diff --git a/.gitignore b/.gitignore
index 462060d9..683c6d51 100644
--- a/.gitignore
+++ b/.gitignore
@@ -23,6 +23,9 @@ _*
 TODO.txt
 **/.env
 **/id_rsa*
+.agent
+.claude
+CLAUDE.md
 .task/
 attic.txt
 **/venv/
diff --git a/AGENTS.md b/AGENTS.md
new file mode 100644
index 00000000..1ba51323
--- /dev/null
+++ b/AGENTS.md
@@ -0,0 +1,147 @@
+# Apache OpenServerless Task Agent Guidelines
+
+This file provides instructions for agentic coding agents working in this repository.
+
+
+## Setup commands
+
+- Install Dependencies: `bun install`
+- Start development server: ``
+- Build the configurator utility: `cd util/config/configurator && bun run build`
+
+## Testing instructions
+- Run tests: `bun test`
+
+- Run a single test: `bun test util/config/configurator/tests/index.test.ts`
+- Run tests with verbose output `bun test --reporter=verbose`
+
+## Running the application
+- Run the configurator utility: `cd util/config/configurator && bun run start`
+- Run the configurator utility with a specified configuration file: `bun run start -- <config-file>`
+- Run the configurator utility with a specified configuration file overriding existing values: `bun run start -- <config-file> [--override]`
+
+
+## Code style
+
+- TypeScript strict mode
+
+### Language & Version
+- Primary language: TypeScript
+- Runtime: Bun (Node.js compatible)
+- Target ES version: ES2022+
+- Module system: ES Modules (`"type": "module"` in package.json)
+
+### File Organization
+- TypeScript files: `.ts` extension
+- Test files: `*.test.ts` located in `__tests__` or `tests` directories
+- Configuration: TOML (`.toml`) or JSON (`.json`)
+- Operations definitions: YAML (`.yml`)
+
+### Imports
+1. **Order**:
+   - Built-in Node.js/Bun modules (e.g., `import { $ } from "bun";`)
+   - Third-party libraries (e.g., `import { select } from "@clack/prompts";`)
+   - Local application files (relative paths)
+
+2. **Syntax**:
+   - Use ES module syntax: `import { foo } from "bar";`
+   - Default imports: `import foo from "bar";`
+   - Avoid `require()` syntax
+
+3. **Specific Rules**:
+   - Import types separately when needed: `import type { TypeName } from "./types";`
+   - Group related imports together
+   - No unused imports allowed
+
+### Formatting
+- **Indentation**: 2 spaces (not tabs)
+- **Line length**: Maximum 100 characters (prefer 80-100)
+- **Semicolons**: Required (use semicolons to terminate statements)
+- **Quotes**: 
+  - Single quotes (`'`) for strings
+  - Template literals (`` ` ``) for multi-line or interpolated strings
+  - Double quotes (`"`) only when required by JSON or external specifications
+- **Commas**: Trailing commas in multi-line objects/arrays
+- **Braces**: 
+  - Opening brace on the same line as the statement
+  - Closing brace on its own line
+  - No braces for single-line conditionals when it improves readability
+
+### Types
+- **Type Annotations**:
+  - Always annotate function parameters
+  - Annotate return values for public functions
+  - Use type inference for local variables when obvious
+- **Interfaces vs Types**:
+  - Use `interface` for object shapes that may be extended
+  - Use `type` for unions, primitives, complex mapped types
+- **Strictness**: Enable strict TypeScript options (null checks, no implicit any, etc.)
+
+### Naming Conventions
+- **Files & Directories**: kebab-case (e.g., `configurator.ts`, `all-config-parameters.toml`)
+- **Variables & Functions**: camelCase (e.g., `readPositionalFile`, `isInputConfigValid`)
+- **Constants**: UPPER_SNAKE_CASE (e.g., `HelpMsg`, `AdditionalArgsMsg`)
+- **Types & Interfaces**: PascalCase (e.g., `OpsConfig`, `PromptData`)
+- **Classes**: PascalCase (though minimal class usage in this codebase)
+- **Boolean Variables**: Prefix with `is`, `has`, `should`, `can` (e.g., `isValid`, `hasError`)
+
+### Error Handling
+- **Early Returns**: Handle error conditions first with early returns
+- **Async Functions**: Use try/catch for async operations that can fail
+- **Bun Specific**: 
+  - Use `process.exit(1)` for error exits
+  - Use `process.exit(0)` for successful exits
+  - Check `success` property on result objects from utils
+- **Messages**: 
+  - Export constant error messages (as seen with `HelpMsg`, `NotValidJsonMsg`, etc.)
+  - Use descriptive, user-friendly error messages
+  - Log warnings with `console.warn()`, errors with `console.error()`
+
+### Specific Patterns from Codebase
+- **Configuration Validation**: Separate validation functions (e.g., `isInputConfigValid`)
+- **File Operations**: 
+  - Read → Parse → Validate pattern
+  - Return objects with `{ success: boolean, message?: string, ...data }` shape
+- **CLI Argument Parsing**: Use `util.parseArgs` with strict mode and positionals
+- **Interactive Prompts**: Use `@clack/prompts` with proper cancellation handling
+- **Shell Commands**: Use Bun's `$` helper for shell commands with `.quiet()` to suppress output
+
+### Testing
+- **Framework**: Bun's built-in test framework (`bun:test`)
+- **File Naming**: `*.test.ts`
+- **Structure**:
+  - Use `describe()` for test suites
+  - Use `test()` for individual tests
+  - Use `expect()` for assertions
+- **Mocking**: Minimal mocking; prefer testing actual behavior
+- **Async Tests**: Return promises or use `async`/`await`
+
+### Comments
+- Use JSDoc-style comments for public APIs
+- Use `//` for inline comments explaining why (not what)
+- Keep comments up-to-date; delete outdated comments
+- TODO comments should include GitHub issue references when possible
+- When adding bash scripts in the documentation, always keep commands separate (one command per ```bash section)
+
+### Security
+- Never log secrets or credentials
+- Use `password` prompt type for sensitive inputs
+- Validate and sanitize all external inputs
+- Follow the principle of least privilege
+
+## Task Tracking
+
+For any task that involves more than one non-trivial step (multi-file changes, investigations with uncertain outcomes, features spanning multiple components), maintain a TODO list using the `TaskCreate` / `TaskUpdate` / `TaskList` tools:
+
+1. **Start**: call `TaskCreate` to create one task entry per step before writing any code.
+2. **Progress**: call `TaskUpdate` (status `in_progress`) when starting a step, `completed` when it is done.
+3. **Visibility**: after completing a task, call `TaskList` to confirm no steps are left open.
+
+Keep task titles short and action-oriented ("Add `type` field to ConfigParameter", "Update parseParameter", etc.).  
+Do **not** create tasks for trivial single-file edits or quick answers.
+
+## Additional Notes
+- This repository uses Bun as its primary runtime/package manager
+- Configuration is driven by TOML files and environment variables
+- The `opsfile.yml` defines operational tasks but is not part of the main TypeScript codebase
+- When modifying the configurator utility, remember to rebuild after changes
\ No newline at end of file
diff --git a/admin/docopts.md b/admin/docopts.md
index dffa3625..19c836f3 100644
--- a/admin/docopts.md
+++ b/admin/docopts.md
@@ -27,7 +27,7 @@ You can create namespaces and choose which services to enable.
 
 ```text
 Usage:
-  admin adduser <username> <email> <password> [--all] [--redis] [--mongodb] [--minio] [--postgres] [--milvus] [--storagequota=<quota>|auto]
+  admin adduser <username> <email> <password> [--all] [--redis] [--mongodb] [--minio|--seaweedfs] [--postgres] [--milvus] [--storagequota=<quota>|auto] 
   admin deleteuser <username>
   admin listuser [<username>]
   admin compact [--ttl=<ttl>|10]
@@ -49,6 +49,7 @@ Usage:
   --redis                 enable redis
   --mongodb               enable mongodb
   --minio                 enable minio
+  --seaweedfs             enable seaweedfs
   --postgres              enable postgres
   --milvus                enable milvus vector db
   --storagequota=<quota>
diff --git a/admin/opsfile.yml b/admin/opsfile.yml
index 0898a4ba..415699ce 100644
--- a/admin/opsfile.yml
+++ b/admin/opsfile.yml
@@ -119,17 +119,18 @@ tasks:
           fi
         fi
 
-        if {{.__minio}} || {{.__all}}
+        if {{.__minio}} || {{.__seaweedfs}} || {{.__all}}
         then 
-          if $OPERATOR_COMPONENT_MINIO
+          if $OPERATOR_COMPONENT_MINIO || $OPERATOR_COMPONENT_SEAWEEDFS
           then 
             MINIO_DATA_ENABLED=true
             MINIO_STATIC_ENABLED=true
           else 
-            die "Error! Minio is not enabled in OpenServerless"
+            die "Error! Minio or Seaweedfs are not enabled in OpenServerless"
           fi
         fi
 
+
         if test -n "{{.__storagequota}}"
         then MINIO_STORAGE_QUOTA={{.__storagequota}}
         fi         
diff --git a/bun.lock b/bun.lock
new file mode 100644
index 00000000..db01606d
--- /dev/null
+++ b/bun.lock
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "configVersion": 1,
+  "workspaces": {
+    "": {
+      "dependencies": {
+        "@clack/prompts": "^1.0.1",
+        "js-toml": "^1.0.2",
+        "toml": "^3.0.0",
+      },
+    },
+  },
+  "packages": {
+    "@babel/runtime-corejs3": ["@babel/runtime-corejs3@7.29.0", "", { "dependencies": { "core-js-pure": "^3.48.0" } }, "sha512-TgUkdp71C9pIbBcHudc+gXZnihEDOjUAmXO1VO4HHGES7QLZcShR0stfKIxLSNIYx2fqhmJChOjm/wkF8wv4gA=="],
+
+    "@chevrotain/cst-dts-gen": ["@chevrotain/cst-dts-gen@11.1.1", "", { "dependencies": { "@chevrotain/gast": "11.1.1", "@chevrotain/types": "11.1.1", "lodash-es": "4.17.23" } }, "sha512-fRHyv6/f542qQqiRGalrfJl/evD39mAvbJLCekPazhiextEatq1Jx1K/i9gSd5NNO0ds03ek0Cbo/4uVKmOBcw=="],
+
+    "@chevrotain/gast": ["@chevrotain/gast@11.1.1", "", { "dependencies": { "@chevrotain/types": "11.1.1", "lodash-es": "4.17.23" } }, "sha512-Ko/5vPEYy1vn5CbCjjvnSO4U7GgxyGm+dfUZZJIWTlQFkXkyym0jFYrWEU10hyCjrA7rQtiHtBr0EaZqvHFZvg=="],
+
+    "@chevrotain/regexp-to-ast": ["@chevrotain/regexp-to-ast@11.1.1", "", {}, "sha512-ctRw1OKSXkOrR8VTvOxrQ5USEc4sNrfwXHa1NuTcR7wre4YbjPcKw+82C2uylg/TEwFRgwLmbhlln4qkmDyteg=="],
+
+    "@chevrotain/types": ["@chevrotain/types@11.1.1", "", {}, "sha512-wb2ToxG8LkgPYnKe9FH8oGn3TMCBdnwiuNC5l5y+CtlaVRbCytU0kbVsk6CGrqTL4ZN4ksJa0TXOYbxpbthtqw=="],
+
+    "@chevrotain/utils": ["@chevrotain/utils@11.1.1", "", {}, "sha512-71eTYMzYXYSFPrbg/ZwftSaSDld7UYlS8OQa3lNnn9jzNtpFbaReRRyghzqS7rI3CDaorqpPJJcXGHK+FE1TVQ=="],
+
+    "@clack/core": ["@clack/core@1.0.1", "", { "dependencies": { "picocolors": "^1.0.0", "sisteransi": "^1.0.5" } }, "sha512-WKeyK3NOBwDOzagPR5H08rFk9D/WuN705yEbuZvKqlkmoLM2woKtXb10OO2k1NoSU4SFG947i2/SCYh+2u5e4g=="],
+
+    "@clack/prompts": ["@clack/prompts@1.0.1", "", { "dependencies": { "@clack/core": "1.0.1", "picocolors": "^1.0.0", "sisteransi": "^1.0.5" } }, "sha512-/42G73JkuYdyWZ6m8d/CJtBrGl1Hegyc7Fy78m5Ob+jF85TOUmLR5XLce/U3LxYAw0kJ8CT5aI99RIvPHcGp/Q=="],
+
