@specific.dev/cli 0.1.43 → 0.1.45

package/dist/cli.js

@@ -38,7 +38,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
-// ../../node_modules/is-docker/index.js
+// node_modules/.pnpm/is-docker@3.0.0/node_modules/is-docker/index.js
 import fs4 from "node:fs";
 function hasDockerEnv() {
   try {
@@ -63,11 +63,11 @@ function isDocker() {
 }
 var isDockerCached;
 var init_is_docker = __esm({
-  "../../node_modules/is-docker/index.js"() {
+  "node_modules/.pnpm/is-docker@3.0.0/node_modules/is-docker/index.js"() {
   }
 });
 
-// ../../node_modules/is-inside-container/index.js
+// node_modules/.pnpm/is-inside-container@1.0.0/node_modules/is-inside-container/index.js
 import fs5 from "node:fs";
 function isInsideContainer() {
   if (cachedResult === void 0) {
@@ -77,7 +77,7 @@ function isInsideContainer() {
 }
 var cachedResult, hasContainerEnv;
 var init_is_inside_container = __esm({
-  "../../node_modules/is-inside-container/index.js"() {
+  "node_modules/.pnpm/is-inside-container@1.0.0/node_modules/is-inside-container/index.js"() {
     init_is_docker();
     hasContainerEnv = () => {
       try {
@@ -90,13 +90,13 @@ var init_is_inside_container = __esm({
   }
 });
 
-// ../../node_modules/is-wsl/index.js
+// node_modules/.pnpm/is-wsl@3.1.0/node_modules/is-wsl/index.js
 import process2 from "node:process";
 import os3 from "node:os";
 import fs6 from "node:fs";
 var isWsl, is_wsl_default;
 var init_is_wsl = __esm({
-  "../../node_modules/is-wsl/index.js"() {
+  "node_modules/.pnpm/is-wsl@3.1.0/node_modules/is-wsl/index.js"() {
     init_is_inside_container();
     isWsl = () => {
       if (process2.platform !== "linux") {
@@ -118,14 +118,14 @@ var init_is_wsl = __esm({
   }
 });
 
-// ../../node_modules/powershell-utils/index.js
+// node_modules/.pnpm/powershell-utils@0.1.0/node_modules/powershell-utils/index.js
 import process3 from "node:process";
 import { Buffer as Buffer2 } from "node:buffer";
 import { promisify } from "node:util";
 import childProcess from "node:child_process";
 var execFile, powerShellPath, executePowerShell;
 var init_powershell_utils = __esm({
-  "../../node_modules/powershell-utils/index.js"() {
+  "node_modules/.pnpm/powershell-utils@0.1.0/node_modules/powershell-utils/index.js"() {
     execFile = promisify(childProcess.execFile);
     powerShellPath = () => `${process3.env.SYSTEMROOT || process3.env.windir || String.raw`C:\Windows`}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe`;
     executePowerShell = async (command, options2 = {}) => {
@@ -158,7 +158,7 @@ var init_powershell_utils = __esm({
   }
 });
 
-// ../../node_modules/wsl-utils/utilities.js
+// node_modules/.pnpm/wsl-utils@0.3.1/node_modules/wsl-utils/utilities.js
 function parseMountPointFromConfig(content) {
   for (const line of content.split("\n")) {
     if (/^\s*#/.test(line)) {
@@ -172,17 +172,17 @@ function parseMountPointFromConfig(content) {
   }
 }
 var init_utilities = __esm({
-  "../../node_modules/wsl-utils/utilities.js"() {
+  "node_modules/.pnpm/wsl-utils@0.3.1/node_modules/wsl-utils/utilities.js"() {
   }
 });
 
-// ../../node_modules/wsl-utils/index.js
+// node_modules/.pnpm/wsl-utils@0.3.1/node_modules/wsl-utils/index.js
 import { promisify as promisify2 } from "node:util";
 import childProcess2 from "node:child_process";
 import fs7, { constants as fsConstants } from "node:fs/promises";
 var execFile2, wslDrivesMountPoint, powerShellPathFromWsl, powerShellPath2, canAccessPowerShellPromise, canAccessPowerShell, wslDefaultBrowser, convertWslPathToWindows;
 var init_wsl_utils = __esm({
-  "../../node_modules/wsl-utils/index.js"() {
+  "node_modules/.pnpm/wsl-utils@0.3.1/node_modules/wsl-utils/index.js"() {
     init_is_wsl();
     init_powershell_utils();
     init_utilities();
@@ -252,7 +252,7 @@ var init_wsl_utils = __esm({
   }
 });
 
-// ../../node_modules/define-lazy-prop/index.js
+// node_modules/.pnpm/define-lazy-prop@3.0.0/node_modules/define-lazy-prop/index.js
 function defineLazyProperty(object, propertyName, valueGetter) {
   const define = (value) => Object.defineProperty(object, propertyName, { value, enumerable: true, writable: true });
   Object.defineProperty(object, propertyName, {
@@ -270,11 +270,11 @@ function defineLazyProperty(object, propertyName, valueGetter) {
   return object;
 }
 var init_define_lazy_prop = __esm({
-  "../../node_modules/define-lazy-prop/index.js"() {
+  "node_modules/.pnpm/define-lazy-prop@3.0.0/node_modules/define-lazy-prop/index.js"() {
   }
 });
 
-// ../../node_modules/default-browser-id/index.js
+// node_modules/.pnpm/default-browser-id@5.0.1/node_modules/default-browser-id/index.js
 import { promisify as promisify3 } from "node:util";
 import process4 from "node:process";
 import { execFile as execFile3 } from "node:child_process";
@@ -292,12 +292,12 @@ async function defaultBrowserId() {
 }
 var execFileAsync;
 var init_default_browser_id = __esm({
-  "../../node_modules/default-browser-id/index.js"() {
+  "node_modules/.pnpm/default-browser-id@5.0.1/node_modules/default-browser-id/index.js"() {
     execFileAsync = promisify3(execFile3);
   }
 });
 
-// ../../node_modules/run-applescript/index.js
+// node_modules/.pnpm/run-applescript@7.1.0/node_modules/run-applescript/index.js
 import process5 from "node:process";
 import { promisify as promisify4 } from "node:util";
 import { execFile as execFile4, execFileSync } from "node:child_process";
@@ -315,23 +315,23 @@ async function runAppleScript(script, { humanReadableOutput = true, signal } = {
 }
 var execFileAsync2;
 var init_run_applescript = __esm({
-  "../../node_modules/run-applescript/index.js"() {
+  "node_modules/.pnpm/run-applescript@7.1.0/node_modules/run-applescript/index.js"() {
     execFileAsync2 = promisify4(execFile4);
   }
 });
 
