@hype-stack/cli 1.4.0 → 1.4.1

package/dist/{cli-C1Bvl6gU.js → cli-Xln9GSPa.js}

@@ -19,7 +19,7 @@ import { McpServer as ue } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport as de } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { Writable as fe } from "node:stream";
 //#region src/constants/constants.ts
-var pe = "1.4.0", me = "BetterTyped/hype-stack", he = "main", ge = `gh:${me}`, _e = "HYPE_STACK_TEMPLATE_REF", ve = "/cli/template-channel", ye = "stack.json", be = "/schema/stack.json", xe = "https://api.hype-stack.dev", Se = "HYPE_STACK_API_URL", Ce = "https://www.hype-stack.dev", we = /^[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?$/, Te = [
+var pe = "1.4.1", me = "BetterTyped/hype-stack", he = "main", ge = `gh:${me}`, _e = "HYPE_STACK_TEMPLATE_REF", ve = "/cli/template-channel", ye = "stack.json", be = "/schema/stack.json", xe = "https://api.hype-stack.dev", Se = "HYPE_STACK_API_URL", Ce = "https://www.hype-stack.dev", we = /^[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?$/, Te = [
 	{
 		value: "cursor",
 		label: "Cursor",
@@ -5377,7 +5377,7 @@ async function Bl() {
 		ref: e,
 		source: "env"
 	};
-	if (Nl === "1.4.0") return {
+	if (Nl === "1.4.1") return {
 		ref: he,
 		source: "dev"
 	};
@@ -7116,7 +7116,18 @@ function _f(e) {
 	}
 	return null;
 }
-var vf = {
+function vf(e) {
+	let t = Q(e);
+	if (!Array.isArray(t)) return [];
+	let n = [];
+	for (let e of t) {
+		if (typeof e != "object" || !e) continue;
+		let t = e.Name ?? e.name;
+		typeof t == "string" && t.length > 0 && n.push(t);
+	}
+	return n;
+}
+var yf = {
 	id: "fly",
 	async checkAuth(e) {
 		let t = await e.runner.run({
@@ -7178,11 +7189,26 @@ var vf = {
 		return n.external ? {
 			outputs: n.external,
 			note: "using the external values from stack.json"
-		} : n.service === "postgres" ? yf(e, t) : n.service === "valkey" ? Cf(e, t) : Tf(e, t);
+		} : n.service === "postgres" ? bf(e, t) : n.service === "valkey" ? wf(e, t) : Ef(e, t);
+	},
+	async existingEnvKeys(e, t) {
+		let n = await e.runner.run({
+			command: "fly",
+			args: [
+				"secrets",
+				"list",
+				"--app",
+				t.app,
+				"--json"
+			],
+			cwd: e.cwd,
+			allowFailure: !0,
+			label: `read ${t.app} secrets`
+		}).catch(() => null);
+		return !n || n.exitCode !== 0 ? [] : vf(n.stdout);
 	},
 	async setEnv(e, t) {
-		let n = Object.entries(t.env);
-		n.length !== 0 && await e.runner.run({
+		let n = new Set(t.blankKeys ?? []), r = Object.entries(t.env), i = r.filter(([e]) => !n.has(e)), a = r.filter(([e]) => n.has(e)), o = (n, r) => e.runner.run({
 			command: "fly",
 			args: [
 				"secrets",
@@ -7194,8 +7220,10 @@ var vf = {
 			cwd: e.cwd,
 			stdin: `${n.map(([e, t]) => `${e}=${t}`).join("\n")}\n`,
 			secrets: t.secrets,
+			allowFailure: r,
 			label: `set ${n.length} secrets on ${t.target.app}`
 		});
+		i.length > 0 && await o(i, !1), a.length > 0 && await o(a, !0);
 	},
 	async deployTarget(e, t) {
 		let { target: n } = t, r = n.spec.serveMode === "static", i, a;
@@ -7256,10 +7284,10 @@ var vf = {
 		};
 	}
 };
-async function yf(e, t) {
-	let { service: n, backend: r, crossProvider: i } = t, a = await bf(e, n.name), o = a ?? await xf(e, t);
+async function bf(e, t) {
+	let { service: n, backend: r, crossProvider: i } = t, a = await xf(e, n.name), o = a ?? await Sf(e, t);
 	if (i || !r) {
-		let t = await Sf(e, o);
+		let t = await Cf(e, o);
 		if (!t) throw Error(`The Fly Postgres cluster "${n.name}" exists, but Fly did not return its connection string. Run \`fly mpg status ${o.id} --json\` and set deploy.services.postgres.external.DATABASE_URL in stack.json.`);
 		return {
 			outputs: { DATABASE_URL: t },
@@ -7289,14 +7317,14 @@ async function yf(e, t) {
 		providedByProvider: ["DATABASE_URL"],
 		note: `already attached to ${r.app}`
 	};
-	let c = await Sf(e, o);
+	let c = await Cf(e, o);
 	if (!c) throw Error(`Could not attach the Fly Postgres cluster "${n.name}" to ${r.app}, and could not read its connection string either:\n${s.stderr.trim() || s.stdout.trim()}`);
 	return {
 		outputs: { DATABASE_URL: c },
 		note: "attach failed, wired the connection string instead"
 	};
 }
-async function bf(e, t) {
+async function xf(e, t) {
 	let n = await e.runner.run({
 		command: "fly",
 		args: [
@@ -7311,7 +7339,7 @@ async function bf(e, t) {
 	});
 	return n.exitCode === 0 ? gf(n.stdout, t) : null;
 }
-async function xf(e, t) {
+async function Sf(e, t) {
 	let { service: n } = t, r = await e.runner.run({
 		command: "fly",
 		args: [
@@ -7335,11 +7363,11 @@ async function xf(e, t) {
 		id: i,
 		name: n.name
 	};
-	let a = await bf(e, n.name);
+	let a = await xf(e, n.name);
 	if (a) return a;
 	throw Error(`Fly reported that the Postgres cluster "${n.name}" was created, but it is not in \`fly mpg list\`. Check https://fly.io/dashboard and run deploy again.`);
 }
-async function Sf(e, t) {
+async function Cf(e, t) {
 	let n = await e.runner.run({
 		command: "fly",
 		args: [
@@ -7354,7 +7382,7 @@ async function Sf(e, t) {
 	});
 	return _f(n.stdout) ?? hf(n.stdout);
 }
-async function Cf(e, t) {
+async function wf(e, t) {
 	let { service: n } = t, r = await e.runner.run({
 		command: "fly",
 		args: [
@@ -7367,7 +7395,7 @@ async function Cf(e, t) {
 		label: `look for an existing valkey ${n.name}`
 	}), i = r.exitCode === 0 ? pf(r.stdout + r.stderr) : null;
 	if (i) return {
-		outputs: wf(i),
+		outputs: Tf(i),
 		note: "reusing the existing database"
 	};
 	let a = await e.runner.run({
@@ -7389,16 +7417,16 @@ async function Cf(e, t) {
 		label: `create valkey ${n.name}`
 	}), o = pf(a.stdout + a.stderr);
 	if (!o) throw Error(`Could not read the connection URL for the Fly Redis database "${n.name}":\n${a.stderr.trim() || a.stdout.trim()}\nRun \`fly redis status ${n.name}\` and set deploy.services.valkey.external.VALKEY_URL in stack.json.`);
-	return { outputs: wf(o) };
+	return { outputs: Tf(o) };
 }
-function wf(e) {
+function Tf(e) {
 	let t = mf(e);
 	return {
 		VALKEY_URL: e,
 		...t ? { VALKEY_PASSWORD: t } : {}
 	};
 }
-async function Tf(e, t) {
+async function Ef(e, t) {
 	let { service: n, backend: r, crossProvider: i } = t, a = n.name, o = await e.runner.run({
 		command: "fly",
 		args: [
@@ -7412,23 +7440,23 @@ async function Tf(e, t) {
 		cwd: e.cwd,
 		allowFailure: !0,
 		label: `create tigris bucket ${a}`
-	}), s = kf(ff(o.stdout + o.stderr), a);
+	}), s = Af(ff(o.stdout + o.stderr), a);
 	if (s) return { outputs: s };
 	if (!of.test(o.stderr + o.stdout)) throw Error(`Could not read the Tigris credentials for "${a}":\n${o.stderr.trim() || o.stdout.trim()}\nRun \`fly storage create --name ${a}\` yourself and copy the credentials into deploy.services.bucket.external in stack.json.`);
-	if (!i && r && await Of(e, r.app)) return {
+	if (!i && r && await kf(e, r.app)) return {
 		outputs: {},
-		providedByProvider: [...Ef],
+		providedByProvider: [...Df],
 		note: `already set on ${r.app} by an earlier deploy`
 	};
 	throw Error(`The Tigris bucket "${a}" already exists and Fly will not show its keys again, and ${r ? `${r.app} does not have them set` : "there is no Fly app here holding them"}. Copy them into deploy.services.bucket.external in stack.json, or pick a different name with deploy.services.bucket.name.`);
 }
-var Ef = [
+var Df = [
 	"RUSTFS_ENDPOINT",
 	"RUSTFS_ACCESS_KEY",
 	"RUSTFS_SECRET_KEY",
 	"BUCKET_NAME"
 ];
-function Df(e) {
+function Of(e) {
 	let t = Q(e);
 	return Array.isArray(t) ? t.flatMap((e) => {
 		if (typeof e != "object" || !e) return [];
@@ -7436,7 +7464,7 @@ function Df(e) {
 		return typeof n == "string" ? [n] : [];
 	}) : [];
 }
-async function Of(e, t) {
+async function kf(e, t) {
 	let n = await e.runner.run({
 		command: "fly",
 		args: [
@@ -7451,10 +7479,10 @@ async function Of(e, t) {
 		label: `check the storage keys already on ${t}`
 	});
 	if (n.exitCode !== 0) return !1;
-	let r = new Set(Df(n.stdout));
-	return Ef.every((e) => r.has(e));
+	let r = new Set(Of(n.stdout));
+	return Df.every((e) => r.has(e));
 }
-function kf(e, t) {
+function Af(e, t) {
 	let n = e.AWS_ACCESS_KEY_ID, r = e.AWS_SECRET_ACCESS_KEY;
 	return !n || !r ? null : {
 		RUSTFS_ENDPOINT: e.AWS_ENDPOINT_URL_S3 ?? "https://t3.storage.dev",
@@ -7465,32 +7493,32 @@ function kf(e, t) {
 }
 //#endregion
 //#region src/deploy/runner.ts
-var Af = class extends Error {
+var jf = class extends Error {
 	spec;
 	result;
 	constructor(e, t) {
 		let n = (t.stderr.trim() || t.stdout.trim()).split("\n").slice(-8).join("\n");
-		super(`${jf(e)} exited with ${t.exitCode}${n ? `\n${n}` : ""}`), this.name = "CommandFailedError", this.spec = e, this.result = t;
+		super(`${Mf(e)} exited with ${t.exitCode}${n ? `\n${n}` : ""}`), this.name = "CommandFailedError", this.spec = e, this.result = t;
 	}
 };
-function jf(e) {
-	let t = [e.command, ...e.args].map(Nf).join(" ");
-	return Mf(e.stdin === void 0 ? t : `${t} < (stdin)`, e.secrets ?? []);
+function Mf(e) {
+	let t = [e.command, ...e.args].map(Pf).join(" ");
+	return Nf(e.stdin === void 0 ? t : `${t} < (stdin)`, e.secrets ?? []);
 }
-function Mf(e, t) {
+function Nf(e, t) {
 	let n = e;
 	for (let e of t) !e || e.length < 4 || (n = n.split(e).join("***"));
 	return n;
 }
-function Nf(e) {
+function Pf(e) {
 	return e === "" ? "\"\"" : /[\s"'$`\\]/.test(e) ? `"${e.replace(/(["\\$`])/g, "\\$1")}"` : e;
 }
-function Pf(e = {}) {
+function Ff(e = {}) {
 	let t = [];
 	return {
 		transcript: t,
 		async run(n) {
-			let r = jf(n);
+			let r = Mf(n);
 			t.push(r), e.onCommand?.(r);
 			let i = e.env || n.env ? {
 				...e.env,
@@ -7499,20 +7527,20 @@ function Pf(e = {}) {
 				cwd: n.cwd,
 				stdin: n.stdin,
 				env: i,
-				onData: e.onOutput ? (t) => e.onOutput?.(Mf(t, n.secrets ?? [])) : void 0
+				onData: e.onOutput ? (t) => e.onOutput?.(Nf(t, n.secrets ?? [])) : void 0
 			});
-			if (a.exitCode !== 0 && !n.allowFailure) throw new Af(n, a);
+			if (a.exitCode !== 0 && !n.allowFailure) throw new jf(n, a);
 			return a;
 		}
 	};
 }
-function Ff(e = {}) {
+function If(e = {}) {
 	let t = [];
 	return {
 		transcript: t,
 		dryRun: !0,
 		run(n) {
-			let r = jf(n);
+			let r = Mf(n);
 			t.push(r), e.onCommand?.(r);
 			let i = e.responses?.find((e) => r.includes(e.match)), a = typeof i?.stdout == "function" ? i.stdout(n) : i?.stdout ?? "";
 			return Promise.resolve({
@@ -7525,46 +7553,46 @@ function Ff(e = {}) {
 }
 //#endregion
 //#region src/deploy/providers/railway.ts
-var If = "Postgres", Lf = "valkey/valkey:latest", Rf = 6379, zf = "/data", Bf = "/bin/sh -c \"exec docker-entrypoint.sh valkey-server --port ${VALKEY_PORT} --requirepass ${VALKEY_PASSWORD} --appendonly yes\"", Vf = 12e4, Hf = 3e3, Uf = 20 * 6e4, Wf = 1e4, Gf = new Set(["SUCCESS", "SLEEPING"]), Kf = new Set([
+var Lf = "Postgres", Rf = "valkey/valkey:latest", zf = 6379, Bf = "/data", Vf = "/bin/sh -c \"exec docker-entrypoint.sh valkey-server --port ${VALKEY_PORT} --requirepass ${VALKEY_PASSWORD} --appendonly yes\"", Hf = 12e4, Uf = 3e3, Wf = 20 * 6e4, Gf = 1e4, Kf = new Set(["SUCCESS", "SLEEPING"]), qf = new Set([
 	"FAILED",
 	"CRASHED",
 	"REMOVED",
 	"SKIPPED"
-]), qf = "query Deployments($input: DeploymentListInput!) { deployments(input: $input, first: 1) { edges { node { id status } } } }", Jf = "query BuildLogs($deploymentId: String!, $limit: Int) { buildLogs(deploymentId: $deploymentId, limit: $limit) { message } }", Yf = "query DeploymentLogs($deploymentId: String!, $limit: Int) { deploymentLogs(deploymentId: $deploymentId, limit: $limit) { message } }", Xf = [
+]), Jf = "query Deployments($input: DeploymentListInput!) { deployments(input: $input, first: 1) { edges { node { id status } } } }", Yf = "query BuildLogs($deploymentId: String!, $limit: Int) { buildLogs(deploymentId: $deploymentId, limit: $limit) { message } }", Xf = "query DeploymentLogs($deploymentId: String!, $limit: Int) { deploymentLogs(deploymentId: $deploymentId, limit: $limit) { message } }", Zf = [
 	"sjc",
 	"iad",
 	"ams",
 	"sin"
-], Zf = "iad", Qf = "rustfs/rustfs:latest", $f = 9e3, ep = "/data", tp = /already exists|duplicate|is already/i, np = /unrecognized subcommand|unknown subcommand|unexpected argument|not a valid subcommand/i;
-function rp(e) {
+], Qf = "iad", $f = "rustfs/rustfs:latest", ep = 9e3, tp = "/data", np = /already exists|duplicate|is already/i, rp = /unrecognized subcommand|unknown subcommand|unexpected argument|not a valid subcommand/i;
+function ip(e) {
 	let t = e.trim();
 	if (t.startsWith("{") || t.startsWith("[")) {
-		let e = Q(t), n = e === null ? null : ap(e);
-		if (n) return ip(n);
+		let e = Q(t), n = e === null ? null : op(e);
+		if (n) return ap(n);
 	}
 	let n = t.match(/[a-z0-9-]+(?:\.[a-z0-9-]+)*\.(?:up\.railway\.app|railway\.app)/i);
-	return n ? ip(n[0]) : null;
+	return n ? ap(n[0]) : null;
 }
-function ip(e) {
+function ap(e) {
 	return `https://${e.replace(/^https?:\/\//i, "").replace(/\/+$/, "")}`;
 }
-function ap(e) {
+function op(e) {
 	if (typeof e == "string") return /\.railway\.app/i.test(e) ? e : null;
 	if (Array.isArray(e)) {
 		for (let t of e) {
-			let e = ap(t);
+			let e = op(t);
 			if (e) return e;
 		}
 		return null;
 	}
 	if (typeof e == "object" && e) for (let [t, n] of Object.entries(e)) {
 		if ((t === "domain" || t === "url" || t === "host") && typeof n == "string" && n.length > 0) return n;
-		let e = ap(n);
+		let e = op(n);
 		if (e) return e;
 	}
 	return null;
 }
-function op(e) {
+function sp(e) {
 	let t = Q(e.trim());
 	if (!Array.isArray(t)) return [];
 	let n = [];
@@ -7578,7 +7606,7 @@ function op(e) {
 	}
 	return n;
 }
-function sp(e) {
+function cp(e) {
 	let t = Q(e.trim());
 	if (typeof t != "object" || !t || Array.isArray(t)) return null;
 	let n = t, r = n.id;
@@ -7587,7 +7615,7 @@ function sp(e) {
 		name: typeof n.name == "string" ? n.name : ""
 	};
 }
-function cp(e) {
+function lp(e) {
 	let t = e.trim();
 	if (t.startsWith("{")) {
 		let e = Q(t);
@@ -7604,7 +7632,7 @@ function cp(e) {
 	}
 	return n;
 }
-var lp = {
+var up = {
 	id: "railway",
 	async checkAuth(e) {
 		let t = await e.runner.run({
@@ -7634,16 +7662,16 @@ var lp = {
 	scope: {
 		label: "workspace",
 		flag: "--railway-workspace",
-		list: yp,
+		list: bp,
 		current: (e) => e.railway.workspace,
 		pin: (e, t) => {
 			e.railway.workspace = t;
 		}
 	},
 	async reserveTarget(e, t) {
-		await gp(e);
+		await _p(e);
 		let n = t.spec.serveMode === "static" ? vd : t.spec.port ?? 3e3;
-		if (!await Sp(e, t.app)) {
+		if (!await Cp(e, t.app)) {
 			let r = await e.runner.run({
 				command: "railway",
 				args: [
@@ -7658,7 +7686,7 @@ var lp = {
 				allowFailure: !0,
 				label: `create railway service ${t.app}`
 			});
-			if (r.exitCode !== 0 && !tp.test(r.stderr + r.stdout)) throw Error(`Could not create the Railway service "${t.app}":\n${r.stderr.trim() || r.stdout.trim()}`);
+			if (r.exitCode !== 0 && !np.test(r.stderr + r.stdout)) throw Error(`Could not create the Railway service "${t.app}":\n${r.stderr.trim() || r.stdout.trim()}`);
 		}
 		if (t.url) return t.url;
 		let r = await e.runner.run({
@@ -7674,7 +7702,7 @@ var lp = {
 			cwd: e.cwd,
 			allowFailure: !0,
 			label: `generate domain for ${t.app}`
-		}), i = rp(r.stdout + r.stderr);
+		}), i = ip(r.stdout + r.stderr);
 		if (!i) throw Error(`Railway did not return a domain for "${t.app}". Run \`railway domain --service ${t.app}\` and set deploy.targets.${t.target}.url in stack.json.`);
 		return i;
 	},
@@ -7683,50 +7711,56 @@ var lp = {
 		return n.external ? {
 			outputs: n.external,
 			note: "using the external values from stack.json"
-		} : (await gp(e), n.service === "postgres" ? Dp(e, t.crossProvider) : n.service === "valkey" ? jp(e, t) : qp(e, t));
+		} : (await _p(e), n.service === "postgres" ? Op(e, t.crossProvider) : n.service === "valkey" ? Mp(e, t) : Jp(e, t));
