alepha 0.15.1 → 0.15.3

package/dist/cli/index.js

@@ -1,16 +1,1857 @@
-import { $atom, $hook, $inject, $module, $use, Alepha, AlephaError, t } from "alepha";
-import { FileSystemProvider } from "alepha/file";
-import { $command, CliProvider, EnvUtils } from "alepha/command";
+import { $atom, $hook, $inject, $module, $use, Alepha, AlephaError, Json, isFileLike, t } from "alepha";
+import { basename, dirname, join } from "node:path";
+import { createReadStream, readFileSync } from "node:fs";
+import { access, copyFile, cp, mkdir, readFile, readdir, rename, rm, stat, writeFile } from "node:fs/promises";
+import { PassThrough, Readable } from "node:stream";
+import { fileURLToPath } from "node:url";
+import { exec, spawn } from "node:child_process";
 import { $logger, ConsoleColorProvider } from "alepha/logger";
+import { $command, CliProvider, EnvUtils } from "alepha/command";
 import { buildClient, buildServer, copyAssets, generateCloudflare, generateDocker, generateSitemap, generateVercel, importVite, importViteReact, prerenderPages, viteAlephaSsrPreload } from "alepha/vite";
-import { exec, spawn } from "node:child_process";
-import { readFileSync } from "node:fs";
-import { basename, dirname, join } from "node:path";
 import { promisify } from "node:util";
 import { ServerSwaggerProvider } from "alepha/server/swagger";
-import { access, readFile, readdir } from "node:fs/promises";
 import * as os from "node:os";
 
