@getmonoceros/workbench 1.19.2 → 1.20.0

package/dist/bin.js

@@ -3259,8 +3259,8 @@ function removeRepoFromDoc(doc, urlOrPath) {
     if (!isMap2(item)) return false;
     const url = item.get("url");
     if (url === urlOrPath) return true;
-    const path25 = item.get("path");
-    const effectivePath = typeof path25 === "string" ? path25 : typeof url === "string" ? deriveRepoName(url) : void 0;
+    const path24 = item.get("path");
+    const effectivePath = typeof path24 === "string" ? path24 : typeof url === "string" ? deriveRepoName(url) : void 0;
     return effectivePath === urlOrPath;
   });
   if (idx < 0) return false;
@@ -3372,7 +3372,7 @@ async function runAddRepo(input) {
       "Missing repo URL. Usage: monoceros add-repo <containername> <url>."
     );
   }
-  const path25 = (input.path ?? deriveRepoName(url)).trim();
+  const path24 = (input.path ?? deriveRepoName(url)).trim();
   const hasName = typeof input.gitName === "string" && input.gitName.trim().length > 0;
   const hasEmail = typeof input.gitEmail === "string" && input.gitEmail.trim().length > 0;
   if (hasName !== hasEmail) {
@@ -3409,7 +3409,7 @@ async function runAddRepo(input) {
   const providerToWrite = !canonical && explicitProvider ? explicitProvider : void 0;
   const entry2 = {
     url,
-    path: path25,
+    path: path24,
     ...hasName && hasEmail ? {
       gitUser: {
         name: input.gitName.trim(),
@@ -6407,7 +6407,7 @@ var CLI_VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    CLI_VERSION = true ? "1.19.2" : "dev";
+    CLI_VERSION = true ? "1.20.0" : "dev";
   }
 });
 
@@ -6596,43 +6596,6 @@ var init_completion = __esm({
   }
 });
 
-// src/login/services.ts
-function featureLeaf(ref) {
-  const noTag = ref.replace(/:[^/:]*$/, "");
-  return noTag.slice(noTag.lastIndexOf("/") + 1);
-}
-function loginCapableServices(refs) {
-  const out = [];
-  for (const ref of refs) {
-    const service = LOGIN_SERVICE_BY_LEAF[featureLeaf(ref)];
-    if (service && !out.includes(service)) out.push(service);
-  }
-  return out;
-}
-function parseCallbackTarget(authUrl) {
-  try {
-    const u = new URL(authUrl);
-    const redirect = u.searchParams.get("redirect_uri");
-    if (!redirect) return null;
-    const r = new URL(redirect);
-    if (r.hostname !== "localhost" && r.hostname !== "127.0.0.1") return null;
-    const port = Number(r.port);
-    if (!Number.isInteger(port) || port <= 0) return null;
-    return { port, pathname: r.pathname };
-  } catch {
-    return null;
-  }
-}
-var LOGIN_SERVICE_BY_LEAF;
-var init_services = __esm({
-  "src/login/services.ts"() {
-    "use strict";
-    LOGIN_SERVICE_BY_LEAF = {
-      "claude-code": "claude"
-    };
-  }
-});
-
 // src/completion/resolve.ts
 import { existsSync as existsSync8, promises as fs13 } from "fs";
 import path16 from "path";
@@ -6789,20 +6752,6 @@ async function listContainerNames(ctx) {
   const entries = await fs13.readdir(dir);
   return entries.filter((e) => e.endsWith(".yml")).map((e) => e.slice(0, -".yml".length)).sort();
 }
-async function listLoginServices(ctx) {
-  const after = ctx.prev.slice(2);
-  const name = after.find((t) => !t.startsWith("-"));
-  if (!name) return [];
-  const home = ctx.opts.monocerosHome ?? monocerosHome();
-  const cfgPath = path16.join(home, "container-configs", `${name}.yml`);
-  if (!existsSync8(cfgPath)) return [];
-  try {
-    const { config } = await readConfig(cfgPath);
-    return loginCapableServices(config.features.map((f) => f.ref));
-  } catch {
-    return [];
-  }
-}
 async function listFeatureComponents() {
   const catalog = await loadComponentCatalog();
   return [...catalog.values()].filter((c) => c.file.category === "feature").map((c) => c.name).sort();
@@ -6870,18 +6819,15 @@ var init_resolve = __esm({
   "src/completion/resolve.ts"() {
     "use strict";
     init_paths();
-    init_io();
     init_components();
     init_manifest();
     init_catalog();
-    init_services();
     init_schema();
     ALL_COMMANDS = [
       "init",
       "list-components",
       "shell",
       "run",
-      "login",
       "logs",
       "start",
       "stop",
@@ -6950,7 +6896,6 @@ var init_resolve = __esm({
         positionals: [containerName],
         flags: { "--in": { type: "value" } }
       },
-      login: { positionals: [containerName, (ctx) => listLoginServices(ctx)] },
       logs: { positionals: [containerName] },
       start: { positionals: [containerName] },
       stop: { positionals: [containerName] },
@@ -7923,270 +7868,15 @@ var init_list_components = __esm({
   }
 });
 
