npm - @stacksolo/cli - Versions diffs - 0.1.6 → 0.1.7 - Mend

@stacksolo/cli 0.1.6 → 0.1.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/index.js CHANGED Viewed

@@ -635,6 +635,120 @@ async function checkAndFixCloudBuildPermissions(projectId, onLog) {
   };
 }
+// src/gcp/firebase.ts
+import { exec as exec5 } from "child_process";
+import { promisify as promisify5 } from "util";
+var execAsync5 = promisify5(exec5);
+async function isFirebaseInstalled() {
+  try {
+    await execAsync5("which firebase");
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function checkFirebaseAuth() {
+  try {
+    const { stdout } = await execAsync5("firebase login:list --json 2>/dev/null");
+    const result = JSON.parse(stdout);
+    if (result.status === "success" && result.result?.length > 0) {
+      return result.result[0].user?.email || result.result[0];
+    }
+    return null;
+  } catch {
+    try {
+      const { stdout } = await execAsync5("firebase projects:list --json 2>/dev/null");
+      const result = JSON.parse(stdout);
+      if (result.status === "success") {
+        return "authenticated";
+      }
+    } catch {
+    }
+    return null;
+  }
+}
+async function addFirebaseToProject(projectId) {
+  try {
+    await execAsync5(`firebase projects:addfirebase ${projectId} 2>&1`);
+    return { success: true };
+  } catch (error) {
+    let errorMessage = "";
+    if (error && typeof error === "object" && "stdout" in error) {
+      errorMessage = String(error.stdout);
+    }
+    if (!errorMessage && error && typeof error === "object" && "stderr" in error) {
+      errorMessage = String(error.stderr);
+    }
+    if (!errorMessage) {
+      errorMessage = String(error);
+    }
+    if (errorMessage.includes("already exists") || errorMessage.includes("ALREADY_EXISTS")) {
+      return { success: true };
+    }
+    if (errorMessage.includes("PERMISSION_DENIED")) {
+      return {
+        success: false,
+        error: "Permission denied. Make sure you have Firebase Admin permissions on the GCP project."
+      };
+    }
+    if (errorMessage.includes("NOT_FOUND")) {
+      return {
+        success: false,
+        error: "GCP project not found. Make sure the project ID is correct."
+      };
+    }
+    return { success: false, error: errorMessage || "Failed to add Firebase to project" };
+  }
+}
+function getFirebaseAuthConsoleUrl(projectId) {
+  return `https://console.firebase.google.com/project/${projectId}/authentication`;
+}
+function getBillingConsoleUrl(projectId) {
+  return `https://console.cloud.google.com/billing/linkedaccount?project=${projectId}`;
+}
+async function isBillingEnabled(projectId) {
+  try {
+    const { stdout } = await execAsync5(
+      `gcloud billing projects describe ${projectId} --format="value(billingEnabled)" 2>/dev/null`
+    );
+    return stdout.trim().toLowerCase() === "true";
+  } catch {
+    return false;
+  }
+}
+function generateProjectId(name) {
+  const cleanName = name.toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "");
+  const chars = "abcdefghijklmnopqrstuvwxyz0123456789";
+  let suffix = "";
+  for (let i = 0; i < 6; i++) {
+    suffix += chars.charAt(Math.floor(Math.random() * chars.length));
+  }
+  const maxNameLen = 30 - 1 - suffix.length;
+  const truncatedName = cleanName.slice(0, maxNameLen);
+  return `${truncatedName}-${suffix}`;
+}
+function isValidProjectId(projectId) {
+  if (!projectId) {
+    return { valid: false, error: "Project ID is required" };
+  }
+  if (projectId.length < 6 || projectId.length > 30) {
+    return { valid: false, error: "Project ID must be 6-30 characters" };
+  }
+  if (!/^[a-z]/.test(projectId)) {
+    return { valid: false, error: "Project ID must start with a lowercase letter" };
+  }
+  if (!/[a-z0-9]$/.test(projectId)) {
+    return { valid: false, error: "Project ID must end with a letter or digit" };
+  }
+  if (!/^[a-z][a-z0-9-]*[a-z0-9]$/.test(projectId)) {
+    return {
+      valid: false,
+      error: "Project ID can only contain lowercase letters, digits, and hyphens"
+    };
+  }
+  return { valid: true };
+}
 // src/templates/index.ts
 import * as fs from "fs/promises";
 import * as path from "path";
@@ -3390,6 +3504,386 @@ var UI_FRAMEWORKS = [
     description: "Simple HTML/CSS/JS - no build step"
   }
 ];
+async function waitForManualStep(description, url, instruction) {
+  console.log(chalk.yellow(`
+  ${description}
+`));
+  console.log(chalk.white(`  ${url}
+`));
+  console.log(chalk.gray(`  ${instruction}
+`));
+  const { action } = await inquirer.prompt([
+    {
+      type: "list",
+      name: "action",
+      message: "What would you like to do?",
+      choices: [
+        { name: "Continue (I've completed this step)", value: "continue" },
+        { name: "Open URL and wait", value: "open" },
+        { name: "Quit and resume later", value: "quit" }
+      ]
+    }
+  ]);
+  if (action === "open") {
+    const { exec: exec16 } = await import("child_process");
+    const { promisify: promisify16 } = await import("util");
+    const execAsync16 = promisify16(exec16);
+    try {
+      const platform = process.platform;
+      if (platform === "darwin") {
+        await execAsync16(`open "${url}"`);
+      } else if (platform === "win32") {
+        await execAsync16(`start "${url}"`);
+      } else {
+        await execAsync16(`xdg-open "${url}"`);
+      }
+      console.log(chalk.gray("\n  Opened in browser. Complete the step and press Enter.\n"));
+    } catch {
+      console.log(chalk.gray("\n  Could not open browser. Please open the URL manually.\n"));
+    }
+    await inquirer.prompt([
+      {
+        type: "input",
+        name: "done",
+        message: "Press Enter when done..."
+      }
+    ]);
+    return { continue: true, retry: false };
+  }
+  if (action === "quit") {
+    return { continue: false, retry: false };
+  }
+  return { continue: true, retry: false };
+}
+async function handleCreateProject(cwd, options) {
+  console.log(chalk.cyan(BANNER));
+  console.log(chalk.bold("  Create a new GCP + Firebase project\n"));
+  console.log(chalk.gray("\u2500".repeat(75)));
+  console.log(chalk.cyan.bold("\n  Step 1: Prerequisites\n"));
+  const gcloudSpinner = ora("Checking gcloud CLI...").start();
+  if (!await isGcloudInstalled()) {
+    gcloudSpinner.fail("gcloud CLI not found");
+    console.log(chalk.red("\n  gcloud CLI is required.\n"));
+    console.log(chalk.gray("  Install: https://cloud.google.com/sdk/docs/install\n"));
+    return;
+  }
+  const authInfo = await checkGcloudAuth();
+  if (!authInfo) {
+    gcloudSpinner.fail("Not authenticated to GCP");
+    console.log(chalk.red("\n  Please authenticate first:\n"));
+    console.log(chalk.white("    gcloud auth login"));
+    console.log(chalk.white("    gcloud auth application-default login\n"));
+    return;
+  }
+  gcloudSpinner.succeed(`gcloud authenticated as ${chalk.green(authInfo.account)}`);
+  const firebaseSpinner = ora("Checking Firebase CLI...").start();
+  if (!await isFirebaseInstalled()) {
+    firebaseSpinner.fail("Firebase CLI not found");
+    console.log(chalk.red("\n  Firebase CLI is required for --create-project.\n"));
+    console.log(chalk.gray("  Install: npm install -g firebase-tools"));
+    console.log(chalk.gray("  Then run: firebase login\n"));
+    return;
+  }
+  const firebaseAuth = await checkFirebaseAuth();
+  if (!firebaseAuth) {
+    firebaseSpinner.fail("Not authenticated to Firebase");
+    console.log(chalk.red("\n  Please authenticate first:\n"));
+    console.log(chalk.white("    firebase login\n"));
+    return;
+  }
+  firebaseSpinner.succeed("Firebase CLI authenticated");
+  console.log(chalk.gray("\n\u2500".repeat(75)));
+  console.log(chalk.cyan.bold("\n  Step 2: Project Details\n"));
+  let projectName = options.name;
+  if (!projectName) {
+    const defaultName = path4.basename(cwd).toLowerCase().replace(/[^a-z0-9-]/g, "-");
+    const { name } = await inquirer.prompt([
+      {
+        type: "input",
+        name: "name",
+        message: "Project name:",
+        default: defaultName,
+        validate: (input) => {
+          if (!input) return "Project name is required";
+          if (!/^[a-z][a-z0-9-]*$/.test(input)) {
+            return "Must start with letter, only lowercase, numbers, hyphens";
+          }
+          return true;
+        }
+      }
+    ]);
+    projectName = name;
+  }
+  const suggestedId = generateProjectId(projectName);
+  const { projectId } = await inquirer.prompt([
+    {
+      type: "input",
+      name: "projectId",
+      message: "GCP Project ID:",
+      default: suggestedId,
+      validate: (input) => {
+        const result = isValidProjectId(input);
+        return result.valid || result.error || "Invalid project ID";
+      }
+    }
+  ]);
+  let region = options.region;
+  if (!region) {
+    const regions = getRegionsForProvider("gcp");
+    const { selectedRegion } = await inquirer.prompt([
+      {
+        type: "list",
+        name: "selectedRegion",
+        message: "Region:",
+        choices: regions.map((r) => ({ name: r.name, value: r.value })),
+        default: "us-central1"
+      }
+    ]);
+    region = selectedRegion;
+  }
+  console.log(chalk.gray(`
+  Project: ${chalk.white(projectName)}`));
+  console.log(chalk.gray(`  GCP ID:  ${chalk.white(projectId)}`));
+  console.log(chalk.gray(`  Region:  ${chalk.white(region)}`));
+  console.log(chalk.gray("\n\u2500".repeat(75)));
+  console.log(chalk.cyan.bold("\n  Step 3: Create GCP Project\n"));
+  const createSpinner = ora("Creating GCP project...").start();
+  const createResult = await createProject(projectId, projectName);
+  if (!createResult.success) {
+    createSpinner.fail("Failed to create project");
+    console.log(chalk.red(`
+  ${createResult.error}
+`));
+    return;
+  }
+  createSpinner.succeed(`Created GCP project: ${chalk.green(projectId)}`);
+  await setActiveProject(projectId);
+  console.log(chalk.gray("\n\u2500".repeat(75)));
+  console.log(chalk.cyan.bold("\n  Step 4: Enable Billing\n"));
+  const billingSpinner = ora("Checking billing status...").start();
+  let billingEnabled = await isBillingEnabled(projectId);
+  if (billingEnabled) {
+    billingSpinner.succeed("Billing is already enabled");
+  } else {
+    billingSpinner.stop();
+    const billingAccounts = await listBillingAccounts();
+    if (billingAccounts.length > 0) {
+      const { billingAction } = await inquirer.prompt([
+        {
+          type: "list",
+          name: "billingAction",
+          message: "Link a billing account:",
+          choices: [
+            ...billingAccounts.map((b) => ({
+              name: `${b.name} (${b.id})`,
+              value: b.id
+            })),
+            new inquirer.Separator(),
+            { name: "Configure manually in GCP Console", value: "__manual__" }
+          ]
+        }
+      ]);
+      if (billingAction !== "__manual__") {
+        const linkSpinner = ora("Linking billing account...").start();
+        const linked = await linkBillingAccount(projectId, billingAction);
+        if (linked) {
+          linkSpinner.succeed("Billing account linked");
+          billingEnabled = true;
+        } else {
+          linkSpinner.warn("Could not link billing account automatically");
+        }
+      }
+    }
+    if (!billingEnabled) {
+      const billingUrl = getBillingConsoleUrl(projectId);
+      const result = await waitForManualStep(
+        "Billing must be enabled to use GCP services.",
+        billingUrl,
+        "Link a billing account in the GCP Console, then continue."
