@getmonoceros/workbench 1.19.1 → 1.20.0

package/dist/bin.js

@@ -6407,7 +6407,7 @@ var CLI_VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    CLI_VERSION = true ? "1.19.1" : "dev";
+    CLI_VERSION = true ? "1.20.0" : "dev";
   }
 });
 
@@ -6596,43 +6596,6 @@ var init_completion = __esm({
   }
 });
 
-// src/login/services.ts
-function featureLeaf(ref) {
-  const noTag = ref.replace(/:[^/:]*$/, "");
-  return noTag.slice(noTag.lastIndexOf("/") + 1);
-}
-function loginCapableServices(refs) {
-  const out = [];
-  for (const ref of refs) {
-    const service = LOGIN_SERVICE_BY_LEAF[featureLeaf(ref)];
-    if (service && !out.includes(service)) out.push(service);
-  }
-  return out;
-}
-function parseCallbackTarget(authUrl) {
-  try {
-    const u = new URL(authUrl);
-    const redirect = u.searchParams.get("redirect_uri");
-    if (!redirect) return null;
-    const r = new URL(redirect);
-    if (r.hostname !== "localhost" && r.hostname !== "127.0.0.1") return null;
-    const port = Number(r.port);
-    if (!Number.isInteger(port) || port <= 0) return null;
-    return { port, pathname: r.pathname };
-  } catch {
-    return null;
-  }
-}
-var LOGIN_SERVICE_BY_LEAF;
-var init_services = __esm({
-  "src/login/services.ts"() {
-    "use strict";
-    LOGIN_SERVICE_BY_LEAF = {
-      "claude-code": "claude"
-    };
-  }
-});
-
 // src/completion/resolve.ts
 import { existsSync as existsSync8, promises as fs13 } from "fs";
 import path16 from "path";
@@ -6789,20 +6752,6 @@ async function listContainerNames(ctx) {
   const entries = await fs13.readdir(dir);
   return entries.filter((e) => e.endsWith(".yml")).map((e) => e.slice(0, -".yml".length)).sort();
 }
-async function listLoginServices(ctx) {
-  const after = ctx.prev.slice(2);
-  const name = after.find((t) => !t.startsWith("-"));
-  if (!name) return [];
-  const home = ctx.opts.monocerosHome ?? monocerosHome();
-  const cfgPath = path16.join(home, "container-configs", `${name}.yml`);
-  if (!existsSync8(cfgPath)) return [];
-  try {
-    const { config } = await readConfig(cfgPath);
-    return loginCapableServices(config.features.map((f) => f.ref));
-  } catch {
-    return [];
-  }
-}
 async function listFeatureComponents() {
   const catalog = await loadComponentCatalog();
   return [...catalog.values()].filter((c) => c.file.category === "feature").map((c) => c.name).sort();
@@ -6870,18 +6819,15 @@ var init_resolve = __esm({
   "src/completion/resolve.ts"() {
     "use strict";
     init_paths();
-    init_io();
     init_components();
     init_manifest();
     init_catalog();
-    init_services();
     init_schema();
     ALL_COMMANDS = [
       "init",
       "list-components",
       "shell",
       "run",
-      "login",
       "logs",
       "start",
       "stop",
@@ -6950,7 +6896,6 @@ var init_resolve = __esm({
         positionals: [containerName],
         flags: { "--in": { type: "value" } }
       },
-      login: { positionals: [containerName, (ctx) => listLoginServices(ctx)] },
       logs: { positionals: [containerName] },
       start: { positionals: [containerName] },
       stop: { positionals: [containerName] },
@@ -7923,270 +7868,15 @@ var init_list_components = __esm({
   }
 });
 