+	},
+	async existingEnvKeys(e, t) {
+		let n = await Ep(e, t.app);
+		return Object.entries(n).filter(([, e]) => e.trim() !== "").map(([e]) => e);
 	},
 	async setEnv(e, t) {
-		for (let [n, r] of Object.entries(t.env)) await e.runner.run({
+		let n = new Set(t.blankKeys ?? []);
+		for (let [r, i] of Object.entries(t.env)) await e.runner.run({
 			command: "railway",
 			args: [
 				"variable",
 				"set",
-				n,
+				r,
 				"--stdin",
 				"--service",
 				t.target.app,
 				"--skip-deploys"
 			],
 			cwd: e.cwd,
-			stdin: r,
+			stdin: i,
 			secrets: t.secrets,
-			label: `set ${n} on ${t.target.app}`
+			allowFailure: n.has(r),
+			label: `set ${r} on ${t.target.app}`
 		});
 	},
 	async deployTarget(e, t) {
-		return t.target.spec.serveMode === "static" ? up(e, t) : dp(e, t);
+		return t.target.spec.serveMode === "static" ? dp(e, t) : fp(e, t);
 	},
 	async awaitTarget(e, t) {
 		if (e.runner.dryRun) return {
 			ok: !0,
 			detail: "not checked on a dry run"
 		};
-		let n = await xp(e, t.app);
+		let n = await Sp(e, t.app);
 		if (!n) return {
 			ok: !0,
 			detail: `could not find the service "${t.app}" to check on it, so look at the Railway dashboard`
 		};
-		let r = await Rp(e, {
+		let r = await zp(e, {
 			name: t.app,
 			serviceId: n.id,
-			timeoutMs: Uf,
-			pollIntervalMs: Wf
+			timeoutMs: Wf,
+			pollIntervalMs: Gf
 		});
 		if (r.ok) return {
 			ok: !0,
 			detail: r.status === null ? r.note : "live"
 		};
-		let i = r.deploymentId && r.status ? await Bp(e, {
+		let i = r.deploymentId && r.status ? await Vp(e, {
 			id: r.deploymentId,
 			status: r.status
 		}) : null, a = r.note ?? `the deployment ${r.status === "CRASHED" ? "crashed after starting" : "failed"}`;
@@ -7759,7 +7793,7 @@ var lp = {
 		};
 	}
 };
-async function up(e, t) {
+async function dp(e, t) {
 	let { target: n } = t, r = await af(e, t), i = await Md({
 		projectRoot: e.cwd,
 		target: n,
@@ -7779,7 +7813,7 @@ async function up(e, t) {
 		cwd: e.cwd,
 		label: `point ${n.app} at the bundled Dockerfile`
 	}), {
-		url: rp((await fp(e, t, [
+		url: ip((await pp(e, t, [
 			i,
 			"--path-as-root",
 			"--no-gitignore"
@@ -7787,7 +7821,7 @@ async function up(e, t) {
 		releaseRan: !1
 	};
 }
-async function dp(e, t) {
+async function fp(e, t) {
 	let { target: n } = t, r = await Nd(e.cwd, n);
 	if (!r) throw Error(`Railway builds the ${n.spec.label} from a Dockerfile, but there is none at ${n.spec.defaultRoot}/Dockerfile. Add one and run deploy again.`);
 	await e.runner.run({
@@ -7803,21 +7837,21 @@ async function dp(e, t) {
 		cwd: e.cwd,
 		label: `point ${n.app} at ${r}`
 	});
-	let i = await mp(e, {
+	let i = await hp(e, {
 		dockerfile: r,
 		target: n,
 		releaseCommand: t.releaseCommand
 	});
 	try {
 		return {
-			url: rp((await fp(e, t, [])).stdout) ?? n.url,
+			url: ip((await pp(e, t, [])).stdout) ?? n.url,
 			releaseRan: i.preDeployRan
 		};
 	} finally {
 		i.written && await Ed(e.cwd);
 	}
 }
-async function fp(e, t, n) {
+async function pp(e, t, n) {
 	let r = {
 		command: "railway",
 		args: [
@@ -7833,10 +7867,10 @@ async function fp(e, t, n) {
 		label: `deploy ${t.target.target} to railway`
 	}, i = await e.runner.run(r);
 	if (i.exitCode === 0) return i;
-	let a = new Af(r, i), o = await pp(e, t.target, i.stdout + i.stderr);
+	let a = new jf(r, i), o = await mp(e, t.target, i.stdout + i.stderr);
 	throw o ? /* @__PURE__ */ Error(`${a.message}\n\n${o}`) : a;
 }
-async function pp(e, t, n) {
+async function mp(e, t, n) {
 	let r = n.match(/Could not load ([\w@./-]+)/)?.[1];
 	if (!r) return null;
 	let i = [
@@ -7863,7 +7897,7 @@ async function pp(e, t, n) {
 		label: `check whether ${o} is gitignored`
 	})).exitCode === 0 ? `${o} exists here but is in .gitignore, and \`railway up\` only uploads what git would track, so the build on Railway cannot see it. Take it out of .gitignore (moving any secrets in it into environment variables first) and deploy again.` : null;
 }
-async function mp(e, t) {
+async function hp(e, t) {
 	let { dockerfile: n, target: r, releaseCommand: i } = t;
 	if (await wd(e.cwd)) return e.log?.(`Keeping your ${xd}, so ${r.app} uses the settings in it`), {
 		written: !1,
@@ -7882,11 +7916,11 @@ async function mp(e, t) {
 		preDeployRan: o
 	});
 }
-var hp = /* @__PURE__ */ new WeakSet();
-async function gp(e) {
-	hp.has(e) || (await _p(e), hp.add(e));
-}
+var gp = /* @__PURE__ */ new WeakSet();
 async function _p(e) {
+	gp.has(e) || (await vp(e), gp.add(e));
+}
+async function vp(e) {
 	if ((await e.runner.run({
 		command: "railway",
 		args: ["status", "--json"],
@@ -7894,7 +7928,7 @@ async function _p(e) {
 		allowFailure: !0,
 		label: "check railway project link"
 	})).exitCode === 0) return;
-	let t = await bp(e);
+	let t = await xp(e);
 	await e.runner.run({
 		command: "railway",
 		args: [
@@ -7907,7 +7941,7 @@ async function _p(e) {
 		label: `create railway project ${e.plan.projectName}`
 	});
 }
-function vp(e) {
+function yp(e) {
 	let t = Q(e);
 	if (typeof t != "object" || !t) return [];
 	let n = t.workspaces;
@@ -7917,7 +7951,7 @@ function vp(e) {
 		return typeof n == "string" ? [n] : [];
 	}) : [];
 }
-async function yp(e) {
+async function bp(e) {
 	let t = await e.runner.run({
 		command: "railway",
 		args: ["whoami", "--json"],
@@ -7925,17 +7959,17 @@ async function yp(e) {
 		allowFailure: !0,
 		label: "find your Railway workspace"
 	});
-	return t.exitCode === 0 ? vp(t.stdout) : [];
+	return t.exitCode === 0 ? yp(t.stdout) : [];
 }
-async function bp(e) {
+async function xp(e) {
 	if (e.plan.railway.workspace) return e.plan.railway.workspace;
-	let t = await yp(e);
+	let t = await bp(e);
 	if (t.length !== 0) {
 		if (t.length > 1) throw Error(`Your Railway account belongs to ${t.length} workspaces (${t.join(", ")}). Pass --railway-workspace <name> so the project is created in the right one.`);
 		return e.plan.railway.workspace = t[0], t[0];
 	}
 }
-async function xp(e, t) {
+async function Sp(e, t) {
 	let n = await e.runner.run({
 		command: "railway",
 		args: [
@@ -7947,18 +7981,18 @@ async function xp(e, t) {
 		allowFailure: !0,
 		label: "list railway services"
 	});
-	return n.exitCode === 0 ? op(n.stdout).find((e) => e.name === t) ?? null : null;
+	return n.exitCode === 0 ? sp(n.stdout).find((e) => e.name === t) ?? null : null;
 }
-async function Sp(e, t) {
-	return await xp(e, t) !== null;
+async function Cp(e, t) {
+	return await Sp(e, t) !== null;
 }
-function Cp(e, t) {
+function wp(e, t) {
 	return `\${{${/^[\w-]+$/.test(e) ? e : `"${e}"`}.${t}}}`;
 }
-function wp(e) {
-	return `https://${Cp(e, "RAILWAY_PUBLIC_DOMAIN")}`;
+function Tp(e) {
+	return `https://${wp(e, "RAILWAY_PUBLIC_DOMAIN")}`;
 }
-async function Tp(e, t) {
+async function Ep(e, t) {
 	let n = await e.runner.run({
 		command: "railway",
 		args: [
@@ -7972,9 +8006,9 @@ async function Tp(e, t) {
 		allowFailure: !0,
 		label: `read ${t} connection details`
 	});
-	return n.exitCode === 0 ? cp(n.stdout) : {};
+	return n.exitCode === 0 ? lp(n.stdout) : {};
 }
-var Ep = {
+var Dp = {
 	DATABASE_URL: "DATABASE_URL",
 	POSTGRES_DB: "PGDATABASE",
 	POSTGRES_HOST: "PGHOST",
@@ -7982,8 +8016,8 @@ var Ep = {
 	POSTGRES_USER: "PGUSER",
 	POSTGRES_PASSWORD: "PGPASSWORD"
 };
-async function Dp(e, t) {
-	if (!await Sp(e, "Postgres")) {
+async function Op(e, t) {
+	if (!await Cp(e, "Postgres")) {
 		let t = await e.runner.run({
 			command: "railway",
 			args: [
@@ -7996,28 +8030,28 @@ async function Dp(e, t) {
 			allowFailure: !0,
 			label: "add railway postgres"
 		});
-		if (t.exitCode !== 0 && !tp.test(t.stderr + t.stdout)) throw Error(`Could not add a Railway postgres database:\n${t.stderr.trim()}`);
+		if (t.exitCode !== 0 && !np.test(t.stderr + t.stdout)) throw Error(`Could not add a Railway postgres database:\n${t.stderr.trim()}`);
 	}
 	if (!t) {
 		let e = {};
-		for (let [t, n] of Object.entries(Ep)) e[t] = Cp(If, n);
+		for (let [t, n] of Object.entries(Dp)) e[t] = wp(Lf, n);
 		return {
 			outputs: e,
-			note: `wired as Railway references to ${If}`
+			note: `wired as Railway references to ${Lf}`
 		};
 	}
-	let n = await Tp(e, If), r = n.DATABASE_PUBLIC_URL ?? n.DATABASE_URL;
-	if (!r) throw Error(`Could not read DATABASE_PUBLIC_URL from the Railway ${If} service. Enable a public proxy on it, or set ${Ld("services", "postgres", "external")} in ${X}.`);
+	let n = await Ep(e, Lf), r = n.DATABASE_PUBLIC_URL ?? n.DATABASE_URL;
+	if (!r) throw Error(`Could not read DATABASE_PUBLIC_URL from the Railway ${Lf} service. Enable a public proxy on it, or set ${Ld("services", "postgres", "external")} in ${X}.`);
 	return { outputs: {
 		DATABASE_URL: r,
-		...Op(r)
+		...kp(r)
 	} };
 }
-function Op(e) {
-	let t = kp(e);
+function kp(e) {
+	let t = Ap(e);
 	if (!t) return {};
 	let n = decodeURIComponent(t.pathname.replace(/^\//, ""));
-	return Ap({
+	return jp({
 		POSTGRES_HOST: t.hostname,
 		POSTGRES_PORT: t.port,
 		POSTGRES_USER: decodeURIComponent(t.username),
@@ -8025,43 +8059,43 @@ function Op(e) {
 		POSTGRES_DB: n
 	});
 }
-function kp(e) {
+function Ap(e) {
 	try {
 		return new URL(e);
 	} catch {
 		return null;
 	}
 }
-function Ap(e) {
+function jp(e) {
 	return Object.fromEntries(Object.entries(e).filter(([, e]) => e !== ""));
 }
-async function jp(e, t) {
-	let n = t.service.name, r = await xp(e, n);
-	if (r || await Mp(e, n), !t.crossProvider) return {
+async function Mp(e, t) {
+	let n = t.service.name, r = await Sp(e, n);
+	if (r || await Np(e, n), !t.crossProvider) return {
 		outputs: {
-			VALKEY_URL: Cp(n, "VALKEY_URL"),
-			VALKEY_PASSWORD: Cp(n, "VALKEY_PASSWORD")
+			VALKEY_URL: wp(n, "VALKEY_URL"),
+			VALKEY_PASSWORD: wp(n, "VALKEY_PASSWORD")
 		},
-		note: r ? "reusing the Valkey service already in the project" : `${Lf} with a volume and a password`
+		note: r ? "reusing the Valkey service already in the project" : `${Rf} with a volume and a password`
 	};
-	let i = await Tp(e, n), a = i.VALKEY_PUBLIC_URL ?? i.VALKEY_URL;
-	if (!a) throw Error(`Could not read VALKEY_PUBLIC_URL from the Railway Valkey service "${n}". Run \`railway tcp-proxy create --port ${Rf} --service ${n}\`, or set ${Ld("services", "valkey", "external")} in ${X}.`);
-	return { outputs: Ap({
+	let i = await Ep(e, n), a = i.VALKEY_PUBLIC_URL ?? i.VALKEY_URL;
+	if (!a) throw Error(`Could not read VALKEY_PUBLIC_URL from the Railway Valkey service "${n}". Run \`railway tcp-proxy create --port ${zf} --service ${n}\`, or set ${Ld("services", "valkey", "external")} in ${X}.`);
+	return { outputs: jp({
 		VALKEY_URL: a,
 		VALKEY_PASSWORD: i.VALKEY_PASSWORD ?? ""
 	}) };
 }
-async function Mp(e, t) {
+async function Np(e, t) {
 	let n = D(24).toString("base64url"), r = await e.runner.run({
 		command: "railway",
 		args: [
 			"add",
 			"--image",
-			Lf,
+			Rf,
 			"--service",
 			t,
 			"--variables",
-			`VALKEY_PORT=${Rf}`,
+			`VALKEY_PORT=${zf}`,
 			"--variables",
 			`VALKEY_PASSWORD=${n}`,
 			"--variables",
@@ -8076,32 +8110,32 @@ async function Mp(e, t) {
 		label: `create valkey service ${t}`
 	});
 	if (r.exitCode !== 0) throw Error(`Could not create the Railway Valkey service "${t}":\n${r.stderr.trim()}`);
-	let i = sp(r.stdout)?.id;
+	let i = cp(r.stdout)?.id;
 	if (!i) throw Error(`Railway created the Valkey service "${t}" but did not report its id, which is needed to mount its volume and set its start command. Run \`railway service list --json\`, finish it from the dashboard, or set ${Ld("services", "valkey", "external")} in ${X}.`);
-	await Vp(e, {
+	await Hp(e, {
 		name: t,
 		serviceId: i,
-		command: Bf
-	}), await em(e, {
+		command: Vf
+	}), await tm(e, {
 		name: t,
 		serviceId: i,
-		mountPath: zf,
+		mountPath: Bf,
 		consequence: "everything cached in it would be lost on the next restart"
-	}), await Gp(e, {
+	}), await Kp(e, {
 		name: t,
-		port: Rf
-	}), await Np(e, {
+		port: zf
+	}), await Pp(e, {
 		name: t,
 		serviceId: i
 	}), e.log?.(`Waiting for ${t} to come up`);
-	let a = await Rp(e, {
+	let a = await zp(e, {
 		name: t,
 		serviceId: i,
-		timeoutMs: Vf,
-		pollIntervalMs: Hf
+		timeoutMs: Hf,
+		pollIntervalMs: Uf
 	});
 	if (!a.ok) {
-		let n = a.deploymentId && a.status ? await Bp(e, {
+		let n = a.deploymentId && a.status ? await Vp(e, {
 			id: a.deploymentId,
 			status: a.status
 		}) : null;
@@ -8112,8 +8146,8 @@ async function Mp(e, t) {
 		].filter(Boolean).join("\n"));
 	}
 }
-async function Np(e, t) {
-	let n = await Up(e), r = await e.runner.run({
+async function Pp(e, t) {
+	let n = await Wp(e), r = await e.runner.run({
 		command: "railway",
 		args: [
 			"api",
@@ -8131,14 +8165,14 @@ async function Np(e, t) {
 	});
 	if (r.exitCode !== 0) throw Error(`The Railway service "${t.name}" is configured but its first deployment could not be started, so nothing is running yet:\n${r.stderr.trim() || r.stdout.trim()}\nDeploy it from the Railway dashboard and run deploy again.`);
 }
-function Pp(e) {
+function Fp(e) {
 	let t = Q(e.trim());
-	return t === null ? null : Fp(t);
+	return t === null ? null : Ip(t);
 }
-function Fp(e) {
+function Ip(e) {
 	if (Array.isArray(e)) {
 		for (let t of e) {
-			let e = Fp(t);
+			let e = Ip(t);
 			if (e) return e;
 		}
 		return null;
@@ -8150,35 +8184,35 @@ function Fp(e) {
 			status: r
 		};
 		for (let e of Object.values(t)) {
-			let t = Fp(e);
+			let t = Ip(e);
 			if (t) return t;
 		}
 	}
 	return null;
 }
-function Ip(e) {
+function Lp(e) {
 	let t = [];
-	return Lp(Q(e.trim()), t), t;
+	return Rp(Q(e.trim()), t), t;
 }
-function Lp(e, t) {
+function Rp(e, t) {
 	if (Array.isArray(e)) {
-		for (let n of e) Lp(n, t);
+		for (let n of e) Rp(n, t);
 		return;
 	}
 	if (typeof e == "object" && e) {
 		let n = e;
 		typeof n.message == "string" && n.message.length > 0 && t.push(n.message);
-		for (let [e, r] of Object.entries(n)) e !== "message" && Lp(r, t);
+		for (let [e, r] of Object.entries(n)) e !== "message" && Rp(r, t);
 	}
 }
-async function Rp(e, t) {
-	let n = await Up(e), r = Date.now() + t.timeoutMs;
+async function zp(e, t) {
+	let n = await Wp(e), r = Date.now() + t.timeoutMs;
 	for (;;) {
 		let i = await e.runner.run({
 			command: "railway",
 			args: [
 				"api",
-				qf,
+				Jf,
 				"--variables",
 				JSON.stringify({ input: {
 					serviceId: t.serviceId,
@@ -8194,18 +8228,18 @@ async function Rp(e, t) {
 			ok: !0,
 			status: null
 		};
-		let a = i.exitCode === 0 ? Pp(i.stdout) : null;
+		let a = i.exitCode === 0 ? Fp(i.stdout) : null;
 		if (!a) return {
 			ok: !0,
 			status: null,
 			note: `could not read the deployment status of ${t.name}, so check it in the Railway dashboard`
 		};
-		if (Gf.has(a.status)) return {
+		if (Kf.has(a.status)) return {
 			ok: !0,
 			status: a.status,
 			deploymentId: a.id
 		};
-		if (Kf.has(a.status)) return {
+		if (qf.has(a.status)) return {
 			ok: !1,
 			status: a.status,
 			deploymentId: a.id
@@ -8216,14 +8250,14 @@ async function Rp(e, t) {
 			deploymentId: a.id,
 			note: `still ${a.status.toLowerCase()} after ${Math.round(t.timeoutMs / 6e4)} minutes`
 		};
-		e.log?.(`${t.name} is ${a.status.toLowerCase()}`), await zp(t.pollIntervalMs);
+		e.log?.(`${t.name} is ${a.status.toLowerCase()}`), await Bp(t.pollIntervalMs);
 	}
 }
-function zp(e) {
+function Bp(e) {
 	return new Promise((t) => setTimeout(t, e));
 }
-async function Bp(e, t) {
-	let n = t.status === "CRASHED" ? Yf : Jf, r = await e.runner.run({
+async function Vp(e, t) {
+	let n = t.status === "CRASHED" ? Xf : Yf, r = await e.runner.run({
 		command: "railway",
 		args: [
 			"api",
@@ -8240,11 +8274,11 @@ async function Bp(e, t) {
 		label: "read the failed deployment's logs"
 	});
 	if (r.exitCode !== 0) return null;
-	let i = Ip(r.stdout);
+	let i = Lp(r.stdout);
 	return i.length === 0 ? null : i.slice(-15).join("\n");
 }
