@specific.dev/cli 0.1.92 → 0.1.93

package/dist/cli.js

@@ -520,10 +520,10 @@ ${frame}`;
 });
 
 // node_modules/.pnpm/is-docker@3.0.0/node_modules/is-docker/index.js
-import fs18 from "node:fs";
+import fs13 from "node:fs";
 function hasDockerEnv() {
   try {
-    fs18.statSync("/.dockerenv");
+    fs13.statSync("/.dockerenv");
     return true;
   } catch {
     return false;
@@ -531,7 +531,7 @@ function hasDockerEnv() {
 }
 function hasDockerCGroup() {
   try {
-    return fs18.readFileSync("/proc/self/cgroup", "utf8").includes("docker");
+    return fs13.readFileSync("/proc/self/cgroup", "utf8").includes("docker");
   } catch {
     return false;
   }
@@ -549,7 +549,7 @@ var init_is_docker = __esm({
 });
 
 // node_modules/.pnpm/is-inside-container@1.0.0/node_modules/is-inside-container/index.js
-import fs19 from "node:fs";
+import fs14 from "node:fs";
 function isInsideContainer() {
   if (cachedResult === void 0) {
     cachedResult = hasContainerEnv() || isDocker();
@@ -562,7 +562,7 @@ var init_is_inside_container = __esm({
     init_is_docker();
     hasContainerEnv = () => {
       try {
-        fs19.statSync("/run/.containerenv");
+        fs14.statSync("/run/.containerenv");
         return true;
       } catch {
         return false;
@@ -573,8 +573,8 @@ var init_is_inside_container = __esm({
 
 // node_modules/.pnpm/is-wsl@3.1.0/node_modules/is-wsl/index.js
 import process2 from "node:process";
-import os8 from "node:os";
-import fs20 from "node:fs";
+import os3 from "node:os";
+import fs15 from "node:fs";
 var isWsl, is_wsl_default;
 var init_is_wsl = __esm({
   "node_modules/.pnpm/is-wsl@3.1.0/node_modules/is-wsl/index.js"() {
@@ -583,14 +583,14 @@ var init_is_wsl = __esm({
       if (process2.platform !== "linux") {
         return false;
       }
-      if (os8.release().toLowerCase().includes("microsoft")) {
+      if (os3.release().toLowerCase().includes("microsoft")) {
         if (isInsideContainer()) {
           return false;
         }
         return true;
       }
       try {
-        return fs20.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft") ? !isInsideContainer() : false;
+        return fs15.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft") ? !isInsideContainer() : false;
       } catch {
         return false;
       }
@@ -660,7 +660,7 @@ var init_utilities = __esm({
 // node_modules/.pnpm/wsl-utils@0.3.1/node_modules/wsl-utils/index.js
 import { promisify as promisify2 } from "node:util";
 import childProcess2 from "node:child_process";
-import fs21, { constants as fsConstants } from "node:fs/promises";
+import fs16, { constants as fsConstants } from "node:fs/promises";
 var execFile2, wslDrivesMountPoint, powerShellPathFromWsl, powerShellPath2, canAccessPowerShellPromise, canAccessPowerShell, wslDefaultBrowser, convertWslPathToWindows;
 var init_wsl_utils = __esm({
   "node_modules/.pnpm/wsl-utils@0.3.1/node_modules/wsl-utils/index.js"() {
@@ -679,14 +679,14 @@ var init_wsl_utils = __esm({
         const configFilePath = "/etc/wsl.conf";
         let isConfigFileExists = false;
         try {
-          await fs21.access(configFilePath, fsConstants.F_OK);
+          await fs16.access(configFilePath, fsConstants.F_OK);
           isConfigFileExists = true;
         } catch {
         }
         if (!isConfigFileExists) {
           return defaultMountPoint;
         }
-        const configContent = await fs21.readFile(configFilePath, { encoding: "utf8" });
+        const configContent = await fs16.readFile(configFilePath, { encoding: "utf8" });
         const parsedMountPoint = parseMountPointFromConfig(configContent);
         if (parsedMountPoint === void 0) {
           return defaultMountPoint;
@@ -705,7 +705,7 @@ var init_wsl_utils = __esm({
       canAccessPowerShellPromise ??= (async () => {
         try {
           const psPath = await powerShellPath2();
-          await fs21.access(psPath, fsConstants.X_OK);
+          await fs16.access(psPath, fsConstants.X_OK);
           return true;
         } catch {
           return false;
@@ -719,15 +719,15 @@ var init_wsl_utils = __esm({
       const { stdout } = await executePowerShell(command, { powerShellPath: psPath });
       return stdout.trim();
     };
-    convertWslPathToWindows = async (path30) => {
-      if (/^[a-z]+:\/\//i.test(path30)) {
-        return path30;
+    convertWslPathToWindows = async (path26) => {
+      if (/^[a-z]+:\/\//i.test(path26)) {
+        return path26;
       }
       try {
-        const { stdout } = await execFile2("wslpath", ["-aw", path30], { encoding: "utf8" });
+        const { stdout } = await execFile2("wslpath", ["-aw", path26], { encoding: "utf8" });
         return stdout.trim();
       } catch {
-        return path30;
+        return path26;
       }
     };
   }
@@ -913,10 +913,10 @@ __export(open_exports, {
   openApp: () => openApp
 });
 import process8 from "node:process";
-import path19 from "node:path";
+import path15 from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import childProcess3 from "node:child_process";
-import fs22, { constants as fsConstants2 } from "node:fs/promises";
+import fs17, { constants as fsConstants2 } from "node:fs/promises";
 function detectArchBinary(binary) {
   if (typeof binary === "string" || Array.isArray(binary)) {
     return binary;
@@ -927,16 +927,16 @@ function detectArchBinary(binary) {
   }
   return archBinary;
 }
-function detectPlatformBinary({ [platform6]: platformBinary }, { wsl } = {}) {
+function detectPlatformBinary({ [platform2]: platformBinary }, { wsl } = {}) {
   if (wsl && is_wsl_default) {
     return detectArchBinary(wsl);
   }
   if (!platformBinary) {
-    throw new Error(`${platform6} is not supported`);
+    throw new Error(`${platform2} is not supported`);
   }
   return detectArchBinary(platformBinary);
 }
-var fallbackAttemptSymbol, __dirname2, localXdgOpenPath, platform6, arch2, tryEachApp, baseOpen, open2, openApp, apps, open_default;
+var fallbackAttemptSymbol, __dirname2, localXdgOpenPath, platform2, arch2, tryEachApp, baseOpen, open2, openApp, apps, open_default;
 var init_open = __esm({
   "node_modules/.pnpm/open@11.0.0/node_modules/open/index.js"() {
     init_wsl_utils();
@@ -946,9 +946,9 @@ var init_open = __esm({
     init_is_inside_container();
     init_is_in_ssh();
     fallbackAttemptSymbol = Symbol("fallbackAttempt");
-    __dirname2 = import.meta.url ? path19.dirname(fileURLToPath2(import.meta.url)) : "";
-    localXdgOpenPath = path19.join(__dirname2, "xdg-open");
-    ({ platform: platform6, arch: arch2 } = process8);
+    __dirname2 = import.meta.url ? path15.dirname(fileURLToPath2(import.meta.url)) : "";
+    localXdgOpenPath = path15.join(__dirname2, "xdg-open");
+    ({ platform: platform2, arch: arch2 } = process8);
     tryEachApp = async (apps2, opener) => {
       if (apps2.length === 0) {
         return;
@@ -1045,7 +1045,7 @@ var init_open = __esm({
       if (is_wsl_default && !isInsideContainer() && !is_in_ssh_default && !app) {
         shouldUseWindowsInWsl = await canAccessPowerShell();
       }
-      if (platform6 === "darwin") {
+      if (platform2 === "darwin") {
         command = "open";
         if (options2.wait) {
           cliArguments.push("--wait-apps");
@@ -1059,7 +1059,7 @@ var init_open = __esm({
         if (app) {
           cliArguments.push("-a", app);
         }
-      } else if (platform6 === "win32" || shouldUseWindowsInWsl) {
+      } else if (platform2 === "win32" || shouldUseWindowsInWsl) {
         command = await powerShellPath2();
         cliArguments.push(...executePowerShell.argumentsPrefix);
         if (!is_wsl_default) {
@@ -1095,11 +1095,11 @@ var init_open = __esm({
           const isBundled = !__dirname2 || __dirname2 === "/";
           let exeLocalXdgOpen = false;
           try {
-            await fs22.access(localXdgOpenPath, fsConstants2.X_OK);
+            await fs17.access(localXdgOpenPath, fsConstants2.X_OK);
             exeLocalXdgOpen = true;
           } catch {
           }
-          const useSystemXdgOpen = process8.versions.electron ?? (platform6 === "android" || isBundled || !exeLocalXdgOpen);
+          const useSystemXdgOpen = process8.versions.electron ?? (platform2 === "android" || isBundled || !exeLocalXdgOpen);
           command = useSystemXdgOpen ? "xdg-open" : localXdgOpenPath;
         }
         if (appArguments.length > 0) {
@@ -1110,7 +1110,7 @@ var init_open = __esm({
           childProcessOptions.detached = true;
         }
       }
-      if (platform6 === "darwin" && appArguments.length > 0) {
+      if (platform2 === "darwin" && appArguments.length > 0) {
         cliArguments.push("--args", ...appArguments);
       }
       if (options2.target) {
@@ -1235,8 +1235,8 @@ var require_dist2 = __commonJS({
       var $global, $module, $NaN = NaN;
       if ("undefined" != typeof window ? $global = window : "undefined" != typeof self ? $global = self : "undefined" != typeof global ? ($global = global).require = __require : $global = this, void 0 === $global || void 0 === $global.Array) throw new Error("no global object found");
       if ("undefined" != typeof module && ($module = module), !$global.fs && $global.require) try {
-        var fs33 = $global.require("fs");
-        "object" == typeof fs33 && null !== fs33 && 0 !== Object.keys(fs33).length && ($global.fs = fs33);
+        var fs28 = $global.require("fs");
+        "object" == typeof fs28 && null !== fs28 && 0 !== Object.keys(fs28).length && ($global.fs = fs28);
       } catch (e) {
       }
       if (!$global.fs) {
@@ -183429,10 +183429,8 @@ import { Command } from "commander";
 // src/commands/init.tsx
 import React2, { useState, useEffect } from "react";
 import { render as render2, Text as Text2, Box as Box2, useInput, useApp } from "ink";
-import "ink-spinner";
-import * as fs24 from "fs";
-import * as path21 from "path";
-import * as os11 from "os";
+import * as fs19 from "fs";
+import * as path17 from "path";
 
 // node_modules/.pnpm/@specific+sdk@file+..+sdk/node_modules/@specific/sdk/dist/index.js
 import * as fs from "fs";
@@ -183442,9 +183440,8 @@ import { execSync } from "child_process";
 import * as fs2 from "fs";
 import * as path2 from "path";
 import { createTarPacker, createEntryItemGenerator } from "tar-vern";
-import * as fs16 from "fs";
-import * as os7 from "os";
-import * as path16 from "path";
+import * as fs12 from "fs";
+import * as path13 from "path";
 
