@hype-stack/cli 1.3.1 → 1.3.3

package/dist/{cli-DaiPw0YU.js → cli-Bbv5yflm.js}

@@ -18,7 +18,7 @@ import { McpServer as ce } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport as le } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { Writable as ue } from "node:stream";
 //#region src/constants/constants.ts
-var de = "1.3.1", fe = "gh:BetterTyped/hype-stack", pe = "stack.json", me = "/schema/stack.json", he = "https://api.hype-stack.dev", ge = "HYPE_STACK_API_URL", _e = "https://www.hype-stack.dev", ve = /^[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?$/, ye = [
+var de = "1.3.3", fe = "gh:BetterTyped/hype-stack", pe = "stack.json", me = "/schema/stack.json", he = "https://api.hype-stack.dev", ge = "HYPE_STACK_API_URL", _e = "https://www.hype-stack.dev", ve = /^[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?$/, ye = [
 	{
 		value: "cursor",
 		label: "Cursor",
@@ -6675,14 +6675,30 @@ async function fd(e, t, n) {
 		port: $u
 	};
 }
-async function pd(e, t) {
+async function pd(e) {
+	let { projectRoot: t, target: n, contentDir: r, dryRun: i } = e, a = T.posix.join(Qu, `static-${n.target}`);
+	if (i) return a;
+	let o = T.join(t, Qu, `static-${n.target}`);
+	return await C.rm(o, {
+		recursive: !0,
+		force: !0
+	}), await C.mkdir(o, { recursive: !0 }), await C.writeFile(T.join(o, "nginx.conf"), ud($u), "utf-8"), await C.writeFile(T.join(o, "Dockerfile"), dd({
+		contentDir: "dist",
+		configPath: "nginx.conf",
+		port: $u
+	}), "utf-8"), await C.writeFile(T.join(o, nd), id({
+		dockerfilePath: "Dockerfile",
+		healthcheckPath: n.spec.healthcheckPath
+	}), "utf-8"), await C.cp(T.join(t, r), T.join(o, "dist"), { recursive: !0 }), a;
+}
+async function md(e, t) {
 	let n = T.join(t.root, "Dockerfile");
-	return await G(n) ? md(e, n) : null;
+	return await G(n) ? hd(e, n) : null;
 }
-function md(e, t) {
+function hd(e, t) {
 	return T.relative(e, t).split(T.sep).join("/");
 }
-async function hd(e) {
+async function gd(e) {
 	let t = T.join(e, ".gitignore"), n = `${Qu}/`, r = await C.readFile(t, "utf-8").catch(() => null);
 	if (r === null) {
 		await C.writeFile(t, `${n}\n`, "utf-8");
@@ -6694,19 +6710,19 @@ async function hd(e) {
 }
 //#endregion
 //#region src/deploy/catalog.ts
-var X = pe, gd = "deploy";
-function _d(...e) {
-	return [gd, ...e].join(".");
+var X = pe, _d = "deploy";
+function vd(...e) {
+	return [_d, ...e].join(".");
 }
-var vd = "production", yd = [
+var yd = "production", bd = [
 	"backend",
 	"frontend",
 	"admin"
-], bd = [
+], xd = [
 	"postgres",
 	"valkey",
 	"bucket"
-], xd = ["railway", "fly"], Sd = {
+], Sd = ["railway", "fly"], Cd = {
 	backend: {
 		target: "backend",
 		label: "Backend API",
@@ -6739,7 +6755,7 @@ var vd = "production", yd = [
 		port: 3e3,
 		healthcheckPath: "/"
 	}
-}, Cd = {
+}, wd = {
 	postgres: {
 		service: "postgres",
 		label: "Postgres",
@@ -6760,7 +6776,7 @@ var vd = "production", yd = [
 			"BUCKET_NAME"
 		]
 	}
-}, wd = {
+}, Td = {
 	railway: {
 		id: "railway",
 		label: "Railway",
@@ -6784,34 +6800,42 @@ var vd = "production", yd = [
 		tokenUrl: "https://fly.io/user/personal_access_tokens"
 	}
 };
-function Td(e) {
-	return yd.includes(e);
-}
 function Ed(e) {
-	return xd.includes(e);
-}
-function Z(e) {
-	return Td(e) ? Sd[e].label : Cd[e].label;
+	return bd.includes(e);
 }
 function Dd(e) {
-	return wd[e].label;
+	return Sd.includes(e);
 }
-function Od(e) {
-	return xd;
+function Z(e) {
+	return Ed(e) ? Cd[e].label : wd[e].label;
 }
-function kd(e, t) {
-	return `${e}-${t}`;
+function Od(e) {
+	return Td[e].label;
+}
+function kd(e) {
+	return Sd;
+}
+var Ad = {
+	frontend: "frontend",
+	admin: "admin",
+	backend: "backend",
+	postgres: "Postgres",
+	valkey: "Valkey",
+	bucket: "Media Bucket"
+};
+function jd(e, t, n) {
+	return n === "railway" ? Ad[t] : `${e}-${t}`;
 }
 //#endregion
 //#region src/deploy/assign.ts
-function Ad(e) {
-	let { config: t, defaultProvider: n, overrides: r = {}, availableTargets: i } = e, a = n ?? t.defaultProvider, o = jd(i, e.only), s = {};
+function Md(e) {
+	let { config: t, defaultProvider: n, overrides: r = {}, availableTargets: i } = e, a = n ?? t.defaultProvider, o = Nd(i, e.only), s = {};
 	for (let e of o) {
 		let n = r[e] ?? t.targets[e]?.provider ?? a;
 		n && (s[e] = n);
 	}
 	let c = {};
-	for (let e of bd) {
+	for (let e of xd) {
 		let n = r[e] ?? t.services[e]?.provider ?? a;
 		n && (c[e] = n);
 	}
@@ -6820,11 +6844,11 @@ function Ad(e) {
 		services: c
 	};
 }
-function jd(e, t) {
-	let n = yd.filter((t) => e.includes(t));
+function Nd(e, t) {
+	let n = bd.filter((t) => e.includes(t));
 	return !t || t.length === 0 ? n : n.filter((e) => t.includes(e));
 }
-function Md(e) {
+function Pd(e) {
 	let { assignment: t, availableTargets: n, requestedTargets: r = [], serveModes: i = {} } = e, a = [];
 	for (let e of r) n.includes(e) || a.push({
 		resource: e,
@@ -6832,35 +6856,35 @@ function Md(e) {
 		message: `This project has no ${Z(e)} app, so it cannot be deployed.`,
 		fix: `Drop ${e} from --only, or check that apps/${e} exists and is listed in stack.json.`
 	});
-	for (let e of yd) {
+	for (let e of bd) {
 		let n = t.targets[e];
 		!n || i[e] !== null || a.push({
 			resource: e,
 			provider: n,
 			code: "unsupported-serve-mode",
-			message: Nd(e),
-			fix: `Add a Dockerfile at ${Sd[e].defaultRoot}/Dockerfile, which is what ${Dd(n)} builds.`
+			message: Fd(e),
+			fix: `Add a Dockerfile at ${Cd[e].defaultRoot}/Dockerfile, which is what ${Od(n)} builds.`
 		});
 	}
-	for (let e of jd(n, r.length > 0 ? r : void 0)) t.targets[e] || a.push({
+	for (let e of Nd(n, r.length > 0 ? r : void 0)) t.targets[e] || a.push({
 		resource: e,
 		code: "unassigned",
 		message: `No provider assigned for the ${Z(e)}.`,
-		fix: `Pass --provider <${Od(e).join("|")}> or --${e} <provider>.`
+		fix: `Pass --provider <${kd(e).join("|")}> or --${e} <provider>.`
 	});
-	if (t.targets.backend) for (let e of bd) t.services[e] || a.push({
+	if (t.targets.backend) for (let e of xd) t.services[e] || a.push({
 		resource: e,
 		code: "unassigned",
 		message: `No provider assigned for ${Z(e)}, which the backend needs.`,
-		fix: `Pass --provider <${Od(e).join("|")}> or --${e} <provider>.`
+		fix: `Pass --provider <${kd(e).join("|")}> or --${e} <provider>.`
 	});
 	return a;
 }
-function Nd(e) {
+function Fd(e) {
 	let t = Z(e);
-	return Sd[e].serveMode === "node" ? `The ${t} runs as a container and there is no Dockerfile at ${Sd[e].defaultRoot}/Dockerfile to build it from.` : `The ${t} has neither a Dockerfile to build as a container nor a build script that emits static files, so there is nothing to deploy.`;
+	return Cd[e].serveMode === "node" ? `The ${t} runs as a container and there is no Dockerfile at ${Cd[e].defaultRoot}/Dockerfile to build it from.` : `The ${t} has neither a Dockerfile to build as a container nor a build script that emits static files, so there is nothing to deploy.`;
 }
-function Pd(e) {
+function Id(e) {
 	return e.map((e) => {
 		let t = e.fix ? `\n   ${e.fix}` : "";
 		return `${e.message}${t}`;
@@ -6877,14 +6901,14 @@ function Q(e) {
 }
 //#endregion
 //#region src/deploy/build.ts
-var Fd = ["build:web", "build"];
-async function Id(e) {
+var Ld = ["build:web", "build"];
+async function Rd(e) {
 	let t = (await oi(T.join(e, "package.json")).catch(() => null))?.scripts ?? {};
-	return Fd.find((e) => typeof t[e] == "string") ?? null;
+	return Ld.find((e) => typeof t[e] == "string") ?? null;
 }
-async function Ld(e, t) {
-	let { target: n, env: r, secrets: i } = t, a = await Id(n.root);
-	if (!a) throw Error(`No build script found in ${md(e.cwd, n.root)}/package.json. Add a "build" script that writes the bundle to ${n.spec.staticDir ?? "dist"}.`);
+async function zd(e, t) {
+	let { target: n, env: r, secrets: i } = t, a = await Rd(n.root);
+	if (!a) throw Error(`No build script found in ${hd(e.cwd, n.root)}/package.json. Add a "build" script that writes the bundle to ${n.spec.staticDir ?? "dist"}.`);
 	e.log?.(`Building ${n.spec.label} with the production env`), await e.runner.run({
 		command: "pnpm",
 		args: ["run", a],
@@ -6894,19 +6918,19 @@ async function Ld(e, t) {
 		label: `build ${n.target}`
 	});
 	let o = n.spec.staticDir ?? "dist", s = T.join(n.root, o);
-	if (!e.runner.dryRun && !await ri(s)) throw Error(`"pnpm run ${a}" finished but ${md(e.cwd, s)} does not exist. Set the target's static directory in stack.json or fix the build output path.`);
+	if (!e.runner.dryRun && !await ri(s)) throw Error(`"pnpm run ${a}" finished but ${hd(e.cwd, s)} does not exist. Set the target's static directory in stack.json or fix the build output path.`);
 	return {
 		script: a,
-		outputDir: md(e.cwd, s)
+		outputDir: hd(e.cwd, s)
 	};
 }
 //#endregion
 //#region src/deploy/providers/fly.ts
-var Rd = /already (?:exists|been taken)|name has already/i;
-function zd(e) {
+var Bd = /already (?:exists|been taken)|name has already/i;
+function Vd(e) {
 	return `https://${e}.fly.dev`;
 }
-function Bd(e) {
+function Hd(e) {
 	let t = Q(e);
 	return Array.isArray(t) ? t.flatMap((e) => {
 		if (typeof e != "object" || !e) return [];
@@ -6914,7 +6938,7 @@ function Bd(e) {
 		return typeof n == "string" ? [n] : [];
 	}) : typeof t == "object" && t ? Object.values(t).filter((e) => typeof e == "string") : [];
 }
-async function Vd(e) {
+async function Ud(e) {
 	let t = await e.runner.run({
 		command: "fly",
 		args: [
@@ -6926,21 +6950,21 @@ async function Vd(e) {
 		allowFailure: !0,
 		label: "find your Fly organization"
 	});
-	return t.exitCode === 0 ? Bd(t.stdout) : [];
+	return t.exitCode === 0 ? Hd(t.stdout) : [];
 }
-async function Hd(e) {
+async function Wd(e) {
 	if (e.plan.fly.org) return e.plan.fly.org;
-	let t = await Vd(e);
+	let t = await Ud(e);
 	if (t.length !== 0) {
 		if (t.length > 1) throw Error(`Your Fly account belongs to ${t.length} organizations (${t.join(", ")}). Pass --fly-org <slug> so the deploy creates everything in the right one.`);
 		return e.plan.fly.org = t[0], t[0];
 	}
 }
-async function Ud(e) {
-	let t = await Hd(e);
+async function Gd(e) {
+	let t = await Wd(e);
 	return t ? ["--org", t] : [];
 }
-function Wd(e) {
+function Kd(e) {
 	let t = {};
 	for (let n of e.split(/\r?\n/)) {
 		let e = n.match(/^\s*([A-Za-z][A-Za-z0-9_ ]*?)\s*[:=]\s*(\S.*?)\s*$/);
@@ -6950,19 +6974,19 @@ function Wd(e) {
 	}
 	return t;
 }
-function Gd(e) {
+function qd(e) {
 	let t = e.match(/\brediss?:\/\/\S+/);
 	return t ? t[0].replace(/[.,)]+$/, "") : null;
 }
-function Kd(e) {
+function Jd(e) {
 	let t = e.match(/^\w+:\/\/[^/@:]*:([^@]+)@/);
 	return t ? decodeURIComponent(t[1]) : null;
 }
-function qd(e) {
+function Yd(e) {
 	let t = e.match(/\bpostgres(?:ql)?:\/\/\S+/);
 	return t ? t[0].replace(/[.,)]+$/, "") : null;
 }
-function Jd(e, t) {
+function Xd(e, t) {
 	let n = Q(e);
 	if (!Array.isArray(n)) return null;
 	for (let e of n) {
@@ -6975,7 +6999,7 @@ function Jd(e, t) {
 	}
 	return null;
 }
-function Yd(e) {
+function Zd(e) {
 	let t = Q(e);
 	if (typeof t != "object" || !t) return null;
 	let n = t.credentials;
@@ -6987,7 +7011,7 @@ function Yd(e) {
 	}
 	return null;
 }
-var Xd = {
+var Qd = {
 	id: "fly",
 	async checkAuth(e) {
 		let t = await e.runner.run({
@@ -7007,7 +7031,7 @@ var Xd = {
 	scope: {
 		label: "organization",
 		flag: "--fly-org",
-		list: Vd,
+		list: Ud,
 		current: (e) => e.fly.org,
 		pin: (e, t) => {
 			e.fly.org = t;
@@ -7021,21 +7045,21 @@ var Xd = {
 				"create",
 				t.app,
 				"--json",
-				...await Ud(e)
+				...await Gd(e)
 			],
 			cwd: e.cwd,
 			allowFailure: !0,
 			label: `create fly app ${t.app}`
 		});
-		if (n.exitCode !== 0 && !Rd.test(n.stderr + n.stdout)) throw Error(`Could not create the Fly app "${t.app}":\n${n.stderr.trim() || n.stdout.trim()}`);
-		return t.url ?? zd(t.app);
+		if (n.exitCode !== 0 && !Bd.test(n.stderr + n.stdout)) throw Error(`Could not create the Fly app "${t.app}":\n${n.stderr.trim() || n.stdout.trim()}`);
+		return t.url ?? Vd(t.app);
 	},
 	async provisionService(e, t) {
 		let { service: n } = t;
 		return n.external ? {
 			outputs: n.external,
 			note: "using the external values from stack.json"
-		} : n.service === "postgres" ? Zd(e, t) : n.service === "valkey" ? tf(e, t) : rf(e, t);
+		} : n.service === "postgres" ? $d(e, t) : n.service === "valkey" ? rf(e, t) : of(e, t);
 	},
 	async setEnv(e, t) {
 		let n = Object.entries(t.env);
@@ -7057,10 +7081,10 @@ var Xd = {
 	async deployTarget(e, t) {
 		let { target: n } = t, r = n.spec.serveMode === "static", i, a;
 		if (r) {
-			let r = await Ld(e, t);
+			let r = await zd(e, t);
 			i = (await fd(e.cwd, n, r.outputDir ?? "dist")).dockerfile, a = $u;
 		} else {
-			let t = await pd(e.cwd, n);
+			let t = await md(e.cwd, n);
 			if (!t) throw Error(`Fly builds the ${n.spec.label} from a Dockerfile, but there is none at ${n.spec.defaultRoot}/Dockerfile. Add one, or host this app on a provider that builds from source.`);
 			i = t, a = n.spec.port ?? 3e3;
 		}
@@ -7088,7 +7112,7 @@ var Xd = {
 				cwd: e.cwd,
 				secrets: t.secrets,
 				label: `deploy ${n.target} to fly`
-			})).stdout.match(/https:\/\/[a-z0-9-]+\.fly\.dev/i)?.[0] ?? zd(n.app),
+			})).stdout.match(/https:\/\/[a-z0-9-]+\.fly\.dev/i)?.[0] ?? Vd(n.app),
 			releaseRan: o !== void 0
 		};
 	},
@@ -7113,10 +7137,10 @@ var Xd = {
 		};
 	}
 };
-async function Zd(e, t) {
-	let { service: n, backend: r, crossProvider: i } = t, a = await Qd(e, n.name), o = a ?? await $d(e, t);
+async function $d(e, t) {
+	let { service: n, backend: r, crossProvider: i } = t, a = await ef(e, n.name), o = a ?? await tf(e, t);
 	if (i || !r) {
-		let t = await ef(e, o);
+		let t = await nf(e, o);
 		if (!t) throw Error(`The Fly Postgres cluster "${n.name}" exists, but Fly did not return its connection string. Run \`fly mpg status ${o.id} --json\` and set deploy.services.postgres.external.DATABASE_URL in stack.json.`);
 		return {
 			outputs: { DATABASE_URL: t },
@@ -7141,34 +7165,34 @@ async function Zd(e, t) {
 		providedByProvider: ["DATABASE_URL"],
 		note: `attached to ${r.app}, which sets DATABASE_URL directly`
 	};
-	if (Rd.test(s.stderr + s.stdout)) return {
+	if (Bd.test(s.stderr + s.stdout)) return {
 		outputs: {},
 		providedByProvider: ["DATABASE_URL"],
 		note: `already attached to ${r.app}`
 	};
-	let c = await ef(e, o);
+	let c = await nf(e, o);
 	if (!c) throw Error(`Could not attach the Fly Postgres cluster "${n.name}" to ${r.app}, and could not read its connection string either:\n${s.stderr.trim() || s.stdout.trim()}`);
 	return {
 		outputs: { DATABASE_URL: c },
 		note: "attach failed, wired the connection string instead"
 	};
 }
-async function Qd(e, t) {
+async function ef(e, t) {
 	let n = await e.runner.run({
 		command: "fly",
 		args: [
 			"mpg",
 			"list",
 			"--json",
-			...await Ud(e)
+			...await Gd(e)
 		],
 		cwd: e.cwd,
 		allowFailure: !0,
 		label: "look for an existing postgres cluster"
 	});
-	return n.exitCode === 0 ? Jd(n.stdout, t) : null;
+	return n.exitCode === 0 ? Xd(n.stdout, t) : null;
 }
-async function $d(e, t) {
+async function tf(e, t) {
 	let { service: n } = t, r = await e.runner.run({
 		command: "fly",
 		args: [
@@ -7180,23 +7204,23 @@ async function $d(e, t) {
 			n.region ?? "iad",
 			"--plan",
 			e.plan.fly?.postgresPlan ?? "basic",
-			...await Ud(e)
+			...await Gd(e)
 		],
 		cwd: e.cwd,
 		allowFailure: !0,
 		label: `create managed postgres ${n.name}`
 	});
-	if (r.exitCode !== 0 && !Rd.test(r.stderr + r.stdout)) throw Error(`Could not create the Fly Postgres cluster "${n.name}":\n${r.stderr.trim() || r.stdout.trim()}`);
+	if (r.exitCode !== 0 && !Bd.test(r.stderr + r.stdout)) throw Error(`Could not create the Fly Postgres cluster "${n.name}":\n${r.stderr.trim() || r.stdout.trim()}`);
 	let i = r.stdout.match(/^\s*ID:\s*(\S+)\s*$/m)?.[1];
 	if (i) return {
 		id: i,
 		name: n.name
 	};
-	let a = await Qd(e, n.name);
+	let a = await ef(e, n.name);
 	if (a) return a;
 	throw Error(`Fly reported that the Postgres cluster "${n.name}" was created, but it is not in \`fly mpg list\`. Check https://fly.io/dashboard and run deploy again.`);
 }
-async function ef(e, t) {
+async function nf(e, t) {
 	let n = await e.runner.run({
 		command: "fly",
 		args: [
@@ -7209,9 +7233,9 @@ async function ef(e, t) {
 		allowFailure: !0,
 		label: `read postgres status ${t.name}`
 	});
-	return Yd(n.stdout) ?? qd(n.stdout);
+	return Zd(n.stdout) ?? Yd(n.stdout);
 }
-async function tf(e, t) {
+async function rf(e, t) {
 	let { service: n } = t, r = await e.runner.run({
 		command: "fly",
 		args: [
@@ -7222,9 +7246,9 @@ async function tf(e, t) {
 		cwd: e.cwd,
 		allowFailure: !0,
 		label: `look for an existing valkey ${n.name}`
-	}), i = r.exitCode === 0 ? Gd(r.stdout + r.stderr) : null;
+	}), i = r.exitCode === 0 ? qd(r.stdout + r.stderr) : null;
 	if (i) return {
-		outputs: nf(i),
+		outputs: af(i),
 		note: "reusing the existing database"
 	};
 	let a = await e.runner.run({
@@ -7239,23 +7263,23 @@ async function tf(e, t) {
 			"--no-replicas",
 			"--enable-eviction",
 			"--enable-prodpack=false",
-			...await Ud(e)
+			...await Gd(e)
 		],
 		cwd: e.cwd,
 		allowFailure: !0,
