@stacksolo/cli 0.1.6 → 0.1.7

package/dist/index.js

@@ -635,6 +635,120 @@ async function checkAndFixCloudBuildPermissions(projectId, onLog) {
   };
 }
 
+// src/gcp/firebase.ts
+import { exec as exec5 } from "child_process";
+import { promisify as promisify5 } from "util";
+var execAsync5 = promisify5(exec5);
+async function isFirebaseInstalled() {
+  try {
+    await execAsync5("which firebase");
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function checkFirebaseAuth() {
+  try {
+    const { stdout } = await execAsync5("firebase login:list --json 2>/dev/null");
+    const result = JSON.parse(stdout);
+    if (result.status === "success" && result.result?.length > 0) {
+      return result.result[0].user?.email || result.result[0];
+    }
+    return null;
+  } catch {
+    try {
+      const { stdout } = await execAsync5("firebase projects:list --json 2>/dev/null");
+      const result = JSON.parse(stdout);
+      if (result.status === "success") {
+        return "authenticated";
+      }
+    } catch {
+    }
+    return null;
+  }
+}
+async function addFirebaseToProject(projectId) {
+  try {
+    await execAsync5(`firebase projects:addfirebase ${projectId} 2>&1`);
+    return { success: true };
+  } catch (error) {
+    let errorMessage = "";
+    if (error && typeof error === "object" && "stdout" in error) {
+      errorMessage = String(error.stdout);
+    }
+    if (!errorMessage && error && typeof error === "object" && "stderr" in error) {
+      errorMessage = String(error.stderr);
+    }
+    if (!errorMessage) {
+      errorMessage = String(error);
+    }
+    if (errorMessage.includes("already exists") || errorMessage.includes("ALREADY_EXISTS")) {
+      return { success: true };
+    }
+    if (errorMessage.includes("PERMISSION_DENIED")) {
+      return {
+        success: false,
+        error: "Permission denied. Make sure you have Firebase Admin permissions on the GCP project."
+      };
+    }
+    if (errorMessage.includes("NOT_FOUND")) {
+      return {
+        success: false,
+        error: "GCP project not found. Make sure the project ID is correct."
+      };
+    }
+    return { success: false, error: errorMessage || "Failed to add Firebase to project" };
+  }
+}
+function getFirebaseAuthConsoleUrl(projectId) {
+  return `https://console.firebase.google.com/project/${projectId}/authentication`;
+}
+function getBillingConsoleUrl(projectId) {
+  return `https://console.cloud.google.com/billing/linkedaccount?project=${projectId}`;
+}
+async function isBillingEnabled(projectId) {
+  try {
+    const { stdout } = await execAsync5(
+      `gcloud billing projects describe ${projectId} --format="value(billingEnabled)" 2>/dev/null`
+    );
+    return stdout.trim().toLowerCase() === "true";
+  } catch {
+    return false;
+  }
+}
+function generateProjectId(name) {
+  const cleanName = name.toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "");
+  const chars = "abcdefghijklmnopqrstuvwxyz0123456789";
+  let suffix = "";
+  for (let i = 0; i < 6; i++) {
+    suffix += chars.charAt(Math.floor(Math.random() * chars.length));
+  }
+  const maxNameLen = 30 - 1 - suffix.length;
+  const truncatedName = cleanName.slice(0, maxNameLen);
+  return `${truncatedName}-${suffix}`;
+}
+function isValidProjectId(projectId) {
+  if (!projectId) {
+    return { valid: false, error: "Project ID is required" };
+  }
+  if (projectId.length < 6 || projectId.length > 30) {
+    return { valid: false, error: "Project ID must be 6-30 characters" };
+  }
+  if (!/^[a-z]/.test(projectId)) {
+    return { valid: false, error: "Project ID must start with a lowercase letter" };
+  }
+  if (!/[a-z0-9]$/.test(projectId)) {
+    return { valid: false, error: "Project ID must end with a letter or digit" };
+  }
+  if (!/^[a-z][a-z0-9-]*[a-z0-9]$/.test(projectId)) {
+    return {
+      valid: false,
+      error: "Project ID can only contain lowercase letters, digits, and hyphens"
+    };
+  }
+  return { valid: true };
+}
+
 // src/templates/index.ts
 import * as fs from "fs/promises";
 import * as path from "path";
@@ -3390,6 +3504,386 @@ var UI_FRAMEWORKS = [
     description: "Simple HTML/CSS/JS - no build step"
   }
 ];
+async function waitForManualStep(description, url, instruction) {
+  console.log(chalk.yellow(`
+  ${description}
+`));
+  console.log(chalk.white(`  ${url}
+`));
+  console.log(chalk.gray(`  ${instruction}
+`));
+  const { action } = await inquirer.prompt([
+    {
+      type: "list",
+      name: "action",
+      message: "What would you like to do?",
+      choices: [
+        { name: "Continue (I've completed this step)", value: "continue" },
+        { name: "Open URL and wait", value: "open" },
+        { name: "Quit and resume later", value: "quit" }
+      ]
+    }
+  ]);
+  if (action === "open") {
+    const { exec: exec16 } = await import("child_process");
+    const { promisify: promisify16 } = await import("util");
+    const execAsync16 = promisify16(exec16);
+    try {
+      const platform = process.platform;
+      if (platform === "darwin") {
+        await execAsync16(`open "${url}"`);
+      } else if (platform === "win32") {
+        await execAsync16(`start "${url}"`);
+      } else {
+        await execAsync16(`xdg-open "${url}"`);
+      }
+      console.log(chalk.gray("\n  Opened in browser. Complete the step and press Enter.\n"));
+    } catch {
+      console.log(chalk.gray("\n  Could not open browser. Please open the URL manually.\n"));
+    }
+    await inquirer.prompt([
+      {
+        type: "input",
+        name: "done",
+        message: "Press Enter when done..."
+      }
+    ]);
+    return { continue: true, retry: false };
+  }
+  if (action === "quit") {
+    return { continue: false, retry: false };
+  }
+  return { continue: true, retry: false };
+}
+async function handleCreateProject(cwd, options) {
+  console.log(chalk.cyan(BANNER));
+  console.log(chalk.bold("  Create a new GCP + Firebase project\n"));
+  console.log(chalk.gray("\u2500".repeat(75)));
+  console.log(chalk.cyan.bold("\n  Step 1: Prerequisites\n"));
+  const gcloudSpinner = ora("Checking gcloud CLI...").start();
+  if (!await isGcloudInstalled()) {
+    gcloudSpinner.fail("gcloud CLI not found");
+    console.log(chalk.red("\n  gcloud CLI is required.\n"));
+    console.log(chalk.gray("  Install: https://cloud.google.com/sdk/docs/install\n"));
+    return;
+  }
+  const authInfo = await checkGcloudAuth();
+  if (!authInfo) {
+    gcloudSpinner.fail("Not authenticated to GCP");
+    console.log(chalk.red("\n  Please authenticate first:\n"));
+    console.log(chalk.white("    gcloud auth login"));
+    console.log(chalk.white("    gcloud auth application-default login\n"));
+    return;
+  }
+  gcloudSpinner.succeed(`gcloud authenticated as ${chalk.green(authInfo.account)}`);
+  const firebaseSpinner = ora("Checking Firebase CLI...").start();
+  if (!await isFirebaseInstalled()) {
+    firebaseSpinner.fail("Firebase CLI not found");
+    console.log(chalk.red("\n  Firebase CLI is required for --create-project.\n"));
+    console.log(chalk.gray("  Install: npm install -g firebase-tools"));
+    console.log(chalk.gray("  Then run: firebase login\n"));
+    return;
+  }
+  const firebaseAuth = await checkFirebaseAuth();
+  if (!firebaseAuth) {
+    firebaseSpinner.fail("Not authenticated to Firebase");
+    console.log(chalk.red("\n  Please authenticate first:\n"));
+    console.log(chalk.white("    firebase login\n"));
+    return;
+  }
+  firebaseSpinner.succeed("Firebase CLI authenticated");
+  console.log(chalk.gray("\n\u2500".repeat(75)));
+  console.log(chalk.cyan.bold("\n  Step 2: Project Details\n"));
+  let projectName = options.name;
+  if (!projectName) {
+    const defaultName = path4.basename(cwd).toLowerCase().replace(/[^a-z0-9-]/g, "-");
+    const { name } = await inquirer.prompt([
+      {
+        type: "input",
+        name: "name",
+        message: "Project name:",
+        default: defaultName,
+        validate: (input) => {
+          if (!input) return "Project name is required";
+          if (!/^[a-z][a-z0-9-]*$/.test(input)) {
+            return "Must start with letter, only lowercase, numbers, hyphens";
+          }
+          return true;
+        }
+      }
+    ]);
+    projectName = name;
+  }
+  const suggestedId = generateProjectId(projectName);
+  const { projectId } = await inquirer.prompt([
+    {
+      type: "input",
+      name: "projectId",
+      message: "GCP Project ID:",
+      default: suggestedId,
+      validate: (input) => {
+        const result = isValidProjectId(input);
+        return result.valid || result.error || "Invalid project ID";
+      }
+    }
+  ]);
+  let region = options.region;
+  if (!region) {
+    const regions = getRegionsForProvider("gcp");
+    const { selectedRegion } = await inquirer.prompt([
+      {
+        type: "list",
+        name: "selectedRegion",
+        message: "Region:",
+        choices: regions.map((r) => ({ name: r.name, value: r.value })),
+        default: "us-central1"
+      }
+    ]);
+    region = selectedRegion;
+  }
+  console.log(chalk.gray(`
+  Project: ${chalk.white(projectName)}`));
+  console.log(chalk.gray(`  GCP ID:  ${chalk.white(projectId)}`));
+  console.log(chalk.gray(`  Region:  ${chalk.white(region)}`));
+  console.log(chalk.gray("\n\u2500".repeat(75)));
+  console.log(chalk.cyan.bold("\n  Step 3: Create GCP Project\n"));
+  const createSpinner = ora("Creating GCP project...").start();
+  const createResult = await createProject(projectId, projectName);
+  if (!createResult.success) {
+    createSpinner.fail("Failed to create project");
+    console.log(chalk.red(`
+  ${createResult.error}
+`));
+    return;
+  }
+  createSpinner.succeed(`Created GCP project: ${chalk.green(projectId)}`);
+  await setActiveProject(projectId);
+  console.log(chalk.gray("\n\u2500".repeat(75)));
+  console.log(chalk.cyan.bold("\n  Step 4: Enable Billing\n"));
+  const billingSpinner = ora("Checking billing status...").start();
+  let billingEnabled = await isBillingEnabled(projectId);
+  if (billingEnabled) {
+    billingSpinner.succeed("Billing is already enabled");
+  } else {
+    billingSpinner.stop();
+    const billingAccounts = await listBillingAccounts();
+    if (billingAccounts.length > 0) {
+      const { billingAction } = await inquirer.prompt([
+        {
+          type: "list",
+          name: "billingAction",
+          message: "Link a billing account:",
+          choices: [
+            ...billingAccounts.map((b) => ({
+              name: `${b.name} (${b.id})`,
+              value: b.id
+            })),
+            new inquirer.Separator(),
+            { name: "Configure manually in GCP Console", value: "__manual__" }
+          ]
+        }
+      ]);
+      if (billingAction !== "__manual__") {
+        const linkSpinner = ora("Linking billing account...").start();
+        const linked = await linkBillingAccount(projectId, billingAction);
+        if (linked) {
+          linkSpinner.succeed("Billing account linked");
+          billingEnabled = true;
+        } else {
+          linkSpinner.warn("Could not link billing account automatically");
+        }
+      }
+    }
+    if (!billingEnabled) {
+      const billingUrl = getBillingConsoleUrl(projectId);
+      const result = await waitForManualStep(
+        "Billing must be enabled to use GCP services.",
+        billingUrl,
+        "Link a billing account in the GCP Console, then continue."