+//#region ../../src/system/providers/FileSystemProvider.ts
+/**
+* FileSystem interface providing utilities for working with files.
+*/
+var FileSystemProvider = class {};
+
+//#endregion
+//#region ../../src/system/providers/MemoryFileSystemProvider.ts
+/**
+* In-memory implementation of FileSystemProvider for testing.
+*
+* This provider stores all files and directories in memory, making it ideal for
+* unit tests that need to verify file operations without touching the real file system.
+*
+* @example
+* ```typescript
+* // In tests, substitute the real FileSystemProvider with MemoryFileSystemProvider
+* const alepha = Alepha.create().with({
+*   provide: FileSystemProvider,
+*   use: MemoryFileSystemProvider,
+* });
+*
+* // Run code that uses FileSystemProvider
+* const service = alepha.inject(MyService);
+* await service.saveFile("test.txt", "Hello World");
+*
+* // Verify the file was written
+* const memoryFs = alepha.inject(MemoryFileSystemProvider);
+* expect(memoryFs.files.get("test.txt")?.toString()).toBe("Hello World");
+* ```
+*/
+var MemoryFileSystemProvider = class {
+	json = $inject(Json);
+	/**
+	* In-memory storage for files (path -> content)
+	*/
+	files = /* @__PURE__ */ new Map();
+	/**
+	* In-memory storage for directories
+	*/
+	directories = /* @__PURE__ */ new Set();
+	/**
+	* Track mkdir calls for test assertions
+	*/
+	mkdirCalls = [];
+	/**
+	* Track writeFile calls for test assertions
+	*/
+	writeFileCalls = [];
+	/**
+	* Track readFile calls for test assertions
+	*/
+	readFileCalls = [];
+	/**
+	* Track rm calls for test assertions
+	*/
+	rmCalls = [];
+	/**
+	* Track join calls for test assertions
+	*/
+	joinCalls = [];
+	/**
+	* Error to throw on mkdir (for testing error handling)
+	*/
+	mkdirError = null;
+	/**
+	* Error to throw on writeFile (for testing error handling)
+	*/
+	writeFileError = null;
+	/**
+	* Error to throw on readFile (for testing error handling)
+	*/
+	readFileError = null;
+	constructor(options = {}) {
+		this.mkdirError = options.mkdirError ?? null;
+		this.writeFileError = options.writeFileError ?? null;
+		this.readFileError = options.readFileError ?? null;
+	}
+	/**
+	* Join path segments using forward slashes.
+	* Uses Node's path.join for proper normalization (handles .. and .)
+	*/
+	join(...paths) {
+		this.joinCalls.push(paths);
+		return join(...paths);
+	}
+	/**
+	* Create a FileLike object from various sources.
+	*/
+	createFile(options) {
+		if ("path" in options) {
+			const filePath = options.path;
+			const buffer = this.files.get(filePath);
+			if (buffer === void 0) throw new Error(`ENOENT: no such file or directory, open '${filePath}'`);
+			return {
+				name: options.name ?? filePath.split("/").pop() ?? "file",
+				type: options.type ?? "application/octet-stream",
+				size: buffer.byteLength,
+				lastModified: Date.now(),
+				stream: () => {
+					throw new Error("Stream not implemented in MemoryFileSystemProvider");
+				},
+				arrayBuffer: async () => buffer.buffer.slice(buffer.byteOffset, buffer.byteOffset + buffer.byteLength),
+				text: async () => buffer.toString("utf-8")
+			};
+		}
+		if ("buffer" in options) {
+			const buffer = options.buffer;
+			return {
+				name: options.name ?? "file",
+				type: options.type ?? "application/octet-stream",
+				size: buffer.byteLength,
+				lastModified: Date.now(),
+				stream: () => {
+					throw new Error("Stream not implemented in MemoryFileSystemProvider");
+				},
+				arrayBuffer: async () => buffer.buffer.slice(buffer.byteOffset, buffer.byteOffset + buffer.byteLength),
+				text: async () => buffer.toString("utf-8")
+			};
+		}
+		if ("text" in options) {
+			const buffer = Buffer.from(options.text, "utf-8");
+			return {
+				name: options.name ?? "file.txt",
+				type: options.type ?? "text/plain",
+				size: buffer.byteLength,
+				lastModified: Date.now(),
+				stream: () => {
+					throw new Error("Stream not implemented in MemoryFileSystemProvider");
+				},
+				arrayBuffer: async () => buffer.buffer.slice(buffer.byteOffset, buffer.byteOffset + buffer.byteLength),
+				text: async () => options.text
+			};
+		}
+		throw new Error("MemoryFileSystemProvider.createFile: unsupported options. Only buffer and text are supported.");
+	}
+	/**
+	* Remove a file or directory from memory.
+	*/
+	async rm(path, options) {
+		this.rmCalls.push({
+			path,
+			options
+		});
+		if (!(this.files.has(path) || this.directories.has(path)) && !options?.force) throw new Error(`ENOENT: no such file or directory, rm '${path}'`);
+		if (this.directories.has(path)) if (options?.recursive) {
+			this.directories.delete(path);
+			for (const filePath of this.files.keys()) if (filePath.startsWith(`${path}/`)) this.files.delete(filePath);
+			for (const dirPath of this.directories) if (dirPath.startsWith(`${path}/`)) this.directories.delete(dirPath);
+		} else throw new Error(`EISDIR: illegal operation on a directory, rm '${path}'`);
+		else this.files.delete(path);
+	}
+	/**
+	* Copy a file or directory in memory.
+	*/
+	async cp(src, dest, options) {
+		if (this.directories.has(src)) {
+			if (!options?.recursive) throw new Error(`Cannot copy directory without recursive option: ${src}`);
+			this.directories.add(dest);
+			for (const [filePath, content] of this.files) if (filePath.startsWith(`${src}/`)) {
+				const newPath = filePath.replace(src, dest);
+				this.files.set(newPath, Buffer.from(content));
+			}
+		} else if (this.files.has(src)) {
+			const content = this.files.get(src);
+			this.files.set(dest, Buffer.from(content));
+		} else throw new Error(`ENOENT: no such file or directory, cp '${src}'`);
+	}
+	/**
+	* Move/rename a file or directory in memory.
+	*/
+	async mv(src, dest) {
+		if (this.directories.has(src)) {
+			this.directories.delete(src);
+			this.directories.add(dest);
+			for (const [filePath, content] of this.files) if (filePath.startsWith(`${src}/`)) {
+				const newPath = filePath.replace(src, dest);
+				this.files.delete(filePath);
+				this.files.set(newPath, content);
+			}
+		} else if (this.files.has(src)) {
+			const content = this.files.get(src);
+			this.files.delete(src);
+			this.files.set(dest, content);
+		} else throw new Error(`ENOENT: no such file or directory, mv '${src}'`);
+	}
+	/**
+	* Create a directory in memory.
+	*/
+	async mkdir(path, options) {
+		this.mkdirCalls.push({
+			path,
+			options
+		});
+		if (this.mkdirError) throw this.mkdirError;
+		if (this.directories.has(path) && !options?.recursive) throw new Error(`EEXIST: file already exists, mkdir '${path}'`);
+		this.directories.add(path);
+		if (options?.recursive) {
+			const parts = path.split("/").filter(Boolean);
+			let current = "";
+			for (const part of parts) {
+				current = current ? `${current}/${part}` : part;
+				this.directories.add(current);
+			}
+		}
+	}
+	/**
+	* List files in a directory.
+	*/
+	async ls(path, options) {
+		const normalizedPath = path.replace(/\/$/, "");
+		const entries = /* @__PURE__ */ new Set();
+		for (const filePath of this.files.keys()) if (filePath.startsWith(`${normalizedPath}/`)) {
+			const relativePath = filePath.slice(normalizedPath.length + 1);
+			const parts = relativePath.split("/");
+			if (options?.recursive) entries.add(relativePath);
+			else entries.add(parts[0]);
+		}
+		for (const dirPath of this.directories) if (dirPath.startsWith(`${normalizedPath}/`) && dirPath !== normalizedPath) {
+			const relativePath = dirPath.slice(normalizedPath.length + 1);
+			const parts = relativePath.split("/");
+			if (options?.recursive) entries.add(relativePath);
+			else if (parts.length === 1) entries.add(parts[0]);
+		}
+		let result = Array.from(entries);
+		if (!options?.hidden) result = result.filter((entry) => !entry.startsWith("."));
+		return result.sort();
+	}
+	/**
+	* Check if a file or directory exists in memory.
+	*/
+	async exists(path) {
+		return this.files.has(path) || this.directories.has(path);
+	}
+	/**
+	* Read a file from memory.
+	*/
+	async readFile(path) {
+		this.readFileCalls.push(path);
+		if (this.readFileError) throw this.readFileError;
+		const content = this.files.get(path);
+		if (!content) throw new Error(`ENOENT: no such file or directory, open '${path}'`);
+		return content;
+	}
+	/**
+	* Read a file from memory as text.
+	*/
+	async readTextFile(path) {
+		return (await this.readFile(path)).toString("utf-8");
+	}
+	/**
+	* Read a file from memory as JSON.
+	*/
+	async readJsonFile(path) {
+		const text = await this.readTextFile(path);
+		return this.json.parse(text);
+	}
+	/**
+	* Write a file to memory.
+	*/
+	async writeFile(path, data) {
+		const dataStr = typeof data === "string" ? data : data instanceof Buffer || data instanceof Uint8Array ? data.toString("utf-8") : await data.text();
+		this.writeFileCalls.push({
+			path,
+			data: dataStr
+		});
+		if (this.writeFileError) throw this.writeFileError;
+		const buffer = typeof data === "string" ? Buffer.from(data, "utf-8") : data instanceof Buffer ? data : data instanceof Uint8Array ? Buffer.from(data) : Buffer.from(await data.text(), "utf-8");
+		this.files.set(path, buffer);
+	}
+	/**
+	* Reset all in-memory state (useful between tests).
+	*/
+	reset() {
+		this.files.clear();
+		this.directories.clear();
+		this.mkdirCalls = [];
+		this.writeFileCalls = [];
+		this.readFileCalls = [];
+		this.rmCalls = [];
+		this.joinCalls = [];
+		this.mkdirError = null;
+		this.writeFileError = null;
+		this.readFileError = null;
+	}
+	/**
+	* Check if a file was written during the test.
+	*
+	* @example
+	* ```typescript
+	* expect(fs.wasWritten("/project/tsconfig.json")).toBe(true);
+	* ```
+	*/
+	wasWritten(path) {
+		return this.writeFileCalls.some((call) => call.path === path);
+	}
+	/**
+	* Check if a file was written with content matching a pattern.
+	*
+	* @example
+	* ```typescript
+	* expect(fs.wasWrittenMatching("/project/tsconfig.json", /extends/)).toBe(true);
+	* ```
+	*/
+	wasWrittenMatching(path, pattern) {
+		const call = this.writeFileCalls.find((c) => c.path === path);
+		return call ? pattern.test(call.data) : false;
+	}
+	/**
+	* Check if a file was read during the test.
+	*
+	* @example
+	* ```typescript
+	* expect(fs.wasRead("/project/package.json")).toBe(true);
+	* ```
+	*/
+	wasRead(path) {
+		return this.readFileCalls.includes(path);
+	}
+	/**
+	* Check if a file was deleted during the test.
+	*
+	* @example
+	* ```typescript
+	* expect(fs.wasDeleted("/project/old-file.txt")).toBe(true);
+	* ```
+	*/
+	wasDeleted(path) {
+		return this.rmCalls.some((call) => call.path === path);
+	}
+	/**
+	* Get the content of a file as a string (convenience method for testing).
+	*/
+	getFileContent(path) {
+		return this.files.get(path)?.toString("utf-8");
+	}
+};
+
+//#endregion
+//#region ../../src/system/providers/MemoryShellProvider.ts
+/**
+* In-memory implementation of ShellProvider for testing.
+*
+* Records all commands that would be executed without actually running them.
+* Can be configured to return specific outputs or throw errors for testing.
+*
+* @example
+* ```typescript
+* // In tests, substitute the real ShellProvider with MemoryShellProvider
+* const alepha = Alepha.create().with({
+*   provide: ShellProvider,
+*   use: MemoryShellProvider,
+* });
+*
+* // Configure mock behavior
+* const shell = alepha.inject(MemoryShellProvider);
+* shell.configure({
+*   outputs: { "echo hello": "hello\n" },
+*   errors: { "failing-cmd": "Command failed" },
+* });
+*
+* // Or use the fluent API
+* shell.outputs.set("another-cmd", "output");
+* shell.errors.set("another-error", "Error message");
+*
+* // Run code that uses ShellProvider
+* const service = alepha.inject(MyService);
+* await service.doSomething();
+*
+* // Verify commands were called
+* expect(shell.calls).toHaveLength(2);
+* expect(shell.calls[0].command).toBe("yarn install");
+* ```
+*/
+var MemoryShellProvider = class {
+	/**
+	* All recorded shell calls.
+	*/
+	calls = [];
+	/**
+	* Simulated outputs for specific commands.
+	*/
+	outputs = /* @__PURE__ */ new Map();
+	/**
+	* Commands that should throw an error.
+	*/
+	errors = /* @__PURE__ */ new Map();
+	/**
+	* Commands considered installed in the system PATH.
+	*/
+	installedCommands = /* @__PURE__ */ new Set();
+	/**
+	* Configure the mock with predefined outputs, errors, and installed commands.
+	*/
+	configure(options) {
+		if (options.outputs) for (const [cmd, output] of Object.entries(options.outputs)) this.outputs.set(cmd, output);
+		if (options.errors) for (const [cmd, error] of Object.entries(options.errors)) this.errors.set(cmd, error);
+		if (options.installedCommands) for (const cmd of options.installedCommands) this.installedCommands.add(cmd);
+		return this;
+	}
+	/**
+	* Record command and return simulated output.
+	*/
+	async run(command, options = {}) {
+		this.calls.push({
+			command,
+			options
+		});
+		const errorMsg = this.errors.get(command);
+		if (errorMsg) throw new Error(errorMsg);
+		return this.outputs.get(command) ?? "";
+	}
+	/**
+	* Check if a specific command was called.
+	*/
+	wasCalled(command) {
+		return this.calls.some((call) => call.command === command);
+	}
+	/**
+	* Check if a command matching a pattern was called.
+	*/
+	wasCalledMatching(pattern) {
+		return this.calls.some((call) => pattern.test(call.command));
+	}
+	/**
+	* Get all calls matching a pattern.
+	*/
+	getCallsMatching(pattern) {
+		return this.calls.filter((call) => pattern.test(call.command));
+	}
+	/**
+	* Check if a command is installed.
+	*/
+	async isInstalled(command) {
+		return this.installedCommands.has(command);
+	}
+	/**
+	* Reset all recorded state.
+	*/
+	reset() {
+		this.calls = [];
+		this.outputs.clear();
+		this.errors.clear();
+		this.installedCommands.clear();
+	}
+};
+
+//#endregion
+//#region ../../src/system/services/FileDetector.ts
+/**
+* Service for detecting file types and getting content types.
+*
+* @example
+* ```typescript
+* const detector = alepha.inject(FileDetector);
+*
+* // Get content type from filename
+* const mimeType = detector.getContentType("image.png"); // "image/png"
+*
+* // Detect file type by magic bytes
+* const stream = createReadStream('image.png');
+* const result = await detector.detectFileType(stream, 'image.png');
+* console.log(result.mimeType); // 'image/png'
+* console.log(result.verified); // true if magic bytes match
+* ```
+*/
+var FileDetector = class FileDetector {
+	/**
+	* Magic byte signatures for common file formats.
+	* Each signature is represented as an array of bytes or null (wildcard).
+	*/
+	static MAGIC_BYTES = {
+		png: [{
+			signature: [
+				137,
+				80,
+				78,
+				71,
+				13,
+				10,
+				26,
+				10
+			],
+			mimeType: "image/png"
+		}],
+		jpg: [
+			{
+				signature: [
+					255,
+					216,
+					255,
+					224
+				],
+				mimeType: "image/jpeg"
+			},
+			{
+				signature: [
+					255,
+					216,
+					255,
+					225
+				],
+				mimeType: "image/jpeg"
+			},
+			{
+				signature: [
+					255,
+					216,
+					255,
+					226
+				],
+				mimeType: "image/jpeg"
+			},
+			{
+				signature: [
+					255,
+					216,
+					255,
+					227
+				],
+				mimeType: "image/jpeg"
+			},
+			{
+				signature: [
+					255,
+					216,
+					255,
+					232
+				],
+				mimeType: "image/jpeg"
+			}
+		],
+		jpeg: [
+			{
+				signature: [
+					255,
+					216,
+					255,
+					224
+				],
+				mimeType: "image/jpeg"
+			},
+			{
+				signature: [
+					255,
+					216,
+					255,
+					225
+				],
+				mimeType: "image/jpeg"
+			},
+			{
+				signature: [
+					255,
+					216,
+					255,
+					226
+				],
+				mimeType: "image/jpeg"
+			},
+			{
+				signature: [
+					255,
+					216,
+					255,
+					227
+				],
+				mimeType: "image/jpeg"
+			},
+			{
+				signature: [
+					255,
+					216,
+					255,
+					232
+				],
+				mimeType: "image/jpeg"
+			}
+		],
+		gif: [{
+			signature: [
+				71,
+				73,
+				70,
+				56,
+				55,
+				97
+			],
+			mimeType: "image/gif"
+		}, {
+			signature: [
+				71,
+				73,
+				70,
+				56,
+				57,
+				97
+			],
+			mimeType: "image/gif"
+		}],
+		webp: [{
+			signature: [
+				82,
+				73,
+				70,
+				70,
+				null,
+				null,
+				null,
+				null,
+				87,
+				69,
+				66,
+				80
+			],
+			mimeType: "image/webp"
+		}],
+		bmp: [{
+			signature: [66, 77],
+			mimeType: "image/bmp"
+		}],
+		ico: [{
+			signature: [
+				0,
+				0,
+				1,
+				0
+			],
+			mimeType: "image/x-icon"
+		}],
+		tiff: [{
+			signature: [
+				73,
+				73,
+				42,
+				0
+			],
+			mimeType: "image/tiff"
+		}, {
+			signature: [
+				77,
+				77,
+				0,
+				42
+			],
+			mimeType: "image/tiff"
+		}],
+		tif: [{
+			signature: [
+				73,
+				73,
+				42,
+				0
+			],
+			mimeType: "image/tiff"
+		}, {
+			signature: [
+				77,
+				77,
+				0,
+				42
+			],
+			mimeType: "image/tiff"
+		}],
+		pdf: [{
+			signature: [
+				37,
+				80,
+				68,
+				70,
+				45
+			],
+			mimeType: "application/pdf"
+		}],
+		zip: [
+			{
+				signature: [
+					80,
+					75,
+					3,
+					4
+				],
+				mimeType: "application/zip"
+			},
+			{
+				signature: [
+					80,
+					75,
+					5,
+					6
+				],
+				mimeType: "application/zip"
+			},
+			{
+				signature: [
+					80,
+					75,
+					7,
+					8
+				],
+				mimeType: "application/zip"
+			}
+		],
+		rar: [{
+			signature: [
+				82,
+				97,
+				114,
+				33,
+				26,
+				7
+			],
+			mimeType: "application/vnd.rar"
+		}],
+		"7z": [{
+			signature: [
+				55,
+				122,
+				188,
+				175,
+				39,
+				28
+			],
+			mimeType: "application/x-7z-compressed"
+		}],
+		tar: [{
+			signature: [
+				117,
+				115,
+				116,
+				97,
+				114
+			],
+			mimeType: "application/x-tar"
+		}],
+		gz: [{
+			signature: [31, 139],
+			mimeType: "application/gzip"
+		}],
+		tgz: [{
+			signature: [31, 139],
+			mimeType: "application/gzip"
+		}],
+		mp3: [
+			{
+				signature: [255, 251],
+				mimeType: "audio/mpeg"
+			},
+			{
+				signature: [255, 243],
+				mimeType: "audio/mpeg"
+			},
+			{
+				signature: [255, 242],
+				mimeType: "audio/mpeg"
+			},
+			{
+				signature: [
+					73,
+					68,
+					51
+				],
+				mimeType: "audio/mpeg"
+			}
+		],
+		wav: [{
+			signature: [
+				82,
+				73,
+				70,
+				70,
+				null,
+				null,
+				null,
+				null,
+				87,
+				65,
+				86,
+				69
+			],
+			mimeType: "audio/wav"
+		}],
+		ogg: [{
+			signature: [
+				79,
+				103,
+				103,
+				83
+			],
+			mimeType: "audio/ogg"
+		}],
+		flac: [{
+			signature: [
+				102,
+				76,
+				97,
+				67
+			],
+			mimeType: "audio/flac"
+		}],
+		mp4: [
+			{
+				signature: [
+					null,
+					null,
+					null,
+					null,
+					102,
+					116,
+					121,
+					112
+				],
+				mimeType: "video/mp4"
+			},
+			{
+				signature: [
+					null,
+					null,
+					null,
+					null,
+					102,
+					116,
+					121,
+					112,
+					105,
+					115,
+					111,
+					109
+				],
+				mimeType: "video/mp4"
+			},
+			{
+				signature: [
+					null,
+					null,
+					null,
+					null,
+					102,
+					116,
+					121,
+					112,
+					109,
+					112,
+					52,
+					50
+				],
+				mimeType: "video/mp4"
+			}
+		],
+		webm: [{
+			signature: [
+				26,
+				69,
+				223,
+				163
+			],
+			mimeType: "video/webm"
+		}],
+		avi: [{
+			signature: [
+				82,
+				73,
+				70,
+				70,
+				null,
+				null,
+				null,
+				null,
+				65,
+				86,
+				73,
+				32
+			],
+			mimeType: "video/x-msvideo"
+		}],
+		mov: [{
+			signature: [
+				null,
+				null,
+				null,
+				null,
+				102,
+				116,
+				121,
+				112,
+				113,
+				116,
+				32,
+				32
+			],
+			mimeType: "video/quicktime"
+		}],
+		mkv: [{
+			signature: [
+				26,
+				69,
+				223,
+				163
+			],
+			mimeType: "video/x-matroska"
+		}],
+		docx: [{
+			signature: [
+				80,
+				75,
+				3,
+				4
+			],
+			mimeType: "application/vnd.openxmlformats-officedocument.wordprocessingml.document"
+		}],
+		xlsx: [{
+			signature: [
+				80,
+				75,
+				3,
+				4
+			],
+			mimeType: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
+		}],
+		pptx: [{
+			signature: [
+				80,
+				75,
+				3,
+				4
+			],
+			mimeType: "application/vnd.openxmlformats-officedocument.presentationml.presentation"
+		}],
+		doc: [{
+			signature: [
+				208,
+				207,
+				17,
+				224,
+				161,
+				177,
+				26,
+				225
+			],
+			mimeType: "application/msword"
+		}],
+		xls: [{
+			signature: [
+				208,
+				207,
+				17,
+				224,
+				161,
+				177,
+				26,
+				225
+			],
+			mimeType: "application/vnd.ms-excel"
+		}],
+		ppt: [{
+			signature: [
+				208,
+				207,
+				17,
+				224,
+				161,
+				177,
+				26,
+				225
+			],
+			mimeType: "application/vnd.ms-powerpoint"
+		}]
+	};
+	/**
+	* All possible format signatures for checking against actual file content
+	*/
+	static ALL_SIGNATURES = Object.entries(FileDetector.MAGIC_BYTES).flatMap(([ext, signatures]) => signatures.map((sig) => ({
+		ext,
+		...sig
+	})));
+	/**
+	* MIME type map for file extensions.
+	*
+	* Can be used to get the content type of file based on its extension.
+	* Feel free to add more mime types in your project!
+	*/
+	static mimeMap = {
+		json: "application/json",
+		txt: "text/plain",
+		html: "text/html",
+		htm: "text/html",
+		xml: "application/xml",
+		csv: "text/csv",
+		pdf: "application/pdf",
+		md: "text/markdown",
+		markdown: "text/markdown",
+		rtf: "application/rtf",
+		css: "text/css",
+		js: "application/javascript",
+		mjs: "application/javascript",
+		ts: "application/typescript",
+		jsx: "text/jsx",
+		tsx: "text/tsx",
+		zip: "application/zip",
+		rar: "application/vnd.rar",
+		"7z": "application/x-7z-compressed",
+		tar: "application/x-tar",
+		gz: "application/gzip",
+		tgz: "application/gzip",
+		png: "image/png",
+		jpg: "image/jpeg",
+		jpeg: "image/jpeg",
+		gif: "image/gif",
+		webp: "image/webp",
+		svg: "image/svg+xml",
+		bmp: "image/bmp",
+		ico: "image/x-icon",
+		tiff: "image/tiff",
+		tif: "image/tiff",
+		mp3: "audio/mpeg",
+		wav: "audio/wav",
+		ogg: "audio/ogg",
+		m4a: "audio/mp4",
+		aac: "audio/aac",
+		flac: "audio/flac",
+		mp4: "video/mp4",
+		webm: "video/webm",
+		avi: "video/x-msvideo",
+		mov: "video/quicktime",
+		wmv: "video/x-ms-wmv",
+		flv: "video/x-flv",
+		mkv: "video/x-matroska",
+		doc: "application/msword",
+		docx: "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+		xls: "application/vnd.ms-excel",
+		xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+		ppt: "application/vnd.ms-powerpoint",
+		pptx: "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+		woff: "font/woff",
+		woff2: "font/woff2",
+		ttf: "font/ttf",
+		otf: "font/otf",
+		eot: "application/vnd.ms-fontobject"
+	};
+	/**
+	* Reverse MIME type map for looking up extensions from MIME types.
+	* Prefers shorter, more common extensions when multiple exist.
+	*/
+	static reverseMimeMap = (() => {
+		const reverse = {};
+		for (const [ext, mimeType] of Object.entries(FileDetector.mimeMap)) if (!reverse[mimeType]) reverse[mimeType] = ext;
+		return reverse;
+	})();
+	/**
+	* Returns the file extension for a given MIME type.
+	*
+	* @param mimeType - The MIME type to look up
+	* @returns The file extension (without dot), or "bin" if not found
+	*
+	* @example
+	* ```typescript
+	* const detector = alepha.inject(FileDetector);
+	* const ext = detector.getExtensionFromMimeType("image/png"); // "png"
+	* const ext2 = detector.getExtensionFromMimeType("application/octet-stream"); // "bin"
+	* ```
+	*/
+	getExtensionFromMimeType(mimeType) {
+		return FileDetector.reverseMimeMap[mimeType] || "bin";