+    "chevrotain": ["chevrotain@11.1.1", "", { "dependencies": { "@chevrotain/cst-dts-gen": "11.1.1", "@chevrotain/gast": "11.1.1", "@chevrotain/regexp-to-ast": "11.1.1", "@chevrotain/types": "11.1.1", "@chevrotain/utils": "11.1.1", "lodash-es": "4.17.23" } }, "sha512-f0yv5CPKaFxfsPTBzX7vGuim4oIC1/gcS7LUGdBSwl2dU6+FON6LVUksdOo1qJjoUvXNn45urgh8C+0a24pACQ=="],
+
+    "core-js-pure": ["core-js-pure@3.48.0", "", {}, "sha512-1slJgk89tWC51HQ1AEqG+s2VuwpTRr8ocu4n20QUcH1v9lAN0RXen0Q0AABa/DK1I7RrNWLucplOHMx8hfTGTw=="],
+
+    "js-toml": ["js-toml@1.0.2", "", { "dependencies": { "chevrotain": "^11.0.3", "xregexp": "^5.1.1" } }, "sha512-/7IQ//bzn2a/5IDazPUNzlW7bsjxS51cxciYZDR+Z+3Le60yzT0YfI8KOWqTtBcZkXXVklhWd2OuGd8ZksB0wQ=="],
+
+    "lodash-es": ["lodash-es@4.17.23", "", {}, "sha512-kVI48u3PZr38HdYz98UmfPnXl2DXrpdctLrFLCd3kOx1xUkOmpFPx7gCWWM5MPkL/fD8zb+Ph0QzjGFs4+hHWg=="],
+
+    "picocolors": ["picocolors@1.1.1", "", {}, "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA=="],
+
+    "sisteransi": ["sisteransi@1.0.5", "", {}, "sha512-bLGGlR1QxBcynn2d5YmDX4MGjlZvy2MRBDRNHLJ8VI6l6+9FUiyTFNJ0IveOSP0bcXgVDPRcfGqA0pjaqUpfVg=="],
+
+    "toml": ["toml@3.0.0", "", {}, "sha512-y/mWCZinnvxjTKYhJ+pYxwD0mRLVvOtdS2Awbgxln6iEnt4rk0yBxeSBHkGJcPucRiG0e55mwWp+g/05rsrd6w=="],
+
+    "xregexp": ["xregexp@5.1.2", "", { "dependencies": { "@babel/runtime-corejs3": "^7.26.9" } }, "sha512-6hGgEMCGhqCTFEJbqmWrNIPqfpdirdGWkqshu7fFZddmTSfgv5Sn9D2SaKloR79s5VUiUlpwzg3CM3G6D3VIlw=="],
+  }
+}
diff --git a/config/docopts.md b/config/docopts.md
index a41be77e..54b69bd7 100644
--- a/config/docopts.md
+++ b/config/docopts.md
@@ -24,13 +24,14 @@ Configure OpenServerless
 
 ```text
 Usage:
-  config (enable|disable) [--all] [--redis] [--mongodb] [--minio] [--cron] [--static] [--postgres] [--prometheus] [--slack] [--mail] [--affinity] [--tolerations] [--quota] [--milvus] [--registry]
+  config (enable|disable) [--all] [--redis] [--mongodb] [--minio] [--cron] [--static] [--postgres] [--prometheus] [--slack] [--mail] [--affinity] [--tolerations] [--quota] [--milvus] [--registry] [--seaweedfs]
   config apihost (<apihost>|auto) [--tls=<email>] [--protocol=<http/https>|auto]
   config runtimes [<runtimesjson>]  
   config slack [--apiurl=<slackapiurl>] [--channel=<slackchannel>]
   config mail  [--mailuser=<mailuser>] [--mailpwd=<mailpwd>] [--mailfrom=<mailfrom>] [--mailto=<mailto>]
-  config volumes [--couchdb=<couchdb>] [--kafka=<kafka>] [--pgvol=<postgres>] [--storage=<storage>] [--alerting=<alerting>] [--zookeeper=<zookeeper>] [--redisvol=<redis>] [--mongodbvol=<mongodb>] [--etcdvol=<etcd>] [--mvvol=<milvus>] [--mvzookvol=<milvuszook>] [--pulsarjournalvol=<pulsarjournal>] [--pulsarledgelvol=<pulsarledge>]  
+  config volumes [--couchdb=<couchdb>] [--kafka=<kafka>] [--pgvol=<postgres>] [--storage=<storage>] [--alerting=<alerting>] [--zookeeper=<zookeeper>] [--redisvol=<redis>] [--mongodbvol=<mongodb>] [--etcdvol=<etcd>] [--mvvol=<milvus>] [--mvzookvol=<milvuszook>] [--pulsarjournalvol=<pulsarjournal>] [--pulsarledgelvol=<pulsarledge>] [--seaweedfsvol=<seaweedfsvol>]  
   config controller [--javaopts=<javaopts>] [--loglevel=<loglevel>] [--replicas=<replicas>]
+  config ingress [--class=<auto|nginx|traefik|public>]
   config invoker [--javaopts=<javaopts>] [--poolmemory=<poolmemory>] [--timeoutsrun=<timeoutsrun>] [--timeoutslogs=<timeoutslogs>] [--loglevel=<loglevel>] [--replicas=<replicas>]
   config limits [--time=<time>] [--memory=<memory>] [--sequencelength=<sequencelength>] [--perminute=<perminute>] [--concurrent=<concurrent>] [--triggerperminute=<triggerperminute>] [--activation_max_payload=<activation_max_payload>] [--blackbox_fraction=<blackbox_fraction>]
   config storage [--class=<storage_class>] [--provisioner=<storage_provisioner>]
@@ -45,7 +46,8 @@ Usage:
   config azcloud [--project=<project>] [--region=<region>] [--vm=<vm>] [--disk=<disk>] [--key=<key>] [--image=<image>]
   config aks [--project=<project>] [--name=<name>] [--region=<region>] [--count=<count>]  [--vm=<vm>] [--disk=<disk>] [--key=<key>]
   config externalregistry [--regurl=<regurl>] [--reguser=<reguser>] [--regpassword=<regpassword>]
-  config registry [--disk=<disk>] [--ingress] 
+  config registry [--disk=<disk>] [--ingress]
+  config seaweedfs [--s3] [--console]
   config (status|export|reset)
   config use [<n>] [--delete] [--rename=<rename>]
   config minimal
@@ -63,6 +65,7 @@ Usage:
   config mail             configure Alert Manager over a gmail account
   config volumes          configure the volume size distinguished in 3 categories (openwhisk couchdb & kafka, database, minio storage, alerting, milvus)
   config controller       configure Openwhisk enterprise controller java options
+  config ingress          configure OpenServerless ingress class
   config invoker          configure Openwhisk enterprise invoker options
   config limits           configure Openwhisk actions limits
   config storage          allows to customize storage persistence class and provider
@@ -120,4 +123,6 @@ Usage:
   --quota               select quota checker module
   --milvus              select MILVUS vector database
   --registry            activate the support for a private image registry for custom actions (by default it will install one)
+  --class               specify the ingress class. It can be auto, traefik, nginx. On microk8s it should be public.
+  --seaweedfs           activate the support of SEAWEEDFS as S3 api and buckets provider
 ```
diff --git a/config/opsfile.yml b/config/opsfile.yml
index d8f92f0d..9cb5c90b 100644
--- a/config/opsfile.yml
+++ b/config/opsfile.yml
@@ -124,7 +124,12 @@ tasks:
         then 
           config OPERATOR_COMPONENT_REGISTRY=true
           config REGISTRY_CONFIG_SECRET_PUSH_PULL="$(random --str 12)"
-        fi                 
+        fi  
+      - | 
+        if {{.__seaweedfs}} || {{.__all}}
+        then 
+          config OPERATOR_COMPONENT_SEAWEEDFS=true          
+        fi                         
       - config CONFIGURED=true
       - task: status
 
@@ -197,14 +202,19 @@ tasks:
       - | 
         if {{.__milvus}} || {{.__all}}
         then 
-          config OPERATOR_CONFIG_MILVUS=false
-          config OPERATOR_CONFIG_ETCD=false
+          config OPERATOR_COMPONENT_MILVUS=false
+          config OPERATOR_COMPONENT_ETCD=false
         fi  
       - | 
         if {{.__registry}} || {{.__all}}
         then 
-          config OPERATOR_CONFIG_REGISTRY=false
-        fi                                  
+          config OPERATOR_COMPONENT_REGISTRY=false
+        fi
+      - | 
+        if {{.__seaweedfs}} || {{.__all}}
+        then 
+          config OPERATOR_COMPONENT_SEAWEEDFS=false
+        fi                                            
       - task: status
 
   status:
@@ -870,7 +880,16 @@ tasks:
         HINT: | 
               Specifies an integer value
         VAL: "{{.__pulsarledgelvol}}"
-        DEF: "20"                                               
+        DEF: "20" 
+    - task: read
+      vars:
+        MSG: "SEAWEEDFS Volume size"
+        VAR: "STORAGE_SIZE_SEAWEEDFS"
+        HINT: | 
+              Specifies an integer value
+        VAL: "{{.__seaweedfsvol}}"
+        DEF: "60"         
+
 
   controller:
     silent: true
@@ -1080,7 +1099,6 @@ tasks:
       then config MINIO_CONFIG_INGRESS_CONSOLE=true
       fi 
 
-
   etcd:
     silent: true
     cmds:
@@ -1158,7 +1176,18 @@ tasks:
             Specifies the volume size assigned to the image registry
           VAL: "{{.__disk}}"
           DEF: "50"
-                                      
+
+  seaweefs:
+    silent: true
+    cmds:
+    - |
+      if {{.__s3}}
+      then config SEAWEEDFS_CONFIG_INGRESS_S3_ENABLED=true
+      fi    
+    - |
+      if {{.__console}}
+      then config SEAWEEDFS_CONFIG_INGRESS_CONSOLE_ENABLED=true
+      fi           
 
   minimal:
     silent: true
@@ -1169,7 +1198,7 @@ tasks:
     - |
       config OPERATOR_COMPONENT_MONGODB=true
     - |
-      config OPERATOR_COMPONENT_MINIO=true
+      config OPERATOR_COMPONENT_SEAWEEDFS=true
     - |
       config OPERATOR_COMPONENT_CRON=true  
     - |
@@ -1188,13 +1217,14 @@ tasks:
       config OPERATOR_COMPONENT_KAFKA=false  
       config OPERATOR_COMPONENT_REDIS=true
       config OPERATOR_COMPONENT_MONGODB=true
-      config OPERATOR_COMPONENT_MINIO=true
+      config OPERATOR_COMPONENT_MINIO=false
+      config OPERATOR_COMPONENT_SEAWEEDFS=true
       config OPERATOR_COMPONENT_CRON=true
       config OPERATOR_COMPONENT_STATIC=true
       config OPERATOR_COMPONENT_POSTGRES=true
       config OPERATOR_COMPONENT_ETCD=true
       config OPERATOR_COMPONENT_MILVUS=true      
-      config MINIO_CONFIG_INGRESS_S3=true
+      config SEAWEEDFS_CONFIG_INGRESS_S3_ENABLED=true
       config ETCD_CONFIG_REPLICAS=1
       config POSTGRES_CONFIG_REPLICAS=1
       config OPERATOR_CONFIG_SLIM=true
@@ -1205,3 +1235,15 @@ tasks:
       config OPENWHISK_INVOKER_CONTAINER_POOL_MEMORY=6g
     - task: status
     - config CONFIGURED=true
+
+  ingress:
+    silent: true
+    cmds:
+    - task: read
+      vars:
+        MSG: "Ingress Class"
+        VAR: "OPERATOR_CONFIG_INGRESSCLASS"
+        HINT: | 
+              Specify the ingress class.
+        VAL: "{{.__class}}"
+        DEF: "auto"
\ No newline at end of file
diff --git a/ide/deploy/bun.lockb b/ide/deploy/bun.lockb
old mode 100644
new mode 100755
index 47fe67b3..526bb27d
Binary files a/ide/deploy/bun.lockb and b/ide/deploy/bun.lockb differ
diff --git a/ide/deploy/client.js b/ide/deploy/client.js
index 307f7ed9..e9ce791c 100644
--- a/ide/deploy/client.js
+++ b/ide/deploy/client.js
@@ -18,12 +18,27 @@
 import {readFile} from 'fs/promises';
 import {resolve} from 'path';
 import process from 'process';
-import {createInterface} from 'readline';
-import {globalWatcher} from './watch';
-import {expandEnv} from './env_utils';
+import {globalWatcher} from './watch.js';
+import {expandEnv} from './env_utils.js';
 const { parse } = await import('shell-quote');
 export let globalProc = undefined;
 
+async function signalHandler() {
+    if (globalProc) {
+        console.log(`🔥Killing process pid ${globalProc.pid}`);
+        globalProc.kill();
+    }
+    if (globalWatcher) {
+        console.log("☠️ Stopping watcher");
+        await globalWatcher.close();
+    }
+    process.exit(0);
+}
+
+// Register signal handlers once at module level
+process.on('SIGINT', signalHandler);
+process.on('SIGTERM', signalHandler);
+
 /**
  * Read a key from OpenServerless configuration added to a `package.json` file in the
  * root of the project
@@ -44,20 +59,7 @@ export async function getOpenServerlessConfig(key, defaultValue) {
 }
 
 /**
- * This function creates a line-by-line interface over the provided input stream
- * and logs each line to the console as it is received.