-// src/devcontainer/shell.ts
+// src/commands/logs.ts
+import { spawn as spawn8 } from "child_process";
 import { existsSync as existsSync10 } from "fs";
 import path18 from "path";
-async function runShell(opts) {
-  assertContainerExists(opts.root);
-  const spawnFn = opts.spawn ?? spawnDevcontainer;
-  const upCode = await spawnFn(
-    ["up", "--workspace-folder", opts.root, "--mount-workspace-git-root=false"],
-    opts.root,
-    { quiet: true }
-  );
-  if (upCode !== 0) return upCode;
-  return spawnFn(
-    [
-      "exec",
-      "--workspace-folder",
-      opts.root,
-      "--mount-workspace-git-root=false",
-      "bash"
-    ],
-    opts.root,
-    { interactive: true }
-  );
-}
-function assertContainerExists(root) {
-  if (!existsSync10(path18.join(root, ".devcontainer"))) {
-    throw new Error(
-      `No .devcontainer/ at ${root}. Run \`monoceros apply <name>\` first.`
-    );
-  }
-}
-var init_shell = __esm({
-  "src/devcontainer/shell.ts"() {
-    "use strict";
-    init_cli();
-  }
-});
-
-// src/login/index.ts
-import { spawn as spawn8 } from "child_process";
-import { existsSync as existsSync11, promises as fsp2, readFileSync as readFileSync6 } from "fs";
-import http from "http";
-import path19 from "path";
-import { consola as consola16 } from "consola";
-function openInBrowser(url) {
-  const platform = process.platform;
-  const [cmd, args] = platform === "darwin" ? ["open", [url]] : platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
-  try {
-    const child = spawn8(cmd, args, {
-      stdio: "ignore",
-      detached: true
-    });
-    child.on("error", () => {
-    });
-    child.unref();
-  } catch {
-  }
-}
-async function runLogin(opts) {
-  const root = containerDir(opts.name);
-  assertContainerExists(root);
-  const { config } = await readConfig(containerConfigPath(opts.name));
-  const capable = loginCapableServices(config.features.map((f) => f.ref));
-  if (capable.length === 0) {
-    consola16.error(
-      `Container "${opts.name}" has no tool with a Monoceros login. (Supported today: claude.)`
-    );
-    return 1;
-  }
-  if (!opts.feature) {
-    consola16.info(
-      `Login-capable tools in "${opts.name}": ${capable.join(", ")}.`
-    );
-    consola16.info(`Log one in with: monoceros login ${opts.name} <tool>`);
-    return 0;
-  }
-  const service = opts.feature;
-  if (!capable.includes(service)) {
-    consola16.error(
-      `"${service}" is not a login-capable tool in "${opts.name}". Available: ${capable.join(", ")}.`
-    );
-    return 1;
-  }
-  if (service !== "claude") {
-    consola16.error(
-      `Login for "${service}" is not implemented yet (only claude).`
-    );
-    return 1;
-  }
-  return runClaudeLogin(opts.name, root, opts.spawn ?? spawnDevcontainer);
-}
-async function runClaudeLogin(name, root, spawnFn) {
-  const credFile = path19.join(root, "home", ".claude", ".credentials.json");
-  if (existsSync11(credFile)) {
-    consola16.success(
-      `Claude is already logged in for "${name}". Re-apply or remove the credential to log in again.`
-    );
-    return 0;
-  }
-  const upCode = await spawnFn(
-    ["up", "--workspace-folder", root, "--mount-workspace-git-root=false"],
-    root,
-    { quiet: true }
-  );
-  if (upCode !== 0) return upCode;
-  const relayDir = path19.join(root, RELAY_DIRNAME);
-  const relayScript = path19.join(relayDir, "xdg-open");
-  const urlFile = path19.join(relayDir, "url");
-  await fsp2.mkdir(relayDir, { recursive: true });
-  await fsp2.rm(urlFile, { force: true });
-  await fsp2.writeFile(
-    relayScript,
-    `#!/bin/sh
-printf '%s\\n' "$1" > "$(dirname "$0")/url"
-exit 0
-`,
-    { mode: 493 }
-  );
-  await fsp2.chmod(relayScript, 493);
-  const servers = [];
-  let handledUrl = false;
-  const onAuthUrl = (authUrl) => {
-    openInBrowser(authUrl);
-    const target = parseCallbackTarget(authUrl);
-    if (!target) {
-      return;
-    }
-    const server = http.createServer((req, res) => {
-      const reqUrl = req.url ?? target.pathname;
-      res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
-      res.end(
-        '<html><body style="font-family:sans-serif;padding:3rem">You are signed in. You can close this tab and return to the terminal.</body></html>'
-      );
-      void spawnFn(
-        [
-          "exec",
-          "--workspace-folder",
-          root,
-          "--mount-workspace-git-root=false",
-          "curl",
-          "-fsS",
-          `http://localhost:${target.port}${reqUrl}`
-        ],
-        root,
-        { quiet: true }
-      );
-    });
-    server.on("error", (err) => {
-      consola16.warn(
-        `Could not start the local callback helper on port ${target.port} (${err.message}). If the browser shows a code, paste it into the terminal instead.`
-      );
-    });
-    server.listen(target.port, "127.0.0.1");
-    servers.push(server);
-  };
-  const poll = setInterval(() => {
-    if (handledUrl || !existsSync11(urlFile)) return;
-    let content = "";
-    try {
-      content = readFileSync6(urlFile, "utf8");
-    } catch {
-      return;
-    }
-    if (!content.trim()) return;
-    handledUrl = true;
-    onAuthUrl(content.trim());
-  }, 250);
-  consola16.info("Logging in to Claude \u2014 a browser window will open for you.");
-  const child = spawn8(
-    process.execPath,
-    [
-      devcontainerCliPath(),
-      "exec",
-      "--workspace-folder",
-      root,
-      "--mount-workspace-git-root=false",
-      "bash",
-      "-lc",
-      `export PATH="/workspaces/${name}/${RELAY_DIRNAME}:$PATH"; exec claude auth login`
-    ],
-    {
-      cwd: root,
-      env: { ...process.env, DOCKER_CLI_HINTS: "false" },
-      stdio: "inherit"
-    }
-  );
-  const code = await new Promise((resolve) => {
-    child.on("error", () => resolve(1));
-    child.on("exit", (c) => resolve(c ?? 0));
-  });
-  clearInterval(poll);
-  for (const s of servers) s.close();
-  await fsp2.rm(relayDir, { recursive: true, force: true });
-  if (existsSync11(credFile)) {
-    consola16.success(
-      `Claude is logged in for "${name}". The credential persists across rebuilds.`
-    );
-  }
-  return code;
-}
-var RELAY_DIRNAME;
-var init_login = __esm({
-  "src/login/index.ts"() {
-    "use strict";
-    init_io();
-    init_paths();
-    init_cli();
-    init_shell();
-    init_services();
-    RELAY_DIRNAME = ".monoceros-login";
-  }
-});
-
-// src/commands/login.ts
 import { defineCommand as defineCommand13 } from "citty";
-import { consola as consola17 } from "consola";
-var loginCommand;
-var init_login2 = __esm({
-  "src/commands/login.ts"() {
-    "use strict";
-    init_login();
-    loginCommand = defineCommand13({
-      meta: {
-        name: "login",
-        group: "lifecycle",
-        description: "Log a curated tool in inside the container. Opens the sign-in page in your browser for you \u2014 no copying URLs. Today: Claude."
-      },
-      args: {
-        name: {
-          type: "positional",
-          description: "Container name.",
-          required: true
-        },
-        feature: {
-          type: "positional",
-          description: "Which tool to log in (e.g. `claude`). Optional when the container has only one login-capable tool.",
-          required: false
-        }
-      },
-      async run({ args }) {
-        try {
-          const code = await runLogin({
-            name: args.name,
-            ...args.feature ? { feature: args.feature } : {}
-          });
-          process.exit(code);
-        } catch (err) {
-          consola17.error(err instanceof Error ? err.message : String(err));
-          process.exit(1);
-        }
-      }
-    });
-  }
-});
-
-// src/commands/logs.ts
-import { spawn as spawn9 } from "child_process";
-import { existsSync as existsSync12 } from "fs";
-import path20 from "path";
-import { defineCommand as defineCommand14 } from "citty";
 function tailLogFile(file, follow) {
   const [cmd, args] = follow ? ["tail", ["-F", file]] : ["cat", [file]];
   return new Promise((resolve, reject) => {
-    const child = spawn9(cmd, args, { stdio: "inherit" });
+    const child = spawn8(cmd, args, { stdio: "inherit" });
     child.on("error", reject);
     child.on("exit", (code) => resolve(code ?? 0));
   });
@@ -8198,7 +7888,7 @@ var init_logs = __esm({
     init_paths();
     init_compose();
     init_dispatch();
-    logsCommand = defineCommand14({
+    logsCommand = defineCommand13({
       meta: {
         name: "logs",
         group: "run",
@@ -8224,8 +7914,8 @@ var init_logs = __esm({
       run({ args }) {
         const service = typeof args.service === "string" ? args.service : void 0;
         if (service) {
-          const logFile = path20.join(containerLogsDir(args.name), `${service}.log`);
-          if (existsSync12(logFile)) {
+          const logFile = path18.join(containerLogsDir(args.name), `${service}.log`);
+          if (existsSync10(logFile)) {
             return dispatch(() => tailLogFile(logFile, args.follow));
           }
         }
@@ -8242,11 +7932,11 @@ var init_logs = __esm({
 });
 
