@semiont/cli 0.4.4 → 0.4.6

package/dist/cli.mjs

@@ -6,16 +6,10 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
-  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
-}) : x)(function(x) {
-  if (typeof require !== "undefined") return require.apply(this, arguments);
-  throw Error('Dynamic require of "' + x + '" is not supported');
-});
 var __esm = (fn, res) => function __init() {
   return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
 };
-var __commonJS = (cb, mod) => function __require2() {
+var __commonJS = (cb, mod) => function __require() {
   return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
 };
 var __export = (target, all) => {
@@ -6891,6 +6885,14 @@ function resolveBackendNpmPackage(projectRoot) {
     return null;
   }
 }
+function resolveBackendEntryPoint(projectRoot) {
+  try {
+    const require2 = createRequire(path9.join(projectRoot, "node_modules", ".package.json"));
+    return require2.resolve("@semiont/backend");
+  } catch {
+    return null;
+  }
+}
 var init_backend_paths = __esm({
   "src/platforms/posix/handlers/backend-paths.ts"() {
     "use strict";
@@ -6900,6 +6902,7 @@ var init_backend_paths = __esm({
 // src/platforms/posix/handlers/backend-check.ts
 import * as fs10 from "fs";
 import * as path10 from "path";
+import { execFileSync as execFileSync8 } from "child_process";
 import { SemiontProject as SemiontProject4 } from "@semiont/core/node";
 import { baseUrl } from "@semiont/core";
 import { SemiontApiClient } from "@semiont/api-client";
@@ -6916,7 +6919,7 @@ var init_backend_check = __esm({
       const config = service.config;
       const projectRoot = service.projectRoot;
       const npmDir = resolveBackendNpmPackage(projectRoot);
-      const entryPoint = npmDir ? path10.join(npmDir, "dist", "index.js") : null;
+      const entryPoint = npmDir ? resolveBackendEntryPoint(projectRoot) ?? path10.join(npmDir, "dist", "index.js") : null;
       const project = new SemiontProject4(projectRoot);
       const pidFile = project.backendPidFile;
       const appLogPath = project.backendAppLogFile;
@@ -6945,10 +6948,10 @@ var init_backend_check = __esm({
         try {
           pid = parseInt(fs10.readFileSync(pidFile, "utf-8"));
           process.kill(pid, 0);
-          status = "running";
+          status = "unhealthy";
           details.pid = pid;
           try {
-            const psOutput = __require("child_process").execFileSync("ps", ["-p", String(pid), "-o", "comm=,rss=,pcpu="], { encoding: "utf-8" }).trim();
+            const psOutput = execFileSync8("ps", ["-p", String(pid), "-o", "comm=,rss=,pcpu="], { encoding: "utf-8" }).trim();
             if (psOutput) {
               const [command, rss, cpu] = psOutput.split(/\s+/);
               details.process = {
@@ -6967,7 +6970,7 @@ var init_backend_check = __esm({
       } else {
         if (savedState?.resources?.platform === "posix" && savedState.resources.data.pid && StateManager.isProcessRunning(savedState.resources.data.pid)) {
           pid = savedState.resources.data.pid;
-          status = "running";
+          status = "unhealthy";
           details.pid = pid;
           details.fromSavedState = true;
         } else {
@@ -6978,39 +6981,27 @@ var init_backend_check = __esm({
           }
         }
       }
-      if (status === "running" || status === "unknown") {
+      if (status === "unhealthy" || status === "unknown") {
         const localUrl = `http://localhost:${config.port}`;
         const client = new SemiontApiClient({ baseUrl: baseUrl(localUrl) });
         try {
           const healthData = await client.healthCheck();
           healthy = true;
+          status = "running";
           details.health = healthData;
           details.message = "Backend is running and healthy";
-          try {
-            const apiResponse = await fetch(`${localUrl}/api`, {
-              signal: AbortSignal.timeout(2e3)
-            });
-            if (apiResponse.ok) {
-              details.apiAvailable = true;
-            }
-          } catch {
-          }
         } catch (error) {
-          if (status === "running") {
-            status = "unhealthy";
-            details.message = "Process is running but health check failed";
-            details.healthError = error.toString();
-          }
+          details.message = "Process is running but health check failed";
+          details.healthError = error.toString();
         }
       }
       let logs;
       if (fs10.existsSync(appLogPath)) {
         try {
-          const { execFileSync: execFileSync43 } = __require("child_process");
-          const recentLogs = execFileSync43("tail", ["-10", appLogPath], { encoding: "utf-8" }).split("\n").filter((line) => line.trim());
+          const recentLogs = execFileSync8("tail", ["-10", appLogPath], { encoding: "utf-8" }).split("\n").filter((line) => line.trim());
           let errorLogs = [];
           if (fs10.existsSync(errorLogPath)) {
-            errorLogs = execFileSync43("tail", ["-5", errorLogPath], { encoding: "utf-8" }).split("\n").filter((line) => line.trim());
+            errorLogs = execFileSync8("tail", ["-5", errorLogPath], { encoding: "utf-8" }).split("\n").filter((line) => line.trim());
           }
           logs = {
             recent: recentLogs,
@@ -7078,6 +7069,14 @@ function resolveFrontendNpmPackage(projectRoot) {
     return null;
   }
 }
+function resolveFrontendServerScript(projectRoot) {
+  try {
+    const require2 = createRequire2(path11.join(projectRoot, "node_modules", ".package.json"));
+    return require2.resolve("@semiont/frontend");
+  } catch {
+    return null;
+  }
+}
 var init_frontend_paths = __esm({
   "src/platforms/posix/handlers/frontend-paths.ts"() {
     "use strict";
@@ -7087,6 +7086,7 @@ var init_frontend_paths = __esm({
 // src/platforms/posix/handlers/frontend-check.ts
 import * as fs11 from "fs";
 import * as path12 from "path";
+import { execFileSync as execFileSync9 } from "child_process";
 import { SemiontProject as SemiontProject5 } from "@semiont/core/node";
 var checkFrontendService, preflightFrontendCheck, frontendCheckDescriptor;
 var init_frontend_check = __esm({
@@ -7101,7 +7101,7 @@ var init_frontend_check = __esm({
       const config = service.config;
       const projectRoot = service.projectRoot;
       const npmDir = resolveFrontendNpmPackage(projectRoot);
-      const serverScript = npmDir ? path12.join(npmDir, "standalone", "apps", "frontend", "server.js") : null;
+      const serverScript = npmDir ? resolveFrontendServerScript(projectRoot) ?? path12.join(npmDir, "server.js") : null;
       const project = new SemiontProject5(projectRoot);
       const pidFile = project.frontendPidFile;
       const appLogPath = project.frontendAppLogFile;
@@ -7130,10 +7130,10 @@ var init_frontend_check = __esm({
         try {
           pid = parseInt(fs11.readFileSync(pidFile, "utf-8"));
           process.kill(pid, 0);
-          status = "running";
+          status = "unhealthy";
           details.pid = pid;
           try {
-            const psOutput = __require("child_process").execFileSync("ps", ["-p", String(pid), "-o", "comm=,rss=,pcpu="], { encoding: "utf-8" }).trim();
+            const psOutput = execFileSync9("ps", ["-p", String(pid), "-o", "comm=,rss=,pcpu="], { encoding: "utf-8" }).trim();
             if (psOutput) {
               const [command, rss, cpu] = psOutput.split(/\s+/);
               details.process = {
@@ -7163,7 +7163,7 @@ var init_frontend_check = __esm({
           }
         }
       }
-      if (status === "running" || status === "unknown") {
+      if (status === "unhealthy" || status === "unknown") {
         const healthUrl = `http://localhost:${config.port}`;
         try {
           const response = await fetch(healthUrl, {
@@ -7173,44 +7173,29 @@ var init_frontend_check = __esm({
           });
           if (response.ok) {
             healthy = true;
+            status = "running";
             details.message = "Frontend is running and healthy";
             details.statusCode = response.status;
             const contentType = response.headers.get("content-type");
             if (contentType?.includes("text/html")) {
-              details.framework = "Next.js";
               details.htmlAvailable = true;
             }
-            try {
-              const apiResponse = await fetch(`${healthUrl}/api/health`, {
-                redirect: "follow",
-                signal: AbortSignal.timeout(2e3)
-              });
-              if (apiResponse.ok) {
-                details.apiRouteAvailable = true;
-              }
-            } catch {
-            }
           } else {
-            status = "unhealthy";
             details.message = `Health check failed with status ${response.status}`;
             details.healthStatus = response.status;
           }
         } catch (error) {
-          if (status === "running") {
-            status = "unhealthy";
-            details.message = "Process is running but health check failed";
-            details.healthError = error.toString();
-          }
+          details.message = "Process is running but health check failed";
+          details.healthError = error.toString();
         }
       }
       let logs;
       if (fs11.existsSync(appLogPath)) {
         try {
-          const { execFileSync: execFileSync43 } = __require("child_process");
-          const recentLogs = execFileSync43("tail", ["-10", appLogPath], { encoding: "utf-8" }).split("\n").filter((line) => line.trim());
+          const recentLogs = execFileSync9("tail", ["-10", appLogPath], { encoding: "utf-8" }).split("\n").filter((line) => line.trim());
           let errorLogs = [];
           if (fs11.existsSync(errorLogPath)) {
-            errorLogs = execFileSync43("tail", ["-5", errorLogPath], { encoding: "utf-8" }).split("\n").filter((line) => line.trim());
+            errorLogs = execFileSync9("tail", ["-5", errorLogPath], { encoding: "utf-8" }).split("\n").filter((line) => line.trim());
           }
           logs = {
             recent: recentLogs,
@@ -7729,8 +7714,8 @@ async function startJanusGraph(context) {
   for (let i = 0; i < maxAttempts; i++) {
     await new Promise((resolve10) => setTimeout(resolve10, 2e3));
     try {
-      const { execFileSync: execFileSync43 } = await import("child_process");
-      execFileSync43(gremlinShellScript, ["-e", "g.V().count()"], {
+      const { execFileSync: execFileSync45 } = await import("child_process");
+      execFileSync45(gremlinShellScript, ["-e", "g.V().count()"], {
         stdio: "ignore",
         timeout: 5e3
       });
@@ -7828,7 +7813,7 @@ var init_graph_start = __esm({
 });
 
