gigadrive 2.7.4 → 2.8.0

package/dist/index.mjs

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { Command as Command16 } from "@effect/cli";
+import { Command as Command17 } from "@effect/cli";
 import { NodeContext, NodeRuntime } from "@effect/platform-node";
 import { NetworkConfigLive as NetworkConfigLive2 } from "@gigadrive/network-config";
-import { Effect as Effect28, Layer, LogLevel, Logger } from "effect";
+import { Effect as Effect29, Layer, LogLevel, Logger } from "effect";
 
 // package.json
 var package_default = {
   name: "gigadrive",
-  version: "2.7.4",
+  version: "2.8.0",
   repository: {
     type: "git",
     url: "https://github.com/Gigadrive/sdk.git",
@@ -332,6 +332,24 @@ var DeploymentFailedError = class extends Schema.TaggedError()("DeploymentFailed
   message: Schema.String
 }) {
 };
+var InvalidMicroVmOptionsError = class extends Schema.TaggedError()(
+  "InvalidMicroVmOptionsError",
+  { message: Schema.String }
+) {
+};
+var InvalidCopyTargetError = class extends Schema.TaggedError()("InvalidCopyTargetError", {
+  message: Schema.String
+}) {
+};
+var LocalFileError = class extends Schema.TaggedError()("LocalFileError", {
+  message: Schema.String,
+  path: Schema.String
+}) {
+};
+var TerminalRequiredError = class extends Schema.TaggedError()("TerminalRequiredError", {
+  message: Schema.String
+}) {
+};
 
 // src/services/api-client.ts
 import { ApiError, GigadriveClient } from "@gigadrive/sdk";
@@ -536,6 +554,13 @@ var CLI_SCOPES = [
   "network:deployments:trigger",
   "network:ai_gateway:chat",
   "network:ai_gateway:models",
+  "network:microvms:read",
+  "network:microvms:write",
+  "network:microvms:exec",
+  "network:microvms:delete",
+  "network:microvm_images:read",
+  "network:microvm_images:write",
+  "network:microvm_images:delete",
   // Provisioning local-dev API credentials
   "platform:api_keys:read",
   "platform:api_keys:write",
@@ -2939,23 +2964,893 @@ var logoutCommand = Command11.make(
   )
 );
 
+// src/commands/microvms/index.ts
+import { Args as Args5, Command as Command12, Options as Options7 } from "@effect/cli";
+import { FileSystem as FileSystem8, Path as Path7 } from "@effect/platform";
+import {
+  durationToMs,
+  MicroVM,
+  MICROVM_MAX_TIMEOUT_MS
+} from "@gigadrive/sdk";
+import { Config as Config4, Console as Console12, Effect as Effect22, Exit, Option as Option14 } from "effect";
+
+// src/lib/microvm.ts
+var REMOTE_PREFIX = "vm:";
+var parseCopyTarget = (value) => {
+  if (!value.startsWith(REMOTE_PREFIX)) {
+    return value.length === 0 ? "The path is empty." : { kind: "local", path: value };
+  }
+  const rest = value.slice(REMOTE_PREFIX.length);
+  const separator = rest.indexOf(":");
+  if (separator <= 0) return `"${value}" is not in the form vm:<id>:<path>.`;
+  const microvmId = rest.slice(0, separator);
+  const path2 = rest.slice(separator + 1);
+  return { kind: "remote", microvmId, path: path2.length === 0 ? "." : path2 };
+};
+var posixBasename = (path2) => {
+  const trimmed = path2.replace(/\/+$/, "");
+  const index = trimmed.lastIndexOf("/");
+  return index === -1 ? trimmed : trimmed.slice(index + 1);
+};
+var posixJoin = (...segments) => segments.filter((segment) => segment.length > 0).join("/").replace(/\/{2,}/g, "/");
+var relativeTo = (root, entry) => {
+  const base = root.replace(/\/+$/, "");
+  return entry.startsWith(`${base}/`) ? entry.slice(base.length + 1) : posixBasename(entry);
+};
+var parseKeyValues = (entries) => {
+  const value = {};
+  for (const entry of entries) {
+    const index = entry.indexOf("=");
+    if (index <= 0) return { ok: false, entry };
+    value[entry.slice(0, index)] = entry.slice(index + 1);
+  }
+  return { ok: true, value };
+};
+var SIGNAL_NUMBERS = {
+  SIGHUP: 1,
+  SIGINT: 2,
+  SIGQUIT: 3,
+  SIGABRT: 6,
+  SIGKILL: 9,
+  SIGUSR1: 10,
+  SIGSEGV: 11,
+  SIGUSR2: 12,
+  SIGPIPE: 13,
+  SIGTERM: 15
+};
+var exitStatusOf = (command) => {
+  if (command.exitCode !== null) return command.exitCode;
+  if (command.signal) return 128 + (SIGNAL_NUMBERS[command.signal] ?? 0);
+  return 1;
+};
+var formatMemory = (mb) => mb % 1024 === 0 ? `${mb / 1024} GiB` : `${mb} MiB`;
+var relativeTime = (iso, now = Date.now()) => {
+  if (!iso) return "-";
+  const delta = Date.parse(iso) - now;
+  if (!Number.isFinite(delta)) return iso;
+  const abs = Math.abs(delta);
+  const text = abs < 6e4 ? `${Math.round(abs / 1e3)}s` : abs < 36e5 ? `${Math.round(abs / 6e4)}m` : abs < 864e5 ? `${Math.round(abs / 36e5)}h` : `${Math.round(abs / 864e5)}d`;
+  return delta >= 0 ? `in ${text}` : `${text} ago`;
+};
+var formatTable = (rows) => {
+  const widths = [];
+  for (const row of rows) {
+    row.forEach((cell, index) => {
+      widths[index] = Math.max(widths[index] ?? 0, cell.length);
+    });
+  }
+  return rows.map(
+    (row) => row.map((cell, index) => index === row.length - 1 ? cell : cell.padEnd(widths[index] ?? 0)).join("  ").trimEnd()
+  );
+};
+var formatMicroVmTable = (vms, now = Date.now()) => formatTable([
+  ["ID", "STATUS", "IMAGE", "SIZE", "PORTS", "CREATED", "EXPIRES"],
+  ...vms.map((vm) => [
+    vm.id,
+    vm.status,
+    vm.image.name,
+    `${vm.vcpus} vCPU, ${formatMemory(vm.memoryMb)}`,
+    vm.ports.map((entry) => entry.port).join(",") || "-",
+    relativeTime(vm.createdAt, now),
+    vm.status === "running" || vm.status === "starting" ? relativeTime(vm.expiresAt, now) : "-"
+  ])
+]);
+var describeMicroVm = (vm, now = Date.now()) => {
+  const lines = [
+    `ID:          ${vm.id}`,
+    `Status:      ${vm.status}${vm.stopReason ? ` (${vm.stopReason})` : ""}`,
+    `Image:       ${vm.image.name}`,
+    `Size:        ${vm.vcpus} vCPU, ${formatMemory(vm.memoryMb)} memory, ${formatMemory(vm.diskMb)} disk`,
+    `Region:      ${vm.region}`,
+    `Network:     ${vm.network.egress === "deny" ? "outbound traffic blocked" : "internet access"}`,
+    `Application: ${vm.applicationId}`,
+    `Created:     ${vm.createdAt}`
+  ];
+  if (vm.expiresAt && (vm.status === "running" || vm.status === "starting")) {
+    lines.push(`Expires:     ${vm.expiresAt} (${relativeTime(vm.expiresAt, now)})`);
+  }
+  if (vm.stoppedAt) lines.push(`Stopped:     ${vm.stoppedAt}`);
+  const metadata = Object.entries(vm.metadata);
+  if (metadata.length > 0) lines.push(`Metadata:    ${metadata.map(([key, value]) => `${key}=${value}`).join(", ")}`);
+  if (vm.ports.length > 0) {
+    lines.push("Ports:");
+    for (const entry of vm.ports) lines.push(`  ${entry.port}  ${entry.url}`);
+  }
+  return lines;
+};
+var imageSource = (image) => {
+  if (image.builtin) return "built-in";
+  const source = image.source;
+  if (!source) return "-";
+  return source.type === "dockerfile" ? "Dockerfile" : source.ref;
+};
+var formatImageTable = (images) => formatTable([
+  ["NAME", "STATUS", "SOURCE", "ID"],
+  ...images.map((image) => [image.name, image.status, imageSource(image), image.id])
+]);
+var formatBytes = (bytes) => {
+  if (bytes < 1024) return `${bytes} B`;
+  const units = ["KiB", "MiB", "GiB", "TiB"];
+  let value = bytes / 1024;
+  let unit = 0;
+  while (value >= 1024 && unit < units.length - 1) {
+    value /= 1024;
+    unit += 1;
+  }
+  return `${value.toFixed(1)} ${units[unit]}`;
+};
+var concatBytes = (chunks) => {
+  if (chunks.length === 1) return chunks[0];
+  const total = chunks.reduce((sum, chunk) => sum + chunk.length, 0);
+  const result = new Uint8Array(total);
+  let offset = 0;
+  for (const chunk of chunks) {
+    result.set(chunk, offset);
+    offset += chunk.length;
+  }
+  return result;
+};
+var StdinBatcher = class {
+  constructor(send, options = {}) {
+    this.send = send;
+    this.options = options;
+    this.delayMs = options.delayMs ?? 8;
+    this.maxBytes = options.maxBytes ?? 64 * 1024;
+  }
+  send;
+  options;
+  pending = [];
+  pendingBytes = 0;
+  timer;
+  inFlight;
+  closed = false;
+  delayMs;
+  maxBytes;
+  /** Queues a chunk. Ignored after {@link close}. */
+  push(chunk) {
+    if (this.closed || chunk.length === 0) return;
+    this.pending.push(chunk);
+    this.pendingBytes += chunk.length;
+    if (this.pendingBytes >= this.maxBytes) this.schedule(0);
+    else if (this.timer === void 0) this.schedule(this.delayMs);
+  }
+  /** Sends everything queued so far, after any request already in flight. */
+  async flush() {
+    while (this.inFlight) await this.inFlight;
+    if (this.pending.length === 0) return;
+    const data = concatBytes(this.pending);
+    this.pending = [];
+    this.pendingBytes = 0;
+    this.inFlight = this.send(data).catch((error) => this.options.onError?.(error)).finally(() => {
+      this.inFlight = void 0;
+    });
+    await this.inFlight;
+  }
+  /** Stops accepting chunks and sends what is left. */
+  async close() {
+    this.closed = true;
+    if (this.timer !== void 0) clearTimeout(this.timer);
+    this.timer = void 0;
+    await this.flush();
+  }
+  schedule(delay) {
+    if (this.timer !== void 0) clearTimeout(this.timer);
+    this.timer = setTimeout(() => {
+      this.timer = void 0;
+      void this.flush();
+    }, delay);
+  }
+};
+
+// src/lib/microvm-session.ts
+async function attachCommand(command, io, options) {
+  const batcher = new StdinBatcher((data) => command.write(data), {
+    // Input after the command exited is expected to fail; nothing to report.