+      );
+      if (!result.continue) {
+        console.log(chalk.yellow("\n  Project created but billing not enabled."));
+        console.log(chalk.gray(`  Resume setup later by running: stacksolo init --project-id ${projectId}
+`));
+        return;
+      }
+    }
+  }
+  console.log(chalk.gray("\n\u2500".repeat(75)));
+  console.log(chalk.cyan.bold("\n  Step 5: Enable GCP APIs\n"));
+  const apisSpinner = ora("Enabling required APIs...").start();
+  const apiResult = await enableApis(projectId, REQUIRED_APIS, (api2, success) => {
+    if (success) {
+      apisSpinner.text = `Enabled ${api2}`;
+    }
+  });
+  if (apiResult.failed.length === 0) {
+    apisSpinner.succeed(`Enabled ${apiResult.enabled.length} APIs`);
+  } else {
+    apisSpinner.warn(`Enabled ${apiResult.enabled.length} APIs, ${apiResult.failed.length} failed`);
+    console.log(chalk.yellow("  Failed APIs (may need billing):"));
+    for (const api2 of apiResult.failed) {
+      console.log(chalk.gray(`    - ${api2}`));
+    }
+  }
+  console.log(chalk.gray("\n\u2500".repeat(75)));
+  console.log(chalk.cyan.bold("\n  Step 6: Add Firebase\n"));
+  const firebaseAddSpinner = ora("Adding Firebase to project...").start();
+  const firebaseResult = await addFirebaseToProject(projectId);
+  if (!firebaseResult.success) {
+    firebaseAddSpinner.fail("Failed to add Firebase");
+    console.log(chalk.red(`
+  ${firebaseResult.error}
+`));
+    console.log(chalk.gray("  You can add Firebase manually later:"));
+    console.log(chalk.white(`    firebase projects:addfirebase ${projectId}
+`));
+  } else {
+    firebaseAddSpinner.succeed("Firebase added to project");
+  }
+  console.log(chalk.gray("\n\u2500".repeat(75)));
+  console.log(chalk.cyan.bold("\n  Step 7: Configure Firebase Authentication\n"));
+  const authUrl = getFirebaseAuthConsoleUrl(projectId);
+  const { needsAuth } = await inquirer.prompt([
+    {
+      type: "confirm",
+      name: "needsAuth",
+      message: "Do you need Firebase Authentication?",
+      default: true
+    }
+  ]);
+  if (needsAuth) {
+    const authResult = await waitForManualStep(
+      "Enable authentication providers in Firebase Console.",
+      authUrl,
+      'Click "Get Started", then enable Email/Password, Google, or other providers.'
+    );
+    if (!authResult.continue) {
+      console.log(chalk.yellow("\n  You can configure auth later at:"));
+      console.log(chalk.gray(`  ${authUrl}
+`));
+    }
+  }
+  console.log(chalk.gray("\n\u2500".repeat(75)));
+  console.log(chalk.cyan.bold("\n  Step 8: Configure Permissions\n"));
+  const policySpinner = ora("Checking org policy...").start();
+  const policyStatus = await checkOrgPolicy(projectId);
+  if (policyStatus.hasRestriction && policyStatus.canOverride) {
+    policySpinner.text = "Fixing org policy...";
+    const fixed = await fixOrgPolicy(projectId);
+    if (fixed) {
+      policySpinner.succeed("Org policy configured for public access");
+    } else {
+      policySpinner.warn("Could not update org policy - some features may be limited");
+    }
+  } else if (policyStatus.hasRestriction) {
+    policySpinner.warn("Org policy restricts public access - contact your admin");
+  } else {
+    policySpinner.succeed("No org policy restrictions");
+  }
+  const iamSpinner = ora("Configuring Cloud Build permissions...").start();
+  const iamResult = await checkAndFixCloudBuildPermissions(projectId);
+  if (iamResult.failed.length === 0) {
+    iamSpinner.succeed("Cloud Build permissions configured");
+  } else {
+    iamSpinner.warn("Some permissions could not be set");
+  }
+  console.log(chalk.gray("\n\u2500".repeat(75)));
+  console.log(chalk.cyan.bold("\n  Step 9: Generate Project Files\n"));
+  const { projectType } = await inquirer.prompt([
+    {
+      type: "list",
+      name: "projectType",
+      message: "What are you building?",
+      choices: PROJECT_TYPES.map((t) => ({
+        name: `${t.name}
+      ${chalk.gray(t.description)}`,
+        value: t.value,
+        short: t.name
+      })),
+      default: "ui-api"
+    }
+  ]);
+  let uiFramework;
+  if (projectType === "ui-api" || projectType === "ui-only") {
+    const { selectedFramework } = await inquirer.prompt([
+      {
+        type: "list",
+        name: "selectedFramework",
+        message: "Which UI framework?",
+        choices: UI_FRAMEWORKS.map((f) => ({
+          name: `${f.name}
+      ${chalk.gray(f.description)}`,
+          value: f.value,
+          short: f.name
+        })),
+        default: "react"
+      }
+    ]);
+    uiFramework = selectedFramework;
+  }
+  const generateSpinner = ora("Generating configuration...").start();
+  const config = generateConfig({
+    projectName,
+    gcpProjectId: projectId,
+    region,
+    projectType,
+    uiFramework,
+    needsDatabase: false,
+    needsBucket: false
+  });
+  if (needsAuth) {
+    config.project.gcpKernel = {
+      name: "kernel",
+      firebaseProjectId: projectId,
+      storageBucket: `${projectId}.firebasestorage.app`
+    };
+    if (!config.project.plugins) {
+      config.project.plugins = [];
+    }
+    if (!config.project.plugins.includes("@stacksolo/plugin-gcp-kernel")) {
+      config.project.plugins.push("@stacksolo/plugin-gcp-kernel");
+    }
+  }
+  await createStacksoloDir(cwd, {
+    gcpProjectId: projectId,
+    orgPolicyFixed: !policyStatus.hasRestriction || policyStatus.canOverride,
+    apisEnabled: REQUIRED_APIS
+  });
+  await createConfigFile(cwd, config);
+  const scaffoldedFiles = await scaffoldTemplates(cwd, projectType, uiFramework);
+  generateSpinner.succeed("Project files created");
+  try {
+    const registry3 = getRegistry();
+    const configPath = path4.join(cwd, ".stacksolo", "stacksolo.config.json");
+    await registry3.registerProject({
+      name: projectName,
+      gcpProjectId: projectId,
+      region,
+      configPath
+    });
+  } catch {
+  }
+  console.log(chalk.gray("\n\u2500".repeat(75)));
+  console.log(chalk.bold.green("\n  Success! Your project is ready.\n"));
+  console.log(chalk.white("  Created:"));
+  console.log(chalk.green(`    \u2713 GCP Project: ${projectId}`));
+  console.log(chalk.green(`    \u2713 Firebase Project: ${projectId}`));
+  if (needsAuth) {
+    console.log(chalk.green("    \u2713 Firebase Auth enabled"));
+  }
+  console.log(chalk.green("    \u2713 .stacksolo/stacksolo.config.json"));
+  console.log(chalk.gray("\n  Next steps:\n"));
+  console.log(chalk.white("    1. Review your config:"));
+  console.log(chalk.cyan("       cat .stacksolo/stacksolo.config.json"));
+  console.log(chalk.white("    2. Install dependencies:"));
+  console.log(chalk.cyan("       npm install"));
+  console.log(chalk.white("    3. Start development:"));
+  console.log(chalk.cyan("       stacksolo dev"));
+  console.log(chalk.white("    4. Deploy to GCP:"));
+  console.log(chalk.cyan("       stacksolo deploy"));
+  console.log("");
+}
 async function handleRemoteTemplate(cwd, options) {
   console.log(chalk.cyan(BANNER));
   console.log(chalk.bold(`  Initializing from template: ${options.template}
@@ -3600,8 +4094,11 @@ async function handleRemoteTemplate(cwd, options) {
 `));
   }
 }
-var initCommand = new Command("init").description("Initialize a new StackSolo project").option("-n, --name <name>", "Project name").option("--project-id <id>", "GCP project ID").option("-r, --region <region>", "Region").option("-t, --template <template>", "Project template (function-api, container-api, firebase-app, etc.)").option("-y, --yes", "Skip prompts and use defaults").option("--skip-org-policy", "Skip org policy check and fix").option("--skip-apis", "Skip enabling GCP APIs").option("--list-templates", "List available remote templates").action(async (options) => {
+var initCommand = new Command("init").description("Initialize a new StackSolo project").option("-n, --name <name>", "Project name").option("--project-id <id>", "GCP project ID").option("-r, --region <region>", "Region").option("-t, --template <template>", "Project template (function-api, container-api, firebase-app, etc.)").option("-y, --yes", "Skip prompts and use defaults").option("--skip-org-policy", "Skip org policy check and fix").option("--skip-apis", "Skip enabling GCP APIs").option("--list-templates", "List available remote templates").option("--create-project", "Create a new GCP + Firebase project").action(async (options) => {
   const cwd = process.cwd();
+  if (options.createProject) {
+    return await handleCreateProject(cwd, options);
+  }
   if (options.listTemplates) {
     const spinner = ora("Fetching available templates...").start();
     try {
@@ -4717,7 +5214,7 @@ function resolveContainer(container, networkName, defaultRegion, networkId, regi
   }
   return {
     id: `container-${container.name}`,
-    type: "gcp:cloud_run",
+    type: "gcp-cdktf:cloud_run",
     name: container.name,
     config: {
       name: container.name,
@@ -4775,7 +5272,7 @@ function resolveFunction(fn, networkName, defaultRegion, networkId, registryId)
   }
   return {
     id: `function-${fn.name}`,
-    type: "gcp:cloud_function",
+    type: "gcp-cdktf:cloud_function",
     name: fn.name,
     config: {
       name: fn.name,
@@ -5091,6 +5588,10 @@ function resolveCdktfConfig(config, projectInfo) {
     const functionId = `function-${fn.name}`;
     functionIds.push(functionId);
     functionNames.push(functionName);
+    const functionEnv = {
+      ...hasGcpKernel ? { GOOGLE_CLOUD_PROJECT: projectInfo.gcpProjectId } : {},
+      ...fn.env
+    };
     resources.push({
       id: functionId,
       type: "gcp-cdktf:cloud_function",
@@ -5108,7 +5609,8 @@ function resolveCdktfConfig(config, projectInfo) {
         vpcConnector: connectorName,
         allowUnauthenticated: fn.allowUnauthenticated ?? true,
         projectId: projectInfo.gcpProjectId,
-        projectName: projectInfo.name