+	}
+	/**
+	* Returns the content type of file based on its filename.
+	*
+	* @param filename - The filename to check
+	* @returns The MIME type
+	*
+	* @example
+	* ```typescript
+	* const detector = alepha.inject(FileDetector);
+	* const mimeType = detector.getContentType("image.png"); // "image/png"
+	* ```
+	*/
+	getContentType(filename) {
+		const ext = filename.toLowerCase().split(".").pop() || "";
+		return FileDetector.mimeMap[ext] || "application/octet-stream";
+	}
+	/**
+	* Detects the file type by checking magic bytes against the stream content.
+	*
+	* @param stream - The readable stream to check
+	* @param filename - The filename (used to get the extension)
+	* @returns File type information including MIME type, extension, and verification status
+	*
+	* @example
+	* ```typescript
+	* const detector = alepha.inject(FileDetector);
+	* const stream = createReadStream('image.png');
+	* const result = await detector.detectFileType(stream, 'image.png');
+	* console.log(result.mimeType); // 'image/png'
+	* console.log(result.verified); // true if magic bytes match
+	* ```
+	*/
+	async detectFileType(stream, filename) {
+		const expectedMimeType = this.getContentType(filename);
+		const lastDotIndex = filename.lastIndexOf(".");
+		const ext = lastDotIndex > 0 ? filename.substring(lastDotIndex + 1).toLowerCase() : "";
+		const { buffer, stream: newStream } = await this.peekBytes(stream, 16);
+		const expectedSignatures = FileDetector.MAGIC_BYTES[ext];
+		if (expectedSignatures) {
+			for (const { signature, mimeType } of expectedSignatures) if (this.matchesSignature(buffer, signature)) return {
+				mimeType,
+				extension: ext,
+				verified: true,
+				stream: newStream
+			};
+		}
+		for (const { ext: detectedExt, signature, mimeType } of FileDetector.ALL_SIGNATURES) if (detectedExt !== ext && this.matchesSignature(buffer, signature)) return {
+			mimeType,
+			extension: detectedExt,
+			verified: true,
+			stream: newStream
+		};
+		return {
+			mimeType: expectedMimeType,
+			extension: ext,
+			verified: false,
+			stream: newStream
+		};
+	}
+	/**
+	* Reads all bytes from a stream and returns the first N bytes along with a new stream containing all data.
+	* This approach reads the entire stream upfront to avoid complex async handling issues.
+	*
+	* @protected
+	*/
+	async peekBytes(stream, numBytes) {
+		const chunks = [];
+		for await (const chunk of stream) chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+		const allData = Buffer.concat(chunks);
+		return {
+			buffer: allData.subarray(0, numBytes),
+			stream: Readable.from(allData)
+		};
+	}
+	/**
+	* Checks if a buffer matches a magic byte signature.
+	*
+	* @protected
+	*/
+	matchesSignature(buffer, signature) {
+		if (buffer.length < signature.length) return false;
+		for (let i = 0; i < signature.length; i++) if (signature[i] !== null && buffer[i] !== signature[i]) return false;
+		return true;
+	}
+};
+
+//#endregion
+//#region ../../src/system/providers/NodeFileSystemProvider.ts
+/**
+* Node.js implementation of FileSystem interface.
+*
+* @example
+* ```typescript
+* const fs = alepha.inject(NodeFileSystemProvider);
+*
+* // Create from URL
+* const file1 = fs.createFile({ url: "file:///path/to/file.png" });
+*
+* // Create from Buffer
+* const file2 = fs.createFile({ buffer: Buffer.from("hello"), name: "hello.txt" });
+*
+* // Create from text
+* const file3 = fs.createFile({ text: "Hello, world!", name: "greeting.txt" });
+*
+* // File operations
+* await fs.mkdir("/tmp/mydir", { recursive: true });
+* await fs.cp("/src/file.txt", "/dest/file.txt");
+* await fs.mv("/old/path.txt", "/new/path.txt");
+* const files = await fs.ls("/tmp");
+* await fs.rm("/tmp/file.txt");
+* ```
+*/
+var NodeFileSystemProvider = class {
+	detector = $inject(FileDetector);
+	json = $inject(Json);
+	join(...paths) {
+		return join(...paths);
+	}
+	/**
+	* Creates a FileLike object from various sources.
+	*
+	* @param options - Options for creating the file
+	* @returns A FileLike object
+	*
+	* @example
+	* ```typescript
+	* const fs = alepha.inject(NodeFileSystemProvider);
+	*
+	* // From URL
+	* const file1 = fs.createFile({ url: "https://example.com/image.png" });
+	*
+	* // From Buffer
+	* const file2 = fs.createFile({
+	*   buffer: Buffer.from("hello"),
+	*   name: "hello.txt",
+	*   type: "text/plain"
+	* });
+	*
+	* // From text
+	* const file3 = fs.createFile({ text: "Hello!", name: "greeting.txt" });
+	*
+	* // From stream with detection
+	* const stream = createReadStream("/path/to/file.png");
+	* const file4 = fs.createFile({ stream, name: "image.png" });
+	* ```
+	*/
+	createFile(options) {
+		if ("path" in options) {
+			const path = options.path;
+			const filename = path.split("/").pop() || "file";
+			return this.createFileFromUrl(`file://${path}`, {
+				type: options.type,
+				name: options.name || filename
+			});
+		}
+		if ("url" in options) return this.createFileFromUrl(options.url, {
+			type: options.type,
+			name: options.name
+		});
+		if ("response" in options) {
+			if (!options.response.body) throw new AlephaError("Response has no body stream");
+			const res = options.response;
+			const sizeHeader = res.headers.get("content-length");
+			const size = sizeHeader ? parseInt(sizeHeader, 10) : void 0;
+			let name = options.name;
+			const contentDisposition = res.headers.get("content-disposition");
+			if (contentDisposition && !name) {
+				const match = contentDisposition.match(/filename="?([^"]+)"?/);
+				if (match) name = match[1];
+			}
+			const type = options.type || res.headers.get("content-type") || void 0;
+			return this.createFileFromStream(options.response.body, {
+				type,
+				name,
+				size
+			});
+		}
+		if ("file" in options) return this.createFileFromWebFile(options.file, {
+			type: options.type,
+			name: options.name,
+			size: options.size
+		});
+		if ("buffer" in options) return this.createFileFromBuffer(options.buffer, {
+			type: options.type,
+			name: options.name
+		});
+		if ("arrayBuffer" in options) return this.createFileFromBuffer(Buffer.from(options.arrayBuffer), {
+			type: options.type,
+			name: options.name
+		});
+		if ("text" in options) return this.createFileFromBuffer(Buffer.from(options.text, "utf-8"), {
+			type: options.type || "text/plain",
+			name: options.name || "file.txt"
+		});
+		if ("stream" in options) return this.createFileFromStream(options.stream, {
+			type: options.type,
+			name: options.name,
+			size: options.size
+		});
+		throw new AlephaError("Invalid createFile options: no valid source provided");
+	}
+	/**
+	* Removes a file or directory.
+	*
+	* @param path - The path to remove
+	* @param options - Remove options
+	*
+	* @example
+	* ```typescript
+	* const fs = alepha.inject(NodeFileSystemProvider);
+	*
+	* // Remove a file
+	* await fs.rm("/tmp/file.txt");
+	*
+	* // Remove a directory recursively
+	* await fs.rm("/tmp/mydir", { recursive: true });
+	*
+	* // Remove with force (no error if doesn't exist)
+	* await fs.rm("/tmp/maybe-exists.txt", { force: true });
+	* ```
+	*/
+	async rm(path, options) {
+		await rm(path, options);
+	}
+	/**
+	* Copies a file or directory.
+	*
+	* @param src - Source path
+	* @param dest - Destination path
+	* @param options - Copy options
+	*
+	* @example
+	* ```typescript
+	* const fs = alepha.inject(NodeFileSystemProvider);
+	*
+	* // Copy a file
+	* await fs.cp("/src/file.txt", "/dest/file.txt");
+	*
+	* // Copy a directory recursively
+	* await fs.cp("/src/dir", "/dest/dir", { recursive: true });
+	*
+	* // Copy with force (overwrite existing)
+	* await fs.cp("/src/file.txt", "/dest/file.txt", { force: true });
+	* ```
+	*/
+	async cp(src, dest, options) {
+		if ((await stat(src)).isDirectory()) {
+			if (!options?.recursive) throw new Error(`Cannot copy directory without recursive option: ${src}`);
+			await cp(src, dest, {
+				recursive: true,
+				force: options?.force ?? false
+			});
+		} else await copyFile(src, dest);
+	}
+	/**
+	* Moves/renames a file or directory.
+	*
+	* @param src - Source path
+	* @param dest - Destination path
+	*
+	* @example
+	* ```typescript
+	* const fs = alepha.inject(NodeFileSystemProvider);
+	*
+	* // Move/rename a file
+	* await fs.mv("/old/path.txt", "/new/path.txt");
+	*
+	* // Move a directory
+	* await fs.mv("/old/dir", "/new/dir");
+	* ```
+	*/
+	async mv(src, dest) {
+		await rename(src, dest);
+	}
+	/**
+	* Creates a directory.
+	*
+	* @param path - The directory path to create
+	* @param options - Mkdir options
+	*
+	* @example
+	* ```typescript
+	* const fs = alepha.inject(NodeFileSystemProvider);
+	*
+	* // Create a directory
+	* await fs.mkdir("/tmp/mydir");
+	*
+	* // Create nested directories
+	* await fs.mkdir("/tmp/path/to/dir", { recursive: true });
+	*
+	* // Create with specific permissions
+	* await fs.mkdir("/tmp/mydir", { mode: 0o755 });
+	* ```
+	*/
+	async mkdir(path, options = {}) {
+		const p = mkdir(path, {
+			recursive: options.recursive ?? true,
+			mode: options.mode
+		});
+		if (options.force === false) await p;
+		else await p.catch(() => {});
+	}
+	/**
+	* Lists files in a directory.
+	*
+	* @param path - The directory path to list
+	* @param options - List options
+	* @returns Array of filenames
+	*
+	* @example
+	* ```typescript
+	* const fs = alepha.inject(NodeFileSystemProvider);
+	*
+	* // List files in a directory
+	* const files = await fs.ls("/tmp");
+	* console.log(files); // ["file1.txt", "file2.txt", "subdir"]
+	*
+	* // List with hidden files
+	* const allFiles = await fs.ls("/tmp", { hidden: true });
+	*
+	* // List recursively
+	* const allFilesRecursive = await fs.ls("/tmp", { recursive: true });
+	* ```
+	*/
+	async ls(path, options) {
+		const entries = await readdir(path);
+		const filteredEntries = options?.hidden ? entries : entries.filter((e) => !e.startsWith("."));
+		if (options?.recursive) {
+			const allFiles = [];
+			for (const entry of filteredEntries) {
+				const fullPath = join(path, entry);
+				if ((await stat(fullPath)).isDirectory()) {
+					allFiles.push(entry);
+					const subFiles = await this.ls(fullPath, options);
+					allFiles.push(...subFiles.map((f) => join(entry, f)));
+				} else allFiles.push(entry);
+			}
+			return allFiles;
+		}
+		return filteredEntries;
+	}
+	/**
+	* Checks if a file or directory exists.
+	*
+	* @param path - The path to check
+	* @returns True if the path exists, false otherwise
+	*
+	* @example
+	* ```typescript
+	* const fs = alepha.inject(NodeFileSystemProvider);
+	*
+	* if (await fs.exists("/tmp/file.txt")) {
+	*   console.log("File exists");
+	* }
+	* ```
+	*/
+	async exists(path) {
+		try {
+			await access(path);
+			return true;
+		} catch {
+			return false;
+		}
+	}
+	/**
+	* Reads the content of a file.
+	*
+	* @param path - The file path to read
+	* @returns The file content as a Buffer
+	*
+	* @example
+	* ```typescript
+	* const fs = alepha.inject(NodeFileSystemProvider);
+	*
+	* const buffer = await fs.readFile("/tmp/file.txt");
+	* console.log(buffer.toString("utf-8"));
+	* ```
+	*/
+	async readFile(path) {
+		return await readFile(path);
+	}
+	/**
+	* Writes data to a file.
+	*
+	* @param path - The file path to write to
+	* @param data - The data to write (Buffer or string)
+	*
+	* @example
+	* ```typescript
+	* const fs = alepha.inject(NodeFileSystemProvider);
+	*
+	* // Write string
+	* await fs.writeFile("/tmp/file.txt", "Hello, world!");
+	*
+	* // Write Buffer
+	* await fs.writeFile("/tmp/file.bin", Buffer.from([0x01, 0x02, 0x03]));
+	* ```
+	*/
+	async writeFile(path, data) {
+		if (isFileLike(data)) {
+			await writeFile(path, Readable.from(data.stream()));
+			return;
+		}
+		await writeFile(path, data);
+	}
+	/**
+	* Reads the content of a file as a string.
+	*
+	* @param path - The file path to read
+	* @returns The file content as a string
+	*
+	* @example
+	* ```typescript
+	* const fs = alepha.inject(NodeFileSystemProvider);
+	* const content = await fs.readTextFile("/tmp/file.txt");
+	* ```
+	*/
+	async readTextFile(path) {
+		return (await this.readFile(path)).toString("utf-8");
+	}
+	/**
+	* Reads the content of a file as JSON.
+	*
+	* @param path - The file path to read
+	* @returns The parsed JSON content
+	*
+	* @example
+	* ```typescript
+	* const fs = alepha.inject(NodeFileSystemProvider);
+	* const config = await fs.readJsonFile<{ name: string }>("/tmp/config.json");
+	* ```
+	*/
+	async readJsonFile(path) {
+		const text = await this.readTextFile(path);
+		return this.json.parse(text);
+	}
+	/**
+	* Creates a FileLike object from a Web File.
+	*
+	* @protected
+	*/
+	createFileFromWebFile(source, options = {}) {
+		const name = options.name ?? source.name;
+		return {
+			name,
+			type: options.type ?? (source.type || this.detector.getContentType(name)),
+			size: options.size ?? source.size ?? 0,
+			lastModified: source.lastModified || Date.now(),
+			stream: () => source.stream(),
+			arrayBuffer: async () => {
+				return await source.arrayBuffer();
+			},
+			text: async () => {
+				return await source.text();
+			}
+		};
+	}
+	/**
+	* Creates a FileLike object from a Buffer.
+	*
+	* @protected
+	*/
+	createFileFromBuffer(source, options = {}) {
+		const name = options.name ?? "file";
+		return {
+			name,
+			type: options.type ?? this.detector.getContentType(options.name ?? name),
+			size: source.byteLength,
+			lastModified: Date.now(),
+			stream: () => Readable.from(source),
+			arrayBuffer: async () => {
+				return this.bufferToArrayBuffer(source);
+			},
+			text: async () => {
+				return source.toString("utf-8");
+			}
+		};
+	}
+	/**
+	* Creates a FileLike object from a stream.
+	*
+	* @protected
+	*/
+	createFileFromStream(source, options = {}) {
+		let buffer = null;
+		return {
+			name: options.name ?? "file",
+			type: options.type ?? this.detector.getContentType(options.name ?? "file"),
+			size: options.size ?? 0,
+			lastModified: Date.now(),
+			stream: () => source,
+			_buffer: null,
+			arrayBuffer: async () => {
+				buffer ??= await this.streamToBuffer(source);
+				return this.bufferToArrayBuffer(buffer);
+			},
+			text: async () => {
+				buffer ??= await this.streamToBuffer(source);
+				return buffer.toString("utf-8");
+			}
+		};
+	}
+	/**
+	* Creates a FileLike object from a URL.
+	*
+	* @protected
+	*/
+	createFileFromUrl(url, options = {}) {
+		const parsedUrl = new URL(url);
+		const filename = options.name || parsedUrl.pathname.split("/").pop() || "file";
+		let buffer = null;
+		return {
+			name: filename,
+			type: options.type ?? this.detector.getContentType(filename),
+			size: 0,
+			lastModified: Date.now(),
+			stream: () => this.createStreamFromUrl(url),
+			arrayBuffer: async () => {
+				buffer ??= await this.loadFromUrl(url);
+				return this.bufferToArrayBuffer(buffer);
+			},
+			text: async () => {
+				buffer ??= await this.loadFromUrl(url);
+				return buffer.toString("utf-8");
+			},
+			filepath: url
+		};
+	}
+	/**
+	* Gets a streaming response from a URL.
+	*
+	* @protected
+	*/
+	getStreamingResponse(url) {
+		const stream = new PassThrough();
+		fetch(url).then((res) => Readable.fromWeb(res.body).pipe(stream)).catch((err) => stream.destroy(err));
+		return stream;
+	}
+	/**
+	* Loads data from a URL.
+	*
+	* @protected
+	*/
+	async loadFromUrl(url) {
+		const parsedUrl = new URL(url);
+		if (parsedUrl.protocol === "file:") return await readFile(fileURLToPath(url));
+		else if (parsedUrl.protocol === "http:" || parsedUrl.protocol === "https:") {
+			const response = await fetch(url);
+			if (!response.ok) throw new Error(`Failed to fetch ${url}: ${response.status} ${response.statusText}`);
+			const arrayBuffer = await response.arrayBuffer();
+			return Buffer.from(arrayBuffer);
+		} else throw new Error(`Unsupported protocol: ${parsedUrl.protocol}`);
+	}
+	/**
+	* Creates a stream from a URL.
+	*
+	* @protected
+	*/
+	createStreamFromUrl(url) {
+		const parsedUrl = new URL(url);
+		if (parsedUrl.protocol === "file:") return createReadStream(fileURLToPath(url));
+		else if (parsedUrl.protocol === "http:" || parsedUrl.protocol === "https:") return this.getStreamingResponse(url);
+		else throw new AlephaError(`Unsupported protocol: ${parsedUrl.protocol}`);
+	}
+	/**
+	* Converts a stream-like object to a Buffer.
+	*
+	* @protected
+	*/
+	async streamToBuffer(streamLike) {
+		const stream = streamLike instanceof Readable ? streamLike : Readable.fromWeb(streamLike);
+		return new Promise((resolve, reject) => {
+			const buffer = [];
+			stream.on("data", (chunk) => buffer.push(Buffer.from(chunk)));
+			stream.on("end", () => resolve(Buffer.concat(buffer)));
+			stream.on("error", (err) => reject(new AlephaError("Error converting stream", { cause: err })));
+		});
+	}
+	/**
+	* Converts a Node.js Buffer to an ArrayBuffer.
+	*
+	* @protected
+	*/
+	bufferToArrayBuffer(buffer) {
+		return buffer.buffer.slice(buffer.byteOffset, buffer.byteOffset + buffer.byteLength);
+	}
+};
+
+//#endregion
+//#region ../../src/system/providers/NodeShellProvider.ts
+/**
+* Node.js implementation of ShellProvider.
+*
+* Executes shell commands using Node.js child_process module.
+* Supports binary resolution from node_modules/.bin for local packages.
+*/
+var NodeShellProvider = class {
+	log = $logger();
+	fs = $inject(FileSystemProvider);
+	/**
+	* Run a shell command or binary.
+	*/
+	async run(command, options = {}) {
+		const { resolve = false, capture = false, root, env } = options;
+		const cwd = root ?? process.cwd();
+		this.log.debug(`Shell: ${command}`, {
+			cwd,
+			resolve,
+			capture
+		});
+		let executable;
+		let args;
+		if (resolve) {
+			const [bin, ...rest] = command.split(" ");
+			executable = await this.resolveExecutable(bin, cwd);
+			args = rest;
+		} else [executable, ...args] = command.split(" ");
+		if (capture) return this.execCapture(command, {
+			cwd,
+			env
+		});
+		return this.execInherit(executable, args, {
+			cwd,
+			env
+		});
+	}
+	/**
+	* Execute command with inherited stdio (streams to terminal).
+	*/
+	async execInherit(executable, args, options) {
+		const proc = spawn(executable, args, {
+			stdio: "inherit",
+			cwd: options.cwd,
+			env: {
+				...process.env,
+				...options.env
+			}
+		});
+		return new Promise((resolve, reject) => {
+			proc.on("exit", (code) => {
+				if (code === 0 || code === null) resolve("");
+				else reject(new AlephaError(`Command exited with code ${code}`));
+			});
+			proc.on("error", reject);
+		});
+	}
+	/**
+	* Execute command and capture stdout.
+	*/
+	execCapture(command, options) {
+		return new Promise((resolve, reject) => {
+			exec(command, {
+				cwd: options.cwd,
+				env: {
+					...process.env,
+					LOG_FORMAT: "pretty",
+					...options.env
+				}
+			}, (err, stdout) => {
+				if (err) {
+					err.stdout = stdout;
+					reject(err);
+				} else resolve(stdout);
+			});
+		});
+	}
+	/**
+	* Resolve executable path from node_modules/.bin.
+	*
+	* Search order:
+	* 1. Local: node_modules/.bin/
+	* 2. Pnpm nested: node_modules/alepha/node_modules/.bin/
+	* 3. Monorepo: Walk up to 3 parent directories
+	*/
+	async resolveExecutable(name, root) {
+		const suffix = process.platform === "win32" ? ".cmd" : "";
+		let execPath = await this.findExecutable(root, `node_modules/.bin/${name}${suffix}`);
+		if (!execPath) execPath = await this.findExecutable(root, `node_modules/alepha/node_modules/.bin/${name}${suffix}`);
+		if (!execPath) {
+			let parentDir = this.fs.join(root, "..");
+			for (let i = 0; i < 3; i++) {
+				execPath = await this.findExecutable(parentDir, `node_modules/.bin/${name}${suffix}`);
+				if (execPath) break;
+				parentDir = this.fs.join(parentDir, "..");
+			}
+		}
+		if (!execPath) throw new AlephaError(`Could not find executable for '${name}'. Make sure the package is installed.`);
+		return execPath;
+	}
+	/**
+	* Check if executable exists at path.
+	*/
+	async findExecutable(root, relativePath) {
+		const fullPath = this.fs.join(root, relativePath);
+		if (await this.fs.exists(fullPath)) return fullPath;
+	}
+	/**
+	* Check if a command is installed and available in the system PATH.
+	*/
+	isInstalled(command) {
+		return new Promise((resolve) => {
+			exec(process.platform === "win32" ? `where ${command}` : `command -v ${command}`, (error) => resolve(!error));
+		});
+	}
+};
+
+//#endregion
+//#region ../../src/system/providers/ShellProvider.ts
+/**
+* Abstract provider for executing shell commands and binaries.
+*
+* Implementations:
+* - `NodeShellProvider` - Real shell execution using Node.js child_process
+* - `MemoryShellProvider` - In-memory mock for testing
+*
+* @example
+* ```typescript
+* class MyService {
+*   protected readonly shell = $inject(ShellProvider);
+*
+*   async build() {
+*     // Run shell command directly
+*     await this.shell.run("yarn install");
+*
+*     // Run local binary with resolution
+*     await this.shell.run("vite build", { resolve: true });
+*
+*     // Capture output
+*     const output = await this.shell.run("echo hello", { capture: true });
+*   }
+* }
+* ```
+*/
+var ShellProvider = class {};
+
+//#endregion
+//#region ../../src/system/index.ts
+/**
+* | type | quality | stability |
+* |------|---------|-----------|
+* | tooling | standard | stable |
+*
+* System-level abstractions for portable code across runtimes.
+*
+* **Features:**
+* - File system operations (read, write, exists, etc.)
+* - Shell command execution
+* - File type detection and MIME utilities
+* - Memory implementations for testing
+*
+* @module alepha.system
+*/
+const AlephaSystem = $module({
+	name: "alepha.system",
+	primitives: [],
+	services: [
+		FileDetector,
+		FileSystemProvider,
+		MemoryFileSystemProvider,
+		NodeFileSystemProvider,
+		ShellProvider,
+		MemoryShellProvider,
+		NodeShellProvider
+	],
+	register: (alepha) => alepha.with({
+		optional: true,
+		provide: FileSystemProvider,
+		use: NodeFileSystemProvider
+	}).with({
+		optional: true,
+		provide: ShellProvider,
+		use: alepha.isTest() ? MemoryShellProvider : NodeShellProvider
+	})
+});
+
+//#endregion
 //#region ../../src/core/constants/KIND.ts
 /**
 * Used for identifying primitives.
@@ -76,13 +1917,24 @@ $atom$1[KIND] = "atom";
 * Build options atom for CLI build command.
 *
 * Defines the available build configuration options with their defaults.
-* Options can be overridden via vite.config.ts or CLI flags.
+* Options can be overridden via alepha.config.ts or CLI flags.
 */
 const buildOptions = $atom$1({
 	name: "alepha.cli.build.options",
 	description: "Build configuration options",
 	schema: t.object({
 		stats: t.optional(t.boolean({ default: false })),
+		target: t.optional(t.enum([
+			"bare",
+			"docker",
+			"vercel",
+			"cloudflare"
+		])),
+		runtime: t.optional(t.enum([
+			"node",
+			"bun",
+			"workerd"
+		])),
 		vercel: t.optional(t.object({
 			projectName: t.optional(t.string()),
 			orgId: t.optional(t.string()),
@@ -94,8 +1946,13 @@ const buildOptions = $atom$1({
 		})),
 		cloudflare: t.optional(t.object({ config: t.optional(t.json()) })),
 		docker: t.optional(t.object({
-			image: t.optional(t.string({ default: "node:24-alpine" })),
-			command: t.optional(t.string({ default: "node" }))
+			from: t.optional(t.string()),
+			command: t.optional(t.string()),
+			image: t.optional(t.object({
+				tag: t.string(),
+				args: t.optional(t.string()),
+				oci: t.optional(t.boolean())
+			}))
 		})),
 		sitemap: t.optional(t.object({ hostname: t.string() }))
 	}),
@@ -191,9 +2048,10 @@ var AppEntryProvider = class {
 };
 