+    onError: () => void 0
+  });
+  const cleanups = [];
+  if (options.forwardInput) {
+    cleanups.push(
+      io.onInput(
+        (chunk) => batcher.push(chunk),
+        () => {
+          if (!options.endInputOnEof) return;
+          void batcher.close().then(() => command.end()).catch(() => void 0);
+        }
+      )
+    );
+  }
+  if (options.forwardResize) {
+    cleanups.push(
+      io.onResize(() => {
+        const size = io.size();
+        if (size) void command.resize(size.cols, size.rows).catch(() => void 0);
+      })
+    );
+  }
+  try {
+    for await (const chunk of command.logs()) io.write(chunk.data, chunk.stream);
+  } finally {
+    for (const cleanup of cleanups) cleanup();
+    await batcher.close();
+  }
+  return command.status === "exited" ? command.info : await command.wait();
+}
+var nodeSessionIo = () => ({
+  onInput: (listener, onEnd) => {
+    const encoder = new TextEncoder();
+    const onData = (chunk) => listener(typeof chunk === "string" ? encoder.encode(chunk) : chunk);
+    process.stdin.on("data", onData);
+    process.stdin.on("end", onEnd);
+    process.stdin.resume();
+    return () => {
+      process.stdin.off("data", onData);
+      process.stdin.off("end", onEnd);
+      process.stdin.pause();
+    };
+  },
+  write: (data, stream) => {
+    (stream === "stderr" ? process.stderr : process.stdout).write(data);
+  },
+  size: () => process.stdout.isTTY ? { cols: process.stdout.columns, rows: process.stdout.rows } : void 0,
+  onResize: (listener) => {
+    process.stdout.on("resize", listener);
+    return () => {
+      process.stdout.off("resize", listener);
+    };
+  }
+});
+
+// src/commands/microvms/index.ts
+var CONSOLE_URL2 = "https://console.gigadrive.de";
+var MICROVM_STATUSES = [
+  "pending",
+  "starting",
+  "running",
+  "stopping",
+  "stopped",
+  "failed"
+];
+var DEFAULT_SHELL = ["/bin/sh", "-c", "if command -v bash >/dev/null 2>&1; then exec bash -l; else exec sh -l; fi"];
+var appOption6 = Options7.text("app").pipe(
+  Options7.withAlias("a"),
+  Options7.withDescription("Application ID (defaults to the linked application)"),
+  Options7.optional
+);
+var jsonOption2 = Options7.boolean("json").pipe(Options7.withDescription("Print the result as JSON"));
+var microvmIdArg = Args5.text({ name: "microvm-id" }).pipe(Args5.withDescription("The microVM ID"));
+var envOption = Options7.text("env").pipe(
+  Options7.withAlias("e"),
+  Options7.withDescription("Environment variable as KEY=VALUE (repeatable)"),
+  Options7.repeated
+);
+var userOption = Options7.text("user").pipe(
+  Options7.withAlias("u"),
+  Options7.withDescription("Run as this user (default: the image user)"),
+  Options7.optional
+);
+var cwdOption = Options7.text("cwd").pipe(
+  Options7.withAlias("w"),
+  Options7.withDescription("Working directory inside the microVM"),
+  Options7.optional
+);
+var errorMessage2 = (action, error) => {
+  switch (error._tag) {
+    case "NotAuthenticatedError":
+      return 'You are not logged in. Run "gigadrive login" to authenticate.';
+    case "ApiRequestError":
+      if (error.code === "microvm_not_running") {
+        return `${error.message}
+The microVM has stopped. Create a new one with "gigadrive microvms create".`;
+      }
+      if (error.code === "quota_exceeded" || error.code === "plan_limit_exceeded") {
+        return `${error.message}
+Stop microVMs you no longer need, or raise your plan's limits at ${CONSOLE_URL2}.`;
+      }
+      if (error.code === "microvm_busy") {
+        return `${error.message}
+The microVM is busy. Wait a moment and try again.`;
+      }
+      if (error.code === "microvm_unreachable") {
+        return `${error.message}
+The microVM could not be reached. Try again; if it keeps failing, check "gigadrive microvms get <id>".`;
+      }
+      if (error.code === "image_not_ready") {
+        return `${error.message}
+The image is not built yet. Check it with "gigadrive microvms images ls".`;
+      }
+      return `Failed to ${action}: ${error.message}`;
+    default:
+      return error.message;
+  }
+};
+var reportErrors2 = (action) => (self) => Effect22.tapError(self, (error) => Console12.error(errorMessage2(action, error)));
+var parseDuration = (flag, value) => Effect22.try({
+  try: () => {
+    if (/^\d+(\.\d+)?$/.test(value.trim())) throw new RangeError("missing unit");
+    return durationToMs(value);
+  },
+  catch: () => new InvalidMicroVmOptionsError({
+    message: `${flag} must be a duration with a unit, such as 90s, 10m or 1h (got "${value}").`
+  })
+});
+var optionalDuration = (flag, value) => Option14.match(value, {
+  onNone: () => Effect22.succeed(void 0),
+  onSome: (text) => parseDuration(flag, text)
+});
+var parseLifetime = (flag, value) => parseDuration(flag, value).pipe(
+  Effect22.filterOrFail(
+    (ms) => ms >= 1 && ms <= MICROVM_MAX_TIMEOUT_MS,
+    () => new InvalidMicroVmOptionsError({ message: `${flag} can be at most 24h (got "${value}").` })
+  )
+);
+var keyValues = (flag, entries) => {
+  const parsed = parseKeyValues(entries);
+  return parsed.ok ? Effect22.succeed(entries.length > 0 ? parsed.value : void 0) : Effect22.fail(new InvalidMicroVmOptionsError({ message: `${flag} expects KEY=VALUE, got "${parsed.entry}".` }));
+};
+var resolveApplicationId = (app) => Option14.match(app, {
+  onSome: (id) => Effect22.succeed(id),
+  onNone: () => Effect22.gen(function* () {
+    const projectLink = yield* ProjectLinkService;
+    const link = yield* projectLink.load(process.cwd());
+    return Option14.match(link, { onNone: () => void 0, onSome: (value) => value.applicationId });
+  })
+});
+var withClient = (run) => Effect22.gen(function* () {
+  const apiClient = yield* ApiClientService;
+  const client = yield* apiClient.getClient;
+  return yield* Effect22.tryPromise({ try: () => run(client), catch: toApiRequestError });
+});
+var signalOnInterrupt = (signal) => (command, exit) => Exit.isInterrupted(exit) ? Effect22.tryPromise(() => command.kill(signal)).pipe(Effect22.timeout("2 seconds"), Effect22.ignore) : Effect22.void;
+var createInput = (flags) => Effect22.gen(function* () {
+  const env = yield* keyValues("--env", flags.env);
+  const metadata = yield* keyValues("--metadata", flags.metadata);
+  const timeoutMs = yield* Option14.match(flags.timeout, {
+    onNone: () => Effect22.succeed(void 0),
+    onSome: (text) => parseLifetime("--timeout", text)
+  });
+  const badPort = flags.ports.find((port) => !Number.isInteger(port) || port < 1 || port > 65535);
+  if (badPort !== void 0) {
+    return yield* new InvalidMicroVmOptionsError({ message: `--port must be between 1 and 65535 (got ${badPort}).` });
+  }
+  const applicationId = yield* resolveApplicationId(flags.app);
+  const input = {
+    ...applicationId ? { applicationId } : {},
+    ...Option14.match(flags.image, { onNone: () => ({}), onSome: (image) => ({ image }) }),
+    ...Option14.match(flags.vcpus, {
+      onNone: () => ({}),
+      onSome: (vcpus) => ({ vcpus: Number(vcpus) })
+    }),
+    ...Option14.match(flags.memory, { onNone: () => ({}), onSome: (memoryMb) => ({ memoryMb }) }),
+    ...Option14.match(flags.disk, { onNone: () => ({}), onSome: (diskMb) => ({ diskMb }) }),
+    ...timeoutMs !== void 0 ? { timeoutMs } : {},
+    ...flags.ports.length > 0 ? { ports: [...flags.ports] } : {},
+    ...env ? { env } : {},
+    ...metadata ? { metadata } : {},
+    ...flags.denyEgress ? { network: { egress: "deny" } } : {},
+    ...Option14.match(flags.region, { onNone: () => ({}), onSome: (region) => ({ region }) })
+  };
+  return input;
+});
+var createMicroVm = (flags) => Effect22.gen(function* () {
+  const apiClient = yield* ApiClientService;
+  const input = yield* createInput(flags);
+  if (!flags.json) yield* Console12.error(`Creating a microVM from ${input.image ?? "node22"}...`);
+  const vm = yield* apiClient.request((client) => client.microvms.create(input));
+  if (flags.json) {
+    yield* Console12.log(JSON.stringify(vm, null, 2));
+    return vm;
+  }
+  for (const line of describeMicroVm(vm)) yield* Console12.log(line);
+  yield* Console12.log(`
+Run a command: gigadrive microvms exec ${vm.id} -- <command>`);
+  yield* Console12.log(`Open a shell:  gigadrive microvms shell ${vm.id}`);
+  return vm;
+});
+var createCommand = Command12.make(
+  "create",
+  {
+    app: appOption6,
+    image: Options7.text("image").pipe(
+      Options7.withAlias("i"),
+      Options7.withDescription(
+        "Image name or ID: node22, node24, python3.13, python3.12, bun1, debian12, ubuntu24.04, or a custom image (default: node22)"
+      ),
+      Options7.optional
+    ),
+    vcpus: Options7.choice("vcpus", ["1", "2", "4"]).pipe(
+      Options7.withDescription("Number of vCPUs (default: 1)"),
+      Options7.optional
+    ),
+    memory: Options7.integer("memory").pipe(Options7.withDescription("Memory in MiB (default: 2048)"), Options7.optional),
+    disk: Options7.integer("disk").pipe(Options7.withDescription("Disk in MiB (default: 10240)"), Options7.optional),
+    timeout: Options7.text("timeout").pipe(
+      Options7.withAlias("t"),
+      Options7.withDescription("Lifetime before it stops automatically, such as 30m or 2h (default: 5m)"),
+      Options7.optional
+    ),
+    ports: Options7.integer("port").pipe(
+      Options7.withAlias("p"),
+      Options7.withDescription("Port to expose on a public preview URL (repeatable, up to 8)"),
+      Options7.repeated
+    ),
+    env: envOption,
+    metadata: Options7.text("metadata").pipe(
+      Options7.withAlias("m"),
+      Options7.withDescription("Metadata as KEY=VALUE (repeatable)"),
+      Options7.repeated
+    ),
+    denyEgress: Options7.boolean("deny-egress").pipe(Options7.withDescription("Block all outbound network traffic")),
+    region: Options7.text("region").pipe(Options7.withDescription("Region to place the microVM in"), Options7.optional),
+    json: jsonOption2
+  },
+  (flags) => createMicroVm(flags).pipe(Effect22.asVoid, reportErrors2("create the microVM"))
+).pipe(Command12.withDescription("Create a microVM and wait until it runs"));
+var listMicroVms = (flags) => Effect22.gen(function* () {
+  const apiClient = yield* ApiClientService;
+  const applicationId = yield* resolveApplicationId(flags.app);
+  const status = Option14.getOrUndefined(flags.status);
+  const showAll = flags.all || status !== void 0;
+  const vms = yield* apiClient.request(async (client) => {
+    const items = [];
+    for await (const vm of client.microvms.listAll({ applicationId, status, limit: Math.min(flags.limit, 100) })) {
+      if (!showAll && (vm.status === "stopped" || vm.status === "failed")) continue;
+      items.push(vm);
+      if (items.length >= flags.limit) break;
+    }
+    return items;
+  });
+  if (flags.json) return yield* Console12.log(JSON.stringify(vms, null, 2));
+  if (vms.length === 0) {
+    return yield* Console12.log(
+      showAll ? "No microVMs found." : 'No running microVMs. Create one with "gigadrive microvms create".'