-async function Vp(e, t) {
-	let n = await Up(e), r = await e.runner.run({
+async function Hp(e, t) {
+	let n = await Wp(e), r = await e.runner.run({
 		command: "railway",
 		args: [
 			"api",
@@ -8262,15 +8296,15 @@ async function Vp(e, t) {
 		label: `set the start command on ${t.name}`
 	});
 	if (r.exitCode !== 0) {
-		let e = r.stderr.trim() || r.stdout.trim(), n = np.test(e) ? "Your Railway CLI is too old for `railway api`. Update it with `npm i -g @railway/cli` and run deploy again." : `Set the start command on ${t.name} from the Railway dashboard: ${t.command}`;
+		let e = r.stderr.trim() || r.stdout.trim(), n = rp.test(e) ? "Your Railway CLI is too old for `railway api`. Update it with `npm i -g @railway/cli` and run deploy again." : `Set the start command on ${t.name} from the Railway dashboard: ${t.command}`;
 		throw Error(`Could not set the start command on the Railway service "${t.name}":\n${e}\n${n}`);
 	}
 }
-var Hp = /* @__PURE__ */ new WeakMap();
-async function Up(e) {
-	let t = Hp.get(e);
+var Up = /* @__PURE__ */ new WeakMap();
+async function Wp(e) {
+	let t = Up.get(e);
 	if (t) return t;
-	let n = Wp((await e.runner.run({
+	let n = Gp((await e.runner.run({
 		command: "railway",
 		args: ["status", "--json"],
 		cwd: e.cwd,
@@ -8278,9 +8312,9 @@ async function Up(e) {
 		label: "read the linked railway environment"
 	})).stdout, e.plan.environment);
 	if (!n) throw Error(`Could not find the Railway environment "${e.plan.environment}" in the linked project. Run \`railway status\` to check what is linked.`);
-	return Hp.set(e, n), n;
+	return Up.set(e, n), n;
 }
-function Wp(e, t) {
+function Gp(e, t) {
 	let n = Q(e.trim());
 	if (typeof n != "object" || !n) return null;
 	let r = n.environments, i = typeof r == "object" && r ? r.edges : void 0;
@@ -8299,7 +8333,7 @@ function Wp(e, t) {
 	let o = a.find((e) => e.name === t);
 	return o ? o.id : a.length === 1 ? a[0].id : null;
 }
-async function Gp(e, t) {
+async function Kp(e, t) {
 	let n = await e.runner.run({
 		command: "railway",
 		args: [
@@ -8315,15 +8349,15 @@ async function Gp(e, t) {
 		allowFailure: !0,
 		label: `expose ${t.name} on a tcp proxy`
 	});
-	n.exitCode !== 0 && !tp.test(n.stderr + n.stdout) && e.log?.(`Could not open a TCP proxy on ${t.name}, so it is only reachable from inside the Railway project: ${n.stderr.trim() || n.stdout.trim()}`);
+	n.exitCode !== 0 && !np.test(n.stderr + n.stdout) && e.log?.(`Could not open a TCP proxy on ${t.name}, so it is only reachable from inside the Railway project: ${n.stderr.trim() || n.stdout.trim()}`);
 }
-var Kp = {
+var qp = {
 	RUSTFS_ENDPOINT: "ENDPOINT",
 	RUSTFS_ACCESS_KEY: "ACCESS_KEY_ID",
 	RUSTFS_SECRET_KEY: "SECRET_ACCESS_KEY",
 	BUCKET_NAME: "BUCKET"
 };
-async function qp(e, t) {
+async function Jp(e, t) {
 	let { service: n, crossProvider: r } = t, i = n.name, a = await e.runner.run({
 		command: "railway",
 		args: [
@@ -8336,14 +8370,14 @@ async function qp(e, t) {
 		label: "list railway buckets"
 	});
 	if (a.exitCode !== 0) {
-		if (!np.test(a.stderr + a.stdout)) throw Error(`Could not list the Railway buckets in this project:\n${a.stderr.trim()}`);
-		return e.log?.("This Railway CLI has no `bucket` command, so storage runs as a RustFS service instead"), $p(e, n);
+		if (!rp.test(a.stderr + a.stdout)) throw Error(`Could not list the Railway buckets in this project:\n${a.stderr.trim()}`);
+		return e.log?.("This Railway CLI has no `bucket` command, so storage runs as a RustFS service instead"), em(e, n);
 	}
-	Xp(a.stdout).some((e) => e.name === i) || await Jp(e, n);
-	let o = await xp(e, i) !== null;
+	Zp(a.stdout).some((e) => e.name === i) || await Yp(e, n);
+	let o = await Sp(e, i) !== null;
 	if (!r && !o) {
 		let e = {};
-		for (let [t, n] of Object.entries(Kp)) e[t] = Cp(i, n);
+		for (let [t, n] of Object.entries(qp)) e[t] = wp(i, n);
 		return {
 			outputs: e,
 			note: `wired as Railway references to the ${i} bucket`
@@ -8361,14 +8395,14 @@ async function qp(e, t) {
 		cwd: e.cwd,
 		allowFailure: !0,
 		label: `read the ${i} bucket credentials`
-	}), c = Qp(s.stdout);
+	}), c = $p(s.stdout);
 	if (!c) throw Error(`Could not read the credentials for the Railway bucket "${i}":\n${s.stderr.trim() || s.stdout.trim()}\nRun \`railway bucket credentials --bucket ${i}\` and set ${Ld("services", "bucket", "external")} in ${X}.`);
 	return {
 		outputs: c,
 		note: o ? `set as values, because the service "${i}" shares the bucket's name. Delete it with \`railway service delete --service ${i}\` to switch to references` : "read from the bucket, since a Railway reference does not resolve off Railway"
 	};
 }
-async function Jp(e, t) {
+async function Yp(e, t) {
 	let n = await e.runner.run({
 		command: "railway",
 		args: [
@@ -8376,20 +8410,20 @@ async function Jp(e, t) {
 			"create",
 			t.name,
 			"--region",
-			Yp(t.region),
+			Xp(t.region),
 			"--json"
 		],
 		cwd: e.cwd,
 		allowFailure: !0,
 		label: `create the ${t.name} bucket`
 	});
-	if (n.exitCode !== 0 && !tp.test(n.stderr + n.stdout)) throw Error(`Could not create the Railway bucket "${t.name}":\n${n.stderr.trim()}`);
-	if (Zp(n.stdout)) throw Error(`The Railway bucket "${t.name}" was created but staged rather than deployed, because the environment has uncommitted changes. Commit them in the Railway dashboard and run deploy again.`);
-}
-function Yp(e) {
-	return e && Xf.includes(e) ? e : Zf;
+	if (n.exitCode !== 0 && !np.test(n.stderr + n.stdout)) throw Error(`Could not create the Railway bucket "${t.name}":\n${n.stderr.trim()}`);
+	if (Qp(n.stdout)) throw Error(`The Railway bucket "${t.name}" was created but staged rather than deployed, because the environment has uncommitted changes. Commit them in the Railway dashboard and run deploy again.`);
 }
 function Xp(e) {
+	return e && Zf.includes(e) ? e : Qf;
+}
+function Zp(e) {
 	let t = Q(e.trim());
 	if (!Array.isArray(t)) return [];
 	let n = [];
@@ -8403,11 +8437,11 @@ function Xp(e) {
 	}
 	return n;
 }
-function Zp(e) {
+function Qp(e) {
 	let t = Q(e.trim());
 	return typeof t != "object" || !t ? !1 : t.staged === !0;
 }
-function Qp(e) {
+function $p(e) {
 	let t = Q(e.trim());
 	if (typeof t != "object" || !t) return null;
 	let n = t, r = (e) => typeof n[e] == "string" ? n[e] : "", i = r("endpoint"), a = r("accessKeyId"), o = r("secretAccessKey");
@@ -8418,15 +8452,15 @@ function Qp(e) {
 		BUCKET_NAME: r("bucketName")
 	};
 }
-async function $p(e, t) {
-	let n = t.name, r = await xp(e, n), i = r ? await tm(e, n) : null, a = i?.accessKey ?? `hs${D(8).toString("hex")}`, o = i?.secretKey ?? D(24).toString("base64url"), s = r?.id;
+async function em(e, t) {
+	let n = t.name, r = await Sp(e, n), i = r ? await nm(e, n) : null, a = i?.accessKey ?? `hs${D(8).toString("hex")}`, o = i?.secretKey ?? D(24).toString("base64url"), s = r?.id;
 	if (!i) {
 		let t = await e.runner.run({
 			command: "railway",
 			args: [
 				"add",
 				"--image",
-				Qf,
+				$f,
 				"--service",
 				n,
 				"--variables",
@@ -8434,7 +8468,7 @@ async function $p(e, t) {
 				"--variables",
 				`RUSTFS_SECRET_KEY=${o}`,
 				"--variables",
-				`RUSTFS_ADDRESS=:${$f}`,
+				`RUSTFS_ADDRESS=:${ep}`,
 				"--json"
 			],
 			cwd: e.cwd,
@@ -8442,14 +8476,14 @@ async function $p(e, t) {
 			secrets: [o],
 			label: `create object storage service ${n}`
 		});
-		if (t.exitCode !== 0) throw tp.test(t.stderr + t.stdout) ? Error(`The Railway storage service "${n}" already exists, but its access keys could not be read back. Copy them from the dashboard into ${Ld("services", "bucket", "external")} in ${X}.`) : Error(`Could not create the Railway storage service "${n}":\n${t.stderr.trim()}`);
-		s = sp(t.stdout)?.id ?? s;
+		if (t.exitCode !== 0) throw np.test(t.stderr + t.stdout) ? Error(`The Railway storage service "${n}" already exists, but its access keys could not be read back. Copy them from the dashboard into ${Ld("services", "bucket", "external")} in ${X}.`) : Error(`Could not create the Railway storage service "${n}":\n${t.stderr.trim()}`);
+		s = cp(t.stdout)?.id ?? s;
 	}
 	if (!s) throw Error(`Could not find the id of the Railway storage service "${n}", which is what \`railway volume\` needs to mount a volume on it. Run \`railway service list --json\` to check the project, or set ${Ld("services", "bucket", "external")} in ${X} to use storage you run yourself.`);
-	await em(e, {
+	await tm(e, {
 		name: n,
 		serviceId: s,
-		mountPath: ep,
+		mountPath: tp,
 		consequence: "anything uploaded to it would be lost on the next restart"
 	});
 	let c = await e.runner.run({
@@ -8459,14 +8493,14 @@ async function $p(e, t) {
 			"--service",
 			n,
 			"--port",
-			String($f),
+			String(ep),
 			"--json"
 		],
 		cwd: e.cwd,
 		allowFailure: !0,
 		label: `expose ${n}`
-	}), l = rp(c.stdout + c.stderr);
-	if (!l) throw Error(`Could not get a public endpoint for the Railway storage service "${n}". Run \`railway domain --service ${n} --port ${$f}\` and set ${Ld("services", "bucket", "external")} in ${X}.`);
+	}), l = ip(c.stdout + c.stderr);
+	if (!l) throw Error(`Could not get a public endpoint for the Railway storage service "${n}". Run \`railway domain --service ${n} --port ${ep}\` and set ${Ld("services", "bucket", "external")} in ${X}.`);
 	return {
 		outputs: {
 			RUSTFS_ENDPOINT: l,
@@ -8474,10 +8508,10 @@ async function $p(e, t) {
 			RUSTFS_SECRET_KEY: o,
 			BUCKET_NAME: n
 		},
-		note: i ? "reusing the existing RustFS service and its keys" : `RustFS on Railway, with a volume mounted at ${ep}`
+		note: i ? "reusing the existing RustFS service and its keys" : `RustFS on Railway, with a volume mounted at ${tp}`
 	};
 }
-async function em(e, t) {
+async function tm(e, t) {
 	let n = await e.runner.run({
 		command: "railway",
 		args: [
@@ -8493,10 +8527,10 @@ async function em(e, t) {
 		allowFailure: !0,
 		label: `attach a volume to ${t.name}`
 	});
-	if (n.exitCode !== 0 && !tp.test(n.stderr + n.stdout)) throw Error(`The Railway service "${t.name}" has no persistent volume at ${t.mountPath}, so ${t.consequence}:\n${n.stderr.trim() || n.stdout.trim()}`);
+	if (n.exitCode !== 0 && !np.test(n.stderr + n.stdout)) throw Error(`The Railway service "${t.name}" has no persistent volume at ${t.mountPath}, so ${t.consequence}:\n${n.stderr.trim() || n.stdout.trim()}`);
 }
-async function tm(e, t) {
-	let n = await Tp(e, t), r = n.RUSTFS_ACCESS_KEY, i = n.RUSTFS_SECRET_KEY;
+async function nm(e, t) {
+	let n = await Ep(e, t), r = n.RUSTFS_ACCESS_KEY, i = n.RUSTFS_SECRET_KEY;
 	return r && i ? {
 		accessKey: r,
 		secretKey: i
@@ -8504,32 +8538,32 @@ async function tm(e, t) {
 }
 //#endregion
 //#region src/deploy/providers/index.ts
-var nm = {
-	railway: lp,
-	fly: vf
+var rm = {
+	railway: up,
+	fly: yf
 };
-function rm(e) {
-	return nm[e];
+function im(e) {
+	return rm[e];
 }
 //#endregion
 //#region src/deploy/tools.ts
-var im = "@railway/cli@5", am = "https://api.github.com/repos/superfly/flyctl/releases/latest";
-function om() {
+var am = "@railway/cli@5", om = "https://api.github.com/repos/superfly/flyctl/releases/latest";
+function sm() {
 	return T.join(w.homedir(), ".hype-stack", "tools");
 }
-function sm(e) {
+function cm(e) {
 	return T.join(e, "railway", "node_modules", ".bin");
 }
-function cm(e) {
+function lm(e) {
 	return T.join(e, "fly", "bin");
 }
-function lm(e, t, n) {
+function um(e, t, n) {
 	return [e, ...(t ?? "").split(n).filter((t) => t.length > 0 && t !== e)].join(n);
 }
-function um(e) {
-	process.env.PATH = lm(e, process.env.PATH, T.delimiter);
-}
 function dm(e) {
+	process.env.PATH = um(e, process.env.PATH, T.delimiter);
+}
+function fm(e) {
 	let t;
 	try {
 		t = JSON.parse(e);
@@ -8540,7 +8574,7 @@ function dm(e) {
 	let n = t.tag_name;
 	return typeof n == "string" && n.length > 0 ? n : null;
 }
-function fm(e, t, n) {
+function pm(e, t, n) {
 	let r = {
 		darwin: "macOS",
 		linux: "Linux",
@@ -8551,39 +8585,39 @@ function fm(e, t, n) {
 	}[t];
 	return !r || !i ? null : `flyctl_${n.replace(/^v/, "")}_${r}_${i}.${e === "win32" ? "zip" : "tar.gz"}`;
 }
-function pm(e) {
+function mm(e) {
 	return process.platform === "win32" ? `${e}.exe` : e;
 }
-function mm() {
+function hm() {
 	return process.platform === "win32" ? "npm.cmd" : "npm";
 }
-async function hm(e) {
-	let t = sm(e);
+async function gm(e) {
+	let t = cm(e);
 	return le(T.join(t, "railway")) || le(T.join(t, "railway.cmd"));
 }
-async function gm(e) {
-	if (await hm(e)) return sm(e);
+async function _m(e) {
+	if (await gm(e)) return cm(e);
 	let t = T.join(e, "railway");
 	await C.mkdir(t, { recursive: !0 });
-	let n = await U(mm(), [
+	let n = await U(hm(), [
 		"install",
-		im,
+		am,
 		"--prefix",
 		t,
 		"--no-fund",
 		"--no-audit",
 		"--loglevel=error"
 	], { cwd: e }).catch(() => null);
-	return !n || n.exitCode !== 0 ? null : await hm(e) ? sm(e) : null;
+	return !n || n.exitCode !== 0 ? null : await gm(e) ? cm(e) : null;
 }
-async function _m(e) {
-	let t = cm(e), n = T.join(t, pm("fly"));
+async function vm(e) {
+	let t = lm(e), n = T.join(t, mm("fly"));
 	if (le(n)) return t;
-	let r = await fetch(am, { headers: { "user-agent": "hype-stack-cli" } }).catch(() => null);
+	let r = await fetch(om, { headers: { "user-agent": "hype-stack-cli" } }).catch(() => null);
 	if (!r?.ok) return null;
-	let i = dm(await r.text());
+	let i = fm(await r.text());
 	if (!i) return null;
-	let a = fm(process.platform, process.arch, i);
+	let a = pm(process.platform, process.arch, i);
 	if (!a) return null;
 	let o = await fetch(`https://github.com/superfly/flyctl/releases/download/${i}/${a}`).catch(() => null);
 	if (!o?.ok) return null;
@@ -8597,42 +8631,42 @@ async function _m(e) {
 		t
 	], { cwd: t }).catch(() => null);
 	if (await C.rm(s, { force: !0 }), !c || c.exitCode !== 0) return null;
-	let l = T.join(t, pm("flyctl"));
+	let l = T.join(t, mm("flyctl"));
 	return !le(n) && le(l) && await C.copyFile(l, n), le(n) ? (process.platform !== "win32" && await C.chmod(n, 493), t) : null;
 }
-async function vm(e, t = om()) {
-	let n = e.id === "railway" ? await gm(t) : await _m(t);
-	return n && um(n), n;
+async function ym(e, t = sm()) {
+	let n = e.id === "railway" ? await _m(t) : await vm(t);
+	return n && dm(n), n;
 }
 //#endregion
 //#region src/deploy/auth.ts
-function ym() {
+function bm() {
 	return {
-		createRunner: (e) => Pf({ env: e }),
+		createRunner: (e) => Ff({ env: e }),
 		runInteractive: async (e, t, n) => (await li(e, t, { cwd: n })).exitCode,
-		bootstrapCli: (e) => vm(e),
-		confirmInstall: Am,
-		chooseMethod: jm,
-		readToken: Nm,
-		chooseScope: Mm
+		bootstrapCli: (e) => ym(e),
+		confirmInstall: jm,
+		chooseMethod: Mm,
+		readToken: Pm,
+		chooseScope: Nm
 	};
 }
-async function bm(e) {
-	let t = e.io ?? ym(), n = {}, r = {};
+async function xm(e) {
+	let t = e.io ?? bm(), n = {}, r = {};
 	for (let i of e.providers) {
-		let a = Wd[i], o = e.adapters?.[i] ?? rm(i), s = {
+		let a = Wd[i], o = e.adapters?.[i] ?? im(i), s = {
 			io: t,
 			spec: a,
 			plan: e.plan,
 			skipPrompts: e.skipPrompts,
 			env: r
 		};
-		await xm(s);
-		let c = await Tm({
+		await Sm(s);
+		let c = await Em({
 			...s,
 			adapter: o
 		});
-		r = c.env, c.account && (n[i] = c.account), await Em({
+		r = c.env, c.account && (n[i] = c.account), await Dm({
 			...s,
 			env: r,
 			adapter: o
@@ -8643,20 +8677,20 @@ async function bm(e) {
 		accounts: n
 	};
 }
-async function xm(e) {
+async function Sm(e) {
 	let { io: t, spec: n, plan: r, skipPrompts: i } = e;
-	if (await Sm(e)) return;
-	if (t.bootstrapCli && (Tt(`Fetching the ${n.label} CLI (one-time, into ~/.hype-stack/tools)...`), await t.bootstrapCli(n).catch(() => null) && await Sm(e))) {
+	if (await Cm(e)) return;
+	if (t.bootstrapCli && (Tt(`Fetching the ${n.label} CLI (one-time, into ~/.hype-stack/tools)...`), await t.bootstrapCli(n).catch(() => null) && await Cm(e))) {