 // src/commands/port.ts
-import { defineCommand as defineCommand15 } from "citty";
-import { consola as consola18 } from "consola";
+import { defineCommand as defineCommand14 } from "citty";
+import { consola as consola16 } from "consola";
 async function runPortListing(opts) {
   const out = opts.out ?? process.stdout;
-  const info = opts.info ?? ((m) => consola18.info(m));
+  const info = opts.info ?? ((m) => consola16.info(m));
   const parsed = await readConfig(
     containerConfigPath(opts.name, opts.monocerosHome)
   );
@@ -8304,7 +7994,7 @@ var init_port = __esm({
     init_schema();
     init_dynamic();
     init_format();
-    portCommand = defineCommand15({
+    portCommand = defineCommand14({
       meta: {
         name: "port",
         group: "discovery",
@@ -8322,7 +8012,7 @@ var init_port = __esm({
           const code = await runPortListing({ name: args.name });
           process.exit(code);
         } catch (err) {
-          consola18.error(err instanceof Error ? err.message : String(err));
+          consola16.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -8331,15 +8021,15 @@ var init_port = __esm({
 });
 
 // src/commands/remove-apt-packages.ts
-import { defineCommand as defineCommand16 } from "citty";
-import { consola as consola19 } from "consola";
+import { defineCommand as defineCommand15 } from "citty";
+import { consola as consola17 } from "consola";
 var removeAptPackagesCommand;
 var init_remove_apt_packages = __esm({
   "src/commands/remove-apt-packages.ts"() {
     "use strict";
     init_inner_args();
     init_modify();
-    removeAptPackagesCommand = defineCommand16({
+    removeAptPackagesCommand = defineCommand15({
       meta: {
         name: "remove-apt-packages",
         group: "edit",
@@ -8361,7 +8051,7 @@ var init_remove_apt_packages = __esm({
       async run({ args }) {
         const packages = [...getInnerArgs()];
         if (packages.length === 0) {
-          consola19.error(
+          consola17.error(
             "No package names given. Usage: `monoceros remove-apt-packages <containername> [--yes] -- <pkg> [<pkg> \u2026]`."
           );
           process.exit(1);
@@ -8374,7 +8064,7 @@ var init_remove_apt_packages = __esm({
           });
           process.exit(result.status === "aborted" ? 1 : 0);
         } catch (err) {
-          consola19.error(err instanceof Error ? err.message : String(err));
+          consola17.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -8383,14 +8073,14 @@ var init_remove_apt_packages = __esm({
 });
 
 // src/commands/remove-feature.ts
-import { defineCommand as defineCommand17 } from "citty";
-import { consola as consola20 } from "consola";
+import { defineCommand as defineCommand16 } from "citty";
+import { consola as consola18 } from "consola";
 var removeFeatureCommand;
 var init_remove_feature = __esm({
   "src/commands/remove-feature.ts"() {
     "use strict";
     init_modify();
-    removeFeatureCommand = defineCommand17({
+    removeFeatureCommand = defineCommand16({
       meta: {
         name: "remove-feature",
         group: "edit",
@@ -8423,7 +8113,7 @@ var init_remove_feature = __esm({
           });
           process.exit(result.status === "aborted" ? 1 : 0);
         } catch (err) {
-          consola20.error(err instanceof Error ? err.message : String(err));
+          consola18.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -8432,15 +8122,15 @@ var init_remove_feature = __esm({
 });
 
