From 3c9fa307641ec2f5437112078387bffdd72a1500 Mon Sep 17 00:00:00 2001
From: Zach Pratt <zach@modzed.io>
Date: Sun, 2 Nov 2025 10:16:26 -0600
Subject: [PATCH 1/4] chore(end-to-end-tests): add a full end to end test that
 uses real terraform plan output

---
 .devcontainer/devcontainer.json       |   30 +
 .github/workflows/ci.yml              |   16 +-
 docker-compose.yml                    |   15 +
 e2e/terraform-integration.test.ts     |  140 ++++
 e2e/terraform/backend.tf              |    3 +
 e2e/terraform/provider.tf             |   12 +
 e2e/terraform/sqs.tf                  |    7 +
 features/end-to-end-with-terraform.md |   16 +
 package-lock.json                     | 1074 ++++++++++++++++++++++++-
 package.json                          |    4 +-
 10 files changed, 1284 insertions(+), 33 deletions(-)
 create mode 100644 .devcontainer/devcontainer.json
 create mode 100644 docker-compose.yml
 create mode 100644 e2e/terraform-integration.test.ts
 create mode 100644 e2e/terraform/backend.tf
 create mode 100644 e2e/terraform/provider.tf
 create mode 100644 e2e/terraform/sqs.tf
 create mode 100644 features/end-to-end-with-terraform.md

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
new file mode 100644
index 0000000..584ea6c
--- /dev/null
+++ b/.devcontainer/devcontainer.json
@@ -0,0 +1,30 @@
+{
+	"name": "infra-diff",
+	"image": "mcr.microsoft.com/devcontainers/typescript-node:22",
+	"features": {
+		"ghcr.io/devcontainers/features/docker-outside-of-docker:1": {},
+		"ghcr.io/devcontainers-contrib/features/terraform-asdf:2": {
+			"version": "latest"
+		}
+	},
+	"customizations": {
+		"vscode": {
+			"extensions": [
+				"dbaeumer.vscode-eslint",
+				"esbenp.prettier-vscode",
+				"biomejs.biome",
+				"hashicorp.terraform"
+			],
+			"settings": {
+				"editor.formatOnSave": true,
+				"editor.defaultFormatter": "biomejs.biome"
+			}
+		}
+	},
+	"postCreateCommand": "npm install",
+	"forwardPorts": [50000],
+	"mounts": [
+		"source=/var/run/docker.sock,target=/var/run/docker.sock,type=bind"
+	],
+	"remoteUser": "node"
+}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4be52e6..5bc84ef 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -40,9 +40,23 @@ jobs:
       - run: npm test
       - run: npm run test:e2e:file-reading
 