 // src/platforms/posix/handlers/backend-start.ts
-import { spawn as spawn4, execFileSync as execFileSync8 } from "child_process";
+import { spawn as spawn4, execFileSync as execFileSync10 } from "child_process";
 import * as fs16 from "fs";
 import * as path16 from "path";
 import { SemiontProject as SemiontProject7 } from "@semiont/core/node";
@@ -7852,7 +7837,7 @@ var init_backend_start = __esm({
           metadata: { serviceType: "backend" }
         };
       }
-      const entryPoint = path16.join(npmDir, "dist", "index.js");
+      const entryPoint = resolveBackendEntryPoint(projectRoot) ?? path16.join(npmDir, "dist", "index.js");
       const project = new SemiontProject7(projectRoot);
       const pidFile = project.backendPidFile;
       const logsDir = project.backendLogsDir;
@@ -7877,10 +7862,12 @@ var init_backend_start = __esm({
         const pid = parseInt(fs16.readFileSync(pidFile, "utf-8"));
         try {
           process.kill(pid, 0);
+          if (!service.quiet) {
+            printInfo(`Backend is already running with PID ${pid}`);
+          }
           return {
-            success: false,
-            error: `Backend is already running with PID ${pid}`,
-            metadata: { serviceType: "backend", pid }
+            success: true,
+            metadata: { serviceType: "backend", pid, alreadyRunning: true }
           };
         } catch {
           fs16.unlinkSync(pidFile);
@@ -7971,7 +7958,7 @@ var init_backend_start = __esm({
           printInfo("Running database migrations...");
         }
         try {
-          execFileSync8("npx", ["prisma", "migrate", "deploy", `--schema=${prismaSchemaPath}`], {
+          execFileSync10("npx", ["prisma", "migrate", "deploy", `--schema=${prismaSchemaPath}`], {
             cwd: packageDir,
             env: { ...process.env, DATABASE_URL: databaseUrl },
             stdio: service.verbose ? "inherit" : "pipe"
@@ -8095,7 +8082,7 @@ var init_backend_start = __esm({
         checks.push(await checkPortFree(config.port));
       }
       if (npmDir) {
-        checks.push(checkFileExists(path16.join(npmDir, "dist", "index.js"), "backend dist/index.js"));
+        checks.push(checkFileExists(resolveBackendEntryPoint(projectRoot) ?? path16.join(npmDir, "dist", "index.js"), "backend dist/index.js"));
       } else {
         checks.push({ name: "backend-npm-package", pass: false, message: "@semiont/backend not installed \u2014 run: semiont provision" });
       }
@@ -8141,7 +8128,7 @@ var init_frontend_start = __esm({
           metadata: { serviceType: "frontend" }
         };
       }
-      const serverScript = path17.join(npmDir, "standalone", "apps", "frontend", "server.js");
+      const serverScript = resolveFrontendServerScript(projectRoot) ?? path17.join(npmDir, "server.js");
       const project = new SemiontProject8(projectRoot);
       const pidFile = project.frontendPidFile;
       const logsDir = project.frontendLogsDir;
@@ -8166,10 +8153,12 @@ var init_frontend_start = __esm({
         const pid = parseInt(fs17.readFileSync(pidFile, "utf-8"));
         try {
           process.kill(pid, 0);
+          if (!service.quiet) {
+            printInfo(`Frontend is already running with PID ${pid}`);
+          }
           return {
-            success: false,
-            error: `Frontend is already running with PID ${pid}`,
-            metadata: { serviceType: "frontend", pid }
+            success: true,
+            metadata: { serviceType: "frontend", pid, alreadyRunning: true }
           };
         } catch {
           fs17.unlinkSync(pidFile);
@@ -8183,8 +8172,6 @@ var init_frontend_start = __esm({
           metadata: { serviceType: "frontend", port }
         };
       }
-      const jwtSecret = readSecret("JWT_SECRET");
-      if (!jwtSecret) throw new Error(`JWT_SECRET not found in ${getSecretsFilePath()} \u2014 run: semiont provision`);
       const envConfig = service.environmentConfig;
       const backendService = envConfig.services["backend"];
       const backendUrl = `http://127.0.0.1:${backendService.port}`;
@@ -8197,20 +8184,12 @@ var init_frontend_start = __esm({
         ...Object.fromEntries(Object.entries(process.env).filter(([, v]) => v !== void 0)),
         NODE_ENV: envConfig.env?.NODE_ENV ?? "development",
         PORT: port.toString(),
-        NEXTAUTH_URL: frontendUrl,
-        SERVER_API_URL: backendUrl,
-        NEXT_PUBLIC_SITE_NAME: config.siteName,
-        NEXT_PUBLIC_BASE_URL: frontendUrl,
-        NEXT_PUBLIC_OAUTH_ALLOWED_DOMAINS: oauthAllowedDomains.join(","),
-        NEXT_PUBLIC_ALLOWED_ORIGINS: allowedOrigins.join(","),
-        LOG_DIR: logsDir,
-        NEXTAUTH_SECRET: jwtSecret
+        SEMIONT_BACKEND_URL: backendUrl,
+        SEMIONT_SITE_NAME: config.siteName,
+        SEMIONT_BASE_URL: frontendUrl,
+        SEMIONT_OAUTH_ALLOWED_DOMAINS: oauthAllowedDomains.join(","),
+        LOG_DIR: logsDir
       };
-      const nextPublicVars = Object.keys(env).filter((k) => k.startsWith("NEXT_PUBLIC_"));
-      if (!service.quiet) {
-        printInfo(`Environment variables: ${nextPublicVars.length} NEXT_PUBLIC_* vars found`);
-        nextPublicVars.forEach((k) => printInfo(`  ${k}=${env[k]}`));
-      }
       fs17.mkdirSync(logsDir, { recursive: true });
       fs17.mkdirSync(path17.dirname(pidFile), { recursive: true });
       const appLogPath = path17.join(logsDir, "app.log");
@@ -8331,16 +8310,13 @@ var init_frontend_start = __esm({
         checks.push(await checkPortFree(config.port));
       }
       if (npmDir) {
-        checks.push(checkFileExists(
-          path17.join(npmDir, "standalone", "apps", "frontend", "server.js"),
-          "frontend server.js"
-        ));
+        const serverScript = resolveFrontendServerScript(projectRoot) ?? path17.join(npmDir, "server.js");
+        checks.push(checkFileExists(serverScript, "frontend server.js"));
       } else {
         checks.push({ name: "frontend-npm-package", pass: false, message: "@semiont/frontend not installed \u2014 run: semiont provision" });
       }
       checks.push(
-        checkFileExists(project.frontendLogsDir, "frontend logs dir (run: semiont provision)"),
-        checkJwtSecretExists()
+        checkFileExists(project.frontendLogsDir, "frontend logs dir (run: semiont provision)")
       );
       return preflightFromChecks(checks);
     };
@@ -8380,10 +8356,12 @@ var init_proxy_start = __esm({
         const pid = parseInt(fs18.readFileSync(paths.pidFile, "utf-8"));
         try {
           process.kill(pid, 0);
+          if (!service.quiet) {
+            printInfo(`Proxy is already running with PID ${pid}`);
+          }
           return {
-            success: false,
-            error: `Proxy is already running with PID ${pid}`,
-            metadata: { serviceType: "proxy", pid }
+            success: true,
+            metadata: { serviceType: "proxy", pid, alreadyRunning: true }
           };
         } catch {
           fs18.unlinkSync(paths.pidFile);
@@ -8664,7 +8642,7 @@ var init_mcp_provision = __esm({
 
 // src/platforms/posix/handlers/graph-provision.ts
 import * as fs20 from "fs/promises";
-import { execFileSync as execFileSync9 } from "child_process";
+import { execFileSync as execFileSync11 } from "child_process";
 async function fileExists2(path46) {
   try {
     await fs20.access(path46);
@@ -8708,7 +8686,7 @@ var init_graph_provision = __esm({
           dataStorageDir
         } = paths;
         try {
-          execFileSync9("java", ["-version"], { stdio: "ignore" });
+          execFileSync11("java", ["-version"], { stdio: "ignore" });
         } catch {
           return {
             success: false,
@@ -8721,9 +8699,9 @@ var init_graph_provision = __esm({
         const downloadUrl = `https://github.com/JanusGraph/janusgraph/releases/download/v${janusgraphVersion}/janusgraph-${janusgraphVersion}.zip`;
         if (!await fileExists2(janusgraphDir)) {
           console.log(`Downloading JanusGraph ${janusgraphVersion}...`);
-          execFileSync9("curl", ["-L", "-o", zipPath, downloadUrl], { stdio: "inherit" });
+          execFileSync11("curl", ["-L", "-o", zipPath, downloadUrl], { stdio: "inherit" });
           console.log("Extracting JanusGraph...");
-          execFileSync9("unzip", ["-q", zipPath, "-d", dataDir], { stdio: "inherit" });
+          execFileSync11("unzip", ["-q", zipPath, "-d", dataDir], { stdio: "inherit" });
           await fs20.unlink(zipPath);
         }
         let graphProperties = `
@@ -8852,7 +8830,7 @@ ssl: {
 import * as fs21 from "fs";
 import * as path18 from "path";
 import * as crypto from "crypto";
-import { execFileSync as execFileSync10 } from "child_process";
+import { execFileSync as execFileSync12 } from "child_process";
 import { SemiontProject as SemiontProject9 } from "@semiont/core/node";
 var SEMIONT_VERSION, provisionBackendService, preflightBackendProvision, backendProvisionDescriptor;
 var init_backend_provision = __esm({
@@ -8861,7 +8839,7 @@ var init_backend_provision = __esm({
     init_cli_logger();
     init_backend_paths();
     init_preflight_utils();
-    SEMIONT_VERSION = "0.4.4";
+    SEMIONT_VERSION = "0.4.6";
     provisionBackendService = async (context) => {
       const { service, options } = context;
       const projectRoot = service.projectRoot;
@@ -8870,7 +8848,7 @@ var init_backend_provision = __esm({
         printInfo(`Installing ${packageSpec}...`);
       }
       try {
-        execFileSync10("npm", ["install", packageSpec, "--prefix", projectRoot], {
+        execFileSync12("npm", ["install", packageSpec, "--prefix", projectRoot], {
           cwd: projectRoot,
           stdio: service.verbose ? "inherit" : "pipe"
         });
@@ -8892,7 +8870,7 @@ var init_backend_provision = __esm({
           metadata: { serviceType: "backend" }
         };
       }
-      const entryPoint = path18.join(npmDir, "dist", "index.js");
+      const entryPoint = resolveBackendEntryPoint(projectRoot) ?? path18.join(npmDir, "dist", "index.js");
       const project = new SemiontProject9(projectRoot);
       if (!service.quiet) {
         printInfo(`Provisioning backend service ${service.name}...`);
@@ -8931,7 +8909,7 @@ var init_backend_provision = __esm({
           printInfo("Generating Prisma client...");
         }
         try {
-          execFileSync10("npx", ["prisma", "generate", `--schema=${prismaSchemaPath}`], {
+          execFileSync12("npx", ["prisma", "generate", `--schema=${prismaSchemaPath}`], {
             cwd: packageDir,
             stdio: service.verbose ? "inherit" : "pipe"
           });
@@ -9003,8 +8981,7 @@ var init_backend_provision = __esm({
 // src/platforms/posix/handlers/frontend-provision.ts
 import * as fs22 from "fs";
 import * as path19 from "path";
-import * as crypto2 from "crypto";
-import { execFileSync as execFileSync11 } from "child_process";
+import { execFileSync as execFileSync13 } from "child_process";
 import { SemiontProject as SemiontProject10 } from "@semiont/core/node";
 var SEMIONT_VERSION2, provisionFrontendService, preflightFrontendProvision, frontendProvisionDescriptor;
 var init_frontend_provision = __esm({
@@ -9013,16 +8990,16 @@ var init_frontend_provision = __esm({
     init_cli_logger();
     init_frontend_paths();
     init_preflight_utils();
-    SEMIONT_VERSION2 = "0.4.4";
+    SEMIONT_VERSION2 = "0.4.6";
     provisionFrontendService = async (context) => {
-      const { service, options } = context;
+      const { service } = context;
       const projectRoot = service.projectRoot;
       const packageSpec = `@semiont/frontend@${SEMIONT_VERSION2}`;
       if (!service.quiet) {
         printInfo(`Installing ${packageSpec}...`);
       }
       try {
-        execFileSync11("npm", ["install", packageSpec, "--prefix", projectRoot], {
+        execFileSync13("npm", ["install", packageSpec, "--prefix", projectRoot], {
           cwd: projectRoot,
           stdio: service.verbose ? "inherit" : "pipe"
         });
@@ -9044,7 +9021,7 @@ var init_frontend_provision = __esm({
           metadata: { serviceType: "frontend" }
         };
       }
-      const serverScript = path19.join(npmDir, "standalone", "apps", "frontend", "server.js");
+      const serverScript = path19.join(npmDir, "server.js");
       const project = new SemiontProject10(projectRoot);
       if (!service.quiet) {
         printInfo(`Provisioning frontend service ${service.name}...`);
@@ -9055,14 +9032,6 @@ var init_frontend_provision = __esm({
       if (!service.quiet) {
         printInfo(`Created runtime directories in: ${project.frontendLogsDir}`);
       }
-      let nextAuthSecret = options.rotateSecret ? void 0 : readSecret("JWT_SECRET");
-      if (!nextAuthSecret) {
-        nextAuthSecret = crypto2.randomBytes(32).toString("base64");
-        writeSecret("JWT_SECRET", nextAuthSecret);
-        printInfo(options.rotateSecret ? "Generated new JWT_SECRET (--rotate-secret)" : "Generated new JWT_SECRET");
-      } else {
-        printInfo("Using existing JWT_SECRET from secrets file");
-      }
       if (!service.quiet) {
         printInfo("Using pre-built npm package \u2014 skipping install, build, and workspace steps");
       }
@@ -9409,7 +9378,7 @@ var init_graph_stop = __esm({
 });
 
 // src/platforms/posix/utils/process-manager.ts
-import { execFileSync as execFileSync12 } from "child_process";
+import { execFileSync as execFileSync14 } from "child_process";
 async function killProcessGroupAndRelated(pid, serviceType, verbose = false) {
   let killed = false;
   try {
@@ -9449,7 +9418,7 @@ async function killProcessGroupAndRelated(pid, serviceType, verbose = false) {
     try {
       for (const pattern of cleanupPatterns.patterns) {
         try {
-          execFileSync12("pkill", ["-f", pattern], { stdio: "ignore" });
+          execFileSync14("pkill", ["-f", pattern], { stdio: "ignore" });
         } catch {
         }
       }
@@ -9526,7 +9495,7 @@ var init_backend_stop = __esm({
       const { service } = context;
       const projectRoot = service.projectRoot;
       const npmDir = resolveBackendNpmPackage(projectRoot);
-      const entryPoint = npmDir ? path22.join(npmDir, "dist", "index.js") : null;
+      const entryPoint = npmDir ? resolveBackendEntryPoint(projectRoot) ?? path22.join(npmDir, "dist", "index.js") : null;
       const project = new SemiontProject11(projectRoot);
       const pidFile = project.backendPidFile;
       const appLogPath = project.backendAppLogFile;
@@ -10257,12 +10226,12 @@ var init_inference_stop = __esm({
 