+      );
+      if (!result.continue) {
+        console.log(chalk.yellow("\n  Project created but billing not enabled."));
+        console.log(chalk.gray(`  Resume setup later by running: stacksolo init --project-id ${projectId}
+`));
+        return;
+      }
+    }
+  }
+  console.log(chalk.gray("\n\u2500".repeat(75)));
+  console.log(chalk.cyan.bold("\n  Step 5: Enable GCP APIs\n"));
+  const apisSpinner = ora("Enabling required APIs...").start();
+  const apiResult = await enableApis(projectId, REQUIRED_APIS, (api2, success) => {
+    if (success) {
+      apisSpinner.text = `Enabled ${api2}`;
+    }
+  });
+  if (apiResult.failed.length === 0) {
+    apisSpinner.succeed(`Enabled ${apiResult.enabled.length} APIs`);
+  } else {
+    apisSpinner.warn(`Enabled ${apiResult.enabled.length} APIs, ${apiResult.failed.length} failed`);
+    console.log(chalk.yellow("  Failed APIs (may need billing):"));
+    for (const api2 of apiResult.failed) {
+      console.log(chalk.gray(`    - ${api2}`));
+    }
+  }
+  console.log(chalk.gray("\n\u2500".repeat(75)));
+  console.log(chalk.cyan.bold("\n  Step 6: Add Firebase\n"));
+  const firebaseAddSpinner = ora("Adding Firebase to project...").start();
+  const firebaseResult = await addFirebaseToProject(projectId);
+  if (!firebaseResult.success) {
+    firebaseAddSpinner.fail("Failed to add Firebase");
+    console.log(chalk.red(`
+  ${firebaseResult.error}
+`));
+    console.log(chalk.gray("  You can add Firebase manually later:"));
+    console.log(chalk.white(`    firebase projects:addfirebase ${projectId}
+`));
+  } else {
+    firebaseAddSpinner.succeed("Firebase added to project");
+  }
+  console.log(chalk.gray("\n\u2500".repeat(75)));
+  console.log(chalk.cyan.bold("\n  Step 7: Configure Firebase Authentication\n"));
+  const authUrl = getFirebaseAuthConsoleUrl(projectId);
+  const { needsAuth } = await inquirer.prompt([
+    {
+      type: "confirm",
+      name: "needsAuth",
+      message: "Do you need Firebase Authentication?",
+      default: true
+    }
+  ]);
+  if (needsAuth) {
+    const authResult = await waitForManualStep(
+      "Enable authentication providers in Firebase Console.",
+      authUrl,
+      'Click "Get Started", then enable Email/Password, Google, or other providers.'
+    );
+    if (!authResult.continue) {
+      console.log(chalk.yellow("\n  You can configure auth later at:"));
+      console.log(chalk.gray(`  ${authUrl}
+`));
+    }
+  }
+  console.log(chalk.gray("\n\u2500".repeat(75)));
+  console.log(chalk.cyan.bold("\n  Step 8: Configure Permissions\n"));
+  const policySpinner = ora("Checking org policy...").start();
+  const policyStatus = await checkOrgPolicy(projectId);
+  if (policyStatus.hasRestriction && policyStatus.canOverride) {
+    policySpinner.text = "Fixing org policy...";
+    const fixed = await fixOrgPolicy(projectId);
+    if (fixed) {
+      policySpinner.succeed("Org policy configured for public access");
+    } else {
+      policySpinner.warn("Could not update org policy - some features may be limited");
+    }
+  } else if (policyStatus.hasRestriction) {
+    policySpinner.warn("Org policy restricts public access - contact your admin");
+  } else {
+    policySpinner.succeed("No org policy restrictions");
+  }
+  const iamSpinner = ora("Configuring Cloud Build permissions...").start();
+  const iamResult = await checkAndFixCloudBuildPermissions(projectId);
+  if (iamResult.failed.length === 0) {
+    iamSpinner.succeed("Cloud Build permissions configured");
+  } else {
+    iamSpinner.warn("Some permissions could not be set");
+  }
+  console.log(chalk.gray("\n\u2500".repeat(75)));
+  console.log(chalk.cyan.bold("\n  Step 9: Generate Project Files\n"));
+  const { projectType } = await inquirer.prompt([
+    {
+      type: "list",
+      name: "projectType",
+      message: "What are you building?",
+      choices: PROJECT_TYPES.map((t) => ({
+        name: `${t.name}
+      ${chalk.gray(t.description)}`,
+        value: t.value,
+        short: t.name
+      })),
+      default: "ui-api"
+    }
+  ]);
+  let uiFramework;
+  if (projectType === "ui-api" || projectType === "ui-only") {
+    const { selectedFramework } = await inquirer.prompt([
+      {
+        type: "list",
+        name: "selectedFramework",
+        message: "Which UI framework?",
+        choices: UI_FRAMEWORKS.map((f) => ({
+          name: `${f.name}
+      ${chalk.gray(f.description)}`,
+          value: f.value,
+          short: f.name
+        })),
+        default: "react"
+      }
+    ]);
+    uiFramework = selectedFramework;
+  }
+  const generateSpinner = ora("Generating configuration...").start();
+  const config = generateConfig({
+    projectName,
+    gcpProjectId: projectId,
+    region,
+    projectType,
+    uiFramework,
+    needsDatabase: false,
+    needsBucket: false
+  });
+  if (needsAuth) {
+    config.project.gcpKernel = {
+      name: "kernel",
+      firebaseProjectId: projectId,
+      storageBucket: `${projectId}.firebasestorage.app`
+    };
+    if (!config.project.plugins) {
+      config.project.plugins = [];
+    }
+    if (!config.project.plugins.includes("@stacksolo/plugin-gcp-kernel")) {
+      config.project.plugins.push("@stacksolo/plugin-gcp-kernel");
+    }
+  }
+  await createStacksoloDir(cwd, {
+    gcpProjectId: projectId,
+    orgPolicyFixed: !policyStatus.hasRestriction || policyStatus.canOverride,
+    apisEnabled: REQUIRED_APIS
+  });
+  await createConfigFile(cwd, config);
+  const scaffoldedFiles = await scaffoldTemplates(cwd, projectType, uiFramework);
+  generateSpinner.succeed("Project files created");
+  try {
+    const registry3 = getRegistry();
+    const configPath = path4.join(cwd, ".stacksolo", "stacksolo.config.json");
+    await registry3.registerProject({
+      name: projectName,
+      gcpProjectId: projectId,
+      region,
+      configPath
+    });
+  } catch {
+  }
+  console.log(chalk.gray("\n\u2500".repeat(75)));
+  console.log(chalk.bold.green("\n  Success! Your project is ready.\n"));
+  console.log(chalk.white("  Created:"));
+  console.log(chalk.green(`    \u2713 GCP Project: ${projectId}`));
+  console.log(chalk.green(`    \u2713 Firebase Project: ${projectId}`));
+  if (needsAuth) {
+    console.log(chalk.green("    \u2713 Firebase Auth enabled"));
+  }
+  console.log(chalk.green("    \u2713 .stacksolo/stacksolo.config.json"));
+  console.log(chalk.gray("\n  Next steps:\n"));
+  console.log(chalk.white("    1. Review your config:"));
+  console.log(chalk.cyan("       cat .stacksolo/stacksolo.config.json"));
+  console.log(chalk.white("    2. Install dependencies:"));
+  console.log(chalk.cyan("       npm install"));
+  console.log(chalk.white("    3. Start development:"));
+  console.log(chalk.cyan("       stacksolo dev"));
+  console.log(chalk.white("    4. Deploy to GCP:"));
+  console.log(chalk.cyan("       stacksolo deploy"));
+  console.log("");
+}
 async function handleRemoteTemplate(cwd, options) {
   console.log(chalk.cyan(BANNER));
   console.log(chalk.bold(`  Initializing from template: ${options.template}
@@ -3600,8 +4094,11 @@ async function handleRemoteTemplate(cwd, options) {
 `));
   }
 }
-var initCommand = new Command("init").description("Initialize a new StackSolo project").option("-n, --name <name>", "Project name").option("--project-id <id>", "GCP project ID").option("-r, --region <region>", "Region").option("-t, --template <template>", "Project template (function-api, container-api, firebase-app, etc.)").option("-y, --yes", "Skip prompts and use defaults").option("--skip-org-policy", "Skip org policy check and fix").option("--skip-apis", "Skip enabling GCP APIs").option("--list-templates", "List available remote templates").action(async (options) => {
+var initCommand = new Command("init").description("Initialize a new StackSolo project").option("-n, --name <name>", "Project name").option("--project-id <id>", "GCP project ID").option("-r, --region <region>", "Region").option("-t, --template <template>", "Project template (function-api, container-api, firebase-app, etc.)").option("-y, --yes", "Skip prompts and use defaults").option("--skip-org-policy", "Skip org policy check and fix").option("--skip-apis", "Skip enabling GCP APIs").option("--list-templates", "List available remote templates").option("--create-project", "Create a new GCP + Firebase project").action(async (options) => {
   const cwd = process.cwd();
+  if (options.createProject) {
+    return await handleCreateProject(cwd, options);
+  }
   if (options.listTemplates) {
     const spinner = ora("Fetching available templates...").start();
     try {
@@ -4717,7 +5214,7 @@ function resolveContainer(container, networkName, defaultRegion, networkId, regi
   }
   return {
     id: `container-${container.name}`,
-    type: "gcp:cloud_run",
+    type: "gcp-cdktf:cloud_run",
     name: container.name,
     config: {
       name: container.name,
@@ -4775,7 +5272,7 @@ function resolveFunction(fn, networkName, defaultRegion, networkId, registryId)
   }
   return {
     id: `function-${fn.name}`,
-    type: "gcp:cloud_function",
+    type: "gcp-cdktf:cloud_function",
     name: fn.name,
     config: {
       name: fn.name,
@@ -5091,6 +5588,10 @@ function resolveCdktfConfig(config, projectInfo) {
     const functionId = `function-${fn.name}`;
     functionIds.push(functionId);
     functionNames.push(functionName);
+    const functionEnv = {
+      ...hasGcpKernel ? { GOOGLE_CLOUD_PROJECT: projectInfo.gcpProjectId } : {},
+      ...fn.env
+    };
     resources.push({
       id: functionId,
       type: "gcp-cdktf:cloud_function",
@@ -5108,7 +5609,8 @@ function resolveCdktfConfig(config, projectInfo) {
         vpcConnector: connectorName,
         allowUnauthenticated: fn.allowUnauthenticated ?? true,
         projectId: projectInfo.gcpProjectId,
-        projectName: projectInfo.name