+  test-terraform-integration:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+        with:
+          node-version-file: ".nvmrc"
+      - uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2
+        with:
+          terraform_version: latest
+      - run: npm ci
+      - name: Run Terraform integration tests
+        run: npm run test:e2e:terraform
+
   validate-action:
     runs-on: ubuntu-latest
-    needs: [lint, test]
+    needs: [lint, test, test-terraform-integration]
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..c6f7bd9
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,15 @@
+---
+version: '3.8'
+
+services:
+  moto:
+    image: motoserver/moto:5.0.0
+    container_name: infra-diff-moto-test
+    ports:
+      - "50000:5000"
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:5000"]
+      interval: 5s
+      timeout: 3s
+      retries: 10
+      start_period: 10s
diff --git a/e2e/terraform-integration.test.ts b/e2e/terraform-integration.test.ts
new file mode 100644
index 0000000..1fcdab4
--- /dev/null
+++ b/e2e/terraform-integration.test.ts
@@ -0,0 +1,140 @@
+import { execSync } from "node:child_process";
+import { existsSync, rmSync, unlinkSync } from "node:fs";
+import * as path from "node:path";
+import { GenericContainer, type StartedTestContainer } from "testcontainers";
+import { afterAll, beforeAll, describe, expect, it } from "vitest";
+import { ParsePlanUseCase } from "../src/domain/usecases/ParsePlanUseCase";
+import { ReadPlanFileUseCase } from "../src/domain/usecases/ReadPlanFileUseCase";
+import { FilesystemAdapter } from "../src/infrastructure/adapters/FilesystemAdapter";
+
+describe("E2E: Terraform Integration with moto", () => {
+	const terraformDir = path.join(process.cwd(), "e2e", "terraform");
+	const planFile = path.join(terraformDir, "plan.bin");
+	const planJsonFile = path.join(terraformDir, "plan.json");
+	let motoContainer: StartedTestContainer;
+	let motoPort: number;
+
+	beforeAll(async () => {
+		// Start moto server using testcontainers
+		console.log("Starting moto server...");
+		try {
+			motoPort = 50000;
+			motoContainer = await new GenericContainer("motoserver/moto:5.0.0")
+				.withExposedPorts({ container: 5000, host: motoPort })
+				.withStartupTimeout(120000)
+				.start();
+
+			console.log(`Moto server is ready on port ${motoPort}`);
+
+			// Initialize Terraform
+			console.log("Initializing Terraform...");
+			execSync("terraform init", { cwd: terraformDir, stdio: "pipe" });
+
+			// Generate plan
+			console.log("Generating Terraform plan...");
+			execSync(`terraform plan -out=${planFile}`, {
+				cwd: terraformDir,
+				stdio: "pipe",
+			});
+
+			// Convert plan to JSON
+			console.log("Converting plan to JSON...");
+			execSync(`terraform show -json ${planFile} > ${planJsonFile}`, {
+				cwd: terraformDir,
+				stdio: "pipe",
+				shell: "/bin/bash",
+			});
+		} catch (error) {
+			console.error("Setup failed:", error);
+			throw error;
+		}
+	}, 120000); // 2 minute timeout for setup
+
+	afterAll(async () => {
+		// Cleanup
+		console.log("Cleaning up...");
+
+		// Remove plan files
+		try {
+			if (existsSync(planFile)) {
+				unlinkSync(planFile);
+			}
+			if (existsSync(planJsonFile)) {
+				unlinkSync(planJsonFile);
+			}
+		} catch (error) {
+			console.error("Failed to cleanup plan files:", error);
+		}
+
+		// Remove .terraform directory
+		try {
+			const terraformStateDir = path.join(terraformDir, ".terraform");
+			if (existsSync(terraformStateDir)) {
+				rmSync(terraformStateDir, { recursive: true, force: true });
+			}
+		} catch (error) {
+			console.error("Failed to cleanup .terraform directory:", error);
+		}
+
+		// Remove lock file
+		try {
+			const lockFile = path.join(terraformDir, ".terraform.lock.hcl");
+			if (existsSync(lockFile)) {
+				unlinkSync(lockFile);
+			}
+		} catch (error) {
+			console.error("Failed to cleanup lock file:", error);
+		}
+
+		// Stop and remove moto container
+		try {
+			if (motoContainer) {
+				await motoContainer.stop();
+				console.log("Moto container stopped");
+			}
+		} catch (error) {
+			console.error("Failed to stop moto container:", error);
+		}
+	}, 60000); // 1 minute timeout for cleanup
+
+	it("should parse real Terraform plan output", async () => {
+		// Verify plan JSON file was created
+		expect(existsSync(planJsonFile)).toBe(true);
+
+		// Read the plan file
+		const fileReader = new FilesystemAdapter();
+		const readUseCase = new ReadPlanFileUseCase(fileReader);
+		const readResult = await readUseCase.execute(planJsonFile);
+
+		expect(readResult.path).toBe(planJsonFile);
+		expect(readResult.content).toBeTruthy();
+		expect(readResult.content.length).toBeGreaterThan(0);
+
+		// Parse the plan
+		const parseUseCase = new ParsePlanUseCase();
+		const plan = await parseUseCase.parse(readResult.content);
+
+		// Verify plan structure
+		expect(plan).toBeDefined();
+		expect(plan.formatVersion).toBeTruthy();
+		expect(plan.terraformVersion).toBeTruthy();
+		expect(plan.resourceChanges).toBeDefined();
+		expect(Array.isArray(plan.resourceChanges)).toBe(true);
+
+		// Verify we have the expected SQS queue resource change
+		expect(plan.resourceChanges.length).toBeGreaterThan(0);
+
+		const sqsQueue = plan.resourceChanges.find(
+			(rc) => rc.type === "aws_sqs_queue" && rc.name === "queue",
+		);
+
+		expect(sqsQueue).toBeDefined();
+		expect(sqsQueue?.address).toBe("aws_sqs_queue.queue");
+		expect(sqsQueue?.actions).toContain("create");
+
+		// Verify the queue has expected configuration
+		expect(sqsQueue?.after).toBeDefined();
+		expect(sqsQueue?.after?.name).toBe("test-queue");
+		expect(sqsQueue?.after?.tags).toBeDefined();
+	});
+});
diff --git a/e2e/terraform/backend.tf b/e2e/terraform/backend.tf
new file mode 100644
index 0000000..f966bbb
--- /dev/null
+++ b/e2e/terraform/backend.tf
@@ -0,0 +1,3 @@
+terraform {
+  backend "local" {}
+}
diff --git a/e2e/terraform/provider.tf b/e2e/terraform/provider.tf
new file mode 100644
index 0000000..fcbbebe
--- /dev/null
+++ b/e2e/terraform/provider.tf
@@ -0,0 +1,12 @@
+provider "aws" {
+  region                      = "us-east-1"
+  skip_credentials_validation = true
+  skip_metadata_api_check     = true
+  skip_requesting_account_id  = true
+
+  endpoints {
+    sts = "http://localhost:50000"
+    s3  = "http://localhost:50000"
+    sqs = "http://localhost:50000"
+  }
+}
diff --git a/e2e/terraform/sqs.tf b/e2e/terraform/sqs.tf
new file mode 100644
index 0000000..b49cd84
--- /dev/null
+++ b/e2e/terraform/sqs.tf
@@ -0,0 +1,7 @@
+resource "aws_sqs_queue" "queue" {
+  name = "test-queue"
+  tags = {
+    github = "https://github.com/zpratt/infra-diff.git"
+    random = 1234
+  }
+}
diff --git a/features/end-to-end-with-terraform.md b/features/end-to-end-with-terraform.md
new file mode 100644
index 0000000..cd33215
--- /dev/null
+++ b/features/end-to-end-with-terraform.md
@@ -0,0 +1,16 @@
+# End to End with Terraform
+
+Goal: Demonstrate how Infra Diff can be used in an end-to-end workflow with Terraform and moto to provide a fake of the AWS API. The goal is to produce a real binary terraform plan, convert it to json, and then run infra-diff against that json plan.
+
+## Context
+
+In this workflow, we will use Terraform to create a simple infrastructure setup on AWS. We will use moto to mock the AWS API, allowing us to generate a binary terraform plan without needing access to a real AWS account. This plan will then be converted to JSON format and analyzed using Infra Diff to identify any potential changes or issues. The test itself should be implemented in typescript, using the infra-diff library to run the analysis programmatically, treating the production code as if it is a complete black box. We should run moto in a docker container to ensure a clean and isolated environment for the test. Everything that is created should be runnable locally with a single command and should also be included in our CI pipeline to ensure consistent results across different environments. I've added example terraform fixtures in the e2e/terraform directory to get started. Ensure you examine the e2e/terraform/provider.tf file to see how to configure terraform to point at the moto server.
+
+## Requirements
+
+- Ensure the pipeline uses setup-terraform action to install terraform
+- Ensure we're testing with the latest version of terraform
+- Use moto server in a docker container to mock AWS API
+- When running locally, create a devcontainer environment that we can use to run the tests with a specific version of node and terraform.
+- Write the test in typescript using infra-diff library to analyze the terraform plan json output.
+- Ensure the entire setup can be run with a single command both locally and in CI.
diff --git a/package-lock.json b/package-lock.json
index e32a2d9..422e9b6 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -20,6 +20,7 @@
 				"@vercel/ncc": "^0.38.4",
 				"@vitest/ui": "^4.0.6",
 				"chance": "^1.1.13",
+				"testcontainers": "^11.7.2",
 				"typescript": "^5.9.3",
 				"vitest": "^4.0.6"
 			}
@@ -622,6 +623,13 @@
 				"node": ">=18.0.0"
 			}
 		},
+		"node_modules/@balena/dockerignore": {
+			"version": "1.0.2",
+			"resolved": "https://registry.npmjs.org/@balena/dockerignore/-/dockerignore-1.0.2.tgz",
+			"integrity": "sha512-wMue2Sy4GAVTk6Ic4tJVcnfdau+gx2EnG7S+uAEe+TWJFqE4YoWN4/H8MSLj4eYJKxGg26lZwboEniNiNwZQ6Q==",
+			"dev": true,
+			"license": "Apache-2.0"
+		},
 		"node_modules/@biomejs/biome": {
 			"version": "2.3.2",
 			"resolved": "https://registry.npmjs.org/@biomejs/biome/-/biome-2.3.2.tgz",
@@ -1571,6 +1579,58 @@
 			"dev": true,
 			"license": "ISC"
 		},
+		"node_modules/@grpc/grpc-js": {
+			"version": "1.14.0",
+			"resolved": "https://registry.npmjs.org/@grpc/grpc-js/-/grpc-js-1.14.0.tgz",
+			"integrity": "sha512-N8Jx6PaYzcTRNzirReJCtADVoq4z7+1KQ4E70jTg/koQiMoUSN1kbNjPOqpPbhMFhfU1/l7ixspPl8dNY+FoUg==",
+			"dev": true,
+			"license": "Apache-2.0",
+			"dependencies": {
+				"@grpc/proto-loader": "^0.8.0",
+				"@js-sdsl/ordered-map": "^4.4.2"
+			},
+			"engines": {
+				"node": ">=12.10.0"
+			}
+		},
+		"node_modules/@grpc/grpc-js/node_modules/@grpc/proto-loader": {
+			"version": "0.8.0",
+			"resolved": "https://registry.npmjs.org/@grpc/proto-loader/-/proto-loader-0.8.0.tgz",
+			"integrity": "sha512-rc1hOQtjIWGxcxpb9aHAfLpIctjEnsDehj0DAiVfBlmT84uvR0uUtN2hEi/ecvWVjXUGf5qPF4qEgiLOx1YIMQ==",
+			"dev": true,
+			"license": "Apache-2.0",
+			"dependencies": {
+				"lodash.camelcase": "^4.3.0",
+				"long": "^5.0.0",
+				"protobufjs": "^7.5.3",
+				"yargs": "^17.7.2"
+			},
+			"bin": {
+				"proto-loader-gen-types": "build/bin/proto-loader-gen-types.js"
+			},
+			"engines": {
+				"node": ">=6"
+			}
+		},
+		"node_modules/@grpc/proto-loader": {
+			"version": "0.7.15",
+			"resolved": "https://registry.npmjs.org/@grpc/proto-loader/-/proto-loader-0.7.15.tgz",
+			"integrity": "sha512-tMXdRCfYVixjuFK+Hk0Q1s38gV9zDiDJfWL3h1rv4Qc39oILCu1TRTDt7+fGUI8K4G1Fj125Hx/ru3azECWTyQ==",
+			"dev": true,
+			"license": "Apache-2.0",
+			"dependencies": {
+				"lodash.camelcase": "^4.3.0",
+				"long": "^5.0.0",
+				"protobufjs": "^7.2.5",
+				"yargs": "^17.7.2"
+			},
+			"bin": {
+				"proto-loader-gen-types": "build/bin/proto-loader-gen-types.js"
+			},
+			"engines": {
+				"node": ">=6"
+			}
+		},
 		"node_modules/@isaacs/cliui": {
 			"version": "8.0.2",
 			"resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz",
@@ -1596,6 +1656,17 @@
 			"dev": true,
 			"license": "MIT"
 		},
+		"node_modules/@js-sdsl/ordered-map": {
+			"version": "4.4.2",
+			"resolved": "https://registry.npmjs.org/@js-sdsl/ordered-map/-/ordered-map-4.4.2.tgz",
+			"integrity": "sha512-iUKgm52T8HOE/makSxjqoWhe95ZJA1/G1sYsGev2JDKUSS14KAgg1LHb+Ba+IPow0xflbnSkOsZcO08C7w1gYw==",
+			"dev": true,
+			"license": "MIT",
+			"funding": {
+				"type": "opencollective",
+				"url": "https://opencollective.com/js-sdsl"
+			}
+		},
 		"node_modules/@octokit/auth-token": {
 			"version": "4.0.0",
 			"resolved": "https://registry.npmjs.org/@octokit/auth-token/-/auth-token-4.0.0.tgz",
@@ -2050,6 +2121,80 @@
 				"@protobuf-ts/runtime": "^2.11.1"
 			}
 		},
+		"node_modules/@protobufjs/aspromise": {
+			"version": "1.1.2",
+			"resolved": "https://registry.npmjs.org/@protobufjs/aspromise/-/aspromise-1.1.2.tgz",
+			"integrity": "sha512-j+gKExEuLmKwvz3OgROXtrJ2UG2x8Ch2YZUxahh+s1F2HZ+wAceUNLkvy6zKCPVRkU++ZWQrdxsUeQXmcg4uoQ==",
+			"dev": true,
+			"license": "BSD-3-Clause"
+		},
+		"node_modules/@protobufjs/base64": {
+			"version": "1.1.2",