 // node_modules/.pnpm/chokidar@5.0.0/node_modules/chokidar/index.js
 import { EventEmitter } from "node:events";
@@ -183536,7 +183533,7 @@ var ReaddirpStream = class extends Readable {
     this._directoryFilter = normalizeFilter(opts.directoryFilter);
     const statMethod = opts.lstat ? lstat : stat;
     if (wantBigintFsStats) {
-      this._stat = (path30) => statMethod(path30, { bigint: true });
+      this._stat = (path26) => statMethod(path26, { bigint: true });
     } else {
       this._stat = statMethod;
     }
@@ -183561,8 +183558,8 @@ var ReaddirpStream = class extends Readable {
         const par = this.parent;
         const fil = par && par.files;
         if (fil && fil.length > 0) {
-          const { path: path30, depth } = par;
-          const slice = fil.splice(0, batch).map((dirent) => this._formatEntry(dirent, path30));
+          const { path: path26, depth } = par;
+          const slice = fil.splice(0, batch).map((dirent) => this._formatEntry(dirent, path26));
           const awaited = await Promise.all(slice);
           for (const entry of awaited) {
             if (!entry)
@@ -183602,20 +183599,20 @@ var ReaddirpStream = class extends Readable {
       this.reading = false;
     }
   }
-  async _exploreDir(path30, depth) {
+  async _exploreDir(path26, depth) {
     let files;
     try {
-      files = await readdir(path30, this._rdOptions);
+      files = await readdir(path26, this._rdOptions);
     } catch (error) {
       this._onError(error);
     }
-    return { files, depth, path: path30 };
+    return { files, depth, path: path26 };
   }
-  async _formatEntry(dirent, path30) {
+  async _formatEntry(dirent, path26) {
     let entry;
     const basename6 = this._isDirent ? dirent.name : dirent;
     try {
-      const fullPath = presolve(pjoin(path30, basename6));
+      const fullPath = presolve(pjoin(path26, basename6));
       entry = { path: prelative(this._root, fullPath), fullPath, basename: basename6 };
       entry[this._statsProp] = this._isDirent ? dirent : await this._stat(fullPath);
     } catch (err) {
@@ -184015,16 +184012,16 @@ var delFromSet = (main, prop, item) => {
 };
 var isEmptySet = (val) => val instanceof Set ? val.size === 0 : !val;
 var FsWatchInstances = /* @__PURE__ */ new Map();
-function createFsWatchInstance(path30, options2, listener, errHandler, emitRaw) {
+function createFsWatchInstance(path26, options2, listener, errHandler, emitRaw) {
   const handleEvent = (rawEvent, evPath) => {
-    listener(path30);
-    emitRaw(rawEvent, evPath, { watchedPath: path30 });
-    if (evPath && path30 !== evPath) {
-      fsWatchBroadcast(sp.resolve(path30, evPath), KEY_LISTENERS, sp.join(path30, evPath));
+    listener(path26);
+    emitRaw(rawEvent, evPath, { watchedPath: path26 });
+    if (evPath && path26 !== evPath) {
+      fsWatchBroadcast(sp.resolve(path26, evPath), KEY_LISTENERS, sp.join(path26, evPath));
     }
   };
   try {
-    return fs_watch(path30, {
+    return fs_watch(path26, {
       persistent: options2.persistent
     }, handleEvent);
   } catch (error) {
@@ -184040,12 +184037,12 @@ var fsWatchBroadcast = (fullPath, listenerType, val1, val2, val3) => {
     listener(val1, val2, val3);
   });
 };
-var setFsWatchListener = (path30, fullPath, options2, handlers) => {
+var setFsWatchListener = (path26, fullPath, options2, handlers) => {
   const { listener, errHandler, rawEmitter } = handlers;
   let cont = FsWatchInstances.get(fullPath);
   let watcher;
   if (!options2.persistent) {
-    watcher = createFsWatchInstance(path30, options2, listener, errHandler, rawEmitter);
+    watcher = createFsWatchInstance(path26, options2, listener, errHandler, rawEmitter);
     if (!watcher)
       return;
     return watcher.close.bind(watcher);
@@ -184056,7 +184053,7 @@ var setFsWatchListener = (path30, fullPath, options2, handlers) => {
     addAndConvert(cont, KEY_RAW, rawEmitter);
   } else {
     watcher = createFsWatchInstance(
-      path30,
+      path26,
       options2,
       fsWatchBroadcast.bind(null, fullPath, KEY_LISTENERS),
       errHandler,
@@ -184071,7 +184068,7 @@ var setFsWatchListener = (path30, fullPath, options2, handlers) => {
         cont.watcherUnusable = true;
       if (isWindows && error.code === "EPERM") {
         try {
-          const fd = await open(path30, "r");
+          const fd = await open(path26, "r");
           await fd.close();
           broadcastErr(error);
         } catch (err) {
@@ -184102,7 +184099,7 @@ var setFsWatchListener = (path30, fullPath, options2, handlers) => {
   };
 };
 var FsWatchFileInstances = /* @__PURE__ */ new Map();
-var setFsWatchFileListener = (path30, fullPath, options2, handlers) => {
+var setFsWatchFileListener = (path26, fullPath, options2, handlers) => {
   const { listener, rawEmitter } = handlers;
   let cont = FsWatchFileInstances.get(fullPath);
   const copts = cont && cont.options;
@@ -184124,7 +184121,7 @@ var setFsWatchFileListener = (path30, fullPath, options2, handlers) => {
         });
         const currmtime = curr.mtimeMs;
         if (curr.size !== prev.size || currmtime > prev.mtimeMs || currmtime === 0) {
-          foreach(cont.listeners, (listener2) => listener2(path30, curr));
+          foreach(cont.listeners, (listener2) => listener2(path26, curr));
         }
       })
     };
@@ -184154,13 +184151,13 @@ var NodeFsHandler = class {
    * @param listener on fs change
    * @returns closer for the watcher instance
    */
-  _watchWithNodeFs(path30, listener) {
+  _watchWithNodeFs(path26, listener) {
     const opts = this.fsw.options;
-    const directory = sp.dirname(path30);
-    const basename6 = sp.basename(path30);
+    const directory = sp.dirname(path26);
+    const basename6 = sp.basename(path26);
     const parent = this.fsw._getWatchedDir(directory);
     parent.add(basename6);
-    const absolutePath = sp.resolve(path30);
+    const absolutePath = sp.resolve(path26);
     const options2 = {
       persistent: opts.persistent
     };
@@ -184170,12 +184167,12 @@ var NodeFsHandler = class {
     if (opts.usePolling) {
       const enableBin = opts.interval !== opts.binaryInterval;
       options2.interval = enableBin && isBinaryPath(basename6) ? opts.binaryInterval : opts.interval;
-      closer = setFsWatchFileListener(path30, absolutePath, options2, {
+      closer = setFsWatchFileListener(path26, absolutePath, options2, {
         listener,
         rawEmitter: this.fsw._emitRaw
       });
     } else {
-      closer = setFsWatchListener(path30, absolutePath, options2, {
+      closer = setFsWatchListener(path26, absolutePath, options2, {
         listener,
         errHandler: this._boundHandleError,
         rawEmitter: this.fsw._emitRaw
@@ -184197,7 +184194,7 @@ var NodeFsHandler = class {
     let prevStats = stats;
     if (parent.has(basename6))
       return;
-    const listener = async (path30, newStats) => {
+    const listener = async (path26, newStats) => {
       if (!this.fsw._throttle(THROTTLE_MODE_WATCH, file, 5))
         return;
       if (!newStats || newStats.mtimeMs === 0) {
@@ -184211,11 +184208,11 @@ var NodeFsHandler = class {
             this.fsw._emit(EV.CHANGE, file, newStats2);
           }
           if ((isMacos || isLinux || isFreeBSD) && prevStats.ino !== newStats2.ino) {
-            this.fsw._closeFile(path30);
+            this.fsw._closeFile(path26);
             prevStats = newStats2;
             const closer2 = this._watchWithNodeFs(file, listener);
             if (closer2)
-              this.fsw._addPathCloser(path30, closer2);
+              this.fsw._addPathCloser(path26, closer2);
           } else {
             prevStats = newStats2;
           }
@@ -184247,7 +184244,7 @@ var NodeFsHandler = class {
    * @param item basename of this item
    * @returns true if no more processing is needed for this entry.
    */
-  async _handleSymlink(entry, directory, path30, item) {
+  async _handleSymlink(entry, directory, path26, item) {
     if (this.fsw.closed) {
       return;
     }
@@ -184257,7 +184254,7 @@ var NodeFsHandler = class {
       this.fsw._incrReadyCount();
       let linkPath;
       try {
-        linkPath = await fsrealpath(path30);
+        linkPath = await fsrealpath(path26);
       } catch (e) {
         this.fsw._emitReady();
         return true;
@@ -184267,12 +184264,12 @@ var NodeFsHandler = class {
       if (dir.has(item)) {
         if (this.fsw._symlinkPaths.get(full) !== linkPath) {
           this.fsw._symlinkPaths.set(full, linkPath);
-          this.fsw._emit(EV.CHANGE, path30, entry.stats);
+          this.fsw._emit(EV.CHANGE, path26, entry.stats);
         }
       } else {
         dir.add(item);
         this.fsw._symlinkPaths.set(full, linkPath);
-        this.fsw._emit(EV.ADD, path30, entry.stats);
+        this.fsw._emit(EV.ADD, path26, entry.stats);
       }
       this.fsw._emitReady();
       return true;
@@ -184302,9 +184299,9 @@ var NodeFsHandler = class {
         return;
       }
       const item = entry.path;
-      let path30 = sp.join(directory, item);
+      let path26 = sp.join(directory, item);
       current.add(item);
-      if (entry.stats.isSymbolicLink() && await this._handleSymlink(entry, directory, path30, item)) {
+      if (entry.stats.isSymbolicLink() && await this._handleSymlink(entry, directory, path26, item)) {
         return;
       }
       if (this.fsw.closed) {
@@ -184313,8 +184310,8 @@ var NodeFsHandler = class {
       }
       if (item === target || !target && !previous.has(item)) {
         this.fsw._incrReadyCount();
-        path30 = sp.join(dir, sp.relative(dir, path30));
-        this._addToNodeFs(path30, initialAdd, wh, depth + 1);
+        path26 = sp.join(dir, sp.relative(dir, path26));
+        this._addToNodeFs(path26, initialAdd, wh, depth + 1);
       }
     }).on(EV.ERROR, this._boundHandleError);
     return new Promise((resolve9, reject) => {
@@ -184383,13 +184380,13 @@ var NodeFsHandler = class {
    * @param depth Child path actually targeted for watch
    * @param target Child path actually targeted for watch
    */
-  async _addToNodeFs(path30, initialAdd, priorWh, depth, target) {
+  async _addToNodeFs(path26, initialAdd, priorWh, depth, target) {
     const ready = this.fsw._emitReady;
-    if (this.fsw._isIgnored(path30) || this.fsw.closed) {
+    if (this.fsw._isIgnored(path26) || this.fsw.closed) {
       ready();
       return false;
     }
-    const wh = this.fsw._getWatchHelpers(path30);
+    const wh = this.fsw._getWatchHelpers(path26);
     if (priorWh) {
       wh.filterPath = (entry) => priorWh.filterPath(entry);
       wh.filterDir = (entry) => priorWh.filterDir(entry);
@@ -184405,8 +184402,8 @@ var NodeFsHandler = class {
       const follow = this.fsw.options.followSymlinks;
       let closer;
       if (stats.isDirectory()) {
-        const absPath = sp.resolve(path30);
-        const targetPath = follow ? await fsrealpath(path30) : path30;
+        const absPath = sp.resolve(path26);
+        const targetPath = follow ? await fsrealpath(path26) : path26;
         if (this.fsw.closed)
           return;
         closer = await this._handleDir(wh.watchPath, stats, initialAdd, depth, target, wh, targetPath);
@@ -184416,29 +184413,29 @@ var NodeFsHandler = class {
           this.fsw._symlinkPaths.set(absPath, targetPath);
         }
       } else if (stats.isSymbolicLink()) {
-        const targetPath = follow ? await fsrealpath(path30) : path30;
+        const targetPath = follow ? await fsrealpath(path26) : path26;
         if (this.fsw.closed)
           return;
         const parent = sp.dirname(wh.watchPath);
         this.fsw._getWatchedDir(parent).add(wh.watchPath);
         this.fsw._emit(EV.ADD, wh.watchPath, stats);
-        closer = await this._handleDir(parent, stats, initialAdd, depth, path30, wh, targetPath);
+        closer = await this._handleDir(parent, stats, initialAdd, depth, path26, wh, targetPath);
         if (this.fsw.closed)
           return;
         if (targetPath !== void 0) {
-          this.fsw._symlinkPaths.set(sp.resolve(path30), targetPath);
+          this.fsw._symlinkPaths.set(sp.resolve(path26), targetPath);
         }
       } else {
         closer = this._handleFile(wh.watchPath, stats, initialAdd);
       }
       ready();
       if (closer)
-        this.fsw._addPathCloser(path30, closer);
+        this.fsw._addPathCloser(path26, closer);
       return false;
     } catch (error) {
       if (this.fsw._handleError(error)) {
         ready();
-        return path30;
+        return path26;
       }
     }
   }
@@ -184481,24 +184478,24 @@ function createPattern(matcher) {
   }
   return () => false;
 }
-function normalizePath(path30) {
-  if (typeof path30 !== "string")
+function normalizePath(path26) {
+  if (typeof path26 !== "string")
     throw new Error("string expected");
-  path30 = sp2.normalize(path30);
-  path30 = path30.replace(/\\/g, "/");
+  path26 = sp2.normalize(path26);
+  path26 = path26.replace(/\\/g, "/");
   let prepend = false;
-  if (path30.startsWith("//"))
+  if (path26.startsWith("//"))
     prepend = true;
-  path30 = path30.replace(DOUBLE_SLASH_RE, "/");
+  path26 = path26.replace(DOUBLE_SLASH_RE, "/");
   if (prepend)
-    path30 = "/" + path30;
-  return path30;
+    path26 = "/" + path26;
+  return path26;
 }
 function matchPatterns(patterns, testString, stats) {
-  const path30 = normalizePath(testString);
+  const path26 = normalizePath(testString);
   for (let index = 0; index < patterns.length; index++) {
     const pattern = patterns[index];
-    if (pattern(path30, stats)) {
+    if (pattern(path26, stats)) {
       return true;
     }
   }
@@ -184536,19 +184533,19 @@ var toUnix = (string) => {
   }
   return str;
 };
-var normalizePathToUnix = (path30) => toUnix(sp2.normalize(toUnix(path30)));
-var normalizeIgnored = (cwd = "") => (path30) => {
-  if (typeof path30 === "string") {
-    return normalizePathToUnix(sp2.isAbsolute(path30) ? path30 : sp2.join(cwd, path30));
+var normalizePathToUnix = (path26) => toUnix(sp2.normalize(toUnix(path26)));
+var normalizeIgnored = (cwd = "") => (path26) => {
+  if (typeof path26 === "string") {
+    return normalizePathToUnix(sp2.isAbsolute(path26) ? path26 : sp2.join(cwd, path26));
   } else {
-    return path30;
+    return path26;
   }
 };
-var getAbsolutePath = (path30, cwd) => {
-  if (sp2.isAbsolute(path30)) {
-    return path30;
+var getAbsolutePath = (path26, cwd) => {
+  if (sp2.isAbsolute(path26)) {
+    return path26;
   }
-  return sp2.join(cwd, path30);
+  return sp2.join(cwd, path26);
 };
 var EMPTY_SET = Object.freeze(/* @__PURE__ */ new Set());
 var DirEntry = class {
@@ -184613,10 +184610,10 @@ var WatchHelper = class {
   dirParts;
   followSymlinks;
   statMethod;
-  constructor(path30, follow, fsw) {
+  constructor(path26, follow, fsw) {
     this.fsw = fsw;
-    const watchPath = path30;
-    this.path = path30 = path30.replace(REPLACER_RE, "");
+    const watchPath = path26;
+    this.path = path26 = path26.replace(REPLACER_RE, "");
     this.watchPath = watchPath;
     this.fullWatchPath = sp2.resolve(watchPath);
     this.dirParts = [];
@@ -184756,20 +184753,20 @@ var FSWatcher = class extends EventEmitter {
     this._closePromise = void 0;
     let paths = unifyPaths(paths_);
     if (cwd) {
-      paths = paths.map((path30) => {
-        const absPath = getAbsolutePath(path30, cwd);
+      paths = paths.map((path26) => {
+        const absPath = getAbsolutePath(path26, cwd);
         return absPath;
       });
     }
-    paths.forEach((path30) => {
-      this._removeIgnoredPath(path30);
+    paths.forEach((path26) => {
+      this._removeIgnoredPath(path26);
     });
     this._userIgnored = void 0;
     if (!this._readyCount)
       this._readyCount = 0;
     this._readyCount += paths.length;
-    Promise.all(paths.map(async (path30) => {
-      const res = await this._nodeFsHandler._addToNodeFs(path30, !_internal, void 0, 0, _origAdd);
+    Promise.all(paths.map(async (path26) => {
+      const res = await this._nodeFsHandler._addToNodeFs(path26, !_internal, void 0, 0, _origAdd);
       if (res)
         this._emitReady();
       return res;
@@ -184791,17 +184788,17 @@ var FSWatcher = class extends EventEmitter {
       return this;
     const paths = unifyPaths(paths_);
     const { cwd } = this.options;
-    paths.forEach((path30) => {
-      if (!sp2.isAbsolute(path30) && !this._closers.has(path30)) {
+    paths.forEach((path26) => {
+      if (!sp2.isAbsolute(path26) && !this._closers.has(path26)) {
         if (cwd)
-          path30 = sp2.join(cwd, path30);
-        path30 = sp2.resolve(path30);
+          path26 = sp2.join(cwd, path26);
+        path26 = sp2.resolve(path26);
       }
-      this._closePath(path30);
-      this._addIgnoredPath(path30);
-      if (this._watched.has(path30)) {
+      this._closePath(path26);
+      this._addIgnoredPath(path26);
+      if (this._watched.has(path26)) {
         this._addIgnoredPath({
-          path: path30,
+          path: path26,
           recursive: true
         });
       }
@@ -184865,38 +184862,38 @@ var FSWatcher = class extends EventEmitter {
    * @param stats arguments to be passed with event
    * @returns the error if defined, otherwise the value of the FSWatcher instance's `closed` flag
    */
-  async _emit(event, path30, stats) {
+  async _emit(event, path26, stats) {
     if (this.closed)
       return;
     const opts = this.options;
     if (isWindows)
-      path30 = sp2.normalize(path30);
+      path26 = sp2.normalize(path26);
     if (opts.cwd)
-      path30 = sp2.relative(opts.cwd, path30);
-    const args = [path30];
+      path26 = sp2.relative(opts.cwd, path26);
+    const args = [path26];
     if (stats != null)
       args.push(stats);
     const awf = opts.awaitWriteFinish;
     let pw;
-    if (awf && (pw = this._pendingWrites.get(path30))) {
+    if (awf && (pw = this._pendingWrites.get(path26))) {
       pw.lastChange = /* @__PURE__ */ new Date();
       return this;
     }
     if (opts.atomic) {
       if (event === EVENTS.UNLINK) {
-        this._pendingUnlinks.set(path30, [event, ...args]);
+        this._pendingUnlinks.set(path26, [event, ...args]);
         setTimeout(() => {
-          this._pendingUnlinks.forEach((entry, path31) => {
+          this._pendingUnlinks.forEach((entry, path27) => {
             this.emit(...entry);
             this.emit(EVENTS.ALL, ...entry);
-            this._pendingUnlinks.delete(path31);
+            this._pendingUnlinks.delete(path27);
           });
         }, typeof opts.atomic === "number" ? opts.atomic : 100);
         return this;
       }
-      if (event === EVENTS.ADD && this._pendingUnlinks.has(path30)) {
+      if (event === EVENTS.ADD && this._pendingUnlinks.has(path26)) {
         event = EVENTS.CHANGE;
-        this._pendingUnlinks.delete(path30);
+        this._pendingUnlinks.delete(path26);
       }
     }
     if (awf && (event === EVENTS.ADD || event === EVENTS.CHANGE) && this._readyEmitted) {
@@ -184914,16 +184911,16 @@ var FSWatcher = class extends EventEmitter {
           this.emitWithAll(event, args);
         }
       };
-      this._awaitWriteFinish(path30, awf.stabilityThreshold, event, awfEmit);
+      this._awaitWriteFinish(path26, awf.stabilityThreshold, event, awfEmit);
       return this;
     }
     if (event === EVENTS.CHANGE) {
-      const isThrottled = !this._throttle(EVENTS.CHANGE, path30, 50);
+      const isThrottled = !this._throttle(EVENTS.CHANGE, path26, 50);
       if (isThrottled)
         return this;
     }
     if (opts.alwaysStat && stats === void 0 && (event === EVENTS.ADD || event === EVENTS.ADD_DIR || event === EVENTS.CHANGE)) {
-      const fullPath = opts.cwd ? sp2.join(opts.cwd, path30) : path30;
+      const fullPath = opts.cwd ? sp2.join(opts.cwd, path26) : path26;
       let stats2;
       try {
         stats2 = await stat3(fullPath);
@@ -184954,23 +184951,23 @@ var FSWatcher = class extends EventEmitter {
    * @param timeout duration of time to suppress duplicate actions
    * @returns tracking object or false if action should be suppressed
    */
-  _throttle(actionType, path30, timeout) {
+  _throttle(actionType, path26, timeout) {
     if (!this._throttled.has(actionType)) {
       this._throttled.set(actionType, /* @__PURE__ */ new Map());
     }
     const action = this._throttled.get(actionType);
     if (!action)
       throw new Error("invalid throttle");
-    const actionPath = action.get(path30);
+    const actionPath = action.get(path26);
     if (actionPath) {
       actionPath.count++;
       return false;
     }
     let timeoutObject;
     const clear = () => {
-      const item = action.get(path30);
+      const item = action.get(path26);
       const count = item ? item.count : 0;
-      action.delete(path30);
+      action.delete(path26);
       clearTimeout(timeoutObject);
       if (item)
         clearTimeout(item.timeoutObject);
@@ -184978,7 +184975,7 @@ var FSWatcher = class extends EventEmitter {
     };
     timeoutObject = setTimeout(clear, timeout);
     const thr = { timeoutObject, clear, count: 0 };
-    action.set(path30, thr);
+    action.set(path26, thr);
     return thr;
   }
   _incrReadyCount() {
@@ -184992,44 +184989,44 @@ var FSWatcher = class extends EventEmitter {
    * @param event
    * @param awfEmit Callback to be called when ready for event to be emitted.
    */
-  _awaitWriteFinish(path30, threshold, event, awfEmit) {
+  _awaitWriteFinish(path26, threshold, event, awfEmit) {
     const awf = this.options.awaitWriteFinish;
     if (typeof awf !== "object")
       return;
     const pollInterval = awf.pollInterval;
     let timeoutHandler;
-    let fullPath = path30;
-    if (this.options.cwd && !sp2.isAbsolute(path30)) {
-      fullPath = sp2.join(this.options.cwd, path30);
+    let fullPath = path26;
+    if (this.options.cwd && !sp2.isAbsolute(path26)) {
+      fullPath = sp2.join(this.options.cwd, path26);
     }
     const now = /* @__PURE__ */ new Date();
     const writes = this._pendingWrites;
     function awaitWriteFinishFn(prevStat) {
       statcb(fullPath, (err, curStat) => {
-        if (err || !writes.has(path30)) {
+        if (err || !writes.has(path26)) {
           if (err && err.code !== "ENOENT")
             awfEmit(err);
           return;
         }
         const now2 = Number(/* @__PURE__ */ new Date());
         if (prevStat && curStat.size !== prevStat.size) {
-          writes.get(path30).lastChange = now2;
+          writes.get(path26).lastChange = now2;
         }
-        const pw = writes.get(path30);
+        const pw = writes.get(path26);
         const df = now2 - pw.lastChange;
         if (df >= threshold) {
-          writes.delete(path30);
+          writes.delete(path26);
           awfEmit(void 0, curStat);
         } else {
           timeoutHandler = setTimeout(awaitWriteFinishFn, pollInterval, curStat);
         }
       });
     }
-    if (!writes.has(path30)) {
-      writes.set(path30, {
+    if (!writes.has(path26)) {
+      writes.set(path26, {
         lastChange: now,
         cancelWait: () => {
-          writes.delete(path30);
+          writes.delete(path26);
           clearTimeout(timeoutHandler);
           return event;
         }
@@ -185040,8 +185037,8 @@ var FSWatcher = class extends EventEmitter {
   /**
    * Determines whether user has asked to ignore this path.
    */
-  _isIgnored(path30, stats) {
-    if (this.options.atomic && DOT_RE.test(path30))
+  _isIgnored(path26, stats) {
+    if (this.options.atomic && DOT_RE.test(path26))
       return true;
     if (!this._userIgnored) {
       const { cwd } = this.options;
@@ -185051,17 +185048,17 @@ var FSWatcher = class extends EventEmitter {
       const list = [...ignoredPaths.map(normalizeIgnored(cwd)), ...ignored];
       this._userIgnored = anymatch(list, void 0);
     }
-    return this._userIgnored(path30, stats);
+    return this._userIgnored(path26, stats);
   }
-  _isntIgnored(path30, stat4) {
-    return !this._isIgnored(path30, stat4);
+  _isntIgnored(path26, stat4) {
+    return !this._isIgnored(path26, stat4);
   }
   /**
    * Provides a set of common helpers and properties relating to symlink handling.
    * @param path file or directory pattern being watched
    */
-  _getWatchHelpers(path30) {
-    return new WatchHelper(path30, this.options.followSymlinks, this);
+  _getWatchHelpers(path26) {
+    return new WatchHelper(path26, this.options.followSymlinks, this);
   }
   // Directory helpers
   // -----------------
@@ -185093,63 +185090,63 @@ var FSWatcher = class extends EventEmitter {
    * @param item      base path of item/directory
    */
   _remove(directory, item, isDirectory) {
-    const path30 = sp2.join(directory, item);
-    const fullPath = sp2.resolve(path30);
-    isDirectory = isDirectory != null ? isDirectory : this._watched.has(path30) || this._watched.has(fullPath);
-    if (!this._throttle("remove", path30, 100))
+    const path26 = sp2.join(directory, item);
+    const fullPath = sp2.resolve(path26);
+    isDirectory = isDirectory != null ? isDirectory : this._watched.has(path26) || this._watched.has(fullPath);
+    if (!this._throttle("remove", path26, 100))
       return;
     if (!isDirectory && this._watched.size === 1) {
       this.add(directory, item, true);
     }
-    const wp = this._getWatchedDir(path30);
+    const wp = this._getWatchedDir(path26);
     const nestedDirectoryChildren = wp.getChildren();
-    nestedDirectoryChildren.forEach((nested) => this._remove(path30, nested));
+    nestedDirectoryChildren.forEach((nested) => this._remove(path26, nested));
     const parent = this._getWatchedDir(directory);
     const wasTracked = parent.has(item);
     parent.remove(item);
     if (this._symlinkPaths.has(fullPath)) {
       this._symlinkPaths.delete(fullPath);
     }
-    let relPath = path30;
+    let relPath = path26;
     if (this.options.cwd)
-      relPath = sp2.relative(this.options.cwd, path30);
+      relPath = sp2.relative(this.options.cwd, path26);
     if (this.options.awaitWriteFinish && this._pendingWrites.has(relPath)) {
       const event = this._pendingWrites.get(relPath).cancelWait();
       if (event === EVENTS.ADD)
         return;
     }
-    this._watched.delete(path30);
+    this._watched.delete(path26);
     this._watched.delete(fullPath);
     const eventName = isDirectory ? EVENTS.UNLINK_DIR : EVENTS.UNLINK;
-    if (wasTracked && !this._isIgnored(path30))
-      this._emit(eventName, path30);
-    this._closePath(path30);
+    if (wasTracked && !this._isIgnored(path26))
+      this._emit(eventName, path26);
+    this._closePath(path26);
   }
   /**
    * Closes all watchers for a path
    */
-  _closePath(path30) {
-    this._closeFile(path30);
-    const dir = sp2.dirname(path30);
-    this._getWatchedDir(dir).remove(sp2.basename(path30));
+  _closePath(path26) {
+    this._closeFile(path26);
+    const dir = sp2.dirname(path26);
+    this._getWatchedDir(dir).remove(sp2.basename(path26));
   }
   /**
    * Closes only file-specific watchers
    */
-  _closeFile(path30) {
-    const closers = this._closers.get(path30);
+  _closeFile(path26) {
+    const closers = this._closers.get(path26);
     if (!closers)
       return;
     closers.forEach((closer) => closer());
-    this._closers.delete(path30);
+    this._closers.delete(path26);
   }
-  _addPathCloser(path30, closer) {
+  _addPathCloser(path26, closer) {
     if (!closer)
       return;
-    let list = this._closers.get(path30);
+    let list = this._closers.get(path26);
     if (!list) {
       list = [];
-      this._closers.set(path30, list);
+      this._closers.set(path26, list);
     }
     list.push(closer);
   }
@@ -185180,8 +185177,6 @@ var chokidar_default = { watch, FSWatcher };
 
