openship 0.1.10 → 0.1.11

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { Command as Command24 } from "commander";
+import { Command as Command25 } from "commander";
 
 // src/lib/output.ts
 import chalk from "chalk";
@@ -2367,9 +2367,9 @@ import chalk5 from "chalk";
 import ora from "ora";
 import { spawn } from "child_process";
 import { randomBytes } from "crypto";
-import { existsSync as existsSync3, mkdirSync as mkdirSync4, readFileSync as readFileSync2, writeFileSync as writeFileSync3 } from "fs";
-import { homedir as homedir3 } from "os";
-import { dirname as dirname2, join as join4 } from "path";
+import { existsSync as existsSync4, mkdirSync as mkdirSync5, readFileSync as readFileSync2, writeFileSync as writeFileSync4 } from "fs";
+import { homedir as homedir4 } from "os";
+import { dirname as dirname2, join as join5 } from "path";
 import { fileURLToPath } from "url";
 
 // src/lib/dashboard.ts
@@ -2419,8 +2419,8 @@ async function downloadToFile(url, dest, onProgress) {
   } finally {
     file.end();
   }
-  await new Promise((resolve, reject2) => {
-    file.on("finish", () => resolve());
+  await new Promise((resolve2, reject2) => {
+    file.on("finish", () => resolve2());
     file.on("error", reject2);
   });
   return { sha256: hash.digest("hex"), size: received };
@@ -2510,29 +2510,233 @@ async function ensureDashboard(opts = {}) {
   return { tag, entry, cwd };
 }
 
+// src/lib/service.ts
+import { spawnSync as spawnSync2 } from "child_process";
+import { existsSync as existsSync3, mkdirSync as mkdirSync4, writeFileSync as writeFileSync3, rmSync as rmSync2 } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join4, resolve } from "path";
+var HOME = homedir3();
+var OS_DIR = join4(HOME, ".openship");
+var LOG_DIR = join4(OS_DIR, "logs");
+var MAC_LABEL = "io.openship.up";
+var MAC_PLIST = join4(HOME, "Library", "LaunchAgents", `${MAC_LABEL}.plist`);
+var SYSTEMD_NAME = "openship";
+var WIN_TASK = "Openship";
+function selfInvocation() {
+  const runtime = process.execPath;
+  const entry = resolve(process.argv[1] ?? "");
+  return { runtime, args: [entry] };
+}
+function upArgs(flags) {
+  const a = ["up", "--foreground"];
+  if (flags.port) a.push("--port", flags.port);
+  if (flags.dataDir) a.push("--data-dir", flags.dataDir);
+  if (flags.dashboardPort) a.push("--dashboard-port", flags.dashboardPort);
+  if (flags.ui === false) a.push("--no-ui");
+  if (flags.uiVersion) a.push("--ui-version", flags.uiVersion);
+  return a;
+}
+function runArgv(flags) {
+  const { runtime, args } = selfInvocation();
+  return [runtime, ...args, ...upArgs(flags)];
+}
+function run(cmd, args) {
+  const r = spawnSync2(cmd, args, { encoding: "utf8" });
+  return { ok: r.status === 0, out: `${r.stdout ?? ""}${r.stderr ?? ""}`.trim() };
+}
+function isRoot() {
+  return typeof process.getuid === "function" && process.getuid() === 0;
+}
+function detectKind() {
+  if (process.platform === "darwin") return "launchd";
+  if (process.platform === "linux") {
+    if (!hasSystemd()) return "unsupported";
+    return isRoot() ? "systemd-system" : "systemd-user";
+  }
+  if (process.platform === "win32") return "schtasks";
+  return "unsupported";
+}
+function hasSystemd() {
+  return spawnSync2("sh", ["-c", "command -v systemctl"]).status === 0;
+}
+function xmlEscape(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+function plist(flags) {
+  const argv = runArgv(flags);
+  const items = argv.map((a) => `      <string>${xmlEscape(a)}</string>`).join("\n");
+  const path2 = ["/opt/homebrew/bin", "/usr/local/bin", "/usr/bin", "/bin", join4(HOME, ".bun/bin")].join(":");
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key><string>${MAC_LABEL}</string>
+  <key>ProgramArguments</key>
+  <array>
+${items}
+  </array>
+  <key>RunAtLoad</key><true/>
+  <key>KeepAlive</key><true/>
+  <key>StandardOutPath</key><string>${join4(LOG_DIR, "up.log")}</string>
+  <key>StandardErrorPath</key><string>${join4(LOG_DIR, "up.err.log")}</string>
+  <key>EnvironmentVariables</key>
+  <dict><key>PATH</key><string>${path2}</string></dict>
+</dict>
+</plist>
+`;
+}
+function systemdUnit(flags) {
+  const argv = runArgv(flags);
+  const execStart = argv.map((a) => /\s/.test(a) ? `"${a}"` : a).join(" ");
+  return `[Unit]
+Description=Openship control plane
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+ExecStart=${execStart}
+Restart=always
+RestartSec=2
+Environment=NODE_ENV=production
+
+[Install]
+WantedBy=default.target
+`;
+}
+function preview(flags) {
+  const kind = detectKind();
+  if (kind === "launchd") return { kind, path: MAC_PLIST, content: plist(flags) };
+  if (kind === "systemd-user") return { kind, path: join4(HOME, ".config/systemd/user", `${SYSTEMD_NAME}.service`), content: systemdUnit(flags) };
+  if (kind === "systemd-system") return { kind, path: `/etc/systemd/system/${SYSTEMD_NAME}.service`, content: systemdUnit(flags) };
+  if (kind === "schtasks") return { kind, path: WIN_TASK, content: runArgv(flags).join(" ") };
+  return { kind, path: "", content: "" };
+}
+function installAndStart(flags) {
+  mkdirSync4(LOG_DIR, { recursive: true });
+  const kind = detectKind();
+  if (kind === "launchd") {
+    mkdirSync4(join4(HOME, "Library", "LaunchAgents"), { recursive: true });
+    run("launchctl", ["bootout", `gui/${process.getuid?.() ?? ""}/${MAC_LABEL}`]);
+    writeFileSync3(MAC_PLIST, plist(flags));
+    const uid = String(process.getuid?.() ?? "");
+    let r = run("launchctl", ["bootstrap", `gui/${uid}`, MAC_PLIST]);
+    if (!r.ok) r = run("launchctl", ["load", "-w", MAC_PLIST]);
+    if (!r.ok) throw new Error(`launchctl failed to load the agent: ${r.out}`);
+    return { kind, detail: `launchd agent ${MAC_LABEL} (logs: ${LOG_DIR})` };
+  }
+  if (kind === "systemd-user" || kind === "systemd-system") {
+    const sysArgs = kind === "systemd-user" ? ["--user"] : [];
+    const unitPath = kind === "systemd-user" ? join4(HOME, ".config/systemd/user", `${SYSTEMD_NAME}.service`) : `/etc/systemd/system/${SYSTEMD_NAME}.service`;
+    mkdirSync4(unitPath.slice(0, unitPath.lastIndexOf("/")), { recursive: true });
+    writeFileSync3(unitPath, systemdUnit(flags));
+    run("systemctl", [...sysArgs, "daemon-reload"]);
+    const r = run("systemctl", [...sysArgs, "enable", "--now", SYSTEMD_NAME]);
+    if (!r.ok) throw new Error(`systemctl enable failed: ${r.out}`);
+    if (kind === "systemd-user") {
+      run("loginctl", ["enable-linger", process.env.USER ?? ""]);
+    }
+    return { kind, detail: `systemd unit ${SYSTEMD_NAME} (${kind === "systemd-user" ? "--user" : "system"})` };
+  }
+  if (kind === "schtasks") {
+    const tr = runArgv(flags).map((a) => `\\"${a}\\"`).join(" ");
+    const r = run("schtasks", ["/Create", "/TN", WIN_TASK, "/SC", "ONLOGON", "/RL", "HIGHEST", "/TR", tr, "/F"]);
+    if (!r.ok) throw new Error(`schtasks create failed: ${r.out}`);
+    run("schtasks", ["/Run", "/TN", WIN_TASK]);
+    return { kind, detail: `Scheduled Task ${WIN_TASK} (best-effort; runs at logon)` };
+  }
+  throw new Error(
+    "No supported service manager found (need systemd on Linux). Run `openship up --foreground` instead, or use docker compose for always-on."
+  );
+}
+function stop() {
+  const kind = detectKind();
+  if (kind === "launchd") {
+    run("launchctl", ["bootout", `gui/${process.getuid?.() ?? ""}/${MAC_LABEL}`]);
+    if (existsSync3(MAC_PLIST)) rmSync2(MAC_PLIST, { force: true });
+    return { kind, detail: `launchd agent ${MAC_LABEL} stopped + removed` };
+  }
+  if (kind === "systemd-user" || kind === "systemd-system") {
+    const sysArgs = kind === "systemd-user" ? ["--user"] : [];
+    run("systemctl", [...sysArgs, "disable", "--now", SYSTEMD_NAME]);
+    const unitPath = kind === "systemd-user" ? join4(HOME, ".config/systemd/user", `${SYSTEMD_NAME}.service`) : `/etc/systemd/system/${SYSTEMD_NAME}.service`;
+    if (existsSync3(unitPath)) rmSync2(unitPath, { force: true });
+    run("systemctl", [...sysArgs, "daemon-reload"]);
+    return { kind, detail: `systemd unit ${SYSTEMD_NAME} stopped + disabled` };
+  }
+  if (kind === "schtasks") {
+    run("schtasks", ["/End", "/TN", WIN_TASK]);
+    run("schtasks", ["/Delete", "/TN", WIN_TASK, "/F"]);
+    return { kind, detail: `Scheduled Task ${WIN_TASK} stopped + removed` };
+  }
+  return { kind, detail: "no supported service manager \u2014 nothing to stop" };
+}
+
 // src/commands/up.ts
 var DIST_DIR = dirname2(fileURLToPath(import.meta.url));
-var SERVER_DIR = join4(DIST_DIR, "server");
-var OS_DIR = join4(homedir3(), ".openship");
+var SERVER_DIR = join5(DIST_DIR, "server");
+var OS_DIR2 = join5(homedir4(), ".openship");
 function ensureAuthSecret() {
-  const path2 = join4(OS_DIR, "auth-secret");
-  if (existsSync3(path2)) return readFileSync2(path2, "utf8").trim();
-  mkdirSync4(OS_DIR, { recursive: true, mode: 448 });
+  const path2 = join5(OS_DIR2, "auth-secret");
+  if (existsSync4(path2)) return readFileSync2(path2, "utf8").trim();
+  mkdirSync5(OS_DIR2, { recursive: true, mode: 448 });
   const secret = randomBytes(32).toString("hex");
-  writeFileSync3(path2, secret, { mode: 384 });
+  writeFileSync4(path2, secret, { mode: 384 });
   return secret;
 }
-var upCommand = new Command4("up").description("Run the Openship control plane locally (bundled API + embedded database)").option("--port <port>", "API port to listen on", "4000").option("--data-dir <dir>", "Directory for the embedded database").option("--dashboard-port <port>", "Dashboard port", "3001").option("--no-ui", "Run the API only \u2014 don't download/serve the dashboard").option("--ui-version <tag>", "Dashboard release tag to run (default: this CLI's version)").action(async (opts) => {
-  const serverEntry = join4(SERVER_DIR, "index.js");
-  if (!existsSync3(serverEntry)) {
+var upCommand = new Command4("up").description("Start Openship as a persistent service (boot + auto-restart); --foreground to run attached").option("--port <port>", "API port to listen on", "4000").option("--data-dir <dir>", "Directory for the embedded database").option("--dashboard-port <port>", "Dashboard port", "3001").option("--no-ui", "Run the API only \u2014 don't download/serve the dashboard").option("--ui-version <tag>", "Dashboard release tag to run (default: this CLI's version)").option("-f, --foreground", "Run attached in this terminal instead of as a background service").option("--dry-run", "Print the service definition that would be installed, then exit").action(async (opts) => {
+  if (opts.foreground) return runForeground(opts);
+  startService(opts);
+});
+function startService(opts) {
+  const flags = {
+    port: opts.port,
+    dataDir: opts.dataDir,
+    dashboardPort: opts.dashboardPort,
+    ui: opts.ui,
+    uiVersion: opts.uiVersion
+  };
+  if (opts.dryRun) {
+    const p = preview(flags);
+    console.log(
+      chalk5.dim(`
+  service manager: ${p.kind}
+  path: ${p.path}
+
+`) + p.content + "\n"
+    );
+    return;
+  }
+  try {
+    const res = installAndStart(flags);
+    const port = String(opts.port || "4000");
+    const dashPort = String(opts.dashboardPort || "3001");
+    console.log(
+      chalk5.green("\n  \u2714 Openship is running as a service.\n") + chalk5.dim(`  API:       http://localhost:${port}/api
+`) + (opts.ui !== false ? chalk5.dim(`  Dashboard: http://localhost:${dashPort}
+`) : "") + chalk5.dim(`  ${res.detail}
+`) + chalk5.dim("  Starts on boot and auto-restarts. Stop with `openship stop`.\n")
+    );
+  } catch (e) {
+    console.error(
+      chalk5.red(`
+  Couldn't install the service: ${e.message}
+`) + chalk5.dim("  Run `openship up --foreground` to run it attached instead.\n")
+    );
+    process.exit(1);
+  }
+}
+async function runForeground(opts) {
+  const serverEntry = join5(SERVER_DIR, "index.js");
+  if (!existsSync4(serverEntry)) {
     console.error(
       chalk5.red("\n  Bundled server not found in this install.") + chalk5.dim("\n  Reinstall with `openship update` (or `npm i -g openship`).\n")
     );
     process.exit(1);
   }
   const port = String(opts.port || "4000");
-  const dataDir = opts.dataDir || join4(OS_DIR, "data");
-  mkdirSync4(dataDir, { recursive: true });
+  const dataDir = opts.dataDir || join5(OS_DIR2, "data");
+  mkdirSync5(dataDir, { recursive: true });
   const env = {
     ...process.env,
     PORT: port,
@@ -2544,8 +2748,8 @@ var upCommand = new Command4("up").description("Run the Openship control plane l
     OPENSHIP_JOB_RUNNER: "in-process",
     OPENSHIP_ALLOW_ZERO_AUTH: "true",
     PGLITE_DATA_DIR: dataDir,
-    OPENSHIP_MIGRATIONS_DIR: join4(SERVER_DIR, "migrations"),
-    OPENSHIP_PGLITE_ASSETS_DIR: join4(SERVER_DIR, "pglite"),
+    OPENSHIP_MIGRATIONS_DIR: join5(SERVER_DIR, "migrations"),
+    OPENSHIP_PGLITE_ASSETS_DIR: join5(SERVER_DIR, "pglite"),
     BETTER_AUTH_SECRET: ensureAuthSecret()
   };
   delete env.DATABASE_URL;
@@ -2606,7 +2810,7 @@ var upCommand = new Command4("up").description("Run the Openship control plane l
     const uiSpinner = ora("Preparing the dashboard\u2026").start();
     try {
       const bundle = await ensureDashboard({
-        tag: opts.uiVersion || `v${"0.1.10"}`,
+        tag: opts.uiVersion || `v${"0.1.11"}`,
         onProgress: (received, total) => {
           if (total) {
             uiSpinner.text = `Downloading dashboard\u2026 ${Math.round(received / total * 100)}%`;
@@ -2685,19 +2889,35 @@ var upCommand = new Command4("up").description("Run the Openship control plane l
     stopAll();
     process.exit(code ?? 0);
   });
+}
+
+// src/commands/stop.ts
+import { Command as Command5 } from "commander";
+import chalk6 from "chalk";
+var stopCommand = new Command5("stop").description("Stop the Openship service (started by `openship up`) \u2014 it won't restart or return on reboot").action(() => {
+  try {
+    const res = stop();
+    console.log(chalk6.green("\n  \u2714 Openship stopped.\n") + chalk6.dim(`  ${res.detail}
+`));
+  } catch (e) {
+    console.error(chalk6.red(`
+  Couldn't stop the service: ${e.message}
+`));
+    process.exit(1);
+  }
 });
 