+			"resolved": "https://registry.npmjs.org/@protobufjs/base64/-/base64-1.1.2.tgz",
+			"integrity": "sha512-AZkcAA5vnN/v4PDqKyMR5lx7hZttPDgClv83E//FMNhR2TMcLUhfRUBHCmSl0oi9zMgDDqRUJkSxO3wm85+XLg==",
+			"dev": true,
+			"license": "BSD-3-Clause"
+		},
+		"node_modules/@protobufjs/codegen": {
+			"version": "2.0.4",
+			"resolved": "https://registry.npmjs.org/@protobufjs/codegen/-/codegen-2.0.4.tgz",
+			"integrity": "sha512-YyFaikqM5sH0ziFZCN3xDC7zeGaB/d0IUb9CATugHWbd1FRFwWwt4ld4OYMPWu5a3Xe01mGAULCdqhMlPl29Jg==",
+			"dev": true,
+			"license": "BSD-3-Clause"
+		},
+		"node_modules/@protobufjs/eventemitter": {
+			"version": "1.1.0",
+			"resolved": "https://registry.npmjs.org/@protobufjs/eventemitter/-/eventemitter-1.1.0.tgz",
+			"integrity": "sha512-j9ednRT81vYJ9OfVuXG6ERSTdEL1xVsNgqpkxMsbIabzSo3goCjDIveeGv5d03om39ML71RdmrGNjG5SReBP/Q==",
+			"dev": true,
+			"license": "BSD-3-Clause"
+		},
+		"node_modules/@protobufjs/fetch": {
+			"version": "1.1.0",
+			"resolved": "https://registry.npmjs.org/@protobufjs/fetch/-/fetch-1.1.0.tgz",
+			"integrity": "sha512-lljVXpqXebpsijW71PZaCYeIcE5on1w5DlQy5WH6GLbFryLUrBD4932W/E2BSpfRJWseIL4v/KPgBFxDOIdKpQ==",
+			"dev": true,
+			"license": "BSD-3-Clause",
+			"dependencies": {
+				"@protobufjs/aspromise": "^1.1.1",
+				"@protobufjs/inquire": "^1.1.0"
+			}
+		},
+		"node_modules/@protobufjs/float": {
+			"version": "1.0.2",
+			"resolved": "https://registry.npmjs.org/@protobufjs/float/-/float-1.0.2.tgz",
+			"integrity": "sha512-Ddb+kVXlXst9d+R9PfTIxh1EdNkgoRe5tOX6t01f1lYWOvJnSPDBlG241QLzcyPdoNTsblLUdujGSE4RzrTZGQ==",
+			"dev": true,
+			"license": "BSD-3-Clause"
+		},
+		"node_modules/@protobufjs/inquire": {
+			"version": "1.1.0",
+			"resolved": "https://registry.npmjs.org/@protobufjs/inquire/-/inquire-1.1.0.tgz",
+			"integrity": "sha512-kdSefcPdruJiFMVSbn801t4vFK7KB/5gd2fYvrxhuJYg8ILrmn9SKSX2tZdV6V+ksulWqS7aXjBcRXl3wHoD9Q==",
+			"dev": true,
+			"license": "BSD-3-Clause"
+		},
+		"node_modules/@protobufjs/path": {
+			"version": "1.1.2",
+			"resolved": "https://registry.npmjs.org/@protobufjs/path/-/path-1.1.2.tgz",
+			"integrity": "sha512-6JOcJ5Tm08dOHAbdR3GrvP+yUUfkjG5ePsHYczMFLq3ZmMkAD98cDgcT2iA1lJ9NVwFd4tH/iSSoe44YWkltEA==",
+			"dev": true,
+			"license": "BSD-3-Clause"
+		},
+		"node_modules/@protobufjs/pool": {
+			"version": "1.1.0",
+			"resolved": "https://registry.npmjs.org/@protobufjs/pool/-/pool-1.1.0.tgz",
+			"integrity": "sha512-0kELaGSIDBKvcgS4zkjz1PeddatrjYcmMWOlAuAPwAeccUrPHdUqo/J6LiymHHEiJT5NrF1UVwxY14f+fy4WQw==",
+			"dev": true,
+			"license": "BSD-3-Clause"
+		},
+		"node_modules/@protobufjs/utf8": {
+			"version": "1.1.0",
+			"resolved": "https://registry.npmjs.org/@protobufjs/utf8/-/utf8-1.1.0.tgz",
+			"integrity": "sha512-Vvn3zZrhQZkkBE8LSuW3em98c0FwgO4nxzv6OdSxPKJIEKY2bGbHn+mhGIPerzI4twdxaP8/0+06HBpwf345Lw==",
+			"dev": true,
+			"license": "BSD-3-Clause"
+		},
 		"node_modules/@rollup/rollup-android-arm-eabi": {
 			"version": "4.52.5",
 			"resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.52.5.tgz",
@@ -2390,6 +2535,29 @@
 			"dev": true,
 			"license": "MIT"
 		},
+		"node_modules/@types/docker-modem": {
+			"version": "3.0.6",
+			"resolved": "https://registry.npmjs.org/@types/docker-modem/-/docker-modem-3.0.6.tgz",
+			"integrity": "sha512-yKpAGEuKRSS8wwx0joknWxsmLha78wNMe9R2S3UNsVOkZded8UqOrV8KoeDXoXsjndxwyF3eIhyClGbO1SEhEg==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@types/node": "*",
+				"@types/ssh2": "*"
+			}
+		},
+		"node_modules/@types/dockerode": {
+			"version": "3.3.45",
+			"resolved": "https://registry.npmjs.org/@types/dockerode/-/dockerode-3.3.45.tgz",
+			"integrity": "sha512-iYpZF+xr5QLpIICejLdUF2r5gh8IXY1Gw3WLmt41dUbS3Vn/3hVgL+6lJBVbmrhYBWfbWPPstdr6+A0s95DTWA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@types/docker-modem": "*",
+				"@types/node": "*",
+				"@types/ssh2": "*"
+			}
+		},
 		"node_modules/@types/estree": {
 			"version": "1.0.8",
 			"resolved": "https://registry.npmjs.org/@types/estree/-/estree-1.0.8.tgz",
@@ -2414,6 +2582,43 @@
 				"undici-types": "~7.16.0"
 			}
 		},
+		"node_modules/@types/ssh2": {
+			"version": "1.15.5",
+			"resolved": "https://registry.npmjs.org/@types/ssh2/-/ssh2-1.15.5.tgz",
+			"integrity": "sha512-N1ASjp/nXH3ovBHddRJpli4ozpk6UdDYIX4RJWFa9L1YKnzdhTlVmiGHm4DZnj/jLbqZpes4aeR30EFGQtvhQQ==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@types/node": "^18.11.18"
+			}
+		},
+		"node_modules/@types/ssh2-streams": {
+			"version": "0.1.13",
+			"resolved": "https://registry.npmjs.org/@types/ssh2-streams/-/ssh2-streams-0.1.13.tgz",
+			"integrity": "sha512-faHyY3brO9oLEA0QlcO8N2wT7R0+1sHWZvQ+y3rMLwdY1ZyS1z0W3t65j9PqT4HmQ6ALzNe7RZlNuCNE0wBSWA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@types/node": "*"
+			}
+		},
+		"node_modules/@types/ssh2/node_modules/@types/node": {
+			"version": "18.19.130",
+			"resolved": "https://registry.npmjs.org/@types/node/-/node-18.19.130.tgz",
+			"integrity": "sha512-GRaXQx6jGfL8sKfaIDD6OupbIHBr9jv7Jnaml9tB7l4v068PAOXqfcujMMo5PhbIs6ggR1XODELqahT2R8v0fg==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"undici-types": "~5.26.4"
+			}
+		},
+		"node_modules/@types/ssh2/node_modules/undici-types": {
+			"version": "5.26.5",
+			"resolved": "https://registry.npmjs.org/undici-types/-/undici-types-5.26.5.tgz",
+			"integrity": "sha512-JlCMO+ehdEIKqlFxk6IfVoAUVmgz7cU7zD/h9XZ0qzeosSHmUJVOzSQvvYSYWXkFXC+IfLKSIffhv0sVZup6pA==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/@typescript/vfs": {
 			"version": "1.6.2",
 			"resolved": "https://registry.npmjs.org/@typescript/vfs/-/vfs-1.6.2.tgz",
@@ -2679,6 +2884,16 @@
 			"dev": true,
 			"license": "MIT"
 		},
+		"node_modules/asn1": {
+			"version": "0.2.6",
+			"resolved": "https://registry.npmjs.org/asn1/-/asn1-0.2.6.tgz",
+			"integrity": "sha512-ix/FxPn0MDjeyJ7i/yoHGFt/EX6LyNbxSEhPPXODPL+KB0VPk86UYfL0lMdy+KCnv+fmvIzySwaK5COwqVbWTQ==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"safer-buffer": "~2.1.0"
+			}
+		},
 		"node_modules/assertion-error": {
 			"version": "2.0.1",
 			"resolved": "https://registry.npmjs.org/assertion-error/-/assertion-error-2.0.1.tgz",
@@ -2696,6 +2911,13 @@
 			"dev": true,
 			"license": "MIT"
 		},
+		"node_modules/async-lock": {
+			"version": "1.4.1",
+			"resolved": "https://registry.npmjs.org/async-lock/-/async-lock-1.4.1.tgz",
+			"integrity": "sha512-Az2ZTpuytrtqENulXwO3GGv1Bztugx6TT37NIo7imr/Qo0gsYiGtSdBa2B6fsXhTpVZDNfu1Qn3pk531e3q+nQ==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/asynckit": {
 			"version": "0.4.0",
 			"resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz",
@@ -2740,6 +2962,88 @@
 				}
 			}
 		},
+		"node_modules/bare-fs": {
+			"version": "4.5.0",
+			"resolved": "https://registry.npmjs.org/bare-fs/-/bare-fs-4.5.0.tgz",
+			"integrity": "sha512-GljgCjeupKZJNetTqxKaQArLK10vpmK28or0+RwWjEl5Rk+/xG3wkpmkv+WrcBm3q1BwHKlnhXzR8O37kcvkXQ==",
+			"dev": true,
+			"license": "Apache-2.0",
+			"optional": true,
+			"dependencies": {
+				"bare-events": "^2.5.4",
+				"bare-path": "^3.0.0",
+				"bare-stream": "^2.6.4",
+				"bare-url": "^2.2.2",
+				"fast-fifo": "^1.3.2"
+			},
+			"engines": {
+				"bare": ">=1.16.0"
+			},
+			"peerDependencies": {
+				"bare-buffer": "*"
+			},
+			"peerDependenciesMeta": {
+				"bare-buffer": {
+					"optional": true
+				}
+			}
+		},
+		"node_modules/bare-os": {
+			"version": "3.6.2",
+			"resolved": "https://registry.npmjs.org/bare-os/-/bare-os-3.6.2.tgz",
+			"integrity": "sha512-T+V1+1srU2qYNBmJCXZkUY5vQ0B4FSlL3QDROnKQYOqeiQR8UbjNHlPa+TIbM4cuidiN9GaTaOZgSEgsvPbh5A==",
+			"dev": true,
+			"license": "Apache-2.0",
+			"optional": true,
+			"engines": {
+				"bare": ">=1.14.0"
+			}
+		},
+		"node_modules/bare-path": {
+			"version": "3.0.0",
+			"resolved": "https://registry.npmjs.org/bare-path/-/bare-path-3.0.0.tgz",
+			"integrity": "sha512-tyfW2cQcB5NN8Saijrhqn0Zh7AnFNsnczRcuWODH0eYAXBsJ5gVxAUuNr7tsHSC6IZ77cA0SitzT+s47kot8Mw==",
+			"dev": true,
+			"license": "Apache-2.0",
+			"optional": true,
+			"dependencies": {
+				"bare-os": "^3.0.1"
+			}
+		},
+		"node_modules/bare-stream": {
+			"version": "2.7.0",
+			"resolved": "https://registry.npmjs.org/bare-stream/-/bare-stream-2.7.0.tgz",
+			"integrity": "sha512-oyXQNicV1y8nc2aKffH+BUHFRXmx6VrPzlnaEvMhram0nPBrKcEdcyBg5r08D0i8VxngHFAiVyn1QKXpSG0B8A==",
+			"dev": true,
+			"license": "Apache-2.0",
+			"optional": true,
+			"dependencies": {
+				"streamx": "^2.21.0"
+			},
+			"peerDependencies": {
+				"bare-buffer": "*",
+				"bare-events": "*"
+			},
+			"peerDependenciesMeta": {
+				"bare-buffer": {
+					"optional": true
+				},
+				"bare-events": {
+					"optional": true
+				}
+			}
+		},
+		"node_modules/bare-url": {
+			"version": "2.3.2",
+			"resolved": "https://registry.npmjs.org/bare-url/-/bare-url-2.3.2.tgz",
+			"integrity": "sha512-ZMq4gd9ngV5aTMa5p9+UfY0b3skwhHELaDkhEHetMdX0LRkW9kzaym4oo/Eh+Ghm0CCDuMTsRIGM/ytUc1ZYmw==",
+			"dev": true,
+			"license": "Apache-2.0",
+			"optional": true,
+			"dependencies": {
+				"bare-path": "^3.0.0"
+			}
+		},
 		"node_modules/base64-js": {
 			"version": "1.5.1",
 			"resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz",
@@ -2761,6 +3065,16 @@
 			],
 			"license": "MIT"
 		},
+		"node_modules/bcrypt-pbkdf": {
+			"version": "1.0.2",
+			"resolved": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz",
+			"integrity": "sha512-qeFIXtP4MSoi6NLqO12WfqARWWuCKi2Rn/9hJLEmtB5yTNr9DqFWkJRCf2qShWzPeAMRnOgCrq0sg/KLv5ES9w==",
+			"dev": true,
+			"license": "BSD-3-Clause",
+			"dependencies": {
+				"tweetnacl": "^0.14.3"
+			}
+		},
 		"node_modules/before-after-hook": {
 			"version": "2.2.3",
 			"resolved": "https://registry.npmjs.org/before-after-hook/-/before-after-hook-2.2.3.tgz",
@@ -2781,6 +3095,58 @@
 				"node": "*"
 			}
 		},
+		"node_modules/bl": {
+			"version": "4.1.0",
+			"resolved": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz",
+			"integrity": "sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"buffer": "^5.5.0",
+				"inherits": "^2.0.4",
+				"readable-stream": "^3.4.0"
+			}
+		},
+		"node_modules/bl/node_modules/buffer": {
+			"version": "5.7.1",
+			"resolved": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz",
+			"integrity": "sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==",
+			"dev": true,
+			"funding": [
+				{
+					"type": "github",
+					"url": "https://github.com/sponsors/feross"
+				},
+				{
+					"type": "patreon",
+					"url": "https://www.patreon.com/feross"
+				},
+				{
+					"type": "consulting",
+					"url": "https://feross.org/support"
+				}
+			],
+			"license": "MIT",
+			"dependencies": {
+				"base64-js": "^1.3.1",
+				"ieee754": "^1.1.13"
+			}
+		},
+		"node_modules/bl/node_modules/readable-stream": {
+			"version": "3.6.2",
+			"resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz",
+			"integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"inherits": "^2.0.3",
+				"string_decoder": "^1.1.1",
+				"util-deprecate": "^1.0.1"
+			},
+			"engines": {
+				"node": ">= 6"
+			}
+		},
 		"node_modules/bottleneck": {
 			"version": "2.19.5",
 			"resolved": "https://registry.npmjs.org/bottleneck/-/bottleneck-2.19.5.tgz",
@@ -2843,6 +3209,26 @@
 				"node": ">=0.2.0"
 			}
 		},
+		"node_modules/buildcheck": {
+			"version": "0.0.6",
+			"resolved": "https://registry.npmjs.org/buildcheck/-/buildcheck-0.0.6.tgz",
+			"integrity": "sha512-8f9ZJCUXyT1M35Jx7MkBgmBMo3oHTTBIPLiY9xyL0pl3T5RwcPEY8cUHr5LBNfu/fk6c2T4DJZuVM/8ZZT2D2A==",
+			"dev": true,
+			"optional": true,
+			"engines": {
+				"node": ">=10.0.0"
+			}
+		},
+		"node_modules/byline": {
+			"version": "5.0.0",
+			"resolved": "https://registry.npmjs.org/byline/-/byline-5.0.0.tgz",
+			"integrity": "sha512-s6webAy+R4SR8XVuJWt2V2rGvhnrhxN+9S15GNuTK3wKPOXFF6RNc+8ug2XhH+2s4f+uudG4kUVYmYOQWL2g0Q==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=0.10.0"
+			}
+		},
 		"node_modules/call-bind-apply-helpers": {
 			"version": "1.0.2",
 			"resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
@@ -2900,51 +3286,152 @@
 			"dev": true,
 			"license": "MIT"
 		},
-		"node_modules/color-convert": {
-			"version": "2.0.1",
-			"resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
-			"integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
-			"dev": true,
-			"license": "MIT",
-			"dependencies": {
-				"color-name": "~1.1.4"
-			},
-			"engines": {
-				"node": ">=7.0.0"
-			}
-		},
-		"node_modules/color-name": {
+		"node_modules/chownr": {
 			"version": "1.1.4",
-			"resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