 // node_modules/.pnpm/@specific+sdk@file+..+sdk/node_modules/@specific/sdk/dist/index.js
 var import_code_frame = __toESM(require_lib2(), 1);
-import * as fs3 from "fs";
-import * as path3 from "path";
 import * as fs5 from "fs";
 import * as path5 from "path";
 import * as net from "net";
@@ -185193,17 +185188,14 @@ import { createReadStream } from "fs";
 import { createTarExtractor, extractTo } from "tar-vern";
 import { spawn as spawn2 } from "child_process";
 import { readFile, writeFile } from "fs/promises";
-import { existsSync as existsSync52 } from "fs";
+import { existsSync as existsSync5 } from "fs";
 import * as fs6 from "fs";
 import * as path6 from "path";
 import * as http from "http";
-import * as https from "https";
 import * as fs7 from "fs";
 import * as path7 from "path";
 import { fileURLToPath } from "url";
-import httpProxy from "http-proxy";
 import * as net2 from "net";
-import * as net3 from "net";
 import { spawn as spawn3 } from "child_process";
 import { readFile as readFile2, writeFile as writeFile2, mkdir } from "fs/promises";
 import { existsSync as existsSync8 } from "fs";
@@ -185211,7 +185203,7 @@ import * as path8 from "path";
 import * as crypto from "crypto";
 import * as http2 from "http";
 import * as crypto2 from "crypto";
-import * as net4 from "net";
+import * as net3 from "net";
 import * as fs8 from "fs";
 import * as path9 from "path";
 import { spawn as spawn4 } from "child_process";
@@ -185221,32 +185213,17 @@ import * as path10 from "path";
 import { spawnSync } from "child_process";
 import * as fs10 from "fs";
 import * as path11 from "path";
-import * as net5 from "net";
+import * as net4 from "net";
 import { spawn as spawn5 } from "child_process";
+import * as net5 from "net";
 import * as fs11 from "fs";
 import * as path12 from "path";
-import * as os3 from "os";
-import forge from "node-forge";
-import { execSync as execSync2 } from "child_process";
-import DNS from "dns2";
-import { execSync as execSync3 } from "child_process";
-import * as fs13 from "fs";
-import * as os5 from "os";
-import * as path13 from "path";
-import * as fs12 from "fs";
-import * as os4 from "os";
-import * as fs14 from "fs";
-import * as path14 from "path";
 import { generateSlug } from "random-word-slugs";
 import { EventEmitter as EventEmitter2 } from "node:events";
 import * as net6 from "node:net";
-import * as fs15 from "fs";
-import * as path15 from "path";
-import * as os6 from "os";
-import * as net7 from "net";
 import { EventEmitter as EventEmitter22 } from "events";
-import { execSync as execSync4 } from "child_process";
-import * as path17 from "path";
+import { execSync as execSync2 } from "child_process";
+import * as path14 from "path";
 var __create2 = Object.create;
 var __defProp2 = Object.defineProperty;
 var __getOwnPropDesc2 = Object.getOwnPropertyDescriptor;
@@ -185287,8 +185264,8 @@ var require_dist = __commonJS2({
       var $global, $module, $NaN = NaN;
       if ("undefined" != typeof window ? $global = window : "undefined" != typeof self ? $global = self : "undefined" != typeof global ? ($global = global).require = __require2 : $global = this, void 0 === $global || void 0 === $global.Array) throw new Error("no global object found");
       if ("undefined" != typeof module && ($module = module), !$global.fs && $global.require) try {
-        var fs172 = $global.require("fs");
-        "object" == typeof fs172 && null !== fs172 && 0 !== Object.keys(fs172).length && ($global.fs = fs172);
+        var fs132 = $global.require("fs");
+        "object" == typeof fs132 && null !== fs132 && 0 !== Object.keys(fs132).length && ($global.fs = fs132);
       } catch (e) {
       }
       if (!$global.fs) {
@@ -368888,68 +368865,6 @@ var PortAllocator = class {
     return port;
   }
 };
-var PORT_RANGE_START2 = 4e4;
-var PORT_RANGE_END2 = 49999;
-var StablePortAllocator = class {
-  portsDir;
-  portsFilePath;
-  savedPorts = {};
-  usedPorts = /* @__PURE__ */ new Set();
-  constructor(projectRoot, key = "default") {
-    this.portsDir = path3.join(projectRoot, ".specific", "keys", key);
-    this.portsFilePath = path3.join(this.portsDir, "ports.json");
-    this.loadPorts();
-  }
-  loadPorts() {
-    if (!fs3.existsSync(this.portsFilePath)) {
-      return;
-    }
-    try {
-      const content = fs3.readFileSync(this.portsFilePath, "utf-8");
-      const data = JSON.parse(content);
-      if (data.version === 1 && data.ports) {
-        this.savedPorts = data.ports;
-        for (const port of Object.values(this.savedPorts)) {
-          this.usedPorts.add(port);
-        }
-      }
-    } catch {
-      this.savedPorts = {};
-    }
-  }
-  savePorts() {
-    if (!fs3.existsSync(this.portsDir)) {
-      fs3.mkdirSync(this.portsDir, { recursive: true });
-    }
-    const data = {
-      version: 1,
-      ports: this.savedPorts
-    };
-    fs3.writeFileSync(this.portsFilePath, JSON.stringify(data, null, 2));
-  }
-  allocateRandom() {
-    const rangeSize = PORT_RANGE_END2 - PORT_RANGE_START2 + 1;
-    if (this.usedPorts.size >= rangeSize) {
-      throw new Error("No available ports in range");
-    }
-    let port;
-    do {
-      port = PORT_RANGE_START2 + Math.floor(Math.random() * rangeSize);
-    } while (this.usedPorts.has(port));
-    this.usedPorts.add(port);
-    return port;
-  }
-  allocate(key) {
-    const savedPort = this.savedPorts[key];
-    if (savedPort !== void 0) {
-      return savedPort;
-    }
-    const port = this.allocateRandom();
-    this.savedPorts[key] = port;
-    this.savePorts();
-    return port;
-  }
-};
 var BinaryNotFoundError = class extends Error {
   constructor(binaryName, version, platformInfo) {
     super(
@@ -368986,10 +368901,10 @@ function getLibraryEnv(binary) {
   if (!binary.libraryPath) {
     return {};
   }
-  const platform62 = os2.platform();
-  if (platform62 === "darwin") {
+  const platform22 = os2.platform();
+  if (platform22 === "darwin") {
     return { DYLD_LIBRARY_PATH: binary.libraryPath };
-  } else if (platform62 === "linux") {
+  } else if (platform22 === "linux") {
     return { LD_LIBRARY_PATH: binary.libraryPath };
   }
   return {};
@@ -368998,11 +368913,11 @@ function getBinBaseDir() {
   return path4.join(os2.homedir(), ".specific", "bin");
 }
 function getPlatformInfo() {
-  const platform62 = os2.platform();
+  const platform22 = os2.platform();
   const arch22 = os2.arch();
-  if (platform62 !== "darwin" && platform62 !== "linux") {
+  if (platform22 !== "darwin" && platform22 !== "linux") {
     throw new Error(
-      `Unsupported platform: ${platform62}. Only macOS and Linux are supported.`
+      `Unsupported platform: ${platform22}. Only macOS and Linux are supported.`
     );
   }
   const archStr = arch22;
@@ -369016,7 +368931,7 @@ function getPlatformInfo() {
       `Unsupported architecture: ${arch22}. Only x64 and arm64 are supported.`
     );
   }
-  return { platform: platform62, arch: mappedArch };
+  return { platform: platform22, arch: mappedArch };
 }
 function getBinaryDir(definition, version, platformInfo) {
   return path4.join(
@@ -369547,7 +369462,7 @@ async function parseLocalFile(content) {
   return { secrets, configs };
 }
 async function loadLocal() {
-  if (!existsSync52(LOCAL_FILE)) {
+  if (!existsSync5(LOCAL_FILE)) {
     return { secrets: /* @__PURE__ */ new Map(), configs: /* @__PURE__ */ new Map() };
   }
   const content = await readFile(LOCAL_FILE, "utf-8");
@@ -369587,7 +369502,7 @@ ${newLine}
 }
 async function saveLocalSecret(name, value) {
   let content = "";
-  if (existsSync52(LOCAL_FILE)) {
+  if (existsSync5(LOCAL_FILE)) {
     content = await readFile(LOCAL_FILE, "utf-8");
   } else {
     content = HEADER_COMMENT;
@@ -369597,7 +369512,7 @@ async function saveLocalSecret(name, value) {
 }
 async function saveLocalConfig(name, value) {
   let content = "";
-  if (existsSync52(LOCAL_FILE)) {
+  if (existsSync5(LOCAL_FILE)) {
     content = await readFile(LOCAL_FILE, "utf-8");
   } else {
     content = HEADER_COMMENT;
@@ -370227,13 +370142,6 @@ var InstanceStateManager = class {
 var __dirname = path7.dirname(fileURLToPath(import.meta.url));
 var adminDir = path7.join(__dirname, "admin");
 var _embeddedAdmin = null;
-var HTTP_PORT = 80;
-var HTTPS_PORT = 443;
-var FALLBACK_HTTPS_PORT = 3443;
-var DOMAIN_SUFFIX = ".spcf.localhost";
-var ADMIN_DOMAIN = "spcf.localhost";
-var DRIZZLE_GATEWAY_PREFIX = "__drizzle_gateway";
-var TEMPORAL_UI_PREFIX = "__temporal";
 var MIME_TYPES = {
   ".html": "text/html",
   ".css": "text/css",
@@ -370248,399 +370156,6 @@ var MIME_TYPES = {
   ".woff2": "font/woff2",
   ".txt": "text/plain"
 };
-function isPortAvailable(port) {
-  return new Promise((resolve52) => {
-    const server = net2.createServer();
-    server.once("error", () => resolve52(false));
-    server.once("listening", () => {
-      server.close(() => resolve52(true));
-    });
-    server.listen(port, "0.0.0.0");
-  });
-}
-async function probeHttpsPort() {
-  for (const port of [HTTPS_PORT, FALLBACK_HTTPS_PORT]) {
-    if (await isPortAvailable(port)) return port;
-  }
-  return 0;
-}
-async function startHttpProxy(services, certificate, getState, instanceKey = "default", preferredHttpsPort) {
-  const serviceMap = /* @__PURE__ */ new Map();
-  const adminPortMap = /* @__PURE__ */ new Map();
-  const drizzleGatewayPortMap = /* @__PURE__ */ new Map();
-  const temporalUiPortMap = /* @__PURE__ */ new Map();
-  const buildMapKey = (serviceName, key) => {
-    return key === "default" ? serviceName : `${serviceName}.${key}`;
-  };
-  for (const svc of services) {
-    serviceMap.set(buildMapKey(svc.name, instanceKey), svc.port);
-  }
-  const updateServices = (registryServices, keys) => {
-    serviceMap.clear();
-    adminPortMap.clear();
-    drizzleGatewayPortMap.clear();
-    temporalUiPortMap.clear();
-    for (const svc of registryServices) {
-      serviceMap.set(buildMapKey(svc.serviceName, svc.key), svc.port);
-    }
-    for (const [key, registration] of Object.entries(keys)) {
-      adminPortMap.set(key, registration.adminPort);
-      if (registration.drizzleGatewayPort !== void 0) {
-        drizzleGatewayPortMap.set(key, registration.drizzleGatewayPort);
-      }
-      if (registration.temporalUiPort !== void 0) {
-        temporalUiPortMap.set(key, registration.temporalUiPort);
-      }
-    }
-    writeLog("proxy", `Updated service map: ${serviceMap.size} services, ${adminPortMap.size} admin instances, ${drizzleGatewayPortMap.size} drizzle gateways`);
-  };
-  const { key: defaultKey, cert: defaultCert } = certificate;
-  const proxy = httpProxy.createProxyServer({});
-  proxy.on("error", (err, req, res) => {
-    const host = req.headers?.host || "unknown";
-    writeLog("proxy:error", `Bad Gateway for ${host}: ${err.message}`);
-    if (res instanceof http.ServerResponse && !res.headersSent) {
-      res.writeHead(502, { "Content-Type": "text/html" });
-      res.end(`<h1>Bad Gateway</h1><p>Service unavailable: ${err.message}</p>`);
-    }
-  });
-  proxy.on("proxyRes", (proxyRes, req) => {
-    const host = req.headers?.host || "";
-    if (extractTemporalUiKey(host) !== null || extractDrizzleGatewayKey(host) !== null) {
-      delete proxyRes.headers["x-frame-options"];
-      const csp = proxyRes.headers["content-security-policy"];
-      if (typeof csp === "string" && csp.includes("frame-ancestors")) {
-        proxyRes.headers["content-security-policy"] = csp.split(";").filter((d) => !d.trim().startsWith("frame-ancestors")).join(";");
-      }
-    }
-  });
-  const handleRequest = (req, res) => {
-    const host = req.headers.host || "";
-    const hostname2 = host.split(":")[0];
-    const temporalKey = extractTemporalUiKey(host);
-    if (temporalKey !== null) {
-      const temporalPort = temporalUiPortMap.get(temporalKey);
-      if (temporalPort) {
-        proxy.web(req, res, {
-          target: `http://127.0.0.1:${temporalPort}`
-        });
-        return;
-      }
-      res.writeHead(503, { "Content-Type": "text/html" });
-      res.end("<h1>Workflow Engine</h1><p>No workflow engine running for this instance.</p>");
-      return;
-    }
-    const drizzleKey = extractDrizzleGatewayKey(host);
-    if (drizzleKey !== null) {
-      const drizzlePort = drizzleGatewayPortMap.get(drizzleKey);
-      if (drizzlePort) {
-        proxy.web(req, res, {
-          target: `http://127.0.0.1:${drizzlePort}`
-        });
-        return;
-      }
-      res.writeHead(503, { "Content-Type": "text/html" });
-      res.end("<h1>Database Viewer</h1><p>No database viewer running for this instance.</p>");
-      return;
-    }
-    const adminKey = extractAdminKey(host);
-    if (adminKey !== null) {
-      const adminPort = adminPortMap.get(adminKey);
-      if (adminPort) {
-        const url = new URL(req.url || "/", "http://localhost");
-        if (url.pathname.startsWith("/api/")) {
-          proxy.web(req, res, { target: `http://127.0.0.1:${adminPort}` });
-          return;
-        }
-        serveStaticFile(res, url.pathname);
-        return;
-      }
-      if (adminKey === "default" && hostname2 === ADMIN_DOMAIN) {
-        res.writeHead(503, { "Content-Type": "text/html" });
-        res.end("<h1>Admin UI</h1><p>No dev instance running. Start <code>specific dev</code> first.</p>");
-        return;
-      }
-    }
-    const route = extractServiceAndKey(host);
-    if (!route) {
-      return sendNotFound(res, null, serviceMap);
-    }
-    const mapKey = buildMapKey(route.serviceName, route.key);
-    const targetPort2 = serviceMap.get(mapKey);
-    if (!targetPort2) {
-      return sendNotFound(res, route.serviceName, serviceMap);
-    }
-    proxy.web(req, res, { target: `http://127.0.0.1:${targetPort2}` });
-  };
-  const handleUpgrade = (req, socket, head) => {
-    const host = req.headers.host || "";
-    const temporalKey = extractTemporalUiKey(host);
-    if (temporalKey !== null) {
-      const temporalPort = temporalUiPortMap.get(temporalKey);
-      if (temporalPort) {
-        proxy.ws(req, socket, head, { target: `http://127.0.0.1:${temporalPort}` });
-        return;
-      }
-      socket.end("HTTP/1.1 404 Not Found\r\n\r\n");
-      return;
-    }
-    const drizzleKey = extractDrizzleGatewayKey(host);
-    if (drizzleKey !== null) {
-      const drizzlePort = drizzleGatewayPortMap.get(drizzleKey);
-      if (drizzlePort) {
-        proxy.ws(req, socket, head, { target: `http://127.0.0.1:${drizzlePort}` });
-        return;
-      }
-      socket.end("HTTP/1.1 404 Not Found\r\n\r\n");
-      return;
-    }
-    const adminKey = extractAdminKey(host);
-    if (adminKey !== null) {
-      if (adminPortMap.has(adminKey)) {
-        socket.end("HTTP/1.1 404 Not Found\r\n\r\n");
-        return;
-      }
-    }
-    const route = extractServiceAndKey(host);
-    if (!route) {
-      socket.end("HTTP/1.1 404 Not Found\r\n\r\n");
-      return;
-    }
-    const mapKey = buildMapKey(route.serviceName, route.key);
-    const targetPort2 = serviceMap.get(mapKey);
-    if (!targetPort2) {
-      socket.end("HTTP/1.1 404 Not Found\r\n\r\n");
-      return;
-    }
-    proxy.ws(req, socket, head, { target: `http://127.0.0.1:${targetPort2}` });
-  };
-  const createHttpsServer = (key, cert) => {
-    const server = https.createServer({ key, cert }, handleRequest);
-    server.on("upgrade", handleUpgrade);
-    return server;
-  };
-  const makeInstance = (httpsServer, actualHttpsPort, httpServer, actualHttpPort) => {
-    let currentHttpsServer = httpsServer;
-    return {
-      httpPort: actualHttpPort ?? 0,
-      httpsPort: actualHttpsPort,
-      updateServices,
-      updateCertificate(newCert) {
-        if (typeof currentHttpsServer.setSecureContext === "function") {
-          currentHttpsServer.setSecureContext({
-            key: newCert.key,
-            cert: newCert.cert
-          });
-          writeLog("proxy", "Certificate updated");
-        } else {
-          const oldServer = currentHttpsServer;
-          currentHttpsServer = createHttpsServer(newCert.key, newCert.cert);
-          currentHttpsServer.listen(actualHttpsPort, "0.0.0.0", () => {
-            writeLog("proxy", "Certificate updated (server restarted)");
-          });
-          oldServer.closeAllConnections?.();
-          oldServer.close();
-        }
-      },
-      async stop() {
-        return new Promise((resolve52) => {
-          const serverCount = httpServer ? 2 : 1;
-          let closed = 0;
-          const onClose = () => {
-            closed++;
-            if (closed === serverCount) {
-              clearTimeout(forceCloseTimeout);
-              resolve52();
-            }
-          };
-          currentHttpsServer.close(onClose);
-          httpServer?.close(onClose);
-          const forceCloseTimeout = setTimeout(() => {
-            currentHttpsServer.closeAllConnections?.();
-            httpServer?.closeAllConnections?.();
-            resolve52();
-          }, 2e3);
-        });
-      }
-    };
-  };
-  const useStandardPorts = !preferredHttpsPort || preferredHttpsPort === HTTPS_PORT;
-  if (useStandardPorts) {
-    try {
-      return await startStandardProxy();
-    } catch (err) {
-      const isPortError = err instanceof Error && (err.message.includes("already in use") || err.message.includes("Cannot bind to port"));
-      if (!isPortError) throw err;
-      writeLog("proxy", `Standard ports unavailable (${err instanceof Error ? err.message : err}), falling back to HTTPS-only`);
-    }
-  }
-  const targetPort = preferredHttpsPort && preferredHttpsPort !== HTTPS_PORT ? preferredHttpsPort : FALLBACK_HTTPS_PORT;
-  return startFallbackProxy(targetPort);
-  function startStandardProxy() {
-    const httpServer = http.createServer(handleRequest);
-    httpServer.on("upgrade", handleUpgrade);
-    const httpsServer = https.createServer(
-      { key: defaultKey, cert: defaultCert },
-      handleRequest
-    );
-    httpsServer.on("upgrade", handleUpgrade);
-    return new Promise((resolve52, reject) => {
-      let httpStarted = false;
-      let httpsStarted = false;
-      let failed = false;
-      const checkReady = () => {
-        if (failed) return;
-        if (httpStarted && httpsStarted) {
-          writeLog("proxy", `HTTP/HTTPS proxy started on ports ${HTTP_PORT}/${HTTPS_PORT}`);
-          resolve52(makeInstance(httpsServer, HTTPS_PORT, httpServer, HTTP_PORT));
-        }
-      };
-      const handleError = (port) => (err) => {
-        if (failed) return;
-        failed = true;
-        httpServer.close(() => {
-        });
-        httpsServer.close(() => {
-        });
-        if (err.code === "EACCES" || err.code === "EADDRINUSE") {
-          reject(new Error(`Port ${port} is already in use`));
-        } else {
-          reject(err);
-        }
-      };
-      httpServer.on("error", handleError(HTTP_PORT));
-      httpsServer.on("error", handleError(HTTPS_PORT));
-      httpServer.listen(HTTP_PORT, "0.0.0.0", () => {
-        httpStarted = true;
-        checkReady();
-      });
-      httpsServer.listen(HTTPS_PORT, "0.0.0.0", () => {
-        httpsStarted = true;
-        checkReady();
-      });
-    });
-  }
-  function startFallbackProxy(port) {
-    const httpsServer = https.createServer(
-      { key: defaultKey, cert: defaultCert },
-      handleRequest
-    );
-    httpsServer.on("upgrade", handleUpgrade);
-    return new Promise((resolve52, reject) => {
-      const tryPort = (p) => {
-        httpsServer.removeAllListeners("error");
-        httpsServer.on("error", (err) => {
-          if ((err.code === "EADDRINUSE" || err.code === "EACCES") && p !== 0) {
-            tryPort(0);
-          } else {
-            reject(err);
-          }
-        });
-        httpsServer.listen(p, "0.0.0.0", () => {
-          const addr = httpsServer.address();
-          const actualPort = typeof addr === "object" && addr ? addr.port : p;
-          writeLog("proxy", `HTTPS proxy started on port ${actualPort} (fallback mode)`);
-          resolve52(makeInstance(httpsServer, actualPort));
-        });
-      };
-      tryPort(port);
-    });
-  }
-}
-function extractServiceAndKey(host) {
-  const hostname2 = host.split(":")[0];
-  if (!hostname2 || !hostname2.endsWith(DOMAIN_SUFFIX)) {
-    return null;
-  }
-  const prefix = hostname2.slice(0, -DOMAIN_SUFFIX.length);
-  if (!prefix) {
-    return null;
-  }
-  const parts = prefix.split(".");
-  if (parts.length === 1 && parts[0]) {
-    return { serviceName: parts[0], key: "default" };
-  } else if (parts.length === 2 && parts[0] && parts[1]) {
-    return { serviceName: parts[0], key: parts[1] };
-  }
-  return null;
-}
-function extractDrizzleGatewayKey(host) {
-  const hostname2 = host.split(":")[0];
-  if (!hostname2 || !hostname2.endsWith(DOMAIN_SUFFIX)) {
-    return null;
-  }
-  const prefix = hostname2.slice(0, -DOMAIN_SUFFIX.length);
-  if (!prefix) {
-    return null;
-  }
-  const parts = prefix.split(".");
-  if (parts.length === 1 && parts[0] === DRIZZLE_GATEWAY_PREFIX) {
-    return "default";
-  } else if (parts.length === 2 && parts[0] === DRIZZLE_GATEWAY_PREFIX && parts[1]) {
-    return parts[1];
-  }
-  return null;
-}
-function extractTemporalUiKey(host) {
-  const hostname2 = host.split(":")[0];
-  if (!hostname2 || !hostname2.endsWith(DOMAIN_SUFFIX)) {
-    return null;
-  }
-  const prefix = hostname2.slice(0, -DOMAIN_SUFFIX.length);
-  if (!prefix) {
-    return null;
-  }
-  const parts = prefix.split(".");
-  if (parts.length === 1 && parts[0] === TEMPORAL_UI_PREFIX) {
-    return "default";
-  } else if (parts.length === 2 && parts[0] === TEMPORAL_UI_PREFIX && parts[1]) {
-    return parts[1];
-  }
-  return null;
-}
-function extractAdminKey(host) {
-  const hostname2 = host.split(":")[0];
-  if (!hostname2) {
-    return null;
-  }
-  if (hostname2 === ADMIN_DOMAIN) {
-    return "default";
-  }
-  if (!hostname2.endsWith(DOMAIN_SUFFIX)) {
-    return null;
-  }
-  const prefix = hostname2.slice(0, -DOMAIN_SUFFIX.length);
-  if (!prefix) {
-    return null;
-  }
-  const parts = prefix.split(".");
-  if (parts.length === 1 && parts[0]) {
-    return parts[0];
-  }
-  return null;
-}
-function sendNotFound(res, requestedService, serviceMap) {
-  const serviceList = Array.from(serviceMap.keys()).map((key) => {
-    const parts = key.split(".");
-    if (parts.length === 1) {
-      return `<li>${parts[0]}.spcf.localhost</li>`;
-    } else {
-      return `<li>${key}.spcf.localhost</li>`;
-    }
-  }).join("\n");
-  const message = requestedService ? `No service named "${requestedService}" is running.` : "Invalid host header.";
-  res.writeHead(404, { "Content-Type": "text/html" });
-  res.end(`<!DOCTYPE html>
-<html>
-<head><title>Service Not Found</title></head>
-<body>
-  <h1>Service Not Found</h1>
-  <p>${message}</p>
-  ${serviceMap.size > 0 ? `<p>Available services:</p>
-  <ul>${serviceList}</ul>` : "<p>No services are currently exposed.</p>"}
-</body>
-</html>`);
-}
 function serveStaticFile(res, pathname) {
   if (_embeddedAdmin) {
     return serveEmbeddedFile(res, pathname);
@@ -370740,7 +370255,7 @@ function serveFileContent(res, filePath, contentType, statusCode = 200) {
     res.end("<h1>Internal Server Error</h1>");
   }
 }
-async function startAdminServer(getState) {
+async function startAdminServer(getState, listenPort = 0) {
   return new Promise((resolve52, reject) => {
     const server = http.createServer((req, res) => {
       const url = new URL(req.url || "/", "http://localhost");
@@ -370763,14 +370278,14 @@ async function startAdminServer(getState) {
       serveStaticFile(res, pathname);
     });
     server.on("error", reject);
-    server.listen(0, "127.0.0.1", () => {
+    server.listen(listenPort, "127.0.0.1", () => {
       const addr = server.address();
       if (!addr || typeof addr === "string") {
         reject(new Error("Failed to get server address"));
         return;
       }
       const port = addr.port;
-      writeLog("admin", `Admin API server started on port ${port}`);
+      writeLog("admin", `Admin server started on port ${port}`);
       resolve52({
         port,
         stop: () => new Promise((res, rej) => {
@@ -370921,7 +370436,7 @@ async function waitForTcpPort2(host, port, timeoutMs = 3e4) {
 }
 function checkTcpPort2(host, port) {
   return new Promise((resolve52) => {
-    const socket = new net3.Socket();
+    const socket = new net2.Socket();
     socket.setTimeout(1e3);
     socket.on("connect", () => {
       socket.destroy();
@@ -371159,7 +370674,7 @@ async function waitForTcpPort3(host, port, timeoutMs = 3e4) {
 }
 function checkTcpPort3(host, port) {
   return new Promise((resolve52) => {
-    const socket = new net4.Socket();
+    const socket = new net3.Socket();
     socket.setTimeout(1e3);
     socket.on("connect", () => {
       socket.destroy();
@@ -371553,7 +371068,7 @@ async function waitForTcpPort4(host, port, timeoutMs = 3e4) {
 }
 function checkTcpPort4(host, port) {
   return new Promise((resolve52) => {
-    const socket = new net5.Socket();
+    const socket = new net4.Socket();
     socket.setTimeout(1e3);
     socket.on("connect", () => {
       socket.destroy();
@@ -371821,418 +371336,86 @@ function watchConfigFile(configPath, debounceMs, onChange) {
     }
   };
 }
-function getCADir() {
-  return path12.join(os3.homedir(), ".specific", "root_ca");
-}
-var EXPECTED_DOMAIN = "spcf.localhost";
-function caFilesExist() {
-  const caDir = getCADir();
-  const keyPath = path12.join(caDir, "ca.key");
-  const certPath = path12.join(caDir, "ca.crt");
-  if (!fs11.existsSync(keyPath) || !fs11.existsSync(certPath)) {
-    return false;
-  }
-  try {
-    const certPem = fs11.readFileSync(certPath, "utf-8");
-    const cert = forge.pki.certificateFromPem(certPem);
-    const nameConstraints = cert.getExtension("nameConstraints");
-    if (!nameConstraints) {
-      return false;
-    }
-    return nameConstraints.value.includes(EXPECTED_DOMAIN);
-  } catch {
-    return false;
-  }
-}
-function caInstalledInTrustStore() {
-  if (!caFilesExist()) {
-    return false;
+var BLOCK_SIZE = 100;
+var FIRST_BLOCK_START = 3e3;
+var MAX_BLOCKS = 100;
+var BlockPortAllocator = class _BlockPortAllocator {
+  basePort;
+  nextServiceOffset = 1;
+  nextResourceOffset = BLOCK_SIZE - 1;
+  // starts at 99
+  constructor(basePort) {
+    this.basePort = basePort;
   }
-  const platform62 = os3.platform();
-  const certPath = path12.join(getCADir(), "ca.crt");
-  const diskCert = fs11.readFileSync(certPath, "utf-8").replace(/\r\n/g, "\n").trim();
-  try {
-    if (platform62 === "darwin") {
-      const keychainCert = execSync2(
-        `security find-certificate -c "Specific Local Development CA" -p "${getLoginKeychainPath()}"`,
-        { encoding: "utf-8" }
-      ).replace(/\r\n/g, "\n").trim();
-      if (keychainCert !== diskCert) {
-        return false;
-      }
-      const trustOutput = execSync2(
-        `security dump-trust-settings 2>&1`,
-        { encoding: "utf-8" }
-      );
-      const caSection = trustOutput.split("Specific Local Development CA");
-      if (caSection.length < 2) {
-        return false;
-      }
-      const afterCA = caSection[1].split(/^Cert \d+:/m)[0];
-      return afterCA.includes("Policy OID");
-    } else if (platform62 === "linux") {
-      const trustPaths = [
-        "/usr/local/share/ca-certificates/specific-local-ca.crt",
-        // Debian/Ubuntu
-        "/etc/pki/ca-trust/source/anchors/specific-local-ca.crt",
-        // RHEL/Fedora
-        "/etc/ca-certificates/trust-source/anchors/specific-local-ca.crt"
-        // Arch
-      ];
-      for (const trustPath of trustPaths) {
-        if (fs11.existsSync(trustPath)) {
-          const trustedCert = fs11.readFileSync(trustPath, "utf-8").replace(/\r\n/g, "\n").trim();
-          return trustedCert === diskCert;
-        }
+  /**
+   * Create a BlockPortAllocator by probing for an available port block.
+   */
+  static async create() {
+    for (let i = 0; i < MAX_BLOCKS; i++) {
+      const base = FIRST_BLOCK_START + i * BLOCK_SIZE;
+      if (await isPortAvailable(base)) {
+        return new _BlockPortAllocator(base);
       }
-      return false;
     }
-  } catch {
-    return false;
-  }
-  return false;
-}
-function createNameConstraintsExtension(permittedDNSNames) {
-  const nameConstraintsOID = "2.5.29.30";
-  const permittedSubtrees = permittedDNSNames.map((dnsName) => {
-    return forge.asn1.create(
-      forge.asn1.Class.UNIVERSAL,
-      forge.asn1.Type.SEQUENCE,
-      true,
-      [
-        // dNSName [2] IA5String
-        forge.asn1.create(
-          forge.asn1.Class.CONTEXT_SPECIFIC,
-          2,
-          false,
-          dnsName
-        )
-      ]
+    throw new Error(
+      `No available port block found (tried ${FIRST_BLOCK_START}\u2013${FIRST_BLOCK_START + MAX_BLOCKS * BLOCK_SIZE - 1})`
     );
-  });
-  const nameConstraints = forge.asn1.create(
-    forge.asn1.Class.UNIVERSAL,
-    forge.asn1.Type.SEQUENCE,
-    true,
-    [
-      // permittedSubtrees [0] IMPLICIT GeneralSubtrees
-      forge.asn1.create(
-        forge.asn1.Class.CONTEXT_SPECIFIC,
-        0,
-        true,
-        permittedSubtrees
-      )
-    ]
-  );
-  return {
-    id: nameConstraintsOID,
-    critical: true,
-    value: forge.asn1.toDer(nameConstraints).getBytes()
-  };
-}
-function generateRootCA() {
-  const keys = forge.pki.rsa.generateKeyPair(2048);
-  const cert = forge.pki.createCertificate();
-  cert.publicKey = keys.publicKey;
-  cert.serialNumber = "01";
-  cert.validity.notBefore = /* @__PURE__ */ new Date();
-  cert.validity.notAfter = /* @__PURE__ */ new Date();
-  cert.validity.notAfter.setFullYear(
-    cert.validity.notBefore.getFullYear() + 10
-  );
-  const attrs = [
-    { name: "commonName", value: "Specific Local Development CA" },
-    { name: "organizationName", value: "Specific" }
-  ];
-  cert.setSubject(attrs);
-  cert.setIssuer(attrs);
-  const nameConstraintsExt = createNameConstraintsExtension([
-    ".spcf.localhost",
-    "spcf.localhost"
-  ]);
-  cert.setExtensions([
-    { name: "basicConstraints", cA: true, critical: true },
-    { name: "keyUsage", keyCertSign: true, cRLSign: true, critical: true },
-    nameConstraintsExt
-  ]);
-  cert.sign(keys.privateKey, forge.md.sha256.create());
-  return {
-    key: forge.pki.privateKeyToPem(keys.privateKey),
-    cert: forge.pki.certificateToPem(cert)
-  };
-}
-function saveCA(key, cert) {
-  const caDir = getCADir();
-  fs11.mkdirSync(caDir, { recursive: true, mode: 448 });
-  const keyPath = path12.join(caDir, "ca.key");
-  const certPath = path12.join(caDir, "ca.crt");
-  fs11.writeFileSync(keyPath, key, { mode: 384 });
-  fs11.writeFileSync(certPath, cert, { mode: 420 });
-  return certPath;
-}
-function removeCA() {
-  const caDir = getCADir();
-  const keyPath = path12.join(caDir, "ca.key");
-  const certPath = path12.join(caDir, "ca.crt");
-  if (fs11.existsSync(keyPath)) {
-    fs11.unlinkSync(keyPath);
   }
-  if (fs11.existsSync(certPath)) {
-    fs11.unlinkSync(certPath);
+  getBasePort() {
+    return this.basePort;
   }
-}
-function getLoginKeychainPath() {
-  return path12.join(os3.homedir(), "Library", "Keychains", "login.keychain-db");
-}
-function getCADeleteCommand() {
-  return `security delete-certificate -c "Specific Local Development CA" "${getLoginKeychainPath()}"`;
-}
-function getCATrustCommand(certPath) {
-  return `security add-trusted-cert -r trustRoot -p ssl -p basic -k "${getLoginKeychainPath()}" "${certPath}"`;
-}
-function getCAInstallCommands(certPath) {
-  const platform62 = os3.platform();
-  if (platform62 === "darwin") {
-    return [
-      `${getCADeleteCommand()} 2>/dev/null || true`,
-      getCATrustCommand(certPath)
-    ];
-  } else if (platform62 === "linux") {
-    if (fs11.existsSync("/usr/local/share/ca-certificates")) {
-      return [
-        `cp "${certPath}" /usr/local/share/ca-certificates/specific-local-ca.crt`,
-        "update-ca-certificates"
-      ];
-    } else if (fs11.existsSync("/etc/pki/ca-trust/source/anchors")) {
-      return [
-        `cp "${certPath}" /etc/pki/ca-trust/source/anchors/specific-local-ca.crt`,
-        "update-ca-trust extract"
-      ];
-    } else if (fs11.existsSync("/etc/ca-certificates/trust-source/anchors")) {
-      return [
-        `cp "${certPath}" /etc/ca-certificates/trust-source/anchors/specific-local-ca.crt`,
-        "trust extract-compat"
-      ];
-    }
-    throw new Error("Could not detect Linux certificate trust mechanism");
+  getAdminPort() {
+    return this.basePort;
   }
-  throw new Error(`Unsupported platform: ${platform62}`);
-}
-function generateCertificate(domain, keys = []) {
-  const caDir = getCADir();
-  const caCertPem = fs11.readFileSync(path12.join(caDir, "ca.crt"), "utf-8");
-  const caKeyPem = fs11.readFileSync(path12.join(caDir, "ca.key"), "utf-8");
-  const caCert = forge.pki.certificateFromPem(caCertPem);
-  const caKey = forge.pki.privateKeyFromPem(caKeyPem);
-  const certKeys = forge.pki.rsa.generateKeyPair(2048);
-  const cert = forge.pki.createCertificate();
-  cert.publicKey = certKeys.publicKey;
-  cert.serialNumber = forge.util.bytesToHex(forge.random.getBytesSync(16));
-  cert.validity.notBefore = /* @__PURE__ */ new Date();
-  cert.validity.notAfter = /* @__PURE__ */ new Date();
-  cert.validity.notAfter.setDate(cert.validity.notBefore.getDate() + 7);
-  cert.setSubject([{ name: "commonName", value: domain }]);
-  cert.setIssuer(caCert.subject.attributes);
-  const altNames = [
-    { type: 2, value: domain },
-    { type: 2, value: `*.${domain}` }
-  ];
-  for (const key of keys) {
-    if (key !== "default") {
-      altNames.push({ type: 2, value: `*.${key}.${domain}` });
-    }
-  }
-  cert.setExtensions([
-    { name: "basicConstraints", cA: false },
-    { name: "keyUsage", digitalSignature: true, keyEncipherment: true },
-    { name: "extKeyUsage", serverAuth: true },
-    { name: "subjectAltName", altNames }
-  ]);
-  cert.sign(caKey, forge.md.sha256.create());
-  return {
-    key: Buffer.from(forge.pki.privateKeyToPem(certKeys.privateKey)),
-    cert: Buffer.from(forge.pki.certificateToPem(cert))
-  };
-}
-var DNS_PORT = 15353;
-async function startDnsServer(port = DNS_PORT) {
-  const server = DNS.createServer({
-    udp: true,
-    handle: (request, send) => {
-      const response = DNS.Packet.createResponseFromRequest(request);
-      for (const question of request.questions) {
-        if (question.type === DNS.Packet.TYPE.A) {
-          response.answers.push({
-            name: question.name,
-            type: DNS.Packet.TYPE.A,
-            class: DNS.Packet.CLASS.IN,
-            ttl: 300,
-            address: "127.0.0.1"
-          });
-        }
-      }
-      send(response);
-    }
-  });
-  await server.listen({
-    udp: { port, address: "127.0.0.1" }
-  });
-  writeLog("dns", `DNS server started on 127.0.0.1:${port}`);
-  return {
-    port,
-    async stop() {
-      await server.close();
-      writeLog("dns", "DNS server stopped");
-    }
-  };
-}
-var RESOLVER_FILE_MACOS = "/etc/resolver/spcf.localhost";
-var OLD_RESOLVER_FILE_MACOS = "/etc/resolver/local.spcf.app";
-var RESOLVER_FILE_LINUX = "/etc/systemd/resolved.conf.d/specific-local.conf";
-function resolverConfigExists() {
-  const platform62 = os4.platform();
-  if (platform62 === "darwin") {
-    return fs12.existsSync(RESOLVER_FILE_MACOS);
-  } else if (platform62 === "linux") {
-    return fs12.existsSync(RESOLVER_FILE_LINUX);
-  }
-  return false;
-}
-function getResolverInstallCommands(port) {
-  const platform62 = os4.platform();
-  if (platform62 === "darwin") {
-    return [
-      "mkdir -p /etc/resolver",
-      `rm -f ${OLD_RESOLVER_FILE_MACOS}`,
-      `printf "nameserver 127.0.0.1\\nport ${port}\\n" > ${RESOLVER_FILE_MACOS}`
-    ];
-  } else if (platform62 === "linux") {
-    if (fs12.existsSync("/etc/systemd/resolved.conf.d") || fs12.existsSync("/etc/systemd")) {
-      return [
-        "mkdir -p /etc/systemd/resolved.conf.d",
