@cortex-context/cli 0.0.8 → 0.0.10

package/dist/index.js

@@ -18220,7 +18220,68 @@ function tryFixLxcSysctl() {
     return { applied: false };
   }
 }
-async function deployLocalStack(workspacePath) {
+function tryConfigureCrunRuntime() {
+  const result = {
+    attempted: false,
+    crunInstalled: false,
+    daemonUpdated: false,
+    dockerRestarted: false
+  };
+  if ((0, import_os3.platform)() !== "linux") return result;
+  result.attempted = true;
+  const hasCrun = (() => {
+    try {
+      (0, import_child_process.execSync)("which crun", { stdio: "ignore" });
+      return true;
+    } catch {
+      return false;
+    }
+  })();
+  if (hasCrun) {
+    result.crunInstalled = true;
+  } else {
+    try {
+      (0, import_child_process.execSync)("apt-get install -y crun", { stdio: "ignore" });
+      result.crunInstalled = true;
+    } catch (e) {
+      result.error = `crun install: ${e instanceof Error ? e.message : String(e)}`;
+      return result;
+    }
+  }
+  const daemonPath = "/etc/docker/daemon.json";
+  let cfg = {};
+  try {
+    if ((0, import_fs5.existsSync)(daemonPath)) {
+      cfg = JSON.parse((0, import_fs5.readFileSync)(daemonPath, "utf-8"));
+    }
+  } catch {
+    cfg = {};
+  }
+  if (cfg["default-runtime"] === "crun") {
+    result.daemonUpdated = true;
+    result.dockerRestarted = true;
+    return result;
+  }
+  const runtimes = cfg["runtimes"] ?? {};
+  runtimes["crun"] = { path: "/usr/bin/crun" };
+  cfg["runtimes"] = runtimes;
+  cfg["default-runtime"] = "crun";
+  try {
+    (0, import_fs5.writeFileSync)(daemonPath, JSON.stringify(cfg, null, 2) + "\n", "utf-8");
+    result.daemonUpdated = true;
+  } catch (e) {
+    result.error = `daemon.json: ${e instanceof Error ? e.message : String(e)}`;
+    return result;
+  }
+  try {
+    (0, import_child_process.execSync)("systemctl restart docker", { stdio: "ignore" });
+    result.dockerRestarted = true;
+  } catch (e) {
+    result.error = `docker restart: ${e instanceof Error ? e.message : String(e)}`;
+  }
+  return result;
+}
+async function deployLocalStack(workspacePath, opts = {}) {
   const templatePath = (0, import_path5.join)(
     __dirname,
     "templates",
@@ -18234,22 +18295,29 @@ async function deployLocalStack(workspacePath) {
   if (!(0, import_fs5.existsSync)(destPath)) {
     (0, import_fs5.cpSync)(templatePath, destPath);
   }
+  const imageTag = opts.embeddings ? "latest-embeddings" : "latest";
+  const cortexImage = `ghcr.io/rodrigoroldan/cortex-context:${imageTag}`;
   try {
     (0, import_child_process.execSync)(
       `docker compose --project-name cortex-local -f "${destPath}" up -d`,
       {
         cwd: workspacePath,
-        stdio: "inherit"
+        // stdout → terminal (user sees progress), stderr → captured for error detection
+        stdio: ["inherit", "inherit", "pipe"],
+        env: { ...process.env, CORTEX_IMAGE: cortexImage }
       }
     );
     return { started: true };
   } catch (err) {
+    const stderr = err instanceof Error && "stderr" in err ? err.stderr?.toString() ?? "" : "";
     const msg = err instanceof Error ? err.message : String(err);
-    const isLxcSysctlError = msg.includes("ip_unprivileged_port_start") || msg.includes("sysctl");
+    const combined = stderr + msg;
+    const isLxcSysctlError = combined.includes("ip_unprivileged_port_start") || combined.includes("sysctl net.ipv4");
     return {
       started: false,
       isLxcSysctlError,
-      error: `docker compose failed: ${msg}`
+      error: `docker compose failed: ${msg}${stderr ? `
+${stderr.trim()}` : ""}`
     };
   }
 }
@@ -28056,6 +28124,13 @@ async function serverCommand(options) {
       "  Installs and starts the Cortex stack (Neo4j + Cortex API) via Docker."