 // src/remove/index.ts
-import { existsSync as existsSync13, promises as fs15 } from "fs";
-import path21 from "path";
-import { consola as consola21 } from "consola";
+import { existsSync as existsSync11, promises as fs15 } from "fs";
+import path19 from "path";
+import { consola as consola19 } from "consola";
 async function runRemove(opts) {
   const home = opts.monocerosHome ?? monocerosHome();
   const logger = opts.logger ?? {
-    info: (msg) => consola21.info(msg),
-    success: (msg) => consola21.success(msg),
-    warn: (msg) => consola21.warn(msg)
+    info: (msg) => consola19.info(msg),
+    success: (msg) => consola19.success(msg),
+    warn: (msg) => consola19.warn(msg)
   };
   if (!REGEX.solutionName.test(opts.name)) {
     throw new Error(
@@ -8450,9 +8140,9 @@ async function runRemove(opts) {
   const ymlPath = containerConfigPath(opts.name, home);
   const envPath = containerEnvPath(opts.name, home);
   const containerPath = containerDir(opts.name, home);
-  const hasYml = existsSync13(ymlPath);
-  const hasEnv = existsSync13(envPath);
-  const hasContainer = existsSync13(containerPath);
+  const hasYml = existsSync11(ymlPath);
+  const hasEnv = existsSync11(envPath);
+  const hasContainer = existsSync11(containerPath);
   if (!hasYml && !hasContainer) {
     throw new Error(
       `Nothing to remove for '${opts.name}': neither ${ymlPath} nor ${containerPath} exists.`
@@ -8478,16 +8168,16 @@ async function runRemove(opts) {
   let backupPath = null;
   if (!opts.noBackup && (hasYml || hasContainer)) {
     const ts = (opts.now ?? /* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-    backupPath = path21.join(home, "container-backups", `${opts.name}-${ts}`);
+    backupPath = path19.join(home, "container-backups", `${opts.name}-${ts}`);
     await fs15.mkdir(backupPath, { recursive: true });
     if (hasYml) {
-      await fs15.copyFile(ymlPath, path21.join(backupPath, `${opts.name}.yml`));
+      await fs15.copyFile(ymlPath, path19.join(backupPath, `${opts.name}.yml`));
     }
     if (hasEnv) {
-      await fs15.copyFile(envPath, path21.join(backupPath, `${opts.name}.env`));
+      await fs15.copyFile(envPath, path19.join(backupPath, `${opts.name}.env`));
     }
     if (hasContainer) {
-      await fs15.cp(containerPath, path21.join(backupPath, "container"), {
+      await fs15.cp(containerPath, path19.join(backupPath, "container"), {
         recursive: true
       });
     }
@@ -8576,15 +8266,15 @@ var init_remove = __esm({
 });
 
 // src/commands/remove.ts
-import { defineCommand as defineCommand18 } from "citty";
-import { consola as consola22 } from "consola";
+import { defineCommand as defineCommand17 } from "citty";
+import { consola as consola20 } from "consola";
 import { createInterface } from "readline/promises";
 var removeCommand;
 var init_remove2 = __esm({
   "src/commands/remove.ts"() {
     "use strict";
     init_remove();
-    removeCommand = defineCommand18({
+    removeCommand = defineCommand17({
       meta: {
         name: "remove",
         group: "lifecycle",
@@ -8621,7 +8311,7 @@ var init_remove2 = __esm({
           const skipPrompt = args.yes === true;
           if (!skipPrompt) {
             const warning = noBackup ? `About to remove '${args.name}' WITHOUT a backup. Docker objects, container-configs entry, and container directory will all be deleted.` : `About to remove '${args.name}'. A backup will be written to container-backups/ first, then docker objects, container-configs entry, and container directory will all be deleted.`;
-            consola22.warn(warning);
+            consola20.warn(warning);
             const rl = createInterface({
               input: process.stdin,
               output: process.stdout
@@ -8629,7 +8319,7 @@ var init_remove2 = __esm({
             const answer = await rl.question("Continue? [y/N] ");
             rl.close();
             if (!/^y(es)?$/i.test(answer.trim())) {
-              consola22.info("Aborted. Nothing changed.");
+              consola20.info("Aborted. Nothing changed.");
               process.exit(0);
             }
           }
@@ -8638,7 +8328,7 @@ var init_remove2 = __esm({
             ...noBackup ? { noBackup: true } : {}
           });
         } catch (err) {
-          consola22.error(err instanceof Error ? err.message : String(err));
+          consola20.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -8647,17 +8337,17 @@ var init_remove2 = __esm({
 });
 
 // src/restore/index.ts
-import { existsSync as existsSync14, promises as fs16 } from "fs";
-import path22 from "path";
-import { consola as consola23 } from "consola";
+import { existsSync as existsSync12, promises as fs16 } from "fs";
+import path20 from "path";
+import { consola as consola21 } from "consola";
 async function runRestore(opts) {
   const home = opts.monocerosHome ?? monocerosHome();
   const logger = opts.logger ?? {
-    info: (msg) => consola23.info(msg),
-    success: (msg) => consola23.success(msg)
+    info: (msg) => consola21.info(msg),
+    success: (msg) => consola21.success(msg)
   };
-  const backup = path22.resolve(opts.backupPath);
-  if (!existsSync14(backup)) {
+  const backup = path20.resolve(opts.backupPath);
+  if (!existsSync12(backup)) {
     throw new Error(`Backup not found: ${backup}.`);
   }
   const stat = await fs16.stat(backup);
@@ -8678,24 +8368,24 @@ async function runRestore(opts) {
   }
   const ymlFile = ymlFiles[0];
   const name = ymlFile.replace(/\.yml$/, "");
-  const containerInBackup = path22.join(backup, "container");
-  const hasContainer = existsSync14(containerInBackup);
-  const envInBackup = path22.join(backup, `${name}.env`);
-  const hasEnv = existsSync14(envInBackup);
+  const containerInBackup = path20.join(backup, "container");
+  const hasContainer = existsSync12(containerInBackup);
+  const envInBackup = path20.join(backup, `${name}.env`);
+  const hasEnv = existsSync12(envInBackup);
   const destYml = containerConfigPath(name, home);
   const destContainer = containerDir(name, home);
-  if (existsSync14(destYml)) {
+  if (existsSync12(destYml)) {
     throw new Error(
       `Refusing to restore: ${destYml} already exists. Remove the current container first (\`monoceros remove ${name}\`) or rename the existing config.`
     );
   }
-  if (hasContainer && existsSync14(destContainer)) {
+  if (hasContainer && existsSync12(destContainer)) {
     throw new Error(
       `Refusing to restore: ${destContainer} already exists. Remove the current container first (\`monoceros remove ${name}\`).`
     );
   }
   await fs16.mkdir(containerConfigsDir(home), { recursive: true });
-  await fs16.copyFile(path22.join(backup, ymlFile), destYml);
+  await fs16.copyFile(path20.join(backup, ymlFile), destYml);
   if (hasEnv) {
     await fs16.copyFile(envInBackup, containerEnvPath(name, home));
   }
@@ -8720,14 +8410,14 @@ var init_restore = __esm({
 });
 