+        projectName: projectInfo.name,
+        environmentVariables: Object.keys(functionEnv).length > 0 ? functionEnv : void 0
       },
       dependsOn: [connectorId],
       network: network.name
@@ -9197,17 +9699,17 @@ import ora4 from "ora";
 import * as path14 from "path";
 import * as fs11 from "fs/promises";
 import { homedir as homedir3 } from "os";
-import { spawn as spawn4, exec as exec10 } from "child_process";
-import { promisify as promisify10 } from "util";
+import { spawn as spawn4, exec as exec11 } from "child_process";
+import { promisify as promisify11 } from "util";
 
 // src/services/deploy.service.ts
 import * as fs7 from "fs/promises";
 import * as path9 from "path";
-import { exec as exec5, spawn as spawn2 } from "child_process";
-import { promisify as promisify5 } from "util";
+import { exec as exec6, spawn as spawn2 } from "child_process";
+import { promisify as promisify6 } from "util";
 init_plugin_loader_service();
 import { registry as registry2 } from "@stacksolo/core";
-var execAsync5 = promisify5(exec5);
+var execAsync6 = promisify6(exec6);
 async function execStreaming(command, options = {}) {
   return new Promise((resolve7, reject) => {
     const { cwd, onOutput, timeout = 3e5 } = options;
@@ -9267,7 +9769,11 @@ async function deployConfig(config, _stateDir, options = {}) {
   };
   try {
     if (!pluginsLoaded) {
-      await loadPlugins(config.project.plugins);
+      const pluginsToLoad = [...config.project.plugins || []];
+      if (config.project.gcpKernel && !pluginsToLoad.includes("@stacksolo/plugin-gcp-kernel")) {
+        pluginsToLoad.push("@stacksolo/plugin-gcp-kernel");
+      }
+      await loadPlugins(pluginsToLoad);
       pluginsLoaded = true;
     }
     const resolved = resolveConfig(config);
@@ -9329,11 +9835,11 @@ async function deployConfig(config, _stateDir, options = {}) {
           await fs7.access(nodeModulesPath);
         } catch {
           log(`Installing dependencies for ${fnName}...`);
-          await execAsync5("npm install", { cwd: sourceDir, timeout: 12e4 });
+          await execAsync6("npm install", { cwd: sourceDir, timeout: 12e4 });
         }
         if (packageJson2.scripts?.build) {
           log(`Building ${fnName} (TypeScript)...`);
-          await execAsync5("npm run build", { cwd: sourceDir, timeout: 6e4 });
+          await execAsync6("npm run build", { cwd: sourceDir, timeout: 6e4 });
           isTypeScriptProject = true;
         }
       } catch {
@@ -9342,7 +9848,7 @@ async function deployConfig(config, _stateDir, options = {}) {
         const distDir = path9.join(sourceDir, "dist");
         const stagingDir = path9.join(workDir, `staging-${fnName}`);
         await fs7.mkdir(stagingDir, { recursive: true });
-        await execAsync5(`cp -r "${distDir}"/* "${stagingDir}"/`, { timeout: 3e4 });
+        await execAsync6(`cp -r "${distDir}"/* "${stagingDir}"/`, { timeout: 3e4 });
         const pkgContent = await fs7.readFile(packageJsonPath, "utf-8");
         const pkg2 = JSON.parse(pkgContent);
         if (pkg2.main && pkg2.main.startsWith("dist/")) {
@@ -9355,10 +9861,10 @@ async function deployConfig(config, _stateDir, options = {}) {
         }
         delete pkg2.devDependencies;
         await fs7.writeFile(path9.join(stagingDir, "package.json"), JSON.stringify(pkg2, null, 2));
-        await execAsync5(`cd "${stagingDir}" && zip -r "${sourceZipPath}" .`, { timeout: 6e4 });
+        await execAsync6(`cd "${stagingDir}" && zip -r "${sourceZipPath}" .`, { timeout: 6e4 });
         await fs7.rm(stagingDir, { recursive: true, force: true });
       } else {
-        await execAsync5(`cd "${sourceDir}" && zip -r "${sourceZipPath}" . -x "*.git*" -x "node_modules/*"`, { timeout: 6e4 });
+        await execAsync6(`cd "${sourceDir}" && zip -r "${sourceZipPath}" . -x "*.git*" -x "node_modules/*"`, { timeout: 6e4 });
       }
       sourceZips.push({ name: fnName, zipPath: sourceZipPath });
     }
@@ -9366,7 +9872,7 @@ async function deployConfig(config, _stateDir, options = {}) {
     if (!preview && gcpKernelResources.length > 0) {
       log(`Configuring Docker authentication for gcr.io...`);
       try {
-        await execAsync5(`gcloud auth configure-docker gcr.io --quiet`, { timeout: 3e4 });
+        await execAsync6(`gcloud auth configure-docker gcr.io --quiet`, { timeout: 3e4 });
       } catch (error) {
         log(`Warning: Failed to configure Docker auth for GCR: ${error instanceof Error ? error.message : error}`);
       }
@@ -9407,11 +9913,11 @@ async function deployConfig(config, _stateDir, options = {}) {
             await fs7.access(nodeModulesPath);
           } catch {
             log(`Installing dependencies for GCP Kernel...`);
-            await execAsync5("npm install", { cwd: kernelSourceDir, timeout: 12e4 });
+            await execAsync6("npm install", { cwd: kernelSourceDir, timeout: 12e4 });
           }
           if (pkg2.scripts?.build) {
             log(`Building GCP Kernel TypeScript...`);
-            await execAsync5("npm run build", { cwd: kernelSourceDir, timeout: 6e4 });
+            await execAsync6("npm run build", { cwd: kernelSourceDir, timeout: 6e4 });
           }
         } catch (buildError) {
           log(`Warning: Could not build kernel TypeScript: ${buildError instanceof Error ? buildError.message : buildError}`);
@@ -9426,7 +9932,7 @@ async function deployConfig(config, _stateDir, options = {}) {
             throw new Error(buildResult.stderr || "Docker build failed");
           }
         } else {
-          await execAsync5(`docker build --platform linux/amd64 -t "${kernelImage}" .`, { cwd: kernelSourceDir, timeout: 3e5 });
+          await execAsync6(`docker build --platform linux/amd64 -t "${kernelImage}" .`, { cwd: kernelSourceDir, timeout: 3e5 });
         }
         log(`Pushing Docker image: ${kernelImage}`);
         if (verbose) {
@@ -9438,7 +9944,7 @@ async function deployConfig(config, _stateDir, options = {}) {
             throw new Error(pushResult.stderr || "Docker push failed");
           }
         } else {
-          await execAsync5(`docker push "${kernelImage}"`, { timeout: 3e5 });
+          await execAsync6(`docker push "${kernelImage}"`, { timeout: 3e5 });
         }
         log(`GCP Kernel built and pushed successfully`);
       }
@@ -9486,9 +9992,9 @@ async function deployConfig(config, _stateDir, options = {}) {
     };
     await fs7.writeFile(path9.join(workDir, "tsconfig.json"), JSON.stringify(tsconfig, null, 2));
     log("Installing npm dependencies...");
-    await execAsync5("npm install", { cwd: workDir, timeout: 12e4 });
+    await execAsync6("npm install", { cwd: workDir, timeout: 12e4 });
     log("Synthesizing Terraform configuration...");
-    await execAsync5("npx ts-node main.ts", { cwd: workDir, timeout: 6e4 });
+    await execAsync6("npx ts-node main.ts", { cwd: workDir, timeout: 6e4 });
     const stackDir = path9.join(workDir, "cdktf.out", "stacks", "main");
     for (const { name, zipPath } of sourceZips) {
       await fs7.copyFile(zipPath, path9.join(stackDir, `${name}-source.zip`));
@@ -9505,7 +10011,7 @@ terraform {
     if (verbose) {
       await execStreaming("terraform init", { cwd: stackDir, onOutput: verboseLog });
     } else {
-      await execAsync5("terraform init", { cwd: stackDir });
+      await execAsync6("terraform init", { cwd: stackDir });
     }
     if (destroy) {
       log("Destroying resources...");
@@ -9519,7 +10025,7 @@ terraform {
           throw new Error(result.stderr || "Terraform destroy failed");
         }
       } else {
-        await execAsync5("terraform destroy -auto-approve", { cwd: stackDir });
+        await execAsync6("terraform destroy -auto-approve", { cwd: stackDir });
       }
       return {
         success: true,
@@ -9532,7 +10038,7 @@ terraform {
       if (verbose) {
         await execStreaming("terraform plan", { cwd: stackDir, onOutput: verboseLog });
       } else {
-        const { stdout } = await execAsync5("terraform plan", { cwd: stackDir });
+        const { stdout } = await execAsync6("terraform plan", { cwd: stackDir });
         log(stdout);
       }
       return {
@@ -9554,7 +10060,7 @@ terraform {
           throw new Error(result.stderr || "Terraform apply failed");
         }
       } else {
-        await execAsync5("terraform apply -auto-approve", { cwd: stackDir });
+        await execAsync6("terraform apply -auto-approve", { cwd: stackDir });
       }
     } catch (applyError) {
       const errorStr = String(applyError);
@@ -9570,7 +10076,7 @@ terraform {
       const region = config.project.region;
       log(`Configuring Docker authentication for ${region}-docker.pkg.dev...`);
       try {
-        await execAsync5(`gcloud auth configure-docker ${region}-docker.pkg.dev --quiet`, { timeout: 3e4 });
+        await execAsync6(`gcloud auth configure-docker ${region}-docker.pkg.dev --quiet`, { timeout: 3e4 });
       } catch (error) {
         log(`Warning: Failed to configure Docker auth: ${error instanceof Error ? error.message : error}`);
         log("You may need to run: gcloud auth configure-docker " + region + "-docker.pkg.dev");
@@ -9601,11 +10107,11 @@ terraform {
             await fs7.access(nodeModulesPath);
           } catch {
             log(`Installing dependencies for ${containerName}...`);
-            await execAsync5("npm install", { cwd: sourceDir, timeout: 12e4 });
+            await execAsync6("npm install", { cwd: sourceDir, timeout: 12e4 });
           }
           if (pkg2.scripts?.build) {
             log(`Building ${containerName}...`);
-            await execAsync5("npm run build", { cwd: sourceDir, timeout: 6e4 });
+            await execAsync6("npm run build", { cwd: sourceDir, timeout: 6e4 });
           }
         } catch {
         }
@@ -9620,7 +10126,7 @@ terraform {
             throw new Error(buildResult.stderr || "Docker build failed");