-			"integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==",
+			"resolved": "https://registry.npmjs.org/chownr/-/chownr-1.1.4.tgz",
+			"integrity": "sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg==",
 			"dev": true,
-			"license": "MIT"
+			"license": "ISC"
 		},
-		"node_modules/combined-stream": {
-			"version": "1.0.8",
-			"resolved": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz",
-			"integrity": "sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==",
+		"node_modules/cliui": {
+			"version": "8.0.1",
+			"resolved": "https://registry.npmjs.org/cliui/-/cliui-8.0.1.tgz",
+			"integrity": "sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==",
 			"dev": true,
-			"license": "MIT",
+			"license": "ISC",
 			"dependencies": {
-				"delayed-stream": "~1.0.0"
+				"string-width": "^4.2.0",
+				"strip-ansi": "^6.0.1",
+				"wrap-ansi": "^7.0.0"
 			},
 			"engines": {
-				"node": ">= 0.8"
+				"node": ">=12"
 			}
 		},
-		"node_modules/commander": {
-			"version": "14.0.2",
-			"resolved": "https://registry.npmjs.org/commander/-/commander-14.0.2.tgz",
-			"integrity": "sha512-TywoWNNRbhoD0BXs1P3ZEScW8W5iKrnbithIl0YH+uCmBd0QpPOA8yc82DS3BIE5Ma6FnBVUsJ7wVUDz4dvOWQ==",
+		"node_modules/cliui/node_modules/ansi-regex": {
+			"version": "5.0.1",
+			"resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
+			"integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==",
 			"dev": true,
 			"license": "MIT",
 			"engines": {
-				"node": ">=20"
+				"node": ">=8"
 			}
 		},
-		"node_modules/comment-json": {
-			"version": "4.4.1",
+		"node_modules/cliui/node_modules/ansi-styles": {
+			"version": "4.3.0",
+			"resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
+			"integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"color-convert": "^2.0.1"
+			},
+			"engines": {
+				"node": ">=8"
+			},
+			"funding": {
+				"url": "https://github.com/chalk/ansi-styles?sponsor=1"
+			}
+		},
+		"node_modules/cliui/node_modules/emoji-regex": {
+			"version": "8.0.0",
+			"resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
+			"integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/cliui/node_modules/string-width": {
+			"version": "4.2.3",
+			"resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
+			"integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"emoji-regex": "^8.0.0",
+				"is-fullwidth-code-point": "^3.0.0",
+				"strip-ansi": "^6.0.1"
+			},
+			"engines": {
+				"node": ">=8"
+			}
+		},
+		"node_modules/cliui/node_modules/strip-ansi": {
+			"version": "6.0.1",
+			"resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
+			"integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"ansi-regex": "^5.0.1"
+			},
+			"engines": {
+				"node": ">=8"
+			}
+		},
+		"node_modules/cliui/node_modules/wrap-ansi": {
+			"version": "7.0.0",
+			"resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz",
+			"integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"ansi-styles": "^4.0.0",
+				"string-width": "^4.1.0",
+				"strip-ansi": "^6.0.0"
+			},
+			"engines": {
+				"node": ">=10"
+			},
+			"funding": {
+				"url": "https://github.com/chalk/wrap-ansi?sponsor=1"
+			}
+		},
+		"node_modules/color-convert": {
+			"version": "2.0.1",
+			"resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
+			"integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"color-name": "~1.1.4"
+			},
+			"engines": {
+				"node": ">=7.0.0"
+			}
+		},
+		"node_modules/color-name": {
+			"version": "1.1.4",
+			"resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
+			"integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/combined-stream": {
+			"version": "1.0.8",
+			"resolved": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz",
+			"integrity": "sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"delayed-stream": "~1.0.0"
+			},
+			"engines": {
+				"node": ">= 0.8"
+			}
+		},
+		"node_modules/commander": {
+			"version": "14.0.2",
+			"resolved": "https://registry.npmjs.org/commander/-/commander-14.0.2.tgz",
+			"integrity": "sha512-TywoWNNRbhoD0BXs1P3ZEScW8W5iKrnbithIl0YH+uCmBd0QpPOA8yc82DS3BIE5Ma6FnBVUsJ7wVUDz4dvOWQ==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=20"
+			}
+		},
+		"node_modules/comment-json": {
+			"version": "4.4.1",
 			"resolved": "https://registry.npmjs.org/comment-json/-/comment-json-4.4.1.tgz",
 			"integrity": "sha512-r1To31BQD5060QdkC+Iheai7gHwoSZobzunqkf2/kQ6xIAfJyrKNAFUwdKvkK7Qgu7pVTKQEa7ok7Ed3ycAJgg==",
 			"dev": true,
@@ -2989,6 +3476,21 @@
 			"dev": true,
 			"license": "MIT"
 		},
+		"node_modules/cpu-features": {
+			"version": "0.0.10",
+			"resolved": "https://registry.npmjs.org/cpu-features/-/cpu-features-0.0.10.tgz",
+			"integrity": "sha512-9IkYqtX3YHPCzoVg1Py+o9057a3i0fp7S530UWokCSaFVTc7CwXPRiOjRjBQQ18ZCNafx78YfnG+HALxtVmOGA==",
+			"dev": true,
+			"hasInstallScript": true,
+			"optional": true,
+			"dependencies": {
+				"buildcheck": "~0.0.6",
+				"nan": "^2.19.0"
+			},
+			"engines": {
+				"node": ">=10.0.0"
+			}
+		},
 		"node_modules/crc-32": {
 			"version": "1.2.2",
 			"resolved": "https://registry.npmjs.org/crc-32/-/crc-32-1.2.2.tgz",
@@ -3065,6 +3567,128 @@
 			"integrity": "sha512-xmHIy4F3scKVwMsQ4WnVaS8bHOx0DmVwRywosKhaILI0ywMDWPtBSku2HNxRvF7jtwDRsoEwYQSfbxj8b7RlJQ==",
 			"license": "ISC"
 		},
+		"node_modules/docker-compose": {
+			"version": "1.3.0",
+			"resolved": "https://registry.npmjs.org/docker-compose/-/docker-compose-1.3.0.tgz",
+			"integrity": "sha512-7Gevk/5eGD50+eMD+XDnFnOrruFkL0kSd7jEG4cjmqweDSUhB7i0g8is/nBdVpl+Bx338SqIB2GLKm32M+Vs6g==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"yaml": "^2.2.2"
+			},
+			"engines": {
+				"node": ">= 6.0.0"
+			}
+		},
+		"node_modules/docker-modem": {
+			"version": "5.0.6",
+			"resolved": "https://registry.npmjs.org/docker-modem/-/docker-modem-5.0.6.tgz",
+			"integrity": "sha512-ens7BiayssQz/uAxGzH8zGXCtiV24rRWXdjNha5V4zSOcxmAZsfGVm/PPFbwQdqEkDnhG+SyR9E3zSHUbOKXBQ==",
+			"dev": true,
+			"license": "Apache-2.0",
+			"dependencies": {
+				"debug": "^4.1.1",
+				"readable-stream": "^3.5.0",
+				"split-ca": "^1.0.1",
+				"ssh2": "^1.15.0"
+			},
+			"engines": {
+				"node": ">= 8.0"
+			}
+		},
+		"node_modules/docker-modem/node_modules/readable-stream": {
+			"version": "3.6.2",
+			"resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz",
+			"integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"inherits": "^2.0.3",
+				"string_decoder": "^1.1.1",
+				"util-deprecate": "^1.0.1"
+			},
+			"engines": {
+				"node": ">= 6"
+			}
+		},
+		"node_modules/dockerode": {
+			"version": "4.0.9",
+			"resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.9.tgz",
+			"integrity": "sha512-iND4mcOWhPaCNh54WmK/KoSb35AFqPAUWFMffTQcp52uQt36b5uNwEJTSXntJZBbeGad72Crbi/hvDIv6us/6Q==",
+			"dev": true,
+			"license": "Apache-2.0",
+			"dependencies": {
+				"@balena/dockerignore": "^1.0.2",
+				"@grpc/grpc-js": "^1.11.1",
+				"@grpc/proto-loader": "^0.7.13",
+				"docker-modem": "^5.0.6",
+				"protobufjs": "^7.3.2",
+				"tar-fs": "^2.1.4",
+				"uuid": "^10.0.0"
+			},
+			"engines": {
+				"node": ">= 8.0"
+			}
+		},
+		"node_modules/dockerode/node_modules/readable-stream": {
+			"version": "3.6.2",
+			"resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz",
+			"integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"inherits": "^2.0.3",
+				"string_decoder": "^1.1.1",
+				"util-deprecate": "^1.0.1"
+			},
+			"engines": {
+				"node": ">= 6"
+			}
+		},
+		"node_modules/dockerode/node_modules/tar-fs": {
+			"version": "2.1.4",
+			"resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.4.tgz",
+			"integrity": "sha512-mDAjwmZdh7LTT6pNleZ05Yt65HC3E+NiQzl672vQG38jIrehtJk/J3mNwIg+vShQPcLF/LV7CMnDW6vjj6sfYQ==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"chownr": "^1.1.1",
+				"mkdirp-classic": "^0.5.2",
+				"pump": "^3.0.0",
+				"tar-stream": "^2.1.4"
+			}
+		},
+		"node_modules/dockerode/node_modules/tar-stream": {
+			"version": "2.2.0",
+			"resolved": "https://registry.npmjs.org/tar-stream/-/tar-stream-2.2.0.tgz",
+			"integrity": "sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"bl": "^4.0.3",
+				"end-of-stream": "^1.4.1",
+				"fs-constants": "^1.0.0",
+				"inherits": "^2.0.3",
+				"readable-stream": "^3.1.1"
+			},
+			"engines": {
+				"node": ">=6"
+			}
+		},
+		"node_modules/dockerode/node_modules/uuid": {
+			"version": "10.0.0",
+			"resolved": "https://registry.npmjs.org/uuid/-/uuid-10.0.0.tgz",
+			"integrity": "sha512-8XkAphELsDnEGrDxUOHB3RGvXz6TeuYSGEZBOjtTtPm2lwhGBjLgOzLHB63IUWfBpNucQjND6d3AOudO+H3RWQ==",
+			"dev": true,
+			"funding": [
+				"https://github.com/sponsors/broofa",
+				"https://github.com/sponsors/ctavan"
+			],
+			"license": "MIT",
+			"bin": {
+				"uuid": "dist/bin/uuid"
+			}
+		},
 		"node_modules/dotenv": {
 			"version": "17.2.3",
 			"resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.2.3.tgz",
@@ -3107,6 +3731,16 @@
 			"dev": true,
 			"license": "MIT"
 		},
+		"node_modules/end-of-stream": {
+			"version": "1.4.5",
+			"resolved": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.5.tgz",
+			"integrity": "sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"once": "^1.4.0"
+			}
+		},
 		"node_modules/es-define-property": {
 			"version": "1.0.1",
 			"resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
@@ -3205,6 +3839,16 @@
 				"@esbuild/win32-x64": "0.25.12"
 			}
 		},
+		"node_modules/escalade": {
+			"version": "3.2.0",
+			"resolved": "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz",
+			"integrity": "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=6"
+			}
+		},
 		"node_modules/esprima": {
 			"version": "4.0.1",
 			"resolved": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz",
@@ -3395,6 +4039,13 @@
 				"node": ">= 0.12"
 			}
 		},
+		"node_modules/fs-constants": {
+			"version": "1.0.0",
+			"resolved": "https://registry.npmjs.org/fs-constants/-/fs-constants-1.0.0.tgz",
+			"integrity": "sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/fsevents": {
 			"version": "2.3.3",
 			"resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",
@@ -3420,6 +4071,16 @@
 				"url": "https://github.com/sponsors/ljharb"
 			}
 		},
+		"node_modules/get-caller-file": {
+			"version": "2.0.5",
+			"resolved": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz",
+			"integrity": "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==",
+			"dev": true,
+			"license": "ISC",
+			"engines": {
+				"node": "6.* || 8.* || >= 10.*"
+			}
+		},
 		"node_modules/get-intrinsic": {
 			"version": "1.3.0",
 			"resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
@@ -3445,6 +4106,19 @@
 				"url": "https://github.com/sponsors/ljharb"
 			}
 		},
+		"node_modules/get-port": {
+			"version": "7.1.0",
+			"resolved": "https://registry.npmjs.org/get-port/-/get-port-7.1.0.tgz",
+			"integrity": "sha512-QB9NKEeDg3xxVwCCwJQ9+xycaz6pBB6iQ76wiWMl1927n0Kir6alPiP+yuiICLLU4jpMe08dXfpebuQppFA2zw==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=16"
+			},
+			"funding": {
+				"url": "https://github.com/sponsors/sindresorhus"
+			}
+		},
 		"node_modules/get-proto": {
 			"version": "1.0.1",
 			"resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
@@ -3789,6 +4463,20 @@
 			"dev": true,
 			"license": "MIT"
 		},
+		"node_modules/lodash.camelcase": {
+			"version": "4.3.0",
+			"resolved": "https://registry.npmjs.org/lodash.camelcase/-/lodash.camelcase-4.3.0.tgz",
+			"integrity": "sha512-TwuEnCnxbc3rAvhf/LbG7tJUDzhqXyFnv3dtzLOPgCG/hODL7WFnsbwktkD7yUV0RrreP/l1PALq/YSg6VvjlA==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/long": {
+			"version": "5.3.2",
+			"resolved": "https://registry.npmjs.org/long/-/long-5.3.2.tgz",
+			"integrity": "sha512-mNAgZ1GmyNhD7AuqnTG3/VQ26o760+ZYBPKjPvugO8+nLbYfX6TVpJPseBvopbdY+qpZ/lKUnmEc1LeZYS3QAA==",
+			"dev": true,
+			"license": "Apache-2.0"
+		},
 		"node_modules/lru-cache": {
 			"version": "10.4.3",
 			"resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz",
@@ -3885,6 +4573,13 @@
 				"mkdirp": "bin/cmd.js"
 			}
 		},
+		"node_modules/mkdirp-classic": {
+			"version": "0.5.3",
+			"resolved": "https://registry.npmjs.org/mkdirp-classic/-/mkdirp-classic-0.5.3.tgz",
+			"integrity": "sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/mrmime": {
 			"version": "2.0.1",
 			"resolved": "https://registry.npmjs.org/mrmime/-/mrmime-2.0.1.tgz",
@@ -3902,6 +4597,14 @@
 			"dev": true,
 			"license": "MIT"
 		},
+		"node_modules/nan": {
+			"version": "2.23.0",
+			"resolved": "https://registry.npmjs.org/nan/-/nan-2.23.0.tgz",
