@h-ai/cli 1.0.0-beta.22 → 1.0.0-beta.23

package/dist/index.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { generateConfigFile, runtimeEnvironmentVariables, renderEnvironment, generateProductionEnvironment, moduleEnvironmentVariables, documentConfig, parameterizeConfig } from './chunk-EFC6IHNF.js';
-import { cliM } from './chunk-2ZL5ORQ2.js';
+import { generateConfigFile, runtimeEnvironmentVariables, renderEnvironment, generateProductionEnvironment, moduleEnvironmentVariables, documentConfig, parameterizeConfig } from './chunk-V7WGSBX3.js';
+import { cliM } from './chunk-P2VZ3VV6.js';
 import { __commonJS, __export, __toESM } from './chunk-ZSDEVXZ7.js';
-import process15 from 'process';
+import process14 from 'process';
 import { cac } from 'cac';
 import chalk from 'chalk';
 import path2, { resolve, dirname, join, relative, basename, sep, isAbsolute, extname } from 'path';
@@ -2203,7 +2203,7 @@ var require_sm2 = __commonJS({
           const decodeDerObj = decodeDer(signHex);
           r = decodeDerObj.r;
           s = decodeDerObj.s;
-        } catch (err31) {
+        } catch (err30) {
           return false;
         }
       } else {
@@ -2873,21 +2873,21 @@ var require_src = __commonJS({
 var CAMEL_CASE_SEPARATOR_REGEX = /[-_\s]+(.)?/g;
 var LEADING_CHAR_REGEX = /^./;
 function writeCliMessage(message) {
-  process15.stdout.write(`${message}
+  process14.stdout.write(`${message}
 `);
 }
 function writeCliError(message, error62) {
-  process15.stderr.write(`${message}
+  process14.stderr.write(`${message}
 `);
   if (error62 && typeof error62 === "object" && "error" in error62)
     error62 = error62.error;
   if (error62 !== void 0) {
-    process15.stderr.write(`${error62 instanceof Error ? error62.message : String(error62)}
+    process14.stderr.write(`${error62 instanceof Error ? error62.message : String(error62)}
 `);
   }
 }
 function formatPromptDescription(description) {
-  return wrapAnsi(description, Math.max(1, (process15.stdout.columns || 80) - 32), { hard: true });
+  return wrapAnsi(description, Math.max(1, (process14.stdout.columns || 80) - 32), { hard: true });
 }
 function toCamelCase(str) {
   return str.replace(CAMEL_CASE_SEPARATOR_REGEX, (_, c) => c ? c.toUpperCase() : "").replace(LEADING_CHAR_REGEX, (c) => c.toLowerCase());
@@ -4152,14 +4152,6 @@ var PROJECT_NAME_REGEX = /^[a-z0-9-]+$/;
 async function createProject(options) {
   const spinner = ora();
   try {
-    if ([
-      "template",
-      "features",
-      "examples",
-      "yes"
-    ].some((key) => Object.hasOwn(options, key))) {
-      throw new Error(cliM("cli_createOptionsRemoved"));
-    }
     const resolvedOptions = await resolveOptions(options);
     if (!PROJECT_NAME_REGEX.test(resolvedOptions.name)) {
       throw new Error(cliM("cli_createInvalidName", {
@@ -4201,7 +4193,7 @@ async function createProject(options) {
     });
     await generateFromTemplates(projectPath, context);
     {
-      const { generateConfigFile: generateConfigFile2, generateEnvExample, generateProductionEnvironment: generateProductionEnvironment2 } = await import('./cli-config-templates-JJD7YXKL.js');
+      const { generateConfigFile: generateConfigFile2, generateEnvExample, generateProductionEnvironment: generateProductionEnvironment2 } = await import('./cli-config-templates-VLXJTHCQ.js');
       const configs = resolvedOptions.moduleConfigs;
       const isApiWorkspace = resolvedOptions.appType === "api";
       const isFullstack = resolvedOptions.appType === "fullstack";
@@ -4328,7 +4320,7 @@ HAI_CRYPTO_TRANSPORT_SERVERKEYRING='${JSON.stringify(ring)}'
       }
       await fse.writeFile(path2.join(envDirectory, ".env.local"), "# \u672C\u673A\u901A\u7528\u79C1\u6709\u8986\u76D6\uFF0C\u4E0D\u63D0\u4EA4 Git\uFF1B\u521D\u59CB\u5BC6\u7801\u548C\u4F20\u8F93\u5BC6\u94A5\u73AF\u5206\u522B\u4F4D\u4E8E .env.dev.local / .env.test.local / .env.prod.local\u3002\n", { mode: 384 });
     }
-    const { generateSkillFiles } = await import('./cli-skill-templates-D6S2OQ6X.js');
+    const { generateSkillFiles } = await import('./cli-skill-templates-JKF6E3PI.js');
     await generateSkillFiles(
       projectPath,
       resolvedOptions.features,
@@ -4386,7 +4378,7 @@ async function resolveOptions(options) {
   writeCliMessage("");
   const onCancel = () => {
     writeCliMessage(chalk.red(cliM("cli_cancelledLine")));
-    process15.exit(1);
+    process14.exit(1);
   };
   let projectName = options.name;
   if (!projectName && useDefaults) {
@@ -4598,7 +4590,7 @@ async function promptModuleConfigs(features, projectName) {
   const configs = {};
   const onCancel = () => {
     writeCliMessage(chalk.red(cliM("cli_cancelledLine")));
-    process15.exit(1);
+    process14.exit(1);
   };
   writeCliMessage("");
   writeCliMessage(chalk.bold(cliM("cli_createModuleConfig")));
@@ -4939,7 +4931,7 @@ function generateBuildDeploymentReadme(pm, appDir) {
   return `### \u6784\u5EFA\u4E0E\u90E8\u7F72
 
 \u521B\u5EFA\u65F6\u9ED8\u8BA4\u5305\u542B\u90E8\u7F72\u5DE5\u5177\uFF1B\u4E0D\u9700\u8981\u65F6\u4F7F\u7528 hai create --no-deploy\u3002
-\u540E\u7AEFserv\u3001\u6D4F\u89C8\u5668\u7AD9\u70B9web\uFF08\u9759\u6001\u6216SSR\uFF09\u3001\u624B\u673A\u539F\u751F\u5305app\u3001\u684C\u9762\u539F\u751F\u5305desktop\u3002--images/--services\u4F7F\u7528serv/web\uFF0C--target app/desktop\u7528\u4E8E\u539F\u751F\u4EA4\u4ED8\u3002\u955C\u50CF\u548C\u5BB9\u5668\u8EAB\u4EFD\u53D6\u5DE5\u7A0B\u6839package.json.name\uFF0C\u53BBscope\u3001\u8F6C\u5C0F\u5199\u5E76\u5F52\u4E00\u5316\u5B57\u7B26\uFF1B\u7F3A\u5931\u6216\u65E0\u6548\u65F6\u62A5\u9519\uFF0C\u4E0D\u4F7F\u7528\u76EE\u5F55\u540D\u3002\u6839\u76EE\u5F55\u5236\u54C1\u683C\u5F0F4\uFF0C\u975E\u6839\u76EE\u5F55\u683C\u5F0F5\u53CAwebBasePath\uFF0C\u4E24\u8005\u90FD\u8BB0\u5F55primaryService/hasWeb\uFF1B\u53EA\u6709serv + web\u751F\u6210\u540C\u6E90API\u4EE3\u7406\u3002\u65E7\u5DE5\u7A0B\u5148\u540C\u6B65build.images\u3001Dockerfile\u53CAAPI workspace\u7684-serv\u5305\u540D\u4E0E\u5F15\u7528\uFF0C\u5B89\u88C5\u4F9D\u8D56\u5E76\u91CD\u5EFA\u5B8C\u6574\u5236\u54C1\uFF1B\u65E7\u90E8\u7F72\u5148\u5907\u4EFD\u3001\u6838\u5BF9\u9879\u76EE\u540D\u3001\u5377\u4E0E\u53D7\u7BA1\u51ED\u636E\uFF0C\u518D\u5EFA\u7ACB\u5B8C\u6574\u57FA\u7EBF\u3002\u5B8C\u6574\u90E8\u7F72\u6309Compose\u89C4\u5219\u6E05\u7406\u540C\u9879\u76EE\u65E7\u670D\u52A1\uFF0C\u4E0D\u81EA\u52A8\u8DE8\u9879\u76EE\u8FC1\u79FB\u6570\u636E\u3002
+\u540E\u7AEFserv\u3001\u6D4F\u89C8\u5668\u7AD9\u70B9web\uFF08\u9759\u6001\u6216SSR\uFF09\u3001\u624B\u673A\u539F\u751F\u5305app\u3001\u684C\u9762\u539F\u751F\u5305desktop\u3002--images/--services\u4F7F\u7528serv/web\uFF0C--target app/desktop\u7528\u4E8E\u539F\u751F\u4EA4\u4ED8\u3002\u955C\u50CF\u548C\u5BB9\u5668\u8EAB\u4EFD\u53D6\u5DE5\u7A0B\u6839package.json.name\uFF0C\u53BBscope\u3001\u8F6C\u5C0F\u5199\u5E76\u5F52\u4E00\u5316\u5B57\u7B26\uFF1B\u7F3A\u5931\u6216\u65E0\u6548\u65F6\u62A5\u9519\uFF0C\u4E0D\u4F7F\u7528\u76EE\u5F55\u540D\u3002\u955C\u50CF\u5236\u54C1\u4F7F\u7528\u683C\u5F0F 5\uFF0C\u8BB0\u5F55 primaryService\u3001hasWeb \u548C webBasePath\uFF1B\u57DF\u540D\u6839\u76EE\u5F55\u7684 webBasePath \u4E3A\u7A7A\u5B57\u7B26\u4E32\u3002\u53EA\u6709\u540C\u65F6\u5305\u542B serv \u4E0E web \u65F6\u624D\u751F\u6210\u540C\u6E90 API \u4EE3\u7406\u3002\u5B8C\u6574\u90E8\u7F72\u6309 Compose \u9879\u76EE\u66F4\u65B0\u5BB9\u5668\u5E76\u4FDD\u7559\u6570\u636E\u5377\u3002
 
 \u7F51\u7AD9\u5730\u5740\u542B/yyy/\u7B49\u76EE\u5F55\u65F6\uFF0C\u5728\u6784\u5EFA\u8FDB\u7A0B\u663E\u5F0F\u8BBE\u7F6EPUBLIC_BASE_PATH=/yyy\uFF0C\u9ED8\u8BA4\u7A7A\u5B57\u7B26\u4E32\uFF1B\u4E0D\u4ECE\u79C1\u6709dotenv\u8BFB\u53D6\u3002SvelteKit\u7F16\u8BD1\u65F6\u56FA\u5B9Abase\uFF0CVite\u9ED8\u8BA4\u76F8\u5BF9\u8D44\u6E90\u4E0Ehash\u8DEF\u7531\uFF1BAPI\u5730\u5740\u72EC\u7ACB\u914D\u7F6E\u3002Docker\u7F51\u7AD9\u5236\u54C1\u7531SDK\u5904\u7406\u4EE3\u7406\u4E0E\u5065\u5EB7\u8DEF\u5F84\uFF0C\u4F7F\u7528\u5339\u914DCLI/Deploy\uFF1B\u6240\u6709\u90E8\u5206\u6784\u5EFA\u4FDD\u6301\u540C\u4E00\u76EE\u5F55\uFF0C\u5373\u4F7F\u53EA\u6784\u5EFAserv\u3002\u76EE\u5F55\u53D8\u5316\u4F7F\u7528\u5168\u91CF\u90E8\u7F72\uFF0C\u64CD\u4F5C\u548C\u9A8C\u8BC1\u89C1[\u7F51\u7AD9\u6302\u8F7D\u76EE\u5F55](.agents/skills/hai-build/paths.md)\u3002
 
@@ -5491,7 +5483,7 @@ async function addModule(options) {
       ...baseDefinition,
       deps: resolveFeatureDependencies([selected]).filter((feature) => feature !== selected)
     };
-    const { generateProjectAiSupport, resolveSkillNamesForPackages } = await import('./cli-skill-templates-D6S2OQ6X.js');
+    const { generateProjectAiSupport, resolveSkillNamesForPackages } = await import('./cli-skill-templates-JKF6E3PI.js');
     const allPackages = new Set(moduleDef.packages);
     for (const dep of moduleDef.deps) {
       for (const name of MODULE_MAP[dep]?.packages ?? [])
