@semiont/cli 0.4.0 → 0.4.2

package/dist/cli.mjs

@@ -6969,11 +6969,11 @@ var init_backend_check = __esm({
       let logs;
       if (fs10.existsSync(appLogPath)) {
         try {
-          const { execFileSync: execFileSync42 } = __require("child_process");
-          const recentLogs = execFileSync42("tail", ["-10", appLogPath], { encoding: "utf-8" }).split("\n").filter((line) => line.trim());
+          const { execFileSync: execFileSync43 } = __require("child_process");
+          const recentLogs = execFileSync43("tail", ["-10", appLogPath], { encoding: "utf-8" }).split("\n").filter((line) => line.trim());
           let errorLogs = [];
           if (fs10.existsSync(errorLogPath)) {
-            errorLogs = execFileSync42("tail", ["-5", errorLogPath], { encoding: "utf-8" }).split("\n").filter((line) => line.trim());
+            errorLogs = execFileSync43("tail", ["-5", errorLogPath], { encoding: "utf-8" }).split("\n").filter((line) => line.trim());
           }
           logs = {
             recent: recentLogs,
@@ -7064,7 +7064,7 @@ var init_frontend_check = __esm({
       const config = service.config;
       const projectRoot = service.projectRoot;
       const npmDir = resolveFrontendNpmPackage(projectRoot);
-      const serverScript = npmDir ? path12.join(npmDir, ".next", "standalone", "apps", "frontend", "server.js") : null;
+      const serverScript = npmDir ? path12.join(npmDir, "standalone", "apps", "frontend", "server.js") : null;
       const project = new SemiontProject5(projectRoot);
       const pidFile = project.frontendPidFile;
       const appLogPath = project.frontendAppLogFile;
@@ -7169,11 +7169,11 @@ var init_frontend_check = __esm({
       let logs;
       if (fs11.existsSync(appLogPath)) {
         try {
-          const { execFileSync: execFileSync42 } = __require("child_process");
-          const recentLogs = execFileSync42("tail", ["-10", appLogPath], { encoding: "utf-8" }).split("\n").filter((line) => line.trim());
+          const { execFileSync: execFileSync43 } = __require("child_process");
+          const recentLogs = execFileSync43("tail", ["-10", appLogPath], { encoding: "utf-8" }).split("\n").filter((line) => line.trim());
           let errorLogs = [];
           if (fs11.existsSync(errorLogPath)) {
-            errorLogs = execFileSync42("tail", ["-5", errorLogPath], { encoding: "utf-8" }).split("\n").filter((line) => line.trim());
+            errorLogs = execFileSync43("tail", ["-5", errorLogPath], { encoding: "utf-8" }).split("\n").filter((line) => line.trim());
           }
           logs = {
             recent: recentLogs,
@@ -7692,8 +7692,8 @@ async function startJanusGraph(context) {
   for (let i = 0; i < maxAttempts; i++) {
     await new Promise((resolve12) => setTimeout(resolve12, 2e3));
     try {
-      const { execFileSync: execFileSync42 } = await import("child_process");
-      execFileSync42(gremlinShellScript, ["-e", "g.V().count()"], {
+      const { execFileSync: execFileSync43 } = await import("child_process");
+      execFileSync43(gremlinShellScript, ["-e", "g.V().count()"], {
         stdio: "ignore",
         timeout: 5e3
       });
@@ -7791,7 +7791,7 @@ var init_graph_start = __esm({
 });
 
 // src/platforms/posix/handlers/backend-start.ts
-import { spawn as spawn4 } from "child_process";
+import { spawn as spawn4, execFileSync as execFileSync8 } from "child_process";
 import * as fs16 from "fs";
 import * as path16 from "path";
 import { SemiontProject as SemiontProject7 } from "@semiont/core/node";
@@ -7906,6 +7906,29 @@ var init_backend_start = __esm({
 `;
       appLogStream.write(startupMessage);
       errorLogStream.write(startupMessage);
+      const packageDir = path16.dirname(path16.dirname(entryPoint));
+      const prismaSchemaPath = path16.join(packageDir, "prisma", "schema.prisma");
+      if (fs16.existsSync(prismaSchemaPath)) {
+        if (!service.quiet) {
+          printInfo("Running database migrations...");
+        }
+        try {
+          execFileSync8("npx", ["prisma", "migrate", "deploy", `--schema=${prismaSchemaPath}`], {
+            cwd: packageDir,
+            env: { ...process.env, DATABASE_URL: databaseUrl },
+            stdio: service.verbose ? "inherit" : "pipe"
+          });
+          if (!service.quiet) {
+            printInfo("Database migrations completed");
+          }
+        } catch (error) {
+          return {
+            success: false,
+            error: `Failed to run database migrations: ${error}`,
+            metadata: { serviceType: "backend" }
+          };
+        }
+      }
       if (!service.quiet) {
         printInfo(`Starting backend service ${service.name}...`);
         printInfo(`Entry point: ${entryPoint}`);
@@ -8060,7 +8083,7 @@ var init_frontend_start = __esm({
           metadata: { serviceType: "frontend" }
         };
       }
-      const serverScript = path17.join(npmDir, ".next", "standalone", "apps", "frontend", "server.js");
+      const serverScript = path17.join(npmDir, "standalone", "apps", "frontend", "server.js");
       const project = new SemiontProject8(projectRoot);
       const pidFile = project.frontendPidFile;
       const logsDir = project.frontendLogsDir;
@@ -8251,7 +8274,7 @@ var init_frontend_start = __esm({
       }
       if (npmDir) {
         checks.push(checkFileExists(
-          path17.join(npmDir, ".next", "standalone", "apps", "frontend", "server.js"),
+          path17.join(npmDir, "standalone", "apps", "frontend", "server.js"),
           "frontend server.js"
         ));
       } else {
@@ -8583,7 +8606,7 @@ var init_mcp_provision = __esm({
 
 // src/platforms/posix/handlers/graph-provision.ts
 import * as fs20 from "fs/promises";
-import { execFileSync as execFileSync8 } from "child_process";
+import { execFileSync as execFileSync9 } from "child_process";
 async function fileExists2(path46) {
   try {
     await fs20.access(path46);
@@ -8627,7 +8650,7 @@ var init_graph_provision = __esm({
           dataStorageDir
         } = paths;
         try {
-          execFileSync8("java", ["-version"], { stdio: "ignore" });
+          execFileSync9("java", ["-version"], { stdio: "ignore" });
         } catch {
           return {
             success: false,
@@ -8640,9 +8663,9 @@ var init_graph_provision = __esm({
         const downloadUrl = `https://github.com/JanusGraph/janusgraph/releases/download/v${janusgraphVersion}/janusgraph-${janusgraphVersion}.zip`;
         if (!await fileExists2(janusgraphDir)) {
           console.log(`Downloading JanusGraph ${janusgraphVersion}...`);
-          execFileSync8("curl", ["-L", "-o", zipPath, downloadUrl], { stdio: "inherit" });
+          execFileSync9("curl", ["-L", "-o", zipPath, downloadUrl], { stdio: "inherit" });
           console.log("Extracting JanusGraph...");
-          execFileSync8("unzip", ["-q", zipPath, "-d", dataDir], { stdio: "inherit" });
+          execFileSync9("unzip", ["-q", zipPath, "-d", dataDir], { stdio: "inherit" });
           await fs20.unlink(zipPath);
         }
         let graphProperties = `
@@ -8771,7 +8794,7 @@ ssl: {
 import * as fs21 from "fs";
 import * as path18 from "path";
 import * as crypto from "crypto";
-import { execFileSync as execFileSync9 } from "child_process";
+import { execFileSync as execFileSync10 } from "child_process";
 import { SemiontProject as SemiontProject9 } from "@semiont/core/node";
 var provisionBackendService, preflightBackendProvision, backendProvisionDescriptor;
 var init_backend_provision = __esm({
@@ -8788,7 +8811,7 @@ var init_backend_provision = __esm({
           printInfo("Installing @semiont/backend...");
         }
         try {
-          execFileSync9("npm", ["install", "@semiont/backend"], {
+          execFileSync10("npm", ["install", "@semiont/backend", "--prefix", projectRoot], {
             cwd: projectRoot,
             stdio: service.verbose ? "inherit" : "pipe"
           });
@@ -8824,16 +8847,13 @@ var init_backend_provision = __esm({
       }
       const envConfig = service.environmentConfig;
       const dbConfig = envConfig.services.database;
-      const dbUser = dbConfig.user;
-      const dbPassword = dbConfig.password;
-      const dbName = dbConfig.name;
-      const dbPort = dbConfig.port;
-      const dbHost = dbConfig.host || "localhost";
-      const databaseUrl = `postgresql://${dbUser}:${dbPassword}@${dbHost}:${dbPort}/${dbName}`;
       if (!service.quiet) {
+        const dbName = dbConfig.name;
+        const dbHost = dbConfig.host || "localhost";
+        const dbPort = dbConfig.port;
         printInfo(`Using database configuration for environment '${service.environment}':`);
         printInfo(`  Database: ${dbName} on ${dbHost}:${dbPort}`);
-        printInfo(`  User: ${dbUser}`);
+        printInfo(`  User: ${dbConfig.user}`);
       }
       let jwtSecret = options.rotateSecret ? void 0 : readSecret("JWT_SECRET");
       if (!jwtSecret) {
@@ -8853,8 +8873,8 @@ var init_backend_provision = __esm({
           printInfo("Generating Prisma client...");
         }
         try {
-          execFileSync9("npx", ["prisma", "generate", `--schema=${prismaSchemaPath}`], {
-            cwd: project.stateDir,
+          execFileSync10("npx", ["prisma", "generate", `--schema=${prismaSchemaPath}`], {
+            cwd: packageDir,
             stdio: service.verbose ? "inherit" : "pipe"
           });
           if (!service.quiet) {
@@ -8864,24 +8884,6 @@ var init_backend_provision = __esm({
           printWarning(`Failed to generate Prisma client: ${error}`);
         }
       }
-      if (options.migrate !== false && fs21.existsSync(prismaSchemaPath)) {
-        if (!service.quiet) {
-          printInfo("Running database migrations...");
-        }
-        try {
-          execFileSync9("npx", ["prisma", "migrate", "deploy", `--schema=${prismaSchemaPath}`], {
-            cwd: project.stateDir,
-            env: { ...process.env, DATABASE_URL: databaseUrl },
-            stdio: service.verbose ? "inherit" : "pipe"
-          });
-          if (!service.quiet) {
-            printSuccess("Database migrations completed");
-          }
-        } catch (error) {
-          printWarning(`Failed to run migrations: ${error}`);
-          printInfo("You may need to run migrations manually: npx prisma migrate deploy");
-        }
-      }
       const metadata = {
         serviceType: "backend",
         entryPoint,
@@ -8944,7 +8946,7 @@ var init_backend_provision = __esm({
 import * as fs22 from "fs";
 import * as path19 from "path";
 import * as crypto2 from "crypto";
-import { execFileSync as execFileSync10 } from "child_process";
+import { execFileSync as execFileSync11 } from "child_process";
 import { SemiontProject as SemiontProject10 } from "@semiont/core/node";
 var provisionFrontendService, preflightFrontendProvision, frontendProvisionDescriptor;
 var init_frontend_provision = __esm({
@@ -8961,7 +8963,7 @@ var init_frontend_provision = __esm({
           printInfo("Installing @semiont/frontend...");
         }
         try {
-          execFileSync10("npm", ["install", "@semiont/frontend"], {
+          execFileSync11("npm", ["install", "@semiont/frontend", "--prefix", projectRoot], {
             cwd: projectRoot,
             stdio: service.verbose ? "inherit" : "pipe"
           });
@@ -8984,7 +8986,7 @@ var init_frontend_provision = __esm({
           metadata: { serviceType: "frontend" }
         };
       }
-      const serverScript = path19.join(npmDir, ".next", "standalone", "apps", "frontend", "server.js");
+      const serverScript = path19.join(npmDir, "standalone", "apps", "frontend", "server.js");
       const project = new SemiontProject10(projectRoot);
       if (!service.quiet) {
         printInfo(`Provisioning frontend service ${service.name}...`);
@@ -9349,7 +9351,7 @@ var init_graph_stop = __esm({
 });
 