+        projectName: projectInfo.name,
+        environmentVariables: Object.keys(functionEnv).length > 0 ? functionEnv : void 0
       },
       dependsOn: [connectorId],
       network: network.name
@@ -9197,17 +9699,17 @@ import ora4 from "ora";
 import * as path14 from "path";
 import * as fs11 from "fs/promises";
 import { homedir as homedir3 } from "os";
-import { spawn as spawn4, exec as exec10 } from "child_process";
-import { promisify as promisify10 } from "util";
+import { spawn as spawn4, exec as exec11 } from "child_process";
+import { promisify as promisify11 } from "util";
 // src/services/deploy.service.ts
 import * as fs7 from "fs/promises";
 import * as path9 from "path";
-import { exec as exec5, spawn as spawn2 } from "child_process";
-import { promisify as promisify5 } from "util";
+import { exec as exec6, spawn as spawn2 } from "child_process";
+import { promisify as promisify6 } from "util";
 init_plugin_loader_service();
 import { registry as registry2 } from "@stacksolo/core";
-var execAsync5 = promisify5(exec5);
+var execAsync6 = promisify6(exec6);
 async function execStreaming(command, options = {}) {
   return new Promise((resolve7, reject) => {
     const { cwd, onOutput, timeout = 3e5 } = options;
@@ -9267,7 +9769,11 @@ async function deployConfig(config, _stateDir, options = {}) {
   };
   try {
     if (!pluginsLoaded) {
-      await loadPlugins(config.project.plugins);
+      const pluginsToLoad = [...config.project.plugins || []];
+      if (config.project.gcpKernel && !pluginsToLoad.includes("@stacksolo/plugin-gcp-kernel")) {
+        pluginsToLoad.push("@stacksolo/plugin-gcp-kernel");
+      }
+      await loadPlugins(pluginsToLoad);
       pluginsLoaded = true;
     }
     const resolved = resolveConfig(config);
@@ -9329,11 +9835,11 @@ async function deployConfig(config, _stateDir, options = {}) {
           await fs7.access(nodeModulesPath);
         } catch {
           log(`Installing dependencies for ${fnName}...`);
-          await execAsync5("npm install", { cwd: sourceDir, timeout: 12e4 });
+          await execAsync6("npm install", { cwd: sourceDir, timeout: 12e4 });
         }
         if (packageJson2.scripts?.build) {
           log(`Building ${fnName} (TypeScript)...`);
-          await execAsync5("npm run build", { cwd: sourceDir, timeout: 6e4 });
+          await execAsync6("npm run build", { cwd: sourceDir, timeout: 6e4 });
           isTypeScriptProject = true;
         }
       } catch {
@@ -9342,7 +9848,7 @@ async function deployConfig(config, _stateDir, options = {}) {
         const distDir = path9.join(sourceDir, "dist");
         const stagingDir = path9.join(workDir, `staging-${fnName}`);
         await fs7.mkdir(stagingDir, { recursive: true });
-        await execAsync5(`cp -r "${distDir}"/* "${stagingDir}"/`, { timeout: 3e4 });
+        await execAsync6(`cp -r "${distDir}"/* "${stagingDir}"/`, { timeout: 3e4 });
         const pkgContent = await fs7.readFile(packageJsonPath, "utf-8");
         const pkg2 = JSON.parse(pkgContent);
         if (pkg2.main && pkg2.main.startsWith("dist/")) {
@@ -9355,10 +9861,10 @@ async function deployConfig(config, _stateDir, options = {}) {
         }
         delete pkg2.devDependencies;
         await fs7.writeFile(path9.join(stagingDir, "package.json"), JSON.stringify(pkg2, null, 2));
-        await execAsync5(`cd "${stagingDir}" && zip -r "${sourceZipPath}" .`, { timeout: 6e4 });
+        await execAsync6(`cd "${stagingDir}" && zip -r "${sourceZipPath}" .`, { timeout: 6e4 });
         await fs7.rm(stagingDir, { recursive: true, force: true });
       } else {
-        await execAsync5(`cd "${sourceDir}" && zip -r "${sourceZipPath}" . -x "*.git*" -x "node_modules/*"`, { timeout: 6e4 });
+        await execAsync6(`cd "${sourceDir}" && zip -r "${sourceZipPath}" . -x "*.git*" -x "node_modules/*"`, { timeout: 6e4 });
       }
       sourceZips.push({ name: fnName, zipPath: sourceZipPath });
     }
@@ -9366,7 +9872,7 @@ async function deployConfig(config, _stateDir, options = {}) {
     if (!preview && gcpKernelResources.length > 0) {
       log(`Configuring Docker authentication for gcr.io...`);
       try {
-        await execAsync5(`gcloud auth configure-docker gcr.io --quiet`, { timeout: 3e4 });
+        await execAsync6(`gcloud auth configure-docker gcr.io --quiet`, { timeout: 3e4 });
       } catch (error) {
         log(`Warning: Failed to configure Docker auth for GCR: ${error instanceof Error ? error.message : error}`);
       }
@@ -9407,11 +9913,11 @@ async function deployConfig(config, _stateDir, options = {}) {
             await fs7.access(nodeModulesPath);
           } catch {
             log(`Installing dependencies for GCP Kernel...`);
-            await execAsync5("npm install", { cwd: kernelSourceDir, timeout: 12e4 });
+            await execAsync6("npm install", { cwd: kernelSourceDir, timeout: 12e4 });
           }
           if (pkg2.scripts?.build) {
             log(`Building GCP Kernel TypeScript...`);
-            await execAsync5("npm run build", { cwd: kernelSourceDir, timeout: 6e4 });
+            await execAsync6("npm run build", { cwd: kernelSourceDir, timeout: 6e4 });
           }
         } catch (buildError) {
           log(`Warning: Could not build kernel TypeScript: ${buildError instanceof Error ? buildError.message : buildError}`);
@@ -9426,7 +9932,7 @@ async function deployConfig(config, _stateDir, options = {}) {
             throw new Error(buildResult.stderr || "Docker build failed");
           }
         } else {
-          await execAsync5(`docker build --platform linux/amd64 -t "${kernelImage}" .`, { cwd: kernelSourceDir, timeout: 3e5 });
+          await execAsync6(`docker build --platform linux/amd64 -t "${kernelImage}" .`, { cwd: kernelSourceDir, timeout: 3e5 });
         }
         log(`Pushing Docker image: ${kernelImage}`);
         if (verbose) {
@@ -9438,7 +9944,7 @@ async function deployConfig(config, _stateDir, options = {}) {
             throw new Error(pushResult.stderr || "Docker push failed");
           }
         } else {
-          await execAsync5(`docker push "${kernelImage}"`, { timeout: 3e5 });
+          await execAsync6(`docker push "${kernelImage}"`, { timeout: 3e5 });
         }
         log(`GCP Kernel built and pushed successfully`);
       }
@@ -9486,9 +9992,9 @@ async function deployConfig(config, _stateDir, options = {}) {
     };
     await fs7.writeFile(path9.join(workDir, "tsconfig.json"), JSON.stringify(tsconfig, null, 2));
     log("Installing npm dependencies...");
-    await execAsync5("npm install", { cwd: workDir, timeout: 12e4 });
+    await execAsync6("npm install", { cwd: workDir, timeout: 12e4 });
     log("Synthesizing Terraform configuration...");
-    await execAsync5("npx ts-node main.ts", { cwd: workDir, timeout: 6e4 });
+    await execAsync6("npx ts-node main.ts", { cwd: workDir, timeout: 6e4 });
     const stackDir = path9.join(workDir, "cdktf.out", "stacks", "main");
     for (const { name, zipPath } of sourceZips) {
       await fs7.copyFile(zipPath, path9.join(stackDir, `${name}-source.zip`));
@@ -9505,7 +10011,7 @@ terraform {
     if (verbose) {
       await execStreaming("terraform init", { cwd: stackDir, onOutput: verboseLog });
     } else {
-      await execAsync5("terraform init", { cwd: stackDir });
+      await execAsync6("terraform init", { cwd: stackDir });
     }
     if (destroy) {
       log("Destroying resources...");
@@ -9519,7 +10025,7 @@ terraform {
           throw new Error(result.stderr || "Terraform destroy failed");
         }
       } else {
-        await execAsync5("terraform destroy -auto-approve", { cwd: stackDir });
+        await execAsync6("terraform destroy -auto-approve", { cwd: stackDir });
       }
       return {
         success: true,
@@ -9532,7 +10038,7 @@ terraform {
       if (verbose) {
         await execStreaming("terraform plan", { cwd: stackDir, onOutput: verboseLog });
       } else {
-        const { stdout } = await execAsync5("terraform plan", { cwd: stackDir });
+        const { stdout } = await execAsync6("terraform plan", { cwd: stackDir });
         log(stdout);
       }
       return {
@@ -9554,7 +10060,7 @@ terraform {
           throw new Error(result.stderr || "Terraform apply failed");
         }
       } else {
-        await execAsync5("terraform apply -auto-approve", { cwd: stackDir });
+        await execAsync6("terraform apply -auto-approve", { cwd: stackDir });
       }
     } catch (applyError) {
       const errorStr = String(applyError);
@@ -9570,7 +10076,7 @@ terraform {
       const region = config.project.region;
       log(`Configuring Docker authentication for ${region}-docker.pkg.dev...`);
       try {
-        await execAsync5(`gcloud auth configure-docker ${region}-docker.pkg.dev --quiet`, { timeout: 3e4 });
+        await execAsync6(`gcloud auth configure-docker ${region}-docker.pkg.dev --quiet`, { timeout: 3e4 });
       } catch (error) {
         log(`Warning: Failed to configure Docker auth: ${error instanceof Error ? error.message : error}`);
         log("You may need to run: gcloud auth configure-docker " + region + "-docker.pkg.dev");
@@ -9601,11 +10107,11 @@ terraform {
             await fs7.access(nodeModulesPath);
           } catch {
             log(`Installing dependencies for ${containerName}...`);
-            await execAsync5("npm install", { cwd: sourceDir, timeout: 12e4 });
+            await execAsync6("npm install", { cwd: sourceDir, timeout: 12e4 });
           }
           if (pkg2.scripts?.build) {
             log(`Building ${containerName}...`);
-            await execAsync5("npm run build", { cwd: sourceDir, timeout: 6e4 });
+            await execAsync6("npm run build", { cwd: sourceDir, timeout: 6e4 });
           }
         } catch {
         }
@@ -9620,7 +10126,7 @@ terraform {
             throw new Error(buildResult.stderr || "Docker build failed");
