@specific.dev/cli 0.1.42 → 0.1.43

package/dist/cli.js

@@ -11,9 +11,16 @@ var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require
   if (typeof require !== "undefined") return require.apply(this, arguments);
   throw Error('Dynamic require of "' + x + '" is not supported');
 });
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
 var __commonJS = (cb, mod) => function __require2() {
   return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
 };
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
 var __copyProps = (to, from, except, desc) => {
   if (from && typeof from === "object" || typeof from === "function") {
     for (let key of __getOwnPropNames(from))
@@ -31,6 +38,712 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
+// ../../node_modules/is-docker/index.js
+import fs4 from "node:fs";
+function hasDockerEnv() {
+  try {
+    fs4.statSync("/.dockerenv");
+    return true;
+  } catch {
+    return false;
+  }
+}
+function hasDockerCGroup() {
+  try {
+    return fs4.readFileSync("/proc/self/cgroup", "utf8").includes("docker");
+  } catch {
+    return false;
+  }
+}
+function isDocker() {
+  if (isDockerCached === void 0) {
+    isDockerCached = hasDockerEnv() || hasDockerCGroup();
+  }
+  return isDockerCached;
+}
+var isDockerCached;
+var init_is_docker = __esm({
+  "../../node_modules/is-docker/index.js"() {
+  }
+});
+
+// ../../node_modules/is-inside-container/index.js
+import fs5 from "node:fs";
+function isInsideContainer() {
+  if (cachedResult === void 0) {
+    cachedResult = hasContainerEnv() || isDocker();
+  }
+  return cachedResult;
+}
+var cachedResult, hasContainerEnv;
+var init_is_inside_container = __esm({
+  "../../node_modules/is-inside-container/index.js"() {
+    init_is_docker();
+    hasContainerEnv = () => {
+      try {
+        fs5.statSync("/run/.containerenv");
+        return true;
+      } catch {
+        return false;
+      }
+    };
+  }
+});
+
+// ../../node_modules/is-wsl/index.js
+import process2 from "node:process";
+import os3 from "node:os";
+import fs6 from "node:fs";
+var isWsl, is_wsl_default;
+var init_is_wsl = __esm({
+  "../../node_modules/is-wsl/index.js"() {
+    init_is_inside_container();
+    isWsl = () => {
+      if (process2.platform !== "linux") {
+        return false;
+      }
+      if (os3.release().toLowerCase().includes("microsoft")) {
+        if (isInsideContainer()) {
+          return false;
+        }
+        return true;
+      }
+      try {
+        return fs6.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft") ? !isInsideContainer() : false;
+      } catch {
+        return false;
+      }
+    };
+    is_wsl_default = process2.env.__IS_WSL_TEST__ ? isWsl : isWsl();
+  }
+});
+
+// ../../node_modules/powershell-utils/index.js
+import process3 from "node:process";
+import { Buffer as Buffer2 } from "node:buffer";
+import { promisify } from "node:util";
+import childProcess from "node:child_process";
+var execFile, powerShellPath, executePowerShell;
+var init_powershell_utils = __esm({
+  "../../node_modules/powershell-utils/index.js"() {
+    execFile = promisify(childProcess.execFile);
+    powerShellPath = () => `${process3.env.SYSTEMROOT || process3.env.windir || String.raw`C:\Windows`}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe`;
+    executePowerShell = async (command, options2 = {}) => {
+      const {
+        powerShellPath: psPath,
+        ...execFileOptions
+      } = options2;
+      const encodedCommand = executePowerShell.encodeCommand(command);
+      return execFile(
+        psPath ?? powerShellPath(),
+        [
+          ...executePowerShell.argumentsPrefix,
+          encodedCommand
+        ],
+        {
+          encoding: "utf8",
+          ...execFileOptions
+        }
+      );
+    };
+    executePowerShell.argumentsPrefix = [
+      "-NoProfile",
+      "-NonInteractive",
+      "-ExecutionPolicy",
+      "Bypass",
+      "-EncodedCommand"
+    ];
+    executePowerShell.encodeCommand = (command) => Buffer2.from(command, "utf16le").toString("base64");
+    executePowerShell.escapeArgument = (value) => `'${String(value).replaceAll("'", "''")}'`;
+  }
+});
+
+// ../../node_modules/wsl-utils/utilities.js
+function parseMountPointFromConfig(content) {
+  for (const line of content.split("\n")) {
+    if (/^\s*#/.test(line)) {
+      continue;
+    }
+    const match = /^\s*root\s*=\s*(?<mountPoint>"[^"]*"|'[^']*'|[^#]*)/.exec(line);
+    if (!match) {
+      continue;
+    }
+    return match.groups.mountPoint.trim().replaceAll(/^["']|["']$/g, "");
+  }
+}
+var init_utilities = __esm({
+  "../../node_modules/wsl-utils/utilities.js"() {
+  }
+});
+
+// ../../node_modules/wsl-utils/index.js
+import { promisify as promisify2 } from "node:util";
+import childProcess2 from "node:child_process";
+import fs7, { constants as fsConstants } from "node:fs/promises";
+var execFile2, wslDrivesMountPoint, powerShellPathFromWsl, powerShellPath2, canAccessPowerShellPromise, canAccessPowerShell, wslDefaultBrowser, convertWslPathToWindows;
+var init_wsl_utils = __esm({
+  "../../node_modules/wsl-utils/index.js"() {
+    init_is_wsl();
+    init_powershell_utils();
+    init_utilities();
+    init_is_wsl();
+    execFile2 = promisify2(childProcess2.execFile);
+    wslDrivesMountPoint = /* @__PURE__ */ (() => {
+      const defaultMountPoint = "/mnt/";
+      let mountPoint;
+      return async function() {
+        if (mountPoint) {
+          return mountPoint;
+        }
+        const configFilePath = "/etc/wsl.conf";
+        let isConfigFileExists = false;
+        try {
+          await fs7.access(configFilePath, fsConstants.F_OK);
+          isConfigFileExists = true;
+        } catch {
+        }
+        if (!isConfigFileExists) {
+          return defaultMountPoint;
+        }
+        const configContent = await fs7.readFile(configFilePath, { encoding: "utf8" });
+        const parsedMountPoint = parseMountPointFromConfig(configContent);
+        if (parsedMountPoint === void 0) {
+          return defaultMountPoint;
+        }
+        mountPoint = parsedMountPoint;
+        mountPoint = mountPoint.endsWith("/") ? mountPoint : `${mountPoint}/`;
+        return mountPoint;
+      };
+    })();
+    powerShellPathFromWsl = async () => {
+      const mountPoint = await wslDrivesMountPoint();
+      return `${mountPoint}c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe`;
+    };
+    powerShellPath2 = is_wsl_default ? powerShellPathFromWsl : powerShellPath;
+    canAccessPowerShell = async () => {
+      canAccessPowerShellPromise ??= (async () => {
+        try {
+          const psPath = await powerShellPath2();
+          await fs7.access(psPath, fsConstants.X_OK);
+          return true;
+        } catch {
+          return false;
+        }
+      })();
+      return canAccessPowerShellPromise;
+    };
+    wslDefaultBrowser = async () => {
+      const psPath = await powerShellPath2();
+      const command = String.raw`(Get-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice").ProgId`;
+      const { stdout } = await executePowerShell(command, { powerShellPath: psPath });
+      return stdout.trim();
+    };
+    convertWslPathToWindows = async (path22) => {
+      if (/^[a-z]+:\/\//i.test(path22)) {
+        return path22;
+      }
+      try {
+        const { stdout } = await execFile2("wslpath", ["-aw", path22], { encoding: "utf8" });
+        return stdout.trim();
+      } catch {
+        return path22;
+      }
+    };
+  }
+});
+
+// ../../node_modules/define-lazy-prop/index.js
+function defineLazyProperty(object, propertyName, valueGetter) {
+  const define = (value) => Object.defineProperty(object, propertyName, { value, enumerable: true, writable: true });
+  Object.defineProperty(object, propertyName, {
+    configurable: true,
+    enumerable: true,
+    get() {
+      const result = valueGetter();
+      define(result);
+      return result;
+    },
+    set(value) {
+      define(value);
+    }
+  });
+  return object;
+}
+var init_define_lazy_prop = __esm({
+  "../../node_modules/define-lazy-prop/index.js"() {
+  }
+});
+
+// ../../node_modules/default-browser-id/index.js
+import { promisify as promisify3 } from "node:util";
+import process4 from "node:process";
+import { execFile as execFile3 } from "node:child_process";
+async function defaultBrowserId() {
+  if (process4.platform !== "darwin") {
+    throw new Error("macOS only");
+  }
+  const { stdout } = await execFileAsync("defaults", ["read", "com.apple.LaunchServices/com.apple.launchservices.secure", "LSHandlers"]);
+  const match = /LSHandlerRoleAll = "(?!-)(?<id>[^"]+?)";\s+?LSHandlerURLScheme = (?:http|https);/.exec(stdout);
+  const browserId = match?.groups.id ?? "com.apple.Safari";
+  if (browserId === "com.apple.safari") {
+    return "com.apple.Safari";
+  }
+  return browserId;
+}
+var execFileAsync;
+var init_default_browser_id = __esm({
+  "../../node_modules/default-browser-id/index.js"() {
+    execFileAsync = promisify3(execFile3);
+  }
+});
+
+// ../../node_modules/run-applescript/index.js
+import process5 from "node:process";
+import { promisify as promisify4 } from "node:util";
+import { execFile as execFile4, execFileSync } from "node:child_process";
+async function runAppleScript(script, { humanReadableOutput = true, signal } = {}) {
+  if (process5.platform !== "darwin") {
+    throw new Error("macOS only");
+  }
+  const outputArguments = humanReadableOutput ? [] : ["-ss"];
+  const execOptions = {};
+  if (signal) {
+    execOptions.signal = signal;
+  }
+  const { stdout } = await execFileAsync2("osascript", ["-e", script, outputArguments], execOptions);
+  return stdout.trim();
+}
+var execFileAsync2;
+var init_run_applescript = __esm({
+  "../../node_modules/run-applescript/index.js"() {
+    execFileAsync2 = promisify4(execFile4);
+  }
+});
+
+// ../../node_modules/bundle-name/index.js
+async function bundleName(bundleId) {
+  return runAppleScript(`tell application "Finder" to set app_path to application file id "${bundleId}" as string
+tell application "System Events" to get value of property list item "CFBundleName" of property list file (app_path & ":Contents:Info.plist")`);
+}
+var init_bundle_name = __esm({
+  "../../node_modules/bundle-name/index.js"() {
+    init_run_applescript();
+  }
+});
+
+// ../../node_modules/default-browser/windows.js
+import { promisify as promisify5 } from "node:util";
+import { execFile as execFile5 } from "node:child_process";
+async function defaultBrowser(_execFileAsync = execFileAsync3) {
+  const { stdout } = await _execFileAsync("reg", [
+    "QUERY",
+    " HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\http\\UserChoice",
+    "/v",
+    "ProgId"
+  ]);
+  const match = /ProgId\s*REG_SZ\s*(?<id>\S+)/.exec(stdout);
+  if (!match) {
+    throw new UnknownBrowserError(`Cannot find Windows browser in stdout: ${JSON.stringify(stdout)}`);
+  }
+  const { id } = match.groups;
+  const browser = windowsBrowserProgIds[id];
+  if (!browser) {
+    throw new UnknownBrowserError(`Unknown browser ID: ${id}`);
+  }
+  return browser;
+}
+var execFileAsync3, windowsBrowserProgIds, _windowsBrowserProgIdMap, UnknownBrowserError;
+var init_windows = __esm({
+  "../../node_modules/default-browser/windows.js"() {
+    execFileAsync3 = promisify5(execFile5);
+    windowsBrowserProgIds = {
+      MSEdgeHTM: { name: "Edge", id: "com.microsoft.edge" },
+      // The missing `L` is correct.
+      MSEdgeBHTML: { name: "Edge Beta", id: "com.microsoft.edge.beta" },
+      MSEdgeDHTML: { name: "Edge Dev", id: "com.microsoft.edge.dev" },
+      AppXq0fevzme2pys62n3e0fbqa7peapykr8v: { name: "Edge", id: "com.microsoft.edge.old" },
+      ChromeHTML: { name: "Chrome", id: "com.google.chrome" },
+      ChromeBHTML: { name: "Chrome Beta", id: "com.google.chrome.beta" },
+      ChromeDHTML: { name: "Chrome Dev", id: "com.google.chrome.dev" },
+      ChromiumHTM: { name: "Chromium", id: "org.chromium.Chromium" },
+      BraveHTML: { name: "Brave", id: "com.brave.Browser" },
+      BraveBHTML: { name: "Brave Beta", id: "com.brave.Browser.beta" },
+      BraveDHTML: { name: "Brave Dev", id: "com.brave.Browser.dev" },
+      BraveSSHTM: { name: "Brave Nightly", id: "com.brave.Browser.nightly" },
+      FirefoxURL: { name: "Firefox", id: "org.mozilla.firefox" },
+      OperaStable: { name: "Opera", id: "com.operasoftware.Opera" },
+      VivaldiHTM: { name: "Vivaldi", id: "com.vivaldi.Vivaldi" },
+      "IE.HTTP": { name: "Internet Explorer", id: "com.microsoft.ie" }
+    };
+    _windowsBrowserProgIdMap = new Map(Object.entries(windowsBrowserProgIds));
+    UnknownBrowserError = class extends Error {
+    };
+  }
+});
+
+// ../../node_modules/default-browser/index.js
+import { promisify as promisify6 } from "node:util";
+import process6 from "node:process";
+import { execFile as execFile6 } from "node:child_process";
+async function defaultBrowser2() {
+  if (process6.platform === "darwin") {
+    const id = await defaultBrowserId();
+    const name = await bundleName(id);
+    return { name, id };
+  }
+  if (process6.platform === "linux") {
+    const { stdout } = await execFileAsync4("xdg-mime", ["query", "default", "x-scheme-handler/http"]);
+    const id = stdout.trim();
+    const name = titleize(id.replace(/.desktop$/, "").replace("-", " "));
+    return { name, id };
+  }
+  if (process6.platform === "win32") {
+    return defaultBrowser();
+  }
+  throw new Error("Only macOS, Linux, and Windows are supported");
+}
+var execFileAsync4, titleize;
+var init_default_browser = __esm({
+  "../../node_modules/default-browser/index.js"() {
+    init_default_browser_id();
+    init_bundle_name();
+    init_windows();
+    init_windows();
+    execFileAsync4 = promisify6(execFile6);
+    titleize = (string) => string.toLowerCase().replaceAll(/(?:^|\s|-)\S/g, (x) => x.toUpperCase());
+  }
+});
+
+// ../../node_modules/is-in-ssh/index.js
+import process7 from "node:process";
+var isInSsh, is_in_ssh_default;
+var init_is_in_ssh = __esm({
+  "../../node_modules/is-in-ssh/index.js"() {
+    isInSsh = Boolean(process7.env.SSH_CONNECTION || process7.env.SSH_CLIENT || process7.env.SSH_TTY);
+    is_in_ssh_default = isInSsh;
+  }
+});
+
+// ../../node_modules/open/index.js
+var open_exports = {};
+__export(open_exports, {
+  apps: () => apps,
+  default: () => open_default,
+  openApp: () => openApp
+});
+import process8 from "node:process";
+import path4 from "node:path";
+import { fileURLToPath } from "node:url";
+import childProcess3 from "node:child_process";
+import fs8, { constants as fsConstants2 } from "node:fs/promises";
+function detectArchBinary(binary) {
+  if (typeof binary === "string" || Array.isArray(binary)) {
+    return binary;
+  }
+  const { [arch]: archBinary } = binary;
+  if (!archBinary) {
+    throw new Error(`${arch} is not supported`);
+  }
+  return archBinary;
+}
+function detectPlatformBinary({ [platform2]: platformBinary }, { wsl } = {}) {
+  if (wsl && is_wsl_default) {
+    return detectArchBinary(wsl);
+  }
+  if (!platformBinary) {
+    throw new Error(`${platform2} is not supported`);
+  }
+  return detectArchBinary(platformBinary);
+}
+var fallbackAttemptSymbol, __dirname, localXdgOpenPath, platform2, arch, tryEachApp, baseOpen, open, openApp, apps, open_default;
+var init_open = __esm({
+  "../../node_modules/open/index.js"() {
+    init_wsl_utils();
+    init_powershell_utils();
+    init_define_lazy_prop();
+    init_default_browser();
+    init_is_inside_container();
+    init_is_in_ssh();
+    fallbackAttemptSymbol = Symbol("fallbackAttempt");
+    __dirname = import.meta.url ? path4.dirname(fileURLToPath(import.meta.url)) : "";
+    localXdgOpenPath = path4.join(__dirname, "xdg-open");
+    ({ platform: platform2, arch } = process8);
+    tryEachApp = async (apps2, opener) => {
+      if (apps2.length === 0) {
+        return;
+      }
+      const errors = [];
+      for (const app of apps2) {
+        try {
+          return await opener(app);
+        } catch (error) {
+          errors.push(error);
+        }
+      }
+      throw new AggregateError(errors, "Failed to open in all supported apps");
+    };
+    baseOpen = async (options2) => {
+      options2 = {
+        wait: false,
+        background: false,
+        newInstance: false,
+        allowNonzeroExitCode: false,
+        ...options2
+      };
+      const isFallbackAttempt = options2[fallbackAttemptSymbol] === true;
+      delete options2[fallbackAttemptSymbol];
+      if (Array.isArray(options2.app)) {
+        return tryEachApp(options2.app, (singleApp) => baseOpen({
+          ...options2,
+          app: singleApp,
+          [fallbackAttemptSymbol]: true
+        }));
+      }
+      let { name: app, arguments: appArguments = [] } = options2.app ?? {};
+      appArguments = [...appArguments];
+      if (Array.isArray(app)) {
+        return tryEachApp(app, (appName) => baseOpen({
+          ...options2,
+          app: {
+            name: appName,
+            arguments: appArguments
+          },
+          [fallbackAttemptSymbol]: true
+        }));
+      }
+      if (app === "browser" || app === "browserPrivate") {
+        const ids = {
+          "com.google.chrome": "chrome",
+          "google-chrome.desktop": "chrome",
+          "com.brave.browser": "brave",
+          "org.mozilla.firefox": "firefox",
+          "firefox.desktop": "firefox",
+          "com.microsoft.msedge": "edge",
+          "com.microsoft.edge": "edge",
+          "com.microsoft.edgemac": "edge",
+          "microsoft-edge.desktop": "edge",
+          "com.apple.safari": "safari"
+        };
+        const flags = {
+          chrome: "--incognito",
+          brave: "--incognito",
+          firefox: "--private-window",
+          edge: "--inPrivate"
+          // Safari doesn't support private mode via command line
+        };
+        let browser;
+        if (is_wsl_default) {
+          const progId = await wslDefaultBrowser();
+          const browserInfo = _windowsBrowserProgIdMap.get(progId);
+          browser = browserInfo ?? {};
+        } else {
+          browser = await defaultBrowser2();
+        }
+        if (browser.id in ids) {
+          const browserName = ids[browser.id.toLowerCase()];
+          if (app === "browserPrivate") {
+            if (browserName === "safari") {
+              throw new Error("Safari doesn't support opening in private mode via command line");
+            }
+            appArguments.push(flags[browserName]);
+          }
+          return baseOpen({
+            ...options2,
+            app: {
+              name: apps[browserName],
+              arguments: appArguments
+            }
+          });
+        }
+        throw new Error(`${browser.name} is not supported as a default browser`);
+      }
+      let command;
+      const cliArguments = [];
+      const childProcessOptions = {};
+      let shouldUseWindowsInWsl = false;
+      if (is_wsl_default && !isInsideContainer() && !is_in_ssh_default && !app) {
+        shouldUseWindowsInWsl = await canAccessPowerShell();
+      }
+      if (platform2 === "darwin") {
+        command = "open";
+        if (options2.wait) {
+          cliArguments.push("--wait-apps");
+        }
+        if (options2.background) {
+          cliArguments.push("--background");
+        }
+        if (options2.newInstance) {
+          cliArguments.push("--new");
+        }
+        if (app) {
+          cliArguments.push("-a", app);
+        }
+      } else if (platform2 === "win32" || shouldUseWindowsInWsl) {
+        command = await powerShellPath2();
+        cliArguments.push(...executePowerShell.argumentsPrefix);
+        if (!is_wsl_default) {
+          childProcessOptions.windowsVerbatimArguments = true;
+        }
+        if (is_wsl_default && options2.target) {
+          options2.target = await convertWslPathToWindows(options2.target);
+        }
+        const encodedArguments = ["$ProgressPreference = 'SilentlyContinue';", "Start"];
+        if (options2.wait) {
+          encodedArguments.push("-Wait");
+        }
+        if (app) {
+          encodedArguments.push(executePowerShell.escapeArgument(app));
+          if (options2.target) {
+            appArguments.push(options2.target);
+          }
+        } else if (options2.target) {
+          encodedArguments.push(executePowerShell.escapeArgument(options2.target));
+        }
+        if (appArguments.length > 0) {
+          appArguments = appArguments.map((argument) => executePowerShell.escapeArgument(argument));
+          encodedArguments.push("-ArgumentList", appArguments.join(","));
+        }
+        options2.target = executePowerShell.encodeCommand(encodedArguments.join(" "));
+        if (!options2.wait) {
+          childProcessOptions.stdio = "ignore";
+        }
+      } else {
+        if (app) {
+          command = app;
+        } else {
+          const isBundled = !__dirname || __dirname === "/";
+          let exeLocalXdgOpen = false;
+          try {
+            await fs8.access(localXdgOpenPath, fsConstants2.X_OK);
+            exeLocalXdgOpen = true;
+          } catch {
+          }
+          const useSystemXdgOpen = process8.versions.electron ?? (platform2 === "android" || isBundled || !exeLocalXdgOpen);
+          command = useSystemXdgOpen ? "xdg-open" : localXdgOpenPath;
+        }
+        if (appArguments.length > 0) {
+          cliArguments.push(...appArguments);
+        }
+        if (!options2.wait) {
+          childProcessOptions.stdio = "ignore";
+          childProcessOptions.detached = true;
+        }
+      }
+      if (platform2 === "darwin" && appArguments.length > 0) {
+        cliArguments.push("--args", ...appArguments);
+      }
+      if (options2.target) {
+        cliArguments.push(options2.target);
+      }
+      const subprocess = childProcess3.spawn(command, cliArguments, childProcessOptions);
+      if (options2.wait) {
+        return new Promise((resolve7, reject) => {
+          subprocess.once("error", reject);
+          subprocess.once("close", (exitCode) => {
+            if (!options2.allowNonzeroExitCode && exitCode !== 0) {
+              reject(new Error(`Exited with code ${exitCode}`));
+              return;
+            }
+            resolve7(subprocess);
+          });
+        });
+      }
+      if (isFallbackAttempt) {
+        return new Promise((resolve7, reject) => {
+          subprocess.once("error", reject);
+          subprocess.once("spawn", () => {
+            subprocess.once("close", (exitCode) => {
+              subprocess.off("error", reject);
+              if (exitCode !== 0) {
+                reject(new Error(`Exited with code ${exitCode}`));
+                return;
+              }
+              subprocess.unref();
+              resolve7(subprocess);
+            });
+          });
+        });
+      }
+      subprocess.unref();
+      return new Promise((resolve7, reject) => {
+        subprocess.once("error", reject);
+        subprocess.once("spawn", () => {
+          subprocess.off("error", reject);
+          resolve7(subprocess);
+        });
+      });
+    };
+    open = (target, options2) => {
+      if (typeof target !== "string") {
+        throw new TypeError("Expected a `target`");
+      }
+      return baseOpen({
+        ...options2,
+        target
+      });
+    };
+    openApp = (name, options2) => {
+      if (typeof name !== "string" && !Array.isArray(name)) {
+        throw new TypeError("Expected a valid `name`");
+      }
+      const { arguments: appArguments = [] } = options2 ?? {};
+      if (appArguments !== void 0 && appArguments !== null && !Array.isArray(appArguments)) {
+        throw new TypeError("Expected `appArguments` as Array type");
+      }
+      return baseOpen({
+        ...options2,
+        app: {
+          name,
+          arguments: appArguments
+        }
+      });
+    };
+    apps = {
+      browser: "browser",
+      browserPrivate: "browserPrivate"
+    };
+    defineLazyProperty(apps, "chrome", () => detectPlatformBinary({
+      darwin: "google chrome",
+      win32: "chrome",
+      // `chromium-browser` is the older deb package name used by Ubuntu/Debian before snap.
+      linux: ["google-chrome", "google-chrome-stable", "chromium", "chromium-browser"]
+    }, {
+      wsl: {
+        ia32: "/mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe",
+        x64: ["/mnt/c/Program Files/Google/Chrome/Application/chrome.exe", "/mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe"]
+      }
+    }));
+    defineLazyProperty(apps, "brave", () => detectPlatformBinary({
+      darwin: "brave browser",
+      win32: "brave",
+      linux: ["brave-browser", "brave"]
+    }, {
+      wsl: {
+        ia32: "/mnt/c/Program Files (x86)/BraveSoftware/Brave-Browser/Application/brave.exe",
+        x64: ["/mnt/c/Program Files/BraveSoftware/Brave-Browser/Application/brave.exe", "/mnt/c/Program Files (x86)/BraveSoftware/Brave-Browser/Application/brave.exe"]
+      }
+    }));
+    defineLazyProperty(apps, "firefox", () => detectPlatformBinary({
+      darwin: "firefox",
+      win32: String.raw`C:\Program Files\Mozilla Firefox\firefox.exe`,
+      linux: "firefox"
+    }, {
+      wsl: "/mnt/c/Program Files/Mozilla Firefox/firefox.exe"
+    }));
+    defineLazyProperty(apps, "edge", () => detectPlatformBinary({
+      darwin: "microsoft edge",
+      win32: "msedge",
+      linux: ["microsoft-edge", "microsoft-edge-dev"]
+    }, {
+      wsl: "/mnt/c/Program Files (x86)/Microsoft/Edge/Application/msedge.exe"
+    }));
+    defineLazyProperty(apps, "safari", () => detectPlatformBinary({
+      darwin: "Safari"
+    }));
+    open_default = open;
+  }
+});
+
 // ../../node_modules/hcl2-json-parser/dist/index.js
 var require_dist = __commonJS({
   "../../node_modules/hcl2-json-parser/dist/index.js"(exports, module) {
@@ -41,8 +754,8 @@ var require_dist = __commonJS({
       var $global, $module, $NaN = NaN;
       if ("undefined" != typeof window ? $global = window : "undefined" != typeof self ? $global = self : "undefined" != typeof global ? ($global = global).require = __require : $global = this, void 0 === $global || void 0 === $global.Array) throw new Error("no global object found");
       if ("undefined" != typeof module && ($module = module), !$global.fs && $global.require) try {
-        var fs26 = $global.require("fs");
-        "object" == typeof fs26 && null !== fs26 && 0 !== Object.keys(fs26).length && ($global.fs = fs26);
+        var fs25 = $global.require("fs");
+        "object" == typeof fs25 && null !== fs25 && 0 !== Object.keys(fs25).length && ($global.fs = fs25);
       } catch (e) {
       }
       if (!$global.fs) {
@@ -182233,8 +182946,8 @@ var require_dist = __commonJS({
 import { Command } from "commander";
 