 // src/platforms/posix/utils/process-manager.ts
-import { execFileSync as execFileSync11 } from "child_process";
+import { execFileSync as execFileSync12 } from "child_process";
 async function killProcessGroupAndRelated(pid, serviceType, verbose = false) {
   let killed = false;
   try {
@@ -9389,7 +9391,7 @@ async function killProcessGroupAndRelated(pid, serviceType, verbose = false) {
     try {
       for (const pattern of cleanupPatterns.patterns) {
         try {
-          execFileSync11("pkill", ["-f", pattern], { stdio: "ignore" });
+          execFileSync12("pkill", ["-f", pattern], { stdio: "ignore" });
         } catch {
         }
       }
@@ -10197,12 +10199,12 @@ var init_inference_stop = __esm({
 
 // src/platforms/posix/handlers/inference-provision.ts
 import * as fs30 from "fs";
-import { execFileSync as execFileSync12 } from "child_process";
+import { execFileSync as execFileSync13 } from "child_process";
 function detectGpu() {
   const platform = process.platform;
   if (platform === "darwin") {
     try {
-      const brand = execFileSync12("sysctl", ["-n", "machdep.cpu.brand_string"], {
+      const brand = execFileSync13("sysctl", ["-n", "machdep.cpu.brand_string"], {
         encoding: "utf-8"
       }).trim();
       if (brand.includes("Apple")) {
@@ -10214,7 +10216,7 @@ function detectGpu() {
     }
   }
   try {
-    const gpuName = execFileSync12("nvidia-smi", ["--query-gpu=name", "--format=csv,noheader"], {
+    const gpuName = execFileSync13("nvidia-smi", ["--query-gpu=name", "--format=csv,noheader"], {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "ignore"]
     }).trim();
@@ -10224,7 +10226,7 @@ function detectGpu() {
   } catch {
   }
   try {
-    const output = execFileSync12("rocm-smi", ["--showproductname"], {
+    const output = execFileSync13("rocm-smi", ["--showproductname"], {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "ignore"]
     }).trim();
@@ -10260,7 +10262,7 @@ var init_inference_provision = __esm({
           printInfo(`Pulling model ${model}...`);
         }
         try {
-          execFileSync12("ollama", ["pull", model], {
+          execFileSync13("ollama", ["pull", model], {
             stdio: service.quiet ? "ignore" : "inherit"
           });
           pulledModels.push(model);
@@ -10377,7 +10379,7 @@ var init_handlers = __esm({
 });
 
 // src/platforms/posix/platform.ts
-import { execFileSync as execFileSync13 } from "child_process";
+import { execFileSync as execFileSync14 } from "child_process";
 import * as fs31 from "fs";
 import * as path25 from "path";
 var PosixPlatform;
@@ -10467,7 +10469,7 @@ var init_platform2 = __esm({
         try {
           if (process.platform === "darwin") {
             try {
-              const output = execFileSync13(
+              const output = execFileSync14(
                 "log",
                 ["show", "--process", String(pid), "--last", `${tail}m`, "--style", "json"],
                 { encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"] }
@@ -10489,7 +10491,7 @@ var init_platform2 = __esm({
             }
           } else {
             try {
-              const output = execFileSync13(
+              const output = execFileSync14(
                 "journalctl",
                 [`_PID=${pid}`, "-n", String(tail), "--no-pager", "--output=json"],
                 { encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"] }
@@ -10596,13 +10598,13 @@ var init_platform2 = __esm({
       tailFile(filePath, lines) {
         try {
           if (process.platform === "win32") {
-            return execFileSync13(
+            return execFileSync14(
               "powershell",
               ["-Command", `Get-Content '${filePath}' -Tail ${lines}`],
               { encoding: "utf-8" }
             );
           } else {
-            return execFileSync13(
+            return execFileSync14(
               "tail",
               ["-n", String(lines), filePath],
               { encoding: "utf-8" }
@@ -10665,7 +10667,7 @@ var init_platform2 = __esm({
 });
 
 // src/platforms/container/handlers/web-check.ts
-import { execFileSync as execFileSync14 } from "child_process";
+import { execFileSync as execFileSync15 } from "child_process";
 import { baseUrl as baseUrl2 } from "@semiont/core";
 import { SemiontApiClient as SemiontApiClient2 } from "@semiont/api-client";
 var checkWebContainer, preflightWebCheck, webCheckDescriptor;
@@ -10677,7 +10679,7 @@ var init_web_check = __esm({
       const { platform, service, runtime, containerName } = context;
       const config = service.config;
       try {
-        const containerStatus = execFileSync14(
+        const containerStatus = execFileSync15(
           runtime,
           ["inspect", containerName, "--format", "{{.State.Status}}"],
           { encoding: "utf-8" }
@@ -10693,14 +10695,14 @@ var init_web_check = __esm({
             metadata: { containerStatus }
           };
         }
-        const containerId = execFileSync14(
+        const containerId = execFileSync15(
           runtime,
           ["inspect", containerName, "--format", "{{.Id}}"],
           { encoding: "utf-8" }
         ).trim().substring(0, 12);
         let dockerHealthStatus;
         try {
-          dockerHealthStatus = execFileSync14(
+          dockerHealthStatus = execFileSync15(
             runtime,
             ["inspect", containerName, "--format", "{{.State.Health.Status}}"],
             { encoding: "utf-8" }
@@ -10841,7 +10843,7 @@ var init_web_check = __esm({
 });
 
 // src/platforms/container/handlers/database-check.ts
-import { execFileSync as execFileSync15 } from "child_process";
+import { execFileSync as execFileSync16 } from "child_process";
 var checkDatabaseContainer, preflightDatabaseCheck2, databaseCheckDescriptor2;
 var init_database_check2 = __esm({
   "src/platforms/container/handlers/database-check.ts"() {
@@ -10851,7 +10853,7 @@ var init_database_check2 = __esm({
       const { platform, service, runtime, containerName } = context;
       const config = service.config;
       try {
-        const containerStatus = execFileSync15(
+        const containerStatus = execFileSync16(
           runtime,
           ["inspect", containerName, "--format", "{{.State.Status}}"],
           { encoding: "utf-8" }
@@ -10867,7 +10869,7 @@ var init_database_check2 = __esm({
             metadata: { containerStatus }
           };
         }
-        const containerId = execFileSync15(
+        const containerId = execFileSync16(
           runtime,
           ["inspect", containerName, "--format", "{{.Id}}"],
           { encoding: "utf-8" }
@@ -10886,13 +10888,13 @@ var init_database_check2 = __esm({
         const port = config.port;
         try {
           try {
-            execFileSync15(
+            execFileSync16(
               runtime,
               ["exec", containerName, "sh", "-c", `netstat -ln | grep :${port}`],
               { encoding: "utf-8" }
             );
           } catch {
-            execFileSync15(
+            execFileSync16(
               runtime,
               ["exec", containerName, "sh", "-c", `nc -z localhost ${port}`],
               { encoding: "utf-8" }
@@ -10963,7 +10965,7 @@ var init_database_check2 = __esm({
 });
 
 // src/platforms/container/handlers/graph-check.ts
-import { execFileSync as execFileSync16 } from "child_process";
+import { execFileSync as execFileSync17 } from "child_process";
 function getGraphEndpoint2(graphType, port) {
   const host = "localhost";
   switch (graphType) {
@@ -10988,7 +10990,7 @@ var init_graph_check2 = __esm({
       const config = service.config;
       const graphType = config.type;
       try {
-        const containerStatus = execFileSync16(
+        const containerStatus = execFileSync17(
           runtime,
           ["inspect", containerName, "--format", "{{.State.Status}}"],
           { encoding: "utf-8" }
@@ -11008,12 +11010,12 @@ var init_graph_check2 = __esm({
             }
           };
         }
-        const containerId = execFileSync16(
+        const containerId = execFileSync17(
           runtime,
           ["inspect", containerName, "--format", "{{.Id}}"],
           { encoding: "utf-8" }
         ).trim();
-        const portsOutput = execFileSync16(
+        const portsOutput = execFileSync17(
           runtime,
           ["port", containerName],
           { encoding: "utf-8" }
@@ -11039,7 +11041,7 @@ var init_graph_check2 = __esm({
             case "janusgraph":
             case "neptune":
               try {
-                execFileSync16(
+                execFileSync17(
                   runtime,
                   ["exec", containerName, "sh", "-c", `echo 'test' | nc -w 1 localhost ${port}`],
                   { encoding: "utf-8", timeout: 5e3, stdio: "pipe" }
@@ -11047,12 +11049,12 @@ var init_graph_check2 = __esm({
                 isHealthy = true;
                 if (graphType === "janusgraph") {
                   try {
-                    const cassandraRunning = execFileSync16(
+                    const cassandraRunning = execFileSync17(
                       runtime,
                       ["ps", "--filter", "name=semiont-cassandra", "--format", "{{.Names}}"],
                       { encoding: "utf-8", stdio: "pipe" }
                     ).trim().includes("semiont-cassandra");
-                    const elasticsearchRunning = execFileSync16(
+                    const elasticsearchRunning = execFileSync17(
                       runtime,
                       ["ps", "--filter", "name=semiont-elasticsearch", "--format", "{{.Names}}"],
                       { encoding: "utf-8", stdio: "pipe" }
@@ -11075,7 +11077,7 @@ var init_graph_check2 = __esm({
                   }
                 }
               } catch {
-                const processes = execFileSync16(
+                const processes = execFileSync17(
                   runtime,
                   ["exec", containerName, "ps", "aux"],
                   { encoding: "utf-8", stdio: "pipe" }
@@ -11087,11 +11089,11 @@ var init_graph_check2 = __esm({
               }
               break;
             case "neo4j":
-              execFileSync16("nc", ["-z", "localhost", String(port)], { timeout: 5e3 });
+              execFileSync17("nc", ["-z", "localhost", String(port)], { timeout: 5e3 });
               isHealthy = true;
               break;
             case "arangodb":
-              const httpCode = execFileSync16(
+              const httpCode = execFileSync17(
                 "curl",
                 ["-s", "-o", "/dev/null", "-w", "%{http_code}", `http://localhost:${port}/_api/version`],
                 { encoding: "utf-8", timeout: 5e3 }
@@ -11099,7 +11101,7 @@ var init_graph_check2 = __esm({
               isHealthy = httpCode === "200";
               break;
             default:
-              execFileSync16("nc", ["-z", "localhost", String(port)], { timeout: 5e3 });
+              execFileSync17("nc", ["-z", "localhost", String(port)], { timeout: 5e3 });
               isHealthy = true;
           }
         } catch (healthCheckError) {
@@ -11108,7 +11110,7 @@ var init_graph_check2 = __esm({
         }
         let logs;
         try {
-          const logOutput = execFileSync16(
+          const logOutput = execFileSync17(
             runtime,
             ["logs", containerName, "--tail", "20"],
             { encoding: "utf-8", maxBuffer: 1024 * 1024 }
@@ -11122,7 +11124,7 @@ var init_graph_check2 = __esm({
           };
         } catch (logError) {
         }
-        const image = execFileSync16(
+        const image = execFileSync17(
           runtime,
           ["inspect", containerName, "--format", "{{.Config.Image}}"],
           { encoding: "utf-8" }
@@ -11208,13 +11210,13 @@ var init_platform_resources = __esm({
 });
 
 // src/platforms/container/handlers/web-start.ts
-import { execFileSync as execFileSync17 } from "child_process";
+import { execFileSync as execFileSync18 } from "child_process";
 async function waitForContainer(runtime, containerName) {
   const maxAttempts = 30;
   let attempts = 0;
   while (attempts < maxAttempts) {
     try {
-      const status = execFileSync17(
+      const status = execFileSync18(
         runtime,
         ["inspect", containerName, "--format", "{{.State.Status}}"],
         { encoding: "utf-8" }
@@ -11241,12 +11243,12 @@ var init_web_start = __esm({
       const config = service.config;
       const image = service.getImage();
       try {
-        execFileSync17(runtime, ["rm", "-f", containerName], { stdio: "ignore" });
+        execFileSync18(runtime, ["rm", "-f", containerName], { stdio: "ignore" });
       } catch {
       }
       const networkName = `semiont-${service.environment}`;
       try {
-        execFileSync17(runtime, ["network", "create", networkName], { stdio: "ignore" });
+        execFileSync18(runtime, ["network", "create", networkName], { stdio: "ignore" });
       } catch {
       }
       const runArgs = [
@@ -11279,7 +11281,7 @@ var init_web_start = __esm({
         printInfo(`Starting web container: ${containerName}`);
       }
       try {
-        const containerId = execFileSync17(runtime, runArgs, { encoding: "utf-8" }).trim();
+        const containerId = execFileSync18(runtime, runArgs, { encoding: "utf-8" }).trim();
         await waitForContainer(runtime, containerName);
         const endpoint = `http://localhost:${port}`;
         return {
@@ -11330,7 +11332,7 @@ var init_web_start = __esm({
 });
 
