openship 0.6.6 → 0.6.8

package/dist/index.js

@@ -26,7 +26,7 @@ import {
   stop,
   upCommand,
   writeCliInstall
-} from "./chunk-NK5N5LXN.js";
+} from "./chunk-RCMERVBL.js";
 import {
   composeDown,
   composeInternalToken,
@@ -60,7 +60,7 @@ import {
   sourceBuildDir,
   storedApiPort,
   storedDashboardPort
-} from "./chunk-WVAML4H6.js";
+} from "./chunk-5I3COAFH.js";
 import {
   bootstrapAdmin,
   detectPublicIp,
@@ -71,10 +71,10 @@ import {
   internalTokenRejectedProblem,
   waitDashboard,
   waitHealthy
-} from "./chunk-VTGPEC6B.js";
+} from "./chunk-7YBWXEM6.js";
 import {
   startUnitHint
-} from "./chunk-5DMWSTOM.js";
+} from "./chunk-5UXHT6ED.js";
 import "./chunk-QWHBRY2K.js";
 import {
   completeHostEdge,
@@ -85,13 +85,13 @@ import {
   renderEdgeConflict,
   repairEdgeConflict,
   rollbackHostEdge
-} from "./chunk-CBLD2HS5.js";
+} from "./chunk-NUT6HKK6.js";
 import {
   DATA_DIR,
   LOG_DIR,
   OS_DIR
 } from "./chunk-ELGRMZOW.js";
-import "./chunk-HKRQXPTI.js";
+import "./chunk-R5DC5PEF.js";
 import "./chunk-ONKEYSMY.js";
 import "./chunk-XZYFZ6A5.js";
 import "./chunk-PDW4L3NV.js";
@@ -100,35 +100,39 @@ import "./chunk-42WQABXM.js";
 import "./chunk-DRK3MEDS.js";
 import "./chunk-3NQQXMDR.js";
 import "./chunk-ZWLDLTJP.js";
-import "./chunk-FE7ZZQSE.js";
-import "./chunk-OBPKYXQL.js";
+import "./chunk-D3OEMXYP.js";
+import "./chunk-MUWVC5R4.js";
 import {
   detectInstalledProxy,
   scanImportableSites
-} from "./chunk-A4GXYE4L.js";
-import "./chunk-QVW76WDL.js";
-import "./chunk-RSR7PFIQ.js";
+} from "./chunk-NIYD7MD2.js";
+import "./chunk-IAMOUDHY.js";
+import "./chunk-7PEXM2UI.js";
 import "./chunk-I3DPMTSF.js";
 import "./chunk-WNWQBB7F.js";
-import "./chunk-2GWYYHOR.js";
-import "./chunk-RXQBD4ZY.js";
-import "./chunk-77QDF6UD.js";
-import "./chunk-LUKYPVJ4.js";
-import "./chunk-LFE5KQ7Y.js";
-import "./chunk-YIMOCZBZ.js";
-import "./chunk-LH2PLRQO.js";
-import "./chunk-MLYSEZQB.js";
-import "./chunk-Q7WGTQQ5.js";
-import "./chunk-PCPVTH6M.js";
+import "./chunk-NRU2EBYZ.js";
+import "./chunk-RHLNVZMS.js";
+import "./chunk-3MP6ACKM.js";
+import "./chunk-6GU6JSK6.js";
+import "./chunk-ENKJ7XIF.js";
+import "./chunk-5DJOB7IX.js";
+import "./chunk-SK4FFCFR.js";
+import "./chunk-AHJYP7DG.js";
+import "./chunk-UAWY6X7V.js";
+import "./chunk-R4VDPFLS.js";
+import "./chunk-VAI5VOOI.js";
+import "./chunk-TAZZZKYO.js";
 import {
   LocalExecutor
-} from "./chunk-6FH4AXVY.js";
-import "./chunk-4I2BM2DT.js";
-import "./chunk-YMMQRE5J.js";
-import "./chunk-UVNMQM7W.js";
-import "./chunk-ZFJXPCQP.js";
-import "./chunk-2YM3NI2E.js";
-import "./chunk-SM26HDS2.js";
+} from "./chunk-T6DVUX4F.js";
+import "./chunk-T46BQOLY.js";
+import "./chunk-GNOMEMNI.js";
+import "./chunk-NPSRGIHV.js";
+import "./chunk-P7RCYELG.js";
+import "./chunk-X53JXRS4.js";
+import "./chunk-BO6CY4V2.js";
+import "./chunk-D6HU4VUZ.js";
+import "./chunk-N5YZMO33.js";
 import {
   CLOUD_DASHBOARD_URL,
   HOST_CHANNEL_AUTH_REJECTED_SHORT,
@@ -138,15 +142,19 @@ import {
   buildMailImageRef,
   cliInstallCommand,
   commandToArgv,
+  composeBuildIssues,
   composeMountIssues,
   composeMountToSpec,
   composePortToSpec,
   isValidEmail,
   parseComposeNamespace,
   parseOpenshipConfigJson,
+  renderReleaseImage,
   resolveCliUpdatePlan,
-  summarizeHostChannelCause
-} from "./chunk-UJ6JZM65.js";
+  summarizeHostChannelCause,
+  validateReleaseRepository,
+  validateReleaseVersionUrl
+} from "./chunk-WEZFTL4V.js";
 import "./chunk-PXKCZB2I.js";
 