 // src/platforms/posix/handlers/inference-provision.ts
 import * as fs30 from "fs";
-import { execFileSync as execFileSync13 } from "child_process";
+import { execFileSync as execFileSync15 } from "child_process";
 function detectGpu() {
   const platform = process.platform;
   if (platform === "darwin") {
     try {
-      const brand = execFileSync13("sysctl", ["-n", "machdep.cpu.brand_string"], {
+      const brand = execFileSync15("sysctl", ["-n", "machdep.cpu.brand_string"], {
         encoding: "utf-8"
       }).trim();
       if (brand.includes("Apple")) {
@@ -10274,7 +10243,7 @@ function detectGpu() {
     }
   }
   try {
-    const gpuName = execFileSync13("nvidia-smi", ["--query-gpu=name", "--format=csv,noheader"], {
+    const gpuName = execFileSync15("nvidia-smi", ["--query-gpu=name", "--format=csv,noheader"], {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "ignore"]
     }).trim();
@@ -10284,7 +10253,7 @@ function detectGpu() {
   } catch {
   }
   try {
-    const output = execFileSync13("rocm-smi", ["--showproductname"], {
+    const output = execFileSync15("rocm-smi", ["--showproductname"], {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "ignore"]
     }).trim();
@@ -10320,7 +10289,7 @@ var init_inference_provision = __esm({
           printInfo(`Pulling model ${model}...`);
         }
         try {
-          execFileSync13("ollama", ["pull", model], {
+          execFileSync15("ollama", ["pull", model], {
             stdio: service.quiet ? "ignore" : "inherit"
           });
           pulledModels.push(model);
@@ -10437,7 +10406,7 @@ var init_handlers = __esm({
 });
 
 // src/platforms/posix/platform.ts
-import { execFileSync as execFileSync14 } from "child_process";
+import { execFileSync as execFileSync16 } from "child_process";
 import * as fs31 from "fs";
 import * as path25 from "path";
 var PosixPlatform;
@@ -10527,7 +10496,7 @@ var init_platform2 = __esm({
         try {
           if (process.platform === "darwin") {
             try {
-              const output = execFileSync14(
+              const output = execFileSync16(
                 "log",
                 ["show", "--process", String(pid), "--last", `${tail}m`, "--style", "json"],
                 { encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"] }
@@ -10549,7 +10518,7 @@ var init_platform2 = __esm({
             }
           } else {
             try {
-              const output = execFileSync14(
+              const output = execFileSync16(
                 "journalctl",
                 [`_PID=${pid}`, "-n", String(tail), "--no-pager", "--output=json"],
                 { encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"] }
@@ -10656,13 +10625,13 @@ var init_platform2 = __esm({
       tailFile(filePath, lines) {
         try {
           if (process.platform === "win32") {
-            return execFileSync14(
+            return execFileSync16(
               "powershell",
               ["-Command", `Get-Content '${filePath}' -Tail ${lines}`],
               { encoding: "utf-8" }
             );
           } else {
-            return execFileSync14(
+            return execFileSync16(
               "tail",
               ["-n", String(lines), filePath],
               { encoding: "utf-8" }
@@ -10725,7 +10694,7 @@ var init_platform2 = __esm({
 });
 
 // src/platforms/container/handlers/web-check.ts
-import { execFileSync as execFileSync15 } from "child_process";
+import { execFileSync as execFileSync17 } from "child_process";
 import { baseUrl as baseUrl2 } from "@semiont/core";
 import { SemiontApiClient as SemiontApiClient2 } from "@semiont/api-client";
 var checkWebContainer, preflightWebCheck, webCheckDescriptor;
@@ -10737,7 +10706,7 @@ var init_web_check = __esm({
       const { platform, service, runtime, containerName } = context;
       const config = service.config;
       try {
-        const containerStatus = execFileSync15(
+        const containerStatus = execFileSync17(
           runtime,
           ["inspect", containerName, "--format", "{{.State.Status}}"],
           { encoding: "utf-8" }
@@ -10753,14 +10722,14 @@ var init_web_check = __esm({
             metadata: { containerStatus }
           };
         }
-        const containerId = execFileSync15(
+        const containerId = execFileSync17(
           runtime,
           ["inspect", containerName, "--format", "{{.Id}}"],
           { encoding: "utf-8" }
         ).trim().substring(0, 12);
         let dockerHealthStatus;
         try {
-          dockerHealthStatus = execFileSync15(
+          dockerHealthStatus = execFileSync17(
             runtime,
             ["inspect", containerName, "--format", "{{.State.Health.Status}}"],
             { encoding: "utf-8" }
@@ -10901,7 +10870,7 @@ var init_web_check = __esm({
 });
 
 // src/platforms/container/handlers/database-check.ts
-import { execFileSync as execFileSync16 } from "child_process";
+import { execFileSync as execFileSync18 } from "child_process";
 var checkDatabaseContainer, preflightDatabaseCheck2, databaseCheckDescriptor2;
 var init_database_check2 = __esm({
   "src/platforms/container/handlers/database-check.ts"() {
@@ -10911,7 +10880,7 @@ var init_database_check2 = __esm({
       const { platform, service, runtime, containerName } = context;
       const config = service.config;
       try {
-        const containerStatus = execFileSync16(
+        const containerStatus = execFileSync18(
           runtime,
           ["inspect", containerName, "--format", "{{.State.Status}}"],
           { encoding: "utf-8" }
@@ -10927,7 +10896,7 @@ var init_database_check2 = __esm({
             metadata: { containerStatus }
           };
         }
-        const containerId = execFileSync16(
+        const containerId = execFileSync18(
           runtime,
           ["inspect", containerName, "--format", "{{.Id}}"],
           { encoding: "utf-8" }
@@ -10946,13 +10915,13 @@ var init_database_check2 = __esm({
         const port = config.port;
         try {
           try {
-            execFileSync16(
+            execFileSync18(
               runtime,
               ["exec", containerName, "sh", "-c", `netstat -ln | grep :${port}`],
               { encoding: "utf-8" }
             );
           } catch {
-            execFileSync16(
+            execFileSync18(
               runtime,
               ["exec", containerName, "sh", "-c", `nc -z localhost ${port}`],
               { encoding: "utf-8" }
@@ -11023,7 +10992,7 @@ var init_database_check2 = __esm({
 });
 
 // src/platforms/container/handlers/graph-check.ts
-import { execFileSync as execFileSync17 } from "child_process";
+import { execFileSync as execFileSync19 } from "child_process";
 function getGraphEndpoint2(graphType, port) {
   const host = "localhost";
   switch (graphType) {
@@ -11048,7 +11017,7 @@ var init_graph_check2 = __esm({
       const config = service.config;
       const graphType = config.type;
       try {
-        const containerStatus = execFileSync17(
+        const containerStatus = execFileSync19(
           runtime,
           ["inspect", containerName, "--format", "{{.State.Status}}"],
           { encoding: "utf-8" }
@@ -11068,12 +11037,12 @@ var init_graph_check2 = __esm({
             }
           };
         }
-        const containerId = execFileSync17(
+        const containerId = execFileSync19(
           runtime,
           ["inspect", containerName, "--format", "{{.Id}}"],
           { encoding: "utf-8" }
         ).trim();
-        const portsOutput = execFileSync17(
+        const portsOutput = execFileSync19(
           runtime,
           ["port", containerName],
           { encoding: "utf-8" }
@@ -11099,7 +11068,7 @@ var init_graph_check2 = __esm({
             case "janusgraph":
             case "neptune":
               try {
-                execFileSync17(
+                execFileSync19(
                   runtime,
                   ["exec", containerName, "sh", "-c", `echo 'test' | nc -w 1 localhost ${port}`],
                   { encoding: "utf-8", timeout: 5e3, stdio: "pipe" }
@@ -11107,12 +11076,12 @@ var init_graph_check2 = __esm({
                 isHealthy = true;
                 if (graphType === "janusgraph") {
                   try {
-                    const cassandraRunning = execFileSync17(
+                    const cassandraRunning = execFileSync19(
                       runtime,
                       ["ps", "--filter", "name=semiont-cassandra", "--format", "{{.Names}}"],
                       { encoding: "utf-8", stdio: "pipe" }
                     ).trim().includes("semiont-cassandra");
-                    const elasticsearchRunning = execFileSync17(
+                    const elasticsearchRunning = execFileSync19(
                       runtime,
                       ["ps", "--filter", "name=semiont-elasticsearch", "--format", "{{.Names}}"],
                       { encoding: "utf-8", stdio: "pipe" }
@@ -11135,7 +11104,7 @@ var init_graph_check2 = __esm({
                   }
                 }
               } catch {
-                const processes = execFileSync17(
+                const processes = execFileSync19(
                   runtime,
                   ["exec", containerName, "ps", "aux"],
                   { encoding: "utf-8", stdio: "pipe" }
@@ -11147,11 +11116,11 @@ var init_graph_check2 = __esm({
               }
               break;
             case "neo4j":
-              execFileSync17("nc", ["-z", "localhost", String(port)], { timeout: 5e3 });
+              execFileSync19("nc", ["-z", "localhost", String(port)], { timeout: 5e3 });
               isHealthy = true;
               break;
             case "arangodb":
-              const httpCode = execFileSync17(
+              const httpCode = execFileSync19(
                 "curl",
                 ["-s", "-o", "/dev/null", "-w", "%{http_code}", `http://localhost:${port}/_api/version`],
                 { encoding: "utf-8", timeout: 5e3 }
@@ -11159,7 +11128,7 @@ var init_graph_check2 = __esm({
               isHealthy = httpCode === "200";
               break;
             default:
-              execFileSync17("nc", ["-z", "localhost", String(port)], { timeout: 5e3 });
+              execFileSync19("nc", ["-z", "localhost", String(port)], { timeout: 5e3 });
               isHealthy = true;
           }
         } catch (healthCheckError) {
@@ -11168,7 +11137,7 @@ var init_graph_check2 = __esm({
         }
         let logs;
         try {
-          const logOutput = execFileSync17(
+          const logOutput = execFileSync19(
             runtime,
             ["logs", containerName, "--tail", "20"],
             { encoding: "utf-8", maxBuffer: 1024 * 1024 }
@@ -11182,7 +11151,7 @@ var init_graph_check2 = __esm({
           };
         } catch (logError) {
         }
-        const image = execFileSync17(
+        const image = execFileSync19(
           runtime,
           ["inspect", containerName, "--format", "{{.Config.Image}}"],
           { encoding: "utf-8" }
@@ -11268,13 +11237,13 @@ var init_platform_resources = __esm({
 });
 
 // src/platforms/container/handlers/web-start.ts
-import { execFileSync as execFileSync18 } from "child_process";
+import { execFileSync as execFileSync20 } from "child_process";
 async function waitForContainer(runtime, containerName) {
   const maxAttempts = 30;
   let attempts = 0;
   while (attempts < maxAttempts) {
     try {
-      const status = execFileSync18(
+      const status = execFileSync20(
         runtime,
         ["inspect", containerName, "--format", "{{.State.Status}}"],
         { encoding: "utf-8" }
@@ -11301,12 +11270,12 @@ var init_web_start = __esm({
       const config = service.config;
       const image = service.getImage();
       try {
-        execFileSync18(runtime, ["rm", "-f", containerName], { stdio: "ignore" });
+        execFileSync20(runtime, ["rm", "-f", containerName], { stdio: "ignore" });
       } catch {
       }
       const networkName = `semiont-${service.environment}`;
       try {
-        execFileSync18(runtime, ["network", "create", networkName], { stdio: "ignore" });
+        execFileSync20(runtime, ["network", "create", networkName], { stdio: "ignore" });
       } catch {
       }
       const runArgs = [
@@ -11339,7 +11308,7 @@ var init_web_start = __esm({
         printInfo(`Starting web container: ${containerName}`);
       }
       try {
-        const containerId = execFileSync18(runtime, runArgs, { encoding: "utf-8" }).trim();
+        const containerId = execFileSync20(runtime, runArgs, { encoding: "utf-8" }).trim();
         await waitForContainer(runtime, containerName);
         const endpoint = `http://localhost:${port}`;
         return {
@@ -11390,7 +11359,7 @@ var init_web_start = __esm({
 });
 