 		Dt(n.label, "CLI ready");
 		return;
 	}
 	let a = `The ${n.label} CLI is not on your PATH. Install it with ${N.command(n.install)} and run deploy again. ${P(n.docs)}`;
-	(i || !Cm()) && L(a, { reason: "input_required" }), ut({
+	(i || !wm()) && L(a, { reason: "input_required" }), ut({
 		reason: "input_required",
 		message: a
-	}), await t.confirmInstall(n) || L(a, { reason: "input_required" }), await t.runInteractive("sh", ["-c", n.install], r.projectRoot), await Sm(e) || L(`That did not put ${N.command(n.bin)} on your PATH. ${a}`, { reason: "input_required" });
+	}), await t.confirmInstall(n) || L(a, { reason: "input_required" }), await t.runInteractive("sh", ["-c", n.install], r.projectRoot), await Cm(e) || L(`That did not put ${N.command(n.bin)} on your PATH. ${a}`, { reason: "input_required" });
 }
-async function Sm(e) {
+async function Cm(e) {
 	let t = await e.io.createRunner(e.env).run({
 		command: e.spec.bin,
 		args: ["--version"],
@@ -8665,11 +8699,11 @@ async function Sm(e) {
 	}).catch(() => null);
 	return t !== null && t.exitCode === 0;
 }
-function Cm() {
+function wm() {
 	return process.platform !== "win32";
 }
-var wm = 3;
-async function Tm(e) {
+var Tm = 3;
+async function Em(e) {
 	let { io: t, spec: n, plan: r, skipPrompts: i, adapter: a } = e, o = { ...e.env }, s = 0;
 	for (;;) {
 		let e = {
@@ -8681,26 +8715,26 @@ async function Tm(e) {
 			account: c.account,
 			env: o
 		};
-		let l = Dm(n, o);
+		let l = Om(n, o);
 		if (l) {
 			Object.assign(o, l);
 			continue;
 		}
-		i && L(km(n), { reason: "auth_required" }), ut({
+		i && L(Am(n), { reason: "auth_required" }), ut({
 			reason: "auth_required",
-			message: km(n)
-		}), s >= wm && L(`${n.label} still does not know who you are. ${km(n)}`, { reason: "auth_required" }), s += 1;
+			message: Am(n)
+		}), s >= Tm && L(`${n.label} still does not know who you are. ${Am(n)}`, { reason: "auth_required" }), s += 1;
 		let u = await t.chooseMethod(n);
 		if (u === "token") {
 			let e = await t.readToken(n);
-			Object.assign(o, Om(n.conflictingTokenEnv), { [n.tokenEnv]: e });
+			Object.assign(o, km(n.conflictingTokenEnv), { [n.tokenEnv]: e });
 			continue;
 		}
 		let d = u === "browserless" ? n.browserlessLoginArgs ?? n.loginArgs : n.loginArgs;
 		await t.runInteractive(n.bin, d, r.projectRoot);
 	}
 }
-async function Em(e) {
+async function Dm(e) {
 	let { io: t, spec: n, plan: r, skipPrompts: i, env: a, adapter: o } = e, { scope: s } = o;
 	if (!s || s.current(r)) return;
 	let c = await s.list({
@@ -8718,27 +8752,27 @@ async function Em(e) {
 		message: l
 	}), s.pin(r, await t.chooseScope(n, s, c));
 }
-function Dm(e, t) {
+function Om(e, t) {
 	let n = (e.conflictingTokenEnv ?? []).filter((e) => !(e in t) && process.env[e] !== void 0);
 	if (n.length === 0) return null;
 	for (let t of n) wt(`${N.label(t)} is set in your shell, but it cannot create a ${e.label} project. Ignoring it for this run.`);
-	return Om(n);
+	return km(n);
 }
-function Om(e = []) {
+function km(e = []) {
 	return Object.fromEntries(e.map((e) => [e, void 0]));
 }
-function km(e) {
+function Am(e) {
 	let t = N.command(`${e.bin} ${e.loginArgs.join(" ")}`);
 	return `Not signed in to ${e.label}. Run ${t}, or set ${N.label(e.tokenEnv)} to a token from ${P(e.tokenUrl)}.`;
 }
-async function Am(e) {
+async function jm(e) {
 	let t = await c.confirm({
 		message: `Deploying needs the ${N.highlight(e.label)} CLI. Install it with ${N.command(e.install)}?`,
 		initialValue: !0
 	});
 	return c.isCancel(t) && R(), t;
 }
-async function jm(e) {
+async function Mm(e) {
 	let t = [{
 		value: "browser",
 		label: "Log in through the browser",
@@ -8760,7 +8794,7 @@ async function jm(e) {
 	});
 	return c.isCancel(n) && R(), n;
 }
-async function Mm(e, t, n) {
+async function Nm(e, t, n) {
 	let r = await c.select({
 		message: `Which ${N.highlight(e.label)} ${t.label} should this project live in?`,
 		options: n.map((e) => ({
@@ -8771,7 +8805,7 @@ async function Mm(e, t, n) {
 	});
 	return c.isCancel(r) && R(), r;
 }
-async function Nm(e) {
+async function Pm(e) {
 	c.log.info(`Create one at ${P(e.tokenUrl)}. Give it the workspace this project should live in, not a single project.`);
 	let t = await c.password({
 		message: `Paste your ${e.label} token`,
@@ -8781,59 +8815,59 @@ async function Nm(e) {
 }
 //#endregion
 //#region src/deploy/config.ts
-var Pm = A.enum(Vd), Fm = A.object({
-	provider: Pm,
+var Fm = A.enum(Vd), Im = A.object({
+	provider: Fm,
 	app: A.string().min(1).optional(),
 	region: A.string().min(1).optional(),
 	url: A.string().url().optional()
-}), Im = A.object({
-	provider: Pm,
+}), Lm = A.object({
+	provider: Fm,
 	name: A.string().min(1).optional(),
 	region: A.string().min(1).optional(),
 	external: A.record(A.string(), A.string()).optional()
-}), Lm = A.object({
+}), Rm = A.object({
 	org: A.string().min(1).optional(),
 	postgresPlan: A.string().min(1).optional()
-}), Rm = A.object({ workspace: A.string().min(1).optional() }), zm = A.object({
+}), zm = A.object({ workspace: A.string().min(1).optional() }), Bm = A.object({
 	version: A.number().int().positive(),
 	projectName: A.string().min(1),
 	environment: A.string().min(1),
-	defaultProvider: Pm.optional(),
+	defaultProvider: Fm.optional(),
 	targets: A.object({
-		backend: Fm.optional(),
-		frontend: Fm.optional(),
-		admin: Fm.optional()
+		backend: Im.optional(),
+		frontend: Im.optional(),
+		admin: Im.optional()
 	}).default({}),
 	services: A.object({
-		postgres: Im.optional(),
-		valkey: Im.optional(),
-		bucket: Im.optional()
+		postgres: Lm.optional(),
+		valkey: Lm.optional(),
+		bucket: Lm.optional()
 	}).default({}),
-	fly: Lm.optional(),
-	railway: Rm.optional()
+	fly: Rm.optional(),
+	railway: zm.optional()
 });
-async function Bm(e) {
+async function Vm(e) {
 	let t = await q(e).catch((e) => {
 		throw Error(`Could not read ${X}: ${e instanceof Error ? e.message : String(e)}. Fix it, then run deploy again.`);
 	});
 	if (!t) throw Error(`No ${X} in this project, so there is nothing to deploy. Run "hype-stack init" to create one, or deploy from the root of a project made with "hype-stack create".`);
 	return t;
 }
-async function Vm(e) {
-	let t = (await Bm(e))[Id];
+async function Hm(e) {
+	let t = (await Vm(e))[Id];
 	if (t === void 0) return null;
-	let n = zm.safeParse(t);
+	let n = Bm.safeParse(t);
 	if (!n.success) throw Error(`Invalid "${Id}" block in ${X}:\n  ${A.prettifyError(n.error)}`);
 	if (n.data.version > 1) throw Error(`The "${Id}" block in ${X} was written by a newer CLI (version ${n.data.version}, this CLI understands 1). Upgrade with "npm i -g @hype-stack/cli".`);
 	return n.data;
 }
-async function Hm(e, t) {
+async function Um(e, t) {
 	await qi(e, {
-		...await Bm(e),
-		[Id]: Wm(t)
+		...await Vm(e),
+		[Id]: Gm(t)
 	});
 }
-function Um(e, t = Rd) {
+function Wm(e, t = Rd) {
 	return {
 		version: 1,
 		projectName: e,
@@ -8842,7 +8876,7 @@ function Um(e, t = Rd) {
 		services: {}
 	};
 }
-function Wm(e) {
+function Gm(e) {
 	let t = {
 		version: e.version,
 		projectName: e.projectName,
@@ -8872,7 +8906,7 @@ function Wm(e) {
 }
 //#endregion
 //#region src/deploy/detect.ts
-var Gm = [
+var Km = [
 	"@hono/node-server",
 	"@tanstack/react-start",
 	"@tanstack/start",
@@ -8880,32 +8914,32 @@ var Gm = [
 	"express",
 	"fastify"
 ];
-function Km(e, t, n) {
+function qm(e, t, n) {
 	let r = Hd[t], i = n?.paths?.[r.pathKey]?.root, a = n?.apps?.[t];
 	return T.resolve(e, i ?? a ?? r.defaultRoot);
 }
-async function qm(e, t) {
+async function Jm(e, t) {
 	return (await Promise.all(zd.map(async (n) => {
-		let r = Km(e, n, t);
+		let r = qm(e, n, t);
 		return await G(T.join(r, "package.json")) ? n : null;
 	}))).filter((e) => e !== null);
 }
-var Jm = ["build:web", "build"];
-async function Ym(e, t) {
+var Ym = ["build:web", "build"];
+async function Xm(e, t) {
 	let [n, r] = await Promise.all([G(T.join(e, "Dockerfile")), fi(T.join(e, "package.json")).catch(() => null)]);
 	if (n) return "node";
 	if (Hd[t].serveMode === "node") return null;
 	let i = r?.scripts ?? {}, a = {
 		...r?.dependencies,
 		...r?.devDependencies
-	}, o = Jm.some((e) => i[e] !== void 0), s = Gm.some((e) => a[e] !== void 0);
+	}, o = Ym.some((e) => i[e] !== void 0), s = Km.some((e) => a[e] !== void 0);
 	return o || !s ? "static" : null;
 }
-async function Xm(e, t, n) {
-	let r = await Promise.all(t.map(async (t) => [t, await Ym(Km(e, t, n), t)]));
+async function Zm(e, t, n) {
+	let r = await Promise.all(t.map(async (t) => [t, await Xm(qm(e, t, n), t)]));
 	return Object.fromEntries(r);
 }
-function Zm(e) {
+function Qm(e) {
 	let t = {};
 	for (let n of zd) {
 		let r = e[n];
@@ -8913,7 +8947,7 @@ function Zm(e) {
 	}
 	return t;
 }
-async function Qm(e, t) {
+async function $m(e, t) {
 	let n = Hd[t].staticDir ?? "dist", r = [
 		n,
 		"dist",
@@ -8926,11 +8960,11 @@ async function Qm(e, t) {
 //#endregion
 //#region src/deploy/dry-run.ts
 var $ = "dry-run-placeholder";
-function $m(e, t) {
+function eh(e, t) {
 	let n = e.args.indexOf(t);
 	return n === -1 ? "app" : e.args[n + 1] ?? "app";
 }
-var eh = "dryrun00cluster", th = "dryrun00service", nh = [
+var th = "dryrun00cluster", nh = "dryrun00service", rh = [
 	{
 		match: "fly orgs list",
 		stdout: JSON.stringify([{
@@ -8948,13 +8982,13 @@ var eh = "dryrun00cluster", th = "dryrun00service", nh = [
 	},
 	{
 		match: "fly mpg create",
-		stdout: `Managed Postgres cluster created successfully!\n  ID: ${eh}\n  Connection string: postgres://hype:${$}@example.flympg.net:5432/postgres`
+		stdout: `Managed Postgres cluster created successfully!\n  ID: ${th}\n  Connection string: postgres://hype:${$}@example.flympg.net:5432/postgres`
 	},
 	{
 		match: "fly mpg status",
 		stdout: JSON.stringify({
 			data: {
-				id: eh,
+				id: th,
 				status: "ready"
 			},
 			credentials: { pgbouncer_uri: `postgres://hype:${$}@example.flympg.net:5432/postgres` }
@@ -8971,7 +9005,7 @@ var eh = "dryrun00cluster", th = "dryrun00service", nh = [
 	{
 		match: "fly storage create",
 		stdout: (e) => [
-			`BUCKET_NAME: ${$m(e, "--name")}`,
+			`BUCKET_NAME: ${eh(e, "--name")}`,
 			"AWS_ENDPOINT_URL_S3: https://fly.storage.tigris.dev",
 			`AWS_ACCESS_KEY_ID: ${$}`,
 			`AWS_SECRET_ACCESS_KEY: ${$}`
@@ -8992,8 +9026,8 @@ var eh = "dryrun00cluster", th = "dryrun00service", nh = [
 	{
 		match: "railway add",
 		stdout: (e) => JSON.stringify({
-			id: th,
-			name: $m(e, "--service")
+			id: nh,
+			name: eh(e, "--service")
 		})
 	},
 	{
@@ -9008,7 +9042,7 @@ var eh = "dryrun00cluster", th = "dryrun00service", nh = [
 	},
 	{
 		match: "railway domain",
-		stdout: (e) => JSON.stringify({ domain: `${$m(e, "--service")}-production.up.railway.app` })
+		stdout: (e) => JSON.stringify({ domain: `${eh(e, "--service")}-production.up.railway.app` })
 	},
 	{
 		match: "railway variable list",
@@ -9027,7 +9061,7 @@ var eh = "dryrun00cluster", th = "dryrun00service", nh = [
 		stdout: (e) => JSON.stringify({
 			id: "dryrun00bucket",
 			name: e.args[2] ?? "bucket",
-			region: $m(e, "--region"),
+			region: eh(e, "--region"),
 			staged: !1,
 			committed: !0
 		})
@@ -9047,7 +9081,7 @@ var eh = "dryrun00cluster", th = "dryrun00service", nh = [
 		match: "railway api",
 		stdout: JSON.stringify({ data: { serviceInstanceUpdate: !0 } })
 	}
-], rh = {
+], ih = {
 	backend: [
 		"NODE_ENV",
 		"APP_ENV",
@@ -9073,30 +9107,30 @@ var eh = "dryrun00cluster", th = "dryrun00service", nh = [
 		"VITE_APP_TYPE",
 		"VITE_ENVIRONMENT"
 	]
-}, ih = new Set([
+}, ah = new Set([
 	"VITE_SENTRY_AUTH_TOKEN",
 	"POSTGRES_USER",
 	"POSTGRES_PASSWORD",
 	"POSTGRES_DB",
 	"POSTGRES_HOST",
 	"POSTGRES_PORT"
-]), ah = /(?:^|\/\/|@)(?:localhost|127\.0\.0\.1|0\.0\.0\.0|host\.docker\.internal)(?::\d+)?(?:\/|$)/i;
-function oh(e) {
+]), oh = /(?:^|\/\/|@)(?:localhost|127\.0\.0\.1|0\.0\.0\.0|host\.docker\.internal)(?::\d+)?(?:\/|$)/i;
+function sh(e) {
 	let { plan: t, serviceOutputs: n, urls: r, localEnv: i = {}, declaredKeys: a = {}, exampleEnv: o = {}, externallyProvided: s = {} } = e;
 	return t.targets.map((e) => {
-		let c = sh(e, t, r), l = ph({
+		let c = ch(e, t, r), l = hh({
 			target: e.target,
 			environment: t.environment,
 			port: e.spec.port,
 			serviceOutputs: n,
 			urls: c
-		}), u = a[e.target] ?? [], d = i[e.target] ?? {}, f = c[e.target], { forwarded: p, rehosted: m, skippedLocal: h } = hh({
+		}), u = a[e.target] ?? [], d = i[e.target] ?? {}, f = c[e.target], { forwarded: p, rehosted: m, skippedLocal: h } = _h({
 			declared: u,
 			local: d,
 			managed: l,
 			origin: f,
 			target: e.target
-		}), g = new Set(s[e.target] ?? []), _ = u.filter((e) => l[e] === void 0 && p[e] === void 0 && !ih.has(e) && !g.has(e)), { seeded: v, seededRehosted: y } = ch({
+		}), g = new Set(s[e.target] ?? []), _ = u.filter((e) => l[e] === void 0 && p[e] === void 0 && !ah.has(e) && !g.has(e)), { seeded: v, seededRehosted: y } = lh({
 			keys: _,
 			example: o[e.target] ?? {},
 			origin: f
@@ -9108,25 +9142,26 @@ function oh(e) {
 			seeded: v,
 			rehosted: [...m, ...y],
 			missing: b,
+			blank: uh(b, o[e.target] ?? {}),
 			skippedLocal: h
 		};
 	});
 }
-function sh(e, t, n) {
+function ch(e, t, n) {
 	let r = e.provider === "railway" && e.target === "backend", i = {};
-	for (let e of t.targets) i[e.target] = r && e.provider === "railway" ? wp(e.app) : n[e.target];
+	for (let e of t.targets) i[e.target] = r && e.provider === "railway" ? Tp(e.app) : n[e.target];
 	return i;
 }
-function ch(e) {
+function lh(e) {
 	let t = {}, n = [];
 	for (let r of e.keys) {
 		let i = e.example[r];
 		if (i === void 0 || i.trim() === "" || i.includes("${")) continue;
-		if (!ah.test(i)) {
+		if (!oh.test(i)) {
 			t[r] = i;
 			continue;
 		}
-		let a = lh(i, e.origin);
+		let a = dh(i, e.origin);
 		a && (t[r] = a, n.push(r));
 	}
 	return {
@@ -9134,7 +9169,13 @@ function ch(e) {
 		seededRehosted: n
 	};
 }
-function lh(e, t) {
+function uh(e, t) {
+	return e.filter((e) => {
+		let n = t[e];
+		return n !== void 0 && n.trim() === "";
+	});
+}
+function dh(e, t) {
 	if (!t) return null;
 	let n;
 	try {
@@ -9144,13 +9185,13 @@ function lh(e, t) {
 	}
 	return /^https?:$/.test(n.protocol) ? `${t.replace(/\/+$/, "")}${n.pathname === "/" && !e.trimEnd().endsWith("/") ? "" : n.pathname}${n.search}${n.hash}` : null;
 }
-var uh = "(pending)", dh = "https://pending.invalid";
-function fh(e) {
+var fh = "(pending)", ph = "https://pending.invalid";
+function mh(e) {
 	let { plan: t, localEnv: n, declaredKeys: r, exampleEnv: i } = e, a = {};
-	for (let e of t.targets) a[e.target] = e.url ?? dh;
+	for (let e of t.targets) a[e.target] = e.url ?? ph;
 	let o = {};
-	for (let e of t.services) o[e.service] = e.external ?? Object.fromEntries(e.spec.provides.map((e) => [e, uh]));
-	return oh({
+	for (let e of t.services) o[e.service] = e.external ?? Object.fromEntries(e.spec.provides.map((e) => [e, fh]));
+	return sh({
 		plan: t,
 		serviceOutputs: o,
 		urls: a,
@@ -9159,14 +9200,14 @@ function fh(e) {
 		exampleEnv: i
 	});
 }
-function ph(e) {
+function hh(e) {
 	let { target: t, environment: n, port: r, serviceOutputs: i, urls: a } = e;
-	return t === "backend" ? mh({
+	return t === "backend" ? gh({
 		environment: n,
 		port: r,
 		serviceOutputs: i,
 		urls: a
-	}) : _h(t === "frontend" ? {
+	}) : yh(t === "frontend" ? {
 		VITE_API_BASE_URL: a.backend,
 		VITE_ADMIN_URL: a.admin,
 		VITE_ENVIRONMENT: n
@@ -9176,9 +9217,9 @@ function ph(e) {
 		VITE_ENVIRONMENT: n
 	});
 }
-function mh(e) {
+function gh(e) {
 	let { environment: t, port: n, serviceOutputs: r, urls: i } = e;
-	return _h({
+	return yh({
 		NODE_ENV: "production",
 		APP_ENV: t,
 		PORT: n === void 0 ? void 0 : String(n),