           }
         } else {
-          await execAsync5(`docker build -t "${image}" .`, { cwd: sourceDir, timeout: 3e5 });
+          await execAsync6(`docker build -t "${image}" .`, { cwd: sourceDir, timeout: 3e5 });
         }
         log(`Pushing Docker image: ${image}`);
         if (verbose) {
@@ -9632,7 +10138,7 @@ terraform {
             throw new Error(pushResult.stderr || "Docker push failed");
           }
         } else {
-          await execAsync5(`docker push "${image}"`, { timeout: 3e5 });
+          await execAsync6(`docker push "${image}"`, { timeout: 3e5 });
         }
         log(`Container ${containerName} built and pushed successfully`);
       }
@@ -9648,11 +10154,11 @@ terraform {
             throw new Error(result.stderr || "Terraform re-apply failed");
           }
         } else {
-          await execAsync5("terraform apply -auto-approve", { cwd: stackDir });
+          await execAsync6("terraform apply -auto-approve", { cwd: stackDir });
         }
       }
     }
-    const { stdout: outputJson } = await execAsync5("terraform output -json", { cwd: stackDir });
+    const { stdout: outputJson } = await execAsync6("terraform output -json", { cwd: stackDir });
     const outputs = JSON.parse(outputJson || "{}");
     const outputValues = {};
     for (const [key, value] of Object.entries(outputs)) {
@@ -9703,10 +10209,10 @@ terraform {
             await fs7.access(nodeModulesPath);
           } catch {
             log(`Installing dependencies for ${uiName}...`);
-            await execAsync5("npm install", { cwd: sourceDir, timeout: 12e4 });
+            await execAsync6("npm install", { cwd: sourceDir, timeout: 12e4 });
           }
           log(`Building ${uiName} (${detectedFramework})...`);
-          await execAsync5(buildCommand2, { cwd: sourceDir, timeout: 12e4 });
+          await execAsync6(buildCommand2, { cwd: sourceDir, timeout: 12e4 });
         } else {
           distPath = sourceDir;
         }
@@ -9718,7 +10224,7 @@ terraform {
           continue;
         }
         log(`Uploading ${uiName} to gs://${bucketName}...`);
-        await execAsync5(`gsutil -m rsync -r -d "${distPath}" gs://${bucketName}`, { timeout: 3e5 });
+        await execAsync6(`gsutil -m rsync -r -d "${distPath}" gs://${bucketName}`, { timeout: 3e5 });
         log(`UI ${uiName} deployed to gs://${bucketName}`);
       }
     }
@@ -9729,7 +10235,7 @@ terraform {
       log("Provisioning IAP service agent...");
       let iapServiceAccount = null;
       try {
-        const { stdout: identityOutput } = await execAsync5(
+        const { stdout: identityOutput } = await execAsync6(
           `gcloud beta services identity create --service=iap.googleapis.com --project=${gcpProjectId} 2>&1`,
           { timeout: 6e4 }
         );
@@ -9761,7 +10267,7 @@ terraform {
           const region = config.project.region;
           log(`Granting IAP service account invoker role on Cloud Run: ${cloudRunServiceName}`);
           try {
-            await execAsync5(
+            await execAsync6(
               `gcloud run services add-iam-policy-binding ${cloudRunServiceName} --region=${region} --project=${gcpProjectId} --member="serviceAccount:${iapServiceAccount}" --role="roles/run.invoker"`,
               { timeout: 6e4 }
             );
@@ -9774,7 +10280,7 @@ terraform {
         }
         log(`Enabling IAP on backend: ${backendServiceName}`);
         try {
-          await execAsync5(
+          await execAsync6(
             `gcloud compute backend-services update ${backendServiceName} --global --project=${gcpProjectId} --iap=enabled`,
             { timeout: 6e4 }
           );
@@ -9782,7 +10288,7 @@ terraform {
           for (const member of allowedMembers) {
             log(`Granting IAP access to: ${member}`);
             try {
-              await execAsync5(
+              await execAsync6(
                 `gcloud iap web add-iam-policy-binding --resource-type=backend-services --service=${backendServiceName} --project=${gcpProjectId} --member="${member}" --role="roles/iap.httpsResourceAccessor"`,
                 { timeout: 6e4 }
               );
@@ -9863,8 +10369,8 @@ function generateCdktfMain(config, generated) {
 // src/services/k8s-deploy.service.ts
 import * as fs8 from "fs/promises";
 import * as path10 from "path";
-import { exec as exec6 } from "child_process";
-import { promisify as promisify6 } from "util";
+import { exec as exec7 } from "child_process";
+import { promisify as promisify7 } from "util";
 // src/generators/k8s/yaml.ts
 function toYaml(obj, indent = 0) {
@@ -9941,7 +10447,7 @@ function combineYamlDocuments(documents) {
 }
 // src/services/k8s-deploy.service.ts
-var execAsync6 = promisify6(exec6);
+var execAsync7 = promisify7(exec7);
 async function deployToKubernetes(options) {
   const { config, resources, imageTag = "latest", dryRun = false, onLog = console.log, onVerbose } = options;
   const project = config.project;
@@ -9976,7 +10482,7 @@ async function deployToKubernetes(options) {
     log("Applying manifests to cluster...");
     const kubectlArgs = k8sConfig.context ? `--context ${k8sConfig.context}` : "";
     const kubeconfigArg = k8sConfig.kubeconfig ? `--kubeconfig ${k8sConfig.kubeconfig}` : "";
-    await execAsync6(
+    await execAsync7(
       `kubectl apply -f "${manifestDir}" ${kubectlArgs} ${kubeconfigArg}`.trim(),
       { timeout: 12e4 }
     );
@@ -9986,7 +10492,7 @@ async function deployToKubernetes(options) {
       const deploymentName = deployment.config.name;
       verbose?.(`  Waiting for ${deploymentName}...`);
       try {
-        await execAsync6(
+        await execAsync7(
           `kubectl rollout status deployment/${deploymentName} -n ${namespace} --timeout=120s ${kubectlArgs} ${kubeconfigArg}`.trim(),
           { timeout: 13e4 }
         );
@@ -10054,11 +10560,11 @@ async function buildAndPushImages(config, resources, tag = "latest", options = {
         await generateFunctionDockerfile(fullSourceDir, runtime);
       }
       verboseLog?.(`  docker build -t ${imageUrl} ${fullSourceDir}`);
-      await execAsync6(`docker build -t "${imageUrl}" "${fullSourceDir}"`, {
+      await execAsync7(`docker build -t "${imageUrl}" "${fullSourceDir}"`, {
         timeout: 3e5
       });
       log(`Pushing ${imageUrl}...`);
-      await execAsync6(`docker push "${imageUrl}"`, { timeout: 3e5 });
+      await execAsync7(`docker push "${imageUrl}"`, { timeout: 3e5 });
       builtImages.push(imageUrl);
     }
     return {
@@ -10345,7 +10851,7 @@ async function checkKubernetesConnection(context, kubeconfig) {
   try {
     const contextArg = context ? `--context ${context}` : "";
     const kubeconfigArg = kubeconfig ? `--kubeconfig ${kubeconfig}` : "";
-    await execAsync6(
+    await execAsync7(
       `kubectl cluster-info ${contextArg} ${kubeconfigArg}`.trim(),
       { timeout: 1e4 }
     );
@@ -10487,8 +10993,8 @@ import path13 from "path";
 import * as fs10 from "fs/promises";
 import chalk4 from "chalk";
 import inquirer3 from "inquirer";
-import { exec as exec9 } from "child_process";
-import { promisify as promisify9 } from "util";
+import { exec as exec10 } from "child_process";
+import { promisify as promisify10 } from "util";
 // src/services/terraform-state.service.ts
 import { existsSync as existsSync6, readFileSync as readFileSync4 } from "fs";
@@ -10583,15 +11089,15 @@ function isResourceInState(gcpResource, state) {
 }
 // src/services/gcp-scanner.service.ts
-import { exec as exec7 } from "child_process";
-import { promisify as promisify7 } from "util";
-var execAsync7 = promisify7(exec7);
+import { exec as exec8 } from "child_process";
+import { promisify as promisify8 } from "util";
+var execAsync8 = promisify8(exec8);
 function matchesProjectPattern(resourceName, projectName, gcpProjectId) {
   return resourceName.startsWith(`${projectName}-`) || resourceName.startsWith(`${gcpProjectId}-${projectName}-`);
 }
 async function runGcloudCommand(command, timeoutMs = 3e4) {
   try {
-    const { stdout } = await execAsync7(command, { timeout: timeoutMs });
+    const { stdout } = await execAsync8(command, { timeout: timeoutMs });
     const trimmed = stdout.trim();
     if (!trimmed || trimmed === "[]") {
       return [];
@@ -10811,9 +11317,9 @@ async function scanGcpResources(options) {
 }
 // src/services/terraform-import.service.ts
-import { exec as exec8 } from "child_process";
-import { promisify as promisify8 } from "util";
-var execAsync8 = promisify8(exec8);
+import { exec as exec9 } from "child_process";
+import { promisify as promisify9 } from "util";
+var execAsync9 = promisify9(exec9);
 function toTerraformName(name) {
   return name.replace(/[^a-zA-Z0-9]/g, "-");
 }
@@ -10944,7 +11450,7 @@ async function importResource(conflict, config, stackDir) {
   const importId = mapping.importIdFormatter(conflict.resource, config);
   const tfAddress = mapping.terraformAddressFormatter(conflict.resource);
   try {
-    await execAsync8(`terraform import '${tfAddress}' '${importId}'`, {
+    await execAsync9(`terraform import '${tfAddress}' '${importId}'`, {
       cwd: stackDir,
       timeout: 6e4
     });
@@ -10985,7 +11491,7 @@ function getImportCommand(resource, config) {
 }
 // src/services/preflight.service.ts
-var execAsync9 = promisify9(exec9);
+var execAsync10 = promisify10(exec10);
 function groupByType(conflicts) {
   const groups = {};
   for (const conflict of conflicts) {
@@ -11139,7 +11645,7 @@ async function runKernelPreflightCheck(gcpProjectId, cwd = process.cwd()) {
   const errors = [];
   const warnings = [];
   try {
-    await execAsync9("docker info", { timeout: 1e4 });
+    await execAsync10("docker info", { timeout: 1e4 });
     checks.push({
       name: "Docker",
       status: "pass",
@@ -11174,7 +11680,7 @@ async function runKernelPreflightCheck(gcpProjectId, cwd = process.cwd()) {