           }
         } else {
-          await execAsync5(`docker build -t "${image}" .`, { cwd: sourceDir, timeout: 3e5 });
+          await execAsync6(`docker build -t "${image}" .`, { cwd: sourceDir, timeout: 3e5 });
         }
         log(`Pushing Docker image: ${image}`);
         if (verbose) {
@@ -9632,7 +10138,7 @@ terraform {
             throw new Error(pushResult.stderr || "Docker push failed");
           }
         } else {
-          await execAsync5(`docker push "${image}"`, { timeout: 3e5 });
+          await execAsync6(`docker push "${image}"`, { timeout: 3e5 });
         }
         log(`Container ${containerName} built and pushed successfully`);
       }
@@ -9648,11 +10154,11 @@ terraform {
             throw new Error(result.stderr || "Terraform re-apply failed");
           }
         } else {
-          await execAsync5("terraform apply -auto-approve", { cwd: stackDir });
+          await execAsync6("terraform apply -auto-approve", { cwd: stackDir });
         }
       }
     }
-    const { stdout: outputJson } = await execAsync5("terraform output -json", { cwd: stackDir });
+    const { stdout: outputJson } = await execAsync6("terraform output -json", { cwd: stackDir });
     const outputs = JSON.parse(outputJson || "{}");
     const outputValues = {};
     for (const [key, value] of Object.entries(outputs)) {
@@ -9703,10 +10209,10 @@ terraform {
             await fs7.access(nodeModulesPath);
           } catch {
             log(`Installing dependencies for ${uiName}...`);
-            await execAsync5("npm install", { cwd: sourceDir, timeout: 12e4 });
+            await execAsync6("npm install", { cwd: sourceDir, timeout: 12e4 });
           }
           log(`Building ${uiName} (${detectedFramework})...`);
-          await execAsync5(buildCommand2, { cwd: sourceDir, timeout: 12e4 });
+          await execAsync6(buildCommand2, { cwd: sourceDir, timeout: 12e4 });
         } else {
           distPath = sourceDir;
         }
@@ -9718,7 +10224,7 @@ terraform {
           continue;
         }
         log(`Uploading ${uiName} to gs://${bucketName}...`);
-        await execAsync5(`gsutil -m rsync -r -d "${distPath}" gs://${bucketName}`, { timeout: 3e5 });
+        await execAsync6(`gsutil -m rsync -r -d "${distPath}" gs://${bucketName}`, { timeout: 3e5 });
         log(`UI ${uiName} deployed to gs://${bucketName}`);
       }
     }
@@ -9729,7 +10235,7 @@ terraform {
       log("Provisioning IAP service agent...");
       let iapServiceAccount = null;
       try {
-        const { stdout: identityOutput } = await execAsync5(
+        const { stdout: identityOutput } = await execAsync6(
           `gcloud beta services identity create --service=iap.googleapis.com --project=${gcpProjectId} 2>&1`,
           { timeout: 6e4 }
         );
@@ -9761,7 +10267,7 @@ terraform {
           const region = config.project.region;
           log(`Granting IAP service account invoker role on Cloud Run: ${cloudRunServiceName}`);
           try {
-            await execAsync5(
+            await execAsync6(
               `gcloud run services add-iam-policy-binding ${cloudRunServiceName} --region=${region} --project=${gcpProjectId} --member="serviceAccount:${iapServiceAccount}" --role="roles/run.invoker"`,
               { timeout: 6e4 }
             );
@@ -9774,7 +10280,7 @@ terraform {
         }
         log(`Enabling IAP on backend: ${backendServiceName}`);
         try {
-          await execAsync5(
+          await execAsync6(
             `gcloud compute backend-services update ${backendServiceName} --global --project=${gcpProjectId} --iap=enabled`,
             { timeout: 6e4 }
           );
@@ -9782,7 +10288,7 @@ terraform {
           for (const member of allowedMembers) {
             log(`Granting IAP access to: ${member}`);
             try {
-              await execAsync5(
+              await execAsync6(
                 `gcloud iap web add-iam-policy-binding --resource-type=backend-services --service=${backendServiceName} --project=${gcpProjectId} --member="${member}" --role="roles/iap.httpsResourceAccessor"`,
                 { timeout: 6e4 }
               );
@@ -9863,8 +10369,8 @@ function generateCdktfMain(config, generated) {
 // src/services/k8s-deploy.service.ts
 import * as fs8 from "fs/promises";
 import * as path10 from "path";
-import { exec as exec6 } from "child_process";
-import { promisify as promisify6 } from "util";
+import { exec as exec7 } from "child_process";
+import { promisify as promisify7 } from "util";
 
 // src/generators/k8s/yaml.ts
 function toYaml(obj, indent = 0) {
@@ -9941,7 +10447,7 @@ function combineYamlDocuments(documents) {
 }
 
 // src/services/k8s-deploy.service.ts
-var execAsync6 = promisify6(exec6);
+var execAsync7 = promisify7(exec7);
 async function deployToKubernetes(options) {
   const { config, resources, imageTag = "latest", dryRun = false, onLog = console.log, onVerbose } = options;
   const project = config.project;
@@ -9976,7 +10482,7 @@ async function deployToKubernetes(options) {
     log("Applying manifests to cluster...");
     const kubectlArgs = k8sConfig.context ? `--context ${k8sConfig.context}` : "";
     const kubeconfigArg = k8sConfig.kubeconfig ? `--kubeconfig ${k8sConfig.kubeconfig}` : "";
-    await execAsync6(
+    await execAsync7(
       `kubectl apply -f "${manifestDir}" ${kubectlArgs} ${kubeconfigArg}`.trim(),
       { timeout: 12e4 }
     );
@@ -9986,7 +10492,7 @@ async function deployToKubernetes(options) {
       const deploymentName = deployment.config.name;
       verbose?.(`  Waiting for ${deploymentName}...`);
       try {
-        await execAsync6(
+        await execAsync7(
           `kubectl rollout status deployment/${deploymentName} -n ${namespace} --timeout=120s ${kubectlArgs} ${kubeconfigArg}`.trim(),
           { timeout: 13e4 }
         );
@@ -10054,11 +10560,11 @@ async function buildAndPushImages(config, resources, tag = "latest", options = {
         await generateFunctionDockerfile(fullSourceDir, runtime);
       }
       verboseLog?.(`  docker build -t ${imageUrl} ${fullSourceDir}`);
-      await execAsync6(`docker build -t "${imageUrl}" "${fullSourceDir}"`, {
+      await execAsync7(`docker build -t "${imageUrl}" "${fullSourceDir}"`, {
         timeout: 3e5
       });
       log(`Pushing ${imageUrl}...`);
-      await execAsync6(`docker push "${imageUrl}"`, { timeout: 3e5 });
+      await execAsync7(`docker push "${imageUrl}"`, { timeout: 3e5 });
       builtImages.push(imageUrl);
     }
     return {
@@ -10345,7 +10851,7 @@ async function checkKubernetesConnection(context, kubeconfig) {
   try {
     const contextArg = context ? `--context ${context}` : "";
     const kubeconfigArg = kubeconfig ? `--kubeconfig ${kubeconfig}` : "";
-    await execAsync6(
+    await execAsync7(
       `kubectl cluster-info ${contextArg} ${kubeconfigArg}`.trim(),
       { timeout: 1e4 }
     );
@@ -10487,8 +10993,8 @@ import path13 from "path";
 import * as fs10 from "fs/promises";
 import chalk4 from "chalk";
 import inquirer3 from "inquirer";
-import { exec as exec9 } from "child_process";
-import { promisify as promisify9 } from "util";
+import { exec as exec10 } from "child_process";
+import { promisify as promisify10 } from "util";
 
 // src/services/terraform-state.service.ts
 import { existsSync as existsSync6, readFileSync as readFileSync4 } from "fs";
@@ -10583,15 +11089,15 @@ function isResourceInState(gcpResource, state) {
 }
 
 // src/services/gcp-scanner.service.ts
-import { exec as exec7 } from "child_process";
-import { promisify as promisify7 } from "util";
-var execAsync7 = promisify7(exec7);
+import { exec as exec8 } from "child_process";
+import { promisify as promisify8 } from "util";
+var execAsync8 = promisify8(exec8);
 function matchesProjectPattern(resourceName, projectName, gcpProjectId) {
   return resourceName.startsWith(`${projectName}-`) || resourceName.startsWith(`${gcpProjectId}-${projectName}-`);
 }
 async function runGcloudCommand(command, timeoutMs = 3e4) {
   try {
-    const { stdout } = await execAsync7(command, { timeout: timeoutMs });
+    const { stdout } = await execAsync8(command, { timeout: timeoutMs });
     const trimmed = stdout.trim();
     if (!trimmed || trimmed === "[]") {
       return [];
@@ -10811,9 +11317,9 @@ async function scanGcpResources(options) {
 }
 
 // src/services/terraform-import.service.ts
-import { exec as exec8 } from "child_process";
-import { promisify as promisify8 } from "util";
-var execAsync8 = promisify8(exec8);
+import { exec as exec9 } from "child_process";
+import { promisify as promisify9 } from "util";
+var execAsync9 = promisify9(exec9);
 function toTerraformName(name) {
   return name.replace(/[^a-zA-Z0-9]/g, "-");
 }
@@ -10944,7 +11450,7 @@ async function importResource(conflict, config, stackDir) {
   const importId = mapping.importIdFormatter(conflict.resource, config);
   const tfAddress = mapping.terraformAddressFormatter(conflict.resource);
   try {
-    await execAsync8(`terraform import '${tfAddress}' '${importId}'`, {
+    await execAsync9(`terraform import '${tfAddress}' '${importId}'`, {
       cwd: stackDir,
       timeout: 6e4
     });
@@ -10985,7 +11491,7 @@ function getImportCommand(resource, config) {
 }
 
 // src/services/preflight.service.ts
-var execAsync9 = promisify9(exec9);
+var execAsync10 = promisify10(exec10);
 function groupByType(conflicts) {
   const groups = {};
   for (const conflict of conflicts) {
@@ -11139,7 +11645,7 @@ async function runKernelPreflightCheck(gcpProjectId, cwd = process.cwd()) {
   const errors = [];
   const warnings = [];
   try {
-    await execAsync9("docker info", { timeout: 1e4 });
+    await execAsync10("docker info", { timeout: 1e4 });
     checks.push({
       name: "Docker",
       status: "pass",
@@ -11174,7 +11680,7 @@ async function runKernelPreflightCheck(gcpProjectId, cwd = process.cwd()) {