+    );
+  }
+  for (const line of formatMicroVmTable(vms)) yield* Console12.log(line);
+});
+var listCommand2 = Command12.make(
+  "ls",
+  {
+    app: appOption6,
+    status: Options7.choice("status", MICROVM_STATUSES).pipe(
+      Options7.withAlias("s"),
+      Options7.withDescription("Only microVMs in this status"),
+      Options7.optional
+    ),
+    all: Options7.boolean("all").pipe(Options7.withDescription("Include stopped and failed microVMs")),
+    limit: Options7.integer("limit").pipe(
+      Options7.withDescription("Show at most this many (default: 50)"),
+      Options7.withDefault(50)
+    ),
+    json: jsonOption2
+  },
+  (flags) => listMicroVms(flags).pipe(reportErrors2("list microVMs"))
+).pipe(Command12.withDescription("List microVMs"));
+var getCommand = Command12.make(
+  "get",
+  { microvmId: microvmIdArg, json: jsonOption2 },
+  ({ microvmId, json }) => Effect22.gen(function* () {
+    const apiClient = yield* ApiClientService;
+    const vm = yield* apiClient.request((client) => client.microvms.get(microvmId));
+    if (json) return yield* Console12.log(JSON.stringify(vm, null, 2));
+    for (const line of describeMicroVm(vm)) yield* Console12.log(line);
+  }).pipe(reportErrors2("get the microVM"))
+).pipe(Command12.withDescription("Show a microVM"));
+var execInMicroVm = (flags, io = nodeSessionIo()) => Effect22.gen(function* () {
+  const env = yield* keyValues("--env", flags.env);
+  const timeout = yield* optionalDuration("--timeout", flags.timeout);
+  const [cmd, ...args] = flags.command;
+  const options = {
+    cwd: Option14.getOrUndefined(flags.cwd),
+    env,
+    user: Option14.getOrUndefined(flags.user),
+    sudo: flags.sudo,
+    timeout,
+    stdin: flags.interactive
+  };
+  const info = yield* Effect22.acquireUseRelease(
+    withClient(async (client) => {
+      const vm = await MicroVM.get(flags.microvmId, { client });
+      return args.length > 0 ? vm.spawn(cmd, args, options) : vm.spawn(cmd, options);
+    }),
+    (command) => Effect22.tryPromise({
+      try: () => attachCommand(command, io, {
+        forwardInput: flags.interactive,
+        endInputOnEof: true,
+        forwardResize: false
+      }),
+      catch: toApiRequestError
+    }),
+    signalOnInterrupt("SIGINT")
+  );
+  return exitStatusOf(info);
+});
+var setExitCode = (status) => Effect22.sync(() => {
+  process.exitCode = status;
+});
+var execCommand = Command12.make(
+  "exec",
+  {
+    microvmId: microvmIdArg,
+    command: Args5.text({ name: "command" }).pipe(
+      Args5.withDescription('The command and its arguments, after "--". One quoted argument runs through /bin/sh -c'),
+      Args5.atLeast(1)
+    ),
+    cwd: cwdOption,
+    env: envOption,
+    user: userOption,
+    sudo: Options7.boolean("sudo").pipe(Options7.withDescription("Run as root")),
+    timeout: Options7.text("timeout").pipe(
+      Options7.withAlias("t"),
+      Options7.withDescription("Kill the command after this long, such as 30s or 10m"),
+      Options7.optional
+    ),
+    interactive: Options7.boolean("interactive").pipe(
+      Options7.withAlias("i"),
+      Options7.withDescription("Forward local stdin to the command")
+    )
+  },
+  (flags) => execInMicroVm(flags).pipe(Effect22.flatMap(setExitCode), reportErrors2("run the command"))
+).pipe(Command12.withDescription("Run a command in a microVM and exit with its exit code: exec <id> -- <command...>"));
+var openShell = (flags, io = nodeSessionIo()) => Effect22.gen(function* () {
+  if (process.stdin.isTTY !== true || process.stdout.isTTY !== true) {
+    return yield* new TerminalRequiredError({
+      message: 'microvms shell needs an interactive terminal. Use "gigadrive microvms exec <id> -- <command>" in scripts.'
+    });
+  }
+  const term = yield* Config4.string("TERM").pipe(Config4.withDefault("xterm-256color"));
+  const size = io.size() ?? { cols: 80, rows: 24 };
+  const [cmd, ...args] = Option14.match(flags.shell, { onNone: () => DEFAULT_SHELL, onSome: (shell) => [shell] });
+  const options = {
+    pty: { cols: size.cols, rows: size.rows },
+    env: { TERM: term },
+    cwd: Option14.getOrUndefined(flags.cwd),
+    user: Option14.getOrUndefined(flags.user)
+  };
+  const info = yield* Effect22.acquireUseRelease(
+    withClient(async (client) => {
+      const vm = await MicroVM.get(flags.microvmId, { client });
+      return args.length > 0 ? vm.spawn(cmd, args, options) : vm.spawn(cmd, options);
+    }),
+    (command) => Effect22.acquireUseRelease(
+      Effect22.sync(() => process.stdin.setRawMode(true)),
+      () => Effect22.tryPromise({
+        try: () => attachCommand(command, io, { forwardInput: true, endInputOnEof: false, forwardResize: true }),
+        catch: toApiRequestError
+      }),
+      () => Effect22.sync(() => process.stdin.setRawMode(false))
+    ),
+    signalOnInterrupt("SIGHUP")
+  );
+  return exitStatusOf(info);
+});
+var shellCommand = Command12.make(
+  "shell",
+  {
+    microvmId: microvmIdArg,
+    shell: Options7.text("shell").pipe(
+      Options7.withDescription("Program to run instead of the login shell, such as python3"),
+      Options7.optional
+    ),
+    cwd: cwdOption,
+    user: userOption
+  },
+  (flags) => openShell(flags).pipe(Effect22.flatMap(setExitCode), reportErrors2("open a shell"))
+).pipe(Command12.withDescription("Open an interactive shell in a microVM"));
+var localError = (path2, action) => () => new LocalFileError({ message: `Failed to ${action} ${path2}`, path: path2 });
+var parseTarget = (value) => {
+  const target = parseCopyTarget(value);
+  return typeof target === "string" ? Effect22.fail(new InvalidCopyTargetError({ message: target })) : Effect22.succeed(target);
+};
+var remoteStat = (client, microvmId, path2) => Effect22.tryPromise({ try: () => client.microvms.files.stat(microvmId, path2), catch: toApiRequestError }).pipe(
+  Effect22.map(Option14.some),
+  Effect22.catchIf(
+    (error) => error.statusCode === 404,
+    () => Effect22.succeed(Option14.none())
+  )
+);
+var upload = (client, source, target) => Effect22.gen(function* () {
+  const fs = yield* FileSystem8.FileSystem;
+  const path2 = yield* Path7.Path;
+  const info = yield* fs.stat(source).pipe(Effect22.mapError(localError(source, "read")));
+  const existing = yield* remoteStat(client, target.microvmId, target.path);
+  const intoDirectory = target.path.endsWith("/") || Option14.exists(existing, (entry) => entry.type === "directory");
+  const destination = intoDirectory ? posixJoin(target.path, path2.basename(source)) : target.path;
+  const files = [];
+  if (info.type === "Directory") {
+    const entries = yield* fs.readDirectory(source, { recursive: true }).pipe(Effect22.mapError(localError(source, "list")));
+    for (const entry of entries) {
+      const local = path2.join(source, entry);
+      const stat = yield* fs.stat(local).pipe(Effect22.mapError(localError(local, "read")));
+      if (stat.type === "File")
+        files.push({ local, remote: posixJoin(destination, entry.split(path2.sep).join("/")) });
+    }
+  } else {
+    files.push({ local: source, remote: destination });
+  }
+  let bytes = 0;
+  for (const file of files) {
+    const content = yield* fs.readFile(file.local).pipe(Effect22.mapError(localError(file.local, "read")));
+    const result = yield* Effect22.tryPromise({
+      try: () => client.microvms.files.write(target.microvmId, file.remote, content),
+      catch: toApiRequestError
+    });
+    bytes += result.bytes;
+  }
+  return { files: files.length, bytes };
+});
+var download = (client, source, target) => Effect22.gen(function* () {
+  const fs = yield* FileSystem8.FileSystem;
+  const path2 = yield* Path7.Path;
+  const entry = yield* Effect22.tryPromise({
+    try: () => client.microvms.files.stat(source.microvmId, source.path),
+    catch: toApiRequestError
+  });
+  const targetExists = yield* fs.exists(target).pipe(Effect22.mapError(localError(target, "check")));
+  const targetIsDirectory = targetExists ? (yield* fs.stat(target).pipe(Effect22.mapError(localError(target, "read")))).type === "Directory" : false;
+  const intoDirectory = targetIsDirectory || target.endsWith(path2.sep) || target.endsWith("/");
+  const destination = intoDirectory ? path2.join(target, posixBasename(entry.path)) : target;
+  const files = [];
+  if (entry.type === "directory") {
+    const listing = yield* Effect22.tryPromise({
+      try: () => client.microvms.files.list(source.microvmId, entry.path, { recursive: true }),
+      catch: toApiRequestError
+    });
+    if (listing.truncated) {
+      yield* Console12.error(
+        `${entry.path} has too many files to list at once; only part of it is copied. Copy its subdirectories separately.`
+      );
+    }
+    for (const child of listing.entries) {
+      if (child.type !== "file") continue;
+      const segments = relativeTo(entry.path, child.path).split("/");
+      if (segments.some((segment) => segment === "" || segment === "." || segment === "..")) {
+        yield* Console12.error(`Skipped ${child.path}: its path leaves ${entry.path}.`);
+        continue;
+      }
+      files.push({ remote: child.path, local: path2.join(destination, ...segments) });
+    }
+    yield* fs.makeDirectory(destination, { recursive: true }).pipe(Effect22.mapError(localError(destination, "create")));
+  } else {
+    files.push({ remote: entry.path, local: destination });
+  }
+  let bytes = 0;
+  for (const file of files) {
+    const content = yield* Effect22.tryPromise({
+      try: () => client.microvms.files.read(source.microvmId, file.remote),
+      catch: toApiRequestError
+    });
+    yield* fs.makeDirectory(path2.dirname(file.local), { recursive: true }).pipe(Effect22.mapError(localError(file.local, "create the directory of")));
+    yield* fs.writeFile(file.local, content).pipe(Effect22.mapError(localError(file.local, "write")));
+    bytes += content.length;
+  }
+  return { files: files.length, bytes };
+});
+var copyFiles = (sourceSpec, targetSpec) => Effect22.gen(function* () {
+  const source = yield* parseTarget(sourceSpec);
+  const target = yield* parseTarget(targetSpec);
+  const apiClient = yield* ApiClientService;
+  const client = yield* apiClient.getClient;
+  if (source.kind === "local" && target.kind === "remote") return yield* upload(client, source.path, target);
+  if (source.kind === "remote" && target.kind === "local") return yield* download(client, source, target.path);
+  return yield* new InvalidCopyTargetError({
+    message: 'One side must be local and the other vm:<id>:<path>, e.g. "gigadrive microvms cp ./app vm:<id>:/app".'