 // src/platforms/container/handlers/database-start.ts
-import { execFileSync as execFileSync19 } from "child_process";
+import { execFileSync as execFileSync21 } from "child_process";
 async function waitForDatabase(runtime, containerName, image, quiet, dbUser, verbose) {
   const maxAttempts = 15;
   let attempts = 0;
@@ -11398,7 +11367,7 @@ async function waitForDatabase(runtime, containerName, image, quiet, dbUser, ver
   const skipHealthCheck = process.env.SKIP_DB_HEALTH_CHECK === "true";
   if (skipHealthCheck) {
     try {
-      const status = execFileSync19(
+      const status = execFileSync21(
         runtime,
         ["inspect", containerName, "--format", "{{.State.Status}}"],
         { encoding: "utf-8", timeout: 5e3 }
@@ -11413,7 +11382,7 @@ async function waitForDatabase(runtime, containerName, image, quiet, dbUser, ver
   }
   while (attempts < maxAttempts) {
     try {
-      const status = execFileSync19(
+      const status = execFileSync21(
         runtime,
         ["inspect", containerName, "--format", "{{.State.Status}}"],
         { encoding: "utf-8", timeout: 5e3 }
@@ -11433,7 +11402,7 @@ async function waitForDatabase(runtime, containerName, image, quiet, dbUser, ver
             if (verbose) {
               printInfo(`Checking PostgreSQL readiness with user '${dbUser}'...`);
             }
-            execFileSync19(runtime, ["exec", containerName, "pg_isready", "-U", dbUser, "-t", "1"], {
+            execFileSync21(runtime, ["exec", containerName, "pg_isready", "-U", dbUser, "-t", "1"], {
               stdio: verbose ? "inherit" : "ignore",
               timeout: 5e3
             });
@@ -11449,7 +11418,7 @@ async function waitForDatabase(runtime, containerName, image, quiet, dbUser, ver
           }
         } else if (image.includes("mysql")) {
           try {
-            execFileSync19(runtime, ["exec", containerName, "mysqladmin", "ping", "-h", "localhost"], {
+            execFileSync21(runtime, ["exec", containerName, "mysqladmin", "ping", "-h", "localhost"], {
               stdio: "ignore",
               timeout: 5e3
             });
@@ -11458,7 +11427,7 @@ async function waitForDatabase(runtime, containerName, image, quiet, dbUser, ver
           }
         } else if (image.includes("mongo")) {
           try {
-            execFileSync19(runtime, ["exec", containerName, "mongosh", "--eval", "db.adminCommand('ping')"], {
+            execFileSync21(runtime, ["exec", containerName, "mongosh", "--eval", "db.adminCommand('ping')"], {
               stdio: "ignore",
               timeout: 5e3
             });
@@ -11492,12 +11461,12 @@ var init_database_start2 = __esm({
       const config = service.config;
       const image = service.getImage();
       try {
-        execFileSync19(runtime, ["rm", "-f", containerName], { stdio: "ignore" });
+        execFileSync21(runtime, ["rm", "-f", containerName], { stdio: "ignore" });
       } catch {
       }
       const networkName = `semiont-${service.environment}`;
       try {
-        execFileSync19(runtime, ["network", "create", networkName], { stdio: "ignore" });
+        execFileSync21(runtime, ["network", "create", networkName], { stdio: "ignore" });
       } catch {
       }
       const runArgs = [
@@ -11519,7 +11488,7 @@ var init_database_start2 = __esm({
       }
       const volumeName = `${containerName}-data`;
       try {
-        execFileSync19(runtime, ["volume", "create", volumeName], { stdio: "ignore" });
+        execFileSync21(runtime, ["volume", "create", volumeName], { stdio: "ignore" });
       } catch {
       }
       const mountPath = image.includes("postgres") ? "/var/lib/postgresql/data" : image.includes("mysql") ? "/var/lib/mysql" : image.includes("mongo") ? "/data/db" : "/data";
@@ -11545,7 +11514,7 @@ var init_database_start2 = __esm({
         printInfo(`Run command: ${runtime} ${runArgs.join(" ")}`);
       }
       try {
-        const containerId = execFileSync19(runtime, runArgs, { encoding: "utf-8" }).trim();
+        const containerId = execFileSync21(runtime, runArgs, { encoding: "utf-8" }).trim();
         const dbUser = envVars.POSTGRES_USER || envVars.MYSQL_USER || envVars.MONGO_INITDB_ROOT_USERNAME;
         await waitForDatabase(runtime, containerName, image, service.quiet, dbUser, context.options.verbose);
         const endpoint = `localhost:${port}`;
@@ -11601,7 +11570,7 @@ var init_database_start2 = __esm({
 // src/platforms/container/handlers/graph-start.ts
 import * as fs32 from "fs/promises";
 import * as path26 from "path";
-import { execFileSync as execFileSync20 } from "child_process";
+import { execFileSync as execFileSync22 } from "child_process";
 async function startJanusGraph2(context) {
   const { service, runtime, containerName } = context;
   const composePath = path26.join(service.projectRoot, "docker-compose.janusgraph.yml");
@@ -11613,7 +11582,7 @@ async function startJanusGraph2(context) {
     };
   }
   try {
-    const output = execFileSync20(runtime, ["ps", "--format", "{{.Names}}"], { encoding: "utf-8" });
+    const output = execFileSync22(runtime, ["ps", "--format", "{{.Names}}"], { encoding: "utf-8" });
     if (output.includes(containerName)) {
       if (!service.quiet) {
         printWarning("JanusGraph container is already running");
@@ -11634,7 +11603,7 @@ async function startJanusGraph2(context) {
     if (!service.quiet) {
       printInfo("Starting JanusGraph Docker stack...");
     }
-    execFileSync20("docker-compose", ["-f", composePath, "up", "-d"], {
+    execFileSync22("docker-compose", ["-f", composePath, "up", "-d"], {
       stdio: service.quiet ? "ignore" : "inherit"
     });
     if (!service.quiet) {
@@ -11644,13 +11613,13 @@ async function startJanusGraph2(context) {
     const maxAttempts = 20;
     for (let i = 0; i < maxAttempts; i++) {
       try {
-        const status = execFileSync20(
+        const status = execFileSync22(
           runtime,
           ["inspect", containerName, "--format", "{{.State.Status}}"],
           { encoding: "utf-8", stdio: "pipe" }
         ).trim();
         if (status === "running") {
-          const logs = execFileSync20(
+          const logs = execFileSync22(
             runtime,
             ["logs", "--tail", "20", containerName],
             { encoding: "utf-8", stdio: "pipe" }
@@ -11670,7 +11639,7 @@ async function startJanusGraph2(context) {
     }
     if (!ready) {
       try {
-        const finalStatus = execFileSync20(
+        const finalStatus = execFileSync22(
           runtime,
           ["inspect", containerName, "--format", "{{.State.Status}}"],
           { encoding: "utf-8", stdio: "pipe" }
@@ -11685,14 +11654,14 @@ async function startJanusGraph2(context) {
       }
     }
     if (!ready) {
-      execFileSync20("docker-compose", ["-f", composePath, "down"], { stdio: "ignore" });
+      execFileSync22("docker-compose", ["-f", composePath, "down"], { stdio: "ignore" });
       return {
         success: false,
         error: "JanusGraph failed to start within timeout",
         metadata: { serviceType: "graph", serviceName: "janusgraph" }
       };
     }
-    const runningContainers = execFileSync20(runtime, ["ps", "--format", "{{.Names}}"], { encoding: "utf-8" });
+    const runningContainers = execFileSync22(runtime, ["ps", "--format", "{{.Names}}"], { encoding: "utf-8" });
     const hasCassandra = runningContainers.includes("semiont-cassandra");
     const hasElasticsearch = runningContainers.includes("semiont-elasticsearch");
     if (!service.quiet) {
@@ -11779,7 +11748,7 @@ var init_graph_start2 = __esm({
 });
 
 // src/platforms/container/handlers/database-provision.ts
-import { execFileSync as execFileSync21 } from "child_process";
+import { execFileSync as execFileSync23 } from "child_process";
 import * as fs33 from "fs";
 import * as path27 from "path";
 var provisionDatabaseContainer, preflightDatabaseProvision, databaseProvisionDescriptor;
@@ -11795,12 +11764,12 @@ var init_database_provision = __esm({
       }
       const networkName = `semiont-${service.environment}`;
       try {
-        execFileSync21(runtime, ["network", "create", networkName], { stdio: "ignore" });
+        execFileSync23(runtime, ["network", "create", networkName], { stdio: "ignore" });
       } catch {
       }
       const volumeName = `${containerName}-data`;
       try {
-        execFileSync21(runtime, ["volume", "create", volumeName], { stdio: "ignore" });
+        execFileSync23(runtime, ["volume", "create", volumeName], { stdio: "ignore" });
         if (!service.quiet) {
           printInfo(`Created volume: ${volumeName}`);
         }
@@ -11811,7 +11780,7 @@ var init_database_provision = __esm({
         printInfo(`Pulling database image ${image}...`);
       }
       try {
-        execFileSync21(runtime, ["pull", image], {
+        execFileSync23(runtime, ["pull", image], {
           stdio: service.verbose ? "inherit" : "pipe"
         });
       } catch (error) {
@@ -11828,7 +11797,7 @@ var init_database_provision = __esm({
       const dbUser = envVars.POSTGRES_USER || envVars.MYSQL_USER;
       let containerRunning = false;
       try {
-        const status = execFileSync21(
+        const status = execFileSync23(
           runtime,
           ["inspect", containerName, "--format", "{{.State.Status}}"],
           { encoding: "utf-8", stdio: "pipe" }
@@ -11859,7 +11828,7 @@ var init_database_provision = __esm({
         }
         runArgs.push(image);
         try {
-          execFileSync21(runtime, runArgs, { encoding: "utf-8" });
+          execFileSync23(runtime, runArgs, { encoding: "utf-8" });
           if (!service.quiet) {
             printInfo("Waiting for database to be ready...");
           }
@@ -11868,10 +11837,10 @@ var init_database_provision = __esm({
           while (attempts < maxAttempts) {
             try {
               if (image.includes("postgres")) {
-                execFileSync21(runtime, ["exec", initContainerName, "pg_isready", "-U", dbUser || "postgres"], { stdio: "ignore" });
+                execFileSync23(runtime, ["exec", initContainerName, "pg_isready", "-U", dbUser || "postgres"], { stdio: "ignore" });
                 break;
               } else if (image.includes("mysql")) {
-                execFileSync21(runtime, ["exec", initContainerName, "mysqladmin", "ping", "-h", "localhost"], { stdio: "ignore" });
+                execFileSync23(runtime, ["exec", initContainerName, "mysqladmin", "ping", "-h", "localhost"], { stdio: "ignore" });
                 break;
               }
             } catch {
@@ -11888,15 +11857,15 @@ var init_database_provision = __esm({
           if (hasSeedData && !service.quiet) {
             printInfo("Seed data found in db/seed - this should be loaded by your application");
           }
-          execFileSync21(runtime, ["stop", initContainerName], { stdio: "ignore" });
-          execFileSync21(runtime, ["rm", initContainerName], { stdio: "ignore" });
+          execFileSync23(runtime, ["stop", initContainerName], { stdio: "ignore" });
+          execFileSync23(runtime, ["rm", initContainerName], { stdio: "ignore" });
           if (!service.quiet) {
             printSuccess("Database initialized successfully");
           }
         } catch (error) {
           try {
-            execFileSync21(runtime, ["stop", initContainerName], { stdio: "ignore" });
-            execFileSync21(runtime, ["rm", initContainerName], { stdio: "ignore" });
+            execFileSync23(runtime, ["stop", initContainerName], { stdio: "ignore" });
+            execFileSync23(runtime, ["rm", initContainerName], { stdio: "ignore" });
           } catch {
           }
           return {
@@ -14573,7 +14542,7 @@ var init_js_yaml = __esm({
 // src/platforms/container/handlers/graph-provision.ts
 import * as fs34 from "fs/promises";
 import * as path28 from "path";
-import { execFileSync as execFileSync22 } from "child_process";
+import { execFileSync as execFileSync24 } from "child_process";
 var provisionGraphService2, preflightGraphProvision2, graphProvisionDescriptor2;
 var init_graph_provision2 = __esm({
   "src/platforms/container/handlers/graph-provision.ts"() {
@@ -14602,7 +14571,7 @@ var init_graph_provision2 = __esm({
         const withCassandra = storage === "cassandra";
         const networkName = "semiont-network";
         try {
-          execFileSync22(runtime, ["--version"], { stdio: "ignore" });
+          execFileSync24(runtime, ["--version"], { stdio: "ignore" });
         } catch {
           return {
             success: false,
@@ -14611,14 +14580,14 @@ var init_graph_provision2 = __esm({
           };
         }
         try {
-          execFileSync22(runtime, ["network", "create", networkName], { stdio: "ignore" });
+          execFileSync24(runtime, ["network", "create", networkName], { stdio: "ignore" });
         } catch {
         }
         if (!service.quiet) {
           printInfo("Pulling required Docker images...");
         }
         try {
-          execFileSync22(runtime, ["pull", "janusgraph/janusgraph:1.0.0"], {
+          execFileSync24(runtime, ["pull", "janusgraph/janusgraph:1.0.0"], {
             stdio: service.verbose ? "inherit" : "pipe"
           });
         } catch (error) {
@@ -14626,7 +14595,7 @@ var init_graph_provision2 = __esm({
         }
         if (withCassandra) {
           try {
-            execFileSync22(runtime, ["pull", "cassandra:4"], {
+            execFileSync24(runtime, ["pull", "cassandra:4"], {
               stdio: service.verbose ? "inherit" : "pipe"
             });
           } catch (error) {
@@ -14635,7 +14604,7 @@ var init_graph_provision2 = __esm({
         }
         if (withElasticsearch) {
           try {
-            execFileSync22(runtime, ["pull", "docker.elastic.co/elasticsearch/elasticsearch:7.17.10"], {
+            execFileSync24(runtime, ["pull", "docker.elastic.co/elasticsearch/elasticsearch:7.17.10"], {
               stdio: service.verbose ? "inherit" : "pipe"
             });
           } catch (error) {
@@ -14784,7 +14753,7 @@ var init_graph_provision2 = __esm({
 