 		label: `create valkey ${n.name}`
-	}), o = Gd(a.stdout + a.stderr);
+	}), o = qd(a.stdout + a.stderr);
 	if (!o) throw Error(`Could not read the connection URL for the Fly Redis database "${n.name}":\n${a.stderr.trim() || a.stdout.trim()}\nRun \`fly redis status ${n.name}\` and set deploy.services.valkey.external.VALKEY_URL in stack.json.`);
-	return { outputs: nf(o) };
+	return { outputs: af(o) };
 }
-function nf(e) {
-	let t = Kd(e);
+function af(e) {
+	let t = Jd(e);
 	return {
 		VALKEY_URL: e,
 		...t ? { VALKEY_PASSWORD: t } : {}
 	};
 }
-async function rf(e, t) {
+async function of(e, t) {
 	let { service: n, backend: r, crossProvider: i } = t, a = n.name, o = await e.runner.run({
 		command: "fly",
 		args: [
@@ -7264,28 +7288,28 @@ async function rf(e, t) {
 			"--name",
 			a,
 			"--yes",
-			...await Ud(e)
+			...await Gd(e)
 		],
 		cwd: e.cwd,
 		allowFailure: !0,
 		label: `create tigris bucket ${a}`
-	}), s = cf(Wd(o.stdout + o.stderr), a);
+	}), s = uf(Kd(o.stdout + o.stderr), a);
 	if (s) return { outputs: s };
-	if (!Rd.test(o.stderr + o.stdout)) throw Error(`Could not read the Tigris credentials for "${a}":\n${o.stderr.trim() || o.stdout.trim()}\nRun \`fly storage create --name ${a}\` yourself and copy the credentials into deploy.services.bucket.external in stack.json.`);
-	if (!i && r && await sf(e, r.app)) return {
+	if (!Bd.test(o.stderr + o.stdout)) throw Error(`Could not read the Tigris credentials for "${a}":\n${o.stderr.trim() || o.stdout.trim()}\nRun \`fly storage create --name ${a}\` yourself and copy the credentials into deploy.services.bucket.external in stack.json.`);
+	if (!i && r && await lf(e, r.app)) return {
 		outputs: {},
-		providedByProvider: [...af],
+		providedByProvider: [...sf],
 		note: `already set on ${r.app} by an earlier deploy`
 	};
 	throw Error(`The Tigris bucket "${a}" already exists and Fly will not show its keys again, and ${r ? `${r.app} does not have them set` : "there is no Fly app here holding them"}. Copy them into deploy.services.bucket.external in stack.json, or pick a different name with deploy.services.bucket.name.`);
 }
-var af = [
+var sf = [
 	"RUSTFS_ENDPOINT",
 	"RUSTFS_ACCESS_KEY",
 	"RUSTFS_SECRET_KEY",
 	"BUCKET_NAME"
 ];
-function of(e) {
+function cf(e) {
 	let t = Q(e);
 	return Array.isArray(t) ? t.flatMap((e) => {
 		if (typeof e != "object" || !e) return [];
@@ -7293,7 +7317,7 @@ function of(e) {
 		return typeof n == "string" ? [n] : [];
 	}) : [];
 }
-async function sf(e, t) {
+async function lf(e, t) {
 	let n = await e.runner.run({
 		command: "fly",
 		args: [
@@ -7308,10 +7332,10 @@ async function sf(e, t) {
 		label: `check the storage keys already on ${t}`
 	});
 	if (n.exitCode !== 0) return !1;
-	let r = new Set(of(n.stdout));
-	return af.every((e) => r.has(e));
+	let r = new Set(cf(n.stdout));
+	return sf.every((e) => r.has(e));
 }
-function cf(e, t) {
+function uf(e, t) {
 	let n = e.AWS_ACCESS_KEY_ID, r = e.AWS_SECRET_ACCESS_KEY;
 	return !n || !r ? null : {
 		RUSTFS_ENDPOINT: e.AWS_ENDPOINT_URL_S3 ?? "https://t3.storage.dev",
@@ -7321,42 +7345,107 @@ function cf(e, t) {
 	};
 }
 //#endregion
+//#region src/deploy/runner.ts
+var df = class extends Error {
+	spec;
+	result;
+	constructor(e, t) {
+		let n = (t.stderr.trim() || t.stdout.trim()).split("\n").slice(-8).join("\n");
+		super(`${ff(e)} exited with ${t.exitCode}${n ? `\n${n}` : ""}`), this.name = "CommandFailedError", this.spec = e, this.result = t;
+	}
+};
+function ff(e) {
+	let t = [e.command, ...e.args].map(mf).join(" ");
+	return pf(e.stdin === void 0 ? t : `${t} < (stdin)`, e.secrets ?? []);
+}
+function pf(e, t) {
+	let n = e;
+	for (let e of t) !e || e.length < 4 || (n = n.split(e).join("***"));
+	return n;
+}
+function mf(e) {
+	return e === "" ? "\"\"" : /[\s"'$`\\]/.test(e) ? `"${e.replace(/(["\\$`])/g, "\\$1")}"` : e;
+}
+function hf(e = {}) {
+	let t = [];
+	return {
+		transcript: t,
+		async run(n) {
+			let r = ff(n);
+			t.push(r), e.onCommand?.(r);
+			let i = e.env || n.env ? {
+				...e.env,
+				...n.env
+			} : void 0, a = await W(n.command, n.args, {
+				cwd: n.cwd,
+				stdin: n.stdin,
+				env: i,
+				onData: e.onOutput ? (t) => e.onOutput?.(pf(t, n.secrets ?? [])) : void 0
+			});
+			if (a.exitCode !== 0 && !n.allowFailure) throw new df(n, a);
+			return a;
+		}
+	};
+}
+function gf(e = {}) {
+	let t = [];
+	return {
+		transcript: t,
+		dryRun: !0,
+		run(n) {
+			let r = ff(n);
+			t.push(r), e.onCommand?.(r);
+			let i = e.responses?.find((e) => r.includes(e.match)), a = typeof i?.stdout == "function" ? i.stdout(n) : i?.stdout ?? "";
+			return Promise.resolve({
+				exitCode: i?.exitCode ?? 0,
+				stdout: a,
+				stderr: ""
+			});
+		}
+	};
+}
+//#endregion
 //#region src/deploy/providers/railway.ts
-var lf = "Postgres", uf = "valkey/valkey:9-alpine", df = 6379, ff = "/data", pf = "/bin/sh -c \"exec docker-entrypoint.sh valkey-server --port ${VALKEY_PORT} --requirepass ${VALKEY_PASSWORD} --appendonly yes\"", mf = [
+var _f = "Postgres", vf = "valkey/valkey:latest", yf = 6379, bf = "/data", xf = "/bin/sh -c \"exec docker-entrypoint.sh valkey-server --port ${VALKEY_PORT} --requirepass ${VALKEY_PASSWORD} --appendonly yes\"", Sf = 12e4, Cf = 3e3, wf = 20 * 6e4, Tf = 1e4, Ef = new Set(["SUCCESS", "SLEEPING"]), Df = new Set([
+	"FAILED",
+	"CRASHED",
+	"REMOVED",
+	"SKIPPED"
+]), Of = "query Deployments($input: DeploymentListInput!) { deployments(input: $input, first: 1) { edges { node { id status } } } }", kf = "query BuildLogs($deploymentId: String!, $limit: Int) { buildLogs(deploymentId: $deploymentId, limit: $limit) { message } }", Af = "query DeploymentLogs($deploymentId: String!, $limit: Int) { deploymentLogs(deploymentId: $deploymentId, limit: $limit) { message } }", jf = [
 	"sjc",
 	"iad",
 	"ams",
 	"sin"
-], hf = "iad", gf = "rustfs/rustfs:latest", _f = 9e3, vf = "/data", yf = /already exists|duplicate|is already/i, bf = /unrecognized subcommand|unknown subcommand|unexpected argument|not a valid subcommand/i;
-function xf(e) {
+], Mf = "iad", Nf = "rustfs/rustfs:latest", Pf = 9e3, Ff = "/data", If = /already exists|duplicate|is already/i, Lf = /unrecognized subcommand|unknown subcommand|unexpected argument|not a valid subcommand/i;
+function Rf(e) {
 	let t = e.trim();
 	if (t.startsWith("{") || t.startsWith("[")) {
-		let e = Q(t), n = e === null ? null : Cf(e);
-		if (n) return Sf(n);
+		let e = Q(t), n = e === null ? null : Bf(e);
+		if (n) return zf(n);
 	}
 	let n = t.match(/[a-z0-9-]+(?:\.[a-z0-9-]+)*\.(?:up\.railway\.app|railway\.app)/i);
-	return n ? Sf(n[0]) : null;
+	return n ? zf(n[0]) : null;
 }
-function Sf(e) {
+function zf(e) {
 	return `https://${e.replace(/^https?:\/\//i, "").replace(/\/+$/, "")}`;
 }
-function Cf(e) {
+function Bf(e) {
 	if (typeof e == "string") return /\.railway\.app/i.test(e) ? e : null;
 	if (Array.isArray(e)) {
 		for (let t of e) {
-			let e = Cf(t);
+			let e = Bf(t);
 			if (e) return e;
 		}
 		return null;
 	}
 	if (typeof e == "object" && e) for (let [t, n] of Object.entries(e)) {
 		if ((t === "domain" || t === "url" || t === "host") && typeof n == "string" && n.length > 0) return n;
-		let e = Cf(n);
+		let e = Bf(n);
 		if (e) return e;
 	}
 	return null;
 }
-function wf(e) {
+function Vf(e) {
 	let t = Q(e.trim());
 	if (!Array.isArray(t)) return [];
 	let n = [];
@@ -7370,7 +7459,7 @@ function wf(e) {
 	}
 	return n;
 }
-function Tf(e) {
+function Hf(e) {
 	let t = Q(e.trim());
 	if (typeof t != "object" || !t || Array.isArray(t)) return null;
 	let n = t, r = n.id;
@@ -7379,7 +7468,7 @@ function Tf(e) {
 		name: typeof n.name == "string" ? n.name : ""
 	};
 }
-function Ef(e) {
+function Uf(e) {
 	let t = e.trim();
 	if (t.startsWith("{")) {
 		let e = Q(t);
@@ -7396,7 +7485,7 @@ function Ef(e) {
 	}
 	return n;
 }
-var Df = {
+var Wf = {
 	id: "railway",
 	async checkAuth(e) {
 		let t = await e.runner.run({
@@ -7416,16 +7505,16 @@ var Df = {
 	scope: {
 		label: "workspace",
 		flag: "--railway-workspace",
-		list: Nf,
+		list: ep,
 		current: (e) => e.railway.workspace,
 		pin: (e, t) => {
 			e.railway.workspace = t;
 		}
 	},
 	async reserveTarget(e, t) {
-		await Af(e);
+		await Zf(e);
 		let n = t.spec.serveMode === "static" ? $u : t.spec.port ?? 3e3;
-		if (!await If(e, t.app)) {
+		if (!await rp(e, t.app)) {
 			let r = await e.runner.run({
 				command: "railway",
 				args: [
@@ -7440,7 +7529,7 @@ var Df = {
 				allowFailure: !0,
 				label: `create railway service ${t.app}`
 			});
-			if (r.exitCode !== 0 && !yf.test(r.stderr + r.stdout)) throw Error(`Could not create the Railway service "${t.app}":\n${r.stderr.trim() || r.stdout.trim()}`);
+			if (r.exitCode !== 0 && !If.test(r.stderr + r.stdout)) throw Error(`Could not create the Railway service "${t.app}":\n${r.stderr.trim() || r.stdout.trim()}`);
 		}
 		if (t.url) return t.url;
 		let r = await e.runner.run({
@@ -7456,7 +7545,7 @@ var Df = {
 			cwd: e.cwd,
 			allowFailure: !0,
 			label: `generate domain for ${t.app}`
-		}), i = xf(r.stdout + r.stderr);
+		}), i = Rf(r.stdout + r.stderr);
 		if (!i) throw Error(`Railway did not return a domain for "${t.app}". Run \`railway domain --service ${t.app}\` and set deploy.targets.${t.target}.url in stack.json.`);
 		return i;
 	},
@@ -7465,7 +7554,7 @@ var Df = {
 		return n.external ? {
 			outputs: n.external,
 			note: "using the external values from stack.json"
-		} : (await Af(e), n.service === "postgres" ? Bf(e, t.crossProvider) : n.service === "valkey" ? Wf(e, t) : Qf(e, t));
+		} : (await Zf(e), n.service === "postgres" ? cp(e, t.crossProvider) : n.service === "valkey" ? fp(e, t) : Op(e, t));
 	},
 	async setEnv(e, t) {
 		for (let [n, r] of Object.entries(t.env)) await e.runner.run({
@@ -7486,52 +7575,40 @@ var Df = {
 		});
 	},
 	async deployTarget(e, t) {
-		let { target: n } = t, r;
-		if (n.spec.serveMode === "static") {
-			let i = await Ld(e, t);
-			r = (await fd(e.cwd, n, i.outputDir ?? "dist")).dockerfile;
-		} else {
-			let t = await pd(e.cwd, n);
-			if (!t) throw Error(`Railway builds the ${n.spec.label} from a Dockerfile, but there is none at ${n.spec.defaultRoot}/Dockerfile. Add one and run deploy again.`);
-			r = t;
-		}
-		await e.runner.run({
-			command: "railway",
-			args: [
-				"variable",
-				"set",
-				`RAILWAY_DOCKERFILE_PATH=${r}`,
-				"--service",
-				n.app,
-				"--skip-deploys"
-			],
-			cwd: e.cwd,
-			label: `point ${n.app} at ${r}`
-		});
-		let i = await Of(e, {
-			dockerfile: r,
-			target: n,
-			releaseCommand: t.releaseCommand
+		return t.target.spec.serveMode === "static" ? Gf(e, t) : Kf(e, t);
+	},
+	async awaitTarget(e, t) {
+		if (e.runner.dryRun) return {
+			ok: !0,
+			detail: "not checked on a dry run"
+		};
+		let n = await np(e, t.app);
+		if (!n) return {
+			ok: !0,
+			detail: `could not find the service "${t.app}" to check on it, so look at the Railway dashboard`
+		};
+		let r = await yp(e, {
+			name: t.app,
+			serviceId: n.id,
+			timeoutMs: wf,
+			pollIntervalMs: Tf
 		});
-		try {
-			return {
-				url: xf((await e.runner.run({
-					command: "railway",
-					args: [
-						"up",
-						"--service",
-						n.app,
-						"--ci"
-					],
-					cwd: e.cwd,
-					secrets: t.secrets,
-					label: `deploy ${n.target} to railway`
-				})).stdout) ?? n.url,
-				releaseRan: i.preDeployRan
-			};
-		} finally {
-			i.written && await sd(e.cwd);
-		}
+		if (r.ok) return {
+			ok: !0,
+			detail: r.status === null ? r.note : "live"
+		};
+		let i = r.deploymentId && r.status ? await xp(e, {
+			id: r.deploymentId,
+			status: r.status
+		}) : null, a = r.note ?? `the deployment ${r.status === "CRASHED" ? "crashed after starting" : "failed"}`;
+		return {
+			ok: !1,
+			detail: [
+				`${t.app} did not come up: ${a}.`,
+				i,
+				`Fix it and run deploy again. \`railway logs --service ${t.app}\` has the full log.`
+			].filter(Boolean).join("\n")
+		};
 	},
 	async runRemote(e, t, n) {
 		let r = await e.runner.run({
@@ -7553,7 +7630,111 @@ var Df = {
 		};
 	}
 };
-async function Of(e, t) {
+async function Gf(e, t) {
+	let { target: n } = t, r = await zd(e, t), i = await pd({
+		projectRoot: e.cwd,
+		target: n,
+		contentDir: r.outputDir ?? "dist",
+		dryRun: e.runner.dryRun
+	});
+	return await e.runner.run({
+		command: "railway",
+		args: [
+			"variable",
+			"set",
+			"RAILWAY_DOCKERFILE_PATH=Dockerfile",
+			"--service",
+			n.app,
+			"--skip-deploys"
+		],
+		cwd: e.cwd,
+		label: `point ${n.app} at the bundled Dockerfile`
+	}), {
+		url: Rf((await qf(e, t, [
+			i,
+			"--path-as-root",
+			"--no-gitignore"
+		])).stdout) ?? n.url,
+		releaseRan: !1
+	};
+}
+async function Kf(e, t) {
+	let { target: n } = t, r = await md(e.cwd, n);
+	if (!r) throw Error(`Railway builds the ${n.spec.label} from a Dockerfile, but there is none at ${n.spec.defaultRoot}/Dockerfile. Add one and run deploy again.`);
+	await e.runner.run({
+		command: "railway",
+		args: [
+			"variable",
+			"set",
+			`RAILWAY_DOCKERFILE_PATH=${r}`,
+			"--service",
+			n.app,
+			"--skip-deploys"
+		],
+		cwd: e.cwd,
+		label: `point ${n.app} at ${r}`
+	});
+	let i = await Yf(e, {
+		dockerfile: r,
+		target: n,
+		releaseCommand: t.releaseCommand
+	});
+	try {
+		return {
+			url: Rf((await qf(e, t, [])).stdout) ?? n.url,
+			releaseRan: i.preDeployRan
+		};
+	} finally {
+		i.written && await sd(e.cwd);
+	}
+}
+async function qf(e, t, n) {
+	let r = {
+		command: "railway",
+		args: [
+			"up",
+			...n,
+			"--service",
+			t.target.app,
+			"--detach"
+		],
+		cwd: e.cwd,
+		secrets: t.secrets,
+		allowFailure: !0,
+		label: `deploy ${t.target.target} to railway`
+	}, i = await e.runner.run(r);
+	if (i.exitCode === 0) return i;
+	let a = new df(r, i), o = await Jf(e, t.target, i.stdout + i.stderr);
+	throw o ? /* @__PURE__ */ Error(`${a.message}\n\n${o}`) : a;
+}
+async function Jf(e, t, n) {
+	let r = n.match(/Could not load ([\w@./-]+)/)?.[1];
+	if (!r) return null;
+	let i = [
+		"",
+		".ts",
+		".tsx",
+		".js",
+		".jsx",
+		".mts",
+		"/index.ts",
+		"/index.tsx"
+	].map((e) => `${r}${e}`), a = (await Promise.all(i.map(async (e) => await G(T.join(t.root, e)) ? e : null))).find((e) => e !== null);
+	if (!a) return null;
+	let o = hd(e.cwd, T.join(t.root, a));
+	return (await e.runner.run({
+		command: "git",
+		args: [
+			"check-ignore",
+			"-q",
+			o
+		],
+		cwd: e.cwd,
+		allowFailure: !0,
+		label: `check whether ${o} is gitignored`
+	})).exitCode === 0 ? `${o} exists here but is in .gitignore, and \`railway up\` only uploads what git would track, so the build on Railway cannot see it. Take it out of .gitignore (moving any secrets in it into environment variables first) and deploy again.` : null;
+}
+async function Yf(e, t) {
 	let { dockerfile: n, target: r, releaseCommand: i } = t;
 	if (await ad(e.cwd)) return e.log?.(`Keeping your ${nd}, so ${r.app} uses the settings in it`), {
 		written: !1,
@@ -7572,11 +7753,11 @@ async function Of(e, t) {
 		preDeployRan: o
 	});
 }
-var kf = /* @__PURE__ */ new WeakSet();
-async function Af(e) {
-	kf.has(e) || (await jf(e), kf.add(e));
+var Xf = /* @__PURE__ */ new WeakSet();
+async function Zf(e) {
+	Xf.has(e) || (await Qf(e), Xf.add(e));
 }
-async function jf(e) {
+async function Qf(e) {
 	if ((await e.runner.run({
 		command: "railway",
 		args: ["status", "--json"],
@@ -7584,7 +7765,7 @@ async function jf(e) {
 		allowFailure: !0,
 		label: "check railway project link"
 	})).exitCode === 0) return;
-	let t = await Pf(e);
+	let t = await tp(e);
 	await e.runner.run({
 		command: "railway",
 		args: [
@@ -7597,7 +7778,7 @@ async function jf(e) {
 		label: `create railway project ${e.plan.projectName}`
 	});
 }
-function Mf(e) {
+function $f(e) {
 	let t = Q(e);
 	if (typeof t != "object" || !t) return [];
 	let n = t.workspaces;
@@ -7607,7 +7788,7 @@ function Mf(e) {
 		return typeof n == "string" ? [n] : [];
 	}) : [];
 }
-async function Nf(e) {
+async function ep(e) {
 	let t = await e.runner.run({
 		command: "railway",
 		args: ["whoami", "--json"],
@@ -7615,17 +7796,17 @@ async function Nf(e) {
 		allowFailure: !0,
 		label: "find your Railway workspace"
 	});
-	return t.exitCode === 0 ? Mf(t.stdout) : [];
+	return t.exitCode === 0 ? $f(t.stdout) : [];
 }
-async function Pf(e) {
+async function tp(e) {
 	if (e.plan.railway.workspace) return e.plan.railway.workspace;
-	let t = await Nf(e);
+	let t = await ep(e);
 	if (t.length !== 0) {
 		if (t.length > 1) throw Error(`Your Railway account belongs to ${t.length} workspaces (${t.join(", ")}). Pass --railway-workspace <name> so the project is created in the right one.`);
 		return e.plan.railway.workspace = t[0], t[0];
 	}
 }
-async function Ff(e, t) {
+async function np(e, t) {
 	let n = await e.runner.run({
 		command: "railway",
 		args: [
@@ -7637,15 +7818,18 @@ async function Ff(e, t) {
 		allowFailure: !0,
 		label: "list railway services"
 	});
-	return n.exitCode === 0 ? wf(n.stdout).find((e) => e.name === t) ?? null : null;
+	return n.exitCode === 0 ? Vf(n.stdout).find((e) => e.name === t) ?? null : null;
 }
-async function If(e, t) {
-	return await Ff(e, t) !== null;
+async function rp(e, t) {
+	return await np(e, t) !== null;
 }