-// ../../node_modules/bundle-name/index.js
+// node_modules/.pnpm/bundle-name@4.1.0/node_modules/bundle-name/index.js
 async function bundleName(bundleId) {
   return runAppleScript(`tell application "Finder" to set app_path to application file id "${bundleId}" as string
 tell application "System Events" to get value of property list item "CFBundleName" of property list file (app_path & ":Contents:Info.plist")`);
 }
 var init_bundle_name = __esm({
-  "../../node_modules/bundle-name/index.js"() {
+  "node_modules/.pnpm/bundle-name@4.1.0/node_modules/bundle-name/index.js"() {
     init_run_applescript();
   }
 });
 
-// ../../node_modules/default-browser/windows.js
+// node_modules/.pnpm/default-browser@5.4.0/node_modules/default-browser/windows.js
 import { promisify as promisify5 } from "node:util";
 import { execFile as execFile5 } from "node:child_process";
 async function defaultBrowser(_execFileAsync = execFileAsync3) {
@@ -354,7 +354,7 @@ async function defaultBrowser(_execFileAsync = execFileAsync3) {
 }
 var execFileAsync3, windowsBrowserProgIds, _windowsBrowserProgIdMap, UnknownBrowserError;
 var init_windows = __esm({
-  "../../node_modules/default-browser/windows.js"() {
+  "node_modules/.pnpm/default-browser@5.4.0/node_modules/default-browser/windows.js"() {
     execFileAsync3 = promisify5(execFile5);
     windowsBrowserProgIds = {
       MSEdgeHTM: { name: "Edge", id: "com.microsoft.edge" },
@@ -381,7 +381,7 @@ var init_windows = __esm({
   }
 });
 
-// ../../node_modules/default-browser/index.js
+// node_modules/.pnpm/default-browser@5.4.0/node_modules/default-browser/index.js
 import { promisify as promisify6 } from "node:util";
 import process6 from "node:process";
 import { execFile as execFile6 } from "node:child_process";
@@ -404,7 +404,7 @@ async function defaultBrowser2() {
 }
 var execFileAsync4, titleize;
 var init_default_browser = __esm({
-  "../../node_modules/default-browser/index.js"() {
+  "node_modules/.pnpm/default-browser@5.4.0/node_modules/default-browser/index.js"() {
     init_default_browser_id();
     init_bundle_name();
     init_windows();
@@ -414,17 +414,17 @@ var init_default_browser = __esm({
   }
 });
 
-// ../../node_modules/is-in-ssh/index.js
+// node_modules/.pnpm/is-in-ssh@1.0.0/node_modules/is-in-ssh/index.js
 import process7 from "node:process";
 var isInSsh, is_in_ssh_default;
 var init_is_in_ssh = __esm({
-  "../../node_modules/is-in-ssh/index.js"() {
+  "node_modules/.pnpm/is-in-ssh@1.0.0/node_modules/is-in-ssh/index.js"() {
     isInSsh = Boolean(process7.env.SSH_CONNECTION || process7.env.SSH_CLIENT || process7.env.SSH_TTY);
     is_in_ssh_default = isInSsh;
   }
 });
 
-// ../../node_modules/open/index.js
+// node_modules/.pnpm/open@11.0.0/node_modules/open/index.js
 var open_exports = {};
 __export(open_exports, {
   apps: () => apps,
@@ -457,7 +457,7 @@ function detectPlatformBinary({ [platform2]: platformBinary }, { wsl } = {}) {
 }
 var fallbackAttemptSymbol, __dirname, localXdgOpenPath, platform2, arch, tryEachApp, baseOpen, open, openApp, apps, open_default;
 var init_open = __esm({
-  "../../node_modules/open/index.js"() {
+  "node_modules/.pnpm/open@11.0.0/node_modules/open/index.js"() {
     init_wsl_utils();
     init_powershell_utils();
     init_define_lazy_prop();
@@ -744,9 +744,9 @@ var init_open = __esm({
   }
 });
 
-// ../../node_modules/hcl2-json-parser/dist/index.js
+// node_modules/.pnpm/hcl2-json-parser@1.0.1/node_modules/hcl2-json-parser/dist/index.js
 var require_dist = __commonJS({
-  "../../node_modules/hcl2-json-parser/dist/index.js"(exports, module) {
+  "node_modules/.pnpm/hcl2-json-parser@1.0.1/node_modules/hcl2-json-parser/dist/index.js"(exports, module) {
     "use strict";
     (function() {
       var $goVersion = "go1.18.10";
@@ -754,8 +754,8 @@ var require_dist = __commonJS({
       var $global, $module, $NaN = NaN;
       if ("undefined" != typeof window ? $global = window : "undefined" != typeof self ? $global = self : "undefined" != typeof global ? ($global = global).require = __require : $global = this, void 0 === $global || void 0 === $global.Array) throw new Error("no global object found");
       if ("undefined" != typeof module && ($module = module), !$global.fs && $global.require) try {
-        var fs25 = $global.require("fs");
-        "object" == typeof fs25 && null !== fs25 && 0 !== Object.keys(fs25).length && ($global.fs = fs25);
+        var fs24 = $global.require("fs");
+        "object" == typeof fs24 && null !== fs24 && 0 !== Object.keys(fs24).length && ($global.fs = fs24);
       } catch (e) {
       }
       if (!$global.fs) {
@@ -183843,7 +183843,7 @@ function trackEvent(event, properties) {
     event,
     properties: {
       ...properties,
-      cli_version: "0.1.43",
+      cli_version: "0.1.45",
       platform: process.platform,
       node_version: process.version,
       project_id: getProjectId(),
@@ -183911,7 +183911,7 @@ function appendOrCreateFile(filePath, content) {
 }
 function addToGitignore() {
   const gitignorePath = path6.join(process.cwd(), ".gitignore");
-  const entries = [".specific", "specific.secrets"];
+  const entries = [".specific", "specific.local"];
   if (fs10.existsSync(gitignorePath)) {
     const existing = fs10.readFileSync(gitignorePath, "utf-8");
     const lines = existing.split("\n").map((l) => l.trim());
@@ -184172,7 +184172,7 @@ import Spinner3 from "ink-spinner";
 import * as fs11 from "fs";
 import * as path7 from "path";
 
-// ../config/dist/parser.js
+// node_modules/.pnpm/@specific+config@file+..+config/node_modules/@specific/config/dist/parser.js
 var import_hcl2_json_parser = __toESM(require_dist(), 1);
 var { parseToObject } = import_hcl2_json_parser.default;
 function parseReference(value) {
@@ -184740,13 +184740,13 @@ import Spinner4 from "ink-spinner";
 import * as fs19 from "fs";
 import * as path16 from "path";
 