     }
   }
   try {
-    await execAsync9("gcloud --version", { timeout: 1e4 });
+    await execAsync10("gcloud --version", { timeout: 1e4 });
     checks.push({
       name: "gcloud CLI",
       status: "pass",
@@ -11190,7 +11696,7 @@ async function runKernelPreflightCheck(gcpProjectId, cwd = process.cwd()) {
     errors.push("gcloud CLI is not installed");
   }
   try {
-    const { stdout } = await execAsync9('gcloud auth list --filter=status:ACTIVE --format="value(account)"', { timeout: 1e4 });
+    const { stdout } = await execAsync10('gcloud auth list --filter=status:ACTIVE --format="value(account)"', { timeout: 1e4 });
     if (stdout.trim()) {
       checks.push({
         name: "GCP Authentication",
@@ -11278,7 +11784,7 @@ async function runKernelPreflightCheck(gcpProjectId, cwd = process.cwd()) {
   }
   if (gcpProjectId) {
     try {
-      const { stdout } = await execAsync9(
+      const { stdout } = await execAsync10(
         `gcloud services list --project=${gcpProjectId} --format="value(config.name)" --filter="config.name:(run.googleapis.com OR cloudbuild.googleapis.com OR firestore.googleapis.com)"`,
         { timeout: 3e4 }
       );
@@ -11430,7 +11936,7 @@ async function ensureCloudFunctionsPrerequisites(gcpProjectId, region) {
   const errors = [];
   let projectNumber;
   try {
-    const { stdout } = await execAsync9(
+    const { stdout } = await execAsync10(
       `gcloud projects describe ${gcpProjectId} --format="value(projectNumber)"`
     );
     projectNumber = stdout.trim();
@@ -11448,7 +11954,7 @@ async function ensureCloudFunctionsPrerequisites(gcpProjectId, region) {
   ];
   for (const api2 of requiredApis) {
     try {
-      await execAsync9(
+      await execAsync10(
         `gcloud services enable ${api2} --project=${gcpProjectId} --quiet`,
         { timeout: 6e4 }
       );
@@ -11468,7 +11974,7 @@ async function ensureCloudFunctionsPrerequisites(gcpProjectId, region) {
   ];
   for (const role of cloudBuildRoles) {
     try {
-      await execAsync9(
+      await execAsync10(
         `gcloud projects add-iam-policy-binding ${gcpProjectId} --member="serviceAccount:${cloudBuildSa}" --role="${role}" --condition=None --quiet`,
         { timeout: 3e4 }
       );
@@ -11484,7 +11990,7 @@ async function ensureCloudFunctionsPrerequisites(gcpProjectId, region) {
   ];
   for (const role of serverlessRoles) {
     try {
-      await execAsync9(
+      await execAsync10(
         `gcloud projects add-iam-policy-binding ${gcpProjectId} --member="serviceAccount:${serverlessRobotSa}" --role="${role}" --condition=None --quiet`,
         { timeout: 3e4 }
       );
@@ -11499,7 +12005,7 @@ async function ensureCloudFunctionsPrerequisites(gcpProjectId, region) {
   ];
   for (const role of computeRoles) {
     try {
-      await execAsync9(
+      await execAsync10(
         `gcloud projects add-iam-policy-binding ${gcpProjectId} --member="serviceAccount:${defaultComputeSa}" --role="${role}" --condition=None --quiet`,
         { timeout: 3e4 }
       );
@@ -11508,7 +12014,7 @@ async function ensureCloudFunctionsPrerequisites(gcpProjectId, region) {
     }
   }
   try {
-    await execAsync9(
+    await execAsync10(
       `gcloud artifacts repositories describe gcf-artifacts --location=${region} --project=${gcpProjectId}`,
       { timeout: 3e4 }
     );
@@ -11517,7 +12023,7 @@ async function ensureCloudFunctionsPrerequisites(gcpProjectId, region) {
     for (const sa of serviceAccounts) {
       for (const role of repoRoles) {
         try {
-          await execAsync9(
+          await execAsync10(
             `gcloud artifacts repositories add-iam-policy-binding gcf-artifacts --location=${region} --project=${gcpProjectId} --member="serviceAccount:${sa}" --role="${role}" --quiet`,
             { timeout: 3e4 }
           );
@@ -11528,7 +12034,7 @@ async function ensureCloudFunctionsPrerequisites(gcpProjectId, region) {
     }
   } catch {
     try {
-      await execAsync9(
+      await execAsync10(
         `gcloud artifacts repositories create gcf-artifacts --repository-format=docker --location=${region} --project=${gcpProjectId} --description="Cloud Functions artifacts" --quiet`,
         { timeout: 6e4 }
       );
@@ -11538,7 +12044,7 @@ async function ensureCloudFunctionsPrerequisites(gcpProjectId, region) {
       for (const sa of serviceAccounts) {
         for (const role of repoRoles) {
           try {
-            await execAsync9(
+            await execAsync10(
               `gcloud artifacts repositories add-iam-policy-binding gcf-artifacts --location=${region} --project=${gcpProjectId} --member="serviceAccount:${sa}" --role="${role}" --quiet`,
               { timeout: 3e4 }
             );
@@ -11560,7 +12066,7 @@ async function ensureCloudFunctionsPrerequisites(gcpProjectId, region) {
 // src/commands/infra/deploy.ts
 init_plugin_loader_service();
-var execAsync10 = promisify10(exec10);
+var execAsync11 = promisify11(exec11);
 var STACKSOLO_DIR4 = ".stacksolo";
 function sleep(ms) {
   return new Promise((resolve7) => setTimeout(resolve7, ms));
@@ -12102,7 +12608,7 @@ async function runDeploy(options, retryCount = 0, retryContext = {}, sessionId)
       console.log(progress.next());
       const authSpinner = ora4("Configuring Docker authentication...").start();
       try {
-        await execAsync10(
+        await execAsync11(
           `gcloud auth configure-docker ${config.project.region}-docker.pkg.dev --quiet`
         );
         authSpinner.succeed("Docker authentication configured");
@@ -12123,7 +12629,7 @@ async function runDeploy(options, retryCount = 0, retryContext = {}, sessionId)
         }
         const buildSpinner = ora4(`Building ${container.name}...`).start();
         try {
-          await execAsync10(`docker build -t "${imageTag}" "${sourceDir}"`, {
+          await execAsync11(`docker build -t "${imageTag}" "${sourceDir}"`, {
             maxBuffer: 50 * 1024 * 1024
           });
           buildSpinner.succeed(`Built ${container.name}`);
@@ -12136,7 +12642,7 @@ async function runDeploy(options, retryCount = 0, retryContext = {}, sessionId)
         }
         const pushSpinner = ora4(`Pushing ${container.name}...`).start();
         try {
-          await execAsync10(`docker push "${imageTag}"`);
+          await execAsync11(`docker push "${imageTag}"`);
           pushSpinner.succeed(`Pushed ${container.name}`);
           console.log(chalk5.gray(`    ${imageTag}
 `));
@@ -12230,7 +12736,7 @@ async function runDeploy(options, retryCount = 0, retryContext = {}, sessionId)
         const namespace = k8sConfig.namespace || config.project.name;
         const releaseName = config.project.name;
         try {
-          await execAsync10(
+          await execAsync11(
             `helm upgrade --install ${releaseName} ${helmOutputDir} --namespace ${namespace} --create-namespace`
           );
           console.log(chalk5.green("\n  Deployed successfully with Helm!"));
@@ -12487,7 +12993,7 @@ async function runDeploy(options, retryCount = 0, retryContext = {}, sessionId)
 `));
         const spinner2 = ora4(`Enabling ${apiName}...`).start();
         try {
-          await execAsync10(`gcloud services enable ${apiName} --project=${config.project.gcpProjectId}`);
+          await execAsync11(`gcloud services enable ${apiName} --project=${config.project.gcpProjectId}`);
           spinner2.succeed(`Enabled ${apiName}`);
           console.log(chalk5.gray("  Waiting 30 seconds for API to propagate...\n"));
           await sleep(3e4);
@@ -12698,11 +13204,11 @@ async function promptFixBuildPermissions() {
 }
 async function checkCloudBuildPermissions(gcpProjectId) {
   try {
-    const { stdout: projectNumber } = await execAsync10(
+    const { stdout: projectNumber } = await execAsync11(
       `gcloud projects describe ${gcpProjectId} --format="value(projectNumber)"`
     );
     const trimmedProjectNumber = projectNumber.trim();
-    const { stdout: policy } = await execAsync10(
+    const { stdout: policy } = await execAsync11(
       `gcloud projects get-iam-policy ${gcpProjectId} --format="json" --flatten="bindings[].members" --filter="bindings.members:${trimmedProjectNumber}@cloudbuild.gserviceaccount.com AND bindings.role:roles/storage.objectViewer"`
     );
     return policy.trim().length > 10;
@@ -12713,7 +13219,7 @@ async function checkCloudBuildPermissions(gcpProjectId) {
 async function grantCloudBuildPermissions(gcpProjectId, region) {
   const spinner = ora4("Getting project number...").start();
   try {
-    const { stdout: projectNumber } = await execAsync10(
+    const { stdout: projectNumber } = await execAsync11(
       `gcloud projects describe ${gcpProjectId} --format="value(projectNumber)"`
     );
     const trimmedProjectNumber = projectNumber.trim();
@@ -12724,7 +13230,7 @@ async function grantCloudBuildPermissions(gcpProjectId, region) {
     ];
     spinner.text = "Granting permissions to Cloud Build service account...";
     for (const { role } of cloudBuildRoles) {
-      await execAsync10(
+      await execAsync11(
         `gcloud projects add-iam-policy-binding ${gcpProjectId} --member="serviceAccount:${trimmedProjectNumber}@cloudbuild.gserviceaccount.com" --role="${role}" --quiet`
       );
     }
@@ -12735,13 +13241,13 @@ async function grantCloudBuildPermissions(gcpProjectId, region) {
     ];
     spinner.text = "Granting permissions to Cloud Functions service account...";
     for (const { role } of serverlessRobotRoles) {
-      await execAsync10(
+      await execAsync11(
         `gcloud projects add-iam-policy-binding ${gcpProjectId} --member="serviceAccount:service-${trimmedProjectNumber}@serverless-robot-prod.iam.gserviceaccount.com" --role="${role}" --quiet`
       );
     }
     spinner.text = "Checking for gcf-artifacts repository...";
     try {