 // src/commands/restore.ts
-import { defineCommand as defineCommand19 } from "citty";
-import { consola as consola24 } from "consola";
+import { defineCommand as defineCommand18 } from "citty";
+import { consola as consola22 } from "consola";
 var restoreCommand;
 var init_restore2 = __esm({
   "src/commands/restore.ts"() {
     "use strict";
     init_restore();
-    restoreCommand = defineCommand19({
+    restoreCommand = defineCommand18({
       meta: {
         name: "restore",
         group: "lifecycle",
@@ -8744,7 +8434,7 @@ var init_restore2 = __esm({
         try {
           await runRestore({ backupPath: args["backup-path"] });
         } catch (err) {
-          consola24.error(err instanceof Error ? err.message : String(err));
+          consola22.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -8753,14 +8443,14 @@ var init_restore2 = __esm({
 });
 
 // src/commands/remove-from-url.ts
-import { defineCommand as defineCommand20 } from "citty";
-import { consola as consola25 } from "consola";
+import { defineCommand as defineCommand19 } from "citty";
+import { consola as consola23 } from "consola";
 var removeFromUrlCommand;
 var init_remove_from_url = __esm({
   "src/commands/remove-from-url.ts"() {
     "use strict";
     init_modify();
-    removeFromUrlCommand = defineCommand20({
+    removeFromUrlCommand = defineCommand19({
       meta: {
         name: "remove-from-url",
         group: "edit",
@@ -8793,7 +8483,7 @@ var init_remove_from_url = __esm({
           });
           process.exit(result.status === "aborted" ? 1 : 0);
         } catch (err) {
-          consola25.error(err instanceof Error ? err.message : String(err));
+          consola23.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -8802,14 +8492,14 @@ var init_remove_from_url = __esm({
 });
 
 // src/commands/remove-language.ts
-import { defineCommand as defineCommand21 } from "citty";
-import { consola as consola26 } from "consola";
+import { defineCommand as defineCommand20 } from "citty";
+import { consola as consola24 } from "consola";
 var removeLanguageCommand;
 var init_remove_language = __esm({
   "src/commands/remove-language.ts"() {
     "use strict";
     init_modify();
-    removeLanguageCommand = defineCommand21({
+    removeLanguageCommand = defineCommand20({
       meta: {
         name: "remove-language",
         group: "edit",
@@ -8842,7 +8532,7 @@ var init_remove_language = __esm({
           });
           process.exit(result.status === "aborted" ? 1 : 0);
         } catch (err) {
-          consola26.error(err instanceof Error ? err.message : String(err));
+          consola24.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -8851,8 +8541,8 @@ var init_remove_language = __esm({
 });
 
 // src/commands/remove-port.ts
-import { defineCommand as defineCommand22 } from "citty";
-import { consola as consola27 } from "consola";
+import { defineCommand as defineCommand21 } from "citty";
+import { consola as consola25 } from "consola";
 function coerceToken2(raw) {
   const n = Number(raw);
   return Number.isFinite(n) ? n : raw;
@@ -8863,7 +8553,7 @@ var init_remove_port = __esm({
     "use strict";
     init_inner_args();
     init_modify();
-    removePortCommand = defineCommand22({
+    removePortCommand = defineCommand21({
       meta: {
         name: "remove-port",
         group: "edit",
@@ -8885,7 +8575,7 @@ var init_remove_port = __esm({
       async run({ args }) {
         const tokens = [...getInnerArgs()];
         if (tokens.length === 0) {
-          consola27.error(
+          consola25.error(
             "No ports given. Usage: `monoceros remove-port <containername> [--yes] -- <port> [<port> \u2026]`."
           );
           process.exit(1);
@@ -8898,7 +8588,7 @@ var init_remove_port = __esm({
           });
           process.exit(result.status === "aborted" ? 1 : 0);
         } catch (err) {
-          consola27.error(err instanceof Error ? err.message : String(err));
+          consola25.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -8907,14 +8597,14 @@ var init_remove_port = __esm({
 });
 
 // src/commands/remove-repo.ts
-import { defineCommand as defineCommand23 } from "citty";
-import { consola as consola28 } from "consola";
+import { defineCommand as defineCommand22 } from "citty";
+import { consola as consola26 } from "consola";
 var removeRepoCommand;
 var init_remove_repo = __esm({
   "src/commands/remove-repo.ts"() {
     "use strict";
     init_modify();
-    removeRepoCommand = defineCommand23({
+    removeRepoCommand = defineCommand22({
       meta: {
         name: "remove-repo",
         group: "edit",
@@ -8947,7 +8637,7 @@ var init_remove_repo = __esm({
           });
           process.exit(result.status === "aborted" ? 1 : 0);
         } catch (err) {
-          consola28.error(err instanceof Error ? err.message : String(err));
+          consola26.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -8956,14 +8646,14 @@ var init_remove_repo = __esm({
 });
 