- * @param {ReadableStream} inp - The input stream to read lines from.
- * @returns {void}
- */
-function readlines(inp) {
-    const rl = createInterface({input: inp, terminal: false});
-    rl.on('line', (line) => {
-        console.log(line);
-    });
-}
-
-/**
- * laungh a process with the command taken from OpenServerless Config
+ * launch a process with the command taken from OpenServerless Config
  * (see `getOpenServerlessConfig`)
  * @param key
  * @param defaultValue
@@ -65,7 +67,7 @@ function readlines(inp) {
 export async function launch(key, defaultValue) {
     const cmd = await getOpenServerlessConfig(key, defaultValue);
     const cmdArgs = parse(cmd).filter(arg => typeof arg === "string");
-    const proc = Bun.spawn(cmdArgs, {
+    Bun.spawn(cmdArgs, {
         shell: true,
         env: process.env,
         cwd: process.env.OPS_PWD,
@@ -78,7 +80,7 @@ export async function launch(key, defaultValue) {
  * through `getOpenServerlessConfig` mechanism
  */
 export async function serve() {
-    await launch('devel', 'ops ide serve');
+    launch('devel', 'ops ide serve');    
 }
 
 /**
@@ -86,17 +88,7 @@ export async function serve() {
  * through `getOpenServerlessConfig` mechanism
  */
 export async function logs() {
-    await launch('logs', 'ops activation poll');
-}
-
-async function signalHandler() {
-    console.log(`🔥Killing process pid ${globalProc.pid}`);
-    if (globalWatcher) {
-        console.log("☠️ Stopping watcher");
-        await globalWatcher.close();
-    }
-    globalProc.kill();
-    process.exit(0);
+    launch('logs', 'ops activation poll');
 }
 
 /**
@@ -122,10 +114,6 @@ export async function build() {
 
     console.log(`✈️ Deploy Child process: ${deploy} has PID: ${globalProc.pid}`);
 
-    // Register signal handlers
-    process.on('SIGINT', signalHandler);
-    process.on('SIGTERM', signalHandler);
-
     // Await its completion
     try {
         const code = await globalProc.exited;
diff --git a/ide/deploy/deploy.js b/ide/deploy/deploy.js
index 293ed503..28f16bc0 100644
--- a/ide/deploy/deploy.js
+++ b/ide/deploy/deploy.js
@@ -15,9 +15,9 @@
 // specific language governing permissions and limitations
 // under the License.
 
-import fs from 'fs/promises';
-import { expandEnv } from './env_utils';
-const { parse } = await import('shell-quote');
+import fs from "fs/promises";
+import { expandEnv } from "./env_utils";
+const { parse } = await import("shell-quote");
 
 const MAINS = ["__main__.py", "index.js", "index.php", "main.go"];
 
@@ -33,13 +33,13 @@ export function setDryRun(b) {
 async function exec(cmd) {
   console.log("$", cmd);
   cmd = expandEnv(cmd);
-  const cmdArgs = parse(cmd).filter(arg => typeof arg === "string");
-  
+  const cmdArgs = parse(cmd).filter((arg) => typeof arg === "string");
+
   const proc = Bun.spawn(cmdArgs, {
     shell: true,
     env: process.env,
     cwd: process.env.OPS_PWD,
-    stdio: ['inherit', 'inherit', 'inherit']
+    stdio: ["inherit", "inherit", "inherit"],
   });
   await proc.exited;
 }
@@ -51,11 +51,13 @@ async function extractArgs(files) {
       const fileContent = await fs.readFile(file, "utf-8");
       const lines = fileContent.split("\n");
       for (const line of lines) {
-        if (line.startsWith("#-")) {
-          res.push(line.trim().substring(1));
+        // python style comment
+        if (line.match(/^#[ ]?-{1,2}[^\s-].+/)) {
+          res.push(line.trim().substring(1).trim());
         }
-        if (line.startsWith("//-")) {
-          res.push(line.trim().substring(2));
+        // js style comment
+        if (line.match(/^\/\/[ ]?-{1,2}[^\s-].+/)) {
+          res.push(line.trim().substring(2).trim());
         }
       }
     }
@@ -87,7 +89,9 @@ export async function buildAction(pkg, action) {
 }
 
 export async function deployAction(artifact) {
-  let pkg = '', name='', typ = '';
+  let pkg = "",
+    name = "",
+    typ = "";
 
   if (activeDeployments.has(artifact)) {
     queue.push(artifact);
@@ -96,7 +100,7 @@ export async function deployAction(artifact) {
 
   activeDeployments.set(artifact, true);
   const indexInQueue = queue.indexOf(artifact);
-  if (indexInQueue>-1) {
+  if (indexInQueue > -1) {
     console.log(`⚙️ Deploying ${artifact} (from queue: ${indexInQueue})`);
   }
 
@@ -106,11 +110,12 @@ export async function deployAction(artifact) {
     name = spData[0];
     typ = spData[1];
     pkg = sp[1];
-  } catch {
-    console.log("❌ cannot deploy", artifact);
+  } catch(error) {
+    
+    console.log("❌ cannot deploy", artifact, "Error:", error.message);
     return;
   }
-  
+
   await deployPackage(pkg);
 
   let toInspect;
@@ -134,7 +139,6 @@ export async function deployAction(artifact) {
   }
 }
 
-
 /**
  * Deploy a `file`
  * @param file
@@ -146,7 +150,7 @@ export async function deploy(file) {
   // const file = "packages/deploy/multi/__main__.py";
   // const file = "packages/deploy/multi/requirements.txt";
 
-  const stat = await fs.stat(file)
+  const stat = await fs.stat(file);
 
   if (stat.isDirectory()) {
     for (const start of MAINS) {
@@ -157,10 +161,10 @@ export async function deploy(file) {
       }
     }
   }
-  
+
   const sp = file.split("/");
   if (sp.length > 3) {
-    buildZip(sp[1], sp[2]);
+    await buildZip(sp[1], sp[2]);
     file = await buildAction(sp[1], sp[2]);
   }
   console.log(`Deploying ${file}`);
@@ -174,10 +178,12 @@ export async function deploy(file) {
 export async function deployProject(artifact) {
   if (await fs.exists(artifact)) {
     const manifestContent = await Bun.file(artifact).text();
-    if (manifestContent.indexOf('packages:')!==-1) {
+    if (manifestContent.indexOf("packages:") !== -1) {
       await exec(`ops -wsk project deploy --manifest ${artifact}`);
     } else {
-      console.log(`⚠️ Warning: it seems that the ${artifact} file is not a valid manifest file. Skipping`);
+      console.log(
+        `⚠️ Warning: it seems that the ${artifact} file is not a valid manifest file. Skipping`
+      );
     }
   }
 }
diff --git a/ide/deploy/env_utils.js b/ide/deploy/env_utils.js
index e793551b..4670b144 100644
--- a/ide/deploy/env_utils.js
+++ b/ide/deploy/env_utils.js
@@ -47,7 +47,7 @@ export function expandEnv(str, env = process.env) {
           const name = varMatch[1];
           let val;
           if (name === "$") val = process.pid;
-          else if (name === "?") val = "0"; // impossibile sapere senza contesto
+          else if (name === "?") val = "0"; // Cannot determine actual exit code without execution context
           else if (name === "#") val = "0";
           else if (name === "!") val = "";
           else val = env[name] ?? "";
diff --git a/ide/deploy/index.js b/ide/deploy/index.js
index 2889f029..d4c7ddec 100644
--- a/ide/deploy/index.js
+++ b/ide/deploy/index.js
@@ -22,6 +22,7 @@ import {program} from 'commander';
 import {scan} from './scan.js';
 import {watchAndDeploy, globalWatcher} from './watch.js';
 import {setDryRun, deploy} from './deploy.js';
+import {undeploy, setDryRun as setUndeployDryRun} from './undeploy.js';
 import {build} from './client.js';
 
 
@@ -34,8 +35,11 @@ async function signalHandler() {
         await globalWatcher.close();
     }
 
-    unlinkSync(expanduser('~/.ops/tmp/deploy.pid'));
-    process.kill(process.getpgrp(), 'SIGKILL');
+    const pidPath = expanduser('~/.ops/tmp/deploy.pid');
+    if (existsSync(pidPath)) {
+        unlinkSync(pidPath);
+    }
+    process.kill(process.pid, 'SIGTERM');
     process.exit(0); // should not be reached but just in case...
 }
 
@@ -44,7 +48,7 @@ function checkPort() {
     server.listen(8080, '127.0.0.1');
     server.on('error', () => {
         console.log('deployment mode already active (or something listening in 127.0.0.1:8080)');
-        server.close();
+        server.close();        
     });
     server.on('listening', () => server.close());
 }
@@ -59,7 +63,6 @@ async function main() {
 
 
     process.on('SIGTERM', signalHandler);
-    process.on('SIGKILL', signalHandler);
     const pidfile = expanduser('~/.ops/tmp/deploy.pid');
     console.log('PID', pid);
 
@@ -74,15 +77,52 @@ async function main() {
         .option('-d, --deploy', 'Deploy')
         .option('-w, --watch', 'Watch for changes')
         .option('-s, --single <string>', 'Deploy a single action, either a single file or a directory.', '')
+        .option('-u, --undeploy', 'Undeploy actions and packages from the current project')
         .parse(process.argv);
 
     const options = program.opts();
     const directory = program.args[0];
 
     setDryRun(options.dryRun);
+    setUndeployDryRun(options.dryRun);
+
+    if (!existsSync(directory)) {
+        console.error(`❌ Error: Directory ${directory} does not exist`);
+        process.exit(1);
+    }
     process.chdir(directory);
 
-    if (options.watch) {
+    if (options.undeploy) {
+        // Undeploy actions and packages from the current project
+        let success;
+
+        if (options.single !== '') {
+            // If a single action is specified, undeploy just that action
+            let action = options.single;
+            if (!action.startsWith('packages/')) {
+                action = `packages/${action}`;
+            }
+
+            // Extract the package and action name
+            const parts = action.split('/');
+            if (parts.length >= 3) {
+                const pkg = parts[1];
+                const actionName = parts[2].split('.')[0]; // Remove file extension if present
+                success = undeploy(`${pkg}/${actionName}`);
+            } else {
+                // If the format is already package/action
+                success = undeploy(action);
+            }
+        } else {
+            // Otherwise, undeploy all actions and packages from the current project
+            success = undeploy();
+        }
+
+        if (!success) {
+            process.exit(1);
+        }
+        process.exit(0);
+    } else if (options.watch) {
         checkPort();
         if (!options.fast) {
             await scan();
@@ -92,7 +132,7 @@ async function main() {
 
     } else if (options.deploy) {
         await scan();
-        await build()
+        await build();
         process.exit(0);
     } else if (options.single !== '') {
         let action = options.single;
@@ -115,5 +155,3 @@ main().catch(err => {
     console.error(err);
     process.exit(1);
 });
-
-setInterval(() => {}, 1000);
\ No newline at end of file
diff --git a/ide/deploy/info.js b/ide/deploy/info.js
index 757ba9b2..ee7025da 100644
--- a/ide/deploy/info.js
+++ b/ide/deploy/info.js
@@ -1,11 +1,28 @@
+// Licensed to the Apache Software Foundation (ASF) under one
+// or more contributor license agreements.  See the NOTICE file
+// distributed with this work for additional information
+// regarding copyright ownership.  The ASF licenses this file
+// to you under the Apache License, Version 2.0 (the
+// "License"); you may not use this file except in compliance
+// with the License.  You may obtain a copy of the License at
+//
+//   http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing,
+// software distributed under the License is distributed on an
+// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+// KIND, either express or implied.  See the License for the
+// specific language governing permissions and limitations
+// under the License.
+
 import { getOpenServerlessConfig} from './client.js';
 import {program} from "commander";
 import process from "process";
 
 program
     .description('Deployer info')
-    .argument('<param>', 'The key to query')
-    .argument('<param>', 'The default value')
+    .argument('<key>', 'The key to query')
+    .argument('[default]', 'The default value')
     .parse(process.argv);
 
 const key = program.args[0];
diff --git a/ide/deploy/package.json b/ide/deploy/package.json
index 264d8d30..c490dc79 100644
--- a/ide/deploy/package.json
+++ b/ide/deploy/package.json
@@ -4,7 +4,8 @@
     "commander": "=13.1.0",
     "dotenv": "^16.4.7",
     "glob": "=11.0.1",
-    "shell-quote": "^1.8.3"
+    "shell-quote": "^1.8.3",
+    "mime-types": "^2.1.35"
   },
   "devDependencies": {
     "@types/bun": "=1.2.2"
diff --git a/ide/deploy/scan.js b/ide/deploy/scan.js
index 89628194..484089d3 100644
--- a/ide/deploy/scan.js
+++ b/ide/deploy/scan.js
@@ -19,6 +19,7 @@ import {glob} from 'glob';
 import {buildAction, buildZip, deployAction, deployPackage, deployProject} from './deploy.js';
 import {getOpenServerlessConfig} from './client.js';
 import {config} from "dotenv";
+import {syncDeployInfo} from "./syncDeployInfo";
 
 /**
  * This function will prepare and deploy the functions in `packages` directory.