 //#endregion
-//#region ../../src/cli/providers/ViteTemplateProvider.ts
-var ViteTemplateProvider = class {
+//#region ../../src/cli/services/ViteUtils.ts
+var ViteUtils = class {
 	fs = $inject(FileSystemProvider);
+	viteDevServer;
 	generateIndexHtml(entry) {
 		const style = entry.style;
 		const browser = entry.browser ?? entry.server;
@@ -213,15 +2071,6 @@ ${style ? `<link rel="stylesheet" href="/${style}" />` : ""}
 </html>
 `.trim();
 	}
-};
-
-//#endregion
-//#region ../../src/cli/providers/ViteBuildProvider.ts
-var ViteBuildProvider = class {
-	alepha;
-	appEntry;
-	viteDevServer;
-	templateProvider = $inject(ViteTemplateProvider);
 	/**
 	* We need to close the Vite dev server after build is done.
 	*/
@@ -238,10 +2087,10 @@ var ViteBuildProvider = class {
 			await this.viteDevServer?.close();
 		}
 	});
-	async init(opts) {
+	async runAlepha(opts) {
 		const { createServer } = await importVite();
+		process.env.NODE_ENV = opts.mode;
 		process.env.ALEPHA_CLI_IMPORT = "true";
-		process.env.NODE_ENV = "production";
 		process.env.LOG_LEVEL ??= "warn";
 		/**
 		* 01/26 Vite 7
@@ -257,6 +2106,21 @@ var ViteBuildProvider = class {
 		await this.viteDevServer.ssrLoadModule(opts.entry.server);
 		const alepha = globalThis.__alepha;
 		if (!alepha) throw new AlephaError("Alepha instance not found after loading entry module");
+		return alepha;
+	}
+};
+
+//#endregion
+//#region ../../src/cli/providers/ViteBuildProvider.ts
+var ViteBuildProvider = class {
+	alepha;
+	appEntry;
+	viteUtils = $inject(ViteUtils);
+	async init(opts) {
+		const alepha = await this.viteUtils.runAlepha({
+			entry: opts.entry,
+			mode: "production"
+		});
 		this.alepha = alepha;
 		this.appEntry = opts.entry;
 		return alepha;
@@ -272,7 +2136,7 @@ var ViteBuildProvider = class {
 	}
 	generateIndexHtml() {
 		if (!this.appEntry) throw new AlephaError("ViteBuildProvider not initialized");
-		return this.templateProvider.generateIndexHtml(this.appEntry);
+		return this.viteUtils.generateIndexHtml(this.appEntry);
 	}
 };
 