 // src/platforms/container/handlers/database-start.ts
-import { execFileSync as execFileSync18 } from "child_process";
+import { execFileSync as execFileSync19 } from "child_process";
 async function waitForDatabase(runtime, containerName, image, quiet, dbUser, verbose) {
   const maxAttempts = 15;
   let attempts = 0;
@@ -11338,7 +11340,7 @@ async function waitForDatabase(runtime, containerName, image, quiet, dbUser, ver
   const skipHealthCheck = process.env.SKIP_DB_HEALTH_CHECK === "true";
   if (skipHealthCheck) {
     try {
-      const status = execFileSync18(
+      const status = execFileSync19(
         runtime,
         ["inspect", containerName, "--format", "{{.State.Status}}"],
         { encoding: "utf-8", timeout: 5e3 }
@@ -11353,7 +11355,7 @@ async function waitForDatabase(runtime, containerName, image, quiet, dbUser, ver
   }
   while (attempts < maxAttempts) {
     try {
-      const status = execFileSync18(
+      const status = execFileSync19(
         runtime,
         ["inspect", containerName, "--format", "{{.State.Status}}"],
         { encoding: "utf-8", timeout: 5e3 }
@@ -11373,7 +11375,7 @@ async function waitForDatabase(runtime, containerName, image, quiet, dbUser, ver
             if (verbose) {
               printInfo(`Checking PostgreSQL readiness with user '${dbUser}'...`);
             }
-            execFileSync18(runtime, ["exec", containerName, "pg_isready", "-U", dbUser, "-t", "1"], {
+            execFileSync19(runtime, ["exec", containerName, "pg_isready", "-U", dbUser, "-t", "1"], {
               stdio: verbose ? "inherit" : "ignore",
               timeout: 5e3
             });
@@ -11389,7 +11391,7 @@ async function waitForDatabase(runtime, containerName, image, quiet, dbUser, ver
           }
         } else if (image.includes("mysql")) {
           try {
-            execFileSync18(runtime, ["exec", containerName, "mysqladmin", "ping", "-h", "localhost"], {
+            execFileSync19(runtime, ["exec", containerName, "mysqladmin", "ping", "-h", "localhost"], {
               stdio: "ignore",
               timeout: 5e3
             });
@@ -11398,7 +11400,7 @@ async function waitForDatabase(runtime, containerName, image, quiet, dbUser, ver
           }
         } else if (image.includes("mongo")) {
           try {
-            execFileSync18(runtime, ["exec", containerName, "mongosh", "--eval", "db.adminCommand('ping')"], {
+            execFileSync19(runtime, ["exec", containerName, "mongosh", "--eval", "db.adminCommand('ping')"], {
               stdio: "ignore",
               timeout: 5e3
             });
@@ -11432,12 +11434,12 @@ var init_database_start2 = __esm({
       const config = service.config;
       const image = service.getImage();
       try {
-        execFileSync18(runtime, ["rm", "-f", containerName], { stdio: "ignore" });
+        execFileSync19(runtime, ["rm", "-f", containerName], { stdio: "ignore" });
       } catch {
       }
       const networkName = `semiont-${service.environment}`;
       try {
-        execFileSync18(runtime, ["network", "create", networkName], { stdio: "ignore" });
+        execFileSync19(runtime, ["network", "create", networkName], { stdio: "ignore" });
       } catch {
       }
       const runArgs = [
@@ -11459,7 +11461,7 @@ var init_database_start2 = __esm({
       }
       const volumeName = `${containerName}-data`;
       try {
-        execFileSync18(runtime, ["volume", "create", volumeName], { stdio: "ignore" });
+        execFileSync19(runtime, ["volume", "create", volumeName], { stdio: "ignore" });
       } catch {
       }
       const mountPath = image.includes("postgres") ? "/var/lib/postgresql/data" : image.includes("mysql") ? "/var/lib/mysql" : image.includes("mongo") ? "/data/db" : "/data";
@@ -11485,7 +11487,7 @@ var init_database_start2 = __esm({
         printInfo(`Run command: ${runtime} ${runArgs.join(" ")}`);
       }
       try {
-        const containerId = execFileSync18(runtime, runArgs, { encoding: "utf-8" }).trim();
+        const containerId = execFileSync19(runtime, runArgs, { encoding: "utf-8" }).trim();
         const dbUser = envVars.POSTGRES_USER || envVars.MYSQL_USER || envVars.MONGO_INITDB_ROOT_USERNAME;
         await waitForDatabase(runtime, containerName, image, service.quiet, dbUser, context.options.verbose);
         const endpoint = `localhost:${port}`;
@@ -11541,7 +11543,7 @@ var init_database_start2 = __esm({
 // src/platforms/container/handlers/graph-start.ts
 import * as fs32 from "fs/promises";
 import * as path26 from "path";
-import { execFileSync as execFileSync19 } from "child_process";
+import { execFileSync as execFileSync20 } from "child_process";
 async function startJanusGraph2(context) {
   const { service, runtime, containerName } = context;
   const composePath = path26.join(service.projectRoot, "docker-compose.janusgraph.yml");
@@ -11553,7 +11555,7 @@ async function startJanusGraph2(context) {
     };
   }
   try {
-    const output = execFileSync19(runtime, ["ps", "--format", "{{.Names}}"], { encoding: "utf-8" });
+    const output = execFileSync20(runtime, ["ps", "--format", "{{.Names}}"], { encoding: "utf-8" });
     if (output.includes(containerName)) {
       if (!service.quiet) {
         printWarning("JanusGraph container is already running");
@@ -11574,7 +11576,7 @@ async function startJanusGraph2(context) {
     if (!service.quiet) {
       printInfo("Starting JanusGraph Docker stack...");
     }
-    execFileSync19("docker-compose", ["-f", composePath, "up", "-d"], {
+    execFileSync20("docker-compose", ["-f", composePath, "up", "-d"], {
       stdio: service.quiet ? "ignore" : "inherit"
     });
     if (!service.quiet) {
@@ -11584,13 +11586,13 @@ async function startJanusGraph2(context) {
     const maxAttempts = 20;
     for (let i = 0; i < maxAttempts; i++) {
       try {
-        const status = execFileSync19(
+        const status = execFileSync20(
           runtime,
           ["inspect", containerName, "--format", "{{.State.Status}}"],
           { encoding: "utf-8", stdio: "pipe" }
         ).trim();
         if (status === "running") {
-          const logs = execFileSync19(
+          const logs = execFileSync20(
             runtime,
             ["logs", "--tail", "20", containerName],
             { encoding: "utf-8", stdio: "pipe" }
@@ -11610,7 +11612,7 @@ async function startJanusGraph2(context) {
     }
     if (!ready) {
       try {
-        const finalStatus = execFileSync19(
+        const finalStatus = execFileSync20(
           runtime,
           ["inspect", containerName, "--format", "{{.State.Status}}"],
           { encoding: "utf-8", stdio: "pipe" }
@@ -11625,14 +11627,14 @@ async function startJanusGraph2(context) {
       }
     }
     if (!ready) {
-      execFileSync19("docker-compose", ["-f", composePath, "down"], { stdio: "ignore" });
+      execFileSync20("docker-compose", ["-f", composePath, "down"], { stdio: "ignore" });
       return {
         success: false,
         error: "JanusGraph failed to start within timeout",
         metadata: { serviceType: "graph", serviceName: "janusgraph" }
       };
     }
-    const runningContainers = execFileSync19(runtime, ["ps", "--format", "{{.Names}}"], { encoding: "utf-8" });
+    const runningContainers = execFileSync20(runtime, ["ps", "--format", "{{.Names}}"], { encoding: "utf-8" });
     const hasCassandra = runningContainers.includes("semiont-cassandra");
     const hasElasticsearch = runningContainers.includes("semiont-elasticsearch");
     if (!service.quiet) {
@@ -11719,7 +11721,7 @@ var init_graph_start2 = __esm({
 });
 
 // src/platforms/container/handlers/database-provision.ts
-import { execFileSync as execFileSync20 } from "child_process";
+import { execFileSync as execFileSync21 } from "child_process";
 import * as fs33 from "fs";
 import * as path27 from "path";
 var provisionDatabaseContainer, preflightDatabaseProvision, databaseProvisionDescriptor;
@@ -11735,12 +11737,12 @@ var init_database_provision = __esm({
       }
       const networkName = `semiont-${service.environment}`;
       try {
-        execFileSync20(runtime, ["network", "create", networkName], { stdio: "ignore" });
+        execFileSync21(runtime, ["network", "create", networkName], { stdio: "ignore" });
       } catch {
       }
       const volumeName = `${containerName}-data`;
       try {
-        execFileSync20(runtime, ["volume", "create", volumeName], { stdio: "ignore" });
+        execFileSync21(runtime, ["volume", "create", volumeName], { stdio: "ignore" });
         if (!service.quiet) {
           printInfo(`Created volume: ${volumeName}`);
         }
@@ -11751,7 +11753,7 @@ var init_database_provision = __esm({
         printInfo(`Pulling database image ${image}...`);
       }
       try {
-        execFileSync20(runtime, ["pull", image], {
+        execFileSync21(runtime, ["pull", image], {
           stdio: service.verbose ? "inherit" : "pipe"
         });
       } catch (error) {
@@ -11768,7 +11770,7 @@ var init_database_provision = __esm({
       const dbUser = envVars.POSTGRES_USER || envVars.MYSQL_USER;
       let containerRunning = false;
       try {
-        const status = execFileSync20(
+        const status = execFileSync21(
           runtime,
           ["inspect", containerName, "--format", "{{.State.Status}}"],
           { encoding: "utf-8", stdio: "pipe" }
@@ -11799,7 +11801,7 @@ var init_database_provision = __esm({
         }
         runArgs.push(image);
         try {
-          execFileSync20(runtime, runArgs, { encoding: "utf-8" });
+          execFileSync21(runtime, runArgs, { encoding: "utf-8" });
           if (!service.quiet) {
             printInfo("Waiting for database to be ready...");
           }
@@ -11808,10 +11810,10 @@ var init_database_provision = __esm({
           while (attempts < maxAttempts) {
             try {
               if (image.includes("postgres")) {
-                execFileSync20(runtime, ["exec", initContainerName, "pg_isready", "-U", dbUser || "postgres"], { stdio: "ignore" });
+                execFileSync21(runtime, ["exec", initContainerName, "pg_isready", "-U", dbUser || "postgres"], { stdio: "ignore" });
                 break;
               } else if (image.includes("mysql")) {
-                execFileSync20(runtime, ["exec", initContainerName, "mysqladmin", "ping", "-h", "localhost"], { stdio: "ignore" });
+                execFileSync21(runtime, ["exec", initContainerName, "mysqladmin", "ping", "-h", "localhost"], { stdio: "ignore" });
                 break;
               }
             } catch {
@@ -11828,15 +11830,15 @@ var init_database_provision = __esm({
           if (hasSeedData && !service.quiet) {
             printInfo("Seed data found in db/seed - this should be loaded by your application");
           }
-          execFileSync20(runtime, ["stop", initContainerName], { stdio: "ignore" });
-          execFileSync20(runtime, ["rm", initContainerName], { stdio: "ignore" });
+          execFileSync21(runtime, ["stop", initContainerName], { stdio: "ignore" });
+          execFileSync21(runtime, ["rm", initContainerName], { stdio: "ignore" });
           if (!service.quiet) {
             printSuccess("Database initialized successfully");
           }
         } catch (error) {
           try {
-            execFileSync20(runtime, ["stop", initContainerName], { stdio: "ignore" });
-            execFileSync20(runtime, ["rm", initContainerName], { stdio: "ignore" });
+            execFileSync21(runtime, ["stop", initContainerName], { stdio: "ignore" });
+            execFileSync21(runtime, ["rm", initContainerName], { stdio: "ignore" });
           } catch {
           }
           return {
@@ -14513,7 +14515,7 @@ var init_js_yaml = __esm({
 // src/platforms/container/handlers/graph-provision.ts
 import * as fs34 from "fs/promises";
 import * as path28 from "path";
-import { execFileSync as execFileSync21 } from "child_process";
+import { execFileSync as execFileSync22 } from "child_process";
 var provisionGraphService2, preflightGraphProvision2, graphProvisionDescriptor2;
 var init_graph_provision2 = __esm({
   "src/platforms/container/handlers/graph-provision.ts"() {
@@ -14542,7 +14544,7 @@ var init_graph_provision2 = __esm({
         const withCassandra = storage === "cassandra";
         const networkName = "semiont-network";
         try {
-          execFileSync21(runtime, ["--version"], { stdio: "ignore" });
+          execFileSync22(runtime, ["--version"], { stdio: "ignore" });
         } catch {
           return {
             success: false,
@@ -14551,14 +14553,14 @@ var init_graph_provision2 = __esm({
           };
         }
         try {
-          execFileSync21(runtime, ["network", "create", networkName], { stdio: "ignore" });
+          execFileSync22(runtime, ["network", "create", networkName], { stdio: "ignore" });
         } catch {
         }
         if (!service.quiet) {
           printInfo("Pulling required Docker images...");
         }
         try {
-          execFileSync21(runtime, ["pull", "janusgraph/janusgraph:1.0.0"], {
+          execFileSync22(runtime, ["pull", "janusgraph/janusgraph:1.0.0"], {
             stdio: service.verbose ? "inherit" : "pipe"
           });
         } catch (error) {
@@ -14566,7 +14568,7 @@ var init_graph_provision2 = __esm({
         }
         if (withCassandra) {
           try {
-            execFileSync21(runtime, ["pull", "cassandra:4"], {
+            execFileSync22(runtime, ["pull", "cassandra:4"], {
               stdio: service.verbose ? "inherit" : "pipe"
             });
           } catch (error) {
@@ -14575,7 +14577,7 @@ var init_graph_provision2 = __esm({
         }
         if (withElasticsearch) {
           try {
-            execFileSync21(runtime, ["pull", "docker.elastic.co/elasticsearch/elasticsearch:7.17.10"], {
+            execFileSync22(runtime, ["pull", "docker.elastic.co/elasticsearch/elasticsearch:7.17.10"], {
               stdio: service.verbose ? "inherit" : "pipe"
             });
           } catch (error) {
@@ -14724,7 +14726,7 @@ var init_graph_provision2 = __esm({
 