@@ -52,21 +53,19 @@ export async function scan() {
     // load user defined requirements or use `defaultReqsGlobs`
     const packageGlobs = await getOpenServerlessConfig("requirements", defaultReqsGlobs);
     // requirements
-    const reqs = [];
+    const reqsSet = new Set();
 
     // Check for additional packages from each package
-    // and add them to the requirements array
+    // and add them to the requirements set
     for (const pkgGlob of packageGlobs) {
         const items = await glob(pkgGlob);
         for (const item of items) {
-            if (!reqs.includes(item)) {
-                reqs.push(item);
-            }
+            reqsSet.add(item);
         }
     }
 
     // let's package the functions that have requirements
-    for (const req of reqs) {
+    for (const req of reqsSet) {
         console.log(">> Requirements:", req);
         const sp = req.split("/");
         const act = await buildZip(sp[1], sp[2]);
@@ -83,18 +82,16 @@ export async function scan() {
     ];
     // load user defined main functions or use `defaultMainsGlobs`
     const mainsGlobs = await getOpenServerlessConfig("mains", defaultMainsGlobs);
-    const mains = [];
+    const mainsSet = new Set();
 
     for (const mainGlob of mainsGlobs) {
         const items = await glob(mainGlob);
         for (const item of items) {
-            if (!mains.includes(item)) {
-                mains.push(item);
-            }
+            mainsSet.add(item);
         }
     }
 
-    for (const main of mains) {
+    for (const main of mainsSet) {
         console.log(">> Main:", main);
         const sp = main.split("/");
         const act = await buildAction(sp[1], sp[2]);
@@ -110,18 +107,16 @@ export async function scan() {
         "packages/*/*.go"
     ];
     const singlesGlobs = await getOpenServerlessConfig("singles", defaultSinglesGlobs);
-    const singles = [];
+    const singlesSet = new Set();
 
     for (const singleGlob of singlesGlobs) {
         const items = await glob(singleGlob);
         for (const item of items) {
-            if (!singles.includes(item)) {
-                singles.push(item);
-            }
+            singlesSet.add(item);
         }
     }
 
-    for (const single of singles) {
+    for (const single of singlesSet) {
         console.log(">> Action:", single);
         const sp = single.split("/");
         deployments.add(single);
@@ -146,25 +141,30 @@ export async function scan() {
         "packages/*/*.yaml",
     ];
     const manifestsGlobs = await getOpenServerlessConfig("manifests", defaultProjectGlobs);
-    const manifests = [];
+    const manifestsSet = new Set();
 
     for (const manifestGlobs of manifestsGlobs) {
         const items = await glob(manifestGlobs);
         for (const item of items) {
-            if (!manifests.includes(item)) {
-                manifests.push(item);
-            }
+            manifestsSet.add(item);
         }
-        manifests.sort((a, b) => a.localeCompare(b));
     }
-    if (manifests.length >0 ) {
-        if (Bun.file('packeges/.env')) {
+    const manifests = Array.from(manifestsSet).sort((a, b) => a.localeCompare(b));
+    if (manifests.length > 0) {
+        if (await Bun.file('packages/.env').exists()) {
             console.log("Found packages .env file. Reading it");
-            config({ path: "./package/.env" });
+            config({ path: "./packages/.env" });
         }
         for (const manifest of manifests) {
             console.log(">>> Manifest:", manifest);
             await deployProject(manifest);
         }
     }
+
+    try {
+        // Save deployment information with the new structure
+        syncDeployInfo(packages, deployments);
+    } catch (error) {
+        console.error("Error saving deployment information:", error);
+    }
 }
diff --git a/ide/deploy/serve.js b/ide/deploy/serve.js
index 549e89d8..7d22e8e9 100644
--- a/ide/deploy/serve.js
+++ b/ide/deploy/serve.js
@@ -17,6 +17,7 @@
 
 import {stat} from "fs/promises";
 import {resolve, extname} from "path";
+import {lookup as lookupMime} from 'mime-types';
 import {parse} from "url";
 import process from 'process';
 import { file } from "bun";
@@ -54,16 +55,44 @@ async function findAvailablePort(host, startPort = 8080) {
  * @returns {Promise<Buffer<ArrayBuffer>>}
  */
 async function toBuffer(stream) {
-    const list = []
-    const reader = stream.getReader();
-    while (true) {
-        const {value, done} = await reader.read();
-        if (value)
-            list.push(value)
-        if (done)
-            break
+    // If there's no body (e.g. OPTIONS requests or empty bodies), return null
+    if (!stream) return null;
+
+    // Some runtimes provide a ReadableStream with getReader(), others may give a Node-style stream
+    if (typeof stream.getReader === 'function') {
+        const list = [];
+        const reader = stream.getReader();
+        while (true) {
+            const {value, done} = await reader.read();
+            if (value)
+                list.push(value);
+            if (done)
+                break;
+        }
+        return Buffer.concat(list);
+    }
+
+    // If it's already a Buffer or ArrayBuffer-like
+    if (Buffer.isBuffer(stream)) return stream;
+    if (stream instanceof ArrayBuffer) return Buffer.from(new Uint8Array(stream));
+
+    // If it's an async iterator (Node readable), consume it
+    if (stream[Symbol.asyncIterator]) {
+        const list = [];
+        for await (const chunk of stream) {
+            list.push(Buffer.from(chunk));
+        }
+        return Buffer.concat(list);
     }
-    return Buffer.concat(list)
+
+    // Unknown type: try to stringify
+    try {
+        const s = String(stream);
+        return Buffer.from(s, 'utf8');
+    } catch (e) {
+        return null;
+    }
+
 }
 
 //
@@ -73,20 +102,10 @@ async function toBuffer(stream) {
  * @returns {*|string}
  */
 function getMimeType(filePath) {
-    const ext = extname(filePath).toLowerCase();
-    const mimeTypes = {
-        ".html": "text/html",
-        ".css": "text/css",
-        ".js": "application/javascript",
-        ".json": "application/json",
-        ".png": "image/png",
-        ".jpg": "image/jpeg",
-        ".gif": "image/gif",
-        ".svg": "image/svg+xml",
-        ".txt": "text/plain",
-        // Add more mimetypes as needed
-    };
-    return mimeTypes[ext] || "application/octet-stream";
+    // Use the mime-types package to resolve mimetypes for a broad set of extensions.
+    // Fallback to application/octet-stream when unknown.
+    const m = lookupMime(filePath);
+    return m || "application/octet-stream";
 }
 
 const excludedAssets = ['favicon.ico'];
@@ -154,15 +173,45 @@ async function main() {
 
                 if (fileStats.isFile()) {
                     const mimeType = flags.mimeType || getMimeType(filePath);
+
+                    // Compute caching headers
+                    const lastModified = fileStats.mtime.toUTCString();
+                    // Simple ETag based on inode/size/mtime if available
+                    const etag = `W/"${fileStats.size}-${fileStats.mtimeMs}"`;
+
+                    // Handle conditional requests
+                    const ifNoneMatch = req.headers.get('if-none-match');
+                    const ifModifiedSince = req.headers.get('if-modified-since');
+                    if (ifNoneMatch && ifNoneMatch === etag) {
+                        return new Response(null, {status: 304, headers: {"ETag": etag}});
+                    }
+                    if (ifModifiedSince) {
+                        const since = new Date(ifModifiedSince);
+                        if (!isNaN(since.getTime()) && fileStats.mtime <= since) {
+                            return new Response(null, {status: 304, headers: {"Last-Modified": lastModified, "ETag": etag}});
+                        }
+                    }
+
                     const headers = {
                         "Content-Type": mimeType,
+                        "Content-Length": String(fileStats.size),
+                        "Last-Modified": lastModified,
+                        "ETag": etag,
                     };
                     if (flags.cacheTime) {
                         headers["Cache-Control"] = `max-age=${flags.cacheTime}`;
                     }
                     console.log(`[200] - Serving file ${pathname} from filesystem`);
-                    const data = await Bun.file(filePath).text();
-                    return new Response(data, {headers});
+                    // Stream the file to avoid loading the whole file into memory
+                    // Bun.file(filePath).stream() returns a ReadableStream
+                    try {
+                        const stream = Bun.file(filePath).stream();
+                        return new Response(stream, {headers});
+                    } catch (e) {
+                        // Fallback: read as arrayBuffer if stream isn't available
+                        const ab = await Bun.file(filePath).arrayBuffer();
+                        return new Response(ab, {headers});
+                    }
                 }
             } catch (err) {
                 let shouldExclude = (excludedAssets.indexOf(pathname) !== -1);
@@ -189,12 +238,21 @@ async function main() {
                         method: req.method,
                         headers: newHeaders,
                     };
-                    if (req.method.toLowerCase() !== 'get') {
-                        let body = await toBuffer(req.body);
-                        body = body.toString('utf8');
-
-                        if (body !== undefined) {
-                            init['body'] = body;
+                    // Only forward a body when the method permits it and a body exists
+                    const method = req.method.toLowerCase();
+                    const canHaveBody = (method !== 'get' && method !== 'head' && method !== 'options');
+                    if (canHaveBody && req.body) {
+                        const buf = await toBuffer(req.body);
+                        if (buf && buf.length > 0) {
+                            // prefer sending string when it's valid UTF-8 text
+                            let bodyToSend = buf;
+                            try {
+                                const text = buf.toString('utf8');
+                                bodyToSend = text;
+                            } catch (e) {
+                                bodyToSend = buf;
+                            }
+                            init['body'] = bodyToSend;
                         }
                     }
                     const respP = await fetch(destProxyUrl, init);
diff --git a/ide/deploy/syncDeployInfo.js b/ide/deploy/syncDeployInfo.js
new file mode 100644
index 00000000..6865019b
--- /dev/null
+++ b/ide/deploy/syncDeployInfo.js
@@ -0,0 +1,124 @@
+// Licensed to the Apache Software Foundation (ASF) under one
+// or more contributor license agreements.  See the NOTICE file
+// distributed with this work for additional information
+// regarding copyright ownership.  The ASF licenses this file
+// to you under the Apache License, Version 2.0 (the
+// "License"); you may not use this file except in compliance
+// with the License.  You may obtain a copy of the License at
+//
+//   http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing,
+// software distributed under the License is distributed on an
+// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+// KIND, either express or implied.  See the License for the
+// specific language governing permissions and limitations
+// under the License.
+
+import {existsSync, mkdirSync, writeFileSync, readFileSync} from "fs";
+
+/**
+ * Synchronizes deployment information by saving the provided package and deployment data
+ * to a persisted `.ops/deployment.json` file. If the directory `.ops` does not exist, it
+ * is created before saving the information.
+ *
+ * The deployment information is organized by packages, with each package containing an array
+ * of its actions. This allows for more granular control when undeploying specific actions.
+ *
+ * @param {Set<string>} packages - A set of package names to include in the deployment data.
+ * @param {Set<string>} deployments - A set of deployment identifiers to include in the deployment data.
+ * @return {void}
+ */
+export function syncDeployInfo(packages, deployments) {
+    if (!existsSync('.ops')) {
+        mkdirSync('.ops', { recursive: true });
+    }
+
+    // Create a structured object with packages as keys and arrays of actions as values
+    const packageActions = {};
+
+    // Initialize packages with empty arrays
+    for (const pkg of packages) {
+        packageActions[pkg] = [];
+    }
+
+    // Add actions to their respective packages
+    for (const deployment of deployments) {
+        try {
+            const sp = deployment.split("/");
+            const spData = sp[sp.length - 1].split(".");
+            const name = spData[0];
+            const pkg = sp[1];
+
+            // If the package exists in our structure, add the action to it
+            if (packageActions[pkg]) {
+                packageActions[pkg].push(name);
+            }
+        } catch (error) {
+            console.error(`Error parsing deployment path ${deployment}:`, error);
+        }
+    }
+
+    const deploymentInfo = {
+        packages: Array.from(packages),
+        packageActions: packageActions
+    };
+
+    writeFileSync('.ops/deployment.json', JSON.stringify(deploymentInfo, null, 2));
+    console.log("> Saved deployment information to .ops/deployment.json");
+}
+
+/**
+ * Removes a specific action from the deployment information.