@@ -292,44 +2156,23 @@ var AlephaCliUtils = class {
 	fs = $inject(FileSystemProvider);
 	envUtils = $inject(EnvUtils);
 	boot = $inject(AppEntryProvider);
+	shell = $inject(ShellProvider);
+	viteUtils = $inject(ViteUtils);
 	/**
 	* Execute a command with inherited stdio.
+	*
+	* @param command - The command to execute
+	* @param options.root - Working directory
+	* @param options.env - Additional environment variables
+	* @param options.global - If true, run command directly without resolving from node_modules
 	*/
 	async exec(command, options = {}) {
-		const root = options.root ?? process.cwd();
-		this.log.debug(`Executing command: ${command}`, { cwd: root });
-		const runExec = async (app, args) => {
-			const prog = spawn(app, args, {
-				stdio: "inherit",
-				cwd: root,
-				env: {
-					...process.env,
-					...options.env
-				}
-			});
-			await new Promise((resolve) => prog.on("exit", () => {
-				resolve();
-			}));
-		};
-		if (options.global) {
-			const [app, ...args] = command.split(" ");
-			await runExec(app, args);
-			return;
-		}
-		const suffix = process.platform === "win32" ? ".cmd" : "";
-		const [app, ...args] = command.split(" ");
-		let execPath = await this.checkFileExists(root, `node_modules/.bin/${app}${suffix}`);
-		if (!execPath) execPath = await this.checkFileExists(root, `node_modules/alepha/node_modules/.bin/${app}${suffix}`);
-		if (!execPath) {
-			let parentDir = this.fs.join(root, "..");
-			for (let i = 0; i < 3; i++) {
-				execPath = await this.checkFileExists(parentDir, `node_modules/.bin/${app}${suffix}`);
-				if (execPath) break;
-				parentDir = this.fs.join(parentDir, "..");
-			}
-		}
-		if (!execPath) throw new AlephaError(`Could not find executable for command '${app}'. Make sure the package is installed.`);
-		await runExec(execPath, args);
+		await this.shell.run(command, {
+			root: options.root,
+			env: options.env,
+			resolve: !options.global,
+			capture: false
+		});
 	}
 	/**
 	* Write a configuration file to node_modules/.alepha directory.
@@ -342,33 +2185,14 @@ var AlephaCliUtils = class {
 		this.log.debug(`Config file written: ${path}`);
 		return path;
 	}
-	/**
-	* Load Alepha instance from a server entry file.
-	*/
-	async loadAlephaFromServerEntryFile(rootDir, explicitEntry) {
-		process.env.ALEPHA_CLI_IMPORT = "true";
-		const root = rootDir ?? process.cwd();
+	async loadAlephaFromServerEntryFile(opts) {
 		let entry;
-		if (explicitEntry) {
-			entry = this.fs.join(root, explicitEntry);
-			if (!await this.fs.exists(entry)) throw new AlephaError(`Explicit server entry file "${explicitEntry}" not found.`);
-		} else {
-			const appEntry = await this.boot.getAppEntry(root);
-			entry = this.fs.join(root, appEntry.server);
-		}
-		delete global.__alepha;
-		const mod = await import(entry);
-		this.log.debug(`Load entry: ${entry}`);
-		if (mod.default instanceof Alepha) return {
-			alepha: mod.default,
-			entry
-		};
-		const g = global;
-		if (g.__alepha) return {
-			alepha: g.__alepha,
-			entry
-		};
-		throw new AlephaError(`Could not find Alepha instance in entry file: ${entry}`);
+		if ("root" in opts) entry = await this.boot.getAppEntry(opts.root);
+		else entry = opts.entry;
+		return await this.viteUtils.runAlepha({
+			entry,
+			mode: opts.mode
+		});
 	}
 	/**
 	* Generate JavaScript code for Drizzle entities export.
@@ -396,12 +2220,52 @@ ${models.map((it) => `export const ${it} = models["${it}"];`).join("\n")}
 	async exists(root, path) {
 		return this.fs.exists(this.fs.join(root, path));
 	}
-	async checkFileExists(root, name) {
-		const configPath = this.fs.join(root, name);
-		if (await this.fs.exists(configPath)) return configPath;
+	/**
+	* Check if a command is installed and available in the system PATH.
+	*/
+	isInstalledAsync(cmd) {
+		return this.shell.isInstalled(cmd);
+	}
+	/**
+	* Get the current git revision (commit SHA).
+	*
+	* @returns The short commit SHA or "unknown" if not in a git repo
+	*/
+	async getGitRevision() {
+		try {
+			return (await this.shell.run("git rev-parse --short HEAD", { capture: true })).trim();
+		} catch {
+			return "unknown";
+		}
 	}
 };
 