@@ -7060,10 +7052,10 @@ function defineLazyInternal(inst, key, compute) {
           Object.defineProperty(this, key, { configurable: true, writable: true, value });
         broke = broke || outer;
         return value;
-      } catch (err31) {
+      } catch (err30) {
         delete this[key];
         broke = broke || outer;
-        throw err31;
+        throw err30;
       }
     },
     set(value) {
@@ -10727,7 +10719,7 @@ var recursive = /* @__PURE__ */ new WeakMap();
 var NONE = 0;
 var ASSUMED = 1;
 var PROVEN = 2;
-function isRecursive(inst, stack, resolve17) {
+function isRecursive(inst, stack, resolve15) {
   const cached2 = recursive.get(inst);
   if (cached2 !== void 0)
     return cached2 ? PROVEN : NONE;
@@ -10737,7 +10729,7 @@ function isRecursive(inst, stack, resolve17) {
   let result = NONE;
   const check2 = (child) => {
     if (result !== PROVEN && child?._zod) {
-      const answer = isRecursive(child, stack, resolve17);
+      const answer = isRecursive(child, stack, resolve15);
       if (answer > result)
         result = answer;
     }
@@ -10748,7 +10740,7 @@ function isRecursive(inst, stack, resolve17) {
       const desc = Object.getOwnPropertyDescriptor(sh, key);
       if (!desc.enumerable)
         continue;
-      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve17) : NONE;
+      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve15) : NONE;
       if (child > answer)
         answer = child;
     }
@@ -10812,7 +10804,7 @@ function isRecursive(inst, stack, resolve17) {
       break;
     // `$ZodLazy` caches its inner on the def, so a resolved edge is followed exactly
     case "lazy": {
-      const inner = def._cachedInner ?? (resolve17 ? inst._zod.innerType : void 0);
+      const inner = def._cachedInner ?? (resolve15 ? inst._zod.innerType : void 0);
       merge2(inner ? isRecursive(inner, stack, false) : ASSUMED);
       break;
     }
@@ -18630,9 +18622,9 @@ function compile(schema, options) {
     const clone2 = withParser(schema, parser);
     clone2._zod.bag.validator = compileValidator(schema, parser);
     return clone2;
-  } catch (err31) {
+  } catch (err30) {
     if (options?.strict)
-      throw err31;
+      throw err30;
     return schema;
   }
 }
@@ -18722,8 +18714,8 @@ ${code}
   try {
     const factory = new F(...constantNames, factoryCode);
     fn = factory(...constantValues);
-  } catch (err31) {
-    throw new ZodCompileUnsupportedError(`this schema (generated code failed to evaluate: ${err31.message})`);
+  } catch (err30) {
+    throw new ZodCompileUnsupportedError(`this schema (generated code failed to evaluate: ${err30.message})`);
   }
   if (options?.debug) {
     fn.code = fullCode;
@@ -18761,9 +18753,9 @@ function compileChild(doc, ctx, schema, accessor, needsValue = true) {
   const varCounter = ctx.varCounter;
   try {
     return generateCheck(doc, ctx, schema, accessor, needsValue);
-  } catch (err31) {
-    if (!(err31 instanceof ZodCompileUnsupportedError) || !err31.islandable)
-      throw err31;
+  } catch (err30) {
+    if (!(err30 instanceof ZodCompileUnsupportedError) || !err30.islandable)
+      throw err30;
     doc.content.length = contentLen;
     if (ctx.constants.size > constantCount) {
       const trailing = Array.from(ctx.constants.keys()).slice(constantCount);
@@ -25369,17 +25361,14 @@ function date4(params) {
 // ../deploy/src/deploy-artifact.ts
 external_exports.object({
   /** 清单格式版本，与应用版本和部署环境无关。 */
-  version: external_exports.union([
-    external_exports.literal(4),
-    external_exports.literal(5)
-  ]),
+  version: external_exports.literal(5),
   /** 主运行服务：独立后端为 serv，独立浏览器站点（静态或 SSR）为 web。 */
   primaryService: external_exports.enum(["serv", "web"]),
   /** 应用根 package.json 的版本，用于归档、Compose 与桌面交付；最长 80 字符。 */
   appVersion: external_exports.string().max(80).regex(/^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-[0-9a-z-]+(?:\.[0-9a-z-]+)*)?(?:\+[0-9a-z-]+(?:\.[0-9a-z-]+)*)?$/i),
   /** 本次构建标识；同一应用版本允许重复构建。 */
   buildId: external_exports.string().max(128).regex(/^[a-z0-9][\w.+-]*$/i),
-  /** 构建启动时观察到的 Git 来源；历史清单可以省略。 */
+  /** 构建启动时观察到的 Git 来源。 */
   source: external_exports.object({
     /** 工程 package.json 所在仓库的提交 SHA；无法确定时为 unknown。 */
     commit: external_exports.string().regex(/^(?:[a-f0-9]{40}|[a-f0-9]{64}|unknown)$/),
@@ -25390,8 +25379,8 @@ external_exports.object({
   partial: external_exports.boolean().default(false),
   /** 是否包含浏览器端；仅构建 serv 时也保留完整工程的 Web 拓扑。 */
   hasWeb: external_exports.boolean().default(false),
-  /** Web构建的公开挂载目录，无末尾斜杠；省略或空字符串保持域名根目录。增量制品须保留完整拓扑的同一值。 */
-  webBasePath: external_exports.string().refine((value) => value === "" || /^\/[\w.-]+(?:\/[\w.-]+)*$/.test(value) && !value.split("/").some((segment) => segment === "." || segment === "..")).optional(),
+  /** Web 构建的公开挂载目录，无末尾斜杠；空字符串表示域名根目录。增量制品须保留完整拓扑的同一值。 */
+  webBasePath: external_exports.string().refine((value) => value === "" || /^\/[\w.-]+(?:\/[\w.-]+)*$/.test(value) && !value.split("/").some((segment) => segment === "." || segment === "..")),
   /** 工程显式配置的后端端口，部分构建未包含 serv 时仍保留。 */
   servContainerPort: external_exports.number().int().min(1).max(65535).optional(),
   /** 工程显式配置的 Web 端口，部分构建未包含 web 镜像时仍保留；缺省使用部署默认值。 */
@@ -25406,12 +25395,12 @@ external_exports.object({
     imageRef: external_exports.string().regex(/^[a-z0-9][a-z0-9./:_-]*:[a-z0-9_][a-z0-9_.-]*$/).refine((value) => !value.endsWith(":latest")),
     /** tar 内容的 SHA-256，用于部署前校验。 */
     sha256: external_exports.string().regex(/^[a-f0-9]{64}$/),
-    /** 引擎实际构建的镜像 OS/架构；历史清单可以省略。 */
+    /** 引擎实际构建的镜像 OS/架构。 */
     platform: external_exports.string().regex(/^[a-z0-9][a-z0-9_.-]*\/[a-z0-9][a-z0-9_.-]*$/).optional(),
     /** 容器内部监听端口；服务器公开端口由部署选择。 */
     containerPort: external_exports.number().int().min(1).max(65535).optional()
   })).min(1).max(2).refine((images) => new Set(images.map((image) => image.name)).size === images.length)
-}).refine((artifact) => artifact.version === 5 ? !!artifact.webBasePath : !artifact.webBasePath).refine((artifact) => !artifact.webBasePath || artifact.hasWeb).refine((artifact) => artifact.images.every((image) => image.file === `${image.name}-${artifact.appVersion}.tar`)).refine((artifact) => artifact.primaryService !== "web" || artifact.hasWeb).refine((artifact) => artifact.images.every((image) => image.name === artifact.primaryService || image.name === "web" && artifact.hasWeb)).refine((artifact) => artifact.partial || artifact.images.some((image) => image.name === artifact.primaryService)).refine((artifact) => artifact.partial || !artifact.hasWeb || artifact.images.some((image) => image.name === "web"));
+}).refine((artifact) => !artifact.webBasePath || artifact.hasWeb).refine((artifact) => artifact.images.every((image) => image.file === `${image.name}-${artifact.appVersion}.tar`)).refine((artifact) => artifact.primaryService !== "web" || artifact.hasWeb).refine((artifact) => artifact.images.every((image) => image.name === artifact.primaryService || image.name === "web" && artifact.hasWeb)).refine((artifact) => artifact.partial || artifact.images.some((image) => image.name === artifact.primaryService)).refine((artifact) => artifact.partial || !artifact.hasWeb || artifact.images.some((image) => image.name === "web"));
 
 // ../deploy/messages/en-US.json
 var en_US_default = {
@@ -25521,9 +25510,7 @@ var en_US_default = {
   deploy_uploadPasswordCancelled: "Password input cancelled; no server connection was made.",
   deploy_uploadPasswordInvalid: "SSH passwords must contain 1\u20131023 UTF-8 bytes without line breaks.",
   deploy_managedSecretsInvalid: "Invalid generated middleware credential candidates. Rebuild the deployment bundle; server credentials will not be rotated automatically.",
-  deploy_secretImportFailed: "Legacy credential import was rejected during {phase}; check private input permissions, project/volume identity, live credentials and the deployment lock. No services were updated; inspect the protected state file if commit is unconfirmed",
   deploy_projectNameRequired: "The root package.json.name is missing or cannot be normalized into an image and deployment resource identity.",
-  deploy_projectNameOverrideRemoved: "Deployment identity comes from the root package.json.name; remove the obsolete projectName override.",
   deploy_requestAccessInvalid: "Invalid request access policy ({field}). Check fields, IP addresses, timezones and time windows. For a file reference, use readable YAML no larger than 1 MiB. Fix the configuration and create a new bundle.",
   deploy_httpsPortsInvalid: "HTTP and HTTPS ports must differ; Let\u2019s Encrypt HTTP-01 requires host port 80.",
   deploy_httpsCertificateInvalid: "Invalid HTTPS certificate. Check readable PEM files, matching unencrypted private key, validity dates and domain, then repackage.",