-// src/devcontainer/shell.ts
+// src/commands/logs.ts
+import { spawn as spawn8 } from "child_process";
 import { existsSync as existsSync10 } from "fs";
 import path18 from "path";
-async function runShell(opts) {
-  assertContainerExists(opts.root);
-  const spawnFn = opts.spawn ?? spawnDevcontainer;
-  const upCode = await spawnFn(
-    ["up", "--workspace-folder", opts.root, "--mount-workspace-git-root=false"],
-    opts.root,
-    { quiet: true }
-  );
-  if (upCode !== 0) return upCode;
-  return spawnFn(
-    [
-      "exec",
-      "--workspace-folder",
-      opts.root,
-      "--mount-workspace-git-root=false",
-      "bash"
-    ],
-    opts.root,
-    { interactive: true }
-  );
-}
-function assertContainerExists(root) {
-  if (!existsSync10(path18.join(root, ".devcontainer"))) {
-    throw new Error(
-      `No .devcontainer/ at ${root}. Run \`monoceros apply <name>\` first.`
-    );
-  }
-}
-var init_shell = __esm({
-  "src/devcontainer/shell.ts"() {
-    "use strict";
-    init_cli();
-  }
-});
-
-// src/login/index.ts
-import { spawn as spawn8 } from "child_process";
-import { existsSync as existsSync11, promises as fsp2, readFileSync as readFileSync6 } from "fs";
-import http from "http";
-import path19 from "path";
-import { consola as consola16 } from "consola";
-function openInBrowser(url) {
-  const platform = process.platform;
-  const [cmd, args] = platform === "darwin" ? ["open", [url]] : platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
-  try {
-    const child = spawn8(cmd, args, {
-      stdio: "ignore",
-      detached: true
-    });
-    child.on("error", () => {
-    });
-    child.unref();
-  } catch {
-  }
-}
-async function runLogin(opts) {
-  const root = containerDir(opts.name);
-  assertContainerExists(root);
-  const { config } = await readConfig(containerConfigPath(opts.name));
-  const capable = loginCapableServices(config.features.map((f) => f.ref));
-  if (capable.length === 0) {
-    consola16.error(
-      `Container "${opts.name}" has no tool with a Monoceros login. (Supported today: claude.)`
-    );
-    return 1;
-  }
-  if (!opts.feature) {
-    consola16.info(
-      `Login-capable tools in "${opts.name}": ${capable.join(", ")}.`
-    );
-    consola16.info(`Log one in with: monoceros login ${opts.name} <tool>`);
-    return 0;
-  }
-  const service = opts.feature;
-  if (!capable.includes(service)) {
-    consola16.error(
-      `"${service}" is not a login-capable tool in "${opts.name}". Available: ${capable.join(", ")}.`
-    );
-    return 1;
-  }
-  if (service !== "claude") {
-    consola16.error(
-      `Login for "${service}" is not implemented yet (only claude).`
-    );
-    return 1;
-  }
-  return runClaudeLogin(opts.name, root, opts.spawn ?? spawnDevcontainer);
-}
-async function runClaudeLogin(name, root, spawnFn) {
-  const credFile = path19.join(root, "home", ".claude", ".credentials.json");
-  if (existsSync11(credFile)) {
-    consola16.success(
-      `Claude is already logged in for "${name}". Re-apply or remove the credential to log in again.`
-    );
-    return 0;
-  }
-  const upCode = await spawnFn(
-    ["up", "--workspace-folder", root, "--mount-workspace-git-root=false"],
-    root,
-    { quiet: true }
-  );
-  if (upCode !== 0) return upCode;
-  const relayDir = path19.join(root, RELAY_DIRNAME);
-  const relayScript = path19.join(relayDir, "xdg-open");
-  const urlFile = path19.join(relayDir, "url");
-  await fsp2.mkdir(relayDir, { recursive: true });
-  await fsp2.rm(urlFile, { force: true });
-  await fsp2.writeFile(
-    relayScript,
-    `#!/bin/sh
-printf '%s\\n' "$1" > "$(dirname "$0")/url"
-exit 0
-`,
-    { mode: 493 }
-  );
-  await fsp2.chmod(relayScript, 493);
-  const servers = [];
-  let handledUrl = false;
-  const onAuthUrl = (authUrl) => {
-    openInBrowser(authUrl);
-    const target = parseCallbackTarget(authUrl);
-    if (!target) {
-      return;
-    }
-    const server = http.createServer((req, res) => {
-      const reqUrl = req.url ?? target.pathname;
-      res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
-      res.end(
-        '<html><body style="font-family:sans-serif;padding:3rem">You are signed in. You can close this tab and return to the terminal.</body></html>'
-      );
-      void spawnFn(
-        [
-          "exec",
-          "--workspace-folder",
-          root,
-          "--mount-workspace-git-root=false",
-          "curl",
-          "-fsS",
-          `http://localhost:${target.port}${reqUrl}`
-        ],
-        root,
-        { quiet: true }
-      );
-    });
-    server.on("error", (err) => {
-      consola16.warn(
-        `Could not start the local callback helper on port ${target.port} (${err.message}). If the browser shows a code, paste it into the terminal instead.`
-      );
-    });
-    server.listen(target.port, "127.0.0.1");
-    servers.push(server);
-  };
-  const poll = setInterval(() => {
-    if (handledUrl || !existsSync11(urlFile)) return;
-    let content = "";
-    try {
-      content = readFileSync6(urlFile, "utf8");
-    } catch {
-      return;
-    }
-    if (!content.trim()) return;
-    handledUrl = true;
-    onAuthUrl(content.trim());
-  }, 250);
-  consola16.info("Logging in to Claude \u2014 a browser window will open for you.");
-  const child = spawn8(
-    process.execPath,
-    [
-      devcontainerCliPath(),
-      "exec",
-      "--workspace-folder",
-      root,
-      "--mount-workspace-git-root=false",
-      "bash",
-      "-lc",
-      `export PATH="/workspaces/${name}/${RELAY_DIRNAME}:$PATH"; exec claude auth login`
-    ],
-    {
-      cwd: root,
-      env: { ...process.env, DOCKER_CLI_HINTS: "false" },
-      stdio: "inherit"
-    }
-  );
-  const code = await new Promise((resolve) => {
-    child.on("error", () => resolve(1));
-    child.on("exit", (c) => resolve(c ?? 0));
-  });
-  clearInterval(poll);
-  for (const s of servers) s.close();
-  await fsp2.rm(relayDir, { recursive: true, force: true });
-  if (existsSync11(credFile)) {
-    consola16.success(
-      `Claude is logged in for "${name}". The credential persists across rebuilds.`
-    );
-  }
-  return code;
-}
-var RELAY_DIRNAME;
-var init_login = __esm({
-  "src/login/index.ts"() {
-    "use strict";
-    init_io();
-    init_paths();
-    init_cli();
-    init_shell();
-    init_services();
-    RELAY_DIRNAME = ".monoceros-login";
-  }
-});
-
-// src/commands/login.ts
 import { defineCommand as defineCommand13 } from "citty";
-import { consola as consola17 } from "consola";
-var loginCommand;
-var init_login2 = __esm({
-  "src/commands/login.ts"() {
-    "use strict";
-    init_login();
-    loginCommand = defineCommand13({
-      meta: {
-        name: "login",
-        group: "lifecycle",
-        description: "Log a curated tool in inside the container. Opens the sign-in page in your browser for you \u2014 no copying URLs. Today: Claude."
-      },
-      args: {
-        name: {
-          type: "positional",
-          description: "Container name.",
-          required: true
-        },
-        feature: {
-          type: "positional",
-          description: "Which tool to log in (e.g. `claude`). Optional when the container has only one login-capable tool.",
-          required: false
-        }
-      },
-      async run({ args }) {
-        try {
-          const code = await runLogin({
-            name: args.name,
-            ...args.feature ? { feature: args.feature } : {}
-          });
-          process.exit(code);
-        } catch (err) {
-          consola17.error(err instanceof Error ? err.message : String(err));
-          process.exit(1);
-        }
-      }
-    });
-  }
-});
-
-// src/commands/logs.ts
-import { spawn as spawn9 } from "child_process";
-import { existsSync as existsSync12 } from "fs";
-import path20 from "path";
-import { defineCommand as defineCommand14 } from "citty";
 function tailLogFile(file, follow) {
   const [cmd, args] = follow ? ["tail", ["-F", file]] : ["cat", [file]];
   return new Promise((resolve, reject) => {
-    const child = spawn9(cmd, args, { stdio: "inherit" });
+    const child = spawn8(cmd, args, { stdio: "inherit" });
     child.on("error", reject);
     child.on("exit", (code) => resolve(code ?? 0));
   });
@@ -8198,7 +7888,7 @@ var init_logs = __esm({
     init_paths();
     init_compose();
     init_dispatch();
-    logsCommand = defineCommand14({
+    logsCommand = defineCommand13({
       meta: {
         name: "logs",
         group: "run",
@@ -8224,8 +7914,8 @@ var init_logs = __esm({
       run({ args }) {
         const service = typeof args.service === "string" ? args.service : void 0;
         if (service) {
-          const logFile = path20.join(containerLogsDir(args.name), `${service}.log`);
-          if (existsSync12(logFile)) {
+          const logFile = path18.join(containerLogsDir(args.name), `${service}.log`);
+          if (existsSync10(logFile)) {
             return dispatch(() => tailLogFile(logFile, args.follow));
           }
         }
@@ -8242,11 +7932,11 @@ var init_logs = __esm({
 });
 