-        `printf "[Resolve]\\nDNS=127.0.0.1:${port}\\nDomains=~spcf.localhost\\n" > ${RESOLVER_FILE_LINUX}`,
-        "systemctl restart systemd-resolved"
-      ];
+  allocateServicePort() {
+    const port = this.basePort + this.nextServiceOffset;
+    this.nextServiceOffset++;
+    if (this.nextServiceOffset >= this.nextResourceOffset) {
+      throw new Error("Port block exhausted: too many services and resources");
     }
-    return [];
-  }
-  return [];
-}
-function systemSetupNeeded() {
-  return dnsSetupNeeded() || tlsSetupNeeded();
-}
-function dnsSetupNeeded() {
-  return !resolverConfigExists();
-}
-function tlsSetupNeeded() {
-  return !caInstalledInTrustStore();
-}
-function ensureCAGenerated() {
-  if (caFilesExist()) {
-    return false;
-  }
-  const { key, cert } = generateRootCA();
-  saveCA(key, cert);
-  return true;
-}
-function performDnsSetup() {
-  const commands = getResolverInstallCommands(DNS_PORT);
-  if (commands.length === 0) return;
-  if (os5.platform() === "darwin") {
-    execPrivilegedMacOS(commands);
-  } else {
-    execSync3(`sudo sh -c '${commands.join(" && ")}'`, { stdio: "inherit" });
-  }
-}
-function performTlsTrust() {
-  const wasGenerated = ensureCAGenerated();
-  const certPath = path13.join(getCADir(), "ca.crt");
-  try {
-    if (os5.platform() === "darwin") {
-      execSync3(`${getCADeleteCommand()} 2>/dev/null || true`, {
-        stdio: "inherit"
-      });
-      execSync3(getCATrustCommand(certPath), { stdio: "inherit" });
-    } else {
-      execSync3(
-        `sudo sh -c '${getCAInstallCommands(certPath).join(" && ")}'`,
-        { stdio: "inherit" }
-      );
-    }
-  } catch (err) {
-    if (wasGenerated) {
-      removeCA();
-    }
-    throw err;
-  }
-}
-function performSystemSetup() {
-  const wasGenerated = ensureCAGenerated();
-  const needsInstallCA = !caInstalledInTrustStore();
-  const needsResolver = !resolverConfigExists();
-  if (!needsInstallCA && !needsResolver) {
-    return;
-  }
-  const certPath = path13.join(getCADir(), "ca.crt");
-  const commands = [];
-  if (needsInstallCA) {
-    commands.push(...getCAInstallCommands(certPath));
-  }
-  if (needsResolver) {
-    commands.push(...getResolverInstallCommands(DNS_PORT));
-  }
-  if (commands.length === 0) {
-    return;
+    return port;
   }
-  try {
-    execSync3(`sudo sh -c '${commands.join(" && ")}'`, { stdio: "inherit" });
-  } catch (err) {
-    if (wasGenerated) {
-      removeCA();
+  allocateResourcePort() {
+    const port = this.basePort + this.nextResourceOffset;
+    this.nextResourceOffset--;
+    if (this.nextResourceOffset <= this.nextServiceOffset) {
+      throw new Error("Port block exhausted: too many services and resources");
     }
-    throw err;
+    return port;
   }
-}
-function execPrivilegedMacOS(commands) {
-  if (commands.length === 0) return;
-  const scriptPath = path13.join(os5.tmpdir(), "specific-setup.sh");
-  const appPath = path13.join(os5.tmpdir(), "Specific.app");
-  try {
-    fs13.writeFileSync(
-      scriptPath,
-      "#!/bin/sh\nset -e\n" + commands.join("\n") + "\n",
-      { mode: 448 }
-    );
-    execSync3(
-      `osacompile -o '${appPath}' -e 'do shell script "sh ${scriptPath}" with administrator privileges'`
-    );
-    execSync3(`'${appPath}/Contents/MacOS/applet'`, { stdio: "pipe" });
-  } finally {
-    try {
-      fs13.unlinkSync(scriptPath);
-    } catch {
-    }
-    try {
-      fs13.rmSync(appPath, { recursive: true });
-    } catch {
-    }
+  /**
+   * Implements PortAllocatorInterface for compatibility with resource-starter.
+   * Delegates to allocateResourcePort().
+   */
+  allocate(_key) {
+    return this.allocateResourcePort();
   }
+};
+function isPortAvailable(port) {
+  return new Promise((resolve52) => {
+    const server = net5.createServer();
+    server.once("error", () => resolve52(false));
+    server.once("listening", () => {
+      server.close(() => resolve52(true));
+    });
+    server.listen(port, "127.0.0.1");
+  });
 }
 var StableSubdomainAllocator = class {
   tunnelsDir;
   tunnelsFilePath;
   baseSlug = null;
   constructor(projectRoot, key = "default") {
-    this.tunnelsDir = path14.join(projectRoot, ".specific", "keys", key);
-    this.tunnelsFilePath = path14.join(this.tunnelsDir, "tunnels.json");
+    this.tunnelsDir = path12.join(projectRoot, ".specific", "keys", key);
+    this.tunnelsFilePath = path12.join(this.tunnelsDir, "tunnels.json");
     this.loadTunnels();
   }
   loadTunnels() {
-    if (!fs14.existsSync(this.tunnelsFilePath)) {
+    if (!fs11.existsSync(this.tunnelsFilePath)) {
       return;
     }
     try {
-      const content = fs14.readFileSync(this.tunnelsFilePath, "utf-8");
+      const content = fs11.readFileSync(this.tunnelsFilePath, "utf-8");
       const data = JSON.parse(content);
       if (data.version === 1 && data.baseSlug) {
         this.baseSlug = data.baseSlug;
@@ -372242,14 +371425,14 @@ var StableSubdomainAllocator = class {
     }
   }
   saveTunnels() {
-    if (!fs14.existsSync(this.tunnelsDir)) {
-      fs14.mkdirSync(this.tunnelsDir, { recursive: true });
+    if (!fs11.existsSync(this.tunnelsDir)) {
+      fs11.mkdirSync(this.tunnelsDir, { recursive: true });
     }
     const data = {
       version: 1,
       baseSlug: this.baseSlug
     };
-    fs14.writeFileSync(this.tunnelsFilePath, JSON.stringify(data, null, 2));
+    fs11.writeFileSync(this.tunnelsFilePath, JSON.stringify(data, null, 2));
   }
   generateBaseSlug() {
     return generateSlug(2, {
@@ -372397,382 +371580,6 @@ async function startTunnel(serviceName, endpointName, port, subdomain, callbacks
     stop: async () => tunnel.close()
   };
 }
-var ProxyRegistryManager = class {
-  proxyDir;
-  ownerPath;
-  registryPath;
-  lockPath;
-  isOwner = false;
-  registryWatcher = null;
-  constructor() {
-    this.proxyDir = path15.join(os6.homedir(), ".specific", "proxy");
-    this.ownerPath = path15.join(this.proxyDir, "owner.json");
-    this.registryPath = path15.join(this.proxyDir, "registry.json");
-    this.lockPath = path15.join(this.proxyDir, "registry.lock");
-  }
-  ensureProxyDir() {
-    if (!fs15.existsSync(this.proxyDir)) {
-      fs15.mkdirSync(this.proxyDir, { recursive: true });
-    }
-  }
-  isProcessRunning(pid) {
-    try {
-      process.kill(pid, 0);
-      return true;
-    } catch (e) {
-      const err = e;
-      return err.code !== "ESRCH";
-    }
-  }
-  /**
-   * Check if the proxy is actually listening on its expected port.
-   * This catches cases where the owner process is alive but the proxy has crashed.
-   */
-  isProxyListening(port, timeoutMs = 1e3) {
-    return new Promise((resolve52) => {
-      const socket = new net7.Socket();
-      let resolved = false;
-      const cleanup = () => {
-        if (!resolved) {
-          resolved = true;
-          socket.destroy();
-        }
-      };
-      socket.setTimeout(timeoutMs);
-      socket.on("connect", () => {
-        cleanup();
-        resolve52(true);
-      });
-      socket.on("timeout", () => {
-        cleanup();
-        resolve52(false);
-      });
-      socket.on("error", () => {
-        cleanup();
-        resolve52(false);
-      });
-      socket.connect(port, "127.0.0.1");
-    });
-  }
-  /**
-   * Check if the proxy owner is healthy (process running AND proxy listening).
-   */
-  async isProxyOwnerHealthy(owner) {
-    if (!this.isProcessRunning(owner.pid)) {
-      return false;
-    }
-    const port = owner.httpsPort ?? 443;
-    const isListening = await this.isProxyListening(port);
-    return isListening;
-  }
-  async acquireLock(timeoutMs = 5e3) {
-    this.ensureProxyDir();
-    const startTime = Date.now();
-    while (Date.now() - startTime < timeoutMs) {
-      try {
-        const fd = fs15.openSync(
-          this.lockPath,
-          fs15.constants.O_CREAT | fs15.constants.O_EXCL | fs15.constants.O_WRONLY
-        );
-        fs15.writeSync(fd, String(process.pid));
-        fs15.closeSync(fd);
-        return () => {
-          try {
-            fs15.unlinkSync(this.lockPath);
-          } catch {
-          }
-        };
-      } catch (e) {
-        const err = e;
-        if (err.code === "EEXIST") {
-          try {
-            const lockPid = parseInt(
-              fs15.readFileSync(this.lockPath, "utf-8").trim(),
-              10
-            );
-            if (!this.isProcessRunning(lockPid)) {
-              fs15.unlinkSync(this.lockPath);
-              continue;
-            }
-          } catch {
-            try {
-              fs15.unlinkSync(this.lockPath);
-            } catch {
-            }
-            continue;
-          }
-          await new Promise((resolve52) => setTimeout(resolve52, 100));
-        } else {
-          throw e;
-        }
-      }
-    }
-    throw new Error("Failed to acquire proxy registry lock (timeout)");
-  }
-  /**
-   * Try to claim ownership of the proxy.
-   * Returns true if this process is now the owner.
-   */
-  async claimProxyOwnership(key, httpsPort) {
-    const releaseLock = await this.acquireLock();
-    try {
-      if (fs15.existsSync(this.ownerPath)) {
-        const content = fs15.readFileSync(this.ownerPath, "utf-8");
-        const ownerFile2 = JSON.parse(content);
-        if (await this.isProxyOwnerHealthy(ownerFile2.owner)) {
-          return false;
-        }
-      }
-      const ownerFile = {
-        version: 1,
-        owner: {
-          pid: process.pid,
-          key,
-          startedAt: (/* @__PURE__ */ new Date()).toISOString(),
-          httpsPort
-        }
-      };
-      this.writeFileAtomic(this.ownerPath, ownerFile);
-      this.isOwner = true;
-      return true;
-    } finally {
-      releaseLock();
-    }
-  }
-  /**
-   * Release ownership of the proxy.
-   */
-  async releaseProxyOwnership() {
-    if (!this.isOwner) {
-      return;
-    }
-    const releaseLock = await this.acquireLock();
-    try {
-      if (fs15.existsSync(this.ownerPath)) {
-        const content = fs15.readFileSync(this.ownerPath, "utf-8");
-        const ownerFile = JSON.parse(content);
-        if (ownerFile.owner.pid === process.pid) {
-          fs15.unlinkSync(this.ownerPath);
-        }
-      }
-      this.isOwner = false;
-    } finally {
-      releaseLock();
-    }
-  }
-  /**
-   * Get the current proxy owner.
-   */
-  async getProxyOwner() {
-    if (!fs15.existsSync(this.ownerPath)) {
-      return null;
-    }
-    const releaseLock = await this.acquireLock();
-    try {
-      const content = fs15.readFileSync(this.ownerPath, "utf-8");
-      const ownerFile = JSON.parse(content);
-      if (!await this.isProxyOwnerHealthy(ownerFile.owner)) {
-        return null;
-      }
-      return ownerFile.owner;
-    } catch {
-      return null;
-    } finally {
-      releaseLock();
-    }
-  }
-  /**
-   * Check if this process is the proxy owner.
-   */
-  isProxyOwner() {
-    return this.isOwner;
-  }
-  /**
-   * Get the HTTPS port used by the current proxy owner.
-   * Returns 443 if unknown.
-   */
-  getProxyHttpsPort() {
-    try {
-      if (!fs15.existsSync(this.ownerPath)) return 443;
-      const content = fs15.readFileSync(this.ownerPath, "utf-8");
-      const ownerFile = JSON.parse(content);
-      return ownerFile.owner.httpsPort ?? 443;
-    } catch {
-      return 443;
-    }
-  }
-  /**
-   * Register services for a key.
-   */
-  async registerServices(key, adminPort, services, drizzleGatewayPort, temporalUiPort) {
-    const releaseLock = await this.acquireLock();
-    try {
-      const registry = this.readRegistry();
-      const registration = {
-        adminPort,
-        services
-      };
-      if (drizzleGatewayPort !== void 0) {
-        registration.drizzleGatewayPort = drizzleGatewayPort;
-      }
-      if (temporalUiPort !== void 0) {
-        registration.temporalUiPort = temporalUiPort;
-      }
-      registry.keys[key] = registration;
-      registry.lastUpdated = (/* @__PURE__ */ new Date()).toISOString();
-      this.writeFileAtomic(this.registryPath, registry);
-    } finally {
-      releaseLock();
-    }
-  }
-  /**
-   * Unregister all services for a key.
-   */
-  async unregisterServices(key) {
-    const releaseLock = await this.acquireLock();
-    try {
-      const registry = this.readRegistry();
-      delete registry.keys[key];
-      registry.lastUpdated = (/* @__PURE__ */ new Date()).toISOString();
-      this.writeFileAtomic(this.registryPath, registry);
-    } finally {
-      releaseLock();
-    }
-  }
-  /**
-   * Get all registered services (flattened view for proxy routing).
-   */
-  async getAllServices() {
-    const releaseLock = await this.acquireLock();
-    try {
-      const registry = this.readRegistry();
-      const services = [];
-      for (const [key, registration] of Object.entries(registry.keys)) {
-        for (const svc of registration.services) {
-          services.push({
-            key,
-            serviceName: svc.serviceName,
-            port: svc.port
-          });
-        }
-      }
-      return services;
-    } finally {
-      releaseLock();
-    }
-  }
-  /**
-   * Get all registered keys and their admin ports.
-   */
-  async getAllKeyRegistrations() {
-    const releaseLock = await this.acquireLock();
-    try {
-      const registry = this.readRegistry();
-      return { ...registry.keys };
-    } finally {
-      releaseLock();
-    }
-  }
-  /**
-   * Watch the registry for changes. Returns a cleanup function.
-   * Callback receives both the flattened services list and all key registrations (for admin ports).
-   * Uses chokidar with stat-polling for reliable detection of atomic file writes (rename) on macOS.
-   */
-  watchRegistry(onChange) {
-    this.ensureProxyDir();
-    if (!fs15.existsSync(this.registryPath)) {
-      const emptyRegistry = {
-        version: 1,
-        keys: {},
-        lastUpdated: (/* @__PURE__ */ new Date()).toISOString()
-      };
-      this.writeFileAtomic(this.registryPath, emptyRegistry);
-    }
-    let debounceTimer = null;
-    const triggerUpdate = () => {
-      if (debounceTimer) {
-        clearTimeout(debounceTimer);
-      }
-      debounceTimer = setTimeout(async () => {
-        try {
-          const services = await this.getAllServices();
-          const keys = await this.getAllKeyRegistrations();
-          onChange(services, keys);
-        } catch {
-        }
-      }, 50);
-    };
-    this.registryWatcher = chokidar_default.watch(this.registryPath, {
-      persistent: true,
-      usePolling: true,
-      interval: 500
-    });
-    this.registryWatcher.on("change", triggerUpdate);
-    return () => {
-      if (debounceTimer) {
-        clearTimeout(debounceTimer);
-      }
-      this.registryWatcher?.close();
-      this.registryWatcher = null;
-    };
-  }
-  /**
-   * Attempt to become the proxy owner (election).
-   * This is called when the current owner is detected as dead.
-   */
-  async attemptElection(key, httpsPort) {
-    const releaseLock = await this.acquireLock();
-    try {
-      if (fs15.existsSync(this.ownerPath)) {
-        const content = fs15.readFileSync(this.ownerPath, "utf-8");
-        const ownerFile2 = JSON.parse(content);
-        if (await this.isProxyOwnerHealthy(ownerFile2.owner)) {
-          return false;
-        }
-        fs15.unlinkSync(this.ownerPath);
-      }
-      const ownerFile = {
-        version: 1,
-        owner: {
-          pid: process.pid,
-          key,
-          startedAt: (/* @__PURE__ */ new Date()).toISOString(),
-          httpsPort
-        }
-      };
-      this.writeFileAtomic(this.ownerPath, ownerFile);
-      this.isOwner = true;
-      return true;
-    } finally {
-      releaseLock();
-    }
-  }
-  readRegistry() {
-    if (!fs15.existsSync(this.registryPath)) {
-      return {
-        version: 1,
-        keys: {},
-        lastUpdated: (/* @__PURE__ */ new Date()).toISOString()
-      };
-    }
-    try {
-      const content = fs15.readFileSync(this.registryPath, "utf-8");
-      return JSON.parse(content);
-    } catch {
-      return {
-        version: 1,
-        keys: {},
-        lastUpdated: (/* @__PURE__ */ new Date()).toISOString()
-      };
-    }
-  }
-  writeFileAtomic(filePath, data) {
-    this.ensureProxyDir();
-    const tmpPath = filePath + ".tmp";
-    fs15.writeFileSync(tmpPath, JSON.stringify(data, null, 2));
-    fs15.renameSync(tmpPath, filePath);
-  }
-};
 async function loadConfigs() {
   const { configs } = await loadLocal();
   return configs;
@@ -372872,19 +371679,14 @@ var DevEnvironment = class extends TypedEventEmitter {
   startTime = null;
   // Core managers
   stateManager = null;
-  proxyRegistry = null;
-  // Running instances (class fields replacing useRef)
-  proxy = null;
+  // Running instances
   adminServer = null;
   services = [];
   resources = /* @__PURE__ */ new Map();
   electricInstances = [];
   drizzleGateway = null;
   reshapeWatchers = [];
-  registryWatcherCleanup = null;
-  electionInterval = null;
   tunnels = [];
-  dnsServer = null;
   mailServers = /* @__PURE__ */ new Map();
   restartServices = null;
   // Config file watcher
@@ -372940,31 +371742,6 @@ var DevEnvironment = class extends TypedEventEmitter {
     this.started = true;
     this.shuttingDown = false;
     this.cancelled = false;
-    const setupNeeded = !this.tunnelEnabled && systemSetupNeeded();
-    if (setupNeeded) {
-      this.setStatus("setup");
-      this.systemLog("Setting up TLS certificates and DNS resolution");
-      try {
-        if (os7.platform() === "darwin") {
-          if (dnsSetupNeeded()) {
-            ensureCAGenerated();
-            performDnsSetup();
-          }
-          if (tlsSetupNeeded()) {
-            ensureCAGenerated();
-            performTlsTrust();
-          }
-        } else {
-          performSystemSetup();
-        }
-        this.systemLog("System setup complete");
-      } catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        this.setStatus("error");
-        this.emit("error", new Error(`System setup failed: ${msg}`));
-        return;
-      }
-    }
     return new Promise((resolve52) => {
       this.startResolve = resolve52;
       this.startInternal().then(() => {
@@ -372989,8 +371766,6 @@ var DevEnvironment = class extends TypedEventEmitter {
     if (this.shuttingDown) {
       this.systemLog("Force shutting down");
       const allProcesses = [
-        this.proxy,
-        this.dnsServer,
         ...this.services,
         ...this.electricInstances,
         this.drizzleGateway,
@@ -373022,17 +371797,7 @@ var DevEnvironment = class extends TypedEventEmitter {
       this.configWatcher.close();
       this.configWatcher = null;
     }
-    if (this.electionInterval) {
-      clearInterval(this.electionInterval);
-      this.electionInterval = null;
-    }
-    if (this.registryWatcherCleanup) {
-      this.registryWatcherCleanup();
-      this.registryWatcherCleanup = null;
-    }
     await Promise.all([
-      this.proxy?.stop(),
-      this.dnsServer?.stop(),
       this.adminServer?.stop(),
       ...this.services.map((service) => service.stop()),
       ...this.electricInstances.map((electric) => electric.stop()),
@@ -373045,16 +371810,10 @@ var DevEnvironment = class extends TypedEventEmitter {
     this.reshapeWatchers = [];
     this.restartServices = null;
     this.drizzleGateway = null;
-    this.proxy = null;
-    this.dnsServer = null;
     this.adminServer = null;
     this.services = [];
     this.resources = /* @__PURE__ */ new Map();
     this.tunnels = [];
-    if (this.proxyRegistry) {
-      await this.proxyRegistry.unregisterServices(this.instanceKey);
-      await this.proxyRegistry.releaseProxyOwnership();
-    }
     if (this.stateManager) {
       await this.stateManager.releaseOwnership();
     }
@@ -373132,17 +371891,7 @@ var DevEnvironment = class extends TypedEventEmitter {
       await this.fileAppearanceWatcher.close();
       this.fileAppearanceWatcher = null;
     }
-    if (this.electionInterval) {
-      clearInterval(this.electionInterval);
-      this.electionInterval = null;
-    }
-    if (this.registryWatcherCleanup) {
-      this.registryWatcherCleanup();
-      this.registryWatcherCleanup = null;
-    }
     await Promise.all([
-      this.proxy?.stop(),
-      this.dnsServer?.stop(),
       this.adminServer?.stop(),
       ...this.services.map((service) => service.stop()),
       ...this.electricInstances.map((electric) => electric.stop()),
@@ -373153,10 +371902,6 @@ var DevEnvironment = class extends TypedEventEmitter {
     ]);
     this.reshapeWatchers = [];
     this.restartServices = null;
-    if (this.proxyRegistry) {
-      await this.proxyRegistry.unregisterServices(this.instanceKey);
-      await this.proxyRegistry.releaseProxyOwnership();
-    }
     if (this.stateManager) {
       await this.stateManager.releaseOwnership();
     }
@@ -373171,10 +371916,10 @@ var DevEnvironment = class extends TypedEventEmitter {
   }
   // ── Private: config file watcher ───────────────────────────────────────────
   startConfigWatcher() {
-    const configPath = path16.join(this.projectDir, "specific.hcl");
+    const configPath = path13.join(this.projectDir, "specific.hcl");
     this.configWatcher = watchConfigFile(configPath, 1e3, () => {
       try {
-        const hcl = fs16.readFileSync(configPath, "utf-8");
+        const hcl = fs12.readFileSync(configPath, "utf-8");
         parseConfig(hcl).then(() => {
           this.reload();
         }).catch((err) => {
@@ -373195,8 +371940,6 @@ var DevEnvironment = class extends TypedEventEmitter {
       this.instanceKey
     );
     this.stateManager = stateManager;
-    const proxyRegistry = new ProxyRegistryManager();
-    this.proxyRegistry = proxyRegistry;
     this.systemLog("Starting dev server");
     this.setStatus("loading");
     await stateManager.cleanStaleState();
@@ -373215,8 +371958,8 @@ var DevEnvironment = class extends TypedEventEmitter {
       this.emit("error", new Error(msg));
       return;
     }
-    const configPath = path16.join(this.projectDir, "specific.hcl");
-    if (!fs16.existsSync(configPath)) {
+    const configPath = path13.join(this.projectDir, "specific.hcl");
+    if (!fs12.existsSync(configPath)) {
       this.systemLog("Waiting for specific.hcl to appear");
       this.setStatus("waiting");
       const dirWatcher = chokidar_default.watch(configPath, {
@@ -373237,7 +371980,7 @@ var DevEnvironment = class extends TypedEventEmitter {
       return;
     }
     let config;
-    const hcl = fs16.readFileSync(configPath, "utf-8");
+    const hcl = fs12.readFileSync(configPath, "utf-8");
     try {
       config = await parseConfig(hcl);
     } catch (err) {
@@ -373247,9 +371990,9 @@ var DevEnvironment = class extends TypedEventEmitter {
       return;
     }
     if (this.cancelled) return;
-    const localFilePath = path16.join(this.projectDir, "specific.local");
-    if (fs16.existsSync(localFilePath)) {
-      const localContent = fs16.readFileSync(localFilePath, "utf-8");
+    const localFilePath = path13.join(this.projectDir, "specific.local");
+    if (fs12.existsSync(localFilePath)) {
+      const localContent = fs12.readFileSync(localFilePath, "utf-8");
       try {
         await parseLocalFile(localContent);
       } catch (err) {
@@ -373296,10 +372039,8 @@ var DevEnvironment = class extends TypedEventEmitter {
       colorIndex++;
     }
     this.setStatus("starting");
-    const portAllocator = new StablePortAllocator(
-      this.projectDir,
-      this.instanceKey
-    );
+    const portAllocator = await BlockPortAllocator.create();
+    this.systemLog(`Using port block ${portAllocator.getBasePort()}\u2013${portAllocator.getBasePort() + 99}`);
     const syncDatabases = detectSyncDatabases(config);
     let resources;
     const startedElectric = [];
@@ -373368,7 +372109,7 @@ var DevEnvironment = class extends TypedEventEmitter {
         const drizzleGateway = await startDrizzleGateway(
           postgresResources,
           drizzlePort,
-          path16.join(this.projectDir, ".specific", "keys", this.instanceKey)
+          path13.join(this.projectDir, ".specific", "keys", this.instanceKey)
         );
         this.drizzleGateway = drizzleGateway;
         this.systemLog(`Database viewer ready at ${drizzleGateway.url}`);
@@ -373388,7 +372129,7 @@ var DevEnvironment = class extends TypedEventEmitter {
       if (pg.reshape?.enabled) {
         const resource = resources.get(pg.name);
         if (!resource) continue;
-        const migrationsDir = path16.resolve(
+        const migrationsDir = path13.resolve(
           this.projectDir,
           pg.reshape.migrations_dir ?? "migrations"
         );
@@ -373536,8 +372277,7 @@ Add them to the config block in specific.local`
       const endpointInfos = [];
       if (service.endpoints.length > 0) {
         for (const endpoint of service.endpoints) {
-          const portKey = endpoint.name === "default" ? `service:${service.name}` : `service:${service.name}:${endpoint.name}`;
-          const port = portAllocator.allocate(portKey);
+          const port = portAllocator.allocateServicePort();
           endpointPorts.set(endpoint.name, port);
           endpointInfos.push({
             serviceName: service.name,
@@ -373546,7 +372286,7 @@ Add them to the config block in specific.local`
           });
         }
       } else if (hasPortReference(service.env)) {
-        const port = portAllocator.allocate(`service:${service.name}`);
+        const port = portAllocator.allocateServicePort();
         endpointPorts.set("default", port);
         endpointInfos.push({
           serviceName: service.name,
@@ -373557,7 +372297,6 @@ Add them to the config block in specific.local`
       serviceEndpointPorts.set(service.name, endpointPorts);
       serviceEndpoints.set(service.name, endpointInfos);
     }
-    const serviceInfos = [];
     const exposedServices = [];
     for (const service of config.services) {
       const endpointInfos = serviceEndpoints.get(service.name) || [];
@@ -373568,16 +372307,9 @@ Add them to the config block in specific.local`
         if (endpointConfig?.public) {
           const proxyName = info.endpointName === "default" ? service.name : `${service.name}-${info.endpointName}`;
           exposedServices.push({ name: proxyName, port: info.port });
-          serviceInfos.push({
-            serviceName: proxyName,
-            port: info.port
-          });
         }
       }
     }
-    const existingOwner = await proxyRegistry.getProxyOwner();
-    const expectedHttpsPort = existingOwner ? existingOwner.httpsPort ?? 443 : await probeHttpsPort();
-    const portSuffix = expectedHttpsPort !== 443 && expectedHttpsPort !== 0 ? `:${expectedHttpsPort}` : "";
     const publicUrls = /* @__PURE__ */ new Map();
     let subdomainAllocator;
     if (this.tunnelEnabled && exposedServices.length > 0) {
@@ -373594,21 +372326,20 @@ Add them to the config block in specific.local`
         publicUrls.set(svc.name, `${subdomain}.tunnel.spcf.app`);
       }
     } else {
-      const keySuffix = this.instanceKey === "default" ? "" : `.${this.instanceKey}`;
       for (const svc of exposedServices) {
-        publicUrls.set(svc.name, `${svc.name}${keySuffix}.spcf.localhost${portSuffix}`);
+        publicUrls.set(svc.name, `localhost:${svc.port}`);
       }
     }
     const runningServices = [];
     const resolveServiceCwd = (service) => {
       if (service.root)
-        return path16.resolve(this.projectDir, service.root);
+        return path13.resolve(this.projectDir, service.root);
       if (service.build) {
         const build = config.builds.find(
           (b) => b.name === service.build.name
         );
         if (build?.root)
-          return path16.resolve(this.projectDir, build.root);
+          return path13.resolve(this.projectDir, build.root);
       }
       return this.projectDir;
     };
@@ -373806,175 +372537,13 @@ Add them to the config block in specific.local`
       drizzleGatewayPort: this.drizzleGateway?.port,
       temporalUiPort
     });
-    const adminServer = await startAdminServer(getState);
+    const adminPort = portAllocator.getAdminPort();
+    const adminServer = await startAdminServer(getState, adminPort);
     this.adminServer = adminServer;
     this.systemLog(
-      `Admin API server started on port ${adminServer.port}`
+      `Admin server started on port ${adminServer.port}`
     );
-    if (this.tunnelEnabled) {
-      this.emit("adminReady", `http://localhost:${adminServer.port}`);
-    } else {
-      const adminHost = this.instanceKey === "default" ? "" : `${this.instanceKey}.`;
-      this.emit("adminReady", `https://${adminHost}spcf.localhost${portSuffix}`);
-      await proxyRegistry.registerServices(
-        this.instanceKey,
-        adminServer.port,
-        serviceInfos,
-        this.drizzleGateway?.port,
-        temporalUiPort
-      );
-      this.systemLog(
-        `Registered ${serviceInfos.length} services with proxy registry`
-      );
-      const becameProxyOwner = await proxyRegistry.claimProxyOwnership(
-        this.instanceKey,
-        expectedHttpsPort
-      );
-      if (becameProxyOwner) {
-        this.systemLog(
-          "Claimed proxy ownership, starting HTTP proxy and DNS server"
-        );
-        try {
-          const dnsServer = await startDnsServer();
-          this.dnsServer = dnsServer;
-          const currentServices = await proxyRegistry.getAllServices();
-          const registeredKeys = [
-            ...new Set(currentServices.map((s) => s.key))
-          ];
-          const certificate = generateCertificate(
-            "spcf.localhost",
-            registeredKeys
-          );
-          const proxy = await startHttpProxy(
-            exposedServices,
-            certificate,
-            getState,
-            this.instanceKey,
-            expectedHttpsPort
-          );
-          this.proxy = proxy;
-          const knownKeys = new Set(registeredKeys);
-          this.registryWatcherCleanup = proxyRegistry.watchRegistry(
-            async (updatedServices, updatedKeys) => {
-              this.systemLog(
-                `Registry updated: ${updatedServices.length} services`
-              );
-              proxy.updateServices(updatedServices, updatedKeys);
-              const newKeyNames = Object.keys(updatedKeys).filter(
-                (k) => !knownKeys.has(k)
-              );
-              if (newKeyNames.length > 0) {
-                this.systemLog(
-                  `New keys detected: ${newKeyNames.join(", ")} - regenerating certificate`
-                );
-                for (const key of newKeyNames) {
-                  knownKeys.add(key);
-                }
-                const allKeys = [...knownKeys];
-                const newCertificate = generateCertificate(
-                  "spcf.localhost",
-                  allKeys
-                );
-                proxy.updateCertificate(newCertificate);
-              }
-            }
-          );
-          const currentKeys = await proxyRegistry.getAllKeyRegistrations();
-          proxy.updateServices(currentServices, currentKeys);
-          this.systemLog(
-            `Loaded ${currentServices.length} services from registry`
-          );
-        } catch (err) {
-          const errorMsg = `Failed to start HTTP proxy: ${err instanceof Error ? err.message : String(err)}`;
-          writeLog("system:error", errorMsg);
-          this.setStatus("error");
-          this.emit("error", new Error(errorMsg));
-          return;
-        }
-      } else {
-        this.systemLog(
-          "Another instance owns the proxy, starting election watcher"
-        );
-        const isProcessRunning = (pid) => {
-          try {
-            process.kill(pid, 0);
-            return true;
-          } catch {
-            return false;
-          }
-        };
-        this.electionInterval = setInterval(async () => {
-          if (this.cancelled || this.shuttingDown) {
-            if (this.electionInterval) {
-              clearInterval(this.electionInterval);
-              this.electionInterval = null;
-            }
-            return;
-          }
-          const owner = await proxyRegistry.getProxyOwner();
-          if (!owner || !isProcessRunning(owner.pid)) {
-            this.systemLog(
-              "Proxy owner died, attempting election"
-            );
-            const previousPort = proxyRegistry.getProxyHttpsPort();
-            const won = await proxyRegistry.attemptElection(
-              this.instanceKey,
-              previousPort
-            );
-            if (won) {
-              this.systemLog(
-                "Won election, starting HTTP proxy and DNS server"
-              );
-              if (this.electionInterval) {
-                clearInterval(this.electionInterval);
-                this.electionInterval = null;
-              }
-              try {
-                const dnsServer = await startDnsServer();
-                this.dnsServer = dnsServer;
-                const electionServices = await proxyRegistry.getAllServices();
-                const electionKeyRegistrations = await proxyRegistry.getAllKeyRegistrations();
-                const electionKeyNames = Object.keys(
-                  electionKeyRegistrations
-                );
-                const certificate = generateCertificate(
-                  "spcf.localhost",
-                  electionKeyNames
-                );
-                const proxy = await startHttpProxy(
-                  exposedServices,
-                  certificate,
-                  getState,
-                  this.instanceKey,
-                  previousPort
-                );
-                this.proxy = proxy;
-                this.registryWatcherCleanup = proxyRegistry.watchRegistry(
-                  (updatedServices, updatedKeys) => {
-                    this.systemLog(
-                      `Registry updated: ${updatedServices.length} services`
-                    );
-                    proxy.updateServices(
-                      updatedServices,
-                      updatedKeys
-                    );
-                  }
-                );
-                proxy.updateServices(
-                  electionServices,
-                  electionKeyRegistrations
-                );
-              } catch (err) {
-                writeLog(
-                  "system:error",
-                  `Failed to start proxy after election: ${err}`
-                );
-              }
-            }
-          }
-        }, 1e3);
-      }
-    }
+    this.emit("adminReady", `http://localhost:${adminServer.port}`);
     if (this.cancelled) return;
     this.systemLog("Dev server running");
     this.setStatus("running");
@@ -373984,16 +372553,16 @@ Add them to the config block in specific.local`
 };
 function isInWorktree() {
   try {
-    const commonDir = execSync4("git rev-parse --git-common-dir", {
+    const commonDir = execSync2("git rev-parse --git-common-dir", {
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "pipe"]
     }).trim();
-    const gitDir = execSync4("git rev-parse --git-dir", {
+    const gitDir = execSync2("git rev-parse --git-dir", {
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "pipe"]
     }).trim();
-    const resolvedCommonDir = path17.resolve(commonDir);
-    const resolvedGitDir = path17.resolve(gitDir);
+    const resolvedCommonDir = path14.resolve(commonDir);
+    const resolvedGitDir = path14.resolve(gitDir);
     return resolvedCommonDir !== resolvedGitDir;
   } catch {
     return false;
@@ -374004,11 +372573,11 @@ function getWorktreeName() {
     return null;
   }
   try {
-    const gitDir = execSync4("git rev-parse --git-dir", {
+    const gitDir = execSync2("git rev-parse --git-dir", {
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "pipe"]
     }).trim();
-    return path17.basename(gitDir);
+    return path14.basename(gitDir);
   } catch {
     return null;
   }
@@ -374020,12 +372589,12 @@ function getDefaultKey() {
 