-function Lf(e, t) {
-	return `\${{${e}.${t}}}`;
+function ip(e, t) {
+	return `\${{${/^[\w-]+$/.test(e) ? e : `"${e}"`}.${t}}}`;
 }
-async function Rf(e, t) {
+function ap(e) {
+	return `https://${ip(e, "RAILWAY_PUBLIC_DOMAIN")}`;
+}
+async function op(e, t) {
 	let n = await e.runner.run({
 		command: "railway",
 		args: [
@@ -7659,9 +7843,9 @@ async function Rf(e, t) {
 		allowFailure: !0,
 		label: `read ${t} connection details`
 	});
-	return n.exitCode === 0 ? Ef(n.stdout) : {};
+	return n.exitCode === 0 ? Uf(n.stdout) : {};
 }
-var zf = {
+var sp = {
 	DATABASE_URL: "DATABASE_URL",
 	POSTGRES_DB: "PGDATABASE",
 	POSTGRES_HOST: "PGHOST",
@@ -7669,8 +7853,8 @@ var zf = {
 	POSTGRES_USER: "PGUSER",
 	POSTGRES_PASSWORD: "PGPASSWORD"
 };
-async function Bf(e, t) {
-	if (!await If(e, "Postgres")) {
+async function cp(e, t) {
+	if (!await rp(e, "Postgres")) {
 		let t = await e.runner.run({
 			command: "railway",
 			args: [
@@ -7683,28 +7867,28 @@ async function Bf(e, t) {
 			allowFailure: !0,
 			label: "add railway postgres"
 		});
-		if (t.exitCode !== 0 && !yf.test(t.stderr + t.stdout)) throw Error(`Could not add a Railway postgres database:\n${t.stderr.trim()}`);
+		if (t.exitCode !== 0 && !If.test(t.stderr + t.stdout)) throw Error(`Could not add a Railway postgres database:\n${t.stderr.trim()}`);
 	}
 	if (!t) {
 		let e = {};
-		for (let [t, n] of Object.entries(zf)) e[t] = Lf(lf, n);
+		for (let [t, n] of Object.entries(sp)) e[t] = ip(_f, n);
 		return {
 			outputs: e,
-			note: `wired as Railway references to ${lf}`
+			note: `wired as Railway references to ${_f}`
 		};
 	}
-	let n = await Rf(e, lf), r = n.DATABASE_PUBLIC_URL ?? n.DATABASE_URL;
-	if (!r) throw Error(`Could not read DATABASE_PUBLIC_URL from the Railway ${lf} service. Enable a public proxy on it, or set ${_d("services", "postgres", "external")} in ${X}.`);
+	let n = await op(e, _f), r = n.DATABASE_PUBLIC_URL ?? n.DATABASE_URL;
+	if (!r) throw Error(`Could not read DATABASE_PUBLIC_URL from the Railway ${_f} service. Enable a public proxy on it, or set ${vd("services", "postgres", "external")} in ${X}.`);
 	return { outputs: {
 		DATABASE_URL: r,
-		...Vf(r)
+		...lp(r)
 	} };
 }
-function Vf(e) {
-	let t = Hf(e);
+function lp(e) {
+	let t = up(e);
 	if (!t) return {};
 	let n = decodeURIComponent(t.pathname.replace(/^\//, ""));
-	return Uf({
+	return dp({
 		POSTGRES_HOST: t.hostname,
 		POSTGRES_PORT: t.port,
 		POSTGRES_USER: decodeURIComponent(t.username),
@@ -7712,43 +7896,43 @@ function Vf(e) {
 		POSTGRES_DB: n
 	});
 }
-function Hf(e) {
+function up(e) {
 	try {
 		return new URL(e);
 	} catch {
 		return null;
 	}
 }
-function Uf(e) {
+function dp(e) {
 	return Object.fromEntries(Object.entries(e).filter(([, e]) => e !== ""));
 }
-async function Wf(e, t) {
-	let n = t.service.name, r = await Ff(e, n);
-	if (r || await Gf(e, n), !t.crossProvider) return {
+async function fp(e, t) {
+	let n = t.service.name, r = await np(e, n);
+	if (r || await pp(e, n), !t.crossProvider) return {
 		outputs: {
-			VALKEY_URL: Lf(n, "VALKEY_URL"),
-			VALKEY_PASSWORD: Lf(n, "VALKEY_PASSWORD")
+			VALKEY_URL: ip(n, "VALKEY_URL"),
+			VALKEY_PASSWORD: ip(n, "VALKEY_PASSWORD")
 		},
-		note: r ? "reusing the Valkey service already in the project" : `${uf} with a volume and a password`
+		note: r ? "reusing the Valkey service already in the project" : `${vf} with a volume and a password`
 	};
-	let i = await Rf(e, n), a = i.VALKEY_PUBLIC_URL ?? i.VALKEY_URL;
-	if (!a) throw Error(`Could not read VALKEY_PUBLIC_URL from the Railway Valkey service "${n}". Run \`railway tcp-proxy create --port ${df} --service ${n}\`, or set ${_d("services", "valkey", "external")} in ${X}.`);
-	return { outputs: Uf({
+	let i = await op(e, n), a = i.VALKEY_PUBLIC_URL ?? i.VALKEY_URL;
+	if (!a) throw Error(`Could not read VALKEY_PUBLIC_URL from the Railway Valkey service "${n}". Run \`railway tcp-proxy create --port ${yf} --service ${n}\`, or set ${vd("services", "valkey", "external")} in ${X}.`);
+	return { outputs: dp({
 		VALKEY_URL: a,
 		VALKEY_PASSWORD: i.VALKEY_PASSWORD ?? ""
 	}) };
 }
-async function Gf(e, t) {
+async function pp(e, t) {
 	let n = O(24).toString("base64url"), r = await e.runner.run({
 		command: "railway",
 		args: [
 			"add",
 			"--image",
-			uf,
+			vf,
 			"--service",
 			t,
 			"--variables",
-			`VALKEY_PORT=${df}`,
+			`VALKEY_PORT=${yf}`,
 			"--variables",
 			`VALKEY_PASSWORD=${n}`,
 			"--variables",
@@ -7763,38 +7947,175 @@ async function Gf(e, t) {
 		label: `create valkey service ${t}`
 	});
 	if (r.exitCode !== 0) throw Error(`Could not create the Railway Valkey service "${t}":\n${r.stderr.trim()}`);
-	let i = Tf(r.stdout)?.id;
-	if (!i) throw Error(`Railway created the Valkey service "${t}" but did not report its id, which is needed to mount its volume and set its start command. Run \`railway service list --json\`, finish it from the dashboard, or set ${_d("services", "valkey", "external")} in ${X}.`);
-	await Kf(e, {
+	let i = Hf(r.stdout)?.id;
+	if (!i) throw Error(`Railway created the Valkey service "${t}" but did not report its id, which is needed to mount its volume and set its start command. Run \`railway service list --json\`, finish it from the dashboard, or set ${vd("services", "valkey", "external")} in ${X}.`);
+	await Sp(e, {
 		name: t,
 		serviceId: i,
-		command: pf
-	}), await ap(e, {
+		command: xf
+	}), await Fp(e, {
 		name: t,
 		serviceId: i,
-		mountPath: ff,
+		mountPath: bf,
 		consequence: "everything cached in it would be lost on the next restart"
-	}), await Xf(e, {
+	}), await Ep(e, {
+		name: t,
+		port: yf
+	}), await mp(e, {
 		name: t,
-		port: df
+		serviceId: i
+	}), e.log?.(`Waiting for ${t} to come up`);
+	let a = await yp(e, {
+		name: t,
+		serviceId: i,
+		timeoutMs: Sf,
+		pollIntervalMs: Cf
 	});
-	let a = await e.runner.run({
+	if (!a.ok) {
+		let n = a.deploymentId && a.status ? await xp(e, {
+			id: a.deploymentId,
+			status: a.status
+		}) : null;
+		throw Error([
+			`The Railway Valkey service "${t}" was deployed but has not come up (${a.note ?? a.status?.toLowerCase() ?? "unknown status"}), and the backend cannot reach its cache until it does.`,
+			n,
+			"Check it in the Railway dashboard and run deploy again."
+		].filter(Boolean).join("\n"));
+	}
+}
+async function mp(e, t) {
+	let n = await wp(e), r = await e.runner.run({
 		command: "railway",
 		args: [
-			"redeploy",
-			"--service",
-			i,
-			"--yes",
-			"--json"
+			"api",
+			"mutation DeployServiceInstance($serviceId: String!, $environmentId: String!) { serviceInstanceDeployV2(serviceId: $serviceId, environmentId: $environmentId) }",
+			"--variables",
+			JSON.stringify({
+				serviceId: t.serviceId,
+				environmentId: n
+			}),
+			"--compact"
 		],
 		cwd: e.cwd,
 		allowFailure: !0,
-		label: `redeploy ${t} with its start command`
+		label: `deploy ${t.name}`
 	});
-	if (a.exitCode !== 0) throw Error(`The Railway Valkey service "${t}" is configured but could not be redeployed, so it is still running without its password:\n${a.stderr.trim() || a.stdout.trim()}\nRedeploy it from the Railway dashboard and run deploy again.`);
+	if (r.exitCode !== 0) throw Error(`The Railway service "${t.name}" is configured but its first deployment could not be started, so nothing is running yet:\n${r.stderr.trim() || r.stdout.trim()}\nDeploy it from the Railway dashboard and run deploy again.`);
 }
-async function Kf(e, t) {
-	let n = await Jf(e), r = await e.runner.run({
+function hp(e) {
+	let t = Q(e.trim());
+	return t === null ? null : gp(t);
+}
+function gp(e) {
+	if (Array.isArray(e)) {
+		for (let t of e) {
+			let e = gp(t);
+			if (e) return e;
+		}
+		return null;
+	}
+	if (typeof e == "object" && e) {
+		let t = e, { id: n, status: r } = t;
+		if (typeof n == "string" && typeof r == "string" && /^[A-Z_]+$/.test(r)) return {
+			id: n,
+			status: r
+		};
+		for (let e of Object.values(t)) {
+			let t = gp(e);
+			if (t) return t;
+		}
+	}
+	return null;
+}
+function _p(e) {
+	let t = [];
+	return vp(Q(e.trim()), t), t;
+}
+function vp(e, t) {
+	if (Array.isArray(e)) {
+		for (let n of e) vp(n, t);
+		return;
+	}
+	if (typeof e == "object" && e) {
+		let n = e;
+		typeof n.message == "string" && n.message.length > 0 && t.push(n.message);
+		for (let [e, r] of Object.entries(n)) e !== "message" && vp(r, t);
+	}
+}
+async function yp(e, t) {
+	let n = await wp(e), r = Date.now() + t.timeoutMs;
+	for (;;) {
+		let i = await e.runner.run({
+			command: "railway",
+			args: [
+				"api",
+				Of,
+				"--variables",
+				JSON.stringify({ input: {
+					serviceId: t.serviceId,
+					environmentId: n
+				} }),
+				"--compact"
+			],
+			cwd: e.cwd,
+			allowFailure: !0,
+			label: `check the ${t.name} deployment`
+		});
+		if (e.runner.dryRun) return {
+			ok: !0,
+			status: null
+		};
+		let a = i.exitCode === 0 ? hp(i.stdout) : null;
+		if (!a) return {
+			ok: !0,
+			status: null,
+			note: `could not read the deployment status of ${t.name}, so check it in the Railway dashboard`
+		};
+		if (Ef.has(a.status)) return {
+			ok: !0,
+			status: a.status,
+			deploymentId: a.id
+		};
+		if (Df.has(a.status)) return {
+			ok: !1,
+			status: a.status,
+			deploymentId: a.id
+		};
+		if (Date.now() >= r) return {
+			ok: !1,
+			status: a.status,
+			deploymentId: a.id,
+			note: `still ${a.status.toLowerCase()} after ${Math.round(t.timeoutMs / 6e4)} minutes`
+		};
+		e.log?.(`${t.name} is ${a.status.toLowerCase()}`), await bp(t.pollIntervalMs);
+	}
+}
+function bp(e) {
+	return new Promise((t) => setTimeout(t, e));
+}
+async function xp(e, t) {
+	let n = t.status === "CRASHED" ? Af : kf, r = await e.runner.run({
+		command: "railway",
+		args: [
+			"api",
+			n,
+			"--variables",
+			JSON.stringify({
+				deploymentId: t.id,
+				limit: 50
+			}),
+			"--compact"
+		],
+		cwd: e.cwd,
+		allowFailure: !0,
+		label: "read the failed deployment's logs"
+	});
+	if (r.exitCode !== 0) return null;
+	let i = _p(r.stdout);
+	return i.length === 0 ? null : i.slice(-15).join("\n");
+}
+async function Sp(e, t) {
+	let n = await wp(e), r = await e.runner.run({
 		command: "railway",
 		args: [
 			"api",
@@ -7812,15 +8133,15 @@ async function Kf(e, t) {
 		label: `set the start command on ${t.name}`
 	});
 	if (r.exitCode !== 0) {
-		let e = r.stderr.trim() || r.stdout.trim(), n = bf.test(e) ? "Your Railway CLI is too old for `railway api`. Update it with `npm i -g @railway/cli` and run deploy again." : `Set the start command on ${t.name} from the Railway dashboard: ${t.command}`;
+		let e = r.stderr.trim() || r.stdout.trim(), n = Lf.test(e) ? "Your Railway CLI is too old for `railway api`. Update it with `npm i -g @railway/cli` and run deploy again." : `Set the start command on ${t.name} from the Railway dashboard: ${t.command}`;
 		throw Error(`Could not set the start command on the Railway service "${t.name}":\n${e}\n${n}`);
 	}
 }
-var qf = /* @__PURE__ */ new WeakMap();
-async function Jf(e) {
-	let t = qf.get(e);
+var Cp = /* @__PURE__ */ new WeakMap();
+async function wp(e) {
+	let t = Cp.get(e);
 	if (t) return t;
-	let n = Yf((await e.runner.run({
+	let n = Tp((await e.runner.run({
 		command: "railway",
 		args: ["status", "--json"],
 		cwd: e.cwd,
@@ -7828,9 +8149,9 @@ async function Jf(e) {
 		label: "read the linked railway environment"
 	})).stdout, e.plan.environment);
 	if (!n) throw Error(`Could not find the Railway environment "${e.plan.environment}" in the linked project. Run \`railway status\` to check what is linked.`);
-	return qf.set(e, n), n;
+	return Cp.set(e, n), n;
 }
-function Yf(e, t) {
+function Tp(e, t) {
 	let n = Q(e.trim());
 	if (typeof n != "object" || !n) return null;
 	let r = n.environments, i = typeof r == "object" && r ? r.edges : void 0;
@@ -7849,7 +8170,7 @@ function Yf(e, t) {
 	let o = a.find((e) => e.name === t);
 	return o ? o.id : a.length === 1 ? a[0].id : null;
 }
-async function Xf(e, t) {
+async function Ep(e, t) {
 	let n = await e.runner.run({
 		command: "railway",
 		args: [
@@ -7865,15 +8186,15 @@ async function Xf(e, t) {
 		allowFailure: !0,
 		label: `expose ${t.name} on a tcp proxy`
 	});
-	n.exitCode !== 0 && !yf.test(n.stderr + n.stdout) && e.log?.(`Could not open a TCP proxy on ${t.name}, so it is only reachable from inside the Railway project: ${n.stderr.trim() || n.stdout.trim()}`);
+	n.exitCode !== 0 && !If.test(n.stderr + n.stdout) && e.log?.(`Could not open a TCP proxy on ${t.name}, so it is only reachable from inside the Railway project: ${n.stderr.trim() || n.stdout.trim()}`);
 }
-var Zf = {
+var Dp = {
 	RUSTFS_ENDPOINT: "ENDPOINT",
 	RUSTFS_ACCESS_KEY: "ACCESS_KEY_ID",
 	RUSTFS_SECRET_KEY: "SECRET_ACCESS_KEY",
 	BUCKET_NAME: "BUCKET"
 };
-async function Qf(e, t) {
+async function Op(e, t) {
 	let { service: n, crossProvider: r } = t, i = n.name, a = await e.runner.run({
 		command: "railway",
 		args: [
@@ -7886,14 +8207,14 @@ async function Qf(e, t) {
 		label: "list railway buckets"
 	});
 	if (a.exitCode !== 0) {
-		if (!bf.test(a.stderr + a.stdout)) throw Error(`Could not list the Railway buckets in this project:\n${a.stderr.trim()}`);
-		return e.log?.("This Railway CLI has no `bucket` command, so storage runs as a RustFS service instead"), ip(e, n);
+		if (!Lf.test(a.stderr + a.stdout)) throw Error(`Could not list the Railway buckets in this project:\n${a.stderr.trim()}`);
+		return e.log?.("This Railway CLI has no `bucket` command, so storage runs as a RustFS service instead"), Pp(e, n);
 	}
-	tp(a.stdout).some((e) => e.name === i) || await $f(e, n);
-	let o = await Ff(e, i) !== null;
+	jp(a.stdout).some((e) => e.name === i) || await kp(e, n);
+	let o = await np(e, i) !== null;
 	if (!r && !o) {
 		let e = {};
-		for (let [t, n] of Object.entries(Zf)) e[t] = Lf(i, n);
+		for (let [t, n] of Object.entries(Dp)) e[t] = ip(i, n);
 		return {
 			outputs: e,
 			note: `wired as Railway references to the ${i} bucket`
@@ -7911,14 +8232,14 @@ async function Qf(e, t) {
 		cwd: e.cwd,
 		allowFailure: !0,
 		label: `read the ${i} bucket credentials`
-	}), c = rp(s.stdout);
-	if (!c) throw Error(`Could not read the credentials for the Railway bucket "${i}":\n${s.stderr.trim() || s.stdout.trim()}\nRun \`railway bucket credentials --bucket ${i}\` and set ${_d("services", "bucket", "external")} in ${X}.`);
+	}), c = Np(s.stdout);
+	if (!c) throw Error(`Could not read the credentials for the Railway bucket "${i}":\n${s.stderr.trim() || s.stdout.trim()}\nRun \`railway bucket credentials --bucket ${i}\` and set ${vd("services", "bucket", "external")} in ${X}.`);
 	return {
 		outputs: c,
 		note: o ? `set as values, because the service "${i}" shares the bucket's name. Delete it with \`railway service delete --service ${i}\` to switch to references` : "read from the bucket, since a Railway reference does not resolve off Railway"
 	};
 }
-async function $f(e, t) {
+async function kp(e, t) {
 	let n = await e.runner.run({
 		command: "railway",
 		args: [
@@ -7926,20 +8247,20 @@ async function $f(e, t) {
 			"create",
 			t.name,
 			"--region",
-			ep(t.region),
+			Ap(t.region),
 			"--json"
 		],
 		cwd: e.cwd,
 		allowFailure: !0,
 		label: `create the ${t.name} bucket`
 	});
-	if (n.exitCode !== 0 && !yf.test(n.stderr + n.stdout)) throw Error(`Could not create the Railway bucket "${t.name}":\n${n.stderr.trim()}`);
-	if (np(n.stdout)) throw Error(`The Railway bucket "${t.name}" was created but staged rather than deployed, because the environment has uncommitted changes. Commit them in the Railway dashboard and run deploy again.`);
+	if (n.exitCode !== 0 && !If.test(n.stderr + n.stdout)) throw Error(`Could not create the Railway bucket "${t.name}":\n${n.stderr.trim()}`);
+	if (Mp(n.stdout)) throw Error(`The Railway bucket "${t.name}" was created but staged rather than deployed, because the environment has uncommitted changes. Commit them in the Railway dashboard and run deploy again.`);
 }
-function ep(e) {
-	return e && mf.includes(e) ? e : hf;
+function Ap(e) {
+	return e && jf.includes(e) ? e : Mf;
 }
-function tp(e) {
+function jp(e) {
 	let t = Q(e.trim());
 	if (!Array.isArray(t)) return [];
 	let n = [];
@@ -7953,11 +8274,11 @@ function tp(e) {
 	}
 	return n;
 }
-function np(e) {
+function Mp(e) {
 	let t = Q(e.trim());
 	return typeof t != "object" || !t ? !1 : t.staged === !0;
 }
-function rp(e) {
+function Np(e) {
 	let t = Q(e.trim());
 	if (typeof t != "object" || !t) return null;
 	let n = t, r = (e) => typeof n[e] == "string" ? n[e] : "", i = r("endpoint"), a = r("accessKeyId"), o = r("secretAccessKey");
@@ -7968,15 +8289,15 @@ function rp(e) {
 		BUCKET_NAME: r("bucketName")
 	};
 }
-async function ip(e, t) {
-	let n = t.name, r = await Ff(e, n), i = r ? await op(e, n) : null, a = i?.accessKey ?? `hs${O(8).toString("hex")}`, o = i?.secretKey ?? O(24).toString("base64url"), s = r?.id;
+async function Pp(e, t) {
+	let n = t.name, r = await np(e, n), i = r ? await Ip(e, n) : null, a = i?.accessKey ?? `hs${O(8).toString("hex")}`, o = i?.secretKey ?? O(24).toString("base64url"), s = r?.id;
 	if (!i) {
 		let t = await e.runner.run({
 			command: "railway",
 			args: [
 				"add",
 				"--image",