-      await execAsync10(`gcloud artifacts repositories describe gcf-artifacts --location=${region} --project=${gcpProjectId}`);
+      await execAsync11(`gcloud artifacts repositories describe gcf-artifacts --location=${region} --project=${gcpProjectId}`);
       await grantGcfArtifactsPermissions(gcpProjectId, region);
     } catch {
     }
@@ -12759,7 +13265,7 @@ async function grantCloudBuildPermissions(gcpProjectId, region) {
 async function grantGcfArtifactsPermissions(gcpProjectId, region) {
   const spinner = ora4("Granting gcf-artifacts permissions...").start();
   try {
-    const { stdout: projectNumber } = await execAsync10(
+    const { stdout: projectNumber } = await execAsync11(
       `gcloud projects describe ${gcpProjectId} --format="value(projectNumber)"`
     );
     const trimmedProjectNumber = projectNumber.trim();
@@ -12771,7 +13277,7 @@ async function grantGcfArtifactsPermissions(gcpProjectId, region) {
     spinner.text = "Granting artifactregistry.writer on gcf-artifacts...";
     for (const sa of serviceAccounts) {
       try {
-        await execAsync10(
+        await execAsync11(
           `gcloud artifacts repositories add-iam-policy-binding gcf-artifacts --location=${region} --project=${gcpProjectId} --member="serviceAccount:${sa}" --role="roles/artifactregistry.writer" --quiet`
         );
       } catch {
@@ -12856,7 +13362,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
         const regionMatch = fullPath.match(/locations\/([^/]+)/);
         const region = regionMatch ? regionMatch[1] : "us-east1";
         spinner.text = `Deleting Artifact Registry ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud artifacts repositories delete ${name} --location=${region} --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Artifact Registry ${name}`);
@@ -12867,7 +13373,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
       case "serviceaccount/Account": {
         spinner.text = `Deleting Service Account ${name}...`;
         const email = name.includes("@") ? name : `${name}@${gcpProjectId}.iam.gserviceaccount.com`;
-        await execAsync10(
+        await execAsync11(
           `gcloud iam service-accounts delete ${email} --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Service Account ${name}`);
@@ -12878,7 +13384,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
       case "globalAddresses":
       case "compute/GlobalAddress": {
         spinner.text = `Deleting Global Address ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud compute addresses delete ${name} --global --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Global Address ${name}`);
@@ -12896,7 +13402,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
           }
           spinner.text = `Deleting URL Map ${name}...`;
         }
-        await execAsync10(
+        await execAsync11(
           `gcloud compute url-maps delete ${name} --global --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted URL Map ${name}`);
@@ -12914,7 +13420,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
           }
           spinner.text = `Deleting Target HTTP Proxy ${name}...`;
         }
-        await execAsync10(
+        await execAsync11(
           `gcloud compute target-http-proxies delete ${name} --global --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Target HTTP Proxy ${name}`);
@@ -12931,7 +13437,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
           }
           spinner.text = `Deleting Target HTTPS Proxy ${name}...`;
         }
-        await execAsync10(
+        await execAsync11(
           `gcloud compute target-https-proxies delete ${name} --global --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Target HTTPS Proxy ${name}`);
@@ -12942,7 +13448,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
       case "globalForwardingRules":
       case "compute/GlobalForwardingRule": {
         spinner.text = `Deleting Forwarding Rule ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud compute forwarding-rules delete ${name} --global --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Forwarding Rule ${name}`);
@@ -12952,7 +13458,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
       case "backendServices":
       case "compute/BackendService": {
         spinner.text = `Deleting Backend Service ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud compute backend-services delete ${name} --global --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Backend Service ${name}`);
@@ -12962,7 +13468,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
       case "backendBuckets":
       case "compute/BackendBucket": {
         spinner.text = `Deleting Backend Bucket ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud compute backend-buckets delete ${name} --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Backend Bucket ${name}`);
@@ -12972,7 +13478,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
       case "healthChecks":
       case "compute/HealthCheck": {
         spinner.text = `Deleting Health Check ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud compute health-checks delete ${name} --global --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Health Check ${name}`);
@@ -12984,7 +13490,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
         const regionMatch = fullPath.match(/regions\/([^/]+)/);
         const region = regionMatch ? regionMatch[1] : "us-east1";
         spinner.text = `Deleting Network Endpoint Group ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud compute network-endpoint-groups delete ${name} --region=${region} --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Network Endpoint Group ${name}`);
@@ -12994,7 +13500,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
       case "networks":
       case "compute/Network": {
         spinner.text = `Deleting VPC Network ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud compute networks delete ${name} --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted VPC Network ${name}`);
@@ -13006,7 +13512,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
         const locationMatch = fullPath.match(/locations\/([^/]+)/);
         const location = locationMatch ? locationMatch[1] : "us-east1";
         spinner.text = `Deleting Cloud Function ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud functions delete ${name} --region=${location} --project=${gcpProjectId} --gen2 --quiet`
         );
         spinner.succeed(`Deleted Cloud Function ${name}`);
@@ -13018,7 +13524,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
         const locationMatch = fullPath.match(/locations\/([^/]+)/);
         const location = locationMatch ? locationMatch[1] : "us-east1";
         spinner.text = `Deleting Cloud Run service ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud run services delete ${name} --region=${location} --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Cloud Run service ${name}`);
@@ -13028,7 +13534,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
       case "topics":
       case "pubsub/Topic": {
         spinner.text = `Deleting Pub/Sub topic ${name}...`;
-        await execAsync10(`gcloud pubsub topics delete ${name} --project=${gcpProjectId} --quiet`);
+        await execAsync11(`gcloud pubsub topics delete ${name} --project=${gcpProjectId} --quiet`);
         spinner.succeed(`Deleted Pub/Sub topic ${name}`);
         return true;
       }
@@ -13044,7 +13550,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
           }
           spinner.text = `Deleting SSL Certificate ${name}...`;
         }
-        await execAsync10(
+        await execAsync11(
           `gcloud compute ssl-certificates delete ${name} --global --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted SSL Certificate ${name}`);
@@ -13054,7 +13560,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
       case "buckets":
       case "storage/Bucket": {
         spinner.text = `Deleting Storage Bucket ${name}...`;
-        await execAsync10(`gcloud storage rm -r gs://${name} --project=${gcpProjectId}`);
+        await execAsync11(`gcloud storage rm -r gs://${name} --project=${gcpProjectId}`);
         spinner.succeed(`Deleted Storage Bucket ${name}`);
         return true;
       }
@@ -13064,7 +13570,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
         const regionMatch = fullPath.match(/locations\/([^/]+)/);
         const region = regionMatch ? regionMatch[1] : "us-east1";
         spinner.text = `Deleting VPC Connector ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud compute networks vpc-access connectors delete ${name} --region=${region} --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted VPC Connector ${name}`);
@@ -13147,7 +13653,7 @@ async function findDependentResources(resourceName, resourceType, gcpProjectId)
   const dependencies = [];
   try {
     if (resourceType === "url-map") {
-      const { stdout: httpProxies } = await execAsync10(
+      const { stdout: httpProxies } = await execAsync11(
         `gcloud compute target-http-proxies list --project=${gcpProjectId} --format="json" 2>/dev/null || echo "[]"`
       );
       const proxies = JSON.parse(httpProxies);
@@ -13160,7 +13666,7 @@ async function findDependentResources(resourceName, resourceType, gcpProjectId)
           });
         }
       }
-      const { stdout: httpsProxies } = await execAsync10(
+      const { stdout: httpsProxies } = await execAsync11(
         `gcloud compute target-https-proxies list --project=${gcpProjectId} --format="json" 2>/dev/null || echo "[]"`
       );
       const httpsProxyList = JSON.parse(httpsProxies);
@@ -13174,7 +13680,7 @@ async function findDependentResources(resourceName, resourceType, gcpProjectId)
         }
       }
     } else if (resourceType === "http-proxy" || resourceType === "https-proxy") {