 // src/lib/analytics/index.ts
 import { PostHog } from "posthog-node";
-import * as os10 from "os";
+import * as os5 from "os";
 import * as crypto3 from "crypto";
 
 // src/lib/project/config.ts
-import * as fs17 from "fs";
-import * as path18 from "path";
+import * as fs3 from "fs";
+import * as path3 from "path";
 var PROJECT_ID_FILE = ".specific/project_id";
 var ProjectNotLinkedError = class extends Error {
   constructor() {
@@ -374040,32 +372609,32 @@ Run: specific deploy`
   }
 };
 function readProjectId(projectDir = process.cwd()) {
-  const projectIdPath = path18.join(projectDir, PROJECT_ID_FILE);
-  if (!fs17.existsSync(projectIdPath)) {
+  const projectIdPath = path3.join(projectDir, PROJECT_ID_FILE);
+  if (!fs3.existsSync(projectIdPath)) {
     throw new ProjectNotLinkedError();
   }
-  const projectId = fs17.readFileSync(projectIdPath, "utf-8").trim();
+  const projectId = fs3.readFileSync(projectIdPath, "utf-8").trim();
   if (!projectId) {
     throw new Error(`${PROJECT_ID_FILE} is empty`);
   }
   return projectId;
 }
 function hasProjectId(projectDir = process.cwd()) {
-  const projectIdPath = path18.join(projectDir, PROJECT_ID_FILE);
-  return fs17.existsSync(projectIdPath);
+  const projectIdPath = path3.join(projectDir, PROJECT_ID_FILE);
+  return fs3.existsSync(projectIdPath);
 }
 function writeProjectId(projectId, projectDir = process.cwd()) {
-  const specificDir = path18.join(projectDir, ".specific");
-  if (!fs17.existsSync(specificDir)) {
-    fs17.mkdirSync(specificDir, { recursive: true });
+  const specificDir = path3.join(projectDir, ".specific");
+  if (!fs3.existsSync(specificDir)) {
+    fs3.mkdirSync(specificDir, { recursive: true });
   }
-  fs17.writeFileSync(path18.join(specificDir, "project_id"), projectId + "\n");
+  fs3.writeFileSync(path3.join(specificDir, "project_id"), projectId + "\n");
 }
 