@@ -25666,9 +25653,7 @@ var ja_JP_default = {
   deploy_uploadPasswordCancelled: "\u30D1\u30B9\u30EF\u30FC\u30C9\u5165\u529B\u3092\u4E2D\u6B62\u3057\u307E\u3057\u305F\u3002\u30B5\u30FC\u30D0\u30FC\u306B\u306F\u672A\u63A5\u7D9A\u3067\u3059\u3002",
   deploy_uploadPasswordInvalid: "SSH \u30D1\u30B9\u30EF\u30FC\u30C9\u306F\u6539\u884C\u3092\u542B\u307E\u306A\u3044 1\u20131023 UTF-8 \u30D0\u30A4\u30C8\u306B\u3057\u3066\u304F\u3060\u3055\u3044\u3002",
   deploy_managedSecretsInvalid: "\u81EA\u5EFA\u30DF\u30C9\u30EB\u30A6\u30A7\u30A2\u306E\u5019\u88DC\u8A8D\u8A3C\u60C5\u5831\u304C\u7121\u52B9\u3067\u3059\u3002\u914D\u7F6E\u30D1\u30C3\u30B1\u30FC\u30B8\u3092\u518D\u751F\u6210\u3057\u3066\u304F\u3060\u3055\u3044\u3002\u30B5\u30FC\u30D0\u30FC\u306E\u8A8D\u8A3C\u60C5\u5831\u306F\u81EA\u52D5\u5909\u66F4\u3055\u308C\u307E\u305B\u3093\u3002",
-  deploy_secretImportFailed: "\u65E7\u8A8D\u8A3C\u60C5\u5831\u306E\u30A4\u30F3\u30DD\u30FC\u30C8\u306F {phase} \u6BB5\u968E\u3067\u62D2\u5426\u3055\u308C\u307E\u3057\u305F\u3002\u5165\u529B\u6A29\u9650\u3001\u30D7\u30ED\u30B8\u30A7\u30AF\u30C8\u3068\u30DC\u30EA\u30E5\u30FC\u30E0\u3001\u5B9F\u969B\u306E\u8A8D\u8A3C\u60C5\u5831\u3001\u30C7\u30D7\u30ED\u30A4\u30ED\u30C3\u30AF\u3092\u78BA\u8A8D\u3057\u3066\u304F\u3060\u3055\u3044\u3002\u30B5\u30FC\u30D3\u30B9\u306F\u66F4\u65B0\u3055\u308C\u3066\u3044\u307E\u305B\u3093\u3002\u78BA\u5B9A\u304C\u4E0D\u660E\u306A\u5834\u5408\u306F\u4FDD\u8B77\u3055\u308C\u305F\u72B6\u614B\u30D5\u30A1\u30A4\u30EB\u3092\u78BA\u8A8D\u3057\u3066\u304F\u3060\u3055\u3044",
   deploy_projectNameRequired: "\u5DE5\u7A0B\u30EB\u30FC\u30C8\u306E package.json.name \u304C\u306A\u3044\u304B\u6B63\u898F\u5316\u3067\u304D\u306A\u3044\u305F\u3081\u3001\u30A4\u30E1\u30FC\u30B8\u3068\u30C7\u30D7\u30ED\u30A4\u30EA\u30BD\u30FC\u30B9\u306E\u8B58\u5225\u540D\u3092\u751F\u6210\u3067\u304D\u307E\u305B\u3093\u3002",
-  deploy_projectNameOverrideRemoved: "\u30C7\u30D7\u30ED\u30A4\u8B58\u5225\u540D\u306F\u5DE5\u7A0B\u30EB\u30FC\u30C8\u306E package.json.name \u304B\u3089\u53D6\u5F97\u3057\u307E\u3059\u3002\u65E7 projectName \u4E0A\u66F8\u304D\u5F15\u6570\u3092\u524A\u9664\u3057\u3066\u304F\u3060\u3055\u3044\u3002",
   deploy_requestAccessInvalid: "\u30EA\u30AF\u30A8\u30B9\u30C8\u30A2\u30AF\u30BB\u30B9\u8A2D\u5B9A\uFF08{field}\uFF09\u304C\u7121\u52B9\u3067\u3059\u3002\u30D5\u30A3\u30FC\u30EB\u30C9\u3001IP\u3001\u30BF\u30A4\u30E0\u30BE\u30FC\u30F3\u3001\u6642\u9593\u5E2F\u3092\u78BA\u8A8D\u3057\u3066\u304F\u3060\u3055\u3044\u3002\u30D5\u30A1\u30A4\u30EB\u306F\u8AAD\u307F\u53D6\u308A\u53EF\u80FD\u306A 1 MiB \u4EE5\u4E0B\u306E YAML \u3092\u6307\u5B9A\u3057\u3001\u4FEE\u6B63\u5F8C\u306B\u518D\u30D1\u30C3\u30B1\u30FC\u30B8\u3057\u3066\u304F\u3060\u3055\u3044\u3002",
   deploy_httpsPortsInvalid: "HTTP \u3068 HTTPS \u306E\u30DD\u30FC\u30C8\u306F\u7570\u306A\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059\u3002Let\u2019s Encrypt HTTP-01 \u306B\u306F\u30DB\u30B9\u30C8\u306E\u30DD\u30FC\u30C8 80 \u304C\u5FC5\u8981\u3067\u3059\u3002",
   deploy_httpsCertificateInvalid: "HTTPS \u8A3C\u660E\u66F8\u304C\u7121\u52B9\u3067\u3059\u3002PEM \u30D5\u30A1\u30A4\u30EB\u3001\u6697\u53F7\u5316\u3055\u308C\u3066\u3044\u306A\u3044\u79D8\u5BC6\u9375\u3068\u306E\u4E00\u81F4\u3001\u6709\u52B9\u671F\u9593\u3001\u30C9\u30E1\u30A4\u30F3\u3092\u78BA\u8A8D\u3057\u3001\u518D\u4F5C\u6210\u3057\u3066\u304F\u3060\u3055\u3044\u3002",
@@ -25811,9 +25796,7 @@ var zh_CN_default2 = {
   deploy_uploadPasswordCancelled: "\u5DF2\u53D6\u6D88\u5BC6\u7801\u8F93\u5165\uFF0C\u5C1A\u672A\u8FDE\u63A5\u670D\u52A1\u5668\u3002",
   deploy_uploadPasswordInvalid: "SSH \u5BC6\u7801\u987B\u4E3A 1\u20131023 \u4E2A UTF-8 \u5B57\u8282\uFF0C\u4E14\u4E0D\u80FD\u5305\u542B\u6362\u884C\u3002",
   deploy_managedSecretsInvalid: "\u81EA\u5EFA\u4E2D\u95F4\u4EF6\u5019\u9009\u51ED\u636E\u65E0\u6548\uFF0C\u8BF7\u91CD\u65B0\u751F\u6210\u90E8\u7F72\u5305\uFF1B\u670D\u52A1\u5668\u51ED\u636E\u4E0D\u4F1A\u81EA\u52A8\u66F4\u6362\u3002",
-  deploy_secretImportFailed: "\u65E7\u51ED\u636E\u5BFC\u5165\u5728 {phase} \u9636\u6BB5\u88AB\u62D2\u7EDD\uFF1B\u8BF7\u6838\u5BF9\u79C1\u6709\u8F93\u5165\u6743\u9650\u3001\u9879\u76EE/\u5377\u8EAB\u4EFD\u3001\u5B9E\u9645\u670D\u52A1\u51ED\u636E\u53CA\u90E8\u7F72\u9501\uFF0C\u672A\u6267\u884C\u670D\u52A1\u66F4\u65B0\uFF1B\u63D0\u4EA4\u7ED3\u679C\u4E0D\u660E\u65F6\u8BF7\u6838\u5BF9\u53D7\u4FDD\u62A4\u7684\u72B6\u6001\u6587\u4EF6",
   deploy_projectNameRequired: "\u5DE5\u7A0B\u6839 package.json.name \u7F3A\u5931\u6216\u65E0\u6CD5\u5F52\u4E00\u5316\uFF0C\u4E0D\u80FD\u751F\u6210\u955C\u50CF\u4E0E\u90E8\u7F72\u8D44\u6E90\u8EAB\u4EFD\u3002",
-  deploy_projectNameOverrideRemoved: "\u90E8\u7F72\u9879\u76EE\u540D\u7EDF\u4E00\u6765\u81EA\u5DE5\u7A0B\u6839 package.json.name\uFF1B\u8BF7\u79FB\u9664\u65E7 projectName \u8986\u76D6\u53C2\u6570\u3002",
   deploy_requestAccessInvalid: "\u8BF7\u6C42\u8BBF\u95EE\u7B56\u7565\u914D\u7F6E\u65E0\u6548\uFF08{field}\uFF09\u3002\u8BF7\u68C0\u67E5\u5B57\u6BB5\u3001IP\u3001\u65F6\u533A\u53CA\u65F6\u95F4\u7A97\u53E3\uFF1B\u5982\u5F15\u7528\u6587\u4EF6\uFF0C\u8BF7\u786E\u8BA4\u6587\u4EF6\u53EF\u8BFB\u3001\u683C\u5F0F\u4E3A YAML \u4E14\u4E0D\u8D85\u8FC7 1 MiB\u3002\u4FEE\u6B63\u540E\u91CD\u65B0\u6253\u5305\u3002",
   deploy_httpsPortsInvalid: "HTTP \u4E0E HTTPS \u7AEF\u53E3\u5FC5\u987B\u4E0D\u540C\uFF1BLet\u2019s Encrypt \u7684 HTTP-01 \u5165\u53E3\u5FC5\u987B\u4F7F\u7528\u5BBF\u4E3B\u673A 80 \u7AEF\u53E3\u3002",
   deploy_httpsCertificateInvalid: "HTTPS \u8BC1\u4E66\u65E0\u6548\uFF1A\u8BF7\u6838\u5BF9 PEM \u6587\u4EF6\u53EF\u8BFB\u3001\u8BC1\u4E66\u4E0E\u672A\u52A0\u5BC6\u79C1\u94A5\u5339\u914D\u3001\u8BC1\u4E66\u6709\u6548\u671F\u53CA\u57DF\u540D\uFF0C\u7136\u540E\u91CD\u65B0\u6253\u5305\u3002",
@@ -26122,7 +26105,7 @@ function resolveImageReference(reference, source) {
   return `${url2.host}${url2.pathname.replace(/\/$/, "")}/${parts.join("/")}`;
 }
 function systemProxy() {
-  if (process15.platform === "win32") {
+  if (process14.platform === "win32") {
     const script = "$p=Get-ItemProperty -LiteralPath 'HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings'; @{enabled=($p.ProxyEnable -eq 1);server=$p.ProxyServer;bypass=$p.ProxyOverride;pac=$p.AutoConfigURL}|ConvertTo-Json -Compress";
     const value = JSON.parse(execFileSync("powershell.exe", [
       "-NoProfile",
@@ -26141,7 +26124,7 @@ function systemProxy() {
       bypass: value.bypass?.split(";").filter((item) => item !== "<local>").join(",")
     };
   }
-  if (process15.platform === "darwin") {
+  if (process14.platform === "darwin") {
     const output2 = execFileSync("/usr/sbin/scutil", ["--proxy"], { encoding: "utf8", timeout: 5e3 });
     const get = (key) => output2.match(new RegExp(`^\\s*${key}\\s*:\\s*(.+)$`, "m"))?.[1]?.trim();
     if (get("ProxyAutoConfigEnable") === "1" || get("ProxyAutoDiscoveryEnable") === "1")
@@ -26157,7 +26140,7 @@ function resolveDownloadProxy(config2) {
   const mode = config2?.mode ?? "inherit";
   if (!["inherit", "system", "custom", "none"].includes(mode) || config2?.url !== void 0 && mode !== "custom")
     throw new Error(deployM("deploy_downloadInvalid"));
-  const values = mode === "system" ? systemProxy() : mode === "custom" ? { http: config2?.url, https: config2?.url } : mode === "inherit" ? { http: process15.env.HTTP_PROXY ?? process15.env.http_proxy, https: process15.env.HTTPS_PROXY ?? process15.env.https_proxy, bypass: process15.env.NO_PROXY ?? process15.env.no_proxy } : {};
+  const values = mode === "system" ? systemProxy() : mode === "custom" ? { http: config2?.url, https: config2?.url } : mode === "inherit" ? { http: process14.env.HTTP_PROXY ?? process14.env.http_proxy, https: process14.env.HTTPS_PROXY ?? process14.env.https_proxy, bypass: process14.env.NO_PROXY ?? process14.env.no_proxy } : {};
   if (mode === "custom" && !config2?.url)
     throw new Error(deployM("deploy_downloadInvalid"));
   const normalize = (value) => {
@@ -26184,10 +26167,10 @@ function resolveDownloadProxy(config2) {
     https_proxy: https,
     NO_PROXY: bypass,
     no_proxy: bypass,
-    ALL_PROXY: mode === "inherit" ? process15.env.ALL_PROXY ?? process15.env.all_proxy ?? "" : "",
-    all_proxy: mode === "inherit" ? process15.env.ALL_PROXY ?? process15.env.all_proxy ?? "" : "",
-    FTP_PROXY: mode === "inherit" ? process15.env.FTP_PROXY ?? process15.env.ftp_proxy ?? "" : "",
-    ftp_proxy: mode === "inherit" ? process15.env.FTP_PROXY ?? process15.env.ftp_proxy ?? "" : ""
+    ALL_PROXY: mode === "inherit" ? process14.env.ALL_PROXY ?? process14.env.all_proxy ?? "" : "",
+    all_proxy: mode === "inherit" ? process14.env.ALL_PROXY ?? process14.env.all_proxy ?? "" : "",
+    FTP_PROXY: mode === "inherit" ? process14.env.FTP_PROXY ?? process14.env.ftp_proxy ?? "" : "",
+    ftp_proxy: mode === "inherit" ? process14.env.FTP_PROXY ?? process14.env.ftp_proxy ?? "" : ""