+ * 
+ * @param {string} actionName - The name of the action to remove in the format "package/action".
+ * @return {boolean} - True if the action was found and removed, false otherwise.
+ */
+export function removeActionFromDeployInfo(actionName) {
+    if (!existsSync('.ops/deployment.json')) {
+        console.error('Error: No deployment information found.');
+        return false;
+    }
+
+    try {
+        const deploymentInfo = JSON.parse(readFileSync('.ops/deployment.json', 'utf8'));
+        const [pkg, action] = actionName.split('/');
+
+        if (!deploymentInfo.packageActions || !deploymentInfo.packageActions[pkg]) {
+            console.error(`❌ Error: Package ${pkg} not found in deployment information.`);
+            return false;
+        }
+
+        const actionIndex = deploymentInfo.packageActions[pkg].indexOf(action);
+        if (actionIndex === -1) {
+            console.error(`❌ Error: Action ${action} not found in package ${pkg}.`);
+            return false;
+        }
+
+        // Remove the action from the package
+        deploymentInfo.packageActions[pkg].splice(actionIndex, 1);
+
+        // If the package has no more actions, remove it from the packages list
+        if (deploymentInfo.packageActions[pkg].length === 0) {
+            const packageIndex = deploymentInfo.packages.indexOf(pkg);
+            if (packageIndex !== -1) {
+                deploymentInfo.packages.splice(packageIndex, 1);
+            }
+            delete deploymentInfo.packageActions[pkg];
+        }
+
+        writeFileSync('.ops/deployment.json', JSON.stringify(deploymentInfo, null, 2));
+        console.log(`> Removed ${actionName} from deployment information.`);
+        return true;
+    } catch (error) {
+        console.error("❌ Error updating deployment information:", error);
+        return false;
+    }
+}
+
+/**
+ * Cleans up deployment information by resetting and synchronizing deployment data.
+ */
+export function cleanupDeployInfo() {
+    syncDeployInfo(new Set(), new Set());
+}
diff --git a/ide/deploy/undeploy.js b/ide/deploy/undeploy.js
new file mode 100644
index 00000000..74aa9c37
--- /dev/null
+++ b/ide/deploy/undeploy.js
@@ -0,0 +1,122 @@
+// Licensed to the Apache Software Foundation (ASF) under one
+// or more contributor license agreements.  See the NOTICE file
+// distributed with this work for additional information
+// regarding copyright ownership.  The ASF licenses this file
+// to you under the Apache License, Version 2.0 (the
+// "License"); you may not use this file except in compliance
+// with the License.  You may obtain a copy of the License at
+//
+//   http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing,
+// software distributed under the License is distributed on an
+// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+// KIND, either express or implied.  See the License for the
+// specific language governing permissions and limitations
+// under the License.
+
+import { existsSync, readFileSync } from 'fs';
+import { spawnSync } from 'child_process';
+import { cleanupDeployInfo, removeActionFromDeployInfo } from "./syncDeployInfo.js";
+import { expandEnv } from './env_utils.js';
+
+let dryRun = false;
+
+export function setDryRun(b) {
+  dryRun = b;
+}
+
+function exec(cmd) {
+  console.log("$", cmd);
+  if (!dryRun) {
+    cmd = expandEnv(cmd);
+    const result = spawnSync(cmd, { shell: true, env: process.env, stdio: "inherit" });
+    if (result.error) {
+      console.error(`Command failed: ${cmd}`, result.error);
+      throw result.error;
+    }
+    return result;
+  }
+}
+
+/**
+ * Undeploy a specific action and update the deployment information
+ * @param {string} actionName - The name of the action to undeploy in the format "package/action"
+ * @returns {boolean} true if successful, false if error
+ */
+export function undeployAction(actionName) {
+  console.log(`> Undeploying action: ${actionName}`);
+
+  try {
+    // Execute the undeploy command
+    exec(`$OPS action delete ${actionName}`);
+
+    // Update the deployment information
+    const success = removeActionFromDeployInfo(actionName);
+    if (success) {
+      console.log(`> Action ${actionName} successfully undeployed and removed from deployment information.`);
+      return true;
+    } else {
+      console.error(`> Action ${actionName} was undeployed but could not be removed from deployment information.`);
+      return false;
+    }
+  } catch (error) {
+    console.error(`Error undeploying action ${actionName}:`, error);
+    return false;
+  }
+}
+
+/**
+ * Undeploy actions and packages based on the deployment information in .ops/deployment.json
+ * If no deployment information is found, return an error
+ * @param {string} [specificAction] - Optional specific action to undeploy
+ * @returns {boolean} true if successful, false if error
+ */
+export function undeploy(specificAction) {
+  // If a specific action is provided, undeploy just that action
+  if (specificAction) {
+    return undeployAction(specificAction);
+  }
+
+  // Otherwise, undeploy all actions and packages from the current project
+  if (!existsSync('.ops/deployment.json')) {
+    console.error('❌ Error: No OpenServerless project found in the current directory.');
+    console.error('❌ Please run this command in a directory with an OpenServerless project.');
+    return false;
+  }
+
+  try {
+    const deploymentInfo = JSON.parse(readFileSync('.ops/deployment.json', 'utf8'));
+    const { packages, packageActions } = deploymentInfo;
+
+    if (!packages || !packageActions || packages.length === 0) {
+      console.error('❌ Error: No deployment information found.');
+      return false;
+    }
+
+    console.log("> Undeploy actions and packages from the current project:");
+
+    // Undeploy actions
+    for (const pkg of packages) {
+      const actions = packageActions[pkg] || [];
+      for (const action of actions) {
+        const actionName = `${pkg}/${action}`;
+        console.log(`>> Undeploy action: ${actionName}`);
+        exec(`$OPS action delete ${actionName}`);
+      }
+    }
+
+    // Undeploy packages
+    for (const pkg of packages) {
+      console.log(`>> Undeploy package: ${pkg}`);
+      exec(`$OPS package delete ${pkg}`);
+    }
+
+    cleanupDeployInfo();
+    console.log("> Undeployment completed successfully.");
+    return true;
+  } catch (error) {
+    console.error("❌ Error undeploy:", error);
+    return false;
+  }
+}
diff --git a/ide/docopts.md b/ide/docopts.md
index 5b4d4b64..5bc22b21 100644
--- a/ide/docopts.md
+++ b/ide/docopts.md
@@ -26,7 +26,7 @@ OpenServerless Ide Development Utilities.
 Usage:
     ide login [<username>] [<apihost>]
     ide devel [--fast] [--dry-run]
-    ide deploy [<action>] [--dry-run]
+    ide deploy [<action>|--packages|--web] [--dry-run]
     ide undeploy [<action>] [--dry-run]
     ide clean
     ide setup 
@@ -45,7 +45,7 @@ Usage:
     ide login               login in openserverless
     ide devel               activate development mode
     ide deploy              deploy everything or just one action
-    ide undeploy            undeploy everything or just one action
+    ide undeploy            undeploy actions and packages from the current project or just one action
     ide clean               clean the temporay files
     ide setup               setup the ide
     ide serve               serve web area
@@ -60,6 +60,8 @@ Usage:
 ## Options
 
 ```
---fast          Skip the initial deployment step and go in incremental update mode
 --dry-run       Simulates the execution without making any actual changes 
-```
\ No newline at end of file
+--packages      Only deploy packages, skip web upload
+--web           Only deploy web folder, skip packages
+--fast          Skip the initial deployment step and go in incremental update mode
+```
diff --git a/ide/opsfile.yml b/ide/opsfile.yml
index 25f4ad81..917c3786 100644
--- a/ide/opsfile.yml
+++ b/ide/opsfile.yml
@@ -22,7 +22,7 @@ vars:
   API_HOST:
     sh: |
       echo "http://localhost:80"
-  
+
   DEPLOY_CURRENT_HASH:
     sh: |
       if test -e "$OPS_ROOT/ide/deploy/bun.lockb"
@@ -36,12 +36,12 @@ vars:
       then cat "$OPS_ROOT/ide/deploy/hash.lock"
       else echo "0"
       fi
-      
+
 tasks:
 
   prereq:
     silent: true
-    vars: 
+    vars:
       MSG: |
             This command must be run inside a devcontainer.
             Please use 'ops ide devcontainer' to create a configuration and enter in a devcontainer.
@@ -59,7 +59,7 @@ tasks:
       - test "$(ops -wsk property get --namespace | awk '{ print $3 }')" = "$OPSDEV_USERNAME" || die "Repeat the login"
       - |
         if ! test -d "$OPS_ROOT/ide/deploy/node_modules" || [ "{{.DEPLOY_CURRENT_HASH}}" != "{{.DEPLOY_PREVIOUS_HASH}}" ]
-          then 
+          then
             cd $OPS_ROOT/ide/deploy && bun install && rm -f $OPS_ROOT/ide/deploy/hash.lock && bun $OPS_ROOT/ide/deploy/bun.lockb --hash > $OPS_ROOT/ide/deploy/hash.lock
         fi
       - |
@@ -67,9 +67,9 @@ tasks:
         then if ! test -d "$OPS_PWD/node_modules"
              then cd $OPS_PWD ; bun install
              fi
-        fi      
+        fi
       - task: kill
-  
+
   devcontainer:
     silent: true
     desc: add a devcontainer to your project
@@ -77,13 +77,13 @@ tasks:
       - |
         if test -e "$OPS_PWD/.devcontainer/devcontainer.json"
         then echo "a .devcontainer already exists"
-        else 
+        else
           mkdir -p "$OPS_PWD/.devcontainer"
           cp devcontainer.json "$OPS_PWD/.devcontainer/"
           echo "devcontainer created in .devcontainer - please use VSCode and the command 'Reopen in Container'"
         fi
       - |
-        if echo "$OPS_PWD/" | rg ' ' 
+        if echo "$OPS_PWD/" | rg ' '
         then die "please place your workspace in a folder WITHOUT SPACES IN THE FOLDER NAME!!!!"