 // src/lib/auth/credentials.ts
-import * as fs23 from "fs";
-import * as path20 from "path";
-import * as os9 from "os";
+import * as fs18 from "fs";
+import * as path16 from "path";
+import * as os4 from "os";
 
 // src/lib/auth/errors.ts
 var RefreshTokenExpiredError = class extends Error {
@@ -374307,18 +372876,18 @@ function performLogin(options2 = {}) {
 
 // src/lib/auth/credentials.ts
 function getUserCredentialsDir() {
-  return path20.join(os9.homedir(), ".specific");
+  return path16.join(os4.homedir(), ".specific");
 }
 function getCredentialsPath() {
-  return path20.join(getUserCredentialsDir(), "credentials.json");
+  return path16.join(getUserCredentialsDir(), "credentials.json");
 }
 function readUserCredentials() {
   const credentialsPath = getCredentialsPath();
-  if (!fs23.existsSync(credentialsPath)) {
+  if (!fs18.existsSync(credentialsPath)) {
     return null;
   }
   try {
-    const content = fs23.readFileSync(credentialsPath, "utf-8");
+    const content = fs18.readFileSync(credentialsPath, "utf-8");
     return JSON.parse(content);
   } catch {
     return null;
@@ -374326,18 +372895,18 @@ function readUserCredentials() {
 }
 function writeUserCredentials(credentials) {
   const dir = getUserCredentialsDir();
-  if (!fs23.existsSync(dir)) {
-    fs23.mkdirSync(dir, { recursive: true, mode: 448 });
+  if (!fs18.existsSync(dir)) {
+    fs18.mkdirSync(dir, { recursive: true, mode: 448 });
   }
   const credentialsPath = getCredentialsPath();
-  fs23.writeFileSync(credentialsPath, JSON.stringify(credentials, null, 2), {
+  fs18.writeFileSync(credentialsPath, JSON.stringify(credentials, null, 2), {
     mode: 384
   });
 }
 function clearUserCredentials() {
   const credentialsPath = getCredentialsPath();
-  if (fs23.existsSync(credentialsPath)) {
-    fs23.unlinkSync(credentialsPath);
+  if (fs18.existsSync(credentialsPath)) {
+    fs18.unlinkSync(credentialsPath);
   }
 }
 function isLoggedIn() {
@@ -374416,7 +372985,7 @@ function isEnabled() {
 }
 function getAnonymousId() {
   if (anonymousId) return anonymousId;
-  const machineId = `${os10.hostname()}-${os10.userInfo().username}`;
+  const machineId = `${os5.hostname()}-${os5.userInfo().username}`;
   anonymousId = crypto3.createHash("sha256").update(machineId).digest("hex").slice(0, 16);
   return anonymousId;
 }
@@ -374463,7 +373032,7 @@ function trackEvent(event, properties) {
     event,
     properties: {
       ...properties,
-      cli_version: "0.1.92",
+      cli_version: "0.1.93",
       platform: process.platform,
       node_version: process.version,
       project_id: getProjectId()
@@ -374494,67 +373063,67 @@ var options = [
   { id: "other", label: "Other / Manual" }
 ];
 function isGitProject() {
-  const gitPath = path21.join(process.cwd(), ".git");
-  return fs24.existsSync(gitPath);
+  const gitPath = path17.join(process.cwd(), ".git");
+  return fs19.existsSync(gitPath);
 }
 function detectExistingAgents() {
   const detected = {};
-  const cursorDir = path21.join(process.cwd(), ".cursor");
-  if (fs24.existsSync(cursorDir)) {
+  const cursorDir = path17.join(process.cwd(), ".cursor");
+  if (fs19.existsSync(cursorDir)) {
     detected["cursor"] = true;
   }
-  const claudeDir = path21.join(process.cwd(), ".claude");
-  const claudeMd = path21.join(process.cwd(), "CLAUDE.md");
-  if (fs24.existsSync(claudeDir) || fs24.existsSync(claudeMd)) {
+  const claudeDir = path17.join(process.cwd(), ".claude");
+  const claudeMd = path17.join(process.cwd(), "CLAUDE.md");
+  if (fs19.existsSync(claudeDir) || fs19.existsSync(claudeMd)) {
     detected["claude"] = true;
   }
-  const agentsMd = path21.join(process.cwd(), "AGENTS.md");
-  if (fs24.existsSync(agentsMd)) {
+  const agentsMd = path17.join(process.cwd(), "AGENTS.md");
+  if (fs19.existsSync(agentsMd)) {
     detected["codex"] = true;
   }
   return detected;
 }
 function appendOrCreateFile(filePath, content) {
-  if (fs24.existsSync(filePath)) {
-    const existing = fs24.readFileSync(filePath, "utf-8");
+  if (fs19.existsSync(filePath)) {
+    const existing = fs19.readFileSync(filePath, "utf-8");
     if (existing.includes("specific docs") || existing.includes("specific check")) {
       return "unchanged";
     }
     const separator = existing.endsWith("\n") ? "\n" : "\n\n";
-    fs24.writeFileSync(filePath, existing + separator + content + "\n");
+    fs19.writeFileSync(filePath, existing + separator + content + "\n");
     return "modified";
   } else {
-    fs24.writeFileSync(filePath, content + "\n");
+    fs19.writeFileSync(filePath, content + "\n");
     return "created";
   }
 }
 function addToGitignore() {
-  const gitignorePath = path21.join(process.cwd(), ".gitignore");
+  const gitignorePath = path17.join(process.cwd(), ".gitignore");
   const entries = [".specific", "specific.local"];
-  if (fs24.existsSync(gitignorePath)) {
-    const existing = fs24.readFileSync(gitignorePath, "utf-8");
+  if (fs19.existsSync(gitignorePath)) {
+    const existing = fs19.readFileSync(gitignorePath, "utf-8");
     const lines = existing.split("\n").map((l) => l.trim());
     const missingEntries = entries.filter((entry) => !lines.includes(entry));
     if (missingEntries.length === 0) {
       return "unchanged";
     }
     const separator = existing.endsWith("\n") ? "" : "\n";
-    fs24.writeFileSync(
+    fs19.writeFileSync(
       gitignorePath,
       existing + separator + missingEntries.join("\n") + "\n"
     );
     return "modified";
   } else {
-    fs24.writeFileSync(gitignorePath, entries.join("\n") + "\n");
+    fs19.writeFileSync(gitignorePath, entries.join("\n") + "\n");
     return "created";
   }
 }
 function configureClaudeCodePermissions() {
-  const claudeDir = path21.join(process.cwd(), ".claude");
-  const settingsPath = path21.join(claudeDir, "settings.local.json");
+  const claudeDir = path17.join(process.cwd(), ".claude");
+  const settingsPath = path17.join(claudeDir, "settings.local.json");
   const permissions = ["Bash(specific docs:*)", "Bash(specific check:*)"];
-  if (fs24.existsSync(settingsPath)) {
-    const existing = JSON.parse(fs24.readFileSync(settingsPath, "utf-8"));
+  if (fs19.existsSync(settingsPath)) {
+    const existing = JSON.parse(fs19.readFileSync(settingsPath, "utf-8"));
     const allowList = existing?.permissions?.allow || [];
     const missingPermissions = permissions.filter(
       (p) => !allowList.includes(p)
@@ -374569,39 +373138,39 @@ function configureClaudeCodePermissions() {
       existing.permissions.allow = [];
     }
     existing.permissions.allow.push(...missingPermissions);
-    fs24.writeFileSync(settingsPath, JSON.stringify(existing, null, 2) + "\n");
+    fs19.writeFileSync(settingsPath, JSON.stringify(existing, null, 2) + "\n");
     return "modified";
   }
-  if (!fs24.existsSync(claudeDir)) {
-    fs24.mkdirSync(claudeDir);
+  if (!fs19.existsSync(claudeDir)) {
+    fs19.mkdirSync(claudeDir);
   }
   const settings = {
     permissions: {
       allow: permissions
     }
   };
-  fs24.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
+  fs19.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
   return "created";
 }
 function createCursorRule() {
-  const cursorDir = path21.join(process.cwd(), ".cursor");
-  const rulesDir = path21.join(cursorDir, "rules");
-  const mdcPath = path21.join(rulesDir, "specific.mdc");
-  if (fs24.existsSync(mdcPath)) {
-    const existing = fs24.readFileSync(mdcPath, "utf-8");
+  const cursorDir = path17.join(process.cwd(), ".cursor");
+  const rulesDir = path17.join(cursorDir, "rules");
+  const mdcPath = path17.join(rulesDir, "specific.mdc");
+  if (fs19.existsSync(mdcPath)) {
+    const existing = fs19.readFileSync(mdcPath, "utf-8");
     if (existing.includes("specific docs") || existing.includes("specific check")) {
       return "unchanged";
     }
-    fs24.writeFileSync(mdcPath, CURSOR_MDC_CONTENT);
+    fs19.writeFileSync(mdcPath, CURSOR_MDC_CONTENT);
     return "modified";
   }
-  if (!fs24.existsSync(cursorDir)) {
-    fs24.mkdirSync(cursorDir);
+  if (!fs19.existsSync(cursorDir)) {
+    fs19.mkdirSync(cursorDir);
   }
-  if (!fs24.existsSync(rulesDir)) {
-    fs24.mkdirSync(rulesDir);
+  if (!fs19.existsSync(rulesDir)) {
+    fs19.mkdirSync(rulesDir);
   }
-  fs24.writeFileSync(mdcPath, CURSOR_MDC_CONTENT);
+  fs19.writeFileSync(mdcPath, CURSOR_MDC_CONTENT);
   return "created";
 }
 function configureAgents(checked) {
@@ -374617,7 +373186,7 @@ function configureAgents(checked) {
       agents.filesModified.push(".cursor/rules/specific.mdc");
   }
   if (checked["claude"]) {
-    const claudeMdPath = path21.join(process.cwd(), "CLAUDE.md");
+    const claudeMdPath = path17.join(process.cwd(), "CLAUDE.md");
     const status = appendOrCreateFile(claudeMdPath, SPECIFIC_INSTRUCTIONS);
     if (status === "created") agents.filesCreated.push("CLAUDE.md");
     else if (status === "modified") agents.filesModified.push("CLAUDE.md");
@@ -374628,7 +373197,7 @@ function configureAgents(checked) {
       agents.filesModified.push(".claude/settings.local.json");
   }
   if (checked["codex"]) {
-    const agentsMdPath = path21.join(process.cwd(), "AGENTS.md");
+    const agentsMdPath = path17.join(process.cwd(), "AGENTS.md");
     const status = appendOrCreateFile(agentsMdPath, SPECIFIC_INSTRUCTIONS);
     if (status === "created") agents.filesCreated.push("AGENTS.md");
     else if (status === "modified") agents.filesModified.push("AGENTS.md");
@@ -374643,16 +373212,6 @@ function configureAgents(checked) {
   return { agents, git, showManualInstructions: !!checked["other"] };
 }
 function getInitialSetupPhase() {
-  if (!systemSetupNeeded()) return "agents";
-  if (os11.platform() === "darwin") {
-    if (dnsSetupNeeded()) return "setup-dns";
-    if (tlsSetupNeeded()) return "setup-tls";
-    return "agents";
-  }
-  return "setup-combined";
-}
-function getNextPhase(current) {
-  if (current === "setup-dns" && tlsSetupNeeded()) return "setup-tls";
   return "agents";
 }
 function InitUI() {
@@ -374666,91 +373225,13 @@ function InitUI() {
     };
   });
   const [phase, setPhase] = useState(getInitialSetupPhase);
-  const [stepPhase, setStepPhase] = useState(
-    () => getInitialSetupPhase() === "agents" ? "done" : "prompt"
-  );
-  const [stepError, setStepError] = useState();
   const [focusedIndex, setFocusedIndex] = useState(initialState.focusedIndex);
   const [checked, setChecked] = useState(
     initialState.detected
   );
   const [result, setResult] = useState(null);
-  const [setupResult, setSetupResult] = useState(
-    () => !systemSetupNeeded() ? { dns: { status: "success" }, tls: { status: "success" } } : {}
-  );
-  useEffect(() => {
-    if (stepPhase !== "installing") return;
-    if (phase === "setup-dns") {
-      runSetupStep(
-        () => {
-          ensureCAGenerated();
-          performDnsSetup();
-        },
-        "dns"
-      );
-    } else if (phase === "setup-tls") {
-      runSetupStep(
-        () => {
-          ensureCAGenerated();
-          performTlsTrust();
-        },
-        "tls"
-      );
-    } else if (phase === "setup-combined") {
-      runSetupStep(
-        () => performSystemSetup(),
-        "combined"
-      );
-    }
-  }, [phase, stepPhase]);
-  function runSetupStep(fn, type) {
-    try {
-      fn();
-      if (type === "combined") {
-        setSetupResult((r) => ({
-          ...r,
-          dns: { status: "success" },
-          tls: { status: "success" }
-        }));
-      } else {
-        setSetupResult((r) => ({ ...r, [type]: { status: "success" } }));
-      }
-      setStepPhase("done");
-      const next = getNextPhase(phase);
-      setPhase(next);
-      if (next !== "agents") {
-        setStepPhase("prompt");
-      }
-    } catch (err) {
-      const errorMsg = err instanceof Error ? err.message : String(err);
-      if (type === "combined") {
-        setSetupResult((r) => ({
-          ...r,
-          dns: { status: "error", error: errorMsg },
-          tls: { status: "error", error: errorMsg }
-        }));
-      } else {
-        setSetupResult((r) => ({
-          ...r,
-          [type]: { status: "error", error: errorMsg }
-        }));
-      }
-      setStepError(errorMsg);
-      setStepPhase("error");
-      const next = getNextPhase(phase);
-      setPhase(next);
-      if (next !== "agents") {
-        setStepPhase("prompt");
-        setStepError(void 0);
-      }
-    }
-  }
   const isSubmitFocused = focusedIndex === options.length;
   useInput((input, key) => {
-    if ((phase === "setup-dns" || phase === "setup-tls" || phase === "setup-combined") && stepPhase === "prompt" && key.return) {
-      setStepPhase("installing");
-      return;
-    }
     if (phase !== "agents") return;
     if (key.upArrow || input === "k") {
       setFocusedIndex((prev) => Math.max(0, prev - 1));
@@ -374779,30 +373260,13 @@ function InitUI() {
       return () => clearTimeout(timer);
     }
   }, [phase, exit]);
-  if (phase === "setup-dns" || phase === "setup-tls" || phase === "setup-combined") {
-    if (stepPhase === "prompt") {
-      const isDns = phase === "setup-dns";
-      const isTls = phase === "setup-tls";
-      return /* @__PURE__ */ React2.createElement(Box2, { flexDirection: "column" }, /* @__PURE__ */ React2.createElement(Text2, { bold: true, color: "cyan" }, "Configure development environment"), /* @__PURE__ */ React2.createElement(Text2, null, " "), (isDns || phase === "setup-combined") && /* @__PURE__ */ React2.createElement(React2.Fragment, null, /* @__PURE__ */ React2.createElement(Text2, null, "We need to do a one-time setup for all your Specific projects."), /* @__PURE__ */ React2.createElement(Text2, null, "This is so we can run your apps locally with secure URLs:"), /* @__PURE__ */ React2.createElement(Text2, { bold: true, color: "green" }, "https://your-app.spcf.localhost"), /* @__PURE__ */ React2.createElement(Text2, null, " "), /* @__PURE__ */ React2.createElement(Text2, null, "You will be prompted to authorize with your password.")), isTls && /* @__PURE__ */ React2.createElement(React2.Fragment, null, /* @__PURE__ */ React2.createElement(Text2, null, "We need to trust a development certificate for HTTPS."), /* @__PURE__ */ React2.createElement(Text2, null, " "), /* @__PURE__ */ React2.createElement(Text2, null, "You will be prompted to authorize.")), /* @__PURE__ */ React2.createElement(Text2, null, " "), /* @__PURE__ */ React2.createElement(Text2, null, "Press ", /* @__PURE__ */ React2.createElement(Text2, { bold: true, color: "cyan" }, "Enter"), " to continue."));
-    }
-    if (stepPhase === "installing") {
-      return /* @__PURE__ */ React2.createElement(Box2, { flexDirection: "column" }, /* @__PURE__ */ React2.createElement(Text2, { bold: true, color: "cyan" }, "Configure development environment"), /* @__PURE__ */ React2.createElement(Text2, null, " "), /* @__PURE__ */ React2.createElement(Text2, null, "Awaiting authorization\u2026"));
-    }
-  }
   if (phase === "done") {
     const selectedAgents = Object.entries(checked).filter(([, v]) => v).length;
     const agentChanges = result && (result.agents.filesCreated.length > 0 || result.agents.filesModified.length > 0);
     const gitChanges = result?.git && (result.git.filesCreated.length > 0 || result.git.filesModified.length > 0);
-    const setupSuccess2 = (!setupResult.dns || setupResult.dns.status === "success") && (!setupResult.tls || setupResult.tls.status === "success");
-    const setupError2 = setupResult.dns?.status === "error" || setupResult.tls?.status === "error";
-    const setupErrorMsg2 = setupResult.dns?.error || setupResult.tls?.error;
-    return /* @__PURE__ */ React2.createElement(Box2, { flexDirection: "column" }, setupSuccess2 && /* @__PURE__ */ React2.createElement(Text2, null, /* @__PURE__ */ React2.createElement(Text2, { color: "green" }, "\u2713"), " TLS and DNS configured"), setupError2 && /* @__PURE__ */ React2.createElement(React2.Fragment, null, /* @__PURE__ */ React2.createElement(Text2, null, /* @__PURE__ */ React2.createElement(Text2, { color: "red" }, "\u2717"), " Failed to set up TLS and DNS"), setupErrorMsg2 && /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, "  ", setupErrorMsg2)), result && /* @__PURE__ */ React2.createElement(React2.Fragment, null, /* @__PURE__ */ React2.createElement(Text2, null, /* @__PURE__ */ React2.createElement(Text2, { color: "green" }, "\u2713"), " Coding agents configured"), result.agents.filesCreated.length > 0 && /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, " ", "Created: ", result.agents.filesCreated.join(", ")), result.agents.filesModified.length > 0 && /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, " ", "Modified: ", result.agents.filesModified.join(", ")), !agentChanges && selectedAgents > 0 && /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, " ", "No changes needed (files already configured)"), selectedAgents === 0 && /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, " No agents selected")), result?.git && /* @__PURE__ */ React2.createElement(React2.Fragment, null, /* @__PURE__ */ React2.createElement(Text2, null, /* @__PURE__ */ React2.createElement(Text2, { color: "green" }, "\u2713"), " Git configured"), result.git.filesCreated.length > 0 && /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, " ", "Created: ", result.git.filesCreated.join(", ")), result.git.filesModified.length > 0 && /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, " ", "Modified: ", result.git.filesModified.join(", ")), !gitChanges && /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, " ", "No changes needed (.gitignore already configured)")), result?.showManualInstructions && /* @__PURE__ */ React2.createElement(React2.Fragment, null, /* @__PURE__ */ React2.createElement(Text2, null, " "), /* @__PURE__ */ React2.createElement(Text2, null, /* @__PURE__ */ React2.createElement(Text2, { color: "green" }, "\u2713"), " Manual configuration selected"), /* @__PURE__ */ React2.createElement(Text2, null, " "), /* @__PURE__ */ React2.createElement(Text2, null, " Add this to your agent's system prompt:"), /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, "\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"), /* @__PURE__ */ React2.createElement(Text2, null, SPECIFIC_INSTRUCTIONS), /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, "\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"), /* @__PURE__ */ React2.createElement(Text2, null, " "), /* @__PURE__ */ React2.createElement(Text2, null, " ", "We also recommend allowing your agent to run `specific docs *`"), /* @__PURE__ */ React2.createElement(Text2, null, " and `specific check *` without confirmation.")));
+    return /* @__PURE__ */ React2.createElement(Box2, { flexDirection: "column" }, result && /* @__PURE__ */ React2.createElement(React2.Fragment, null, /* @__PURE__ */ React2.createElement(Text2, null, /* @__PURE__ */ React2.createElement(Text2, { color: "green" }, "\u2713"), " Coding agents configured"), result.agents.filesCreated.length > 0 && /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, " ", "Created: ", result.agents.filesCreated.join(", ")), result.agents.filesModified.length > 0 && /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, " ", "Modified: ", result.agents.filesModified.join(", ")), !agentChanges && selectedAgents > 0 && /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, " ", "No changes needed (files already configured)"), selectedAgents === 0 && /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, " No agents selected")), result?.git && /* @__PURE__ */ React2.createElement(React2.Fragment, null, /* @__PURE__ */ React2.createElement(Text2, null, /* @__PURE__ */ React2.createElement(Text2, { color: "green" }, "\u2713"), " Git configured"), result.git.filesCreated.length > 0 && /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, " ", "Created: ", result.git.filesCreated.join(", ")), result.git.filesModified.length > 0 && /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, " ", "Modified: ", result.git.filesModified.join(", ")), !gitChanges && /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, " ", "No changes needed (.gitignore already configured)")), result?.showManualInstructions && /* @__PURE__ */ React2.createElement(React2.Fragment, null, /* @__PURE__ */ React2.createElement(Text2, null, " "), /* @__PURE__ */ React2.createElement(Text2, null, /* @__PURE__ */ React2.createElement(Text2, { color: "green" }, "\u2713"), " Manual configuration selected"), /* @__PURE__ */ React2.createElement(Text2, null, " "), /* @__PURE__ */ React2.createElement(Text2, null, " Add this to your agent's system prompt:"), /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, "\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"), /* @__PURE__ */ React2.createElement(Text2, null, SPECIFIC_INSTRUCTIONS), /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, "\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"), /* @__PURE__ */ React2.createElement(Text2, null, " "), /* @__PURE__ */ React2.createElement(Text2, null, " ", "We also recommend allowing your agent to run `specific docs *`"), /* @__PURE__ */ React2.createElement(Text2, null, " and `specific check *` without confirmation.")));
   }
-  const setupSuccess = (!setupResult.dns || setupResult.dns.status === "success") && (!setupResult.tls || setupResult.tls.status === "success");
-  const setupError = setupResult.dns?.status === "error" || setupResult.tls?.status === "error";
-  const setupErrorMsg = setupResult.dns?.error || setupResult.tls?.error;
-  const setupLine = setupSuccess ? /* @__PURE__ */ React2.createElement(Text2, null, /* @__PURE__ */ React2.createElement(Text2, { color: "green" }, "\u2713"), " TLS and DNS configured") : setupError ? /* @__PURE__ */ React2.createElement(Text2, null, /* @__PURE__ */ React2.createElement(Text2, { color: "red" }, "\u2717"), " TLS and DNS setup failed", " ", /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, "(", setupErrorMsg, ")")) : null;
-  return /* @__PURE__ */ React2.createElement(Box2, { flexDirection: "column" }, setupLine, /* @__PURE__ */ React2.createElement(Text2, null, /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, "\u25CF"), " Configure coding agents", " ", /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, "(space to select)")), /* @__PURE__ */ React2.createElement(Text2, null, " "), options.map((option, index) => {
+  return /* @__PURE__ */ React2.createElement(Box2, { flexDirection: "column" }, /* @__PURE__ */ React2.createElement(Text2, null, /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, "\u25CF"), " Configure coding agents", " ", /* @__PURE__ */ React2.createElement(Text2, { dimColor: true }, "(space to select)")), /* @__PURE__ */ React2.createElement(Text2, null, " "), options.map((option, index) => {
     const isFocused = focusedIndex === index;
     const isChecked = checked[option.id];
     return /* @__PURE__ */ React2.createElement(Box2, { key: option.id }, /* @__PURE__ */ React2.createElement(Text2, { ...isFocused && { color: "cyan" } }, isFocused ? "\u276F " : "  ", isChecked ? "[\u2713]" : "[ ]", " ", option.label));
@@ -374872,11 +373336,6 @@ Valid agents: ${VALID_AGENT_IDS.join(", ")}`
       console.log("  No changes needed (.gitignore already configured)");
     }
   }
-  if (systemSetupNeeded()) {
-    console.log(
-      "\u26A0 TLS and DNS not configured (run `specific init` in a terminal to set up)"
-    );
-  }
   if (result.showManualInstructions) {
     console.log("\n\u2713 Manual configuration selected");
     console.log("\n  Add this to your agent's system prompt:");
@@ -374891,8 +373350,8 @@ Valid agents: ${VALID_AGENT_IDS.join(", ")}`
 }
 