 // src/commands/remove-service.ts
-import { defineCommand as defineCommand24 } from "citty";
-import { consola as consola29 } from "consola";
+import { defineCommand as defineCommand23 } from "citty";
+import { consola as consola27 } from "consola";
 var removeServiceCommand;
 var init_remove_service = __esm({
   "src/commands/remove-service.ts"() {
     "use strict";
     init_modify();
-    removeServiceCommand = defineCommand24({
+    removeServiceCommand = defineCommand23({
       meta: {
         name: "remove-service",
         group: "edit",
@@ -8996,7 +8686,7 @@ var init_remove_service = __esm({
           });
           process.exit(result.status === "aborted" ? 1 : 0);
         } catch (err) {
-          consola29.error(err instanceof Error ? err.message : String(err));
+          consola27.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -9004,13 +8694,118 @@ var init_remove_service = __esm({
   }
 });
 
-// src/devcontainer/run.ts
-async function runInContainer(opts) {
-  if (opts.command.length === 0) {
-    throw new Error(
-      "No command provided. Usage: `monoceros run <containername> -- <cmd> [args\u2026]`."
-    );
+// src/devcontainer/browser-bridge.ts
+import { spawn as spawn9 } from "child_process";
+import { existsSync as existsSync13, promises as fsp2, readFileSync as readFileSync6 } from "fs";
+import http from "http";
+import path21 from "path";
+function parseCallbackTarget(authUrl) {
+  try {
+    const u = new URL(authUrl);
+    const redirect = u.searchParams.get("redirect_uri");
+    if (!redirect) return null;
+    const r = new URL(redirect);
+    if (r.hostname !== "localhost" && r.hostname !== "127.0.0.1") return null;
+    const port = Number(r.port);
+    if (!Number.isInteger(port) || port <= 0) return null;
+    return { port, pathname: r.pathname };
+  } catch {
+    return null;
+  }
+}
+function openInBrowser(url) {
+  const platform = process.platform;
+  const [cmd, args] = platform === "darwin" ? ["open", [url]] : platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
+  try {
+    const child = spawn9(cmd, args, {
+      stdio: "ignore",
+      detached: true
+    });
+    child.on("error", () => {
+    });
+    child.unref();
+  } catch {
+  }
+}
+async function startBrowserBridge(opts) {
+  const relayDir = path21.join(opts.root, RELAY_DIRNAME);
+  const relayScript = path21.join(relayDir, "xdg-open");
+  const urlFile = path21.join(relayDir, "url");
+  await fsp2.mkdir(relayDir, { recursive: true });
+  await fsp2.rm(urlFile, { force: true });
+  await fsp2.writeFile(
+    relayScript,
+    `#!/bin/sh
+printf '%s\\n' "$1" > "$(dirname "$0")/url"
+exit 0
+`,
+    { mode: 493 }
+  );
+  await fsp2.chmod(relayScript, 493);
+  const servers = [];
+  let handled = false;
+  const onUrl = (url) => {
+    openInBrowser(url);
+    const target = parseCallbackTarget(url);
+    if (!target) return;
+    const server = http.createServer((req, res) => {
+      const reqUrl = req.url ?? target.pathname;
+      res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
+      res.end(
+        '<html><body style="font-family:sans-serif;padding:3rem">You are signed in. You can close this tab and return to the terminal.</body></html>'
+      );
+      void opts.spawn(
+        [
+          "exec",
+          "--workspace-folder",
+          opts.root,
+          "--mount-workspace-git-root=false",
+          "curl",
+          "-fsS",
+          `http://localhost:${target.port}${reqUrl}`
+        ],
+        opts.root,
+        { quiet: true }
+      );
+    });
+    server.on("error", () => {
+    });
+    server.listen(target.port, "127.0.0.1");
+    servers.push(server);
+  };
+  const poll = setInterval(() => {
+    if (handled || !existsSync13(urlFile)) return;
+    let content = "";
+    try {
+      content = readFileSync6(urlFile, "utf8");
+    } catch {
+      return;
+    }
+    if (!content.trim()) return;
+    handled = true;
+    onUrl(content.trim());
+  }, 250);
+  return {
+    relayDirInContainer: `/workspaces/${opts.name}/${RELAY_DIRNAME}`,
+    async dispose() {
+      clearInterval(poll);
+      for (const s of servers) s.close();
+      await fsp2.rm(relayDir, { recursive: true, force: true });
+    }
+  };
+}
+var RELAY_DIRNAME;
+var init_browser_bridge = __esm({
+  "src/devcontainer/browser-bridge.ts"() {
+    "use strict";
+    RELAY_DIRNAME = ".monoceros-bridge";
   }
+});
+
+// src/devcontainer/shell.ts
+import { existsSync as existsSync14 } from "fs";
+import path22 from "path";
+async function runShell(opts) {
   assertContainerExists(opts.root);
   const spawnFn = opts.spawn ?? spawnDevcontainer;
   const upCode = await spawnFn(
@@ -9019,37 +8814,102 @@ async function runInContainer(opts) {
     { quiet: true }
   );
   if (upCode !== 0) return upCode;
-  const innerExec = opts.cwd ? [
-    "bash",
-    "-lc",
-    'cd -- "$1" && shift && exec "$@"',
-    "bash",
-    opts.cwd,
-    ...opts.command
-  ] : opts.command;
   return spawnFn(
     [
       "exec",
       "--workspace-folder",
       opts.root,
       "--mount-workspace-git-root=false",
-      ...innerExec
+      "bash"
     ],
     opts.root,
     { interactive: true }
   );
 }
+function assertContainerExists(root) {
+  if (!existsSync14(path22.join(root, ".devcontainer"))) {
+    throw new Error(
+      `No .devcontainer/ at ${root}. Run \`monoceros apply <name>\` first.`
+    );
+  }
+}
+var init_shell = __esm({
+  "src/devcontainer/shell.ts"() {
+    "use strict";
+    init_cli();
+  }
+});
+
+// src/devcontainer/run.ts
+function wrapExec(command, opts) {
+  const leading = [];
+  const stmts = [];
+  if (opts.pathPrepend) {
+    leading.push(opts.pathPrepend);
+    const i = leading.length;
+    stmts.push(`export PATH="$${i}:$PATH"`);
+    stmts.push(`export BROWSER="$${i}/xdg-open"`);
+  }
+  if (opts.cwd) {
+    leading.push(opts.cwd);
+    stmts.push(`cd -- "$${leading.length}"`);
+  }
+  if (leading.length === 0) return command;
+  const shift = leading.length === 1 ? "shift" : `shift ${leading.length}`;
+  const script = `${stmts.join(" && ")} && ${shift} && exec "$@"`;
+  return ["bash", "-lc", script, "bash", ...leading, ...command];
+}
+async function runInContainer(opts) {
+  if (opts.command.length === 0) {
+    throw new Error(
+      "No command provided. Usage: `monoceros run <containername> -- <cmd> [args\u2026]`."
+    );
+  }
+  assertContainerExists(opts.root);
+  const spawnFn = opts.spawn ?? spawnDevcontainer;
+  const upCode = await spawnFn(
+    ["up", "--workspace-folder", opts.root, "--mount-workspace-git-root=false"],
+    opts.root,
+    { quiet: true }
+  );
+  if (upCode !== 0) return upCode;
+  const bridge = opts.name && process.stdout.isTTY ? await startBrowserBridge({
+    name: opts.name,
+    root: opts.root,
+    spawn: spawnFn
+  }) : null;
+  try {
+    const innerExec = wrapExec(opts.command, {
+      ...bridge ? { pathPrepend: bridge.relayDirInContainer } : {},
+      ...opts.cwd ? { cwd: opts.cwd } : {}
+    });
+    return await spawnFn(
+      [
+        "exec",
+        "--workspace-folder",
+        opts.root,
+        "--mount-workspace-git-root=false",
+        ...innerExec
+      ],
+      opts.root,
+      { interactive: true }
+    );
+  } finally {
+    if (bridge) await bridge.dispose();
+  }
+}
 var init_run = __esm({
   "src/devcontainer/run.ts"() {
     "use strict";
+    init_browser_bridge();
     init_cli();
     init_shell();
   }
 });
 