         fi
       - bun x @devcontainers/cli up --workspace-folder "$OPS_PWD"
@@ -98,22 +98,22 @@ tasks:
         PIDFILE=$(ops -opspath ~/.ops/tmp/deploy.pid)
         echo $PIDFILE
         if test -e $PIDFILE
-        then          
+        then
           PID=$(cat $PIDFILE)
-          
+
           if [ ! -z "$PID" ]; then
             if ps -p "$PID" > /dev/null;
             then
               echo "Found previous deploy pid: $PID"
               kill "$PID"
-              # PGRP=$(ps -o 'pgid=' -p $PID | xargs)              
+              # PGRP=$(ps -o 'pgid=' -p $PID | xargs)
               # if [ ! -z "$PGRP" ];
-              # then 
+              # then
               #   echo "Terminating deploy process group $PGRP"
               #   kill "$PGRP"
               # else
               #   echo "Terminating deploy process $PID"
-              #   kill "$PID" 
+              #   kill "$PID"
               # fi
             fi
           fi
@@ -145,36 +145,44 @@ tasks:
     desc: login in you OpenServerless host
     cmds:
       - |
+        set -a
         if test -e "$OPS_PWD/.env"
         then source "$OPS_PWD/.env"
         fi
+        if test -n "$OPS_USERNAME"
+        then echo "Please use OPS_USER, OPS_USERNAME is deprecated"
+        fi
         if test -n "{{._apihost_}}"
-        then OPSDEV_APIHOST="{{._apihost_}}"
+        then export OPSDEV_APIHOST="{{._apihost_}}"
         fi
         echo "*** Configuring Access to OpenServerless ***"
-        if test -z "{{._apihost_}}"
-        then 
-            if test -z "$OPS_APIHOST"
+        if test -z "{{._username_}}"
+        then
+            if test -n "$OPS_USER"
             then
-                echo -n "Enter Apihost: "
-                read OPSDEV_APIHOST
-                OPSDEV_APIHOST="$(echo $OPSDEV_APIHOST | tr -d '\r')"
+                export OPSDEV_USERNAME="$OPS_USER"
             else
-                OPSDEV_APIHOST="$OPS_APIHOST"
+              echo -n "Enter Username: "
+              read OPSDEV_USERNAME
+              export OPSDEV_USERNAME="$(echo $OPSDEV_USERNAME | tr -d '\r')"
+            fi
+        else
+            export OPSDEV_USERNAME="{{._username_}}"
+            if test -e "$OPS_PWD/.env.{{._username_}}"
+            then source "$OPS_PWD/.env.{{._username_}}"
             fi
-        else OPSDEV_APIHOST="{{._apihost_}}"
         fi
-        if test -z "{{._username_}}"
+        if test -z "{{._apihost_}}"
         then
-            if test -n "$OPS_USERNAME"
+            if test -z "$OPS_APIHOST"
             then
-                OPSDEV_USERNAME="$OPS_USERNAME"
+                echo -n "Enter Apihost: "
+                read OPSDEV_APIHOST
+                export OPSDEV_APIHOST="$(echo $OPSDEV_APIHOST | tr -d '\r')"
             else
-              echo -n "Enter Username: "
-              read OPSDEV_USERNAME
-              OPSDEV_USERNAME="$(echo $OPSDEV_USERNAME | tr -d '\r')"
+                export OPSDEV_APIHOST="$OPS_APIHOST"
             fi
-        else OPSDEV_USERNAME="{{._username_}}"
+        else export OPSDEV_APIHOST="{{._apihost_}}"
         fi
         echo "Logging user $OPSDEV_USERNAME in $OPSDEV_APIHOST"
         if test -n "$OPS_PASSWORD"
@@ -188,10 +196,10 @@ tasks:
           config OPSDEV_USERNAME="$OPSDEV_USERNAME"
           config OPSDEV_HOST="$OPSDEV_HOST_PROT://$OPSDEV_USERNAME.$OPSDEV_HOST_URL"
           source ~/.wskprops
-        else 
-          false
         fi
-  
+
+
+
   poll:
     silent: true
     desc: poll activation logs
@@ -223,73 +231,86 @@ tasks:
         then source $OPS_PWD/packages/.env
         fi
         if test -n "$AUTH_CHECK"
-        then if test "$AUTH_CHECK" != "$AUTH" 
-             then echo "WARNING: wrong deploy! You are logged in a different user than your configured AUTH_CHECK" ; exit 1
+        then if test "$AUTH_CHECK" != "$AUTH"
+             then echo "WARNING: wrong deploy! You are logged in a different user than your pinned one and configured in .env as AUTH_CHECK" ; exit 1
              fi
         fi
+
         if {{.__dry_run}}
         then DRY="--dry-run" ; ECHO='echo'
         else DRY="" ; ECHO=""
         fi
-        if test -z "{{._action_}}"
+
+        if {{.__web}}
+        then deploy_packages=""
+        else deploy_packages="1"
+        fi
+
+        if {{.__packages}}
+        then deploy_web=""
+        else deploy_web="1"
+        fi
+
+        if test -n "{{._action_}}"
         then
-            bun {{.TASKFILE_DIR}}/deploy/index.js "$OPS_PWD" -d $DRY
-            OPS_UPLOAD_FOLDER=`bun {{.TASKFILE_DIR}}/deploy/info.js upload web`
-            echo "UPLOAD ASSETS FROM ${OPS_UPLOAD_FOLDER}"
-            $ECHO $OPS util upload ${OPS_UPLOAD_FOLDER:-web}
-            echo "URL: $OPSDEV_HOST"
+            bun {{.TASKFILE_DIR}}/deploy/index.js "$OPS_PWD" -s "{{._action_}}" $DRY
         else
-            bun {{.TASKFILE_DIR}}/deploy/index.js "$OPS_PWD" -s "{{._action_}}" $DRY            
+            if [ -n "$deploy_packages" ]
+            then
+                bun {{.TASKFILE_DIR}}/deploy/index.js "$OPS_PWD" -d $DRY
+            fi
+            if [ -n "$deploy_web" ]
+            then
+              OPS_UPLOAD_FOLDER=`bun {{.TASKFILE_DIR}}/deploy/info.js upload web`
+              echo "UPLOAD ASSETS FROM ${OPS_UPLOAD_FOLDER}"
+              $ECHO $OPS util upload ${OPS_UPLOAD_FOLDER:-web}
+              echo "URL: $OPSDEV_HOST"
+            fi
         fi
 
   undeploy:
-    desc: undeploy all the actions
-    prompt: "are you sure you want to remove all actions and packages?"
+    desc: undeploy actions and packages from the current project
     silent: true
     cmds:
       - task: prereq
-      - >
-        $OPS action list
-        | awk  'NR>1 { print $1}' 
-        | while read action ;
-        do  if {{.__dry_run}}
-            then echo '$' $OPS action delete "$action"
-            else $OPS action delete "$action"
-            fi
-        done
-      - >
-        $OPS package list
-        | awk  'NR>1 { print $1}'
-        | while read package ;
-        do if {{.__dry_run}}
-           then echo '$' $OPS package delete "$package" 
-           else $OPS package delete "$package" 
-           fi
-        done
+      - |
+        if {{.__dry_run}}
+        then DRY="--dry-run"
+        else DRY=""
+        fi
+        # Check if an action argument is provided
+        if test -n "{{._action_}}"
+        then
+          # Undeploy a specific action
+          echo "Undeploying specific action: {{._action_}}"
+          bun {{.TASKFILE_DIR}}/deploy/index.js "$OPS_PWD" -u -s "{{._action_}}" $DRY
+        else
+          # Undeploy all actions and packages from the current project
+          bun {{.TASKFILE_DIR}}/deploy/index.js "$OPS_PWD" -u $DRY
+        fi
       - >
         if {{.__dry_run}}
           then echo '$' $OPS util clean
           else $OPS util clean
         fi
-        
+
 
   clean:
     silent: true
     cmds:
       - task: kill
       - |
-        if test -d "$OPS_PWD/packages" 
-        then 
+        if test -d "$OPS_PWD/packages"
+        then
            echo "*** removing virtualenv"
            /bin/rm -rvf "$OPS_PWD"/packages/*/*/virtualenv/
            echo "*** removing node_modules"
            /bin/rm -rvf "$OPS_PWD"/packages/*/*/node_modules/
            echo "*** removing .zip"
-           /bin/rm -vf "$OPS_PWD"/packages/*/*.zip 
+           /bin/rm -vf "$OPS_PWD"/packages/*/*.zip
         else die "no packages in current directory"
         fi
 
-
   devel:
     interactive: true
     silent: true
@@ -305,7 +326,7 @@ tasks:
         then source $OPS_PWD/packages/.env
         fi
         if test -n "$AUTH_CHECK"
-        then if test "$AUTH_CHECK" != "$AUTH" 
+        then if test "$AUTH_CHECK" != "$AUTH"
              then echo "WARNING: wrong deploy! You are logged in a different user than your configured AUTH_CHECK" ; exit 1
              fi
         fi
@@ -334,7 +355,6 @@ tasks:
         bun {{.TASKFILE_DIR}}/deploy/index.js "$OPS_PWD" -w $FAST $DRY
         true
 
-
   shell:
     desc: open a bash shell with the current environment
     interactive: true
diff --git a/opsroot.json b/opsroot.json
index 67d0ed38..677fac30 100644
--- a/opsroot.json
+++ b/opsroot.json
@@ -5,11 +5,11 @@
 	     "coreutils": "arch b2sum b3sum base32 basename basenc cat chgrp chmod chown chroot cksum comm cp csplit cut date dd df dir dircolors dirname du env expand expr factor fmt fold groups hashsum head hostid hostname id install join kill link ln logname ls md5sum mkdir mkfifo mknod mktemp more mv nice nl nohup nproc numfmt od paste pathchk pinky pr printenv printf ptx pwd readlink realpath rm rmdir seq sha1sum sha224sum sha256sum sha3-224sum sha3-256sum sha3-384sum sha3-512sum sha384sum sha3sum sha512sum shake128sum shake256sum shred shuf sleep sort split stat stdbuf stty sum sync tac tail tee timeout touch tr truncate tsort tty uname unexpand uniq unlink uptime users vdir wc who whoami yes"
        },
        "images": {
-         "operator": "registry.hub.docker.com/apache/openserverless-operator:0.1.0-incubating.2507271249",
+         "operator": "registry.hub.docker.com/apache/openserverless-operator:0.1.0-incubating.2512151437",
          "controller": "ghcr.io/nuvolaris/openwhisk-controller:3.1.0-mastrogpt.2402101445",
          "invoker": "ghcr.io/nuvolaris/openwhisk-invoker:3.1.0-mastrogpt.2402101445",
          "streamer": "registry.hub.docker.com/apache/openserverless-streamer:0.1.0-incubating.2505031325",
-         "systemapi": "registry.hub.docker.com/apache/openserverless-admin-api:0.1.0-incubating.2508161629"
+         "systemapi": "registry.hub.docker.com/apache/openserverless-admin-api:0.1.0-incubating.2512101357"
         }
     }
 }
diff --git a/package.json b/package.json
new file mode 100644
index 00000000..7a76a42b
--- /dev/null
+++ b/package.json
@@ -0,0 +1,7 @@
+{
+  "dependencies": {
+    "@clack/prompts": "^1.0.1",
+    "js-toml": "^1.0.2",
+    "toml": "^3.0.0"
+  }
+}
\ No newline at end of file
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
new file mode 100644
index 00000000..d4401539
--- /dev/null
+++ b/pnpm-lock.yaml
@@ -0,0 +1,132 @@
+lockfileVersion: '9.0'
+
+settings:
+  autoInstallPeers: true
+  excludeLinksFromLockfile: false
+
+importers:
+
+  .:
+    dependencies:
+      '@clack/prompts':
+        specifier: ^1.0.1
+        version: 1.0.1
+      js-toml:
+        specifier: ^1.0.2
+        version: 1.0.2
+      toml:
+        specifier: ^3.0.0
+        version: 3.0.0
+
+packages:
+
+  '@babel/runtime-corejs3@7.29.0':
+    resolution: {integrity: sha512-TgUkdp71C9pIbBcHudc+gXZnihEDOjUAmXO1VO4HHGES7QLZcShR0stfKIxLSNIYx2fqhmJChOjm/wkF8wv4gA==}
+    engines: {node: '>=6.9.0'}
+
+  '@chevrotain/cst-dts-gen@11.1.1':
+    resolution: {integrity: sha512-fRHyv6/f542qQqiRGalrfJl/evD39mAvbJLCekPazhiextEatq1Jx1K/i9gSd5NNO0ds03ek0Cbo/4uVKmOBcw==}
+
+  '@chevrotain/gast@11.1.1':
+    resolution: {integrity: sha512-Ko/5vPEYy1vn5CbCjjvnSO4U7GgxyGm+dfUZZJIWTlQFkXkyym0jFYrWEU10hyCjrA7rQtiHtBr0EaZqvHFZvg==}
+
+  '@chevrotain/regexp-to-ast@11.1.1':
+    resolution: {integrity: sha512-ctRw1OKSXkOrR8VTvOxrQ5USEc4sNrfwXHa1NuTcR7wre4YbjPcKw+82C2uylg/TEwFRgwLmbhlln4qkmDyteg==}
+
+  '@chevrotain/types@11.1.1':