-      const { stdout: rules } = await execAsync10(
+      const { stdout: rules } = await execAsync11(
         `gcloud compute forwarding-rules list --global --project=${gcpProjectId} --format="json" 2>/dev/null || echo "[]"`
       );
       const ruleList = JSON.parse(rules);
@@ -13188,7 +13694,7 @@ async function findDependentResources(resourceName, resourceType, gcpProjectId)
         }
       }
     } else if (resourceType === "ssl-cert") {
-      const { stdout: httpsProxies } = await execAsync10(
+      const { stdout: httpsProxies } = await execAsync11(
         `gcloud compute target-https-proxies list --project=${gcpProjectId} --format="json" 2>/dev/null || echo "[]"`
       );
       const proxyList = JSON.parse(httpsProxies);
@@ -13223,7 +13729,7 @@ async function grantResourceDeletePermissions(resourcePath, gcpProjectId) {
   const inquirer6 = await import("inquirer");
   let currentAccount = "";
   try {
-    const { stdout } = await execAsync10("gcloud config get-value account");
+    const { stdout } = await execAsync11("gcloud config get-value account");
     currentAccount = stdout.trim();
   } catch {
   }
@@ -13273,7 +13779,7 @@ async function grantResourceDeletePermissions(resourcePath, gcpProjectId) {
         });
         child.on("error", reject);
       });
-      const { stdout } = await execAsync10("gcloud config get-value account");
+      const { stdout } = await execAsync11("gcloud config get-value account");
       email = stdout.trim();
       console.log(chalk5.green(`
   Now authenticated as: ${email}
@@ -13323,7 +13829,7 @@ async function grantResourceDeletePermissions(resourcePath, gcpProjectId) {
       roleName = "Editor";
     }
     spinner.text = `Granting ${roleName} role to ${email}...`;
-    await execAsync10(
+    await execAsync11(
       `gcloud projects add-iam-policy-binding ${gcpProjectId} --member="user:${email}" --role="${role}" --quiet`
     );
     spinner.succeed(`Granted ${roleName} role to ${email}`);
@@ -14388,9 +14894,9 @@ eventsCommand.action(async () => {
 // src/commands/infra/inventory.ts
 import { Command as Command13 } from "commander";
 import chalk14 from "chalk";
-import { exec as exec11 } from "child_process";
-import { promisify as promisify11 } from "util";
-var execAsync11 = promisify11(exec11);
+import { exec as exec12 } from "child_process";
+import { promisify as promisify12 } from "util";
+var execAsync12 = promisify12(exec12);
 var LABEL_UPDATE_COMMANDS = {
   "VPC Network": (projectId, name, labels) => {
     const labelStr = Object.entries(labels).map(([k, v]) => `${k}=${v}`).join(",");
@@ -14431,7 +14937,7 @@ async function updateResourceLabels(projectId, resourceType, resourceName, label
     command = command.replace(/us-central1/g, region);
   }
   try {
-    await execAsync11(command, { timeout: 6e4 });
+    await execAsync12(command, { timeout: 6e4 });
     return { success: true };
   } catch (err) {
     const errorMsg = err instanceof Error ? err.message : String(err);
@@ -14461,7 +14967,7 @@ async function shareResource(projectId, resourceType, resourceName, existingLabe
 }
 async function runGcloudCommand2(command, timeoutMs = 3e4) {
   try {
-    const { stdout } = await execAsync11(command, { timeout: timeoutMs });
+    const { stdout } = await execAsync12(command, { timeout: timeoutMs });
     const trimmed = stdout.trim();
     if (!trimmed || trimmed === "[]") {
       return [];
@@ -14671,7 +15177,7 @@ async function getGcpProjectId(explicitProject) {
   } catch {
   }
   try {
-    const { stdout } = await execAsync11("gcloud config get-value project 2>/dev/null");
+    const { stdout } = await execAsync12("gcloud config get-value project 2>/dev/null");
     const gcloudProject = stdout.trim();
     if (gcloudProject && gcloudProject !== "(unset)") {
       return gcloudProject;
@@ -14851,9 +15357,9 @@ import { Command as Command14 } from "commander";
 import chalk15 from "chalk";
 import * as path19 from "path";
 import * as fs16 from "fs/promises";
-import { exec as exec12 } from "child_process";
-import { promisify as promisify12 } from "util";
-var execAsync12 = promisify12(exec12);
+import { exec as exec13 } from "child_process";
+import { promisify as promisify13 } from "util";
+var execAsync13 = promisify13(exec13);
 var STACKSOLO_DIR7 = ".stacksolo";
 var CONFIG_FILENAME5 = "stacksolo.config.json";
 var doctorCommand = new Command14("doctor").description("Check system prerequisites and GCP configuration").option("--fix", "Attempt to fix issues automatically").option("--verbose", "Show detailed output for each check").action(async (options) => {
@@ -14931,7 +15437,7 @@ function displayResult(result, verbose) {
 }
 async function checkNode(_options) {
   try {
-    const { stdout } = await execAsync12("node --version");
+    const { stdout } = await execAsync13("node --version");
     const version = stdout.trim().replace("v", "");
     const major = parseInt(version.split(".")[0], 10);
     if (major >= 18) {
@@ -14966,7 +15472,7 @@ async function checkNode(_options) {
 }
 async function checkTerraform(_options) {
   try {
-    const { stdout } = await execAsync12("terraform version -json");
+    const { stdout } = await execAsync13("terraform version -json");
     const data = JSON.parse(stdout);
     const version = data.terraform_version;
     return {
@@ -14976,7 +15482,7 @@ async function checkTerraform(_options) {
     };
   } catch {
     try {
-      const { stdout } = await execAsync12("terraform version");
+      const { stdout } = await execAsync13("terraform version");
       const match = stdout.match(/Terraform v(\d+\.\d+\.\d+)/);
       if (match) {
         return {
@@ -14997,11 +15503,11 @@ async function checkTerraform(_options) {
 }
 async function checkDocker(_options) {
   try {
-    const { stdout } = await execAsync12("docker --version");
+    const { stdout } = await execAsync13("docker --version");
     const match = stdout.match(/Docker version (\d+\.\d+\.\d+)/);
     const version = match ? match[1] : "unknown";
     try {
-      await execAsync12("docker info", { timeout: 5e3 });
+      await execAsync13("docker info", { timeout: 5e3 });
       return {
         name: "Docker",
         status: "ok",
@@ -15026,7 +15532,7 @@ async function checkDocker(_options) {
 }
 async function checkGcloud(_options) {
   try {
-    const { stdout } = await execAsync12("gcloud version --format=json");
+    const { stdout } = await execAsync13("gcloud version --format=json");
     const data = JSON.parse(stdout);
     const version = data["Google Cloud SDK"];
     return {
@@ -15045,7 +15551,7 @@ async function checkGcloud(_options) {
 }
 async function checkGcpAuth(_options) {
   try {
-    const { stdout } = await execAsync12("gcloud auth list --format=json");
+    const { stdout } = await execAsync13("gcloud auth list --format=json");
     const accounts = JSON.parse(stdout);
     if (accounts.length === 0) {
       return {
@@ -15065,7 +15571,7 @@ async function checkGcpAuth(_options) {
       };
     }
     try {
-      await execAsync12("gcloud auth application-default print-access-token", { timeout: 5e3 });
+      await execAsync13("gcloud auth application-default print-access-token", { timeout: 5e3 });
       return {
         name: "GCP Authentication",
         status: "ok",
@@ -15121,7 +15627,7 @@ async function checkGcpProjectAccess(_options) {
   try {
     const config = parseConfig(configPath);
     const projectId = config.project.gcpProjectId;
-    const { stdout } = await execAsync12(
+    const { stdout } = await execAsync13(
       `gcloud projects describe ${projectId} --format="value(projectId)"`,
       { timeout: 1e4 }
     );
@@ -15162,7 +15668,7 @@ async function checkRequiredApis(_options) {
       "cloudbuild.googleapis.com",
       "artifactregistry.googleapis.com"
     ];
-    const { stdout } = await execAsync12(
+    const { stdout } = await execAsync13(
       `gcloud services list --project=${projectId} --enabled --format="value(NAME)"`,
       { timeout: 3e4 }
     );
@@ -15390,9 +15896,9 @@ import chalk17 from "chalk";
 import ora7 from "ora";
 import * as path21 from "path";
 import * as fs18 from "fs/promises";
-import { exec as exec13 } from "child_process";
-import { promisify as promisify13 } from "util";
-var execAsync13 = promisify13(exec13);
+import { exec as exec14 } from "child_process";
+import { promisify as promisify14 } from "util";
+var execAsync14 = promisify14(exec14);
 var STACKSOLO_DIR9 = ".stacksolo";
 var CONFIG_FILENAME7 = "stacksolo.config.json";
 function getConfigPath5() {
@@ -15414,7 +15920,7 @@ var buildCommand = new Command16("build").description("Build and push container
     return;
   }
   try {
-    await execAsync13("docker --version");
+    await execAsync14("docker --version");
   } catch {
     console.log(chalk17.red("  Docker CLI not found.\n"));
     console.log(chalk17.gray("  Install Docker Desktop: https://www.docker.com/products/docker-desktop\n"));
@@ -15453,7 +15959,7 @@ var buildCommand = new Command16("build").description("Build and push container
   if (options.push) {
     const authSpinner = ora7("Configuring Docker authentication...").start();
     try {
-      await execAsync13(
+      await execAsync14(
         `gcloud auth configure-docker ${config.project.region}-docker.pkg.dev --quiet`
       );
       authSpinner.succeed("Docker authentication configured");
@@ -15482,7 +15988,7 @@ var buildCommand = new Command16("build").description("Build and push container
     const buildSpinner = ora7(`Building ${container.name}...`).start();
     try {
       const buildCmd = `docker build -f "${dockerfilePath}" -t "${imageTag}" "${sourceDir}"`;
-      await execAsync13(buildCmd, { maxBuffer: 50 * 1024 * 1024 });
+      await execAsync14(buildCmd, { maxBuffer: 50 * 1024 * 1024 });
       buildSpinner.succeed(`Built ${container.name}`);