-				gf,
+				Nf,
 				"--service",
 				n,
 				"--variables",
@@ -7984,7 +8305,7 @@ async function ip(e, t) {
 				"--variables",
 				`RUSTFS_SECRET_KEY=${o}`,
 				"--variables",
-				`RUSTFS_ADDRESS=:${_f}`,
+				`RUSTFS_ADDRESS=:${Pf}`,
 				"--json"
 			],
 			cwd: e.cwd,
@@ -7992,14 +8313,14 @@ async function ip(e, t) {
 			secrets: [o],
 			label: `create object storage service ${n}`
 		});
-		if (t.exitCode !== 0) throw yf.test(t.stderr + t.stdout) ? Error(`The Railway storage service "${n}" already exists, but its access keys could not be read back. Copy them from the dashboard into ${_d("services", "bucket", "external")} in ${X}.`) : Error(`Could not create the Railway storage service "${n}":\n${t.stderr.trim()}`);
-		s = Tf(t.stdout)?.id ?? s;
+		if (t.exitCode !== 0) throw If.test(t.stderr + t.stdout) ? Error(`The Railway storage service "${n}" already exists, but its access keys could not be read back. Copy them from the dashboard into ${vd("services", "bucket", "external")} in ${X}.`) : Error(`Could not create the Railway storage service "${n}":\n${t.stderr.trim()}`);
+		s = Hf(t.stdout)?.id ?? s;
 	}
-	if (!s) throw Error(`Could not find the id of the Railway storage service "${n}", which is what \`railway volume\` needs to mount a volume on it. Run \`railway service list --json\` to check the project, or set ${_d("services", "bucket", "external")} in ${X} to use storage you run yourself.`);
-	await ap(e, {
+	if (!s) throw Error(`Could not find the id of the Railway storage service "${n}", which is what \`railway volume\` needs to mount a volume on it. Run \`railway service list --json\` to check the project, or set ${vd("services", "bucket", "external")} in ${X} to use storage you run yourself.`);
+	await Fp(e, {
 		name: n,
 		serviceId: s,
-		mountPath: vf,
+		mountPath: Ff,
 		consequence: "anything uploaded to it would be lost on the next restart"
 	});
 	let c = await e.runner.run({
@@ -8009,14 +8330,14 @@ async function ip(e, t) {
 			"--service",
 			n,
 			"--port",
-			String(_f),
+			String(Pf),
 			"--json"
 		],
 		cwd: e.cwd,
 		allowFailure: !0,
 		label: `expose ${n}`
-	}), l = xf(c.stdout + c.stderr);
-	if (!l) throw Error(`Could not get a public endpoint for the Railway storage service "${n}". Run \`railway domain --service ${n} --port ${_f}\` and set ${_d("services", "bucket", "external")} in ${X}.`);
+	}), l = Rf(c.stdout + c.stderr);
+	if (!l) throw Error(`Could not get a public endpoint for the Railway storage service "${n}". Run \`railway domain --service ${n} --port ${Pf}\` and set ${vd("services", "bucket", "external")} in ${X}.`);
 	return {
 		outputs: {
 			RUSTFS_ENDPOINT: l,
@@ -8024,10 +8345,10 @@ async function ip(e, t) {
 			RUSTFS_SECRET_KEY: o,
 			BUCKET_NAME: n
 		},
-		note: i ? "reusing the existing RustFS service and its keys" : `RustFS on Railway, with a volume mounted at ${vf}`
+		note: i ? "reusing the existing RustFS service and its keys" : `RustFS on Railway, with a volume mounted at ${Ff}`
 	};
 }
-async function ap(e, t) {
+async function Fp(e, t) {
 	let n = await e.runner.run({
 		command: "railway",
 		args: [
@@ -8043,10 +8364,10 @@ async function ap(e, t) {
 		allowFailure: !0,
 		label: `attach a volume to ${t.name}`
 	});
-	if (n.exitCode !== 0 && !yf.test(n.stderr + n.stdout)) throw Error(`The Railway service "${t.name}" has no persistent volume at ${t.mountPath}, so ${t.consequence}:\n${n.stderr.trim() || n.stdout.trim()}`);
+	if (n.exitCode !== 0 && !If.test(n.stderr + n.stdout)) throw Error(`The Railway service "${t.name}" has no persistent volume at ${t.mountPath}, so ${t.consequence}:\n${n.stderr.trim() || n.stdout.trim()}`);
 }
-async function op(e, t) {
-	let n = await Rf(e, t), r = n.RUSTFS_ACCESS_KEY, i = n.RUSTFS_SECRET_KEY;
+async function Ip(e, t) {
+	let n = await op(e, t), r = n.RUSTFS_ACCESS_KEY, i = n.RUSTFS_SECRET_KEY;
 	return r && i ? {
 		accessKey: r,
 		secretKey: i
@@ -8054,101 +8375,41 @@ async function op(e, t) {
 }
 //#endregion
 //#region src/deploy/providers/index.ts
-var sp = {
-	railway: Df,
-	fly: Xd
+var Lp = {
+	railway: Wf,
+	fly: Qd
 };
-function cp(e) {
-	return sp[e];
-}
-//#endregion
-//#region src/deploy/runner.ts
-var lp = class extends Error {
-	spec;
-	result;
-	constructor(e, t) {
-		let n = (t.stderr.trim() || t.stdout.trim()).split("\n").slice(-8).join("\n");
-		super(`${up(e)} exited with ${t.exitCode}${n ? `\n${n}` : ""}`), this.name = "CommandFailedError", this.spec = e, this.result = t;
-	}
-};
-function up(e) {
-	let t = [e.command, ...e.args].map(fp).join(" ");
-	return dp(e.stdin === void 0 ? t : `${t} < (stdin)`, e.secrets ?? []);
-}
-function dp(e, t) {
-	let n = e;
-	for (let e of t) !e || e.length < 4 || (n = n.split(e).join("***"));
-	return n;
-}
-function fp(e) {
-	return e === "" ? "\"\"" : /[\s"'$`\\]/.test(e) ? `"${e.replace(/(["\\$`])/g, "\\$1")}"` : e;
-}
-function pp(e = {}) {
-	let t = [];
-	return {
-		transcript: t,
-		async run(n) {
-			let r = up(n);
-			t.push(r), e.onCommand?.(r);
-			let i = e.env || n.env ? {
-				...e.env,
-				...n.env
-			} : void 0, a = await W(n.command, n.args, {
-				cwd: n.cwd,
-				stdin: n.stdin,
-				env: i,
-				onData: e.onOutput ? (t) => e.onOutput?.(dp(t, n.secrets ?? [])) : void 0
-			});
-			if (a.exitCode !== 0 && !n.allowFailure) throw new lp(n, a);
-			return a;
-		}
-	};
-}
-function mp(e = {}) {
-	let t = [];
-	return {
-		transcript: t,
-		dryRun: !0,
-		run(n) {
-			let r = up(n);
-			t.push(r), e.onCommand?.(r);
-			let i = e.responses?.find((e) => r.includes(e.match)), a = typeof i?.stdout == "function" ? i.stdout(n) : i?.stdout ?? "";
-			return Promise.resolve({
-				exitCode: i?.exitCode ?? 0,
-				stdout: a,
-				stderr: ""
-			});
-		}
-	};
+function Rp(e) {
+	return Lp[e];
 }
 //#endregion
 //#region src/deploy/auth.ts
-function hp() {
+function zp() {
 	return {
-		createRunner: (e) => pp({ env: e }),
+		createRunner: (e) => hf({ env: e }),
 		runInteractive: async (e, t, n) => (await ni(e, t, { cwd: n })).exitCode,
-		confirmInstall: Ep,
-		chooseMethod: Dp,
-		readToken: kp,
-		chooseScope: Op
+		confirmInstall: Xp,
+		chooseMethod: Zp,
+		readToken: $p,
+		chooseScope: Qp
 	};
 }
-async function gp(e) {
-	let t = e.io ?? hp(), n = {}, r = {};
+async function Bp(e) {
+	let t = e.io ?? zp(), n = {}, r = {};
 	for (let i of e.providers) {
-		let a = wd[i], o = e.adapters?.[i] ?? cp(i), s = {
+		let a = Td[i], o = e.adapters?.[i] ?? Rp(i), s = {
 			io: t,
 			spec: a,
 			plan: e.plan,
 			skipPrompts: e.skipPrompts,
 			env: r
 		};
-		await _p(s);
-		let c = await xp({
+		await Vp(s);
+		let c = await Gp({
 			...s,
 			adapter: o
 		});
-		r = c.env, c.account && (n[i] = c.account), await Sp({
+		r = c.env, c.account && (n[i] = c.account), await Kp({
 			...s,
 			env: r,
 			adapter: o
@@ -8159,16 +8420,16 @@ async function gp(e) {
 		accounts: n
 	};
 }
-async function _p(e) {
+async function Vp(e) {
 	let { io: t, spec: n, plan: r, skipPrompts: i } = e;
-	if (await vp(e)) return;
+	if (await Hp(e)) return;
 	let a = `The ${n.label} CLI is not on your PATH. Install it with ${F.command(n.install)} and run deploy again. ${I(n.docs)}`;
-	(i || !yp()) && z(a, { reason: "input_required" }), rt({
+	(i || !Up()) && z(a, { reason: "input_required" }), rt({
 		reason: "input_required",
 		message: a
-	}), await t.confirmInstall(n) || z(a, { reason: "input_required" }), await t.runInteractive("sh", ["-c", n.install], r.projectRoot), await vp(e) || z(`That did not put ${F.command(n.bin)} on your PATH. ${a}`, { reason: "input_required" });
+	}), await t.confirmInstall(n) || z(a, { reason: "input_required" }), await t.runInteractive("sh", ["-c", n.install], r.projectRoot), await Hp(e) || z(`That did not put ${F.command(n.bin)} on your PATH. ${a}`, { reason: "input_required" });
 }
-async function vp(e) {
+async function Hp(e) {
 	let t = await e.io.createRunner(e.env).run({
 		command: e.spec.bin,
 		args: ["--version"],
@@ -8177,11 +8438,11 @@ async function vp(e) {
 	}).catch(() => null);
 	return t !== null && t.exitCode === 0;
 }
-function yp() {
+function Up() {
 	return process.platform !== "win32";
 }
-var bp = 3;
-async function xp(e) {
+var Wp = 3;
+async function Gp(e) {
 	let { io: t, spec: n, plan: r, skipPrompts: i, adapter: a } = e, o = { ...e.env }, s = 0;
 	for (;;) {
 		let e = {
@@ -8193,26 +8454,26 @@ async function xp(e) {
 			account: c.account,
 			env: o
 		};
-		let l = Cp(n, o);
+		let l = qp(n, o);
 		if (l) {
 			Object.assign(o, l);
 			continue;
 		}
-		i && z(Tp(n), { reason: "auth_required" }), rt({
+		i && z(Yp(n), { reason: "auth_required" }), rt({
 			reason: "auth_required",
-			message: Tp(n)
-		}), s >= bp && z(`${n.label} still does not know who you are. ${Tp(n)}`, { reason: "auth_required" }), s += 1;
+			message: Yp(n)
+		}), s >= Wp && z(`${n.label} still does not know who you are. ${Yp(n)}`, { reason: "auth_required" }), s += 1;
 		let u = await t.chooseMethod(n);
 		if (u === "token") {
 			let e = await t.readToken(n);
-			Object.assign(o, wp(n.conflictingTokenEnv), { [n.tokenEnv]: e });
+			Object.assign(o, Jp(n.conflictingTokenEnv), { [n.tokenEnv]: e });
 			continue;
 		}
 		let d = u === "browserless" ? n.browserlessLoginArgs ?? n.loginArgs : n.loginArgs;
 		await t.runInteractive(n.bin, d, r.projectRoot);
 	}
 }
-async function Sp(e) {
+async function Kp(e) {
 	let { io: t, spec: n, plan: r, skipPrompts: i, env: a, adapter: o } = e, { scope: s } = o;
 	if (!s || s.current(r)) return;
 	let c = await s.list({
@@ -8230,27 +8491,27 @@ async function Sp(e) {
 		message: l
 	}), s.pin(r, await t.chooseScope(n, s, c));
 }
-function Cp(e, t) {
+function qp(e, t) {
 	let n = (e.conflictingTokenEnv ?? []).filter((e) => !(e in t) && process.env[e] !== void 0);
 	if (n.length === 0) return null;
 	for (let t of n) _t(`${F.label(t)} is set in your shell, but it cannot create a ${e.label} project. Ignoring it for this run.`);
-	return wp(n);
+	return Jp(n);
 }
-function wp(e = []) {
+function Jp(e = []) {
 	return Object.fromEntries(e.map((e) => [e, void 0]));
 }
-function Tp(e) {
+function Yp(e) {
 	let t = F.command(`${e.bin} ${e.loginArgs.join(" ")}`);
 	return `Not signed in to ${e.label}. Run ${t}, or set ${F.label(e.tokenEnv)} to a token from ${I(e.tokenUrl)}.`;
 }
-async function Ep(e) {
+async function Xp(e) {
 	let t = await c.confirm({
 		message: `Deploying needs the ${F.highlight(e.label)} CLI. Install it with ${F.command(e.install)}?`,
 		initialValue: !0
 	});
 	return c.isCancel(t) && B(), t;
 }
-async function Dp(e) {
+async function Zp(e) {
 	let t = [{
 		value: "browser",
 		label: "Log in through the browser",
@@ -8272,7 +8533,7 @@ async function Dp(e) {
 	});
 	return c.isCancel(n) && B(), n;
 }
-async function Op(e, t, n) {
+async function Qp(e, t, n) {
 	let r = await c.select({
 		message: `Which ${F.highlight(e.label)} ${t.label} should this project live in?`,
 		options: n.map((e) => ({
@@ -8283,7 +8544,7 @@ async function Op(e, t, n) {
 	});
 	return c.isCancel(r) && B(), r;
 }
-async function kp(e) {
+async function $p(e) {
 	c.log.info(`Create one at ${I(e.tokenUrl)}. Give it the workspace this project should live in, not a single project.`);
 	let t = await c.password({
 		message: `Paste your ${e.label} token`,
@@ -8293,59 +8554,59 @@ async function kp(e) {
 }
 //#endregion
 //#region src/deploy/config.ts
-var Ap = j.enum(xd), jp = j.object({
-	provider: Ap,
+var em = j.enum(Sd), tm = j.object({
+	provider: em,
 	app: j.string().min(1).optional(),
 	region: j.string().min(1).optional(),
 	url: j.string().url().optional()
-}), Mp = j.object({
-	provider: Ap,
+}), nm = j.object({
+	provider: em,
 	name: j.string().min(1).optional(),
 	region: j.string().min(1).optional(),
 	external: j.record(j.string(), j.string()).optional()
-}), Np = j.object({
+}), rm = j.object({
 	org: j.string().min(1).optional(),
 	postgresPlan: j.string().min(1).optional()
-}), Pp = j.object({ workspace: j.string().min(1).optional() }), Fp = j.object({
+}), im = j.object({ workspace: j.string().min(1).optional() }), am = j.object({
 	version: j.number().int().positive(),
 	projectName: j.string().min(1),
 	environment: j.string().min(1),
-	defaultProvider: Ap.optional(),
+	defaultProvider: em.optional(),
 	targets: j.object({
-		backend: jp.optional(),
-		frontend: jp.optional(),
-		admin: jp.optional()
+		backend: tm.optional(),
+		frontend: tm.optional(),
+		admin: tm.optional()
 	}).default({}),
 	services: j.object({
-		postgres: Mp.optional(),
-		valkey: Mp.optional(),
-		bucket: Mp.optional()
+		postgres: nm.optional(),
+		valkey: nm.optional(),
+		bucket: nm.optional()
 	}).default({}),
-	fly: Np.optional(),
-	railway: Pp.optional()
+	fly: rm.optional(),
+	railway: im.optional()
 });
-async function Ip(e) {
+async function om(e) {
 	let t = await q(e).catch((e) => {
 		throw Error(`Could not read ${X}: ${e instanceof Error ? e.message : String(e)}. Fix it, then run deploy again.`);
 	});
 	if (!t) throw Error(`No ${X} in this project, so there is nothing to deploy. Run "hype-stack init" to create one, or deploy from the root of a project made with "hype-stack create".`);
 	return t;
 }
-async function Lp(e) {
-	let t = (await Ip(e))[gd];
+async function sm(e) {
+	let t = (await om(e))[_d];
 	if (t === void 0) return null;
-	let n = Fp.safeParse(t);
-	if (!n.success) throw Error(`Invalid "${gd}" block in ${X}:\n  ${j.prettifyError(n.error)}`);
-	if (n.data.version > 1) throw Error(`The "${gd}" block in ${X} was written by a newer CLI (version ${n.data.version}, this CLI understands 1). Upgrade with "npm i -g @hype-stack/cli".`);
+	let n = am.safeParse(t);
+	if (!n.success) throw Error(`Invalid "${_d}" block in ${X}:\n  ${j.prettifyError(n.error)}`);
+	if (n.data.version > 1) throw Error(`The "${_d}" block in ${X} was written by a newer CLI (version ${n.data.version}, this CLI understands 1). Upgrade with "npm i -g @hype-stack/cli".`);
 	return n.data;
 }
-async function Rp(e, t) {
+async function cm(e, t) {
 	await Vi(e, {
-		...await Ip(e),
-		[gd]: Bp(t)
+		...await om(e),
+		[_d]: um(t)
 	});
 }
-function zp(e, t = vd) {
+function lm(e, t = yd) {
 	return {
 		version: 1,
 		projectName: e,
@@ -8354,7 +8615,7 @@ function zp(e, t = vd) {
 		services: {}
 	};
 }
-function Bp(e) {
+function um(e) {
 	let t = {
 		version: e.version,
 		projectName: e.projectName,
@@ -8384,7 +8645,7 @@ function Bp(e) {
 }
 //#endregion
 //#region src/deploy/detect.ts
-var Vp = [
+var dm = [
 	"@hono/node-server",
 	"@tanstack/react-start",
 	"@tanstack/start",
@@ -8392,41 +8653,41 @@ var Vp = [
 	"express",
 	"fastify"
 ];
-function Hp(e, t, n) {
-	let r = Sd[t], i = n?.paths?.[r.pathKey]?.root, a = n?.apps?.[t];
+function fm(e, t, n) {
+	let r = Cd[t], i = n?.paths?.[r.pathKey]?.root, a = n?.apps?.[t];
 	return T.resolve(e, i ?? a ?? r.defaultRoot);
 }
-async function Up(e, t) {
-	return (await Promise.all(yd.map(async (n) => {
-		let r = Hp(e, n, t);
+async function pm(e, t) {
+	return (await Promise.all(bd.map(async (n) => {
+		let r = fm(e, n, t);
 		return await G(T.join(r, "package.json")) ? n : null;
 	}))).filter((e) => e !== null);
 }
-var Wp = ["build:web", "build"];
-async function Gp(e, t) {
+var mm = ["build:web", "build"];
+async function hm(e, t) {
 	let [n, r] = await Promise.all([G(T.join(e, "Dockerfile")), oi(T.join(e, "package.json")).catch(() => null)]);
 	if (n) return "node";
-	if (Sd[t].serveMode === "node") return null;
+	if (Cd[t].serveMode === "node") return null;
 	let i = r?.scripts ?? {}, a = {
 		...r?.dependencies,
 		...r?.devDependencies
-	}, o = Wp.some((e) => i[e] !== void 0), s = Vp.some((e) => a[e] !== void 0);
+	}, o = mm.some((e) => i[e] !== void 0), s = dm.some((e) => a[e] !== void 0);
 	return o || !s ? "static" : null;
 }
-async function Kp(e, t, n) {
-	let r = await Promise.all(t.map(async (t) => [t, await Gp(Hp(e, t, n), t)]));
+async function gm(e, t, n) {
+	let r = await Promise.all(t.map(async (t) => [t, await hm(fm(e, t, n), t)]));
 	return Object.fromEntries(r);
 }
-function qp(e) {
+function _m(e) {
 	let t = {};
-	for (let n of yd) {
+	for (let n of bd) {
 		let r = e[n];
 		r && (t[n] = r);
 	}
 	return t;
 }
-async function Jp(e, t) {
-	let n = Sd[t].staticDir ?? "dist", r = [
+async function vm(e, t) {
+	let n = Cd[t].staticDir ?? "dist", r = [
 		n,
 		"dist",
 		".output/public",
@@ -8438,11 +8699,11 @@ async function Jp(e, t) {
 //#endregion
 //#region src/deploy/dry-run.ts
 var $ = "dry-run-placeholder";
-function Yp(e, t) {
+function ym(e, t) {
 	let n = e.args.indexOf(t);
 	return n === -1 ? "app" : e.args[n + 1] ?? "app";
 }
-var Xp = "dryrun00cluster", Zp = "dryrun00service", Qp = [
+var bm = "dryrun00cluster", xm = "dryrun00service", Sm = [
 	{
 		match: "fly orgs list",
 		stdout: JSON.stringify([{
@@ -8460,13 +8721,13 @@ var Xp = "dryrun00cluster", Zp = "dryrun00service", Qp = [
 	},
 	{
 		match: "fly mpg create",
-		stdout: `Managed Postgres cluster created successfully!\n  ID: ${Xp}\n  Connection string: postgres://hype:${$}@example.flympg.net:5432/postgres`
+		stdout: `Managed Postgres cluster created successfully!\n  ID: ${bm}\n  Connection string: postgres://hype:${$}@example.flympg.net:5432/postgres`