+  });
+});
+var copyCommand = Command12.make(
+  "cp",
+  {
+    source: Args5.text({ name: "source" }).pipe(Args5.withDescription("Local path or vm:<id>:<path>")),
+    target: Args5.text({ name: "target" }).pipe(Args5.withDescription("Local path or vm:<id>:<path>"))
+  },
+  ({ source, target }) => copyFiles(source, target).pipe(
+    Effect22.flatMap(
+      (result) => Console12.log(`Copied ${result.files} file${result.files === 1 ? "" : "s"} (${formatBytes(result.bytes)}).`)
+    ),
+    reportErrors2("copy")
+  )
+).pipe(Command12.withDescription("Copy files between this machine and a microVM (vm:<id>:<path>)"));
+var microvmIdsArg = Args5.text({ name: "microvm-id" }).pipe(
+  Args5.withDescription("One or more microVM IDs"),
+  Args5.atLeast(1)
+);
+var stopCommand = Command12.make(
+  "stop",
+  { microvmIds: microvmIdsArg },
+  ({ microvmIds }) => Effect22.forEach(
+    microvmIds,
+    (microvmId) => Effect22.gen(function* () {
+      const apiClient = yield* ApiClientService;
+      yield* apiClient.request((client) => client.microvms.stop(microvmId));
+      yield* Console12.log(`Stopped ${microvmId}.`);
+    }),
+    { discard: true }
+  ).pipe(reportErrors2("stop the microVM"))
+).pipe(Command12.withDescription("Stop microVMs; their disk and memory are discarded"));
+var removeCommand2 = Command12.make(
+  "rm",
+  { microvmIds: microvmIdsArg },
+  ({ microvmIds }) => Effect22.forEach(
+    microvmIds,
+    (microvmId) => Effect22.gen(function* () {
+      const apiClient = yield* ApiClientService;
+      yield* apiClient.request((client) => client.microvms.delete(microvmId));
+      yield* Console12.log(`Deleted ${microvmId}.`);
+    }),
+    { discard: true }
+  ).pipe(reportErrors2("delete the microVM"))
+).pipe(Command12.withDescription("Delete microVMs, stopping them first"));
+var extendMicroVm = (microvmId, duration) => Effect22.gen(function* () {
+  const timeoutMs = yield* parseLifetime("The duration", duration);
+  const apiClient = yield* ApiClientService;
+  const vm = yield* apiClient.request((client) => client.microvms.extendTimeout(microvmId, timeoutMs));
+  yield* Console12.log(`${vm.id} now stops at ${vm.expiresAt ?? "an unknown time"}.`);
+  return vm;
+});
+var extendCommand = Command12.make(
+  "extend",
+  {
+    microvmId: microvmIdArg,
+    duration: Args5.text({ name: "duration" }).pipe(
+      Args5.withDescription("New remaining lifetime from now, such as 30m")
+    )
+  },
+  ({ microvmId, duration }) => extendMicroVm(microvmId, duration).pipe(Effect22.asVoid, reportErrors2("extend the microVM"))
+).pipe(Command12.withDescription("Set how long a microVM keeps running, counted from now"));
+var imagesListCommand = Command12.make(
+  "ls",
+  { app: appOption6, json: jsonOption2 },
+  ({ app, json }) => Effect22.gen(function* () {
+    const apiClient = yield* ApiClientService;
+    const applicationId = yield* resolveApplicationId(app);
+    const images = yield* apiClient.request((client) => client.microvms.images.list({ applicationId }));
+    if (json) return yield* Console12.log(JSON.stringify(images, null, 2));
+    for (const line of formatImageTable(images)) yield* Console12.log(line);
+  }).pipe(reportErrors2("list images"))
+).pipe(Command12.withDescription("List built-in and custom images"));
+var createImage = (flags) => Effect22.gen(function* () {
+  const fs = yield* FileSystem8.FileSystem;
+  const apiClient = yield* ApiClientService;
+  if (Option14.isSome(flags.from) === Option14.isSome(flags.dockerfile)) {
+    return yield* new InvalidMicroVmOptionsError({
+      message: "Pass exactly one of --from <registry reference> or --dockerfile <path>."
+    });
+  }
+  const from = Option14.isSome(flags.from) ? flags.from.value : {
+    dockerfile: yield* fs.readFileString(Option14.getOrElse(flags.dockerfile, () => "Dockerfile")).pipe(
+      Effect22.mapError(
+        localError(
+          Option14.getOrElse(flags.dockerfile, () => "Dockerfile"),
+          "read"
+        )
+      )
+    )
+  };
+  const applicationId = yield* resolveApplicationId(flags.app);
+  let image = yield* apiClient.request(
+    (client) => client.microvms.images.create({ name: flags.name, from, ...applicationId ? { applicationId } : {} })
+  );
+  if (flags.wait) {
+    if (!flags.json) yield* Console12.error(`Building ${image.name}...`);
+    image = yield* apiClient.request(
+      (client) => client.microvms.images.waitUntilReady(image.id, {
+        onStatus: (current) => {
+          if (!flags.json) process.stderr.write(`  ${current.status}
+`);
+        }
+      })
+    );
+  }
+  if (flags.json) {
+    yield* Console12.log(JSON.stringify(image, null, 2));
+  } else if (image.status === "ready") {
+    yield* Console12.log(`${image.name} is ready. Use it with: gigadrive microvms create --image ${image.name}`);
+  } else {
+    yield* Console12.log(
+      `${image.name} is ${image.status} (${image.id}). Check it with "gigadrive microvms images ls".`
+    );
+  }
+  return image;
+});
+var imagesCreateCommand = Command12.make(
+  "create",
+  {
+    name: Args5.text({ name: "name" }).pipe(
+      Args5.withDescription('Image name: lowercase letters, digits, ".", "_", "-"')
+    ),
+    app: appOption6,
+    from: Options7.text("from").pipe(
+      Options7.withDescription("Public linux/amd64 registry image, such as python:3.13 or ghcr.io/acme/tool:1"),
+      Options7.optional
+    ),
+    dockerfile: Options7.text("dockerfile").pipe(
+      Options7.withAlias("f"),
+      Options7.withDescription("Build from this Dockerfile instead"),
+      Options7.optional
+    ),
+    wait: Options7.boolean("wait").pipe(Options7.withDescription("Wait until the build finished")),
+    json: jsonOption2
+  },
+  (flags) => createImage(flags).pipe(Effect22.asVoid, reportErrors2("create the image"))
+).pipe(Command12.withDescription("Build a custom image from a registry image or a Dockerfile"));
+var removeImage = (idOrName, app) => Effect22.gen(function* () {
+  const apiClient = yield* ApiClientService;
+  const applicationId = yield* resolveApplicationId(app);
+  const images = yield* apiClient.request((client) => client.microvms.images.list({ applicationId }));
+  const image = images.find((candidate) => candidate.id === idOrName) ?? images.find((candidate) => !candidate.builtin && candidate.name === idOrName) ?? { id: idOrName, name: idOrName };
+  yield* apiClient.request((client) => client.microvms.images.delete(image.id));
+  yield* Console12.log(`Deleted image ${image.name}.`);
+});
+var imagesRemoveCommand = Command12.make(
+  "rm",
+  {
+    image: Args5.text({ name: "image" }).pipe(Args5.withDescription("Image ID or name")),
+    app: appOption6
+  },
+  ({ image, app }) => removeImage(image, app).pipe(reportErrors2("delete the image"))
+).pipe(Command12.withDescription("Delete a custom image"));
+var imagesCommand = Command12.make("images", {}, () => Effect22.void).pipe(
+  Command12.withDescription("Built-in and custom microVM images"),
+  Command12.withSubcommands([imagesListCommand, imagesCreateCommand, imagesRemoveCommand])
+);
+var SUBCOMMANDS = [
+  createCommand,
+  listCommand2,
+  getCommand,
+  execCommand,
+  shellCommand,
+  copyCommand,
+  stopCommand,
+  removeCommand2,
+  extendCommand,
+  imagesCommand
+];
+var microvmsCommand = Command12.make("microvms", {}, () => Effect22.void).pipe(
+  Command12.withDescription("Isolated Linux machines for running code: create, exec, shell, cp, stop"),
+  Command12.withSubcommands(SUBCOMMANDS)
+);
+var vmCommand = Command12.make("vm", {}, () => Effect22.void).pipe(
+  Command12.withDescription('Alias of "gigadrive microvms"'),
+  Command12.withSubcommands(SUBCOMMANDS)
+);
+
 // src/commands/platform/index.ts
-import { Command as Command13 } from "@effect/cli";
-import { Effect as Effect25 } from "effect";
+import { Command as Command14 } from "@effect/cli";
+import { Effect as Effect26 } from "effect";
 
 // src/commands/platform/deploy/index.ts
-import { Command as Command12, Options as Options7, Prompt as Prompt4 } from "@effect/cli";
-import { FileSystem as FileSystem9, Path as Path8 } from "@effect/platform";
+import { Command as Command13, Options as Options8, Prompt as Prompt4 } from "@effect/cli";
+import { FileSystem as FileSystem10, Path as Path9 } from "@effect/platform";
 import { formatFileSize } from "@gigadrive/commons";
-import { Console as Console12, Duration as Duration3, Effect as Effect24, Option as Option14, Schedule, Stream } from "effect";
+import { Console as Console13, Duration as Duration3, Effect as Effect25, Option as Option15, Schedule, Stream } from "effect";
 import * as os4 from "os";
 import * as path from "path";
 
 // src/services/archive.ts
-import { FileSystem as FileSystem8, Path as Path7 } from "@effect/platform";
+import { FileSystem as FileSystem9, Path as Path8 } from "@effect/platform";
 import { getFilesForPattern } from "@gigadrive/build-utils";
 import archiver from "archiver";
-import { Effect as Effect22 } from "effect";
+import { Effect as Effect23 } from "effect";
 import ignore from "ignore";
 import * as nodeFs from "fs";
 import * as nodeFsPromises from "fs/promises";
@@ -2980,15 +3875,15 @@ var CONTAINER_BUILD_FILE_PATTERNS = [
 ];
 var DOCKER_BUILD_IGNORE_FILE = ".dockerignore";
 var readIgnoreFile = (fs, ignorePath) => fs.readFileString(ignorePath, "utf8").pipe(
-  Effect22.map((content) => content.split("\n").filter((line) => line.trim() !== "")),
-  Effect22.catchAll(() => Effect22.succeed([]))
+  Effect23.map((content) => content.split("\n").filter((line) => line.trim() !== "")),
+  Effect23.catchAll(() => Effect23.succeed([]))
 );
-var collectIgnorePatterns = (fs, pathService, dir, baseDir, ignoreRules, ignoreFileNames) => Effect22.gen(function* () {
-  const items = yield* fs.readDirectory(dir).pipe(Effect22.mapError(() => new ArchiveCreateError({ message: `Failed to read directory: ${dir}` })));
+var collectIgnorePatterns = (fs, pathService, dir, baseDir, ignoreRules, ignoreFileNames) => Effect23.gen(function* () {
+  const items = yield* fs.readDirectory(dir).pipe(Effect23.mapError(() => new ArchiveCreateError({ message: `Failed to read directory: ${dir}` })));
   for (const item of items) {
     const fullPath = pathService.join(dir, item);
     const relativePath = pathService.relative(baseDir, fullPath);
-    const stat = yield* Effect22.tryPromise({
+    const stat = yield* Effect23.tryPromise({
       try: () => nodeFsPromises.lstat(fullPath),
       catch: () => new ArchiveCreateError({ message: `Failed to stat: ${fullPath}` })
     });
@@ -3008,8 +3903,8 @@ var collectIgnorePatterns = (fs, pathService, dir, baseDir, ignoreRules, ignoreF
       yield* collectIgnorePatterns(fs, pathService, fullPath, baseDir, ignoreRules, ignoreFileNames);
     }
   }
-}).pipe(Effect22.catchAll(() => Effect22.void));
-var initializeIgnoreRules = (fs, pathService, baseDir, useIgnoreFiles, useManagedIgnore, buildsContainerImages) => Effect22.gen(function* () {
+}).pipe(Effect23.catchAll(() => Effect23.void));
+var initializeIgnoreRules = (fs, pathService, baseDir, useIgnoreFiles, useManagedIgnore, buildsContainerImages) => Effect23.gen(function* () {
   const ignoreRules = ignore();
   const ignoreFileNames = buildsContainerImages ? IGNORE_FILE_NAMES.filter((name) => name !== DOCKER_BUILD_IGNORE_FILE) : IGNORE_FILE_NAMES;
   if (useManagedIgnore) {
@@ -3030,14 +3925,14 @@ var initializeIgnoreRules = (fs, pathService, baseDir, useIgnoreFiles, useManage