 // src/commands/port.ts
-import { defineCommand as defineCommand15 } from "citty";
-import { consola as consola18 } from "consola";
+import { defineCommand as defineCommand14 } from "citty";
+import { consola as consola16 } from "consola";
 async function runPortListing(opts) {
   const out = opts.out ?? process.stdout;
-  const info = opts.info ?? ((m) => consola18.info(m));
+  const info = opts.info ?? ((m) => consola16.info(m));
   const parsed = await readConfig(
     containerConfigPath(opts.name, opts.monocerosHome)
   );
@@ -8304,7 +7994,7 @@ var init_port = __esm({
     init_schema();
     init_dynamic();
     init_format();
-    portCommand = defineCommand15({
+    portCommand = defineCommand14({
       meta: {
         name: "port",
         group: "discovery",
@@ -8322,7 +8012,7 @@ var init_port = __esm({
           const code = await runPortListing({ name: args.name });
           process.exit(code);
         } catch (err) {
-          consola18.error(err instanceof Error ? err.message : String(err));
+          consola16.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -8331,15 +8021,15 @@ var init_port = __esm({
 });
 
 // src/commands/remove-apt-packages.ts
-import { defineCommand as defineCommand16 } from "citty";
-import { consola as consola19 } from "consola";
+import { defineCommand as defineCommand15 } from "citty";
+import { consola as consola17 } from "consola";
 var removeAptPackagesCommand;
 var init_remove_apt_packages = __esm({
   "src/commands/remove-apt-packages.ts"() {
     "use strict";
     init_inner_args();
     init_modify();
-    removeAptPackagesCommand = defineCommand16({
+    removeAptPackagesCommand = defineCommand15({
       meta: {
         name: "remove-apt-packages",
         group: "edit",
@@ -8361,7 +8051,7 @@ var init_remove_apt_packages = __esm({
       async run({ args }) {
         const packages = [...getInnerArgs()];
         if (packages.length === 0) {
-          consola19.error(
+          consola17.error(
             "No package names given. Usage: `monoceros remove-apt-packages <containername> [--yes] -- <pkg> [<pkg> \u2026]`."
           );
           process.exit(1);
@@ -8374,7 +8064,7 @@ var init_remove_apt_packages = __esm({
           });
           process.exit(result.status === "aborted" ? 1 : 0);
         } catch (err) {
-          consola19.error(err instanceof Error ? err.message : String(err));
+          consola17.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -8383,14 +8073,14 @@ var init_remove_apt_packages = __esm({
 });
 
 // src/commands/remove-feature.ts
-import { defineCommand as defineCommand17 } from "citty";
-import { consola as consola20 } from "consola";
+import { defineCommand as defineCommand16 } from "citty";
+import { consola as consola18 } from "consola";
 var removeFeatureCommand;
 var init_remove_feature = __esm({
   "src/commands/remove-feature.ts"() {
     "use strict";
     init_modify();
-    removeFeatureCommand = defineCommand17({
+    removeFeatureCommand = defineCommand16({
       meta: {
         name: "remove-feature",
         group: "edit",
@@ -8423,7 +8113,7 @@ var init_remove_feature = __esm({
           });
           process.exit(result.status === "aborted" ? 1 : 0);
         } catch (err) {
-          consola20.error(err instanceof Error ? err.message : String(err));
+          consola18.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -8432,15 +8122,15 @@ var init_remove_feature = __esm({
 });
 