 // src/commands/run.ts
-import { defineCommand as defineCommand25 } from "citty";
-import { consola as consola30 } from "consola";
+import { defineCommand as defineCommand24 } from "citty";
+import { consola as consola28 } from "consola";
 var runCommand;
 var init_run2 = __esm({
   "src/commands/run.ts"() {
@@ -9057,7 +8917,7 @@ var init_run2 = __esm({
     init_paths();
     init_run();
     init_inner_args();
-    runCommand = defineCommand25({
+    runCommand = defineCommand24({
       meta: {
         name: "run",
         group: "run",
@@ -9077,7 +8937,7 @@ var init_run2 = __esm({
       async run({ args }) {
         const command = [...getInnerArgs()];
         if (command.length === 0) {
-          consola30.error(
+          consola28.error(
             "No command provided. Usage: `monoceros run <containername> -- <cmd> [args\u2026]`."
           );
           process.exit(1);
@@ -9085,12 +8945,13 @@ var init_run2 = __esm({
         try {
           const exitCode = await runInContainer({
             root: containerDir(args.name),
+            name: args.name,
             command,
             ...args.in ? { cwd: args.in } : {}
           });
           process.exit(exitCode);
         } catch (err) {
-          consola30.error(err instanceof Error ? err.message : String(err));
+          consola28.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -9099,15 +8960,15 @@ var init_run2 = __esm({
 });
 
 // src/commands/shell.ts
-import { defineCommand as defineCommand26 } from "citty";
-import { consola as consola31 } from "consola";
+import { defineCommand as defineCommand25 } from "citty";
+import { consola as consola29 } from "consola";
 var shellCommand;
 var init_shell2 = __esm({
   "src/commands/shell.ts"() {
     "use strict";
     init_paths();
     init_shell();
-    shellCommand = defineCommand26({
+    shellCommand = defineCommand25({
       meta: {
         name: "shell",
         group: "run",
@@ -9125,7 +8986,7 @@ var init_shell2 = __esm({
           const exitCode = await runShell({ root: containerDir(args.name) });
           process.exit(exitCode);
         } catch (err) {
-          consola31.error(err instanceof Error ? err.message : String(err));
+          consola29.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -9134,8 +8995,8 @@ var init_shell2 = __esm({
 });
 
 // src/commands/start.ts
-import { defineCommand as defineCommand27 } from "citty";
-import { consola as consola32 } from "consola";
+import { defineCommand as defineCommand26 } from "citty";
+import { consola as consola30 } from "consola";
 var startCommand;
 var init_start = __esm({
   "src/commands/start.ts"() {
@@ -9147,7 +9008,7 @@ var init_start = __esm({
     init_proxy();
     init_port_check();
     init_dispatch();
-    startCommand = defineCommand27({
+    startCommand = defineCommand26({
       meta: {
         name: "start",
         group: "run",
@@ -9172,7 +9033,7 @@ var init_start = __esm({
               hostPort = proxyHostPort(global);
             }
           } catch (err) {
-            consola32.warn(
+            consola30.warn(
               `Could not read container yml ahead of start: ${err instanceof Error ? err.message : String(err)}. Skipping Traefik pre-flight.`
             );
           }
@@ -9188,7 +9049,7 @@ var init_start = __esm({
 });
 