 // src/platforms/container/handlers/graph-stop.ts
 import * as path29 from "path";
-import { execFileSync as execFileSync22 } from "child_process";
+import { execFileSync as execFileSync23 } from "child_process";
 import * as fs35 from "fs/promises";
 async function stopJanusGraph2(context) {
   const { service, runtime, options, containerName } = context;
@@ -14744,7 +14746,7 @@ async function stopJanusGraph2(context) {
   }
   let runningContainers = [];
   try {
-    const output = execFileSync22(runtime, ["ps", "--format", "{{.Names}}"], { encoding: "utf-8" });
+    const output = execFileSync23(runtime, ["ps", "--format", "{{.Names}}"], { encoding: "utf-8" });
     const containerNames = [containerName, "semiont-cassandra", "semiont-elasticsearch"];
     runningContainers = containerNames.filter((name) => output.includes(name));
     if (runningContainers.length === 0) {
@@ -14773,10 +14775,10 @@ async function stopJanusGraph2(context) {
       if (!service.quiet) {
         printInfo("Force stopping JanusGraph Docker stack...");
       }
-      execFileSync22("docker-compose", ["-f", composePath, "kill"], {
+      execFileSync23("docker-compose", ["-f", composePath, "kill"], {
         stdio: service.quiet ? "ignore" : "inherit"
       });
-      execFileSync22("docker-compose", ["-f", composePath, "down"], {
+      execFileSync23("docker-compose", ["-f", composePath, "down"], {
         stdio: service.quiet ? "ignore" : "inherit"
       });
       if (!service.quiet) {
@@ -14796,10 +14798,10 @@ async function stopJanusGraph2(context) {
       if (!service.quiet) {
         printInfo(`Stopping JanusGraph Docker stack gracefully (timeout: ${options.timeout}s)...`);
       }
-      execFileSync22("docker-compose", ["-f", composePath, "stop", "-t", options.timeout.toString()], {
+      execFileSync23("docker-compose", ["-f", composePath, "stop", "-t", options.timeout.toString()], {
         stdio: service.quiet ? "ignore" : "inherit"
       });
-      execFileSync22("docker-compose", ["-f", composePath, "down"], {
+      execFileSync23("docker-compose", ["-f", composePath, "down"], {
         stdio: service.quiet ? "ignore" : "inherit"
       });
       if (!service.quiet) {
@@ -14870,7 +14872,7 @@ var init_graph_stop2 = __esm({
 });
 
 // src/platforms/container/handlers/database-stop.ts
-import { execFileSync as execFileSync23 } from "child_process";
+import { execFileSync as execFileSync24 } from "child_process";
 var stopDatabaseContainer, preflightDatabaseStop, databaseStopDescriptor;
 var init_database_stop = __esm({
   "src/platforms/container/handlers/database-stop.ts"() {
@@ -14884,7 +14886,7 @@ var init_database_stop = __esm({
         printInfo(`Stopping database container: ${containerName}`);
       }
       try {
-        const status = execFileSync23(
+        const status = execFileSync24(
           runtime,
           ["inspect", containerName, "--format", "{{.State.Status}}"],
           { encoding: "utf-8", stdio: "pipe" }
@@ -14906,7 +14908,7 @@ var init_database_stop = __esm({
             }
           };
         }
-        const containerId = execFileSync23(
+        const containerId = execFileSync24(
           runtime,
           ["inspect", containerName, "--format", "{{.Id}}"],
           { encoding: "utf-8", stdio: "pipe" }
@@ -14915,7 +14917,7 @@ var init_database_stop = __esm({
           if (!service.quiet) {
             printWarning("Force stopping database (may cause data corruption)...");
           }
-          execFileSync23(runtime, ["kill", containerName], { stdio: "pipe" });
+          execFileSync24(runtime, ["kill", containerName], { stdio: "pipe" });
         } else {
           if (!service.quiet) {
             printInfo(`Gracefully stopping database (timeout: ${timeout}s)...`);
@@ -14923,7 +14925,7 @@ var init_database_stop = __esm({
           const image = service.getImage();
           if (image.includes("postgres")) {
             try {
-              execFileSync23(
+              execFileSync24(
                 runtime,
                 [
                   "exec",
@@ -14936,20 +14938,20 @@ var init_database_stop = __esm({
                 { stdio: "pipe", timeout: (timeout + 5) * 1e3 }
               );
             } catch {
-              execFileSync23(runtime, ["stop", "-t", timeout.toString(), containerName], { stdio: "pipe" });
+              execFileSync24(runtime, ["stop", "-t", timeout.toString(), containerName], { stdio: "pipe" });
             }
           } else if (image.includes("mysql")) {
             try {
-              execFileSync23(
+              execFileSync24(
                 runtime,
                 ["exec", containerName, "mysqladmin", "shutdown"],
                 { stdio: "pipe", timeout: timeout * 1e3 }
               );
             } catch {
-              execFileSync23(runtime, ["stop", "-t", timeout.toString(), containerName], { stdio: "pipe" });
+              execFileSync24(runtime, ["stop", "-t", timeout.toString(), containerName], { stdio: "pipe" });
             }
           } else {
-            execFileSync23(runtime, ["stop", "-t", timeout.toString(), containerName], { stdio: "pipe" });
+            execFileSync24(runtime, ["stop", "-t", timeout.toString(), containerName], { stdio: "pipe" });
           }
         }
         let stopped = false;
@@ -14957,7 +14959,7 @@ var init_database_stop = __esm({
         const maxAttempts = 10;
         while (!stopped && attempts < maxAttempts) {
           try {
-            const currentStatus = execFileSync23(
+            const currentStatus = execFileSync24(
               runtime,
               ["inspect", containerName, "--format", "{{.State.Status}}"],
               { encoding: "utf-8", stdio: "pipe" }
@@ -15053,14 +15055,14 @@ var init_proxy_paths2 = __esm({
 // src/platforms/container/handlers/proxy-provision.ts
 import * as fs36 from "fs";
 import * as path31 from "path";
-import { execFileSync as execFileSync24 } from "child_process";
+import { execFileSync as execFileSync25 } from "child_process";
 function getHostAddress(runtime) {
   const platform = process.platform;
   if (platform === "darwin" || platform === "win32") {
     return "host.docker.internal";
   } else {
     try {
-      execFileSync24(runtime, ["run", "--rm", "alpine", "getent", "hosts", "host-gateway"], { stdio: "pipe" });
+      execFileSync25(runtime, ["run", "--rm", "alpine", "getent", "hosts", "host-gateway"], { stdio: "pipe" });
       return "host-gateway";
     } catch {
       return "172.17.0.1";
@@ -15147,7 +15149,7 @@ var init_proxy_provision2 = __esm({
         printInfo(`Pulling image: ${imageName}...`);
       }
       try {
-        execFileSync24(runtime, ["pull", imageName], {
+        execFileSync25(runtime, ["pull", imageName], {
           stdio: service.verbose ? "inherit" : "pipe"
         });
         if (!service.quiet) {
@@ -15222,7 +15224,7 @@ var init_proxy_provision2 = __esm({
 });
 
 // src/platforms/container/handlers/proxy-start.ts
-import { execFileSync as execFileSync25 } from "child_process";
+import { execFileSync as execFileSync26 } from "child_process";
 import * as fs37 from "fs";
 function getProxyImage2(type2, customImage) {
   if (customImage) {
@@ -15273,9 +15275,9 @@ var init_proxy_start2 = __esm({
         };
       }
       try {
-        const existingContainer = execFileSync25(runtime, ["ps", "-aq", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
+        const existingContainer = execFileSync26(runtime, ["ps", "-aq", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
         if (existingContainer) {
-          const isRunning = execFileSync25(runtime, ["ps", "-q", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
+          const isRunning = execFileSync26(runtime, ["ps", "-q", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
           if (isRunning) {
             if (!service.quiet) {
               printInfo(`Proxy container ${containerName} is already running`);
@@ -15293,7 +15295,7 @@ var init_proxy_start2 = __esm({
             if (!service.quiet) {
               printInfo(`Removing stopped container ${containerName}`);
             }
-            execFileSync25(runtime, ["rm", containerName], { stdio: "pipe" });
+            execFileSync26(runtime, ["rm", containerName], { stdio: "pipe" });
           }
         }
       } catch (error) {
@@ -15332,7 +15334,7 @@ var init_proxy_start2 = __esm({
         }
       }
       try {
-        const containerId = execFileSync25(runtime, runArgs, { encoding: "utf-8" }).trim();
+        const containerId = execFileSync26(runtime, runArgs, { encoding: "utf-8" }).trim();
         if (!service.quiet) {
           printSuccess(`Container started with ID: ${containerId.substring(0, 12)}`);
         }
@@ -15340,9 +15342,9 @@ var init_proxy_start2 = __esm({
           printInfo("Waiting for proxy to become healthy...");
         }
         await new Promise((resolve12) => setTimeout(resolve12, 2e3));
-        const isRunning = execFileSync25(runtime, ["ps", "-q", "-f", `id=${containerId}`], { encoding: "utf-8" }).trim();
+        const isRunning = execFileSync26(runtime, ["ps", "-q", "-f", `id=${containerId}`], { encoding: "utf-8" }).trim();
         if (!isRunning) {
-          const logs = execFileSync25(runtime, ["logs", containerId], { encoding: "utf-8" });
+          const logs = execFileSync26(runtime, ["logs", containerId], { encoding: "utf-8" });
           return {
             success: false,
             error: `Container exited unexpectedly. Logs:
@@ -15352,7 +15354,7 @@ ${logs}`,
         }
         if (config.type === "envoy") {
           try {
-            execFileSync25("curl", ["-s", "-o", "/dev/null", `http://localhost:${adminPort}/clusters`], { stdio: "pipe" });
+            execFileSync26("curl", ["-s", "-o", "/dev/null", `http://localhost:${adminPort}/clusters`], { stdio: "pipe" });
             if (!service.quiet) {
               printSuccess("Proxy admin interface is accessible");
             }
@@ -15430,7 +15432,7 @@ ${logs}`,
 });
 