 	},
 	{
 		match: "fly mpg status",
 		stdout: JSON.stringify({
 			data: {
-				id: Xp,
+				id: bm,
 				status: "ready"
 			},
 			credentials: { pgbouncer_uri: `postgres://hype:${$}@example.flympg.net:5432/postgres` }
@@ -8483,7 +8744,7 @@ var Xp = "dryrun00cluster", Zp = "dryrun00service", Qp = [
 	{
 		match: "fly storage create",
 		stdout: (e) => [
-			`BUCKET_NAME: ${Yp(e, "--name")}`,
+			`BUCKET_NAME: ${ym(e, "--name")}`,
 			"AWS_ENDPOINT_URL_S3: https://fly.storage.tigris.dev",
 			`AWS_ACCESS_KEY_ID: ${$}`,
 			`AWS_SECRET_ACCESS_KEY: ${$}`
@@ -8504,8 +8765,8 @@ var Xp = "dryrun00cluster", Zp = "dryrun00service", Qp = [
 	{
 		match: "railway add",
 		stdout: (e) => JSON.stringify({
-			id: Zp,
-			name: Yp(e, "--service")
+			id: xm,
+			name: ym(e, "--service")
 		})
 	},
 	{
@@ -8520,7 +8781,7 @@ var Xp = "dryrun00cluster", Zp = "dryrun00service", Qp = [
 	},
 	{
 		match: "railway domain",
-		stdout: (e) => JSON.stringify({ domain: `${Yp(e, "--service")}-production.up.railway.app` })
+		stdout: (e) => JSON.stringify({ domain: `${ym(e, "--service")}-production.up.railway.app` })
 	},
 	{
 		match: "railway variable list",
@@ -8539,7 +8800,7 @@ var Xp = "dryrun00cluster", Zp = "dryrun00service", Qp = [
 		stdout: (e) => JSON.stringify({
 			id: "dryrun00bucket",
 			name: e.args[2] ?? "bucket",
-			region: Yp(e, "--region"),
+			region: ym(e, "--region"),
 			staged: !1,
 			committed: !0
 		})
@@ -8559,7 +8820,7 @@ var Xp = "dryrun00cluster", Zp = "dryrun00service", Qp = [
 		match: "railway api",
 		stdout: JSON.stringify({ data: { serviceInstanceUpdate: !0 } })
 	}
-], $p = {
+], Cm = {
 	backend: [
 		"NODE_ENV",
 		"APP_ENV",
@@ -8587,55 +8848,60 @@ var Xp = "dryrun00cluster", Zp = "dryrun00service", Qp = [
 		"VITE_APP_TYPE",
 		"VITE_ENVIRONMENT"
 	]
-}, em = new Set([
+}, wm = new Set([
 	"VITE_SENTRY_AUTH_TOKEN",
 	"POSTGRES_USER",
 	"POSTGRES_PASSWORD",
 	"POSTGRES_DB",
 	"POSTGRES_HOST",
 	"POSTGRES_PORT"
-]), tm = /(?:^|\/\/|@)(?:localhost|127\.0\.0\.1|0\.0\.0\.0|host\.docker\.internal)(?::\d+)?(?:\/|$)/i;
-function nm(e) {
+]), Tm = /(?:^|\/\/|@)(?:localhost|127\.0\.0\.1|0\.0\.0\.0|host\.docker\.internal)(?::\d+)?(?:\/|$)/i;
+function Em(e) {
 	let { plan: t, serviceOutputs: n, urls: r, localEnv: i = {}, declaredKeys: a = {}, exampleEnv: o = {}, externallyProvided: s = {} } = e;
 	return t.targets.map((e) => {
-		let c = cm({
+		let c = Dm(e, t, r), l = Nm({
 			target: e.target,
 			environment: t.environment,
 			port: e.spec.port,
 			serviceOutputs: n,
-			urls: r
-		}), l = a[e.target] ?? [], u = i[e.target] ?? {}, d = r[e.target], { forwarded: f, rehosted: p, skippedLocal: m } = um({
-			declared: l,
-			local: u,
-			managed: c,
-			origin: d,
+			urls: c
+		}), u = a[e.target] ?? [], d = i[e.target] ?? {}, f = c[e.target], { forwarded: p, rehosted: m, skippedLocal: h } = Fm({
+			declared: u,
+			local: d,
+			managed: l,
+			origin: f,
 			target: e.target
-		}), h = new Set(s[e.target] ?? []), g = l.filter((e) => c[e] === void 0 && f[e] === void 0 && !em.has(e) && !h.has(e)), { seeded: _, seededRehosted: v } = rm({
-			keys: g,
+		}), g = new Set(s[e.target] ?? []), _ = u.filter((e) => l[e] === void 0 && p[e] === void 0 && !wm.has(e) && !g.has(e)), { seeded: v, seededRehosted: y } = Om({
+			keys: _,
 			example: o[e.target] ?? {},
-			origin: d
-		}), y = g.filter((e) => _[e] === void 0);
+			origin: f
+		}), b = _.filter((e) => v[e] === void 0);
 		return {
 			target: e.target,
-			managed: c,
-			forwarded: f,
-			seeded: _,
-			rehosted: [...p, ...v],
-			missing: y,
-			skippedLocal: m
+			managed: l,
+			forwarded: p,
+			seeded: v,
+			rehosted: [...m, ...y],
+			missing: b,
+			skippedLocal: h
 		};
 	});
 }
-function rm(e) {
+function Dm(e, t, n) {
+	let r = e.provider === "railway" && e.spec.serveMode !== "static", i = {};
+	for (let e of t.targets) i[e.target] = r && e.provider === "railway" ? ap(e.app) : n[e.target];
+	return i;
+}
+function Om(e) {
 	let t = {}, n = [];
 	for (let r of e.keys) {
 		let i = e.example[r];
 		if (i === void 0 || i.trim() === "" || i.includes("${")) continue;
-		if (!tm.test(i)) {
+		if (!Tm.test(i)) {
 			t[r] = i;
 			continue;
 		}
-		let a = im(i, e.origin);
+		let a = km(i, e.origin);
 		a && (t[r] = a, n.push(r));
 	}
 	return {
@@ -8643,24 +8909,23 @@ function rm(e) {
 		seededRehosted: n
 	};
 }
-function im(e, t) {
+function km(e, t) {
 	if (!t) return null;
+	let n;
 	try {
-		let n = new URL(e);
-		if (!/^https?:$/.test(n.protocol)) return null;
-		let r = new URL(t);
-		return r.pathname = n.pathname, r.search = n.search, r.hash = n.hash, n.pathname === "/" && !e.trimEnd().endsWith("/") ? r.toString().replace(/\/$/, "") : r.toString();
+		n = new URL(e);
 	} catch {
 		return null;
 	}
+	return /^https?:$/.test(n.protocol) ? `${t.replace(/\/+$/, "")}${n.pathname === "/" && !e.trimEnd().endsWith("/") ? "" : n.pathname}${n.search}${n.hash}` : null;
 }
-var am = "(pending)", om = "https://pending.invalid";
-function sm(e) {
+var Am = "(pending)", jm = "https://pending.invalid";
+function Mm(e) {
 	let { plan: t, localEnv: n, declaredKeys: r, exampleEnv: i } = e, a = {};
-	for (let e of t.targets) a[e.target] = e.url ?? om;
+	for (let e of t.targets) a[e.target] = e.url ?? jm;
 	let o = {};
-	for (let e of t.services) o[e.service] = e.external ?? Object.fromEntries(e.spec.provides.map((e) => [e, am]));
-	return nm({
+	for (let e of t.services) o[e.service] = e.external ?? Object.fromEntries(e.spec.provides.map((e) => [e, Am]));
+	return Em({
 		plan: t,
 		serviceOutputs: o,
 		urls: a,
@@ -8669,14 +8934,14 @@ function sm(e) {
 		exampleEnv: i
 	});
 }
-function cm(e) {
+function Nm(e) {
 	let { target: t, environment: n, port: r, serviceOutputs: i, urls: a } = e;
-	return t === "backend" ? lm({
+	return t === "backend" ? Pm({
 		environment: n,
 		port: r,
 		serviceOutputs: i,
 		urls: a
-	}) : fm(t === "frontend" ? {
+	}) : Lm(t === "frontend" ? {
 		VITE_API_BASE_URL: a.backend,
 		VITE_ADMIN_URL: a.admin,
 		VITE_PUBLIC_SITE_URL: a.frontend,
@@ -8688,9 +8953,9 @@ function cm(e) {
 		VITE_ENVIRONMENT: n
 	});
 }
-function lm(e) {
+function Pm(e) {
 	let { environment: t, port: n, serviceOutputs: r, urls: i } = e;
-	return fm({
+	return Lm({
 		NODE_ENV: "production",
 		APP_ENV: t,
 		PORT: n === void 0 ? void 0 : String(n),
@@ -8702,14 +8967,14 @@ function lm(e) {
 		SERVER_URL: i.backend
 	});
 }
-function um(e) {
-	let { declared: t, local: n, managed: r, origin: i, target: a } = e, o = new Set($p[a]), s = {}, c = [], l = [];
+function Fm(e) {
+	let { declared: t, local: n, managed: r, origin: i, target: a } = e, o = new Set(Cm[a]), s = {}, c = [], l = [];
 	for (let e of t) {
-		if (o.has(e) || r[e] !== void 0 || em.has(e)) continue;
+		if (o.has(e) || r[e] !== void 0 || wm.has(e)) continue;
 		let t = n[e];
 		if (!(t === void 0 || t.trim() === "") && !t.includes("${")) {
-			if (tm.test(t)) {
-				let n = im(t, i);
+			if (Tm.test(t)) {
+				let n = km(t, i);
 				if (!n) {
 					l.push(e);
 					continue;
@@ -8726,19 +8991,19 @@ function um(e) {
 		skippedLocal: l
 	};
 }
-function dm(e) {
+function Im(e) {
 	return {
 		...e.seeded,
 		...e.forwarded,
 		...e.managed
 	};
 }
-function fm(e) {
+function Lm(e) {
 	let t = {};
 	for (let [n, r] of Object.entries(e)) r !== void 0 && r !== "" && (t[n] = r);
 	return t;
 }
-function pm(e) {
+function Rm(e) {
 	let t = {};
 	for (let n of e.split(/\r?\n/)) {
 		let e = n.trim();
@@ -8746,27 +9011,27 @@ function pm(e) {
 		let r = e.startsWith("export ") ? e.slice(7).trim() : e, i = r.indexOf("=");
 		if (i <= 0) continue;
 		let a = r.slice(0, i).trim();
-		/^[A-Za-z_][A-Za-z0-9_]*$/.test(a) && (t[a] = mm(r.slice(i + 1).trim()));
+		/^[A-Za-z_][A-Za-z0-9_]*$/.test(a) && (t[a] = zm(r.slice(i + 1).trim()));
 	}
 	return t;
 }
-function mm(e) {
+function zm(e) {
 	if (e.length >= 2 && (e.startsWith("\"") && e.endsWith("\"") || e.startsWith("'") && e.endsWith("'"))) return e.slice(1, -1);
 	let t = e.indexOf(" #");
 	return t === -1 ? e : e.slice(0, t).trim();
 }
-function hm(e) {
-	return [...new Set(Object.keys(pm(e)))];
+function Bm(e) {
+	return [...new Set(Object.keys(Rm(e)))];
 }
 //#endregion
 //#region src/deploy/migrations.ts
-var gm = [
+var Vm = [
 	"migration:latest",
 	"migrate:deploy",
 	"db:migrate:deploy"
 ];
-async function _m(e, t) {
-	let n = await oi(T.join(e, "package.json")).catch(() => null), r = gm.find((e) => typeof n?.scripts?.[e] == "string");
+async function Hm(e, t) {
+	let n = await oi(T.join(e, "package.json")).catch(() => null), r = Vm.find((e) => typeof n?.scripts?.[e] == "string");
 	if (r && n?.name) return [
 		"pnpm",
 		"--filter",
@@ -8779,7 +9044,7 @@ async function _m(e, t) {
 		"run",
 		r
 	];
-	let i = await vm(e);
+	let i = await Um(e);
 	return [
 		"npx",
 		"prisma",
@@ -8789,7 +9054,7 @@ async function _m(e, t) {
 		T.relative(t, i).split(T.sep).join("/")
 	];
 }
-async function vm(e) {
+async function Um(e) {
 	let t = T.join(e, "prisma"), n = T.join(t, "schema");
 	if (await ri(n)) return n;
 	let r = T.join(t, "schema.prisma");
@@ -8797,16 +9062,16 @@ async function vm(e) {
 }
 //#endregion
 //#region src/deploy/orchestrate.ts
-async function ym(e) {
+async function Wm(e) {
 	let { plan: t, runner: n, log: r } = e, i = [], a = {}, o = { ...e.knownServiceOutputs }, s = {}, c = [], l = {
 		runner: n,
 		plan: t,
 		cwd: t.projectRoot,
 		log: r
-	}, u = (t) => e.adapters?.[t] ?? cp(t), d = (e, n) => (i.push({
+	}, u = (t) => e.adapters?.[t] ?? Rp(t), d = (e, n) => (i.push({
 		...e,
 		status: "failed",
-		detail: Tm(n)
+		detail: Xm(n)
 	}), {
 		plan: t,
 		steps: i,
@@ -8815,7 +9080,7 @@ async function ym(e) {
 		envPlans: c,
 		ok: !1
 	});
-	if (!e.skipAuthCheck) for (let n of Sm(t)) {
+	if (!e.skipAuthCheck) for (let n of qm(t)) {
 		let t = {
 			id: `auth:${n}`,
 			label: `Check ${n} login`
@@ -8880,13 +9145,13 @@ async function ym(e) {
 			}, e.providedByProvider && f && (s[f.target] = [...s[f.target] ?? [], ...e.providedByProvider]), i.push({
 				...t,
 				status: "ok",
-				detail: e.note ?? wm(e.outputs)
+				detail: e.note ?? Ym(e.outputs)
 			});
 		} catch (e) {
 			return d(t, e);
 		}
 	}
-	c = nm({
+	c = Em({
 		plan: t,
 		serviceOutputs: o,
 		urls: a,
@@ -8895,9 +9160,9 @@ async function ym(e) {
 		exampleEnv: e.exampleEnv,
 		externallyProvided: s
 	});
-	let p = new Map(c.map((e) => [e.target, e])), m = f && !e.skipMigrations ? await _m(f.root, t.projectRoot) : void 0, h = !1;
+	let p = new Map(c.map((e) => [e.target, e])), m = f && !e.skipMigrations ? await Hm(f.root, t.projectRoot) : void 0, h = !1, g = /* @__PURE__ */ new Set();
 	for (let e of t.targets) {
-		let t = p.get(e.target), n = t ? dm(t) : {}, o = Cm(n), s = u(e.provider), c = {
+		let t = p.get(e.target), n = t ? Im(t) : {}, o = Jm(n), s = u(e.provider), c = {
 			id: `env:${e.target}`,
 			label: `Configure ${e.spec.label} env`
 		};
@@ -8911,10 +9176,15 @@ async function ym(e) {
 				status: "ok",
 				detail: `${Object.keys(n).length} variables`
 			});
-		} catch (e) {
-			return d(c, e);
+		} catch (t) {
+			i.push({
+				...c,
+				status: "failed",
+				detail: Xm(t)
+			}), g.add(e.target);
+			continue;
 		}
-		let g = {
+		let d = {
 			id: `deploy:${e.target}`,
 			label: `Deploy ${e.spec.label}`
 		};
@@ -8927,12 +9197,40 @@ async function ym(e) {
 				releaseCommand: e === f ? m : void 0
 			});
 			t.url && (a[e.target] = t.url), t.releaseRan && (h = !0), i.push({
-				...g,
+				...d,
 				status: "ok",
 				detail: t.url ?? t.note
 			});
-		} catch (e) {
-			return d(g, e);
+		} catch (t) {
+			i.push({
+				...d,
+				status: "failed",
+				detail: Xm(t)
+			}), g.add(e.target);
+		}
+	}
+	for (let e of t.targets) {
+		if (g.has(e.target)) continue;
+		let t = u(e.provider);
+		if (!t.awaitTarget) continue;
+		let n = {
+			id: `verify:${e.target}`,
+			label: `Verify ${e.spec.label}`
+		};
+		try {
+			r?.(`Waiting for ${e.spec.label} to come up`);
+			let a = await t.awaitTarget(l, e);
+			i.push({
+				...n,
+				status: a.ok ? "ok" : "failed",
+				detail: a.detail
+			}), a.ok || g.add(e.target);
+		} catch (t) {
+			i.push({
+				...n,
+				status: "failed",
+				detail: Xm(t)
+			}), g.add(e.target);
 		}
 	}
 	if (f) {
@@ -8940,7 +9238,12 @@ async function ym(e) {
 			id: "migrate",
 			label: "Apply database migrations"
 		};
-		if (e.skipMigrations || !m) i.push({
+		if (g.has(f.target)) i.push({
+			...t,
+			status: "skipped",
+			detail: `not run because the ${f.spec.label} deploy failed`
+		});
+		else if (e.skipMigrations || !m) i.push({
 			...t,
 			status: "skipped",
 			detail: "--skip-migrations"
@@ -8951,7 +9254,7 @@ async function ym(e) {
 			detail: `${m.join(" ")} (ran with the release)`
 		});
 		else {
-			let e = await bm({
+			let e = await Gm({
 				ctx: l,
 				adapter: u(f.provider),
 				backend: f,
@@ -8972,7 +9275,7 @@ async function ym(e) {
 		ok: i.every((e) => e.status !== "failed")
 	};
 }
-async function bm(e) {
+async function Gm(e) {
 	let { ctx: t, adapter: n, backend: r, command: i } = e;
 	if (!n.runRemote) return {
 		status: "skipped",
@@ -8984,38 +9287,38 @@ async function bm(e) {
 		status: "ok",
 		detail: i.join(" ")
 	};
-	let o = xm(a.output);
+	let o = Km(a.output);
 	return {
 		status: "skipped",
 		detail: `Could not run migrations remotely${o ? ` (${o})` : ""}. Run "${i.join(" ")}" against ${r.app}.`
 	};
 }
-function xm(e) {
+function Km(e) {
 	let t = e.split(/\r?\n/).map((e) => e.trim()).find((e) => e.length > 0);
 	if (t) return t.length > 160 ? `${t.slice(0, 157)}...` : t;
 }
-function Sm(e) {
+function qm(e) {
 	let t = /* @__PURE__ */ new Set();
 	for (let n of e.targets) t.add(n.provider);
 	for (let n of e.services) n.external || t.add(n.provider);
 	return [...t];
 }
-function Cm(e) {
+function Jm(e) {
 	return Object.entries(e).filter(([e, t]) => t.length >= 8 && !e.startsWith("VITE_") && !/^https?:\/\//.test(t)).map(([, e]) => e);
 }
-function wm(e) {
+function Ym(e) {
 	let t = Object.keys(e);
 	return t.length === 0 ? void 0 : `set ${t.join(", ")}`;
 }
-function Tm(e) {
+function Xm(e) {
 	return e instanceof Error ? e.message : String(e);
 }
 //#endregion
 //#region src/deploy/plan.ts
-function Em(e) {
+function Zm(e) {
 	let { projectRoot: t, config: n, assignment: r, stackConfig: i, serveModes: a = {}, staticDirs: o = {} } = e, s = [];
-	for (let [e, c] of Om(r)) {
-		let r = n.targets[e], l = Sd[e];
+	for (let [e, c] of $m(r)) {
+		let r = n.targets[e], l = Cd[e];
 		s.push({
 			target: e,
 			spec: {
@@ -9024,22 +9327,22 @@ function Em(e) {
 				staticDir: o[e] ?? l.staticDir
 			},
 			provider: c,
-			app: r?.app ?? kd(n.projectName, e),
+			app: r?.app ?? jd(n.projectName, e, c),
 			region: r?.region,
 			url: r?.url,
-			root: Hp(t, e, i)
+			root: fm(t, e, i)
 		});
 	}
 	let c = [];
-	if (r.targets.backend) for (let e of bd) {
+	if (r.targets.backend) for (let e of xd) {
 		let t = r.services[e];
 		if (!t) continue;
 		let i = n.services[e];
 		c.push({
 			service: e,
-			spec: Cd[e],
+			spec: wd[e],
 			provider: t,
-			name: i?.name ?? kd(n.projectName, e),
+			name: i?.name ?? jd(n.projectName, e, t),
 			region: i?.region,
 			external: i?.external
 		});
@@ -9054,20 +9357,20 @@ function Em(e) {
 		railway: n.railway ?? {}
 	};
 }
-var Dm = [
+var Qm = [
 	"frontend",
 	"admin",
 	"backend"
 ];
-function Om(e) {
+function $m(e) {
 	let t = [];
-	for (let n of Dm) {
+	for (let n of Qm) {
 		let r = e.targets[n];
 		r && t.push([n, r]);
 	}
 	return t;
 }
-function km(e, t) {
+function eh(e, t) {
 	let n = {
 		...e,
 		environment: t.environment,
@@ -9097,20 +9400,20 @@ function km(e, t) {
 }
 //#endregion
 //#region src/deploy/project-env.ts
-async function Am(e) {
+async function th(e) {
 	return await G(e) ? C.readFile(e, "utf-8") : null;
 }
-async function jm(e, t) {
-	let n = pm(await Am(T.join(e, ".env")) ?? ""), r = await Promise.all(t.map(async (e) => {
-		let [t, r] = await Promise.all([Am(T.join(e.root, ".env")), Am(T.join(e.root, ".env.example"))]);
+async function nh(e, t) {
+	let n = Rm(await th(T.join(e, ".env")) ?? ""), r = await Promise.all(t.map(async (e) => {
+		let [t, r] = await Promise.all([th(T.join(e.root, ".env")), th(T.join(e.root, ".env.example"))]);
 		return {
 			target: e.target,
 			local: {
 				...n,
-				...pm(t ?? "")
+				...Rm(t ?? "")
 			},
-			declared: hm(r ?? ""),
-			example: pm(r ?? "")
+			declared: Bm(r ?? ""),
+			example: Rm(r ?? "")
 		};
 	})), i = {}, a = {}, o = {};
 	for (let e of r) i[e.target] = e.local, a[e.target] = e.declared, o[e.target] = e.example;
@@ -9122,23 +9425,23 @@ async function jm(e, t) {
 }
 //#endregion
 //#region src/deploy/report.ts
-function Mm(e) {
+function rh(e) {
 	let t = [];
 	t.push(`${F.label("Project")}  ${F.highlight(e.projectName)}`), t.push(`${F.label("Env")}      ${F.highlight(e.environment)}`), t.push(""), t.push(F.bold("Apps"));
 	for (let n of e.targets) {
-		let e = F.accent(Dd(n.provider)), r = F.muted(n.spec.serveMode === "static" ? "static bundle" : "node server"), i = n.url ? `  ${F.muted(n.url)}` : "";