+			"integrity": "sha512-1UxuyYGdoQHcGg87Lkqm3FzefucTa0NAiOcuRsDmysep3c1LVCRK2krrUDafMWtjSG04htvAmvg96+SDknOmgQ==",
+			"dev": true,
+			"license": "MIT",
+			"optional": true
+		},
 		"node_modules/nanoid": {
 			"version": "3.3.11",
 			"resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.11.tgz",
@@ -4075,6 +4778,91 @@
 			"dev": true,
 			"license": "MIT"
 		},
+		"node_modules/proper-lockfile": {
+			"version": "4.1.2",
+			"resolved": "https://registry.npmjs.org/proper-lockfile/-/proper-lockfile-4.1.2.tgz",
+			"integrity": "sha512-TjNPblN4BwAWMXU8s9AEz4JmQxnD1NNL7bNOY/AKUzyamc379FWASUhc/K1pL2noVb+XmZKLL68cjzLsiOAMaA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"graceful-fs": "^4.2.4",
+				"retry": "^0.12.0",
+				"signal-exit": "^3.0.2"
+			}
+		},
+		"node_modules/proper-lockfile/node_modules/signal-exit": {
+			"version": "3.0.7",
+			"resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz",
+			"integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==",
+			"dev": true,
+			"license": "ISC"
+		},
+		"node_modules/properties-reader": {
+			"version": "2.3.0",
+			"resolved": "https://registry.npmjs.org/properties-reader/-/properties-reader-2.3.0.tgz",
+			"integrity": "sha512-z597WicA7nDZxK12kZqHr2TcvwNU1GCfA5UwfDY/HDp3hXPoPlb5rlEx9bwGTiJnc0OqbBTkU975jDToth8Gxw==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"mkdirp": "^1.0.4"
+			},
+			"engines": {
+				"node": ">=14"
+			},
+			"funding": {
+				"type": "github",
+				"url": "https://github.com/steveukx/properties?sponsor=1"
+			}
+		},
+		"node_modules/properties-reader/node_modules/mkdirp": {
+			"version": "1.0.4",
+			"resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz",
+			"integrity": "sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw==",
+			"dev": true,
+			"license": "MIT",
+			"bin": {
+				"mkdirp": "bin/cmd.js"
+			},
+			"engines": {
+				"node": ">=10"
+			}
+		},
+		"node_modules/protobufjs": {
+			"version": "7.5.4",
+			"resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.5.4.tgz",
+			"integrity": "sha512-CvexbZtbov6jW2eXAvLukXjXUW1TzFaivC46BpWc/3BpcCysb5Vffu+B3XHMm8lVEuy2Mm4XGex8hBSg1yapPg==",
+			"dev": true,
+			"hasInstallScript": true,
+			"license": "BSD-3-Clause",
+			"dependencies": {
+				"@protobufjs/aspromise": "^1.1.2",
+				"@protobufjs/base64": "^1.1.2",
+				"@protobufjs/codegen": "^2.0.4",
+				"@protobufjs/eventemitter": "^1.1.0",
+				"@protobufjs/fetch": "^1.1.0",
+				"@protobufjs/float": "^1.0.2",
+				"@protobufjs/inquire": "^1.1.0",
+				"@protobufjs/path": "^1.1.2",
+				"@protobufjs/pool": "^1.1.0",
+				"@protobufjs/utf8": "^1.1.0",
+				"@types/node": ">=13.7.0",
+				"long": "^5.0.0"
+			},
+			"engines": {
+				"node": ">=12.0.0"
+			}
+		},
+		"node_modules/pump": {
+			"version": "3.0.3",
+			"resolved": "https://registry.npmjs.org/pump/-/pump-3.0.3.tgz",
+			"integrity": "sha512-todwxLMY7/heScKmntwQG8CXVkWUOdYxIvY2s0VWAAMh/nd8SoYiRaKjlr7+iCs984f2P8zvrfWcDDYVb73NfA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"end-of-stream": "^1.1.0",
+				"once": "^1.3.1"
+			}
+		},
 		"node_modules/quibble": {
 			"version": "0.9.2",
 			"resolved": "https://registry.npmjs.org/quibble/-/quibble-0.9.2.tgz",
@@ -4139,6 +4927,16 @@
 				"node": ">=10"
 			}
 		},
+		"node_modules/require-directory": {
+			"version": "2.1.1",
+			"resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
+			"integrity": "sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=0.10.0"
+			}
+		},
 		"node_modules/resolve": {
 			"version": "1.22.11",
 			"resolved": "https://registry.npmjs.org/resolve/-/resolve-1.22.11.tgz",
@@ -4170,6 +4968,16 @@
 				"url": "https://github.com/privatenumber/resolve-pkg-maps?sponsor=1"
 			}
 		},
+		"node_modules/retry": {
+			"version": "0.12.0",
+			"resolved": "https://registry.npmjs.org/retry/-/retry-0.12.0.tgz",
+			"integrity": "sha512-9LkiTwjUh6rT555DtE9rTX+BKByPfrMzEAtnlEtdEwr3Nkffwiihqe2bWADg+OQRjt9gl6ICdmB/ZFDCGAtSow==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">= 4"
+			}
+		},
 		"node_modules/rollup": {
 			"version": "4.52.5",
 			"resolved": "https://registry.npmjs.org/rollup/-/rollup-4.52.5.tgz",
@@ -4233,6 +5041,13 @@
 			],
 			"license": "MIT"
 		},
+		"node_modules/safer-buffer": {
+			"version": "2.1.2",
+			"resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
+			"integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/sax": {
 			"version": "1.4.1",
 			"resolved": "https://registry.npmjs.org/sax/-/sax-1.4.1.tgz",
@@ -4321,6 +5136,53 @@
 				"node": ">=0.10.0"
 			}
 		},
+		"node_modules/split-ca": {
+			"version": "1.0.1",
+			"resolved": "https://registry.npmjs.org/split-ca/-/split-ca-1.0.1.tgz",
+			"integrity": "sha512-Q5thBSxp5t8WPTTJQS59LrGqOZqOsrhDGDVm8azCqIBjSBd7nd9o2PM+mDulQQkh8h//4U6hFZnc/mul8t5pWQ==",
+			"dev": true,
+			"license": "ISC"
+		},
+		"node_modules/ssh-remote-port-forward": {
+			"version": "1.0.4",
+			"resolved": "https://registry.npmjs.org/ssh-remote-port-forward/-/ssh-remote-port-forward-1.0.4.tgz",
+			"integrity": "sha512-x0LV1eVDwjf1gmG7TTnfqIzf+3VPRz7vrNIjX6oYLbeCrf/PeVY6hkT68Mg+q02qXxQhrLjB0jfgvhevoCRmLQ==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@types/ssh2": "^0.5.48",
+				"ssh2": "^1.4.0"
+			}
+		},
+		"node_modules/ssh-remote-port-forward/node_modules/@types/ssh2": {
+			"version": "0.5.52",
+			"resolved": "https://registry.npmjs.org/@types/ssh2/-/ssh2-0.5.52.tgz",
+			"integrity": "sha512-lbLLlXxdCZOSJMCInKH2+9V/77ET2J6NPQHpFI0kda61Dd1KglJs+fPQBchizmzYSOJBgdTajhPqBO1xxLywvg==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@types/node": "*",
+				"@types/ssh2-streams": "*"
+			}
+		},
+		"node_modules/ssh2": {
+			"version": "1.17.0",
+			"resolved": "https://registry.npmjs.org/ssh2/-/ssh2-1.17.0.tgz",
+			"integrity": "sha512-wPldCk3asibAjQ/kziWQQt1Wh3PgDFpC0XpwclzKcdT1vql6KeYxf5LIt4nlFkUeR8WuphYMKqUA56X4rjbfgQ==",
+			"dev": true,
+			"hasInstallScript": true,
+			"dependencies": {
+				"asn1": "^0.2.6",
+				"bcrypt-pbkdf": "^1.0.2"
+			},
+			"engines": {
+				"node": ">=10.16.0"
+			},
+			"optionalDependencies": {
+				"cpu-features": "~0.0.10",
+				"nan": "^2.23.0"
+			}
+		},
 		"node_modules/stackback": {
 			"version": "0.0.2",
 			"resolved": "https://registry.npmjs.org/stackback/-/stackback-0.0.2.tgz",
@@ -4497,6 +5359,21 @@
 				"url": "https://github.com/sponsors/ljharb"
 			}
 		},
+		"node_modules/tar-fs": {
+			"version": "3.1.1",
+			"resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-3.1.1.tgz",
+			"integrity": "sha512-LZA0oaPOc2fVo82Txf3gw+AkEd38szODlptMYejQUhndHMLQ9M059uXR+AfS7DNo0NpINvSqDsvyaCrBVkptWg==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"pump": "^3.0.0",
+				"tar-stream": "^3.1.5"
+			},
+			"optionalDependencies": {
+				"bare-fs": "^4.0.1",
+				"bare-path": "^3.0.0"
+			}
+		},
 		"node_modules/tar-stream": {
 			"version": "3.1.7",
 			"resolved": "https://registry.npmjs.org/tar-stream/-/tar-stream-3.1.7.tgz",
@@ -4509,6 +5386,40 @@
 				"streamx": "^2.15.0"
 			}
 		},
+		"node_modules/testcontainers": {
+			"version": "11.7.2",
+			"resolved": "https://registry.npmjs.org/testcontainers/-/testcontainers-11.7.2.tgz",
+			"integrity": "sha512-jeFzeyzLhIouRAbLnQNapJ2esBs/mvXkkYvO1/vSZehT3/7+Q557qaNxwKwMqAbfxfSh7gcx1OLlMsQUZ9JLdA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@balena/dockerignore": "^1.0.2",
+				"@types/dockerode": "^3.3.44",
+				"archiver": "^7.0.1",
+				"async-lock": "^1.4.1",
+				"byline": "^5.0.0",
+				"debug": "^4.4.3",
+				"docker-compose": "^1.3.0",
+				"dockerode": "^4.0.9",
+				"get-port": "^7.1.0",
+				"proper-lockfile": "^4.1.2",
+				"properties-reader": "^2.3.0",
+				"ssh-remote-port-forward": "^1.0.4",
+				"tar-fs": "^3.1.1",
+				"tmp": "^0.2.5",
+				"undici": "^7.16.0"
+			}
+		},
+		"node_modules/testcontainers/node_modules/undici": {
+			"version": "7.16.0",
+			"resolved": "https://registry.npmjs.org/undici/-/undici-7.16.0.tgz",
+			"integrity": "sha512-QEg3HPMll0o3t2ourKwOeUAZ159Kn9mx5pnzHRQO8+Wixmh88YdZRiIwat0iNzNNXn0yoEtXJqFpyW7eM8BV7g==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=20.18.1"
+			}
+		},
 		"node_modules/text-decoder": {
 			"version": "1.2.3",
 			"resolved": "https://registry.npmjs.org/text-decoder/-/text-decoder-1.2.3.tgz",
@@ -4560,6 +5471,16 @@
 				"node": ">=14.0.0"
 			}
 		},
+		"node_modules/tmp": {
+			"version": "0.2.5",
+			"resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.5.tgz",
+			"integrity": "sha512-voyz6MApa1rQGUxT3E+BK7/ROe8itEx7vD8/HEvt4xwXucvQ5G5oeEiHkmHZJuBO21RpOf+YYm9MOivj709jow==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=14.14"
+			}
+		},
 		"node_modules/totalist": {
 			"version": "3.0.1",
 			"resolved": "https://registry.npmjs.org/totalist/-/totalist-3.0.1.tgz",
@@ -4638,6 +5559,13 @@
 				"node": ">=0.6.11 <=0.7.0 || >=0.7.3"
 			}
 		},
+		"node_modules/tweetnacl": {
+			"version": "0.14.5",
+			"resolved": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz",
+			"integrity": "sha512-KXXFFdAbFXY4geFIwoyNK+f5Z1b7swfXABfL7HXCmoIWMKU3dmS26672A4EeQtDzLKy7SXmfBu51JolvEKwtGA==",
+			"dev": true,
+			"license": "Unlicense"
+		},
 		"node_modules/typescript": {
 			"version": "5.9.3",
 			"resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
@@ -5037,6 +5965,16 @@
 				"node": ">=4.0"
 			}
 		},
+		"node_modules/y18n": {
+			"version": "5.0.8",
+			"resolved": "https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz",
+			"integrity": "sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==",
+			"dev": true,
+			"license": "ISC",
+			"engines": {
+				"node": ">=10"
+			}
+		},
 		"node_modules/yaml": {
 			"version": "2.8.1",
 			"resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.1.tgz",
@@ -5050,6 +5988,80 @@
 				"node": ">= 14.6"
 			}
 		},
+		"node_modules/yargs": {
+			"version": "17.7.2",
+			"resolved": "https://registry.npmjs.org/yargs/-/yargs-17.7.2.tgz",
+			"integrity": "sha512-7dSzzRQ++CKnNI/krKnYRV7JKKPUXMEh61soaHKg9mrWEhzFWhFnxPxGl+69cD1Ou63C13NUPCnmIcrvqCuM6w==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"cliui": "^8.0.1",
+				"escalade": "^3.1.1",
+				"get-caller-file": "^2.0.5",
+				"require-directory": "^2.1.1",
+				"string-width": "^4.2.3",
+				"y18n": "^5.0.5",
+				"yargs-parser": "^21.1.1"
+			},
+			"engines": {
+				"node": ">=12"
+			}
+		},
+		"node_modules/yargs-parser": {
+			"version": "21.1.1",
+			"resolved": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-21.1.1.tgz",
+			"integrity": "sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==",
+			"dev": true,
+			"license": "ISC",
+			"engines": {
+				"node": ">=12"
+			}
+		},
+		"node_modules/yargs/node_modules/ansi-regex": {
+			"version": "5.0.1",
+			"resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
+			"integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=8"
+			}
+		},
+		"node_modules/yargs/node_modules/emoji-regex": {
+			"version": "8.0.0",
+			"resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
+			"integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/yargs/node_modules/string-width": {
+			"version": "4.2.3",
+			"resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
+			"integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"emoji-regex": "^8.0.0",
+				"is-fullwidth-code-point": "^3.0.0",
+				"strip-ansi": "^6.0.1"
+			},
+			"engines": {
+				"node": ">=8"
+			}
+		},
+		"node_modules/yargs/node_modules/strip-ansi": {
+			"version": "6.0.1",
+			"resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
+			"integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"ansi-regex": "^5.0.1"
+			},
+			"engines": {
+				"node": ">=8"
+			}
+		},
 		"node_modules/zip-stream": {
 			"version": "6.0.1",
 			"resolved": "https://registry.npmjs.org/zip-stream/-/zip-stream-6.0.1.tgz",
diff --git a/package.json b/package.json
index 221f7f3..12f0fa6 100644
--- a/package.json
+++ b/package.json
@@ -6,8 +6,9 @@
 	"scripts": {
 		"test": "vitest run",
 		"test:watch": "vitest",
-		"test:e2e": "npm run test:e2e:file-reading",
+		"test:e2e": "npm run test:e2e:file-reading && npm run test:e2e:terraform",
 		"test:e2e:file-reading": "vitest run e2e/file-reading.test.ts",
+		"test:e2e:terraform": "vitest run e2e/terraform-integration.test.ts",
 		"build": "ncc build src/index.ts -o dist --minify --no-source-map-register",
 		"lint": "biome check .",
 		"lint:fix": "biome check --write .",
@@ -41,6 +42,7 @@
 		"@vercel/ncc": "^0.38.4",
 		"@vitest/ui": "^4.0.6",
 		"chance": "^1.1.13",
+		"testcontainers": "11.7.2",
 		"typescript": "^5.9.3",
 		"vitest": "^4.0.6"
 	},