 // src/remove/index.ts
-import { existsSync as existsSync13, promises as fs15 } from "fs";
-import path21 from "path";
-import { consola as consola21 } from "consola";
+import { existsSync as existsSync11, promises as fs15 } from "fs";
+import path19 from "path";
+import { consola as consola19 } from "consola";
 async function runRemove(opts) {
   const home = opts.monocerosHome ?? monocerosHome();
   const logger = opts.logger ?? {
-    info: (msg) => consola21.info(msg),
-    success: (msg) => consola21.success(msg),
-    warn: (msg) => consola21.warn(msg)
+    info: (msg) => consola19.info(msg),
+    success: (msg) => consola19.success(msg),
+    warn: (msg) => consola19.warn(msg)
   };
   if (!REGEX.solutionName.test(opts.name)) {
     throw new Error(
@@ -8450,9 +8140,9 @@ async function runRemove(opts) {
   const ymlPath = containerConfigPath(opts.name, home);
   const envPath = containerEnvPath(opts.name, home);
   const containerPath = containerDir(opts.name, home);
-  const hasYml = existsSync13(ymlPath);
-  const hasEnv = existsSync13(envPath);
-  const hasContainer = existsSync13(containerPath);
+  const hasYml = existsSync11(ymlPath);
+  const hasEnv = existsSync11(envPath);
+  const hasContainer = existsSync11(containerPath);
   if (!hasYml && !hasContainer) {
     throw new Error(
       `Nothing to remove for '${opts.name}': neither ${ymlPath} nor ${containerPath} exists.`
@@ -8478,16 +8168,16 @@ async function runRemove(opts) {
   let backupPath = null;
   if (!opts.noBackup && (hasYml || hasContainer)) {
     const ts = (opts.now ?? /* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-    backupPath = path21.join(home, "container-backups", `${opts.name}-${ts}`);
+    backupPath = path19.join(home, "container-backups", `${opts.name}-${ts}`);
     await fs15.mkdir(backupPath, { recursive: true });
     if (hasYml) {
-      await fs15.copyFile(ymlPath, path21.join(backupPath, `${opts.name}.yml`));
+      await fs15.copyFile(ymlPath, path19.join(backupPath, `${opts.name}.yml`));
     }
     if (hasEnv) {
-      await fs15.copyFile(envPath, path21.join(backupPath, `${opts.name}.env`));
+      await fs15.copyFile(envPath, path19.join(backupPath, `${opts.name}.env`));
     }
     if (hasContainer) {
-      await fs15.cp(containerPath, path21.join(backupPath, "container"), {
+      await fs15.cp(containerPath, path19.join(backupPath, "container"), {
         recursive: true
       });
     }
@@ -8576,15 +8266,15 @@ var init_remove = __esm({
 });
 
 // src/commands/remove.ts
-import { defineCommand as defineCommand18 } from "citty";
-import { consola as consola22 } from "consola";
+import { defineCommand as defineCommand17 } from "citty";
+import { consola as consola20 } from "consola";
 import { createInterface } from "readline/promises";
 var removeCommand;
 var init_remove2 = __esm({
   "src/commands/remove.ts"() {
     "use strict";
     init_remove();
-    removeCommand = defineCommand18({
+    removeCommand = defineCommand17({
       meta: {
         name: "remove",
         group: "lifecycle",
@@ -8621,7 +8311,7 @@ var init_remove2 = __esm({
           const skipPrompt = args.yes === true;
           if (!skipPrompt) {
             const warning = noBackup ? `About to remove '${args.name}' WITHOUT a backup. Docker objects, container-configs entry, and container directory will all be deleted.` : `About to remove '${args.name}'. A backup will be written to container-backups/ first, then docker objects, container-configs entry, and container directory will all be deleted.`;
-            consola22.warn(warning);
+            consola20.warn(warning);
             const rl = createInterface({
               input: process.stdin,
               output: process.stdout
@@ -8629,7 +8319,7 @@ var init_remove2 = __esm({
             const answer = await rl.question("Continue? [y/N] ");
             rl.close();
             if (!/^y(es)?$/i.test(answer.trim())) {
-              consola22.info("Aborted. Nothing changed.");
+              consola20.info("Aborted. Nothing changed.");
               process.exit(0);
             }
           }
@@ -8638,7 +8328,7 @@ var init_remove2 = __esm({
             ...noBackup ? { noBackup: true } : {}
           });
         } catch (err) {
-          consola22.error(err instanceof Error ? err.message : String(err));
+          consola20.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -8647,17 +8337,17 @@ var init_remove2 = __esm({
 });
 
 // src/restore/index.ts
-import { existsSync as existsSync14, promises as fs16 } from "fs";
-import path22 from "path";
-import { consola as consola23 } from "consola";
+import { existsSync as existsSync12, promises as fs16 } from "fs";
+import path20 from "path";
+import { consola as consola21 } from "consola";
 async function runRestore(opts) {
   const home = opts.monocerosHome ?? monocerosHome();
   const logger = opts.logger ?? {
-    info: (msg) => consola23.info(msg),
-    success: (msg) => consola23.success(msg)
+    info: (msg) => consola21.info(msg),
+    success: (msg) => consola21.success(msg)
   };
-  const backup = path22.resolve(opts.backupPath);
-  if (!existsSync14(backup)) {
+  const backup = path20.resolve(opts.backupPath);
+  if (!existsSync12(backup)) {
     throw new Error(`Backup not found: ${backup}.`);
   }
   const stat = await fs16.stat(backup);
@@ -8678,24 +8368,24 @@ async function runRestore(opts) {
   }
   const ymlFile = ymlFiles[0];
   const name = ymlFile.replace(/\.yml$/, "");
-  const containerInBackup = path22.join(backup, "container");
-  const hasContainer = existsSync14(containerInBackup);
-  const envInBackup = path22.join(backup, `${name}.env`);
-  const hasEnv = existsSync14(envInBackup);
+  const containerInBackup = path20.join(backup, "container");
+  const hasContainer = existsSync12(containerInBackup);
+  const envInBackup = path20.join(backup, `${name}.env`);
+  const hasEnv = existsSync12(envInBackup);
   const destYml = containerConfigPath(name, home);
   const destContainer = containerDir(name, home);
-  if (existsSync14(destYml)) {
+  if (existsSync12(destYml)) {
     throw new Error(
       `Refusing to restore: ${destYml} already exists. Remove the current container first (\`monoceros remove ${name}\`) or rename the existing config.`
     );
   }
-  if (hasContainer && existsSync14(destContainer)) {
+  if (hasContainer && existsSync12(destContainer)) {
     throw new Error(
       `Refusing to restore: ${destContainer} already exists. Remove the current container first (\`monoceros remove ${name}\`).`
     );
   }
   await fs16.mkdir(containerConfigsDir(home), { recursive: true });
-  await fs16.copyFile(path22.join(backup, ymlFile), destYml);
+  await fs16.copyFile(path20.join(backup, ymlFile), destYml);
   if (hasEnv) {
     await fs16.copyFile(envInBackup, containerEnvPath(name, home));
   }
@@ -8720,14 +8410,14 @@ var init_restore = __esm({
 });
 