 // src/commands/init.tsx
-import React2, { useState as useState2, useEffect as useEffect2 } from "react";
-import { render as render2, Text as Text2, Box as Box2, useInput, useApp as useApp2 } from "ink";
+import React2, { useState, useEffect } from "react";
+import { render as render2, Text as Text2, Box as Box2, useInput, useApp } from "ink";
 import "ink-spinner";
 import * as fs10 from "fs";
 import * as path6 from "path";
@@ -182407,7 +183120,7 @@ function generateCertificate(domain, keys = []) {
 
 // src/lib/analytics/index.ts
 import { PostHog } from "posthog-node";
-import * as os4 from "os";
+import * as os5 from "os";
 import * as crypto from "crypto";
 
 // src/lib/project/config.ts
@@ -182452,7 +183165,7 @@ function writeProjectId(projectId, projectDir = process.cwd()) {
 // src/lib/auth/credentials.ts
 import * as fs9 from "fs";
 import * as path5 from "path";
-import * as os3 from "os";
+import * as os4 from "os";
 
 // src/lib/auth/errors.ts
 var RefreshTokenExpiredError = class extends Error {
@@ -182525,642 +183238,22 @@ async function refreshAccessToken(refreshToken) {
 }
 
 // src/lib/auth/login.tsx
-import React, { useState, useEffect } from "react";
-import { render, Box, Text, useApp } from "ink";
+import React from "react";
+import { render, Box, Text } from "ink";
 import Spinner from "ink-spinner";
 