   }
   return ignoreRules;
 });
-var getFilesToInclude = (fs, pathService, dir, ignoreRules) => Effect22.gen(function* () {
+var getFilesToInclude = (fs, pathService, dir, ignoreRules) => Effect23.gen(function* () {
   const filesToInclude = [];
-  const walkDir = (currentDir) => Effect22.gen(function* () {
-    const items = yield* fs.readDirectory(currentDir).pipe(Effect22.mapError(() => new ArchiveCreateError({ message: `Failed to read directory: ${currentDir}` })));
+  const walkDir = (currentDir) => Effect23.gen(function* () {
+    const items = yield* fs.readDirectory(currentDir).pipe(Effect23.mapError(() => new ArchiveCreateError({ message: `Failed to read directory: ${currentDir}` })));
     for (const item of items) {
       const fullPath = pathService.join(currentDir, item);
       const relativePath = pathService.relative(dir, fullPath);
-      const stat = yield* Effect22.tryPromise({
+      const stat = yield* Effect23.tryPromise({
         try: () => nodeFsPromises.lstat(fullPath),
         catch: () => new ArchiveCreateError({ message: `Failed to stat: ${fullPath}` })
       });
@@ -3051,19 +3946,19 @@ var getFilesToInclude = (fs, pathService, dir, ignoreRules) => Effect22.gen(func
         }
       }
     }
-  }).pipe(Effect22.catchAll(() => Effect22.void));
+  }).pipe(Effect23.catchAll(() => Effect23.void));
   yield* walkDir(dir);
   return filesToInclude;
 });
-var ArchiveService = class extends Effect22.Service()("ArchiveService", {
+var ArchiveService = class extends Effect23.Service()("ArchiveService", {
   accessors: true,
-  effect: Effect22.gen(function* () {
-    const fs = yield* FileSystem8.FileSystem;
-    const pathService = yield* Path7.Path;
-    const createZipArchive = Effect22.fn("ArchiveService.createZipArchive")(function* (inputDir, outputFile, options = {}) {
-      yield* Effect22.annotateCurrentSpan("inputDir", inputDir);
-      yield* Effect22.annotateCurrentSpan("outputFile", outputFile);
-      yield* Effect22.log("Creating zip archive", { inputDir, outputFile });
+  effect: Effect23.gen(function* () {
+    const fs = yield* FileSystem9.FileSystem;
+    const pathService = yield* Path8.Path;
+    const createZipArchive = Effect23.fn("ArchiveService.createZipArchive")(function* (inputDir, outputFile, options = {}) {
+      yield* Effect23.annotateCurrentSpan("inputDir", inputDir);
+      yield* Effect23.annotateCurrentSpan("outputFile", outputFile);
+      yield* Effect23.log("Creating zip archive", { inputDir, outputFile });
       const ignoreRules = yield* initializeIgnoreRules(
         fs,
         pathService,
@@ -3072,7 +3967,7 @@ var ArchiveService = class extends Effect22.Service()("ArchiveService", {
         options.useManagedIgnore !== false,
         options.buildsContainerImages === true
       );
-      const filesToInclude = options.whitelist ? yield* Effect22.tryPromise({
+      const filesToInclude = options.whitelist ? yield* Effect23.tryPromise({
         try: () => Promise.all(
           options.whitelist.map((file) => getFilesForPattern(file, inputDir, options.excludeFiles ?? []))
         ),
@@ -3080,25 +3975,25 @@ var ArchiveService = class extends Effect22.Service()("ArchiveService", {
           message: "Failed to resolve whitelist patterns",
           cause: error instanceof Error ? error.message : String(error)
         })
-      }) : yield* Effect22.gen(function* () {
+      }) : yield* Effect23.gen(function* () {
         if (options.excludeFiles && options.excludeFiles.length > 0) {
           ignoreRules.add(options.excludeFiles);
         }
         return yield* getFilesToInclude(fs, pathService, inputDir, ignoreRules).pipe(
-          Effect22.map((files) => [files])
+          Effect23.map((files) => [files])
         );
       });
-      const archiveExists = yield* fs.exists(outputFile).pipe(Effect22.catchAll(() => Effect22.succeed(false)));
+      const archiveExists = yield* fs.exists(outputFile).pipe(Effect23.catchAll(() => Effect23.succeed(false)));
       if (archiveExists) {
         yield* fs.remove(outputFile).pipe(
-          Effect22.mapError(
+          Effect23.mapError(
             (error) => new ArchiveCreateError({
               message: `Failed to remove existing archive: ${String(error)}`
             })
           )
         );
       }
-      yield* Effect22.tryPromise({
+      yield* Effect23.tryPromise({
         try: () => new Promise((resolve, reject) => {
           const output = nodeFs.createWriteStream(outputFile);
           const archive = archiver("zip", { zlib: { level: 9 } });
@@ -3117,14 +4012,14 @@ var ArchiveService = class extends Effect22.Service()("ArchiveService", {
         })
       });
       const fileInfo = yield* fs.stat(outputFile).pipe(
-        Effect22.mapError(
+        Effect23.mapError(
           (error) => new ArchiveCreateError({
             message: `Failed to stat archive: ${String(error)}`
           })
         )
       );
       const size = Number(fileInfo.size);
-      yield* Effect22.log("Archive created", { size });
+      yield* Effect23.log("Archive created", { size });
       return { path: outputFile, size };
     });
     return { createZipArchive };
@@ -3133,32 +4028,32 @@ var ArchiveService = class extends Effect22.Service()("ArchiveService", {
 };
 
 // src/services/deployment-api.ts
-import { Effect as Effect23 } from "effect";
-var DeploymentApiService = class extends Effect23.Service()("DeploymentApiService", {
+import { Effect as Effect24 } from "effect";
+var DeploymentApiService = class extends Effect24.Service()("DeploymentApiService", {
   accessors: true,
   dependencies: [ApiClientService.Default],
-  effect: Effect23.gen(function* () {
+  effect: Effect24.gen(function* () {
     const apiClient = yield* ApiClientService;
     const getClient = apiClient.getClient.pipe(
-      Effect23.mapError((err) => new DeploymentAuthError({ message: `Authentication failed: ${err.message}` }))
+      Effect24.mapError((err) => new DeploymentAuthError({ message: `Authentication failed: ${err.message}` }))
     );
-    const createDeployment = Effect23.fn("DeploymentApiService.createDeployment")(function* (applicationId) {
-      yield* Effect23.annotateCurrentSpan("applicationId", applicationId);
-      yield* Effect23.log("Creating deployment", { applicationId });
+    const createDeployment = Effect24.fn("DeploymentApiService.createDeployment")(function* (applicationId) {
+      yield* Effect24.annotateCurrentSpan("applicationId", applicationId);
+      yield* Effect24.log("Creating deployment", { applicationId });
       const client = yield* getClient;
-      const deployment = yield* Effect23.tryPromise({
+      const deployment = yield* Effect24.tryPromise({
         try: () => client.deployments.create({ applicationId }),
         catch: (error) => new DeploymentCreateError({
           message: `Failed to create deployment: ${error instanceof Error ? error.message : String(error)}`
         })
       });
-      yield* Effect23.log("Deployment created", { deploymentId: deployment.id });
+      yield* Effect24.log("Deployment created", { deploymentId: deployment.id });
       return deployment.id;
     });
-    const startMultipartUpload = Effect23.fn("DeploymentApiService.startMultipartUpload")(function* (deploymentId) {
-      yield* Effect23.annotateCurrentSpan("deploymentId", deploymentId);
+    const startMultipartUpload = Effect24.fn("DeploymentApiService.startMultipartUpload")(function* (deploymentId) {
+      yield* Effect24.annotateCurrentSpan("deploymentId", deploymentId);
       const client = yield* getClient;
-      const result = yield* Effect23.tryPromise({
+      const result = yield* Effect24.tryPromise({
         try: () => client.deployments.startUpload(deploymentId),
         catch: (error) => new UploadStartError({
           message: `Failed to start multipart upload: ${error instanceof Error ? error.message : String(error)}`
@@ -3166,9 +4061,9 @@ var DeploymentApiService = class extends Effect23.Service()("DeploymentApiServic
       });
       return result.uploadId;
     });
-    const getPresignedUrl = Effect23.fn("DeploymentApiService.getPresignedUrl")(function* (deploymentId, uploadId, partNumber) {
+    const getPresignedUrl = Effect24.fn("DeploymentApiService.getPresignedUrl")(function* (deploymentId, uploadId, partNumber) {
       const client = yield* getClient;
-      const result = yield* Effect23.tryPromise({
+      const result = yield* Effect24.tryPromise({
         try: () => client.deployments.getPresignedUrl(deploymentId, uploadId, partNumber),
         catch: (error) => new PresignedUrlError({
           message: `Failed to get presigned URL: ${error instanceof Error ? error.message : String(error)}`,
@@ -3177,11 +4072,11 @@ var DeploymentApiService = class extends Effect23.Service()("DeploymentApiServic
       });
       return result.url;
     });
-    const uploadPart = Effect23.fn("DeploymentApiService.uploadPart")(function* (presignedUrl, data, partNumber) {
-      yield* Effect23.annotateCurrentSpan("partNumber", partNumber);
-      yield* Effect23.annotateCurrentSpan("size", data.length);
+    const uploadPart = Effect24.fn("DeploymentApiService.uploadPart")(function* (presignedUrl, data, partNumber) {
+      yield* Effect24.annotateCurrentSpan("partNumber", partNumber);
+      yield* Effect24.annotateCurrentSpan("size", data.length);
       const client = yield* getClient;
-      const result = yield* Effect23.tryPromise({
+      const result = yield* Effect24.tryPromise({
         try: () => client.deployments.uploadPart(presignedUrl, data, partNumber),
         catch: (error) => new UploadPartError({
           message: `Failed to upload part ${partNumber}: ${error instanceof Error ? error.message : String(error)}`,
@@ -3190,21 +4085,21 @@ var DeploymentApiService = class extends Effect23.Service()("DeploymentApiServic
       });
       return result;
     });
-    const completeUpload = Effect23.fn("DeploymentApiService.completeUpload")(function* (deploymentId, uploadId, parts) {
-      yield* Effect23.annotateCurrentSpan("deploymentId", deploymentId);
-      yield* Effect23.annotateCurrentSpan("partsCount", parts.length);
+    const completeUpload = Effect24.fn("DeploymentApiService.completeUpload")(function* (deploymentId, uploadId, parts) {
+      yield* Effect24.annotateCurrentSpan("deploymentId", deploymentId);
+      yield* Effect24.annotateCurrentSpan("partsCount", parts.length);
       const client = yield* getClient;
-      yield* Effect23.tryPromise({
+      yield* Effect24.tryPromise({
         try: () => client.deployments.completeUpload(deploymentId, uploadId, parts),
         catch: (error) => new UploadCompleteError({
           message: `Failed to complete upload: ${error instanceof Error ? error.message : String(error)}`
         })
       });
-      yield* Effect23.log("Upload completed successfully");
+      yield* Effect24.log("Upload completed successfully");
     });
-    const getDeploymentStatus = Effect23.fn("DeploymentApiService.getDeploymentStatus")(function* (deploymentId) {
+    const getDeploymentStatus = Effect24.fn("DeploymentApiService.getDeploymentStatus")(function* (deploymentId) {
       const client = yield* getClient;
-      const deployment = yield* Effect23.tryPromise({
+      const deployment = yield* Effect24.tryPromise({
         try: () => client.deployments.get(deploymentId),