   };
 }
 function normalizeProjectName(name) {
@@ -27044,6 +27027,7 @@ var en_US_default2 = {
   crypto_transportBodyLimitInvalid: "Transport plaintext limit must be an integer between 1024 and 67108864 bytes",
   crypto_transportBodyTooLarge: "Encrypted transport payload exceeds the configured byte limit",
   crypto_transportTimeInvalid: "Your device and server clocks may be out of sync, or the request has expired. Enable automatic time synchronization or set your device time manually, then refresh to retry. If this continues, ask an administrator to check the server clock.",
+  crypto_transportTimeResponseInvalid: "Transport time validation response is missing a valid server timestamp",
   crypto_transportTimeInvalidWithServerTime: "Your device and server clocks may be out of sync, or the request has expired. Server time is {serverTime}. Enable automatic time synchronization or set your device time manually, then refresh to retry. If this continues, ask an administrator to check the server clock.",
   crypto_transportTimeConfigInvalid: "Invalid transport time settings. Future clock skew must be an integer from 0 to 300 seconds and request lifetime from 1 to 600 seconds.",
   crypto_transportBodyLimitConflict: "Explicit transport limit {limit} bytes is below the enabled module requirement of {required} bytes; adjust the module budget or explicit limit",
@@ -27106,6 +27090,7 @@ var ja_JP_default2 = {
   crypto_transportBodyLimitInvalid: "\u901A\u4FE1\u5E73\u6587\u306E\u4E0A\u9650\u306F 1024 \u304B\u3089 67108864 \u30D0\u30A4\u30C8\u306E\u6574\u6570\u3067\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044",
   crypto_transportBodyTooLarge: "\u6697\u53F7\u5316\u901A\u4FE1\u306E\u30C7\u30FC\u30BF\u304C\u8A2D\u5B9A\u3055\u308C\u305F\u30D0\u30A4\u30C8\u4E0A\u9650\u3092\u8D85\u3048\u3066\u3044\u307E\u3059",
   crypto_transportTimeInvalid: "\u7AEF\u672B\u3068\u30B5\u30FC\u30D0\u30FC\u306E\u6642\u523B\u304C\u540C\u671F\u3057\u3066\u3044\u306A\u3044\u304B\u3001\u8981\u6C42\u306E\u6709\u52B9\u671F\u9650\u304C\u5207\u308C\u3066\u3044\u307E\u3059\u3002\u7AEF\u672B\u306E\u81EA\u52D5\u6642\u523B\u540C\u671F\u3092\u6709\u52B9\u306B\u3059\u308B\u304B\u3001\u624B\u52D5\u3067\u6642\u523B\u3092\u8A2D\u5B9A\u3057\u3066\u304B\u3089\u3001\u30DA\u30FC\u30B8\u3092\u518D\u8AAD\u307F\u8FBC\u307F\u3057\u3066\u304F\u3060\u3055\u3044\u3002\u89E3\u6D88\u3057\u306A\u3044\u5834\u5408\u306F\u7BA1\u7406\u8005\u306B\u30B5\u30FC\u30D0\u30FC\u306E\u6642\u523B\u78BA\u8A8D\u3092\u4F9D\u983C\u3057\u3066\u304F\u3060\u3055\u3044\u3002",
+  crypto_transportTimeResponseInvalid: "\u6697\u53F7\u5316\u901A\u4FE1\u306E\u6642\u523B\u691C\u8A3C\u5FDC\u7B54\u306B\u6709\u52B9\u306A\u30B5\u30FC\u30D0\u30FC\u6642\u523B\u304C\u3042\u308A\u307E\u305B\u3093",
   crypto_transportTimeInvalidWithServerTime: "\u7AEF\u672B\u3068\u30B5\u30FC\u30D0\u30FC\u306E\u6642\u523B\u304C\u540C\u671F\u3057\u3066\u3044\u306A\u3044\u304B\u3001\u8981\u6C42\u306E\u6709\u52B9\u671F\u9650\u304C\u5207\u308C\u3066\u3044\u307E\u3059\u3002\u30B5\u30FC\u30D0\u30FC\u6642\u523B\u306F {serverTime} \u3067\u3059\u3002\u7AEF\u672B\u306E\u81EA\u52D5\u6642\u523B\u540C\u671F\u3092\u6709\u52B9\u306B\u3059\u308B\u304B\u3001\u624B\u52D5\u3067\u6642\u523B\u3092\u8A2D\u5B9A\u3057\u3066\u304B\u3089\u3001\u30DA\u30FC\u30B8\u3092\u518D\u8AAD\u307F\u8FBC\u307F\u3057\u3066\u304F\u3060\u3055\u3044\u3002\u89E3\u6D88\u3057\u306A\u3044\u5834\u5408\u306F\u7BA1\u7406\u8005\u306B\u30B5\u30FC\u30D0\u30FC\u306E\u6642\u523B\u78BA\u8A8D\u3092\u4F9D\u983C\u3057\u3066\u304F\u3060\u3055\u3044\u3002",
   crypto_transportTimeConfigInvalid: "\u30C8\u30E9\u30F3\u30B9\u30DD\u30FC\u30C8\u306E\u6642\u523B\u8A2D\u5B9A\u304C\u7121\u52B9\u3067\u3059\u3002\u672A\u6765\u65B9\u5411\u306E\u6642\u523B\u5DEE\u306F 0\uFF5E300 \u79D2\u3001\u8981\u6C42\u306E\u6709\u52B9\u671F\u9593\u306F 1\uFF5E600 \u79D2\u306E\u6574\u6570\u3067\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044\u3002",
   crypto_transportBodyLimitConflict: "\u660E\u793A\u3055\u308C\u305F\u8EE2\u9001\u4E0A\u9650 {limit} \u30D0\u30A4\u30C8\u306F\u6709\u52B9\u306A\u30E2\u30B8\u30E5\u30FC\u30EB\u306E\u5FC5\u8981\u91CF {required} \u30D0\u30A4\u30C8\u672A\u6E80\u3067\u3059\u3002\u4E88\u7B97\u307E\u305F\u306F\u4E0A\u9650\u3092\u5909\u66F4\u3057\u3066\u304F\u3060\u3055\u3044",
@@ -27168,6 +27153,7 @@ var zh_CN_default3 = {
   crypto_transportBodyLimitInvalid: "\u4F20\u8F93\u660E\u6587\u5BB9\u91CF\u5FC5\u987B\u662F 1024 \u5230 67108864 \u5B57\u8282\u4E4B\u95F4\u7684\u6574\u6570",
   crypto_transportBodyTooLarge: "\u52A0\u5BC6\u4F20\u8F93\u62A5\u6587\u8D85\u8FC7\u914D\u7F6E\u7684\u5B57\u8282\u4E0A\u9650",
   crypto_transportTimeInvalid: "\u8BBE\u5907\u4E0E\u670D\u52A1\u5668\u65F6\u95F4\u53EF\u80FD\u4E0D\u540C\u6B65\uFF0C\u6216\u8BF7\u6C42\u5DF2\u8FC7\u671F\u3002\u8BF7\u5F00\u542F\u8BBE\u5907\u7684\u81EA\u52A8\u6821\u65F6\u6216\u624B\u5DE5\u4FEE\u6539\u65F6\u95F4\uFF0C\u7136\u540E\u5237\u65B0\u91CD\u8BD5\u3002\u82E5\u4ECD\u5931\u8D25\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458\u68C0\u67E5\u670D\u52A1\u5668\u65F6\u95F4\u3002",
+  crypto_transportTimeResponseInvalid: "\u4F20\u8F93\u52A0\u5BC6\u65F6\u95F4\u6821\u9A8C\u54CD\u5E94\u7F3A\u5C11\u6709\u6548\u7684\u670D\u52A1\u5668\u65F6\u95F4",
   crypto_transportTimeInvalidWithServerTime: "\u8BBE\u5907\u4E0E\u670D\u52A1\u5668\u65F6\u95F4\u53EF\u80FD\u4E0D\u540C\u6B65\uFF0C\u6216\u8BF7\u6C42\u5DF2\u8FC7\u671F\u3002\u670D\u52A1\u5668\u65F6\u95F4\u4E3A {serverTime}\u3002\u8BF7\u5F00\u542F\u8BBE\u5907\u7684\u81EA\u52A8\u6821\u65F6\u6216\u624B\u5DE5\u4FEE\u6539\u65F6\u95F4\uFF0C\u7136\u540E\u5237\u65B0\u91CD\u8BD5\u3002\u82E5\u4ECD\u5931\u8D25\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458\u68C0\u67E5\u670D\u52A1\u5668\u65F6\u95F4\u3002",
   crypto_transportTimeConfigInvalid: "\u4F20\u8F93\u65F6\u95F4\u914D\u7F6E\u65E0\u6548\u3002\u5141\u8BB8\u7684\u672A\u6765\u504F\u5DEE\u987B\u4E3A 0 \u81F3 300 \u79D2\u7684\u6574\u6570\uFF0C\u8BF7\u6C42\u6709\u6548\u671F\u987B\u4E3A 1 \u81F3 600 \u79D2\u7684\u6574\u6570\u3002",
   crypto_transportBodyLimitConflict: "\u663E\u5F0F\u4F20\u8F93\u4E0A\u9650 {limit} \u5B57\u8282\u5C0F\u4E8E\u5DF2\u542F\u7528\u6A21\u5757\u6240\u9700\u7684 {required} \u5B57\u8282\uFF1B\u8BF7\u8C03\u6574\u6A21\u5757\u9884\u7B97\u6216\u663E\u5F0F\u4E0A\u9650",
@@ -27593,29 +27579,6 @@ function required2(name, defaultValue, kind) {
     }
   ]
 });
-var nameSchema = external_exports.string().regex(/^[a-z0-9][\w.-]{0,127}$/i);
-var passwordSchema = external_exports.string().min(1).max(1024).refine((value) => Buffer.from(value, "utf8").toString("utf8") === value && [...value].every((character) => character.codePointAt(0) >= 32 && character.codePointAt(0) !== 127));
-external_exports.strictObject({
-  version: external_exports.literal(1),
-  projectName: nameSchema,
-  credentials: external_exports.strictObject({
-    DB_PASSWORD: passwordSchema.optional(),
-    STORAGE_PASSWORD: passwordSchema.optional(),
-    LDAP_PASSWORD: passwordSchema.optional()
-  }),
-  services: external_exports.array(external_exports.strictObject({
-    service: external_exports.enum(["db", "vecdb", "storage", "ldap"]),
-    container: nameSchema,
-    kind: external_exports.enum(["postgresql", "mysql", "s3", "ldap"]),
-    volumes: external_exports.array(nameSchema).min(1).max(8),
-    username: external_exports.string().min(1).max(128).default("hai"),
-    database: external_exports.string().min(1).max(128).default("hai"),
-    bucket: external_exports.string().regex(/^[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]$/).default("hai"),
-    accessKeyId: external_exports.string().min(1).max(128).default("hai-storage"),
-    region: external_exports.string().regex(/^[a-z0-9-]+$/).default("us-east-1"),
-    bindDn: external_exports.string().min(1).max(512).default("cn=admin,dc=example,dc=org")
-  })).min(1).max(4)
-});
 function resolveCoreInputs(environment) {
   const resolved = core.config.resolve({
     name: "core",
@@ -27634,7 +27597,7 @@ function resolveCoreInputs(environment) {
   );
 }
 function nativeNameEnvironment(envDir) {
-  let inputs = process15.env;
+  let inputs = process14.env;
   let selectedMode;
   if (envDir) {
     selectedMode = /** @type {string | undefined} */
@@ -27688,7 +27651,7 @@ async function resolveBuildDownloads(directory, options) {
   const savedImage = object2(sources.image);
   const savedNpm = object2(sources.npm);
   const savedProxy = object2(build.proxy);
-  const interactive = !!process15.stdin.isTTY && !options.yes;
+  const interactive = !!process14.stdin.isTTY && !options.yes;
   const choose = async (message, values) => {
     const answer = await prompts({
       type: "select",
@@ -27852,7 +27815,7 @@ async function preflightDownloadProxy(runtime, proxy, report = writeCliMessage)
   const environment = resolveDownloadProxy(proxy);