-// ../../node_modules/open/index.js
-import process8 from "node:process";
-import path3 from "node:path";
-import { fileURLToPath } from "node:url";
-import childProcess3 from "node:child_process";
-import fs7, { constants as fsConstants2 } from "node:fs/promises";
-
-// ../../node_modules/wsl-utils/index.js
-import { promisify as promisify2 } from "node:util";
-import childProcess2 from "node:child_process";
-import fs6, { constants as fsConstants } from "node:fs/promises";
-
-// ../../node_modules/is-wsl/index.js
-import process2 from "node:process";
-import os2 from "node:os";
-import fs5 from "node:fs";
-
-// ../../node_modules/is-inside-container/index.js
-import fs4 from "node:fs";
-
-// ../../node_modules/is-docker/index.js
-import fs3 from "node:fs";
-var isDockerCached;
-function hasDockerEnv() {
-  try {
-    fs3.statSync("/.dockerenv");
-    return true;
-  } catch {
-    return false;
-  }
-}
-function hasDockerCGroup() {
-  try {
-    return fs3.readFileSync("/proc/self/cgroup", "utf8").includes("docker");
-  } catch {
-    return false;
-  }
-}
-function isDocker() {
-  if (isDockerCached === void 0) {
-    isDockerCached = hasDockerEnv() || hasDockerCGroup();
-  }
-  return isDockerCached;
-}
-
-// ../../node_modules/is-inside-container/index.js
-var cachedResult;
-var hasContainerEnv = () => {
-  try {
-    fs4.statSync("/run/.containerenv");
-    return true;
-  } catch {
-    return false;
-  }
-};
-function isInsideContainer() {
-  if (cachedResult === void 0) {
-    cachedResult = hasContainerEnv() || isDocker();
-  }
-  return cachedResult;
-}
-
-// ../../node_modules/is-wsl/index.js
-var isWsl = () => {
-  if (process2.platform !== "linux") {
-    return false;
-  }
-  if (os2.release().toLowerCase().includes("microsoft")) {
-    if (isInsideContainer()) {
-      return false;
-    }
-    return true;
-  }
-  try {
-    return fs5.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft") ? !isInsideContainer() : false;
-  } catch {
-    return false;
-  }
-};
-var is_wsl_default = process2.env.__IS_WSL_TEST__ ? isWsl : isWsl();
-
-// ../../node_modules/powershell-utils/index.js
-import process3 from "node:process";
-import { Buffer as Buffer2 } from "node:buffer";
-import { promisify } from "node:util";
-import childProcess from "node:child_process";
-var execFile = promisify(childProcess.execFile);
-var powerShellPath = () => `${process3.env.SYSTEMROOT || process3.env.windir || String.raw`C:\Windows`}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe`;
-var executePowerShell = async (command, options2 = {}) => {
-  const {
-    powerShellPath: psPath,
-    ...execFileOptions
-  } = options2;
-  const encodedCommand = executePowerShell.encodeCommand(command);
-  return execFile(
-    psPath ?? powerShellPath(),
-    [
-      ...executePowerShell.argumentsPrefix,
-      encodedCommand
-    ],
-    {
-      encoding: "utf8",
-      ...execFileOptions
-    }
-  );
-};
-executePowerShell.argumentsPrefix = [
-  "-NoProfile",
-  "-NonInteractive",
-  "-ExecutionPolicy",
-  "Bypass",
-  "-EncodedCommand"
-];
-executePowerShell.encodeCommand = (command) => Buffer2.from(command, "utf16le").toString("base64");
-executePowerShell.escapeArgument = (value) => `'${String(value).replaceAll("'", "''")}'`;
-
-// ../../node_modules/wsl-utils/utilities.js
-function parseMountPointFromConfig(content) {
-  for (const line of content.split("\n")) {
-    if (/^\s*#/.test(line)) {
-      continue;
-    }
-    const match = /^\s*root\s*=\s*(?<mountPoint>"[^"]*"|'[^']*'|[^#]*)/.exec(line);
-    if (!match) {
-      continue;
-    }
-    return match.groups.mountPoint.trim().replaceAll(/^["']|["']$/g, "");
-  }
-}
-
-// ../../node_modules/wsl-utils/index.js
-var execFile2 = promisify2(childProcess2.execFile);
-var wslDrivesMountPoint = /* @__PURE__ */ (() => {
-  const defaultMountPoint = "/mnt/";
-  let mountPoint;
-  return async function() {
-    if (mountPoint) {
-      return mountPoint;
-    }
-    const configFilePath = "/etc/wsl.conf";
-    let isConfigFileExists = false;
-    try {
-      await fs6.access(configFilePath, fsConstants.F_OK);
-      isConfigFileExists = true;
-    } catch {
-    }
-    if (!isConfigFileExists) {
-      return defaultMountPoint;
-    }
-    const configContent = await fs6.readFile(configFilePath, { encoding: "utf8" });
-    const parsedMountPoint = parseMountPointFromConfig(configContent);
-    if (parsedMountPoint === void 0) {
-      return defaultMountPoint;
-    }
-    mountPoint = parsedMountPoint;
-    mountPoint = mountPoint.endsWith("/") ? mountPoint : `${mountPoint}/`;
-    return mountPoint;
-  };
-})();
-var powerShellPathFromWsl = async () => {
-  const mountPoint = await wslDrivesMountPoint();
-  return `${mountPoint}c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe`;
-};
-var powerShellPath2 = is_wsl_default ? powerShellPathFromWsl : powerShellPath;
-var canAccessPowerShellPromise;
-var canAccessPowerShell = async () => {
-  canAccessPowerShellPromise ??= (async () => {
-    try {
-      const psPath = await powerShellPath2();
-      await fs6.access(psPath, fsConstants.X_OK);
-      return true;
-    } catch {
-      return false;
-    }
-  })();
-  return canAccessPowerShellPromise;
-};
-var wslDefaultBrowser = async () => {
-  const psPath = await powerShellPath2();
-  const command = String.raw`(Get-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice").ProgId`;
-  const { stdout } = await executePowerShell(command, { powerShellPath: psPath });
-  return stdout.trim();
-};
-var convertWslPathToWindows = async (path22) => {
-  if (/^[a-z]+:\/\//i.test(path22)) {
-    return path22;
-  }
-  try {
-    const { stdout } = await execFile2("wslpath", ["-aw", path22], { encoding: "utf8" });
-    return stdout.trim();
-  } catch {
-    return path22;
-  }
-};
-
-// ../../node_modules/define-lazy-prop/index.js
-function defineLazyProperty(object, propertyName, valueGetter) {
-  const define = (value) => Object.defineProperty(object, propertyName, { value, enumerable: true, writable: true });
-  Object.defineProperty(object, propertyName, {
-    configurable: true,
-    enumerable: true,
-    get() {
-      const result = valueGetter();
-      define(result);
-      return result;
-    },
-    set(value) {
-      define(value);
-    }
-  });
-  return object;
-}
-
-// ../../node_modules/default-browser/index.js
-import { promisify as promisify6 } from "node:util";
-import process6 from "node:process";
-import { execFile as execFile6 } from "node:child_process";
-
-// ../../node_modules/default-browser-id/index.js
-import { promisify as promisify3 } from "node:util";
-import process4 from "node:process";
-import { execFile as execFile3 } from "node:child_process";
-var execFileAsync = promisify3(execFile3);
-async function defaultBrowserId() {
-  if (process4.platform !== "darwin") {
-    throw new Error("macOS only");
-  }
-  const { stdout } = await execFileAsync("defaults", ["read", "com.apple.LaunchServices/com.apple.launchservices.secure", "LSHandlers"]);
-  const match = /LSHandlerRoleAll = "(?!-)(?<id>[^"]+?)";\s+?LSHandlerURLScheme = (?:http|https);/.exec(stdout);
-  const browserId = match?.groups.id ?? "com.apple.Safari";
-  if (browserId === "com.apple.safari") {
-    return "com.apple.Safari";
-  }
-  return browserId;
-}
-
-// ../../node_modules/run-applescript/index.js
-import process5 from "node:process";
-import { promisify as promisify4 } from "node:util";
-import { execFile as execFile4, execFileSync } from "node:child_process";
-var execFileAsync2 = promisify4(execFile4);
-async function runAppleScript(script, { humanReadableOutput = true, signal } = {}) {
-  if (process5.platform !== "darwin") {
-    throw new Error("macOS only");
-  }
-  const outputArguments = humanReadableOutput ? [] : ["-ss"];
-  const execOptions = {};
-  if (signal) {
-    execOptions.signal = signal;
-  }
-  const { stdout } = await execFileAsync2("osascript", ["-e", script, outputArguments], execOptions);
-  return stdout.trim();
-}
-
-// ../../node_modules/bundle-name/index.js
-async function bundleName(bundleId) {
-  return runAppleScript(`tell application "Finder" to set app_path to application file id "${bundleId}" as string
-tell application "System Events" to get value of property list item "CFBundleName" of property list file (app_path & ":Contents:Info.plist")`);
-}
-
-// ../../node_modules/default-browser/windows.js
-import { promisify as promisify5 } from "node:util";
-import { execFile as execFile5 } from "node:child_process";
-var execFileAsync3 = promisify5(execFile5);
-var windowsBrowserProgIds = {
-  MSEdgeHTM: { name: "Edge", id: "com.microsoft.edge" },
-  // The missing `L` is correct.
-  MSEdgeBHTML: { name: "Edge Beta", id: "com.microsoft.edge.beta" },
-  MSEdgeDHTML: { name: "Edge Dev", id: "com.microsoft.edge.dev" },
-  AppXq0fevzme2pys62n3e0fbqa7peapykr8v: { name: "Edge", id: "com.microsoft.edge.old" },
-  ChromeHTML: { name: "Chrome", id: "com.google.chrome" },
-  ChromeBHTML: { name: "Chrome Beta", id: "com.google.chrome.beta" },
-  ChromeDHTML: { name: "Chrome Dev", id: "com.google.chrome.dev" },
-  ChromiumHTM: { name: "Chromium", id: "org.chromium.Chromium" },
-  BraveHTML: { name: "Brave", id: "com.brave.Browser" },
-  BraveBHTML: { name: "Brave Beta", id: "com.brave.Browser.beta" },
-  BraveDHTML: { name: "Brave Dev", id: "com.brave.Browser.dev" },
-  BraveSSHTM: { name: "Brave Nightly", id: "com.brave.Browser.nightly" },
-  FirefoxURL: { name: "Firefox", id: "org.mozilla.firefox" },
-  OperaStable: { name: "Opera", id: "com.operasoftware.Opera" },
-  VivaldiHTM: { name: "Vivaldi", id: "com.vivaldi.Vivaldi" },
-  "IE.HTTP": { name: "Internet Explorer", id: "com.microsoft.ie" }
-};
-var _windowsBrowserProgIdMap = new Map(Object.entries(windowsBrowserProgIds));
-var UnknownBrowserError = class extends Error {
-};
-async function defaultBrowser(_execFileAsync = execFileAsync3) {
-  const { stdout } = await _execFileAsync("reg", [
-    "QUERY",
-    " HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\http\\UserChoice",
-    "/v",
-    "ProgId"
-  ]);
-  const match = /ProgId\s*REG_SZ\s*(?<id>\S+)/.exec(stdout);
-  if (!match) {
-    throw new UnknownBrowserError(`Cannot find Windows browser in stdout: ${JSON.stringify(stdout)}`);
-  }
-  const { id } = match.groups;
-  const browser = windowsBrowserProgIds[id];
-  if (!browser) {
-    throw new UnknownBrowserError(`Unknown browser ID: ${id}`);
-  }
-  return browser;
-}
-
-// ../../node_modules/default-browser/index.js
-var execFileAsync4 = promisify6(execFile6);
-var titleize = (string) => string.toLowerCase().replaceAll(/(?:^|\s|-)\S/g, (x) => x.toUpperCase());
-async function defaultBrowser2() {
-  if (process6.platform === "darwin") {
-    const id = await defaultBrowserId();
-    const name = await bundleName(id);
-    return { name, id };
-  }
-  if (process6.platform === "linux") {
-    const { stdout } = await execFileAsync4("xdg-mime", ["query", "default", "x-scheme-handler/http"]);
-    const id = stdout.trim();
-    const name = titleize(id.replace(/.desktop$/, "").replace("-", " "));
-    return { name, id };
-  }
-  if (process6.platform === "win32") {
-    return defaultBrowser();
-  }
-  throw new Error("Only macOS, Linux, and Windows are supported");
-}
-
-// ../../node_modules/is-in-ssh/index.js
-import process7 from "node:process";
-var isInSsh = Boolean(process7.env.SSH_CONNECTION || process7.env.SSH_CLIENT || process7.env.SSH_TTY);
-var is_in_ssh_default = isInSsh;
-
-// ../../node_modules/open/index.js
-var fallbackAttemptSymbol = Symbol("fallbackAttempt");
-var __dirname = import.meta.url ? path3.dirname(fileURLToPath(import.meta.url)) : "";
-var localXdgOpenPath = path3.join(__dirname, "xdg-open");
-var { platform: platform2, arch } = process8;
-var tryEachApp = async (apps2, opener) => {
-  if (apps2.length === 0) {
-    return;
-  }
-  const errors = [];
-  for (const app of apps2) {
-    try {
-      return await opener(app);
-    } catch (error) {
-      errors.push(error);
-    }
-  }
-  throw new AggregateError(errors, "Failed to open in all supported apps");
-};
-var baseOpen = async (options2) => {
-  options2 = {
-    wait: false,
-    background: false,
-    newInstance: false,
-    allowNonzeroExitCode: false,
-    ...options2
-  };
-  const isFallbackAttempt = options2[fallbackAttemptSymbol] === true;
-  delete options2[fallbackAttemptSymbol];
-  if (Array.isArray(options2.app)) {
-    return tryEachApp(options2.app, (singleApp) => baseOpen({
-      ...options2,
-      app: singleApp,
-      [fallbackAttemptSymbol]: true
-    }));
-  }
-  let { name: app, arguments: appArguments = [] } = options2.app ?? {};
-  appArguments = [...appArguments];
-  if (Array.isArray(app)) {
-    return tryEachApp(app, (appName) => baseOpen({
-      ...options2,
-      app: {
-        name: appName,
-        arguments: appArguments
-      },
-      [fallbackAttemptSymbol]: true
-    }));
-  }
-  if (app === "browser" || app === "browserPrivate") {
-    const ids = {
-      "com.google.chrome": "chrome",
-      "google-chrome.desktop": "chrome",
-      "com.brave.browser": "brave",
-      "org.mozilla.firefox": "firefox",
-      "firefox.desktop": "firefox",
-      "com.microsoft.msedge": "edge",
-      "com.microsoft.edge": "edge",
-      "com.microsoft.edgemac": "edge",
-      "microsoft-edge.desktop": "edge",
-      "com.apple.safari": "safari"
-    };
-    const flags = {
-      chrome: "--incognito",
-      brave: "--incognito",
-      firefox: "--private-window",
-      edge: "--inPrivate"
-      // Safari doesn't support private mode via command line
-    };
-    let browser;
-    if (is_wsl_default) {
-      const progId = await wslDefaultBrowser();
-      const browserInfo = _windowsBrowserProgIdMap.get(progId);
-      browser = browserInfo ?? {};
-    } else {
-      browser = await defaultBrowser2();
-    }
-    if (browser.id in ids) {
-      const browserName = ids[browser.id.toLowerCase()];
-      if (app === "browserPrivate") {
-        if (browserName === "safari") {
-          throw new Error("Safari doesn't support opening in private mode via command line");
-        }
-        appArguments.push(flags[browserName]);
-      }
-      return baseOpen({
-        ...options2,
-        app: {
-          name: apps[browserName],
-          arguments: appArguments
-        }
-      });
-    }
-    throw new Error(`${browser.name} is not supported as a default browser`);
-  }
-  let command;
-  const cliArguments = [];
-  const childProcessOptions = {};
-  let shouldUseWindowsInWsl = false;
-  if (is_wsl_default && !isInsideContainer() && !is_in_ssh_default && !app) {
-    shouldUseWindowsInWsl = await canAccessPowerShell();
-  }
-  if (platform2 === "darwin") {
-    command = "open";
-    if (options2.wait) {
-      cliArguments.push("--wait-apps");
-    }
-    if (options2.background) {
-      cliArguments.push("--background");
-    }
-    if (options2.newInstance) {
-      cliArguments.push("--new");
-    }
-    if (app) {
-      cliArguments.push("-a", app);
-    }
-  } else if (platform2 === "win32" || shouldUseWindowsInWsl) {
-    command = await powerShellPath2();
-    cliArguments.push(...executePowerShell.argumentsPrefix);
-    if (!is_wsl_default) {
-      childProcessOptions.windowsVerbatimArguments = true;
-    }
-    if (is_wsl_default && options2.target) {
-      options2.target = await convertWslPathToWindows(options2.target);
-    }
-    const encodedArguments = ["$ProgressPreference = 'SilentlyContinue';", "Start"];
-    if (options2.wait) {
-      encodedArguments.push("-Wait");
-    }
-    if (app) {
-      encodedArguments.push(executePowerShell.escapeArgument(app));
-      if (options2.target) {
-        appArguments.push(options2.target);
-      }
-    } else if (options2.target) {
-      encodedArguments.push(executePowerShell.escapeArgument(options2.target));
-    }
-    if (appArguments.length > 0) {
-      appArguments = appArguments.map((argument) => executePowerShell.escapeArgument(argument));
-      encodedArguments.push("-ArgumentList", appArguments.join(","));
-    }
-    options2.target = executePowerShell.encodeCommand(encodedArguments.join(" "));
-    if (!options2.wait) {
-      childProcessOptions.stdio = "ignore";
-    }
-  } else {
-    if (app) {
-      command = app;
-    } else {
-      const isBundled = !__dirname || __dirname === "/";
-      let exeLocalXdgOpen = false;
-      try {
-        await fs7.access(localXdgOpenPath, fsConstants2.X_OK);
-        exeLocalXdgOpen = true;
-      } catch {
-      }
-      const useSystemXdgOpen = process8.versions.electron ?? (platform2 === "android" || isBundled || !exeLocalXdgOpen);
-      command = useSystemXdgOpen ? "xdg-open" : localXdgOpenPath;
-    }
-    if (appArguments.length > 0) {
-      cliArguments.push(...appArguments);
-    }
-    if (!options2.wait) {
-      childProcessOptions.stdio = "ignore";
-      childProcessOptions.detached = true;
-    }
-  }
-  if (platform2 === "darwin" && appArguments.length > 0) {
-    cliArguments.push("--args", ...appArguments);
-  }
-  if (options2.target) {
-    cliArguments.push(options2.target);
-  }
-  const subprocess = childProcess3.spawn(command, cliArguments, childProcessOptions);
-  if (options2.wait) {
-    return new Promise((resolve7, reject) => {
-      subprocess.once("error", reject);
-      subprocess.once("close", (exitCode) => {
-        if (!options2.allowNonzeroExitCode && exitCode !== 0) {
-          reject(new Error(`Exited with code ${exitCode}`));
-          return;
-        }
-        resolve7(subprocess);
-      });
-    });
-  }
-  if (isFallbackAttempt) {
-    return new Promise((resolve7, reject) => {
-      subprocess.once("error", reject);
-      subprocess.once("spawn", () => {
-        subprocess.once("close", (exitCode) => {
-          subprocess.off("error", reject);
-          if (exitCode !== 0) {
-            reject(new Error(`Exited with code ${exitCode}`));
-            return;
-          }
-          subprocess.unref();
-          resolve7(subprocess);
-        });
-      });
-    });
-  }
-  subprocess.unref();
-  return new Promise((resolve7, reject) => {
-    subprocess.once("error", reject);
-    subprocess.once("spawn", () => {
-      subprocess.off("error", reject);
-      resolve7(subprocess);
-    });
-  });
-};
-var open = (target, options2) => {
-  if (typeof target !== "string") {
-    throw new TypeError("Expected a `target`");
-  }
-  return baseOpen({
-    ...options2,
-    target
-  });
-};
-function detectArchBinary(binary) {
-  if (typeof binary === "string" || Array.isArray(binary)) {
-    return binary;
-  }
-  const { [arch]: archBinary } = binary;
-  if (!archBinary) {
-    throw new Error(`${arch} is not supported`);
-  }
-  return archBinary;
-}
-function detectPlatformBinary({ [platform2]: platformBinary }, { wsl } = {}) {
-  if (wsl && is_wsl_default) {
-    return detectArchBinary(wsl);
-  }
-  if (!platformBinary) {
-    throw new Error(`${platform2} is not supported`);
-  }
-  return detectArchBinary(platformBinary);
-}
-var apps = {
-  browser: "browser",
-  browserPrivate: "browserPrivate"
-};
-defineLazyProperty(apps, "chrome", () => detectPlatformBinary({
-  darwin: "google chrome",
-  win32: "chrome",
-  // `chromium-browser` is the older deb package name used by Ubuntu/Debian before snap.
-  linux: ["google-chrome", "google-chrome-stable", "chromium", "chromium-browser"]
-}, {
-  wsl: {
-    ia32: "/mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe",
-    x64: ["/mnt/c/Program Files/Google/Chrome/Application/chrome.exe", "/mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe"]
-  }
-}));
-defineLazyProperty(apps, "brave", () => detectPlatformBinary({
-  darwin: "brave browser",
-  win32: "brave",
-  linux: ["brave-browser", "brave"]
-}, {
-  wsl: {
-    ia32: "/mnt/c/Program Files (x86)/BraveSoftware/Brave-Browser/Application/brave.exe",
-    x64: ["/mnt/c/Program Files/BraveSoftware/Brave-Browser/Application/brave.exe", "/mnt/c/Program Files (x86)/BraveSoftware/Brave-Browser/Application/brave.exe"]
-  }
-}));
-defineLazyProperty(apps, "firefox", () => detectPlatformBinary({
-  darwin: "firefox",
-  win32: String.raw`C:\Program Files\Mozilla Firefox\firefox.exe`,
-  linux: "firefox"
-}, {
-  wsl: "/mnt/c/Program Files/Mozilla Firefox/firefox.exe"
-}));
-defineLazyProperty(apps, "edge", () => detectPlatformBinary({
-  darwin: "microsoft edge",
-  win32: "msedge",
-  linux: ["microsoft-edge", "microsoft-edge-dev"]
-}, {
-  wsl: "/mnt/c/Program Files (x86)/Microsoft/Edge/Application/msedge.exe"
-}));
-defineLazyProperty(apps, "safari", () => detectPlatformBinary({
-  darwin: "Safari"
-}));
-var open_default = open;
-
 // src/lib/dev/debug-logger.ts
-import * as fs8 from "fs";
-import * as path4 from "path";
+import * as fs3 from "fs";
+import * as os2 from "os";
+import * as path3 from "path";
 var DEBUG_LOG_PATH = ".specific/debug.log";
 var logStream = null;
-function getLogStream() {
-  if (logStream) {
-    return logStream;
-  }
-  const logPath = path4.join(process.cwd(), DEBUG_LOG_PATH);
-  fs8.mkdirSync(path4.dirname(logPath), { recursive: true });
-  logStream = fs8.createWriteStream(logPath, { flags: "a" });
-  return logStream;
-}
 function writeLog(source, message) {
-  const stream = getLogStream();
+  const logPath = path3.join(os2.homedir(), DEBUG_LOG_PATH);
+  fs3.mkdirSync(path3.dirname(logPath), { recursive: true });
   const timestamp = (/* @__PURE__ */ new Date()).toISOString();
   const line = message.endsWith("\n") ? message : message + "\n";
-  stream.write(`[${timestamp}] [${source}] ${line}`);
+  fs3.appendFileSync(logPath, `[${timestamp}] [${source}] ${line}`);
 }
 function pipeProcess(source, proc) {
   proc.stdout?.on("data", (data) => {
@@ -183471,127 +183564,169 @@ var ApiClient = class {
   }
 };
 
+// src/lib/auth/login-flow.ts
+function runLoginFlow(options2) {
+  const { setState, isReauthentication } = options2;
+  let cancelled = false;
+  async function run() {
+    try {
+      setState({ phase: "initiating" });
+      writeLog("auth", "Starting login flow");
+      if (isReauthentication) {
+        clearUserCredentials();
+      }
+      writeLog("auth", "Initiating device authorization with WorkOS");
+      const deviceAuth = await initiateDeviceAuthorization();
+      writeLog(
+        "auth",
+        `Device authorization received: user_code=${deviceAuth.user_code}`
+      );
+      if (cancelled) return;
+      setState({
+        phase: "waiting-for-browser",
+        userCode: deviceAuth.user_code,
+        verificationUri: deviceAuth.verification_uri_complete
+      });
+      const { default: open3 } = await Promise.resolve().then(() => (init_open(), open_exports));
+      await open3(deviceAuth.verification_uri_complete);
+      const token = await pollUntilToken(deviceAuth, () => cancelled);
+      if (cancelled || !token) return;
+      writeLog("auth", "Fetching user info from platform API...");
+      const client2 = new ApiClient(token.access_token);
+      const user = await client2.getMe();
+      writeLog("auth", `User info received: id=${user.id}`);
+      if (cancelled) return;
+      writeLog("auth", "Writing credentials to disk...");
+      writeUserCredentials({
+        accessToken: token.access_token,
+        refreshToken: token.refresh_token,
+        expiresAt: Date.now() + token.expires_in * 1e3,
+        userId: user.id
+      });
+      writeLog("auth", "Credentials written successfully");
+      setState({ phase: "success", email: token.user.email });
+      writeLog("auth", "Login flow completed successfully");
+    } catch (err) {
+      if (cancelled) return;
+      const message = err instanceof Error ? err.message : String(err);
+      writeLog("auth", `Login error: ${message}`);
+      setState({ phase: "error", message });
+    }
+  }
+  run();
+  return {
+    cancel: () => {
+      cancelled = true;
+    }
+  };
+}
+async function pollUntilToken(deviceAuth, isCancelled) {
+  let interval = deviceAuth.interval * 1e3;
+  const expiresAt = Date.now() + deviceAuth.expires_in * 1e3;
+  while (!isCancelled() && Date.now() < expiresAt) {
+    await sleep(interval);
+    if (isCancelled()) return null;
+    writeLog(
+      "auth",
+      `Polling for token (timeRemaining=${Math.round((expiresAt - Date.now()) / 1e3)}s)`
+    );
+    const response = await pollForToken(deviceAuth.device_code);
+    writeLog(
+      "auth",
+      `Poll response: ${JSON.stringify(response).substring(0, 200)}`
+    );
+    if (!("error" in response)) {
+      writeLog("auth", "Token received successfully from WorkOS");
+      return response;
+    }
+    if (response.error === "slow_down") {
+      interval += 1e3;
+      writeLog("auth", `Slowing down, new interval: ${interval}ms`);
+    } else if (response.error !== "authorization_pending") {
+      throw new Error(`Authentication failed: ${response.error}`);
+    }
+  }
+  if (!isCancelled()) {
+    throw new Error("Authentication timed out. Please try again.");
+  }
+  return null;
+}
+function sleep(ms) {
+  return new Promise((resolve7) => setTimeout(resolve7, ms));
+}
+
 // src/lib/auth/login.tsx
+function LoginUI({
+  state,
+  isReauthentication
+}) {
+  if (state.phase === "error") {
+    return /* @__PURE__ */ React.createElement(Text, { color: "red" }, "Error: ", state.message);
+  }
+  if (state.phase === "success") {
+    return /* @__PURE__ */ React.createElement(Text, { color: "green" }, isReauthentication ? "Re-authenticated" : "Logged in", " as ", state.email);
+  }
+  return /* @__PURE__ */ React.createElement(Box, { flexDirection: "column", gap: 1 }, isReauthentication && /* @__PURE__ */ React.createElement(Text, { color: "yellow" }, "Session expired. Please log in again."), /* @__PURE__ */ React.createElement(Text, { bold: true }, "Log in to Specific"), state.phase === "waiting-for-browser" ? /* @__PURE__ */ React.createElement(React.Fragment, null, /* @__PURE__ */ React.createElement(Box, { flexDirection: "column" }, /* @__PURE__ */ React.createElement(Text, null, "Your authentication code:", " ", /* @__PURE__ */ React.createElement(Text, { color: "cyan", bold: true }, state.userCode))), /* @__PURE__ */ React.createElement(Box, null, /* @__PURE__ */ React.createElement(Text, { color: "blue" }, /* @__PURE__ */ React.createElement(Spinner, { type: "dots" })), /* @__PURE__ */ React.createElement(Text, null, " Waiting for authentication in browser...")), /* @__PURE__ */ React.createElement(Text, { dimColor: true }, "If the browser didn't open, visit: ", state.verificationUri)) : /* @__PURE__ */ React.createElement(Box, null, /* @__PURE__ */ React.createElement(Text, { color: "blue" }, /* @__PURE__ */ React.createElement(Spinner, { type: "dots" })), /* @__PURE__ */ React.createElement(Text, null, " Initiating login...")));
+}
 function performLogin(options2 = {}) {
   return new Promise((resolve7) => {
+    let currentState = { phase: "initiating" };
+    let flowHandle;
     const instance = render(
       /* @__PURE__ */ React.createElement(
-        LoginFlow,
+        LoginUI,
         {
-          isReauthentication: options2.isReauthentication,
-          onComplete: (result) => {
-            instance.unmount();
-            resolve7(result);
-          }
+          state: currentState,
+          isReauthentication: options2.isReauthentication
         }
       )
     );
-  });
-}
-function LoginFlow({ isReauthentication, onComplete }) {
-  const { exit } = useApp();
-  const [phase, setPhase] = useState("initiating");
-  const [userCode, setUserCode] = useState();
-  const [verificationUri, setVerificationUri] = useState();
-  const [userEmail, setUserEmail] = useState();
-  const [error, setError] = useState();
-  useEffect(() => {
-    if (phase !== "initiating") return;
-    let cancelled = false;
-    let pollTimeoutId;
-    async function startLogin() {
-      try {
-        if (isReauthentication) {
-          clearUserCredentials();
-        }
-        const deviceAuth = await initiateDeviceAuthorization();
-        if (cancelled) return;
-        setUserCode(deviceAuth.user_code);
-        setVerificationUri(deviceAuth.verification_uri_complete);
-        setPhase("waiting");
-        await open_default(deviceAuth.verification_uri_complete);
-        let pollInterval = deviceAuth.interval * 1e3;
-        const expiresAt = Date.now() + deviceAuth.expires_in * 1e3;
-        const poll = async () => {
-          if (cancelled || Date.now() > expiresAt) {
-            if (!cancelled && Date.now() > expiresAt) {
-              setError("Authentication timed out. Please try again.");
-              setPhase("error");
-            }
-            return;
-          }
-          try {
-            const response = await pollForToken(deviceAuth.device_code);
-            if (cancelled) return;
-            if ("error" in response) {
-              if (response.error === "authorization_pending") {
-                pollTimeoutId = setTimeout(poll, pollInterval);
-              } else if (response.error === "slow_down") {
-                pollInterval += 1e3;
-                pollTimeoutId = setTimeout(poll, pollInterval);
-              } else {
-                setError(`Authentication failed: ${response.error}`);
-                setPhase("error");
-              }
-            } else {
-              const successResponse = response;
-              const expiresAt2 = Date.now() + successResponse.expires_in * 1e3;
-              const client2 = new ApiClient(successResponse.access_token);
-              const user = await client2.getMe();
-              writeUserCredentials({
-                accessToken: successResponse.access_token,
-                refreshToken: successResponse.refresh_token,
-                expiresAt: expiresAt2,
-                userId: user.id
-              });
-              setUserEmail(successResponse.user.email);
-              setPhase("success");
+    const cleanup = () => {
+      flowHandle?.cancel();
+      instance.unmount();
+    };
+    const handleExit = () => {
+      cleanup();
+      process.exit(0);
+    };
+    process.on("SIGINT", handleExit);
+    process.on("SIGTERM", handleExit);
+    flowHandle = runLoginFlow({
+      isReauthentication: options2.isReauthentication,
+      setState: (newState) => {
+        currentState = newState;
+        instance.rerender(
+          /* @__PURE__ */ React.createElement(
+            LoginUI,
+            {
+              state: currentState,
+              isReauthentication: options2.isReauthentication
             }
-          } catch (err) {
-            if (cancelled) return;
-            setError(err instanceof Error ? err.message : String(err));
-            setPhase("error");
-          }
-        };
-        pollTimeoutId = setTimeout(poll, pollInterval);
-      } catch (err) {
-        if (cancelled) return;
-        setError(err instanceof Error ? err.message : String(err));
-        setPhase("error");
+          )
+        );
+        if (newState.phase === "success") {
+          setTimeout(() => {
+            process.off("SIGINT", handleExit);
+            process.off("SIGTERM", handleExit);
+            instance.unmount();
+            resolve7({ success: true, userEmail: newState.email });
+          }, 100);
+        } else if (newState.phase === "error") {
+          setTimeout(() => {
+            process.off("SIGINT", handleExit);
+            process.off("SIGTERM", handleExit);
+            instance.unmount();
+            resolve7({ success: false, error: new Error(newState.message) });
+          }, 100);
+        }
       }
-    }
-    startLogin();
-    return () => {
-      cancelled = true;
-      if (pollTimeoutId) clearTimeout(pollTimeoutId);
-    };
-  }, [phase, isReauthentication]);
-  useEffect(() => {
-    if (phase === "success") {
-      const timer = setTimeout(() => {
-        onComplete({ success: true, userEmail });
-      }, 100);
-      return () => clearTimeout(timer);
-    }
-    if (phase === "error") {
-      const timer = setTimeout(() => {
-        onComplete({ success: false, error: new Error(error) });
-      }, 100);
-      return () => clearTimeout(timer);
-    }
-  }, [phase, userEmail, error, onComplete]);
-  if (phase === "error") {
-    return /* @__PURE__ */ React.createElement(Text, { color: "red" }, "Error: ", error);
-  }
-  if (phase === "success") {
-    return /* @__PURE__ */ React.createElement(Box, { flexDirection: "column" }, /* @__PURE__ */ React.createElement(Text, { color: "green" }, isReauthentication ? "Re-authenticated" : "Logged in", " as ", userEmail), /* @__PURE__ */ React.createElement(Text, { dimColor: true }, "Credentials saved to ~/.specific/credentials.json"));
-  }
-  return /* @__PURE__ */ React.createElement(Box, { flexDirection: "column", gap: 1 }, isReauthentication && /* @__PURE__ */ React.createElement(Text, { color: "yellow" }, "Session expired. Please log in again."), /* @__PURE__ */ React.createElement(Text, { bold: true }, "Log in to Specific"), userCode ? /* @__PURE__ */ React.createElement(React.Fragment, null, /* @__PURE__ */ React.createElement(Box, { flexDirection: "column" }, /* @__PURE__ */ React.createElement(Text, null, "Your authentication code:", " ", /* @__PURE__ */ React.createElement(Text, { color: "cyan", bold: true }, userCode))), /* @__PURE__ */ React.createElement(Box, null, /* @__PURE__ */ React.createElement(Text, { color: "blue" }, /* @__PURE__ */ React.createElement(Spinner, { type: "dots" })), /* @__PURE__ */ React.createElement(Text, null, " Waiting for authentication in browser...")), /* @__PURE__ */ React.createElement(Text, { dimColor: true }, "If the browser didn't open, visit: ", verificationUri)) : /* @__PURE__ */ React.createElement(Box, null, /* @__PURE__ */ React.createElement(Text, { color: "blue" }, /* @__PURE__ */ React.createElement(Spinner, { type: "dots" })), /* @__PURE__ */ React.createElement(Text, null, " Initiating login...")));
+    });
+  });
 }
 