-// node_modules/chokidar/index.js
+// node_modules/.pnpm/chokidar@5.0.0/node_modules/chokidar/index.js
 import { EventEmitter } from "node:events";
 import { stat as statcb, Stats } from "node:fs";
 import { readdir as readdir2, stat as stat3 } from "node:fs/promises";
 import * as sp2 from "node:path";
 
-// node_modules/readdirp/index.js
+// node_modules/.pnpm/readdirp@5.0.0/node_modules/readdirp/index.js
 import { lstat, readdir, realpath, stat } from "node:fs/promises";
 import { join as pjoin, relative as prelative, resolve as presolve, sep as psep } from "node:path";
 import { Readable } from "node:stream";
@@ -184979,7 +184979,7 @@ function readdirp(root, options2 = {}) {
   return new ReaddirpStream(options2);
 }
 
-// node_modules/chokidar/handler.js
+// node_modules/.pnpm/chokidar@5.0.0/node_modules/chokidar/handler.js
 import { watch as fs_watch, unwatchFile, watchFile } from "node:fs";
 import { realpath as fsrealpath, lstat as lstat2, open as open2, stat as stat2 } from "node:fs/promises";
 import { type as osType } from "node:os";
@@ -185738,7 +185738,7 @@ var NodeFsHandler = class {
   }
 };
 
-// node_modules/chokidar/index.js
+// node_modules/.pnpm/chokidar@5.0.0/node_modules/chokidar/index.js
 var SLASH = "/";
 var SLASH_SLASH = "//";
 var ONE_DOT = ".";
@@ -187103,224 +187103,107 @@ function sleep2(ms) {
 // src/lib/dev/service-runner.ts
 import { spawn as spawn2 } from "child_process";
 
