;
+  let port = null;
+  if (registry2.startsWith("[")) {
+    const close = registry2.indexOf("]");
+    if (close <= 1) return "has an invalid bracketed IPv6 registry host.";
+    host = registry2.slice(0, close + 1);
+    const rest = registry2.slice(close + 1);
+    if (rest) {
+      if (!rest.startsWith(":")) return "has invalid characters after its registry host.";
+      port = rest.slice(1);
+    }
+    if (!isValidBracketedIpv6Host(host)) {
+      return "has an invalid bracketed IPv6 registry host.";
+    }
+  } else {
+    const colon = registry2.lastIndexOf(":");
+    if (colon !== -1) {
+      host = registry2.slice(0, colon);
+      port = registry2.slice(colon + 1);
+    }
+    if (!host) return "is missing its registry host.";
+    const labels = host.split(".");
+    if (labels.some((label) => !IMAGE_DOMAIN_LABEL_RE.test(label))) {
+      return "has an invalid registry hostname.";
+    }
+  }
+  if (port !== null) {
+    if (!/^\d+$/.test(port)) return "has a non-numeric registry port.";
+    const value = Number(port);
+    if (value < 1 || value > 65535) return "has a registry port outside 1-65535.";
+  }
+  return null;
+}
+var RELEASE_IMAGE_PLACEHOLDERS = ["version", "tag"];
+function renderReleaseImage(template, opts) {
+  if (typeof template !== "string" || !template.trim()) {
+    throw new Error("Release image template cannot be empty.");
+  }
+  if (template !== template.trim()) {
+    throw new Error("Release image template cannot have surrounding whitespace.");
+  }
+  let insidePlaceholder = false;
+  for (const char of template) {
+    if (char === "{") {
+      if (insidePlaceholder) {
+        throw new Error(
+          `Release image template ${JSON.stringify(template)} contains malformed placeholder braces.`
+        );
+      }
+      insidePlaceholder = true;
+    } else if (char === "}") {
+      if (!insidePlaceholder) {
+        throw new Error(
+          `Release image template ${JSON.stringify(template)} contains malformed placeholder braces.`
+        );
+      }
+      insidePlaceholder = false;
+    }
+  }
+  if (insidePlaceholder) {
+    throw new Error(
+      `Release image template ${JSON.stringify(template)} contains malformed placeholder braces.`
+    );
+  }
+  const placeholders2 = template.match(/\{[^{}]*\}/g) ?? [];
+  const unknown2 = placeholders2.filter(
+    (placeholder) => !RELEASE_IMAGE_PLACEHOLDERS.includes(placeholder.slice(1, -1))
+  );
+  if (unknown2.length > 0) {
+    throw new Error(
+      `Release image template ${JSON.stringify(template)} uses unknown placeholder(s) ${unknown2.join(", ")}. Supported: ${RELEASE_IMAGE_PLACEHOLDERS.map((p) => `{${p}}`).join(" ")}.`
+    );
+  }
+  if (!template.includes("{version}") && !template.includes("{tag}")) {
+    throw new Error(
+      `Release image template ${JSON.stringify(template)} must contain {version} or {tag}.`
+    );
+  }
+  if (template.includes("@")) {
+    throw new Error(
+      `Release image template ${JSON.stringify(template)} must use a tag, not a digest.`
+    );
+  }
+  const lastSlash = template.lastIndexOf("/");
+  const tagColon = template.lastIndexOf(":");
+  if (tagColon <= lastSlash) {
+    throw new Error(
+      `Release image template ${JSON.stringify(template)} must put {version} or {tag} in an explicit image tag.`
+    );
+  }
+  const tagStart = tagColon + 1;
+  for (const placeholder of ["{version}", "{tag}"]) {
+    let at = template.indexOf(placeholder);
+    while (at !== -1) {
+      if (at < tagStart) {
+        throw new Error(
+          `Release image template ${JSON.stringify(template)} may use ${placeholder} only in the image tag.`
+        );
+      }
+      at = template.indexOf(placeholder, at + placeholder.length);
+    }
+  }
+  const rawVersion = opts.version?.trim();
+  const rawTag = opts.tag?.trim();
+  if (!rawVersion) throw new Error("Release image version cannot be empty.");
+  if (!rawTag) throw new Error("Release image tag cannot be empty.");
+  const version2 = rawVersion.replace(/^v/i, "");
+  if (!version2) throw new Error("Release image version cannot contain only a leading v.");
+  const rendered = template.replace(
+    /\{(?:version|tag)\}/g,
+    (placeholder) => placeholder === "{version}" ? version2 : rawTag
+  );
+  const invalid = validateImageReference(rendered);
+  if (invalid) throw new Error(invalid);
+  return rendered;
+}
+
 // ../../packages/core/src/updates/types.ts
 var GITHUB_REPO = "oblien/openship";
 var RELEASES_LATEST_API = `https://api.github.com/repos/${GITHUB_REPO}/releases/latest`;
@@ -24463,6 +25284,13 @@ var AUDIT_EVENTS = {
     tone: "warning",
     description: "A delete was refused \u2014 something still depends on this app."