 // src/commands/init.ts
-import { Command as Command5 } from "commander";
-import { existsSync as existsSync4, mkdirSync as mkdirSync5, writeFileSync as writeFileSync4 } from "fs";
+import { Command as Command6 } from "commander";
+import { existsSync as existsSync5, mkdirSync as mkdirSync6, writeFileSync as writeFileSync5 } from "fs";
 import { createInterface as createInterface2 } from "readline/promises";
 import { stdin as input2, stdout as output2 } from "process";
-import { join as join5 } from "path";
-var initCommand = new Command5("init").description("Link the current directory to an Openship project (.openship/project.json)").option("--project <id>", "Project id to link (skips the picker)").option("--environment <name>", "Default deploy environment", "production").option("--dir <path>", "Directory to initialize", process.cwd()).option("--force", "Overwrite an existing project link").option("-y, --yes", "Non-interactive: fail instead of prompting").action(async (opts) => {
+import { join as join6 } from "path";
+var initCommand = new Command6("init").description("Link the current directory to an Openship project (.openship/project.json)").option("--project <id>", "Project id to link (skips the picker)").option("--environment <name>", "Default deploy environment", "production").option("--dir <path>", "Directory to initialize", process.cwd()).option("--force", "Overwrite an existing project link").option("-y, --yes", "Non-interactive: fail instead of prompting").action(async (opts) => {
   const root = opts.dir || process.cwd();
-  const linkDir = join5(root, ".openship");
-  const linkPath = join5(linkDir, "project.json");
-  if (existsSync4(linkPath) && !opts.force) {
+  const linkDir = join6(root, ".openship");
+  const linkPath = join6(linkDir, "project.json");
+  if (existsSync5(linkPath) && !opts.force) {
     err(`Already linked (${linkPath}). Re-run with --force to overwrite.`);
     process.exit(1);
   }
@@ -2750,8 +2970,8 @@ var initCommand = new Command5("init").description("Link the current directory t
     context: getActiveContext(),
     defaults: { environment: opts.environment || "production" }
   };
-  mkdirSync5(linkDir, { recursive: true });
-  writeFileSync4(linkPath, JSON.stringify(link, null, 2) + "\n");
+  mkdirSync6(linkDir, { recursive: true });
+  writeFileSync5(linkPath, JSON.stringify(link, null, 2) + "\n");
   if (isJsonMode()) {
     printJson({ path: linkPath, link });
     return;
@@ -2762,7 +2982,7 @@ var initCommand = new Command5("init").description("Link the current directory t
 });
 
 // src/commands/context.ts
-import { Command as Command6 } from "commander";
+import { Command as Command7 } from "commander";
 function renderContexts() {
   const rows = listContexts().map((c) => ({
     current: c.current ? "*" : "",
@@ -2773,8 +2993,8 @@ function renderContexts() {
   }));
   printTable(rows, ["current", "name", "apiUrl", "dashboardUrl", "auth"]);
 }
-var listCmd = new Command6("list").alias("ls").description("List configured contexts").action(renderContexts);
-var useCmd = new Command6("use").description("Switch the active context").argument("<name>", "Context name").action((name) => {
+var listCmd = new Command7("list").alias("ls").description("List configured contexts").action(renderContexts);
+var useCmd = new Command7("use").description("Switch the active context").argument("<name>", "Context name").action((name) => {
   try {
     setActiveContext(name);
     ok(`
@@ -2785,7 +3005,7 @@ var useCmd = new Command6("use").description("Switch the active context").argume
     process.exit(1);
   }
 });
-var addCmd = new Command6("add").description("Create or update a context's endpoints/token").argument("<name>", "Context name").option("--api-url <url>", "API base URL").option("--dashboard-url <url>", "Dashboard base URL").option("--token <token>", "Personal Access Token to store").option("--use", "Switch to this context after adding").action((name, opts) => {
+var addCmd = new Command7("add").description("Create or update a context's endpoints/token").argument("<name>", "Context name").option("--api-url <url>", "API base URL").option("--dashboard-url <url>", "Dashboard base URL").option("--token <token>", "Personal Access Token to store").option("--use", "Switch to this context after adding").action((name, opts) => {
   addContext(name, {
     apiUrl: opts.apiUrl,
     dashboardUrl: opts.dashboardUrl,
@@ -2796,7 +3016,7 @@ var addCmd = new Command6("add").description("Create or update a context's endpo
   Saved context "${name}"${opts.use ? " (now active)" : ""}.
 `);
 });
-var rmCmd = new Command6("rm").alias("remove").description("Remove a context (cannot remove the active one)").argument("<name>", "Context name").action((name) => {
+var rmCmd = new Command7("rm").alias("remove").description("Remove a context (cannot remove the active one)").argument("<name>", "Context name").action((name) => {
   try {
     removeContext(name);
     ok(`
@@ -2807,15 +3027,15 @@ var rmCmd = new Command6("rm").alias("remove").description("Remove a context (ca
     process.exit(1);
   }
 });
-var contextCommand = new Command6("context").alias("ctx").description("Manage connection contexts (list/use/add/rm)").action(() => {
+var contextCommand = new Command7("context").alias("ctx").description("Manage connection contexts (list/use/add/rm)").action(() => {
   ok(`  Active context: ${getActiveContext()}`);
   renderContexts();
 }).addCommand(listCmd).addCommand(useCmd).addCommand(addCmd).addCommand(rmCmd);
 
 // src/commands/status.ts
-import { Command as Command7 } from "commander";
-import chalk6 from "chalk";
-var statusCommand = new Command7("status").description("Show the active context's API health and deployment info").action(async () => {
+import { Command as Command8 } from "commander";
+import chalk7 from "chalk";
+var statusCommand = new Command8("status").description("Show the active context's API health and deployment info").action(async () => {
   const context = getActiveContext();
   const apiUrl = getApiUrl2();
   let health;
@@ -2838,18 +3058,18 @@ var statusCommand = new Command7("status").description("Show the active context'
     printJson({ context, apiUrl, reachable: true, health, env: envInfo });
     return;
   }
-  const row = (label, value) => `  ${chalk6.dim(label.padEnd(14))}${value ?? chalk6.dim("-")}
+  const row = (label, value) => `  ${chalk7.dim(label.padEnd(14))}${value ?? chalk7.dim("-")}
 `;
   process.stdout.write(
-    chalk6.bold("\n  Openship status\n\n") + row("Context", context) + row("API", apiUrl) + row("Health", chalk6.green(health.status ?? "ok")) + row("Mode", envInfo.selfHosted ? "self-hosted" : "cloud") + row("Deploy", envInfo.deployMode) + row("Auth", envInfo.authMode) + row("Team", envInfo.teamMode) + (envInfo.hostDomain ? row("Host domain", envInfo.hostDomain) : "") + (envInfo.machineName ? row("Machine", envInfo.machineName) : "") + "\n"
+    chalk7.bold("\n  Openship status\n\n") + row("Context", context) + row("API", apiUrl) + row("Health", chalk7.green(health.status ?? "ok")) + row("Mode", envInfo.selfHosted ? "self-hosted" : "cloud") + row("Deploy", envInfo.deployMode) + row("Auth", envInfo.authMode) + row("Team", envInfo.teamMode) + (envInfo.hostDomain ? row("Host domain", envInfo.hostDomain) : "") + (envInfo.machineName ? row("Machine", envInfo.machineName) : "") + "\n"
   );
 });
 
 // src/commands/doctor.ts
-import { Command as Command8 } from "commander";
-import { existsSync as existsSync5 } from "fs";
+import { Command as Command9 } from "commander";
+import { existsSync as existsSync6 } from "fs";
 import { execFileSync } from "child_process";
-import chalk7 from "chalk";
+import chalk8 from "chalk";
 function bunVersion() {
   const embedded = process.versions.bun;
   if (embedded) return embedded;
@@ -2859,9 +3079,9 @@ function bunVersion() {
     return null;
   }
 }
-var doctorCommand = new Command8("doctor").description("Diagnose the CLI setup (config, active context, runtime)").action(async () => {
+var doctorCommand = new Command9("doctor").description("Diagnose the CLI setup (config, active context, runtime)").action(async () => {
   const checks = [];
-  const hasConfig = existsSync5(CONFIG_PATH);
+  const hasConfig = existsSync6(CONFIG_PATH);
   checks.push({
     name: "config",
     status: hasConfig ? "pass" : "warn",
@@ -2897,10 +3117,10 @@ var doctorCommand = new Command8("doctor").description("Diagnose the CLI setup (
   if (isJsonMode()) {
     printJson({ context, apiUrl, reachable, checks });
   } else {
-    const glyph = { pass: chalk7.green("\u2713"), warn: chalk7.yellow("!"), fail: chalk7.red("\u2717") };
-    process.stdout.write(chalk7.bold("\n  Openship doctor\n\n"));
+    const glyph = { pass: chalk8.green("\u2713"), warn: chalk8.yellow("!"), fail: chalk8.red("\u2717") };
+    process.stdout.write(chalk8.bold("\n  Openship doctor\n\n"));
     for (const c of checks) {
-      process.stdout.write(`  ${glyph[c.status]} ${chalk7.bold(c.name.padEnd(8))} ${c.detail}
+      process.stdout.write(`  ${glyph[c.status]} ${chalk8.bold(c.name.padEnd(8))} ${c.detail}
 `);
     }
     process.stdout.write("\n");
@@ -2909,20 +3129,20 @@ var doctorCommand = new Command8("doctor").description("Diagnose the CLI setup (
 });
 
 // src/commands/deploy.ts
-import { Command as Command9 } from "commander";
+import { Command as Command10 } from "commander";
 import { execFileSync as execFileSync3 } from "child_process";
 import ora2 from "ora";
 