 // src/lib/auth/credentials.ts
 function getUserCredentialsDir() {
-  return path5.join(os3.homedir(), ".specific");
+  return path5.join(os4.homedir(), ".specific");
 }
 function getCredentialsPath() {
   return path5.join(getUserCredentialsDir(), "credentials.json");
@@ -183675,7 +183810,7 @@ function isEnabled() {
 }
 function getAnonymousId() {
   if (anonymousId) return anonymousId;
-  const machineId = `${os4.hostname()}-${os4.userInfo().username}`;
+  const machineId = `${os5.hostname()}-${os5.userInfo().username}`;
   anonymousId = crypto.createHash("sha256").update(machineId).digest("hex").slice(0, 16);
   return anonymousId;
 }
@@ -183708,7 +183843,7 @@ function trackEvent(event, properties) {
     event,
     properties: {
       ...properties,
-      cli_version: "0.1.42",
+      cli_version: "0.1.43",
       platform: process.platform,
       node_version: process.version,
       project_id: getProjectId(),
@@ -183889,8 +184024,8 @@ function configureAgents(checked) {
   return { agents, git, showManualInstructions: !!checked["other"] };
 }
 function InitUI() {
-  const { exit } = useApp2();
-  const [initialState] = useState2(() => {
+  const { exit } = useApp();
+  const [initialState] = useState(() => {
     const detected = detectExistingAgents();
     const hasDetected = Object.keys(detected).length > 0;
     return {
@@ -183899,19 +184034,19 @@ function InitUI() {
       // Focus submit if any detected
     };
   });
-  const [phase, setPhase] = useState2(
+  const [phase, setPhase] = useState(
     () => caFilesExist() ? "agents" : "installing-ca"
   );
-  const [caInstallPhase, setCaInstallPhase] = useState2(() => caFilesExist() ? "done" : "installing");
-  const [focusedIndex, setFocusedIndex] = useState2(initialState.focusedIndex);
-  const [checked, setChecked] = useState2(
+  const [caInstallPhase, setCaInstallPhase] = useState(() => caFilesExist() ? "done" : "installing");
+  const [focusedIndex, setFocusedIndex] = useState(initialState.focusedIndex);
+  const [checked, setChecked] = useState(
     initialState.detected
   );
-  const [result, setResult] = useState2(null);
-  const [tlsResult, setTlsResult] = useState2(
+  const [result, setResult] = useState(null);
+  const [tlsResult, setTlsResult] = useState(
     caFilesExist() ? { status: "success" } : null
   );
-  useEffect2(() => {
+  useEffect(() => {
     if (phase === "installing-ca" && caInstallPhase === "installing") {
       installCA();
     }
@@ -183956,7 +184091,7 @@ function InitUI() {
       setPhase("done");
     }
   });
-  useEffect2(() => {
+  useEffect(() => {
     if (phase === "done") {
       const timer = setTimeout(() => {
         exit();
@@ -184031,7 +184166,7 @@ function resolveDocPath(path22) {
 }
 
 // src/commands/check.tsx
-import React3, { useState as useState3, useEffect as useEffect3 } from "react";
+import React3, { useState as useState2, useEffect as useEffect2 } from "react";
 import { render as render3, Text as Text3, Box as Box3 } from "ink";
 import Spinner3 from "ink-spinner";
 import * as fs11 from "fs";
@@ -184369,6 +184504,22 @@ function parseStorage(data) {
   }
   return result;
 }
+function parseConfigDevBlock(dev) {
+  if (!dev) {
+    return void 0;
+  }
+  const devArray = Array.isArray(dev) ? dev : [dev];
+  const devObj = devArray[0];
+  if (!devObj || typeof devObj !== "object" || Array.isArray(devObj)) {
+    return void 0;
+  }
+  const fieldObj = devObj;
+  const result = {};
+  if (fieldObj.default !== void 0) {
+    result.default = String(fieldObj.default);
+  }
+  return Object.keys(result).length > 0 ? result : void 0;
+}
 function parseConfigs(configData) {
   if (!configData || typeof configData !== "object" || Array.isArray(configData)) {
     return [];
@@ -184377,6 +184528,7 @@ function parseConfigs(configData) {
   for (const [name, fieldsArray] of Object.entries(configData)) {
     const fields = Array.isArray(fieldsArray) ? fieldsArray[0] : fieldsArray;
     if (!fields || typeof fields !== "object" || Array.isArray(fields)) {
+      configs.push({ name });
       continue;
     }
     const fieldObj = fields;
@@ -184384,10 +184536,30 @@ function parseConfigs(configData) {
     if (fieldObj.default) {
       config.default = String(fieldObj.default);
     }
+    const dev = parseConfigDevBlock(fieldObj.dev);
+    if (dev) {
+      config.dev = dev;
+    }
     configs.push(config);
   }
   return configs;
 }
+function parseSecretDevBlock(dev) {
+  if (!dev) {
+    return void 0;
+  }
+  const devArray = Array.isArray(dev) ? dev : [dev];
+  const devObj = devArray[0];
+  if (!devObj || typeof devObj !== "object" || Array.isArray(devObj)) {
+    return void 0;
+  }
+  const fieldObj = devObj;
+  const result = {};
+  if (fieldObj.required !== void 0) {
+    result.required = fieldObj.required === true;
+  }
+  return Object.keys(result).length > 0 ? result : void 0;
+}
 function parseSecrets(secretData) {
   if (!secretData || typeof secretData !== "object" || Array.isArray(secretData)) {
     return [];
@@ -184404,6 +184576,10 @@ function parseSecrets(secretData) {
       if (typeof fieldObj.length === "number") {
         secret.length = fieldObj.length;
       }
+      const dev = parseSecretDevBlock(fieldObj.dev);
+      if (dev) {
+        secret.dev = dev;
+      }
     }
     secrets.push(secret);
   }
@@ -184517,8 +184693,8 @@ function validateEndpointReferences(config) {
 
 // src/commands/check.tsx
 function CheckUI() {
-  const [state, setState] = useState3({ status: "loading" });
-  useEffect3(() => {
+  const [state, setState] = useState2({ status: "loading" });
+  useEffect2(() => {
     async function load() {
       const configPath = path7.join(process.cwd(), "specific.hcl");
       if (!fs11.existsSync(configPath)) {
@@ -184558,8 +184734,8 @@ function checkCommand() {
 }
 
 // src/commands/dev.tsx
-import React4, { useState as useState4, useEffect as useEffect4, useRef } from "react";
-import { render as render4, Text as Text4, Box as Box4, useApp as useApp3, Static } from "ink";
+import React6, { useState as useState5, useEffect as useEffect3, useRef } from "react";
+import { render as render4, Text as Text6, Box as Box6, useApp as useApp2, Static } from "ink";
 import Spinner4 from "ink-spinner";
 import * as fs19 from "fs";
 import * as path16 from "path";
@@ -186384,7 +186560,7 @@ var StablePortAllocator = class {
 import * as fs14 from "fs";
 import * as path10 from "path";
 import * as net from "net";
-import * as os6 from "os";
+import * as os7 from "os";
 import { spawn } from "child_process";
 
 // src/lib/bin/types.ts
@@ -186424,15 +186600,15 @@ var ExtractionError = class extends Error {
 // src/lib/bin/manager.ts
 import * as fs13 from "fs";
 import * as path9 from "path";
-import * as os5 from "os";
+import * as os6 from "os";
 import { createReadStream } from "fs";
 import { createTarExtractor, extractTo } from "tar-vern";
 function getBinBaseDir() {
-  return path9.join(os5.homedir(), ".specific", "bin");
+  return path9.join(os6.homedir(), ".specific", "bin");
 }
 function getPlatformInfo() {
-  const platform5 = os5.platform();
-  const arch3 = os5.arch();
+  const platform5 = os6.platform();
+  const arch3 = os6.arch();
   if (platform5 !== "darwin" && platform5 !== "linux") {
     throw new Error(
       `Unsupported platform: ${platform5}. Only macOS and Linux are supported.`
@@ -186700,7 +186876,7 @@ function getLibraryEnv(binary) {
   if (!binary.libraryPath) {
     return {};
   }
-  const platform5 = os6.platform();
+  const platform5 = os7.platform();
   if (platform5 === "darwin") {
     return { DYLD_LIBRARY_PATH: binary.libraryPath };
   } else if (platform5 === "linux") {
@@ -186879,7 +187055,7 @@ async function waitForTcpPort(host, port, timeoutMs = 3e4) {
     if (isOpen) {
       return;
     }
-    await sleep(100);
+    await sleep2(100);
   }
   throw new Error(`Port ${port} did not become available within timeout`);
 }
@@ -186920,7 +187096,7 @@ async function stopProcess(proc) {
     }, 2e3);
   });
 }
-function sleep(ms) {
+function sleep2(ms) {
   return new Promise((resolve7) => setTimeout(resolve7, ms));
 }
 
@@ -186986,7 +187162,7 @@ async function saveGeneratedSecret(name, value) {
   }
   await writeFile(GENERATED_SECRETS_FILE, JSON.stringify(secrets, null, 2) + "\n");
 }
-async function prepareSecrets(secretsConfig) {
+async function prepareSecrets(secretsConfig, isDevMode = false) {
   const userSecrets = await loadSecrets();
   const generatedSecrets = await loadGeneratedSecrets();
   const finalSecrets = /* @__PURE__ */ new Map();
@@ -187003,10 +187179,57 @@ async function prepareSecrets(secretsConfig) {
         await saveGeneratedSecret(secretDef.name, generatedValue);
       }
       finalSecrets.set(secretDef.name, generatedValue);
+      continue;
+    }
+    if (isDevMode && secretDef.dev?.required === false) {
+      finalSecrets.set(secretDef.name, "");
+      continue;
     }
   }
   return finalSecrets;
 }
+var HEADER_COMMENT = "# Do not commit this file - it contains secrets\n\n";
+async function saveSecret(name, value) {
+  let content = "";
+  if (existsSync10(SECRETS_FILE)) {
+    content = await readFile(SECRETS_FILE, "utf-8");
+  } else {
+    content = HEADER_COMMENT;
+  }
+  const escapedValue = value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+  const secretPattern = new RegExp(`^${name}\\s*=\\s*"[^"]*"\\s*$`, "m");
+  if (secretPattern.test(content)) {
+    content = content.replace(secretPattern, `${name} = "${escapedValue}"`);
+  } else {
+    content = content.trimEnd() + `
+${name} = "${escapedValue}"
+`;
+  }
+  await writeFile(SECRETS_FILE, content);
+}
+function findUsedSecrets(services, isDevMode) {
+  const used = /* @__PURE__ */ new Set();
+  for (const service of services) {
+    const mergedEnv = isDevMode ? { ...service.env, ...service.dev?.env } : service.env;
+    for (const value of Object.values(mergedEnv ?? {})) {
+      if (typeof value === "object" && value.type === "secret") {
+        used.add(value.name);
+      }
+    }
+  }
+  return used;
+}
+function findMissingSecrets(secretsDef, preparedSecrets, usedSecrets) {
+  const missing = [];
+  for (const secret of secretsDef) {
+    if (secret.generated) continue;
+    if (usedSecrets && !usedSecrets.has(secret.name)) continue;
+    if (!preparedSecrets.has(secret.name)) {
+      missing.push(secret.name);
+    }
+  }
+  return missing;
+}
 
 // src/lib/config/parser.ts
 var import_hcl2_json_parser3 = __toESM(require_dist(), 1);
@@ -187034,7 +187257,28 @@ async function loadConfigs() {
   const content = await readFile2(CONFIG_FILE, "utf-8");
   return await parseConfigFile(content);
 }
-async function prepareConfigs(configsDef, environmentOverrides) {
+async function saveConfig(name, value) {
+  let content = "";
+  if (existsSync11(CONFIG_FILE)) {
+    content = await readFile2(CONFIG_FILE, "utf-8");
+  } else {
+    content = `# Configuration values for this project
+# These values override defaults defined in specific.hcl
+
+`;
+  }
+  const escapedValue = value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+  const configPattern = new RegExp(`^${name}\\s*=\\s*"[^"]*"\\s*$`, "m");
+  if (configPattern.test(content)) {
+    content = content.replace(configPattern, `${name} = "${escapedValue}"`);
+  } else {
+    content = content.trimEnd() + `
+${name} = "${escapedValue}"
+`;
+  }
+  await writeFile2(CONFIG_FILE, content);
+}
+async function prepareConfigs(configsDef, environmentOverrides, isDevMode = false) {
   const userConfigs = await loadConfigs();
   const finalConfigs = /* @__PURE__ */ new Map();
   for (const configDef of configsDef) {
@@ -187048,13 +187292,36 @@ async function prepareConfigs(configsDef, environmentOverrides) {
       finalConfigs.set(configDef.name, envOverride);
       continue;
     }
-    if (configDef.default !== void 0) {
-      finalConfigs.set(configDef.name, configDef.default);
+    const effectiveDefault = isDevMode && configDef.dev?.default !== void 0 ? configDef.dev.default : configDef.default;
+    if (effectiveDefault !== void 0) {
+      finalConfigs.set(configDef.name, effectiveDefault);
       continue;
     }
   }
   return finalConfigs;
 }
+function findUsedConfigs(services, isDevMode) {
+  const used = /* @__PURE__ */ new Set();
+  for (const service of services) {
+    const mergedEnv = isDevMode ? { ...service.env, ...service.dev?.env } : service.env;
+    for (const value of Object.values(mergedEnv ?? {})) {
+      if (typeof value === "object" && value.type === "config") {
+        used.add(value.name);
+      }
+    }
+  }
+  return used;
+}
+function findMissingConfigs(configsDef, preparedConfigs, usedConfigs) {
+  const missing = [];
+  for (const config of configsDef) {
+    if (usedConfigs && !usedConfigs.has(config.name)) continue;
+    if (!preparedConfigs.has(config.name)) {
+      missing.push(config.name);
+    }
+  }
+  return missing;
+}
 
 // src/lib/dev/env-resolver.ts
 var MissingSecretError = class extends Error {
@@ -187124,7 +187391,7 @@ function resolveEnvValue(value, resources, secrets, configs, servicePort, servic
       }
       switch (serviceRef.attribute) {
         case "url":
-          return `http://localhost:${endpoint.port}`;
+          return `localhost:${endpoint.port}`;
         case "host":
           return "localhost";
         case "port":
@@ -187983,7 +188250,7 @@ async function waitForTcpPort2(host, port, timeoutMs = 3e4) {
     if (isOpen) {
       return;
     }
-    await sleep2(100);
+    await sleep3(100);
   }
   throw new Error(`Electric port ${port} did not become available within timeout`);
 }
@@ -188024,7 +188291,7 @@ async function stopProcess2(proc) {
     }, 2e3);
   });
 }
-function sleep2(ms) {
+function sleep3(ms) {
   return new Promise((resolve7) => setTimeout(resolve7, ms));
 }
 
@@ -188102,7 +188369,7 @@ async function waitForTcpPort3(host, port, timeoutMs = 3e4) {
     if (isOpen) {
       return;
     }
-    await sleep3(100);
+    await sleep4(100);
   }
   throw new Error(
     `Drizzle Gateway port ${port} did not become available within timeout`
@@ -188145,7 +188412,7 @@ async function stopProcess3(proc) {
     }, 2e3);
   });
 }
-function sleep3(ms) {
+function sleep4(ms) {
   return new Promise((resolve7) => setTimeout(resolve7, ms));
 }
 
@@ -188340,7 +188607,7 @@ function watchConfigFile(configPath, debounceMs, onChange) {
 // src/lib/dev/proxy-registry.ts
 import * as fs18 from "fs";
 import * as path15 from "path";
-import * as os7 from "os";
+import * as os8 from "os";
 var ProxyRegistryManager = class {
   proxyDir;
   ownerPath;
@@ -188349,7 +188616,7 @@ var ProxyRegistryManager = class {
   isOwner = false;
   registryWatcher = null;
   constructor() {
-    this.proxyDir = path15.join(os7.homedir(), ".specific", "proxy");
+    this.proxyDir = path15.join(os8.homedir(), ".specific", "proxy");
     this.ownerPath = path15.join(this.proxyDir, "owner.json");
     this.registryPath = path15.join(this.proxyDir, "registry.json");
     this.lockPath = path15.join(this.proxyDir, "registry.lock");
@@ -188659,11 +188926,58 @@ var ProxyRegistryManager = class {
   }
 };
 