From 87473425aaef05849741e8b7d169779680751bcd Mon Sep 17 00:00:00 2001
From: Zach Pratt <zach@modzed.io>
Date: Sun, 2 Nov 2025 10:27:37 -0600
Subject: [PATCH 2/4] fix: use a pinned version of terraform

---
 .devcontainer/devcontainer.json | 2 +-
 .github/dependabot.yml          | 7 +++++++
 .github/workflows/ci.yml        | 2 +-
 .terraform-version              | 1 +
 4 files changed, 10 insertions(+), 2 deletions(-)
 create mode 100644 .terraform-version

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index 584ea6c..b92cbe4 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -4,7 +4,7 @@
 	"features": {
 		"ghcr.io/devcontainers/features/docker-outside-of-docker:1": {},
 		"ghcr.io/devcontainers-contrib/features/terraform-asdf:2": {
-			"version": "latest"
+			"version": "1.13.4"
 		}
 	},
 	"customizations": {
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 0d393b8..6e66ea9 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -25,3 +25,10 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 5
+
+  # Monitor Terraform
+  - package-ecosystem: "terraform"
+    directory: "/e2e/terraform"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5bc84ef..a9fa857 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -49,7 +49,7 @@ jobs:
           node-version-file: ".nvmrc"
       - uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2
         with:
-          terraform_version: latest
+          terraform_version: 1.13.4
       - run: npm ci
       - name: Run Terraform integration tests
         run: npm run test:e2e:terraform
diff --git a/.terraform-version b/.terraform-version
new file mode 100644
index 0000000..80138e7
--- /dev/null
+++ b/.terraform-version
@@ -0,0 +1 @@
+1.13.4