 // src/lib/project-link.ts
-import { readFileSync as readFileSync3, existsSync as existsSync6 } from "fs";
-import { join as join6, dirname as dirname3, parse } from "path";
-var LINK_REL = join6(".openship", "project.json");
+import { readFileSync as readFileSync3, existsSync as existsSync7 } from "fs";
+import { join as join7, dirname as dirname3, parse } from "path";
+var LINK_REL = join7(".openship", "project.json");
 function findProjectLinkPath(from = process.cwd()) {
   let dir = from;
   const root = parse(dir).root;
   for (; ; ) {
-    const candidate = join6(dir, LINK_REL);
-    if (existsSync6(candidate)) return candidate;
+    const candidate = join7(dir, LINK_REL);
+    if (existsSync7(candidate)) return candidate;
     if (dir === root) return null;
     dir = dirname3(dir);
   }
@@ -2939,21 +3159,21 @@ function readProjectLink(from) {
 
 // src/lib/folder-deploy.ts
 import { execFileSync as execFileSync2 } from "child_process";
-import { readFileSync as readFileSync4, existsSync as existsSync7, rmSync as rmSync2 } from "fs";
+import { readFileSync as readFileSync4, existsSync as existsSync8, rmSync as rmSync3 } from "fs";
 import { tmpdir } from "os";
-import { join as join7, basename } from "path";
+import { join as join8, basename } from "path";
 function detectPackageManager(dir) {
-  if (existsSync7(join7(dir, "bun.lockb")) || existsSync7(join7(dir, "bun.lock"))) return "bun";
-  if (existsSync7(join7(dir, "pnpm-lock.yaml"))) return "pnpm";
-  if (existsSync7(join7(dir, "yarn.lock"))) return "yarn";
-  if (existsSync7(join7(dir, "package.json"))) return "npm";
+  if (existsSync8(join8(dir, "bun.lockb")) || existsSync8(join8(dir, "bun.lock"))) return "bun";
+  if (existsSync8(join8(dir, "pnpm-lock.yaml"))) return "pnpm";
+  if (existsSync8(join8(dir, "yarn.lock"))) return "yarn";
+  if (existsSync8(join8(dir, "package.json"))) return "npm";
   return void 0;
 }
 function detectStack(dir) {
-  if (existsSync7(join7(dir, "go.mod"))) return "go";
-  if (existsSync7(join7(dir, "Cargo.toml"))) return "rust";
-  if (existsSync7(join7(dir, "requirements.txt")) || existsSync7(join7(dir, "pyproject.toml"))) return "python";
-  if (existsSync7(join7(dir, "package.json"))) return "node";
+  if (existsSync8(join8(dir, "go.mod"))) return "go";
+  if (existsSync8(join8(dir, "Cargo.toml"))) return "rust";
+  if (existsSync8(join8(dir, "requirements.txt")) || existsSync8(join8(dir, "pyproject.toml"))) return "python";
+  if (existsSync8(join8(dir, "package.json"))) return "node";
   return void 0;
 }
 async function deployFolder(opts) {
@@ -2970,7 +3190,7 @@ async function deployFolder(opts) {
     throw new Error(session.error || "Failed to open upload session");
   }
   step("Packaging folder");
-  const tarball = join7(tmpdir(), `openship-upload-${session.sessionId}.tar.gz`);
+  const tarball = join8(tmpdir(), `openship-upload-${session.sessionId}.tar.gz`);
   execFileSync2(
     "tar",
     [
@@ -2996,7 +3216,7 @@ async function deployFolder(opts) {
     if (!res.ok) throw new Error(`upload failed (HTTP ${res.status})`);
   } finally {
     try {
-      rmSync2(tarball, { force: true });
+      rmSync3(tarball, { force: true });
     } catch {
     }
   }
@@ -3170,7 +3390,7 @@ function git(args) {
     return void 0;
   }
 }
-var deployCommand = new Command9("deploy").description("Trigger a deployment for the current project").option("--project <id>", "Project ID (defaults to the linked project in .openship/project.json)").option("--branch <name>", "Git branch to deploy (defaults to the current branch)").option("--commit <sha>", "Specific commit SHA (defaults to the latest commit on the branch)").option("--env <environment>", "Target environment: production | preview", "production").option("--force-all", "Rebuild every enabled service (skip smart per-service routing)").option("--service-ids <ids>", "Comma-separated service IDs to deploy (smart routing)").option("--smart-route", "Rebuild only services changed since the active deploy").option("--refresh", "Re-apply current env to the active deploy (no git pull, no rebuild)").option("--name <name>", "Project name for a folder (non-git) deploy (defaults to the directory name)").option("--watch", "Stream the deployment logs until it finishes").action(async (opts) => {
+var deployCommand = new Command10("deploy").description("Trigger a deployment for the current project").option("--project <id>", "Project ID (defaults to the linked project in .openship/project.json)").option("--branch <name>", "Git branch to deploy (defaults to the current branch)").option("--commit <sha>", "Specific commit SHA (defaults to the latest commit on the branch)").option("--env <environment>", "Target environment: production | preview", "production").option("--force-all", "Rebuild every enabled service (skip smart per-service routing)").option("--service-ids <ids>", "Comma-separated service IDs to deploy (smart routing)").option("--smart-route", "Rebuild only services changed since the active deploy").option("--refresh", "Re-apply current env to the active deploy (no git pull, no rebuild)").option("--name <name>", "Project name for a folder (non-git) deploy (defaults to the directory name)").option("--watch", "Stream the deployment logs until it finishes").action(async (opts) => {
   const link = readProjectLink();
   const env = opts.env;
   if (env !== "production" && env !== "preview") {
@@ -3252,9 +3472,9 @@ var deployCommand = new Command9("deploy").description("Trigger a deployment for
 });
 
 // src/commands/deployment.ts
-import { Command as Command10 } from "commander";
+import { Command as Command11 } from "commander";
 import { createInterface as createInterface3 } from "readline";
-function run(fn) {
+function run2(fn) {
   return async (...args) => {
     try {
       await fn(...args);
@@ -3274,12 +3494,12 @@ function shortSha(v) {
 async function confirm(question) {
   if (!process.stdin.isTTY) return true;
   const rl = createInterface3({ input: process.stdin, output: process.stderr });
-  const answer = await new Promise((resolve) => rl.question(`${question} [y/N] `, resolve));
+  const answer = await new Promise((resolve2) => rl.question(`${question} [y/N] `, resolve2));
   rl.close();
   return /^y(es)?$/i.test(answer.trim());
 }
-var list = new Command10("list").description("List deployments (org-wide, or scoped to a project)").option("--project <id>", "Scope to a project (defaults to the linked project)").option("--env <environment>", "Filter by environment: production | preview").option("--limit <n>", "Max rows to fetch", "50").action(
-  run(async (opts) => {
+var list = new Command11("list").description("List deployments (org-wide, or scoped to a project)").option("--project <id>", "Scope to a project (defaults to the linked project)").option("--env <environment>", "Filter by environment: production | preview").option("--limit <n>", "Max rows to fetch", "50").action(
+  run2(async (opts) => {
     const projectId = opts.project || readProjectLink()?.projectId;
     const params = new URLSearchParams();
     if (projectId) params.set("projectId", projectId);
@@ -3301,8 +3521,8 @@ var list = new Command10("list").description("List deployments (org-wide, or sco
     printTable(rows, ["id", "status", "env", "branch", "commit", "active", "created"]);
   })
 );
-var get = new Command10("get").description("Show a single deployment").argument("<id>", "Deployment ID").action(
-  run(async (id) => {
+var get = new Command11("get").description("Show a single deployment").argument("<id>", "Deployment ID").action(
+  run2(async (id) => {
     const res = await apiRequest(`/deployments/${id}`);
     const d = res.data ?? {};
     if (isJsonMode()) return printJson(d);
@@ -3322,20 +3542,20 @@ var get = new Command10("get").description("Show a single deployment").argument(
     );
   })
 );
-var info2 = new Command10("info").description("Show container info for a deployment").argument("<id>", "Deployment ID").action(
-  run(async (id) => {
+var info2 = new Command11("info").description("Show container info for a deployment").argument("<id>", "Deployment ID").action(
+  run2(async (id) => {
     const res = await apiRequest(`/deployments/${id}/info`);
     printJson(res.data ?? res);
   })
 );
-var usage = new Command10("usage").description("Show container resource usage for a deployment").argument("<id>", "Deployment ID").action(
-  run(async (id) => {
+var usage = new Command11("usage").description("Show container resource usage for a deployment").argument("<id>", "Deployment ID").action(
+  run2(async (id) => {
     const res = await apiRequest(`/deployments/${id}/usage`);
     printJson(res.data ?? res);
   })
 );
-var redeploy = new Command10("redeploy").description("Redeploy from an existing deployment").argument("<id>", "Deployment ID").option("--use-existing-commit", "Rebuild the same commit instead of the latest on the branch").action(
-  run(async (id, opts) => {
+var redeploy = new Command11("redeploy").description("Redeploy from an existing deployment").argument("<id>", "Deployment ID").option("--use-existing-commit", "Rebuild the same commit instead of the latest on the branch").action(
+  run2(async (id, opts) => {
     const res = await apiRequest(`/deployments/${id}/redeploy`, {
       method: "POST",
       body: JSON.stringify({ useExistingCommit: opts.useExistingCommit === true })
@@ -3343,14 +3563,14 @@ var redeploy = new Command10("redeploy").description("Redeploy from an existing
     report(res, `Redeploy triggered for ${id}`);
   })
 );
-var rollback = new Command10("rollback").description("Roll back to a previous deployment").argument("<id>", "Deployment ID to roll back to").action(
-  run(async (id) => {
+var rollback = new Command11("rollback").description("Roll back to a previous deployment").argument("<id>", "Deployment ID to roll back to").action(
+  run2(async (id) => {
     const res = await apiRequest(`/deployments/${id}/rollback`, { method: "POST" });
     report(res, `Rolled back to ${id}`);
   })
 );
-var pin = new Command10("pin").description("Pin (or unpin) a deployment's rollback artifact").argument("<id>", "Deployment ID").option("--off", "Unpin instead of pin").action(
-  run(async (id, opts) => {
+var pin = new Command11("pin").description("Pin (or unpin) a deployment's rollback artifact").argument("<id>", "Deployment ID").option("--off", "Unpin instead of pin").action(
+  run2(async (id, opts) => {
     const pinned = !opts.off;
     const res = await apiRequest(`/deployments/${id}/pin`, {
       method: "POST",
@@ -3359,32 +3579,32 @@ var pin = new Command10("pin").description("Pin (or unpin) a deployment's rollba
     report(res, `${pinned ? "Pinned" : "Unpinned"} ${id}`);
   })
 );
-var cancel = new Command10("cancel").description("Cancel an in-progress deployment").argument("<id>", "Deployment ID").action(
-  run(async (id) => {
+var cancel = new Command11("cancel").description("Cancel an in-progress deployment").argument("<id>", "Deployment ID").action(
+  run2(async (id) => {
     const res = await apiRequest(`/deployments/${id}/cancel`, { method: "POST" });
     report(res, `Cancelled ${id}`);
   })
 );
-var restart = new Command10("restart").description("Restart a deployment's container").argument("<id>", "Deployment ID").action(
-  run(async (id) => {
+var restart = new Command11("restart").description("Restart a deployment's container").argument("<id>", "Deployment ID").action(
+  run2(async (id) => {
     const res = await apiRequest(`/deployments/${id}/restart`, { method: "POST" });
     report(res, `Restarted ${id}`);
   })
 );
-var reject = new Command10("reject").description("Reject a finished deployment awaiting a keep/reject decision").argument("<id>", "Deployment ID").action(
-  run(async (id) => {
+var reject = new Command11("reject").description("Reject a finished deployment awaiting a keep/reject decision").argument("<id>", "Deployment ID").action(
+  run2(async (id) => {
     const res = await apiRequest(`/deployments/${id}/reject`, { method: "POST" });
     report(res, `Rejected ${id}`);
   })
 );
-var keep = new Command10("keep").description("Keep a finished deployment awaiting a keep/reject decision").argument("<id>", "Deployment ID").action(
-  run(async (id) => {
+var keep = new Command11("keep").description("Keep a finished deployment awaiting a keep/reject decision").argument("<id>", "Deployment ID").action(
+  run2(async (id) => {
     const res = await apiRequest(`/deployments/${id}/keep`, { method: "POST" });
     report(res, `Kept ${id}`);
   })
 );
-var rm = new Command10("rm").description("Delete a deployment").argument("<id>", "Deployment ID").option("-y, --yes", "Skip the confirmation prompt").action(
-  run(async (id, opts) => {
+var rm = new Command11("rm").description("Delete a deployment").argument("<id>", "Deployment ID").option("-y, --yes", "Skip the confirmation prompt").action(
+  run2(async (id, opts) => {
     if (!opts.yes && !isJsonMode() && !await confirm(`Delete deployment ${id}?`)) {
       err("Aborted.");
       process.exit(1);
@@ -3393,8 +3613,8 @@ var rm = new Command10("rm").description("Delete a deployment").argument("<id>",
     report(res, `Deleted ${id}`);
   })
 );
-var sslStatus = new Command10("status").description("Check SSL certificate status for a domain").argument("<domain>", "Domain to probe").action(
-  run(async (domain) => {
+var sslStatus = new Command11("status").description("Check SSL certificate status for a domain").argument("<domain>", "Domain to probe").action(
+  run2(async (domain) => {
     const res = await apiRequest("/deployments/ssl/status", {
       method: "POST",
       body: JSON.stringify({ domain })
@@ -3402,8 +3622,8 @@ var sslStatus = new Command10("status").description("Check SSL certificate statu
     printJson(res);
   })
 );
-var sslRenew = new Command10("renew").description("Renew (issue) an SSL certificate for a domain").argument("<domain>", "Domain to renew").option("--www", "Also include the www subdomain").action(
-  run(async (domain, opts) => {
+var sslRenew = new Command11("renew").description("Renew (issue) an SSL certificate for a domain").argument("<domain>", "Domain to renew").option("--www", "Also include the www subdomain").action(
+  run2(async (domain, opts) => {
     const res = await apiRequest("/deployments/ssl/renew", {
       method: "POST",
       body: JSON.stringify({ domain, includeWww: opts.www === true })
@@ -3411,12 +3631,12 @@ var sslRenew = new Command10("renew").description("Renew (issue) an SSL certific
     report(res, `SSL renewal requested for ${domain}`);
   })
 );
-var ssl = new Command10("ssl").description("SSL certificate operations").addCommand(sslStatus).addCommand(sslRenew);
-var deploymentCommand = new Command10("deployment").alias("deployments").description("Manage deployments (list, inspect, redeploy, rollback, \u2026)").addCommand(list).addCommand(get).addCommand(info2).addCommand(usage).addCommand(redeploy).addCommand(rollback).addCommand(pin).addCommand(cancel).addCommand(restart).addCommand(reject).addCommand(keep).addCommand(rm).addCommand(ssl);
+var ssl = new Command11("ssl").description("SSL certificate operations").addCommand(sslStatus).addCommand(sslRenew);
+var deploymentCommand = new Command11("deployment").alias("deployments").description("Manage deployments (list, inspect, redeploy, rollback, \u2026)").addCommand(list).addCommand(get).addCommand(info2).addCommand(usage).addCommand(redeploy).addCommand(rollback).addCommand(pin).addCommand(cancel).addCommand(restart).addCommand(reject).addCommand(keep).addCommand(rm).addCommand(ssl);
 