 // src/index.ts
@@ -305,7 +313,7 @@ function getDashboardUrl(name) {
 }
 
 // src/lib/api-client.ts
-var USER_AGENT = `openship-cli/${true ? "0.6.6" : "dev"}`;
+var USER_AGENT = `openship-cli/${true ? "0.6.8" : "dev"}`;
 function getApiUrl2() {
   return `${getApiUrl()}/api`;
 }
@@ -1101,7 +1109,7 @@ function dockerNameRunning(nameFilter) {
   return r.stdout.trim().length > 0;
 }
 async function hostControlCheck(api) {
-  const { checkHostChannel } = await import("./host-channel-preflight-KE6OONYK.js");
+  const { checkHostChannel } = await import("./host-channel-preflight-OMCZMMKR.js");
   return hostControlRow(await checkHostChannel().catch(() => null), api);
 }
 var NEVER_PROVISIONED_DETAIL = `never provisioned \u2014 run \`${HOST_CHANNEL_PROVISION_COMMAND}\``;
@@ -1506,7 +1514,7 @@ async function interactiveDoctor() {
       continue;
     }
     if (action2 === "host-control") {
-      const { verifyHostChannel } = await import("./host-channel-preflight-KE6OONYK.js");
+      const { verifyHostChannel } = await import("./host-channel-preflight-OMCZMMKR.js");
       const report3 = await verifyHostChannel().catch(() => null);
       if (report3?.status === "fixed") log2.success("Host control is reachable now.");
       else if (report3?.status === "ok") log2.success("Host control was already reachable.");
@@ -1613,8 +1621,6 @@ async function deployFolder(opts) {
       tarball,
       "--exclude=./node_modules",
       "--exclude=./.git",
-      "--exclude=./dist",
-      "--exclude=./.next",
       "--exclude=./.DS_Store",
       "-C",
       cwd,
@@ -1682,7 +1688,11 @@ async function deployFolder(opts) {
     })
   });
   if (!dep.deployment_id) throw new Error(dep.error || "Failed to start deployment");
-  return { deploymentId: dep.deployment_id, projectId: dep.project_id };
+  return {
+    deploymentId: dep.deployment_id,
+    projectId: dep.project_id,
+    ...scan.configDiagnostics && { configDiagnostics: scan.configDiagnostics }
+  };
 }
 