@@ -9190,14 +9231,14 @@ function mh(e) {
 		SERVER_URL: i.backend
 	});
 }
-function hh(e) {
-	let { declared: t, local: n, managed: r, origin: i, target: a } = e, o = new Set(rh[a]), s = {}, c = [], l = [];
+function _h(e) {
+	let { declared: t, local: n, managed: r, origin: i, target: a } = e, o = new Set(ih[a]), s = {}, c = [], l = [];
 	for (let e of t) {
-		if (o.has(e) || r[e] !== void 0 || ih.has(e)) continue;
+		if (o.has(e) || r[e] !== void 0 || ah.has(e)) continue;
 		let t = n[e];
 		if (!(t === void 0 || t.trim() === "") && !t.includes("${")) {
-			if (ah.test(t)) {
-				let n = lh(t, i);
+			if (oh.test(t)) {
+				let n = dh(t, i);
 				if (!n) {
 					l.push(e);
 					continue;
@@ -9214,19 +9255,20 @@ function hh(e) {
 		skippedLocal: l
 	};
 }
-function gh(e) {
+function vh(e) {
 	return {
+		...Object.fromEntries(e.blank.map((e) => [e, ""])),
 		...e.seeded,
 		...e.forwarded,
 		...e.managed
 	};
 }
-function _h(e) {
+function yh(e) {
 	let t = {};
 	for (let [n, r] of Object.entries(e)) r !== void 0 && r !== "" && (t[n] = r);
 	return t;
 }
-function vh(e) {
+function bh(e) {
 	let t = {};
 	for (let n of e.split(/\r?\n/)) {
 		let e = n.trim();
@@ -9234,27 +9276,27 @@ function vh(e) {
 		let r = e.startsWith("export ") ? e.slice(7).trim() : e, i = r.indexOf("=");
 		if (i <= 0) continue;
 		let a = r.slice(0, i).trim();
-		/^[A-Za-z_][A-Za-z0-9_]*$/.test(a) && (t[a] = yh(r.slice(i + 1).trim()));
+		/^[A-Za-z_][A-Za-z0-9_]*$/.test(a) && (t[a] = xh(r.slice(i + 1).trim()));
 	}
 	return t;
 }
-function yh(e) {
+function xh(e) {
 	if (e.length >= 2 && (e.startsWith("\"") && e.endsWith("\"") || e.startsWith("'") && e.endsWith("'"))) return e.slice(1, -1);
 	let t = e.indexOf(" #");
 	return t === -1 ? e : e.slice(0, t).trim();
 }
-function bh(e) {
-	return [...new Set(Object.keys(vh(e)))];
+function Sh(e) {
+	return [...new Set(Object.keys(bh(e)))];
 }
 //#endregion
 //#region src/deploy/migrations.ts
-var xh = [
+var Ch = [
 	"migration:latest",
 	"migrate:deploy",
 	"db:migrate:deploy"
 ];
-async function Sh(e, t) {
-	let n = await fi(T.join(e, "package.json")).catch(() => null), r = xh.find((e) => typeof n?.scripts?.[e] == "string");
+async function wh(e, t) {
+	let n = await fi(T.join(e, "package.json")).catch(() => null), r = Ch.find((e) => typeof n?.scripts?.[e] == "string");
 	if (r && n?.name) return [
 		"pnpm",
 		"--filter",
@@ -9267,7 +9309,7 @@ async function Sh(e, t) {
 		"run",
 		r
 	];
-	let i = await Ch(e);
+	let i = await Th(e);
 	return [
 		"npx",
 		"prisma",
@@ -9277,7 +9319,7 @@ async function Sh(e, t) {
 		T.relative(t, i).split(T.sep).join("/")
 	];
 }
-async function Ch(e) {
+async function Th(e) {
 	let t = T.join(e, "prisma"), n = T.join(t, "schema");
 	if (await W(n)) return n;
 	let r = T.join(t, "schema.prisma");
@@ -9285,16 +9327,16 @@ async function Ch(e) {
 }
 //#endregion
 //#region src/deploy/orchestrate.ts
-async function wh(e) {
+async function Eh(e) {
 	let { plan: t, runner: n, log: r } = e, i = [], a = {}, o = { ...e.knownServiceOutputs }, s = {}, c = [], l = {
 		runner: n,
 		plan: t,
 		cwd: t.projectRoot,
 		log: r
-	}, u = (t) => e.adapters?.[t] ?? rm(t), d = (e, n) => (i.push({
+	}, u = (t) => e.adapters?.[t] ?? im(t), d = (e, n) => (i.push({
 		...e,
 		status: "failed",
-		detail: Ah(n)
+		detail: Mh(n)
 	}), {
 		plan: t,
 		steps: i,
@@ -9303,7 +9345,7 @@ async function wh(e) {
 		envPlans: c,
 		ok: !1
 	});
-	if (!e.skipAuthCheck) for (let n of Dh(t)) {
+	if (!e.skipAuthCheck) for (let n of kh(t)) {
 		let t = {
 			id: `auth:${n}`,
 			label: `Check ${n} login`
@@ -9368,13 +9410,19 @@ async function wh(e) {
 			}, e.providedByProvider && f && (s[f.target] = [...s[f.target] ?? [], ...e.providedByProvider]), i.push({
 				...t,
 				status: "ok",
-				detail: e.note ?? kh(e.outputs)
+				detail: e.note ?? jh(e.outputs)
 			});
 		} catch (e) {
 			return d(t, e);
 		}
 	}
-	c = oh({
+	for (let e of t.targets) {
+		let t = u(e.provider);
+		if (!t.existingEnvKeys) continue;
+		let n = await t.existingEnvKeys(l, e).catch(() => []);
+		n.length > 0 && (s[e.target] = [...s[e.target] ?? [], ...n]);
+	}
+	c = sh({
 		plan: t,
 		serviceOutputs: o,
 		urls: a,
@@ -9383,52 +9431,53 @@ async function wh(e) {
 		exampleEnv: e.exampleEnv,
 		externallyProvided: s
 	});
-	let p = new Map(c.map((e) => [e.target, e])), m = f && !e.skipMigrations ? await Sh(f.root, t.projectRoot) : void 0, h = !1, g = /* @__PURE__ */ new Set();
+	let p = new Map(c.map((e) => [e.target, e])), m = f && !e.skipMigrations ? await wh(f.root, t.projectRoot) : void 0, h = !1, g = /* @__PURE__ */ new Set();
 	for (let e of t.targets) {
-		let t = p.get(e.target), n = t ? gh(t) : {}, o = Oh(n), s = u(e.provider), c = {
+		let t = p.get(e.target), n = t ? vh(t) : {}, o = t?.blank ?? [], s = Ah(n), c = u(e.provider), d = {
 			id: `env:${e.target}`,
 			label: `Configure ${e.spec.label} env`
 		};
 		try {
-			r?.(`Setting ${Object.keys(n).length} env vars on ${e.app}`), await s.setEnv(l, {
+			r?.(`Setting ${Object.keys(n).length} env vars on ${e.app}`), await c.setEnv(l, {
 				target: e,
 				env: n,
-				secrets: o
+				secrets: s,
+				blankKeys: o
 			}), i.push({
-				...c,
+				...d,
 				status: "ok",
 				detail: `${Object.keys(n).length} variables`
 			});
 		} catch (t) {
 			i.push({
-				...c,
+				...d,
 				status: "failed",
-				detail: Ah(t)
+				detail: Mh(t)
 			}), g.add(e.target);
 			continue;
 		}
-		let d = {
+		let _ = {
 			id: `deploy:${e.target}`,
 			label: `Deploy ${e.spec.label}`
 		};
 		try {
 			r?.(`Deploying ${e.spec.label} to ${e.provider}`);
-			let t = await s.deployTarget(l, {
+			let t = await c.deployTarget(l, {
 				target: e,
 				env: n,
-				secrets: o,
+				secrets: s,
 				releaseCommand: e === f ? m : void 0
 			});
 			t.url && (a[e.target] = t.url), t.releaseRan && (h = !0), i.push({
-				...d,
+				..._,
 				status: "ok",
 				detail: t.url ?? t.note
 			});
 		} catch (t) {
 			i.push({
-				...d,
+				..._,
 				status: "failed",
-				detail: Ah(t)
+				detail: Mh(t)
 			}), g.add(e.target);
 		}
 	}
@@ -9452,7 +9501,7 @@ async function wh(e) {
 			i.push({
 				...n,
 				status: "failed",
-				detail: Ah(t)
+				detail: Mh(t)
 			}), g.add(e.target);
 		}
 	}
@@ -9477,7 +9526,7 @@ async function wh(e) {
 			detail: `${m.join(" ")} (ran with the release)`
 		});
 		else {
-			let e = await Th({
+			let e = await Dh({
 				ctx: l,
 				adapter: u(f.provider),
 				backend: f,
@@ -9498,7 +9547,7 @@ async function wh(e) {
 		ok: i.every((e) => e.status !== "failed")
 	};
 }
-async function Th(e) {
+async function Dh(e) {
 	let { ctx: t, adapter: n, backend: r, command: i } = e;
 	if (!n.runRemote) return {
 		status: "skipped",
@@ -9510,37 +9559,37 @@ async function Th(e) {
 		status: "ok",
 		detail: i.join(" ")
 	};
-	let o = Eh(a.output);
+	let o = Oh(a.output);
 	return {
 		status: "skipped",
 		detail: `Could not run migrations remotely${o ? ` (${o})` : ""}. Run "${i.join(" ")}" against ${r.app}.`
 	};
 }
-function Eh(e) {
+function Oh(e) {
 	let t = e.split(/\r?\n/).map((e) => e.trim()).find((e) => e.length > 0);
 	if (t) return t.length > 160 ? `${t.slice(0, 157)}...` : t;
 }
-function Dh(e) {
+function kh(e) {
 	let t = /* @__PURE__ */ new Set();
 	for (let n of e.targets) t.add(n.provider);
 	for (let n of e.services) n.external || t.add(n.provider);
 	return [...t];
 }
-function Oh(e) {
+function Ah(e) {
 	return Object.entries(e).filter(([e, t]) => t.length >= 8 && !e.startsWith("VITE_") && !/^https?:\/\//.test(t)).map(([, e]) => e);
 }
-function kh(e) {
+function jh(e) {
 	let t = Object.keys(e);
 	return t.length === 0 ? void 0 : `set ${t.join(", ")}`;
 }
-function Ah(e) {
+function Mh(e) {
 	return e instanceof Error ? e.message : String(e);
 }
 //#endregion
 //#region src/deploy/plan.ts
-function jh(e) {
+function Nh(e) {
 	let { projectRoot: t, config: n, assignment: r, stackConfig: i, serveModes: a = {}, staticDirs: o = {} } = e, s = [];
-	for (let [e, c] of Nh(r)) {
+	for (let [e, c] of Fh(r)) {
 		let r = n.targets[e], l = Hd[e];
 		s.push({
 			target: e,
@@ -9553,7 +9602,7 @@ function jh(e) {
 			app: r?.app ?? Xd(n.projectName, e, c),
 			region: r?.region,
 			url: r?.url,
-			root: Km(t, e, i)
+			root: qm(t, e, i)
 		});
 	}
 	let c = [];
@@ -9580,20 +9629,20 @@ function jh(e) {
 		railway: n.railway ?? {}
 	};
 }
-var Mh = [
+var Ph = [
 	"frontend",
 	"admin",
 	"backend"
 ];
-function Nh(e) {
+function Fh(e) {
 	let t = [];
-	for (let n of Mh) {
+	for (let n of Ph) {
 		let r = e.targets[n];
 		r && t.push([n, r]);
 	}
 	return t;
 }
-function Ph(e, t) {
+function Ih(e, t) {
 	let n = {
 		...e,
 		environment: t.environment,
@@ -9623,20 +9672,20 @@ function Ph(e, t) {
 }
 //#endregion
 //#region src/deploy/project-env.ts
-async function Fh(e) {
+async function Lh(e) {
 	return await G(e) ? C.readFile(e, "utf-8") : null;
 }
-async function Ih(e, t) {
-	let n = vh(await Fh(T.join(e, ".env")) ?? ""), r = await Promise.all(t.map(async (e) => {
-		let [t, r] = await Promise.all([Fh(T.join(e.root, ".env")), Fh(T.join(e.root, ".env.example"))]);
+async function Rh(e, t) {
+	let n = bh(await Lh(T.join(e, ".env")) ?? ""), r = await Promise.all(t.map(async (e) => {
+		let [t, r] = await Promise.all([Lh(T.join(e.root, ".env")), Lh(T.join(e.root, ".env.example"))]);
 		return {
 			target: e.target,
 			local: {
 				...n,
-				...vh(t ?? "")
+				...bh(t ?? "")
 			},
-			declared: bh(r ?? ""),
-			example: vh(r ?? "")
+			declared: Sh(r ?? ""),
+			example: bh(r ?? "")
 		};
 	})), i = {}, a = {}, o = {};
 	for (let e of r) i[e.target] = e.local, a[e.target] = e.declared, o[e.target] = e.example;
@@ -9648,7 +9697,7 @@ async function Ih(e, t) {
 }
 //#endregion
 //#region src/deploy/report.ts
-function Lh(e) {
+function zh(e) {
 	let t = [];
 	t.push(`${N.label("Project")}  ${N.highlight(e.projectName)}`), t.push(`${N.label("Env")}      ${N.highlight(e.environment)}`), t.push(""), t.push(N.bold("Apps"));
 	for (let n of e.targets) {
@@ -9664,61 +9713,64 @@ function Lh(e) {
 	}
 	return t.join("\n");
 }
-function Rh(e) {
+function Bh(e) {
 	let t = [];
 	for (let n of e) {
 		let e = Object.keys(n.managed).length, r = Object.keys(n.forwarded).length;
 		t.push(`${N.bold(Z(n.target))} ${N.muted(`${e} wired by deploy, ${r} carried over from .env`)}`);
 		let i = Object.keys(n.seeded);
-		i.length > 0 && t.push(`  ${N.warning("seeded")}  ${N.muted(`${i.join(", ")} (placeholders from .env.example)`)}`), n.rehosted.length > 0 && t.push(`  ${N.label("moved")}   ${N.muted(`${n.rehosted.join(", ")} (localhost swapped for the deployed origin)`)}`), n.skippedLocal.length > 0 && t.push(`  ${N.warning("skipped")} ${N.muted(`${n.skippedLocal.join(", ")} (points at localhost)`)}`), n.missing.length > 0 && t.push(`  ${N.warning("unset")}   ${N.muted(n.missing.join(", "))}`);
+		i.length > 0 && t.push(`  ${N.warning("seeded")}  ${N.muted(`${i.join(", ")} (placeholders from .env.example)`)}`), n.rehosted.length > 0 && t.push(`  ${N.label("moved")}   ${N.muted(`${n.rehosted.join(", ")} (localhost swapped for the deployed origin)`)}`), n.skippedLocal.length > 0 && t.push(`  ${N.warning("skipped")} ${N.muted(`${n.skippedLocal.join(", ")} (points at localhost)`)}`);
+		let a = n.missing.filter((e) => !n.blank.includes(e));
+		a.length > 0 && t.push(`  ${N.warning("unset")}   ${N.muted(a.join(", "))}`), n.blank.length > 0 && t.push(`  ${N.warning("empty")}   ${N.muted(`${n.blank.join(", ")} (declared but never filled in)`)}`);
 	}
 	return t.join("\n");
 }
-function zh(e) {
+function Vh(e) {
 	return e.steps.map((e) => {
 		let t = e.status === "ok" ? N.success("✓") : e.status === "skipped" ? N.warning("-") : N.error("✗"), n = e.detail ? ` ${N.muted(e.detail)}` : "";
 		return `${t} ${e.label}${n}`;
 	}).join("\n");
 }
-function Bh(e) {
+function Hh(e) {
 	return e.plan.targets.map((t) => {
 		let n = e.urls[t.target];
 		return n ? `${N.label(t.spec.label)}  ${P(n)}` : `${N.label(t.spec.label)}  ${N.muted("no public URL")}`;
 	}).join("\n");
 }
-function Vh(e) {
+function Uh(e) {
 	let t = [];
 	for (let n of e.envPlans) {
-		n.missing.length > 0 && t.push(`${Z(n.target)} is missing ${n.missing.join(", ")}. The app will boot only once those are set.`);
-		let e = Object.keys(n.seeded);
-		e.length > 0 && t.push(`${Z(n.target)} got ${e.join(", ")} from .env.example, so the app boots but those features will not work until you set real values.`);
+		let e = n.missing.filter((e) => !n.blank.includes(e));
+		e.length > 0 && t.push(`${Z(n.target)} is missing ${e.join(", ")}. The app will boot only once those are set.`), n.blank.length > 0 && t.push(`${Z(n.target)} got ${n.blank.join(", ")} as empty values, the same as a fresh .env. The app boots without them; set real values to turn those features on.`);
+		let r = Object.keys(n.seeded);
+		r.length > 0 && t.push(`${Z(n.target)} got ${r.join(", ")} from .env.example, so the app boots but those features will not work until you set real values.`);
 	}
 	for (let n of e.steps) n.status === "skipped" && n.id === "migrate" && n.detail && t.push(n.detail);
 	return t;
 }
 //#endregion
 //#region src/commands/deploy.ts
-async function Hh(e = {}) {
+async function Wh(e = {}) {
 	let t = T.resolve(e.cwd ?? process.cwd()), n = e.yes === !0;
 	_l(), c.intro(N.brandBold("Deploy your stack")), await Zi(t) || L(`${N.path(t)} doesn't look like a Hype Stack project. Run this from the project root.`, { reason: "not_a_project" }), await Ki(t) || L(`${N.path(t)} has no ${N.path(ye)}, so it is not a Hype Stack project this CLI can deploy. Run "hype-stack init" here first, or deploy a project made with "hype-stack create".`, { reason: "not_a_project" });
-	let r = await q(t).catch(() => null), i = await Uh(t);
-	i ||= Um(Ci(r?.name ?? T.basename(t))), e.environment && (i.environment = e.environment), e.flyOrg && (i.fly = {
+	let r = await q(t).catch(() => null), i = await Gh(t);
+	i ||= Wm(Ci(r?.name ?? T.basename(t))), e.environment && (i.environment = e.environment), e.flyOrg && (i.fly = {
 		...i.fly,
 		org: e.flyOrg
 	}), e.railwayWorkspace && (i.railway = {
 		...i.railway,
 		workspace: e.railwayWorkspace
 	});
-	let a = await qm(t, r);
+	let a = await Jm(t, r);
 	a.length === 0 && L("Found no deployable apps. Expected at least one of apps/backend, apps/frontend, or apps/admin.");
-	let o = e.only ?? [], s = Gh(e.assign), l = Wh(e.provider, "--provider"), u = Zd({
+	let o = e.only ?? [], s = qh(e.assign), l = Kh(e.provider, "--provider"), u = Zd({
 		config: i,
 		defaultProvider: l,
 		overrides: s,
 		availableTargets: a,
 		only: o
-	}), d = await Xm(t, Qd(a, o), r);
-	n || (u = await qh({
+	}), d = await Zm(t, Qd(a, o), r);
+	n || (u = await Yh({
 		assignment: u,
 		availableTargets: a,
 		requestedTargets: o
@@ -9730,12 +9782,12 @@ async function Hh(e = {}) {
 		serveModes: d
 	});
 	f.length > 0 && (I(tf(f), "Cannot deploy yet"), L("Fix the assignments above and run deploy again.", { reason: "input_required" }));
-	let p = Zm(d), m = await Zh({
+	let p = Qm(d), m = await $h({
 		cwd: t,
 		targets: u.targets,
 		serveModes: p,
 		stackConfig: r
-	}), h = jh({
+	}), h = Nh({
 		projectRoot: t,
 		config: i,
 		assignment: u,
@@ -9743,13 +9795,13 @@ async function Hh(e = {}) {
 		serveModes: p,
 		staticDirs: m
 	});
-	I(Lh(h), e.dryRun ? "Deployment plan (dry run)" : "Deployment plan");
+	I(zh(h), e.dryRun ? "Deployment plan (dry run)" : "Deployment plan");
 	let g = e.dryRun ? {
 		env: {},
 		accounts: {}
-	} : await bm({
+	} : await xm({
 		plan: h,
-		providers: Dh(h),
+		providers: kh(h),
 		skipPrompts: n
 	});
 	if (!n && !e.dryRun) {
@@ -9758,27 +9810,27 @@ async function Hh(e = {}) {
 			message: "Deploying creates billable infrastructure. Re-run with --yes to confirm non-interactively."