+// src/lib/ui/SecretInput.tsx
+import React4, { useState as useState3 } from "react";
+import { Box as Box4, Text as Text4, useInput as useInput2 } from "ink";
+function SecretInput({ secretName, onSubmit, onCancel }) {
+  const [value, setValue] = useState3("");
+  useInput2((input, key) => {
+    if (key.return) {
+      if (value.trim() !== "") {
+        onSubmit(value);
+      }
+    } else if (key.escape) {
+      onCancel();
+    } else if (key.backspace || key.delete) {
+      setValue((prev) => prev.slice(0, -1));
+    } else if (!key.ctrl && !key.meta && input) {
+      setValue((prev) => prev + input);
+    }
+  });
+  return /* @__PURE__ */ React4.createElement(Box4, { flexDirection: "column", marginTop: 1 }, /* @__PURE__ */ React4.createElement(Text4, null, "Enter value for secret ", /* @__PURE__ */ React4.createElement(Text4, { color: "cyan" }, secretName), ":"), /* @__PURE__ */ React4.createElement(Box4, null, /* @__PURE__ */ React4.createElement(Text4, { color: "cyan" }, "> "), /* @__PURE__ */ React4.createElement(Text4, null, value.length > 0 ? "*".repeat(value.length) : ""), /* @__PURE__ */ React4.createElement(Text4, { color: "gray" }, "|")), /* @__PURE__ */ React4.createElement(Text4, { dimColor: true }, "(Press Enter to save, Esc to cancel)"));
+}
+
+// src/lib/ui/ConfigInput.tsx
+import React5, { useState as useState4 } from "react";
+import { Box as Box5, Text as Text5, useInput as useInput3 } from "ink";
+function ConfigInput({ configName, onSubmit, onCancel }) {
+  const [value, setValue] = useState4("");
+  useInput3((input, key) => {
+    if (key.return) {
+      if (value.trim() !== "") {
+        onSubmit(value);
+      }
+    } else if (key.escape) {
+      onCancel();
+    } else if (key.backspace || key.delete) {
+      setValue((prev) => prev.slice(0, -1));
+    } else if (!key.ctrl && !key.meta && input) {
+      setValue((prev) => prev + input);
+    }
+  });
+  return /* @__PURE__ */ React5.createElement(Box5, { flexDirection: "column", marginTop: 1 }, /* @__PURE__ */ React5.createElement(Text5, null, "Enter value for config ", /* @__PURE__ */ React5.createElement(Text5, { color: "cyan" }, configName), ":"), /* @__PURE__ */ React5.createElement(Box5, null, /* @__PURE__ */ React5.createElement(Text5, { color: "cyan" }, "> "), /* @__PURE__ */ React5.createElement(Text5, null, value), /* @__PURE__ */ React5.createElement(Text5, { color: "gray" }, "|")), /* @__PURE__ */ React5.createElement(Text5, { dimColor: true }, "(Press Enter to save, Esc to cancel)"));
+}
+
+// src/lib/ui/interactive.ts
+function isInteractive() {
+  return process.stdin.isTTY === true && process.stdout.isTTY === true;
+}
+
 // src/commands/dev.tsx
 var COLORS = ["cyan", "yellow", "green", "magenta", "blue"];
 function DevUI({ instanceKey }) {
-  const { exit } = useApp3();
-  const [state, setState] = useState4(() => {
+  const { exit } = useApp2();
+  const [state, setState] = useState5(() => {
     const caExists = caFilesExist();
     return {
       status: caExists ? "loading" : "installing-ca",
@@ -188676,7 +188990,7 @@ function DevUI({ instanceKey }) {
       isProxyOwner: false
     };
   });
-  useEffect4(() => {
+  useEffect3(() => {
     if (state.status === "installing-ca" && state.caInstallPhase === "installing") {
       installCA();
     }
@@ -188709,8 +189023,8 @@ function DevUI({ instanceKey }) {
   const adminServerRef = useRef(null);
   const servicesRef = useRef([]);
   const resourcesRef = useRef(/* @__PURE__ */ new Map());
-  const [reloadTrigger, setReloadTrigger] = useState4(0);
-  const [readyToStart, setReadyToStart] = useState4(() => caFilesExist());
+  const [reloadTrigger, setReloadTrigger] = useState5(0);
+  const [readyToStart, setReadyToStart] = useState5(() => caFilesExist());
   const shutdown2 = async () => {
     if (shuttingDown.current) return;
     shuttingDown.current = true;
@@ -188802,7 +189116,7 @@ function DevUI({ instanceKey }) {
     }));
     setReloadTrigger((t) => t + 1);
   };
-  useEffect4(() => {
+  useEffect3(() => {
     const handleSignal = () => {
       if (shuttingDown.current) {
         writeLog("system", "Force shutting down");
@@ -188831,13 +189145,13 @@ function DevUI({ instanceKey }) {
       process.off("SIGTERM", handleSignal);
     };
   }, []);
-  useEffect4(() => {
+  useEffect3(() => {
     if (state.status === "running" && !startTimeRef.current) {
       startTimeRef.current = Date.now();
       trackEvent("dev_started");
     }
   }, [state.status]);
-  useEffect4(() => {
+  useEffect3(() => {
     if (state.status !== "running") return;
     const configPath = path16.join(process.cwd(), "specific.hcl");
     const watcher = watchConfigFile(configPath, 1e3, () => {
@@ -188872,7 +189186,66 @@ function DevUI({ instanceKey }) {
       ]
     }));
   };
-  useEffect4(() => {
+  const handleSecretSubmit = async (value) => {
+    const currentSecret = state.missingSecrets?.[state.currentSecretIndex ?? 0];
+    if (!currentSecret) return;
+    await saveSecret(currentSecret, value);
+    const nextIndex = (state.currentSecretIndex ?? 0) + 1;
+    if (nextIndex < (state.missingSecrets?.length ?? 0)) {
+      setState((s) => ({
+        ...s,
+        currentSecretIndex: nextIndex
+      }));
+    } else if (state.missingConfigs && state.missingConfigs.length > 0) {
+      setState((s) => ({
+        ...s,
+        status: "awaiting-configs",
+        missingSecrets: void 0,
+        currentSecretIndex: void 0,
+        currentConfigIndex: 0
+      }));
+    } else {
+      setState((s) => ({
+        ...s,
+        status: "loading",
+        missingSecrets: void 0,
+        currentSecretIndex: void 0
+      }));
+      setReloadTrigger((t) => t + 1);
+    }
+  };
+  const handleConfigSubmit = async (value) => {
+    const currentConfig = state.missingConfigs?.[state.currentConfigIndex ?? 0];
+    if (!currentConfig) return;
+    await saveConfig(currentConfig, value);
+    const nextIndex = (state.currentConfigIndex ?? 0) + 1;
+    if (nextIndex < (state.missingConfigs?.length ?? 0)) {
+      setState((s) => ({
+        ...s,
+        currentConfigIndex: nextIndex
+      }));
+    } else {
+      setState((s) => ({
+        ...s,
+        status: "loading",
+        missingConfigs: void 0,
+        currentConfigIndex: void 0
+      }));
+      setReloadTrigger((t) => t + 1);
+    }
+  };
+  const handleInputCancel = () => {
+    setState((s) => ({
+      ...s,
+      status: "error",
+      error: "Startup cancelled - required values not provided",
+      missingSecrets: void 0,
+      currentSecretIndex: void 0,
+      missingConfigs: void 0,
+      currentConfigIndex: void 0
+    }));
+  };
+  useEffect3(() => {
     if (!readyToStart) {
       return;
     }
@@ -189047,8 +189420,50 @@ function DevUI({ instanceKey }) {
         }
       }
       if (cancelled) return;
-      const secrets = await prepareSecrets(config2.secrets);
-      const configs = await prepareConfigs(config2.configs);
+      const secrets = await prepareSecrets(config2.secrets, true);
+      const configs = await prepareConfigs(config2.configs, void 0, true);
+      const usedSecrets = findUsedSecrets(config2.services, true);
+      const usedConfigs = findUsedConfigs(config2.services, true);
+      const missingSecrets = findMissingSecrets(config2.secrets, secrets, usedSecrets);
+      const missingConfigs = findMissingConfigs(config2.configs, configs, usedConfigs);
+      if (missingSecrets.length > 0 || missingConfigs.length > 0) {
+        if (isInteractive()) {
+          if (missingSecrets.length > 0) {
+            setState((s) => ({
+              ...s,
+              status: "awaiting-secrets",
+              missingSecrets,
+              currentSecretIndex: 0,
+              missingConfigs: missingConfigs.length > 0 ? missingConfigs : void 0
+            }));
+            return;
+          } else {
+            setState((s) => ({
+              ...s,
+              status: "awaiting-configs",
+              missingConfigs,
+              currentConfigIndex: 0
+            }));
+            return;
+          }
+        } else {
+          const errorParts = [];
+          if (missingSecrets.length > 0) {
+            errorParts.push(`Missing secrets: ${missingSecrets.join(", ")}
+Add them to specific.secrets`);
+          }
+          if (missingConfigs.length > 0) {
+            errorParts.push(`Missing configs: ${missingConfigs.join(", ")}
+Add them to specific.config`);
+          }
+          setState((s) => ({
+            ...s,
+            status: "error",
+            error: errorParts.join("\n\n")
+          }));
+          return;
+        }
+      }
       const validationErrors = validateEndpointReferences(config2);
       if (validationErrors.length > 0) {
         for (const error of validationErrors) {
@@ -189334,33 +189749,57 @@ function DevUI({ instanceKey }) {
   }, [reloadTrigger, readyToStart, instanceKey]);
   if (state.status === "installing-ca") {
     if (state.caInstallPhase === "installing") {
-      return /* @__PURE__ */ React4.createElement(Box4, { flexDirection: "column" }, /* @__PURE__ */ React4.createElement(Text4, { bold: true, color: "cyan" }, "TLS Certificate Setup"), /* @__PURE__ */ React4.createElement(Text4, null, " "), /* @__PURE__ */ React4.createElement(Text4, null, "Installing a local certificate authority (CA) to enable HTTPS"), /* @__PURE__ */ React4.createElement(Text4, null, "for local development. The CA is limited to Specific projects."), /* @__PURE__ */ React4.createElement(Text4, null, " "), /* @__PURE__ */ React4.createElement(Text4, null, "Your password is required to add the CA to your system's trust store."), /* @__PURE__ */ React4.createElement(Text4, null, " "));
+      return /* @__PURE__ */ React6.createElement(Box6, { flexDirection: "column" }, /* @__PURE__ */ React6.createElement(Text6, { bold: true, color: "cyan" }, "TLS Certificate Setup"), /* @__PURE__ */ React6.createElement(Text6, null, " "), /* @__PURE__ */ React6.createElement(Text6, null, "Installing a local certificate authority (CA) to enable HTTPS"), /* @__PURE__ */ React6.createElement(Text6, null, "for local development. The CA is limited to Specific projects."), /* @__PURE__ */ React6.createElement(Text6, null, " "), /* @__PURE__ */ React6.createElement(Text6, null, "Your password is required to add the CA to your system's trust store."), /* @__PURE__ */ React6.createElement(Text6, null, " "));
     }
     if (state.caInstallPhase === "error") {
-      return /* @__PURE__ */ React4.createElement(Box4, { flexDirection: "column" }, /* @__PURE__ */ React4.createElement(Text4, { color: "red" }, "Failed to install CA: ", state.caError));
+      return /* @__PURE__ */ React6.createElement(Box6, { flexDirection: "column" }, /* @__PURE__ */ React6.createElement(Text6, { color: "red" }, "Failed to install CA: ", state.caError));
     }
   }
   if (state.status === "loading") {
-    return /* @__PURE__ */ React4.createElement(Box4, null, /* @__PURE__ */ React4.createElement(Text4, { color: "blue" }, /* @__PURE__ */ React4.createElement(Spinner4, { type: "dots" })));
+    return /* @__PURE__ */ React6.createElement(Box6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "blue" }, /* @__PURE__ */ React6.createElement(Spinner4, { type: "dots" })));
+  }
+  if (state.status === "awaiting-secrets" && state.missingSecrets && state.currentSecretIndex !== void 0) {
+    const currentSecret = state.missingSecrets[state.currentSecretIndex];
+    return /* @__PURE__ */ React6.createElement(Box6, { flexDirection: "column" }, /* @__PURE__ */ React6.createElement(Text6, null, /* @__PURE__ */ React6.createElement(Text6, { bold: true, color: "cyan" }, "Specific dev server")), /* @__PURE__ */ React6.createElement(Text6, null, " "), /* @__PURE__ */ React6.createElement(Text6, null, "Missing secrets (", state.currentSecretIndex + 1, "/", state.missingSecrets.length, "):"), /* @__PURE__ */ React6.createElement(
+      SecretInput,
+      {
+        key: currentSecret,
+        secretName: currentSecret,
+        onSubmit: handleSecretSubmit,
+        onCancel: handleInputCancel
+      }
+    ));
+  }
+  if (state.status === "awaiting-configs" && state.missingConfigs && state.currentConfigIndex !== void 0) {
+    const currentConfig = state.missingConfigs[state.currentConfigIndex];
+    return /* @__PURE__ */ React6.createElement(Box6, { flexDirection: "column" }, /* @__PURE__ */ React6.createElement(Text6, null, /* @__PURE__ */ React6.createElement(Text6, { bold: true, color: "cyan" }, "Specific dev server")), /* @__PURE__ */ React6.createElement(Text6, null, " "), /* @__PURE__ */ React6.createElement(Text6, null, "Missing configs (", state.currentConfigIndex + 1, "/", state.missingConfigs.length, "):"), /* @__PURE__ */ React6.createElement(
+      ConfigInput,
+      {
+        key: currentConfig,
+        configName: currentConfig,
+        onSubmit: handleConfigSubmit,
+        onCancel: handleInputCancel
+      }
+    ));
   }
   if (state.status === "waiting") {
-    return /* @__PURE__ */ React4.createElement(Box4, { flexDirection: "column" }, /* @__PURE__ */ React4.createElement(Text4, null, /* @__PURE__ */ React4.createElement(Text4, { color: "yellow" }, /* @__PURE__ */ React4.createElement(Spinner4, { type: "dots" })), /* @__PURE__ */ React4.createElement(Text4, null, " No specific.hcl in project yet. Go build something with your coding agent!")));
+    return /* @__PURE__ */ React6.createElement(Box6, { flexDirection: "column" }, /* @__PURE__ */ React6.createElement(Text6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "yellow" }, /* @__PURE__ */ React6.createElement(Spinner4, { type: "dots" })), /* @__PURE__ */ React6.createElement(Text6, null, " No specific.hcl in project yet. Go build something with your coding agent!")));
   }
   if (state.status === "error") {
-    return /* @__PURE__ */ React4.createElement(Box4, { flexDirection: "column" }, /* @__PURE__ */ React4.createElement(Text4, { color: "red" }, "Error: ", state.error));
+    return /* @__PURE__ */ React6.createElement(Box6, { flexDirection: "column" }, /* @__PURE__ */ React6.createElement(Text6, { color: "red" }, "Error: ", state.error));
   }
   if (state.status === "stopping") {
-    return /* @__PURE__ */ React4.createElement(Box4, null, /* @__PURE__ */ React4.createElement(Text4, { color: "yellow" }, /* @__PURE__ */ React4.createElement(Spinner4, { type: "dots" })), /* @__PURE__ */ React4.createElement(Text4, null, " Shutting down..."));
+    return /* @__PURE__ */ React6.createElement(Box6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "yellow" }, /* @__PURE__ */ React6.createElement(Spinner4, { type: "dots" })), /* @__PURE__ */ React6.createElement(Text6, null, " Shutting down..."));
   }
   if (state.status === "reloading") {
-    return /* @__PURE__ */ React4.createElement(Box4, { flexDirection: "column" }, /* @__PURE__ */ React4.createElement(Text4, null, /* @__PURE__ */ React4.createElement(Text4, { bold: true, color: "cyan" }, "Specific dev server")), /* @__PURE__ */ React4.createElement(Text4, null, " "), /* @__PURE__ */ React4.createElement(Box4, null, /* @__PURE__ */ React4.createElement(Text4, { color: "yellow" }, /* @__PURE__ */ React4.createElement(Spinner4, { type: "dots" })), /* @__PURE__ */ React4.createElement(Text4, null, " Reloading (specific.hcl changed)...")));
+    return /* @__PURE__ */ React6.createElement(Box6, { flexDirection: "column" }, /* @__PURE__ */ React6.createElement(Text6, null, /* @__PURE__ */ React6.createElement(Text6, { bold: true, color: "cyan" }, "Specific dev server")), /* @__PURE__ */ React6.createElement(Text6, null, " "), /* @__PURE__ */ React6.createElement(Box6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "yellow" }, /* @__PURE__ */ React6.createElement(Spinner4, { type: "dots" })), /* @__PURE__ */ React6.createElement(Text6, null, " Reloading (specific.hcl changed)...")));
   }
   const { config, resources, services, proxy, output } = state;
   if (!config) {
-    return /* @__PURE__ */ React4.createElement(Box4, null, /* @__PURE__ */ React4.createElement(Text4, { color: "blue" }, /* @__PURE__ */ React4.createElement(Spinner4, { type: "dots" })));
+    return /* @__PURE__ */ React6.createElement(Box6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "blue" }, /* @__PURE__ */ React6.createElement(Spinner4, { type: "dots" })));
   }
   if (state.status === "starting") {
-    return /* @__PURE__ */ React4.createElement(Box4, { flexDirection: "column" }, /* @__PURE__ */ React4.createElement(Text4, null, /* @__PURE__ */ React4.createElement(Text4, { bold: true, color: "cyan" }, "Specific dev server"), /* @__PURE__ */ React4.createElement(Text4, { dimColor: true }, " (Ctrl+C to stop)")), /* @__PURE__ */ React4.createElement(Text4, null, " "), (config.postgres.length > 0 || config.redis.length > 0 || config.storage.length > 0) && /* @__PURE__ */ React4.createElement(React4.Fragment, null, /* @__PURE__ */ React4.createElement(Text4, { bold: true }, "Resources:"), config.postgres.map((pg) => {