 // src/platforms/container/handlers/graph-stop.ts
 import * as path29 from "path";
-import { execFileSync as execFileSync23 } from "child_process";
+import { execFileSync as execFileSync25 } from "child_process";
 import * as fs35 from "fs/promises";
 async function stopJanusGraph2(context) {
   const { service, runtime, options, containerName } = context;
@@ -14804,7 +14773,7 @@ async function stopJanusGraph2(context) {
   }
   let runningContainers = [];
   try {
-    const output = execFileSync23(runtime, ["ps", "--format", "{{.Names}}"], { encoding: "utf-8" });
+    const output = execFileSync25(runtime, ["ps", "--format", "{{.Names}}"], { encoding: "utf-8" });
     const containerNames = [containerName, "semiont-cassandra", "semiont-elasticsearch"];
     runningContainers = containerNames.filter((name) => output.includes(name));
     if (runningContainers.length === 0) {
@@ -14833,10 +14802,10 @@ async function stopJanusGraph2(context) {
       if (!service.quiet) {
         printInfo("Force stopping JanusGraph Docker stack...");
       }
-      execFileSync23("docker-compose", ["-f", composePath, "kill"], {
+      execFileSync25("docker-compose", ["-f", composePath, "kill"], {
         stdio: service.quiet ? "ignore" : "inherit"
       });
-      execFileSync23("docker-compose", ["-f", composePath, "down"], {
+      execFileSync25("docker-compose", ["-f", composePath, "down"], {
         stdio: service.quiet ? "ignore" : "inherit"
       });
       if (!service.quiet) {
@@ -14856,10 +14825,10 @@ async function stopJanusGraph2(context) {
       if (!service.quiet) {
         printInfo(`Stopping JanusGraph Docker stack gracefully (timeout: ${options.timeout}s)...`);
       }
-      execFileSync23("docker-compose", ["-f", composePath, "stop", "-t", options.timeout.toString()], {
+      execFileSync25("docker-compose", ["-f", composePath, "stop", "-t", options.timeout.toString()], {
         stdio: service.quiet ? "ignore" : "inherit"
       });
-      execFileSync23("docker-compose", ["-f", composePath, "down"], {
+      execFileSync25("docker-compose", ["-f", composePath, "down"], {
         stdio: service.quiet ? "ignore" : "inherit"
       });
       if (!service.quiet) {
@@ -14930,7 +14899,7 @@ var init_graph_stop2 = __esm({
 });
 
 // src/platforms/container/handlers/database-stop.ts
-import { execFileSync as execFileSync24 } from "child_process";
+import { execFileSync as execFileSync26 } from "child_process";
 var stopDatabaseContainer, preflightDatabaseStop, databaseStopDescriptor;
 var init_database_stop = __esm({
   "src/platforms/container/handlers/database-stop.ts"() {
@@ -14939,12 +14908,12 @@ var init_database_stop = __esm({
     init_preflight_utils();
     stopDatabaseContainer = async (context) => {
       const { service, runtime, containerName } = context;
-      const { force, timeout = 30 } = context.options;
+      const { force, timeout } = context.options;
       if (!service.quiet) {
         printInfo(`Stopping database container: ${containerName}`);
       }
       try {
-        const status = execFileSync24(
+        const status = execFileSync26(
           runtime,
           ["inspect", containerName, "--format", "{{.State.Status}}"],
           { encoding: "utf-8", stdio: "pipe" }
@@ -14966,7 +14935,7 @@ var init_database_stop = __esm({
             }
           };
         }
-        const containerId = execFileSync24(
+        const containerId = execFileSync26(
           runtime,
           ["inspect", containerName, "--format", "{{.Id}}"],
           { encoding: "utf-8", stdio: "pipe" }
@@ -14975,7 +14944,7 @@ var init_database_stop = __esm({
           if (!service.quiet) {
             printWarning("Force stopping database (may cause data corruption)...");
           }
-          execFileSync24(runtime, ["kill", containerName], { stdio: "pipe" });
+          execFileSync26(runtime, ["kill", containerName], { stdio: "pipe" });
         } else {
           if (!service.quiet) {
             printInfo(`Gracefully stopping database (timeout: ${timeout}s)...`);
@@ -14983,7 +14952,7 @@ var init_database_stop = __esm({
           const image = service.getImage();
           if (image.includes("postgres")) {
             try {
-              execFileSync24(
+              execFileSync26(
                 runtime,
                 [
                   "exec",
@@ -14996,20 +14965,20 @@ var init_database_stop = __esm({
                 { stdio: "pipe", timeout: (timeout + 5) * 1e3 }
               );
             } catch {
-              execFileSync24(runtime, ["stop", "-t", timeout.toString(), containerName], { stdio: "pipe" });
+              execFileSync26(runtime, ["stop", "-t", timeout.toString(), containerName], { stdio: "pipe" });
             }
           } else if (image.includes("mysql")) {
             try {
-              execFileSync24(
+              execFileSync26(
                 runtime,
                 ["exec", containerName, "mysqladmin", "shutdown"],
                 { stdio: "pipe", timeout: timeout * 1e3 }
               );
             } catch {
-              execFileSync24(runtime, ["stop", "-t", timeout.toString(), containerName], { stdio: "pipe" });
+              execFileSync26(runtime, ["stop", "-t", timeout.toString(), containerName], { stdio: "pipe" });
             }
           } else {
-            execFileSync24(runtime, ["stop", "-t", timeout.toString(), containerName], { stdio: "pipe" });
+            execFileSync26(runtime, ["stop", "-t", timeout.toString(), containerName], { stdio: "pipe" });
           }
         }
         let stopped = false;
@@ -15017,7 +14986,7 @@ var init_database_stop = __esm({
         const maxAttempts = 10;
         while (!stopped && attempts < maxAttempts) {
           try {
-            const currentStatus = execFileSync24(
+            const currentStatus = execFileSync26(
               runtime,
               ["inspect", containerName, "--format", "{{.State.Status}}"],
               { encoding: "utf-8", stdio: "pipe" }
@@ -15113,14 +15082,14 @@ var init_proxy_paths2 = __esm({
 // src/platforms/container/handlers/proxy-provision.ts
 import * as fs36 from "fs";
 import * as path31 from "path";
-import { execFileSync as execFileSync25 } from "child_process";
+import { execFileSync as execFileSync27 } from "child_process";
 function getHostAddress(runtime) {
   const platform = process.platform;
   if (platform === "darwin" || platform === "win32") {
     return "host.docker.internal";
   } else {
     try {
-      execFileSync25(runtime, ["run", "--rm", "alpine", "getent", "hosts", "host-gateway"], { stdio: "pipe" });
+      execFileSync27(runtime, ["run", "--rm", "alpine", "getent", "hosts", "host-gateway"], { stdio: "pipe" });
       return "host-gateway";
     } catch {
       return "172.17.0.1";
@@ -15207,7 +15176,7 @@ var init_proxy_provision2 = __esm({
         printInfo(`Pulling image: ${imageName}...`);
       }
       try {
-        execFileSync25(runtime, ["pull", imageName], {
+        execFileSync27(runtime, ["pull", imageName], {
           stdio: service.verbose ? "inherit" : "pipe"
         });
         if (!service.quiet) {
@@ -15282,7 +15251,7 @@ var init_proxy_provision2 = __esm({
 });
 
 // src/platforms/container/handlers/proxy-start.ts
-import { execFileSync as execFileSync26 } from "child_process";
+import { execFileSync as execFileSync28 } from "child_process";
 import * as fs37 from "fs";
 function getProxyImage2(type2, customImage) {
   if (customImage) {
@@ -15333,9 +15302,9 @@ var init_proxy_start2 = __esm({
         };
       }
       try {
-        const existingContainer = execFileSync26(runtime, ["ps", "-aq", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
+        const existingContainer = execFileSync28(runtime, ["ps", "-aq", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
         if (existingContainer) {
-          const isRunning = execFileSync26(runtime, ["ps", "-q", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
+          const isRunning = execFileSync28(runtime, ["ps", "-q", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
           if (isRunning) {
             if (!service.quiet) {
               printInfo(`Proxy container ${containerName} is already running`);
@@ -15353,7 +15322,7 @@ var init_proxy_start2 = __esm({
             if (!service.quiet) {
               printInfo(`Removing stopped container ${containerName}`);
             }
-            execFileSync26(runtime, ["rm", containerName], { stdio: "pipe" });
+            execFileSync28(runtime, ["rm", containerName], { stdio: "pipe" });
           }
         }
       } catch (error) {
@@ -15392,7 +15361,7 @@ var init_proxy_start2 = __esm({
         }
       }
       try {
-        const containerId = execFileSync26(runtime, runArgs, { encoding: "utf-8" }).trim();
+        const containerId = execFileSync28(runtime, runArgs, { encoding: "utf-8" }).trim();
         if (!service.quiet) {
           printSuccess(`Container started with ID: ${containerId.substring(0, 12)}`);
         }
@@ -15400,9 +15369,9 @@ var init_proxy_start2 = __esm({
           printInfo("Waiting for proxy to become healthy...");
         }
         await new Promise((resolve10) => setTimeout(resolve10, 2e3));
-        const isRunning = execFileSync26(runtime, ["ps", "-q", "-f", `id=${containerId}`], { encoding: "utf-8" }).trim();
+        const isRunning = execFileSync28(runtime, ["ps", "-q", "-f", `id=${containerId}`], { encoding: "utf-8" }).trim();
         if (!isRunning) {
-          const logs = execFileSync26(runtime, ["logs", containerId], { encoding: "utf-8" });
+          const logs = execFileSync28(runtime, ["logs", containerId], { encoding: "utf-8" });
           return {
             success: false,
             error: `Container exited unexpectedly. Logs:
@@ -15412,7 +15381,7 @@ ${logs}`,
         }
         if (config.type === "envoy") {
           try {
-            execFileSync26("curl", ["-s", "-o", "/dev/null", `http://localhost:${adminPort}/clusters`], { stdio: "pipe" });
+            execFileSync28("curl", ["-s", "-o", "/dev/null", `http://localhost:${adminPort}/clusters`], { stdio: "pipe" });
             if (!service.quiet) {
               printSuccess("Proxy admin interface is accessible");
             }
@@ -15490,7 +15459,7 @@ ${logs}`,
 });
 
 // src/platforms/container/handlers/proxy-stop.ts
-import { execFileSync as execFileSync27 } from "child_process";
+import { execFileSync as execFileSync29 } from "child_process";
 var stopProxyService2, preflightProxyStop, proxyStopDescriptor2;
 var init_proxy_stop2 = __esm({
   "src/platforms/container/handlers/proxy-stop.ts"() {
@@ -15504,7 +15473,7 @@ var init_proxy_stop2 = __esm({
         printInfo(`Stopping proxy service ${service.name} (type: ${config.type})...`);
       }
       try {
-        const existingContainer = execFileSync27(runtime, ["ps", "-aq", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
+        const existingContainer = execFileSync29(runtime, ["ps", "-aq", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
         if (!existingContainer) {
           if (!service.quiet) {
             printWarning(`Proxy container ${containerName} not found`);
@@ -15518,12 +15487,12 @@ var init_proxy_stop2 = __esm({
             }
           };
         }
-        const isRunning = execFileSync27(runtime, ["ps", "-q", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
+        const isRunning = execFileSync29(runtime, ["ps", "-q", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
         if (isRunning) {
           if (!service.quiet) {
             printInfo(`Stopping container ${containerName}...`);
           }
-          execFileSync27(runtime, ["stop", containerName], {
+          execFileSync29(runtime, ["stop", containerName], {
             stdio: service.verbose ? "inherit" : "pipe"
           });
           if (!service.quiet) {
@@ -15537,7 +15506,7 @@ var init_proxy_stop2 = __esm({
         if (!service.quiet) {
           printInfo(`Removing container ${containerName}...`);
         }
-        execFileSync27(runtime, ["rm", containerName], {
+        execFileSync29(runtime, ["rm", containerName], {
           stdio: service.verbose ? "inherit" : "pipe"
         });
         if (!service.quiet) {
@@ -15582,7 +15551,7 @@ var init_proxy_stop2 = __esm({
 });
 