From 1af27b47cdd6170cb1506f4d71aa6b2a43778f7d Mon Sep 17 00:00:00 2001
From: Zach Pratt <zach@modzed.io>
Date: Sun, 16 Nov 2025 16:59:02 -0600
Subject: [PATCH 3/4] fix: run terraform from a container in e2e tests

---
 e2e/terraform-integration.test.ts | 156 ++++++++++++++++++++++++------
 e2e/terraform/provider.tf         |   6 +-
 e2e/terraform/variables.tf        |   5 +
 3 files changed, 134 insertions(+), 33 deletions(-)
 create mode 100644 e2e/terraform/variables.tf

diff --git a/e2e/terraform-integration.test.ts b/e2e/terraform-integration.test.ts
index 1fcdab4..ab404f4 100644
--- a/e2e/terraform-integration.test.ts
+++ b/e2e/terraform-integration.test.ts
@@ -1,7 +1,12 @@
-import { execSync } from "node:child_process";
 import { existsSync, rmSync, unlinkSync } from "node:fs";
+import * as fs from "node:fs/promises";
 import * as path from "node:path";
-import { GenericContainer, type StartedTestContainer } from "testcontainers";
+import {
+	GenericContainer,
+	Network,
+	type StartedNetwork,
+	type StartedTestContainer,
+} from "testcontainers";
 import { afterAll, beforeAll, describe, expect, it } from "vitest";
 import { ParsePlanUseCase } from "../src/domain/usecases/ParsePlanUseCase";
 import { ReadPlanFileUseCase } from "../src/domain/usecases/ReadPlanFileUseCase";
@@ -9,41 +14,112 @@ import { FilesystemAdapter } from "../src/infrastructure/adapters/FilesystemAdap
 