 // src/lib/sse.ts
@@ -1871,8 +1881,18 @@ var deployCommand = new Command11("deploy").description("Trigger a deployment fo
         }
       });
       deploymentId = result2.deploymentId;
-      payload = { success: true, deployment_id: result2.deploymentId, project_id: result2.projectId };
+      payload = {
+        success: true,
+        deployment_id: result2.deploymentId,
+        project_id: result2.projectId,
+        ...result2.configDiagnostics && { configDiagnostics: result2.configDiagnostics }
+      };
       spinner5?.succeed(deploymentId ? `Deployment queued: ${deploymentId}` : "Deployment queued");
+      if (result2.configDiagnostics?.wholeFile) {
+        err("  \u2717 openship.json was ignored entirely \u2014 deployed with detected settings:");
+      }
+      for (const e of result2.configDiagnostics?.errors ?? []) err(`    \u2022 ${e}`);
+      for (const w of result2.configDiagnostics?.warnings ?? []) info(`    \u26A0 ${w}`);
     } catch (e) {
       spinner5?.fail("Folder deploy failed");
       err(e instanceof ApiError ? e.message : String(e));
@@ -2179,7 +2199,10 @@ function printProject(project) {
     ["name", project.name],
     ["slug", project.slug],
     ["framework", project.framework],
-    ["gitRepo", project.gitOwner && project.gitRepo ? `${project.gitOwner}/${project.gitRepo}` : null],
+    [
+      "gitRepo",
+      project.gitOwner && project.gitRepo ? `${project.gitOwner}/${project.gitRepo}` : null
+    ],
     ["gitBranch", project.gitBranch],
     ["autoDeploy", project.autoDeploy],
     ["status", project.status]
@@ -2191,6 +2214,46 @@ function printProject(project) {
   }
 }
 var ENVIRONMENTS = ["production", "preview", "development"];
+function releaseImageSourceFromOptions(opts) {
+  const imageTemplate = opts.imageTemplate.trim();
+  const repo = opts.githubRepo?.trim() || void 0;
+  const versionUrl = opts.versionUrl?.trim() || void 0;
+  const pinnedVersion = opts.pin?.trim() || void 0;
+  const validationTag = pinnedVersion ?? "v1.2.3";
+  renderReleaseImage(imageTemplate, {
+    version: validationTag.replace(/^v/i, ""),
+    tag: validationTag
+  });
+  if (repo && versionUrl) {
+    throw new Error("--github-repo cannot be combined with --version-url.");
+  }
+  if (repo) {
+    const invalidRepo = validateReleaseRepository(repo);
+    if (invalidRepo)
+      throw new Error(invalidRepo.replace("GitHub release repository", "--github-repo"));
+    return {
+      artifactKind: "image",
+      mode: "github",
+      imageTemplate,
+      repo,
+      ...pinnedVersion ? { pinnedVersion } : {}
+    };
+  }
+  if (!versionUrl && !pinnedVersion) {
+    throw new Error("Pass --github-repo, --version-url, or --pin.");
+  }
+  if (versionUrl) {
+    const invalidUrl = validateReleaseVersionUrl(versionUrl);
+    if (invalidUrl) throw new Error(invalidUrl.replace("Release version URL", "--version-url"));
+  }
+  return {
+    artifactKind: "image",
+    mode: "url",
+    imageTemplate,
+    ...versionUrl ? { versionUrl } : {},
+    ...pinnedVersion ? { pinnedVersion } : {}
+  };
+}
 var listCmd2 = new Command14("list").alias("ls").description("List projects in the active organization").action(
   action(async () => {
     const rows = [];
@@ -2214,10 +2277,27 @@ var getCmd = new Command14("get").description("Show a single project").argument(
     printProject(data);
   })
 );
-var createCmd = new Command14("create").description("Create a project").requiredOption("--name <name>", "Project name").option("--slug <slug>", "Free-subdomain slug (slug.opsh.io)").option("--git-owner <owner>", "GitHub owner/org").option("--git-repo <repo>", "GitHub repository name").option("--git-branch <branch>", "Git branch to deploy").option("--framework <framework>", "Stack/framework id").option("--local-path <path>", "Local source path").option("--port <port>", "Container port", (v) => Number(v)).option(
-  "--type <type>",
-  "Project type: app | docker | services | monorepo"
-).action(
+var releaseImageCmd = new Command14("release-image").description("Track and deploy a versioned prebuilt container image").argument("<id>", "Project ID").requiredOption(
+  "--image-template <reference>",