 // src/platforms/container/handlers/proxy-stop.ts
-import { execFileSync as execFileSync26 } from "child_process";
+import { execFileSync as execFileSync27 } from "child_process";
 var stopProxyService2, preflightProxyStop, proxyStopDescriptor2;
 var init_proxy_stop2 = __esm({
   "src/platforms/container/handlers/proxy-stop.ts"() {
@@ -15444,7 +15446,7 @@ var init_proxy_stop2 = __esm({
         printInfo(`Stopping proxy service ${service.name} (type: ${config.type})...`);
       }
       try {
-        const existingContainer = execFileSync26(runtime, ["ps", "-aq", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
+        const existingContainer = execFileSync27(runtime, ["ps", "-aq", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
         if (!existingContainer) {
           if (!service.quiet) {
             printWarning(`Proxy container ${containerName} not found`);
@@ -15458,12 +15460,12 @@ var init_proxy_stop2 = __esm({
             }
           };
         }
-        const isRunning = execFileSync26(runtime, ["ps", "-q", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
+        const isRunning = execFileSync27(runtime, ["ps", "-q", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
         if (isRunning) {
           if (!service.quiet) {
             printInfo(`Stopping container ${containerName}...`);
           }
-          execFileSync26(runtime, ["stop", containerName], {
+          execFileSync27(runtime, ["stop", containerName], {
             stdio: service.verbose ? "inherit" : "pipe"
           });
           if (!service.quiet) {
@@ -15477,7 +15479,7 @@ var init_proxy_stop2 = __esm({
         if (!service.quiet) {
           printInfo(`Removing container ${containerName}...`);
         }
-        execFileSync26(runtime, ["rm", containerName], {
+        execFileSync27(runtime, ["rm", containerName], {
           stdio: service.verbose ? "inherit" : "pipe"
         });
         if (!service.quiet) {
@@ -15522,7 +15524,7 @@ var init_proxy_stop2 = __esm({
 });
 
 // src/platforms/container/handlers/proxy-check.ts
-import { execFileSync as execFileSync27 } from "child_process";
+import { execFileSync as execFileSync28 } from "child_process";
 import * as fs38 from "fs";
 async function checkUrl(url, timeout = 5e3) {
   try {
@@ -15537,7 +15539,7 @@ async function checkUrl(url, timeout = 5e3) {
 }
 function getContainerUptime(runtime, containerName) {
   try {
-    const uptime = execFileSync27(
+    const uptime = execFileSync28(
       runtime,
       ["ps", "--format", "{{.Status}}", "--filter", `name=${containerName}`],
       { encoding: "utf-8" }
@@ -15549,7 +15551,7 @@ function getContainerUptime(runtime, containerName) {
 }
 function getRecentLogs(runtime, containerName, lines = 20) {
   try {
-    const logs = execFileSync27(runtime, ["logs", "--tail", lines.toString(), containerName], { encoding: "utf-8" });
+    const logs = execFileSync28(runtime, ["logs", "--tail", lines.toString(), containerName], { encoding: "utf-8" });
     return logs;
   } catch {
     return void 0;
@@ -15576,7 +15578,7 @@ var init_proxy_check2 = __esm({
         backendRouting: false
       };
       try {
-        const containerId = execFileSync27(runtime, ["ps", "-q", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
+        const containerId = execFileSync28(runtime, ["ps", "-q", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
         if (containerId) {
           healthCheck.containerRunning = true;
           healthCheck.containerId = containerId.substring(0, 12);
@@ -15588,7 +15590,7 @@ var init_proxy_check2 = __esm({
             }
           }
         } else {
-          const stoppedContainer = execFileSync27(runtime, ["ps", "-aq", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
+          const stoppedContainer = execFileSync28(runtime, ["ps", "-aq", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
           if (stoppedContainer) {
             if (!service.quiet) {
               printWarning(`Container ${containerName} exists but is not running`);
@@ -15758,7 +15760,7 @@ Proxy service ${service.name} is healthy`);
 });
 
 // src/platforms/container/handlers/inference-check.ts
-import { execFileSync as execFileSync28 } from "child_process";
+import { execFileSync as execFileSync29 } from "child_process";
 var OLLAMA_DEFAULT_PORT3, checkInference2, preflightInferenceCheck2, inferenceCheckDescriptor2;
 var init_inference_check2 = __esm({
   "src/platforms/container/handlers/inference-check.ts"() {
@@ -15775,13 +15777,13 @@ var init_inference_check2 = __esm({
       let containerId;
       const modelAvailability = {};
       try {
-        const containerStatus = execFileSync28(
+        const containerStatus = execFileSync29(
           runtime,
           ["inspect", containerName, "--format", "{{.State.Status}}"],
           { encoding: "utf-8", stdio: "pipe" }
         ).trim();
         if (containerStatus === "running") {
-          containerId = execFileSync28(
+          containerId = execFileSync29(
             runtime,
             ["inspect", containerName, "--format", "{{.Id}}"],
             { encoding: "utf-8", stdio: "pipe" }
@@ -15811,7 +15813,7 @@ var init_inference_check2 = __esm({
       let logs;
       if (containerId) {
         try {
-          const output = execFileSync28(
+          const output = execFileSync29(
             runtime,
             ["logs", "--tail", "10", containerName],
             { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"] }
@@ -15871,10 +15873,10 @@ var init_inference_check2 = __esm({
 });
 
 // src/platforms/container/handlers/inference-start.ts
-import { execFileSync as execFileSync29 } from "child_process";
+import { execFileSync as execFileSync30 } from "child_process";
 function detectNvidiaGpu() {
   try {
-    execFileSync29("nvidia-smi", ["--query-gpu=name", "--format=csv,noheader"], {
+    execFileSync30("nvidia-smi", ["--query-gpu=name", "--format=csv,noheader"], {
       stdio: ["ignore", "pipe", "ignore"]
     });
     return true;
@@ -15897,7 +15899,7 @@ var init_inference_start2 = __esm({
       const port = serviceConfig.port || OLLAMA_DEFAULT_PORT4;
       const image = serviceConfig.image || OLLAMA_IMAGE;
       try {
-        const output = execFileSync29(runtime, ["ps", "--format", "{{.Names}}"], { encoding: "utf-8" });
+        const output = execFileSync30(runtime, ["ps", "--format", "{{.Names}}"], { encoding: "utf-8" });
         if (output.includes(containerName)) {
           if (!service.quiet) {
             printWarning("Ollama container is already running");
@@ -15915,7 +15917,7 @@ var init_inference_start2 = __esm({
       } catch {
       }
       try {
-        execFileSync29(runtime, ["rm", "-f", containerName], { stdio: "ignore" });
+        execFileSync30(runtime, ["rm", "-f", containerName], { stdio: "ignore" });
       } catch {
       }
       if (!service.quiet) {
@@ -15923,7 +15925,7 @@ var init_inference_start2 = __esm({
       }
       const gpuArgs = detectNvidiaGpu() ? ["--gpus", "all"] : [];
       try {
-        const containerId = execFileSync29(runtime, [
+        const containerId = execFileSync30(runtime, [
           "run",
           "-d",
           "--name",
@@ -15942,7 +15944,7 @@ var init_inference_start2 = __esm({
         for (let i = 0; i < maxAttempts; i++) {
           await new Promise((resolve12) => setTimeout(resolve12, 1e3));
           try {
-            const status = execFileSync29(
+            const status = execFileSync30(
               runtime,
               ["inspect", containerName, "--format", "{{.State.Status}}"],
               { encoding: "utf-8", stdio: "pipe" }
@@ -15962,7 +15964,7 @@ var init_inference_start2 = __esm({
         }
         if (!ready) {
           try {
-            execFileSync29(runtime, ["rm", "-f", containerName], { stdio: "ignore" });
+            execFileSync30(runtime, ["rm", "-f", containerName], { stdio: "ignore" });
           } catch {
           }
           return {
@@ -16024,7 +16026,7 @@ var init_inference_start2 = __esm({
 });
 
 // src/platforms/container/handlers/inference-stop.ts
-import { execFileSync as execFileSync30 } from "child_process";
+import { execFileSync as execFileSync31 } from "child_process";
 var stopInference2, preflightInferenceStop, inferenceStopDescriptor2;
 var init_inference_stop2 = __esm({
   "src/platforms/container/handlers/inference-stop.ts"() {
@@ -16034,7 +16036,7 @@ var init_inference_stop2 = __esm({
     stopInference2 = async (context) => {
       const { service, runtime, options, containerName } = context;
       try {
-        const output = execFileSync30(runtime, ["ps", "--format", "{{.Names}}"], { encoding: "utf-8" });
+        const output = execFileSync31(runtime, ["ps", "--format", "{{.Names}}"], { encoding: "utf-8" });
         if (!output.includes(containerName)) {
           if (!service.quiet) {
             printWarning("Ollama container is not running");
@@ -16057,17 +16059,17 @@ var init_inference_stop2 = __esm({
           if (!service.quiet) {
             printInfo("Force stopping Ollama container...");
           }
-          execFileSync30(runtime, ["rm", "-f", containerName], {
+          execFileSync31(runtime, ["rm", "-f", containerName], {
             stdio: service.quiet ? "ignore" : "inherit"
           });
         } else {
           if (!service.quiet) {
             printInfo(`Stopping Ollama container gracefully (timeout: ${options.timeout}s)...`);
           }
-          execFileSync30(runtime, ["stop", "-t", options.timeout.toString(), containerName], {
+          execFileSync31(runtime, ["stop", "-t", options.timeout.toString(), containerName], {
             stdio: service.quiet ? "ignore" : "inherit"
           });
-          execFileSync30(runtime, ["rm", containerName], {
+          execFileSync31(runtime, ["rm", containerName], {
             stdio: "ignore"
           });
         }
@@ -16107,10 +16109,10 @@ var init_inference_stop2 = __esm({
 });
 
 // src/platforms/container/handlers/inference-provision.ts
-import { execFileSync as execFileSync31 } from "child_process";
+import { execFileSync as execFileSync32 } from "child_process";
 function detectGpu2(runtime) {
   try {
-    const output = execFileSync31(runtime, ["info", "--format", "{{.Runtimes}}"], {
+    const output = execFileSync32(runtime, ["info", "--format", "{{.Runtimes}}"], {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "ignore"]
     }).trim();
@@ -16120,7 +16122,7 @@ function detectGpu2(runtime) {
   } catch {
   }
   try {
-    const gpuName = execFileSync31("nvidia-smi", ["--query-gpu=name", "--format=csv,noheader"], {
+    const gpuName = execFileSync32("nvidia-smi", ["--query-gpu=name", "--format=csv,noheader"], {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "ignore"]
     }).trim();
@@ -16155,7 +16157,7 @@ var init_inference_provision2 = __esm({
         printInfo(`Pulling ${image}...`);
       }
       try {
-        execFileSync31(runtime, ["pull", image], {
+        execFileSync32(runtime, ["pull", image], {
           stdio: service.quiet ? "ignore" : "inherit"
         });
       } catch (error) {
@@ -16166,7 +16168,7 @@ var init_inference_provision2 = __esm({
         };
       }
       try {
-        execFileSync31(runtime, ["volume", "create", VOLUME_NAME2], {
+        execFileSync32(runtime, ["volume", "create", VOLUME_NAME2], {
           stdio: "ignore"
         });
       } catch {
@@ -16177,7 +16179,7 @@ var init_inference_provision2 = __esm({
           printInfo(`Pulling model ${model} (this may take several minutes)...`);
         }
         try {
-          execFileSync31(runtime, [
+          execFileSync32(runtime, [
             "run",
             "--rm",
             "-v",
@@ -16297,7 +16299,7 @@ var init_handlers2 = __esm({
 });
 