   for (const value of new Set([environment.HTTP_PROXY, environment.HTTPS_PROXY].filter(Boolean))) {
     const url2 = new URL(value);
-    await new Promise((resolve17, reject) => {
+    await new Promise((resolve15, reject) => {
       const socket = connect({
         host: url2.hostname.replace(/^\[|\]$/g, ""),
         port: Number(url2.port || (url2.protocol === "https:" ? 443 : 80))
@@ -27860,7 +27823,7 @@ async function preflightDownloadProxy(runtime, proxy, report = writeCliMessage)
       socket.setTimeout(3e3);
       socket.once("connect", () => {
         socket.destroy();
-        resolve17();
+        resolve15();
       });
       const fail = () => {
         socket.destroy();
@@ -28125,16 +28088,16 @@ async function buildContainerAndroid(root, apps, options, publish) {
   let keystore;
   if (!debug) {
     const values = {
-      HAI_ANDROID_STORE_PASSWORD: process15.env.HAI_ANDROID_STORE_PASSWORD,
-      HAI_ANDROID_KEY_ALIAS: process15.env.HAI_ANDROID_KEY_ALIAS,
-      HAI_ANDROID_KEY_PASSWORD: process15.env.HAI_ANDROID_KEY_PASSWORD
+      HAI_ANDROID_STORE_PASSWORD: process14.env.HAI_ANDROID_STORE_PASSWORD,
+      HAI_ANDROID_KEY_ALIAS: process14.env.HAI_ANDROID_KEY_ALIAS,
+      HAI_ANDROID_KEY_PASSWORD: process14.env.HAI_ANDROID_KEY_PASSWORD
     };
     for (const [key, value] of Object.entries(values)) {
       if (!value)
         throw new Error(cliM("cli_build_android_signing"));
       signing[key] = value;
     }
-    const path10 = process15.env.HAI_ANDROID_KEYSTORE;
+    const path10 = process14.env.HAI_ANDROID_KEYSTORE;
     if (!path10 || !existsSync(resolve(root, path10)) || !statSync(resolve(root, path10)).isFile())
       throw new Error(cliM("cli_build_android_signing"));
     keystore = resolve(root, path10);
@@ -28151,7 +28114,7 @@ async function buildContainerAndroid(root, apps, options, publish) {
   const proxyArgs = buildProxyArguments(downloads.proxy, runtime, network);
   const engineArgs = [
     ...network === void 0 ? [] : ["--network", network],
-    ...runtime === "docker" && process15.platform === "linux" && network !== "host" ? ["--add-host", "host.docker.internal:host-gateway"] : [],
+    ...runtime === "docker" && process14.platform === "linux" && network !== "host" ? ["--add-host", "host.docker.internal:host-gateway"] : [],
     ...runtime === "podman" && downloads.proxy.mode === "none" ? ["--http-proxy=false"] : []
   ];
   try {
@@ -28202,8 +28165,8 @@ async function buildContainerAndroid(root, apps, options, publish) {
         argument.slice(equals + 1)
       ];
     }));
-    const uid = process15.getuid?.();
-    const gid = process15.getgid?.();
+    const uid = process14.getuid?.();
+    const gid = process14.getgid?.();
     const userArgs = uid === void 0 || gid === void 0 ? [] : [
       ...runtime === "podman" && uid !== 0 ? ["--userns=keep-id"] : [],
       "--user",
@@ -28296,7 +28259,7 @@ async function buildContainerAndroid(root, apps, options, publish) {
 }
 function gradleCommand(debug) {
   const task = debug ? "assembleDebug" : "assembleRelease";
-  return process15.platform === "win32" ? [
+  return process14.platform === "win32" ? [
     "cmd.exe",
     "/d",
     "/c",
@@ -28317,7 +28280,7 @@ function isAppPackage(path10, platform, debug) {
   return parts.at(-2) === (debug ? "debug" : "release") && path10.endsWith(".apk") && !path10.endsWith("-unsigned.apk");
 }
 async function buildMobileApp(root, directories, platform, run2, debug = false, runGradle) {
-  if (!directories.length || platform === "ios" && process15.platform !== "darwin")
+  if (!directories.length || platform === "ios" && process14.platform !== "darwin")
     throw new Error(cliM("cli_build_app_platform"));
   const outputs = [];
   for (const item of directories) {
@@ -28680,15 +28643,15 @@ async function forwardWindowsBuildOutput(source, destination) {
 
 // src/commands/cli-build.ts
 async function run(command, args, cwd, quiet = false, identity, compileEnvironment, progressOnStderr = false) {
-  await new Promise((resolve17, reject) => {
-    const env = Object.fromEntries(Object.entries(process15.env).filter(([key]) => !/^(?:HAI_|PUBLIC_|VITE_)/.test(key)));
+  await new Promise((resolve15, reject) => {
+    const env = Object.fromEntries(Object.entries(process14.env).filter(([key]) => !/^(?:HAI_|PUBLIC_|VITE_)/.test(key)));
     Object.assign(env, compileEnvironment);
     if (identity) {
       env.HAI_BUILD_ID = identity.buildId;
       env.HAI_BUILD_COMMIT = identity.commit;
     }
     env.NODE_ENV = "production";
-    if (process15.platform === "win32") {
+    if (process14.platform === "win32") {
       env.npm_config_reporter = "append-only";
       env.pnpm_config_reporter = "append-only";
     }
@@ -28696,8 +28659,8 @@ async function run(command, args, cwd, quiet = false, identity, compileEnvironme
     if (env.CI === "1" || env.CI === "0") {
       env.CI = env.CI === "1" ? "true" : "false";
     }
-    const windowsOutput = !quiet && process15.platform === "win32";
-    const stdio = quiet ? "ignore" : windowsOutput ? ["inherit", "pipe", "pipe"] : progressOnStderr ? ["inherit", process15.stderr, "inherit"] : "inherit";
+    const windowsOutput = !quiet && process14.platform === "win32";
+    const stdio = quiet ? "ignore" : windowsOutput ? ["inherit", "pipe", "pipe"] : progressOnStderr ? ["inherit", process14.stderr, "inherit"] : "inherit";
     const child = spawn(command, args, {
       cwd,
       env,
@@ -28708,14 +28671,14 @@ async function run(command, args, cwd, quiet = false, identity, compileEnvironme
     let output2 = Promise.resolve();
     if (windowsOutput && child.stdout && child.stderr) {
       output2 = Promise.all([
-        forwardWindowsBuildOutput(child.stdout, progressOnStderr ? process15.stderr : process15.stdout),
-        forwardWindowsBuildOutput(child.stderr, process15.stderr)
+        forwardWindowsBuildOutput(child.stdout, progressOnStderr ? process14.stderr : process14.stdout),
+        forwardWindowsBuildOutput(child.stderr, process14.stderr)
       ]).then(() => void 0);
       void output2.catch(() => child.kill());
     }
     child.once("error", reject);
     child.once(windowsOutput && child.stdout && child.stderr ? "close" : "exit", (code) => {
-      void output2.then(() => code === 0 ? resolve17() : reject(new Error(cliM("cli_build_failed", {
+      void output2.then(() => code === 0 ? resolve15() : reject(new Error(cliM("cli_build_failed", {
         params: {
           command,
           code: String(code)
@@ -28725,12 +28688,12 @@ async function run(command, args, cwd, quiet = false, identity, compileEnvironme
   });
 }
 async function pnpm(args, cwd, identity, compileEnvironment) {
-  const entry = process15.env.npm_execpath;
+  const entry = process14.env.npm_execpath;
   if (entry && /(?:^|[/\\])pnpm(?:-native)?(?:\.exe|\.[cm]?js)?$/i.test(entry)) {
-    return /\.[cm]?js$/i.test(entry) ? run(process15.execPath, [entry, ...args], cwd, false, identity, compileEnvironment) : run(entry, args, cwd, false, identity, compileEnvironment);
+    return /\.[cm]?js$/i.test(entry) ? run(process14.execPath, [entry, ...args], cwd, false, identity, compileEnvironment) : run(entry, args, cwd, false, identity, compileEnvironment);
   }
-  if (process15.platform === "win32") {
-    const directories = (process15.env.PATH ?? "").split(";");
+  if (process14.platform === "win32") {
+    const directories = (process14.env.PATH ?? "").split(";");
     for (const directory of directories) {
       const executable = join(directory, "pnpm.exe");
       if (existsSync(executable))
@@ -28738,7 +28701,7 @@ async function pnpm(args, cwd, identity, compileEnvironment) {
       for (const relative9 of ["node_modules/pnpm/bin/pnpm.cjs", "pnpm.cjs"]) {
         const candidate = join(directory, relative9);
         if (existsSync(candidate))
-          return run(process15.execPath, [candidate, ...args], cwd, false, identity, compileEnvironment);
+          return run(process14.execPath, [candidate, ...args], cwd, false, identity, compileEnvironment);
       }
     }
     throw new Error(cliM("cli_build_use_pnpm"));
@@ -28746,8 +28709,8 @@ async function pnpm(args, cwd, identity, compileEnvironment) {
   return run("pnpm", args, cwd, false, identity, compileEnvironment);
 }
 function staticCompileEnvironment(target) {
-  const flag = process15.env.HAI_BUILD_STATIC;
-  const base = process15.env.PUBLIC_BASE_PATH;
+  const flag = process14.env.HAI_BUILD_STATIC;
+  const base = process14.env.PUBLIC_BASE_PATH;
   if (flag !== void 0 && flag !== "" && flag !== "0" && flag !== "1")
     throw new Error(cliM("cli_build_static_flag"));
   if (base && (!/^\/[\w.-]+(?:\/[\w.-]+)*$/.test(base) || base.split("/").some((segment) => segment === "." || segment === "..")))