 		});
 		let e = await c.confirm({
-			message: `Create and deploy this on ${Qh(h.targets.map((e) => e.provider))}?`,
+			message: `Create and deploy this on ${eg(h.targets.map((e) => e.provider))}?`,
 			initialValue: !0
 		});
 		(c.isCancel(e) || !e) && R();
 	}
-	let _ = await Ih(t, h.targets);
-	I(Rh(fh({
+	let _ = await Rh(t, h.targets);
+	I(Bh(mh({
 		plan: h,
 		localEnv: _.local,
 		declaredKeys: _.declared,
 		exampleEnv: _.example
 	})), "Environment"), await Fd(t).catch(() => null);
-	let v = At(), y = [], b = e.dryRun ? Ff({
+	let v = At(), y = [], b = e.dryRun ? If({
 		onCommand: (e) => y.push(e),
-		responses: nh
-	}) : Pf({
+		responses: rh
+	}) : Ff({
 		onCommand: (e) => y.push(e),
 		env: g.env
 	});
 	v.start(e.dryRun ? "Walking the plan" : "Deploying");
-	let x = await wh({
+	let x = await Eh({
 		plan: h,
 		runner: b,
 		localEnv: _.local,
@@ -9790,61 +9842,61 @@ async function Hh(e = {}) {
 		knownAccounts: g.accounts,
 		log: (e) => v.message(e)
 	});
-	if (v.stop(x.ok ? N.success("Deploy finished") : N.error("Deploy stopped")), I(zh(x), "Steps"), e.dryRun) {
+	if (v.stop(x.ok ? N.success("Deploy finished") : N.error("Deploy stopped")), I(Vh(x), "Steps"), e.dryRun) {
 		I(y.map((e) => N.command(e)).join("\n"), "Commands that would run"), c.outro(N.muted("Dry run only. No infrastructure was created."));
 		return;
 	}
-	if (await Hm(t, Ph(i, x.plan)), !x.ok) {
+	if (await Um(t, Ih(i, x.plan)), !x.ok) {
 		let e = x.steps.filter((e) => e.status === "failed");
 		I(`${e.length > 0 ? e.map((e) => `${e.label} failed.${e.detail ? `\n${e.detail}` : ""}`).join("\n\n") : "A step failed."}\n\nWhat succeeded is saved in ${N.path(X)}, so re-running picks up from here.`, "Deploy failed"), L("Deploy did not finish.");
 	}
-	I(Bh(x), "Live");
-	let S = Vh(x);
+	I(Hh(x), "Live");
+	let S = Uh(x);
 	S.length > 0 && I(S.map((e) => `${N.warning("!")} ${e}`).join("\n\n"), "Still to do"), c.outro(N.brand("Shipped."));
 }
-async function Uh(e) {
+async function Gh(e) {
 	try {
-		return await Vm(e);
+		return await Hm(e);
 	} catch (e) {
 		L(e instanceof Error ? e.message : String(e));
 	}
 }
-function Wh(e, t) {
+function Kh(e, t) {
 	if (e) return Kd(e) || L(`Unknown provider "${e}" for ${t}. Pick one of ${Object.keys(Wd).join(", ")}.`), e;
 }
-function Gh(e) {
+function qh(e) {
 	let t = {};
 	for (let [n, r] of Object.entries(e ?? {})) {
-		let e = Wh(r, `--${n}`);
+		let e = Kh(r, `--${n}`);
 		e && (t[n] = e);
 	}
 	return t;
 }
-function Kh(e) {
+function Jh(e) {
 	let { assignment: t, availableTargets: n, requestedTargets: r } = e, i = Qd(n, r).filter((e) => !t.targets[e]);
 	return {
 		targets: i,
 		services: t.targets.backend !== void 0 || i.includes("backend") ? Bd.filter((e) => !t.services[e]) : []
 	};
 }
-async function qh(e) {
+async function Yh(e) {
 	let t = {
 		targets: { ...e.assignment.targets },
 		services: { ...e.assignment.services }
-	}, { targets: n, services: r } = Kh(e);
+	}, { targets: n, services: r } = Jh(e);
 	if (n.length + r.length > 1) {
-		let e = await Jh();
+		let e = await Xh();
 		if (e) {
 			for (let r of n) t.targets[r] = e;
 			for (let n of r) t.services[n] = e;
 			return t;
 		}
 	}
-	for (let e of n) t.targets[e] = await Xh(e, Jd(e));
-	for (let e of r) t.services[e] = await Xh(e, Jd(e));
+	for (let e of n) t.targets[e] = await Qh(e, Jd(e));
+	for (let e of r) t.services[e] = await Qh(e, Jd(e));
 	return t;
 }
-async function Jh() {
+async function Xh() {
 	let e = await c.select({
 		message: `Where should ${N.highlight("your stack")} live?`,
 		options: [...Vd.map((e) => ({
@@ -9852,16 +9904,16 @@ async function Jh() {
 			label: qd(e),
 			hint: `everything on ${Wd[e].bin}`
 		})), {
-			value: Yh,
+			value: Zh,
 			label: "Mix providers",
 			hint: "choose for each app and service"
 		}],
 		initialValue: Vd[0]
 	});
-	return c.isCancel(e) && R(), e === Yh ? void 0 : e;
+	return c.isCancel(e) && R(), e === Zh ? void 0 : e;
 }
-var Yh = "__mixed__";
-async function Xh(e, t) {
+var Zh = "__mixed__";
+async function Qh(e, t) {
 	if (t.length === 0 && L(`Nothing in this CLI can host ${Z(e)}. Provision it yourself and add it to the "${Id}" block of ${X}.`), t.length === 1) return t[0];
 	let n = await c.select({
 		message: `Where should ${N.highlight(Z(e))} live?`,
@@ -9874,17 +9926,17 @@ async function Xh(e, t) {
 	});
 	return c.isCancel(n) && R(), n;
 }
-async function Zh(e) {
-	let { cwd: t, targets: n, serveModes: r, stackConfig: i } = e, a = Object.keys(n).filter((e) => Gd(e) && r[e] === "static"), o = await Promise.all(a.map(async (e) => [e, await Qm(Km(t, e, i), e)]));
+async function $h(e) {
+	let { cwd: t, targets: n, serveModes: r, stackConfig: i } = e, a = Object.keys(n).filter((e) => Gd(e) && r[e] === "static"), o = await Promise.all(a.map(async (e) => [e, await $m(qm(t, e, i), e)]));
 	return Object.fromEntries(o);
 }
-function Qh(e) {
+function eg(e) {
 	let t = [...new Set(e)].map(qd);
 	return t.length <= 1 ? t[0] ?? "your provider" : `${t.slice(0, -1).join(", ")} and ${t[t.length - 1]}`;
 }
 //#endregion
 //#region src/commands/login.ts
-async function $h() {
+async function tg() {
 	vl(), c.intro(N.brandBold("Log in to Hype Stack")), Xe() && c.log.warn(`${Je} is set and takes priority over this login. Unset it to use the browser session.`), c.log.step("Opening your browser to sign in...");
 	let e;
 	try {
@@ -9898,7 +9950,7 @@ async function $h() {
 }
 //#endregion
 //#region src/commands/logout.ts
-async function eg() {
+async function ng() {
 	vl(), c.intro(N.brandBold("Log out of Hype Stack"));
 	let e = j(), t = await Ze(e);
 	if (!t) {
@@ -9909,8 +9961,8 @@ async function eg() {
 }
 //#endregion
 //#region src/commands/mcp.ts
-async function tg(e = {}) {
-	let t = rg(e.editor), n = xu(t), r = ig(e.scope, t, n), i = ng(e.token);
+async function rg(e = {}) {
+	let t = ag(e.editor), n = xu(t), r = og(e.scope, t, n), i = ig(e.token);
 	if (e.print) {
 		process.stdout.write(wu(t, i));
 		return;
@@ -9924,19 +9976,19 @@ async function tg(e = {}) {
 	});
 	a.changed ? c.log.success(`Wrote ${N.path(a.configPath)}`) : c.log.info(N.muted(`${N.path(a.configPath)} is already up to date.`)), i && c.log.warn(N.muted(`${Je} is stored in plain text. Keep this file out of version control.`)), c.outro(N.muted("Restart your editor to pick up the server."));
 }
-function ng(e) {
+function ig(e) {
 	return e?.trim() || void 0;
 }
-function rg(e) {
+function ag(e) {
 	return e ? (vu(e) || L(`Unknown editor "${e}". Expected one of: ${hu.join(", ")}.`), e) : "cursor";
 }
-function ig(e, t, n) {
+function og(e, t, n) {
 	let r = e ?? n[0];
 	return r !== "global" && r !== "project" && L(`Unknown scope "${r}". Expected global or project.`), n.includes(r) || L(`${t} does not support ${r} scope. Supported: ${n.join(", ")}.`), r;
 }
 //#endregion
 //#region src/ui/env-prompt.ts
-var ag = S("✔", "√"), og = S("✘", "x"), sg = "\x1B[7m \x1B[27m", cg = class extends ae {
+var sg = S("✔", "√"), cg = S("✘", "x"), lg = "\x1B[7m \x1B[27m", ug = class extends ae {
 	constructor(e) {
 		super({
 			input: e.input,
@@ -9951,9 +10003,9 @@ var ag = S("✔", "√"), og = S("✘", "x"), sg = "\x1B[7m \x1B[27m", cg = clas
 		let { key: e, section: t, linkUrl: n, hint: r, checklist: i, currentMasked: a, progress: o } = this.promptOptions, s = y.withGuide, c = s ? `${k("gray", l)}\n` : "";
 		if (this.state === "submit") {
 			let t = (this.value ?? "").trim(), n = t ? N.muted(_s(t)) : a ? N.muted(`kept ${a}`) : N.muted("left empty");
-			return `${c}${k("green", ag)}  ${N.bold(e)}  ${n}`;
+			return `${c}${k("green", sg)}  ${N.bold(e)}  ${n}`;
 		}
-		if (this.state === "cancel") return `${c}${k("red", og)}  ${k(["strikethrough", "dim"], e)}`;
+		if (this.state === "cancel") return `${c}${k("red", cg)}  ${k(["strikethrough", "dim"], e)}`;
 		let d = x(this.state), f = s ? `${d}  ` : "", p = b(this.state), m = o ? `  ${N.muted(o)}` : "", h = `${c}${p}  ${N.bold(e)}${m}`, g = [];
 		if (t) {
 			let e = n ? `  ${P(n)}` : "";
@@ -9961,19 +10013,19 @@ var ag = S("✔", "√"), og = S("✘", "x"), sg = "\x1B[7m \x1B[27m", cg = clas
 		}
 		if (i && i.length > 0) for (let e of i) g.push(`${f}${F.bullet} ${N.description(e)}`);
 		r && g.push(`${f}${N.description(r)}`);
-		let _ = this.userInput !== "", v = a ? `${a} (Enter keeps this)` : "type a value, or Enter to skip", S = _ ? `${f}${F.arrow} ${this.userInputWithCursor}` : `${f}${F.arrow} ${sg} ${N.muted(v)}`;
+		let _ = this.userInput !== "", v = a ? `${a} (Enter keeps this)` : "type a value, or Enter to skip", S = _ ? `${f}${F.arrow} ${this.userInputWithCursor}` : `${f}${F.arrow} ${lg} ${N.muted(v)}`;
 		g.push(S), this.state === "error" && g.push(`${f}${k("yellow", this.error)}`);
 		let C = s ? this.state === "error" ? k("yellow", u) : k("cyan", u) : "";
 		return `${h}\n${g.join("\n")}\n${C}`;
 	}
 };
-async function lg(e) {
-	let t = await new cg(e).prompt();
+async function dg(e) {
+	let t = await new ug(e).prompt();
 	return g(t) || typeof t == "string" ? t : "";
 }
 //#endregion
 //#region src/commands/onboard.ts
-async function ug(e = {}) {
+async function fg(e = {}) {
 	let t = e.cwd ?? process.cwd();
 	e.skipBanner || _l(), c.intro(N.brandBold("Onboard your stack"));
 	let n;
@@ -9988,12 +10040,12 @@ async function ug(e = {}) {
 	for (let e of r) await bs(e);
 	let i = await Ss(t, n);
 	i.length > 0 && c.log.success(`Generated ${N.highlight(String(i.length))} secrets: ${i.map((e) => e.key).join(", ")}`);
-	let a = await dg(t, n, r), o = a.filter((e) => e.setup.setup === "required" && !e.isSet), s = a.filter((e) => e.setup.setup === "required" && e.isSet), l = a.filter((e) => e.setup.setup === "optional"), u = [];
-	e.yes ? u.push(...o, ...l.filter((e) => !e.isSet)) : (u.push(...await fg(o)), u.push(...await pg(l)), await mg(s)), yg(u, t);
+	let a = await pg(t, n, r), o = a.filter((e) => e.setup.setup === "required" && !e.isSet), s = a.filter((e) => e.setup.setup === "required" && e.isSet), l = a.filter((e) => e.setup.setup === "optional"), u = [];
+	e.yes ? u.push(...o, ...l.filter((e) => !e.isSet)) : (u.push(...await mg(o)), u.push(...await hg(l)), await gg(s)), xg(u, t);
 	let d = Ii(n.installedPacks ?? []);
 	d.length > 0 && I(d.map((e) => `  ${N.muted("·")} ${e}`).join("\n"), "Tips"), c.outro(N.brand(`All set. Run ${N.command("pnpm dev")} to start your app.`));
 }
-async function dg(e, t, n) {
+async function pg(e, t, n) {
 	let r = t.onboarding?.envVars ?? [], i = t.onboarding?.envSections ?? [], a = [];
 	for (let e of n) {
 		let t = T.join(T.dirname(e), ".env"), [n, o] = await Promise.all([C.readFile(e, "utf-8"), ys(t)]);
@@ -10013,40 +10065,40 @@ async function dg(e, t, n) {
 	}
 	return a;
 }
-async function fg(e) {
-	let t = [], n = hg(e);
+async function mg(e) {
+	let t = [], n = _g(e);
 	if (n.size === 0) return t;
 	let r = [...n.entries()].map(([e, t]) => `${N.bold(e)} ${N.muted(`(${t.length})`)}`).join(", ");
 	c.log.step(`Keys needed for: ${r}`);
 	for (let [e, r] of n) {
 		let n = `${r.length} value${r.length === 1 ? "" : "s"}`;
-		if (!await gg(`Set up ${N.bold(e)} now? ${N.muted(`(${n})`)}`, !0)) {
+		if (!await vg(`Set up ${N.bold(e)} now? ${N.muted(`(${n})`)}`, !0)) {
 			t.push(...r);
 			continue;
 		}
-		await _g(r);
+		await yg(r);
 	}
 	return t;
 }
-async function pg(e) {
+async function hg(e) {
 	let t = [];
-	for (let [n, r] of hg(e)) {
+	for (let [n, r] of _g(e)) {
 		let e = r.every((e) => e.isSet), i = `${r.length} value${r.length === 1 ? "" : "s"}`;
-		if (!await gg(e ? `Update ${N.bold(n)}? ${N.muted(`(${i}, already set)`)}` : `Set up ${N.bold(n)} now? ${N.muted(`(${i}, optional)`)}`)) {
+		if (!await vg(e ? `Update ${N.bold(n)}? ${N.muted(`(${i}, already set)`)}` : `Set up ${N.bold(n)} now? ${N.muted(`(${i}, optional)`)}`)) {
 			t.push(...r.filter((e) => !e.isSet));
 			continue;
 		}
-		await _g(r);
+		await yg(r);
 	}
 	return t;
 }
-async function mg(e) {
-	for (let [t, n] of hg(e)) {
+async function gg(e) {
+	for (let [t, n] of _g(e)) {
 		let e = `${n.length} value${n.length === 1 ? "" : "s"}`;
-		await gg(`Update ${N.bold(t)}? ${N.muted(`(${e}, already set)`)}`) && await _g(n);
+		await vg(`Update ${N.bold(t)}? ${N.muted(`(${e}, already set)`)}`) && await yg(n);
 	}
 }
-function hg(e) {
+function _g(e) {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		let e = n.setup.group ?? n.section, r = t.get(e);
@@ -10054,20 +10106,20 @@ function hg(e) {
 	}
 	return t;
 }
-async function gg(e, t = !1) {
+async function vg(e, t = !1) {
 	let n = await c.confirm({
 		message: e,
 		initialValue: t
 	});
 	return c.isCancel(n) && R(), n === !0;
 }
-async function _g(e) {
+async function yg(e) {
 	let t = ji(e[0].section);
 	t.link && c.log.info(N.muted(t.link));
-	for (let [t, n] of e.entries()) await vg(n, `${t + 1}/${e.length}`);
+	for (let [t, n] of e.entries()) await bg(n, `${t + 1}/${e.length}`);
 }
-async function vg(e, t) {
-	let n = ji(e.section), r = await lg({
+async function bg(e, t) {
+	let n = ji(e.section), r = await dg({
 		key: e.key,
 		section: e.section,
 		linkUrl: n.link,
@@ -10080,7 +10132,7 @@ async function vg(e, t) {
 	let i = (typeof r == "string" ? r : "").trim();
 	i !== "" && await xs(e.envPath, e.key, i);
 }
-function yg(e, t) {
+function xg(e, t) {
 	if (e.length === 0) return;
 	let n = /* @__PURE__ */ new Map();
 	for (let t of e) {
@@ -10100,16 +10152,16 @@ function yg(e, t) {
 }
 //#endregion
 //#region src/core/templates.ts
-var bg = H.createRequest()({
+var Sg = H.createRequest()({
 	endpoint: "/templates/list",
 	method: "GET"
 });
-async function xg() {
-	let { data: e, error: t } = await bg.send();
+async function Cg() {
+	let { data: e, error: t } = await Sg.send();
 	if (t || !e) throw Error(`Failed to fetch template list: ${String(t)}`);
 	return e.templates;
 }
-async function Sg(e) {
+async function wg(e) {
 	let { data: t, error: n, status: r } = await H.createRequest()({
 		endpoint: `/templates/${encodeURIComponent(e)}/manifest`,
 		method: "GET"
@@ -10118,7 +10170,7 @@ async function Sg(e) {
 	if (n || !t) throw Error(`Failed to load manifest for template "${e}": ${String(n)}`);
 	return t;
 }
-async function Cg(e, t = {}) {
+async function Tg(e, t = {}) {
 	let n = H.createRequest()({
 		endpoint: `/templates/${encodeURIComponent(e)}/download`,
 		method: "POST"