 // src/platforms/container/platform.ts
-import { execFileSync as execFileSync32 } from "child_process";
+import { execFileSync as execFileSync33 } from "child_process";
 var ContainerPlatform;
 var init_platform3 = __esm({
   "src/platforms/container/platform.ts"() {
@@ -16325,11 +16327,11 @@ var init_platform3 = __esm({
        */
       detectContainerRuntime() {
         try {
-          execFileSync32("docker", ["--version"], { stdio: "ignore" });
+          execFileSync33("docker", ["--version"], { stdio: "ignore" });
           return "docker";
         } catch {
           try {
-            execFileSync32("podman", ["--version"], { stdio: "ignore" });
+            execFileSync33("podman", ["--version"], { stdio: "ignore" });
             return "podman";
           } catch {
             throw new Error("No container runtime (Docker or Podman) found");
@@ -16355,7 +16357,7 @@ var init_platform3 = __esm({
           return false;
         }
         try {
-          const status = execFileSync32(
+          const status = execFileSync33(
             this.runtime,
             ["inspect", containerId, "--format", "{{.State.Status}}"],
             { encoding: "utf-8", stdio: "pipe" }
@@ -16417,7 +16419,7 @@ var init_platform3 = __esm({
           if (since) {
             args.push("--since", since.toISOString());
           }
-          const output = execFileSync32(this.runtime, args, {
+          const output = execFileSync33(this.runtime, args, {
             encoding: "utf-8",
             stdio: ["ignore", "pipe", "pipe"]
             // Capture both stdout and stderr
@@ -16635,7 +16637,7 @@ var init_lambda_check = __esm({
 });
 
 // src/platforms/aws/handlers/ecs-check.ts
-import { execFileSync as execFileSync33 } from "child_process";
+import { execFileSync as execFileSync34 } from "child_process";
 import { DescribeServicesCommand } from "@aws-sdk/client-ecs";
 import { DescribeTargetHealthCommand } from "@aws-sdk/client-elastic-load-balancing-v2";
 import { FilterLogEventsCommand as FilterLogEventsCommand2 } from "@aws-sdk/client-cloudwatch-logs";
@@ -16687,7 +16689,7 @@ var init_ecs_check = __esm({
           let imageTag = "unknown";
           if (activeDeployment?.taskDefinition) {
             try {
-              const taskDefJson = execFileSync33("aws", [
+              const taskDefJson = execFileSync34("aws", [
                 "ecs",
                 "describe-task-definition",
                 "--task-definition",
@@ -16946,10 +16948,10 @@ var init_rds_check = __esm({
 });
 
 // src/platforms/aws/handlers/s3-cloudfront-check.ts
-import { execFileSync as execFileSync34 } from "child_process";
+import { execFileSync as execFileSync35 } from "child_process";
 async function getCloudFrontDistribution(bucketName, region) {
   try {
-    const distributionId = execFileSync34("aws", [
+    const distributionId = execFileSync35("aws", [
       "cloudfront",
       "list-distributions",
       "--query",
@@ -16966,7 +16968,7 @@ async function getCloudFrontDistribution(bucketName, region) {
 }
 async function getCloudFrontStatus(distributionId, region) {
   try {
-    const status = execFileSync34("aws", [
+    const status = execFileSync35("aws", [
       "cloudfront",
       "get-distribution",
       "--id",
@@ -16993,7 +16995,7 @@ var init_s3_cloudfront_check = __esm({
       const { service, region, resourceName } = context;
       const bucketName = `${resourceName}-static`;
       try {
-        execFileSync34("aws", ["s3api", "head-bucket", "--bucket", bucketName, "--region", region], {
+        execFileSync35("aws", ["s3api", "head-bucket", "--bucket", bucketName, "--region", region], {
           stdio: ["pipe", "pipe", "ignore"]
         });
         const status = "running";
@@ -17228,7 +17230,7 @@ var init_neptune_check = __esm({
 });
 
 // src/platforms/aws/handlers/ecs-start.ts
-import { execFileSync as execFileSync35 } from "child_process";
+import { execFileSync as execFileSync36 } from "child_process";
 var startECSService, preflightEcsStart, ecsFargateStartDescriptor, ecsStartDescriptor;
 var init_ecs_start = __esm({
   "src/platforms/aws/handlers/ecs-start.ts"() {
@@ -17243,7 +17245,7 @@ var init_ecs_start = __esm({
       const serviceName = cfnDiscoveredResources?.serviceName || resourceName;
       const desiredCount = requirements.resources?.replicas || 1;
       try {
-        execFileSync35("aws", [
+        execFileSync36("aws", [
           "ecs",
           "update-service",
           "--cluster",
@@ -17258,7 +17260,7 @@ var init_ecs_start = __esm({
         let endpoint;
         if (requirements.network?.needsLoadBalancer) {
           try {
-            const albDns = execFileSync35("aws", [
+            const albDns = execFileSync36("aws", [
               "elbv2",
               "describe-load-balancers",
               "--names",
@@ -17330,7 +17332,7 @@ var init_ecs_start = __esm({
 });
 
 // src/platforms/aws/handlers/rds-start.ts
-import { execFileSync as execFileSync36 } from "child_process";
+import { execFileSync as execFileSync37 } from "child_process";
 var startRDSInstance, preflightRdsStart, rdsStartDescriptor;
 var init_rds_start = __esm({
   "src/platforms/aws/handlers/rds-start.ts"() {
@@ -17343,7 +17345,7 @@ var init_rds_start = __esm({
       const resourceName = `semiont-${service.name}-${service.environment}`;
       const instanceId = `${resourceName}-db`;
       try {
-        execFileSync36("aws", ["rds", "start-db-instance", "--db-instance-identifier", instanceId, "--region", region], {
+        execFileSync37("aws", ["rds", "start-db-instance", "--db-instance-identifier", instanceId, "--region", region], {
           encoding: "utf-8"
         });
         if (!service.quiet) {
@@ -17351,7 +17353,7 @@ var init_rds_start = __esm({
         }
         let endpoint;
         try {
-          endpoint = execFileSync36("aws", [
+          endpoint = execFileSync37("aws", [
             "rds",
             "describe-db-instances",
             "--db-instance-identifier",
@@ -17585,7 +17587,7 @@ var init_stack_provision = __esm({
 });
 
 // src/platforms/aws/handlers/ecs-publish.ts
-import { execFileSync as execFileSync37, spawnSync as spawnSync3 } from "child_process";
+import { execFileSync as execFileSync38, spawnSync as spawnSync3 } from "child_process";
 import * as path33 from "path";
 import * as fs40 from "fs";
 async function createNewTaskDefinition(service, imageUri, region, _accountId, cfnDiscoveredResources, resourceName) {
@@ -17597,7 +17599,7 @@ async function createNewTaskDefinition(service, imageUri, region, _accountId, cf
       console.warn(`   \u26A0\uFE0F  Could not find ECS service name for ${service.name}`);
       return "";
     }
-    const serviceJson = execFileSync37("aws", [
+    const serviceJson = execFileSync38("aws", [
       "ecs",
       "describe-services",
       "--cluster",
@@ -17615,7 +17617,7 @@ async function createNewTaskDefinition(service, imageUri, region, _accountId, cf
       console.warn(`   \u26A0\uFE0F  Could not find task definition for ${serviceName}`);
       return "";
     }
-    const taskDefJson = execFileSync37("aws", [
+    const taskDefJson = execFileSync38("aws", [
       "ecs",
       "describe-task-definition",
       "--task-definition",
@@ -17646,7 +17648,7 @@ async function createNewTaskDefinition(service, imageUri, region, _accountId, cf
       memory: taskDef.memory,
       runtimePlatform: taskDef.runtimePlatform
     };
-    const registerOutput = execFileSync37("aws", [
+    const registerOutput = execFileSync38("aws", [
       "ecs",
       "register-task-definition",
       "--cli-input-json",
@@ -17686,7 +17688,7 @@ var init_ecs_publish = __esm({
         const deploymentStrategy = envConfig.deployment?.imageTagStrategy || "mutable";
         if (deploymentStrategy === "immutable" || deploymentStrategy === "git-hash") {
           try {
-            const gitHash = execFileSync37("git", ["rev-parse", "--short", "HEAD"], {
+            const gitHash = execFileSync38("git", ["rev-parse", "--short", "HEAD"], {
               encoding: "utf-8",
               cwd: service.projectRoot
             }).trim();
@@ -17706,7 +17708,7 @@ var init_ecs_publish = __esm({
       const ecrRepo = `semiont-${service.name}`;
       const imageUri = `${accountId}.dkr.ecr.${region}.amazonaws.com/${ecrRepo}:${version}`;
       try {
-        execFileSync37("aws", ["ecr", "create-repository", "--repository-name", ecrRepo, "--region", region]);
+        execFileSync38("aws", ["ecr", "create-repository", "--repository-name", ecrRepo, "--region", region]);
       } catch {
       }
       if (service.verbose) {
@@ -17745,7 +17747,7 @@ var init_ecs_publish = __esm({
       try {
         const apiTypesPath = path33.join(buildContext, "packages", "api-types");
         if (fs40.existsSync(apiTypesPath)) {
-          execFileSync37("npm", ["run", "build"], {
+          execFileSync38("npm", ["run", "build"], {
             cwd: apiTypesPath,
             env: buildEnv,
             stdio: service.verbose ? "inherit" : "pipe"
@@ -17753,7 +17755,7 @@ var init_ecs_publish = __esm({
         }
         const appPath = path33.join(buildContext, "apps", service.name);
         if (fs40.existsSync(appPath)) {
-          execFileSync37("npm", ["run", "build"], {
+          execFileSync38("npm", ["run", "build"], {
             cwd: appPath,
             env: buildEnv,
             stdio: service.verbose ? "inherit" : "pipe"
@@ -17769,7 +17771,7 @@ var init_ecs_publish = __esm({
         };
       }
       try {
-        const ecrPassword = execFileSync37("aws", [
+        const ecrPassword = execFileSync38("aws", [
           "ecr",
           "get-login-password",
           "--region",
@@ -17797,8 +17799,8 @@ var init_ecs_publish = __esm({
         if (service.verbose) {
           console.log(`[DEBUG] Docker build args: ${dockerBuildArgs.join(" ")}`);
         }
-        execFileSync37("docker", dockerBuildArgs, { stdio: service.verbose ? "inherit" : "pipe" });
-        execFileSync37("docker", ["push", imageUri], { stdio: service.verbose ? "inherit" : "pipe" });
+        execFileSync38("docker", dockerBuildArgs, { stdio: service.verbose ? "inherit" : "pipe" });
+        execFileSync38("docker", ["push", imageUri], { stdio: service.verbose ? "inherit" : "pipe" });
         artifacts.imageTag = version;
         artifacts.imageUrl = imageUri;
         const newTaskDefRevision = await createNewTaskDefinition(service, imageUri, region, accountId, cfnDiscoveredResources, resourceName);
@@ -17865,10 +17867,10 @@ var init_ecs_publish = __esm({
 });
 