+  "Image reference with {tag} or {version}, e.g. ghcr.io/acme/api:{tag}"
+).option("--github-repo <owner/repo>", "Resolve versions from GitHub Releases").option("--version-url <https-url>", "HTTPS endpoint returning a version or tag").option("--pin <version>", "Deploy a fixed version instead of the discovered latest release").action(
+  action(async (id, opts) => {
+    const source = releaseImageSourceFromOptions(opts);
+    const result = await apiRequest(
+      `/projects/${encodeURIComponent(id)}/release-image-source`,
+      { method: "PUT", body: JSON.stringify(source) }
+    );
+    if (isJsonMode()) {
+      printJson(result.data);
+      return;
+    }
+    const upstream = source.mode === "github" ? `GitHub Releases (${source.repo})` : source.versionUrl ? `version URL (${source.versionUrl})` : `pinned version (${source.pinnedVersion})`;
+    ok(`
+  Project ${id} now deploys ${source.imageTemplate} from ${upstream}
+`);
+  })
+);
+var createCmd = new Command14("create").description("Create a project").requiredOption("--name <name>", "Project name").option("--slug <slug>", "Free-subdomain slug (slug.opsh.io)").option("--git-owner <owner>", "GitHub owner/org").option("--git-repo <repo>", "GitHub repository name").option("--git-branch <branch>", "Git branch to deploy").option("--framework <framework>", "Stack/framework id").option("--local-path <path>", "Local source path").option("--port <port>", "Container port", (v) => Number(v)).option("--type <type>", "Project type: app | docker | services | monorepo").action(
   action(async (opts) => {
     const body = { name: opts.name };
     if (opts.slug) body.slug = opts.slug;
@@ -2531,7 +2611,9 @@ var logsCmd = new Command14("logs").description("Show or stream runtime (contain
       for (const entry of data) printLogEntry(entry);
       return;
     }
-    for await (const ev of sseRequest(`/projects/${encodeURIComponent(id)}/logs/stream${tailQs}`)) {
+    for await (const ev of sseRequest(
+      `/projects/${encodeURIComponent(id)}/logs/stream${tailQs}`
+    )) {
       if (ev.event === "error") {
         const parsed = safeParse(ev.data);
         err(`  ${parsed?.error ?? ev.data}`);
@@ -2596,6 +2678,7 @@ function printLogEntry(entry) {
 var projectCommand = new Command14("project").alias("projects").description("Manage Openship projects");
 projectCommand.addCommand(listCmd2);
 projectCommand.addCommand(getCmd);
+projectCommand.addCommand(releaseImageCmd);
 projectCommand.addCommand(createCmd);
 projectCommand.addCommand(deleteCmd);
 projectCommand.addCommand(envCmd);
@@ -2736,10 +2819,7 @@ var getCmd2 = stackCommand("get").description("Show one service's configuration"
     fail(e);
   }
 });
-var createCmd2 = stackCommand("create").description("Add a service to a stack").argument("<name>", "Service name (unique within the stack)").option("--image <image>", "Container image (e.g. postgres:16)").option("--build <context>", "Build context path (relative to repo root)").option("--dockerfile <path>", "Dockerfile path (relative to build context)").option("--port <mapping>", "Port mapping, e.g. 8080:80 (repeatable)", collect, []).option("--depends-on <service>", "Service this depends on (repeatable)", collect, []).option("--env <KEY=VALUE>", "Compose environment default (repeatable)", collect, []).option("--command <command>", "Override the container command").option(
-  "--restart <policy>",
-  "Restart policy: no | always | on-failure | unless-stopped"
-).option("--expose", "Expose the service publicly through managed routing").option("--exposed-port <port>", "Container port to expose publicly").option("--domain <label>", "Free subdomain label (with --expose)").action(async (name, opts) => {