+		let e = F.accent(Od(n.provider)), r = F.muted(n.spec.serveMode === "static" ? "static bundle" : "node server"), i = n.url ? `  ${F.muted(n.url)}` : "";
 		t.push(`  ${L.arrow} ${n.spec.label} ${F.muted("->")} ${e} ${F.muted(`(${n.app})`)} ${r}${i}`);
 	}
 	if (e.services.length > 0) {
 		t.push(""), t.push(F.bold("Services"));
 		for (let n of e.services) {
-			let e = n.external ? F.muted("external (from stack.json)") : F.accent(Dd(n.provider));
+			let e = n.external ? F.muted("external (from stack.json)") : F.accent(Od(n.provider));
 			t.push(`  ${L.arrow} ${n.spec.label} ${F.muted("->")} ${e} ${F.muted(`(${n.name})`)}`);
 		}
 	}
 	return t.join("\n");
 }
-function Nm(e) {
+function ih(e) {
 	let t = [];
 	for (let n of e) {
 		let e = Object.keys(n.managed).length, r = Object.keys(n.forwarded).length;
@@ -9148,19 +9451,19 @@ function Nm(e) {
 	}
 	return t.join("\n");
 }
-function Pm(e) {
+function ah(e) {
 	return e.steps.map((e) => {
 		let t = e.status === "ok" ? F.success("✓") : e.status === "skipped" ? F.warning("-") : F.error("✗"), n = e.detail ? ` ${F.muted(e.detail)}` : "";
 		return `${t} ${e.label}${n}`;
 	}).join("\n");
 }
-function Fm(e) {
+function oh(e) {
 	return e.plan.targets.map((t) => {
 		let n = e.urls[t.target];
 		return n ? `${F.label(t.spec.label)}  ${I(n)}` : `${F.label(t.spec.label)}  ${F.muted("no public URL")}`;
 	}).join("\n");
 }
-function Im(e) {
+function sh(e) {
 	let t = [];
 	for (let n of e.envPlans) {
 		n.missing.length > 0 && t.push(`${Z(n.target)} is missing ${n.missing.join(", ")}. The app will boot only once those are set.`);
@@ -9172,44 +9475,44 @@ function Im(e) {
 }
 //#endregion
 //#region src/commands/deploy.ts
-async function Lm(e = {}) {
+async function ch(e = {}) {
 	let t = T.resolve(e.cwd ?? process.cwd()), n = e.yes === !0;
 	ll(), c.intro(F.brandBold("Deploy your stack")), await Gi(t) || z(`${F.path(t)} doesn't look like a Hype Stack project. Run this from the project root.`, { reason: "not_a_project" }), await Bi(t) || z(`${F.path(t)} has no ${F.path(pe)}, so it is not a Hype Stack project this CLI can deploy. Run "hype-stack init" here first, or deploy a project made with "hype-stack create".`, { reason: "not_a_project" });
-	let r = await q(t).catch(() => null), i = await Rm(t);
-	i ||= zp(_i(r?.name ?? T.basename(t))), e.environment && (i.environment = e.environment), e.flyOrg && (i.fly = {
+	let r = await q(t).catch(() => null), i = await lh(t);
+	i ||= lm(_i(r?.name ?? T.basename(t))), e.environment && (i.environment = e.environment), e.flyOrg && (i.fly = {
 		...i.fly,
 		org: e.flyOrg
 	}), e.railwayWorkspace && (i.railway = {
 		...i.railway,
 		workspace: e.railwayWorkspace
 	});
-	let a = await Up(t, r);
+	let a = await pm(t, r);
 	a.length === 0 && z("Found no deployable apps. Expected at least one of apps/backend, apps/frontend, or apps/admin.");
-	let o = e.only ?? [], s = Bm(e.assign), l = zm(e.provider, "--provider"), u = Ad({
+	let o = e.only ?? [], s = dh(e.assign), l = uh(e.provider, "--provider"), u = Md({
 		config: i,
 		defaultProvider: l,
 		overrides: s,
 		availableTargets: a,
 		only: o
-	}), d = await Kp(t, jd(a, o), r);
-	n || (u = await Hm({
+	}), d = await gm(t, Nd(a, o), r);
+	n || (u = await ph({
 		assignment: u,
 		availableTargets: a,
 		requestedTargets: o
 	}));
-	let f = Md({
+	let f = Pd({
 		assignment: u,
 		availableTargets: a,
 		requestedTargets: o,
 		serveModes: d
 	});
-	f.length > 0 && (R(Pd(f), "Cannot deploy yet"), z("Fix the assignments above and run deploy again.", { reason: "input_required" }));
-	let p = qp(d), m = await Km({
+	f.length > 0 && (R(Id(f), "Cannot deploy yet"), z("Fix the assignments above and run deploy again.", { reason: "input_required" }));
+	let p = _m(d), m = await _h({
 		cwd: t,
 		targets: u.targets,
 		serveModes: p,
 		stackConfig: r
-	}), h = Em({
+	}), h = Zm({
 		projectRoot: t,
 		config: i,
 		assignment: u,
@@ -9217,13 +9520,13 @@ async function Lm(e = {}) {
 		serveModes: p,
 		staticDirs: m
 	});
-	R(Mm(h), e.dryRun ? "Deployment plan (dry run)" : "Deployment plan");
+	R(rh(h), e.dryRun ? "Deployment plan (dry run)" : "Deployment plan");
 	let g = e.dryRun ? {
 		env: {},
 		accounts: {}
-	} : await gp({
+	} : await Bp({
 		plan: h,
-		providers: Sm(h),
+		providers: qm(h),
 		skipPrompts: n
 	});
 	if (!n && !e.dryRun) {
@@ -9232,27 +9535,27 @@ async function Lm(e = {}) {
 			message: "Deploying creates billable infrastructure. Re-run with --yes to confirm non-interactively."
 		});
 		let e = await c.confirm({
-			message: `Create and deploy this on ${qm(h.targets.map((e) => e.provider))}?`,
+			message: `Create and deploy this on ${vh(h.targets.map((e) => e.provider))}?`,
 			initialValue: !0
 		});
 		(c.isCancel(e) || !e) && B();
 	}
-	let _ = await jm(t, h.targets);
-	R(Nm(sm({
+	let _ = await nh(t, h.targets);
+	R(ih(Mm({
 		plan: h,
 		localEnv: _.local,
 		declaredKeys: _.declared,
 		exampleEnv: _.example
-	})), "Environment"), await hd(t).catch(() => null);
-	let v = St(), y = [], b = e.dryRun ? mp({
+	})), "Environment"), await gd(t).catch(() => null);
+	let v = St(), y = [], b = e.dryRun ? gf({
 		onCommand: (e) => y.push(e),
-		responses: Qp
-	}) : pp({
+		responses: Sm
+	}) : hf({
 		onCommand: (e) => y.push(e),
 		env: g.env
 	});
 	v.start(e.dryRun ? "Walking the plan" : "Deploying");
-	let x = await ym({
+	let x = await Wm({
 		plan: h,
 		runner: b,
 		localEnv: _.local,
@@ -9264,101 +9567,101 @@ async function Lm(e = {}) {
 		knownAccounts: g.accounts,
 		log: (e) => v.message(e)
 	});
-	if (v.stop(x.ok ? F.success("Deploy finished") : F.error("Deploy stopped")), R(Pm(x), "Steps"), e.dryRun) {
+	if (v.stop(x.ok ? F.success("Deploy finished") : F.error("Deploy stopped")), R(ah(x), "Steps"), e.dryRun) {
 		R(y.map((e) => F.command(e)).join("\n"), "Commands that would run"), c.outro(F.muted("Dry run only. No infrastructure was created."));
 		return;
 	}
-	if (await Rp(t, km(i, x.plan)), !x.ok) {
-		let e = x.steps.find((e) => e.status === "failed");
-		R(`${e?.label ?? "A step"} failed.\n${e?.detail ?? ""}\n\nWhat succeeded is saved in ${F.path(X)}, so re-running picks up from here.`, "Deploy failed"), z("Deploy did not finish.");
+	if (await cm(t, eh(i, x.plan)), !x.ok) {
+		let e = x.steps.filter((e) => e.status === "failed");
+		R(`${e.length > 0 ? e.map((e) => `${e.label} failed.${e.detail ? `\n${e.detail}` : ""}`).join("\n\n") : "A step failed."}\n\nWhat succeeded is saved in ${F.path(X)}, so re-running picks up from here.`, "Deploy failed"), z("Deploy did not finish.");
 	}
-	R(Fm(x), "Live");
-	let S = Im(x);
+	R(oh(x), "Live");
+	let S = sh(x);
 	S.length > 0 && R(S.map((e) => `${F.warning("!")} ${e}`).join("\n\n"), "Still to do"), c.outro(F.brand("Shipped."));
 }
-async function Rm(e) {
+async function lh(e) {
 	try {
-		return await Lp(e);
+		return await sm(e);
 	} catch (e) {
 		z(e instanceof Error ? e.message : String(e));
 	}
 }
-function zm(e, t) {
-	if (e) return Ed(e) || z(`Unknown provider "${e}" for ${t}. Pick one of ${Object.keys(wd).join(", ")}.`), e;
+function uh(e, t) {
+	if (e) return Dd(e) || z(`Unknown provider "${e}" for ${t}. Pick one of ${Object.keys(Td).join(", ")}.`), e;
 }
-function Bm(e) {
+function dh(e) {
 	let t = {};
 	for (let [n, r] of Object.entries(e ?? {})) {
-		let e = zm(r, `--${n}`);
+		let e = uh(r, `--${n}`);
 		e && (t[n] = e);
 	}
 	return t;
 }
-function Vm(e) {
-	let { assignment: t, availableTargets: n, requestedTargets: r } = e, i = jd(n, r).filter((e) => !t.targets[e]);
+function fh(e) {
+	let { assignment: t, availableTargets: n, requestedTargets: r } = e, i = Nd(n, r).filter((e) => !t.targets[e]);
 	return {
 		targets: i,
-		services: t.targets.backend !== void 0 || i.includes("backend") ? bd.filter((e) => !t.services[e]) : []
+		services: t.targets.backend !== void 0 || i.includes("backend") ? xd.filter((e) => !t.services[e]) : []
 	};
 }
-async function Hm(e) {
+async function ph(e) {
 	let t = {
 		targets: { ...e.assignment.targets },
 		services: { ...e.assignment.services }
-	}, { targets: n, services: r } = Vm(e);
+	}, { targets: n, services: r } = fh(e);
 	if (n.length + r.length > 1) {
-		let e = await Um();
+		let e = await mh();
 		if (e) {
 			for (let r of n) t.targets[r] = e;
 			for (let n of r) t.services[n] = e;
 			return t;
 		}
 	}
-	for (let e of n) t.targets[e] = await Gm(e, Od(e));
-	for (let e of r) t.services[e] = await Gm(e, Od(e));
+	for (let e of n) t.targets[e] = await gh(e, kd(e));
+	for (let e of r) t.services[e] = await gh(e, kd(e));
 	return t;
 }
-async function Um() {
+async function mh() {
 	let e = await c.select({
 		message: `Where should ${F.highlight("your stack")} live?`,
-		options: [...xd.map((e) => ({
+		options: [...Sd.map((e) => ({
 			value: e,
-			label: Dd(e),
-			hint: `everything on ${wd[e].bin}`
+			label: Od(e),
+			hint: `everything on ${Td[e].bin}`
 		})), {
-			value: Wm,
+			value: hh,
 			label: "Mix providers",
 			hint: "choose for each app and service"
 		}],
-		initialValue: xd[0]
+		initialValue: Sd[0]
 	});
-	return c.isCancel(e) && B(), e === Wm ? void 0 : e;
+	return c.isCancel(e) && B(), e === hh ? void 0 : e;
 }
-var Wm = "__mixed__";
-async function Gm(e, t) {
-	if (t.length === 0 && z(`Nothing in this CLI can host ${Z(e)}. Provision it yourself and add it to the "${gd}" block of ${X}.`), t.length === 1) return t[0];
+var hh = "__mixed__";
+async function gh(e, t) {
+	if (t.length === 0 && z(`Nothing in this CLI can host ${Z(e)}. Provision it yourself and add it to the "${_d}" block of ${X}.`), t.length === 1) return t[0];
 	let n = await c.select({
 		message: `Where should ${F.highlight(Z(e))} live?`,
 		options: t.map((e) => ({
 			value: e,
-			label: Dd(e),
-			hint: wd[e].bin
+			label: Od(e),
+			hint: Td[e].bin
 		})),
 		initialValue: t[0]
 	});
 	return c.isCancel(n) && B(), n;
 }
-async function Km(e) {
-	let { cwd: t, targets: n, serveModes: r, stackConfig: i } = e, a = Object.keys(n).filter((e) => Td(e) && r[e] === "static"), o = await Promise.all(a.map(async (e) => [e, await Jp(Hp(t, e, i), e)]));
+async function _h(e) {
+	let { cwd: t, targets: n, serveModes: r, stackConfig: i } = e, a = Object.keys(n).filter((e) => Ed(e) && r[e] === "static"), o = await Promise.all(a.map(async (e) => [e, await vm(fm(t, e, i), e)]));
 	return Object.fromEntries(o);
 }
-function qm(e) {
-	let t = [...new Set(e)].map(Dd);
+function vh(e) {
+	let t = [...new Set(e)].map(Od);
 	return t.length <= 1 ? t[0] ?? "your provider" : `${t.slice(0, -1).join(", ")} and ${t[t.length - 1]}`;
 }
 //#endregion
 //#region src/commands/login.ts
-async function Jm() {
+async function yh() {
 	ul(), c.intro(F.brandBold("Log in to Hype Stack")), Ue() && c.log.warn(`${N} is set and takes priority over this login. Unset it to use the browser session.`), c.log.step("Opening your browser to sign in...");
 	let e;
 	try {
@@ -9372,7 +9675,7 @@ async function Jm() {
 }
 //#endregion
 //#region src/commands/logout.ts
-async function Ym() {
+async function bh() {
 	ul(), c.intro(F.brandBold("Log out of Hype Stack"));
 	let e = M(), t = await We(e);
 	if (!t) {
@@ -9383,8 +9686,8 @@ async function Ym() {
 }
 //#endregion
 //#region src/commands/mcp.ts
-async function Xm(e = {}) {
-	let t = Qm(e.editor), n = nu(t), r = $m(e.scope, t, n), i = Zm(e.token);
+async function xh(e = {}) {
+	let t = Ch(e.editor), n = nu(t), r = wh(e.scope, t, n), i = Sh(e.token);
 	if (e.print) {
 		process.stdout.write(au(t, i));
 		return;
@@ -9398,19 +9701,19 @@ async function Xm(e = {}) {
 	});
 	a.changed ? c.log.success(`Wrote ${F.path(a.configPath)}`) : c.log.info(F.muted(`${F.path(a.configPath)} is already up to date.`)), i && c.log.warn(F.muted(`${N} is stored in plain text. Keep this file out of version control.`)), c.outro(F.muted("Restart your editor to pick up the server."));
 }
-function Zm(e) {
+function Sh(e) {
 	return e?.trim() || void 0;
 }
-function Qm(e) {
+function Ch(e) {
 	return e ? ($l(e) || z(`Unknown editor "${e}". Expected one of: ${Xl.join(", ")}.`), e) : "cursor";
 }
-function $m(e, t, n) {
+function wh(e, t, n) {
 	let r = e ?? n[0];
 	return r !== "global" && r !== "project" && z(`Unknown scope "${r}". Expected global or project.`), n.includes(r) || z(`${t} does not support ${r} scope. Supported: ${n.join(", ")}.`), r;
 }
 //#endregion
 //#region src/ui/env-prompt.ts
-var eh = S("✔", "√"), th = S("✘", "x"), nh = class extends ie {
+var Th = S("✔", "√"), Eh = S("✘", "x"), Dh = "\x1B[7m \x1B[27m", Oh = class extends ie {
 	constructor(e) {
 		super({
 			input: e.input,
@@ -9425,29 +9728,29 @@ var eh = S("✔", "√"), th = S("✘", "x"), nh = class extends ie {
 		let { key: e, section: t, linkUrl: n, hint: r, checklist: i, currentMasked: a, progress: o } = this.promptOptions, s = y.withGuide, c = s ? `${A("gray", l)}\n` : "";
 		if (this.state === "submit") {
 			let t = (this.value ?? "").trim(), n = t ? F.muted(ds(t)) : a ? F.muted(`kept ${a}`) : F.muted("left empty");
-			return `${c}${A("green", eh)}  ${F.bold(e)}  ${n}`;
+			return `${c}${A("green", Th)}  ${F.bold(e)}  ${n}`;
 		}
-		if (this.state === "cancel") return `${c}${A("red", th)}  ${A(["strikethrough", "dim"], e)}`;
+		if (this.state === "cancel") return `${c}${A("red", Eh)}  ${A(["strikethrough", "dim"], e)}`;
 		let d = x(this.state), f = s ? `${d}  ` : "", p = b(this.state), m = o ? `  ${F.muted(o)}` : "", h = `${c}${p}  ${F.bold(e)}${m}`, g = [];
 		if (t) {
 			let e = n ? `  ${I(n)}` : "";
 			g.push(`${f}${F.description(t)}${e}`);
 		}
-		if (i && i.length > 0) for (let e of i) g.push(`${f}${L.bullet} ${F.muted(e)}`);
-		r && g.push(`${f}${F.muted(r)}`);
-		let _ = this.userInput === "" ? `${f}${F.muted(a ? `${a} (Enter keeps this)` : "type a value, or Enter to skip")}` : `${f}${this.userInputWithCursor}`;
-		g.push(_), this.state === "error" && g.push(`${f}${A("yellow", this.error)}`);
-		let v = s ? this.state === "error" ? A("yellow", u) : A("cyan", u) : "";
-		return `${h}\n${g.join("\n")}\n${v}`;
+		if (i && i.length > 0) for (let e of i) g.push(`${f}${L.bullet} ${F.description(e)}`);
+		r && g.push(`${f}${F.description(r)}`);
+		let _ = this.userInput !== "", v = a ? `${a} (Enter keeps this)` : "type a value, or Enter to skip", S = _ ? `${f}${L.arrow} ${this.userInputWithCursor}` : `${f}${L.arrow} ${Dh} ${F.muted(v)}`;
+		g.push(S), this.state === "error" && g.push(`${f}${A("yellow", this.error)}`);
+		let C = s ? this.state === "error" ? A("yellow", u) : A("cyan", u) : "";
+		return `${h}\n${g.join("\n")}\n${C}`;
 	}
 };
-async function rh(e) {
-	let t = await new nh(e).prompt();
+async function kh(e) {
+	let t = await new Oh(e).prompt();
 	return g(t) || typeof t == "string" ? t : "";
 }
 //#endregion
 //#region src/commands/onboard.ts
-async function ih(e = {}) {
+async function Ah(e = {}) {
 	let t = e.cwd ?? process.cwd();
 	e.skipBanner || ll(), c.intro(F.brandBold("Onboard your stack"));
 	let n;
@@ -9462,12 +9765,12 @@ async function ih(e = {}) {
 	for (let e of r) await ms(e);
 	let i = await gs(t, n);
 	i.length > 0 && c.log.success(`Generated ${F.highlight(String(i.length))} secrets: ${i.map((e) => e.key).join(", ")}`);
-	let a = await ah(t, n, r), o = a.filter((e) => e.setup.setup === "required" && !e.isSet), s = a.filter((e) => e.setup.setup === "required" && e.isSet), l = a.filter((e) => e.setup.setup === "optional"), u = [];
-	e.yes ? u.push(...o, ...l.filter((e) => !e.isSet)) : (await oh(o), u.push(...await sh(l)), await ch(s)), ph(u, t);
+	let a = await jh(t, n, r), o = a.filter((e) => e.setup.setup === "required" && !e.isSet), s = a.filter((e) => e.setup.setup === "required" && e.isSet), l = a.filter((e) => e.setup.setup === "optional"), u = [];
+	e.yes ? u.push(...o, ...l.filter((e) => !e.isSet)) : (u.push(...await Mh(o)), u.push(...await Nh(l)), await Ph(s)), zh(u, t);
 	let d = Ai(n.installedPacks ?? []);
 	d.length > 0 && R(d.map((e) => `  ${F.muted("·")} ${e}`).join("\n"), "Tips"), c.outro(F.brand(`All set. Run ${F.command("pnpm dev")} to start your app.`));
 }
-async function ah(e, t, n) {
+async function jh(e, t, n) {
 	let r = t.onboarding?.envVars ?? [], i = t.onboarding?.envSections ?? [], a = [];
 	for (let e of n) {
 		let t = T.join(T.dirname(e), ".env"), [n, o] = await Promise.all([C.readFile(e, "utf-8"), ps(t)]);
@@ -9487,31 +9790,40 @@ async function ah(e, t, n) {
 	}
 	return a;
 }
-async function oh(e) {
-	if (e.length !== 0) {
-		c.log.step(`${F.bold(String(e.length))} values needed`);
-		for (let [t, n] of e.entries()) await fh(n, `${t + 1}/${e.length}`);
+async function Mh(e) {
+	let t = [], n = Fh(e);
+	if (n.size === 0) return t;
+	let r = [...n.entries()].map(([e, t]) => `${F.bold(e)} ${F.muted(`(${t.length})`)}`).join(", ");
+	c.log.step(`Keys needed for: ${r}`);
+	for (let [e, r] of n) {
+		let n = `${r.length} value${r.length === 1 ? "" : "s"}`;
+		if (!await Ih(`Set up ${F.bold(e)} now? ${F.muted(`(${n})`)}`, !0)) {
+			t.push(...r);
+			continue;
+		}
+		await Lh(r);
 	}
+	return t;
 }
-async function sh(e) {
+async function Nh(e) {
 	let t = [];
-	for (let [n, r] of lh(e)) {
+	for (let [n, r] of Fh(e)) {
 		let e = r.every((e) => e.isSet), i = `${r.length} value${r.length === 1 ? "" : "s"}`;