+    return /* @__PURE__ */ React6.createElement(Box6, { flexDirection: "column" }, /* @__PURE__ */ React6.createElement(Text6, null, /* @__PURE__ */ React6.createElement(Text6, { bold: true, color: "cyan" }, "Specific dev server"), /* @__PURE__ */ React6.createElement(Text6, { dimColor: true }, " (Ctrl+C to stop)")), /* @__PURE__ */ React6.createElement(Text6, null, " "), (config.postgres.length > 0 || config.redis.length > 0 || config.storage.length > 0) && /* @__PURE__ */ React6.createElement(React6.Fragment, null, /* @__PURE__ */ React6.createElement(Text6, { bold: true }, "Resources:"), config.postgres.map((pg) => {
       const instance = resources.get(pg.name);
       const resStatus = state.resourceStatus.get(pg.name);
       const isReady = !!instance;
@@ -189375,7 +189814,7 @@ function DevUI({ instanceKey }) {
       } else if (resStatus?.status === "starting") {
         statusText = " starting...";
       }
-      return /* @__PURE__ */ React4.createElement(Text4, { key: pg.name }, /* @__PURE__ */ React4.createElement(Text4, { color: isReady ? "green" : "gray" }, " \u25CF "), /* @__PURE__ */ React4.createElement(Text4, null, pg.name, " (postgres)"), instance && /* @__PURE__ */ React4.createElement(Text4, null, " \u2192 localhost:", instance.port), !isReady && statusText && /* @__PURE__ */ React4.createElement(Text4, { dimColor: true }, statusText));
+      return /* @__PURE__ */ React6.createElement(Text6, { key: pg.name }, /* @__PURE__ */ React6.createElement(Text6, { color: isReady ? "green" : "gray" }, " \u25CF "), /* @__PURE__ */ React6.createElement(Text6, null, pg.name, " (postgres)"), instance && /* @__PURE__ */ React6.createElement(Text6, null, " \u2192 localhost:", instance.port), !isReady && statusText && /* @__PURE__ */ React6.createElement(Text6, { dimColor: true }, statusText));
     }), config.redis.map((redis) => {
       const instance = resources.get(redis.name);
       const resStatus = state.resourceStatus.get(redis.name);
@@ -189391,35 +189830,35 @@ function DevUI({ instanceKey }) {
       } else if (resStatus?.status === "starting") {
         statusText = " starting...";
       }
-      return /* @__PURE__ */ React4.createElement(Text4, { key: redis.name }, /* @__PURE__ */ React4.createElement(Text4, { color: isReady ? "green" : "gray" }, " \u25CF "), /* @__PURE__ */ React4.createElement(Text4, null, redis.name, " (redis)"), instance && /* @__PURE__ */ React4.createElement(Text4, null, " \u2192 localhost:", instance.port), !isReady && statusText && /* @__PURE__ */ React4.createElement(Text4, { dimColor: true }, statusText));
+      return /* @__PURE__ */ React6.createElement(Text6, { key: redis.name }, /* @__PURE__ */ React6.createElement(Text6, { color: isReady ? "green" : "gray" }, " \u25CF "), /* @__PURE__ */ React6.createElement(Text6, null, redis.name, " (redis)"), instance && /* @__PURE__ */ React6.createElement(Text6, null, " \u2192 localhost:", instance.port), !isReady && statusText && /* @__PURE__ */ React6.createElement(Text6, { dimColor: true }, statusText));
     }), config.storage.map((storage) => {
       const instance = resources.get(storage.name);
       const resStatus = state.resourceStatus.get(storage.name);
       const isReady = !!instance;
       const statusText = resStatus?.status === "starting" ? " starting..." : "";
-      return /* @__PURE__ */ React4.createElement(Text4, { key: storage.name }, /* @__PURE__ */ React4.createElement(Text4, { color: isReady ? "green" : "gray" }, " \u25CF "), /* @__PURE__ */ React4.createElement(Text4, null, storage.name, " (storage)"), instance && /* @__PURE__ */ React4.createElement(Text4, null, " \u2192 localhost:", instance.port), !isReady && statusText && /* @__PURE__ */ React4.createElement(Text4, { dimColor: true }, statusText));
-    }), /* @__PURE__ */ React4.createElement(Text4, null, " ")), config.services.length > 0 && /* @__PURE__ */ React4.createElement(React4.Fragment, null, /* @__PURE__ */ React4.createElement(Text4, { bold: true }, "Services:"), config.services.map((svc) => {
+      return /* @__PURE__ */ React6.createElement(Text6, { key: storage.name }, /* @__PURE__ */ React6.createElement(Text6, { color: isReady ? "green" : "gray" }, " \u25CF "), /* @__PURE__ */ React6.createElement(Text6, null, storage.name, " (storage)"), instance && /* @__PURE__ */ React6.createElement(Text6, null, " \u2192 localhost:", instance.port), !isReady && statusText && /* @__PURE__ */ React6.createElement(Text6, { dimColor: true }, statusText));
+    }), /* @__PURE__ */ React6.createElement(Text6, null, " ")), config.services.length > 0 && /* @__PURE__ */ React6.createElement(React6.Fragment, null, /* @__PURE__ */ React6.createElement(Text6, { bold: true }, "Services:"), config.services.map((svc) => {
       const running = services.find((s) => s.name === svc.name);
       const isReady = !!running;
       const defaultPort = running?.ports.get("default");
       const portInfo = defaultPort ? ` \u2192 localhost:${defaultPort}` : "";
-      return /* @__PURE__ */ React4.createElement(Text4, { key: svc.name }, /* @__PURE__ */ React4.createElement(Text4, { color: isReady ? "green" : "gray" }, " \u25CF "), /* @__PURE__ */ React4.createElement(Text4, null, svc.name, portInfo));
-    }), /* @__PURE__ */ React4.createElement(Text4, null, " ")), /* @__PURE__ */ React4.createElement(Box4, null, /* @__PURE__ */ React4.createElement(Text4, { color: "blue" }, /* @__PURE__ */ React4.createElement(Spinner4, { type: "dots" })), /* @__PURE__ */ React4.createElement(Text4, null, " Starting...")));
+      return /* @__PURE__ */ React6.createElement(Text6, { key: svc.name }, /* @__PURE__ */ React6.createElement(Text6, { color: isReady ? "green" : "gray" }, " \u25CF "), /* @__PURE__ */ React6.createElement(Text6, null, svc.name, portInfo));
+    }), /* @__PURE__ */ React6.createElement(Text6, null, " ")), /* @__PURE__ */ React6.createElement(Box6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "blue" }, /* @__PURE__ */ React6.createElement(Spinner4, { type: "dots" })), /* @__PURE__ */ React6.createElement(Text6, null, " Starting...")));
   }
   const staticItems = [
     {
       key: "title",
-      content: /* @__PURE__ */ React4.createElement(Text4, null, /* @__PURE__ */ React4.createElement(Text4, { bold: true, color: "cyan" }, "Specific dev server"), instanceKey !== "default" && /* @__PURE__ */ React4.createElement(Text4, { color: "yellow" }, " [", instanceKey, "]"), /* @__PURE__ */ React4.createElement(Text4, { dimColor: true }, " (Ctrl+C to stop)"))
+      content: /* @__PURE__ */ React6.createElement(Text6, null, /* @__PURE__ */ React6.createElement(Text6, { bold: true, color: "cyan" }, "Specific dev server"), instanceKey !== "default" && /* @__PURE__ */ React6.createElement(Text6, { color: "yellow" }, " [", instanceKey, "]"), /* @__PURE__ */ React6.createElement(Text6, { dimColor: true }, " (Ctrl+C to stop)"))
     },
-    { key: "space1", content: /* @__PURE__ */ React4.createElement(Text4, null, " ") },
+    { key: "space1", content: /* @__PURE__ */ React6.createElement(Text6, null, " ") },
     // Show admin UI URL
     {
       key: "admin",
-      content: /* @__PURE__ */ React4.createElement(Text4, null, /* @__PURE__ */ React4.createElement(Text4, { bold: true }, "Admin:"), /* @__PURE__ */ React4.createElement(Text4, null, " "), /* @__PURE__ */ React4.createElement(Text4, { bold: true }, "https://", instanceKey === "default" ? "" : `${instanceKey}.`, "local.spcf.app"))
+      content: /* @__PURE__ */ React6.createElement(Text6, null, /* @__PURE__ */ React6.createElement(Text6, { bold: true }, "Admin:"), /* @__PURE__ */ React6.createElement(Text6, null, " "), /* @__PURE__ */ React6.createElement(Text6, { bold: true }, "https://", instanceKey === "default" ? "" : `${instanceKey}.`, "local.spcf.app"))
     },
-    { key: "admin-space", content: /* @__PURE__ */ React4.createElement(Text4, null, " ") },
+    { key: "admin-space", content: /* @__PURE__ */ React6.createElement(Text6, null, " ") },
     ...services.length > 0 ? [
-      { key: "svc-header", content: /* @__PURE__ */ React4.createElement(Text4, { bold: true }, "Services:") },
+      { key: "svc-header", content: /* @__PURE__ */ React6.createElement(Text6, { bold: true }, "Services:") },
       ...services.flatMap((svc) => {
         const serviceConfig = config.services.find((s) => s.name === svc.name);
         const endpoints = serviceConfig?.endpoints || [];
@@ -189427,7 +189866,7 @@ function DevUI({ instanceKey }) {
           const defaultPort = svc.ports.get("default");
           return [{
             key: `svc-${svc.name}`,
-            content: /* @__PURE__ */ React4.createElement(Text4, null, /* @__PURE__ */ React4.createElement(Text4, { color: "green" }, " \u25CF "), /* @__PURE__ */ React4.createElement(Text4, null, svc.name), defaultPort && /* @__PURE__ */ React4.createElement(Text4, { dimColor: true }, " (localhost:", defaultPort, ")"))
+            content: /* @__PURE__ */ React6.createElement(Text6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "green" }, " \u25CF "), /* @__PURE__ */ React6.createElement(Text6, null, svc.name), defaultPort && /* @__PURE__ */ React6.createElement(Text6, { dimColor: true }, " (localhost:", defaultPort, ")"))
           }];
         }
         return endpoints.map((endpoint) => {
@@ -189436,61 +189875,61 @@ function DevUI({ instanceKey }) {
           const proxyName = endpoint.name === "default" ? svc.name : `${svc.name}-${endpoint.name}`;
           return {
             key: `svc-${svc.name}-${endpoint.name}`,
-            content: /* @__PURE__ */ React4.createElement(Text4, null, /* @__PURE__ */ React4.createElement(Text4, { color: "green" }, " \u25CF "), /* @__PURE__ */ React4.createElement(Text4, null, displayName), port ? endpoint.public ? /* @__PURE__ */ React4.createElement(React4.Fragment, null, /* @__PURE__ */ React4.createElement(Text4, null, " \u2192 "), /* @__PURE__ */ React4.createElement(Text4, { bold: true }, "https://", proxyName, instanceKey === "default" ? "" : `.${instanceKey}`, ".local.spcf.app"), /* @__PURE__ */ React4.createElement(Text4, { dimColor: true }, " (localhost:", port, ")")) : /* @__PURE__ */ React4.createElement(Text4, { dimColor: true }, " (localhost:", port, ")") : null)
+            content: /* @__PURE__ */ React6.createElement(Text6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "green" }, " \u25CF "), /* @__PURE__ */ React6.createElement(Text6, null, displayName), port ? endpoint.public ? /* @__PURE__ */ React6.createElement(React6.Fragment, null, /* @__PURE__ */ React6.createElement(Text6, null, " \u2192 "), /* @__PURE__ */ React6.createElement(Text6, { bold: true }, "https://", proxyName, instanceKey === "default" ? "" : `.${instanceKey}`, ".local.spcf.app"), /* @__PURE__ */ React6.createElement(Text6, { dimColor: true }, " (localhost:", port, ")")) : /* @__PURE__ */ React6.createElement(Text6, { dimColor: true }, " (localhost:", port, ")") : null)
           };
         });
       }),
-      { key: "space2", content: /* @__PURE__ */ React4.createElement(Text4, null, " ") }
+      { key: "space2", content: /* @__PURE__ */ React6.createElement(Text6, null, " ") }
     ] : [],
     ...config.postgres.length > 0 ? [
-      { key: "pg-header", content: /* @__PURE__ */ React4.createElement(Text4, { bold: true }, "Postgres:") },
+      { key: "pg-header", content: /* @__PURE__ */ React6.createElement(Text6, { bold: true }, "Postgres:") },
       ...config.postgres.map((pg) => {
         const instance = resources.get(pg.name);
         return {
           key: `pg-${pg.name}`,
-          content: /* @__PURE__ */ React4.createElement(Text4, null, /* @__PURE__ */ React4.createElement(Text4, { color: "green" }, " \u25CF "), /* @__PURE__ */ React4.createElement(Text4, null, pg.name), instance && /* @__PURE__ */ React4.createElement(Text4, null, " \u2192 ", instance.url))
+          content: /* @__PURE__ */ React6.createElement(Text6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "green" }, " \u25CF "), /* @__PURE__ */ React6.createElement(Text6, null, pg.name), instance && /* @__PURE__ */ React6.createElement(Text6, null, " \u2192 ", instance.url))
         };
       }),
-      { key: "pg-space", content: /* @__PURE__ */ React4.createElement(Text4, null, " ") }
+      { key: "pg-space", content: /* @__PURE__ */ React6.createElement(Text6, null, " ") }
     ] : [],
     ...config.redis.length > 0 ? [
-      { key: "redis-header", content: /* @__PURE__ */ React4.createElement(Text4, { bold: true }, "Redis:") },
+      { key: "redis-header", content: /* @__PURE__ */ React6.createElement(Text6, { bold: true }, "Redis:") },
       ...config.redis.map((redis) => {
         const instance = resources.get(redis.name);
         return {
           key: `redis-${redis.name}`,
-          content: /* @__PURE__ */ React4.createElement(Text4, null, /* @__PURE__ */ React4.createElement(Text4, { color: "green" }, " \u25CF "), /* @__PURE__ */ React4.createElement(Text4, null, redis.name), instance && /* @__PURE__ */ React4.createElement(Text4, null, " \u2192 localhost:", instance.port))
+          content: /* @__PURE__ */ React6.createElement(Text6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "green" }, " \u25CF "), /* @__PURE__ */ React6.createElement(Text6, null, redis.name), instance && /* @__PURE__ */ React6.createElement(Text6, null, " \u2192 localhost:", instance.port))
         };
       }),
-      { key: "redis-space", content: /* @__PURE__ */ React4.createElement(Text4, null, " ") }
+      { key: "redis-space", content: /* @__PURE__ */ React6.createElement(Text6, null, " ") }
     ] : [],
     ...config.storage.length > 0 ? [
-      { key: "storage-header", content: /* @__PURE__ */ React4.createElement(Text4, { bold: true }, "Storage:") },
+      { key: "storage-header", content: /* @__PURE__ */ React6.createElement(Text6, { bold: true }, "Storage:") },
       ...config.storage.map((storage) => {
         const instance = resources.get(storage.name);
         return {
           key: `storage-${storage.name}`,
-          content: /* @__PURE__ */ React4.createElement(Text4, null, /* @__PURE__ */ React4.createElement(Text4, { color: "green" }, " \u25CF "), /* @__PURE__ */ React4.createElement(Text4, null, storage.name), instance && /* @__PURE__ */ React4.createElement(Text4, null, " \u2192 localhost:", instance.port))
+          content: /* @__PURE__ */ React6.createElement(Text6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "green" }, " \u25CF "), /* @__PURE__ */ React6.createElement(Text6, null, storage.name), instance && /* @__PURE__ */ React6.createElement(Text6, null, " \u2192 localhost:", instance.port))
         };
       }),
-      { key: "storage-space", content: /* @__PURE__ */ React4.createElement(Text4, null, " ") }
+      { key: "storage-space", content: /* @__PURE__ */ React6.createElement(Text6, null, " ") }
     ] : [],
-    { key: "separator", content: /* @__PURE__ */ React4.createElement(Text4, { dimColor: true }, "\u2500".repeat(50)) },
+    { key: "separator", content: /* @__PURE__ */ React6.createElement(Text6, { dimColor: true }, "\u2500".repeat(50)) },
     ...state.parseError ? [
       {
         key: "parse-error",
-        content: /* @__PURE__ */ React4.createElement(Text4, { color: "red" }, "Warning: ", state.parseError)
+        content: /* @__PURE__ */ React6.createElement(Text6, { color: "red" }, "Warning: ", state.parseError)
       }
     ] : [],
     ...output.map((line, i) => ({
       key: `log-${i}`,
-      content: /* @__PURE__ */ React4.createElement(Text4, null, /* @__PURE__ */ React4.createElement(Text4, { color: line.color }, "[", line.service, "]"), " ", line.text)
+      content: /* @__PURE__ */ React6.createElement(Text6, null, /* @__PURE__ */ React6.createElement(Text6, { color: line.color }, "[", line.service, "]"), " ", line.text)
     }))
   ];
-  return /* @__PURE__ */ React4.createElement(Box4, { flexDirection: "column" }, /* @__PURE__ */ React4.createElement(Static, { items: staticItems }, (item) => /* @__PURE__ */ React4.createElement(Box4, { key: item.key }, item.content)));
+  return /* @__PURE__ */ React6.createElement(Box6, { flexDirection: "column" }, /* @__PURE__ */ React6.createElement(Static, { items: staticItems }, (item) => /* @__PURE__ */ React6.createElement(Box6, { key: item.key }, item.content)));
 }
 function devCommand(instanceKey) {
-  render4(/* @__PURE__ */ React4.createElement(DevUI, { instanceKey }));
+  render4(/* @__PURE__ */ React6.createElement(DevUI, { instanceKey }));
 }
 