     }
   }
   try {
-    await execAsync9("gcloud --version", { timeout: 1e4 });
+    await execAsync10("gcloud --version", { timeout: 1e4 });
     checks.push({
       name: "gcloud CLI",
       status: "pass",
@@ -11190,7 +11696,7 @@ async function runKernelPreflightCheck(gcpProjectId, cwd = process.cwd()) {
     errors.push("gcloud CLI is not installed");
   }
   try {
-    const { stdout } = await execAsync9('gcloud auth list --filter=status:ACTIVE --format="value(account)"', { timeout: 1e4 });
+    const { stdout } = await execAsync10('gcloud auth list --filter=status:ACTIVE --format="value(account)"', { timeout: 1e4 });
     if (stdout.trim()) {
       checks.push({
         name: "GCP Authentication",
@@ -11278,7 +11784,7 @@ async function runKernelPreflightCheck(gcpProjectId, cwd = process.cwd()) {
   }
   if (gcpProjectId) {
     try {
-      const { stdout } = await execAsync9(
+      const { stdout } = await execAsync10(
         `gcloud services list --project=${gcpProjectId} --format="value(config.name)" --filter="config.name:(run.googleapis.com OR cloudbuild.googleapis.com OR firestore.googleapis.com)"`,
         { timeout: 3e4 }
       );
@@ -11430,7 +11936,7 @@ async function ensureCloudFunctionsPrerequisites(gcpProjectId, region) {
   const errors = [];
   let projectNumber;
   try {
-    const { stdout } = await execAsync9(
+    const { stdout } = await execAsync10(
       `gcloud projects describe ${gcpProjectId} --format="value(projectNumber)"`
     );
     projectNumber = stdout.trim();
@@ -11448,7 +11954,7 @@ async function ensureCloudFunctionsPrerequisites(gcpProjectId, region) {
   ];
   for (const api2 of requiredApis) {
     try {
-      await execAsync9(
+      await execAsync10(
         `gcloud services enable ${api2} --project=${gcpProjectId} --quiet`,
         { timeout: 6e4 }
       );
@@ -11468,7 +11974,7 @@ async function ensureCloudFunctionsPrerequisites(gcpProjectId, region) {
   ];
   for (const role of cloudBuildRoles) {
     try {
-      await execAsync9(
+      await execAsync10(
         `gcloud projects add-iam-policy-binding ${gcpProjectId} --member="serviceAccount:${cloudBuildSa}" --role="${role}" --condition=None --quiet`,
         { timeout: 3e4 }
       );
@@ -11484,7 +11990,7 @@ async function ensureCloudFunctionsPrerequisites(gcpProjectId, region) {
   ];
   for (const role of serverlessRoles) {
     try {
-      await execAsync9(
+      await execAsync10(
         `gcloud projects add-iam-policy-binding ${gcpProjectId} --member="serviceAccount:${serverlessRobotSa}" --role="${role}" --condition=None --quiet`,
         { timeout: 3e4 }
       );
@@ -11499,7 +12005,7 @@ async function ensureCloudFunctionsPrerequisites(gcpProjectId, region) {
   ];
   for (const role of computeRoles) {
     try {
-      await execAsync9(
+      await execAsync10(
         `gcloud projects add-iam-policy-binding ${gcpProjectId} --member="serviceAccount:${defaultComputeSa}" --role="${role}" --condition=None --quiet`,
         { timeout: 3e4 }
       );
@@ -11508,7 +12014,7 @@ async function ensureCloudFunctionsPrerequisites(gcpProjectId, region) {
     }
   }
   try {
-    await execAsync9(
+    await execAsync10(
       `gcloud artifacts repositories describe gcf-artifacts --location=${region} --project=${gcpProjectId}`,
       { timeout: 3e4 }
     );
@@ -11517,7 +12023,7 @@ async function ensureCloudFunctionsPrerequisites(gcpProjectId, region) {
     for (const sa of serviceAccounts) {
       for (const role of repoRoles) {
         try {
-          await execAsync9(
+          await execAsync10(
             `gcloud artifacts repositories add-iam-policy-binding gcf-artifacts --location=${region} --project=${gcpProjectId} --member="serviceAccount:${sa}" --role="${role}" --quiet`,
             { timeout: 3e4 }
           );
@@ -11528,7 +12034,7 @@ async function ensureCloudFunctionsPrerequisites(gcpProjectId, region) {
     }
   } catch {
     try {
-      await execAsync9(
+      await execAsync10(
         `gcloud artifacts repositories create gcf-artifacts --repository-format=docker --location=${region} --project=${gcpProjectId} --description="Cloud Functions artifacts" --quiet`,
         { timeout: 6e4 }
       );
@@ -11538,7 +12044,7 @@ async function ensureCloudFunctionsPrerequisites(gcpProjectId, region) {
       for (const sa of serviceAccounts) {
         for (const role of repoRoles) {
           try {
-            await execAsync9(
+            await execAsync10(
               `gcloud artifacts repositories add-iam-policy-binding gcf-artifacts --location=${region} --project=${gcpProjectId} --member="serviceAccount:${sa}" --role="${role}" --quiet`,
               { timeout: 3e4 }
             );
@@ -11560,7 +12066,7 @@ async function ensureCloudFunctionsPrerequisites(gcpProjectId, region) {
 
 // src/commands/infra/deploy.ts
 init_plugin_loader_service();
-var execAsync10 = promisify10(exec10);
+var execAsync11 = promisify11(exec11);
 var STACKSOLO_DIR4 = ".stacksolo";
 function sleep(ms) {
   return new Promise((resolve7) => setTimeout(resolve7, ms));
@@ -12102,7 +12608,7 @@ async function runDeploy(options, retryCount = 0, retryContext = {}, sessionId)
       console.log(progress.next());
       const authSpinner = ora4("Configuring Docker authentication...").start();
       try {
-        await execAsync10(
+        await execAsync11(
           `gcloud auth configure-docker ${config.project.region}-docker.pkg.dev --quiet`
         );
         authSpinner.succeed("Docker authentication configured");
@@ -12123,7 +12629,7 @@ async function runDeploy(options, retryCount = 0, retryContext = {}, sessionId)
         }
         const buildSpinner = ora4(`Building ${container.name}...`).start();
         try {
-          await execAsync10(`docker build -t "${imageTag}" "${sourceDir}"`, {
+          await execAsync11(`docker build -t "${imageTag}" "${sourceDir}"`, {
             maxBuffer: 50 * 1024 * 1024
           });
           buildSpinner.succeed(`Built ${container.name}`);
@@ -12136,7 +12642,7 @@ async function runDeploy(options, retryCount = 0, retryContext = {}, sessionId)
         }
         const pushSpinner = ora4(`Pushing ${container.name}...`).start();
         try {
-          await execAsync10(`docker push "${imageTag}"`);
+          await execAsync11(`docker push "${imageTag}"`);
           pushSpinner.succeed(`Pushed ${container.name}`);
           console.log(chalk5.gray(`    ${imageTag}
 `));
@@ -12230,7 +12736,7 @@ async function runDeploy(options, retryCount = 0, retryContext = {}, sessionId)
         const namespace = k8sConfig.namespace || config.project.name;
         const releaseName = config.project.name;
         try {
-          await execAsync10(
+          await execAsync11(
             `helm upgrade --install ${releaseName} ${helmOutputDir} --namespace ${namespace} --create-namespace`
           );
           console.log(chalk5.green("\n  Deployed successfully with Helm!"));
@@ -12487,7 +12993,7 @@ async function runDeploy(options, retryCount = 0, retryContext = {}, sessionId)
 `));
         const spinner2 = ora4(`Enabling ${apiName}...`).start();
         try {
-          await execAsync10(`gcloud services enable ${apiName} --project=${config.project.gcpProjectId}`);
+          await execAsync11(`gcloud services enable ${apiName} --project=${config.project.gcpProjectId}`);
           spinner2.succeed(`Enabled ${apiName}`);
           console.log(chalk5.gray("  Waiting 30 seconds for API to propagate...\n"));
           await sleep(3e4);
@@ -12698,11 +13204,11 @@ async function promptFixBuildPermissions() {
 }
 async function checkCloudBuildPermissions(gcpProjectId) {
   try {
-    const { stdout: projectNumber } = await execAsync10(
+    const { stdout: projectNumber } = await execAsync11(
       `gcloud projects describe ${gcpProjectId} --format="value(projectNumber)"`
     );
     const trimmedProjectNumber = projectNumber.trim();
-    const { stdout: policy } = await execAsync10(
+    const { stdout: policy } = await execAsync11(
       `gcloud projects get-iam-policy ${gcpProjectId} --format="json" --flatten="bindings[].members" --filter="bindings.members:${trimmedProjectNumber}@cloudbuild.gserviceaccount.com AND bindings.role:roles/storage.objectViewer"`
     );
     return policy.trim().length > 10;
@@ -12713,7 +13219,7 @@ async function checkCloudBuildPermissions(gcpProjectId) {
 async function grantCloudBuildPermissions(gcpProjectId, region) {
   const spinner = ora4("Getting project number...").start();
   try {
-    const { stdout: projectNumber } = await execAsync10(
+    const { stdout: projectNumber } = await execAsync11(
       `gcloud projects describe ${gcpProjectId} --format="value(projectNumber)"`
     );
     const trimmedProjectNumber = projectNumber.trim();
@@ -12724,7 +13230,7 @@ async function grantCloudBuildPermissions(gcpProjectId, region) {
     ];
     spinner.text = "Granting permissions to Cloud Build service account...";
     for (const { role } of cloudBuildRoles) {
-      await execAsync10(
+      await execAsync11(
         `gcloud projects add-iam-policy-binding ${gcpProjectId} --member="serviceAccount:${trimmedProjectNumber}@cloudbuild.gserviceaccount.com" --role="${role}" --quiet`
       );
     }
@@ -12735,13 +13241,13 @@ async function grantCloudBuildPermissions(gcpProjectId, region) {
     ];
     spinner.text = "Granting permissions to Cloud Functions service account...";
     for (const { role } of serverlessRobotRoles) {
-      await execAsync10(
+      await execAsync11(
         `gcloud projects add-iam-policy-binding ${gcpProjectId} --member="serviceAccount:service-${trimmedProjectNumber}@serverless-robot-prod.iam.gserviceaccount.com" --role="${role}" --quiet`
       );
     }
     spinner.text = "Checking for gcf-artifacts repository...";
     try {