-		if (!await uh(e ? `Update ${F.bold(n)}? ${F.muted(`(${i}, already set)`)}` : `Set up ${F.bold(n)} now? ${F.muted(`(${i}, optional)`)}`)) {
+		if (!await Ih(e ? `Update ${F.bold(n)}? ${F.muted(`(${i}, already set)`)}` : `Set up ${F.bold(n)} now? ${F.muted(`(${i}, optional)`)}`)) {
 			t.push(...r.filter((e) => !e.isSet));
 			continue;
 		}
-		await dh(r);
+		await Lh(r);
 	}
 	return t;
 }
-async function ch(e) {
-	for (let [t, n] of lh(e)) {
+async function Ph(e) {
+	for (let [t, n] of Fh(e)) {
 		let e = `${n.length} value${n.length === 1 ? "" : "s"}`;
-		await uh(`Update ${F.bold(t)}? ${F.muted(`(${e}, already set)`)}`) && await dh(n);
+		await Ih(`Update ${F.bold(t)}? ${F.muted(`(${e}, already set)`)}`) && await Lh(n);
 	}
 }
-function lh(e) {
+function Fh(e) {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		let e = n.setup.group ?? n.section, r = t.get(e);
@@ -9519,20 +9831,20 @@ function lh(e) {
 	}
 	return t;
 }
-async function uh(e) {
-	let t = await c.confirm({
+async function Ih(e, t = !1) {
+	let n = await c.confirm({
 		message: e,
-		initialValue: !1
+		initialValue: t
 	});
-	return c.isCancel(t) && B(), t === !0;
+	return c.isCancel(n) && B(), n === !0;
 }
-async function dh(e) {
+async function Lh(e) {
 	let t = Ti(e[0].section);
 	t.link && c.log.info(F.muted(t.link));
-	for (let [t, n] of e.entries()) await fh(n, `${t + 1}/${e.length}`);
+	for (let [t, n] of e.entries()) await Rh(n, `${t + 1}/${e.length}`);
 }
-async function fh(e, t) {
-	let n = Ti(e.section), r = await rh({
+async function Rh(e, t) {
+	let n = Ti(e.section), r = await kh({
 		key: e.key,
 		section: e.section,
 		linkUrl: n.link,
@@ -9545,7 +9857,7 @@ async function fh(e, t) {
 	let i = (typeof r == "string" ? r : "").trim();
 	i !== "" && await hs(e.envPath, e.key, i);
 }
-function ph(e, t) {
+function zh(e, t) {
 	if (e.length === 0) return;
 	let n = /* @__PURE__ */ new Map();
 	for (let t of e) {
@@ -9565,16 +9877,16 @@ function ph(e, t) {
 }
 //#endregion
 //#region src/core/templates.ts
-var mh = Vr.createRequest()({
+var Bh = Vr.createRequest()({
 	endpoint: "/templates/list",
 	method: "GET"
 });
-async function hh() {
-	let { data: e, error: t } = await mh.send();
+async function Vh() {
+	let { data: e, error: t } = await Bh.send();
 	if (t || !e) throw Error(`Failed to fetch template list: ${String(t)}`);
 	return e.templates;
 }
-async function gh(e) {
+async function Hh(e) {
 	let { data: t, error: n, status: r } = await Vr.createRequest()({
 		endpoint: `/templates/${encodeURIComponent(e)}/manifest`,
 		method: "GET"
@@ -9583,7 +9895,7 @@ async function gh(e) {
 	if (n || !t) throw Error(`Failed to load manifest for template "${e}": ${String(n)}`);
 	return t;
 }
-async function _h(e, t = {}) {
+async function Uh(e, t = {}) {
 	let n = Vr.createRequest()({
 		endpoint: `/templates/${encodeURIComponent(e)}/download`,
 		method: "POST"
@@ -9619,7 +9931,7 @@ async function _h(e, t = {}) {
 }
 //#endregion
 //#region src/commands/template.ts
-async function vh(t = {}) {
+async function Wh(t = {}) {
 	let n = t.cwd ?? process.cwd();
 	ll(), await Gc();
 	let r = c.spinner();
@@ -9633,7 +9945,7 @@ async function vh(t = {}) {
 	r.stop("Packs loaded"), r.start("Loading templates...");
 	let a;
 	try {
-		a = await hh();
+		a = await Vh();
 	} catch (e) {
 		r.stop("Failed to load templates"), z(`Could not reach Hype Stack. Check your connection and try again.\n${ju(e)}`);
 	}
@@ -9656,7 +9968,7 @@ async function vh(t = {}) {
 	s || (r.stop("Template not found"), z(`Template "${o}" not found. Available: ${a.map((e) => e.id).join(", ") || "(none)"}`)), r.stop(`Template: ${s.name}`);
 	let l;
 	try {
-		l = await gh(s.id);
+		l = await Hh(s.id);
 	} catch (e) {
 		z(ju(e));
 	}
@@ -9678,7 +9990,7 @@ async function vh(t = {}) {
 	p || z(d ? `Could not read ${F.path("stack.json")}. Run 'npx @hype-stack/cli init' to regenerate it, then run 'npx @hype-stack/cli template' again.` : `No ${F.path("stack.json")}. Run 'npx @hype-stack/cli init' first, then 'npx @hype-stack/cli template'.`), p.paths || z(`${F.path("stack.json")} is missing ${F.path("paths")}. Run 'npx @hype-stack/cli init' again to regenerate it.`);
 	let m = d ?? n;
 	c.intro(F.brandBold("Install a template"));
-	let h = p.installedPacks ?? [], g = new Set(h), v = new Map(i.map((e) => [e.name, e])), y = (await He(M()))?.token ?? null, b = await yh(s, t.variants, t.yes ?? !1), x = Xc(s.slots, b), S = Zc(s.slots, s.packs, x), w = await bh({
+	let h = p.installedPacks ?? [], g = new Set(h), v = new Map(i.map((e) => [e.name, e])), y = (await He(M()))?.token ?? null, b = await Gh(s, t.variants, t.yes ?? !1), x = Xc(s.slots, b), S = Zc(s.slots, s.packs, x), w = await Kh({
 		packs: i,
 		templatePacks: S,
 		installedSet: g,
@@ -9753,7 +10065,7 @@ async function vh(t = {}) {
 		r.stop("Files installed"), n.installed.length > 0 && c.log.success(`${F.highlight(String(n.installed.length))} files installed`), n.skipped.length > 0 && (c.log.warning(`${n.skipped.length} files skipped (use --force to overwrite)`), Bu(n.skipped));
 		for (let e of n.errors) c.log.error(e);
 		r.start("Applying template overrides...");
-		let i = await _h(s.id, { token: y });
+		let i = await Uh(s.id, { token: y });
 		i.status === "denied" && (r.stop("Template download denied"), z(Iu(s.id, i.reason))), oe = i.templateDir;
 		let a = await _c({
 			manifest: l,
@@ -9784,7 +10096,7 @@ async function vh(t = {}) {
 				customization: n
 			}), c.log.success(`Applied the ${Xs(n.theme)} theme, ${e(n.radius)} corners, and ${n.mode} mode`);
 		}
-		await xh({
+		await qh({
 			prepared: ie,
 			templateNpm: l.dependencies_npm,
 			paths: p.paths,
@@ -9811,7 +10123,7 @@ async function vh(t = {}) {
 		});
 	}
 }
-async function yh(e, t, n) {
+async function Gh(e, t, n) {
 	let r = {};
 	for (let i of e.slots) {
 		if (t?.[i.family]) {
@@ -9835,7 +10147,7 @@ async function yh(e, t, n) {
 	}
 	return r;
 }
-async function bh(e) {
+async function Kh(e) {
 	let { packs: t, templatePacks: n, installedSet: r, options: i } = e, a = new Set(n);
 	if (i.packs && i.packs.length > 0) {
 		let e = i.packs.filter((e) => !t.some((t) => t.name === e));
@@ -9857,7 +10169,7 @@ async function bh(e) {
 	});
 	return _(c) && z("Cancelled.", { code: 0 }), c;
 }
-async function xh(e) {
+async function qh(e) {
 	let { prepared: t, templateNpm: n, paths: r, cwd: i, spinner: a } = e, o = ku(t.map((e) => e.manifest.dependencies_npm)), s = Ou(n ? ku([o, n]) : o, r);
 	if (s.errors.length > 0) {
 		for (let e of s.errors) c.log.error(e);
@@ -9870,9 +10182,9 @@ async function xh(e) {
 }
 //#endregion
 //#region src/mcp/guard.ts
-var Sh = null;
-function Ch() {
-	if (Sh) return Sh.protocolStream;
+var Jh = null;
+function Yh() {
+	if (Jh) return Jh.protocolStream;
 	let e = process.stdout.write.bind(process.stdout), t = process.stdout.write, n = console.log, r = console.info, i = console.debug, a = console.dir, o = new ue({
 		write(t, n, r) {
 			e(t, (e) => r(e ?? null));
@@ -9881,7 +10193,7 @@ function Ch() {
 			e();
 		}
 	}), s = ((e, t, n) => typeof t == "function" ? process.stderr.write(e, t) : process.stderr.write(e, t, n));
-	return process.stdout.write = s, console.log = console.error, console.info = console.error, console.debug = console.error, console.dir = console.error, Sh = {
+	return process.stdout.write = s, console.log = console.error, console.info = console.error, console.debug = console.error, console.dir = console.error, Jh = {
 		protocolStream: o,
 		restore: () => {
 			process.stdout.write = t, console.log = n, console.info = r, console.debug = i, console.dir = a;
@@ -9890,22 +10202,22 @@ function Ch() {
 }
 //#endregion
 //#region src/mcp/result.ts
-async function wh(e) {
+async function Xh(e) {
 	$e();
 	try {
-		return Th({
+		return Zh({
 			...await e(),
 			ok: !0,
 			logs: et()
 		}, !1);
 	} catch (e) {
-		return nt(e) ? Th({
+		return nt(e) ? Zh({
 			ok: !1,
 			reason: e.reason,
 			message: e.message,
 			details: e.details,
 			logs: et()
-		}, !1) : Th({
+		}, !1) : Zh({
 			ok: !1,
 			reason: "failed",
 			message: e instanceof Error ? e.message : String(e),
@@ -9914,7 +10226,7 @@ async function wh(e) {
 		}, !0);
 	}
 }
-function Th(e, t) {
+function Zh(e, t) {
 	return {
 		content: [{
 			type: "text",
@@ -9926,7 +10238,7 @@ function Th(e, t) {
 }
 //#endregion
 //#region src/mcp/tools/context.ts
-async function Eh() {
+async function Qh() {
 	let e = await He(M());
 	return e ? {
 		token: e.token,
@@ -9936,26 +10248,26 @@ async function Eh() {
 		source: "none"
 	};
 }
-function Dh(e) {
+function $h(e) {
 	return T.resolve(e ?? process.cwd());
 }
-var Oh = {
+var eg = {
 	envVar: N,
 	loginCommand: "npx @hype-stack/cli login"
-}, kh = {
+}, tg = {
 	packs: j.array(j.string()).min(1).describe("Pack names to install. Append @frontend or @admin to a layout pack to target one shell."),
 	cwd: j.string().optional().describe("Project directory. Defaults to the workspace the server was started in."),
 	onConflict: j.enum(["keep", "overwrite"]).default("keep").describe("What to do with files that already exist: keep them, or let the pack overwrite them")
 };
-async function Ah(e) {
-	let t = Dh(e.cwd), n = await jh(t);
+async function ng(e) {
+	let t = $h(e.cwd), n = await rg(t);
 	await Gu({
 		cwd: t,
 		packs: e.packs,
 		force: e.onConflict === "overwrite",
 		yes: !0
 	});
-	let r = await jh(t), i = r.filter((e) => !n.includes(e));
+	let r = await rg(t), i = r.filter((e) => !n.includes(e));
 	return {
 		cwd: t,
 		installed: i,
@@ -9963,21 +10275,21 @@ async function Ah(e) {
 		followUp: i.length > 0 ? [...Ec, "npx @hype-stack/cli onboard"] : []
 	};
 }
-async function jh(e) {
+async function rg(e) {
 	return (await q(e).catch(() => null))?.installedPacks ?? [];
 }
 //#endregion
 //#region src/mcp/tools/apply-template.ts
-var Mh = {
+var ig = {
 	templateId: j.string().min(1).describe("Template id, e.g. vault. Use search_catalog to find one."),
 	cwd: j.string().optional().describe("Project directory. Defaults to the workspace the server was started in."),
 	variants: j.record(j.string(), j.string()).optional().describe("Slot overrides keyed by family, e.g. { \"starter-saas\": \"starter-saas-better-auth\" }"),
 	packs: j.array(j.string()).optional().describe("Extra packs to install on top of the template"),
 	onConflict: j.enum(["keep", "overwrite"]).default("keep").describe("What to do with files that already exist: keep them, or let the template overwrite them")
 };
-async function Nh(e) {
-	let t = Dh(e.cwd), n = await Ph(t);
-	await vh({
+async function ag(e) {
+	let t = $h(e.cwd), n = await og(t);
+	await Wh({
 		cwd: t,
 		templateId: e.templateId,
 		variants: e.variants,
@@ -9985,7 +10297,7 @@ async function Nh(e) {
 		force: e.onConflict === "overwrite",
 		yes: !0
 	});
-	let r = await Ph(t);
+	let r = await og(t);
 	return {
 		cwd: t,
 		templateId: e.templateId,
@@ -9994,21 +10306,21 @@ async function Nh(e) {
 		followUp: [...Ec, "npx @hype-stack/cli onboard"]
 	};
 }
-async function Ph(e) {
+async function og(e) {
 	return (await q(e).catch(() => null))?.installedPacks ?? [];
 }
 //#endregion
 //#region src/mcp/tools/auth-status.ts
-var Fh = {};
-async function Ih() {
-	let { token: e, source: t } = await Eh();
+var sg = {};
+async function cg() {
+	let { token: e, source: t } = await Qh();
 	if (!e) return {
 		authenticated: !1,
 		tokenSource: "none",
 		apiUrl: M(),
-		hint: `Run '${Oh.loginCommand}' in your terminal, or add ${Oh.envVar} to this server's env block in your editor's MCP config.`,
+		hint: `Run '${eg.loginCommand}' in your terminal, or add ${eg.envVar} to this server's env block in your editor's MCP config.`,
 		apiKeysUrl: `${Me()}/api-keys`,
-		...Oh
+		...eg
 	};
 	let n = await Hr(e);
 	return n ? {
@@ -10021,14 +10333,14 @@ async function Ih() {
 		authenticated: !1,
 		tokenSource: t,
 		apiUrl: M(),
-		hint: t === "env" ? `The token in ${Oh.envVar} was rejected. It may be expired or revoked; mint a new one.` : `Your saved login was rejected. Run '${Oh.loginCommand}' again.`,
+		hint: t === "env" ? `The token in ${eg.envVar} was rejected. It may be expired or revoked; mint a new one.` : `Your saved login was rejected. Run '${eg.loginCommand}' again.`,
 		apiKeysUrl: `${Me()}/api-keys`,
-		...Oh
+		...eg
 	};
 }
 //#endregion
 //#region src/mcp/tools/create-application.ts
-var Lh = {
+var lg = {
 	name: j.string().min(1).describe("Application name. Becomes the folder name and the package scope."),
 	directory: j.string().optional().describe("Parent folder to create the app inside. Defaults to the current workspace."),
 	editors: j.array(j.enum(be)).optional().describe("AI editors to ship rule formats for. Pass every editor the team uses, they coexist. Defaults to cursor."),
@@ -10039,8 +10351,8 @@ var Lh = {
 	adminRadius: j.string().optional().describe("Admin corner radius. Defaults to the frontend radius."),
 	mode: j.enum(["light", "dark"]).optional().describe("Color mode the app boots in")
 };
-async function Rh(e) {
-	let t = Dh(e.directory), n = zh(e), r = await Hu({
+async function ug(e) {
+	let t = $h(e.directory), n = dg(e), r = await Hu({
 		name: e.name,
 		parentDirectory: t,
 		editors: n,
@@ -10056,19 +10368,19 @@ async function Rh(e) {
 	return {
 		projectRoot: r,
 		editors: n,
-		mcpConfigPaths: Bh(n, r),
+		mcpConfigPaths: fg(n, r),
 		followUp: [`cd ${r}`, ...Ec]
 	};
 }
-function zh(e) {
+function dg(e) {
 	let { editors: t, unknown: n } = we([...e.editors ?? [], ...e.editor ? [e.editor] : []]);
 	if (n.length > 0) throw Error(`Unknown editor "${n.join(", ")}". Expected one of: ${be.join(", ")}.`);
 	return t.length > 0 ? t : [xe];
 }
-function Bh(e, t) {
-	return tu(e).map((e) => Vh(e, t)).filter((e) => e !== null);
+function fg(e, t) {
+	return tu(e).map((e) => pg(e, t)).filter((e) => e !== null);
 }
-function Vh(e, t) {
+function pg(e, t) {
 	try {
 		return ru({
 			editor: e,
@@ -10081,8 +10393,8 @@ function Vh(e, t) {
 }
 //#endregion
 //#region src/core/env-status.ts
-async function Hh(e, t) {
-	let n = t?.onboarding?.envSections ?? [], r = t?.onboarding?.envVars ?? [], i = await cs(e), a = await Promise.all(i.map((t) => Uh({
+async function mg(e, t) {
+	let n = t?.onboarding?.envSections ?? [], r = t?.onboarding?.envVars ?? [], i = await cs(e), a = await Promise.all(i.map((t) => hg({
 		examplePath: t,
 		projectRoot: e,
 		installedEnvSections: n,
@@ -10093,7 +10405,7 @@ async function Hh(e, t) {
 		missingCount: a.reduce((e, t) => e + t.sections.filter((e) => e.relevant).reduce((e, t) => e + t.vars.filter((e) => e.setup === "required" && e.state !== "filled").length, 0), 0)
 	};
 }
-async function Uh(e) {
+async function hg(e) {
 	let { examplePath: t, projectRoot: n, installedEnvSections: r, recorded: i } = e, a = T.join(T.dirname(t), ".env"), o = await C.readFile(t, "utf-8"), s = await ps(a), c = ls(o).map((e) => {
 		let t = Ti(e.section);
 		return {
@@ -10104,7 +10416,7 @@ async function Uh(e) {
 				let t = Li(e.key, i, r);
 				return {
 					key: e.key,
-					state: Wh(us(s, e.key), e.value),
+					state: gg(us(s, e.key), e.value),
 					setup: t?.setup ?? null,
 					...t?.group ? { group: t.group } : {}
 				};
@@ -10118,20 +10430,20 @@ async function Uh(e) {
 		sections: c
 	};
 }
-function Wh(e, t) {
+function gg(e, t) {
 	return e === "" ? "missing" : e === t.trim() ? "default" : "filled";
 }
 //#endregion
 //#region src/mcp/tools/env-status.ts
-var Gh = { cwd: j.string().optional().describe("Project directory. Defaults to the workspace the server was started in.") };
-async function Kh(e) {
-	let t = Dh(e.cwd), n = await q(t).catch(() => null);
+var _g = { cwd: j.string().optional().describe("Project directory. Defaults to the workspace the server was started in.") };
+async function vg(e) {
+	let t = $h(e.cwd), n = await q(t).catch(() => null);
 	if (!n) throw new tt({
 		reason: "not_a_project",
 		message: `${t} has no stack.json, so there is nothing to check.`,
 		details: { cwd: t }
 	});
-	let r = await Hh(t, n);
+	let r = await mg(t, n);
 	return {
 		cwd: t,
 		missingCount: r.missingCount,
@@ -10141,9 +10453,9 @@ async function Kh(e) {
 }
 //#endregion
 //#region src/mcp/tools/inspect-stack.ts
-var qh = { cwd: j.string().optional().describe("Project directory. Defaults to the workspace the server was started in.") };
-async function Jh(e) {
-	let t = Dh(e.cwd), n = await q(t).catch(() => null);
+var yg = { cwd: j.string().optional().describe("Project directory. Defaults to the workspace the server was started in.") };
+async function bg(e) {
+	let t = $h(e.cwd), n = await q(t).catch(() => null);
 	if (!n) throw new tt({
 		reason: "not_a_project",
 		message: await Gi(t) ? `${t} is a Hype Stack project but has no stack.json. Run 'npx @hype-stack/cli init' in it.` : `${t} is not a Hype Stack project.`,
@@ -10170,12 +10482,12 @@ async function Jh(e) {
 }
 //#endregion
 //#region src/mcp/tools/plan-install.ts
-var Yh = {
+var xg = {
 	packs: j.array(j.string()).min(1).describe("Pack names to plan an install for"),
 	cwd: j.string().optional().describe("Project directory. Defaults to the workspace the server was started in.")