         catch: (error) => new DeploymentStatusError({
           message: `Failed to get deployment status: ${error instanceof Error ? error.message : String(error)}`
@@ -3212,9 +4107,9 @@ var DeploymentApiService = class extends Effect23.Service()("DeploymentApiServic
       });
       return deployment.status;
     });
-    const getLogs = Effect23.fn("DeploymentApiService.getLogs")(function* (deploymentId, options) {
+    const getLogs = Effect24.fn("DeploymentApiService.getLogs")(function* (deploymentId, options) {
       const client = yield* getClient;
-      const result = yield* Effect23.tryPromise({
+      const result = yield* Effect24.tryPromise({
         try: () => client.deployments.getLogs(deploymentId, options),
         catch: (error) => new DeploymentLogsFetchError({
           message: `Failed to get logs: ${error instanceof Error ? error.message : String(error)}`
@@ -3222,9 +4117,9 @@ var DeploymentApiService = class extends Effect23.Service()("DeploymentApiServic
       });
       return result;
     });
-    const getHostnames = Effect23.fn("DeploymentApiService.getHostnames")(function* (deploymentId) {
+    const getHostnames = Effect24.fn("DeploymentApiService.getHostnames")(function* (deploymentId) {
       const client = yield* getClient;
-      const result = yield* Effect23.tryPromise({
+      const result = yield* Effect24.tryPromise({
         try: () => client.deployments.getHostnames(deploymentId),
         catch: (error) => new DeploymentHostnamesFetchError({
           message: `Failed to get hostnames: ${error instanceof Error ? error.message : String(error)}`
@@ -3247,32 +4142,32 @@ var DeploymentApiService = class extends Effect23.Service()("DeploymentApiServic
 };
 
 // src/commands/platform/deploy/index.ts
-var appOption6 = Options7.text("app").pipe(
-  Options7.withAlias("a"),
-  Options7.withDescription("Application ID to deploy to (overrides the linked application)"),
-  Options7.optional
+var appOption7 = Options8.text("app").pipe(
+  Options8.withAlias("a"),
+  Options8.withDescription("Application ID to deploy to (overrides the linked application)"),
+  Options8.optional
 );
-var orgOption6 = Options7.text("org").pipe(
-  Options7.withAlias("o"),
-  Options7.withDescription("Organization ID to use when automatically creating an application"),
-  Options7.optional
+var orgOption6 = Options8.text("org").pipe(
+  Options8.withAlias("o"),
+  Options8.withDescription("Organization ID to use when automatically creating an application"),
+  Options8.optional
 );
-var nameOption2 = Options7.text("name").pipe(
-  Options7.withAlias("n"),
-  Options7.withDescription("Application name to use when automatically creating an application"),
-  Options7.optional
+var nameOption2 = Options8.text("name").pipe(
+  Options8.withAlias("n"),
+  Options8.withDescription("Application name to use when automatically creating an application"),
+  Options8.optional
 );
-var createAndLinkDeploymentApplication = (input) => Effect24.gen(function* () {
+var createAndLinkDeploymentApplication = (input) => Effect25.gen(function* () {
   const projectLink = yield* ProjectLinkService;
   const apiClient = yield* ApiClientService;
   const { items: organizations } = yield* apiClient.request((client) => client.organizations.list());
-  const availableOrganizations = Option14.match(input.org, {
+  const availableOrganizations = Option15.match(input.org, {
     onNone: () => organizations,
     onSome: (organizationId) => organizations.filter((organization2) => organization2.id === organizationId)
   });
   if (availableOrganizations.length === 0) {
     return yield* new NoOrganizationsFoundError({
-      message: Option14.match(input.org, {
+      message: Option15.match(input.org, {
         onNone: () => 'No organization is available for this deployment. Create an organization, then run "gigadrive deploy" again.',
         onSome: (organizationId) => `Organization "${organizationId}" was not found among your organizations.`
       })
@@ -3288,7 +4183,7 @@ var createAndLinkDeploymentApplication = (input) => Effect24.gen(function* () {
     })
   );
   const inferredName = path.basename(input.cwd) || "Application";
-  const applicationName = Option14.match(input.name, {
+  const applicationName = Option15.match(input.name, {
     onNone: () => inferredName,
     onSome: (name) => name
   }).trim();
@@ -3302,37 +4197,37 @@ var createAndLinkDeploymentApplication = (input) => Effect24.gen(function* () {
     applicationId: application.id,
     organizationId: organization.id
   });
-  yield* Console12.log(`Created and linked application ${application.name} (${application.id}).`);
+  yield* Console13.log(`Created and linked application ${application.name} (${application.id}).`);
   return application.id;
 });
-var resolveLinkedDeploymentApplication = (input) => Effect24.gen(function* () {
+var resolveLinkedDeploymentApplication = (input) => Effect25.gen(function* () {
   const projectLink = yield* ProjectLinkService;
   const existingLink = yield* projectLink.load(input.cwd);
-  return yield* Option14.match(existingLink, {
+  return yield* Option15.match(existingLink, {
     onNone: () => createAndLinkDeploymentApplication(input),
-    onSome: (link) => Effect24.succeed(link.applicationId)
+    onSome: (link) => Effect25.succeed(link.applicationId)
   });
 });
-var resolveDeploymentApplication = (input) => Option14.match(input.app, {
+var resolveDeploymentApplication = (input) => Option15.match(input.app, {
   onNone: () => resolveLinkedDeploymentApplication(input),
-  onSome: Effect24.succeed
+  onSome: Effect25.succeed
 });
-var deployCommand = Command12.make(
+var deployCommand = Command13.make(
   "deploy",
-  { app: appOption6, org: orgOption6, name: nameOption2 },
-  ({ app, org, name }) => Effect24.gen(function* () {
+  { app: appOption7, org: orgOption6, name: nameOption2 },
+  ({ app, org, name }) => Effect25.gen(function* () {
     const projectConfig = yield* ProjectConfigService;
     const deploymentApi = yield* DeploymentApiService;
     const archiveService = yield* ArchiveService;
-    const pathService = yield* Path8.Path;
+    const pathService = yield* Path9.Path;
     const cwd = process.cwd();
-    yield* Effect24.log("Starting deploy command");
+    yield* Effect25.log("Starting deploy command");
     const { config } = yield* projectConfig.resolve(cwd);
     const applicationId = yield* resolveDeploymentApplication({ app, org, name, cwd });
-    yield* Console12.log("Creating deployment...");
+    yield* Console13.log("Creating deployment...");
     const deploymentId = yield* deploymentApi.createDeployment(applicationId);
-    yield* Console12.log(`Deployment ID: ${deploymentId}`);
-    yield* Console12.log("Creating archive...");
+    yield* Console13.log(`Deployment ID: ${deploymentId}`);
+    yield* Console13.log("Creating archive...");
     const archivePath = pathService.join(os4.tmpdir(), `project-${Date.now()}.zip`);
     const archive = yield* archiveService.createZipArchive(config.userArchive?.rootOverwrite || cwd, archivePath, {
       whitelist: config.userArchive?.fileWhitelist,
@@ -3342,68 +4237,68 @@ var deployCommand = Command12.make(
         ...config.sidecars ?? []
       ].some((container) => container.source.type === "dockerfile")
     });
-    yield* Console12.log(`Archive created (${formatFileSize(archive.size)})`);
-    yield* Console12.log("Uploading archive...");
+    yield* Console13.log(`Archive created (${formatFileSize(archive.size)})`);
+    yield* Console13.log("Uploading archive...");
     yield* uploadArchive(deploymentId, archivePath, archive.size);
-    yield* Console12.log("Upload complete.");
-    yield* Console12.log("The deployment pipeline is now being provisioned. This may take a few seconds.");
+    yield* Console13.log("Upload complete.");
+    yield* Console13.log("The deployment pipeline is now being provisioned. This may take a few seconds.");
     yield* pollDeployment(deploymentId);
   }).pipe(
-    Effect24.catchTags({
-      QuitException: () => Console12.log("Cancelled."),
-      NotAuthenticatedError: (err) => Console12.error('You are not logged in. Run "gigadrive login" to authenticate.').pipe(
-        Effect24.andThen(Effect24.fail(err))
+    Effect25.catchTags({
+      QuitException: () => Console13.log("Cancelled."),
+      NotAuthenticatedError: (err) => Console13.error('You are not logged in. Run "gigadrive login" to authenticate.').pipe(
+        Effect25.andThen(Effect25.fail(err))
       ),
-      ApiRequestError: (err) => Console12.error(`Application setup failed: ${err.message}`).pipe(Effect24.andThen(Effect24.fail(err))),
-      NoOrganizationsFoundError: (err) => Console12.error(err.message).pipe(Effect24.andThen(Effect24.fail(err))),
-      ProjectLinkReadError: (err) => Console12.error(err.message).pipe(Effect24.andThen(Effect24.fail(err))),
-      ProjectLinkWriteError: (err) => Console12.error(err.message).pipe(Effect24.andThen(Effect24.fail(err))),
-      ConfigNotFoundError: (err) => Console12.error(err.message).pipe(Effect24.andThen(Effect24.fail(err))),
-      ConfigParseError: (err) => Console12.error(`Config parse error: ${err.message}`).pipe(Effect24.andThen(Effect24.fail(err))),
-      ConfigValidationError: (err) => Effect24.gen(function* () {
+      ApiRequestError: (err) => Console13.error(`Application setup failed: ${err.message}`).pipe(Effect25.andThen(Effect25.fail(err))),
+      NoOrganizationsFoundError: (err) => Console13.error(err.message).pipe(Effect25.andThen(Effect25.fail(err))),
+      ProjectLinkReadError: (err) => Console13.error(err.message).pipe(Effect25.andThen(Effect25.fail(err))),
+      ProjectLinkWriteError: (err) => Console13.error(err.message).pipe(Effect25.andThen(Effect25.fail(err))),
+      ConfigNotFoundError: (err) => Console13.error(err.message).pipe(Effect25.andThen(Effect25.fail(err))),
+      ConfigParseError: (err) => Console13.error(`Config parse error: ${err.message}`).pipe(Effect25.andThen(Effect25.fail(err))),
+      ConfigValidationError: (err) => Effect25.gen(function* () {
         for (const e of err.errors) {
-          yield* Console12.error(e);
+          yield* Console13.error(e);
         }
-        yield* Console12.error(err.message);
-      }).pipe(Effect24.andThen(Effect24.fail(err))),
-      DeploymentCreateError: (err) => Console12.error(`Deployment creation failed: ${err.message}`).pipe(Effect24.andThen(Effect24.fail(err))),
-      ArchiveCreateError: (err) => Console12.error(`Archive creation failed: ${err.message}`).pipe(Effect24.andThen(Effect24.fail(err))),
-      UploadStartError: (err) => Console12.error(`Upload failed: ${err.message}`).pipe(Effect24.andThen(Effect24.fail(err))),
-      UploadPartError: (err) => Console12.error(`Upload failed: ${err.message}`).pipe(Effect24.andThen(Effect24.fail(err))),
-      UploadCompleteError: (err) => Console12.error(`Upload failed: ${err.message}`).pipe(Effect24.andThen(Effect24.fail(err))),
-      PresignedUrlError: (err) => Console12.error(`Upload failed: ${err.message}`).pipe(Effect24.andThen(Effect24.fail(err))),
-      DeploymentAuthError: (err) => Console12.error(`Authentication failed: ${err.message}`).pipe(Effect24.andThen(Effect24.fail(err))),
-      DeploymentFailedError: (err) => Console12.error(err.message).pipe(Effect24.andThen(Effect24.fail(err)))
+        yield* Console13.error(err.message);