-      await execAsync10(`gcloud artifacts repositories describe gcf-artifacts --location=${region} --project=${gcpProjectId}`);
+      await execAsync11(`gcloud artifacts repositories describe gcf-artifacts --location=${region} --project=${gcpProjectId}`);
       await grantGcfArtifactsPermissions(gcpProjectId, region);
     } catch {
     }
@@ -12759,7 +13265,7 @@ async function grantCloudBuildPermissions(gcpProjectId, region) {
 async function grantGcfArtifactsPermissions(gcpProjectId, region) {
   const spinner = ora4("Granting gcf-artifacts permissions...").start();
   try {
-    const { stdout: projectNumber } = await execAsync10(
+    const { stdout: projectNumber } = await execAsync11(
       `gcloud projects describe ${gcpProjectId} --format="value(projectNumber)"`
     );
     const trimmedProjectNumber = projectNumber.trim();
@@ -12771,7 +13277,7 @@ async function grantGcfArtifactsPermissions(gcpProjectId, region) {
     spinner.text = "Granting artifactregistry.writer on gcf-artifacts...";
     for (const sa of serviceAccounts) {
       try {
-        await execAsync10(
+        await execAsync11(
           `gcloud artifacts repositories add-iam-policy-binding gcf-artifacts --location=${region} --project=${gcpProjectId} --member="serviceAccount:${sa}" --role="roles/artifactregistry.writer" --quiet`
         );
       } catch {
@@ -12856,7 +13362,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
         const regionMatch = fullPath.match(/locations\/([^/]+)/);
         const region = regionMatch ? regionMatch[1] : "us-east1";
         spinner.text = `Deleting Artifact Registry ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud artifacts repositories delete ${name} --location=${region} --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Artifact Registry ${name}`);
@@ -12867,7 +13373,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
       case "serviceaccount/Account": {
         spinner.text = `Deleting Service Account ${name}...`;
         const email = name.includes("@") ? name : `${name}@${gcpProjectId}.iam.gserviceaccount.com`;
-        await execAsync10(
+        await execAsync11(
           `gcloud iam service-accounts delete ${email} --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Service Account ${name}`);
@@ -12878,7 +13384,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
       case "globalAddresses":
       case "compute/GlobalAddress": {
         spinner.text = `Deleting Global Address ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud compute addresses delete ${name} --global --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Global Address ${name}`);
@@ -12896,7 +13402,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
           }
           spinner.text = `Deleting URL Map ${name}...`;
         }
-        await execAsync10(
+        await execAsync11(
           `gcloud compute url-maps delete ${name} --global --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted URL Map ${name}`);
@@ -12914,7 +13420,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
           }
           spinner.text = `Deleting Target HTTP Proxy ${name}...`;
         }
-        await execAsync10(
+        await execAsync11(
           `gcloud compute target-http-proxies delete ${name} --global --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Target HTTP Proxy ${name}`);
@@ -12931,7 +13437,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
           }
           spinner.text = `Deleting Target HTTPS Proxy ${name}...`;
         }
-        await execAsync10(
+        await execAsync11(
           `gcloud compute target-https-proxies delete ${name} --global --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Target HTTPS Proxy ${name}`);
@@ -12942,7 +13448,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
       case "globalForwardingRules":
       case "compute/GlobalForwardingRule": {
         spinner.text = `Deleting Forwarding Rule ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud compute forwarding-rules delete ${name} --global --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Forwarding Rule ${name}`);
@@ -12952,7 +13458,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
       case "backendServices":
       case "compute/BackendService": {
         spinner.text = `Deleting Backend Service ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud compute backend-services delete ${name} --global --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Backend Service ${name}`);
@@ -12962,7 +13468,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
       case "backendBuckets":
       case "compute/BackendBucket": {
         spinner.text = `Deleting Backend Bucket ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud compute backend-buckets delete ${name} --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Backend Bucket ${name}`);
@@ -12972,7 +13478,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
       case "healthChecks":
       case "compute/HealthCheck": {
         spinner.text = `Deleting Health Check ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud compute health-checks delete ${name} --global --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Health Check ${name}`);
@@ -12984,7 +13490,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
         const regionMatch = fullPath.match(/regions\/([^/]+)/);
         const region = regionMatch ? regionMatch[1] : "us-east1";
         spinner.text = `Deleting Network Endpoint Group ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud compute network-endpoint-groups delete ${name} --region=${region} --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Network Endpoint Group ${name}`);
@@ -12994,7 +13500,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
       case "networks":
       case "compute/Network": {
         spinner.text = `Deleting VPC Network ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud compute networks delete ${name} --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted VPC Network ${name}`);
@@ -13006,7 +13512,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
         const locationMatch = fullPath.match(/locations\/([^/]+)/);
         const location = locationMatch ? locationMatch[1] : "us-east1";
         spinner.text = `Deleting Cloud Function ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud functions delete ${name} --region=${location} --project=${gcpProjectId} --gen2 --quiet`
         );
         spinner.succeed(`Deleted Cloud Function ${name}`);
@@ -13018,7 +13524,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
         const locationMatch = fullPath.match(/locations\/([^/]+)/);
         const location = locationMatch ? locationMatch[1] : "us-east1";
         spinner.text = `Deleting Cloud Run service ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud run services delete ${name} --region=${location} --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted Cloud Run service ${name}`);
@@ -13028,7 +13534,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
       case "topics":
       case "pubsub/Topic": {
         spinner.text = `Deleting Pub/Sub topic ${name}...`;
-        await execAsync10(`gcloud pubsub topics delete ${name} --project=${gcpProjectId} --quiet`);
+        await execAsync11(`gcloud pubsub topics delete ${name} --project=${gcpProjectId} --quiet`);
         spinner.succeed(`Deleted Pub/Sub topic ${name}`);
         return true;
       }
@@ -13044,7 +13550,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
           }
           spinner.text = `Deleting SSL Certificate ${name}...`;
         }
-        await execAsync10(
+        await execAsync11(
           `gcloud compute ssl-certificates delete ${name} --global --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted SSL Certificate ${name}`);
@@ -13054,7 +13560,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
       case "buckets":
       case "storage/Bucket": {
         spinner.text = `Deleting Storage Bucket ${name}...`;
-        await execAsync10(`gcloud storage rm -r gs://${name} --project=${gcpProjectId}`);
+        await execAsync11(`gcloud storage rm -r gs://${name} --project=${gcpProjectId}`);
         spinner.succeed(`Deleted Storage Bucket ${name}`);
         return true;
       }
@@ -13064,7 +13570,7 @@ async function forceDeleteResource(resource, gcpProjectId) {
         const regionMatch = fullPath.match(/locations\/([^/]+)/);
         const region = regionMatch ? regionMatch[1] : "us-east1";
         spinner.text = `Deleting VPC Connector ${name}...`;
-        await execAsync10(
+        await execAsync11(
           `gcloud compute networks vpc-access connectors delete ${name} --region=${region} --project=${gcpProjectId} --quiet`
         );
         spinner.succeed(`Deleted VPC Connector ${name}`);
@@ -13147,7 +13653,7 @@ async function findDependentResources(resourceName, resourceType, gcpProjectId)
   const dependencies = [];
   try {
     if (resourceType === "url-map") {
-      const { stdout: httpProxies } = await execAsync10(
+      const { stdout: httpProxies } = await execAsync11(
         `gcloud compute target-http-proxies list --project=${gcpProjectId} --format="json" 2>/dev/null || echo "[]"`
       );
       const proxies = JSON.parse(httpProxies);
@@ -13160,7 +13666,7 @@ async function findDependentResources(resourceName, resourceType, gcpProjectId)
           });
         }
       }
-      const { stdout: httpsProxies } = await execAsync10(
+      const { stdout: httpsProxies } = await execAsync11(
         `gcloud compute target-https-proxies list --project=${gcpProjectId} --format="json" 2>/dev/null || echo "[]"`
       );
       const httpsProxyList = JSON.parse(httpsProxies);
@@ -13174,7 +13680,7 @@ async function findDependentResources(resourceName, resourceType, gcpProjectId)
         }
       }
     } else if (resourceType === "http-proxy" || resourceType === "https-proxy") {