-// src/lib/secrets/parser.ts
+// src/lib/local/parser.ts
 var import_hcl2_json_parser2 = __toESM(require_dist(), 1);
-import { readFile, writeFile, mkdir } from "fs/promises";
+import { readFile, writeFile } from "fs/promises";
 import { existsSync as existsSync10 } from "fs";
-import * as path11 from "path";
-import * as crypto2 from "crypto";
 var { parseToObject: parseToObject2 } = import_hcl2_json_parser2.default;
-var SECRETS_FILE = "specific.secrets";
-var GENERATED_SECRETS_FILE = ".specific/generated-secrets.json";
-async function parseSecretsFile(content) {
+var LOCAL_FILE = "specific.local";
+var HEADER_COMMENT = `# Local secrets and configuration
+# Do not commit this file
+
+`;
+async function parseLocalFile(content) {
   const secrets = /* @__PURE__ */ new Map();
+  const configs = /* @__PURE__ */ new Map();
   if (!content.trim()) {
-    return secrets;
+    return { secrets, configs };
   }
   const parsed = await parseToObject2(content);
-  for (const [key, value] of Object.entries(parsed)) {
-    if (typeof value === "string") {
-      secrets.set(key, value);
-    }
-  }
-  return secrets;
-}
-async function loadSecrets() {
-  if (!existsSync10(SECRETS_FILE)) {
-    return /* @__PURE__ */ new Map();
-  }
-  const content = await readFile(SECRETS_FILE, "utf-8");
-  return await parseSecretsFile(content);
-}
-function generateRandomString(length = 64) {
-  const chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
-  const bytes = crypto2.randomBytes(length);
-  let result = "";
-  for (let i = 0; i < length; i++) {
-    result += chars[bytes[i] % chars.length];
-  }
-  return result;
-}
-async function loadGeneratedSecrets() {
-  if (!existsSync10(GENERATED_SECRETS_FILE)) {
-    return /* @__PURE__ */ new Map();
-  }
-  const content = await readFile(GENERATED_SECRETS_FILE, "utf-8");
-  const parsed = JSON.parse(content);
-  return new Map(Object.entries(parsed));
-}
-async function saveGeneratedSecret(name, value) {
-  let secrets = {};
-  if (existsSync10(GENERATED_SECRETS_FILE)) {
-    const content = await readFile(GENERATED_SECRETS_FILE, "utf-8");
-    secrets = JSON.parse(content);
-  }
-  secrets[name] = value;
-  const dir = path11.dirname(GENERATED_SECRETS_FILE);
-  if (!existsSync10(dir)) {
-    await mkdir(dir, { recursive: true });
-  }
-  await writeFile(GENERATED_SECRETS_FILE, JSON.stringify(secrets, null, 2) + "\n");
-}
-async function prepareSecrets(secretsConfig, isDevMode = false) {
-  const userSecrets = await loadSecrets();
-  const generatedSecrets = await loadGeneratedSecrets();
-  const finalSecrets = /* @__PURE__ */ new Map();
-  for (const secretDef of secretsConfig) {
-    const userValue = userSecrets.get(secretDef.name);
-    if (userValue !== void 0) {
-      finalSecrets.set(secretDef.name, userValue);
-      continue;
-    }
-    if (secretDef.generated) {
-      let generatedValue = generatedSecrets.get(secretDef.name);
-      if (generatedValue === void 0) {
-        generatedValue = generateRandomString(secretDef.length ?? 64);
-        await saveGeneratedSecret(secretDef.name, generatedValue);
+  if (parsed.secrets) {
+    const secretsBlocks = Array.isArray(parsed.secrets) ? parsed.secrets : [parsed.secrets];
+    for (const block of secretsBlocks) {
+      if (block && typeof block === "object") {
+        for (const [key, value] of Object.entries(block)) {
+          if (typeof value === "string") {
+            secrets.set(key, value);
+          }
+        }
       }
-      finalSecrets.set(secretDef.name, generatedValue);
-      continue;
-    }
-    if (isDevMode && secretDef.dev?.required === false) {
-      finalSecrets.set(secretDef.name, "");
-      continue;
     }
   }
-  return finalSecrets;
-}
-var HEADER_COMMENT = "# Do not commit this file - it contains secrets\n\n";
-async function saveSecret(name, value) {
-  let content = "";
-  if (existsSync10(SECRETS_FILE)) {
-    content = await readFile(SECRETS_FILE, "utf-8");
-  } else {
-    content = HEADER_COMMENT;
-  }
-  const escapedValue = value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
-  const secretPattern = new RegExp(`^${name}\\s*=\\s*"[^"]*"\\s*$`, "m");
-  if (secretPattern.test(content)) {
-    content = content.replace(secretPattern, `${name} = "${escapedValue}"`);
-  } else {
-    content = content.trimEnd() + `
-${name} = "${escapedValue}"
-`;
-  }
-  await writeFile(SECRETS_FILE, content);
-}
-function findUsedSecrets(services, isDevMode) {
-  const used = /* @__PURE__ */ new Set();
-  for (const service of services) {
-    const mergedEnv = isDevMode ? { ...service.env, ...service.dev?.env } : service.env;
-    for (const value of Object.values(mergedEnv ?? {})) {
-      if (typeof value === "object" && value.type === "secret") {
-        used.add(value.name);
+  if (parsed.config) {
+    const configBlocks = Array.isArray(parsed.config) ? parsed.config : [parsed.config];
+    for (const block of configBlocks) {
+      if (block && typeof block === "object") {
+        for (const [key, value] of Object.entries(block)) {
+          if (typeof value === "string") {
+            configs.set(key, value);
+          }
+        }
       }
     }
   }
-  return used;
-}
-function findMissingSecrets(secretsDef, preparedSecrets, usedSecrets) {
-  const missing = [];
-  for (const secret of secretsDef) {
-    if (secret.generated) continue;
-    if (usedSecrets && !usedSecrets.has(secret.name)) continue;
-    if (!preparedSecrets.has(secret.name)) {
-      missing.push(secret.name);
-    }
-  }
-  return missing;
+  return { secrets, configs };
 }
-
-// src/lib/config/parser.ts
-var import_hcl2_json_parser3 = __toESM(require_dist(), 1);
-import { readFile as readFile2, writeFile as writeFile2 } from "fs/promises";
-import { existsSync as existsSync11 } from "fs";
-var { parseToObject: parseToObject3 } = import_hcl2_json_parser3.default;
-var CONFIG_FILE = "specific.config";
-async function parseConfigFile(content) {
-  const configs = /* @__PURE__ */ new Map();
-  if (!content.trim()) {
-    return configs;
-  }
-  const parsed = await parseToObject3(content);
-  for (const [key, value] of Object.entries(parsed)) {
-    if (typeof value === "string") {
-      configs.set(key, value);
-    }
+async function loadLocal() {
+  if (!existsSync10(LOCAL_FILE)) {
+    return { secrets: /* @__PURE__ */ new Map(), configs: /* @__PURE__ */ new Map() };
   }
-  return configs;
+  const content = await readFile(LOCAL_FILE, "utf-8");
+  return await parseLocalFile(content);
 }
-async function loadConfigs() {
-  if (!existsSync11(CONFIG_FILE)) {
-    return /* @__PURE__ */ new Map();
-  }
-  const content = await readFile2(CONFIG_FILE, "utf-8");
-  return await parseConfigFile(content);
+function escapeHclValue(value) {
+  return value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
 }
-async function saveConfig(name, value) {
-  let content = "";
-  if (existsSync11(CONFIG_FILE)) {
-    content = await readFile2(CONFIG_FILE, "utf-8");
-  } else {
-    content = `# Configuration values for this project
-# These values override defaults defined in specific.hcl
-
+function updateBlockValue(content, blockName, key, value) {
+  const escapedValue = escapeHclValue(value);
+  const newLine = `  ${key} = "${escapedValue}"`;
+  const blockRegex = new RegExp(`(${blockName}\\s*\\{)([^}]*)(\\})`, "s");
+  const blockMatch = content.match(blockRegex);
+  if (blockMatch) {
+    const blockContent = blockMatch[2];
+    const keyRegex = new RegExp(`^(\\s*)${key}\\s*=\\s*"[^"]*"\\s*$`, "m");
+    const keyMatch = blockContent.match(keyRegex);
+    if (keyMatch) {
+      const updatedBlockContent = blockContent.replace(keyRegex, newLine);
+      return content.replace(blockRegex, `$1${updatedBlockContent}$3`);
+    } else {
+      const trimmedContent = blockContent.trimEnd();
+      const newBlockContent = trimmedContent ? `${trimmedContent}
+${newLine}
+` : `
+${newLine}
 `;
-  }
-  const escapedValue = value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
-  const configPattern = new RegExp(`^${name}\\s*=\\s*"[^"]*"\\s*$`, "m");
-  if (configPattern.test(content)) {
-    content = content.replace(configPattern, `${name} = "${escapedValue}"`);
+      return content.replace(blockRegex, `$1${newBlockContent}$3`);
+    }
   } else {
-    content = content.trimEnd() + `
-${name} = "${escapedValue}"
-`;
-  }
-  await writeFile2(CONFIG_FILE, content);
+    const newBlock = `${blockName} {
+${newLine}
 }
-async function prepareConfigs(configsDef, environmentOverrides, isDevMode = false) {
-  const userConfigs = await loadConfigs();
-  const finalConfigs = /* @__PURE__ */ new Map();
-  for (const configDef of configsDef) {
-    const userValue = userConfigs.get(configDef.name);
-    if (userValue !== void 0) {
-      finalConfigs.set(configDef.name, userValue);
-      continue;
-    }
-    const envOverride = environmentOverrides?.[configDef.name];
-    if (envOverride !== void 0) {
-      finalConfigs.set(configDef.name, envOverride);
-      continue;
-    }
-    const effectiveDefault = isDevMode && configDef.dev?.default !== void 0 ? configDef.dev.default : configDef.default;
-    if (effectiveDefault !== void 0) {
-      finalConfigs.set(configDef.name, effectiveDefault);
-      continue;
-    }
+`;
+    return content.trimEnd() + "\n\n" + newBlock;
   }
-  return finalConfigs;
 }
-function findUsedConfigs(services, isDevMode) {
-  const used = /* @__PURE__ */ new Set();
-  for (const service of services) {
-    const mergedEnv = isDevMode ? { ...service.env, ...service.dev?.env } : service.env;
-    for (const value of Object.values(mergedEnv ?? {})) {
-      if (typeof value === "object" && value.type === "config") {
-        used.add(value.name);
-      }
-    }
+async function saveLocalSecret(name, value) {
+  let content = "";
+  if (existsSync10(LOCAL_FILE)) {
+    content = await readFile(LOCAL_FILE, "utf-8");
+  } else {
+    content = HEADER_COMMENT;
   }
-  return used;
+  content = updateBlockValue(content, "secrets", name, value);
+  await writeFile(LOCAL_FILE, content);
 }
-function findMissingConfigs(configsDef, preparedConfigs, usedConfigs) {
-  const missing = [];
-  for (const config of configsDef) {
-    if (usedConfigs && !usedConfigs.has(config.name)) continue;
-    if (!preparedConfigs.has(config.name)) {
-      missing.push(config.name);
-    }
+async function saveLocalConfig(name, value) {
+  let content = "";
+  if (existsSync10(LOCAL_FILE)) {
+    content = await readFile(LOCAL_FILE, "utf-8");
+  } else {
+    content = HEADER_COMMENT;
   }
-  return missing;
+  content = updateBlockValue(content, "config", name, value);
+  await writeFile(LOCAL_FILE, content);
 }
 
 // src/lib/dev/env-resolver.ts
@@ -187329,9 +187212,12 @@ var MissingSecretError = class extends Error {
     super(
       `Missing secret '${secretName}'
 
-This secret is declared in specific.hcl but has no value in ${SECRETS_FILE}.
+This secret is declared in specific.hcl but has no value in ${LOCAL_FILE}.
 