 // src/commands/logs.ts
-import { Command as Command11 } from "commander";
-var logsCommand = new Command11("logs").description("View or stream a deployment's logs").argument("<deploymentId>", "Deployment ID").option("-f, --follow", "Stream live logs via SSE until the deployment finishes").option("--tail <n>", "Show only the last N log lines (snapshot mode)").action(async (deploymentId, opts) => {
+import { Command as Command12 } from "commander";
+var logsCommand = new Command12("logs").description("View or stream a deployment's logs").argument("<deploymentId>", "Deployment ID").option("-f, --follow", "Stream live logs via SSE until the deployment finishes").option("--tail <n>", "Show only the last N log lines (snapshot mode)").action(async (deploymentId, opts) => {
   if (opts.follow) {
     try {
       const result = await streamDeploymentLogs(deploymentId);
@@ -3448,8 +3668,8 @@ var logsCommand = new Command11("logs").description("View or stream a deployment
 });
 
 // src/commands/project.ts
-import { Command as Command12 } from "commander";
-import chalk8 from "chalk";
+import { Command as Command13 } from "commander";
+import chalk9 from "chalk";
 import { createInterface as createInterface4 } from "readline/promises";
 import { stdin as input3, stdout as output3 } from "process";
 function action(fn) {
@@ -3480,12 +3700,12 @@ function printProject(project) {
   ];
   for (const [k, v] of fields) {
     if (v === null || v === void 0 || v === "") continue;
-    process.stdout.write(`  ${chalk8.dim(k.padEnd(12))} ${String(v)}
+    process.stdout.write(`  ${chalk9.dim(k.padEnd(12))} ${String(v)}
 `);
   }
 }
 var ENVIRONMENTS = ["production", "preview", "development"];
-var listCmd2 = new Command12("list").alias("ls").description("List projects in the active organization").action(
+var listCmd2 = new Command13("list").alias("ls").description("List projects in the active organization").action(
   action(async () => {
     const rows = [];
     for await (const p of paginate("/projects")) {
@@ -3500,7 +3720,7 @@ var listCmd2 = new Command12("list").alias("ls").description("List projects in t
     printTable(rows, ["id", "name", "slug", "repo", "source"]);
   })
 );
-var getCmd = new Command12("get").description("Show a single project").argument("<id>", "Project ID").action(
+var getCmd = new Command13("get").description("Show a single project").argument("<id>", "Project ID").action(
   action(async (id) => {
     const { data } = await apiRequest(
       `/projects/${encodeURIComponent(id)}`
@@ -3508,7 +3728,7 @@ var getCmd = new Command12("get").description("Show a single project").argument(
     printProject(data);
   })
 );
-var createCmd = new Command12("create").description("Create a project").requiredOption("--name <name>", "Project name").option("--slug <slug>", "Free-subdomain slug (slug.opsh.io)").option("--git-owner <owner>", "GitHub owner/org").option("--git-repo <repo>", "GitHub repository name").option("--git-branch <branch>", "Git branch to deploy").option("--framework <framework>", "Stack/framework id").option("--local-path <path>", "Local source path").option("--port <port>", "Container port", (v) => Number(v)).option(
+var createCmd = new Command13("create").description("Create a project").requiredOption("--name <name>", "Project name").option("--slug <slug>", "Free-subdomain slug (slug.opsh.io)").option("--git-owner <owner>", "GitHub owner/org").option("--git-repo <repo>", "GitHub repository name").option("--git-branch <branch>", "Git branch to deploy").option("--framework <framework>", "Stack/framework id").option("--local-path <path>", "Local source path").option("--port <port>", "Container port", (v) => Number(v)).option(
   "--type <type>",
   "Project type: app | docker | services | monorepo"
 ).action(
@@ -3532,12 +3752,12 @@ var createCmd = new Command12("create").description("Create a project").required
     printProject(data);
   })
 );
-var deleteCmd = new Command12("delete").alias("rm").description("Delete a project (tears down all resources)").argument("<id>", "Project ID").option("--force", "Cancel active work and delete anyway").option("--force-orphan", "Orphan resources that won't destroy, then drop the row").option("--wipe-volumes", "Also destroy persistent volumes").option("-y, --yes", "Skip the confirmation prompt").action(
+var deleteCmd = new Command13("delete").alias("rm").description("Delete a project (tears down all resources)").argument("<id>", "Project ID").option("--force", "Cancel active work and delete anyway").option("--force-orphan", "Orphan resources that won't destroy, then drop the row").option("--wipe-volumes", "Also destroy persistent volumes").option("-y, --yes", "Skip the confirmation prompt").action(
   action(async (id, opts) => {
     if (!opts.yes) {
       const rl = createInterface4({ input: input3, output: output3 });
       const answer = await rl.question(
-        chalk8.yellow(`  Delete project ${id}? This cannot be undone. `) + "(y/N) "
+        chalk9.yellow(`  Delete project ${id}? This cannot be undone. `) + "(y/N) "
       );
       rl.close();
       if (answer.trim().toLowerCase() !== "y") {
@@ -3563,7 +3783,7 @@ var deleteCmd = new Command12("delete").alias("rm").description("Delete a projec
 `);
   })
 );
-var envCmd = new Command12("env").description("Manage project environment variables");
+var envCmd = new Command13("env").description("Manage project environment variables");
 envCmd.command("get").description("List env vars (secret values are masked by the API)").argument("<id>", "Project ID").option("--environment <env>", "Filter by environment (production|preview|development)").action(
   action(async (id, opts) => {
     const qs = opts.environment ? `?environment=${encodeURIComponent(opts.environment)}` : "";
@@ -3637,7 +3857,7 @@ envCmd.command("set").description("Merge env vars: upsert KEY=VALUE pairs and/or
     );
   })
 );
-var gitCmd = new Command12("git").description("Manage git linkage and auto-deploy");
+var gitCmd = new Command13("git").description("Manage git linkage and auto-deploy");
 gitCmd.command("link").description("Link a GitHub repository to a project").argument("<id>", "Project ID").requiredOption("--owner <owner>", "GitHub owner/org").requiredOption("--repo <repo>", "Repository name").option("--branch <branch>", "Branch (defaults to the repo's default branch)").option("--installation-id <id>", "GitHub App installation id", (v) => Number(v)).action(
   action(async (id, opts) => {
     const result = await apiRequest(
@@ -3725,7 +3945,7 @@ gitCmd.command("webhook-domain").description("Set or clear the domain that recei
 `);
   })
 );
-var connectCmd = new Command12("connect").description("Connect a custom domain to a project").argument("<id>", "Project ID").argument("<domain>", "Custom domain hostname").option("--include-www", "Also connect the www. variant").action(
+var connectCmd = new Command13("connect").description("Connect a custom domain to a project").argument("<id>", "Project ID").argument("<domain>", "Custom domain hostname").option("--include-www", "Also connect the www. variant").action(
   action(async (id, domain, opts) => {
     const result = await apiRequest(
       `/projects/${encodeURIComponent(id)}/connect`,
@@ -3745,7 +3965,7 @@ var connectCmd = new Command12("connect").description("Connect a custom domain t
     printJson(result.records);
   })
 );
-var enableCmd = new Command12("enable").description("Start a stopped project").argument("<id>", "Project ID").action(
+var enableCmd = new Command13("enable").description("Start a stopped project").argument("<id>", "Project ID").action(
   action(async (id) => {
     const result = await apiRequest(
       `/projects/${encodeURIComponent(id)}/enable`,
@@ -3757,7 +3977,7 @@ var enableCmd = new Command12("enable").description("Start a stopped project").a
 `);
   })
 );
-var disableCmd = new Command12("disable").description("Stop a running project").argument("<id>", "Project ID").action(
+var disableCmd = new Command13("disable").description("Stop a running project").argument("<id>", "Project ID").action(
   action(async (id) => {
     const result = await apiRequest(
       `/projects/${encodeURIComponent(id)}/disable`,
@@ -3770,7 +3990,7 @@ var disableCmd = new Command12("disable").description("Stop a running project").
   })
 );
 var SLEEP_MODES = ["auto_sleep", "always_on"];
-var sleepModeCmd = new Command12("sleep-mode").description("Set the project sleep mode").argument("<id>", "Project ID").argument("<mode>", `One of: ${SLEEP_MODES.join(", ")}`).action(
+var sleepModeCmd = new Command13("sleep-mode").description("Set the project sleep mode").argument("<id>", "Project ID").argument("<mode>", `One of: ${SLEEP_MODES.join(", ")}`).action(
   action(async (id, mode) => {
     if (!SLEEP_MODES.includes(mode)) {
       err(`  mode must be one of: ${SLEEP_MODES.join(", ")}`);
@@ -3788,7 +4008,7 @@ var sleepModeCmd = new Command12("sleep-mode").description("Set the project slee
   })
 );
 var TRANSFER_DIRS = ["to-cloud", "to-self-hosted"];
-var transferCmd = new Command12("transfer").description("Promote a project to Openship Cloud, or bring it back (self-hosted only)").argument("<id>", "Project ID").argument("<direction>", `One of: ${TRANSFER_DIRS.join(", ")}`).action(
+var transferCmd = new Command13("transfer").description("Promote a project to Openship Cloud, or bring it back (self-hosted only)").argument("<id>", "Project ID").argument("<direction>", `One of: ${TRANSFER_DIRS.join(", ")}`).action(
   action(async (id, direction) => {
     if (!TRANSFER_DIRS.includes(direction)) {
       err(`  direction must be one of: ${TRANSFER_DIRS.join(", ")}`);
@@ -3811,7 +4031,7 @@ var transferCmd = new Command12("transfer").description("Promote a project to Op
     );
   })
 );
-var logsCmd = new Command12("logs").description("Show or stream runtime (container) logs").argument("<id>", "Project ID").option("--tail <n>", "Number of recent lines", (v) => Number(v)).option("-f, --follow", "Stream logs until interrupted").action(
+var logsCmd = new Command13("logs").description("Show or stream runtime (container) logs").argument("<id>", "Project ID").option("--tail <n>", "Number of recent lines", (v) => Number(v)).option("-f, --follow", "Stream logs until interrupted").action(
   action(async (id, opts) => {
     const tailQs = opts.tail ? `?tail=${opts.tail}` : "";
     if (!opts.follow) {
@@ -3839,7 +4059,7 @@ var logsCmd = new Command12("logs").description("Show or stream runtime (contain
     }
   })
 );
-var serverLogsCmd = new Command12("server-logs").description("Show or stream HTTP request logs (edge/OpenResty)").argument("<id>", "Project ID").option("--limit <n>", "Number of recent entries (max 200)", (v) => Number(v)).option("--domain <domain>", "Restrict to a specific domain").option("-f, --follow", "Stream request logs until interrupted").action(
+var serverLogsCmd = new Command13("server-logs").description("Show or stream HTTP request logs (edge/OpenResty)").argument("<id>", "Project ID").option("--limit <n>", "Number of recent entries (max 200)", (v) => Number(v)).option("--domain <domain>", "Restrict to a specific domain").option("-f, --follow", "Stream request logs until interrupted").action(
   action(async (id, opts) => {
     const base = `/projects/${encodeURIComponent(id)}/server-logs`;
     const domainQs = opts.domain ? `domain=${encodeURIComponent(opts.domain)}` : "";
@@ -3880,14 +4100,14 @@ function safeParse(s) {
   }
 }
 function printLogEntry(entry) {
-  const ts = entry.timestamp ? chalk8.dim(String(entry.timestamp)) : "";
+  const ts = entry.timestamp ? chalk9.dim(String(entry.timestamp)) : "";
   const level = String(entry.level ?? "info");
-  const color = level === "error" ? chalk8.red : level === "warn" ? chalk8.yellow : chalk8.dim;
+  const color = level === "error" ? chalk9.red : level === "warn" ? chalk9.yellow : chalk9.dim;
   const msg = entry.message ?? entry.data ?? "";
   process.stdout.write(`  ${ts} ${color(level.padEnd(5))} ${String(msg)}
 `);
 }
-var projectCommand = new Command12("project").alias("projects").description("Manage Openship projects");
+var projectCommand = new Command13("project").alias("projects").description("Manage Openship projects");
 projectCommand.addCommand(listCmd2);
 projectCommand.addCommand(getCmd);
 projectCommand.addCommand(createCmd);
@@ -3903,9 +4123,9 @@ projectCommand.addCommand(logsCmd);
 projectCommand.addCommand(serverLogsCmd);
 