 describe("E2E: Terraform Integration with moto", () => {
 	const terraformDir = path.join(process.cwd(), "e2e", "terraform");
-	const planFile = path.join(terraformDir, "plan.bin");
-	const planJsonFile = path.join(terraformDir, "plan.json");
+	const planFileRelative = "plan.bin";
+	const planFile = path.join(terraformDir, planFileRelative);
+	const planJsonFileRelative = "plan.json";
+	const planJsonFile = path.join(terraformDir, planJsonFileRelative);
 	let motoContainer: StartedTestContainer;
-	let motoPort: number;
+	let terraformContainer: StartedTestContainer;
+	let network: StartedNetwork;
+	const motoContainerName = "moto-server";
+
+	// Read Terraform version from .terraform-version file
+	const getTerraformVersion = async (): Promise<string> => {
+		const versionFilePath = path.join(process.cwd(), ".terraform-version");
+		const versionContent = await fs.readFile(versionFilePath, "utf-8");
+		return versionContent.trim();
+	};
 
 	beforeAll(async () => {
-		// Start moto server using testcontainers
-		console.log("Starting moto server...");
 		try {
-			motoPort = 50000;
+			// Get Terraform version from .terraform-version file
+			const terraformVersion = await getTerraformVersion();
+			console.log(`Using Terraform version: ${terraformVersion}`);
+
+			// Create a shared network for containers
+			console.log("Creating Docker network...");
+			network = await new Network().start();
+
+			// Start moto server in the network
+			console.log("Starting moto server...");
 			motoContainer = await new GenericContainer("motoserver/moto:5.0.0")
-				.withExposedPorts({ container: 5000, host: motoPort })
+				.withNetwork(network)
+				.withNetworkAliases(motoContainerName)
+				.withExposedPorts(5000)
 				.withStartupTimeout(120000)
 				.start();
 
+			const motoPort = motoContainer.getFirstMappedPort();
 			console.log(`Moto server is ready on port ${motoPort}`);
 
+			// Start Terraform container in the same network
+			console.log("Starting Terraform container...");
+			terraformContainer = await new GenericContainer(
+				`hashicorp/terraform:${terraformVersion}`,
+			)
+				.withNetwork(network)
+				.withBindMounts([
+					{
+						source: terraformDir,
+						target: "/terraform",
+						mode: "rw",
+					},
+				])
+				.withWorkingDir("/terraform")
+				.withEntrypoint(["/bin/sh", "-c", "exec sleep infinity"])
+				.withEnvironment({
+					AWS_ACCESS_KEY_ID: "testing",
+					AWS_SECRET_ACCESS_KEY: "testing",
+					AWS_SECURITY_TOKEN: "testing",
+					AWS_SESSION_TOKEN: "testing",
+					AWS_EC2_METADATA_DISABLED: "true",
+				})
+				.withStartupTimeout(60000)
+				.start();
+
+			console.log("Terraform container started");
+
 			// Initialize Terraform
 			console.log("Initializing Terraform...");
-			execSync("terraform init", { cwd: terraformDir, stdio: "pipe" });
+			const initResult = await terraformContainer.exec(["terraform", "init"]);
+			console.log("Init exit code:", initResult.exitCode);
+			if (initResult.exitCode !== 0) {
+				console.error("Init output:", initResult.output);
+				throw new Error(`Terraform init failed: ${initResult.output}`);
+			}
 
-			// Generate plan
+			// Generate plan using moto endpoint accessible from container
 			console.log("Generating Terraform plan...");
-			execSync(`terraform plan -out=${planFile}`, {
-				cwd: terraformDir,
-				stdio: "pipe",
-			});
+			const planResult = await terraformContainer.exec([
+				"terraform",
+				"plan",
+				`-out=${planFileRelative}`,
+				"-var",
+				`moto_endpoint=http://${motoContainerName}:5000`,
+				"-no-color",
+			]);
+			console.log("Plan exit code:", planResult.exitCode);
+			if (planResult.exitCode !== 0) {
+				console.error("Plan output:", planResult.output);
+				throw new Error(`Terraform plan failed: ${planResult.output}`);
+			}
 
 			// Convert plan to JSON
 			console.log("Converting plan to JSON...");
-			execSync(`terraform show -json ${planFile} > ${planJsonFile}`, {
-				cwd: terraformDir,
-				stdio: "pipe",
-				shell: "/bin/bash",
-			});
+			const showResult = await terraformContainer.exec([
+				"terraform",
+				"show",
+				"-json",
+				planFileRelative,
+			]);
+			console.log("Show exit code:", showResult.exitCode);
+			if (showResult.exitCode !== 0) {
+				console.error("Show output:", showResult.output);
+				throw new Error(`Terraform show failed: ${showResult.output}`);
+			}
+
+			// Write the JSON output to file
+			await fs.writeFile(planJsonFile, showResult.output);
 		} catch (error) {
 			console.error("Setup failed:", error);
 			throw error;
@@ -54,6 +130,36 @@ describe("E2E: Terraform Integration with moto", () => {
 		// Cleanup
 		console.log("Cleaning up...");
 
+		// Stop and remove terraform container
+		try {
+			if (terraformContainer) {
+				await terraformContainer.stop();
+				console.log("Terraform container stopped");
+			}
+		} catch (error) {
+			console.error("Failed to stop terraform container:", error);
+		}
+
+		// Stop and remove moto container
+		try {
+			if (motoContainer) {
+				await motoContainer.stop();
+				console.log("Moto container stopped");
+			}
+		} catch (error) {
+			console.error("Failed to stop moto container:", error);
+		}
+
+		// Stop and remove network
+		try {
+			if (network) {
+				await network.stop();
+				console.log("Network stopped");
+			}
+		} catch (error) {
+			console.error("Failed to stop network:", error);
+		}
+
 		// Remove plan files
 		try {
 			if (existsSync(planFile)) {
@@ -85,16 +191,6 @@ describe("E2E: Terraform Integration with moto", () => {
 		} catch (error) {
 			console.error("Failed to cleanup lock file:", error);
 		}
-
-		// Stop and remove moto container
-		try {
-			if (motoContainer) {
-				await motoContainer.stop();
-				console.log("Moto container stopped");
-			}
-		} catch (error) {
-			console.error("Failed to stop moto container:", error);
-		}
 	}, 60000); // 1 minute timeout for cleanup
 
 	it("should parse real Terraform plan output", async () => {
diff --git a/e2e/terraform/provider.tf b/e2e/terraform/provider.tf
index fcbbebe..115b914 100644
--- a/e2e/terraform/provider.tf
+++ b/e2e/terraform/provider.tf
@@ -5,8 +5,8 @@ provider "aws" {
   skip_requesting_account_id  = true
 
   endpoints {
-    sts = "http://localhost:50000"
-    s3  = "http://localhost:50000"
-    sqs = "http://localhost:50000"
+    sts = var.moto_endpoint
+    s3  = var.moto_endpoint
+    sqs = var.moto_endpoint
   }
 }
diff --git a/e2e/terraform/variables.tf b/e2e/terraform/variables.tf
new file mode 100644
index 0000000..9a9cc88
--- /dev/null
+++ b/e2e/terraform/variables.tf
@@ -0,0 +1,5 @@
+variable "moto_endpoint" {
+  type        = string
+  description = "The endpoint for the moto server"
+  default     = "http://localhost:5000"
+}

From df0e0ada45e4ff4ccb4c792cb274eede691026f3 Mon Sep 17 00:00:00 2001
From: Zach Pratt <zach@modzed.io>
Date: Sun, 16 Nov 2025 17:03:01 -0600
Subject: [PATCH 4/4] fix: ensure no errors on cleanup of .terraform directory

---
 e2e/terraform-integration.test.ts | 21 +++++++++++++++++++--
 1 file changed, 19 insertions(+), 2 deletions(-)

diff --git a/e2e/terraform-integration.test.ts b/e2e/terraform-integration.test.ts
index ab404f4..f3b419d 100644
--- a/e2e/terraform-integration.test.ts
+++ b/e2e/terraform-integration.test.ts
@@ -130,6 +130,21 @@ describe("E2E: Terraform Integration with moto", () => {
 		// Cleanup
 		console.log("Cleaning up...");
 
+		// Have terraform container clean up its own files with proper permissions
+		try {
+			if (terraformContainer) {
+				console.log("Cleaning up terraform files from container...");
+				await terraformContainer.exec([
+					"sh",
+					"-c",
+					"rm -rf /terraform/.terraform /terraform/plan.bin /terraform/plan.json /terraform/.terraform.lock.hcl",
+				]);
+				console.log("Terraform files cleaned from container");
+			}
+		} catch (error) {
+			console.warn("Failed to cleanup from container:", error);
+		}
+
 		// Stop and remove terraform container
 		try {
 			if (terraformContainer) {
@@ -160,7 +175,7 @@ describe("E2E: Terraform Integration with moto", () => {
 			console.error("Failed to stop network:", error);
 		}
 
-		// Remove plan files
+		// Remove plan files from host
 		try {
 			if (existsSync(planFile)) {
 				unlinkSync(planFile);
@@ -177,9 +192,11 @@ describe("E2E: Terraform Integration with moto", () => {
 			const terraformStateDir = path.join(terraformDir, ".terraform");
 			if (existsSync(terraformStateDir)) {
 				rmSync(terraformStateDir, { recursive: true, force: true });
+				console.log(".terraform directory cleaned up");
 			}
 		} catch (error) {
-			console.error("Failed to cleanup .terraform directory:", error);
+			// Log error but don't fail - permissions issues in CI can be expected
+			console.warn("Failed to cleanup .terraform directory:", error);
 		}
 
 		// Remove lock file