-      const { stdout: rules } = await execAsync10(
+      const { stdout: rules } = await execAsync11(
         `gcloud compute forwarding-rules list --global --project=${gcpProjectId} --format="json" 2>/dev/null || echo "[]"`
       );
       const ruleList = JSON.parse(rules);
@@ -13188,7 +13694,7 @@ async function findDependentResources(resourceName, resourceType, gcpProjectId)
         }
       }
     } else if (resourceType === "ssl-cert") {
-      const { stdout: httpsProxies } = await execAsync10(
+      const { stdout: httpsProxies } = await execAsync11(
         `gcloud compute target-https-proxies list --project=${gcpProjectId} --format="json" 2>/dev/null || echo "[]"`
       );
       const proxyList = JSON.parse(httpsProxies);
@@ -13223,7 +13729,7 @@ async function grantResourceDeletePermissions(resourcePath, gcpProjectId) {
   const inquirer6 = await import("inquirer");
   let currentAccount = "";
   try {
-    const { stdout } = await execAsync10("gcloud config get-value account");
+    const { stdout } = await execAsync11("gcloud config get-value account");
     currentAccount = stdout.trim();
   } catch {
   }
@@ -13273,7 +13779,7 @@ async function grantResourceDeletePermissions(resourcePath, gcpProjectId) {
         });
         child.on("error", reject);
       });
-      const { stdout } = await execAsync10("gcloud config get-value account");
+      const { stdout } = await execAsync11("gcloud config get-value account");
       email = stdout.trim();
       console.log(chalk5.green(`
   Now authenticated as: ${email}
@@ -13323,7 +13829,7 @@ async function grantResourceDeletePermissions(resourcePath, gcpProjectId) {
       roleName = "Editor";
     }
     spinner.text = `Granting ${roleName} role to ${email}...`;
-    await execAsync10(
+    await execAsync11(
       `gcloud projects add-iam-policy-binding ${gcpProjectId} --member="user:${email}" --role="${role}" --quiet`
     );
     spinner.succeed(`Granted ${roleName} role to ${email}`);
@@ -14388,9 +14894,9 @@ eventsCommand.action(async () => {
 // src/commands/infra/inventory.ts
 import { Command as Command13 } from "commander";
 import chalk14 from "chalk";
-import { exec as exec11 } from "child_process";
-import { promisify as promisify11 } from "util";
-var execAsync11 = promisify11(exec11);
+import { exec as exec12 } from "child_process";
+import { promisify as promisify12 } from "util";
+var execAsync12 = promisify12(exec12);
 var LABEL_UPDATE_COMMANDS = {
   "VPC Network": (projectId, name, labels) => {
     const labelStr = Object.entries(labels).map(([k, v]) => `${k}=${v}`).join(",");
@@ -14431,7 +14937,7 @@ async function updateResourceLabels(projectId, resourceType, resourceName, label
     command = command.replace(/us-central1/g, region);
   }
   try {
-    await execAsync11(command, { timeout: 6e4 });
+    await execAsync12(command, { timeout: 6e4 });
     return { success: true };
   } catch (err) {
     const errorMsg = err instanceof Error ? err.message : String(err);
@@ -14461,7 +14967,7 @@ async function shareResource(projectId, resourceType, resourceName, existingLabe
 }
 async function runGcloudCommand2(command, timeoutMs = 3e4) {
   try {
-    const { stdout } = await execAsync11(command, { timeout: timeoutMs });
+    const { stdout } = await execAsync12(command, { timeout: timeoutMs });
     const trimmed = stdout.trim();
     if (!trimmed || trimmed === "[]") {
       return [];
@@ -14671,7 +15177,7 @@ async function getGcpProjectId(explicitProject) {
   } catch {
   }
   try {
-    const { stdout } = await execAsync11("gcloud config get-value project 2>/dev/null");
+    const { stdout } = await execAsync12("gcloud config get-value project 2>/dev/null");
     const gcloudProject = stdout.trim();
     if (gcloudProject && gcloudProject !== "(unset)") {
       return gcloudProject;
@@ -14851,9 +15357,9 @@ import { Command as Command14 } from "commander";
 import chalk15 from "chalk";
 import * as path19 from "path";
 import * as fs16 from "fs/promises";
-import { exec as exec12 } from "child_process";
-import { promisify as promisify12 } from "util";
-var execAsync12 = promisify12(exec12);
+import { exec as exec13 } from "child_process";
+import { promisify as promisify13 } from "util";
+var execAsync13 = promisify13(exec13);
 var STACKSOLO_DIR7 = ".stacksolo";
 var CONFIG_FILENAME5 = "stacksolo.config.json";
 var doctorCommand = new Command14("doctor").description("Check system prerequisites and GCP configuration").option("--fix", "Attempt to fix issues automatically").option("--verbose", "Show detailed output for each check").action(async (options) => {
@@ -14931,7 +15437,7 @@ function displayResult(result, verbose) {
 }
 async function checkNode(_options) {
   try {
-    const { stdout } = await execAsync12("node --version");
+    const { stdout } = await execAsync13("node --version");
     const version = stdout.trim().replace("v", "");
     const major = parseInt(version.split(".")[0], 10);
     if (major >= 18) {
@@ -14966,7 +15472,7 @@ async function checkNode(_options) {
 }
 async function checkTerraform(_options) {
   try {
-    const { stdout } = await execAsync12("terraform version -json");
+    const { stdout } = await execAsync13("terraform version -json");
     const data = JSON.parse(stdout);
     const version = data.terraform_version;
     return {
@@ -14976,7 +15482,7 @@ async function checkTerraform(_options) {
     };
   } catch {
     try {
-      const { stdout } = await execAsync12("terraform version");
+      const { stdout } = await execAsync13("terraform version");
       const match = stdout.match(/Terraform v(\d+\.\d+\.\d+)/);
       if (match) {
         return {
@@ -14997,11 +15503,11 @@ async function checkTerraform(_options) {
 }
 async function checkDocker(_options) {
   try {
-    const { stdout } = await execAsync12("docker --version");
+    const { stdout } = await execAsync13("docker --version");
     const match = stdout.match(/Docker version (\d+\.\d+\.\d+)/);
     const version = match ? match[1] : "unknown";
     try {
-      await execAsync12("docker info", { timeout: 5e3 });
+      await execAsync13("docker info", { timeout: 5e3 });
       return {
         name: "Docker",
         status: "ok",
@@ -15026,7 +15532,7 @@ async function checkDocker(_options) {
 }
 async function checkGcloud(_options) {
   try {
-    const { stdout } = await execAsync12("gcloud version --format=json");
+    const { stdout } = await execAsync13("gcloud version --format=json");
     const data = JSON.parse(stdout);
     const version = data["Google Cloud SDK"];
     return {
@@ -15045,7 +15551,7 @@ async function checkGcloud(_options) {
 }
 async function checkGcpAuth(_options) {
   try {
-    const { stdout } = await execAsync12("gcloud auth list --format=json");
+    const { stdout } = await execAsync13("gcloud auth list --format=json");
     const accounts = JSON.parse(stdout);
     if (accounts.length === 0) {
       return {
@@ -15065,7 +15571,7 @@ async function checkGcpAuth(_options) {
       };
     }
     try {
-      await execAsync12("gcloud auth application-default print-access-token", { timeout: 5e3 });
+      await execAsync13("gcloud auth application-default print-access-token", { timeout: 5e3 });
       return {
         name: "GCP Authentication",
         status: "ok",
@@ -15121,7 +15627,7 @@ async function checkGcpProjectAccess(_options) {
   try {
     const config = parseConfig(configPath);
     const projectId = config.project.gcpProjectId;
-    const { stdout } = await execAsync12(
+    const { stdout } = await execAsync13(
       `gcloud projects describe ${projectId} --format="value(projectId)"`,
       { timeout: 1e4 }
     );
@@ -15162,7 +15668,7 @@ async function checkRequiredApis(_options) {
       "cloudbuild.googleapis.com",
       "artifactregistry.googleapis.com"
     ];
-    const { stdout } = await execAsync12(
+    const { stdout } = await execAsync13(
       `gcloud services list --project=${projectId} --enabled --format="value(NAME)"`,
       { timeout: 3e4 }
     );
@@ -15390,9 +15896,9 @@ import chalk17 from "chalk";
 import ora7 from "ora";
 import * as path21 from "path";
 import * as fs18 from "fs/promises";
-import { exec as exec13 } from "child_process";
-import { promisify as promisify13 } from "util";
-var execAsync13 = promisify13(exec13);
+import { exec as exec14 } from "child_process";
+import { promisify as promisify14 } from "util";
+var execAsync14 = promisify14(exec14);
 var STACKSOLO_DIR9 = ".stacksolo";
 var CONFIG_FILENAME7 = "stacksolo.config.json";
 function getConfigPath5() {
@@ -15414,7 +15920,7 @@ var buildCommand = new Command16("build").description("Build and push container
     return;
   }
   try {
-    await execAsync13("docker --version");
+    await execAsync14("docker --version");
   } catch {
     console.log(chalk17.red("  Docker CLI not found.\n"));
     console.log(chalk17.gray("  Install Docker Desktop: https://www.docker.com/products/docker-desktop\n"));
@@ -15453,7 +15959,7 @@ var buildCommand = new Command16("build").description("Build and push container
   if (options.push) {
     const authSpinner = ora7("Configuring Docker authentication...").start();
     try {
-      await execAsync13(
+      await execAsync14(
         `gcloud auth configure-docker ${config.project.region}-docker.pkg.dev --quiet`
       );
       authSpinner.succeed("Docker authentication configured");
@@ -15482,7 +15988,7 @@ var buildCommand = new Command16("build").description("Build and push container
     const buildSpinner = ora7(`Building ${container.name}...`).start();
     try {
       const buildCmd = `docker build -f "${dockerfilePath}" -t "${imageTag}" "${sourceDir}"`;
-      await execAsync13(buildCmd, { maxBuffer: 50 * 1024 * 1024 });
+      await execAsync14(buildCmd, { maxBuffer: 50 * 1024 * 1024 });