@@ -10155,7 +10207,7 @@ async function Cg(e, t = {}) {
 }
 //#endregion
 //#region src/commands/template.ts
-async function wg(t = {}) {
+async function Eg(t = {}) {
 	let n = t.cwd ?? process.cwd();
 	_l(), await $c();
 	let r = c.spinner();
@@ -10169,7 +10221,7 @@ async function wg(t = {}) {
 	r.stop("Packs loaded"), r.start("Loading templates...");
 	let a;
 	try {
-		a = await xg();
+		a = await Cg();
 	} catch (e) {
 		r.stop("Failed to load templates"), L(`Could not reach Hype Stack. Check your connection and try again.\n${Xu(e)}`);
 	}
@@ -10192,7 +10244,7 @@ async function wg(t = {}) {
 	s || (r.stop("Template not found"), L(`Template "${o}" not found. Available: ${a.map((e) => e.id).join(", ") || "(none)"}`)), r.stop(`Template: ${s.name}`);
 	let l;
 	try {
-		l = await Sg(s.id);
+		l = await wg(s.id);
 	} catch (e) {
 		L(Xu(e));
 	}
@@ -10214,7 +10266,7 @@ async function wg(t = {}) {
 	p || L(d ? `Could not read ${N.path("stack.json")}. Run 'npx @hype-stack/cli init' to regenerate it, then run 'npx @hype-stack/cli template' again.` : `No ${N.path("stack.json")}. Run 'npx @hype-stack/cli init' first, then 'npx @hype-stack/cli template'.`), p.paths || L(`${N.path("stack.json")} is missing ${N.path("paths")}. Run 'npx @hype-stack/cli init' again to regenerate it.`);
 	let m = d ?? n;
 	c.intro(N.brandBold("Install a template"));
-	let h = p.installedPacks ?? [], g = new Set(h), v = new Map(i.map((e) => [e.name, e])), y = (await Ye(j()))?.token ?? null, b = await Tg(s, t.variants, t.yes ?? !1), x = il(s.slots, b), S = al(s.slots, s.packs, x), w = await Eg({
+	let h = p.installedPacks ?? [], g = new Set(h), v = new Map(i.map((e) => [e.name, e])), y = (await Ye(j()))?.token ?? null, b = await Dg(s, t.variants, t.yes ?? !1), x = il(s.slots, b), S = al(s.slots, s.packs, x), w = await Og({
 		packs: i,
 		templatePacks: S,
 		installedSet: g,
@@ -10289,7 +10341,7 @@ async function wg(t = {}) {
 		r.stop("Files installed"), n.installed.length > 0 && c.log.success(`${N.highlight(String(n.installed.length))} files installed`), n.skipped.length > 0 && (c.log.warning(`${n.skipped.length} files skipped (use --force to overwrite)`), ad(n.skipped));
 		for (let e of n.errors) c.log.error(e);
 		r.start("Applying template overrides...");
-		let i = await Cg(s.id, { token: y });
+		let i = await Tg(s.id, { token: y });
 		i.status === "denied" && (r.stop("Template download denied"), L(td(s.id, i.reason))), se = i.templateDir;
 		let a = await Tc({
 			manifest: l,
@@ -10326,7 +10378,7 @@ async function wg(t = {}) {
 				customization: n
 			}), c.log.success(`Applied the ${nc(n.theme)} theme, ${e(n.radius)} corners, and ${n.mode} mode`);
 		}
-		await Dg({
+		await kg({
 			prepared: ae,
 			templateNpm: l.dependencies_npm,
 			paths: p.paths,
@@ -10353,7 +10405,7 @@ async function wg(t = {}) {
 		});
 	}
 }
-async function Tg(e, t, n) {
+async function Dg(e, t, n) {
 	let r = {};
 	for (let i of e.slots) {
 		if (t?.[i.family]) {
@@ -10377,7 +10429,7 @@ async function Tg(e, t, n) {
 	}
 	return r;
 }
-async function Eg(e) {
+async function Og(e) {
 	let { packs: t, templatePacks: n, installedSet: r, options: i } = e, a = new Set(n);
 	if (i.packs && i.packs.length > 0) {
 		let e = i.packs.filter((e) => !t.some((t) => t.name === e));
@@ -10399,7 +10451,7 @@ async function Eg(e) {
 	});
 	return _(c) && L("Cancelled.", { code: 0 }), c;
 }
-async function Dg(e) {
+async function kg(e) {
 	let { prepared: t, templateNpm: n, paths: r, cwd: i, spinner: a } = e, o = Ju(t.map((e) => e.manifest.dependencies_npm)), s = qu(n ? Ju([o, n]) : o, r);
 	if (s.errors.length > 0) {
 		for (let e of s.errors) c.log.error(e);
@@ -10412,9 +10464,9 @@ async function Dg(e) {
 }
 //#endregion
 //#region src/mcp/guard.ts
-var Og = null;
-function kg() {
-	if (Og) return Og.protocolStream;
+var Ag = null;
+function jg() {
+	if (Ag) return Ag.protocolStream;
 	let e = process.stdout.write.bind(process.stdout), t = process.stdout.write, n = console.log, r = console.info, i = console.debug, a = console.dir, o = new fe({
 		write(t, n, r) {
 			e(t, (e) => r(e ?? null));
@@ -10423,7 +10475,7 @@ function kg() {
 			e();
 		}
 	}), s = ((e, t, n) => typeof t == "function" ? process.stderr.write(e, t) : process.stderr.write(e, t, n));
-	return process.stdout.write = s, console.log = console.error, console.info = console.error, console.debug = console.error, console.dir = console.error, Og = {
+	return process.stdout.write = s, console.log = console.error, console.info = console.error, console.debug = console.error, console.dir = console.error, Ag = {
 		protocolStream: o,
 		restore: () => {
 			process.stdout.write = t, console.log = n, console.info = r, console.debug = i, console.dir = a;
@@ -10432,22 +10484,22 @@ function kg() {
 }
 //#endregion
 //#region src/mcp/result.ts
-async function Ag(e) {
+async function Mg(e) {
 	ot();
 	try {
-		return jg({
+		return Ng({
 			...await e(),
 			ok: !0,
 			logs: st()
 		}, !1);
 	} catch (e) {
-		return lt(e) ? jg({
+		return lt(e) ? Ng({
 			ok: !1,
 			reason: e.reason,
 			message: e.message,
 			details: e.details,
 			logs: st()
-		}, !1) : jg({
+		}, !1) : Ng({
 			ok: !1,
 			reason: "failed",
 			message: e instanceof Error ? e.message : String(e),
@@ -10456,7 +10508,7 @@ async function Ag(e) {
 		}, !0);
 	}
 }
-function jg(e, t) {
+function Ng(e, t) {
 	return {
 		content: [{
 			type: "text",
@@ -10468,7 +10520,7 @@ function jg(e, t) {
 }
 //#endregion
 //#region src/mcp/tools/context.ts
-async function Mg() {
+async function Pg() {
 	let e = await Ye(j());
 	return e ? {
 		token: e.token,
@@ -10478,26 +10530,26 @@ async function Mg() {
 		source: "none"
 	};
 }
-function Ng(e) {
+function Fg(e) {
 	return T.resolve(e ?? process.cwd());
 }
-var Pg = {
+var Ig = {
 	envVar: Je,
 	loginCommand: "npx @hype-stack/cli login"
-}, Fg = {
+}, Lg = {
 	packs: A.array(A.string()).min(1).describe("Pack names to install. Append @frontend or @admin to a layout pack to target one shell."),
 	cwd: A.string().optional().describe("Project directory. Defaults to the workspace the server was started in."),
 	onConflict: A.enum(["keep", "overwrite"]).default("keep").describe("What to do with files that already exist: keep them, or let the pack overwrite them")
 };
-async function Ig(e) {
-	let t = Ng(e.cwd), n = await Lg(t);
+async function Rg(e) {
+	let t = Fg(e.cwd), n = await zg(t);
 	await ud({
 		cwd: t,
 		packs: e.packs,
 		force: e.onConflict === "overwrite",
 		yes: !0
 	});
-	let r = await Lg(t), i = r.filter((e) => !n.includes(e));
+	let r = await zg(t), i = r.filter((e) => !n.includes(e));
 	return {
 		cwd: t,
 		installed: i,
@@ -10505,21 +10557,21 @@ async function Ig(e) {
 		followUp: i.length > 0 ? [...Pc, "npx @hype-stack/cli onboard"] : []
 	};
 }
-async function Lg(e) {
+async function zg(e) {
 	return (await q(e).catch(() => null))?.installedPacks ?? [];
 }
 //#endregion
 //#region src/mcp/tools/apply-template.ts
-var Rg = {
+var Bg = {
 	templateId: A.string().min(1).describe("Template id, e.g. vault. Use search_catalog to find one."),
 	cwd: A.string().optional().describe("Project directory. Defaults to the workspace the server was started in."),
 	variants: A.record(A.string(), A.string()).optional().describe("Slot overrides keyed by family, e.g. { \"starter-saas\": \"starter-saas-better-auth\" }"),
 	packs: A.array(A.string()).optional().describe("Extra packs to install on top of the template"),
 	onConflict: A.enum(["keep", "overwrite"]).default("keep").describe("What to do with files that already exist: keep them, or let the template overwrite them")
 };
-async function zg(e) {
-	let t = Ng(e.cwd), n = await Bg(t);
-	await wg({
+async function Vg(e) {
+	let t = Fg(e.cwd), n = await Hg(t);
+	await Eg({
 		cwd: t,
 		templateId: e.templateId,
 		variants: e.variants,
@@ -10527,7 +10579,7 @@ async function zg(e) {
 		force: e.onConflict === "overwrite",
 		yes: !0
 	});
-	let r = await Bg(t);
+	let r = await Hg(t);
 	return {
 		cwd: t,
 		templateId: e.templateId,
@@ -10536,21 +10588,21 @@ async function zg(e) {
 		followUp: [...Pc, "npx @hype-stack/cli onboard"]
 	};
 }
-async function Bg(e) {
+async function Hg(e) {
 	return (await q(e).catch(() => null))?.installedPacks ?? [];
 }
 //#endregion
 //#region src/mcp/tools/auth-status.ts
-var Vg = {};
-async function Hg() {
-	let { token: e, source: t } = await Mg();
+var Ug = {};
+async function Wg() {
+	let { token: e, source: t } = await Pg();
 	if (!e) return {
 		authenticated: !1,
 		tokenSource: "none",
 		apiUrl: j(),
-		hint: `Run '${Pg.loginCommand}' in your terminal, or add ${Pg.envVar} to this server's env block in your editor's MCP config.`,
+		hint: `Run '${Ig.loginCommand}' in your terminal, or add ${Ig.envVar} to this server's env block in your editor's MCP config.`,
 		apiKeysUrl: `${Re()}/api-keys`,
-		...Pg
+		...Ig
 	};
 	let n = await Yr(e);
 	return n ? {
@@ -10563,14 +10615,14 @@ async function Hg() {
 		authenticated: !1,
 		tokenSource: t,
 		apiUrl: j(),
-		hint: t === "env" ? `The token in ${Pg.envVar} was rejected. It may be expired or revoked; mint a new one.` : `Your saved login was rejected. Run '${Pg.loginCommand}' again.`,
+		hint: t === "env" ? `The token in ${Ig.envVar} was rejected. It may be expired or revoked; mint a new one.` : `Your saved login was rejected. Run '${Ig.loginCommand}' again.`,
 		apiKeysUrl: `${Re()}/api-keys`,
-		...Pg
+		...Ig
 	};
 }
 //#endregion
 //#region src/mcp/tools/create-application.ts
-var Ug = {
+var Gg = {
 	name: A.string().min(1).describe("Application name. Becomes the folder name and the package scope."),
 	directory: A.string().optional().describe("Parent folder to create the app inside. Defaults to the current workspace."),
 	editors: A.array(A.enum(Ee)).optional().describe("AI editors to ship rule formats for. Pass every editor the team uses, they coexist. Defaults to cursor."),
@@ -10581,8 +10633,8 @@ var Ug = {
 	adminRadius: A.string().optional().describe("Admin corner radius. Defaults to the frontend radius."),
 	mode: A.enum(["light", "dark"]).optional().describe("Color mode the app boots in")
 };
-async function Wg(e) {
-	let t = Ng(e.directory), n = Gg(e), r = await sd({
+async function Kg(e) {
+	let t = Fg(e.directory), n = qg(e), r = await sd({
 		name: e.name,
 		parentDirectory: t,
 		editors: n,
@@ -10598,19 +10650,19 @@ async function Wg(e) {
 	return {
 		projectRoot: r,
 		editors: n,
-		mcpConfigPaths: Kg(n, r),
+		mcpConfigPaths: Jg(n, r),
 		followUp: [`cd ${r}`, ...Pc]
 	};
 }
-function Gg(e) {
+function qg(e) {
 	let { editors: t, unknown: n } = Ae([...e.editors ?? [], ...e.editor ? [e.editor] : []]);
 	if (n.length > 0) throw Error(`Unknown editor "${n.join(", ")}". Expected one of: ${Ee.join(", ")}.`);
 	return t.length > 0 ? t : [De];
 }
-function Kg(e, t) {
-	return bu(e).map((e) => qg(e, t)).filter((e) => e !== null);
+function Jg(e, t) {
+	return bu(e).map((e) => Yg(e, t)).filter((e) => e !== null);
 }
-function qg(e, t) {
+function Yg(e, t) {
 	try {
 		return Su({
 			editor: e,
@@ -10623,8 +10675,8 @@ function qg(e, t) {
 }
 //#endregion
 //#region src/core/env-status.ts
-async function Jg(e, t) {
-	let n = t?.onboarding?.envSections ?? [], r = t?.onboarding?.envVars ?? [], i = await ms(e), a = await Promise.all(i.map((t) => Yg({
+async function Xg(e, t) {
+	let n = t?.onboarding?.envSections ?? [], r = t?.onboarding?.envVars ?? [], i = await ms(e), a = await Promise.all(i.map((t) => Zg({
 		examplePath: t,
 		projectRoot: e,
 		installedEnvSections: n,
@@ -10635,7 +10687,7 @@ async function Jg(e, t) {
 		missingCount: a.reduce((e, t) => e + t.sections.filter((e) => e.relevant).reduce((e, t) => e + t.vars.filter((e) => e.setup === "required" && e.state !== "filled").length, 0), 0)
 	};
 }
-async function Yg(e) {
+async function Zg(e) {
 	let { examplePath: t, projectRoot: n, installedEnvSections: r, recorded: i } = e, a = T.join(T.dirname(t), ".env"), o = await C.readFile(t, "utf-8"), s = await ys(a), c = hs(o).map((e) => {
 		let t = ji(e.section);
 		return {
@@ -10646,7 +10698,7 @@ async function Yg(e) {
 				let t = Ui(e.key, i, r);
 				return {
 					key: e.key,
-					state: Xg(gs(s, e.key), e.value),
+					state: Qg(gs(s, e.key), e.value),
 					setup: t?.setup ?? null,
 					...t?.group ? { group: t.group } : {}
 				};
@@ -10660,20 +10712,20 @@ async function Yg(e) {
 		sections: c
 	};
 }
-function Xg(e, t) {
+function Qg(e, t) {
 	return e === "" ? "missing" : e === t.trim() ? "default" : "filled";
 }
 //#endregion
 //#region src/mcp/tools/env-status.ts
-var Zg = { cwd: A.string().optional().describe("Project directory. Defaults to the workspace the server was started in.") };
-async function Qg(e) {
-	let t = Ng(e.cwd), n = await q(t).catch(() => null);
+var $g = { cwd: A.string().optional().describe("Project directory. Defaults to the workspace the server was started in.") };
+async function e_(e) {
+	let t = Fg(e.cwd), n = await q(t).catch(() => null);
 	if (!n) throw new ct({
 		reason: "not_a_project",
 		message: `${t} has no stack.json, so there is nothing to check.`,
 		details: { cwd: t }
 	});
-	let r = await Jg(t, n);
+	let r = await Xg(t, n);
 	return {
 		cwd: t,
 		missingCount: r.missingCount,
@@ -10683,9 +10735,9 @@ async function Qg(e) {
 }
 //#endregion
 //#region src/mcp/tools/inspect-stack.ts
-var $g = { cwd: A.string().optional().describe("Project directory. Defaults to the workspace the server was started in.") };
-async function e_(e) {
-	let t = Ng(e.cwd), n = await q(t).catch(() => null);
+var t_ = { cwd: A.string().optional().describe("Project directory. Defaults to the workspace the server was started in.") };
+async function n_(e) {
+	let t = Fg(e.cwd), n = await q(t).catch(() => null);
 	if (!n) throw new ct({
 		reason: "not_a_project",
 		message: await Zi(t) ? `${t} is a Hype Stack project but has no stack.json. Run 'npx @hype-stack/cli init' in it.` : `${t} is not a Hype Stack project.`,
@@ -10713,12 +10765,12 @@ async function e_(e) {
 }
 //#endregion
 //#region src/mcp/tools/plan-install.ts
-var t_ = {
+var r_ = {
 	packs: A.array(A.string()).min(1).describe("Pack names to plan an install for"),
 	cwd: A.string().optional().describe("Project directory. Defaults to the workspace the server was started in.")