   },
+  "project.deletion.failed": {
+    category: "apps",
+    action: "failed to delete",
+    label: "App deletion failed",
+    tone: "warning",
+    description: "Cleanup did not complete, so the app record was kept for a safe retry."
+  },
   "project:write": {
     category: "apps",
     action: "changed",
@@ -24688,6 +25516,13 @@ var AUDIT_EVENTS = {
     label: "Server removed",
     tone: "danger"
   },
+  "server.removal.rejected": {
+    category: "servers",
+    action: "tried to remove the server",
+    label: "Server removal refused",
+    tone: "warning",
+    description: "A removal was refused because a workload could not be torn down, or was destroyed but left a resource behind for cleanup. The server row was kept so those resources can still be reclaimed."
+  },
   "server.exec": {
     category: "servers",
     action: "ran a command on the server",
@@ -24943,6 +25778,20 @@ var AUDIT_EVENTS = {
     tone: "warning",
     description: "A full database dump left this instance."
   },
+  "instance.data.receive_code_created": {
+    category: "security",
+    action: "created a direct data-transfer receive code",
+    label: "Data-transfer receive code created",
+    tone: "warning",
+    description: "A short-lived code was created to receive instance data directly."
+  },
+  "instance.data.sent": {
+    category: "security",
+    action: "sent instance data to another instance",
+    label: "Instance data sent",
+    tone: "warning",
+    description: "Selected instance data was transferred directly to another instance."
+  },
   "instance.data.imported": {
     category: "security",
     action: "imported instance data",
@@ -25451,132 +26300,100 @@ function idSuffix(distroId) {
   return distroId ? ` (os-release ID=${JSON.stringify(distroId)})` : "";
 }
 
-// ../../packages/adapters/src/system/errors.ts
-var SSH_AUTH_ERROR_PATTERNS = [
-  "All configured authentication methods failed"
-];
-var RETRYABLE_CONNECTION_ERROR_PATTERNS = [
-  "ECONNRESET",
-  "ECONNREFUSED",
-  "ETIMEDOUT",
-  "EHOSTUNREACH",
-  "ENETUNREACH",
-  "Timed out",
-  "Not connected",
-  "Connection lost",
-  "read ECONNRESET",
-  "Handshake failed",
-  "keepalive timeout",
-  "SSH connection closed before ready",
-  // ssh2 emits "Channel open failure: open failed" / "Channel open failure: …"
-  // when the SSH SERVER refuses a new channel - typically because the cached
-  // connection has gone half-dead (peer-side LOGOUT, network blip,
-  // remote sshd MaxSessions). The inner SshExecutor retries `exec`/
-  // `streamExec` on this, but `pipeLocal`, `transferIn`, and any other
-  // channel-bearing op bubble it up. Listing it here lets `withExecutor`
-  // drop the dead connection and retry transparently - fixes the
-  // "first redeploy fails, second click works" pattern.