+var createCmd2 = stackCommand("create").description("Add a service to a stack").argument("<name>", "Service name (unique within the stack)").option("--image <image>", "Container image (e.g. postgres:16)").option("--build <context>", "Build context path (relative to repo root)").option("--dockerfile <path>", "Dockerfile path (relative to build context)").option("--port <mapping>", "Port mapping, e.g. 8080:80 (repeatable)", collect, []).option("--depends-on <service>", "Service this depends on (repeatable)", collect, []).option("--env <KEY=VALUE>", "Compose environment default (repeatable)", collect, []).option("--command <command>", "Override the container command").option("--restart <policy>", "Restart policy: no | always | on-failure | unless-stopped").option("--expose", "Expose the service publicly through managed routing").option("--exposed-port <port>", "Container port to expose publicly").option("--domain <label>", "Free subdomain label (with --expose)").action(async (name, opts) => {
   requireAuth();
   try {
     const projectId = await resolveProject(opts.project);
@@ -2843,6 +2923,17 @@ function mapDependsOn(deps) {
   if (deps && typeof deps === "object") return Object.keys(deps);
   return [];
 }
+function mapBuildArgs(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return void 0;
+  const args = {};
+  for (const [key, value] of Object.entries(raw)) {
+    if (value === null || value === void 0) args[key] = null;
+    else if (["string", "number", "boolean"].includes(typeof value)) {
+      args[key] = String(value);
+    }
+  }
+  return Object.keys(args).length > 0 ? args : void 0;
+}
 function mapNamespaces(name, d) {
   const advanced = {};
   const errors = [];
@@ -2862,12 +2953,17 @@ function mapComposeService(name, def, baseDir, errors) {
   const svc = { name };
   if (typeof d.image === "string") svc.image = d.image;
   const build = d.build;
+  for (const issue of composeBuildIssues(build, { allowAbsoluteContext: true })) {
+    if (issue.blocking) errors.push(`  ${name}: ${issue.reason}`);
+  }
   if (typeof build === "string") {
     svc.build = relativizeContext(build, baseDir);
   } else if (build && typeof build === "object") {
     const b = build;
     svc.build = relativizeContext(typeof b.context === "string" ? b.context : ".", baseDir);
     if (typeof b.dockerfile === "string") svc.dockerfile = b.dockerfile;
+    const buildArgs = mapBuildArgs(b.args);
+    if (buildArgs) svc.buildArgs = buildArgs;
   }
   const ports = mapPorts(d.ports);
   if (ports.length) svc.ports = ports;
@@ -2885,17 +2981,21 @@ function mapComposeService(name, def, baseDir, errors) {
   if (typeof d.restart === "string") svc.restart = d.restart;
   const { advanced, errors: namespaceErrors } = mapNamespaces(name, d);
   errors.push(...namespaceErrors);
+  if (build && typeof build === "object" && Object.hasOwn(build, "args")) {
+    advanced.buildArgTemplateKeys = [];
+  }
   if (Object.keys(advanced).length > 0) svc.advanced = advanced;
   return svc;
 }
-var syncCmd = stackCommand("sync").description("Sync a stack's services from a docker-compose file (services not in the file are removed)").argument("<compose-file>", "Path to docker-compose.yml / compose.yaml").option("-y, --yes", "Skip the confirmation prompt").action(async (composeFile, opts) => {
+var syncCmd = stackCommand("sync").description(
+  "Sync a stack's services from a docker-compose file (services not in the file are removed)"
+).argument("<compose-file>", "Path to docker-compose.yml / compose.yaml").option("-y, --yes", "Skip the confirmation prompt").action(async (composeFile, opts) => {
   requireAuth();
   const abs = path.resolve(composeFile);
-  const proc = spawnSync2(
-    "docker",
-    ["compose", "-f", abs, "config", "--format", "json"],
-    { encoding: "utf8", maxBuffer: 64 * 1024 * 1024 }
-  );
+  const proc = spawnSync2("docker", ["compose", "-f", abs, "config", "--format", "json"], {
+    encoding: "utf8",
+    maxBuffer: 64 * 1024 * 1024
+  });
   if (proc.error) {
     if (proc.error.code === "ENOENT") {
       err("  `docker` not found. `service sync` uses Docker Compose to parse the file.");
@@ -2953,16 +3053,36 @@ ${mapErrors.join("\n")}`
   }
 });
 function containerActionCommand(action2) {
-  return stackCommand(action2).description(`${action2[0].toUpperCase()}${action2.slice(1)} a service's container`).argument("<service>", "Service name or id").action(async (service, opts) => {
+  const cmd = stackCommand(action2).description(
+    action2 === "restart" ? "Bounce a service's container (does NOT apply changed env \u2014 use `deploy --refresh` for that)" : `${action2[0].toUpperCase()}${action2.slice(1)} a service's container`