 // src/commands/restore.ts
-import { defineCommand as defineCommand19 } from "citty";
-import { consola as consola24 } from "consola";
+import { defineCommand as defineCommand18 } from "citty";
+import { consola as consola22 } from "consola";
 var restoreCommand;
 var init_restore2 = __esm({
   "src/commands/restore.ts"() {
     "use strict";
     init_restore();
-    restoreCommand = defineCommand19({
+    restoreCommand = defineCommand18({
       meta: {
         name: "restore",
         group: "lifecycle",
@@ -8744,7 +8434,7 @@ var init_restore2 = __esm({
         try {
           await runRestore({ backupPath: args["backup-path"] });
         } catch (err) {
-          consola24.error(err instanceof Error ? err.message : String(err));
+          consola22.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -8753,14 +8443,14 @@ var init_restore2 = __esm({
 });
 
 // src/commands/remove-from-url.ts
-import { defineCommand as defineCommand20 } from "citty";
-import { consola as consola25 } from "consola";
+import { defineCommand as defineCommand19 } from "citty";
+import { consola as consola23 } from "consola";
 var removeFromUrlCommand;
 var init_remove_from_url = __esm({
   "src/commands/remove-from-url.ts"() {
     "use strict";
     init_modify();
-    removeFromUrlCommand = defineCommand20({
+    removeFromUrlCommand = defineCommand19({
       meta: {
         name: "remove-from-url",
         group: "edit",
@@ -8793,7 +8483,7 @@ var init_remove_from_url = __esm({
           });
           process.exit(result.status === "aborted" ? 1 : 0);
         } catch (err) {
-          consola25.error(err instanceof Error ? err.message : String(err));
+          consola23.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -8802,14 +8492,14 @@ var init_remove_from_url = __esm({
 });
 
 // src/commands/remove-language.ts
-import { defineCommand as defineCommand21 } from "citty";
-import { consola as consola26 } from "consola";
+import { defineCommand as defineCommand20 } from "citty";
+import { consola as consola24 } from "consola";
 var removeLanguageCommand;
 var init_remove_language = __esm({
   "src/commands/remove-language.ts"() {
     "use strict";
     init_modify();
-    removeLanguageCommand = defineCommand21({
+    removeLanguageCommand = defineCommand20({
       meta: {
         name: "remove-language",
         group: "edit",
@@ -8842,7 +8532,7 @@ var init_remove_language = __esm({
           });
           process.exit(result.status === "aborted" ? 1 : 0);
         } catch (err) {
-          consola26.error(err instanceof Error ? err.message : String(err));
+          consola24.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -8851,8 +8541,8 @@ var init_remove_language = __esm({
 });
 
 // src/commands/remove-port.ts
-import { defineCommand as defineCommand22 } from "citty";
-import { consola as consola27 } from "consola";
+import { defineCommand as defineCommand21 } from "citty";
+import { consola as consola25 } from "consola";
 function coerceToken2(raw) {
   const n = Number(raw);
   return Number.isFinite(n) ? n : raw;
@@ -8863,7 +8553,7 @@ var init_remove_port = __esm({
     "use strict";
     init_inner_args();
     init_modify();
-    removePortCommand = defineCommand22({
+    removePortCommand = defineCommand21({
       meta: {
         name: "remove-port",
         group: "edit",
@@ -8885,7 +8575,7 @@ var init_remove_port = __esm({
       async run({ args }) {
         const tokens = [...getInnerArgs()];
         if (tokens.length === 0) {
-          consola27.error(
+          consola25.error(
             "No ports given. Usage: `monoceros remove-port <containername> [--yes] -- <port> [<port> \u2026]`."
           );
           process.exit(1);
@@ -8898,7 +8588,7 @@ var init_remove_port = __esm({
           });
           process.exit(result.status === "aborted" ? 1 : 0);
         } catch (err) {
-          consola27.error(err instanceof Error ? err.message : String(err));
+          consola25.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -8907,14 +8597,14 @@ var init_remove_port = __esm({
 });
 
 // src/commands/remove-repo.ts
-import { defineCommand as defineCommand23 } from "citty";
-import { consola as consola28 } from "consola";
+import { defineCommand as defineCommand22 } from "citty";
+import { consola as consola26 } from "consola";
 var removeRepoCommand;
 var init_remove_repo = __esm({
   "src/commands/remove-repo.ts"() {
     "use strict";
     init_modify();
-    removeRepoCommand = defineCommand23({
+    removeRepoCommand = defineCommand22({
       meta: {
         name: "remove-repo",
         group: "edit",
@@ -8947,7 +8637,7 @@ var init_remove_repo = __esm({
           });
           process.exit(result.status === "aborted" ? 1 : 0);
         } catch (err) {
-          consola28.error(err instanceof Error ? err.message : String(err));
+          consola26.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -8956,14 +8646,14 @@ var init_remove_repo = __esm({
 });
 
 // src/commands/remove-service.ts
-import { defineCommand as defineCommand24 } from "citty";
-import { consola as consola29 } from "consola";
+import { defineCommand as defineCommand23 } from "citty";
+import { consola as consola27 } from "consola";
 var removeServiceCommand;
 var init_remove_service = __esm({
   "src/commands/remove-service.ts"() {
     "use strict";
     init_modify();
-    removeServiceCommand = defineCommand24({
+    removeServiceCommand = defineCommand23({
       meta: {
         name: "remove-service",
         group: "edit",
@@ -8996,7 +8686,7 @@ var init_remove_service = __esm({
           });
           process.exit(result.status === "aborted" ? 1 : 0);
         } catch (err) {
-          consola29.error(err instanceof Error ? err.message : String(err));
+          consola27.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -9005,15 +8695,29 @@ var init_remove_service = __esm({
 });
 