 // src/commands/docs.tsx
-import { readFileSync as readFileSync12, existsSync as existsSync20 } from "fs";
-import { join as join22, dirname as dirname8 } from "path";
+import { readFileSync as readFileSync9, existsSync as existsSync17 } from "fs";
+import { join as join18, dirname as dirname8 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 
 // src/lib/beta/registry.ts
@@ -374908,16 +373367,16 @@ var BETA_REGISTRY = [
 ];
 
 // src/lib/beta/storage.ts
-import { readFileSync as readFileSync11, writeFileSync as writeFileSync11, existsSync as existsSync19, mkdirSync as mkdirSync15 } from "fs";
-import { join as join21 } from "path";
+import { readFileSync as readFileSync8, writeFileSync as writeFileSync7, existsSync as existsSync16, mkdirSync as mkdirSync12 } from "fs";
+import { join as join17 } from "path";
 var BETAS_FILE = ".specific/betas.json";
 function loadEnabledBetas(projectDir = process.cwd()) {
-  const filePath = join21(projectDir, BETAS_FILE);
-  if (!existsSync19(filePath)) {
+  const filePath = join17(projectDir, BETAS_FILE);
+  if (!existsSync16(filePath)) {
     return [];
   }
   try {
-    const content = readFileSync11(filePath, "utf-8");
+    const content = readFileSync8(filePath, "utf-8");
     const data = JSON.parse(content);
     return data.enabled ?? [];
   } catch {
@@ -374936,26 +373395,26 @@ function disableBeta(name, projectDir = process.cwd()) {
   saveBetas(enabled, projectDir);
 }
 function saveBetas(enabled, projectDir) {
-  const specificDir = join21(projectDir, ".specific");
-  if (!existsSync19(specificDir)) {
-    mkdirSync15(specificDir, { recursive: true });
+  const specificDir = join17(projectDir, ".specific");
+  if (!existsSync16(specificDir)) {
+    mkdirSync12(specificDir, { recursive: true });
   }
   const data = { enabled };
-  writeFileSync11(
-    join21(projectDir, BETAS_FILE),
+  writeFileSync7(
+    join17(projectDir, BETAS_FILE),
     JSON.stringify(data, null, 2) + "\n"
   );
 }
 
 // src/commands/docs.tsx
 var __dirname3 = dirname8(fileURLToPath3(import.meta.url));
-var docsDir = join22(__dirname3, "docs");
+var docsDir = join18(__dirname3, "docs");
 var _embeddedDocs = null;
-function docsCommand(path30) {
-  const content = resolveDocContent(path30);
+function docsCommand(path26) {
+  const content = resolveDocContent(path26);
   if (!content) {
     console.error(
-      `Documentation not found: ${path30 || "index"}
+      `Documentation not found: ${path26 || "index"}
 
 Run 'specific docs' to see available topics.`
     );
@@ -374973,33 +373432,33 @@ function filterBetaTags(content, enabledBetas) {
     }
   );
 }
-function resolveDocContent(path30) {
-  const normalized = path30?.replace(/^\/+|\/+$/g, "") || void 0;
+function resolveDocContent(path26) {
+  const normalized = path26?.replace(/^\/+|\/+$/g, "") || void 0;
   if (_embeddedDocs) {
     return resolveEmbeddedDoc(normalized);
   }
   return resolveFilesystemDoc(normalized);
 }
-function resolveEmbeddedDoc(path30) {
-  if (!path30) {
+function resolveEmbeddedDoc(path26) {
+  if (!path26) {
     return _embeddedDocs.get("index.md") ?? null;
   }
-  const direct = _embeddedDocs.get(`${path30}.md`);
+  const direct = _embeddedDocs.get(`${path26}.md`);
   if (direct) return direct;
-  return _embeddedDocs.get(`${path30}/index.md`) ?? null;
+  return _embeddedDocs.get(`${path26}/index.md`) ?? null;
 }
-function resolveFilesystemDoc(path30) {
-  if (!path30) {
-    const indexPath2 = join22(docsDir, "index.md");
-    return existsSync20(indexPath2) ? readFileSync12(indexPath2, "utf-8") : null;
+function resolveFilesystemDoc(path26) {
+  if (!path26) {
+    const indexPath2 = join18(docsDir, "index.md");
+    return existsSync17(indexPath2) ? readFileSync9(indexPath2, "utf-8") : null;
   }
-  const directPath = join22(docsDir, `${path30}.md`);
-  if (existsSync20(directPath)) {
-    return readFileSync12(directPath, "utf-8");
+  const directPath = join18(docsDir, `${path26}.md`);
+  if (existsSync17(directPath)) {
+    return readFileSync9(directPath, "utf-8");
   }
-  const indexPath = join22(docsDir, path30, "index.md");
-  if (existsSync20(indexPath)) {
-    return readFileSync12(indexPath, "utf-8");
+  const indexPath = join18(docsDir, path26, "index.md");
+  if (existsSync17(indexPath)) {
+    return readFileSync9(indexPath, "utf-8");
   }
   return null;
 }
@@ -375007,9 +373466,9 @@ function resolveFilesystemDoc(path30) {
 // src/commands/check.tsx
 import React3, { useState as useState2, useEffect as useEffect2 } from "react";
 import { render as render3, Text as Text3, Box as Box3 } from "ink";
-import Spinner3 from "ink-spinner";
-import * as fs25 from "fs";
-import * as path22 from "path";
+import Spinner2 from "ink-spinner";
+import * as fs20 from "fs";
+import * as path18 from "path";
 import { execFile as execFile7 } from "child_process";
 
 // node_modules/.pnpm/@specific+config@file+..+config/node_modules/@specific/config/dist/parser.js
@@ -375681,20 +374140,20 @@ function CheckUI() {
   const [state, setState] = useState2({ status: "loading" });
   useEffect2(() => {
     async function load() {
-      const configPath = path22.join(process.cwd(), "specific.hcl");
-      if (!fs25.existsSync(configPath)) {
+      const configPath = path18.join(process.cwd(), "specific.hcl");
+      if (!fs20.existsSync(configPath)) {
         setState({
           status: "error",
           error: "No specific.hcl found in current directory"
         });
         return;
       }
-      const hcl = fs25.readFileSync(configPath, "utf-8");
+      const hcl = fs20.readFileSync(configPath, "utf-8");
       try {
         const config2 = await parseConfig2(hcl);
-        const localPath = path22.join(process.cwd(), LOCAL_FILE);
-        if (fs25.existsSync(localPath)) {
-          const localContent = fs25.readFileSync(localPath, "utf-8");
+        const localPath = path18.join(process.cwd(), LOCAL_FILE);
+        if (fs20.existsSync(localPath)) {
+          const localContent = fs20.readFileSync(localPath, "utf-8");
           try {
             await parseLocalFile(localContent);
           } catch (localErr) {
@@ -375707,8 +374166,8 @@ function CheckUI() {
         }
         for (const build of config2.builds) {
           if (build.dockerfile) {
-            const dockerfilePath = path22.resolve(process.cwd(), build.dockerfile);
-            if (!fs25.existsSync(dockerfilePath)) {
+            const dockerfilePath = path18.resolve(process.cwd(), build.dockerfile);
+            if (!fs20.existsSync(dockerfilePath)) {
               setState({
                 status: "error",
                 error: `Build "${build.name}": Dockerfile not found at "${build.dockerfile}" (resolved to ${dockerfilePath})`
@@ -375720,11 +374179,11 @@ function CheckUI() {
         const reshapeChecks2 = [];
         for (const pg of config2.postgres) {
           if (pg.reshape?.enabled) {
-            const migrationsDir = path22.resolve(
+            const migrationsDir = path18.resolve(
               process.cwd(),
               pg.reshape.migrations_dir ?? "migrations"
             );
-            if (!fs25.existsSync(migrationsDir)) {
+            if (!fs20.existsSync(migrationsDir)) {
               reshapeChecks2.push({
                 databaseName: pg.name,
                 migrationsDir: pg.reshape.migrations_dir ?? "migrations",
@@ -375755,7 +374214,7 @@ function CheckUI() {
     load();
   }, []);
   if (state.status === "loading") {
-    return /* @__PURE__ */ React3.createElement(Box3, null, /* @__PURE__ */ React3.createElement(Text3, { color: "blue" }, /* @__PURE__ */ React3.createElement(Spinner3, { type: "dots" })), /* @__PURE__ */ React3.createElement(Text3, null, " Checking configuration..."));
+    return /* @__PURE__ */ React3.createElement(Box3, null, /* @__PURE__ */ React3.createElement(Text3, { color: "blue" }, /* @__PURE__ */ React3.createElement(Spinner2, { type: "dots" })), /* @__PURE__ */ React3.createElement(Text3, null, " Checking configuration..."));
   }
   if (state.status === "error") {
     return /* @__PURE__ */ React3.createElement(Box3, { flexDirection: "column" }, /* @__PURE__ */ React3.createElement(Text3, { color: "red" }, state.error));
@@ -375776,7 +374235,7 @@ function checkCommand() {
 // src/commands/dev.tsx
 import React6, { useState as useState5, useEffect as useEffect3, useRef } from "react";
 import { render as render4, Text as Text6, Box as Box6, useApp as useApp2, Static } from "ink";
-import Spinner4 from "ink-spinner";
+import Spinner3 from "ink-spinner";
 import { Readable as Readable2 } from "stream";
 
 // src/lib/ui/SecretInput.tsx
@@ -375873,13 +374332,7 @@ function DevUI({ instanceKey, tunnelEnabled }) {
     devEnvRef.current = devEnv;
     let currentColorMap = /* @__PURE__ */ new Map();
     devEnv.on("status", (status) => {
-      if (status === "setup") {
-        setState((s) => ({
-          ...s,
-          status: "installing-ca",
-          caInstallPhase: "installing"
-        }));
-      } else if (status === "loading") {
+      if (status === "loading") {
         setState((s) => ({ ...s, status: "loading" }));
       } else if (status === "starting") {
         const config2 = devEnv.config;
@@ -375988,20 +374441,11 @@ function DevUI({ instanceKey, tunnelEnabled }) {
       }
     });
     devEnv.on("error", (error) => {
-      setState((s) => {
-        if (s.status === "installing-ca") {
-          return {
-            ...s,
-            caInstallPhase: "error",
-            caError: error.message
-          };
-        }
-        return {
-          ...s,
-          status: "error",
-          error: error.message
-        };
-      });
+      setState((s) => ({
+        ...s,
+        status: "error",
+        error: error.message
+      }));
     });
     devEnv.on("configError", (errorStr) => {
       setState((s) => ({ ...s, parseError: errorStr }));
@@ -376116,16 +374560,8 @@ function DevUI({ instanceKey, tunnelEnabled }) {
       currentConfigIndex: void 0
     }));
   };
-  if (state.status === "installing-ca") {
-    if (state.caInstallPhase === "installing") {
-      return /* @__PURE__ */ React6.createElement(Box6, { flexDirection: "column" }, /* @__PURE__ */ React6.createElement(Text6, { bold: true, color: "cyan" }, "Configure development environment"), /* @__PURE__ */ React6.createElement(Text6, null, " "), /* @__PURE__ */ React6.createElement(Text6, null, "Awaiting authorization\u2026"));
-    }
-    if (state.caInstallPhase === "error") {
-      return /* @__PURE__ */ React6.createElement(Box6, { flexDirection: "column" }, /* @__PURE__ */ React6.createElement(Text6, { color: "red" }, "Setup failed: ", state.caError));
-    }
-  }
   if (state.status === "loading") {
-    return /* @__PURE__ */ React6.createElement(Box6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "blue" }, /* @__PURE__ */ React6.createElement(Spinner4, { type: "dots" })));
+    return /* @__PURE__ */ React6.createElement(Box6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "blue" }, /* @__PURE__ */ React6.createElement(Spinner3, { type: "dots" })));
   }
   if (state.status === "awaiting-secrets" && state.missingSecrets && state.currentSecretIndex !== void 0) {
     const currentSecret = state.missingSecrets[state.currentSecretIndex];
@@ -376152,20 +374588,20 @@ function DevUI({ instanceKey, tunnelEnabled }) {
     ));
   }
   if (state.status === "waiting") {
-    return /* @__PURE__ */ React6.createElement(Box6, { flexDirection: "column" }, /* @__PURE__ */ React6.createElement(Text6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "yellow" }, /* @__PURE__ */ React6.createElement(Spinner4, { type: "dots" })), /* @__PURE__ */ React6.createElement(Text6, null, " No specific.hcl in project yet. Go build something with your coding agent!")));
+    return /* @__PURE__ */ React6.createElement(Box6, { flexDirection: "column" }, /* @__PURE__ */ React6.createElement(Text6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "yellow" }, /* @__PURE__ */ React6.createElement(Spinner3, { type: "dots" })), /* @__PURE__ */ React6.createElement(Text6, null, " No specific.hcl in project yet. Go build something with your coding agent!")));
   }
   if (state.status === "error") {
     return /* @__PURE__ */ React6.createElement(Box6, { flexDirection: "column" }, /* @__PURE__ */ React6.createElement(Text6, { color: "red" }, state.error));
   }
   if (state.status === "stopping") {
-    return /* @__PURE__ */ React6.createElement(Box6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "yellow" }, /* @__PURE__ */ React6.createElement(Spinner4, { type: "dots" })), /* @__PURE__ */ React6.createElement(Text6, null, " Shutting down..."));
+    return /* @__PURE__ */ React6.createElement(Box6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "yellow" }, /* @__PURE__ */ React6.createElement(Spinner3, { type: "dots" })), /* @__PURE__ */ React6.createElement(Text6, null, " Shutting down..."));
   }
   if (state.status === "reloading") {
-    return /* @__PURE__ */ React6.createElement(Box6, { flexDirection: "column" }, /* @__PURE__ */ React6.createElement(Text6, null, /* @__PURE__ */ React6.createElement(Text6, { bold: true, color: "cyan" }, "Specific dev server")), /* @__PURE__ */ React6.createElement(Text6, null, " "), /* @__PURE__ */ React6.createElement(Box6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "yellow" }, /* @__PURE__ */ React6.createElement(Spinner4, { type: "dots" })), /* @__PURE__ */ React6.createElement(Text6, null, " Reloading (specific.hcl changed)...")));
+    return /* @__PURE__ */ React6.createElement(Box6, { flexDirection: "column" }, /* @__PURE__ */ React6.createElement(Text6, null, /* @__PURE__ */ React6.createElement(Text6, { bold: true, color: "cyan" }, "Specific dev server")), /* @__PURE__ */ React6.createElement(Text6, null, " "), /* @__PURE__ */ React6.createElement(Box6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "yellow" }, /* @__PURE__ */ React6.createElement(Spinner3, { type: "dots" })), /* @__PURE__ */ React6.createElement(Text6, null, " Reloading (specific.hcl changed)...")));
   }
   const { config, resources, services, output } = state;
   if (!config) {
-    return /* @__PURE__ */ React6.createElement(Box6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "blue" }, /* @__PURE__ */ React6.createElement(Spinner4, { type: "dots" })));
+    return /* @__PURE__ */ React6.createElement(Box6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "blue" }, /* @__PURE__ */ React6.createElement(Spinner3, { type: "dots" })));
   }
   if (state.status === "starting") {
     return /* @__PURE__ */ React6.createElement(Box6, { flexDirection: "column" }, /* @__PURE__ */ React6.createElement(Text6, null, /* @__PURE__ */ React6.createElement(Text6, { bold: true, color: "cyan" }, "Specific dev server"), /* @__PURE__ */ React6.createElement(Text6, { dimColor: true }, " (Ctrl+C to stop)")), /* @__PURE__ */ React6.createElement(Text6, null, " "), (config.postgres.length > 0 || config.redis.length > 0 || config.storage.length > 0 || config.temporal.length > 0) && /* @__PURE__ */ React6.createElement(React6.Fragment, null, /* @__PURE__ */ React6.createElement(Text6, { bold: true }, "Resources:"), config.postgres.map((pg) => {
@@ -376228,17 +374664,8 @@ function DevUI({ instanceKey, tunnelEnabled }) {
       const defaultPort = running?.ports.get("default");
       const portInfo = defaultPort ? ` \u2192 localhost:${defaultPort}` : "";
       return /* @__PURE__ */ React6.createElement(Text6, { key: svc.name }, /* @__PURE__ */ React6.createElement(Text6, { color: isReady ? "green" : "gray" }, " \u25CF "), /* @__PURE__ */ React6.createElement(Text6, null, svc.name, portInfo));
-    }), /* @__PURE__ */ React6.createElement(Text6, null, " ")), /* @__PURE__ */ React6.createElement(Box6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "blue" }, /* @__PURE__ */ React6.createElement(Spinner4, { type: "dots" })), /* @__PURE__ */ React6.createElement(Text6, null, " Starting...")));
+    }), /* @__PURE__ */ React6.createElement(Text6, null, " ")), /* @__PURE__ */ React6.createElement(Box6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "blue" }, /* @__PURE__ */ React6.createElement(Spinner3, { type: "dots" })), /* @__PURE__ */ React6.createElement(Text6, null, " Starting...")));
   }
-  const portSuffix = (() => {
-    if (!state.adminUrl || !state.adminUrl.startsWith("https://")) return "";
-    try {
-      const p = new URL(state.adminUrl).port;
-      return p ? `:${p}` : "";
-    } catch {
-      return "";
-    }
-  })();
   const staticItems = [
     {
       key: "title",
@@ -376287,7 +374714,7 @@ function DevUI({ instanceKey, tunnelEnabled }) {
             const proxyName = endpoint.name === "default" ? svc.name : `${svc.name}-${endpoint.name}`;
             return {
               key: `svc-${svc.name}-${endpoint.name}`,
-              content: /* @__PURE__ */ React6.createElement(Text6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "green" }, " \u25CF "), /* @__PURE__ */ React6.createElement(Text6, null, displayName), port ? endpoint.public ? /* @__PURE__ */ React6.createElement(React6.Fragment, null, /* @__PURE__ */ React6.createElement(Text6, null, " \u2192 "), /* @__PURE__ */ React6.createElement(Text6, { bold: true }, "https://", proxyName, instanceKey === "default" ? "" : `.${instanceKey}`, ".spcf.localhost", portSuffix), /* @__PURE__ */ React6.createElement(Text6, { dimColor: true }, " (localhost:", port, ")")) : /* @__PURE__ */ React6.createElement(Text6, { dimColor: true }, " (localhost:", port, ")") : null)
+              content: /* @__PURE__ */ React6.createElement(Text6, null, /* @__PURE__ */ React6.createElement(Text6, { color: "green" }, " \u25CF "), /* @__PURE__ */ React6.createElement(Text6, null, displayName), port ? endpoint.public ? /* @__PURE__ */ React6.createElement(React6.Fragment, null, /* @__PURE__ */ React6.createElement(Text6, null, " \u2192 "), /* @__PURE__ */ React6.createElement(Text6, { bold: true }, "http://localhost:", port)) : /* @__PURE__ */ React6.createElement(Text6, { dimColor: true }, " (localhost:", port, ")") : null)
             };
           });
         }),
@@ -376362,9 +374789,9 @@ function devCommand(instanceKey, tunnelEnabled = false) {
 init_open();
 import React7, { useState as useState6, useEffect as useEffect4, useCallback } from "react";
 import { render as render5, Text as Text7, Box as Box7, useApp as useApp3, useInput as useInput4 } from "ink";
-import Spinner5 from "ink-spinner";
-import * as fs26 from "fs";
-import * as path23 from "path";
+import Spinner4 from "ink-spinner";
+import * as fs21 from "fs";
+import * as path19 from "path";
 function formatBytes(bytes) {
   if (bytes < 1024) return `${bytes} B`;
   if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
@@ -376400,7 +374827,7 @@ function PhaseIndicator({
   }
   if (phaseIndex === currentIndex) {
     if (showSpinner) {
-      return /* @__PURE__ */ React7.createElement(Text7, null, "  ", /* @__PURE__ */ React7.createElement(Text7, { color: "blue" }, /* @__PURE__ */ React7.createElement(Spinner5, { type: "dots" })), " ", label);
+      return /* @__PURE__ */ React7.createElement(Text7, null, "  ", /* @__PURE__ */ React7.createElement(Text7, { color: "blue" }, /* @__PURE__ */ React7.createElement(Spinner4, { type: "dots" })), " ", label);
     }
     return /* @__PURE__ */ React7.createElement(Text7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "yellow" }, "  ", "\u25CF"), " ", label);
   }
@@ -377118,13 +375545,13 @@ function DeployUI({ environment, config }) {
     verificationUri
   } = state;
   if (phase === "checking-auth") {
-    return /* @__PURE__ */ React7.createElement(Box7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "blue" }, /* @__PURE__ */ React7.createElement(Spinner5, { type: "dots" })), /* @__PURE__ */ React7.createElement(Text7, null, " Checking authentication..."));
+    return /* @__PURE__ */ React7.createElement(Box7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "blue" }, /* @__PURE__ */ React7.createElement(Spinner4, { type: "dots" })), /* @__PURE__ */ React7.createElement(Text7, null, " Checking authentication..."));
   }
   if (phase === "logging-in") {
-    return /* @__PURE__ */ React7.createElement(Box7, { flexDirection: "column", gap: 1 }, /* @__PURE__ */ React7.createElement(Text7, { bold: true }, "Log in to Specific"), userCode ? /* @__PURE__ */ React7.createElement(React7.Fragment, null, /* @__PURE__ */ React7.createElement(Text7, null, "Your authentication code:", " ", /* @__PURE__ */ React7.createElement(Text7, { color: "cyan", bold: true }, userCode)), /* @__PURE__ */ React7.createElement(Box7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "blue" }, /* @__PURE__ */ React7.createElement(Spinner5, { type: "dots" })), /* @__PURE__ */ React7.createElement(Text7, null, " Waiting for authentication in browser...")), /* @__PURE__ */ React7.createElement(Text7, { dimColor: true }, "If the browser didn't open, visit: ", verificationUri)) : /* @__PURE__ */ React7.createElement(Box7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "blue" }, /* @__PURE__ */ React7.createElement(Spinner5, { type: "dots" })), /* @__PURE__ */ React7.createElement(Text7, null, " Initiating login...")));
+    return /* @__PURE__ */ React7.createElement(Box7, { flexDirection: "column", gap: 1 }, /* @__PURE__ */ React7.createElement(Text7, { bold: true }, "Log in to Specific"), userCode ? /* @__PURE__ */ React7.createElement(React7.Fragment, null, /* @__PURE__ */ React7.createElement(Text7, null, "Your authentication code:", " ", /* @__PURE__ */ React7.createElement(Text7, { color: "cyan", bold: true }, userCode)), /* @__PURE__ */ React7.createElement(Box7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "blue" }, /* @__PURE__ */ React7.createElement(Spinner4, { type: "dots" })), /* @__PURE__ */ React7.createElement(Text7, null, " Waiting for authentication in browser...")), /* @__PURE__ */ React7.createElement(Text7, { dimColor: true }, "If the browser didn't open, visit: ", verificationUri)) : /* @__PURE__ */ React7.createElement(Box7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "blue" }, /* @__PURE__ */ React7.createElement(Spinner4, { type: "dots" })), /* @__PURE__ */ React7.createElement(Text7, null, " Initiating login...")));
   }
   if (phase === "loading-projects") {
-    return /* @__PURE__ */ React7.createElement(Box7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "blue" }, /* @__PURE__ */ React7.createElement(Spinner5, { type: "dots" })), /* @__PURE__ */ React7.createElement(Text7, null, " Loading projects..."));
+    return /* @__PURE__ */ React7.createElement(Box7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "blue" }, /* @__PURE__ */ React7.createElement(Spinner4, { type: "dots" })), /* @__PURE__ */ React7.createElement(Text7, null, " Loading projects..."));
   }
   if (phase === "selecting-project" && projects && state.organizations && selectedIndex !== void 0) {
     const selectorItems = buildSelectorItems(projects, state.organizations);
@@ -377155,7 +375582,7 @@ function DeployUI({ environment, config }) {
     return /* @__PURE__ */ React7.createElement(NameInput, { onSubmit: handleNameSubmit, onCancel: handleNameCancel });
   }
   if (phase === "creating-project") {
-    return /* @__PURE__ */ React7.createElement(Box7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "blue" }, /* @__PURE__ */ React7.createElement(Spinner5, { type: "dots" })), /* @__PURE__ */ React7.createElement(Text7, null, " Creating project..."));
+    return /* @__PURE__ */ React7.createElement(Box7, null, /* @__PURE__ */ React7.createElement(Text7, { color: "blue" }, /* @__PURE__ */ React7.createElement(Spinner4, { type: "dots" })), /* @__PURE__ */ React7.createElement(Text7, null, " Creating project..."));
   }
   const currentSecret = missingSecrets && currentSecretIndex !== void 0 ? missingSecrets[currentSecretIndex] : void 0;
   const currentConfig = missingConfigs && currentConfigIndex !== void 0 ? missingConfigs[currentConfigIndex] : void 0;
@@ -377236,13 +375663,13 @@ function DeployUI({ environment, config }) {
   ), phase === "error" && /* @__PURE__ */ React7.createElement(Box7, { marginTop: 1, flexDirection: "column" }, deployment?.error ? /* @__PURE__ */ React7.createElement(StructuredError, { error: deployment.error }) : /* @__PURE__ */ React7.createElement(Text7, { color: "red", bold: true }, error), buildOutput && /* @__PURE__ */ React7.createElement(Box7, { flexDirection: "column", marginTop: 1 }, /* @__PURE__ */ React7.createElement(Text7, { bold: true }, "Build output:"), /* @__PURE__ */ React7.createElement(Text7, null, buildOutput))), phase === "success" && /* @__PURE__ */ React7.createElement(Box7, { marginTop: 1, flexDirection: "column" }, /* @__PURE__ */ React7.createElement(Text7, { color: "green" }, "Deployment successful!"), deployment?.publicUrls && Object.keys(deployment.publicUrls).length > 0 && /* @__PURE__ */ React7.createElement(Box7, { marginTop: 1, flexDirection: "column" }, /* @__PURE__ */ React7.createElement(Text7, { bold: true }, "Public URLs:"), Object.entries(deployment.publicUrls).map(([name, url]) => /* @__PURE__ */ React7.createElement(Text7, { key: name }, "  ", name, ": ", /* @__PURE__ */ React7.createElement(Text7, { color: "cyan" }, url))))));
 }
 async function deployCommand(environment) {
-  const configPath = path23.join(process.cwd(), "specific.hcl");
-  if (!fs26.existsSync(configPath)) {
+  const configPath = path19.join(process.cwd(), "specific.hcl");
+  if (!fs21.existsSync(configPath)) {
     console.error("Error: No specific.hcl found in current directory");
     process.exit(1);
   }
   let config;
-  const hcl = fs26.readFileSync(configPath, "utf-8");
+  const hcl = fs21.readFileSync(configPath, "utf-8");
   try {
     config = await parseConfig2(hcl);
   } catch (err) {
@@ -377263,8 +375690,8 @@ async function deployCommand(environment) {
 