+  ).argument("<service>", "Service name or id");
+  if (action2 === "restart") {
+    cmd.option("--force", "Bounce even with pending env changes (they will NOT be applied)");
+  }
+  return cmd.action(async (service, opts) => {
     requireAuth();
+    let serviceId = "";
     try {
       const projectId = await resolveProject(opts.project);
       const svc = await resolveService(projectId, service);
-      await apiRequest(`/projects/${projectId}/services/${svc.id}/${action2}`, {
+      serviceId = svc.id;
+      const query2 = action2 === "restart" && opts.force ? "?force=true" : "";
+      await apiRequest(`/projects/${projectId}/services/${svc.id}/${action2}${query2}`, {
         method: "POST"
       });
       ok(`  ${action2}ed "${svc.name}".`);
     } catch (e) {
+      const body = e instanceof ApiError ? e.body : null;
+      if (body?.code === "SERVICE_CONFIG_STALE") {
+        const keys = Array.isArray(body.staleEnvKeys) ? body.staleEnvKeys : [];
+        err(`  Restart refused: "${body.serviceName ?? service}" has pending environment changes.`);
+        if (keys.length > 0) info(`  Pending: ${keys.join(", ")}`);
+        info(
+          `  Apply them:  openship deploy --refresh --service-ids ${serviceId} -p ${opts.project}`
+        );
+        info(`  Bounce anyway (changes NOT applied):  add --force`);
+        process.exit(1);
+      }
       fail(e);
     }
   });
@@ -3049,10 +3169,11 @@ var envGetCmd = stackCommand("get").description("List a service's environment va
     fail(e);
   }
 });
-var envSetCmd = stackCommand("set").description("Set a service's environment variables for one environment").argument("<service>", "Service name or id").argument("<pairs...>", "KEY=VALUE pairs").option("-e, --env <environment>", "Environment: production | preview | development", "production").option("--secret", "Mark the provided variables as secret").option(
-  "--replace",
-  "Replace ALL variables for this environment with only the given pairs"
-).action(async (service, pairs, opts) => {
+var envSetCmd = stackCommand("set").description("Set a service's environment variables for one environment").argument("<service>", "Service name or id").argument("<pairs...>", "KEY=VALUE pairs").option(
+  "-e, --env <environment>",
+  "Environment: production | preview | development",
+  "production"
+).option("--secret", "Mark the provided variables as secret").option("--replace", "Replace ALL variables for this environment with only the given pairs").action(async (service, pairs, opts) => {
   requireAuth();
   try {
     const projectId = await resolveProject(opts.project);
@@ -3116,9 +3237,7 @@ var logsCmd2 = stackCommand("logs").description("Show or stream a service's runt
     const svc = await resolveService(projectId, service);
     const tail = opts.tail ? `?tail=${encodeURIComponent(opts.tail)}` : "";
     if (!opts.follow) {
-      const res = await apiRequest(
-        `/projects/${projectId}/services/${svc.id}/logs${tail}`
-      );
+      const res = await apiRequest(`/projects/${projectId}/services/${svc.id}/logs${tail}`);
       const entries = res.data ?? [];
       if (isJsonMode()) {
         printJson(entries);
@@ -3127,14 +3246,17 @@ var logsCmd2 = stackCommand("logs").description("Show or stream a service's runt
       for (const e of entries) printLogEntry2(e);
       return;
     }
-    for await (const ev of sseRequest(`/projects/${projectId}/services/${svc.id}/logs/stream${tail}`)) {
+    for await (const ev of sseRequest(
+      `/projects/${projectId}/services/${svc.id}/logs/stream${tail}`
+    )) {
       if (ev.event === "error") {
         const parsed = safeParse2(ev.data);
         throw new ApiError(parsed?.error || "Log stream error", 0, parsed);
       }
       if (ev.event === "log") {
         const parsed = safeParse2(ev.data);
-        if (parsed) printLogEntry2(parsed);
+        if (parsed)
+          printLogEntry2(parsed);
       }
     }
   } catch (e) {
@@ -3463,7 +3585,7 @@ async function runRepair2(mode) {
   requireLinux();
   const sp = spin2(mode === "migrate" ? "Migrating the existing proxy's sites into the edge\u2026" : "Taking over :80/:443\u2026");