@@ -28869,7 +28832,7 @@ async function buildRuntime(cwd, choice) {
   throw new Error(cliM("cli_build_runtime_missing"));
 }
 async function buildCommand(options) {
-  const directory = resolve(options.cwd ?? process15.cwd());
+  const directory = resolve(options.cwd ?? process14.cwd());
   const target = options.target ?? "compile";
   const concurrency = Number(options.concurrency ?? 2);
   if (![1, 2].includes(concurrency))
@@ -28934,9 +28897,9 @@ async function buildCommand(options) {
   }
   if (target === "desktop") {
     const platforms = { win32: "windows", linux: "linux", darwin: "macos" };
-    const host = platforms[process15.platform];
+    const host = platforms[process14.platform];
     const platform = options.platform ?? host;
-    const arch = options.arch ?? process15.arch;
+    const arch = options.arch ?? process14.arch;
     if (!platform || platform !== host || !["x64", "arm64"].includes(arch))
       throw new Error(cliM("cli_build_native_host"));
     if (!config2.desktop?.length)
@@ -28947,7 +28910,7 @@ async function buildCommand(options) {
     const nativeEnvironment = nativeNameEnvironment(cwd);
     for (const item of config2.desktop) {
       const directory2 = nativeProjectDirectory(cwd, item);
-      const cargo = resolve(directory2, "src-tauri", process15.env.CARGO_TARGET_DIR || "target");
+      const cargo = resolve(directory2, "src-tauri", process14.env.CARGO_TARGET_DIR || "target");
       const output2 = join(cargo, rustTarget, debug ? "debug" : "release", "bundle");
       const bundlesOnDisk = () => nativeFiles(output2, (path10, isDirectory) => isDirectory ? platform === "macos" && path10.endsWith(".app") : platform === "windows" ? path10.endsWith(".exe") : platform === "macos" ? path10.endsWith(".dmg") : /\.(?:deb|AppImage)$/.test(path10));
       const before = bundlesOnDisk();
@@ -28987,7 +28950,7 @@ async function buildCommand(options) {
   if (selected && (selected.some((name) => !config2.images.some((image) => image.name === name)) || new Set(selected).size !== selected.length))
     throw new Error(cliM("cli_build_selection_invalid"));
   const images = config2.images.filter((image) => !selected || selected.includes(image.name));
-  const webBasePath = compileEnvironment.PUBLIC_BASE_PATH;
+  const webBasePath = compileEnvironment.PUBLIC_BASE_PATH ?? "";
   if (webBasePath && !config2.images.some((image) => image.name === "web"))
     throw new Error(cliM("cli_build_base_requires_web"));
   for (const image of images) {
@@ -29003,7 +28966,8 @@ async function buildCommand(options) {
     resolve(cwd, image.dockerfile)
   ]);
   const artifact = {
-    version: 4,
+    version: 5,
+    webBasePath,
     primaryService: config2.images.some((image) => image.name === "serv") ? "serv" : "web",
     appVersion,
     buildId,
@@ -29018,12 +28982,8 @@ async function buildCommand(options) {
   const downloads = await resolveBuildDownloads(cwd, options.json ? { ...options, yes: true } : options);
   for (const image of images) validateDownloadDockerfile(resolve(cwd, image.dockerfile), downloads);
   const runtime = await buildRuntime(cwd, options.runtime);
-  await preflightDownloadProxy(runtime, downloads.proxy, options.json ? (message) => process15.stderr.write(`${message}
+  await preflightDownloadProxy(runtime, downloads.proxy, options.json ? (message) => process14.stderr.write(`${message}
 `) : void 0);
-  if (webBasePath) {
-    artifact.version = 5;
-    artifact.webBasePath = webBasePath;
-  }
   for (const image of config2.images) {
     if (image.containerPort !== void 0) {
       artifact[image.name === "serv" ? "servContainerPort" : "webContainerPort"] = image.containerPort;
@@ -29049,8 +29009,8 @@ async function buildCommand(options) {
         "-t",
         imageRef
       ];
-      const testRun = process15.env.HAI_TEST_IMAGE_RUN;
-      const testLedger = process15.env.HAI_TEST_IMAGE_LEDGER;
+      const testRun = process14.env.HAI_TEST_IMAGE_RUN;
+      const testLedger = process14.env.HAI_TEST_IMAGE_LEDGER;
       if (testLedger && /^[a-f0-9-]{36}$/.test(testRun ?? "")) {
         const label = `org.h-ai.test.image-run=${testRun}`;
         args.push("--label", label);
@@ -29064,7 +29024,7 @@ async function buildCommand(options) {
       for (const match of dockerfile.matchAll(/^ARG (HAI_(?:NODE|NGINX)_IMAGE)=(\S+)\s*$/gm))
         args.push("--build-arg", `${match[1]}=${resolveImageReference(match[2], downloads.imageSource)}`);
       args.push("--build-arg", `HAI_NPM_REGISTRY=${downloads.npmRegistry}`, ...buildProxyArguments(downloads.proxy, runtime, options.network));
-      if (runtime === "docker" && process15.platform === "linux" && options.network !== "host")
+      if (runtime === "docker" && process14.platform === "linux" && options.network !== "host")
         args.push("--add-host", "host.docker.internal:host-gateway");
       if (options.network !== void 0)
         args.push("--network", options.network);
@@ -29116,7 +29076,7 @@ async function buildCommand(options) {
 `);
     renameSync(join(parent, `latest-${buildId}`), join(parent, "latest"));
     if (options.json) {
-      process15.stdout.write(`${JSON.stringify({
+      process14.stdout.write(`${JSON.stringify({
         schemaVersion: 1,
         artifactDir: output2,
         manifestPath: join(output2, "manifest.json"),
@@ -29140,30 +29100,6 @@ async function buildCommand(options) {
     rmSync(staging, { recursive: true, force: true });
   }
 }
-async function deploySecretsCommand(directory, options) {
-  if (!options.import || !["docker", "podman"].includes(options.runtime ?? "docker"))
-    throw new Error(cliM("cli_deploy_secrets_options"));
-  const cwd = resolve(options.cwd ?? process15.cwd());
-  const local = createRequire(resolve(cwd, "package.json"));
-  let module;
-  try {
-    module = await import(pathToFileURL(local.resolve("@h-ai/deploy")).href);
-  } catch {
-    throw new Error(cliM("cli_deploy_module_missing"));
-  }
-  const result = await module.importDeploymentSecrets({
-    directory: resolve(cwd, directory),
-    inputFile: resolve(cwd, options.import),
-    runtime: options.runtime === "podman" ? "podman" : "docker",
-    dryRun: options.apply !== true
-  });
-  if (!result.success) {
-    const context = result.error.ext;
-    throw new Error(`${result.error.message}
-${JSON.stringify({ phase: context?.phase, state: context?.state })}`);
-  }
-  writeCliMessage(JSON.stringify(result.data, null, 2));
-}
 var s3FieldPrompts = {
   endpoint: "cli_deploy_s3_endpoint",
   bucket: "cli_deploy_s3_bucket",
@@ -29748,14 +29684,14 @@ async function configureDeployHttps(module, config2, environment, nonInteractive
 }
 async function deployCommand(options) {
   const spinner = ora();
-  const cwd = options.cwd ?? process15.cwd();
+  const cwd = options.cwd ?? process14.cwd();
   let appDir = resolve(cwd, options.appDir ?? ".");
   let closeDeploy = null;
   let restoreProjectLogger;
   let configureProjectLogger;
-  const originalEnv = { ...process15.env };
+  const originalEnv = { ...process14.env };
   const previousLogLevel = core.logger.getLevel();
-  const initialLevel = options.plan ? "fatal" : LogLevelSchema.safeParse(process15.env.HAI_CORE_LOGGING_LEVEL).data;
+  const initialLevel = options.plan ? "fatal" : LogLevelSchema.safeParse(process14.env.HAI_CORE_LOGGING_LEVEL).data;
   if (initialLevel)
     core.logger.setLevel(initialLevel);
   try {
@@ -29772,7 +29708,7 @@ async function deployCommand(options) {
       throw new Error(cliM("cli_build_selection_invalid"));
     let environmentName = options.env;
     if (!environmentName) {
-      if (!process15.stdin.isTTY)
+      if (!process14.stdin.isTTY)
         throw new Error(cliM("cli_deploy_environment_hint"));
       const answer = await prompts({
         type: "text",
@@ -29784,7 +29720,7 @@ async function deployCommand(options) {
       if (!environmentName)
         throw new Error(cliM("cli_deploy_cancelled"));
     }
-    if (!options.plan && !options.yes && !process15.stdin.isTTY)
+    if (!options.plan && !options.yes && !process14.stdin.isTTY)
       throw new Error(cliM("cli_deploy_environment_hint"));
     let deployModule;
     try {
@@ -29860,7 +29796,7 @@ async function deployCommand(options) {
       if (options.build || options.bundleOnly || options.output || options.imageSource !== void 0 || options.imageMirrors !== void 0 || options.npmSource !== void 0 || options.npmRegistry !== void 0 || options.proxyMode !== void 0 || options.proxyUrl !== void 0 || options.proxyBypass !== void 0 || options.httpProxy === false)
         throw new Error(cliM("cli_deploy_plan_options"));
       const loaded = deployModule.loadDeploymentConfig("deploy", buildFile, {
-        ...process15.env,
+        ...process14.env,
         ...environment.data.values
       });
       if (!loaded.success)
@@ -29888,8 +29824,8 @@ async function deployCommand(options) {
       writeCliMessage(JSON.stringify(plan.data, null, 2));
       return;
     }
-    Object.assign(process15.env, environment.data.values);
-    const level = LogLevelSchema.safeParse(process15.env.HAI_CORE_LOGGING_LEVEL);
+    Object.assign(process14.env, environment.data.values);
+    const level = LogLevelSchema.safeParse(process14.env.HAI_CORE_LOGGING_LEVEL);