+//#endregion
+//#region ../../package.json
+var devDependencies = {
+	"@biomejs/biome": "^2.3.13",
+	"@electric-sql/pglite": "^0.3.15",
+	"@faker-js/faker": "^10.2.0",
+	"@testing-library/dom": "^10.4.1",
+	"@testing-library/react": "^16.3.2",
+	"@types/node": "^25.1.0",
+	"@types/nodemailer": "^7.0.9",
+	"@types/react": "^19.2.10",
+	"@types/react-dom": "^19.2.3",
+	"@types/ws": "^8.18.1",
+	"@vitejs/plugin-react": "^5.1.2",
+	"cron-schedule": "^6.0.0",
+	"jose": "^6.1.3",
+	"jsdom": "^27.4.0",
+	"openid-client": "^6.8.1",
+	"prom-client": "^15.1.3",
+	"react": "^19.2.4",
+	"react-dom": "^19.2.4",
+	"swagger-ui-dist": "^5.31.0",
+	"tsdown": "^0.20.1",
+	"vitest": "^4.0.18"
+};
+
 //#endregion
 //#region ../../src/cli/version.ts
 const packageJson = JSON.parse(readFileSync(new URL("../../package.json", import.meta.url), "utf-8"));
@@ -425,11 +2289,8 @@ var PackageManagerUtils = class {
 	/**
 	* Detect the package manager used in the project.
 	*/
-	async getPackageManager(root, flags) {
-		if (flags?.yarn) return "yarn";
-		if (flags?.pnpm) return "pnpm";
-		if (flags?.npm) return "npm";
-		if (flags?.bun) return "bun";
+	async getPackageManager(root, pm) {
+		if (pm) return pm;
 		if (this.alepha.isBun()) return "bun";
 		if (await this.fs.exists(this.fs.join(root, "bun.lock"))) return "bun";
 		if (await this.fs.exists(this.fs.join(root, "yarn.lock"))) return "yarn";
@@ -437,6 +2298,46 @@ var PackageManagerUtils = class {
 		return "npm";
 	}
 	/**
+	* Detect workspace context when inside a monorepo package.
+	*
+	* Checks if we're inside a workspace package (e.g., packages/my-pkg or apps/my-app)
+	* by looking 2 levels up for workspace indicators like lockfiles and config files.
+	*
+	* @param root - The current package directory
+	* @returns Workspace context with root path, PM, and config presence
+	*/
+	async getWorkspaceContext(root) {
+		const workspaceRoot = this.fs.join(root, "..", "..");
+		const [hasYarnLock, hasPnpmLock, hasNpmLock, hasBunLock] = await Promise.all([
+			this.fs.exists(this.fs.join(workspaceRoot, "yarn.lock")),
+			this.fs.exists(this.fs.join(workspaceRoot, "pnpm-lock.yaml")),
+			this.fs.exists(this.fs.join(workspaceRoot, "package-lock.json")),
+			this.fs.exists(this.fs.join(workspaceRoot, "bun.lock"))
+		]);
+		const [hasBiome, hasEditorConfig, hasTsConfig, hasWorkspacePackageJson] = await Promise.all([
+			this.fs.exists(this.fs.join(workspaceRoot, "biome.json")),
+			this.fs.exists(this.fs.join(workspaceRoot, ".editorconfig")),
+			this.fs.exists(this.fs.join(workspaceRoot, "tsconfig.json")),
+			this.fs.exists(this.fs.join(workspaceRoot, "package.json"))
+		]);
+		const isPackage = (hasYarnLock || hasPnpmLock || hasNpmLock || hasBunLock) && hasWorkspacePackageJson;
+		let packageManager = null;
+		if (hasYarnLock) packageManager = "yarn";
+		else if (hasPnpmLock) packageManager = "pnpm";
+		else if (hasBunLock) packageManager = "bun";
+		else if (hasNpmLock) packageManager = "npm";
+		return {
+			isPackage,
+			workspaceRoot: isPackage ? workspaceRoot : null,
+			packageManager,
+			config: {
+				biomeJson: hasBiome,
+				editorconfig: hasEditorConfig,
+				tsconfigJson: hasTsConfig
+			}
+		};
+	}
+	/**
 	* Get the install command for a package.
 	*/
 	async getInstallCommand(root, packageName, dev = true) {
@@ -481,13 +2382,23 @@ var PackageManagerUtils = class {
 	}
 	/**
 	* Install a dependency if it's missing from the project.
+	* Optionally checks workspace root for the dependency in monorepo setups.
 	*/
 	async ensureDependency(root, packageName, options = {}) {
-		const { dev = true } = options;
+		const { dev = true, checkWorkspace = false } = options;
 		if (await this.hasDependency(root, packageName)) {
 			this.log.debug(`Dependency '${packageName}' is already installed`);
 			return;
 		}
+		if (checkWorkspace) {
+			const workspace = await this.getWorkspaceContext(root);
+			if (workspace.workspaceRoot) {
+				if (await this.hasDependency(workspace.workspaceRoot, packageName)) {
+					this.log.debug(`Dependency '${packageName}' is already installed in workspace root`);
+					return;
+				}
+			}
+		}
 		const cmd = await this.getInstallCommand(root, packageName, dev);
 		if (options.run) await options.run(cmd, {
 			alias: `add ${packageName}`,
@@ -578,122 +2489,61 @@ var PackageManagerUtils = class {
 		return packageJson;
 	}
 	generatePackageJsonContent(modes) {
+		const alephaDeps = devDependencies;
 		const dependencies = { alepha: `^${version}` };
-		const devDependencies = {};
+		const devDependencies$1 = {};
+		if (!modes.isPackage) {
+			devDependencies$1["@biomejs/biome"] = alephaDeps["@biomejs/biome"];
+			if (modes.test) devDependencies$1.vitest = alephaDeps.vitest;
+		}
 		const scripts = {
 			dev: "alepha dev",
 			build: "alepha build",
-			lint: "alepha lint",
-			typecheck: "alepha typecheck",
-			verify: "alepha verify"
-		};
-		if (modes.ui) {
-			dependencies["@alepha/ui"] = `^${version}`;
-			modes.react = true;
-		}
-		if (modes.react) {
-			dependencies["@alepha/react"] = `^${version}`;
-			dependencies.react = "^19.2.0";
-			dependencies["react-dom"] = "^19.2.0";
-			devDependencies["@types/react"] = "^19.2.0";
-		}
-		return {
-			type: "module",
-			dependencies,
-			devDependencies,
-			scripts
-		};
-	}
-	async removeFiles(root, files) {
-		await Promise.all(files.map((file) => this.fs.rm(this.fs.join(root, file), {
-			force: true,
-			recursive: true
-		})));
-	}
-};
-
-//#endregion
-//#region ../../src/cli/assets/apiHelloControllerTs.ts
-const apiHelloControllerTs = () => `
-import { t } from "alepha";
-import { $action } from "alepha/server";
-
-export class HelloController {
-  hello = $action({
-    path: "/hello",
-    schema: {
-      response: t.object({
-        message: t.string(),
-      }),
-    },
-    handler: () => ({
-      message: "Hello, Alepha!",
-    }),
-  });
-}
-`.trim();
-
-//#endregion
-//#region ../../src/cli/assets/apiIndexTs.ts
-const apiIndexTs = (options = {}) => {
-	const { appName = "app" } = options;
-	return `
-import { $module } from "alepha";
-import { HelloController } from "./controllers/HelloController.ts";
-
-export const ApiModule = $module({
-  name: "${appName}.api",
-  services: [HelloController],
-});
-`.trim();
+			lint: "alepha lint",
+			typecheck: "alepha typecheck",
+			verify: "alepha verify"
+		};
+		if (modes.test) scripts.test = "vitest run";
+		if (modes.ui) {
+			dependencies["@alepha/ui"] = `^${version}`;
+			modes.react = true;
+		}
+		if (modes.react) {
+			dependencies.react = alephaDeps.react;
+			dependencies["react-dom"] = alephaDeps["react-dom"];
+			devDependencies$1["@vitejs/plugin-react"] = alephaDeps["@vitejs/plugin-react"];
+			devDependencies$1["@types/react"] = alephaDeps["@types/react"];
+		}
+		return {
+			type: "module",
+			dependencies,
+			devDependencies: devDependencies$1,
+			scripts
+		};
+	}
+	async removeFiles(root, files) {
+		await Promise.all(files.map((file) => this.fs.rm(this.fs.join(root, file), {
+			force: true,
+			recursive: true
+		})));
+	}
 };
 
 //#endregion
-//#region ../../src/cli/assets/biomeJson.ts
-const biomeJson = () => `
-{
-  "$schema": "https://biomejs.dev/schemas/latest/schema.json",
-  "vcs": {
-    "enabled": true,
-    "clientKind": "git"
-  },
-  "files": {
-    "ignoreUnknown": true,
-    "includes": ["**", "!node_modules", "!dist"]
-  },
-  "formatter": {
-    "enabled": true,
-    "useEditorconfig": true
-  },
-  "linter": {
-    "enabled": true,
-    "rules": {
-      "recommended": true
-    },
-    "domains": {
-      "react": "recommended"
-    }
-  },
-  "assist": {
-    "actions": {
-      "source": {
-        "organizeImports": "on"
-      }
-    }
-  }
-}
-`.trim();
-
-//#endregion
-//#region ../../src/cli/assets/claudeMd.ts
-const claudeMd = (options = {}) => {
+//#region ../../src/cli/templates/agentMd.ts
+const agentMd = (type, options = {}) => {
 	const { react = false, projectName = "my-app" } = options;
+	const header = type === "claude" ? `# CLAUDE.md
+
+This file provides guidance to Claude Code when working with this Alepha project.` : `# AGENTS.md
+
+This file provides guidance to AI coding assistants when working with this Alepha project.`;
 	const reactSection = react ? `
 ## React & Frontend
 
 ### Pages with \`$page\`
 \`\`\`tsx
-import { $page } from "@alepha/react/router";
+import { $page } from "alepha/react/router";
 import { $client } from "alepha/server/links";
 import type { UserController } from "./UserController.ts";
 
@@ -719,9 +2569,9 @@ class AppRouter {
 
 ### React Hooks
 \`\`\`typescript
-import { useAlepha, useClient, useStore, useAction, useInject } from "@alepha/react";
-import { useRouter, useActive } from "@alepha/react/router";
-import { useForm } from "@alepha/react/form";
+import { useAlepha, useClient, useStore, useAction, useInject } from "alepha/react";
+import { useRouter, useActive } from "alepha/react/router";
+import { useForm } from "alepha/react/form";
 \`\`\`
 
 - \`useClient<Controller>()\` - Type-safe API calls
@@ -766,9 +2616,7 @@ ${projectName}/
 └── tsconfig.json
 \`\`\`
 `;
-	return `# CLAUDE.md
-
-This file provides guidance to Claude Code when working with this Alepha project.
+	return `${header}
 
 ## Overview
 
@@ -782,10 +2630,10 @@ This is an **Alepha** project - a convention-driven TypeScript framework for typ
 
 ## Rules
 
-- Use TypeScript strict mode
+- Use TypeScript strict mode, always check types (\`alepha typecheck\`)
 - Use Biome for formatting (\`alepha lint\`)
-- Use Vitest for testing
-- One file = one class
+- Use Vitest for testing (\`alepha test\`)
+- One file = one class, multiple interfaces/types allowed
 - Primitives are class properties (except \`$entity\`, \`$atom\`)
 - No decorators, no Express/Fastify patterns
 - No manual instantiation - use dependency injection
@@ -793,6 +2641,7 @@ This is an **Alepha** project - a convention-driven TypeScript framework for typ
 - Import with file extensions: \`import { User } from "./User.ts"\`
 - Use \`t\` from Alepha for schemas (not Zod)
 - Prefer \`t.text()\` over \`t.string()\` for user input (has default max length, auto-trim, supports lowercase option)
+- One file = one schema (schemas/createUserSchema.ts)
 