+      }).pipe(Effect25.andThen(Effect25.fail(err))),
+      DeploymentCreateError: (err) => Console13.error(`Deployment creation failed: ${err.message}`).pipe(Effect25.andThen(Effect25.fail(err))),
+      ArchiveCreateError: (err) => Console13.error(`Archive creation failed: ${err.message}`).pipe(Effect25.andThen(Effect25.fail(err))),
+      UploadStartError: (err) => Console13.error(`Upload failed: ${err.message}`).pipe(Effect25.andThen(Effect25.fail(err))),
+      UploadPartError: (err) => Console13.error(`Upload failed: ${err.message}`).pipe(Effect25.andThen(Effect25.fail(err))),
+      UploadCompleteError: (err) => Console13.error(`Upload failed: ${err.message}`).pipe(Effect25.andThen(Effect25.fail(err))),
+      PresignedUrlError: (err) => Console13.error(`Upload failed: ${err.message}`).pipe(Effect25.andThen(Effect25.fail(err))),
+      DeploymentAuthError: (err) => Console13.error(`Authentication failed: ${err.message}`).pipe(Effect25.andThen(Effect25.fail(err))),
+      DeploymentFailedError: (err) => Console13.error(err.message).pipe(Effect25.andThen(Effect25.fail(err)))
     })
   )
 );
-var uploadArchive = (deploymentId, archivePath, fileSize) => Effect24.gen(function* () {
+var uploadArchive = (deploymentId, archivePath, fileSize) => Effect25.gen(function* () {
   const deploymentApi = yield* DeploymentApiService;
-  const fs = yield* FileSystem9.FileSystem;
+  const fs = yield* FileSystem10.FileSystem;
   const uploadId = yield* deploymentApi.startMultipartUpload(deploymentId);
   const FILE_CHUNK_SIZE = 10 * 1024 * 1024;
   const numChunks = Math.ceil(fileSize / FILE_CHUNK_SIZE);
-  yield* Effect24.log("Starting multipart upload", { uploadId, numChunks, fileSize });
-  const parts = yield* Effect24.all(
+  yield* Effect25.log("Starting multipart upload", { uploadId, numChunks, fileSize });
+  const parts = yield* Effect25.all(
     Array.from({ length: numChunks }, (_, i) => {
       const partNumber = i + 1;
       const start = i * FILE_CHUNK_SIZE;
       const bytesToRead = partNumber < numChunks ? FILE_CHUNK_SIZE : fileSize - start;
-      return Effect24.gen(function* () {
+      return Effect25.gen(function* () {
         const presignedUrl = yield* deploymentApi.getPresignedUrl(deploymentId, uploadId, partNumber);
         const chunkData = yield* Stream.runCollect(fs.stream(archivePath, { offset: start, bytesToRead })).pipe(
-          Effect24.map((chunks) => {
+          Effect25.map((chunks) => {
             const arrays = Array.from(chunks);
             return Buffer.concat(arrays);
           }),
-          Effect24.mapError(
+          Effect25.mapError(
             (error) => new UploadPartError({
               message: `Failed to read chunk ${partNumber}: ${String(error)}`,
               partNumber
             })
           )
         );
-        yield* Effect24.log(`Uploading part ${partNumber}/${numChunks}`, { size: chunkData.length });
+        yield* Effect25.log(`Uploading part ${partNumber}/${numChunks}`, { size: chunkData.length });
         return yield* deploymentApi.uploadPart(presignedUrl, chunkData, partNumber);
       });
     }),
@@ -3411,20 +4306,20 @@ var uploadArchive = (deploymentId, archivePath, fileSize) => Effect24.gen(functi
   );
   yield* deploymentApi.completeUpload(deploymentId, uploadId, parts);
 });
-var pollDeployment = (deploymentId) => Effect24.gen(function* () {
+var pollDeployment = (deploymentId) => Effect25.gen(function* () {
   const deploymentApi = yield* DeploymentApiService;
   let lastStatus = "PENDING";
   let logOffset = 0;
-  yield* Console12.log("Status: Pending");
-  yield* Effect24.repeat(
-    Effect24.gen(function* () {
-      const newStatus = yield* deploymentApi.getDeploymentStatus(deploymentId).pipe(Effect24.catchTag("DeploymentStatusError", () => Effect24.succeed(lastStatus)));
+  yield* Console13.log("Status: Pending");
+  yield* Effect25.repeat(
+    Effect25.gen(function* () {
+      const newStatus = yield* deploymentApi.getDeploymentStatus(deploymentId).pipe(Effect25.catchTag("DeploymentStatusError", () => Effect25.succeed(lastStatus)));
       if (newStatus !== lastStatus) {
         lastStatus = newStatus;
         const label = newStatus.charAt(0) + newStatus.slice(1).toLowerCase();
-        yield* Console12.log(`Status: ${label}`);
+        yield* Console13.log(`Status: ${label}`);
       }
-      const logsPage = yield* deploymentApi.getLogs(deploymentId, { offset: logOffset, limit: 100 }).pipe(Effect24.catchTag("DeploymentLogsFetchError", () => Effect24.succeed(null)));
+      const logsPage = yield* deploymentApi.getLogs(deploymentId, { offset: logOffset, limit: 100 }).pipe(Effect25.catchTag("DeploymentLogsFetchError", () => Effect25.succeed(null)));
       if (logsPage) {
         for (const logEntry of logsPage.items) {
           logOffset++;
@@ -3432,17 +4327,17 @@ var pollDeployment = (deploymentId) => Effect24.gen(function* () {
         }
       }
       if (newStatus === "ACTIVE") {
-        const hostnames = yield* deploymentApi.getHostnames(deploymentId).pipe(Effect24.catchTag("DeploymentHostnamesFetchError", () => Effect24.succeed([])));
+        const hostnames = yield* deploymentApi.getHostnames(deploymentId).pipe(Effect25.catchTag("DeploymentHostnamesFetchError", () => Effect25.succeed([])));
         const active = hostnames.find((h) => h.active) ?? hostnames.at(0);
         if (active) {
-          yield* Console12.log(`Deployed to https://${active.hostname}`);
+          yield* Console13.log(`Deployed to https://${active.hostname}`);
         } else {
-          yield* Console12.log("Deployment is live.");
+          yield* Console13.log("Deployment is live.");
         }
-        return yield* Effect24.fail("done");
+        return yield* Effect25.fail("done");
       }
       if (newStatus === "FAILED") {
-        return yield* Effect24.fail(
+        return yield* Effect25.fail(
           new DeploymentFailedError({
             message: "The deployment failed. Please check the logs for more information."
           })
@@ -3451,67 +4346,67 @@ var pollDeployment = (deploymentId) => Effect24.gen(function* () {
     }),
     Schedule.addDelay(Schedule.forever, () => Duration3.seconds(1))
   ).pipe(
-    Effect24.catchAll((err) => {
-      if (err === "done") return Effect24.void;
-      return Effect24.fail(err);
+    Effect25.catchAll((err) => {
+      if (err === "done") return Effect25.void;
+      return Effect25.fail(err);
     })
   );
 });
 var printLog = (logEntry) => {
   switch (logEntry.type) {
     case "ERROR":
-      return Console12.error(logEntry.message);
+      return Console13.error(logEntry.message);
     case "WARN":
-      return Console12.warn(logEntry.message);
+      return Console13.warn(logEntry.message);
     default:
-      return Console12.log(logEntry.message);
+      return Console13.log(logEntry.message);
   }
 };
 
 // src/commands/platform/index.ts
-var platformBase = Command13.make("platform", {}, () => Effect25.void);
-var platformCommand = platformBase.pipe(Command13.withSubcommands([deployCommand]));
+var platformBase = Command14.make("platform", {}, () => Effect26.void);
+var platformCommand = platformBase.pipe(Command14.withSubcommands([deployCommand]));
 
 // src/commands/setup/index.ts
-import { Args as Args5, Command as Command14, Options as Options8, Prompt as Prompt5 } from "@effect/cli";
-import { Console as Console13, Effect as Effect26, Option as Option15 } from "effect";
-var fileArg2 = Args5.text({ name: "file" }).pipe(
-  Args5.withDescription("Output file to write (default: .env.local)"),
-  Args5.optional
+import { Args as Args6, Command as Command15, Options as Options9, Prompt as Prompt5 } from "@effect/cli";
+import { Console as Console14, Effect as Effect27, Option as Option16 } from "effect";
+var fileArg2 = Args6.text({ name: "file" }).pipe(
+  Args6.withDescription("Output file to write (default: .env.local)"),
+  Args6.optional
 );
-var appOption7 = Options8.text("app").pipe(
-  Options8.withAlias("a"),
-  Options8.withDescription("Application ID to set up (skips the interactive picker)"),
-  Options8.optional
+var appOption8 = Options9.text("app").pipe(
+  Options9.withAlias("a"),
+  Options9.withDescription("Application ID to set up (skips the interactive picker)"),
+  Options9.optional
 );
-var orgOption7 = Options8.text("org").pipe(
-  Options8.withAlias("o"),
-  Options8.withDescription("Only list applications belonging to this organization ID when picking"),
-  Options8.optional
+var orgOption7 = Options9.text("org").pipe(
+  Options9.withAlias("o"),
+  Options9.withDescription("Only list applications belonging to this organization ID when picking"),
+  Options9.optional
 );
-var environmentOption2 = Options8.text("environment").pipe(
-  Options8.withAlias("e"),
-  Options8.withDescription("Environment slug to resolve overrides for (e.g. preview)"),
-  Options8.optional
+var environmentOption2 = Options9.text("environment").pipe(
+  Options9.withAlias("e"),
+  Options9.withDescription("Environment slug to resolve overrides for (e.g. preview)"),
+  Options9.optional
 );
-var yesOption3 = Options8.boolean("yes").pipe(
-  Options8.withAlias("y"),
-  Options8.withDescription("Overwrite an existing file without confirmation")
+var yesOption3 = Options9.boolean("yes").pipe(
+  Options9.withAlias("y"),
+  Options9.withDescription("Overwrite an existing file without confirmation")
 );
-var rotateOption2 = Options8.boolean("rotate").pipe(
-  Options8.withDescription("Force a fresh API key, revoking the previous one")
+var rotateOption2 = Options9.boolean("rotate").pipe(
+  Options9.withDescription("Force a fresh API key, revoking the previous one")
 );
-var setupCommand = Command14.make(
+var setupCommand = Command15.make(
   "setup",
   {
     file: fileArg2,
-    app: appOption7,
+    app: appOption8,
     org: orgOption7,
     environment: environmentOption2,
     yes: yesOption3,
     rotate: rotateOption2
   },
-  ({ file, app, org, environment, yes, rotate }) => Effect26.gen(function* () {
+  ({ file, app, org, environment, yes, rotate }) => Effect27.gen(function* () {
     const apiClient = yield* ApiClientService;
     const projectLink = yield* ProjectLinkService;
     const envFile = yield* EnvFileService;
@@ -3519,29 +4414,29 @@ var setupCommand = Command14.make(
     const cwd = process.cwd();
     const existingLink = yield* projectLink.load(cwd);
     let applicationId;
-    if (Option15.isSome(existingLink)) {
+    if (Option16.isSome(existingLink)) {
       applicationId = existingLink.value.applicationId;
-      if (Option15.isSome(app) || Option15.isSome(org)) {
-        yield* Console13.log(
+      if (Option16.isSome(app) || Option16.isSome(org)) {
+        yield* Console14.log(
           `Note: this directory is already linked to ${applicationId}; ignoring --app/--org. Run "gigadrive unlink" first to target a different application.`
         );
       }
     } else {
-      const organizationId = Option15.getOrUndefined(org);
+      const organizationId = Option16.getOrUndefined(org);
       const { items: apps } = yield* apiClient.request((client) => client.applications.list({ organizationId }));
       if (apps.length === 0) {
-        return yield* Effect26.fail(
+        return yield* Effect27.fail(
           new NoApplicationsFoundError({
             message: 'No applications found. Create one in the Gigadrive console, then run "gigadrive setup" again.'