 // src/commands/service.ts
-import { Command as Command13 } from "commander";
-import chalk9 from "chalk";
-import { spawnSync as spawnSync2 } from "child_process";
+import { Command as Command14 } from "commander";
+import chalk10 from "chalk";
+import { spawnSync as spawnSync3 } from "child_process";
 import path from "path";
 import { createInterface as createInterface5 } from "readline/promises";
 import { stdin as input4, stdout as output4 } from "process";
@@ -3917,14 +4137,14 @@ function requireAuth() {
 }
 function fail(e) {
   if (e instanceof ApiError) {
-    err(`  ${e.message}` + (e.status ? chalk9.dim(` (HTTP ${e.status})`) : ""));
+    err(`  ${e.message}` + (e.status ? chalk10.dim(` (HTTP ${e.status})`) : ""));
   } else {
     err(`  ${e instanceof Error ? e.message : String(e)}`);
   }
   process.exit(1);
 }
 function stackCommand(name) {
-  return new Command13(name).requiredOption(
+  return new Command14(name).requiredOption(
     "-p, --project <id|slug|name>",
     "Stack (project) id, slug, or name"
   );
@@ -4009,7 +4229,7 @@ var listCmd3 = stackCommand("list").description("List the services in a stack").
         image: s.image ?? "\u2014",
         enabled: s.enabled ? "yes" : "no",
         exposed: s.exposed ? "yes" : "no",
-        drift: s.drift ? chalk9.yellow("pending") : "\u2014"
+        drift: s.drift ? chalk10.yellow("pending") : "\u2014"
       })),
       ["name", "kind", "image", "enabled", "exposed", "drift"]
     );
@@ -4172,7 +4392,7 @@ function mapComposeService(name, def, baseDir) {
 var syncCmd = stackCommand("sync").description("Sync a stack's services from a docker-compose file (services not in the file are removed)").argument("<compose-file>", "Path to docker-compose.yml / compose.yaml").option("-y, --yes", "Skip the confirmation prompt").action(async (composeFile, opts) => {
   requireAuth();
   const abs = path.resolve(composeFile);
-  const proc = spawnSync2(
+  const proc = spawnSync3(
     "docker",
     ["compose", "-f", abs, "config", "--format", "json"],
     { encoding: "utf8", maxBuffer: 64 * 1024 * 1024 }
@@ -4266,7 +4486,7 @@ var containersCmd = stackCommand("containers").description("List the stack's act
     fail(e);
   }
 });
-var driftCmd = new Command13("drift").description(
+var driftCmd = new Command14("drift").description(
   "Resolve compose drift on a service (upstream compose changed a value you edited)"
 );
 function driftActionCommand(action2) {
@@ -4294,7 +4514,7 @@ function driftActionCommand(action2) {
 }
 driftCmd.addCommand(driftActionCommand("accept"));
 driftCmd.addCommand(driftActionCommand("keep"));
-var envCmd2 = new Command13("env").description("Read and write a service's environment variables");
+var envCmd2 = new Command14("env").description("Read and write a service's environment variables");
 var envGetCmd = stackCommand("get").description("List a service's environment variables (secrets masked)").argument("<service>", "Service name or id").option("-e, --env <environment>", "Environment: production | preview | development").action(async (service, opts) => {
   requireAuth();
   try {
@@ -4377,8 +4597,8 @@ function printLogEntry2(entry) {
     process.stdout.write(JSON.stringify(entry) + "\n");
     return;
   }
-  const ts = entry.timestamp ? chalk9.dim(entry.timestamp) : "";
-  const line = entry.level === "error" ? chalk9.red(msg) : entry.level === "warn" ? chalk9.yellow(msg) : msg;
+  const ts = entry.timestamp ? chalk10.dim(entry.timestamp) : "";
+  const line = entry.level === "error" ? chalk10.red(msg) : entry.level === "warn" ? chalk10.yellow(msg) : msg;
   process.stdout.write(`${ts ? ts + " " : ""}${line}
 `);
 }
@@ -4427,7 +4647,7 @@ var execCmd = stackCommand("exec").description("Open an interactive shell in a s
   );
   process.exit(1);
 });
-var serviceCommand = new Command13("service").alias("services").description("Manage the services in a compose stack (a multi-service project)");
+var serviceCommand = new Command14("service").alias("services").description("Manage the services in a compose stack (a multi-service project)");
 serviceCommand.addCommand(listCmd3);
 serviceCommand.addCommand(getCmd2);
 serviceCommand.addCommand(createCmd2);
@@ -4443,15 +4663,15 @@ serviceCommand.addCommand(logsCmd2);
 serviceCommand.addCommand(execCmd);
 
 // src/commands/domain.ts
-import { Command as Command14 } from "commander";
-import chalk10 from "chalk";
+import { Command as Command15 } from "commander";
+import chalk11 from "chalk";
 import ora3 from "ora";
 function spin(text) {
   return isJsonMode() ? null : ora3(text).start();
 }
 function fail2(e) {
   if (e instanceof ApiError) {
-    err(`  ${e.message}${e.status ? chalk10.dim(` (${e.status})`) : ""}`);
+    err(`  ${e.message}${e.status ? chalk11.dim(` (${e.status})`) : ""}`);
   } else {
     err(`  ${e instanceof Error ? e.message : String(e)}`);
   }
@@ -4479,7 +4699,7 @@ function printRecords(result) {
     ["type", "host", "value"]
   );
 }
-var listCmd4 = new Command14("list").description("List a project's custom domains").requiredOption("-p, --project <id>", "Project ID to list domains for").action(async (opts) => {
+var listCmd4 = new Command15("list").description("List a project's custom domains").requiredOption("-p, --project <id>", "Project ID to list domains for").action(async (opts) => {
   try {
     const res = await apiRequest(
       `/domains?projectId=${encodeURIComponent(opts.project)}`
@@ -4494,7 +4714,7 @@ var listCmd4 = new Command14("list").description("List a project's custom domain
     fail2(e);
   }
 });
-var addCmd2 = new Command14("add").description("Add a custom domain to a project").argument("<hostname>", "Domain hostname (e.g. app.example.com)").requiredOption("-p, --project <id>", "Project ID to attach the domain to").option("--primary", "Mark this domain as the project's primary", false).action(async (hostname, opts) => {
+var addCmd2 = new Command15("add").description("Add a custom domain to a project").argument("<hostname>", "Domain hostname (e.g. app.example.com)").requiredOption("-p, --project <id>", "Project ID to attach the domain to").option("--primary", "Mark this domain as the project's primary", false).action(async (hostname, opts) => {
   const sp = spin(`Adding ${hostname}\u2026`);
   try {
     const res = await apiRequest("/domains", {
@@ -4513,7 +4733,7 @@ var addCmd2 = new Command14("add").description("Add a custom domain to a project
     fail2(e);
   }
 });
-var previewCmd = new Command14("preview").description("Preview the DNS records a hostname would need (no changes saved)").argument("<hostname>", "Domain hostname to preview").action(async (hostname) => {
+var previewCmd = new Command15("preview").description("Preview the DNS records a hostname would need (no changes saved)").argument("<hostname>", "Domain hostname to preview").action(async (hostname) => {
   try {
     const res = await apiRequest("/domains/preview", {
       method: "POST",
@@ -4524,7 +4744,7 @@ var previewCmd = new Command14("preview").description("Preview the DNS records a
     fail2(e);
   }
 });
-var verifyCmd = new Command14("verify").description("Run DNS verification for a domain").argument("<id>", "Domain ID").action(async (id) => {
+var verifyCmd = new Command15("verify").description("Run DNS verification for a domain").argument("<id>", "Domain ID").action(async (id) => {
   const sp = spin("Checking DNS records\u2026");
   try {
     const res = await apiRaw(`/domains/${encodeURIComponent(id)}/verify`, { method: "POST" });
@@ -4550,7 +4770,7 @@ var verifyCmd = new Command14("verify").description("Run DNS verification for a
     fail2(e);
   }
 });
-var primaryCmd = new Command14("primary").description("Make a domain the project's primary hostname").argument("<id>", "Domain ID").action(async (id) => {
+var primaryCmd = new Command15("primary").description("Make a domain the project's primary hostname").argument("<id>", "Domain ID").action(async (id) => {
   const sp = spin("Setting primary\u2026");
   try {
     const res = await apiRequest(`/domains/${encodeURIComponent(id)}/primary`, {
@@ -4563,7 +4783,7 @@ var primaryCmd = new Command14("primary").description("Make a domain the project
     fail2(e);
   }
 });
-var recordsCmd = new Command14("records").description("Show the DNS records for an existing domain").argument("<id>", "Domain ID").action(async (id) => {
+var recordsCmd = new Command15("records").description("Show the DNS records for an existing domain").argument("<id>", "Domain ID").action(async (id) => {
   try {
     const res = await apiRequest(`/domains/${encodeURIComponent(id)}/records`);
     printRecords(res.data);
@@ -4581,7 +4801,7 @@ function printSsl(data) {
   if (data.issuer) info(`  issuer:  ${data.issuer}`);
   if (data.expiresAt) info(`  expires: ${data.expiresAt}`);
 }
-var renewCmd = new Command14("renew").description("Renew the SSL certificate for a domain").argument("<id>", "Domain ID").action(async (id) => {
+var renewCmd = new Command15("renew").description("Renew the SSL certificate for a domain").argument("<id>", "Domain ID").action(async (id) => {
   const sp = spin("Renewing certificate\u2026");
   try {
     const res = await apiRequest(`/domains/${encodeURIComponent(id)}/renew`, {
@@ -4594,7 +4814,7 @@ var renewCmd = new Command14("renew").description("Renew the SSL certificate for
     fail2(e);
   }
 });
-var verifySslCmd = new Command14("verify-ssl").description("Recheck that a domain's SSL certificate is issued and valid (no reissue)").argument("<id>", "Domain ID").action(async (id) => {
+var verifySslCmd = new Command15("verify-ssl").description("Recheck that a domain's SSL certificate is issued and valid (no reissue)").argument("<id>", "Domain ID").action(async (id) => {
   const sp = spin("Checking certificate\u2026");
   try {
     const res = await apiRequest(`/domains/${encodeURIComponent(id)}/verify-ssl`, {
@@ -4609,7 +4829,7 @@ var verifySslCmd = new Command14("verify-ssl").description("Recheck that a domai
     fail2(e);
   }
 });
-var renewAllCmd = new Command14("renew-all").description("Renew SSL for every near-expiry domain in your organization").action(async () => {
+var renewAllCmd = new Command15("renew-all").description("Renew SSL for every near-expiry domain in your organization").action(async () => {
   const sp = spin("Renewing expiring certificates\u2026");
   try {
     const res = await apiRequest("/domains/renew-all", { method: "POST" });
@@ -4631,11 +4851,11 @@ var renewAllCmd = new Command14("renew-all").description("Renew SSL for every ne
     fail2(e);
   }
 });
-var domainCommand = new Command14("domain").description("Manage custom domains, DNS verification, and SSL certificates").addCommand(listCmd4).addCommand(addCmd2).addCommand(previewCmd).addCommand(verifyCmd).addCommand(primaryCmd).addCommand(recordsCmd).addCommand(renewCmd).addCommand(verifySslCmd).addCommand(renewAllCmd);
+var domainCommand = new Command15("domain").description("Manage custom domains, DNS verification, and SSL certificates").addCommand(listCmd4).addCommand(addCmd2).addCommand(previewCmd).addCommand(verifyCmd).addCommand(primaryCmd).addCommand(recordsCmd).addCommand(renewCmd).addCommand(verifySslCmd).addCommand(renewAllCmd);
 