     if (level.success) {
       core.logger.setLevel(level.data);
       configureProjectLogger?.(level.data);
@@ -29915,7 +29851,7 @@ async function deployCommand(options) {
         params: { path: configPath }
       }));
     }
-    const loadedConfig = deployModule.loadDeploymentConfig("deploy", configPath, process15.env);
+    const loadedConfig = deployModule.loadDeploymentConfig("deploy", configPath, process14.env);
     if (!loadedConfig.success)
       throw new Error(loadedConfig.error.message);
     const deployConfig = loadedConfig.data;
@@ -30048,15 +29984,15 @@ async function deployCommand(options) {
     if (options.bundleOnly)
       await configureDeployTarget(deployModule, deployConfig, environment.data, options.yes, true);
     await configureDeployHttps(deployModule, deployConfig, environment.data, options.yes, selectedServices !== void 0);
-    for (const key of Object.keys(process15.env)) {
+    for (const key of Object.keys(process14.env)) {
       if (originalEnv[key] === void 0)
-        delete process15.env[key];
+        delete process14.env[key];
     }
-    Object.assign(process15.env, originalEnv);
+    Object.assign(process14.env, originalEnv);
     const refreshed = deployModule.loadDeploymentEnvironment({ environment: environment.data.environment, envDir: environment.data.envDir });
     if (!refreshed.success)
       throw new Error(refreshed.error.message);
-    Object.assign(process15.env, refreshed.data.values);
+    Object.assign(process14.env, refreshed.data.values);
     spinner.start(cliM("cli_deploy_initializing"));
     const validatedConfig = deployModule.DeployConfigSchema.safeParse(deployConfig);
     if (!validatedConfig.success) {
@@ -30164,14 +30100,14 @@ async function deployCommand(options) {
         await closeDeploy();
       } catch (error62) {
         writeCliError("Failed to close deploy module", error62);
-        process15.exitCode = 1;
+        process14.exitCode = 1;
       }
     }
-    for (const key of Object.keys(process15.env)) {
+    for (const key of Object.keys(process14.env)) {
       if (originalEnv[key] === void 0)
-        delete process15.env[key];
+        delete process14.env[key];
     }
-    Object.assign(process15.env, originalEnv);
+    Object.assign(process14.env, originalEnv);
     core.logger.setLevel(previousLogLevel);
     restoreProjectLogger?.();
   }
@@ -30379,11 +30315,11 @@ var ec = [
   "invalid zip data"
   // determined by unknown compression method
 ];
-var err29 = function(ind, msg, nt) {
+var err28 = function(ind, msg, nt) {
   var e = new Error(msg || ec[ind]);
   e.code = ind;
   if (Error.captureStackTrace)
-    Error.captureStackTrace(e, err29);
+    Error.captureStackTrace(e, err28);
   if (!nt)
     throw e;
   return e;
@@ -30416,7 +30352,7 @@ var inflt = function(dat, st, buf, dict) {
         var s = shft(pos) + 4, l = dat[s - 4] | dat[s - 3] << 8, t = s + l;
         if (t > sl) {
           if (noSt)
-            err29(0);
+            err28(0);
           break;
         }
         if (resize)
@@ -30462,10 +30398,10 @@ var inflt = function(dat, st, buf, dict) {
         lm = hMap(lt, lbt);
         dm = hMap(dt, dbt);
       } else
-        err29(1);
+        err28(1);
       if (pos > tbts) {
         if (noSt)
-          err29(0);
+          err28(0);
         break;
       }
     }
@@ -30478,11 +30414,11 @@ var inflt = function(dat, st, buf, dict) {
       pos += c & 15;
       if (pos > tbts) {
         if (noSt)
-          err29(0);
+          err28(0);
         break;
       }
       if (!c)
-        err29(2);
+        err28(2);
       if (sym < 256)
         buf[bt++] = sym;
       else if (sym == 256) {
@@ -30497,7 +30433,7 @@ var inflt = function(dat, st, buf, dict) {
         }
         var d = dm[bits16(dat, pos) & dms], dsym = d >> 4;
         if (!d)
-          err29(3);
+          err28(3);
         pos += d & 15;
         var dt = fd[dsym];
         if (dsym > 3) {
@@ -30506,7 +30442,7 @@ var inflt = function(dat, st, buf, dict) {
         }
         if (pos > tbts) {
           if (noSt)
-            err29(0);
+            err28(0);
           break;
         }
         if (resize)
@@ -30515,7 +30451,7 @@ var inflt = function(dat, st, buf, dict) {
         if (bt < dt) {
           var shift = dl - dt, dend = Math.min(dt, end);
           if (shift + bt < 0)
-            err29(3);
+            err28(3);
           for (; bt < dend; ++bt)
             buf[bt] = dict[shift + bt];
         }
@@ -30605,7 +30541,7 @@ function strFromU8(dat, latin1) {
   } else {
     var _a4 = dutf8(dat), s = _a4.s, r = _a4.r;
     if (r.length)
-      err29(8);
+      err28(8);
     return s;
   }
 }
@@ -30632,7 +30568,7 @@ var z64hs = function(d, b, l, z2, sc, su, off) {
       }
     }
     if (z2 < 2)
-      err29(13);
+      err28(13);
   }
   return [sc, su, off, 0];
 };
@@ -30641,7 +30577,7 @@ function unzipSync(data, opts) {
   var e = data.length - 22;
   for (; b4(data, e) != 101010256; --e) {
     if (!e || data.length - e > 65558)
-      err29(13);
+      err28(13);
   }
   var c = b2(data, e + 8);
   if (!c)
@@ -30665,7 +30601,7 @@ function unzipSync(data, opts) {
       else if (c_2 == 8)
         files[fn] = inflateSync(data.subarray(b, b + sc), { out: new u8(su) });
       else
-        err29(14, "unknown compression type " + c_2);
+        err28(14, "unknown compression type " + c_2);
     }
   }
   return files;
@@ -31056,11 +30992,11 @@ async function startFeedbackViewer(bundle, options = {}) {
       response.setHeader("Content-Disposition", "attachment");
     response.writeHead(200).end(bytes);
   });
-  await new Promise((resolve17, reject) => {
+  await new Promise((resolve15, reject) => {
     server.once("error", reject);
     server.listen(port, "127.0.0.1", () => {
       server.removeListener("error", reject);
-      resolve17();
+      resolve15();
     });
   });
   const address = server.address();
@@ -31068,8 +31004,8 @@ async function startFeedbackViewer(bundle, options = {}) {
     throw new Error(cliM("cli_feedback_invalidOptions"));
   return {
     url: `http://127.0.0.1:${address.port}${prefix}viewer/index.html`,
-    close: () => new Promise((resolve17, reject) => {
-      server.close((error62) => error62 ? reject(error62) : resolve17());
+    close: () => new Promise((resolve15, reject) => {
+      server.close((error62) => error62 ? reject(error62) : resolve15());
       server.closeAllConnections();
     })
   };
@@ -31115,7 +31051,7 @@ async function feedbackCommand(action, bundlePath, options = {}) {
   ].includes(action)) {
     throw new Error(cliM("cli_feedback_invalidAction"));
   }
-  const filePath = path2.resolve(options.cwd ?? process15.cwd(), bundlePath);
+  const filePath = path2.resolve(options.cwd ?? process14.cwd(), bundlePath);
   const result = await readFeedbackBundle(readBundleFile(filePath));
   if (!result.success)
     throw new Error(result.error.message);
@@ -31146,14 +31082,14 @@ async function feedbackCommand(action, bundlePath, options = {}) {
   writeCliMessage(cliM("cli_feedback_viewerStarted", {
     params: { url: viewer.url }
   }));
-  await new Promise((resolve17, reject) => {
+  await new Promise((resolve15, reject) => {
     const stop = () => {
-      process15.off("SIGINT", stop);
-      process15.off("SIGTERM", stop);
-      viewer.close().then(resolve17, reject);
+      process14.off("SIGINT", stop);
+      process14.off("SIGTERM", stop);
+      viewer.close().then(resolve15, reject);
     };
-    process15.once("SIGINT", stop);
-    process15.once("SIGTERM", stop);
+    process14.once("SIGINT", stop);
+    process14.once("SIGTERM", stop);
   });
 }
 function appendAt(source, marker, entry) {
@@ -31880,7 +31816,7 @@ async function initProject(options) {
       }
     }));
     if (project.isHaiProject) {
-      const { generateProjectAiSupport, resolveSkillNamesForPackages } = await import('./cli-skill-templates-D6S2OQ6X.js');
+      const { generateProjectAiSupport, resolveSkillNamesForPackages } = await import('./cli-skill-templates-JKF6E3PI.js');
       const generatedFiles = await generateProjectAiSupport(cwd, resolveSkillNamesForPackages(project.haiPackages), {
         overwriteSkills: false,
         overwriteBridgeFiles: false
@@ -31975,17 +31911,6 @@ async function initProject(options) {
 function object3(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : {};
 }
-function declaresValueExport(source, name) {
-  const declarations = source.replace(/\/\*[\s\S]*?\*\/|\/\/[^\n]*|"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|`(?:\\.|[^`\\])*`/g, " ");
-  if (new RegExp(`\\bexport\\s+(?:declare\\s+)?(?:function|const|let|var)\\s+${name}\\b`).test(declarations))
-    return true;
-  return [
-    ...declarations.matchAll(/\bexport\s*\{([^}]+)\}/g)
-  ].some((match) => match[1].split(",").some((item) => {
-    const value = item.trim();
-    return !value.startsWith("type ") && value.split(/\s+as\s+/).at(-1)?.trim() === name;
-  }));
-}
 function tarFiles(bytes) {
   const tar = gunzipSync(bytes, { maxOutputLength: 64 * 1024 * 1024 });
   const files = /* @__PURE__ */ new Map();
@@ -32020,7 +31945,7 @@ async function inspectFrameworkUpgrade(directory, version2) {