           })
         );
       }
-      const explicitAppId = Option15.getOrUndefined(app);
+      const explicitAppId = Option16.getOrUndefined(app);
       let chosen;
       if (explicitAppId !== void 0) {
         const match = apps.find((a) => a.id === explicitAppId);
         if (match === void 0) {
-          return yield* Effect26.fail(
+          return yield* Effect27.fail(
             new ApplicationNotFoundError({
               message: `Application "${explicitAppId}" was not found among your applications.`
             })
@@ -3560,83 +4455,83 @@ var setupCommand = Command14.make(
       }
       applicationId = chosen.id;
       yield* projectLink.save(cwd, { applicationId, organizationId: chosen.organization.id });
-      yield* Console13.log(`Linked this directory to application ${applicationId}.`);
+      yield* Console14.log(`Linked this directory to application ${applicationId}.`);
     }
-    const target = Option15.getOrElse(file, () => ".env.local");
-    const environmentSlug = Option15.getOrUndefined(environment);
+    const target = Option16.getOrElse(file, () => ".env.local");
+    const environmentSlug = Option16.getOrUndefined(environment);
     const { items, omittedSensitive } = yield* apiClient.request(
       (client) => client.applications.envVars.pull(applicationId, environmentSlug ? { environment: environmentSlug } : void 0)
     );
     const existing = yield* envFile.read(target);
-    if (Option15.isSome(existing) && !yes) {
+    if (Option16.isSome(existing) && !yes) {
       const overwrite = yield* Prompt5.run(
         Prompt5.confirm({ message: `${target} already exists. Overwrite?`, initial: false })
       );
       if (!overwrite) {
-        return yield* Console13.log("Cancelled.");
+        return yield* Console14.log("Cancelled.");
       }
     }
     const credentialEntries2 = yield* localCredentials.provision({
       applicationId,
       rotate,
-      existingContent: Option15.getOrUndefined(existing)
+      existingContent: Option16.getOrUndefined(existing)
     });
     const entries = [...items.map((v) => ({ key: v.key, value: v.value })), ...credentialEntries2];
     yield* envFile.write(target, entries);
     const gitignored = yield* envFile.ensureGitignored(cwd, target);
-    yield* Console13.log("\nLocal dev environment ready.");
-    yield* Console13.log(`  \u2022 Wrote ${items.length} variable(s) and API credentials to ${target}.`);
+    yield* Console14.log("\nLocal dev environment ready.");
+    yield* Console14.log(`  \u2022 Wrote ${items.length} variable(s) and API credentials to ${target}.`);
     if (omittedSensitive > 0) {
-      yield* Console13.log(
+      yield* Console14.log(
         `  \u2022 Skipped ${omittedSensitive} sensitive variable(s) (only production/preview hold secrets).`
       );
     }
     if (gitignored) {
-      yield* Console13.log(`  \u2022 Added ${target} to .gitignore.`);
+      yield* Console14.log(`  \u2022 Added ${target} to .gitignore.`);
     }
-    yield* Console13.log("  \u2022 Your app can now call the Gigadrive API via the SDK (GIGADRIVE_CLIENT_ID/SECRET).");
+    yield* Console14.log("  \u2022 Your app can now call the Gigadrive API via the SDK (GIGADRIVE_CLIENT_ID/SECRET).");
   }).pipe(
-    Effect26.catchTags({
+    Effect27.catchTags({
       // Ctrl+C during a prompt is a deliberate cancel — exit 0.
-      QuitException: () => Console13.log("Cancelled."),
-      NotAuthenticatedError: (err) => Console13.error('You are not logged in. Run "gigadrive login" to authenticate.').pipe(
-        Effect26.andThen(Effect26.fail(err))
+      QuitException: () => Console14.log("Cancelled."),
+      NotAuthenticatedError: (err) => Console14.error('You are not logged in. Run "gigadrive login" to authenticate.').pipe(
+        Effect27.andThen(Effect27.fail(err))
       ),
-      ApiRequestError: (err) => Console13.error(`Setup failed: ${err.message}`).pipe(Effect26.andThen(Effect26.fail(err))),
-      NoApplicationsFoundError: (err) => Console13.error(err.message).pipe(Effect26.andThen(Effect26.fail(err))),
-      ApplicationNotFoundError: (err) => Console13.error(err.message).pipe(Effect26.andThen(Effect26.fail(err))),
-      ProjectLinkReadError: (err) => Console13.error(err.message).pipe(Effect26.andThen(Effect26.fail(err))),
-      ProjectLinkWriteError: (err) => Console13.error(err.message).pipe(Effect26.andThen(Effect26.fail(err))),
-      EnvFileReadError: (err) => Console13.error(err.message).pipe(Effect26.andThen(Effect26.fail(err))),
-      EnvFileWriteError: (err) => Console13.error(err.message).pipe(Effect26.andThen(Effect26.fail(err))),
-      DevCredentialsStoreReadError: (err) => Console13.error(err.message).pipe(Effect26.andThen(Effect26.fail(err))),
-      DevCredentialsStoreWriteError: (err) => Console13.error(err.message).pipe(Effect26.andThen(Effect26.fail(err)))
+      ApiRequestError: (err) => Console14.error(`Setup failed: ${err.message}`).pipe(Effect27.andThen(Effect27.fail(err))),
+      NoApplicationsFoundError: (err) => Console14.error(err.message).pipe(Effect27.andThen(Effect27.fail(err))),
+      ApplicationNotFoundError: (err) => Console14.error(err.message).pipe(Effect27.andThen(Effect27.fail(err))),
+      ProjectLinkReadError: (err) => Console14.error(err.message).pipe(Effect27.andThen(Effect27.fail(err))),
+      ProjectLinkWriteError: (err) => Console14.error(err.message).pipe(Effect27.andThen(Effect27.fail(err))),
+      EnvFileReadError: (err) => Console14.error(err.message).pipe(Effect27.andThen(Effect27.fail(err))),
+      EnvFileWriteError: (err) => Console14.error(err.message).pipe(Effect27.andThen(Effect27.fail(err))),
+      DevCredentialsStoreReadError: (err) => Console14.error(err.message).pipe(Effect27.andThen(Effect27.fail(err))),
+      DevCredentialsStoreWriteError: (err) => Console14.error(err.message).pipe(Effect27.andThen(Effect27.fail(err)))
     })
   )
 );
 
 // src/commands/whoami/index.ts
-import { Command as Command15 } from "@effect/cli";
-import { Console as Console14, Effect as Effect27 } from "effect";
-var whoamiCommand = Command15.make(
+import { Command as Command16 } from "@effect/cli";
+import { Console as Console15, Effect as Effect28 } from "effect";
+var whoamiCommand = Command16.make(
   "whoami",
   {},
-  () => Effect27.gen(function* () {
+  () => Effect28.gen(function* () {
     const auth = yield* AuthService;
     const info = yield* auth.getUserInfo;
-    yield* Console14.log(JSON.stringify(info, null, 2));
+    yield* Console15.log(JSON.stringify(info, null, 2));
   }).pipe(
-    Effect27.catchTags({
-      NotAuthenticatedError: () => Console14.log('You are not logged in. Run "gigadrive login" to authenticate.'),
-      UserInfoFetchError: (err) => Console14.error(`Failed to retrieve user info: ${err.message}`),
-      OAuthDiscoveryError: (err) => Console14.error(`Failed to retrieve user info: ${err.message}`)
+    Effect28.catchTags({
+      NotAuthenticatedError: () => Console15.log('You are not logged in. Run "gigadrive login" to authenticate.'),
+      UserInfoFetchError: (err) => Console15.error(`Failed to retrieve user info: ${err.message}`),
+      OAuthDiscoveryError: (err) => Console15.error(`Failed to retrieve user info: ${err.message}`)
     })
   )
 );
 
 // src/index.ts
-var gigadrive = Command16.make("gigadrive", {}, () => Effect28.void).pipe(
-  Command16.withSubcommands([
+var gigadrive = Command17.make("gigadrive", {}, () => Effect29.void).pipe(
+  Command17.withSubcommands([
     loginCommand,
     logoutCommand,
     whoamiCommand,
@@ -3647,6 +4542,8 @@ var gigadrive = Command16.make("gigadrive", {}, () => Effect28.void).pipe(
     deploymentsCommand,
     domainsCommand,
     aiCommand,
+    microvmsCommand,
+    vmCommand,
     buildCommand,
     debugCommand,
     deployCommand,
@@ -3654,7 +4551,7 @@ var gigadrive = Command16.make("gigadrive", {}, () => Effect28.void).pipe(
     setupCommand
   ])
 );
-var cli = Command16.run(gigadrive, {
+var cli = Command17.run(gigadrive, {
   name: "Gigadrive CLI",
   version: package_default.version
 });
@@ -3676,5 +4573,5 @@ var ServicesLive = Layer.mergeAll(BaseServices, ApiClientLive, DeploymentApiLive
 var AppLive = Layer.mergeAll(ServicesLive, Logger.minimumLogLevel(LogLevel.Info)).pipe(
   Layer.provideMerge(NodeContext.layer)
 );
-NodeRuntime.runMain(Effect28.provide(cli(process.argv), AppLive));
+NodeRuntime.runMain(Effect29.provide(cli(process.argv), AppLive));
 //# sourceMappingURL=index.mjs.map