 // src/devcontainer/browser-bridge.ts
-import { spawn as spawn10 } from "child_process";
-import { existsSync as existsSync15, promises as fsp3, readFileSync as readFileSync7 } from "fs";
-import http2 from "http";
-import path23 from "path";
-function openInBrowser2(url) {
+import { spawn as spawn9 } from "child_process";
+import { existsSync as existsSync13, promises as fsp2, readFileSync as readFileSync6 } from "fs";
+import http from "http";
+import path21 from "path";
+function parseCallbackTarget(authUrl) {
+  try {
+    const u = new URL(authUrl);
+    const redirect = u.searchParams.get("redirect_uri");
+    if (!redirect) return null;
+    const r = new URL(redirect);
+    if (r.hostname !== "localhost" && r.hostname !== "127.0.0.1") return null;
+    const port = Number(r.port);
+    if (!Number.isInteger(port) || port <= 0) return null;
+    return { port, pathname: r.pathname };
+  } catch {
+    return null;
+  }
+}
+function openInBrowser(url) {
   const platform = process.platform;
   const [cmd, args] = platform === "darwin" ? ["open", [url]] : platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
   try {
-    const child = spawn10(cmd, args, {
+    const child = spawn9(cmd, args, {
       stdio: "ignore",
       detached: true
     });
@@ -9024,12 +8728,12 @@ function openInBrowser2(url) {
   }
 }
 async function startBrowserBridge(opts) {
-  const relayDir = path23.join(opts.root, RELAY_DIRNAME2);
-  const relayScript = path23.join(relayDir, "xdg-open");
-  const urlFile = path23.join(relayDir, "url");
-  await fsp3.mkdir(relayDir, { recursive: true });
-  await fsp3.rm(urlFile, { force: true });
-  await fsp3.writeFile(
+  const relayDir = path21.join(opts.root, RELAY_DIRNAME);
+  const relayScript = path21.join(relayDir, "xdg-open");
+  const urlFile = path21.join(relayDir, "url");
+  await fsp2.mkdir(relayDir, { recursive: true });
+  await fsp2.rm(urlFile, { force: true });
+  await fsp2.writeFile(
     relayScript,
     `#!/bin/sh
 printf '%s\\n' "$1" > "$(dirname "$0")/url"
@@ -9037,14 +8741,14 @@ exit 0
 `,
     { mode: 493 }
   );
-  await fsp3.chmod(relayScript, 493);
+  await fsp2.chmod(relayScript, 493);
   const servers = [];
   let handled = false;
   const onUrl = (url) => {
-    openInBrowser2(url);
+    openInBrowser(url);
     const target = parseCallbackTarget(url);
     if (!target) return;
-    const server = http2.createServer((req, res) => {
+    const server = http.createServer((req, res) => {
       const reqUrl = req.url ?? target.pathname;
       res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
       res.end(
@@ -9070,10 +8774,10 @@ exit 0
     servers.push(server);
   };
   const poll = setInterval(() => {
-    if (handled || !existsSync15(urlFile)) return;
+    if (handled || !existsSync13(urlFile)) return;
     let content = "";
     try {
-      content = readFileSync7(urlFile, "utf8");
+      content = readFileSync6(urlFile, "utf8");
     } catch {
       return;
     }
@@ -9082,20 +8786,57 @@ exit 0
     onUrl(content.trim());
   }, 250);
   return {
-    relayDirInContainer: `/workspaces/${opts.name}/${RELAY_DIRNAME2}`,
+    relayDirInContainer: `/workspaces/${opts.name}/${RELAY_DIRNAME}`,
     async dispose() {
       clearInterval(poll);
       for (const s of servers) s.close();
-      await fsp3.rm(relayDir, { recursive: true, force: true });
+      await fsp2.rm(relayDir, { recursive: true, force: true });
     }
   };
 }
-var RELAY_DIRNAME2;
+var RELAY_DIRNAME;
 var init_browser_bridge = __esm({
   "src/devcontainer/browser-bridge.ts"() {
     "use strict";
-    init_services();
-    RELAY_DIRNAME2 = ".monoceros-bridge";
+    RELAY_DIRNAME = ".monoceros-bridge";
+  }
+});
+
+// src/devcontainer/shell.ts
+import { existsSync as existsSync14 } from "fs";
+import path22 from "path";
+async function runShell(opts) {
+  assertContainerExists(opts.root);
+  const spawnFn = opts.spawn ?? spawnDevcontainer;
+  const upCode = await spawnFn(
+    ["up", "--workspace-folder", opts.root, "--mount-workspace-git-root=false"],
+    opts.root,
+    { quiet: true }
+  );
+  if (upCode !== 0) return upCode;
+  return spawnFn(
+    [
+      "exec",
+      "--workspace-folder",
+      opts.root,
+      "--mount-workspace-git-root=false",
+      "bash"
+    ],
+    opts.root,
+    { interactive: true }
+  );
+}
+function assertContainerExists(root) {
+  if (!existsSync14(path22.join(root, ".devcontainer"))) {
+    throw new Error(
+      `No .devcontainer/ at ${root}. Run \`monoceros apply <name>\` first.`
+    );
+  }
+}
+var init_shell = __esm({
+  "src/devcontainer/shell.ts"() {
+    "use strict";
+    init_cli();
   }
 });
 
@@ -9105,7 +8846,9 @@ function wrapExec(command, opts) {
   const stmts = [];
   if (opts.pathPrepend) {
     leading.push(opts.pathPrepend);
-    stmts.push(`export PATH="$${leading.length}:$PATH"`);
+    const i = leading.length;
+    stmts.push(`export PATH="$${i}:$PATH"`);
+    stmts.push(`export BROWSER="$${i}/xdg-open"`);
   }
   if (opts.cwd) {
     leading.push(opts.cwd);
@@ -9165,8 +8908,8 @@ var init_run = __esm({
 });
 