 // src/commands/server.ts
-import { Command as Command15 } from "commander";
-import chalk11 from "chalk";
+import { Command as Command16 } from "commander";
+import chalk12 from "chalk";
 import ora4 from "ora";
 var INSTALLABLE = ["docker", "git", "openresty", "certbot", "rsync"];
 function guard(fn) {
@@ -4667,7 +4887,7 @@ function connBody(o) {
     sshArgs: o.sshArgs
   };
 }
-var server = new Command15("server").description("Manage self-hosted SSH servers");
+var server = new Command16("server").description("Manage self-hosted SSH servers");
 server.command("list").alias("ls").description("List servers in the active organization").action(
   guard(async () => {
     const servers = await apiRequest("/system/servers");
@@ -4766,8 +4986,8 @@ server.command("install <serverId>").description("Install components on a server
           printJson({ event: ev.event, ...payload });
         } else if (ev.event === "log") {
           const p = payload;
-          const line = `  ${chalk11.dim(`[${p.component}]`)} ${p.message ?? ""}`;
-          process.stderr.write((p.level === "error" ? chalk11.red(line) : line) + "\n");
+          const line = `  ${chalk12.dim(`[${p.component}]`)} ${p.message ?? ""}`;
+          process.stderr.write((p.level === "error" ? chalk12.red(line) : line) + "\n");
         } else if (ev.event === "progress") {
           const p = payload;
           if (p.component) info(`  ${p.component}: ${p.status}`);
@@ -4885,9 +5105,9 @@ function fmtUptime(seconds) {
 var serverCommand = server;
 
 // src/commands/system.ts
-import { Command as Command16 } from "commander";
+import { Command as Command17 } from "commander";
 import ora5 from "ora";
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync5 } from "fs";
+import { readFileSync as readFileSync5, writeFileSync as writeFileSync6 } from "fs";
 import { createInterface as createInterface6 } from "readline/promises";
 import { stdin as input5, stdout as output5 } from "process";
 async function guarded(fn) {
@@ -4933,7 +5153,7 @@ async function promptHidden(query) {
   output5.write("\n");
   return answer;
 }
-var settingsCommand = new Command16("settings").description("Read or update instance settings");
+var settingsCommand = new Command17("settings").description("Read or update instance settings");
 settingsCommand.command("get").description("Show current instance settings").action(async () => {
   await guarded(async () => {
     const s = await apiRequest("/system/settings");
@@ -4972,7 +5192,7 @@ settingsCommand.command("set").description("Update instance-level settings").opt
 `));
   });
 });
-var onboardingCommand = new Command16("onboarding").description("First-run instance setup");
+var onboardingCommand = new Command17("onboarding").description("First-run instance setup");
 onboardingCommand.command("apply").description("Configure a fresh instance (fails once already configured)").option("--ssh-host <host>", "SSH host of the target server").option("--ssh-port <n>", "SSH port (default 22)").option("--ssh-user <user>", "SSH user (default root)").option("--ssh-auth-method <method>", "SSH auth method").option("--ssh-password <password>", "SSH password").option("--ssh-key-path <path>", "SSH private key path").option("--ssh-key-passphrase <pass>", "SSH key passphrase").option("--ssh-jump-host <host>", "SSH jump host").option("--ssh-args <args>", "Extra SSH args").option("--server-name <name>", "Display name for the server").option("--auth-mode <mode>", "Initial auth mode: none | local | cloud").option("--tunnel-provider <provider>", "Tunnel provider").option("--tunnel-token <token>", "Tunnel token").option("--default-build-mode <mode>", "Default build mode").option("--default-rollback-window <n>", "Default rollback window").action(async (opts) => {
   await guarded(async () => {
     const body = {
@@ -5006,7 +5226,7 @@ onboardingCommand.command("apply").description("Configure a fresh instance (fail
     }
   });
 });
-var upgradeToAuthCommand = new Command16("upgrade-to-auth").description("Promote a zero-auth instance to email/password login").option("--name <name>", "Account display name").option("--email <email>", "Account email").option("--password <password>", "Account password (prompted if omitted)").option("--use-own-mail-server", "Warm the self-hosted mail server for auth emails").action(async (opts) => {
+var upgradeToAuthCommand = new Command17("upgrade-to-auth").description("Promote a zero-auth instance to email/password login").option("--name <name>", "Account display name").option("--email <email>", "Account email").option("--password <password>", "Account password (prompted if omitted)").option("--use-own-mail-server", "Warm the self-hosted mail server for auth emails").action(async (opts) => {
   await guarded(async () => {
     const name = opts.name;
     const email = opts.email;
@@ -5035,7 +5255,7 @@ var upgradeToAuthCommand = new Command16("upgrade-to-auth").description("Promote
 `));
   });
 });
-var browseCommand = new Command16("browse").description("List directories on the instance host (defaults to home)").argument("[path]", "Directory to list").action(async (path2) => {
+var browseCommand = new Command17("browse").description("List directories on the instance host (defaults to home)").argument("[path]", "Directory to list").action(async (path2) => {
   await guarded(async () => {
     const qs = path2 ? `?path=${encodeURIComponent(path2)}` : "";
     const res = await apiRequest(`/system/browse${qs}`);
@@ -5064,7 +5284,7 @@ function buildDomain(opts) {
   err("\n  A domain is required: pass --hostname <host> or --slug <slug>.\n");
   process.exit(1);
 }
-var migrationCommand = new Command16("migration").description("Team-mode migration lifecycle");
+var migrationCommand = new Command17("migration").description("Team-mode migration lifecycle");
 migrationCommand.command("preflight").description("Read-only readiness check for the own-server migration").requiredOption("--server-id <id>", "Target server id").option("--hostname <host>", "Custom domain pointing at the server").option("--slug <slug>", "Free <slug>.opsh.io subdomain").action(async (opts) => {
   await guarded(async () => {
     const domain = buildDomain(opts);
@@ -5171,7 +5391,7 @@ migrationCommand.command("switch-back").description("Reverse migration back to s
     }
   });
 });
-var dataTransferCommand = new Command16("data-transfer").description(
+var dataTransferCommand = new Command17("data-transfer").description(
   "Whole-instance export / import (owner-only)"
 );
 dataTransferCommand.command("export").description("Export the entire instance to a JSON file").option("--passphrase <passphrase>", "Seal secrets under this passphrase").option("--out <file>", "Write the export to this file instead of stdout").action(async (opts) => {
@@ -5187,7 +5407,7 @@ dataTransferCommand.command("export").description("Export the entire instance to
       );
       spin4?.succeed("Export ready.");
       if (opts.out) {
-        writeFileSync5(opts.out, JSON.stringify(file));
+        writeFileSync6(opts.out, JSON.stringify(file));
         const tables = Object.keys(file.dump?.tables ?? {}).length;
         report2(
           { out: opts.out, tables },
@@ -5241,11 +5461,11 @@ dataTransferCommand.command("import").description("Import an instance export fil
     }
   });
 });
-var systemCommand = new Command16("system").description("Instance settings, onboarding, migration, and data transfer").addCommand(settingsCommand).addCommand(onboardingCommand).addCommand(upgradeToAuthCommand).addCommand(browseCommand).addCommand(migrationCommand).addCommand(dataTransferCommand);
+var systemCommand = new Command17("system").description("Instance settings, onboarding, migration, and data transfer").addCommand(settingsCommand).addCommand(onboardingCommand).addCommand(upgradeToAuthCommand).addCommand(browseCommand).addCommand(migrationCommand).addCommand(dataTransferCommand);
 
 // src/commands/mail.ts
-import { Command as Command17 } from "commander";
-import chalk12 from "chalk";
+import { Command as Command18 } from "commander";
+import chalk13 from "chalk";
 import ora6 from "ora";
 import { createInterface as createInterface7 } from "readline/promises";
 import { stdin as input6, stdout as output6 } from "process";
@@ -5286,7 +5506,7 @@ function printRecordsObject(records) {
   if (rows.length === 0) return info("  (no DNS records)");
   printTable(rows, ["key", "type", "host", "value"]);
 }
-var stepsCmd = new Command17("steps").description("List the mail setup steps").action(
+var stepsCmd = new Command18("steps").description("List the mail setup steps").action(
   guard2(async () => {
     const res = await apiRequest(
       "/mail/steps"
@@ -5299,7 +5519,7 @@ var stepsCmd = new Command17("steps").description("List the mail setup steps").a
     info(`  ${res.total} steps total.`);
   })
 );
-var statusCmd = new Command17("status").description("Show the setup progress for a mail server").argument("[serverId]", "Mail server ID (omit for the empty welcome shell)").action(
+var statusCmd = new Command18("status").description("Show the setup progress for a mail server").argument("[serverId]", "Mail server ID (omit for the empty welcome shell)").action(
   guard2(async (serverId) => {
     const q = serverId ? `?serverId=${encodeURIComponent(serverId)}` : "";
     const res = await apiRequest(`/mail/status${q}`);
@@ -5320,7 +5540,7 @@ var statusCmd = new Command17("status").description("Show the setup progress for
     }
   })
 );
-var serversCmd = new Command17("servers").description("List every server the mail stack is installed on").action(
+var serversCmd = new Command18("servers").description("List every server the mail stack is installed on").action(
   guard2(async () => {
     const res = await apiRequest(
       "/mail/servers"
@@ -5341,7 +5561,7 @@ var serversCmd = new Command17("servers").description("List every server the mai
     );
   })
 );
-var scanCmd = new Command17("scan").description("Probe a server for an existing mail install (read-only)").argument("<serverId>", "Server ID to scan").action(
+var scanCmd = new Command18("scan").description("Probe a server for an existing mail install (read-only)").argument("<serverId>", "Server ID to scan").action(
   guard2(async (serverId) => {
     const sp = spin2("Scanning server\u2026");
     const res = await apiRequest("/mail/scan", { method: "POST", body: JSON.stringify({ serverId }) });
@@ -5356,7 +5576,7 @@ var scanCmd = new Command17("scan").description("Probe a server for an existing
     else info("  Nothing to adopt on this server.");
   })
 );
-var adoptCmd = new Command17("adopt").description("Re-adopt an existing mail install whose orchestrator state was lost").argument("<serverId>", "Server ID to adopt").action(
+var adoptCmd = new Command18("adopt").description("Re-adopt an existing mail install whose orchestrator state was lost").argument("<serverId>", "Server ID to adopt").action(
   guard2(async (serverId) => {
     const sp = spin2("Adopting mail server\u2026");
     const res = await apiRequest(
@@ -5369,7 +5589,7 @@ var adoptCmd = new Command17("adopt").description("Re-adopt an existing mail ins
     info(`  completed: ${res.completed ? "yes" : "no"}`);
   })
 );
-var setupCmd = new Command17("setup").description("Start or resume the mail setup wizard (streams over SSE)").argument("<serverId>", "Server ID to install the mail stack on").requiredOption("-d, --domain <domain>", "Mail domain (e.g. example.com)").option("--start-step <n>", "Resume from a specific step (1-13)").option("--config <json>", "iRedMail config overrides as a JSON object").action(
+var setupCmd = new Command18("setup").description("Start or resume the mail setup wizard (streams over SSE)").argument("<serverId>", "Server ID to install the mail stack on").requiredOption("-d, --domain <domain>", "Mail domain (e.g. example.com)").option("--start-step <n>", "Resume from a specific step (1-13)").option("--config <json>", "iRedMail config overrides as a JSON object").action(
   guard2(async (serverId, opts) => {
     let config;
     if (opts.config) {
@@ -5402,7 +5622,7 @@ var setupCmd = new Command17("setup").description("Start or resume the mail setu
           break;
         case "log": {
           const line = `    ${String(p.message ?? "")}`;
-          process.stderr.write((p.level === "error" ? chalk12.red(line) : chalk12.dim(line)) + "\n");
+          process.stderr.write((p.level === "error" ? chalk13.red(line) : chalk13.dim(line)) + "\n");
           break;
         }
         case "step_done":
@@ -5438,7 +5658,7 @@ var setupCmd = new Command17("setup").description("Start or resume the mail setu
     if (failed) process.exit(1);
   })
 );
-var cancelCmd = new Command17("cancel").description("Cancel the mail setup currently running").action(
+var cancelCmd = new Command18("cancel").description("Cancel the mail setup currently running").action(
   guard2(async () => {
     const res = await apiRequest("/mail/setup/cancel", {
       method: "POST"
@@ -5448,7 +5668,7 @@ var cancelCmd = new Command17("cancel").description("Cancel the mail setup curre
   })
 );
 function ackCommand(name, path2, description, successMsg) {
-  return new Command17(name).description(description).argument("<serverId>", "Mail server ID").action(
+  return new Command18(name).description(description).argument("<serverId>", "Mail server ID").action(
     guard2(async (serverId) => {
       const res = await apiRequest(path2, {
         method: "POST",
@@ -5471,7 +5691,7 @@ var ptrAckCmd = ackCommand(
   "Acknowledge that reverse DNS (PTR) is configured",
   "PTR acknowledged. Re-run `mail setup` with --start-step to continue."
 );
-var resetCmd = new Command17("reset").description("Wipe the on-server setup state file (does NOT touch installed daemons)").argument("<serverId>", "Mail server ID").option("-y, --yes", "Skip the confirmation prompt").action(
+var resetCmd = new Command18("reset").description("Wipe the on-server setup state file (does NOT touch installed daemons)").argument("<serverId>", "Mail server ID").option("-y, --yes", "Skip the confirmation prompt").action(
   guard2(async (serverId, opts) => {
     if (!opts.yes && !isJsonMode()) {
       const rl = createInterface7({ input: input6, output: output6 });
@@ -5487,7 +5707,7 @@ var resetCmd = new Command17("reset").description("Wipe the on-server setup stat
     ok("  Setup state reset.");
   })
 );
-var forgetCmd = new Command17("forget").description("Stop managing a mail server (drops the DB row; leaves the stack + state intact)").argument("<serverId>", "Mail server ID").action(
+var forgetCmd = new Command18("forget").description("Stop managing a mail server (drops the DB row; leaves the stack + state intact)").argument("<serverId>", "Mail server ID").action(
   guard2(async (serverId) => {
     const res = await apiRequest(`/mail/servers/${encodeURIComponent(serverId)}`, {
       method: "DELETE"
@@ -5496,7 +5716,7 @@ var forgetCmd = new Command17("forget").description("Stop managing a mail server
     ok(`  Forgot mail server ${serverId} (re-adopt with \`mail scan\` + \`mail adopt\`).`);
   })
 );
-var healthCmd = new Command17("health").description("Show live status of every mail daemon").argument("<serverId>", "Mail server ID").action(
+var healthCmd = new Command18("health").description("Show live status of every mail daemon").argument("<serverId>", "Mail server ID").action(
   guard2(async (serverId) => {
     const sp = spin2("Checking mail daemons\u2026");
     const res = await apiRequest(`/mail/health/${encodeURIComponent(serverId)}`);
@@ -5513,7 +5733,7 @@ var healthCmd = new Command17("health").description("Show live status of every m
     );
   })
 );
-var logsCmd3 = new Command17("logs").description("Tail a mail component's journal (snapshot)").argument("<serverId>", "Mail server ID").argument("<component>", "Component key (postfix|dovecot|amavis|clamav|iredapd|postgresql|\u2026)").option("-n, --lines <n>", "Number of lines (max 1000)", "200").action(
+var logsCmd3 = new Command18("logs").description("Tail a mail component's journal (snapshot)").argument("<serverId>", "Mail server ID").argument("<component>", "Component key (postfix|dovecot|amavis|clamav|iredapd|postgresql|\u2026)").option("-n, --lines <n>", "Number of lines (max 1000)", "200").action(
   guard2(async (serverId, component, opts) => {
     const res = await apiRequest(
       `/mail/admin/${encodeURIComponent(serverId)}/components/${encodeURIComponent(component)}/logs?lines=${encodeURIComponent(opts.lines)}`
@@ -5523,9 +5743,9 @@ var logsCmd3 = new Command17("logs").description("Tail a mail component's journa
     for (const line of res.lines) process.stdout.write(line + "\n");
   })
 );
-var postmasterCmd = new Command17("postmaster").description("Manage the postmaster mailbox");
+var postmasterCmd = new Command18("postmaster").description("Manage the postmaster mailbox");
 postmasterCmd.addCommand(
-  new Command17("set-password").description("Rotate the postmaster password").argument("<serverId>", "Mail server ID").option("--password <password>", "New password (min 12 chars); prompted if omitted").action(
+  new Command18("set-password").description("Rotate the postmaster password").argument("<serverId>", "Mail server ID").option("--password <password>", "New password (min 12 chars); prompted if omitted").action(
     guard2(async (serverId, opts) => {
       let password = opts.password;
       if (!password) {
@@ -5551,10 +5771,10 @@ postmasterCmd.addCommand(
     })
   )
 );
-var mailCommand = new Command17("mail").description("Self-hosted mail server (iRedMail) setup and admin [self-host]").addCommand(stepsCmd).addCommand(statusCmd).addCommand(serversCmd).addCommand(scanCmd).addCommand(adoptCmd).addCommand(setupCmd).addCommand(cancelCmd).addCommand(dnsAckCmd).addCommand(ptrAckCmd).addCommand(resetCmd).addCommand(forgetCmd).addCommand(healthCmd).addCommand(logsCmd3).addCommand(postmasterCmd);
+var mailCommand = new Command18("mail").description("Self-hosted mail server (iRedMail) setup and admin [self-host]").addCommand(stepsCmd).addCommand(statusCmd).addCommand(serversCmd).addCommand(scanCmd).addCommand(adoptCmd).addCommand(setupCmd).addCommand(cancelCmd).addCommand(dnsAckCmd).addCommand(ptrAckCmd).addCommand(resetCmd).addCommand(forgetCmd).addCommand(healthCmd).addCommand(logsCmd3).addCommand(postmasterCmd);
 