     for await (const manifest of glob(`${pattern}/package.json`, { cwd: root, exclude })) {
       const location = realpathSync(dirname(join(root, manifest)));
       const fromRoot = relative(root, location);
-      if (!isAbsolute(fromRoot) && fromRoot !== ".." && !fromRoot.startsWith(`..${process15.platform === "win32" ? "\\" : "/"}`)) {
+      if (!isAbsolute(fromRoot) && fromRoot !== ".." && !fromRoot.startsWith(`..${process14.platform === "win32" ? "\\" : "/"}`)) {
         directories.add(location);
       }
     }
@@ -32082,11 +32007,10 @@ async function inspectFrameworkUpgrade(directory, version2) {
       });
     }
   }
-  const registry2 = new URL(process15.env.npm_config_registry ?? "https://registry.npmjs.org/");
+  const registry2 = new URL(process14.env.npm_config_registry ?? "https://registry.npmjs.org/");
   if (registry2.username || registry2.password || registry2.protocol !== "https:")
     throw new Error(cliM("cli_upgrade_registry"));
   const releases = [];
-  const migrationPreflight = [];
   const skills = [];
   const pending = [...packages];
   for (let index = 0; index < pending.length; index++) {
@@ -32141,14 +32065,6 @@ async function inspectFrameworkUpgrade(directory, version2) {
         const manifest = files.get("package/package.json");
         if (!manifest || object3(JSON.parse(new TextDecoder().decode(manifest))).version !== version2 || !files.has("package/dist/index.js"))
           throw new Error("Incomplete artifact");
-        const migration = {
-          "@h-ai/iam": "migrateIam",
-          "@h-ai/reach": "migrateReach",
-          "@h-ai/scheduler": "migrateScheduler",
-          "@h-ai/audit": "migrateAudit"
-        }[name];
-        if (migration && declaresValueExport(new TextDecoder().decode(files.get("package/dist/index.d.ts")), migration) && declaresValueExport(new TextDecoder().decode(files.get("package/dist/index.js")), migration))
-          migrationPreflight.push(`${migration}({ dryRun: true })`);
         if (name === "@h-ai/cli") {
           if (!files.has("package/templates/skills/hai-feedback/SKILL.md"))
             throw new Error("Skills missing");
@@ -32201,22 +32117,14 @@ async function inspectFrameworkUpgrade(directory, version2) {
           ...Object.keys(object3(object3(rootManifest.pnpm).patchedDependencies))
         ])
       ]
-    },
-    migration: {
-      preflight: migrationPreflight,
-      inspectModuleReadmes: true,
-      exclusiveAccess: true,
-      backup: ["database", "shared-session-cache"],
-      rollback: "restore-compatible-database-and-binaries",
-      sessions: "legacy-credential-sessions-require-login"
     }
   };
 }
 async function upgradeCommand(version2, options = {}) {
-  const report = await inspectFrameworkUpgrade(options.cwd ?? process15.cwd(), version2);
+  const report = await inspectFrameworkUpgrade(options.cwd ?? process14.cwd(), version2);
   writeCliMessage(JSON.stringify(report, null, 2));
   if (!report.releaseComplete)
-    process15.exitCode = 1;
+    process14.exitCode = 1;
 }
 
 // src/cli-main.ts
@@ -32241,7 +32149,7 @@ cli.command("create [name]", cliM("cli_help_create")).option("--type <type>", cl
       cwd: options.cwd
     });
   } catch {
-    process15.exitCode = 1;
+    process14.exitCode = 1;
   }
 });
 cli.command("add [module]", cliM("cli_help_add")).option("--no-install", cliM("cli_help_noInstall")).action(async (module, options) => {
@@ -32253,7 +32161,7 @@ cli.command("add [module]", cliM("cli_help_add")).option("--no-install", cliM("c
       cwd: options.cwd
     });
   } catch {
-    process15.exit(1);
+    process14.exit(1);
   }
 });
 cli.command("init", cliM("cli_help_init")).option("-f, --force", cliM("cli_help_forceConfig")).action(async (options) => {
@@ -32264,7 +32172,7 @@ cli.command("init", cliM("cli_help_init")).option("-f, --force", cliM("cli_help_
       cwd: options.cwd
     });
   } catch {
-    process15.exit(1);
+    process14.exit(1);
   }
 });
 cli.command("generate [type] [name]", cliM("cli_help_generate")).option("-w, --workspace <name>", cliM("cli_help_workspace")).alias("g").option("-o, --output <path>", cliM("cli_help_output")).option("-f, --force", cliM("cli_help_force")).action(async (type, name, options) => {
@@ -32281,7 +32189,7 @@ cli.command("generate [type] [name]", cliM("cli_help_generate")).option("-w, --w
       cwd: options.cwd
     });
   } catch {
-    process15.exit(1);
+    process14.exit(1);
   }
 });
 cli.command("build", cliM("cli_help_build")).option("--target <target>", cliM("cli_help_target")).option("--json", cliM("cli_help_buildJson")).option("--images <names>", cliM("cli_help_images")).option("--concurrency <count>", cliM("cli_help_buildConcurrency")).option("--runtime <runtime>", cliM("cli_help_buildRuntime")).option("--network <network>", cliM("cli_help_buildNetwork")).option("--platform <platform>", cliM("cli_help_platform")).option("--arch <arch>", cliM("cli_help_arch")).option("--debug", cliM("cli_help_buildDebug")).option("--no-http-proxy", cliM("cli_help_noHttpProxy")).option("-y, --yes", cliM("cli_help_deployYes")).option("--image-source <source>", cliM("cli_help_imageSource")).option("--image-mirrors <mappings>", cliM("cli_help_imageMirrors")).option("--npm-source <source>", cliM("cli_help_npmSource")).option("--npm-registry <url>", cliM("cli_help_npmRegistry")).option("--proxy-mode <mode>", cliM("cli_help_proxyMode")).option("--proxy-url <url>", cliM("cli_help_proxyUrl")).option("--proxy-bypass <hosts>", cliM("cli_help_proxyBypass")).action(async (options) => {
@@ -32293,7 +32201,7 @@ cli.command("build", cliM("cli_help_build")).option("--target <target>", cliM("c
       writeCliError(message);
     else
       writeCliMessage(message);
-    process15.exitCode = 1;
+    process14.exitCode = 1;
   }
 });
 cli.command("upgrade <version>", cliM("cli_help_upgrade")).action(async (version2, options) => {
@@ -32301,7 +32209,7 @@ cli.command("upgrade <version>", cliM("cli_help_upgrade")).action(async (version
     await upgradeCommand(version2, options);
   } catch (error62) {
     writeCliMessage(error62 instanceof Error ? error62.message : String(error62));
-    process15.exitCode = 1;
+    process14.exitCode = 1;
   }
 });
 cli.command("deploy [appDir]", cliM("cli_help_deploy")).option("--plan", cliM("cli_help_deployPlan")).option("--inspect-remote", cliM("cli_help_inspectRemote")).option("--env <environment>", cliM("cli_help_environment")).option("--env-dir <path>", cliM("cli_help_envDir")).option("-y, --yes", cliM("cli_help_deployYes")).option("--skip-middleware", cliM("cli_help_skipMiddleware")).option("--artifact-dir <path>", cliM("cli_help_artifactDir")).option("--services <names>", cliM("cli_help_services")).option("--build", cliM("cli_help_deployBuild")).option("--concurrency <count>", cliM("cli_help_buildConcurrency")).option("--network <network>", cliM("cli_help_deployNetwork")).option("--no-http-proxy", cliM("cli_help_deployNoProxy")).option("--image-source <source>", cliM("cli_help_imageSource")).option("--image-mirrors <mappings>", cliM("cli_help_imageMirrors")).option("--npm-source <source>", cliM("cli_help_npmSource")).option("--npm-registry <url>", cliM("cli_help_npmRegistry")).option("--proxy-mode <mode>", cliM("cli_help_proxyMode")).option("--proxy-url <url>", cliM("cli_help_proxyUrl")).option("--proxy-bypass <hosts>", cliM("cli_help_proxyBypass")).option("--runtime <runtime>", cliM("cli_help_deployRuntime")).option("--bundle-only", cliM("cli_help_bundleOnly")).option("--output <path>", cliM("cli_help_bundleOutput")).action(async (appDir, options) => {
@@ -32334,15 +32242,7 @@ cli.command("deploy [appDir]", cliM("cli_help_deploy")).option("--plan", cliM("c
       cwd: options.cwd
     });
   } catch {
-    process15.exitCode = 1;
-  }
-});
-cli.command("deploy-secrets <directory>", cliM("cli_help_deploySecrets")).option("--import <file>", cliM("cli_help_secretImport")).option("--apply", cliM("cli_help_secretApply")).option("--runtime <runtime>", cliM("cli_help_deployRuntime")).action(async (directory, options) => {
-  try {
-    await deploySecretsCommand(directory, options);
-  } catch (error62) {
-    writeCliMessage(error62 instanceof Error ? error62.message : String(error62));
-    process15.exitCode = 1;
+    process14.exitCode = 1;
   }
 });
 cli.command("feedback <action> <bundle>", cliM("cli_help_feedback")).option("--page <number>", cliM("cli_feedback_page")).option("--page-size <number>", cliM("cli_feedback_pageSize")).option("--kind <kind>", cliM("cli_feedback_kind")).option("--request-id <id>", cliM("cli_feedback_requestId")).option("--error-id <id>", cliM("cli_feedback_errorId")).option("--from <timestamp>", cliM("cli_feedback_from")).option("--to <timestamp>", cliM("cli_feedback_to")).option("--port <number>", cliM("cli_feedback_port")).action(async (action, bundle, options) => {
@@ -32361,7 +32261,7 @@ cli.command("feedback <action> <bundle>", cliM("cli_help_feedback")).option("--p
     });
   } catch (error62) {
     writeCliMessage(error62 instanceof Error ? error62.message : String(error62));
-    process15.exitCode = 1;
+    process14.exitCode = 1;
   }
 });
 cli.command("g:page <name>", cliM("cli_help_generatePage")).option("-w, --workspace <name>", cliM("cli_help_workspace")).action(async (name, options) => {