-Run: specific secrets set ${secretName}`
+Add it to the secrets block in ${LOCAL_FILE}:
+secrets {
+  ${secretName} = "your-value"
+}`
     );
     this.secretName = secretName;
     this.name = "MissingSecretError";
@@ -187342,9 +187228,12 @@ var MissingConfigError = class extends Error {
     super(
       `Missing config '${configName}'
 
-This config is declared in specific.hcl but has no default value, environment override, or value in ${CONFIG_FILE}.
+This config is declared in specific.hcl but has no default value, environment override, or value in ${LOCAL_FILE}.
 
-Run: specific config set ${configName} <value>`
+Add it to the config block in ${LOCAL_FILE}:
+config {
+  ${configName} = "your-value"
+}`
     );
     this.configName = configName;
     this.name = "MissingConfigError";
@@ -187608,7 +187497,7 @@ function startService(service, resources, secrets, configs, endpointPorts, servi
 
 // src/lib/dev/instance-state.ts
 import * as fs15 from "fs";
-import * as path12 from "path";
+import * as path11 from "path";
 var InstanceStateManager = class {
   stateDir;
   statePath;
@@ -187617,9 +187506,9 @@ var InstanceStateManager = class {
   key;
   constructor(projectRoot, key = "default") {
     this.key = key;
-    this.stateDir = path12.join(projectRoot, ".specific", "keys", key);
-    this.statePath = path12.join(this.stateDir, "state.json");
-    this.lockPath = path12.join(this.stateDir, "state.lock");
+    this.stateDir = path11.join(projectRoot, ".specific", "keys", key);
+    this.statePath = path11.join(this.stateDir, "state.json");
+    this.lockPath = path11.join(this.stateDir, "state.lock");
   }
   getKey() {
     return this.key;
@@ -187821,11 +187710,11 @@ var InstanceStateManager = class {
 import * as http from "http";
 import * as https from "https";
 import * as fs16 from "fs";
-import * as path13 from "path";
+import * as path12 from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 import httpProxy from "http-proxy";
-var __dirname3 = path13.dirname(fileURLToPath3(import.meta.url));
-var adminDir = path13.join(__dirname3, "admin");
+var __dirname3 = path12.dirname(fileURLToPath3(import.meta.url));
+var adminDir = path12.join(__dirname3, "admin");
 var HTTP_PORT = 80;
 var HTTPS_PORT = 443;
 var DOMAIN_SUFFIX = ".local.spcf.app";
@@ -188111,9 +188000,9 @@ function serveStaticFile(res, pathname) {
     filePath = filePath + "index.html";
   }
   const relativePath = filePath.startsWith("/") ? filePath.slice(1) : filePath;
-  const fullPath = path13.join(adminDir, relativePath);
-  const resolvedPath = path13.resolve(fullPath);
-  const resolvedAdminDir = path13.resolve(adminDir);
+  const fullPath = path12.join(adminDir, relativePath);
+  const resolvedPath = path12.resolve(fullPath);
+  const resolvedAdminDir = path12.resolve(adminDir);
   if (!resolvedPath.startsWith(resolvedAdminDir)) {
     res.writeHead(403, { "Content-Type": "text/html" });
     res.end("<h1>Forbidden</h1>");
@@ -188124,11 +188013,11 @@ function serveStaticFile(res, pathname) {
     if (fs16.existsSync(htmlPath)) {
       return serveFile(res, htmlPath);
     }
-    const indexPath = path13.join(resolvedPath, "index.html");
+    const indexPath = path12.join(resolvedPath, "index.html");
     if (fs16.existsSync(indexPath)) {
       return serveFile(res, indexPath);
     }
-    const notFoundPath = path13.join(adminDir, "404.html");
+    const notFoundPath = path12.join(adminDir, "404.html");
     if (fs16.existsSync(notFoundPath)) {
       return serveFileContent(res, notFoundPath, "text/html", 404);
     }
@@ -188139,7 +188028,7 @@ function serveStaticFile(res, pathname) {
   serveFile(res, resolvedPath);
 }
 function serveFile(res, filePath) {
-  const ext = path13.extname(filePath).toLowerCase();
+  const ext = path12.extname(filePath).toLowerCase();
   const contentType = MIME_TYPES[ext] || "application/octet-stream";
   serveFileContent(res, filePath, contentType, 200);
 }
@@ -188202,6 +188091,101 @@ async function startAdminServer(getState) {
 // src/lib/dev/electric-manager.ts
 import * as net2 from "net";
 import { spawn as spawn3 } from "child_process";
+
+// src/lib/secrets/parser.ts
+import { readFile as readFile2, writeFile as writeFile2, mkdir } from "fs/promises";
+import { existsSync as existsSync13 } from "fs";
+import * as path13 from "path";
+import * as crypto2 from "crypto";
+var GENERATED_SECRETS_FILE = ".specific/generated-secrets.json";
+async function loadSecrets() {
+  const { secrets } = await loadLocal();
+  return secrets;
+}
+function generateRandomString(length = 64) {
+  const chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
+  const bytes = crypto2.randomBytes(length);
+  let result = "";
+  for (let i = 0; i < length; i++) {
+    result += chars[bytes[i] % chars.length];
+  }
+  return result;
+}
+async function loadGeneratedSecrets() {
+  if (!existsSync13(GENERATED_SECRETS_FILE)) {
+    return /* @__PURE__ */ new Map();
+  }
+  const content = await readFile2(GENERATED_SECRETS_FILE, "utf-8");
+  const parsed = JSON.parse(content);
+  return new Map(Object.entries(parsed));
+}
+async function saveGeneratedSecret(name, value) {
+  let secrets = {};
+  if (existsSync13(GENERATED_SECRETS_FILE)) {
+    const content = await readFile2(GENERATED_SECRETS_FILE, "utf-8");
+    secrets = JSON.parse(content);
+  }
+  secrets[name] = value;
+  const dir = path13.dirname(GENERATED_SECRETS_FILE);
+  if (!existsSync13(dir)) {
+    await mkdir(dir, { recursive: true });
+  }
+  await writeFile2(GENERATED_SECRETS_FILE, JSON.stringify(secrets, null, 2) + "\n");
+}
+async function prepareSecrets(secretsConfig, isDevMode = false) {
+  const userSecrets = await loadSecrets();
+  const generatedSecrets = await loadGeneratedSecrets();
+  const finalSecrets = /* @__PURE__ */ new Map();
+  for (const secretDef of secretsConfig) {
+    const userValue = userSecrets.get(secretDef.name);
+    if (userValue !== void 0) {
+      finalSecrets.set(secretDef.name, userValue);
+      continue;
+    }
+    if (secretDef.generated) {
+      let generatedValue = generatedSecrets.get(secretDef.name);
+      if (generatedValue === void 0) {
+        generatedValue = generateRandomString(secretDef.length ?? 64);
+        await saveGeneratedSecret(secretDef.name, generatedValue);
+      }
+      finalSecrets.set(secretDef.name, generatedValue);
+      continue;
+    }
+    if (isDevMode && secretDef.dev?.required === false) {
+      finalSecrets.set(secretDef.name, "");
+      continue;
+    }
+  }
+  return finalSecrets;
+}
+async function saveSecret(name, value) {
+  await saveLocalSecret(name, value);
+}
+function findUsedSecrets(services, isDevMode) {
+  const used = /* @__PURE__ */ new Set();
+  for (const service of services) {
+    const mergedEnv = isDevMode ? { ...service.env, ...service.dev?.env } : service.env;
+    for (const value of Object.values(mergedEnv ?? {})) {
+      if (typeof value === "object" && value.type === "secret") {
+        used.add(value.name);
+      }
+    }
+  }
+  return used;
+}
+function findMissingSecrets(secretsDef, preparedSecrets, usedSecrets) {
+  const missing = [];
+  for (const secret of secretsDef) {
+    if (secret.generated) continue;
+    if (usedSecrets && !usedSecrets.has(secret.name)) continue;
+    if (!preparedSecrets.has(secret.name)) {
+      missing.push(secret.name);
+    }
+  }
+  return missing;
+}
+
+// src/lib/dev/electric-manager.ts
 async function startElectric(postgres, port, options2) {
   if (postgres.type !== "postgres") {
     throw new Error(
@@ -188926,6 +188910,59 @@ var ProxyRegistryManager = class {
   }
 };
 