 // src/platforms/container/handlers/proxy-check.ts
-import { execFileSync as execFileSync28 } from "child_process";
+import { execFileSync as execFileSync30 } from "child_process";
 import * as fs38 from "fs";
 async function checkUrl(url, timeout = 5e3) {
   try {
@@ -15597,7 +15566,7 @@ async function checkUrl(url, timeout = 5e3) {
 }
 function getContainerUptime(runtime, containerName) {
   try {
-    const uptime = execFileSync28(
+    const uptime = execFileSync30(
       runtime,
       ["ps", "--format", "{{.Status}}", "--filter", `name=${containerName}`],
       { encoding: "utf-8" }
@@ -15609,7 +15578,7 @@ function getContainerUptime(runtime, containerName) {
 }
 function getRecentLogs(runtime, containerName, lines = 20) {
   try {
-    const logs = execFileSync28(runtime, ["logs", "--tail", lines.toString(), containerName], { encoding: "utf-8" });
+    const logs = execFileSync30(runtime, ["logs", "--tail", lines.toString(), containerName], { encoding: "utf-8" });
     return logs;
   } catch {
     return void 0;
@@ -15636,7 +15605,7 @@ var init_proxy_check2 = __esm({
         backendRouting: false
       };
       try {
-        const containerId = execFileSync28(runtime, ["ps", "-q", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
+        const containerId = execFileSync30(runtime, ["ps", "-q", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
         if (containerId) {
           healthCheck.containerRunning = true;
           healthCheck.containerId = containerId.substring(0, 12);
@@ -15648,7 +15617,7 @@ var init_proxy_check2 = __esm({
             }
           }
         } else {
-          const stoppedContainer = execFileSync28(runtime, ["ps", "-aq", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
+          const stoppedContainer = execFileSync30(runtime, ["ps", "-aq", "-f", `name=${containerName}`], { encoding: "utf-8" }).trim();
           if (stoppedContainer) {
             if (!service.quiet) {
               printWarning(`Container ${containerName} exists but is not running`);
@@ -15818,7 +15787,7 @@ Proxy service ${service.name} is healthy`);
 });
 
 // src/platforms/container/handlers/inference-check.ts
-import { execFileSync as execFileSync29 } from "child_process";
+import { execFileSync as execFileSync31 } from "child_process";
 var OLLAMA_DEFAULT_PORT3, checkInference2, preflightInferenceCheck2, inferenceCheckDescriptor2;
 var init_inference_check2 = __esm({
   "src/platforms/container/handlers/inference-check.ts"() {
@@ -15835,13 +15804,13 @@ var init_inference_check2 = __esm({
       let containerId;
       const modelAvailability = {};
       try {
-        const containerStatus = execFileSync29(
+        const containerStatus = execFileSync31(
           runtime,
           ["inspect", containerName, "--format", "{{.State.Status}}"],
           { encoding: "utf-8", stdio: "pipe" }
         ).trim();
         if (containerStatus === "running") {
-          containerId = execFileSync29(
+          containerId = execFileSync31(
             runtime,
             ["inspect", containerName, "--format", "{{.Id}}"],
             { encoding: "utf-8", stdio: "pipe" }
@@ -15871,7 +15840,7 @@ var init_inference_check2 = __esm({
       let logs;
       if (containerId) {
         try {
-          const output = execFileSync29(
+          const output = execFileSync31(
             runtime,
             ["logs", "--tail", "10", containerName],
             { encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"] }
@@ -15931,10 +15900,10 @@ var init_inference_check2 = __esm({
 });
 
 // src/platforms/container/handlers/inference-start.ts
-import { execFileSync as execFileSync30 } from "child_process";
+import { execFileSync as execFileSync32 } from "child_process";
 function detectNvidiaGpu() {
   try {
-    execFileSync30("nvidia-smi", ["--query-gpu=name", "--format=csv,noheader"], {
+    execFileSync32("nvidia-smi", ["--query-gpu=name", "--format=csv,noheader"], {
       stdio: ["ignore", "pipe", "ignore"]
     });
     return true;
@@ -15957,7 +15926,7 @@ var init_inference_start2 = __esm({
       const port = serviceConfig.port || OLLAMA_DEFAULT_PORT4;
       const image = serviceConfig.image || OLLAMA_IMAGE;
       try {
-        const output = execFileSync30(runtime, ["ps", "--format", "{{.Names}}"], { encoding: "utf-8" });
+        const output = execFileSync32(runtime, ["ps", "--format", "{{.Names}}"], { encoding: "utf-8" });
         if (output.includes(containerName)) {
           if (!service.quiet) {
             printWarning("Ollama container is already running");
@@ -15975,7 +15944,7 @@ var init_inference_start2 = __esm({
       } catch {
       }
       try {
-        execFileSync30(runtime, ["rm", "-f", containerName], { stdio: "ignore" });
+        execFileSync32(runtime, ["rm", "-f", containerName], { stdio: "ignore" });
       } catch {
       }
       if (!service.quiet) {
@@ -15983,7 +15952,7 @@ var init_inference_start2 = __esm({
       }
       const gpuArgs = detectNvidiaGpu() ? ["--gpus", "all"] : [];
       try {
-        const containerId = execFileSync30(runtime, [
+        const containerId = execFileSync32(runtime, [
           "run",
           "-d",
           "--name",
@@ -16002,7 +15971,7 @@ var init_inference_start2 = __esm({
         for (let i = 0; i < maxAttempts; i++) {
           await new Promise((resolve10) => setTimeout(resolve10, 1e3));
           try {
-            const status = execFileSync30(
+            const status = execFileSync32(
               runtime,
               ["inspect", containerName, "--format", "{{.State.Status}}"],
               { encoding: "utf-8", stdio: "pipe" }
@@ -16022,7 +15991,7 @@ var init_inference_start2 = __esm({
         }
         if (!ready) {
           try {
-            execFileSync30(runtime, ["rm", "-f", containerName], { stdio: "ignore" });
+            execFileSync32(runtime, ["rm", "-f", containerName], { stdio: "ignore" });
           } catch {
           }
           return {
@@ -16084,7 +16053,7 @@ var init_inference_start2 = __esm({
 });
 
 // src/platforms/container/handlers/inference-stop.ts
-import { execFileSync as execFileSync31 } from "child_process";
+import { execFileSync as execFileSync33 } from "child_process";
 var stopInference2, preflightInferenceStop, inferenceStopDescriptor2;
 var init_inference_stop2 = __esm({
   "src/platforms/container/handlers/inference-stop.ts"() {
@@ -16094,7 +16063,7 @@ var init_inference_stop2 = __esm({
     stopInference2 = async (context) => {
       const { service, runtime, options, containerName } = context;
       try {
-        const output = execFileSync31(runtime, ["ps", "--format", "{{.Names}}"], { encoding: "utf-8" });
+        const output = execFileSync33(runtime, ["ps", "--format", "{{.Names}}"], { encoding: "utf-8" });
         if (!output.includes(containerName)) {
           if (!service.quiet) {
             printWarning("Ollama container is not running");
@@ -16117,17 +16086,17 @@ var init_inference_stop2 = __esm({
           if (!service.quiet) {
             printInfo("Force stopping Ollama container...");
           }
-          execFileSync31(runtime, ["rm", "-f", containerName], {
+          execFileSync33(runtime, ["rm", "-f", containerName], {
             stdio: service.quiet ? "ignore" : "inherit"
           });
         } else {
           if (!service.quiet) {
             printInfo(`Stopping Ollama container gracefully (timeout: ${options.timeout}s)...`);
           }
-          execFileSync31(runtime, ["stop", "-t", options.timeout.toString(), containerName], {
+          execFileSync33(runtime, ["stop", "-t", options.timeout.toString(), containerName], {
             stdio: service.quiet ? "ignore" : "inherit"
           });
-          execFileSync31(runtime, ["rm", containerName], {
+          execFileSync33(runtime, ["rm", containerName], {
             stdio: "ignore"
           });
         }
@@ -16167,10 +16136,10 @@ var init_inference_stop2 = __esm({
 });
 
 // src/platforms/container/handlers/inference-provision.ts
-import { execFileSync as execFileSync32 } from "child_process";
+import { execFileSync as execFileSync34 } from "child_process";
 function detectGpu2(runtime) {
   try {
-    const output = execFileSync32(runtime, ["info", "--format", "{{.Runtimes}}"], {
+    const output = execFileSync34(runtime, ["info", "--format", "{{.Runtimes}}"], {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "ignore"]
     }).trim();
@@ -16180,7 +16149,7 @@ function detectGpu2(runtime) {
   } catch {
   }
   try {
-    const gpuName = execFileSync32("nvidia-smi", ["--query-gpu=name", "--format=csv,noheader"], {
+    const gpuName = execFileSync34("nvidia-smi", ["--query-gpu=name", "--format=csv,noheader"], {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "ignore"]
     }).trim();
@@ -16215,7 +16184,7 @@ var init_inference_provision2 = __esm({
         printInfo(`Pulling ${image}...`);
       }
       try {
-        execFileSync32(runtime, ["pull", image], {
+        execFileSync34(runtime, ["pull", image], {
           stdio: service.quiet ? "ignore" : "inherit"
         });
       } catch (error) {
@@ -16226,7 +16195,7 @@ var init_inference_provision2 = __esm({
         };
       }
       try {
-        execFileSync32(runtime, ["volume", "create", VOLUME_NAME2], {
+        execFileSync34(runtime, ["volume", "create", VOLUME_NAME2], {
           stdio: "ignore"
         });
       } catch {
@@ -16237,7 +16206,7 @@ var init_inference_provision2 = __esm({
           printInfo(`Pulling model ${model} (this may take several minutes)...`);
         }
         try {
-          execFileSync32(runtime, [
+          execFileSync34(runtime, [
             "run",
             "--rm",
             "-v",
@@ -16357,7 +16326,7 @@ var init_handlers2 = __esm({
 });
 
 // src/platforms/container/platform.ts
-import { execFileSync as execFileSync33 } from "child_process";
+import { execFileSync as execFileSync35 } from "child_process";
 var ContainerPlatform;
 var init_platform3 = __esm({
   "src/platforms/container/platform.ts"() {
@@ -16385,11 +16354,11 @@ var init_platform3 = __esm({
        */
       detectContainerRuntime() {
         try {
-          execFileSync33("docker", ["--version"], { stdio: "ignore" });
+          execFileSync35("docker", ["--version"], { stdio: "ignore" });
           return "docker";
         } catch {
           try {
-            execFileSync33("podman", ["--version"], { stdio: "ignore" });
+            execFileSync35("podman", ["--version"], { stdio: "ignore" });
             return "podman";
           } catch {
             throw new Error("No container runtime (Docker or Podman) found");
@@ -16415,7 +16384,7 @@ var init_platform3 = __esm({
           return false;
         }
         try {
-          const status = execFileSync33(
+          const status = execFileSync35(
             this.runtime,
             ["inspect", containerId, "--format", "{{.State.Status}}"],
             { encoding: "utf-8", stdio: "pipe" }
@@ -16477,7 +16446,7 @@ var init_platform3 = __esm({
           if (since) {
             args.push("--since", since.toISOString());
           }
-          const output = execFileSync33(this.runtime, args, {
+          const output = execFileSync35(this.runtime, args, {
             encoding: "utf-8",
             stdio: ["ignore", "pipe", "pipe"]
             // Capture both stdout and stderr
@@ -16695,7 +16664,7 @@ var init_lambda_check = __esm({
 });
 
 // src/platforms/aws/handlers/ecs-check.ts
-import { execFileSync as execFileSync34 } from "child_process";
+import { execFileSync as execFileSync36 } from "child_process";
 import { DescribeServicesCommand } from "@aws-sdk/client-ecs";
 import { DescribeTargetHealthCommand } from "@aws-sdk/client-elastic-load-balancing-v2";
 import { FilterLogEventsCommand as FilterLogEventsCommand2 } from "@aws-sdk/client-cloudwatch-logs";
@@ -16747,7 +16716,7 @@ var init_ecs_check = __esm({
           let imageTag = "unknown";
           if (activeDeployment?.taskDefinition) {
             try {
-              const taskDefJson = execFileSync34("aws", [
+              const taskDefJson = execFileSync36("aws", [
                 "ecs",
                 "describe-task-definition",
                 "--task-definition",
@@ -17006,10 +16975,10 @@ var init_rds_check = __esm({
 });
 
