@cortex-context/cli 0.0.7 → 0.0.9

package/dist/index.js

@@ -18210,7 +18210,17 @@ var import_child_process = require("child_process");
 var import_fs5 = require("fs");
 var import_path5 = require("path");
 var import_os3 = require("os");
-async function deployLocalStack(workspacePath) {
+function tryFixLxcSysctl() {
+  try {
+    (0, import_child_process.execSync)("sysctl -w net.ipv4.ip_unprivileged_port_start=0", {
+      stdio: "ignore"
+    });
+    return { applied: true };
+  } catch {
+    return { applied: false };
+  }
+}
+async function deployLocalStack(workspacePath, opts = {}) {
   const templatePath = (0, import_path5.join)(
     __dirname,
     "templates",
@@ -18224,19 +18234,29 @@ async function deployLocalStack(workspacePath) {
   if (!(0, import_fs5.existsSync)(destPath)) {
     (0, import_fs5.cpSync)(templatePath, destPath);
   }
+  const imageTag = opts.embeddings ? "latest-embeddings" : "latest";
+  const cortexImage = `ghcr.io/rodrigoroldan/cortex-context:${imageTag}`;
   try {
     (0, import_child_process.execSync)(
       `docker compose --project-name cortex-local -f "${destPath}" up -d`,
       {
         cwd: workspacePath,
-        stdio: "inherit"
+        // stdout → terminal (user sees progress), stderr → captured for error detection
+        stdio: ["inherit", "inherit", "pipe"],
+        env: { ...process.env, CORTEX_IMAGE: cortexImage }
       }
     );
     return { started: true };
   } catch (err) {
+    const stderr = err instanceof Error && "stderr" in err ? err.stderr?.toString() ?? "" : "";
+    const msg = err instanceof Error ? err.message : String(err);
+    const combined = stderr + msg;
+    const isLxcSysctlError = combined.includes("ip_unprivileged_port_start") || combined.includes("sysctl net.ipv4");
     return {
       started: false,
-      error: `docker compose failed: ${err instanceof Error ? err.message : String(err)}`
+      isLxcSysctlError,
+      error: `docker compose failed: ${msg}${stderr ? `
+${stderr.trim()}` : ""}`
     };
   }
 }
@@ -28043,6 +28063,13 @@ async function serverCommand(options) {
       "  Installs and starts the Cortex stack (Neo4j + Cortex API) via Docker."
     )
   );
+  if (options.embeddings) {
+    console.log(
+      source_default.dim(
+        "  Mode: embeddings (sentence-transformers + all-MiniLM-L6-v2 baked in, ~1.5 GB image)"
+      )
+    );
+  }
   console.log("");
   const defaultDir = (0, import_path13.join)((0, import_os4.homedir)(), ".cortex-context");
   const workDir = options.dir ?? defaultDir;
@@ -28146,12 +28173,59 @@ async function serverCommand(options) {
   }
   console.log("");
   console.log(source_default.bold("  Step 3: Starting Cortex stack"));
+  const sysctlFix = tryFixLxcSysctl();
+  if (sysctlFix.applied) {
+    console.log(
+      source_default.dim(
+        "  (applied net.ipv4.ip_unprivileged_port_start=0 for LXC compatibility)"
+      )
+    );
+  }
   const startSpinner = ora("  Running docker compose up -d...").start();
-  const startResult = await deployLocalStack(workDir);
+  const startResult = await deployLocalStack(workDir, {
+    embeddings: options.embeddings ?? false
+  });
   if (!startResult.started) {
-    startSpinner.fail(
-      source_default.red(`  \u2717 Docker Compose failed: ${startResult.error}`)
-    );
+    startSpinner.fail(source_default.red("  \u2717 Docker Compose failed"));
+    if (startResult.isLxcSysctlError) {
+      console.log("");
+      console.log(
+        source_default.bold.yellow("  \u26A0  Proxmox LXC sysctl restriction detected")
+      );
+      console.log("");
+      console.log(
+        source_default.dim(
+          "  runc >= 1.1 tries to configure net.ipv4.ip_unprivileged_port_start"
+        )
+      );
+      console.log(
+        source_default.dim(
+          "  inside each container's network namespace. Proxmox LXC containers"
+        )
+      );
+      console.log(
+        source_default.dim(
+          "  block this unless the sysctl is explicitly allowed in the LXC config."
+        )
+      );
+      console.log("");
+      console.log(source_default.bold("  Fix (run on the Proxmox host):"));
+      console.log("");
+      console.log(source_default.cyan("    CTID=<your-container-id>"));
+      console.log(
+        source_default.cyan(
+          '    echo "lxc.sysctl.net.ipv4.ip_unprivileged_port_start = 0" \\'
+        )
+      );
+      console.log(source_default.cyan("      >> /etc/pve/lxc/${CTID}.conf"));
+      console.log(source_default.cyan("    pct restart ${CTID}"));
+      console.log("");
+      console.log(
+        source_default.dim("  Then run  cortex-context server  again inside the LXC.")
+      );
+    } else {
+      console.log(source_default.dim(`  ${startResult.error}`));
+    }
     process.exit(1);
   }
   startSpinner.succeed(source_default.green("  \u2713 Containers started"));
@@ -28420,6 +28494,9 @@ function createCli() {
   ).option(
     "--skip-docker-install",
     "Fail instead of auto-installing Docker when it is not found"
+  ).option(
+    "--embeddings",
+    "Use the embeddings-enabled image (includes sentence-transformers + all-MiniLM-L6-v2, ~1.5 GB)"
   ).action(serverCommand);
   program3.command("sync").description("Ingest latest git diff into the Cortex Knowledge Graph").option("--repo <path>", "Repository path (defaults to current directory)").option("--dry-run", "Show diff without sending to Cortex API").action(syncCommand);
   program3.command("update").description(