     )
   );
+  if (options.embeddings) {
+    console.log(
+      source_default.dim(
+        "  Mode: embeddings (sentence-transformers + all-MiniLM-L6-v2 baked in, ~1.5 GB image)"
+      )
+    );
+  }
   console.log("");
   const defaultDir = (0, import_path13.join)((0, import_os4.homedir)(), ".cortex-context");
   const workDir = options.dir ?? defaultDir;
@@ -28161,28 +28236,69 @@ async function serverCommand(options) {
   console.log(source_default.bold("  Step 3: Starting Cortex stack"));
   const sysctlFix = tryFixLxcSysctl();
   if (sysctlFix.applied) {
-    console.log(source_default.dim("  (applied net.ipv4.ip_unprivileged_port_start=0 for LXC compatibility)"));
+    console.log(
+      source_default.dim(
+        "  (applied net.ipv4.ip_unprivileged_port_start=0 for LXC compatibility)"
+      )
+    );
+  }
+  const crunSetup = tryConfigureCrunRuntime();
+  if (crunSetup.attempted) {
+    if (crunSetup.dockerRestarted) {
+      console.log(
+        source_default.dim(
+          "  (configured crun as Docker runtime for LXC compatibility \u2014 daemon restarted)"
+        )
+      );
+    } else if (crunSetup.error) {
+      console.log(
+        source_default.dim(`  (crun setup skipped: ${crunSetup.error})`)
+      );
+    }
   }
   const startSpinner = ora("  Running docker compose up -d...").start();
-  const startResult = await deployLocalStack(workDir);
+  const startResult = await deployLocalStack(workDir, {
+    embeddings: options.embeddings ?? false
+  });
   if (!startResult.started) {
     startSpinner.fail(source_default.red("  \u2717 Docker Compose failed"));
     if (startResult.isLxcSysctlError) {
       console.log("");
-      console.log(source_default.bold.yellow("  \u26A0  Proxmox LXC sysctl restriction detected"));
+      console.log(
+        source_default.bold.yellow("  \u26A0  Proxmox LXC sysctl restriction detected")
+      );
       console.log("");
-      console.log(source_default.dim("  runc >= 1.1 tries to configure net.ipv4.ip_unprivileged_port_start"));
-      console.log(source_default.dim("  inside each container's network namespace. Proxmox LXC containers"));
-      console.log(source_default.dim("  block this unless the sysctl is explicitly allowed in the LXC config."));
+      console.log(
+        source_default.dim(
+          "  runc >= 1.1 writes net.ipv4.ip_unprivileged_port_start in each new"
+        )
+      );
+      console.log(
+        source_default.dim(
+          "  Docker network namespace. Unprivileged Proxmox LXC blocks this write."
+        )
+      );
       console.log("");
-      console.log(source_default.bold("  Fix (run on the Proxmox host):"));
+      console.log(
+        source_default.dim(
+          "  Attempted automatic fix (crun) \u2014 but it was not enough."
+        )
+      );
+      console.log(
+        source_default.dim(
+          "  Manual fix: install crun and configure Docker daemon on this LXC:"
+        )
+      );
       console.log("");
-      console.log(source_default.cyan("    CTID=<your-container-id>"));
-      console.log(source_default.cyan('    echo "lxc.sysctl.net.ipv4.ip_unprivileged_port_start = 0" \\'));
-      console.log(source_default.cyan("      >> /etc/pve/lxc/${CTID}.conf"));
-      console.log(source_default.cyan("    pct restart ${CTID}"));
+      console.log(source_default.cyan("    apt-get install -y crun"));
+      console.log(source_default.cyan("    cat > /etc/docker/daemon.json << 'EOF'"));
+      console.log(source_default.cyan('    {"default-runtime":"crun","runtimes":{"crun":{"path":"/usr/bin/crun"}}}'));
+      console.log(source_default.cyan("    EOF"));
+      console.log(source_default.cyan("    systemctl restart docker"));
       console.log("");
-      console.log(source_default.dim("  Then run  cortex-context server  again inside the LXC."));
+      console.log(
+        source_default.dim("  Then run  cortex-context server  again.")
+      );
     } else {
       console.log(source_default.dim(`  ${startResult.error}`));
     }
@@ -28372,8 +28488,8 @@ async function uninstallCommand(options) {
   if (!options.keepHook && hasHook) {
     const hookPath = (0, import_path14.join)(workspacePath, ".git", "hooks", "post-commit");
     try {
-      const { readFileSync: readFileSync7 } = await import("fs");
-      const hookContent = readFileSync7(hookPath, "utf-8");
+      const { readFileSync: readFileSync8 } = await import("fs");
+      const hookContent = readFileSync8(hookPath, "utf-8");
       if (hookContent.includes("cortex-context")) {
         (0, import_fs13.unlinkSync)(hookPath);
         console.log(source_default.green("  \u2713 .git/hooks/post-commit \u2014 removed"));
@@ -28454,6 +28570,9 @@ function createCli() {
   ).option(
     "--skip-docker-install",
     "Fail instead of auto-installing Docker when it is not found"
+  ).option(
+    "--embeddings",
+    "Use the embeddings-enabled image (includes sentence-transformers + all-MiniLM-L6-v2, ~1.5 GB)"
   ).action(serverCommand);
   program3.command("sync").description("Ingest latest git diff into the Cortex Knowledge Graph").option("--repo <path>", "Repository path (defaults to current directory)").option("--dry-run", "Show diff without sending to Cortex API").action(syncCommand);
   program3.command("update").description(