 ## Project Structure
 ${projectStructure}
@@ -835,17 +2684,12 @@ export const userEntity = $entity({
     id: db.primaryKey(),
     email: t.email(),
     createdAt: db.createdAt(),
-    updatedAt: db.updatedAt(),
   }),
   indexes: [{ column: "email", unique: true }],
 });
 
 class UserService {
-  repo = $repository(userEntity);
-
-  async findById(id: string) {
-    return this.repo.findById(id);
-  }
+  userRepository = $repository(userEntity);
 }
 \`\`\`
 
@@ -855,11 +2699,6 @@ import { $inject } from "alepha";
 
 class OrderService {
   userService = $inject(UserService);  // Within same module
-
-  async createOrder(userId: string) {
-    const user = await this.userService.findById(userId);
-    // ...
-  }
 }
 
 // Cross-module: use $client instead of $inject
@@ -923,7 +2762,7 @@ ${reactSection}
 | \`$bucket\` | \`alepha/bucket\` | File storage |
 | \`$issuer\` | \`alepha/security\` | JWT tokens |
 | \`$command\` | \`alepha/command\` | CLI commands |${react ? `
-| \`$page\` | \`@alepha/react/router\` | React pages with SSR |
+| \`$page\` | \`alepha/react/router\` | React pages with SSR |
 | \`$atom\` | \`alepha\` | Global state |` : ""}
 
 ## Testing
@@ -975,11 +2814,114 @@ alepha build     # Build the project
 
 - Full docs: https://alepha.dev/llms.txt
 - Detailed docs: https://alepha.dev/llms-full.txt
+
+## Source Code Access
+
+Full framework source available at \`node_modules/alepha/src/\`.
+
+**IMPORTANT:** When answering questions about Alepha primitives, APIs, or internals:
+1. ALWAYS read the local source code first at \`node_modules/alepha/src/\` or \`node_modules/@alepha/ui/src/\` for UI-related questions
+2. Use \`Glob\` to find relevant files: \`node_modules/alepha/src/**/primitives/$<name>.ts\`
+3. Read the implementation AND the \`.spec.ts\` test files for usage examples
+4. Use external documentation as a fallback if source code is insufficient
+`.trim();
+};
+
+//#endregion
+//#region ../../src/cli/templates/apiAppSecurityTs.ts
+const apiAppSecurityTs = () => {
+	return `
+import { $realm } from "alepha/api/users";
+
+export class AppSecurity {
+  users = $realm({
+    // configure your realm here
+  });
+}
+`.trim();
+};
+
+//#endregion
+//#region ../../src/cli/templates/apiHelloControllerTs.ts
+const apiHelloControllerTs = () => `
+import { t } from "alepha";
+import { $action } from "alepha/server";
+
+export class HelloController {
+  hello = $action({
+    path: "/hello",
+    schema: {
+      response: t.object({
+        message: t.string(),
+      }),
+    },
+    handler: () => ({
+      message: "Hello, Alepha!",
+    }),
+  });
+}
+`.trim();
+
+//#endregion
+//#region ../../src/cli/templates/apiIndexTs.ts
+const apiIndexTs = (options = {}) => {
+	const { appName = "app", auth = false } = options;
+	const imports = ["import { $module } from \"alepha\";"];
+	const services = [];
+	if (auth) {
+		imports.push("import { AppSecurity } from \"./AppSecurity.ts\";");
+		services.push("AppSecurity");
+	}
+	imports.push("import { HelloController } from \"./controllers/HelloController.ts\";");
+	services.push("HelloController");
+	return `
+${imports.join("\n")}
+
+export const ApiModule = $module({
+  name: "${appName}.api",
+  services: [${services.join(", ")}],
+});
 `.trim();
 };
 
 //#endregion
-//#region ../../src/cli/assets/dummySpecTs.ts
+//#region ../../src/cli/templates/biomeJson.ts
+const biomeJson = () => `
+{
+  "$schema": "https://biomejs.dev/schemas/latest/schema.json",
+  "vcs": {
+    "enabled": true,
+    "clientKind": "git"
+  },
+  "files": {
+    "ignoreUnknown": true,
+    "includes": ["**", "!node_modules", "!dist"]
+  },
+  "formatter": {
+    "enabled": true,
+    "useEditorconfig": true
+  },
+  "linter": {
+    "enabled": true,
+    "rules": {
+      "recommended": true
+    },
+    "domains": {
+      "react": "recommended"
+    }
+  },
+  "assist": {
+    "actions": {
+      "source": {
+        "organizeImports": "on"
+      }
+    }
+  }
+}
+`.trim();
+
+//#endregion
+//#region ../../src/cli/templates/dummySpecTs.ts
 const dummySpecTs = () => `
 import { test, expect } from "vitest";
 
@@ -989,7 +2931,7 @@ test("dummy test", () => {
 `.trim();
 
 //#endregion
-//#region ../../src/cli/assets/editorconfig.ts
+//#region ../../src/cli/templates/editorconfig.ts
 const editorconfig = () => `
 # https://editorconfig.org
 
@@ -1005,7 +2947,48 @@ indent_size = 2
 `.trim();
 
 //#endregion
-//#region ../../src/cli/assets/mainBrowserTs.ts
+//#region ../../src/cli/templates/gitignore.ts
+const gitignore = () => `
+# Dependencies
+node_modules/
+
+# Build outputs
+dist/
+.vite/
+
+# Environment files
+.env
+.env.*
+!.env.example
+
+# IDE
+.idea/
+*.swp
+*.swo
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Logs
+*.log
+logs/
+
+# Test coverage
+coverage/
+
+# Yarn
+.yarn/*
+!.yarn/patches
+!.yarn/plugins
+!.yarn/releases
+!.yarn/sdks
+!.yarn/versions
+.pnp.*
+`.trim();
+
+//#endregion
+//#region ../../src/cli/templates/mainBrowserTs.ts
 const mainBrowserTs = () => `
 import { Alepha, run } from "alepha";
 import { WebModule } from "./web/index.ts";
@@ -1018,8 +3001,10 @@ run(alepha);
 `.trim();
 
 //#endregion
-//#region ../../src/cli/assets/mainCss.ts
-const mainCss = () => `
+//#region ../../src/cli/templates/mainCss.ts
+const mainCss = (options = {}) => {
+	if (options.ui) return `@import "@alepha/ui/styles";`;
+	return `
 * {
   box-sizing: border-box;
   margin: 0;
@@ -1042,25 +3027,34 @@ body {
   height: 100%;
 }
 `.trim();
+};
 
 //#endregion
-//#region ../../src/cli/assets/mainServerTs.ts
+//#region ../../src/cli/templates/mainServerTs.ts
 const mainServerTs = (options = {}) => {
-	const { react = false } = options;
+	const { api = false, react = false } = options;
+	const imports = [];
+	const withs = [];
+	if (api) {
+		imports.push(`import { ApiModule } from "./api/index.ts";`);
+		withs.push(`alepha.with(ApiModule);`);
+	}
+	if (react) {
+		imports.push(`import { WebModule } from "./web/index.ts";`);
+		withs.push(`alepha.with(WebModule);`);
+	}
 	return `
 import { Alepha, run } from "alepha";
-import { ApiModule } from "./api/index.ts";
-${react ? `import { WebModule } from "./web/index.ts";\n` : ""}
+${imports.length > 0 ? `${imports.join("\n")}\n` : ""}
 const alepha = Alepha.create();
+${withs.length > 0 ? `\n${withs.join("\n")}` : ""}
 
-alepha.with(ApiModule);
-${react ? `alepha.with(WebModule);\n` : ""}
 run(alepha);
 `.trim();
 };
 
 //#endregion
-//#region ../../src/cli/assets/tsconfigJson.ts
+//#region ../../src/cli/templates/tsconfigJson.ts
 const tsconfigJson = () => `
 {
   "extends": "alepha/tsconfig.base"
@@ -1068,47 +3062,74 @@ const tsconfigJson = () => `
 `.trim();
 
 //#endregion
-//#region ../../src/cli/assets/webAppRouterTs.ts
-const webAppRouterTs = () => `
-import { $page } from "@alepha/react/router";
-import { $client } from "alepha/server/links";
-import type { HelloController } from "../api/controllers/HelloController.ts";
-
-export class AppRouter {
-  api = $client<HelloController>();
-
-  home = $page({
+//#region ../../src/cli/templates/webAppRouterTs.ts
+const webAppRouterTs = (options) => {
+	const imports = [];
+	const classMembers = [];
+	if (options.ui) imports.push("import { $ui } from \"@alepha/ui\";");
+	if (options.auth) imports.push("import { $uiAuth } from \"@alepha/ui/auth\";");
+	if (options.admin) imports.push("import { $uiAdmin } from \"@alepha/ui/admin\";");
+	imports.push("import { $page } from \"alepha/react/router\";");
+	if (options.api) {
+		imports.push("import { $client } from \"alepha/server/links\";");
+		imports.push("import type { HelloController } from \"../api/controllers/HelloController.ts\";");
+		classMembers.push("  api = $client<HelloController>();");
+	}
+	if (options.ui) {
+		classMembers.push("  ui = $ui();");
+		if (options.auth) classMembers.push("  uiAuth = $uiAuth();");
+		if (options.admin) classMembers.push("  uiAdmin = $uiAdmin();");
+		classMembers.push(`  layout = $page({
+    parent: this.ui.root,
+    children: () => [this.home],
+  });`);
+	}
+	if (options.api) classMembers.push(`  home = $page({
     path: "/",
     lazy: () => import("./components/Hello.tsx"),
     loader: () => this.api.hello(),
-  });
-}
-`.trim();
+  });`);
+	else classMembers.push(`  home = $page({
+    path: "/",
+    lazy: () => import("./components/Hello.tsx"),
+  });`);
+	return `${imports.join("\n")}
+
+export class AppRouter {
+${classMembers.join("\n\n")}
+}`;
+};
 
 //#endregion
-//#region ../../src/cli/assets/webHelloComponentTsx.ts
-const webHelloComponentTsx = () => `import { useState } from "react";
+//#region ../../src/cli/templates/webHelloComponentTsx.ts
+const webHelloComponentTsx = (options = {}) => {
+	const imports = [];
+	if (options.auth) imports.push("import { UserButton } from \"@alepha/ui/auth\";");
+	imports.push("import { useState } from \"react\";");
+	const userButton = options.auth ? "\n      <UserButton />" : "";
+	return `${imports.join("\n")}
 
 interface Props {
-  message: string;
+  message?: string;
 }
 
 const Hello = (props: Props) => {
-  const [message, setMessage] = useState(props.message);
+  const [message, setMessage] = useState(props.message ?? "");
   return (
     <div>
       <h1>{message}</h1>
-      <input value={message} onChange={e => setMessage(e.target.value)} />
-      <p>Edit this component in src/web/components/Hello.tsx</p>
+      <input value={message} onChange={(e) => setMessage(e.target.value)} />
+      <p>Edit this component in src/web/components/Hello.tsx</p>${userButton}
     </div>
   );
 };
 
 export default Hello;
-`.trim();
+`;
+};
 