 // src/platforms/aws/handlers/s3-cloudfront-check.ts
-import { execFileSync as execFileSync35 } from "child_process";
+import { execFileSync as execFileSync37 } from "child_process";
 async function getCloudFrontDistribution(bucketName, region) {
   try {
-    const distributionId = execFileSync35("aws", [
+    const distributionId = execFileSync37("aws", [
       "cloudfront",
       "list-distributions",
       "--query",
@@ -17026,7 +16995,7 @@ async function getCloudFrontDistribution(bucketName, region) {
 }
 async function getCloudFrontStatus(distributionId, region) {
   try {
-    const status = execFileSync35("aws", [
+    const status = execFileSync37("aws", [
       "cloudfront",
       "get-distribution",
       "--id",
@@ -17053,7 +17022,7 @@ var init_s3_cloudfront_check = __esm({
       const { service, region, resourceName } = context;
       const bucketName = `${resourceName}-static`;
       try {
-        execFileSync35("aws", ["s3api", "head-bucket", "--bucket", bucketName, "--region", region], {
+        execFileSync37("aws", ["s3api", "head-bucket", "--bucket", bucketName, "--region", region], {
           stdio: ["pipe", "pipe", "ignore"]
         });
         const status = "running";
@@ -17288,7 +17257,7 @@ var init_neptune_check = __esm({
 });
 
 // src/platforms/aws/handlers/ecs-start.ts
-import { execFileSync as execFileSync36 } from "child_process";
+import { execFileSync as execFileSync38 } from "child_process";
 var startECSService, preflightEcsStart, ecsFargateStartDescriptor, ecsStartDescriptor;
 var init_ecs_start = __esm({
   "src/platforms/aws/handlers/ecs-start.ts"() {
@@ -17303,7 +17272,7 @@ var init_ecs_start = __esm({
       const serviceName = cfnDiscoveredResources?.serviceName || resourceName;
       const desiredCount = requirements.resources?.replicas || 1;
       try {
-        execFileSync36("aws", [
+        execFileSync38("aws", [
           "ecs",
           "update-service",
           "--cluster",
@@ -17318,7 +17287,7 @@ var init_ecs_start = __esm({
         let endpoint;
         if (requirements.network?.needsLoadBalancer) {
           try {
-            const albDns = execFileSync36("aws", [
+            const albDns = execFileSync38("aws", [
               "elbv2",
               "describe-load-balancers",
               "--names",
@@ -17390,7 +17359,7 @@ var init_ecs_start = __esm({
 });
 
 // src/platforms/aws/handlers/rds-start.ts
-import { execFileSync as execFileSync37 } from "child_process";
+import { execFileSync as execFileSync39 } from "child_process";
 var startRDSInstance, preflightRdsStart, rdsStartDescriptor;
 var init_rds_start = __esm({
   "src/platforms/aws/handlers/rds-start.ts"() {
@@ -17403,7 +17372,7 @@ var init_rds_start = __esm({
       const resourceName = `semiont-${service.name}-${service.environment}`;
       const instanceId = `${resourceName}-db`;
       try {
-        execFileSync37("aws", ["rds", "start-db-instance", "--db-instance-identifier", instanceId, "--region", region], {
+        execFileSync39("aws", ["rds", "start-db-instance", "--db-instance-identifier", instanceId, "--region", region], {
           encoding: "utf-8"
         });
         if (!service.quiet) {
@@ -17411,7 +17380,7 @@ var init_rds_start = __esm({
         }
         let endpoint;
         try {
-          endpoint = execFileSync37("aws", [
+          endpoint = execFileSync39("aws", [
             "rds",
             "describe-db-instances",
             "--db-instance-identifier",
@@ -17645,7 +17614,7 @@ var init_stack_provision = __esm({
 });
 
 // src/platforms/aws/handlers/ecs-publish.ts
-import { execFileSync as execFileSync38, spawnSync as spawnSync3 } from "child_process";
+import { execFileSync as execFileSync40, spawnSync as spawnSync3 } from "child_process";
 import * as path33 from "path";
 import * as fs40 from "fs";
 async function createNewTaskDefinition(service, imageUri, region, _accountId, cfnDiscoveredResources, resourceName) {
@@ -17657,7 +17626,7 @@ async function createNewTaskDefinition(service, imageUri, region, _accountId, cf
       console.warn(`   \u26A0\uFE0F  Could not find ECS service name for ${service.name}`);
       return "";
     }
-    const serviceJson = execFileSync38("aws", [
+    const serviceJson = execFileSync40("aws", [
       "ecs",
       "describe-services",
       "--cluster",
@@ -17675,7 +17644,7 @@ async function createNewTaskDefinition(service, imageUri, region, _accountId, cf
       console.warn(`   \u26A0\uFE0F  Could not find task definition for ${serviceName}`);
       return "";
     }
-    const taskDefJson = execFileSync38("aws", [
+    const taskDefJson = execFileSync40("aws", [
       "ecs",
       "describe-task-definition",
       "--task-definition",
@@ -17706,7 +17675,7 @@ async function createNewTaskDefinition(service, imageUri, region, _accountId, cf
       memory: taskDef.memory,
       runtimePlatform: taskDef.runtimePlatform
     };
-    const registerOutput = execFileSync38("aws", [
+    const registerOutput = execFileSync40("aws", [
       "ecs",
       "register-task-definition",
       "--cli-input-json",
@@ -17746,7 +17715,7 @@ var init_ecs_publish = __esm({
         const deploymentStrategy = envConfig.deployment?.imageTagStrategy || "mutable";
         if (deploymentStrategy === "immutable" || deploymentStrategy === "git-hash") {
           try {
-            const gitHash = execFileSync38("git", ["rev-parse", "--short", "HEAD"], {
+            const gitHash = execFileSync40("git", ["rev-parse", "--short", "HEAD"], {
               encoding: "utf-8",
               cwd: service.projectRoot
             }).trim();
@@ -17766,7 +17735,7 @@ var init_ecs_publish = __esm({
       const ecrRepo = `semiont-${service.name}`;
       const imageUri = `${accountId}.dkr.ecr.${region}.amazonaws.com/${ecrRepo}:${version}`;
       try {
-        execFileSync38("aws", ["ecr", "create-repository", "--repository-name", ecrRepo, "--region", region]);
+        execFileSync40("aws", ["ecr", "create-repository", "--repository-name", ecrRepo, "--region", region]);
       } catch {
       }
       if (service.verbose) {
@@ -17805,7 +17774,7 @@ var init_ecs_publish = __esm({
       try {
         const apiTypesPath = path33.join(buildContext, "packages", "api-types");
         if (fs40.existsSync(apiTypesPath)) {
-          execFileSync38("npm", ["run", "build"], {
+          execFileSync40("npm", ["run", "build"], {
             cwd: apiTypesPath,
             env: buildEnv,
             stdio: service.verbose ? "inherit" : "pipe"
@@ -17813,7 +17782,7 @@ var init_ecs_publish = __esm({
         }
         const appPath = path33.join(buildContext, "apps", service.name);
         if (fs40.existsSync(appPath)) {
-          execFileSync38("npm", ["run", "build"], {
+          execFileSync40("npm", ["run", "build"], {
             cwd: appPath,
             env: buildEnv,
             stdio: service.verbose ? "inherit" : "pipe"
@@ -17829,7 +17798,7 @@ var init_ecs_publish = __esm({
         };
       }
       try {
-        const ecrPassword = execFileSync38("aws", [
+        const ecrPassword = execFileSync40("aws", [
           "ecr",
           "get-login-password",
           "--region",
@@ -17857,8 +17826,8 @@ var init_ecs_publish = __esm({
         if (service.verbose) {
           console.log(`[DEBUG] Docker build args: ${dockerBuildArgs.join(" ")}`);
         }
-        execFileSync38("docker", dockerBuildArgs, { stdio: service.verbose ? "inherit" : "pipe" });
-        execFileSync38("docker", ["push", imageUri], { stdio: service.verbose ? "inherit" : "pipe" });
+        execFileSync40("docker", dockerBuildArgs, { stdio: service.verbose ? "inherit" : "pipe" });
+        execFileSync40("docker", ["push", imageUri], { stdio: service.verbose ? "inherit" : "pipe" });
         artifacts.imageTag = version;
         artifacts.imageUrl = imageUri;
         const newTaskDefRevision = await createNewTaskDefinition(service, imageUri, region, accountId, cfnDiscoveredResources, resourceName);
@@ -17925,10 +17894,10 @@ var init_ecs_publish = __esm({
 });
 