 // src/lib/dev/git-worktree.ts
@@ -189533,8 +189972,9 @@ function getDefaultKey() {
 }
 
 // src/commands/deploy.tsx
-import React5, { useState as useState5, useEffect as useEffect5, useCallback } from "react";
-import { render as render5, Text as Text5, Box as Box5, useApp as useApp4, useInput as useInput3 } from "ink";
+init_open();
+import React7, { useState as useState6, useEffect as useEffect4, useCallback } from "react";
+import { render as render5, Text as Text7, Box as Box7, useApp as useApp3, useInput as useInput5 } from "ink";
 import Spinner5 from "ink-spinner";
 import * as fs21 from "fs";
 import * as path19 from "path";
@@ -189857,57 +190297,23 @@ function PhaseIndicator({
   const currentIndex = phases.indexOf(currentPhase);
   if (currentPhase === "error") {
     if (phaseIndex < currentIndex) {
-      return /* @__PURE__ */ React5.createElement(Text5, null, /* @__PURE__ */ React5.createElement(Text5, { color: "green" }, "  ", "\u2713"), " ", label);
+      return /* @__PURE__ */ React7.createElement(Text7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "green" }, "  ", "\u2713"), " ", label);
     }
     if (phaseIndex === currentIndex) {
-      return /* @__PURE__ */ React5.createElement(Text5, null, /* @__PURE__ */ React5.createElement(Text5, { color: "red" }, "  ", "\u2717"), " ", label);
+      return /* @__PURE__ */ React7.createElement(Text7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "red" }, "  ", "\u2717"), " ", label);
     }
-    return /* @__PURE__ */ React5.createElement(Text5, null, /* @__PURE__ */ React5.createElement(Text5, { dimColor: true }, "  ", "\u25CB"), " ", /* @__PURE__ */ React5.createElement(Text5, { dimColor: true }, label));
+    return /* @__PURE__ */ React7.createElement(Text7, null, /* @__PURE__ */ React7.createElement(Text7, { dimColor: true }, "  ", "\u25CB"), " ", /* @__PURE__ */ React7.createElement(Text7, { dimColor: true }, label));
   }
   if (phaseIndex < currentIndex) {
-    return /* @__PURE__ */ React5.createElement(Text5, null, /* @__PURE__ */ React5.createElement(Text5, { color: "green" }, "  ", "\u2713"), " ", label);
+    return /* @__PURE__ */ React7.createElement(Text7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "green" }, "  ", "\u2713"), " ", label);
   }
   if (phaseIndex === currentIndex) {
     if (showSpinner) {
-      return /* @__PURE__ */ React5.createElement(Text5, null, "  ", /* @__PURE__ */ React5.createElement(Text5, { color: "blue" }, /* @__PURE__ */ React5.createElement(Spinner5, { type: "dots" })), " ", label);
+      return /* @__PURE__ */ React7.createElement(Text7, null, "  ", /* @__PURE__ */ React7.createElement(Text7, { color: "blue" }, /* @__PURE__ */ React7.createElement(Spinner5, { type: "dots" })), " ", label);
     }
-    return /* @__PURE__ */ React5.createElement(Text5, null, /* @__PURE__ */ React5.createElement(Text5, { color: "yellow" }, "  ", "\u25CF"), " ", label);
+    return /* @__PURE__ */ React7.createElement(Text7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "yellow" }, "  ", "\u25CF"), " ", label);
   }
-  return /* @__PURE__ */ React5.createElement(Text5, null, /* @__PURE__ */ React5.createElement(Text5, { dimColor: true }, "  ", "\u25CB"), " ", /* @__PURE__ */ React5.createElement(Text5, { dimColor: true }, label));
-}
-function SecretInput({ secretName, onSubmit, onCancel }) {
-  const [value, setValue] = useState5("");
-  useInput3((input, key) => {
-    if (key.return) {
-      if (value.trim() !== "") {
-        onSubmit(value);
-      }
-    } else if (key.escape) {
-      onCancel();
-    } else if (key.backspace || key.delete) {
-      setValue((prev) => prev.slice(0, -1));
-    } else if (!key.ctrl && !key.meta && input) {
-      setValue((prev) => prev + input);
-    }
-  });
-  return /* @__PURE__ */ React5.createElement(Box5, { flexDirection: "column", marginTop: 1 }, /* @__PURE__ */ React5.createElement(Text5, null, "Enter value for ", /* @__PURE__ */ React5.createElement(Text5, { color: "cyan" }, secretName), ":"), /* @__PURE__ */ React5.createElement(Box5, null, /* @__PURE__ */ React5.createElement(Text5, { color: "cyan" }, "> "), /* @__PURE__ */ React5.createElement(Text5, null, value.length > 0 ? "*".repeat(value.length) : ""), /* @__PURE__ */ React5.createElement(Text5, { color: "gray" }, "|")), /* @__PURE__ */ React5.createElement(Text5, { dimColor: true }, "(Press Enter to save, Esc to cancel deployment)"));
-}
-function ConfigInput({ configName, onSubmit, onCancel }) {
-  const [value, setValue] = useState5("");
-  useInput3((input, key) => {
-    if (key.return) {
-      if (value.trim() !== "") {
-        onSubmit(value);
-      }
-    } else if (key.escape) {
-      onCancel();
-    } else if (key.backspace || key.delete) {
-      setValue((prev) => prev.slice(0, -1));
-    } else if (!key.ctrl && !key.meta && input) {
-      setValue((prev) => prev + input);
-    }
-  });
-  return /* @__PURE__ */ React5.createElement(Box5, { flexDirection: "column", marginTop: 1 }, /* @__PURE__ */ React5.createElement(Text5, null, "Enter value for config ", /* @__PURE__ */ React5.createElement(Text5, { color: "cyan" }, configName), ":"), /* @__PURE__ */ React5.createElement(Box5, null, /* @__PURE__ */ React5.createElement(Text5, { color: "cyan" }, "> "), /* @__PURE__ */ React5.createElement(Text5, null, value), /* @__PURE__ */ React5.createElement(Text5, { color: "gray" }, "|")), /* @__PURE__ */ React5.createElement(Text5, { dimColor: true }, "(Press Enter to save, Esc to cancel deployment)"));
+  return /* @__PURE__ */ React7.createElement(Text7, null, /* @__PURE__ */ React7.createElement(Text7, { dimColor: true }, "  ", "\u25CB"), " ", /* @__PURE__ */ React7.createElement(Text7, { dimColor: true }, label));
 }
 function ProjectSelector({
   projects,
@@ -189916,7 +190322,7 @@ function ProjectSelector({
   onUp,
   onDown
 }) {
-  useInput3((input, key) => {
+  useInput5((input, key) => {
     if (key.return) {
       if (selectedIndex === 0) {
         onSelect("new");
@@ -189933,11 +190339,11 @@ function ProjectSelector({
     { id: "new", name: "Create new project", isNew: true },
     ...projects.map((p) => ({ ...p, isNew: false }))
   ];
-  return /* @__PURE__ */ React5.createElement(Box5, { flexDirection: "column", gap: 1 }, /* @__PURE__ */ React5.createElement(Text5, { bold: true }, "Select a project to deploy:"), /* @__PURE__ */ React5.createElement(Box5, { flexDirection: "column" }, items.map((item, index) => /* @__PURE__ */ React5.createElement(Text5, { key: item.id }, index === selectedIndex ? /* @__PURE__ */ React5.createElement(Text5, { color: "cyan" }, "> ") : /* @__PURE__ */ React5.createElement(Text5, null, "  "), item.isNew ? /* @__PURE__ */ React5.createElement(Text5, { color: "green" }, item.name) : /* @__PURE__ */ React5.createElement(Text5, null, item.name, " ", /* @__PURE__ */ React5.createElement(Text5, { dimColor: true }, "(", item.id, ")"))))), /* @__PURE__ */ React5.createElement(Text5, { dimColor: true }, "Use arrow keys to navigate, Enter to select"));
+  return /* @__PURE__ */ React7.createElement(Box7, { flexDirection: "column", gap: 1 }, /* @__PURE__ */ React7.createElement(Text7, { bold: true }, "Select a project to deploy:"), /* @__PURE__ */ React7.createElement(Box7, { flexDirection: "column" }, items.map((item, index) => /* @__PURE__ */ React7.createElement(Text7, { key: item.id }, index === selectedIndex ? /* @__PURE__ */ React7.createElement(Text7, { color: "cyan" }, "> ") : /* @__PURE__ */ React7.createElement(Text7, null, "  "), item.isNew ? /* @__PURE__ */ React7.createElement(Text7, { color: "green" }, item.name) : /* @__PURE__ */ React7.createElement(Text7, null, item.name, " ", /* @__PURE__ */ React7.createElement(Text7, { dimColor: true }, "(", item.id, ")"))))), /* @__PURE__ */ React7.createElement(Text7, { dimColor: true }, "Use arrow keys to navigate, Enter to select"));
 }
 function NameInput({ onSubmit, onCancel }) {
-  const [value, setValue] = useState5("");
-  useInput3((input, key) => {
+  const [value, setValue] = useState6("");
+  useInput5((input, key) => {
     if (key.return) {
       if (value.trim() !== "") {
         onSubmit(value.trim());
@@ -189950,13 +190356,13 @@ function NameInput({ onSubmit, onCancel }) {
       setValue((prev) => prev + input);
     }
   });
-  return /* @__PURE__ */ React5.createElement(Box5, { flexDirection: "column", gap: 1 }, /* @__PURE__ */ React5.createElement(Text5, { bold: true }, "Create new project"), /* @__PURE__ */ React5.createElement(Text5, null, "Enter project name:"), /* @__PURE__ */ React5.createElement(Box5, null, /* @__PURE__ */ React5.createElement(Text5, { color: "cyan" }, "> "), /* @__PURE__ */ React5.createElement(Text5, null, value), /* @__PURE__ */ React5.createElement(Text5, { color: "gray" }, "|")), /* @__PURE__ */ React5.createElement(Text5, { dimColor: true }, "Press Enter to create, Esc to go back"));
+  return /* @__PURE__ */ React7.createElement(Box7, { flexDirection: "column", gap: 1 }, /* @__PURE__ */ React7.createElement(Text7, { bold: true }, "Create new project"), /* @__PURE__ */ React7.createElement(Text7, null, "Enter project name:"), /* @__PURE__ */ React7.createElement(Box7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "cyan" }, "> "), /* @__PURE__ */ React7.createElement(Text7, null, value), /* @__PURE__ */ React7.createElement(Text7, { color: "gray" }, "|")), /* @__PURE__ */ React7.createElement(Text7, { dimColor: true }, "Press Enter to create, Esc to go back"));
 }
 function DeployUI({ environment, config, skipBuildTest }) {
-  const { exit } = useApp4();
-  const [state, setState] = useState5({ phase: "checking-auth" });
-  const clientRef = React5.useRef(null);
-  useEffect5(() => {
+  const { exit } = useApp3();
+  const [state, setState] = useState6({ phase: "checking-auth" });
+  const clientRef = React7.useRef(null);
+  useEffect4(() => {
     if (state.phase !== "checking-auth") return;
     const projectDir = process.cwd();
     if (hasProjectId(projectDir)) {
@@ -189977,7 +190383,7 @@ function DeployUI({ environment, config, skipBuildTest }) {
     }
     setState({ phase: "logging-in" });
   }, [state.phase]);
-  useEffect5(() => {
+  useEffect4(() => {
     if (state.phase !== "logging-in") return;
     let cancelled = false;
     async function startLogin() {
@@ -190042,7 +190448,7 @@ function DeployUI({ environment, config, skipBuildTest }) {
       cancelled = true;
     };
   }, [state.phase]);
-  useEffect5(() => {
+  useEffect4(() => {
     if (state.phase !== "loading-projects") return;
     let cancelled = false;
     async function loadProjects() {
@@ -190089,7 +190495,7 @@ function DeployUI({ environment, config, skipBuildTest }) {
   const handleNameCancel = useCallback(() => {
     setState((s) => ({ ...s, phase: "selecting-project" }));
   }, []);
-  useEffect5(() => {
+  useEffect4(() => {
     if (state.phase !== "creating-project" || !state.newProjectName) return;
     let cancelled = false;
     async function createProject() {
@@ -190174,7 +190580,7 @@ function DeployUI({ environment, config, skipBuildTest }) {
       error: "Deployment cancelled - configs not provided"
     }));
   }, []);
-  useEffect5(() => {
+  useEffect4(() => {
     const {
       phase: phase2,
       deployment: deployment2,
@@ -190216,7 +190622,7 @@ function DeployUI({ environment, config, skipBuildTest }) {
       }
     })();
   }, [state]);
-  useEffect5(() => {
+  useEffect4(() => {
     const {
       phase: phase2,
       deployment: deployment2,
@@ -190258,7 +190664,7 @@ function DeployUI({ environment, config, skipBuildTest }) {
       }
     })();
   }, [state]);
-  useEffect5(() => {
+  useEffect4(() => {
     if (state.phase !== "testing-builds" || !state.projectId) return;
     let cancelled = false;
     let pollInterval;
@@ -190448,7 +190854,7 @@ ${errorMsg}`
       if (pollInterval) clearInterval(pollInterval);
     };
   }, [state.projectId, environment, config.builds, skipBuildTest]);
-  useEffect5(() => {
+  useEffect4(() => {
     let pollInterval;
     if ((state.phase === "building" || state.phase === "deploying") && state.deployment && state.missingSecrets === void 0 && state.secretValues === void 0 && state.missingConfigs === void 0 && state.configValues === void 0) {
       const client2 = clientRef.current;
@@ -190471,6 +190877,22 @@ ${errorMsg}`
             if (pollInterval) clearInterval(pollInterval);
             return;
           }
+          if (status.state === "awaiting_configs") {
+            if (pollInterval) clearInterval(pollInterval);
+            pollInterval = void 0;
+            const missingConfigs2 = status.missingConfigs || [];
+            writeLog("deploy", `Awaiting configs: ${missingConfigs2.join(", ")}`);
+            setState((s) => ({
+              ...s,
+              phase: "awaiting-configs",
+              deployment: status,
+              missingConfigs: missingConfigs2,
+              configValues: {},
+              currentConfigIndex: 0,
+              currentConfigInput: ""
+            }));
+            return;
+          }
           if (status.state === "deploying") {
             setState((s) => ({ ...s, phase: "deploying", deployment: status }));
           } else if (status.state === "building") {
@@ -190486,12 +190908,12 @@ ${errorMsg}`
       };
     }
   }, [state.phase, state.missingSecrets, state.secretValues, state.missingConfigs, state.configValues]);
-  useEffect5(() => {
+  useEffect4(() => {
     if (state.phase === "testing-builds") {
       trackEvent("deploy_started", { environment });
     }
   }, [state.phase, environment]);
-  useEffect5(() => {
+  useEffect4(() => {
     if (state.phase === "success") {
       trackEvent("deploy_succeeded", { environment });
       closeDebugLog();
@@ -190520,16 +190942,16 @@ ${errorMsg}`
     verificationUri
   } = state;
   if (phase === "checking-auth") {
-    return /* @__PURE__ */ React5.createElement(Box5, null, /* @__PURE__ */ React5.createElement(Text5, { color: "blue" }, /* @__PURE__ */ React5.createElement(Spinner5, { type: "dots" })), /* @__PURE__ */ React5.createElement(Text5, null, " Checking authentication..."));
+    return /* @__PURE__ */ React7.createElement(Box7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "blue" }, /* @__PURE__ */ React7.createElement(Spinner5, { type: "dots" })), /* @__PURE__ */ React7.createElement(Text7, null, " Checking authentication..."));
   }
   if (phase === "logging-in") {
-    return /* @__PURE__ */ React5.createElement(Box5, { flexDirection: "column", gap: 1 }, /* @__PURE__ */ React5.createElement(Text5, { bold: true }, "Log in to Specific"), userCode ? /* @__PURE__ */ React5.createElement(React5.Fragment, null, /* @__PURE__ */ React5.createElement(Text5, null, "Your authentication code:", " ", /* @__PURE__ */ React5.createElement(Text5, { color: "cyan", bold: true }, userCode)), /* @__PURE__ */ React5.createElement(Box5, null, /* @__PURE__ */ React5.createElement(Text5, { color: "blue" }, /* @__PURE__ */ React5.createElement(Spinner5, { type: "dots" })), /* @__PURE__ */ React5.createElement(Text5, null, " Waiting for authentication in browser...")), /* @__PURE__ */ React5.createElement(Text5, { dimColor: true }, "If the browser didn't open, visit: ", verificationUri)) : /* @__PURE__ */ React5.createElement(Box5, null, /* @__PURE__ */ React5.createElement(Text5, { color: "blue" }, /* @__PURE__ */ React5.createElement(Spinner5, { type: "dots" })), /* @__PURE__ */ React5.createElement(Text5, null, " Initiating login...")));
+    return /* @__PURE__ */ React7.createElement(Box7, { flexDirection: "column", gap: 1 }, /* @__PURE__ */ React7.createElement(Text7, { bold: true }, "Log in to Specific"), userCode ? /* @__PURE__ */ React7.createElement(React7.Fragment, null, /* @__PURE__ */ React7.createElement(Text7, null, "Your authentication code:", " ", /* @__PURE__ */ React7.createElement(Text7, { color: "cyan", bold: true }, userCode)), /* @__PURE__ */ React7.createElement(Box7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "blue" }, /* @__PURE__ */ React7.createElement(Spinner5, { type: "dots" })), /* @__PURE__ */ React7.createElement(Text7, null, " Waiting for authentication in browser...")), /* @__PURE__ */ React7.createElement(Text7, { dimColor: true }, "If the browser didn't open, visit: ", verificationUri)) : /* @__PURE__ */ React7.createElement(Box7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "blue" }, /* @__PURE__ */ React7.createElement(Spinner5, { type: "dots" })), /* @__PURE__ */ React7.createElement(Text7, null, " Initiating login...")));
   }
   if (phase === "loading-projects") {
-    return /* @__PURE__ */ React5.createElement(Box5, null, /* @__PURE__ */ React5.createElement(Text5, { color: "blue" }, /* @__PURE__ */ React5.createElement(Spinner5, { type: "dots" })), /* @__PURE__ */ React5.createElement(Text5, null, " Loading projects..."));
+    return /* @__PURE__ */ React7.createElement(Box7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "blue" }, /* @__PURE__ */ React7.createElement(Spinner5, { type: "dots" })), /* @__PURE__ */ React7.createElement(Text7, null, " Loading projects..."));
   }
   if (phase === "selecting-project" && projects && selectedIndex !== void 0) {
-    return /* @__PURE__ */ React5.createElement(
+    return /* @__PURE__ */ React7.createElement(
       ProjectSelector,
       {
         projects,
@@ -190550,57 +190972,57 @@ ${errorMsg}`
     );
   }
   if (phase === "entering-name") {
-    return /* @__PURE__ */ React5.createElement(NameInput, { onSubmit: handleNameSubmit, onCancel: handleNameCancel });
+    return /* @__PURE__ */ React7.createElement(NameInput, { onSubmit: handleNameSubmit, onCancel: handleNameCancel });
   }
   if (phase === "creating-project") {
-    return /* @__PURE__ */ React5.createElement(Box5, null, /* @__PURE__ */ React5.createElement(Text5, { color: "blue" }, /* @__PURE__ */ React5.createElement(Spinner5, { type: "dots" })), /* @__PURE__ */ React5.createElement(Text5, null, " Creating project..."));
+    return /* @__PURE__ */ React7.createElement(Box7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "blue" }, /* @__PURE__ */ React7.createElement(Spinner5, { type: "dots" })), /* @__PURE__ */ React7.createElement(Text7, null, " Creating project..."));
   }
   const currentSecret = missingSecrets && currentSecretIndex !== void 0 ? missingSecrets[currentSecretIndex] : void 0;
   const currentConfig = missingConfigs && currentConfigIndex !== void 0 ? missingConfigs[currentConfigIndex] : void 0;
   const displayPhase = phase === "awaiting-secrets" || phase === "awaiting-configs" ? "building" : phase;
-  return /* @__PURE__ */ React5.createElement(Box5, { flexDirection: "column", gap: 1 }, /* @__PURE__ */ React5.createElement(Text5, null, /* @__PURE__ */ React5.createElement(Text5, { bold: true, color: "cyan" }, "Deploying to ", environment), deployment && /* @__PURE__ */ React5.createElement(Text5, { dimColor: true }, " (", deployment.id, ")")), /* @__PURE__ */ React5.createElement(Box5, { flexDirection: "column" }, /* @__PURE__ */ React5.createElement(
+  return /* @__PURE__ */ React7.createElement(Box7, { flexDirection: "column", gap: 1 }, /* @__PURE__ */ React7.createElement(Text7, null, /* @__PURE__ */ React7.createElement(Text7, { bold: true, color: "cyan" }, "Deploying to ", environment), deployment && /* @__PURE__ */ React7.createElement(Text7, { dimColor: true }, " (", deployment.id, ")")), /* @__PURE__ */ React7.createElement(Box7, { flexDirection: "column" }, /* @__PURE__ */ React7.createElement(
     PhaseIndicator,
     {
       phase: "testing-builds",
       currentPhase: displayPhase,
       label: "Testing builds locally"
     }
-  ), /* @__PURE__ */ React5.createElement(
+  ), /* @__PURE__ */ React7.createElement(
     PhaseIndicator,
     {
       phase: "creating-tarball",
       currentPhase: displayPhase,
       label: `Creating archive${tarballSize ? ` (${formatBytes(tarballSize)})` : ""}`
     }
-  ), /* @__PURE__ */ React5.createElement(
+  ), /* @__PURE__ */ React7.createElement(
     PhaseIndicator,
     {
       phase: "creating-deployment",
       currentPhase: displayPhase,
       label: "Creating deployment"
     }
-  ), /* @__PURE__ */ React5.createElement(
+  ), /* @__PURE__ */ React7.createElement(
     PhaseIndicator,
     {
       phase: "uploading",
       currentPhase: displayPhase,
       label: "Uploading"
     }
-  ), /* @__PURE__ */ React5.createElement(
+  ), /* @__PURE__ */ React7.createElement(
     PhaseIndicator,
     {
       phase: "building",
       currentPhase: displayPhase,
       label: "Building"
     }
-  ), /* @__PURE__ */ React5.createElement(
+  ), /* @__PURE__ */ React7.createElement(
     PhaseIndicator,
     {
       phase: "deploying",
       currentPhase: displayPhase,
       label: "Deploying"
     }
-  )), phase === "awaiting-secrets" && currentSecret && /* @__PURE__ */ React5.createElement(
+  )), phase === "awaiting-secrets" && currentSecret && /* @__PURE__ */ React7.createElement(
     SecretInput,
     {
       key: currentSecret,
@@ -190608,7 +191030,7 @@ ${errorMsg}`
       onSubmit: handleSecretSubmit,
       onCancel: handleSecretCancel
     }
-  ), phase === "awaiting-configs" && currentConfig && /* @__PURE__ */ React5.createElement(
+  ), phase === "awaiting-configs" && currentConfig && /* @__PURE__ */ React7.createElement(
     ConfigInput,
     {
       key: currentConfig,
@@ -190616,7 +191038,7 @@ ${errorMsg}`
       onSubmit: handleConfigSubmit,
       onCancel: handleConfigCancel
     }
-  ), phase === "error" && /* @__PURE__ */ React5.createElement(Box5, { marginTop: 1 }, /* @__PURE__ */ React5.createElement(Text5, { color: "red" }, "Error: ", error)), phase === "success" && /* @__PURE__ */ React5.createElement(Box5, { marginTop: 1, flexDirection: "column" }, /* @__PURE__ */ React5.createElement(Text5, { color: "green" }, "Deployment successful!"), deployment?.publicUrls && Object.keys(deployment.publicUrls).length > 0 && /* @__PURE__ */ React5.createElement(Box5, { marginTop: 1, flexDirection: "column" }, /* @__PURE__ */ React5.createElement(Text5, { bold: true }, "Public URLs:"), Object.entries(deployment.publicUrls).map(([name, url]) => /* @__PURE__ */ React5.createElement(Text5, { key: name }, "  ", name, ": ", /* @__PURE__ */ React5.createElement(Text5, { color: "cyan" }, url))))));
+  ), phase === "error" && /* @__PURE__ */ React7.createElement(Box7, { marginTop: 1 }, /* @__PURE__ */ React7.createElement(Text7, { color: "red" }, "Error: ", error)), phase === "success" && /* @__PURE__ */ React7.createElement(Box7, { marginTop: 1, flexDirection: "column" }, /* @__PURE__ */ React7.createElement(Text7, { color: "green" }, "Deployment successful!"), deployment?.publicUrls && Object.keys(deployment.publicUrls).length > 0 && /* @__PURE__ */ React7.createElement(Box7, { marginTop: 1, flexDirection: "column" }, /* @__PURE__ */ React7.createElement(Text7, { bold: true }, "Public URLs:"), Object.entries(deployment.publicUrls).map(([name, url]) => /* @__PURE__ */ React7.createElement(Text7, { key: name }, "  ", name, ": ", /* @__PURE__ */ React7.createElement(Text7, { color: "cyan" }, url))))));
 }
 async function deployCommand(environment, options2) {
   const configPath = path19.join(process.cwd(), "specific.hcl");
@@ -190637,7 +191059,7 @@ async function deployCommand(environment, options2) {
   const env2 = environment || "prod";
   const skipBuildTest = options2?.skipBuildTest ?? false;
   render5(
-    /* @__PURE__ */ React5.createElement(
+    /* @__PURE__ */ React7.createElement(
       DeployUI,
       {
         environment: env2,
@@ -190877,14 +191299,14 @@ async function psqlCommand(databaseName, instanceKey = "default") {
 }
 