       buildSpinner.succeed(`Built ${container.name}`);
     } catch (error) {
       buildSpinner.fail(`Failed to build ${container.name}`);
@@ -15494,7 +16000,7 @@ var buildCommand = new Command16("build").description("Build and push container
     if (options.push) {
       const pushSpinner = ora7(`Pushing ${container.name}...`).start();
       try {
-        await execAsync13(`docker push "${imageTag}"`);
+        await execAsync14(`docker push "${imageTag}"`);
         pushSpinner.succeed(`Pushed ${container.name}`);
         console.log(chalk17.gray(`    ${imageTag}
 `));
@@ -15665,35 +16171,6 @@ function getPythonVersion(runtime) {
   if (version === "312") return "3.12";
   return "3.12";
 }
-function getFrameworkConfig(framework, port = 3e3) {
-  switch (framework) {
-    case "vue":
-      return {
-        command: ["npm", "run", "dev", "--", "--host", "0.0.0.0", "--port", String(port)]
-      };
-    case "nuxt":
-      return {
-        command: ["npm", "run", "dev", "--", "--host", "0.0.0.0", "--port", String(port)]
-      };
-    case "react":
-      return {
-        command: ["npm", "run", "dev", "--", "--host", "0.0.0.0", "--port", String(port)]
-      };
-    case "next":
-      return {
-        command: ["npm", "run", "dev", "--", "--hostname", "0.0.0.0", "-p", String(port)]
-      };
-    case "svelte":
-    case "sveltekit":
-      return {
-        command: ["npm", "run", "dev", "--", "--host", "0.0.0.0", "--port", String(port)]
-      };
-    default:
-      return {
-        command: ["npm", "run", "dev", "--", "--host", "0.0.0.0", "--port", String(port)]
-      };
-  }
-}
 function isPythonRuntime(runtime) {
   return runtime.startsWith("python");
 }
@@ -15704,31 +16181,27 @@ function generateFunctionManifests(options) {
   const functionName = sanitizeName(options.function.name);
   const runtimeConfig = getRuntimeConfig(options.function.runtime, options.function.entryPoint);
   const isPython = isPythonRuntime(options.function.runtime);
-  const runCmd = isPython ? runtimeConfig.command.join(" ") : "npm run dev 2>/dev/null || " + runtimeConfig.command.join(" ");
-  const containerCommand = isPython ? [
-    "sh",
-    "-c",
-    [
-      "cp -r /source/* /app/ 2>/dev/null || true",
-      "cd /app",
-      "pip install -r requirements.txt 2>/dev/null || true",
-      "pip install functions-framework",
-      runCmd
-    ].join(" && ")
-  ] : [
-    "sh",
-    "-c",
-    [
-      // Copy source files to /app, excluding node_modules (macOS binaries don't work in Linux)
-      "cd /source",
-      "find . -maxdepth 1 ! -name node_modules ! -name . -exec cp -r {} /app/ \\;",
-      "cd /app",
-      // Always install fresh for Linux platform
-      "npm install",
-      // Run the dev server
-      runCmd
-    ].join(" && ")
-  ];
+  let containerCommand;
+  let containerImage;
+  if (isPython) {
+    containerImage = runtimeConfig.image;
+    containerCommand = [
+      "sh",
+      "-c",
+      [
+        "cp -r /source/* /app/ 2>/dev/null || true",
+        "cd /app",
+        "pip install -r requirements.txt 2>/dev/null || true",
+        "pip install functions-framework",
+        runtimeConfig.command.join(" ")
+      ].join(" && ")
+    ];
+  } else {
+    containerImage = "node:20-slim";
+    const functionsFrameworkCmd = runtimeConfig.command.join(" ");
+    const command = 'cd /source && if [ -d dist ]; then echo "Running pre-built function from dist/" && find . -maxdepth 1 ! -name node_modules ! -name . -exec cp -r {} /app/ \\; && cd /app && grep -v "workspace:" package.json > package.json.tmp && mv package.json.tmp package.json && npm install --omit=dev && ' + functionsFrameworkCmd + '; else echo "No dist/ folder. Trying dev mode..." && find . -maxdepth 1 ! -name node_modules ! -name . -exec cp -r {} /app/ \\; && cd /app && npm install && (npm run dev 2>/dev/null || ' + functionsFrameworkCmd + "); fi";
+    containerCommand = ["sh", "-c", command];
+  }
   const labels = {
     "app.kubernetes.io/name": functionName,
     "app.kubernetes.io/component": "function",
@@ -15761,7 +16234,7 @@ function generateFunctionManifests(options) {
           containers: [
             {
               name: functionName,
-              image: runtimeConfig.image,
+              image: containerImage,
               command: containerCommand,
               ports: [
                 {
@@ -15858,7 +16331,7 @@ function sanitizeName(name) {
 function generateUIManifests(options) {
   const namespace = sanitizeNamespaceName(options.projectName);
   const uiName = sanitizeName2(options.ui.name);
-  const frameworkConfig = getFrameworkConfig(options.ui.framework, options.port);
+  const command = 'if [ -d /source/dist ]; then echo "Serving pre-built static files from dist/" && npx serve /source/dist -l ' + options.port + ' -s; else echo "No dist/ folder found. Running dev server..." && cd /source && npm install && npm run dev -- --host 0.0.0.0 --port ' + options.port + "; fi";
   const labels = {
     "app.kubernetes.io/name": uiName,
     "app.kubernetes.io/component": "ui",
@@ -15892,21 +16365,7 @@ function generateUIManifests(options) {
             {
               name: uiName,
               image: "node:20-slim",
-              // Copy source (excluding node_modules) to working directory, then install fresh Linux deps
-              command: [
-                "sh",
-                "-c",
-                [
-                  // Copy source files to /app, excluding node_modules (macOS binaries don't work in Linux)
-                  "cd /source",
-                  "find . -maxdepth 1 ! -name node_modules ! -name . -exec cp -r {} /app/ \\;",
-                  "cd /app",
-                  // Always install fresh for Linux platform
-                  "npm install",
-                  // Run the dev server
-                  frameworkConfig.command.join(" ")
-                ].join(" && ")
-              ],
+              command: ["sh", "-c", command],
               ports: [
                 {
                   containerPort: options.port,
@@ -16783,6 +17242,7 @@ function generateK8sManifests(options) {
   const services = [];
   const warnings = [];
   const projectName = config.project.name;
+  const packageManager = config.project.packageManager;
   const portAllocator = createPortAllocator();
   const servicePortMap = {};
   let kernelUrl;
@@ -16845,7 +17305,8 @@ function generateK8sManifests(options) {
             timeout: func.timeout
           },
           sourceDir,
-          port
+          port,
+          packageManager
         });
         manifests.push(manifest);
         services.push(func.name);
@@ -16866,7 +17327,8 @@ function generateK8sManifests(options) {
             framework: ui.framework || "vue"
           },
           sourceDir,
-          port
+          port,
+          packageManager
         });
         manifests.push(manifest);
         services.push(ui.name);
@@ -17034,6 +17496,7 @@ function spawnService(service, manager, firebaseProjectId) {
   };
   if (firebaseProjectId) {
     env.FIREBASE_PROJECT_ID = firebaseProjectId;
+    env.VITE_FIREBASE_PROJECT_ID = firebaseProjectId;
   }
   const args = service.type === "ui" ? ["run", "dev", "--", "--port", String(service.port)] : ["run", "dev"];
   const proc = spawn6("npm", args, {
@@ -17062,12 +17525,12 @@ function spawnService(service, manager, firebaseProjectId) {
   });
   return proc;
 }
-async function startFirebaseEmulators(manager) {
+async function startFirebaseEmulators(manager, projectId = "demo-local") {
   const spinner = ora8("Starting Firebase emulators...").start();
   try {
     const proc = spawn6(
       "firebase",
-      ["emulators:start", "--only", "firestore,auth", "--project", "demo-local"],
+      ["emulators:start", "--only", "firestore,auth", "--project", projectId],
       {
         stdio: ["ignore", "pipe", "pipe"],
         shell: true
@@ -17172,13 +17635,13 @@ async function startLocalEnvironment(options) {
     services: validServices,
     isShuttingDown: false
   };
+  const firebaseProjectId = config.project.gcpKernel?.firebaseProjectId || config.project.gcpProjectId;
   if (options.includeEmulators !== false) {
-    const emulatorProc = await startFirebaseEmulators(manager);
+    const emulatorProc = await startFirebaseEmulators(manager, firebaseProjectId);
     if (emulatorProc) {
       manager.processes.set("firebase-emulator", emulatorProc);
     }
   }
-  const firebaseProjectId = config.project.gcpKernel?.firebaseProjectId || config.project.gcpProjectId;
   const spinner = ora8("Starting services...").start();
   for (const service of validServices) {
     const proc = spawnService(service, manager, firebaseProjectId);
@@ -18212,9 +18675,9 @@ import chalk20 from "chalk";
 import ora10 from "ora";
 import * as path24 from "path";
 import * as fs21 from "fs/promises";
-import { exec as exec14 } from "child_process";
-import { promisify as promisify14 } from "util";
-var execAsync14 = promisify14(exec14);
+import { exec as exec15 } from "child_process";
+import { promisify as promisify15 } from "util";
+var execAsync15 = promisify15(exec15);
 var STACKSOLO_DIR10 = ".stacksolo";
 var CONFIG_FILENAME8 = "stacksolo.config.json";
 var installCommand = new Command18("install").description("Install dependencies for all resources").option("-p, --parallel", "Install dependencies in parallel").action(async (options) => {
@@ -18278,7 +18741,7 @@ var installCommand = new Command18("install").description("Install dependencies
   const installDir = async (dir) => {
     const spinner = ora10(`Installing ${dir.name}...`).start();
     try {
-      await execAsync14("npm install", { cwd: dir.path, timeout: 12e4 });
+      await execAsync15("npm install", { cwd: dir.path, timeout: 12e4 });
       spinner.succeed(`Installed ${dir.name}`);
       return { success: true, name: dir.name };
     } catch (error) {