+// src/lib/config/parser.ts
+async function loadConfigs() {
+  const { configs } = await loadLocal();
+  return configs;
+}
+async function saveConfig(name, value) {
+  await saveLocalConfig(name, value);
+}
+async function prepareConfigs(configsDef, environmentOverrides, isDevMode = false) {
+  const userConfigs = await loadConfigs();
+  const finalConfigs = /* @__PURE__ */ new Map();
+  for (const configDef of configsDef) {
+    const userValue = userConfigs.get(configDef.name);
+    if (userValue !== void 0) {
+      finalConfigs.set(configDef.name, userValue);
+      continue;
+    }
+    const envOverride = environmentOverrides?.[configDef.name];
+    if (envOverride !== void 0) {
+      finalConfigs.set(configDef.name, envOverride);
+      continue;
+    }
+    const effectiveDefault = isDevMode && configDef.dev?.default !== void 0 ? configDef.dev.default : configDef.default;
+    if (effectiveDefault !== void 0) {
+      finalConfigs.set(configDef.name, effectiveDefault);
+      continue;
+    }
+  }
+  return finalConfigs;
+}
+function findUsedConfigs(services, isDevMode) {
+  const used = /* @__PURE__ */ new Set();
+  for (const service of services) {
+    const mergedEnv = isDevMode ? { ...service.env, ...service.dev?.env } : service.env;
+    for (const value of Object.values(mergedEnv ?? {})) {
+      if (typeof value === "object" && value.type === "config") {
+        used.add(value.name);
+      }
+    }
+  }
+  return used;
+}
+function findMissingConfigs(configsDef, preparedConfigs, usedConfigs) {
+  const missing = [];
+  for (const config of configsDef) {
+    if (usedConfigs && !usedConfigs.has(config.name)) continue;
+    if (!preparedConfigs.has(config.name)) {
+      missing.push(config.name);
+    }
+  }
+  return missing;
+}
+
 // src/lib/ui/SecretInput.tsx
 import React4, { useState as useState3 } from "react";
 import { Box as Box4, Text as Text4, useInput as useInput2 } from "ink";
@@ -189450,11 +189487,11 @@ function DevUI({ instanceKey }) {
           const errorParts = [];
           if (missingSecrets.length > 0) {
             errorParts.push(`Missing secrets: ${missingSecrets.join(", ")}
-Add them to specific.secrets`);
+Add them to the secrets block in specific.local`);
           }
           if (missingConfigs.length > 0) {
             errorParts.push(`Missing configs: ${missingConfigs.join(", ")}
-Add them to specific.config`);
+Add them to the config block in specific.local`);
           }
           setState((s) => ({
             ...s,
@@ -189579,6 +189616,7 @@ Add them to specific.config`);
       for (const s of services2) {
         runningServicePorts.set(s.name, s.ports.get("default"));
       }
+      const projectId = hasProjectId() ? readProjectId() : void 0;
       const getState = () => ({
         status: "running",
         services: config2.services.filter((svc) => runningServicePorts.has(svc.name) || svc.serve).map((svc) => ({
@@ -189593,7 +189631,8 @@ Add them to specific.config`);
           port: r.port,
           host: r.host,
           syncEnabled: r.type === "postgres" && syncDatabases.has(name)
-        }))
+        })),
+        projectId
       });
       const adminServer = await startAdminServer(getState);
       adminServerRef.current = adminServer;
@@ -189982,7 +190021,7 @@ import * as path19 from "path";
 // src/lib/deploy/build-tester.ts
 import { spawn as spawn5 } from "child_process";
 import { existsSync as existsSync17 } from "fs";
-import { join as join18, resolve as resolve5 } from "path";
+import { join as join18 } from "path";
 function getDependencyInstallCommand(build, projectDir) {
   switch (build.base) {
     case "node":
@@ -190071,12 +190110,12 @@ function runCommand2(command, projectDir, buildName) {
 async function testBuild(build, projectDir) {
   const startTime = Date.now();
   const outputs = [];
-  const contextDir = resolve5(projectDir, build.context || ".");
-  writeLog("build-test", `Starting test for build "${build.name}" (base: ${build.base}, context: ${contextDir})`);
-  const depsCommand = getDependencyInstallCommand(build, contextDir);
+  const workDir = projectDir;
+  writeLog("build-test", `Starting test for build "${build.name}" (base: ${build.base}, workDir: ${workDir})`);
+  const depsCommand = getDependencyInstallCommand(build, workDir);
   if (depsCommand) {
     writeLog("build-test", `[${build.name}] Installing dependencies...`);
-    const depsResult = await runCommand2(depsCommand, contextDir, build.name);
+    const depsResult = await runCommand2(depsCommand, workDir, build.name);
     outputs.push(`[${depsCommand}]
 ${depsResult.output}`);
     if (!depsResult.success) {
@@ -190095,7 +190134,7 @@ ${depsResult.output}`);
   }
   if (build.command) {
     writeLog("build-test", `[${build.name}] Running build command...`);
-    const buildResult = await runCommand2(build.command, contextDir, build.name);
+    const buildResult = await runCommand2(build.command, workDir, build.name);
     outputs.push(`[${build.command}]
 ${buildResult.output}`);
     if (!buildResult.success) {
@@ -191405,232 +191444,6 @@ function cleanCommand(instanceKey) {
   }
 }
 