-  "Channel open failure",
-  "open failed"
-  // NOT "socket hang up": it is what an HTTP client reports for ANY far end that vanished
-  // mid-request, including a permission-denied Docker socket and a wedged channel, neither
-  // of which a fresh connection fixes. A match here makes `withExecutor` replay its whole
-  // callback — and those callbacks install mail, create mailboxes and ensure the edge, so a
-  // non-retryable cause becomes a repeated mutation. `core/connectivity.ts` labels it
-  // without retrying, `api/lib/remote-state.ts` still maps it to a 503, and the bridge's
-  // 502 carries the real reason — so leaving it out here costs no diagnosis.
-];
-var SshDisconnectedError = class extends Error {
-  constructor(message = "SSH connection lost") {
-    super(message);
-    this.name = "SshDisconnectedError";
-  }
-};
-function isSshDisconnectedError(err) {
-  return err instanceof SshDisconnectedError || err instanceof Error && err.name === "SshDisconnectedError";
-}
-function isSshAuthError(err) {
-  if (!(err instanceof Error)) return false;
-  return SSH_AUTH_ERROR_PATTERNS.some((pattern) => err.message.includes(pattern));
-}
-var HostChannelUnavailableError = class extends Error {
-  code;
-  constructor(code, message) {
-    super(message);
-    this.name = "HostChannelUnavailableError";
-    this.code = code;
+// ../../packages/core/src/network.ts
+function ipv4Octets(host) {
+  const parts = host.split(".");
+  if (parts.length !== 4) return null;
+  const octets = parts.map((part) => /^(?:0|[1-9]\d{0,2})$/.test(part) ? Number(part) : NaN);
+  if (octets.some((octet) => !Number.isInteger(octet) || octet < 0 || octet > 255)) {
+    return null;
   }
-};
-function isRetryableRemoteConnectionError(err) {
-  if (isSshDisconnectedError(err)) return true;
-  if (!(err instanceof Error)) return false;
-  return RETRYABLE_CONNECTION_ERROR_PATTERNS.some(
-    (pattern) => err.message.includes(pattern)
+  return octets;
+}
+function ipv6Words(host) {
+  let value = host;
+  const zone = value.indexOf("%");
+  if (zone >= 0) value = value.slice(0, zone);
+  const dottedTail = /(?:^|:)(\d+\.\d+\.\d+\.\d+)$/.exec(value)?.[1];
+  if (dottedTail) {
+    const octets = ipv4Octets(dottedTail);
+    if (!octets) return null;
+    const replacement = `${(octets[0] << 8 | octets[1]).toString(16)}:${(octets[2] << 8 | octets[3]).toString(16)}`;
+    value = value.slice(0, -dottedTail.length) + replacement;
+  }
+  if ((value.match(/::/g) ?? []).length > 1) return null;
+  const [leftRaw, rightRaw] = value.split("::");
+  const left = leftRaw ? leftRaw.split(":") : [];
+  const right = rightRaw ? rightRaw.split(":") : [];
+  if ([...left, ...right].some((word) => !/^[0-9a-f]{1,4}$/i.test(word))) return null;
+  const compressed = value.includes("::");
+  const missing = 8 - left.length - right.length;
+  if (!compressed && missing !== 0 || compressed && missing < 1) return null;
+  return [...left, ...Array.from({ length: missing }, () => "0"), ...right].map(
+    (word) => Number.parseInt(word, 16)
   );
 }
-function isRemoteConnectionError(err) {
-  return isSshAuthError(err) || isRetryableRemoteConnectionError(err);
-}
-var MAX_COMMAND_CHARS = 120;
-function commandForError(command) {
-  const oneLine = command.trim().replace(/\s+/g, " ");
-  return oneLine.length > MAX_COMMAND_CHARS ? `${oneLine.slice(0, MAX_COMMAND_CHARS)}\u2026 (${command.length} chars)` : oneLine;