 // src/commands/backup.ts
-import { Command as Command18 } from "commander";
+import { Command as Command19 } from "commander";
 import ora7 from "ora";
 import { readFileSync as readFileSync6 } from "fs";
 async function guard3(fn) {
@@ -5639,7 +5859,7 @@ async function followStream(path2, label) {
   spinner2?.stop();
   return status;
 }
-var policyCmd = new Command18("policy").description("Backup policies (schedules) for a project");
+var policyCmd = new Command19("policy").description("Backup policies (schedules) for a project");
 policyCmd.command("list").description("List backup policies for a project").requiredOption("--project <id>", "Project ID").action(
   (opts) => guard3(async () => {
     const { data } = await apiRequest(
@@ -5709,7 +5929,7 @@ policyCmd.command("run").description("Trigger a policy's backup now").argument("
     }
   })
 );
-var runCmd = new Command18("run").description("Backup runs (executions)");
+var runCmd = new Command19("run").description("Backup runs (executions)");
 runCmd.command("list").description("List backup runs for a project").requiredOption("--project <id>", "Project ID").option("--service <id>", "Filter to a single service").option("--limit <n>", "Max rows (default 50)").action(
   (opts) => guard3(async () => {
     const qs = new URLSearchParams();
@@ -5785,7 +6005,7 @@ runCmd.command("restore").description("Prepare a restore from a run (stages it;
     }
   })
 );
-var restoreCmd = new Command18("restore").description("Manage staged restores");
+var restoreCmd = new Command19("restore").description("Manage staged restores");
 restoreCmd.command("apply").description("Apply a staged restore (destructive)").argument("<restoreId>", "Restore ID from `backup run restore`").requiredOption("--token <token>", "Confirmation token from prepare").option("--follow", "Stream the restore to completion").action(
   (restoreId, opts) => guard3(async () => {
     await apiRequest(
@@ -5828,7 +6048,7 @@ restoreCmd.command("get").description("Show one restore (optionally stream it)")
     show(data);
   })
 );
-var destinationCmd = new Command18("destination").description("Backup destinations (storage targets)");
+var destinationCmd = new Command19("destination").description("Backup destinations (storage targets)");
 destinationCmd.command("list").description("List backup destinations").action(
   () => guard3(async () => {
     const { data } = await apiRequest("/backup-destinations");
@@ -5900,21 +6120,21 @@ destinationCmd.command("preflight").description("Verify a destination (write + r
     }
   })
 );
-var backupCommand = new Command18("backup").description("Manage backups: policies, runs, restores, destinations").addCommand(policyCmd).addCommand(runCmd).addCommand(restoreCmd).addCommand(destinationCmd);
+var backupCommand = new Command19("backup").description("Manage backups: policies, runs, restores, destinations").addCommand(policyCmd).addCommand(runCmd).addCommand(restoreCmd).addCommand(destinationCmd);
 
 // src/commands/token.ts
-import { Command as Command19 } from "commander";
-import chalk14 from "chalk";
+import { Command as Command20 } from "commander";
+import chalk15 from "chalk";
 
 // src/lib/cmd-helpers.ts
-import chalk13 from "chalk";
+import chalk14 from "chalk";
 import ora8 from "ora";
 function spin3(text) {
   return isJsonMode() ? null : ora8(text).start();
 }
 function fail3(e) {
   if (e instanceof ApiError) {
-    err(`  ${e.message}${e.status ? chalk13.dim(` (${e.status})`) : ""}`);
+    err(`  ${e.message}${e.status ? chalk14.dim(` (${e.status})`) : ""}`);
   } else {
     err(`  ${e instanceof Error ? e.message : String(e)}`);
   }
@@ -5931,7 +6151,7 @@ function collectGrant(value, acc) {
   acc.push({ resourceType, resourceId, permissions });
   return acc;
 }
-var listCmd5 = new Command19("list").description("List your personal access tokens").action(async () => {
+var listCmd5 = new Command20("list").description("List your personal access tokens").action(async () => {
   try {
     const res = await apiRequest("/tokens");
     const rows = res.data ?? [];
@@ -5956,7 +6176,7 @@ var listCmd5 = new Command19("list").description("List your personal access toke
     fail3(e);
   }
 });
-var createCmd3 = new Command19("create").description("Mint a new personal access token (the secret is shown once)").argument("<name>", "Human-readable token name").option("--read-only", "Reject mutation methods (POST/PUT/PATCH/DELETE)", false).option("--expires <days>", "Expire after N days (1\u2013365); omit for non-expiring", (v) => parseInt(v, 10)).option(
+var createCmd3 = new Command20("create").description("Mint a new personal access token (the secret is shown once)").argument("<name>", "Human-readable token name").option("--read-only", "Reject mutation methods (POST/PUT/PATCH/DELETE)", false).option("--expires <days>", "Expire after N days (1\u2013365); omit for non-expiring", (v) => parseInt(v, 10)).option(
   "--grant <type:id:perms>",
   "Scope the token to a resource (repeatable), e.g. project:abc123:read,write",
   collectGrant,
@@ -5981,14 +6201,14 @@ var createCmd3 = new Command19("create").description("Mint a new personal access
       return;
     }
     info("  Copy this token now \u2014 it will not be shown again:");
-    process.stdout.write(chalk14.cyan(`  ${res.data.token}
+    process.stdout.write(chalk15.cyan(`  ${res.data.token}
 `));
   } catch (e) {
     sp?.fail("Create failed");
     fail3(e);
   }
 });
-var revokeCmd = new Command19("revoke").description("Revoke one of your tokens").argument("<id>", "Token ID").action(async (id) => {
+var revokeCmd = new Command20("revoke").description("Revoke one of your tokens").argument("<id>", "Token ID").action(async (id) => {
   const sp = spin3("Revoking token\u2026");
   try {
     await apiRequest(`/tokens/${encodeURIComponent(id)}`, { method: "DELETE" });
@@ -6000,11 +6220,11 @@ var revokeCmd = new Command19("revoke").description("Revoke one of your tokens")
     fail3(e);
   }
 });
-var tokenCommand = new Command19("token").description("Manage personal access tokens").addCommand(listCmd5).addCommand(createCmd3).addCommand(revokeCmd);
+var tokenCommand = new Command20("token").description("Manage personal access tokens").addCommand(listCmd5).addCommand(createCmd3).addCommand(revokeCmd);
 
 // src/commands/api.ts
-import { Command as Command20 } from "commander";
-var apiCommand = new Command20("api").description("Make an authenticated request to any Openship API route (like `gh api`)").argument("<path>", "Path under /api, e.g. /projects or /deployments/<id>").option("-X, --method <method>", "HTTP method (defaults to GET, or POST when --data is given)").option("-d, --data <json>", "Request body as a JSON string").option("-q, --query <kv...>", "Query parameter key=value (repeatable)").action(async (path2, opts) => {
+import { Command as Command21 } from "commander";
+var apiCommand = new Command21("api").description("Make an authenticated request to any Openship API route (like `gh api`)").argument("<path>", "Path under /api, e.g. /projects or /deployments/<id>").option("-X, --method <method>", "HTTP method (defaults to GET, or POST when --data is given)").option("-d, --data <json>", "Request body as a JSON string").option("-q, --query <kv...>", "Query parameter key=value (repeatable)").action(async (path2, opts) => {
   const method = (opts.method || (opts.data ? "POST" : "GET")).toUpperCase();
   let url = path2.startsWith("/") ? path2 : `/${path2}`;
   if (opts.query?.length) {
@@ -6038,11 +6258,11 @@ var apiCommand = new Command20("api").description("Make an authenticated request
 });
 