 // src/commands/exec.tsx
 import { spawn as spawn6 } from "child_process";
-import * as fs27 from "fs";
-import * as path24 from "path";
+import * as fs22 from "fs";
+import * as path20 from "path";
 function startSpinner(text) {
   const frames = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
   let i = 0;
@@ -377305,13 +375732,13 @@ async function execCommand(serviceName, command, instanceKey = "default") {
       }
     }
   };
-  const configPath = path24.join(process.cwd(), "specific.hcl");
-  if (!fs27.existsSync(configPath)) {
+  const configPath = path20.join(process.cwd(), "specific.hcl");
+  if (!fs22.existsSync(configPath)) {
     console.error("Error: No specific.hcl found in current directory");
     process.exit(1);
   }
   let config;
-  const hcl = fs27.readFileSync(configPath, "utf-8");
+  const hcl = fs22.readFileSync(configPath, "utf-8");
   try {
     config = await parseConfig2(hcl);
   } catch (err) {
@@ -377448,11 +375875,11 @@ async function execCommand(serviceName, command, instanceKey = "default") {
   process.on("SIGTERM", () => handleSignal("SIGTERM"));
   let effectiveCwd = process.cwd();
   if (service.root) {
-    effectiveCwd = path24.resolve(process.cwd(), service.root);
+    effectiveCwd = path20.resolve(process.cwd(), service.root);
   } else if (service.build) {
     const build = config.builds.find((b) => b.name === service.build.name);
     if (build?.root) {
-      effectiveCwd = path24.resolve(process.cwd(), build.root);
+      effectiveCwd = path20.resolve(process.cwd(), build.root);
     }
   }
   spinner?.stop();
@@ -377481,8 +375908,8 @@ async function execCommand(serviceName, command, instanceKey = "default") {
 
 // src/commands/psql.tsx
 import { spawn as spawn7 } from "child_process";
-import * as fs28 from "fs";
-import * as path25 from "path";
+import * as fs23 from "fs";
+import * as path21 from "path";
 async function psqlCommand(databaseName, instanceKey = "default", extraArgs = []) {
   let startedResources = [];
   let ownsInstances = false;
@@ -377499,13 +375926,13 @@ async function psqlCommand(databaseName, instanceKey = "default", extraArgs = []
       }
     }
   };
-  const configPath = path25.join(process.cwd(), "specific.hcl");
-  if (!fs28.existsSync(configPath)) {
+  const configPath = path21.join(process.cwd(), "specific.hcl");
+  if (!fs23.existsSync(configPath)) {
     console.error("Error: No specific.hcl found in current directory");
     process.exit(1);
   }
   let config;
-  const hcl = fs28.readFileSync(configPath, "utf-8");
+  const hcl = fs23.readFileSync(configPath, "utf-8");
   try {
     config = await parseConfig2(hcl);
   } catch (err) {
@@ -377629,8 +376056,8 @@ async function psqlCommand(databaseName, instanceKey = "default", extraArgs = []
 
 // src/commands/reshape.tsx
 import { spawn as spawn8 } from "child_process";
-import * as fs29 from "fs";
-import * as path26 from "path";
+import * as fs24 from "fs";
+import * as path22 from "path";
 var VALID_ACTIONS = ["start", "complete", "status", "abort", "check"];
 var MIGRATION_SUBCOMMANDS = ["start", "complete", "abort"];
 var OFFLINE_ACTIONS = ["check"];
@@ -377642,13 +376069,13 @@ async function reshapeCommand(action, databaseName, instanceKey = "default") {
     process.exit(1);
   }
   const isOfflineAction = OFFLINE_ACTIONS.includes(action);
-  const configPath = path26.join(process.cwd(), "specific.hcl");
+  const configPath = path22.join(process.cwd(), "specific.hcl");
   let config;
   let migrationsDir = "migrations";
   let targetDb;
   try {
-    if (fs29.existsSync(configPath)) {
-      const configContent = fs29.readFileSync(configPath, "utf-8");
+    if (fs24.existsSync(configPath)) {
+      const configContent = fs24.readFileSync(configPath, "utf-8");
       config = await parseConfig2(configContent);
       if (databaseName) {
         const postgresConfig = config.postgres.find((p) => p.name === databaseName);
@@ -377782,9 +376209,9 @@ async function reshapeCommand(action, databaseName, instanceKey = "default") {
   }
   const isMigrationSubcommand = MIGRATION_SUBCOMMANDS.includes(action);
   const reshapeArgs = isMigrationSubcommand ? ["migration", action] : [action];
-  const fullMigrationsPath = path26.join(process.cwd(), migrationsDir);
+  const fullMigrationsPath = path22.join(process.cwd(), migrationsDir);
   if (action === "check" || action === "start") {
-    if (fs29.existsSync(fullMigrationsPath)) {
+    if (fs24.existsSync(fullMigrationsPath)) {
       reshapeArgs.push("--dirs", fullMigrationsPath);
     } else if (action === "check") {
       console.error(`Error: Migrations directory not found: ${fullMigrationsPath}`);
@@ -377833,22 +376260,22 @@ async function reshapeCommand(action, databaseName, instanceKey = "default") {
 // src/commands/clean.tsx
 import React8, { useState as useState7, useEffect as useEffect5 } from "react";
 import { render as render6, Text as Text8, Box as Box8 } from "ink";
-import Spinner6 from "ink-spinner";
-import * as fs30 from "fs";
-import * as path27 from "path";
+import Spinner5 from "ink-spinner";
+import * as fs25 from "fs";
+import * as path23 from "path";
 function CleanUI({ instanceKey }) {
   const [state, setState] = useState7({ status: "checking" });
   useEffect5(() => {
     async function clean() {
       const projectRoot = process.cwd();
-      const specificDir = path27.join(projectRoot, ".specific");
-      if (!fs30.existsSync(specificDir)) {
+      const specificDir = path23.join(projectRoot, ".specific");
+      if (!fs25.existsSync(specificDir)) {
         setState({ status: "nothing" });
         return;
       }
       if (instanceKey) {
-        const keyDir = path27.join(specificDir, "keys", instanceKey);
-        if (!fs30.existsSync(keyDir)) {
+        const keyDir = path23.join(specificDir, "keys", instanceKey);
+        if (!fs25.existsSync(keyDir)) {
           setState({ status: "nothing" });
           return;
         }
@@ -377864,7 +376291,7 @@ function CleanUI({ instanceKey }) {
         await stateManager.cleanStaleState();
         setState({ status: "cleaning" });
         try {
-          fs30.rmSync(keyDir, { recursive: true, force: true });
+          fs25.rmSync(keyDir, { recursive: true, force: true });
           setState({ status: "success" });
         } catch (err) {
           setState({
@@ -377873,13 +376300,13 @@ function CleanUI({ instanceKey }) {
           });
         }
       } else {
-        const keysDir = path27.join(specificDir, "keys");
-        if (!fs30.existsSync(keysDir)) {
+        const keysDir = path23.join(specificDir, "keys");
+        if (!fs25.existsSync(keysDir)) {
           setState({ status: "nothing" });
           return;
         }
-        const keys = fs30.readdirSync(keysDir).filter(
-          (f) => fs30.statSync(path27.join(keysDir, f)).isDirectory()
+        const keys = fs25.readdirSync(keysDir).filter(
+          (f) => fs25.statSync(path23.join(keysDir, f)).isDirectory()
         );
         for (const key of keys) {
           const stateManager2 = new InstanceStateManager(projectRoot, key);
@@ -377903,7 +376330,7 @@ function CleanUI({ instanceKey }) {
         }
         setState({ status: "cleaning" });
         try {
-          fs30.rmSync(keysDir, { recursive: true, force: true });
+          fs25.rmSync(keysDir, { recursive: true, force: true });
           setState({ status: "success" });
         } catch (err) {
           setState({
@@ -377916,10 +376343,10 @@ function CleanUI({ instanceKey }) {
     clean();
   }, [instanceKey]);
   if (state.status === "checking") {
-    return /* @__PURE__ */ React8.createElement(Box8, null, /* @__PURE__ */ React8.createElement(Text8, { color: "blue" }, /* @__PURE__ */ React8.createElement(Spinner6, { type: "dots" })), /* @__PURE__ */ React8.createElement(Text8, null, " Checking for running instances..."));
+    return /* @__PURE__ */ React8.createElement(Box8, null, /* @__PURE__ */ React8.createElement(Text8, { color: "blue" }, /* @__PURE__ */ React8.createElement(Spinner5, { type: "dots" })), /* @__PURE__ */ React8.createElement(Text8, null, " Checking for running instances..."));
   }
   if (state.status === "cleaning") {
-    return /* @__PURE__ */ React8.createElement(Box8, null, /* @__PURE__ */ React8.createElement(Text8, { color: "blue" }, /* @__PURE__ */ React8.createElement(Spinner6, { type: "dots" })), /* @__PURE__ */ React8.createElement(Text8, null, " Cleaning app data..."));
+    return /* @__PURE__ */ React8.createElement(Box8, null, /* @__PURE__ */ React8.createElement(Text8, { color: "blue" }, /* @__PURE__ */ React8.createElement(Spinner5, { type: "dots" })), /* @__PURE__ */ React8.createElement(Text8, null, " Cleaning app data..."));
   }
   if (state.status === "error") {
     return /* @__PURE__ */ React8.createElement(Text8, { color: "red" }, "Error: ", state.error);
@@ -378065,11 +376492,11 @@ function betaCommand() {
 // src/commands/update.tsx
 import React11, { useState as useState10, useEffect as useEffect8 } from "react";
 import { render as render9, Text as Text11, Box as Box10, useApp as useApp6 } from "ink";
-import Spinner7 from "ink-spinner";
+import Spinner6 from "ink-spinner";
 
 // src/lib/update.ts
-import * as fs31 from "fs";
-import * as path28 from "path";
+import * as fs26 from "fs";
+import * as path24 from "path";
 var BINARIES_BASE_URL = "https://binaries.specific.dev/cli";
 function compareVersions(a, b) {
   const partsA = a.split(".").map(Number);
@@ -378083,7 +376510,7 @@ function compareVersions(a, b) {
   return 0;
 }
 async function checkForUpdate() {
-  const currentVersion = "0.1.92";
+  const currentVersion = "0.1.93";
   const response = await fetch(`${BINARIES_BASE_URL}/latest?t=${Date.now()}`);
   if (!response.ok) {
     throw new Error(`Failed to check for updates: HTTP ${response.status}`);
@@ -378097,9 +376524,9 @@ function getCurrentBinaryPath() {
 }
 function isBinaryWritable() {
   const binaryPath = getCurrentBinaryPath();
-  const dir = path28.dirname(binaryPath);
+  const dir = path24.dirname(binaryPath);
   try {
-    fs31.accessSync(dir, fs31.constants.W_OK);
+    fs26.accessSync(dir, fs26.constants.W_OK);
     return true;
   } catch {
     return false;
@@ -378107,24 +376534,24 @@ function isBinaryWritable() {
 }
 async function performUpdate(version, onProgress) {
   const binaryPath = getCurrentBinaryPath();
-  const binaryDir = path28.dirname(binaryPath);
-  const tempPath = path28.join(binaryDir, `.specific-update-${process.pid}`);
+  const binaryDir = path24.dirname(binaryPath);
+  const tempPath = path24.join(binaryDir, `.specific-update-${process.pid}`);
   try {
-    const { platform: platform8, arch: arch3 } = getPlatformInfo();
-    const url = `${BINARIES_BASE_URL}/${version}/specific-${platform8}-${arch3}`;
+    const { platform: platform3, arch: arch3 } = getPlatformInfo();
+    const url = `${BINARIES_BASE_URL}/${version}/specific-${platform3}-${arch3}`;
     await downloadFile(url, tempPath, onProgress);
-    const stat4 = fs31.statSync(tempPath);
+    const stat4 = fs26.statSync(tempPath);
     if (stat4.size === 0) {
       throw new Error("Downloaded binary is empty");
     }
-    fs31.chmodSync(tempPath, 493);
+    fs26.chmodSync(tempPath, 493);
     onProgress?.({ phase: "finalizing" });
-    fs31.unlinkSync(binaryPath);
-    fs31.renameSync(tempPath, binaryPath);
+    fs26.unlinkSync(binaryPath);
+    fs26.renameSync(tempPath, binaryPath);
   } catch (error) {
     try {
-      if (fs31.existsSync(tempPath)) {
-        fs31.unlinkSync(tempPath);
+      if (fs26.existsSync(tempPath)) {
+        fs26.unlinkSync(tempPath);
       }
     } catch {
     }
@@ -378134,21 +376561,21 @@ async function performUpdate(version, onProgress) {
 
 // src/lib/background-update.ts
 import { spawn as spawn9 } from "child_process";
-import * as fs32 from "fs";
-import * as path29 from "path";
-import * as os12 from "os";
-var SPECIFIC_DIR = path29.join(os12.homedir(), ".specific");
-var RATE_LIMIT_FILE = path29.join(SPECIFIC_DIR, "last-update-check");
-var LOCK_FILE = path29.join(SPECIFIC_DIR, "update.lock");
+import * as fs27 from "fs";
+import * as path25 from "path";
+import * as os6 from "os";
+var SPECIFIC_DIR = path25.join(os6.homedir(), ".specific");
+var RATE_LIMIT_FILE = path25.join(SPECIFIC_DIR, "last-update-check");
+var LOCK_FILE = path25.join(SPECIFIC_DIR, "update.lock");
 var RATE_LIMIT_MS = 60 * 60 * 1e3;
 var STALE_LOCK_MS = 10 * 60 * 1e3;
 function writeCheckTimestamp() {
-  fs32.mkdirSync(SPECIFIC_DIR, { recursive: true });
-  fs32.writeFileSync(RATE_LIMIT_FILE, String(Date.now()), "utf-8");
+  fs27.mkdirSync(SPECIFIC_DIR, { recursive: true });
+  fs27.writeFileSync(RATE_LIMIT_FILE, String(Date.now()), "utf-8");
 }
 function isRateLimited() {
   try {
-    const content = fs32.readFileSync(RATE_LIMIT_FILE, "utf-8").trim();
+    const content = fs27.readFileSync(RATE_LIMIT_FILE, "utf-8").trim();
     const lastCheck = parseInt(content, 10);
     if (isNaN(lastCheck)) return false;
     return Date.now() - lastCheck < RATE_LIMIT_MS;
@@ -378247,7 +376674,7 @@ function UpdateUI() {
     }
   }, [state.phase, exit]);
   if (state.phase === "checking") {
-    return /* @__PURE__ */ React11.createElement(Box10, null, /* @__PURE__ */ React11.createElement(Text11, { color: "blue" }, /* @__PURE__ */ React11.createElement(Spinner7, { type: "dots" })), /* @__PURE__ */ React11.createElement(Text11, null, " Checking for updates..."));
+    return /* @__PURE__ */ React11.createElement(Box10, null, /* @__PURE__ */ React11.createElement(Text11, { color: "blue" }, /* @__PURE__ */ React11.createElement(Spinner6, { type: "dots" })), /* @__PURE__ */ React11.createElement(Text11, null, " Checking for updates..."));
   }
   if (state.phase === "up-to-date") {
     return /* @__PURE__ */ React11.createElement(Text11, { color: "green" }, "Already up to date (v", state.checkResult.currentVersion, ")");
@@ -378260,7 +376687,7 @@ function UpdateUI() {
     const { currentVersion, latestVersion } = state.checkResult;
     const { progress } = state;
     const progressText = progress?.percent ? ` (${progress.percent}%)` : "";
-    return /* @__PURE__ */ React11.createElement(Box10, { flexDirection: "column" }, /* @__PURE__ */ React11.createElement(Text11, null, "Updating: v", currentVersion, " \u2192 v", latestVersion), /* @__PURE__ */ React11.createElement(Box10, null, /* @__PURE__ */ React11.createElement(Text11, { color: "blue" }, /* @__PURE__ */ React11.createElement(Spinner7, { type: "dots" })), /* @__PURE__ */ React11.createElement(Text11, null, " ", progress?.phase === "finalizing" ? "Installing..." : `Downloading${progressText}`)));
+    return /* @__PURE__ */ React11.createElement(Box10, { flexDirection: "column" }, /* @__PURE__ */ React11.createElement(Text11, null, "Updating: v", currentVersion, " \u2192 v", latestVersion), /* @__PURE__ */ React11.createElement(Box10, null, /* @__PURE__ */ React11.createElement(Text11, { color: "blue" }, /* @__PURE__ */ React11.createElement(Spinner6, { type: "dots" })), /* @__PURE__ */ React11.createElement(Text11, null, " ", progress?.phase === "finalizing" ? "Installing..." : `Downloading${progressText}`)));
   }
   if (state.phase === "success") {
     const { currentVersion, latestVersion } = state.checkResult;
@@ -378282,7 +376709,7 @@ function updateCommand() {
 var program = new Command();
 var env = "production";
 var envLabel = env !== "production" ? `[${env.toUpperCase()}] ` : "";
-program.name("specific").description(`${envLabel}Infrastructure-as-code for coding agents`).version("0.1.92").enablePositionalOptions();
+program.name("specific").description(`${envLabel}Infrastructure-as-code for coding agents`).version("0.1.93").enablePositionalOptions();
 program.command("init").description("Initialize project for use with a coding agent").option("--agent <name...>", "Agents to configure (cursor, claude, codex, other)").action((options2) => initCommand(options2));
 program.command("docs [topic]").description("Fetch LLM-optimized documentation").action(docsCommand);
 program.command("check").description("Validate specific.hcl configuration").action(checkCommand);