 };
-async function n_(e) {
-	let t = Ng(e.cwd), { token: n, source: r } = await Mg(), i = await q(t).catch(() => null), a = i?.installedPacks ?? [], o = await ra(), s = new Map(o.map((e) => [e.name, e])), c = e.packs.filter((e) => !s.has(e));
+async function i_(e) {
+	let t = Fg(e.cwd), { token: n, source: r } = await Pg(), i = await q(t).catch(() => null), a = i?.installedPacks ?? [], o = await ra(), s = new Map(o.map((e) => [e.name, e])), c = e.packs.filter((e) => !s.has(e));
 	if (c.length > 0) throw Error(`Unknown pack${c.length === 1 ? "" : "s"}: ${c.join(", ")}`);
 	let l = el(o), u = nl(e.packs, l, a), d = await Zu(u.order.map((e) => s.get(e)).filter((e) => e !== void 0), new Set(a), { token: n }), f = (e) => {
 		let t = s.get(e);
@@ -10747,12 +10799,12 @@ async function n_(e) {
 				purchaseUrl: n ? jt(e) : null
 			};
 		}),
-		...n === null ? { authHint: Pg } : {}
+		...n === null ? { authHint: Ig } : {}
 	};
 }
 //#endregion
 //#region src/mcp/tools/search-catalog.ts
-var r_ = {
+var a_ = {
 	query: A.string().optional().describe("Free text matched against name, display name, and description"),
 	kind: A.enum([
 		"pack",
@@ -10765,31 +10817,31 @@ var r_ = {
 		"paid",
 		"all"
 	]).default("all").describe("Restrict packs by price tier")
-}, i_ = (e, t) => {
+}, o_ = (e, t) => {
 	let n = t.trim().toLowerCase();
 	return n === "" ? !0 : e.some((e) => e.toLowerCase().includes(n));
 };
-function a_(e, t) {
+function s_(e, t) {
 	let { query: n = "", category: r, tier: i = "all" } = t;
-	return e.filter((e) => r && e.category !== r || i !== "all" && e.tier !== i ? !1 : i_([
+	return e.filter((e) => r && e.category !== r || i !== "all" && e.tier !== i ? !1 : o_([
 		e.name,
 		e.displayName,
 		e.description
 	], n));
 }
-function o_(e, t) {
+function c_(e, t) {
 	let { query: n = "", category: r } = t;
-	return e.filter((e) => r && e.category !== r ? !1 : i_([
+	return e.filter((e) => r && e.category !== r ? !1 : o_([
 		e.id,
 		e.name,
 		e.description,
 		...e.tags
 	], n));
 }
-async function s_(e) {
-	let t = e.kind ?? "all", [n, r] = await Promise.all([t === "template" ? Promise.resolve([]) : ra(), t === "pack" ? Promise.resolve([]) : xg()]);
+async function l_(e) {
+	let t = e.kind ?? "all", [n, r] = await Promise.all([t === "template" ? Promise.resolve([]) : ra(), t === "pack" ? Promise.resolve([]) : Cg()]);
 	return {
-		packs: a_(n, e).map((e) => ({
+		packs: s_(n, e).map((e) => ({
 			name: e.name,
 			displayName: e.displayName,
 			description: e.description,
@@ -10798,7 +10850,7 @@ async function s_(e) {
 			price: e.price,
 			dependencies: e.dependencies
 		})),
-		templates: o_(r, e).map((e) => ({
+		templates: c_(r, e).map((e) => ({
 			id: e.id,
 			name: e.name,
 			description: e.description,
@@ -10815,117 +10867,117 @@ async function s_(e) {
 }
 //#endregion
 //#region src/mcp/server.ts
-var c_ = "hype-stack";
-function l_() {
+var u_ = "hype-stack";
+function d_() {
 	let e = new ue({
-		name: c_,
+		name: u_,
 		version: pe
 	}, {
 		capabilities: { tools: {} },
-		instructions: u_
+		instructions: f_
 	});
 	return e.registerTool("search_catalog", {
 		title: "Search the Hype Stack catalog",
 		description: "Find feature packs and project templates by keyword, category, or price tier. Read-only. Start here when the user asks what is available.",
-		inputSchema: r_,
+		inputSchema: a_,
 		annotations: {
 			readOnlyHint: !0,
 			openWorldHint: !0
 		}
-	}, (e) => Ag(() => s_(e))), e.registerTool("plan_install", {
+	}, (e) => Mg(() => l_(e))), e.registerTool("plan_install", {
 		title: "Plan a pack install",
 		description: "Work out what installing a set of packs would do without writing anything: dependency order, packs already present, and which ones the current license does not cover. Call this before add_packs.",
-		inputSchema: t_,
+		inputSchema: r_,
 		annotations: {
 			readOnlyHint: !0,
 			openWorldHint: !0
 		}
-	}, (e) => Ag(() => n_(e))), e.registerTool("create_application", {
+	}, (e) => Mg(() => i_(e))), e.registerTool("create_application", {
 		title: "Create a Hype Stack application",
 		description: "Scaffold a new application into a folder. Runs the clone and dependency install; Docker and database migrations are returned as follow-up commands for the user to run.",
-		inputSchema: Ug,
+		inputSchema: Gg,
 		annotations: {
 			readOnlyHint: !1,
 			destructiveHint: !1,
 			openWorldHint: !0
 		}
-	}, (e) => Ag(() => Wg(e))), e.registerTool("add_packs", {
+	}, (e) => Mg(() => Kg(e))), e.registerTool("add_packs", {
 		title: "Add feature packs",
 		description: "Install packs into an existing project. Requires an explicit onConflict policy because there is no prompt to fall back on.",
-		inputSchema: Fg,
+		inputSchema: Lg,
 		annotations: {
 			readOnlyHint: !1,
 			destructiveHint: !0,
 			openWorldHint: !0
 		}
-	}, (e) => Ag(() => Ig(e))), e.registerTool("apply_template", {
+	}, (e) => Mg(() => Rg(e))), e.registerTool("apply_template", {
 		title: "Apply a project template",
 		description: "Install a template: its starter, layout, fixed packs, and frontend overrides. Pass variants to swap a slot away from the template default.",
-		inputSchema: Rg,
+		inputSchema: Bg,
 		annotations: {
 			readOnlyHint: !1,
 			destructiveHint: !0,
 			openWorldHint: !0
 		}
-	}, (e) => Ag(() => zg(e))), e.registerTool("inspect_stack", {
+	}, (e) => Mg(() => Vg(e))), e.registerTool("inspect_stack", {
 		title: "Inspect the project stack",
 		description: "Read stack.json and the detected workspace layout: installed packs, app paths, and whether this is a Hype Stack project at all.",
-		inputSchema: $g,
+		inputSchema: t_,
 		annotations: {
 			readOnlyHint: !0,
 			openWorldHint: !1
 		}
-	}, (e) => Ag(() => e_(e))), e.registerTool("env_status", {
+	}, (e) => Mg(() => n_(e))), e.registerTool("env_status", {
 		title: "Check environment variables",
 		description: "Report which env vars the installed packs still need. Read-only; filling them in belongs in the user's own terminal via `hype-stack onboard`.",
-		inputSchema: Zg,
+		inputSchema: $g,
 		annotations: {
 			readOnlyHint: !0,
 			openWorldHint: !1
 		}
-	}, (e) => Ag(() => Qg(e))), e.registerTool("auth_status", {
+	}, (e) => Mg(() => e_(e))), e.registerTool("auth_status", {
 		title: "Check Hype Stack authentication",
 		description: "Who this server is authenticated as, and how to fix it when the answer is nobody. Call this whenever another tool fails with auth_required.",
-		inputSchema: Vg,
+		inputSchema: Ug,
 		annotations: {
 			readOnlyHint: !0,
 			openWorldHint: !0
 		}
-	}, () => Ag(() => Hg())), e;
+	}, () => Mg(() => Wg())), e;
 }
-var u_ = "Tools for building with Hype Stack, a full-stack template you install feature packs into.\n\nThis server cannot prompt. When a tool returns ok: false, read the \"reason\" field and tell the user what to do:\n- auth_required: they need to run 'npx @hype-stack/cli login' in their own terminal, or set HYPE_STACK_TOKEN in this server's env block.\n- not_owned: the pack is paid and their organization does not have a license. The result carries a purchase URL.\n- not_a_project: run create_application first, or point the tool at the right directory with cwd.\n- conflicts: files already exist. Retry with onConflict set once the user has decided.\n\nInstalls never start Docker or touch a database. Anything the user has to run themselves comes back in \"followUp\".";
-async function d_() {
+var f_ = "Tools for building with Hype Stack, a full-stack template you install feature packs into.\n\nThis server cannot prompt. When a tool returns ok: false, read the \"reason\" field and tell the user what to do:\n- auth_required: they need to run 'npx @hype-stack/cli login' in their own terminal, or set HYPE_STACK_TOKEN in this server's env block.\n- not_owned: the pack is paid and their organization does not have a license. The result carries a purchase URL.\n- not_a_project: run create_application first, or point the tool at the right directory with cwd.\n- conflicts: files already exist. Retry with onConflict set once the user has decided.\n\nInstalls never start Docker or touch a database. Anything the user has to run themselves comes back in \"followUp\".";
+async function p_() {
 	tt("mcp");
-	let e = kg();
-	await l_().connect(new de(process.stdin, e));
+	let e = jg();
+	await d_().connect(new de(process.stdin, e));
 }
 //#endregion
 //#region src/cli.ts
-function f_(e) {
+function m_(e) {
 	if (!e) return;
 	let t = e.split(",").map((e) => e.trim()).filter((e) => e.length > 0);
 	return t.length > 0 ? t : void 0;
 }
-function p_(e, t) {
+function h_(e, t) {
 	let n = e.split(",").map((e) => e.trim()).filter((e) => e.length > 0);
 	return [...t ?? [], ...n];
 }
-function m_(e) {
+function g_(e) {
 	return e === "light" || e === "dark" ? e : void 0;
 }
-function h_(e) {
+function __(e) {
 	return e.option("-t, --theme <theme>", `Frontend color theme (${i.join(", ")})`).option("--admin-theme <theme>", "Admin app color theme (defaults to --theme)").option("--radius <value>", `Frontend corner radius, a CSS length (e.g. ${t.map((e) => e.value).join(", ")})`).option("--admin-radius <value>", "Admin app corner radius (defaults to --radius)").option("--mode <mode>", "Color mode the app boots in (light, dark)");
 }
-function g_(e) {
+function v_(e) {
 	return {
 		theme: e.theme,
 		adminTheme: e.adminTheme,
 		radius: e.radius,
 		adminRadius: e.adminRadius,
-		mode: m_(e.mode)
+		mode: g_(e.mode)
 	};
 }
-function __(e) {
+function y_(e) {
 	if (!e) return;
 	let t = {};
 	for (let n of e.split(",")) {
@@ -10934,12 +10986,12 @@ function __(e) {
 	}
 	return Object.keys(t).length > 0 ? t : void 0;
 }
-function v_(e) {
+function b_(e) {
 	if (!e) return;
 	let t = e.split(",").map((e) => e.trim()).filter((e) => e.length > 0);
 	return t.length > 0 ? t : void 0;
 }
-function y_(e) {
+function x_(e) {
 	let t = {};
 	for (let n of [...zd, ...Bd]) {
 		let r = e[n];
@@ -10947,10 +10999,10 @@ function y_(e) {
 	}
 	return t;
 }
-function b_() {
+function S_() {
 	let e = new s();
-	e.name("hype-stack").description("Build with Hype Stack -- templates, components, modules, and more").version(pe, "-v, --version"), h_(e.command("create").description("Create a new Hype Stack project").option("-n, --name <name>", "Project name").option("-d, --directory <path>", "Target directory").option("-e, --editor <editors>", `AI editors to ship rules for, comma-separated or repeated (${Ee.join(", ")})`, p_)).option("--no-install", "Skip dependency installation").option("--no-setup", "Skip Docker services and database migrations after create").option("-y, --yes", "Skip confirmation prompts (requires --name)").action(async (e) => {
-		let t = g_(e);
+	e.name("hype-stack").description("Build with Hype Stack -- templates, components, modules, and more").version(pe, "-v, --version"), __(e.command("create").description("Create a new Hype Stack project").option("-n, --name <name>", "Project name").option("-d, --directory <path>", "Target directory").option("-e, --editor <editors>", `AI editors to ship rules for, comma-separated or repeated (${Ee.join(", ")})`, h_)).option("--no-install", "Skip dependency installation").option("--no-setup", "Skip Docker services and database migrations after create").option("-y, --yes", "Skip confirmation prompts (requires --name)").action(async (e) => {
+		let t = v_(e);
 		await sd({
 			name: e.name,
 			directory: e.directory,
@@ -10967,34 +11019,34 @@ function b_() {
 	}), e.command("init").description("Initialize stack.json in the current project").action(async () => {
 		await cd({});
 	}), e.command("onboard").description("Set up env vars and get the start command").option("-y, --yes", "Skip prompts, accept defaults").option("--cwd <path>", "Working directory").action(async (e) => {
-		await ug({
+		await fg({
 			cwd: e.cwd,
 			yes: e.yes
 		});
-	}), h_(e.command("compose").description("Choose feature packs to add to your project").option("--packs <list>", "Comma-separated pack names (non-interactive). Append @frontend or @admin to a layout pack to target that app shell, e.g. layout-basic@frontend,layout-native-app-shell@admin")).option("--force", "Overwrite existing files").option("-y, --yes", "Skip confirmation prompts").option("--cwd <path>", "Working directory").action(async (e) => {
+	}), __(e.command("compose").description("Choose feature packs to add to your project").option("--packs <list>", "Comma-separated pack names (non-interactive). Append @frontend or @admin to a layout pack to target that app shell, e.g. layout-basic@frontend,layout-native-app-shell@admin")).option("--force", "Overwrite existing files").option("-y, --yes", "Skip confirmation prompts").option("--cwd <path>", "Working directory").action(async (e) => {
 		await ud({
-			packs: f_(e.packs),
+			packs: m_(e.packs),
 			force: e.force,
 			yes: e.yes,
 			cwd: e.cwd,
-			...g_(e)
+			...v_(e)
 		});
-	}), h_(e.command("template").description("Install a template by id, with starter/layout variant swaps and extra packs on top").argument("[id]", "Template id (omit to pick interactively)").option("--variants <map>", "Preselect slot variants, e.g. starter-saas=starter-saas-better-auth,layout=layout-basic").option("--packs <list>", "Extra packs to add on top of the template (comma-separated)")).option("--force", "Overwrite existing files").option("-y, --yes", "Skip confirmation prompts (requires <id>)").option("--cwd <path>", "Working directory").action(async (e, t) => {
-		await wg({
+	}), __(e.command("template").description("Install a template by id, with starter/layout variant swaps and extra packs on top").argument("[id]", "Template id (omit to pick interactively)").option("--variants <map>", "Preselect slot variants, e.g. starter-saas=starter-saas-better-auth,layout=layout-basic").option("--packs <list>", "Extra packs to add on top of the template (comma-separated)")).option("--force", "Overwrite existing files").option("-y, --yes", "Skip confirmation prompts (requires <id>)").option("--cwd <path>", "Working directory").action(async (e, t) => {
+		await Eg({
 			templateId: e,
-			variants: __(t.variants),
-			packs: f_(t.packs),
+			variants: y_(t.variants),
+			packs: m_(t.packs),
 			force: t.force,
 			yes: t.yes,
 			cwd: t.cwd,
-			...g_(t)
+			...v_(t)
 		});
 	}), e.command("deploy").description("Deploy the frontend, admin, and backend, and provision Postgres, Valkey, and a bucket").option("-p, --provider <provider>", `Provider for everything not assigned separately (${Vd.join(", ")})`).option("--backend <provider>", "Provider hosting the backend API").option("--frontend <provider>", "Provider hosting the frontend").option("--admin <provider>", "Provider hosting the admin app").option("--postgres <provider>", "Provider for the Postgres database").option("--valkey <provider>", "Provider for the Valkey cache").option("--bucket <provider>", "Provider for object storage").option("--only <targets>", `Deploy just these apps, comma-separated (${zd.join(", ")})`).option("-e, --environment <name>", "Deployment environment name (default: production)").option("--fly-org <org>", "Fly organization slug, skips the picker when you belong to several").option("--railway-workspace <workspace>", "Railway workspace, skips the picker when you belong to several").option("--dry-run", "Print every command that would run without creating anything").option("--skip-provision", "Assume Postgres, Valkey, and the bucket already exist").option("--skip-migrations", "Do not run database migrations after the backend deploys").option("-y, --yes", "Skip confirmation prompts").option("--cwd <path>", "Project directory").action(async (e) => {
-		await Hh({
+		await Wh({
 			cwd: e.cwd,
 			provider: e.provider,
-			assign: y_(e),
-			only: v_(e.only),
+			assign: x_(e),
+			only: b_(e.only),
 			environment: e.environment,
 			flyOrg: e.flyOrg,
 			railwayWorkspace: e.railwayWorkspace,
@@ -11006,9 +11058,9 @@ function b_() {
 	});
 	let t = e.command("mcp").description("Run the Model Context Protocol server for AI editors");
 	return t.action(async () => {
-		await d_();
+		await p_();
 	}), t.command("install").description("Register the MCP server in your editor's config").option("-e, --editor <editor>", `Editor (${hu.join(", ")})`, "cursor").option("-s, --scope <scope>", "global or project (defaults to global where supported)").option("--cwd <path>", "Project directory, for project scope").option("--token <token>", "API key to store in the config (optional, defaults to your saved login)").option("--print", "Print the JSON block instead of writing a file").action(async (e) => {
-		await tg({
+		await rg({
 			editor: e.editor,
 			scope: e.scope,
 			cwd: e.cwd,
@@ -11016,12 +11068,12 @@ function b_() {
 			print: e.print
 		});
 	}), e.command("login").description("Log in via your browser to install packs your organization owns").action(async () => {
-		await $h();
+		await tg();
 	}), e.command("logout").description("Log out and remove the saved CLI token").action(async () => {
-		await eg();
+		await ng();
 	}), e.command("auth").description("Alias for `login`").action(async () => {
-		await $h();
+		await tg();
 	}), e;
 }
 //#endregion
-export { Hh as a, cd as c, pe as d, $h as i, sd as l, kg as n, ud as o, eg as r, ld as s, b_ as t, tt as u };
+export { Wh as a, cd as c, pe as d, tg as i, sd as l, jg as n, ud as o, ng as r, ld as s, S_ as t, tt as u };