 // src/platforms/aws/handlers/ecs-update.ts
-import { execFileSync as execFileSync39 } from "child_process";
+import { execFileSync as execFileSync41 } from "child_process";
 async function getCurrentTaskDefinition(cluster, service, region) {
   try {
-    const taskDef = execFileSync39("aws", ["ecs", "describe-services", "--cluster", cluster, "--services", service, "--query", "services[0].taskDefinition", "--output", "text", "--region", region], { encoding: "utf-8" }).trim();
+    const taskDef = execFileSync41("aws", ["ecs", "describe-services", "--cluster", cluster, "--services", service, "--query", "services[0].taskDefinition", "--output", "text", "--region", region], { encoding: "utf-8" }).trim();
     return taskDef.split(":").pop() || "";
   } catch {
     return "";
@@ -17936,7 +17905,7 @@ async function getCurrentTaskDefinition(cluster, service, region) {
 }
 async function getTaskDefinitionFamily(cluster, service, region) {
   try {
-    const taskDefArn = execFileSync39("aws", ["ecs", "describe-services", "--cluster", cluster, "--services", service, "--query", "services[0].taskDefinition", "--output", "text", "--region", region], { encoding: "utf-8" }).trim();
+    const taskDefArn = execFileSync41("aws", ["ecs", "describe-services", "--cluster", cluster, "--services", service, "--query", "services[0].taskDefinition", "--output", "text", "--region", region], { encoding: "utf-8" }).trim();
     const parts = taskDefArn.split("/");
     if (parts.length > 1) {
       return parts[1].split(":")[0];
@@ -17950,7 +17919,7 @@ async function getLatestTaskDefinitionRevision(cluster, service, region) {
   try {
     const family = await getTaskDefinitionFamily(cluster, service, region);
     if (!family) return "";
-    const taskDefArn = execFileSync39("aws", [
+    const taskDefArn = execFileSync41("aws", [
       "ecs",
       "list-task-definitions",
       "--family-prefix",
@@ -17976,7 +17945,7 @@ async function getLatestTaskDefinitionRevision(cluster, service, region) {
 async function fetchTaskLogs(clusterName, taskArn, region, verbose = false) {
   try {
     const taskId = taskArn.split("/").pop();
-    const taskDetails = execFileSync39("aws", [
+    const taskDetails = execFileSync41("aws", [
       "ecs",
       "describe-tasks",
       "--cluster",
@@ -17992,7 +17961,7 @@ async function fetchTaskLogs(clusterName, taskArn, region, verbose = false) {
     if (!task) {
       return [];
     }
-    const taskDefDetails = execFileSync39("aws", [
+    const taskDefDetails = execFileSync41("aws", [
       "ecs",
       "describe-task-definition",
       "--task-definition",
@@ -18015,7 +17984,7 @@ async function fetchTaskLogs(clusterName, taskArn, region, verbose = false) {
     }
     const containerName = mainContainer.name;
     const logStream = `${streamPrefix}/${containerName}/${taskId}`;
-    const logsJson = execFileSync39("aws", [
+    const logsJson = execFileSync41("aws", [
       "logs",
       "filter-log-events",
       "--log-group-name",
@@ -18050,7 +18019,7 @@ async function waitForECSDeployment(clusterName, serviceName, deploymentId, regi
   let failedTaskInfo = [];
   while (Date.now() - startTime < effectiveTimeout * 1e3) {
     try {
-      const serviceData = execFileSync39("aws", [
+      const serviceData = execFileSync41("aws", [
         "ecs",
         "describe-services",
         "--cluster",
@@ -18099,7 +18068,7 @@ async function waitForECSDeployment(clusterName, serviceName, deploymentId, regi
       const ourRevision = ourDeployment.taskDefinition?.split(":").pop() || "unknown";
       const oldRevisions = /* @__PURE__ */ new Set();
       try {
-        const stoppedTasksData = execFileSync39("aws", [
+        const stoppedTasksData = execFileSync41("aws", [
           "ecs",
           "list-tasks",
           "--cluster",
@@ -18115,7 +18084,7 @@ async function waitForECSDeployment(clusterName, serviceName, deploymentId, regi
         ], { encoding: "utf-8" });
         const stoppedTaskArns = JSON.parse(stoppedTasksData).taskArns || [];
         if (stoppedTaskArns.length > 0) {
-          const stoppedTasksJson = execFileSync39("aws", [
+          const stoppedTasksJson = execFileSync41("aws", [
             "ecs",
             "describe-tasks",
             "--cluster",
@@ -18204,7 +18173,7 @@ async function waitForECSDeployment(clusterName, serviceName, deploymentId, regi
         }
       }
       try {
-        const tasksData = execFileSync39("aws", [
+        const tasksData = execFileSync41("aws", [
           "ecs",
           "list-tasks",
           "--cluster",
@@ -18220,7 +18189,7 @@ async function waitForECSDeployment(clusterName, serviceName, deploymentId, regi
         ], { encoding: "utf-8" });
         const taskArns = JSON.parse(tasksData).taskArns || [];
         if (taskArns.length > 0) {
-          const taskDetailsJson = execFileSync39("aws", [
+          const taskDetailsJson = execFileSync41("aws", [
             "ecs",
             "describe-tasks",
             "--cluster",
@@ -18439,13 +18408,13 @@ var init_ecs_update = __esm({
             printInfo(`No newer task definition found. Forcing redeployment of current revision ${currentRevision}`);
           }
         }
-        const updateResult = execFileSync39("aws", updateArgs, { encoding: "utf-8" });
+        const updateResult = execFileSync41("aws", updateArgs, { encoding: "utf-8" });
         if (service.verbose) {
           try {
-            const serviceData = execFileSync39("aws", ["ecs", "describe-services", "--cluster", clusterName, "--services", serviceName, "--region", region, "--output", "json"], { encoding: "utf-8" });
+            const serviceData = execFileSync41("aws", ["ecs", "describe-services", "--cluster", clusterName, "--services", serviceName, "--region", region, "--output", "json"], { encoding: "utf-8" });
             const ecsService = JSON.parse(serviceData).services?.[0];
             if (ecsService?.taskDefinition) {
-              const currentTaskDef = execFileSync39("aws", ["ecs", "describe-task-definition", "--task-definition", ecsService.taskDefinition, "--region", region, "--output", "json"], { encoding: "utf-8" });
+              const currentTaskDef = execFileSync41("aws", ["ecs", "describe-task-definition", "--task-definition", ecsService.taskDefinition, "--region", region, "--output", "json"], { encoding: "utf-8" });
               const taskDef = JSON.parse(currentTaskDef).taskDefinition;
               const images = taskDef.containerDefinitions?.map((c) => c.image).filter(Boolean);
               if (images?.length > 0) {
@@ -18573,10 +18542,10 @@ __export(credential_validator_exports, {
   isAWSCliInstalled: () => isAWSCliInstalled,
   validateAWSCredentials: () => validateAWSCredentials
 });
-import { execFileSync as execFileSync40 } from "child_process";
+import { execFileSync as execFileSync42 } from "child_process";
 async function validateAWSCredentials(_environment) {
   try {
-    const output = execFileSync40("aws", ["sts", "get-caller-identity", "--output", "json"], {
+    const output = execFileSync42("aws", ["sts", "get-caller-identity", "--output", "json"], {
       stdio: ["pipe", "pipe", "pipe"],
       encoding: "utf8",
       env: {
@@ -18619,7 +18588,7 @@ async function validateAWSCredentials(_environment) {
 }
 function isAWSCliInstalled() {
   try {
-    execFileSync40("aws", ["--version"], { stdio: "ignore" });
+    execFileSync42("aws", ["--version"], { stdio: "ignore" });
     return true;
   } catch {
     return false;
@@ -18627,7 +18596,7 @@ function isAWSCliInstalled() {
 }
 function getAWSProfiles() {
   try {
-    const output = execFileSync40("aws", ["configure", "list-profiles"], {
+    const output = execFileSync42("aws", ["configure", "list-profiles"], {
       stdio: "pipe",
       encoding: "utf8"
     });
@@ -19490,13 +19459,13 @@ var uuid4;
 var init_uuid = __esm({
   "node_modules/@anthropic-ai/sdk/internal/utils/uuid.mjs"() {
     uuid4 = function() {
-      const { crypto: crypto4 } = globalThis;
-      if (crypto4?.randomUUID) {
-        uuid4 = crypto4.randomUUID.bind(crypto4);
-        return crypto4.randomUUID();
+      const { crypto: crypto3 } = globalThis;
+      if (crypto3?.randomUUID) {
+        uuid4 = crypto3.randomUUID.bind(crypto3);
+        return crypto3.randomUUID();
       }
       const u8 = new Uint8Array(1);
-      const randomByte = crypto4 ? () => crypto4.getRandomValues(u8)[0] : () => Math.random() * 255 & 255;
+      const randomByte = crypto3 ? () => crypto3.getRandomValues(u8)[0] : () => Math.random() * 255 & 255;
       return "10000000-1000-4000-8000-100000000000".replace(/[018]/g, (c) => (+c ^ randomByte() & 15 >> +c / 4).toString(16));
     };
   }
@@ -25496,7 +25465,7 @@ var init_multi_service_executor = __esm({
           try {
             const result = await this.executeService(serviceInfo, finalOptions, envConfig);
             results.push(result);
-            if (!isStructuredOutput && !finalOptions.quiet && !result.success) {
+            if (!isStructuredOutput && !finalOptions.quiet && !result.success && result.error) {
               printError(`Failed to ${this.descriptor.name} ${serviceInfo.name}: ${result.error}`);
             }
           } catch (error) {
@@ -25904,10 +25873,11 @@ var init_check = __esm({
       }),
       buildResult: (handlerResult, service, platform, serviceType) => {
         const checkResult = handlerResult;
+        const isHealthy = handlerResult.success && checkResult.health?.healthy === true;
         return createCommandResult({
           entity: service.name,
           platform: platform.getPlatformName(),
-          success: handlerResult.success,
+          success: isHealthy,
           error: handlerResult.error,
           metadata: {
             ...handlerResult.metadata,
@@ -27043,7 +27013,7 @@ var require_package = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@semiont/cli",
-      version: "0.4.4",
+      version: "0.4.6",
       description: "Semiont CLI - Unified environment management tool",
       _comment: "AWS SDK dependencies (@aws-sdk/*) are only used by platforms/aws",
       type: "module",
@@ -27107,12 +27077,12 @@ var require_package = __commonJS({
         "@aws-sdk/client-secrets-manager": "^3.600.0",
         "@aws-sdk/client-sts": "^3.859.0",
         "@aws-sdk/client-wafv2": "^3.859.0",
-        "@semiont/api-client": "^0.4.4",
-        "@semiont/content": "^0.4.4",
-        "@semiont/core": "^0.4.4",
-        "@semiont/event-sourcing": "^0.4.4",
-        "@semiont/graph": "^0.4.4",
-        "@semiont/make-meaning": "^0.4.4",
+        "@semiont/api-client": "^0.4.6",
+        "@semiont/content": "^0.4.6",
+        "@semiont/core": "^0.4.6",
+        "@semiont/event-sourcing": "^0.4.6",
+        "@semiont/graph": "^0.4.6",
+        "@semiont/make-meaning": "^0.4.6",
         arg: "^5.0.2",
         argon2: "^0.44.0",
         express: "^5.2.1",
@@ -27530,7 +27500,7 @@ init_base_options_schema();
 var StopOptionsSchema = OpsOptionsSchema.extend({
   service: external_exports.string().optional(),
   force: external_exports.boolean().default(false).describe("Force stop without graceful shutdown"),
-  timeout: external_exports.number().default(30).describe("Timeout for graceful shutdown in seconds")
+  timeout: external_exports.number().default(3).describe("Timeout for graceful shutdown in seconds")
 });
 var stopDescriptor = createCommandDescriptor({
   name: "stop",
@@ -27681,6 +27651,7 @@ var provisionDescriptor = createCommandDescriptor({
         serviceType
       }
     }, {
+      status: handlerResult.success ? "provisioned" : "unknown",
       provisionedResources: provisionResult.provisionedResources,
       stackOutputs: provisionResult.stackOutputs,
       resources: provisionResult.resources
@@ -27744,7 +27715,7 @@ var provisionCommand = new CommandBuilder().name("provision").description("Provi
     },
     "--rotate-secret": {
       type: "boolean",
-      description: "Force generation of a new shared secret for frontend/backend (JWT_SECRET / NEXTAUTH_SECRET). Has no effect on other services. Warns if the peer service will be left out of sync.",
+      description: "Force generation of a new JWT_SECRET. Has no effect on other services. Warns if the peer service will be left out of sync.",
       default: false
     }
   },
@@ -28158,7 +28129,7 @@ init_command_definition();
 init_base_options_schema();
 init_cli_logger();
 init_config_loader();
-import * as crypto3 from "crypto";
+import * as crypto2 from "crypto";
 import * as argon2 from "argon2";
 import * as path36 from "path";
 import { createRequire as createRequire3 } from "module";
@@ -28217,7 +28188,7 @@ function extractDomain(email) {
   return parts[1];
 }
 function generatePassword() {
-  return crypto3.randomBytes(12).toString("base64");
+  return crypto2.randomBytes(12).toString("base64");
 }
 async function useradd(options) {
   const startTime = Date.now();
@@ -29064,7 +29035,7 @@ init_base_options_schema();
 import * as fs49 from "fs";
 import * as path42 from "path";
 import * as readline2 from "readline";
-import { execFileSync as execFileSync41 } from "child_process";
+import { execFileSync as execFileSync43 } from "child_process";
 var LocalOptionsSchema = OpsOptionsSchema.extend({
   directory: external_exports.string().optional(),
   yes: external_exports.boolean().default(false)
@@ -29082,7 +29053,7 @@ function prompt2(question) {
   });
 }
 function runSemiont(args, env, captureOutput = false) {
-  return execFileSync41("semiont", args, {
+  return execFileSync43("semiont", args, {
     env,
     stdio: captureOutput ? "pipe" : "inherit",
     encoding: "utf8"
@@ -29090,7 +29061,7 @@ function runSemiont(args, env, captureOutput = false) {
 }
 function runSemiontSafe(args, env) {
   try {
-    const output = execFileSync41("semiont", args, {
+    const output = execFileSync43("semiont", args, {
       env,
       stdio: "pipe",
       encoding: "utf8"
@@ -29361,7 +29332,7 @@ init_command_definition();
 init_base_options_schema();
 import * as fs50 from "fs";
 import * as readline3 from "readline";
-import { execFileSync as execFileSync42 } from "child_process";
+import { execFileSync as execFileSync44 } from "child_process";
 import { SemiontProject as SemiontProject20 } from "@semiont/core/node";
 var CleanOptionsSchema = OpsOptionsSchema.extend({
   force: external_exports.boolean().default(false),
@@ -29414,7 +29385,7 @@ function listDir(dir) {
 function containerRuntime() {
   for (const rt of ["docker", "podman"]) {
     try {
-      execFileSync42(rt, ["info"], { stdio: "ignore" });
+      execFileSync44(rt, ["info"], { stdio: "ignore" });
       return rt;
     } catch {
     }
@@ -29507,9 +29478,9 @@ async function clean(options) {
         for (const svc of ["database", "graph", "inference"]) {
           const volName = `semiont-${svc}-${env}-data`;
           try {
-            execFileSync42(runtime, ["volume", "inspect", volName], { stdio: "ignore" });
+            execFileSync44(runtime, ["volume", "inspect", volName], { stdio: "ignore" });
             if (!options.dryRun) {
-              execFileSync42(runtime, ["volume", "rm", volName], { stdio: "pipe" });
+              execFileSync44(runtime, ["volume", "rm", volName], { stdio: "pipe" });
             }
             removed.push(volName);
           } catch {
@@ -29517,9 +29488,9 @@ async function clean(options) {
         }
         const netName = `semiont-${env}`;
         try {
-          execFileSync42(runtime, ["network", "inspect", netName], { stdio: "ignore" });
+          execFileSync44(runtime, ["network", "inspect", netName], { stdio: "ignore" });
           if (!options.dryRun) {
-            execFileSync42(runtime, ["network", "rm", netName], { stdio: "pipe" });
+            execFileSync44(runtime, ["network", "rm", netName], { stdio: "pipe" });
           }
           removed.push(`network: ${netName}`);
         } catch {
@@ -31787,7 +31758,7 @@ var OutputFormatter = class {
       if (!result.success) {
         statusIndicator = "[FAIL]";
         statusColor = c.red;
-      } else if (status === "running" || status === "healthy") {
+      } else if (status === "running" || status === "healthy" || status === "provisioned") {
         statusIndicator = "[OK]";
         statusColor = c.green;
       } else if (status === "stopped") {
@@ -31929,7 +31900,7 @@ var OutputFormatter = class {
       const status = result.extensions?.status || result.status || "unknown";
       if (!result.success) {
         statusText = `${c.red}[FAIL]${c.reset} ${status}`;
-      } else if (status === "running" || status === "healthy") {
+      } else if (status === "running" || status === "healthy" || status === "provisioned") {
         statusText = `${c.green}[OK]${c.reset} ${status}`;
       } else if (status === "stopped") {
         statusText = `${c.yellow}[--]${c.reset} ${status}`;
@@ -32322,7 +32293,7 @@ async function generateGlobalHelp() {
 }
 
 // src/cli.ts
-var VERSION2 = "0.4.4";
+var VERSION2 = "0.4.6";
 function printVersion() {
   console.log(`Semiont CLI v${VERSION2}`);
 }