 // src/platforms/aws/handlers/ecs-update.ts
-import { execFileSync as execFileSync38 } from "child_process";
+import { execFileSync as execFileSync39 } from "child_process";
 async function getCurrentTaskDefinition(cluster, service, region) {
   try {
-    const taskDef = execFileSync38("aws", ["ecs", "describe-services", "--cluster", cluster, "--services", service, "--query", "services[0].taskDefinition", "--output", "text", "--region", region], { encoding: "utf-8" }).trim();
+    const taskDef = execFileSync39("aws", ["ecs", "describe-services", "--cluster", cluster, "--services", service, "--query", "services[0].taskDefinition", "--output", "text", "--region", region], { encoding: "utf-8" }).trim();
     return taskDef.split(":").pop() || "";
   } catch {
     return "";
@@ -17876,7 +17878,7 @@ async function getCurrentTaskDefinition(cluster, service, region) {
 }
 async function getTaskDefinitionFamily(cluster, service, region) {
   try {
-    const taskDefArn = execFileSync38("aws", ["ecs", "describe-services", "--cluster", cluster, "--services", service, "--query", "services[0].taskDefinition", "--output", "text", "--region", region], { encoding: "utf-8" }).trim();
+    const taskDefArn = execFileSync39("aws", ["ecs", "describe-services", "--cluster", cluster, "--services", service, "--query", "services[0].taskDefinition", "--output", "text", "--region", region], { encoding: "utf-8" }).trim();
     const parts = taskDefArn.split("/");
     if (parts.length > 1) {
       return parts[1].split(":")[0];
@@ -17890,7 +17892,7 @@ async function getLatestTaskDefinitionRevision(cluster, service, region) {
   try {
     const family = await getTaskDefinitionFamily(cluster, service, region);
     if (!family) return "";
-    const taskDefArn = execFileSync38("aws", [
+    const taskDefArn = execFileSync39("aws", [
       "ecs",
       "list-task-definitions",
       "--family-prefix",
@@ -17916,7 +17918,7 @@ async function getLatestTaskDefinitionRevision(cluster, service, region) {
 async function fetchTaskLogs(clusterName, taskArn, region, verbose = false) {
   try {
     const taskId = taskArn.split("/").pop();
-    const taskDetails = execFileSync38("aws", [
+    const taskDetails = execFileSync39("aws", [
       "ecs",
       "describe-tasks",
       "--cluster",
@@ -17932,7 +17934,7 @@ async function fetchTaskLogs(clusterName, taskArn, region, verbose = false) {
     if (!task) {
       return [];
     }
-    const taskDefDetails = execFileSync38("aws", [
+    const taskDefDetails = execFileSync39("aws", [
       "ecs",
       "describe-task-definition",
       "--task-definition",
@@ -17955,7 +17957,7 @@ async function fetchTaskLogs(clusterName, taskArn, region, verbose = false) {
     }
     const containerName = mainContainer.name;
     const logStream = `${streamPrefix}/${containerName}/${taskId}`;
-    const logsJson = execFileSync38("aws", [
+    const logsJson = execFileSync39("aws", [
       "logs",
       "filter-log-events",
       "--log-group-name",
@@ -17990,7 +17992,7 @@ async function waitForECSDeployment(clusterName, serviceName, deploymentId, regi
   let failedTaskInfo = [];
   while (Date.now() - startTime < effectiveTimeout * 1e3) {
     try {
-      const serviceData = execFileSync38("aws", [
+      const serviceData = execFileSync39("aws", [
         "ecs",
         "describe-services",
         "--cluster",
@@ -18039,7 +18041,7 @@ async function waitForECSDeployment(clusterName, serviceName, deploymentId, regi
       const ourRevision = ourDeployment.taskDefinition?.split(":").pop() || "unknown";
       const oldRevisions = /* @__PURE__ */ new Set();
       try {
-        const stoppedTasksData = execFileSync38("aws", [
+        const stoppedTasksData = execFileSync39("aws", [
           "ecs",
           "list-tasks",
           "--cluster",
@@ -18055,7 +18057,7 @@ async function waitForECSDeployment(clusterName, serviceName, deploymentId, regi
         ], { encoding: "utf-8" });
         const stoppedTaskArns = JSON.parse(stoppedTasksData).taskArns || [];
         if (stoppedTaskArns.length > 0) {
-          const stoppedTasksJson = execFileSync38("aws", [
+          const stoppedTasksJson = execFileSync39("aws", [
             "ecs",
             "describe-tasks",
             "--cluster",
@@ -18144,7 +18146,7 @@ async function waitForECSDeployment(clusterName, serviceName, deploymentId, regi
         }
       }
       try {
-        const tasksData = execFileSync38("aws", [
+        const tasksData = execFileSync39("aws", [
           "ecs",
           "list-tasks",
           "--cluster",
@@ -18160,7 +18162,7 @@ async function waitForECSDeployment(clusterName, serviceName, deploymentId, regi
         ], { encoding: "utf-8" });
         const taskArns = JSON.parse(tasksData).taskArns || [];
         if (taskArns.length > 0) {
-          const taskDetailsJson = execFileSync38("aws", [
+          const taskDetailsJson = execFileSync39("aws", [
             "ecs",
             "describe-tasks",
             "--cluster",
@@ -18379,13 +18381,13 @@ var init_ecs_update = __esm({
             printInfo(`No newer task definition found. Forcing redeployment of current revision ${currentRevision}`);
           }
         }
-        const updateResult = execFileSync38("aws", updateArgs, { encoding: "utf-8" });
+        const updateResult = execFileSync39("aws", updateArgs, { encoding: "utf-8" });
         if (service.verbose) {
           try {
-            const serviceData = execFileSync38("aws", ["ecs", "describe-services", "--cluster", clusterName, "--services", serviceName, "--region", region, "--output", "json"], { encoding: "utf-8" });
+            const serviceData = execFileSync39("aws", ["ecs", "describe-services", "--cluster", clusterName, "--services", serviceName, "--region", region, "--output", "json"], { encoding: "utf-8" });
             const ecsService = JSON.parse(serviceData).services?.[0];
             if (ecsService?.taskDefinition) {
-              const currentTaskDef = execFileSync38("aws", ["ecs", "describe-task-definition", "--task-definition", ecsService.taskDefinition, "--region", region, "--output", "json"], { encoding: "utf-8" });
+              const currentTaskDef = execFileSync39("aws", ["ecs", "describe-task-definition", "--task-definition", ecsService.taskDefinition, "--region", region, "--output", "json"], { encoding: "utf-8" });
               const taskDef = JSON.parse(currentTaskDef).taskDefinition;
               const images = taskDef.containerDefinitions?.map((c) => c.image).filter(Boolean);
               if (images?.length > 0) {
@@ -18513,10 +18515,10 @@ __export(credential_validator_exports, {
   isAWSCliInstalled: () => isAWSCliInstalled,
   validateAWSCredentials: () => validateAWSCredentials
 });
-import { execFileSync as execFileSync39 } from "child_process";
+import { execFileSync as execFileSync40 } from "child_process";
 async function validateAWSCredentials(_environment) {
   try {
-    const output = execFileSync39("aws", ["sts", "get-caller-identity", "--output", "json"], {
+    const output = execFileSync40("aws", ["sts", "get-caller-identity", "--output", "json"], {
       stdio: ["pipe", "pipe", "pipe"],
       encoding: "utf8",
       env: {
@@ -18559,7 +18561,7 @@ async function validateAWSCredentials(_environment) {
 }
 function isAWSCliInstalled() {
   try {
-    execFileSync39("aws", ["--version"], { stdio: "ignore" });
+    execFileSync40("aws", ["--version"], { stdio: "ignore" });
     return true;
   } catch {
     return false;
@@ -18567,7 +18569,7 @@ function isAWSCliInstalled() {
 }
 function getAWSProfiles() {
   try {
-    const output = execFileSync39("aws", ["configure", "list-profiles"], {
+    const output = execFileSync40("aws", ["configure", "list-profiles"], {
       stdio: "pipe",
       encoding: "utf8"
     });
@@ -27018,7 +27020,7 @@ var require_package = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@semiont/cli",
-      version: "0.4.0",
+      version: "0.4.2",
       description: "Semiont CLI - Unified environment management tool",
       _comment: "AWS SDK dependencies (@aws-sdk/*) are only used by platforms/aws",
       type: "module",
@@ -27082,12 +27084,12 @@ var require_package = __commonJS({
         "@aws-sdk/client-secrets-manager": "^3.600.0",
         "@aws-sdk/client-sts": "^3.859.0",
         "@aws-sdk/client-wafv2": "^3.859.0",
-        "@semiont/api-client": "^0.4.0",
-        "@semiont/content": "^0.4.0",
-        "@semiont/core": "^0.4.0",
-        "@semiont/event-sourcing": "^0.4.0",
-        "@semiont/graph": "^0.4.0",
-        "@semiont/make-meaning": "^0.4.0",
+        "@semiont/api-client": "^0.4.2",
+        "@semiont/content": "^0.4.2",
+        "@semiont/core": "^0.4.2",
+        "@semiont/event-sourcing": "^0.4.2",
+        "@semiont/graph": "^0.4.2",
+        "@semiont/make-meaning": "^0.4.2",
         "@vitest/ui": "4.0.18",
         arg: "^5.0.2",
         argon2: "^0.44.0",
@@ -28152,7 +28154,8 @@ var UseraddOptionsSchema = BaseOptionsSchema.extend({
   admin: external_exports.boolean().default(false),
   moderator: external_exports.boolean().default(false),
   inactive: external_exports.boolean().default(false),
-  update: external_exports.boolean().default(false)
+  update: external_exports.boolean().default(false),
+  upsert: external_exports.boolean().default(false)
 });
 function validateEmail(email) {
   const emailRegex2 = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
@@ -28223,8 +28226,23 @@ async function useradd(options) {
     }
     let user;
     if (existingUser) {
+      if (options.upsert) {
+        if (!options.quiet) {
+          printSuccess(`User already exists: ${options.email}`);
+        }
+        await prisma.$disconnect();
+        return {
+          command: "useradd",
+          environment: options.environment,
+          timestamp: /* @__PURE__ */ new Date(),
+          summary: { succeeded: 1, failed: 0, total: 1, warnings: 0 },
+          executionContext: { user: process.env.USER || "unknown", workingDirectory: process.cwd(), dryRun: options.dryRun },
+          results: [{ entity: options.email, platform: "posix", success: true, metadata: { userId: existingUser.id, email: existingUser.email, isAdmin: existingUser.isAdmin, isModerator: existingUser.isModerator, isActive: existingUser.isActive }, duration: Date.now() - startTime }],
+          duration: Date.now() - startTime
+        };
+      }
       if (!options.update) {
-        throw new Error(`User ${options.email} already exists. Use --update to modify.`);
+        throw new Error(`User ${options.email} already exists. Use --update to modify or --upsert to skip silently.`);
       }
       if (!options.quiet) {
         printInfo(`Updating user: ${options.email}`);
@@ -28353,6 +28371,11 @@ var useraddCommand = new CommandBuilder().name("useradd").description("Create or
       type: "boolean",
       description: "Update existing user",
       default: false
+    },
+    "--upsert": {
+      type: "boolean",
+      description: "Create user if absent, skip silently if already exists",
+      default: false
     }
   },
   aliases: {
@@ -29003,13 +29026,9 @@ init_base_options_schema();
 import * as fs49 from "fs";
 import * as path42 from "path";
 import * as readline2 from "readline";
-import { execFileSync as execFileSync40 } from "child_process";
-import { SemiontProject as SemiontProject20 } from "@semiont/core/node";
+import { execFileSync as execFileSync41 } from "child_process";
 var LocalOptionsSchema = BaseOptionsSchema.extend({
   directory: external_exports.string().optional(),
-  email: external_exports.string().optional(),
-  password: external_exports.string().optional(),
-  generatePassword: external_exports.boolean().default(true),
   yes: external_exports.boolean().default(false)
 }).transform((data) => ({
   ...data,
@@ -29024,34 +29043,8 @@ function prompt2(question) {
     });
   });
 }
-function promptPassword(question) {
-  return new Promise((resolve12) => {
-    const rl = readline2.createInterface({ input: process.stdin, output: process.stdout });
-    process.stdout.write(question);
-    let password = "";
-    process.stdin.setRawMode?.(true);
-    process.stdin.resume();
-    process.stdin.setEncoding("utf8");
-    const onData = (ch) => {
-      if (ch === "\n" || ch === "\r" || ch === "") {
-        process.stdin.setRawMode?.(false);
-        process.stdin.pause();
-        process.stdin.removeListener("data", onData);
-        process.stdout.write("\n");
-        rl.close();
-        resolve12(password);
-      } else if (ch === "\x7F") {
-        password = password.slice(0, -1);
-      } else {
-        password += ch;
-        process.stdout.write("*");
-      }
-    };
-    process.stdin.on("data", onData);
-  });
-}
 function runSemiont(args, env, captureOutput = false) {
-  return execFileSync40("semiont", args, {
+  return execFileSync41("semiont", args, {
     env,
     stdio: captureOutput ? "pipe" : "inherit",
     encoding: "utf8"
@@ -29059,7 +29052,7 @@ function runSemiont(args, env, captureOutput = false) {
 }
 function runSemiontSafe(args, env) {
   try {
-    const output = execFileSync40("semiont", args, {
+    const output = execFileSync41("semiont", args, {
       env,
       stdio: "pipe",
       encoding: "utf8"
@@ -29149,6 +29142,7 @@ Press Enter to create one in ${colors.bright}${defaultPath}${colors.reset}, or t
       semiotRoot = answer || defaultPath;
       fs49.mkdirSync(semiotRoot, { recursive: true });
       process.env.SEMIONT_ROOT = semiotRoot;
+      envVarsToAdvise.push(`export SEMIONT_ROOT=${semiotRoot}`);
       console.log(`${colors.green}\u2713${colors.reset} Using ${semiotRoot}
 `);
       if (semiotRoot !== process.cwd()) {
@@ -29172,6 +29166,7 @@ Press Enter to create one in ${colors.bright}${defaultPath}${colors.reset}, or t
 `);
     }
     const env = { ...process.env };
+    await ensureGlobalConfig(false);
     const isInitialized = fs49.existsSync(path42.join(semiotRoot, ".semiont"));
     if (isInitialized) {
       console.log(`${colors.green}\u2713${colors.reset} Project already initialized
@@ -29182,8 +29177,10 @@ Press Enter to create one in ${colors.bright}${defaultPath}${colors.reset}, or t
         runSemiont(["init"], env);
         console.log(`${colors.green}\u2713${colors.reset} Project initialized
 `);
-      } catch {
+      } catch (err) {
+        const initMsg = err instanceof Error ? err.message : String(err);
         console.error(`${colors.red}\u2717 semiont init failed \u2014 cannot continue${colors.reset}`);
+        console.error(`  ${initMsg}`);
         results.summary.failed = 1;
         results.duration = Date.now() - startTime;
         return results;
@@ -29251,45 +29248,21 @@ Press Enter to create one in ${colors.bright}${defaultPath}${colors.reset}, or t
       }
     }
     console.log("");
-    const project = new SemiontProject20(semiotRoot);
-    fs49.mkdirSync(project.configDir, { recursive: true });
-    const credentialsPath = path42.join(project.configDir, "credentials.txt");
-    if (fs49.existsSync(credentialsPath)) {
-      console.log(`${colors.green}\u2713${colors.reset} Credentials file already exists at ${credentialsPath}
+    const adminEmail = "admin@example.com";
+    const adminPassword = "password";
+    console.log(`${colors.cyan}\u25B6 Creating admin user...${colors.reset}`);
+    const useraddResult = runSemiontSafe(
+      ["useradd", "--email", adminEmail, "--password", adminPassword, "--admin", "--upsert"],
+      env
+    );
+    if (useraddResult.success) {
+      console.log(`${colors.green}\u2713${colors.reset} Admin user ready
 `);
     } else {
-      console.log(`${colors.cyan}\u25B6 Creating admin user...${colors.reset}`);
-      let email = options.email;
-      if (!email) {
-        const answer = options.yes ? "" : await prompt2(`  Admin email [admin@local]: `);
-        email = answer || "admin@local";
-      }
-      let generatePassword2 = options.generatePassword;
-      if (!options.password && !options.yes) {
-        const answer = await prompt2(`  Generate password? [Y/n]: `);
-        generatePassword2 = answer === "" || answer.toLowerCase() === "y";
-      }
-      const useraddArgs = ["useradd", "--email", email, "--admin"];
-      if (generatePassword2) {
-        useraddArgs.push("--generate-password");
-      } else {
-        const pw = options.password || await promptPassword(`  Password: `);
-        useraddArgs.push("--password", pw);
-      }
-      const useraddResult = runSemiontSafe(useraddArgs, env);
-      if (useraddResult.success) {
-        const output = useraddResult.output;
-        console.log(output);
-        fs49.writeFileSync(credentialsPath, output, { mode: 384 });
-        console.log(`${colors.green}\u2713${colors.reset} Credentials saved to ${credentialsPath}`);
-        console.log(`${colors.yellow}  \u26A0 credentials.txt contains a plaintext password \u2014 keep it safe${colors.reset}
+      console.log(`${colors.yellow}\u26A0 useradd failed: ${useraddResult.error}${colors.reset}`);
+      console.log(`  Run manually: semiont useradd --email ${adminEmail} --password ${adminPassword} --admin
 `);
-      } else {
-        console.log(`${colors.yellow}\u26A0 useradd failed: ${useraddResult.error}${colors.reset}`);
-        console.log(`  Run manually: semiont useradd --email <email> --generate-password --admin
-`);
-        warnings.push(`useradd failed: ${useraddResult.error}`);
-      }
+      warnings.push(`useradd failed: ${useraddResult.error}`);
     }
     console.log(`${colors.cyan}\u25B6 Final service check...${colors.reset}
 `);
@@ -29297,7 +29270,8 @@ Press Enter to create one in ${colors.bright}${defaultPath}${colors.reset}, or t
     console.log(`
 ${colors.bright}${colors.green}\u2713 Semiont is running at http://localhost:8080${colors.reset}
 `);
-    console.log(`  Credentials: ${credentialsPath}`);
+    console.log(`  Admin email:    ${adminEmail}`);
+    console.log(`  Admin password: ${adminPassword}`);
     if (warnings.length > 0) {
       console.log(`
 ${colors.yellow}Warnings:${colors.reset}`);
@@ -29313,7 +29287,7 @@ To persist your environment across sessions, add to your shell profile:`);
       }
     }
     results.summary.succeeded = 1;
-    results.metadata = { semiotRoot, semiotEnv, credentialsPath };
+    results.metadata = { semiotRoot, semiotEnv };
   } catch (error) {
     const msg = error instanceof Error ? error.message : String(error);
     console.error(`
@@ -29329,33 +29303,17 @@ var localCommand = new CommandBuilder().name("local").description("Set up and st
     type: "string",
     description: "Project directory (default: cwd)"
   },
-  "--email": {
-    type: "string",
-    description: "Admin user email (default: admin@local)"
-  },
-  "--password": {
-    type: "string",
-    description: "Admin user password (default: auto-generate)"
-  },
-  "--generate-password": {
-    type: "boolean",
-    description: "Generate a random admin password",
-    default: true
-  },
   "--yes": {
     type: "boolean",
     description: "Non-interactive: accept all defaults (for scripts)",
     default: false
   }
 }, {
-  "--email": "--email",
-  "--yes": "-y"
+  "-y": "--yes"
 })).requiresEnvironment(false).requiresServices(false).examples(
   "semiont local",
-  "semiont local --email me@example.com",
-  "semiont local --email me@example.com --generate-password",
   "semiont local --yes",
-  "semiont local --directory /opt/myproject --email me@example.com --yes"
+  "semiont local --directory /opt/myproject --yes"
 ).setupHandler(local).build();
 