 // src/commands/run.ts
-import { defineCommand as defineCommand25 } from "citty";
-import { consola as consola30 } from "consola";
+import { defineCommand as defineCommand24 } from "citty";
+import { consola as consola28 } from "consola";
 var runCommand;
 var init_run2 = __esm({
   "src/commands/run.ts"() {
@@ -9174,7 +8917,7 @@ var init_run2 = __esm({
     init_paths();
     init_run();
     init_inner_args();
-    runCommand = defineCommand25({
+    runCommand = defineCommand24({
       meta: {
         name: "run",
         group: "run",
@@ -9194,7 +8937,7 @@ var init_run2 = __esm({
       async run({ args }) {
         const command = [...getInnerArgs()];
         if (command.length === 0) {
-          consola30.error(
+          consola28.error(
             "No command provided. Usage: `monoceros run <containername> -- <cmd> [args\u2026]`."
           );
           process.exit(1);
@@ -9208,7 +8951,7 @@ var init_run2 = __esm({
           });
           process.exit(exitCode);
         } catch (err) {
-          consola30.error(err instanceof Error ? err.message : String(err));
+          consola28.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -9217,15 +8960,15 @@ var init_run2 = __esm({
 });
 
 // src/commands/shell.ts
-import { defineCommand as defineCommand26 } from "citty";
-import { consola as consola31 } from "consola";
+import { defineCommand as defineCommand25 } from "citty";
+import { consola as consola29 } from "consola";
 var shellCommand;
 var init_shell2 = __esm({
   "src/commands/shell.ts"() {
     "use strict";
     init_paths();
     init_shell();
-    shellCommand = defineCommand26({
+    shellCommand = defineCommand25({
       meta: {
         name: "shell",
         group: "run",
@@ -9243,7 +8986,7 @@ var init_shell2 = __esm({
           const exitCode = await runShell({ root: containerDir(args.name) });
           process.exit(exitCode);
         } catch (err) {
-          consola31.error(err instanceof Error ? err.message : String(err));
+          consola29.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -9252,8 +8995,8 @@ var init_shell2 = __esm({
 });
 
 // src/commands/start.ts
-import { defineCommand as defineCommand27 } from "citty";
-import { consola as consola32 } from "consola";
+import { defineCommand as defineCommand26 } from "citty";
+import { consola as consola30 } from "consola";
 var startCommand;
 var init_start = __esm({
   "src/commands/start.ts"() {
@@ -9265,7 +9008,7 @@ var init_start = __esm({
     init_proxy();
     init_port_check();
     init_dispatch();
-    startCommand = defineCommand27({
+    startCommand = defineCommand26({
       meta: {
         name: "start",
         group: "run",
@@ -9290,7 +9033,7 @@ var init_start = __esm({
               hostPort = proxyHostPort(global);
             }
           } catch (err) {
-            consola32.warn(
+            consola30.warn(
               `Could not read container yml ahead of start: ${err instanceof Error ? err.message : String(err)}. Skipping Traefik pre-flight.`
             );
           }
@@ -9306,7 +9049,7 @@ var init_start = __esm({
 });
 
 // src/commands/status.ts
-import { defineCommand as defineCommand28 } from "citty";
+import { defineCommand as defineCommand27 } from "citty";
 var statusCommand;
 var init_status = __esm({
   "src/commands/status.ts"() {
@@ -9314,7 +9057,7 @@ var init_status = __esm({
     init_paths();
     init_compose();
     init_dispatch();
-    statusCommand = defineCommand28({
+    statusCommand = defineCommand27({
       meta: {
         name: "status",
         group: "run",
@@ -9344,8 +9087,8 @@ var init_status = __esm({
 });
 
 // src/commands/stop.ts
-import { defineCommand as defineCommand29 } from "citty";
-import { consola as consola33 } from "consola";
+import { defineCommand as defineCommand28 } from "citty";
+import { consola as consola31 } from "consola";
 var stopCommand;
 var init_stop = __esm({
   "src/commands/stop.ts"() {
@@ -9354,7 +9097,7 @@ var init_stop = __esm({
     init_compose();
     init_proxy();
     init_dispatch();
-    stopCommand = defineCommand29({
+    stopCommand = defineCommand28({
       meta: {
         name: "stop",
         group: "run",
@@ -9379,10 +9122,10 @@ var init_stop = __esm({
           });
           try {
             await maybeStopProxy({
-              logger: { info: (msg) => consola33.info(msg) }
+              logger: { info: (msg) => consola31.info(msg) }
             });
           } catch (err) {
-            consola33.warn(
+            consola31.warn(
               `Could not tear down the Traefik proxy: ${err instanceof Error ? err.message : String(err)}. Ignored.`
             );
           }
@@ -9394,11 +9137,11 @@ var init_stop = __esm({
 });
 
 // src/tunnel/resolve.ts
-import { existsSync as existsSync16 } from "fs";
-import path24 from "path";
+import { existsSync as existsSync15 } from "fs";
+import path23 from "path";
 async function resolveTunnelTarget(opts) {
   const ymlPath = containerConfigPath(opts.name, opts.monocerosHome);
-  if (!existsSync16(ymlPath)) {
+  if (!existsSync15(ymlPath)) {
     throw new Error(
       `No yml profile for '${opts.name}' at ${ymlPath}. Run \`monoceros init ${opts.name}\` first.`
     );
@@ -9406,13 +9149,13 @@ async function resolveTunnelTarget(opts) {
   const parsed = await readConfig(ymlPath);
   const config = parsed.config;
   const containerRoot = containerDir(opts.name, opts.monocerosHome);
-  if (!existsSync16(containerRoot)) {
+  if (!existsSync15(containerRoot)) {
     throw new Error(
       `Container '${opts.name}' is not materialised at ${containerRoot}. Run \`monoceros apply ${opts.name}\` first.`
     );
   }
-  const composePath = path24.join(containerRoot, ".devcontainer", "compose.yaml");
-  const isCompose = existsSync16(composePath);
+  const composePath = path23.join(containerRoot, ".devcontainer", "compose.yaml");
+  const isCompose = existsSync15(composePath);
   const parsedTarget = parseTargetArg(opts.target, config);
   const docker = opts.docker ?? defaultDockerExec;
   if (isCompose) {
@@ -9647,8 +9390,8 @@ var init_port_check2 = __esm({
 });
 