-// src/commands/secrets.tsx
-import React9, { useState as useState8, useEffect as useEffect6 } from "react";
-import { render as render7, Text as Text9, Box as Box9, useInput as useInput6, useApp as useApp4 } from "ink";
-function SetSecretUI({ secretName }) {
-  const { exit } = useApp4();
-  const [value, setValue] = useState8("");
-  const [done, setDone] = useState8(false);
-  const [saving, setSaving] = useState8(false);
-  const [error, setError] = useState8(null);
-  useInput6((input, key) => {
-    if (done || saving) return;
-    if (key.return) {
-      if (value.trim() === "") {
-        setError("Secret value cannot be empty");
-        return;
-      }
-      setSaving(true);
-      saveSecret(secretName, value).then(() => {
-        setDone(true);
-      }).catch((err) => {
-        setError(err instanceof Error ? err.message : String(err));
-        setSaving(false);
-      });
-    } else if (key.backspace || key.delete) {
-      setValue((prev) => prev.slice(0, -1));
-    } else if (key.escape) {
-      exit();
-    } else if (!key.ctrl && !key.meta && input) {
-      setValue((prev) => prev + input);
-    }
-  });
-  useEffect6(() => {
-    if (done) {
-      const timer = setTimeout(() => exit(), 50);
-      return () => clearTimeout(timer);
-    }
-  }, [done, exit]);
-  if (error) {
-    return /* @__PURE__ */ React9.createElement(Text9, { color: "red" }, "Error: ", error);
-  }
-  if (done) {
-    return /* @__PURE__ */ React9.createElement(Box9, { flexDirection: "column" }, /* @__PURE__ */ React9.createElement(Text9, { color: "green" }, "Secret '", secretName, "' saved to ", SECRETS_FILE));
-  }
-  return /* @__PURE__ */ React9.createElement(Box9, { flexDirection: "column" }, /* @__PURE__ */ React9.createElement(Text9, null, "Enter value for secret '", secretName, "':"), /* @__PURE__ */ React9.createElement(Box9, null, /* @__PURE__ */ React9.createElement(Text9, { color: "cyan" }, "> "), /* @__PURE__ */ React9.createElement(Text9, null, value.length > 0 ? "*".repeat(value.length) : ""), /* @__PURE__ */ React9.createElement(Text9, { color: "gray" }, "|")), /* @__PURE__ */ React9.createElement(Text9, { dimColor: true }, "(Press Enter to save, Esc to cancel)"));
-}
-async function secretsSetCommand(secretName) {
-  if (!secretName) {
-    console.error("Error: Secret name required");
-    console.error("Usage: specific secrets set <name>");
-    process.exit(1);
-  }
-  render7(/* @__PURE__ */ React9.createElement(SetSecretUI, { secretName }));
-}
-async function secretsCommand(action, secretName) {
-  if (!action) {
-    console.error("Usage: specific secrets <command>");
-    console.error("");
-    console.error("Commands:");
-    console.error("  set <name>    Set a secret value");
-    process.exit(1);
-  }
-  if (action === "set") {
-    if (!secretName) {
-      console.error("Error: Secret name required");
-      console.error("Usage: specific secrets set <name>");
-      process.exit(1);
-    }
-    await secretsSetCommand(secretName);
-  } else {
-    console.error(`Unknown command: ${action}`);
-    console.error("Usage: specific secrets set <name>");
-    process.exit(1);
-  }
-}
-
-// src/commands/config.tsx
-import React10, { useState as useState9, useEffect as useEffect7 } from "react";
-import { render as render8, Text as Text10, Box as Box10, useInput as useInput7, useApp as useApp5 } from "ink";
-import * as fs24 from "fs";
-var HEADER_COMMENT2 = "# Configuration values for this project\n# These values override defaults defined in specific.hcl\n";
-function SetConfigUI({ configName, initialValue }) {
-  const { exit } = useApp5();
-  const [value, setValue] = useState9(initialValue ?? "");
-  const [done, setDone] = useState9(false);
-  const [error, setError] = useState9(null);
-  useInput7((input, key) => {
-    if (done) return;
-    if (key.return) {
-      if (value.trim() === "") {
-        setError("Config value cannot be empty");
-        return;
-      }
-      try {
-        const escapedValue = value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
-        const hclLine = `${configName} = "${escapedValue}"`;
-        let content = "";
-        let hasHeader = false;
-        if (fs24.existsSync(CONFIG_FILE)) {
-          content = fs24.readFileSync(CONFIG_FILE, "utf-8");
-          hasHeader = content.startsWith("#");
-          const lines = content.split("\n");
-          const newLines = [];
-          let found = false;
-          const pattern = new RegExp(`^${configName}\\s*=\\s*"`);
-          for (const line of lines) {
-            if (pattern.test(line.trim())) {
-              newLines.push(hclLine);
-              found = true;
-            } else {
-              newLines.push(line);
-            }
-          }
-          if (found) {
-            fs24.writeFileSync(CONFIG_FILE, newLines.join("\n"));
-            setDone(true);
-            return;
-          }
-        }
-        let newContent = "";
-        if (!hasHeader && !content) {
-          newContent = HEADER_COMMENT2 + "\n";
-        } else if (content) {
-          newContent = content.endsWith("\n") ? content : content + "\n";
-        }
-        newContent += `${hclLine}
-`;
-        fs24.writeFileSync(CONFIG_FILE, newContent);
-        setDone(true);
-      } catch (err) {
-        setError(err instanceof Error ? err.message : String(err));
-      }
-    } else if (key.backspace || key.delete) {
-      setValue((prev) => prev.slice(0, -1));
-    } else if (key.escape) {
-      exit();
-    } else if (!key.ctrl && !key.meta && input) {
-      setValue((prev) => prev + input);
-    }
-  });
-  useEffect7(() => {
-    if (done) {
-      const timer = setTimeout(() => exit(), 50);
-      return () => clearTimeout(timer);
-    }
-  }, [done, exit]);
-  if (error) {
-    return /* @__PURE__ */ React10.createElement(Text10, { color: "red" }, "Error: ", error);
-  }
-  if (done) {
-    return /* @__PURE__ */ React10.createElement(Box10, { flexDirection: "column" }, /* @__PURE__ */ React10.createElement(Text10, { color: "green" }, "Config '", configName, "' saved to ", CONFIG_FILE));
-  }
-  return /* @__PURE__ */ React10.createElement(Box10, { flexDirection: "column" }, /* @__PURE__ */ React10.createElement(Text10, null, "Enter value for config '", configName, "':"), /* @__PURE__ */ React10.createElement(Box10, null, /* @__PURE__ */ React10.createElement(Text10, { color: "cyan" }, "> "), /* @__PURE__ */ React10.createElement(Text10, null, value), /* @__PURE__ */ React10.createElement(Text10, { color: "gray" }, "|")), /* @__PURE__ */ React10.createElement(Text10, { dimColor: true }, "(Press Enter to save, Esc to cancel)"));
-}
-async function configSetCommand(configName, configValue) {
-  if (!configName) {
-    console.error("Error: Config name required");
-    console.error("Usage: specific config set <name> [value]");
-    process.exit(1);
-  }
-  if (configValue !== void 0) {
-    try {
-      const escapedValue = configValue.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
-      const hclLine = `${configName} = "${escapedValue}"`;
-      let content = "";
-      let hasHeader = false;
-      if (fs24.existsSync(CONFIG_FILE)) {
-        content = fs24.readFileSync(CONFIG_FILE, "utf-8");
-        hasHeader = content.startsWith("#");
-        const lines = content.split("\n");
-        const newLines = [];
-        let found = false;
-        const pattern = new RegExp(`^${configName}\\s*=\\s*"`);
-        for (const line of lines) {
-          if (pattern.test(line.trim())) {
-            newLines.push(hclLine);
-            found = true;
-          } else {
-            newLines.push(line);
-          }
-        }
-        if (found) {
-          fs24.writeFileSync(CONFIG_FILE, newLines.join("\n"));
-          console.log(`Config '${configName}' saved to ${CONFIG_FILE}`);
-          return;
-        }
-      }
-      let newContent = "";
-      if (!hasHeader && !content) {
-        newContent = HEADER_COMMENT2 + "\n";
-      } else if (content) {
-        newContent = content.endsWith("\n") ? content : content + "\n";
-      }
-      newContent += `${hclLine}
-`;
-      fs24.writeFileSync(CONFIG_FILE, newContent);
-      console.log(`Config '${configName}' saved to ${CONFIG_FILE}`);
-    } catch (err) {
-      console.error("Error:", err instanceof Error ? err.message : String(err));
-      process.exit(1);
-    }
-    return;
-  }
-  render8(/* @__PURE__ */ React10.createElement(SetConfigUI, { configName }));
-}
-async function configCommand(action, configName, configValue) {
-  if (!action) {
-    console.error("Usage: specific config <command>");
-    console.error("");
-    console.error("Commands:");
-    console.error("  set <name> [value]    Set a config value");
-    process.exit(1);
-  }
-  if (action === "set") {
-    if (!configName) {
-      console.error("Error: Config name required");
-      console.error("Usage: specific config set <name> [value]");
-      process.exit(1);
-    }
-    await configSetCommand(configName, configValue);
-  } else {
-    console.error(`Unknown command: ${action}`);
-    console.error("Usage: specific config set <name> [value]");
-    process.exit(1);
-  }
-}
-
 // src/commands/login.tsx
 async function loginCommand() {
   if (isLoggedIn()) {
@@ -191644,14 +191457,14 @@ async function loginCommand() {
 }
 