 //#endregion
-//#region ../../src/cli/assets/webIndexTs.ts
+//#region ../../src/cli/templates/webIndexTs.ts
 const webIndexTs = (options = {}) => {
 	const { appName = "app" } = options;
 	return `
@@ -1137,6 +3158,7 @@ var ProjectScaffolder = class {
 	log = $logger();
 	fs = $inject(FileSystemProvider);
 	pm = $inject(PackageManagerUtils);
+	utils = $inject(AlephaCliUtils);
 	/**
 	* Get the app name from the directory name.
 	*
@@ -1146,7 +3168,7 @@ var ProjectScaffolder = class {
 	* - Falls back to "app" if empty
 	*/
 	getAppName(root) {
-		return basename(root).toLowerCase().replace(/[\s\-_]/g, "") || "app";
+		return basename(root).toLowerCase().replace(/[\s\-_.\d]/g, "") || "app";
 	}
 	/**
 	* Ensure all configuration files exist.
@@ -1154,13 +3176,19 @@ var ProjectScaffolder = class {
 	async ensureConfig(root, opts) {
 		const tasks = [];
 		const force = opts.force ?? false;
+		const checkWorkspace = opts.checkWorkspace ?? false;
 		if (opts.packageJson) tasks.push(this.pm.ensurePackageJson(root, typeof opts.packageJson === "boolean" ? {} : opts.packageJson).then(() => {}));
 		if (opts.tsconfigJson) tasks.push(this.ensureTsConfig(root, { force }));
-		if (opts.indexHtml) tasks.push(this.ensureReactProject(root, { force }));
-		if (opts.biomeJson) tasks.push(this.ensureBiomeConfig(root, { force }));
-		if (opts.editorconfig) tasks.push(this.ensureEditorConfig(root, { force }));
-		if (opts.claudeMd) tasks.push(this.ensureClaudeMd(root, typeof opts.claudeMd === "boolean" ? { force } : {
-			...opts.claudeMd,
+		if (opts.biomeJson) tasks.push(this.ensureBiomeConfig(root, {
+			force,
+			checkWorkspace
+		}));
+		if (opts.editorconfig) tasks.push(this.ensureEditorConfig(root, {
+			force,
+			checkWorkspace
+		}));
+		if (opts.agentMd) tasks.push(this.ensureAgentMd(root, {
+			...opts.agentMd,
 			force
 		}));
 		await Promise.all(tasks);
@@ -1170,52 +3198,81 @@ var ProjectScaffolder = class {
 		await this.fs.writeFile(this.fs.join(root, "tsconfig.json"), tsconfigJson());
 	}
 	async ensureBiomeConfig(root, opts = {}) {
+		if (!opts.force && opts.checkWorkspace && await this.existsInParents(root, "biome.json")) return;
 		await this.ensureFile(root, "biome.json", biomeJson(), opts.force);
 	}
 	async ensureEditorConfig(root, opts = {}) {
+		if (!opts.force && opts.checkWorkspace && await this.existsInParents(root, ".editorconfig")) return;
 		await this.ensureFile(root, ".editorconfig", editorconfig(), opts.force);
 	}
-	async ensureClaudeMd(root, options = {}) {
-		await this.ensureFile(root, "CLAUDE.md", claudeMd(options), options.force);
+	/**
+	* Ensure git repository is initialized with .gitignore.
+	*
+	* @returns true if git was initialized, false if already exists or git unavailable
+	*/
+	async ensureGitRepo(root, opts = {}) {
+		const gitDir = this.fs.join(root, ".git");
+		if (!opts.force && await this.fs.exists(gitDir)) return false;
+		if (!await this.utils.isInstalledAsync("git")) return false;
+		await this.utils.exec("git init", {
+			root,
+			global: true
+		});
+		await this.ensureFile(root, ".gitignore", gitignore(), opts.force);
+		return true;
+	}
+	async ensureAgentMd(root, options) {
+		const filename = options.type === "claude" ? "CLAUDE.md" : "AGENTS.md";
+		await this.ensureFile(root, filename, agentMd(options.type, options), options.force);
+	}
+	/**
+	* Ensure src/main.server.ts exists with correct module imports.
+	*/
+	async ensureMainServerTs(root, opts = {}) {
+		const srcDir = this.fs.join(root, "src");
+		await this.fs.mkdir(srcDir, { recursive: true });
+		await this.ensureFile(srcDir, "main.server.ts", mainServerTs({
+			api: opts.api,
+			react: opts.react
+		}), opts.force);
 	}
 	/**
-	* Ensure src/main.server.ts exists with full API structure.
+	* Ensure API module structure exists.
 	*
 	* Creates:
-	* - src/main.server.ts (entry point)
 	* - src/api/index.ts (API module)
 	* - src/api/controllers/HelloController.ts (example controller)
 	*/
 	async ensureApiProject(root, opts = {}) {
-		const srcDir = this.fs.join(root, "src");
-		if (!opts.force && await this.fs.exists(srcDir)) {
-			if ((await this.fs.ls(srcDir)).length > 0) return;
-		}
 		const appName = this.getAppName(root);
 		await this.fs.mkdir(this.fs.join(root, "src/api/controllers"), { recursive: true });
-		await this.ensureFile(srcDir, "main.server.ts", mainServerTs(), opts.force);
-		await this.ensureFile(srcDir, "api/index.ts", apiIndexTs({ appName }), opts.force);
-		await this.ensureFile(srcDir, "api/controllers/HelloController.ts", apiHelloControllerTs(), opts.force);
+		await this.ensureFile(root, "src/api/index.ts", apiIndexTs({
+			appName,
+			auth: opts.auth
+		}), opts.force);
+		await this.ensureFile(root, "src/api/controllers/HelloController.ts", apiHelloControllerTs(), opts.force);
+		if (opts.auth) await this.ensureFile(root, "src/api/AppSecurity.ts", apiAppSecurityTs(), opts.force);
 	}
 	/**
-	* Ensure full React project structure exists.
+	* Ensure web/React project structure exists.
 	*
 	* Creates:
-	* - src/main.server.ts, src/main.browser.ts
-	* - src/api/index.ts, src/api/controllers/HelloController.ts
+	* - src/main.browser.ts
+	* - src/main.css
 	* - src/web/index.ts, src/web/AppRouter.ts, src/web/components/Hello.tsx
 	*/
-	async ensureReactProject(root, opts = {}) {
+	async ensureWebProject(root, opts = {}) {
 		const appName = this.getAppName(root);
-		await this.fs.mkdir(this.fs.join(root, "src/api/controllers"), { recursive: true });
 		await this.fs.mkdir(this.fs.join(root, "src/web/components"), { recursive: true });
-		await this.ensureFile(root, "src/main.css", mainCss(), opts.force);
-		await this.ensureFile(root, "src/api/index.ts", apiIndexTs({ appName }), opts.force);
-		await this.ensureFile(root, "src/api/controllers/HelloController.ts", apiHelloControllerTs(), opts.force);
-		await this.ensureFile(root, "src/main.server.ts", mainServerTs({ react: true }), opts.force);
+		await this.ensureFile(root, "src/main.css", mainCss({ ui: opts.ui }), opts.force);
 		await this.ensureFile(root, "src/web/index.ts", webIndexTs({ appName }), opts.force);
-		await this.ensureFile(root, "src/web/AppRouter.ts", webAppRouterTs(), opts.force);
-		await this.ensureFile(root, "src/web/components/Hello.tsx", webHelloComponentTsx(), opts.force);
+		await this.ensureFile(root, "src/web/AppRouter.ts", webAppRouterTs({
+			api: opts.api,
+			ui: opts.ui,
+			auth: opts.auth,
+			admin: opts.admin
+		}), opts.force);
+		await this.ensureFile(root, "src/web/components/Hello.tsx", webHelloComponentTsx({ auth: opts.auth }), opts.force);
 		await this.ensureFile(root, "src/main.browser.ts", mainBrowserTs(), opts.force);
 	}
 	/**
@@ -1263,17 +3320,55 @@ var BuildCommand = class {
 	boot = $inject(AppEntryProvider);
 	viteBuildProvider = $inject(ViteBuildProvider);
 	options = $use(buildOptions);
+	/**
+	* Resolve the effective runtime based on target and explicit runtime flag.
+	*
+	* Some targets force a specific runtime:
+	* - `cloudflare` always uses `workerd`
+	* - `vercel` always uses `node`
+	* - `docker` and bare deployments respect the runtime flag
+	*
+	* @throws {AlephaError} If an incompatible runtime is specified for a target
+	*/
+	resolveRuntime(target, runtime) {
+		if (target === "cloudflare") {
+			if (runtime && runtime !== "workerd") throw new AlephaError(`Target 'cloudflare' requires 'workerd' runtime, got '${runtime}'`);
+			return "workerd";
+		}
+		if (target === "vercel") {
+			if (runtime && runtime !== "node") throw new AlephaError(`Target 'vercel' requires 'node' runtime, got '${runtime}'`);
+			return "node";
+		}
+		return runtime ?? "node";
+	}
 	build = $command({
 		name: "build",
 		mode: "production",
 		description: "Build the project for production",
 		flags: t.object({
 			stats: t.optional(t.boolean({ description: "Generate build stats report" })),
-			vercel: t.optional(t.boolean({ description: "Generate Vercel deployment configuration" })),
-			cloudflare: t.optional(t.boolean({ description: "Generate Cloudflare Workers configuration" })),
-			docker: t.optional(t.boolean({ description: "Generate Docker configuration" })),
-			sitemap: t.optional(t.text({ description: "Generate sitemap.xml with base URL" })),
-			bun: t.optional(t.boolean({ description: "Prioritize .bun.ts entry files for Bun runtime" }))
+			target: t.optional(t.enum([
+				"bare",
+				"docker",
+				"vercel",
+				"cloudflare"
+			], {
+				aliases: ["t"],
+				description: "Deployment target"
+			})),
+			runtime: t.optional(t.enum([
+				"node",
+				"bun",
+				"workerd"
+			], {
+				aliases: ["r"],
+				description: "JavaScript runtime"
+			})),
+			image: t.optional(t.union([t.boolean(), t.text()], {
+				aliases: ["i"],
+				description: "Build Docker image. Use -i for latest, -i=<version> for specific version"
+			})),
+			sitemap: t.optional(t.text({ description: "Generate sitemap.xml with base URL" }))
 		}),
 		handler: async ({ flags, run, root }) => {
 			process.env.NODE_ENV = "production";
@@ -1283,13 +3378,16 @@ var BuildCommand = class {
 			this.log.trace("Entry file found", { entry });
 			const distDir = "dist";
 			const publicDir = "public";
-			await this.pm.ensureDependency(root, "vite", {
-				run,
-				exec: (cmd, opts) => this.utils.exec(cmd, opts)
-			});
 			await run.rm("dist", { alias: "clean dist" });
 			const options = this.options;
 			await this.utils.loadEnv(root, [".env", ".env.production"]);
+			const target = flags.target ?? options.target;
+			const runtime = this.resolveRuntime(target, flags.runtime ?? options.runtime);
+			if (flags.image && target !== "docker") throw new AlephaError(`Flag '--image' requires '--target=docker', got '${target ?? "bare"}'`);
+			this.log.trace("Build configuration", {
+				target,
+				runtime
+			});
 			const stats = flags.stats ?? options.stats ?? false;
 			let template = "";
 			let hasClient = false;
@@ -1327,8 +3425,8 @@ var BuildCommand = class {
 					const clientIndexPath = `${distDir}/${publicDir}/index.html`;
 					const clientBuilt = await this.fs.exists(clientIndexPath);
 					const conditions = [];
-					if (flags.bun) conditions.push("bun");
-					if (options.cloudflare) conditions.push("workerd");
+					if (runtime === "bun") conditions.push("bun");
+					else if (runtime === "workerd") conditions.push("workerd");
 					await buildServer({
 						silent: true,
 						entry: entry.server,
@@ -1363,7 +3461,7 @@ var BuildCommand = class {
 					run
 				});
 			}
-			if (flags.vercel || options.vercel) await run({
+			if (target === "vercel") await run({
 				name: "add Vercel config",
 				handler: () => generateVercel({
 					distDir,
@@ -1371,20 +3469,56 @@ var BuildCommand = class {
 					config: options.vercel
 				})
 			});
-			if (flags.cloudflare || options.cloudflare) await run({
+			if (target === "cloudflare") await run({
 				name: "add Cloudflare config",
 				handler: () => generateCloudflare({
 					distDir,
 					config: options.cloudflare?.config
 				})
 			});
-			if (flags.docker || options.docker) await run({
-				name: "add Docker config",
-				handler: () => generateDocker({
-					distDir,
-					...options.docker
-				})
-			});
+			if (target === "docker") {
+				const dockerFrom = options.docker?.from ?? (runtime === "bun" ? "oven/bun:alpine" : "node:24-alpine");
+				const dockerCommand = options.docker?.command ?? (runtime === "bun" ? "bun" : "node");
+				await run({
+					name: "add Docker config",
+					handler: () => generateDocker({
+						distDir,
+						image: dockerFrom,
+						command: dockerCommand
+					})
+				});
+				if (flags.image) {
+					const imageConfig = options.docker?.image;
+					const flagValue = typeof flags.image === "string" ? flags.image : null;
+					let imageTag;
+					let version;
+					if (!flagValue) {
+						if (!imageConfig?.tag) throw new AlephaError("Flag '--image' requires 'build.docker.image.tag' in config");
+						version = "latest";
+						imageTag = `${imageConfig.tag}:${version}`;
+					} else if (flagValue.startsWith(":")) {
+						if (!imageConfig?.tag) throw new AlephaError("Flag '--image=:version' requires 'build.docker.image.tag' in config");
+						version = flagValue.slice(1);
+						imageTag = `${imageConfig.tag}:${version}`;
+					} else if (flagValue.includes(":")) {
+						imageTag = flagValue;
+						version = flagValue.split(":")[1];
+					} else {
+						imageTag = `${flagValue}:latest`;
+						version = "latest";
+					}
+					const args = [];
+					if (imageConfig?.args) args.push(imageConfig.args);
+					if (imageConfig?.oci) {
+						const revision = await this.utils.getGitRevision();
+						const created = (/* @__PURE__ */ new Date()).toISOString();
+						args.push(`--label "org.opencontainers.image.revision=${revision}"`);
+						args.push(`--label "org.opencontainers.image.created=${created}"`);
+						args.push(`--label "org.opencontainers.image.version=${version}"`);
+					}
+					await run(`docker build ${args.length > 0 ? `${args.join(" ")} ` : ""}-t ${imageTag} ${distDir}`, { alias: `docker build ${imageTag}` });
+				}
+			}
 		}
 	});
 };
@@ -1414,6 +3548,7 @@ var DbCommand = class {
 	log = $logger();
 	fs = $inject(FileSystemProvider);
 	utils = $inject(AlephaCliUtils);
+	entryProvider = $inject(AppEntryProvider);
 	/**
 	* Check if database migrations are up to date.
 	*/
@@ -1428,7 +3563,11 @@ var DbCommand = class {
 		handler: async ({ args, root }) => {
 			const rootDir = root;
 			this.log.debug(`Using project root: ${rootDir}`);
-			const { alepha } = await this.utils.loadAlephaFromServerEntryFile(rootDir, args);
+			const entry = await this.entryProvider.getAppEntry(root);
+			const alepha = await this.utils.loadAlephaFromServerEntryFile({
+				mode: "development",
+				entry
+			});
 			const repositoryProvider = alepha.inject("RepositoryProvider");
 			const drizzleKitProvider = alepha.inject("DrizzleKitProvider");
 			const accepted = /* @__PURE__ */ new Set([]);
@@ -1592,7 +3731,11 @@ var DbCommand = class {
 		if (options.env) envFiles.push(`.env.${options.env}`);
 		await this.utils.loadEnv(rootDir, envFiles);
 		this.log.debug(`Using project root: ${rootDir}`);
-		const { alepha, entry } = await this.utils.loadAlephaFromServerEntryFile(rootDir, options.args);
+		const entry = await this.entryProvider.getAppEntry(rootDir);
+		const alepha = await this.utils.loadAlephaFromServerEntryFile({
+			mode: "development",
+			entry
+		});
 		const drizzleKitProvider = alepha.inject("DrizzleKitProvider");
 		const repositoryProvider = alepha.inject("RepositoryProvider");
 		const accepted = /* @__PURE__ */ new Set([]);
@@ -1616,11 +3759,11 @@ var DbCommand = class {
 				providerUrl: provider.url,
 				providerDriver: provider.driver,
 				dialect,
-				entry,
+				entry: this.fs.join(rootDir, entry.server),
 				rootDir
 			});
 			const flags = options.commandFlags ? ` ${options.commandFlags}` : "";
-			await this.utils.exec(`drizzle-kit ${options.command} --config=${drizzleConfigJsPath}${flags}`, { env: { NODE_OPTIONS: "--import tsx" } });
+			await this.utils.exec(`drizzle-kit ${options.command} --config=${drizzleConfigJsPath}${flags}`, { env: { NODE_OPTIONS: [process.env.NODE_OPTIONS, "--import tsx"].filter(Boolean).join(" ") } });
 		}
 	}
 	/**
@@ -1644,9 +3787,9 @@ var DbCommand = class {
 			const accountId = process.env.CLOUDFLARE_ACCOUNT_ID;
 			if (!accountId) throw new AlephaError("CLOUDFLARE_ACCOUNT_ID environment variable is not set. https://orm.drizzle.team/docs/guides/d1-http-with-drizzle-kit");
 			const url = options.providerUrl;
-			if (!url.startsWith("cloudflare-d1://")) throw new AlephaError("D1 provider URL must start with 'cloudflare-d1://'.");
-			const [, databaseId] = url.replace("cloudflare-d1://", "").replace("cloudflare-d1:", "").split(":");
-			if (!databaseId) throw new AlephaError("Database ID is missing in the D1 provider URL. Cloudflare D1 URL format: cloudflare-d1://<database_name>:<database_id>");
+			if (!url.startsWith("d1://")) throw new AlephaError("D1 provider URL must start with 'd1://'.");
+			const [, databaseId] = url.replace("d1://", "").replace("d1:", "").split(":");
+			if (!databaseId) throw new AlephaError("Database ID is missing in the D1 provider URL. Cloudflare D1 URL format: d1://<database_name>:<database_id>");
 			config.dbCredentials = {
 				accountId,
 				databaseId,
@@ -1778,7 +3921,6 @@ var DeployCommand = class {
 var ViteDevServerProvider = class {
 	log = $logger();
 	fs = $inject(FileSystemProvider);
-	templateProvider = $inject(ViteTemplateProvider);
 	server;
 	options;
 	alepha = null;
@@ -1883,11 +4025,11 @@ var ViteDevServerProvider = class {
 	async setupEnvironment() {
 		const { loadEnv } = await importVite();
 		const env = loadEnv(process.env.NODE_ENV || "development", this.options.root, "");
+		for (const [key, value] of Object.entries(env)) process.env[key] ??= value;
 		process.env.NODE_ENV ??= "development";
 		process.env.VITE_ALEPHA_DEV = "true";
 		process.env.SERVER_HOST ??= this.options.host?.toString() ?? "localhost";
 		process.env.SERVER_PORT ??= String(this.options.port ?? (process.env.SERVER_PORT ? Number(process.env.SERVER_PORT) : 3e3));
-		for (const [key, value] of Object.entries(env)) process.env[key] ??= value;
 	}
 	/**
 	* Load or reload the Alepha instance.
@@ -1920,12 +4062,10 @@ var ViteDevServerProvider = class {
 		}
 	}
 	/**
-	* Setup Alepha instance with Vite middleware and template.
+	* Setup Alepha instance with Vite middleware.
 	*/
 	async setupAlepha() {
 		if (!this.alepha || !this.hasReact()) return;
-		const template = await this.server.transformIndexHtml("/", this.templateProvider.generateIndexHtml(this.options.entry));
-		this.alepha.store.set("alepha.react.server.template", template);
 		this.alepha.events.on("server:onRequest", {
 			priority: "first",
 			callback: async ({ request }) => {
@@ -1952,6 +4092,7 @@ var ViteDevServerProvider = class {
 	* Run Vite middleware and detect if it handled the request.
 	*/
 	async runViteMiddleware(req, res, ctx) {
+		if (res.headersSent || res.writableEnded) return false;
 		return new Promise((resolve) => {
 			let resolved = false;
 			const done = (handled) => {
@@ -1960,6 +4101,18 @@ var ViteDevServerProvider = class {
 				if (handled) ctx.metadata.vite = true;
 				resolve(handled);
 			};
+			const originalSetHeader = res.setHeader.bind(res);
+			const originalWriteHead = res.writeHead?.bind(res);
+			const originalWrite = res.write.bind(res);
+			const originalEnd = res.end.bind(res);
+			const guardedCall = (fn, ...args) => {
+				if (resolved && !ctx.metadata.vite) return;
+				return fn(...args);
+			};
+			res.setHeader = (...args) => guardedCall(originalSetHeader, ...args);
+			if (originalWriteHead) res.writeHead = (...args) => guardedCall(originalWriteHead, ...args);
+			res.write = (...args) => guardedCall(originalWrite, ...args);
+			res.end = (...args) => guardedCall(originalEnd, ...args);
 			res.on("finish", () => done(true));
 			res.on("close", () => res.headersSent && done(true));
 			this.server.middlewares(req, res, () => done(false));
@@ -1999,23 +4152,14 @@ var DevCommand = class {
 	boot = $inject(AppEntryProvider);
 	/**
 	* Will run the project in watch mode.
-	*
-	* - If an index.html file is found in the project root, it will run Vite in dev mode.
-	* - Otherwise, it will look for a server entry file and run it with tsx in watch mode.
 	*/
 	dev = $command({
 		name: "dev",
 		description: "Run the project in development mode",
 		handler: async ({ root }) => {
-			const [expo, react] = await Promise.all([this.pm.hasExpo(root), this.pm.hasReact(root)]);
 			await this.scaffolder.ensureConfig(root, { tsconfigJson: true });
-			if (expo) {
-				await this.utils.exec("expo start");
-				return;
-			}
 			const entry = await this.boot.getAppEntry(root);
 			this.log.debug("Entry file found", { entry });
-			await this.pm.ensureDependency(root, "vite", { exec: (cmd, opts) => this.utils.exec(cmd, opts) });
 			await this.viteDevServer.init({
 				root,
 				entry
@@ -2255,7 +4399,10 @@ var GenEnvCommand = class {
 			description: "Output file path (e.g., .env)"
 		})) }),
 		handler: async ({ root, flags }) => {
-			const { alepha } = await this.utils.loadAlephaFromServerEntryFile(root);
+			const alepha = await this.utils.loadAlephaFromServerEntryFile({
+				root,
+				mode: "development"
+			});
 			try {
 				const { env } = alepha.dump();
 				let dotEnvFile = "";
@@ -2288,7 +4435,10 @@ var OpenApiCommand = class {
 			description: "Output file path"
 		})) }),
 		handler: async ({ root, flags }) => {
-			const { alepha } = await this.utils.loadAlephaFromServerEntryFile(root);
+			const alepha = await this.utils.loadAlephaFromServerEntryFile({
+				root,
+				mode: "development"
+			});
 			try {
 				const openapiProvider = alepha.inject(ServerSwaggerProvider);
 				await alepha.events.emit("configure", alepha);
@@ -2355,19 +4505,21 @@ var InitCommand = class {
 			lowercase: true
 		})),
 		flags: t.object({
-			agent: t.optional(t.boolean({
-				aliases: ["a"],
-				description: "Add CLAUDE.md for Claude Code AI assistant"
-			})),
-			yarn: t.optional(t.boolean({ description: "Use Yarn package manager" })),
-			pnpm: t.optional(t.boolean({ description: "Use pnpm package manager" })),
-			npm: t.optional(t.boolean({ description: "Use npm package manager" })),
-			bun: t.optional(t.boolean({ description: "Use Bun package manager" })),
+			ai: t.optional(t.boolean({ description: "Add AI agent instructions (CLAUDE.md if claude CLI installed, else AGENTS.md)" })),
+			pm: t.optional(t.enum([
+				"yarn",
+				"npm",
+				"pnpm",
+				"bun"
+			], { description: "Package manager to use" })),
+			api: t.optional(t.boolean({ description: "Include API module structure (src/api/)" })),
 			react: t.optional(t.boolean({
 				aliases: ["r"],
-				description: "Include Alepha React dependencies"
+				description: "Include React dependencies and web module (src/web/)"
 			})),
-			ui: t.optional(t.boolean({ description: "Include Alepha UI dependencies" })),
+			ui: t.optional(t.boolean({ description: "Include @alepha/ui (components, auth portal, admin portal)" })),
+			auth: t.optional(t.boolean({ description: "Include authentication (AppSecurity, $uiAuth). Implies --api --ui --react" })),
+			admin: t.optional(t.boolean({ description: "Include admin portal ($uiAdmin). Implies --auth" })),
 			test: t.optional(t.boolean({ description: "Include Vitest and create test directory" })),
 			force: t.optional(t.boolean({
 				aliases: ["f"],
@@ -2375,11 +4527,19 @@ var InitCommand = class {
 			}))
 		}),
 		handler: async ({ run, flags, root, args }) => {
-			if (flags.react) flags.ui = true;
 			if (args) {
 				root = this.fs.join(root, args);
-				await this.fs.mkdir(root);
+				await this.fs.mkdir(root, { force: true });
 			}
+			if (flags.admin) flags.auth = true;
+			if (flags.auth) {
+				flags.api = true;
+				flags.ui = true;
+			}
+			if (flags.ui) flags.react = true;
+			const workspace = await this.pm.getWorkspaceContext(root);
+			let agentType = false;
+			if (flags.ai) agentType = await this.utils.isInstalledAsync("claude") ? "claude" : "agents";
 			const isExpo = await this.pm.hasExpo(root);
 			const force = !!flags.force;
 			await run({
@@ -2387,46 +4547,60 @@ var InitCommand = class {
 				handler: async () => {
 					await this.scaffolder.ensureConfig(root, {
 						force,
-						tsconfigJson: true,
-						packageJson: flags,
-						biomeJson: true,
-						editorconfig: true,
-						indexHtml: !!flags.react && !isExpo,
-						claudeMd: flags.agent ? {
+						tsconfigJson: !workspace.config.tsconfigJson,
+						packageJson: {
+							...flags,
+							isPackage: workspace.isPackage
+						},
+						biomeJson: !workspace.config.biomeJson,
+						editorconfig: !workspace.config.editorconfig,
+						agentMd: agentType ? {
+							type: agentType,
 							react: !!flags.react,
 							ui: !!flags.ui
 						} : false
 					});
-					if (!flags.react) await this.scaffolder.ensureApiProject(root, { force });
+					await this.scaffolder.ensureMainServerTs(root, {
+						api: !!flags.api,
+						react: !!flags.react && !isExpo,
+						force
+					});
+					if (flags.api) await this.scaffolder.ensureApiProject(root, {
+						auth: !!flags.auth,
+						force
+					});
+					if (flags.react && !isExpo) await this.scaffolder.ensureWebProject(root, {
+						api: !!flags.api,
+						ui: !!flags.ui,
+						auth: !!flags.auth,
+						admin: !!flags.admin,
+						force
+					});
 				}
 			});
-			const pmName = await this.pm.getPackageManager(root, flags);
-			if (pmName === "yarn") {
+			const pmName = await this.pm.getPackageManager(workspace.workspaceRoot ?? root, flags.pm ?? workspace.packageManager ?? void 0);
+			if (!workspace.isPackage) if (pmName === "yarn") {
 				await this.pm.ensureYarn(root);
 				await run("yarn set version stable", { root });
 			} else if (pmName === "bun") await this.pm.ensureBun(root);
 			else if (pmName === "pnpm") await this.pm.ensurePnpm(root);
 			else await this.pm.ensureNpm(root);
+			const installRoot = workspace.workspaceRoot ?? root;
 			await run(`${pmName} install`, {
 				alias: `installing dependencies with ${pmName}`,
-				root
-			});
-			if (!isExpo) await this.pm.ensureDependency(root, "vite", {
-				run,
-				exec: (cmd, opts) => this.utils.exec(cmd, opts)
-			});
-			await this.pm.ensureDependency(root, "@biomejs/biome", {
-				run,
-				exec: (cmd, opts) => this.utils.exec(cmd, opts)
+				root: installRoot
 			});
-			if (flags.test) {
-				await this.scaffolder.ensureTestDir(root);
-				await run(`${pmName} ${pmName === "yarn" ? "add" : "install"} -D vitest`, { alias: "setup testing with Vitest" });
-			}
+			if (flags.test) await this.scaffolder.ensureTestDir(root);
 			await run(`${pmName} run lint`, {
 				alias: "running linter",
-				root
+				root: installRoot
 			});
+			if (!workspace.isPackage) {
+				if (await this.scaffolder.ensureGitRepo(root, { force })) await run("git add .", {
+					alias: "staging generated files",
+					root
+				});
+			}
 		}
 	});
 };
@@ -2441,8 +4615,14 @@ var LintCommand = class {
 		name: "lint",
 		description: "Run linter across the codebase using Biome",
 		handler: async ({ root }) => {
-			await this.scaffolder.ensureConfig(root, { biomeJson: true });
-			await this.pm.ensureDependency(root, "@biomejs/biome", { exec: (cmd, opts) => this.utils.exec(cmd, opts) });
+			await this.scaffolder.ensureConfig(root, {
+				biomeJson: true,
+				checkWorkspace: true
+			});
+			await this.pm.ensureDependency(root, "@biomejs/biome", {
+				checkWorkspace: true,
+				exec: (cmd, opts) => this.utils.exec(cmd, opts)
+			});
 			await this.utils.exec("biome check --fix");
 		}
 	});
@@ -2508,6 +4688,7 @@ var TypecheckCommand = class {
 	utils = $inject(AlephaCliUtils);
 	pm = $inject(PackageManagerUtils);
 	log = $logger();
+	scaffolder = $inject(ProjectScaffolder);
 	/**
 	* Run TypeScript type checking across the codebase with no emit.
 	*/
@@ -2517,7 +4698,14 @@ var TypecheckCommand = class {
 		description: "Check TypeScript types across the codebase",
 		handler: async ({ root }) => {
 			this.log.info("Starting TypeScript type checking...");
-			await this.pm.ensureDependency(root, "typescript", { exec: (cmd, opts) => this.utils.exec(cmd, opts) });
+			await this.scaffolder.ensureConfig(root, {
+				tsconfigJson: true,
+				checkWorkspace: true
+			});
+			await this.pm.ensureDependency(root, "typescript", {
+				checkWorkspace: true,
+				exec: (cmd, opts) => this.utils.exec(cmd, opts)
+			});
 			await this.utils.exec("tsc --noEmit");
 			this.log.info("TypeScript type checking completed successfully.");
 		}
@@ -2561,15 +4749,6 @@ var VerifyCommand = class {
 //#endregion
 //#region ../../src/cli/apps/AlephaCli.ts
 /**
-* Register `tsx` when running in Node.js, ignore for Bun.
-*
-* It's required to have a full TypeScript support. (mostly .tsx files)
-*/
-if (typeof Bun === "undefined") {
-	const { register } = await import("tsx/esm/api");
-	register();
-}
-/**
 * Allow to extend Alepha CLI via `alepha.config.ts` file located in the project root.
 */
 var AlephaCliExtension = class {
@@ -2633,6 +4812,7 @@ var AlephaPackageBuilderCli = class {
 				pkgData.exports[path].types = `./src/${item.name}/index.ts`;
 				if (item.native) pkgData.exports[path]["react-native"] = `./src/${item.name}/index.native.ts`;
 				else if (item.browser) pkgData.exports[path]["react-native"] = `./src/${item.name}/index.browser.ts`;
+				if (item.workerd) pkgData.exports[path].workerd = `./src/${item.name}/index.workerd.ts`;
 				if (item.browser) pkgData.exports[path].browser = `./src/${item.name}/index.browser.ts`;
 				if (item.bun) pkgData.exports[path].bun = `./src/${item.name}/index.bun.ts`;
 				pkgData.exports[path].import = `./src/${item.name}/index.ts`;
@@ -2789,6 +4969,7 @@ async function analyzeModules(srcDir, packageName) {
 				const hasNative = await fileExists(join(modulePath, "index.native.ts"));
 				const hasBun = await fileExists(join(modulePath, "index.bun.ts"));
 				const hasNode = await fileExists(join(modulePath, "index.node.ts"));
+				const hasEdge = await fileExists(join(modulePath, "index.workerd.ts"));
 				const files = await getAllFiles(modulePath);
 				for (const file of files) {
 					const deps = extractAlephaDependencies(await readFile(file, "utf-8"), packageName, moduleName);
@@ -2803,6 +4984,7 @@ async function analyzeModules(srcDir, packageName) {
 					dependencies: Array.from(dependencies)
 				};
 				if (hasNative) module.native = true;
+				if (hasEdge) module.workerd = true;
 				if (hasBrowser) module.browser = true;
 				if (hasBun) module.bun = true;
 				if (hasNode) module.node = true;