 // src/tunnel/run.ts
-import { spawn as spawn11 } from "child_process";
-import { consola as consola34 } from "consola";
+import { spawn as spawn10 } from "child_process";
+import { consola as consola32 } from "consola";
 function signalNumber(signal) {
   switch (signal) {
     case "SIGINT":
@@ -9661,8 +9404,8 @@ function signalNumber(signal) {
 }
 async function runTunnel(opts) {
   const log = opts.logger ?? {
-    info: (m) => consola34.info(m),
-    warn: (m) => consola34.warn(m)
+    info: (m) => consola32.info(m),
+    warn: (m) => consola32.warn(m)
   };
   const resolve = opts.resolve ?? resolveTunnelTarget;
   const resolveArgs3 = {
@@ -9737,7 +9480,7 @@ var init_run3 = __esm({
     init_port_check2();
     SOCAT_IMAGE = "alpine/socat:1.8.0.3";
     defaultDockerSpawn = (args) => {
-      const child = spawn11("docker", args, {
+      const child = spawn10("docker", args, {
         stdio: "inherit"
       });
       const exited = new Promise((resolve, reject) => {
@@ -9768,8 +9511,8 @@ var init_run3 = __esm({
 });
 
 // src/commands/tunnel.ts
-import { defineCommand as defineCommand30 } from "citty";
-import { consola as consola35 } from "consola";
+import { defineCommand as defineCommand29 } from "citty";
+import { consola as consola33 } from "consola";
 function parseLocalPort(raw) {
   if (raw === void 0) return void 0;
   const n = Number(raw);
@@ -9785,7 +9528,7 @@ var init_tunnel = __esm({
   "src/commands/tunnel.ts"() {
     "use strict";
     init_run3();
-    tunnelCommand = defineCommand30({
+    tunnelCommand = defineCommand29({
       meta: {
         name: "tunnel",
         group: "discovery",
@@ -9822,7 +9565,7 @@ var init_tunnel = __esm({
           });
           process.exit(exitCode);
         } catch (err) {
-          consola35.error(err instanceof Error ? err.message : String(err));
+          consola33.error(err instanceof Error ? err.message : String(err));
           process.exit(1);
         }
       }
@@ -9831,8 +9574,8 @@ var init_tunnel = __esm({
 });
 
 // src/upgrade/index.ts
-import { existsSync as existsSync17, promises as fs17 } from "fs";
-import { consola as consola36 } from "consola";
+import { existsSync as existsSync16, promises as fs17 } from "fs";
+import { consola as consola34 } from "consola";
 async function fetchRuntimeVersions() {
   const tokenUrl = `https://ghcr.io/token?service=ghcr.io&scope=repository:${RUNTIME_REPO}:pull`;
   const tokenRes = await fetch(tokenUrl);
@@ -9870,7 +9613,7 @@ ${yml}`;
 }
 async function runUpgrade(opts) {
   const home = opts.monocerosHome ?? monocerosHome();
-  const logger = opts.logger ?? consola36;
+  const logger = opts.logger ?? consola34;
   const fetchVersions = opts.fetchVersions ?? fetchRuntimeVersions;
   if (opts.list) {
     const versions = await fetchVersions();
@@ -9890,7 +9633,7 @@ async function runUpgrade(opts) {
     );
   }
   const ymlPath = containerConfigPath(opts.name, home);
-  if (!existsSync17(ymlPath)) {
+  if (!existsSync16(ymlPath)) {
     throw new Error(
       `No such config: ${ymlPath}. Run \`monoceros init <template> ${opts.name}\` first.`
     );
@@ -9938,7 +9681,7 @@ var init_upgrade = __esm({
 });
 
 // src/commands/upgrade.ts
-import { defineCommand as defineCommand31 } from "citty";
+import { defineCommand as defineCommand30 } from "citty";
 var upgradeCommand;
 var init_upgrade2 = __esm({
   "src/commands/upgrade.ts"() {
@@ -9946,7 +9689,7 @@ var init_upgrade2 = __esm({
     init_upgrade();
     init_version();
     init_dispatch();
-    upgradeCommand = defineCommand31({
+    upgradeCommand = defineCommand30({
       meta: {
         name: "upgrade",
         group: "lifecycle",
@@ -9988,7 +9731,7 @@ var main_exports = {};
 __export(main_exports, {
   main: () => main
 });
-import { defineCommand as defineCommand32 } from "citty";
+import { defineCommand as defineCommand31 } from "citty";
 var main;
 var init_main = __esm({
   "src/main.ts"() {
@@ -10005,7 +9748,6 @@ var init_main = __esm({
     init_complete();
     init_init2();
     init_list_components();
-    init_login2();
     init_logs();
     init_port();
     init_remove_apt_packages();
@@ -10025,7 +9767,7 @@ var init_main = __esm({
     init_tunnel();
     init_upgrade2();
     init_version();
-    main = defineCommand32({
+    main = defineCommand31({
       meta: {
         name: "monoceros",
         version: CLI_VERSION,
@@ -10036,7 +9778,6 @@ var init_main = __esm({
         "list-components": listComponentsCommand,
         shell: shellCommand,
         run: runCommand,
-        login: loginCommand,
         logs: logsCommand,
         start: startCommand,
         stop: stopCommand,
@@ -10322,25 +10063,25 @@ function detectHelpRequest(argv, main2) {
   const separatorIdx = argv.indexOf("--");
   if (helpIdx === -1) return null;
   if (separatorIdx !== -1 && separatorIdx < helpIdx) return null;
-  const path25 = [];
+  const path24 = [];
   const tokens = argv.slice(
     0,
     separatorIdx === -1 ? argv.length : separatorIdx
   );
   let cursor = main2;
   const mainName = (main2.meta ?? {}).name ?? "monoceros";
-  path25.push(mainName);
+  path24.push(mainName);
   for (const tok of tokens) {
     if (tok.startsWith("-")) continue;
     const subs = cursor.subCommands ?? {};
     if (tok in subs) {
       cursor = subs[tok];
-      path25.push(tok);
+      path24.push(tok);
       continue;
     }
     break;
   }
-  return { path: path25, cmd: cursor };
+  return { path: path24, cmd: cursor };
 }
 async function maybeRenderHelp(argv, main2) {
   const hit = detectHelpRequest(argv, main2);