 };
-async function Xh(e) {
-	let t = Dh(e.cwd), { token: n, source: r } = await Eh(), i = await q(t).catch(() => null), a = i?.installedPacks ?? [], o = await Zi(), s = new Map(o.map((e) => [e.name, e])), c = e.packs.filter((e) => !s.has(e));
+async function Sg(e) {
+	let t = $h(e.cwd), { token: n, source: r } = await Qh(), i = await q(t).catch(() => null), a = i?.installedPacks ?? [], o = await Zi(), s = new Map(o.map((e) => [e.name, e])), c = e.packs.filter((e) => !s.has(e));
 	if (c.length > 0) throw Error(`Unknown pack${c.length === 1 ? "" : "s"}: ${c.join(", ")}`);
 	let l = Kc(o), u = Jc(e.packs, l, a), d = await Mu(u.order.map((e) => s.get(e)).filter((e) => e !== void 0), new Set(a), { token: n }), f = (e) => {
 		let t = s.get(e);
@@ -10204,12 +10516,12 @@ async function Xh(e) {
 				purchaseUrl: n ? Ct(e) : null
 			};
 		}),
-		...n === null ? { authHint: Oh } : {}
+		...n === null ? { authHint: eg } : {}
 	};
 }
 //#endregion
 //#region src/mcp/tools/search-catalog.ts
-var Zh = {
+var Cg = {
 	query: j.string().optional().describe("Free text matched against name, display name, and description"),
 	kind: j.enum([
 		"pack",
@@ -10222,31 +10534,31 @@ var Zh = {
 		"paid",
 		"all"
 	]).default("all").describe("Restrict packs by price tier")
-}, Qh = (e, t) => {
+}, wg = (e, t) => {
 	let n = t.trim().toLowerCase();
 	return n === "" ? !0 : e.some((e) => e.toLowerCase().includes(n));
 };
-function $h(e, t) {
+function Tg(e, t) {
 	let { query: n = "", category: r, tier: i = "all" } = t;
-	return e.filter((e) => r && e.category !== r || i !== "all" && e.tier !== i ? !1 : Qh([
+	return e.filter((e) => r && e.category !== r || i !== "all" && e.tier !== i ? !1 : wg([
 		e.name,
 		e.displayName,
 		e.description
 	], n));
 }
-function eg(e, t) {
+function Eg(e, t) {
 	let { query: n = "", category: r } = t;
-	return e.filter((e) => r && e.category !== r ? !1 : Qh([
+	return e.filter((e) => r && e.category !== r ? !1 : wg([
 		e.id,
 		e.name,
 		e.description,
 		...e.tags
 	], n));
 }
-async function tg(e) {
-	let t = e.kind ?? "all", [n, r] = await Promise.all([t === "template" ? Promise.resolve([]) : Zi(), t === "pack" ? Promise.resolve([]) : hh()]);
+async function Dg(e) {
+	let t = e.kind ?? "all", [n, r] = await Promise.all([t === "template" ? Promise.resolve([]) : Zi(), t === "pack" ? Promise.resolve([]) : Vh()]);
 	return {
-		packs: $h(n, e).map((e) => ({
+		packs: Tg(n, e).map((e) => ({
 			name: e.name,
 			displayName: e.displayName,
 			description: e.description,
@@ -10255,7 +10567,7 @@ async function tg(e) {
 			price: e.price,
 			dependencies: e.dependencies
 		})),
-		templates: eg(r, e).map((e) => ({
+		templates: Eg(r, e).map((e) => ({
 			id: e.id,
 			name: e.name,
 			description: e.description,
@@ -10272,117 +10584,117 @@ async function tg(e) {
 }
 //#endregion
 //#region src/mcp/server.ts
-var ng = "hype-stack";
-function rg() {
+var Og = "hype-stack";
+function kg() {
 	let e = new ce({
-		name: ng,
+		name: Og,
 		version: de
 	}, {
 		capabilities: { tools: {} },
-		instructions: ig
+		instructions: Ag
 	});
 	return e.registerTool("search_catalog", {
 		title: "Search the Hype Stack catalog",
 		description: "Find feature packs and project templates by keyword, category, or price tier. Read-only. Start here when the user asks what is available.",
-		inputSchema: Zh,
+		inputSchema: Cg,
 		annotations: {
 			readOnlyHint: !0,
 			openWorldHint: !0
 		}
-	}, (e) => wh(() => tg(e))), e.registerTool("plan_install", {
+	}, (e) => Xh(() => Dg(e))), e.registerTool("plan_install", {
 		title: "Plan a pack install",
 		description: "Work out what installing a set of packs would do without writing anything: dependency order, packs already present, and which ones the current license does not cover. Call this before add_packs.",
-		inputSchema: Yh,
+		inputSchema: xg,
 		annotations: {
 			readOnlyHint: !0,
 			openWorldHint: !0
 		}
-	}, (e) => wh(() => Xh(e))), e.registerTool("create_application", {
+	}, (e) => Xh(() => Sg(e))), e.registerTool("create_application", {
 		title: "Create a Hype Stack application",
 		description: "Scaffold a new application into a folder. Runs the clone and dependency install; Docker and database migrations are returned as follow-up commands for the user to run.",
-		inputSchema: Lh,
+		inputSchema: lg,
 		annotations: {
 			readOnlyHint: !1,
 			destructiveHint: !1,
 			openWorldHint: !0
 		}
-	}, (e) => wh(() => Rh(e))), e.registerTool("add_packs", {
+	}, (e) => Xh(() => ug(e))), e.registerTool("add_packs", {
 		title: "Add feature packs",
 		description: "Install packs into an existing project. Requires an explicit onConflict policy because there is no prompt to fall back on.",
-		inputSchema: kh,
+		inputSchema: tg,
 		annotations: {
 			readOnlyHint: !1,
 			destructiveHint: !0,
 			openWorldHint: !0
 		}
-	}, (e) => wh(() => Ah(e))), e.registerTool("apply_template", {
+	}, (e) => Xh(() => ng(e))), e.registerTool("apply_template", {
 		title: "Apply a project template",
 		description: "Install a template: its starter, layout, fixed packs, and frontend overrides. Pass variants to swap a slot away from the template default.",
-		inputSchema: Mh,
+		inputSchema: ig,
 		annotations: {
 			readOnlyHint: !1,
 			destructiveHint: !0,
 			openWorldHint: !0
 		}
-	}, (e) => wh(() => Nh(e))), e.registerTool("inspect_stack", {
+	}, (e) => Xh(() => ag(e))), e.registerTool("inspect_stack", {
 		title: "Inspect the project stack",
 		description: "Read stack.json and the detected workspace layout: installed packs, app paths, and whether this is a Hype Stack project at all.",
-		inputSchema: qh,
+		inputSchema: yg,
 		annotations: {
 			readOnlyHint: !0,
 			openWorldHint: !1
 		}
-	}, (e) => wh(() => Jh(e))), e.registerTool("env_status", {
+	}, (e) => Xh(() => bg(e))), e.registerTool("env_status", {
 		title: "Check environment variables",
 		description: "Report which env vars the installed packs still need. Read-only; filling them in belongs in the user's own terminal via `hype-stack onboard`.",
-		inputSchema: Gh,
+		inputSchema: _g,
 		annotations: {
 			readOnlyHint: !0,
 			openWorldHint: !1
 		}
-	}, (e) => wh(() => Kh(e))), e.registerTool("auth_status", {
+	}, (e) => Xh(() => vg(e))), e.registerTool("auth_status", {
 		title: "Check Hype Stack authentication",
 		description: "Who this server is authenticated as, and how to fix it when the answer is nobody. Call this whenever another tool fails with auth_required.",
-		inputSchema: Fh,
+		inputSchema: sg,
 		annotations: {
 			readOnlyHint: !0,
 			openWorldHint: !0
 		}
-	}, () => wh(() => Ih())), e;
+	}, () => Xh(() => cg())), e;
 }
-var ig = "Tools for building with Hype Stack, a full-stack template you install feature packs into.\n\nThis server cannot prompt. When a tool returns ok: false, read the \"reason\" field and tell the user what to do:\n- auth_required: they need to run 'npx @hype-stack/cli login' in their own terminal, or set HYPE_STACK_TOKEN in this server's env block.\n- not_owned: the pack is paid and their organization does not have a license. The result carries a purchase URL.\n- not_a_project: run create_application first, or point the tool at the right directory with cwd.\n- conflicts: files already exist. Retry with onConflict set once the user has decided.\n\nInstalls never start Docker or touch a database. Anything the user has to run themselves comes back in \"followUp\".";
-async function ag() {
+var Ag = "Tools for building with Hype Stack, a full-stack template you install feature packs into.\n\nThis server cannot prompt. When a tool returns ok: false, read the \"reason\" field and tell the user what to do:\n- auth_required: they need to run 'npx @hype-stack/cli login' in their own terminal, or set HYPE_STACK_TOKEN in this server's env block.\n- not_owned: the pack is paid and their organization does not have a license. The result carries a purchase URL.\n- not_a_project: run create_application first, or point the tool at the right directory with cwd.\n- conflicts: files already exist. Retry with onConflict set once the user has decided.\n\nInstalls never start Docker or touch a database. Anything the user has to run themselves comes back in \"followUp\".";
+async function jg() {
 	Je("mcp");
-	let e = Ch();
-	await rg().connect(new le(process.stdin, e));
+	let e = Yh();
+	await kg().connect(new le(process.stdin, e));
 }
 //#endregion
 //#region src/cli.ts
-function og(e) {
+function Mg(e) {
 	if (!e) return;
 	let t = e.split(",").map((e) => e.trim()).filter((e) => e.length > 0);
 	return t.length > 0 ? t : void 0;
 }
-function sg(e, t) {
+function Ng(e, t) {
 	let n = e.split(",").map((e) => e.trim()).filter((e) => e.length > 0);
 	return [...t ?? [], ...n];
 }
-function cg(e) {
+function Pg(e) {
 	return e === "light" || e === "dark" ? e : void 0;
 }
-function lg(e) {
+function Fg(e) {
 	return e.option("-t, --theme <theme>", `Frontend color theme (${i.join(", ")})`).option("--admin-theme <theme>", "Admin app color theme (defaults to --theme)").option("--radius <value>", `Frontend corner radius, a CSS length (e.g. ${t.map((e) => e.value).join(", ")})`).option("--admin-radius <value>", "Admin app corner radius (defaults to --radius)").option("--mode <mode>", "Color mode the app boots in (light, dark)");
 }
-function ug(e) {
+function Ig(e) {
 	return {
 		theme: e.theme,
 		adminTheme: e.adminTheme,
 		radius: e.radius,
 		adminRadius: e.adminRadius,
-		mode: cg(e.mode)
+		mode: Pg(e.mode)
 	};
 }
-function dg(e) {
+function Lg(e) {
 	if (!e) return;
 	let t = {};
 	for (let n of e.split(",")) {
@@ -10391,23 +10703,23 @@ function dg(e) {
 	}
 	return Object.keys(t).length > 0 ? t : void 0;
 }
-function fg(e) {
+function Rg(e) {
 	if (!e) return;
 	let t = e.split(",").map((e) => e.trim()).filter((e) => e.length > 0);
 	return t.length > 0 ? t : void 0;
 }
-function pg(e) {
+function zg(e) {
 	let t = {};
-	for (let n of [...yd, ...bd]) {
+	for (let n of [...bd, ...xd]) {
 		let r = e[n];
 		typeof r == "string" && (t[n] = r);
 	}
 	return t;
 }
-function mg() {
+function Bg() {
 	let e = new s();
-	e.name("hype-stack").description("Build with Hype Stack -- templates, components, modules, and more").version(de, "-v, --version"), lg(e.command("create").description("Create a new Hype Stack project").option("-n, --name <name>", "Project name").option("-d, --directory <path>", "Target directory").option("-e, --editor <editors>", `AI editors to ship rules for, comma-separated or repeated (${be.join(", ")})`, sg)).option("--no-install", "Skip dependency installation").option("--no-setup", "Skip Docker services and database migrations after create").option("-y, --yes", "Skip confirmation prompts (requires --name)").action(async (e) => {
-		let t = ug(e);
+	e.name("hype-stack").description("Build with Hype Stack -- templates, components, modules, and more").version(de, "-v, --version"), Fg(e.command("create").description("Create a new Hype Stack project").option("-n, --name <name>", "Project name").option("-d, --directory <path>", "Target directory").option("-e, --editor <editors>", `AI editors to ship rules for, comma-separated or repeated (${be.join(", ")})`, Ng)).option("--no-install", "Skip dependency installation").option("--no-setup", "Skip Docker services and database migrations after create").option("-y, --yes", "Skip confirmation prompts (requires --name)").action(async (e) => {
+		let t = Ig(e);
 		await Hu({
 			name: e.name,
 			directory: e.directory,
@@ -10424,34 +10736,34 @@ function mg() {
 	}), e.command("init").description("Initialize stack.json in the current project").action(async () => {
 		await Uu({});
 	}), e.command("onboard").description("Set up env vars and get the start command").option("-y, --yes", "Skip prompts, accept defaults").option("--cwd <path>", "Working directory").action(async (e) => {
-		await ih({
+		await Ah({
 			cwd: e.cwd,
 			yes: e.yes
 		});
-	}), lg(e.command("compose").description("Choose feature packs to add to your project").option("--packs <list>", "Comma-separated pack names (non-interactive). Append @frontend or @admin to a layout pack to target that app shell, e.g. layout-basic@frontend,layout-native-app-shell@admin")).option("--force", "Overwrite existing files").option("-y, --yes", "Skip confirmation prompts").option("--cwd <path>", "Working directory").action(async (e) => {
+	}), Fg(e.command("compose").description("Choose feature packs to add to your project").option("--packs <list>", "Comma-separated pack names (non-interactive). Append @frontend or @admin to a layout pack to target that app shell, e.g. layout-basic@frontend,layout-native-app-shell@admin")).option("--force", "Overwrite existing files").option("-y, --yes", "Skip confirmation prompts").option("--cwd <path>", "Working directory").action(async (e) => {
 		await Gu({
-			packs: og(e.packs),
+			packs: Mg(e.packs),
 			force: e.force,
 			yes: e.yes,
 			cwd: e.cwd,
-			...ug(e)
+			...Ig(e)
 		});
-	}), lg(e.command("template").description("Install a template by id, with starter/layout variant swaps and extra packs on top").argument("[id]", "Template id (omit to pick interactively)").option("--variants <map>", "Preselect slot variants, e.g. starter-saas=starter-saas-better-auth,layout=layout-basic").option("--packs <list>", "Extra packs to add on top of the template (comma-separated)")).option("--force", "Overwrite existing files").option("-y, --yes", "Skip confirmation prompts (requires <id>)").option("--cwd <path>", "Working directory").action(async (e, t) => {
-		await vh({
+	}), Fg(e.command("template").description("Install a template by id, with starter/layout variant swaps and extra packs on top").argument("[id]", "Template id (omit to pick interactively)").option("--variants <map>", "Preselect slot variants, e.g. starter-saas=starter-saas-better-auth,layout=layout-basic").option("--packs <list>", "Extra packs to add on top of the template (comma-separated)")).option("--force", "Overwrite existing files").option("-y, --yes", "Skip confirmation prompts (requires <id>)").option("--cwd <path>", "Working directory").action(async (e, t) => {
+		await Wh({
 			templateId: e,
-			variants: dg(t.variants),
-			packs: og(t.packs),
+			variants: Lg(t.variants),
+			packs: Mg(t.packs),
 			force: t.force,
 			yes: t.yes,
 			cwd: t.cwd,
-			...ug(t)
+			...Ig(t)
 		});
-	}), e.command("deploy").description("Deploy the frontend, admin, and backend, and provision Postgres, Valkey, and a bucket").option("-p, --provider <provider>", `Provider for everything not assigned separately (${xd.join(", ")})`).option("--backend <provider>", "Provider hosting the backend API").option("--frontend <provider>", "Provider hosting the frontend").option("--admin <provider>", "Provider hosting the admin app").option("--postgres <provider>", "Provider for the Postgres database").option("--valkey <provider>", "Provider for the Valkey cache").option("--bucket <provider>", "Provider for object storage").option("--only <targets>", `Deploy just these apps, comma-separated (${yd.join(", ")})`).option("-e, --environment <name>", "Deployment environment name (default: production)").option("--fly-org <org>", "Fly organization slug, skips the picker when you belong to several").option("--railway-workspace <workspace>", "Railway workspace, skips the picker when you belong to several").option("--dry-run", "Print every command that would run without creating anything").option("--skip-provision", "Assume Postgres, Valkey, and the bucket already exist").option("--skip-migrations", "Do not run database migrations after the backend deploys").option("-y, --yes", "Skip confirmation prompts").option("--cwd <path>", "Project directory").action(async (e) => {
-		await Lm({
+	}), e.command("deploy").description("Deploy the frontend, admin, and backend, and provision Postgres, Valkey, and a bucket").option("-p, --provider <provider>", `Provider for everything not assigned separately (${Sd.join(", ")})`).option("--backend <provider>", "Provider hosting the backend API").option("--frontend <provider>", "Provider hosting the frontend").option("--admin <provider>", "Provider hosting the admin app").option("--postgres <provider>", "Provider for the Postgres database").option("--valkey <provider>", "Provider for the Valkey cache").option("--bucket <provider>", "Provider for object storage").option("--only <targets>", `Deploy just these apps, comma-separated (${bd.join(", ")})`).option("-e, --environment <name>", "Deployment environment name (default: production)").option("--fly-org <org>", "Fly organization slug, skips the picker when you belong to several").option("--railway-workspace <workspace>", "Railway workspace, skips the picker when you belong to several").option("--dry-run", "Print every command that would run without creating anything").option("--skip-provision", "Assume Postgres, Valkey, and the bucket already exist").option("--skip-migrations", "Do not run database migrations after the backend deploys").option("-y, --yes", "Skip confirmation prompts").option("--cwd <path>", "Project directory").action(async (e) => {
+		await ch({
 			cwd: e.cwd,
 			provider: e.provider,
-			assign: pg(e),
-			only: fg(e.only),
+			assign: zg(e),
+			only: Rg(e.only),
 			environment: e.environment,
 			flyOrg: e.flyOrg,
 			railwayWorkspace: e.railwayWorkspace,
@@ -10463,9 +10775,9 @@ function mg() {
 	});
 	let t = e.command("mcp").description("Run the Model Context Protocol server for AI editors");
 	return t.action(async () => {
-		await ag();
+		await jg();
 	}), t.command("install").description("Register the MCP server in your editor's config").option("-e, --editor <editor>", `Editor (${Xl.join(", ")})`, "cursor").option("-s, --scope <scope>", "global or project (defaults to global where supported)").option("--cwd <path>", "Project directory, for project scope").option("--token <token>", "API key to store in the config (optional, defaults to your saved login)").option("--print", "Print the JSON block instead of writing a file").action(async (e) => {
-		await Xm({
+		await xh({
 			editor: e.editor,
 			scope: e.scope,
 			cwd: e.cwd,
@@ -10473,12 +10785,12 @@ function mg() {
 			print: e.print
 		});
 	}), e.command("login").description("Log in via your browser to install packs your organization owns").action(async () => {
-		await Jm();
+		await yh();
 	}), e.command("logout").description("Log out and remove the saved CLI token").action(async () => {
-		await Ym();
+		await bh();
 	}), e.command("auth").description("Alias for `login`").action(async () => {
-		await Jm();
+		await yh();
 	}), e;
 }
 //#endregion
-export { Lm as a, Uu as c, de as d, Jm as i, Hu as l, Ch as n, Gu as o, Ym as r, Wu as s, mg as t, Je as u };
+export { ch as a, Uu as c, de as d, yh as i, Hu as l, Yh as n, Gu as o, bh as r, Wu as s, Bg as t, Je as u };