 // src/core/commands/clean.ts
@@ -29365,8 +29323,8 @@ init_command_definition();
 init_base_options_schema();
 import * as fs50 from "fs";
 import * as readline3 from "readline";
-import { execFileSync as execFileSync41 } from "child_process";
-import { SemiontProject as SemiontProject21 } from "@semiont/core/node";
+import { execFileSync as execFileSync42 } from "child_process";
+import { SemiontProject as SemiontProject20 } from "@semiont/core/node";
 var CleanOptionsSchema = BaseOptionsSchema.extend({
   force: external_exports.boolean().default(false),
   logs: external_exports.boolean().default(false),
@@ -29418,7 +29376,7 @@ function listDir(dir) {
 function containerRuntime() {
   for (const rt of ["docker", "podman"]) {
     try {
-      execFileSync41(rt, ["info"], { stdio: "ignore" });
+      execFileSync42(rt, ["info"], { stdio: "ignore" });
       return rt;
     } catch {
     }
@@ -29448,7 +29406,7 @@ async function clean(options) {
   const cleanVolumes = !anyFilter || options.volumes;
   let project;
   try {
-    project = new SemiontProject21(projectRoot);
+    project = new SemiontProject20(projectRoot);
   } catch (err) {
     results.summary.failed = 1;
     results.error = `Not a Semiont project: ${err.message}`;
@@ -29511,9 +29469,9 @@ async function clean(options) {
         for (const svc of ["database", "graph", "inference"]) {
           const volName = `semiont-${svc}-${env}-data`;
           try {
-            execFileSync41(runtime, ["volume", "inspect", volName], { stdio: "ignore" });
+            execFileSync42(runtime, ["volume", "inspect", volName], { stdio: "ignore" });
             if (!options.dryRun) {
-              execFileSync41(runtime, ["volume", "rm", volName], { stdio: "pipe" });
+              execFileSync42(runtime, ["volume", "rm", volName], { stdio: "pipe" });
             }
             removed.push(volName);
           } catch {
@@ -29521,9 +29479,9 @@ async function clean(options) {
         }
         const netName = `semiont-${env}`;
         try {
-          execFileSync41(runtime, ["network", "inspect", netName], { stdio: "ignore" });
+          execFileSync42(runtime, ["network", "inspect", netName], { stdio: "ignore" });
           if (!options.dryRun) {
-            execFileSync41(runtime, ["network", "rm", netName], { stdio: "pipe" });
+            execFileSync42(runtime, ["network", "rm", netName], { stdio: "pipe" });
           }
           removed.push(`network: ${netName}`);
         } catch {
@@ -29656,7 +29614,7 @@ init_base_options_schema();
 init_cli_logger();
 init_config_loader();
 init_preflight_utils();
-import { SemiontProject as SemiontProject22 } from "@semiont/core/node";
+import { SemiontProject as SemiontProject21 } from "@semiont/core/node";
 import { EventBus as EventBus3 } from "@semiont/core";
 import { createEventStore as createEventStore5 } from "@semiont/event-sourcing";
 import { Stower as Stower3, createKnowledgeBase as createKnowledgeBase3 } from "@semiont/make-meaning";
@@ -29732,7 +29690,7 @@ async function runMv(options) {
   if (!options.quiet) {
     printInfo(`Moving resource: ${fromUri} \u2192 ${toUri}`);
   }
-  const project = new SemiontProject22(projectRoot);
+  const project = new SemiontProject21(projectRoot);
   if (project.gitSync && !options.noGit) {
     const gitCheck = checkGitAvailable();
     if (!gitCheck.pass) throw new Error(gitCheck.message);
@@ -29810,7 +29768,7 @@ init_preflight_utils();
 import * as path43 from "path";
 import { promises as nodeFs } from "fs";
 import { createHash } from "crypto";
-import { SemiontProject as SemiontProject23 } from "@semiont/core/node";
+import { SemiontProject as SemiontProject22 } from "@semiont/core/node";
 import { EventBus as EventBus4, resourceId as toResourceId } from "@semiont/core";
 import { createEventStore as createEventStore6 } from "@semiont/event-sourcing";
 import { resolveStorageUri, ResourceNotFoundError } from "@semiont/event-sourcing";
@@ -29902,7 +29860,7 @@ async function runYield(options) {
   if (options.name && options.files.length > 1) {
     throw new Error("--name can only be used when yielding a single file");
   }
-  const project = new SemiontProject23(projectRoot);
+  const project = new SemiontProject22(projectRoot);
   if (project.gitSync && !options.noGit) {
     const gitCheck = checkGitAvailable();
     if (!gitCheck.pass) throw new Error(gitCheck.message);
@@ -30017,7 +29975,7 @@ init_cli_logger();
 init_config_loader();
 init_preflight_utils();
 import * as path44 from "path";
-import { SemiontProject as SemiontProject24 } from "@semiont/core/node";
+import { SemiontProject as SemiontProject23 } from "@semiont/core/node";
 import { EventBus as EventBus5 } from "@semiont/core";
 import { createEventStore as createEventStore7 } from "@semiont/event-sourcing";
 import { resolveStorageUri as resolveStorageUri2, ResourceNotFoundError as ResourceNotFoundError2 } from "@semiont/event-sourcing";
@@ -30086,7 +30044,7 @@ async function runArchive(options) {
   const environment = options.environment;
   const logger = createCliLogger7(options.verbose ?? false);
   const userId = `did:web:localhost:users:${process.env.USER ?? "cli"}`;
-  const project = new SemiontProject24(projectRoot);
+  const project = new SemiontProject23(projectRoot);
   if (project.gitSync && !options.noGit) {
     const gitCheck = checkGitAvailable();
     if (!gitCheck.pass) throw new Error(gitCheck.message);
@@ -30172,7 +30130,7 @@ init_cli_logger();
 init_config_loader();
 import * as path45 from "path";
 import { promises as nodeFs2 } from "fs";
-import { SemiontProject as SemiontProject25 } from "@semiont/core/node";
+import { SemiontProject as SemiontProject24 } from "@semiont/core/node";
 import { EventBus as EventBus6 } from "@semiont/core";
 import { createEventStore as createEventStore8 } from "@semiont/event-sourcing";
 import { resolveStorageUri as resolveStorageUri3, ResourceNotFoundError as ResourceNotFoundError3 } from "@semiont/event-sourcing";
@@ -30239,7 +30197,7 @@ async function runUnarchive(options) {
   const environment = options.environment;
   const logger = createCliLogger8(options.verbose ?? false);
   const userId = `did:web:localhost:users:${process.env.USER ?? "cli"}`;
-  const project = new SemiontProject25(projectRoot);
+  const project = new SemiontProject24(projectRoot);
   const eventBus = new EventBus6();
   const eventStore = createEventStore8(project, eventBus, logger);
   const kb = createKnowledgeBase6(eventStore, project, createNoopGraphDatabase6(), logger);