 // src/commands/clean.tsx
-import React6, { useState as useState6, useEffect as useEffect6 } from "react";
-import { render as render6, Text as Text6, Box as Box6 } from "ink";
+import React8, { useState as useState7, useEffect as useEffect5 } from "react";
+import { render as render6, Text as Text8, Box as Box8 } from "ink";
 import Spinner6 from "ink-spinner";
 import * as fs23 from "fs";
 import * as path21 from "path";
 function CleanUI({ instanceKey }) {
-  const [state, setState] = useState6({ status: "checking" });
-  useEffect6(() => {
+  const [state, setState] = useState7({ status: "checking" });
+  useEffect5(() => {
     async function clean() {
       const projectRoot = process.cwd();
       const specificDir = path21.join(projectRoot, ".specific");
@@ -190960,85 +191382,52 @@ function CleanUI({ instanceKey }) {
     clean();
   }, [instanceKey]);
   if (state.status === "checking") {
-    return /* @__PURE__ */ React6.createElement(Box6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "blue" }, /* @__PURE__ */ React6.createElement(Spinner6, { type: "dots" })), /* @__PURE__ */ React6.createElement(Text6, null, " Checking for running instances..."));
+    return /* @__PURE__ */ React8.createElement(Box8, null, /* @__PURE__ */ React8.createElement(Text8, { color: "blue" }, /* @__PURE__ */ React8.createElement(Spinner6, { type: "dots" })), /* @__PURE__ */ React8.createElement(Text8, null, " Checking for running instances..."));
   }
   if (state.status === "cleaning") {
-    return /* @__PURE__ */ React6.createElement(Box6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "blue" }, /* @__PURE__ */ React6.createElement(Spinner6, { type: "dots" })), /* @__PURE__ */ React6.createElement(Text6, null, " Removing .specific directory..."));
+    return /* @__PURE__ */ React8.createElement(Box8, null, /* @__PURE__ */ React8.createElement(Text8, { color: "blue" }, /* @__PURE__ */ React8.createElement(Spinner6, { type: "dots" })), /* @__PURE__ */ React8.createElement(Text8, null, " Removing .specific directory..."));
   }
   if (state.status === "error") {
-    return /* @__PURE__ */ React6.createElement(Text6, { color: "red" }, "Error: ", state.error);
+    return /* @__PURE__ */ React8.createElement(Text8, { color: "red" }, "Error: ", state.error);
   }
   if (state.status === "nothing") {
     const target2 = instanceKey ? `key "${instanceKey}"` : ".specific directory";
-    return /* @__PURE__ */ React6.createElement(Text6, { color: "yellow" }, "Nothing to clean (", target2, " does not exist)");
+    return /* @__PURE__ */ React8.createElement(Text8, { color: "yellow" }, "Nothing to clean (", target2, " does not exist)");
   }
   const target = instanceKey ? `key "${instanceKey}"` : ".specific directory";
-  return /* @__PURE__ */ React6.createElement(Text6, { color: "green" }, "Cleaned ", target);
+  return /* @__PURE__ */ React8.createElement(Text8, { color: "green" }, "Cleaned ", target);
 }
 function cleanCommand(instanceKey) {
   if (instanceKey) {
-    render6(/* @__PURE__ */ React6.createElement(CleanUI, { instanceKey }));
+    render6(/* @__PURE__ */ React8.createElement(CleanUI, { instanceKey }));
   } else {
-    render6(/* @__PURE__ */ React6.createElement(CleanUI, null));
+    render6(/* @__PURE__ */ React8.createElement(CleanUI, null));
   }
 }
 
 // src/commands/secrets.tsx
-import React7, { useState as useState7, useEffect as useEffect7 } from "react";
-import { render as render7, Text as Text7, Box as Box7, useInput as useInput4, useApp as useApp5 } from "ink";
-import * as fs24 from "fs";
-var HEADER_COMMENT = "# Do not commit this file - it contains secrets\n";
+import React9, { useState as useState8, useEffect as useEffect6 } from "react";
+import { render as render7, Text as Text9, Box as Box9, useInput as useInput6, useApp as useApp4 } from "ink";
 function SetSecretUI({ secretName }) {
-  const { exit } = useApp5();
-  const [value, setValue] = useState7("");
-  const [done, setDone] = useState7(false);
-  const [error, setError] = useState7(null);
-  useInput4((input, key) => {
-    if (done) return;
+  const { exit } = useApp4();
+  const [value, setValue] = useState8("");
+  const [done, setDone] = useState8(false);
+  const [saving, setSaving] = useState8(false);
+  const [error, setError] = useState8(null);
+  useInput6((input, key) => {
+    if (done || saving) return;
     if (key.return) {
       if (value.trim() === "") {
         setError("Secret value cannot be empty");
         return;
       }
-      try {
-        const escapedValue = value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
-        const hclLine = `${secretName} = "${escapedValue}"`;
-        let content = "";
-        let hasHeader = false;
-        if (fs24.existsSync(SECRETS_FILE)) {
-          content = fs24.readFileSync(SECRETS_FILE, "utf-8");
-          hasHeader = content.startsWith("#");
-          const lines = content.split("\n");
-          const newLines = [];
-          let found = false;
-          const pattern = new RegExp(`^${secretName}\\s*=\\s*"`);
-          for (const line of lines) {
-            if (pattern.test(line.trim())) {
-              newLines.push(hclLine);
-              found = true;
-            } else {
-              newLines.push(line);
-            }
-          }
-          if (found) {
-            fs24.writeFileSync(SECRETS_FILE, newLines.join("\n"));
-            setDone(true);
-            return;
-          }
-        }
-        let newContent = "";
-        if (!hasHeader && !content) {
-          newContent = HEADER_COMMENT + "\n";
-        } else if (content) {
-          newContent = content.endsWith("\n") ? content : content + "\n";
-        }
-        newContent += `${hclLine}
-`;
-        fs24.writeFileSync(SECRETS_FILE, newContent);
+      setSaving(true);
+      saveSecret(secretName, value).then(() => {
         setDone(true);
-      } catch (err) {
+      }).catch((err) => {
         setError(err instanceof Error ? err.message : String(err));
-      }
+        setSaving(false);
+      });
     } else if (key.backspace || key.delete) {
       setValue((prev) => prev.slice(0, -1));
     } else if (key.escape) {
@@ -191047,19 +191436,19 @@ function SetSecretUI({ secretName }) {
       setValue((prev) => prev + input);
     }
   });
-  useEffect7(() => {
+  useEffect6(() => {
     if (done) {
       const timer = setTimeout(() => exit(), 50);
       return () => clearTimeout(timer);
     }
   }, [done, exit]);
   if (error) {
-    return /* @__PURE__ */ React7.createElement(Text7, { color: "red" }, "Error: ", error);
+    return /* @__PURE__ */ React9.createElement(Text9, { color: "red" }, "Error: ", error);
   }
   if (done) {
-    return /* @__PURE__ */ React7.createElement(Box7, { flexDirection: "column" }, /* @__PURE__ */ React7.createElement(Text7, { color: "green" }, "Secret '", secretName, "' saved to ", SECRETS_FILE));
+    return /* @__PURE__ */ React9.createElement(Box9, { flexDirection: "column" }, /* @__PURE__ */ React9.createElement(Text9, { color: "green" }, "Secret '", secretName, "' saved to ", SECRETS_FILE));
   }
-  return /* @__PURE__ */ React7.createElement(Box7, { flexDirection: "column" }, /* @__PURE__ */ React7.createElement(Text7, null, "Enter value for secret '", secretName, "':"), /* @__PURE__ */ React7.createElement(Box7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "cyan" }, "> "), /* @__PURE__ */ React7.createElement(Text7, null, value.length > 0 ? "*".repeat(value.length) : ""), /* @__PURE__ */ React7.createElement(Text7, { color: "gray" }, "|")), /* @__PURE__ */ React7.createElement(Text7, { dimColor: true }, "(Press Enter to save, Esc to cancel)"));
+  return /* @__PURE__ */ React9.createElement(Box9, { flexDirection: "column" }, /* @__PURE__ */ React9.createElement(Text9, null, "Enter value for secret '", secretName, "':"), /* @__PURE__ */ React9.createElement(Box9, null, /* @__PURE__ */ React9.createElement(Text9, { color: "cyan" }, "> "), /* @__PURE__ */ React9.createElement(Text9, null, value.length > 0 ? "*".repeat(value.length) : ""), /* @__PURE__ */ React9.createElement(Text9, { color: "gray" }, "|")), /* @__PURE__ */ React9.createElement(Text9, { dimColor: true }, "(Press Enter to save, Esc to cancel)"));
 }
 async function secretsSetCommand(secretName) {
   if (!secretName) {
@@ -191067,7 +191456,7 @@ async function secretsSetCommand(secretName) {
     console.error("Usage: specific secrets set <name>");
     process.exit(1);
   }
-  render7(/* @__PURE__ */ React7.createElement(SetSecretUI, { secretName }));
+  render7(/* @__PURE__ */ React9.createElement(SetSecretUI, { secretName }));
 }
 async function secretsCommand(action, secretName) {
   if (!action) {
@@ -191092,16 +191481,16 @@ async function secretsCommand(action, secretName) {
 }
 
 // src/commands/config.tsx
-import React8, { useState as useState8, useEffect as useEffect8 } from "react";
-import { render as render8, Text as Text8, Box as Box8, useInput as useInput5, useApp as useApp6 } from "ink";
-import * as fs25 from "fs";
+import React10, { useState as useState9, useEffect as useEffect7 } from "react";
+import { render as render8, Text as Text10, Box as Box10, useInput as useInput7, useApp as useApp5 } from "ink";
+import * as fs24 from "fs";
 var HEADER_COMMENT2 = "# Configuration values for this project\n# These values override defaults defined in specific.hcl\n";
 function SetConfigUI({ configName, initialValue }) {
-  const { exit } = useApp6();
-  const [value, setValue] = useState8(initialValue ?? "");
-  const [done, setDone] = useState8(false);
-  const [error, setError] = useState8(null);
-  useInput5((input, key) => {
+  const { exit } = useApp5();
+  const [value, setValue] = useState9(initialValue ?? "");
+  const [done, setDone] = useState9(false);
+  const [error, setError] = useState9(null);
+  useInput7((input, key) => {
     if (done) return;
     if (key.return) {
       if (value.trim() === "") {
@@ -191113,8 +191502,8 @@ function SetConfigUI({ configName, initialValue }) {
         const hclLine = `${configName} = "${escapedValue}"`;
         let content = "";
         let hasHeader = false;
-        if (fs25.existsSync(CONFIG_FILE)) {
-          content = fs25.readFileSync(CONFIG_FILE, "utf-8");
+        if (fs24.existsSync(CONFIG_FILE)) {
+          content = fs24.readFileSync(CONFIG_FILE, "utf-8");
           hasHeader = content.startsWith("#");
           const lines = content.split("\n");
           const newLines = [];
@@ -191129,7 +191518,7 @@ function SetConfigUI({ configName, initialValue }) {
             }
           }
           if (found) {
-            fs25.writeFileSync(CONFIG_FILE, newLines.join("\n"));
+            fs24.writeFileSync(CONFIG_FILE, newLines.join("\n"));
             setDone(true);
             return;
           }
@@ -191142,7 +191531,7 @@ function SetConfigUI({ configName, initialValue }) {
         }
         newContent += `${hclLine}
 `;
-        fs25.writeFileSync(CONFIG_FILE, newContent);
+        fs24.writeFileSync(CONFIG_FILE, newContent);
         setDone(true);
       } catch (err) {
         setError(err instanceof Error ? err.message : String(err));
@@ -191155,19 +191544,19 @@ function SetConfigUI({ configName, initialValue }) {
       setValue((prev) => prev + input);
     }
   });
-  useEffect8(() => {
+  useEffect7(() => {
     if (done) {
       const timer = setTimeout(() => exit(), 50);
       return () => clearTimeout(timer);
     }
   }, [done, exit]);
   if (error) {
-    return /* @__PURE__ */ React8.createElement(Text8, { color: "red" }, "Error: ", error);
+    return /* @__PURE__ */ React10.createElement(Text10, { color: "red" }, "Error: ", error);
   }
   if (done) {
-    return /* @__PURE__ */ React8.createElement(Box8, { flexDirection: "column" }, /* @__PURE__ */ React8.createElement(Text8, { color: "green" }, "Config '", configName, "' saved to ", CONFIG_FILE));
+    return /* @__PURE__ */ React10.createElement(Box10, { flexDirection: "column" }, /* @__PURE__ */ React10.createElement(Text10, { color: "green" }, "Config '", configName, "' saved to ", CONFIG_FILE));
   }
-  return /* @__PURE__ */ React8.createElement(Box8, { flexDirection: "column" }, /* @__PURE__ */ React8.createElement(Text8, null, "Enter value for config '", configName, "':"), /* @__PURE__ */ React8.createElement(Box8, null, /* @__PURE__ */ React8.createElement(Text8, { color: "cyan" }, "> "), /* @__PURE__ */ React8.createElement(Text8, null, value), /* @__PURE__ */ React8.createElement(Text8, { color: "gray" }, "|")), /* @__PURE__ */ React8.createElement(Text8, { dimColor: true }, "(Press Enter to save, Esc to cancel)"));
+  return /* @__PURE__ */ React10.createElement(Box10, { flexDirection: "column" }, /* @__PURE__ */ React10.createElement(Text10, null, "Enter value for config '", configName, "':"), /* @__PURE__ */ React10.createElement(Box10, null, /* @__PURE__ */ React10.createElement(Text10, { color: "cyan" }, "> "), /* @__PURE__ */ React10.createElement(Text10, null, value), /* @__PURE__ */ React10.createElement(Text10, { color: "gray" }, "|")), /* @__PURE__ */ React10.createElement(Text10, { dimColor: true }, "(Press Enter to save, Esc to cancel)"));
 }
 async function configSetCommand(configName, configValue) {
   if (!configName) {
@@ -191181,8 +191570,8 @@ async function configSetCommand(configName, configValue) {
       const hclLine = `${configName} = "${escapedValue}"`;
       let content = "";
       let hasHeader = false;
-      if (fs25.existsSync(CONFIG_FILE)) {
-        content = fs25.readFileSync(CONFIG_FILE, "utf-8");
+      if (fs24.existsSync(CONFIG_FILE)) {
+        content = fs24.readFileSync(CONFIG_FILE, "utf-8");
         hasHeader = content.startsWith("#");
         const lines = content.split("\n");
         const newLines = [];
@@ -191197,7 +191586,7 @@ async function configSetCommand(configName, configValue) {
           }
         }
         if (found) {
-          fs25.writeFileSync(CONFIG_FILE, newLines.join("\n"));
+          fs24.writeFileSync(CONFIG_FILE, newLines.join("\n"));
           console.log(`Config '${configName}' saved to ${CONFIG_FILE}`);
           return;
         }
@@ -191210,7 +191599,7 @@ async function configSetCommand(configName, configValue) {
       }
       newContent += `${hclLine}
 `;
-      fs25.writeFileSync(CONFIG_FILE, newContent);
+      fs24.writeFileSync(CONFIG_FILE, newContent);
       console.log(`Config '${configName}' saved to ${CONFIG_FILE}`);
     } catch (err) {
       console.error("Error:", err instanceof Error ? err.message : String(err));
@@ -191218,7 +191607,7 @@ async function configSetCommand(configName, configValue) {
     }
     return;
   }
-  render8(/* @__PURE__ */ React8.createElement(SetConfigUI, { configName }));
+  render8(/* @__PURE__ */ React10.createElement(SetConfigUI, { configName }));
 }
 async function configCommand(action, configName, configValue) {
   if (!action) {
@@ -191243,62 +191632,26 @@ async function configCommand(action, configName, configValue) {
 }
 
 // src/commands/login.tsx
-import React9, { useState as useState9, useEffect as useEffect9 } from "react";
-import { render as render9, Text as Text9, Box as Box9, useApp as useApp7 } from "ink";
-import Spinner7 from "ink-spinner";
-function AlreadyLoggedInUI() {
-  const { exit } = useApp7();
-  useEffect9(() => {
-    const timer = setTimeout(() => exit(), 100);
-    return () => clearTimeout(timer);
-  }, [exit]);
-  return /* @__PURE__ */ React9.createElement(Box9, { flexDirection: "column" }, /* @__PURE__ */ React9.createElement(Text9, { color: "green" }, "Already logged in."), /* @__PURE__ */ React9.createElement(Text9, { dimColor: true }, "Credentials saved to ~/.specific/credentials.json"));
-}
-function CheckingUI() {
-  return /* @__PURE__ */ React9.createElement(Box9, null, /* @__PURE__ */ React9.createElement(Text9, { color: "blue" }, /* @__PURE__ */ React9.createElement(Spinner7, { type: "dots" })), /* @__PURE__ */ React9.createElement(Text9, null, " Checking login status..."));
-}
-function LoginUI() {
-  const { exit } = useApp7();
-  const [checking, setChecking] = useState9(true);
-  const [alreadyLoggedIn, setAlreadyLoggedIn] = useState9(false);
-  useEffect9(() => {
-    if (isLoggedIn()) {
-      setAlreadyLoggedIn(true);
-    }
-    setChecking(false);
-  }, []);
-  useEffect9(() => {
-    if (checking || alreadyLoggedIn) return;
-    async function doLogin() {
-      const result = await performLogin();
-      if (!result.success) {
-        process.exitCode = 1;
-      }
-      exit();
-    }
-    doLogin();
-  }, [checking, alreadyLoggedIn, exit]);
-  if (checking) {
-    return /* @__PURE__ */ React9.createElement(CheckingUI, null);
+async function loginCommand() {
+  if (isLoggedIn()) {
+    console.log("Already logged in.");
+    return;
   }
-  if (alreadyLoggedIn) {
-    return /* @__PURE__ */ React9.createElement(AlreadyLoggedInUI, null);
+  const result = await performLogin();
+  if (!result.success) {
+    process.exitCode = 1;
   }
-  return null;
-}
-function loginCommand() {
-  render9(/* @__PURE__ */ React9.createElement(LoginUI, null));
 }
 
 // src/commands/logout.tsx
-import React10, { useState as useState10, useEffect as useEffect10 } from "react";
-import { render as render10, Text as Text10, useApp as useApp8 } from "ink";
+import React11, { useState as useState10, useEffect as useEffect8 } from "react";
+import { render as render9, Text as Text11, useApp as useApp6 } from "ink";
 function LogoutUI() {
-  const { exit } = useApp8();
+  const { exit } = useApp6();
   const [state, setState] = useState10({
     phase: "checking"
   });
-  useEffect10(() => {
+  useEffect8(() => {
     if (state.phase !== "checking") return;
     if (!isLoggedIn()) {
       setState({ phase: "not-logged-in" });
@@ -191307,29 +191660,29 @@ function LogoutUI() {
     clearUserCredentials();
     setState({ phase: "done" });
   }, [state.phase]);
-  useEffect10(() => {
+  useEffect8(() => {
     if (state.phase === "done" || state.phase === "not-logged-in") {
       const timer = setTimeout(() => exit(), 100);
       return () => clearTimeout(timer);
     }
   }, [state.phase, exit]);
   if (state.phase === "not-logged-in") {
-    return /* @__PURE__ */ React10.createElement(Text10, { dimColor: true }, "Not logged in.");
+    return /* @__PURE__ */ React11.createElement(Text11, { dimColor: true }, "Not logged in.");
   }
   if (state.phase === "done") {
-    return /* @__PURE__ */ React10.createElement(Text10, { color: "green" }, "Logged out successfully.");
+    return /* @__PURE__ */ React11.createElement(Text11, { color: "green" }, "Logged out successfully.");
   }
-  return /* @__PURE__ */ React10.createElement(Text10, null, "Logging out...");
+  return /* @__PURE__ */ React11.createElement(Text11, null, "Logging out...");
 }
 function logoutCommand() {
-  render10(/* @__PURE__ */ React10.createElement(LogoutUI, null));
+  render9(/* @__PURE__ */ React11.createElement(LogoutUI, null));
 }
 
 // src/cli.tsx
 var program = new Command();
 var env = "production";
 var envLabel = env !== "production" ? `[${env.toUpperCase()}] ` : "";
-program.name("specific").description(`${envLabel}Infrastructure-as-code for coding agents`).version("0.1.42").enablePositionalOptions();
+program.name("specific").description(`${envLabel}Infrastructure-as-code for coding agents`).version("0.1.43").enablePositionalOptions();
 program.command("init").description("Initialize project for use with a coding agent").action(initCommand);
 program.command("docs [topic]").description("Fetch LLM-optimized documentation").action(docsCommand);
 program.command("check").description("Validate specific.hcl configuration").action(checkCommand);