-}
-function isRuntimeNotFoundError(err) {
-  if (!err || typeof err !== "object") return false;
-  const e = err;
-  if (e.statusCode === 404) return true;
-  return typeof e.message === "string" && /no such (container|image|volume|network)/i.test(e.message);
-}
-
-// ../../packages/adapters/src/system/debug.ts
-function isTruthy(value) {
+function isLoopbackHost(host) {
+  if (!host) return false;
+  let value = host.trim().toLowerCase();
+  if (value.startsWith("[") && value.endsWith("]")) value = value.slice(1, -1);
+  value = value.replace(/\.+$/, "");
   if (!value) return false;
-  return ["1", "true", "yes", "on", "debug"].includes(value.toLowerCase());
-}
-function isSystemDebugEnabled() {
-  return isTruthy(process.env.SYSTEM_DEBUG_LOGS);
-}
-function systemDebug(scope, message) {
-  if (!isSystemDebugEnabled()) return;
-  const timestamp = (/* @__PURE__ */ new Date()).toISOString();
-  console.log(`[system-debug] ${timestamp} [${scope}] ${message}`);
-}
-function formatDuration(startMs) {
-  return `${Date.now() - startMs}ms`;
+  if (value === "localhost" || value.endsWith(".localhost") || value === "localhost.localdomain" || value === "ip6-localhost" || value === "ip6-loopback") {
+    return true;
+  }
+  const ipv43 = ipv4Octets(value);
+  if (ipv43) return ipv43[0] === 127 || ipv43.every((octet) => octet === 0);
+  const words = ipv6Words(value);
+  if (!words) return false;
+  if (words.every((word) => word === 0)) return true;
+  if (words.slice(0, 7).every((word) => word === 0) && words[7] === 1) return true;
+  const ipv4PrefixIsLocal = words[6] >> 8 === 127;
+  const mapped = words.slice(0, 5).every((word) => word === 0) && words[5] === 65535;
+  const compatible = words.slice(0, 6).every((word) => word === 0);
+  return ipv4PrefixIsLocal && (mapped || compatible);
 }
 
 export {
+  shellQuote,
+  shellSplitWords,
+  commandToArgv,
   LANGUAGES,
   STACKS,
   TRANSFER_EXCLUDES,
   buildOutputTransferExcludes,
   PACKAGE_ROOT_ONLY_EXCLUDES,
   packageManagerEnsureCommand,
+  nodeBinDirs,
+  nodeBinPathExport,
   appVolumeTargets,
   parseComposeNamespace,
   ownsNetworkEndpoint,
+  resolveRedirectStatus,
+  isValidEmail,
+  formatBytes,
+  withTimeout,
+  isValidEnvKey,
+  wrapText,
+  composeBuildIssues,
   composeMountToSpec,
   composeMountIssues,
   composePortToSpec,
   isAwsS3Endpoint,
   DEFAULT_IMAGE_REGISTRY,
-  shellQuote,
-  shellSplitWords,
-  commandToArgv,
   registryForImage,
   registryConfigKeys,
   buildEdgeImageRef,
   buildMailImageRef,
   SYSTEM,
-  resolveRedirectStatus,
-  isValidEmail,
-  formatBytes,
-  withTimeout,
-  wrapText,
   AppError,
   DeployError,
   safeErrorMessage,
+  payloadSpec,
+  normalizeBackupPath,
+  validateBackupPath,
+  validateClearPath,
+  isDbImage,
   LOCAL_DASHBOARD_URL,
   LOCAL_API_URL,
   CLOUD_DASHBOARD_URL,
@@ -25588,6 +26405,9 @@ export {
   missingOutputDirectoryMessage,
   compareSemver,
   PRICING,
+  validateReleaseVersionUrl,
+  validateReleaseRepository,
+  renderReleaseImage,
   resolveCliUpdatePlan,
   cliInstallCommand,
   PROXY_DIRECTIVES,
@@ -25623,13 +26443,5 @@ export {
   hostChannelRuleScope,
   hostFirewallRule,
   hostFirewallRuleRemoval,
-  SshDisconnectedError,
-  isSshAuthError,
-  HostChannelUnavailableError,
-  isRetryableRemoteConnectionError,
-  isRemoteConnectionError,
-  commandForError,
-  isRuntimeNotFoundError,
-  systemDebug,
-  formatDuration
+  isLoopbackHost
 };