   try {
-    const { repairEdgeConflict: repairEdgeConflict2 } = await import("./edge-preflight-GBNCPNVU.js");
+    const { repairEdgeConflict: repairEdgeConflict2 } = await import("./edge-preflight-QUW4BM7N.js");
     sp?.stop();
     const res = await repairEdgeConflict2(mode, apiPort(), onLog);
     reportRepair(res);
@@ -3612,7 +3734,7 @@ async function panelStatus() {
 async function panelRepair(mode) {
   const sp = spin2(mode === "migrate" ? "Migrating the existing proxy's sites\u2026" : "Taking over :80/:443\u2026");
   try {
-    const { repairEdgeConflict: repairEdgeConflict2 } = await import("./edge-preflight-GBNCPNVU.js");
+    const { repairEdgeConflict: repairEdgeConflict2 } = await import("./edge-preflight-QUW4BM7N.js");
     sp?.stop();
     const res = await repairEdgeConflict2(mode, apiPort(), onLog);
     renderRepair(res);
@@ -4454,7 +4576,7 @@ function printMonitoringNextSteps() {
   info("    openship edge analytics -p <project>            per-domain analytics");
 }
 async function runMonitoringInstall(opts) {
-  const up = await import("./up-K4BV7466.js");
+  const up = await import("./up-HQS7IR7H.js");
   let adminName = opts.adminName;
   let adminEmail = opts.adminEmail;
   let adminPassword = opts.adminPassword;
@@ -6611,7 +6733,7 @@ function applyOnlyArgv(selfArgs, json) {
 // src/commands/update.ts
 async function verifyHostChannelAfterUpdate() {
   if (isJsonMode()) return;
-  const { verifyHostChannel } = await import("./host-channel-preflight-KE6OONYK.js");
+  const { verifyHostChannel } = await import("./host-channel-preflight-OMCZMMKR.js");
   await verifyHostChannel().catch(() => {
   });
 }
@@ -6688,7 +6810,7 @@ async function runSourceUpdate(source, opts) {
 }
 var REINSTALL_HINT = "curl -fsSL https://get.openship.io | sh";
 async function runTarballUpdate(install, opts) {
-  const current = "0.6.6";
+  const current = "0.6.8";
   let latest;
   try {
     latest = (await resolveLatestTag()).replace(/^v/, "");
@@ -6772,7 +6894,7 @@ var updateCommand = new Command26("update").description("Update the Openship CLI
   if (source) return runSourceUpdate(source, opts);
   const cliInstall = readCliInstall();
   if (cliInstall?.method === "tarball") return runTarballUpdate(cliInstall, opts);
-  const current = "0.6.6";
+  const current = "0.6.8";
   let latest;
   try {
     latest = (await resolveLatestTag()).replace(/^v/, "");
@@ -7380,7 +7502,7 @@ async function runWizard() {
       }
     }
   }
-  const uiTag = `v${"0.6.6"}`;
+  const uiTag = `v${"0.6.8"}`;
   if (method === "bare") {
     const dl = spinner4();
     dl.start("Pulling the Openship dist from GitHub");
@@ -7440,7 +7562,7 @@ async function runWizard() {
     const dashboardPort = String(ports.dashboard);
     const moved = portMoveNotice(ports, composeTrustedOriginUrls());
     if (moved.length) log5.info(moved.join("\n"));
-    if (!pinnedImagesReady({ version: "0.6.6" })) {
+    if (!pinnedImagesReady({ version: "0.6.8" })) {
       cancel4("The pinned Openship image tag isn't in the registry yet \u2014 nothing on this box was changed.");
       process.exit(1);
     }
@@ -7464,7 +7586,7 @@ async function runWizard() {
       dashboardPort,
       publicUrl,
       trustProxy: behindProxy,
-      version: "0.6.6",
+      version: "0.6.8",
       noHostControl: !allowHostControl
     });
     if (!fetched.ok) {
@@ -7493,7 +7615,7 @@ async function runWizard() {
       dashboardPort,
       publicUrl,
       trustProxy: behindProxy,
-      version: "0.6.6",
+      version: "0.6.8",
       noHostControl: !allowHostControl
     });
     if (!up.ok) {
@@ -7594,7 +7716,7 @@ async function runWizard() {
     if (result.liveUrl) liveUrl2 = result.liveUrl;
     else if (!result.domainRegistered) liveUrl2 = `http://localhost:${started.dashPort}`;
     for (const w of result.warnings) log5.warn(w);
-    const { verifyHostChannel } = await import("./host-channel-preflight-KE6OONYK.js");
+    const { verifyHostChannel } = await import("./host-channel-preflight-OMCZMMKR.js");
     await verifyHostChannel().catch(() => {
     });
     finishSetup({
@@ -7873,7 +7995,7 @@ function attachCompletion(program2) {
 