 // src/commands/install.ts
-import { Command as Command21 } from "commander";
-import { chmodSync as chmodSync2, existsSync as existsSync8, mkdirSync as mkdirSync6, readFileSync as readFileSync7, writeFileSync as writeFileSync6 } from "fs";
-import { spawn as spawn2, spawnSync as spawnSync3 } from "child_process";
-import { homedir as homedir4 } from "os";
-import { join as join8 } from "path";
+import { Command as Command22 } from "commander";
+import { chmodSync as chmodSync2, existsSync as existsSync9, mkdirSync as mkdirSync7, readFileSync as readFileSync7, writeFileSync as writeFileSync7 } from "fs";
+import { spawn as spawn2, spawnSync as spawnSync4 } from "child_process";
+import { homedir as homedir5 } from "os";
+import { join as join9 } from "path";
 import ora9 from "ora";
 function assetForPlatform() {
   const { platform, arch } = process;
@@ -6054,33 +6274,33 @@ function assetForPlatform() {
   throw new Error(`Unsupported platform: ${platform} (${arch})`);
 }
 function installDmg(dmg) {
-  const homeApps = join8(homedir4(), "Applications");
+  const homeApps = join9(homedir5(), "Applications");
   let dest = homeApps;
   try {
-    mkdirSync6(homeApps, { recursive: true });
+    mkdirSync7(homeApps, { recursive: true });
   } catch {
     dest = "/Applications";
   }
-  const attach = spawnSync3("hdiutil", ["attach", "-nobrowse", "-readonly", "-noverify", dmg], {
+  const attach = spawnSync4("hdiutil", ["attach", "-nobrowse", "-readonly", "-noverify", dmg], {
     encoding: "utf8"
   });
   if (attach.status !== 0) throw new Error(`hdiutil attach failed: ${attach.stderr?.trim()}`);
   const mount = (attach.stdout.match(/\/Volumes\/[^\n]*/g) ?? []).pop()?.trim();
   if (!mount) throw new Error("Could not determine the mounted volume");
-  let target = join8(dest, "Openship.app");
+  let target = join9(dest, "Openship.app");
   try {
-    const appInDmg = join8(mount, "Openship.app");
-    if (!existsSync8(appInDmg)) throw new Error("Openship.app not found in the disk image");
-    spawnSync3("rm", ["-rf", target]);
-    let copy = spawnSync3("ditto", [appInDmg, target], { encoding: "utf8" });
+    const appInDmg = join9(mount, "Openship.app");
+    if (!existsSync9(appInDmg)) throw new Error("Openship.app not found in the disk image");
+    spawnSync4("rm", ["-rf", target]);
+    let copy = spawnSync4("ditto", [appInDmg, target], { encoding: "utf8" });
     if (copy.status !== 0 && dest === homeApps) {
-      target = join8("/Applications", "Openship.app");
-      spawnSync3("rm", ["-rf", target]);
-      copy = spawnSync3("ditto", [appInDmg, target], { encoding: "utf8" });
+      target = join9("/Applications", "Openship.app");
+      spawnSync4("rm", ["-rf", target]);
+      copy = spawnSync4("ditto", [appInDmg, target], { encoding: "utf8" });
     }
     if (copy.status !== 0) throw new Error(`ditto copy failed: ${copy.stderr?.trim()}`);
   } finally {
-    spawnSync3("hdiutil", ["detach", mount, "-quiet"]);
+    spawnSync4("hdiutil", ["detach", mount, "-quiet"]);
   }
   return target;
 }
@@ -6089,10 +6309,10 @@ function installAppImage(appImage) {
   return appImage;
 }
 function installZip(zip) {
-  const localAppData = process.env.LOCALAPPDATA || join8(homedir4(), "AppData", "Local");
-  const target = join8(localAppData, "Programs", "Openship");
-  mkdirSync6(target, { recursive: true });
-  const expand = spawnSync3(
+  const localAppData = process.env.LOCALAPPDATA || join9(homedir5(), "AppData", "Local");
+  const target = join9(localAppData, "Programs", "Openship");
+  mkdirSync7(target, { recursive: true });
+  const expand = spawnSync4(
     "powershell",
     [
       "-NoProfile",
@@ -6107,7 +6327,7 @@ function installZip(zip) {
 }
 function launch(kind, target) {
   if (kind === "dmg") {
-    spawnSync3("open", [target]);
+    spawnSync4("open", [target]);
     return;
   }
   if (kind === "appimage") {
@@ -6118,11 +6338,11 @@ function launch(kind, target) {
     child.unref();
     return;
   }
-  const exe = join8(target, "Openship.exe");
-  const path2 = existsSync8(exe) ? exe : target;
-  spawnSync3("cmd", ["/c", "start", "", path2]);
+  const exe = join9(target, "Openship.exe");
+  const path2 = existsSync9(exe) ? exe : target;
+  spawnSync4("cmd", ["/c", "start", "", path2]);
 }
-var installCommand = new Command21("install").description("Download and install the Openship desktop app for this OS").option("--version <tag>", "Release tag to install (e.g. v1.2.3)").option("--latest", "Install the latest release (default)").option("--force", "Re-download even if a verified copy is cached").option("--no-verify", "Skip SHA-256 verification (allowed when no sidecar exists)").option("--no-launch", "Install without launching the app").action(async (opts) => {
+var installCommand = new Command22("install").description("Download and install the Openship desktop app for this OS").option("--version <tag>", "Release tag to install (e.g. v1.2.3)").option("--latest", "Install the latest release (default)").option("--force", "Re-download even if a verified copy is cached").option("--no-verify", "Skip SHA-256 verification (allowed when no sidecar exists)").option("--no-launch", "Install without launching the app").action(async (opts) => {
   let asset;
   try {
     asset = assetForPlatform();
@@ -6145,13 +6365,13 @@ var installCommand = new Command21("install").description("Download and install
     process.exit(1);
   }
   const dir = releaseDir(tag);
-  const assetPath = join8(dir, asset.name);
+  const assetPath = join9(dir, asset.name);
   const sidecarPath = `${assetPath}.sha256`;
   const assetUrl2 = `${RELEASES}/download/${tag}/${asset.name}`;
   const sidecarUrl = `${assetUrl2}.sha256`;
   let downloaded = false;
   let sha;
-  const cachedUsable = !opts.force && existsSync8(assetPath) && (existsSync8(sidecarPath) || opts.verify === false);
+  const cachedUsable = !opts.force && existsSync9(assetPath) && (existsSync9(sidecarPath) || opts.verify === false);
   if (cachedUsable) {
     info(`  Using cached ${asset.name} (${tag}).`);
   } else {
@@ -6173,7 +6393,7 @@ var installCommand = new Command21("install").description("Download and install
     const s2 = spin4("Verifying checksum\u2026");
     try {
       let sidecarBody;
-      if (existsSync8(sidecarPath) && !downloaded) {
+      if (existsSync9(sidecarPath) && !downloaded) {
         sidecarBody = readFileSync7(sidecarPath, "utf8");
       } else {
         sidecarBody = await fetchSidecar(sidecarUrl);
@@ -6197,8 +6417,8 @@ var installCommand = new Command21("install").description("Download and install
         err(`Expected ${expected}, got ${actual}. The download may be corrupt or tampered with.`);
         process.exit(1);
       }
-      mkdirSync6(dir, { recursive: true });
-      writeFileSync6(sidecarPath, sidecarBody);
+      mkdirSync7(dir, { recursive: true });
+      writeFileSync7(sidecarPath, sidecarBody);
       s2?.succeed("Checksum verified");
     } catch (e) {
       s2?.fail("Verification failed");
@@ -6237,15 +6457,15 @@ var installCommand = new Command21("install").description("Download and install
 });
 
 // src/commands/update.ts
-import { Command as Command22 } from "commander";
-import { spawnSync as spawnSync4 } from "child_process";
+import { Command as Command23 } from "commander";
+import { spawnSync as spawnSync5 } from "child_process";
 function detectPackageManager2(override) {
   if (override === "bun" || override === "npm") return override;
-  const hasBun = spawnSync4("bun", ["--version"], { stdio: "ignore" }).status === 0;
+  const hasBun = spawnSync5("bun", ["--version"], { stdio: "ignore" }).status === 0;
   return hasBun ? "bun" : "npm";
 }
-var updateCommand = new Command22("update").description("Update the Openship CLI + bundled server to the latest release").option("--check", "Only report the current + latest version; don't install").option("--via <manager>", "Package manager to update with: bun | npm").action(async (opts) => {
-  const current = "0.1.10";
+var updateCommand = new Command23("update").description("Update the Openship CLI + bundled server to the latest release").option("--check", "Only report the current + latest version; don't install").option("--via <manager>", "Package manager to update with: bun | npm").action(async (opts) => {
+  const current = "0.1.11";
   let latest;
   try {
     latest = (await resolveLatestTag()).replace(/^v/, "");
@@ -6273,7 +6493,7 @@ var updateCommand = new Command22("update").description("Update the Openship CLI
   const ref = `openship@${latest}`;
   const argv = pm === "bun" ? ["add", "-g", ref] : ["install", "-g", ref];
   info(`Updating v${current} \u2192 v${latest} (${cliInstallCommand(pm, latest)})...`);
-  const res = spawnSync4(pm, argv, { stdio: "inherit" });
+  const res = spawnSync5(pm, argv, { stdio: "inherit" });
   if (res.status !== 0) {
     err(`Update failed (${pm} exited ${res.status ?? "with a signal"}). Reinstall manually: ${cliInstallCommand(pm, latest)}`);
     process.exitCode = 1;
@@ -6287,18 +6507,18 @@ var updateCommand = new Command22("update").description("Update the Openship CLI
 });
 
 // src/commands/cache.ts
-import { Command as Command23 } from "commander";
-import { existsSync as existsSync9, readdirSync, readFileSync as readFileSync8, rmSync as rmSync3, statSync } from "fs";
-import { join as join9 } from "path";
+import { Command as Command24 } from "commander";
+import { existsSync as existsSync10, readdirSync, readFileSync as readFileSync8, rmSync as rmSync4, statSync } from "fs";
+import { join as join10 } from "path";
 function listAssets() {
-  if (!existsSync9(RELEASES_DIR)) return [];
+  if (!existsSync10(RELEASES_DIR)) return [];
   const out = [];
   for (const tag of readdirSync(RELEASES_DIR)) {
     const dir = releaseDir(tag);
     if (!statSync(dir).isDirectory()) continue;
     for (const name of readdirSync(dir)) {
       if (name.endsWith(".sha256")) continue;
-      const path2 = join9(dir, name);
+      const path2 = join10(dir, name);
       const st = statSync(path2);
       if (!st.isFile()) continue;
       out.push({
@@ -6306,17 +6526,17 @@ function listAssets() {
         name,
         path: path2,
         size: st.size,
-        hasSidecar: existsSync9(`${path2}.sha256`)
+        hasSidecar: existsSync10(`${path2}.sha256`)
       });
     }
   }
   return out;
 }
-var pathCmd = new Command23("path").description("Print the cache directory path").action(() => {
+var pathCmd = new Command24("path").description("Print the cache directory path").action(() => {
   if (isJsonMode()) printJson({ path: CACHE_DIR });
   else process.stdout.write(CACHE_DIR + "\n");
 });
-var listCmd6 = new Command23("list").alias("ls").description("List cached release assets").action(() => {
+var listCmd6 = new Command24("list").alias("ls").description("List cached release assets").action(() => {
   const assets = listAssets();
   printTable(
     assets.map((a) => ({
@@ -6328,7 +6548,7 @@ var listCmd6 = new Command23("list").alias("ls").description("List cached releas
     ["tag", "asset", "size", "sidecar"]
   );
 });
-var verifyCmd2 = new Command23("verify").description("Re-hash cached assets and compare to their .sha256 sidecar").argument("[tag]", "Only verify assets under this release tag").action(async (tag) => {
+var verifyCmd2 = new Command24("verify").description("Re-hash cached assets and compare to their .sha256 sidecar").argument("[tag]", "Only verify assets under this release tag").action(async (tag) => {
   const assets = listAssets().filter((a) => !tag || a.tag === tag);
   const results = [];
   let bad = 0;
@@ -6351,30 +6571,31 @@ var verifyCmd2 = new Command23("verify").description("Re-hash cached assets and
   }
   if (bad > 0) process.exit(1);
 });
-var cleanCmd = new Command23("clean").description("Delete cached release assets").argument("[tag]", "Only remove this release tag (default: all)").action((tag) => {
+var cleanCmd = new Command24("clean").description("Delete cached release assets").argument("[tag]", "Only remove this release tag (default: all)").action((tag) => {
   const target = tag ? releaseDir(tag) : RELEASES_DIR;
-  if (!existsSync9(target)) {
+  if (!existsSync10(target)) {
     if (isJsonMode()) printJson({ removed: false, path: target });
     else info(`  Nothing to clean (${target}).`);
     return;
   }
-  rmSync3(target, { recursive: true, force: true });
+  rmSync4(target, { recursive: true, force: true });
   if (isJsonMode()) printJson({ removed: true, path: target });
   else ok(`
   Removed ${target}
 `);
 });
-var cacheCommand = new Command23("cache").description("Manage the local download cache (list/verify/clean/path)").action(() => {
+var cacheCommand = new Command24("cache").description("Manage the local download cache (list/verify/clean/path)").action(() => {
   err("Specify a subcommand: path | list | verify | clean");
   process.exit(1);
 }).addCommand(pathCmd).addCommand(listCmd6).addCommand(verifyCmd2).addCommand(cleanCmd);
 
 // src/index.ts
-var program = new Command24();
-program.name("openship").description("Openship CLI \u2014 install, run, and manage Openship from your terminal").version("0.1.10").option("--json", "Machine-readable JSON output (stdout data only)").hook("preAction", (thisCommand) => {
+var program = new Command25();
+program.name("openship").description("Openship CLI \u2014 install, run, and manage Openship from your terminal").version("0.1.11").option("--json", "Machine-readable JSON output (stdout data only)").hook("preAction", (thisCommand) => {
   if (thisCommand.opts().json) setJsonMode(true);
 });
 program.addCommand(upCommand);
+program.addCommand(stopCommand);
 program.addCommand(installCommand);
 program.addCommand(updateCommand);
 program.addCommand(openCommand);