 // src/commands/logout.tsx
-import React11, { useState as useState10, useEffect as useEffect8 } from "react";
-import { render as render9, Text as Text11, useApp as useApp6 } from "ink";
+import React9, { useState as useState8, useEffect as useEffect6 } from "react";
+import { render as render7, Text as Text9, useApp as useApp4 } from "ink";
 function LogoutUI() {
-  const { exit } = useApp6();
-  const [state, setState] = useState10({
+  const { exit } = useApp4();
+  const [state, setState] = useState8({
     phase: "checking"
   });
-  useEffect8(() => {
+  useEffect6(() => {
     if (state.phase !== "checking") return;
     if (!isLoggedIn()) {
       setState({ phase: "not-logged-in" });
@@ -191660,29 +191473,29 @@ function LogoutUI() {
     clearUserCredentials();
     setState({ phase: "done" });
   }, [state.phase]);
-  useEffect8(() => {
+  useEffect6(() => {
     if (state.phase === "done" || state.phase === "not-logged-in") {
       const timer = setTimeout(() => exit(), 100);
       return () => clearTimeout(timer);
     }
   }, [state.phase, exit]);
   if (state.phase === "not-logged-in") {
-    return /* @__PURE__ */ React11.createElement(Text11, { dimColor: true }, "Not logged in.");
+    return /* @__PURE__ */ React9.createElement(Text9, { dimColor: true }, "Not logged in.");
   }
   if (state.phase === "done") {
-    return /* @__PURE__ */ React11.createElement(Text11, { color: "green" }, "Logged out successfully.");
+    return /* @__PURE__ */ React9.createElement(Text9, { color: "green" }, "Logged out successfully.");
   }
-  return /* @__PURE__ */ React11.createElement(Text11, null, "Logging out...");
+  return /* @__PURE__ */ React9.createElement(Text9, null, "Logging out...");
 }
 function logoutCommand() {
-  render9(/* @__PURE__ */ React11.createElement(LogoutUI, null));
+  render7(/* @__PURE__ */ React9.createElement(LogoutUI, null));
 }
 
 // src/cli.tsx
 var program = new Command();
 var env = "production";
 var envLabel = env !== "production" ? `[${env.toUpperCase()}] ` : "";
-program.name("specific").description(`${envLabel}Infrastructure-as-code for coding agents`).version("0.1.43").enablePositionalOptions();
+program.name("specific").description(`${envLabel}Infrastructure-as-code for coding agents`).version("0.1.45").enablePositionalOptions();
 program.command("init").description("Initialize project for use with a coding agent").action(initCommand);
 program.command("docs [topic]").description("Fetch LLM-optimized documentation").action(docsCommand);
 program.command("check").description("Validate specific.hcl configuration").action(checkCommand);
@@ -191705,8 +191518,6 @@ program.command("psql [database]").description("Connect to a running Postgres da
 program.command("clean").description("Remove .specific directory for a clean slate").option("-k, --key <key>", "Clean only the specified dev environment key").action((options2) => {
   cleanCommand(options2.key);
 });
-program.command("secrets [action] [name]").description("Manage secrets").action(secretsCommand);
-program.command("config [action] [name] [value]").description("Manage configuration values").action(configCommand);
 program.command("login").description("Log in to Specific").action(loginCommand);
 program.command("logout").description("Log out of Specific").action(logoutCommand);
 var commandName = process.argv[2] || "help";