     } catch (error) {
       buildSpinner.fail(`Failed to build ${container.name}`);
@@ -15494,7 +16000,7 @@ var buildCommand = new Command16("build").description("Build and push container
     if (options.push) {
       const pushSpinner = ora7(`Pushing ${container.name}...`).start();
       try {
-        await execAsync13(`docker push "${imageTag}"`);
+        await execAsync14(`docker push "${imageTag}"`);
         pushSpinner.succeed(`Pushed ${container.name}`);
         console.log(chalk17.gray(`    ${imageTag}
 `));
@@ -15665,35 +16171,6 @@ function getPythonVersion(runtime) {
   if (version === "312") return "3.12";
   return "3.12";
 }
-function getFrameworkConfig(framework, port = 3e3) {
-  switch (framework) {
-    case "vue":
-      return {
-        command: ["npm", "run", "dev", "--", "--host", "0.0.0.0", "--port", String(port)]
-      };
-    case "nuxt":
-      return {
-        command: ["npm", "run", "dev", "--", "--host", "0.0.0.0", "--port", String(port)]
-      };
-    case "react":
-      return {
-        command: ["npm", "run", "dev", "--", "--host", "0.0.0.0", "--port", String(port)]
-      };
-    case "next":
-      return {
-        command: ["npm", "run", "dev", "--", "--hostname", "0.0.0.0", "-p", String(port)]
-      };
-    case "svelte":
-    case "sveltekit":
-      return {
-        command: ["npm", "run", "dev", "--", "--host", "0.0.0.0", "--port", String(port)]
-      };
-    default:
-      return {
-        command: ["npm", "run", "dev", "--", "--host", "0.0.0.0", "--port", String(port)]
-      };
-  }
-}
 function isPythonRuntime(runtime) {
   return runtime.startsWith("python");
 }
@@ -15704,31 +16181,27 @@ function generateFunctionManifests(options) {
   const functionName = sanitizeName(options.function.name);
   const runtimeConfig = getRuntimeConfig(options.function.runtime, options.function.entryPoint);
   const isPython = isPythonRuntime(options.function.runtime);
-  const runCmd = isPython ? runtimeConfig.command.join(" ") : "npm run dev 2>/dev/null || " + runtimeConfig.command.join(" ");
-  const containerCommand = isPython ? [
-    "sh",
-    "-c",
-    [
-      "cp -r /source/* /app/ 2>/dev/null || true",
-      "cd /app",
-      "pip install -r requirements.txt 2>/dev/null || true",
-      "pip install functions-framework",
-      runCmd
-    ].join(" && ")
-  ] : [
-    "sh",
-    "-c",
-    [
-      // Copy source files to /app, excluding node_modules (macOS binaries don't work in Linux)
-      "cd /source",
-      "find . -maxdepth 1 ! -name node_modules ! -name . -exec cp -r {} /app/ \\;",
-      "cd /app",
-      // Always install fresh for Linux platform
-      "npm install",
-      // Run the dev server
-      runCmd
-    ].join(" && ")
-  ];
+  let containerCommand;
+  let containerImage;
+  if (isPython) {
+    containerImage = runtimeConfig.image;
+    containerCommand = [
+      "sh",
+      "-c",
+      [
+        "cp -r /source/* /app/ 2>/dev/null || true",
+        "cd /app",
+        "pip install -r requirements.txt 2>/dev/null || true",
+        "pip install functions-framework",
+        runtimeConfig.command.join(" ")
+      ].join(" && ")
+    ];
+  } else {
+    containerImage = "node:20-slim";
+    const functionsFrameworkCmd = runtimeConfig.command.join(" ");
+    const command = 'cd /source && if [ -d dist ]; then echo "Running pre-built function from dist/" && find . -maxdepth 1 ! -name node_modules ! -name . -exec cp -r {} /app/ \\; && cd /app && grep -v "workspace:" package.json > package.json.tmp && mv package.json.tmp package.json && npm install --omit=dev && ' + functionsFrameworkCmd + '; else echo "No dist/ folder. Trying dev mode..." && find . -maxdepth 1 ! -name node_modules ! -name . -exec cp -r {} /app/ \\; && cd /app && npm install && (npm run dev 2>/dev/null || ' + functionsFrameworkCmd + "); fi";
+    containerCommand = ["sh", "-c", command];
+  }
   const labels = {
     "app.kubernetes.io/name": functionName,
     "app.kubernetes.io/component": "function",
@@ -15761,7 +16234,7 @@ function generateFunctionManifests(options) {
           containers: [
             {
               name: functionName,
-              image: runtimeConfig.image,
+              image: containerImage,
               command: containerCommand,
               ports: [
                 {
@@ -15858,7 +16331,7 @@ function sanitizeName(name) {
 function generateUIManifests(options) {
   const namespace = sanitizeNamespaceName(options.projectName);
   const uiName = sanitizeName2(options.ui.name);
-  const frameworkConfig = getFrameworkConfig(options.ui.framework, options.port);
+  const command = 'if [ -d /source/dist ]; then echo "Serving pre-built static files from dist/" && npx serve /source/dist -l ' + options.port + ' -s; else echo "No dist/ folder found. Running dev server..." && cd /source && npm install && npm run dev -- --host 0.0.0.0 --port ' + options.port + "; fi";
   const labels = {
     "app.kubernetes.io/name": uiName,
     "app.kubernetes.io/component": "ui",
@@ -15892,21 +16365,7 @@ function generateUIManifests(options) {
             {
               name: uiName,
               image: "node:20-slim",
-              // Copy source (excluding node_modules) to working directory, then install fresh Linux deps
-              command: [
-                "sh",
-                "-c",
-                [
-                  // Copy source files to /app, excluding node_modules (macOS binaries don't work in Linux)
-                  "cd /source",
-                  "find . -maxdepth 1 ! -name node_modules ! -name . -exec cp -r {} /app/ \\;",
-                  "cd /app",
-                  // Always install fresh for Linux platform
-                  "npm install",
-                  // Run the dev server
-                  frameworkConfig.command.join(" ")
-                ].join(" && ")
-              ],
+              command: ["sh", "-c", command],
               ports: [
                 {
                   containerPort: options.port,
@@ -16783,6 +17242,7 @@ function generateK8sManifests(options) {
   const services = [];
   const warnings = [];
   const projectName = config.project.name;
+  const packageManager = config.project.packageManager;
   const portAllocator = createPortAllocator();
   const servicePortMap = {};
   let kernelUrl;
@@ -16845,7 +17305,8 @@ function generateK8sManifests(options) {
             timeout: func.timeout
           },
           sourceDir,
-          port
+          port,
+          packageManager
         });
         manifests.push(manifest);
         services.push(func.name);
@@ -16866,7 +17327,8 @@ function generateK8sManifests(options) {
             framework: ui.framework || "vue"
           },
           sourceDir,
-          port
+          port,
+          packageManager
         });
         manifests.push(manifest);
         services.push(ui.name);
@@ -17034,6 +17496,7 @@ function spawnService(service, manager, firebaseProjectId) {
   };
   if (firebaseProjectId) {
     env.FIREBASE_PROJECT_ID = firebaseProjectId;
+    env.VITE_FIREBASE_PROJECT_ID = firebaseProjectId;
   }
   const args = service.type === "ui" ? ["run", "dev", "--", "--port", String(service.port)] : ["run", "dev"];
   const proc = spawn6("npm", args, {
@@ -17062,12 +17525,12 @@ function spawnService(service, manager, firebaseProjectId) {
   });
   return proc;
 }
-async function startFirebaseEmulators(manager) {
+async function startFirebaseEmulators(manager, projectId = "demo-local") {
   const spinner = ora8("Starting Firebase emulators...").start();
   try {
     const proc = spawn6(
       "firebase",
-      ["emulators:start", "--only", "firestore,auth", "--project", "demo-local"],
+      ["emulators:start", "--only", "firestore,auth", "--project", projectId],
       {
         stdio: ["ignore", "pipe", "pipe"],
         shell: true
@@ -17172,13 +17635,13 @@ async function startLocalEnvironment(options) {
     services: validServices,
     isShuttingDown: false
   };
+  const firebaseProjectId = config.project.gcpKernel?.firebaseProjectId || config.project.gcpProjectId;
   if (options.includeEmulators !== false) {
-    const emulatorProc = await startFirebaseEmulators(manager);
+    const emulatorProc = await startFirebaseEmulators(manager, firebaseProjectId);
     if (emulatorProc) {
       manager.processes.set("firebase-emulator", emulatorProc);
     }
   }
-  const firebaseProjectId = config.project.gcpKernel?.firebaseProjectId || config.project.gcpProjectId;
   const spinner = ora8("Starting services...").start();
   for (const service of validServices) {
     const proc = spawnService(service, manager, firebaseProjectId);
@@ -18212,9 +18675,9 @@ import chalk20 from "chalk";
 import ora10 from "ora";
 import * as path24 from "path";
 import * as fs21 from "fs/promises";
-import { exec as exec14 } from "child_process";
-import { promisify as promisify14 } from "util";
-var execAsync14 = promisify14(exec14);
+import { exec as exec15 } from "child_process";
+import { promisify as promisify15 } from "util";
+var execAsync15 = promisify15(exec15);
 var STACKSOLO_DIR10 = ".stacksolo";
 var CONFIG_FILENAME8 = "stacksolo.config.json";
 var installCommand = new Command18("install").description("Install dependencies for all resources").option("-p, --parallel", "Install dependencies in parallel").action(async (options) => {
@@ -18278,7 +18741,7 @@ var installCommand = new Command18("install").description("Install dependencies
   const installDir = async (dir) => {
     const spinner = ora10(`Installing ${dir.name}...`).start();
     try {
-      await execAsync14("npm install", { cwd: dir.path, timeout: 12e4 });
+      await execAsync15("npm install", { cwd: dir.path, timeout: 12e4 });
       spinner.succeed(`Installed ${dir.name}`);
       return { success: true, name: dir.name };
     } catch (error) {