 // src/commands/status.ts
-import { defineCommand as defineCommand28 } from "citty";
+import { defineCommand as defineCommand27 } from "citty";
 var statusCommand;
 var init_status = __esm({
   "src/commands/status.ts"() {
@@ -9196,7 +9057,7 @@ var init_status = __esm({
     init_paths();
     init_compose();
     init_dispatch();
-    statusCommand = defineCommand28({
+    statusCommand = defineCommand27({
       meta: {
         name: "status",
         group: "run",
@@ -9226,8 +9087,8 @@ var init_status = __esm({
 });
 
 // src/commands/stop.ts
-import { defineCommand as defineCommand29 } from "citty";
-import { consola as consola33 } from "consola";
+import { defineCommand as defineCommand28 } from "citty";
+import { consola as consola31 } from "consola";
 var stopCommand;
 var init_stop = __esm({
   "src/commands/stop.ts"() {
@@ -9236,7 +9097,7 @@ var init_stop = __esm({
     init_compose();
     init_proxy();
     init_dispatch();
-    stopCommand = defineCommand29({
+    stopCommand = defineCommand28({
       meta: {
         name: "stop",
         group: "run",
@@ -9261,10 +9122,10 @@ var init_stop = __esm({
           });
           try {
             await maybeStopProxy({
-              logger: { info: (msg) => consola33.info(msg) }
+              logger: { info: (msg) => consola31.info(msg) }
             });
           } catch (err) {
-            consola33.warn(
+            consola31.warn(
               `Could not tear down the Traefik proxy: ${err instanceof Error ? err.message : String(err)}. Ignored.`
             );
           }
@@ -9530,7 +9391,7 @@ var init_port_check2 = __esm({
 
 // src/tunnel/run.ts
 import { spawn as spawn10 } from "child_process";
-import { consola as consola34 } from "consola";
+import { consola as consola32 } from "consola";
 function signalNumber(signal) {
   switch (signal) {
     case "SIGINT":
@@ -9543,8 +9404,8 @@ function signalNumber(signal) {
 }
 async function runTunnel(opts) {
   const log = opts.logger ?? {
-    info: (m) => consola34.info(m),
-    warn: (m) => consola34.warn(m)
+    info: (m) => consola32.info(m),
+    warn: (m) => consola32.warn(m)
   };
   const resolve = opts.resolve ?? resolveTunnelTarget;
   const resolveArgs3 = {
@@ -9650,8 +9511,8 @@ var init_run3 = __esm({
 });
 
 // src/commands/tunnel.ts
-import { defineCommand as defineCommand30 } from "citty";
-import { consola as consola35 } from "consola";
+import { defineCommand as defineCommand29 } from "citty";
+import { consola as consola33 } from "consola";
 function parseLocalPort(raw) {
   if (raw === void 0) return void 0;
   const n = Number(raw);
@@ -9667,7 +9528,7 @@ var init_tunnel = __esm({
   "src/commands/tunnel.ts"() {
     "use strict";
     init_run3();
-    tunnelCommand = defineCommand30({
+    tunnelCommand = defineCommand29({
       meta: {
         name: "tunnel",
         group: "discovery",
@@ -9704,7 +9565,7 @@ var init_tunnel = __esm({
           });
           process.exit(exitCode);
         } catch (err) {
-          consola35.error(err instanceof Error ? err.message : String(err));
+          consola33.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -9714,7 +9575,7 @@ var init_tunnel = __esm({
 
 // src/upgrade/index.ts
 import { existsSync as existsSync16, promises as fs17 } from "fs";
-import { consola as consola36 } from "consola";
+import { consola as consola34 } from "consola";
 async function fetchRuntimeVersions() {
   const tokenUrl = `https://ghcr.io/token?service=ghcr.io&scope=repository:${RUNTIME_REPO}:pull`;
   const tokenRes = await fetch(tokenUrl);
@@ -9752,7 +9613,7 @@ ${yml}`;
 }
 async function runUpgrade(opts) {
   const home = opts.monocerosHome ?? monocerosHome();
-  const logger = opts.logger ?? consola36;
+  const logger = opts.logger ?? consola34;
   const fetchVersions = opts.fetchVersions ?? fetchRuntimeVersions;
   if (opts.list) {
     const versions = await fetchVersions();
@@ -9820,7 +9681,7 @@ var init_upgrade = __esm({
 });
 
 // src/commands/upgrade.ts
-import { defineCommand as defineCommand31 } from "citty";
+import { defineCommand as defineCommand30 } from "citty";
 var upgradeCommand;
 var init_upgrade2 = __esm({
   "src/commands/upgrade.ts"() {
@@ -9828,7 +9689,7 @@ var init_upgrade2 = __esm({
     init_upgrade();
     init_version();
     init_dispatch();
-    upgradeCommand = defineCommand31({
+    upgradeCommand = defineCommand30({
       meta: {
         name: "upgrade",
         group: "lifecycle",
@@ -9870,7 +9731,7 @@ var main_exports = {};
 __export(main_exports, {
   main: () => main
 });
-import { defineCommand as defineCommand32 } from "citty";
+import { defineCommand as defineCommand31 } from "citty";
 var main;
 var init_main = __esm({
   "src/main.ts"() {
@@ -9887,7 +9748,6 @@ var init_main = __esm({
     init_complete();
     init_init2();
     init_list_components();
-    init_login2();
     init_logs();
     init_port();
     init_remove_apt_packages();
@@ -9907,7 +9767,7 @@ var init_main = __esm({
     init_tunnel();
     init_upgrade2();
     init_version();
-    main = defineCommand32({
+    main = defineCommand31({
       meta: {
         name: "monoceros",
         version: CLI_VERSION,
@@ -9918,7 +9778,6 @@ var init_main = __esm({
         "list-components": listComponentsCommand,
         shell: shellCommand,
         run: runCommand,
-        login: loginCommand,
         logs: logsCommand,
         start: startCommand,
         stop: stopCommand,