 // src/index.ts
 var program = new Command28();
-program.name("openship").description("Openship CLI \u2014 install, run, and manage Openship from your terminal").version("0.6.6").option("--json", "Machine-readable JSON output (stdout data only)").hook("preAction", (thisCommand) => {
+program.name("openship").description("Openship CLI \u2014 install, run, and manage Openship from your terminal").version("0.6.8").option("--json", "Machine-readable JSON output (stdout data only)").hook("preAction", (thisCommand) => {
   if (thisCommand.opts().json) setJsonMode(true);
 }).action(async () => {
   const installed = serviceStatus().installed || readInstallMethod() === "compose";

package/dist/{local-executor-WOFZD72X.js → local-executor-OQ2GRN7K.js}

@@ -4,8 +4,9 @@ import { createRequire as __ospCreateRequire } from "node:module";
 const require = __ospCreateRequire(import.meta.url);
 import {
   LocalExecutor
-} from "./chunk-6FH4AXVY.js";
-import "./chunk-ZFJXPCQP.js";
+} from "./chunk-T6DVUX4F.js";
+import "./chunk-P7RCYELG.js";
+import "./chunk-WEZFTL4V.js";
 import "./chunk-PXKCZB2I.js";
 export {
   LocalExecutor

package/dist/{nginx-KUFMLMAC.js → nginx-4U4C2XUS.js}

@@ -14,15 +14,18 @@ import {
   renderProxyOptions,
   renderProxyTlsOptions,
   summarizeCertbotFailure
-} from "./chunk-QVW76WDL.js";
-import "./chunk-RSR7PFIQ.js";
+} from "./chunk-IAMOUDHY.js";
+import "./chunk-7PEXM2UI.js";
 import "./chunk-I3DPMTSF.js";
-import "./chunk-YMMQRE5J.js";
-import "./chunk-UVNMQM7W.js";
-import "./chunk-ZFJXPCQP.js";
-import "./chunk-2YM3NI2E.js";
-import "./chunk-SM26HDS2.js";
-import "./chunk-UJ6JZM65.js";
+import "./chunk-R4VDPFLS.js";
+import "./chunk-GNOMEMNI.js";
+import "./chunk-NPSRGIHV.js";
+import "./chunk-P7RCYELG.js";
+import "./chunk-X53JXRS4.js";
+import "./chunk-BO6CY4V2.js";
+import "./chunk-D6HU4VUZ.js";
+import "./chunk-N5YZMO33.js";
+import "./chunk-WEZFTL4V.js";
 import "./chunk-PXKCZB2I.js";
 export {
   MANAGED_STATIC_BASE,

package/dist/{noop-NJ72F46T.js → noop-CLLJHCPL.js}

@@ -4,7 +4,7 @@ import { createRequire as __ospCreateRequire } from "node:module";
 const require = __ospCreateRequire(import.meta.url);
 import {
   NoopInfraProvider
-} from "./chunk-RXQBD4ZY.js";
+} from "./chunk-RHLNVZMS.js";
 import "./chunk-PXKCZB2I.js";
 export {
   NoopInfraProvider

package/dist/{openresty-lua-ATTH35BE.js → openresty-lua-LLWT5XQW.js}

@@ -40,11 +40,14 @@ import {
   ensureOpenRestyConfig,
   luaSourceAvailable,
   parseNginxVersion
-} from "./chunk-RSR7PFIQ.js";
-import "./chunk-YMMQRE5J.js";
-import "./chunk-UVNMQM7W.js";
-import "./chunk-ZFJXPCQP.js";
-import "./chunk-UJ6JZM65.js";
+} from "./chunk-7PEXM2UI.js";
+import "./chunk-GNOMEMNI.js";
+import "./chunk-NPSRGIHV.js";
+import "./chunk-P7RCYELG.js";
+import "./chunk-BO6CY4V2.js";
+import "./chunk-D6HU4VUZ.js";
+import "./chunk-N5YZMO33.js";
+import "./chunk-WEZFTL4V.js";
 import "./chunk-PXKCZB2I.js";
 export {
   ACME_CHALLENGE_LOCATION,

package/dist/{privilege-I4W3ZNZK.js → privilege-MNDVMDST.js}

@@ -6,11 +6,12 @@ import {
   privilegedExecutor,
   rootChecked,
   rootOrDegrade
-} from "./chunk-4I2BM2DT.js";
-import "./chunk-YMMQRE5J.js";
-import "./chunk-UVNMQM7W.js";
-import "./chunk-ZFJXPCQP.js";
-import "./chunk-UJ6JZM65.js";
+} from "./chunk-T46BQOLY.js";
+import "./chunk-GNOMEMNI.js";
+import "./chunk-NPSRGIHV.js";
+import "./chunk-P7RCYELG.js";
+import "./chunk-N5YZMO33.js";
+import "./chunk-WEZFTL4V.js";
 import "./chunk-PXKCZB2I.js";
 export {
   privilegedExecutor,