+    resolution: {integrity: sha512-wb2ToxG8LkgPYnKe9FH8oGn3TMCBdnwiuNC5l5y+CtlaVRbCytU0kbVsk6CGrqTL4ZN4ksJa0TXOYbxpbthtqw==}
+
+  '@chevrotain/utils@11.1.1':
+    resolution: {integrity: sha512-71eTYMzYXYSFPrbg/ZwftSaSDld7UYlS8OQa3lNnn9jzNtpFbaReRRyghzqS7rI3CDaorqpPJJcXGHK+FE1TVQ==}
+
+  '@clack/core@1.0.1':
+    resolution: {integrity: sha512-WKeyK3NOBwDOzagPR5H08rFk9D/WuN705yEbuZvKqlkmoLM2woKtXb10OO2k1NoSU4SFG947i2/SCYh+2u5e4g==}
+
+  '@clack/prompts@1.0.1':
+    resolution: {integrity: sha512-/42G73JkuYdyWZ6m8d/CJtBrGl1Hegyc7Fy78m5Ob+jF85TOUmLR5XLce/U3LxYAw0kJ8CT5aI99RIvPHcGp/Q==}
+
+  chevrotain@11.1.1:
+    resolution: {integrity: sha512-f0yv5CPKaFxfsPTBzX7vGuim4oIC1/gcS7LUGdBSwl2dU6+FON6LVUksdOo1qJjoUvXNn45urgh8C+0a24pACQ==}
+
+  core-js-pure@3.48.0:
+    resolution: {integrity: sha512-1slJgk89tWC51HQ1AEqG+s2VuwpTRr8ocu4n20QUcH1v9lAN0RXen0Q0AABa/DK1I7RrNWLucplOHMx8hfTGTw==}
+
+  js-toml@1.0.2:
+    resolution: {integrity: sha512-/7IQ//bzn2a/5IDazPUNzlW7bsjxS51cxciYZDR+Z+3Le60yzT0YfI8KOWqTtBcZkXXVklhWd2OuGd8ZksB0wQ==}
+
+  lodash-es@4.17.23:
+    resolution: {integrity: sha512-kVI48u3PZr38HdYz98UmfPnXl2DXrpdctLrFLCd3kOx1xUkOmpFPx7gCWWM5MPkL/fD8zb+Ph0QzjGFs4+hHWg==}
+
+  picocolors@1.1.1:
+    resolution: {integrity: sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==}
+
+  sisteransi@1.0.5:
+    resolution: {integrity: sha512-bLGGlR1QxBcynn2d5YmDX4MGjlZvy2MRBDRNHLJ8VI6l6+9FUiyTFNJ0IveOSP0bcXgVDPRcfGqA0pjaqUpfVg==}
+
+  toml@3.0.0:
+    resolution: {integrity: sha512-y/mWCZinnvxjTKYhJ+pYxwD0mRLVvOtdS2Awbgxln6iEnt4rk0yBxeSBHkGJcPucRiG0e55mwWp+g/05rsrd6w==}
+
+  xregexp@5.1.2:
+    resolution: {integrity: sha512-6hGgEMCGhqCTFEJbqmWrNIPqfpdirdGWkqshu7fFZddmTSfgv5Sn9D2SaKloR79s5VUiUlpwzg3CM3G6D3VIlw==}
+
+snapshots:
+
+  '@babel/runtime-corejs3@7.29.0':
+    dependencies:
+      core-js-pure: 3.48.0
+
+  '@chevrotain/cst-dts-gen@11.1.1':
+    dependencies:
+      '@chevrotain/gast': 11.1.1
+      '@chevrotain/types': 11.1.1
+      lodash-es: 4.17.23
+
+  '@chevrotain/gast@11.1.1':
+    dependencies:
+      '@chevrotain/types': 11.1.1
+      lodash-es: 4.17.23
+
+  '@chevrotain/regexp-to-ast@11.1.1': {}
+
+  '@chevrotain/types@11.1.1': {}
+
+  '@chevrotain/utils@11.1.1': {}
+
+  '@clack/core@1.0.1':
+    dependencies:
+      picocolors: 1.1.1
+      sisteransi: 1.0.5
+
+  '@clack/prompts@1.0.1':
+    dependencies:
+      '@clack/core': 1.0.1
+      picocolors: 1.1.1
+      sisteransi: 1.0.5
+
+  chevrotain@11.1.1:
+    dependencies:
+      '@chevrotain/cst-dts-gen': 11.1.1
+      '@chevrotain/gast': 11.1.1
+      '@chevrotain/regexp-to-ast': 11.1.1
+      '@chevrotain/types': 11.1.1
+      '@chevrotain/utils': 11.1.1
+      lodash-es: 4.17.23
+
+  core-js-pure@3.48.0: {}
+
+  js-toml@1.0.2:
+    dependencies:
+      chevrotain: 11.1.1
+      xregexp: 5.1.2
+
+  lodash-es@4.17.23: {}
+
+  picocolors@1.1.1: {}
+
+  sisteransi@1.0.5: {}
+
+  toml@3.0.0: {}
+
+  xregexp@5.1.2:
+    dependencies:
+      '@babel/runtime-corejs3': 7.29.0
diff --git a/prereq.yml b/prereq.yml
index 172ef88b..e5bac6de 100644
--- a/prereq.yml
+++ b/prereq.yml
@@ -8,15 +8,15 @@ vars:
   DRY: ""
 
 tasks:
- 
+
   download-and-extract:
      requires:
-       vars: 
+       vars:
        - FILE
        - URL
        - OUT
      cmds:
-     - echo "{{.OUT}} {{.FILE}} {{.URL}} {{.FILETAR}}" 
+     - echo "{{.OUT}} {{.FILE}} {{.URL}} {{.FILETAR}}"
      - curl -sL "{{.URL}}" -o {{.FILE}}
      - extract "{{.FILE}}" "{{.OUT}}{{.EXE}}"
      - remove "{{.FILE}}"
@@ -48,7 +48,7 @@ tasks:
     cmds:
     - curl -sL "{{.URL}}"  -o "{{.FILE}}"
     - |
-      if test "{{.OS}}" == "windows" 
+      if test "{{.OS}}" == "windows"
       then rename 7zr.exe 7zz.exe
       else extract "{{.FILE}}" 7zz
       fi
@@ -66,11 +66,11 @@ tasks:
             linux-amd64) echo "x86_64-unknown-linux-gnu" ;;
             linux-arm64) echo "aarch64-unknown-linux-gnu" ;;
             darwin-amd64) echo "x86_64-apple-darwin" ;;
-            darwin-arm64) echo "aarch64-apple-darwin" ;; 
+            darwin-arm64) echo "aarch64-apple-darwin" ;;
             windows-*) echo "x86_64-pc-windows-gnu" ;;
             *) echo "unknown" ;;
             esac
-      URL: "https://github.com/uutils/coreutils/releases/download/{{.VERSION}}/coreutils-{{.VERSION}}-{{.SUFFIX}}{{.ARC}}" 
+      URL: "https://github.com/uutils/coreutils/releases/download/{{.VERSION}}/coreutils-{{.VERSION}}-{{.SUFFIX}}{{.ARC}}"
       FILE: "{{base .URL}}"
       OUT: coreutils
     cmds:
@@ -106,7 +106,7 @@ tasks:
   kind:
     desc: download kind
     vars:
-      VERSION: 0.29.0
+      VERSION: 0.30.0
     cmds:
       - task: download
         vars:
@@ -118,7 +118,7 @@ tasks:
     vars:
       VERSION: 0.13.6
       BASE: "https://github.com/alexellis/k3sup/releases/download/{{.VERSION}}"
-      FILE: 
+      FILE:
         sh: |
             case {{.OS}}-{{.ARCH}} in
             (linux-amd64)   echo k3sup ;;
@@ -132,7 +132,7 @@ tasks:
         vars:
           URL: "{{.BASE}}/{{.FILE}}"
           OUT: k3sup
-  
+
   rg:
     desc: download ripgrep
     vars:
@@ -145,11 +145,11 @@ tasks:
             linux-amd64) echo "x86_64-unknown-linux-musl" ;;
             linux-arm64) echo "aarch64-unknown-linux-gnu" ;;
             darwin-amd64) echo "x86_64-apple-darwin" ;;
-            darwin-arm64) echo "aarch64-apple-darwin" ;; 
+            darwin-arm64) echo "aarch64-apple-darwin" ;;
             windows-*) echo "x86_64-pc-windows-msvc" ;;
             *) echo "unknown" ;;
             esac
-      URL: "https://github.com/BurntSushi/ripgrep/releases/download/{{.VERSION}}/ripgrep-{{.VERSION}}-{{.SUFFIX}}{{.ARC}}" 
+      URL: "https://github.com/BurntSushi/ripgrep/releases/download/{{.VERSION}}/ripgrep-{{.VERSION}}-{{.SUFFIX}}{{.ARC}}"
       FILE: "{{base .URL}}"
       OUT: rg
     cmds:
@@ -280,41 +280,41 @@ tasks:
       fi
       EOF
         executable zip
-      ;; 
+      ;;
       windows-*)
          curl -sL "{{.ZIP_EXE}}" -o zip.exe
          executable zip.exe
       ;;
       esac
 
-  kubefwd:
-    desc: download kubefwd
-    vars:
-      VERSION: "1.22.5"
-      SUFFIX:
-        sh: |
-            case "{{.OS}}-{{.ARCH}}" in
-            linux-amd64) echo "_Linux_x86_64" ;;
-            linux-arm64) echo "_Linux_arm64" ;;
-            darwin-amd64) echo "_Darwin_x86_64" ;;
-            darwin-arm64) echo "_Darwin_arm64" ;; 
-            windows-*) echo "_Windows_x86_64" ;;
-            *) echo "unknown" ;;
-            esac
-            #https://github.com/txn2/kubefwd/releases/download/1.22.5/kubefwd_Darwin_x86_64.tar.gz
-      URL: "https://github.com/txn2/kubefwd/releases/download/{{.VERSION}}/kubefwd{{.SUFFIX}}{{.ARC}}" 
-      FILE: "{{base .URL}}"
-      OUT: kubefwd
-    cmds:
-    - task: download-and-extract
-      vars:
-        URL: "{{.URL}}"
-        FILE: "{{.FILE}}"
-        OUT: kubefwd
+  #kubefwd:
+  #  desc: download kubefwd
+  #  vars:
+  #    VERSION: "1.25.3"
+  #    SUFFIX:
+  #      sh: |
+  #          case "{{.OS}}-{{.ARCH}}" in
+  #          linux-amd64) echo "_Linux_x86_64" ;;
+  #          linux-arm64) echo "_Linux_arm64" ;;
+  #          darwin-amd64) echo "_Darwin_x86_64" ;;
+  #          darwin-arm64) echo "_Darwin_arm64" ;;
+  #          windows-*) echo "_Windows_x86_64" ;;
+  #          *) echo "unknown" ;;
+  #          esac
+  #          #https://github.com/txn2/kubefwd/releases/download/1.22.5/kubefwd_Darwin_x86_64.tar.gz
+  #    URL: "https://github.com/txn2/kubefwd/releases/download/{{.VERSION}}/kubefwd{{.SUFFIX}}{{.ARC}}"
+  #    FILE: "{{base .URL}}"
+  #    OUT: kubefwd
+  #  cmds:
+  #  - task: download-and-extract
+  #    vars:
+  #      URL: "{{.URL}}"
+  #      FILE: "{{.FILE}}"
+  #      OUT: kubefwd
 
   all:
     - task: 7zz
-    - task: coreutils    
+    - task: coreutils
     - task: bun
     - task: kind
     - task: k3sup
@@ -322,14 +322,14 @@ tasks:
     - task: rg
     - task: uv
     - task: helm
-    - task: kubefwd
     - task: yq
     # do not test zip as it is a special case
     #- task: zip
     # commented out for now
+    #- task: kubefwd
     #- task: hugo
     #- task: k3d
-    
+
   test:
     vars:
       DIR: "{{.OPS_PWD}}/bin/{{.OS}}-{{.ARCH}}"
@@ -340,7 +340,7 @@ tasks:
       cd "{{.DIR}}"
       {{.DRY}} ops -task -t ../../prereq.yml -d "{{.DIR}}" all
     - task: check
-      
+
   check:
     vars:
       DIR: "{{.OPS_PWD}}/bin/{{.OS}}-{{.ARCH}}"
@@ -359,11 +359,11 @@ tasks:
     cmds:
     - for: sources
       cmd: filetype -m "{{.ITEM}}" | rg {{.FILETYPE}}
- 
+
   tests:
    - __OS=linux   __ARCH=amd64 ops -task -t prereq.yml test
    - __OS=linux   __ARCH=arm64 ops -task -t prereq.yml test
    - __OS=darwin  __ARCH=amd64 ops -task -t prereq.yml test
    - __OS=darwin  __ARCH=arm64 ops -task -t prereq.yml test
    - __OS=windows __ARCH=amd64 ops -task -t prereq.yml test
-      
+
diff --git a/setup/docker/ingress-deploy.yaml b/setup/docker/ingress-deploy.yaml
index 55712e74..0e7a16cd 100644
--- a/setup/docker/ingress-deploy.yaml
+++ b/setup/docker/ingress-deploy.yaml
@@ -36,18 +36,6 @@ metadata:
   name: ingress-nginx
   namespace: ingress-nginx
 ---
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  labels:
-    app.kubernetes.io/component: admission-webhook
-    app.kubernetes.io/instance: ingress-nginx
-    app.kubernetes.io/name: ingress-nginx
-    app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.7.0
-  name: ingress-nginx-admission
-  namespace: ingress-nginx
----
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
@@ -139,26 +127,6 @@ rules:
   - get
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  labels:
-    app.kubernetes.io/component: admission-webhook
-    app.kubernetes.io/instance: ingress-nginx
-    app.kubernetes.io/name: ingress-nginx
-    app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.7.0
-  name: ingress-nginx-admission
-  namespace: ingress-nginx
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - get
-  - create
----
-apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   labels:
@@ -240,25 +208,6 @@ rules:
   - get
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  labels:
-    app.kubernetes.io/component: admission-webhook
-    app.kubernetes.io/instance: ingress-nginx
-    app.kubernetes.io/name: ingress-nginx
-    app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.7.0
-  name: ingress-nginx-admission
-rules:
-- apiGroups:
-  - admissionregistration.k8s.io
-  resources:
-  - validatingwebhookconfigurations
-  verbs:
-  - get
-  - update
----
-apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   labels:
@@ -279,26 +228,6 @@ subjects:
   namespace: ingress-nginx
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  labels:
-    app.kubernetes.io/component: admission-webhook
-    app.kubernetes.io/instance: ingress-nginx
-    app.kubernetes.io/name: ingress-nginx
-    app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.7.0
-  name: ingress-nginx-admission
-  namespace: ingress-nginx
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: ingress-nginx-admission
-subjects:
-- kind: ServiceAccount
-  name: ingress-nginx-admission
-  namespace: ingress-nginx
----
-apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   labels:
@@ -316,25 +245,6 @@ subjects:
   name: ingress-nginx
   namespace: ingress-nginx
 ---
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  labels:
-    app.kubernetes.io/component: admission-webhook
-    app.kubernetes.io/instance: ingress-nginx
-    app.kubernetes.io/name: ingress-nginx
-    app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.7.0
-  name: ingress-nginx-admission
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: ingress-nginx-admission
-subjects:
-- kind: ServiceAccount
-  name: ingress-nginx-admission
-  namespace: ingress-nginx
----
 apiVersion: v1
 data:
   allow-snippet-annotations: "true"
@@ -381,29 +291,6 @@ spec:
     app.kubernetes.io/name: ingress-nginx
   type: NodePort
 ---
-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: ingress-nginx
-    app.kubernetes.io/name: ingress-nginx
-    app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.7.0
-  name: ingress-nginx-controller-admission
-  namespace: ingress-nginx
-spec:
-  ports:
-  - appProtocol: https
-    name: https-webhook
-    port: 443
-    targetPort: webhook
-  selector:
-    app.kubernetes.io/component: controller
-    app.kubernetes.io/instance: ingress-nginx
-    app.kubernetes.io/name: ingress-nginx
-  type: ClusterIP
----
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -443,9 +330,6 @@ spec:
         - --controller-class=k8s.io/ingress-nginx
         - --ingress-class=nginx
         - --configmap=$(POD_NAMESPACE)/ingress-nginx-controller
-        - --validating-webhook=:8443
-        - --validating-webhook-certificate=/usr/local/certificates/cert
-        - --validating-webhook-key=/usr/local/certificates/key
         - --watch-ingress-without-class=true
         - --publish-status-address=localhost
         env:
@@ -459,7 +343,7 @@ spec:
               fieldPath: metadata.namespace
         - name: LD_PRELOAD
           value: /usr/local/lib/libmimalloc.so
-        image: registry.k8s.io/ingress-nginx/controller:v1.7.0@sha256:7612338342a1e7b8090bef78f2a04fffcadd548ccaabe8a47bf7758ff549a5f7
+        image: registry.k8s.io/ingress-nginx/controller:v1.7.0
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:
@@ -486,9 +370,6 @@ spec:
           hostPort: 443
           name: https
           protocol: TCP
-        - containerPort: 8443
-          name: webhook
-          protocol: TCP
         readinessProbe:
           failureThreshold: 3
           httpGet:
@@ -511,10 +392,6 @@ spec:
             drop:
             - ALL
           runAsUser: 101
-        volumeMounts:
-        - mountPath: /usr/local/certificates/
-          name: webhook-cert
-          readOnly: true
       dnsPolicy: ClusterFirst
       nodeSelector:
         ingress-ready: "true"
@@ -528,106 +405,6 @@ spec:
       - effect: NoSchedule
         key: node-role.kubernetes.io/control-plane
         operator: Equal
-      volumes:
-      - name: webhook-cert
-        secret:
-          secretName: ingress-nginx-admission
----
-apiVersion: batch/v1
-kind: Job
-metadata:
-  labels:
-    app.kubernetes.io/component: admission-webhook
-    app.kubernetes.io/instance: ingress-nginx
-    app.kubernetes.io/name: ingress-nginx
-    app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.7.0
-  name: ingress-nginx-admission-create
-  namespace: ingress-nginx
-spec:
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/component: admission-webhook
-        app.kubernetes.io/instance: ingress-nginx
-        app.kubernetes.io/name: ingress-nginx
-        app.kubernetes.io/part-of: ingress-nginx
-        app.kubernetes.io/version: 1.7.0
-      name: ingress-nginx-admission-create
-    spec:
-      containers:
-      - args:
-        - create
-        - --host=ingress-nginx-controller-admission,ingress-nginx-controller-admission.$(POD_NAMESPACE).svc
-        - --namespace=$(POD_NAMESPACE)
-        - --secret-name=ingress-nginx-admission
-        env:
-        - name: POD_NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230312-helm-chart-4.5.2-28-g66a760794@sha256:01d181618f270f2a96c04006f33b2699ad3ccb02da48d0f89b22abce084b292f
-        imagePullPolicy: IfNotPresent
-        name: create
-        securityContext:
-          allowPrivilegeEscalation: false
-      nodeSelector:
-        kubernetes.io/os: linux
-      restartPolicy: OnFailure
-      securityContext:
-        fsGroup: 2000
-        runAsNonRoot: true
-        runAsUser: 2000
-      serviceAccountName: ingress-nginx-admission
----
-apiVersion: batch/v1
-kind: Job
-metadata:
-  labels:
-    app.kubernetes.io/component: admission-webhook
-    app.kubernetes.io/instance: ingress-nginx
-    app.kubernetes.io/name: ingress-nginx
-    app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.7.0
-  name: ingress-nginx-admission-patch
-  namespace: ingress-nginx
-spec:
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/component: admission-webhook
-        app.kubernetes.io/instance: ingress-nginx
-        app.kubernetes.io/name: ingress-nginx
-        app.kubernetes.io/part-of: ingress-nginx
-        app.kubernetes.io/version: 1.7.0
-      name: ingress-nginx-admission-patch
-    spec:
-      containers:
-      - args:
-        - patch
-        - --webhook-name=ingress-nginx-admission
-        - --namespace=$(POD_NAMESPACE)
-        - --patch-mutating=false
-        - --secret-name=ingress-nginx-admission
-        - --patch-failure-policy=Fail
-        env:
-        - name: POD_NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230312-helm-chart-4.5.2-28-g66a760794@sha256:01d181618f270f2a96c04006f33b2699ad3ccb02da48d0f89b22abce084b292f
-        imagePullPolicy: IfNotPresent
-        name: patch
-        securityContext:
-          allowPrivilegeEscalation: false
-      nodeSelector:
-        kubernetes.io/os: linux
-      restartPolicy: OnFailure
-      securityContext:
-        fsGroup: 2000
-        runAsNonRoot: true
-        runAsUser: 2000
-      serviceAccountName: ingress-nginx-admission
 ---
 apiVersion: networking.k8s.io/v1
 kind: IngressClass
@@ -641,36 +418,3 @@ metadata:
   name: nginx
 spec:
   controller: k8s.io/ingress-nginx
----
-apiVersion: admissionregistration.k8s.io/v1
-kind: ValidatingWebhookConfiguration
-metadata:
-  labels:
-    app.kubernetes.io/component: admission-webhook
-    app.kubernetes.io/instance: ingress-nginx
-    app.kubernetes.io/name: ingress-nginx
-    app.kubernetes.io/part-of: ingress-nginx
-    app.kubernetes.io/version: 1.7.0
-  name: ingress-nginx-admission
-webhooks:
-- admissionReviewVersions:
-  - v1
-  clientConfig:
-    service:
-      name: ingress-nginx-controller-admission
-      namespace: ingress-nginx
-      path: /networking/v1/ingresses
-  failurePolicy: Fail
-  matchPolicy: Equivalent
-  name: validate.nginx.ingress.kubernetes.io
-  rules:
-  - apiGroups:
-    - networking.k8s.io
-    apiVersions:
-    - v1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - ingresses
-  sideEffects: None
diff --git a/setup/docker/kind.yaml b/setup/docker/kind.yaml
index 4102b179..696eaa63 100644
--- a/setup/docker/kind.yaml
+++ b/setup/docker/kind.yaml
@@ -17,8 +17,14 @@
 
 kind: Cluster
 apiVersion: kind.x-k8s.io/v1alpha4
+containerdConfigPatches:
+- |-
+  [plugins."io.containerd.grpc.v1.cri".registry]
+    config_path = "/etc/containerd/certs.d"
+
 nodes:
 - role: control-plane
+  image: kindest/node:v1.33.1
   kubeadmConfigPatches:
   - |
     kind: InitConfiguration
@@ -32,71 +38,29 @@ nodes:
   - containerPort: 443
     hostPort: 443
     protocol: TCP
-- role: worker
+  - containerPort: 30222
+    hostPort: 2222
+    protocol: TCP
   extraMounts:
-  - hostPath: $DATADIR/data
+  - hostPath: "$DATADIR/data"
     containerPath: /data
-  - hostPath: $DATADIR/openwhisk/standalone
+  - hostPath: "$DATADIR/openwhisk/standalone"
     containerPath: /openwhisk/standalone
   - hostPath: $DATADIR/openwhisk/invoker
     containerPath: /openwhisk/invoker
-  - hostPath: $DATADIR/openwhisk/controller
+  - hostPath: "$DATADIR/openwhisk/controller"
     containerPath: /openwhisk/controller
-  - hostPath: $DATADIR/couchdb
+  - hostPath: "$DATADIR/couchdb"
     containerPath: /couchdb
-  - hostPath: $DATADIR/mongodb
+  - hostPath: "$DATADIR/mongodb"
     containerPath: /mongodb
-  - hostPath: $DATADIR/redis
+  - hostPath: "$DATADIR/redis"
     containerPath: /redis
-  - hostPath: $DATADIR/zookeper/data
+  - hostPath: "$DATADIR/zookeper/data"
     containerPath: /zookeeper/data
-  - hostPath: $DATADIR/zookeeper/log
+  - hostPath: "$DATADIR/zookeeper/log"
     containerPath: /zookeeper/log
-  - hostPath: $DATADIR/kafka
+  - hostPath: "$DATADIR/kafka"
     containerPath: /kafka
-  extraPortMappings:
-  - containerPort: 30232
-    hostPort: 3232
-    protocol: TCP
-  - containerPort: 30233
-    hostPort: 3233
-    protocol: TCP
-  - containerPort: 30896
-    hostPort: 7896
-    protocol: TCP  
-  - containerPort: 30984
-    hostPort: 5984
-    protocol: TCP  
-  - containerPort: 30992 
-    hostPort: 9092
-    protocol: TCP
-  - containerPort: 30644
-    hostPort: 9644
-    protocol: TCP    
-  - containerPort: 6379
-    hostPort: 30379
-    protocol: TCP
-  - containerPort: 28017
-    hostPort: 32817
-    protocol: TCP
-  - containerPort: 32717
-    hostPort: 27017
-    protocol: TCP
-  - containerPort: 32090
-    hostPort: 9000
-    protocol: TCP 
-  - containerPort: 32091
-    hostPort: 9090
-    protocol: TCP            
-  - containerPort: 9080
-    hostPort: 9080
-    protocol: TCP            
-  - containerPort: 9010
-    hostPort: 9010
-    protocol: TCP 
-  - containerPort: 32530
-    hostPort: 19530
-    protocol: TCP 
-  - containerPort: 32531
-    hostPort: 9091
-    protocol: TCP                    
+  - hostPath: "$OPS_HOME/workspace"
+    containerPath: /workspace
diff --git a/setup/docker/opsfile.yml b/setup/docker/opsfile.yml
index b40122c8..e43b194d 100644
--- a/setup/docker/opsfile.yml
+++ b/setup/docker/opsfile.yml
@@ -17,26 +17,28 @@
 version: '3'
 
 vars:
+  CLUSTER: nuvolaris
   INGRESS: "https://raw.githubusercontent.com/kubernetes/ingress-nginx/main/deploy/static/provider/kind/deploy.yaml"
 
 env:
   DATADIR:
-    sh: echo $OPS_TMP/kind
-  KUBECONFIG: 
-    sh: |- 
+    sh: echo "$OPS_TMP/kind"
+  WORKSPACE:
+    sh: echo "$OPS_HOME/workspace"
+  KUBECONFIG:
+    sh: |-
         if test -e "$OPS_TMP/kubeconfig"
         then echo "$OPS_TMP/kubeconfig"
         else echo ~/.kube/config
         fi
 
 tasks:
-
   status:
     silent: true
     desc: status of the Apache OpenServerless cluster in Docker
     cmds:
     - |
-      if kind get clusters | rg nuvolaris
+      if kind get clusters | rg {{.CLUSTER}}
       then echo Cluster Apache OpenServerless up and running
       else echo Cluster Apache OpenServerless not found
       fi
@@ -51,7 +53,7 @@ tasks:
       echo "=== Kind Version"
       kind version
       echo "=== Kind Clusters"
-      kind get clusters 
+      kind get clusters
       if test -e $KUBECONFIG
       then  echo "=== Nodes"
             kubectl get nodes
@@ -60,19 +62,32 @@ tasks:
   cluster:
     silent: true
     cmds:
-    - mkdir -p "$DATADIR"
+    - mkdir -p "$DATADIR" "$OPS_HOME/workspace"
     - envsubst -i kind.yaml -o _kind.yaml
-    - > 
-      kind create cluster 
-      --kubeconfig="$OPS_TMP/kubeconfig" 
-      --wait=1m --name=nuvolaris 
+    - >
+      kind create cluster
+      --wait=2m --name=nuvolaris
       --config=_kind.yaml
- 
+    - |
+      docker exec nuvolaris-control-plane mkdir -p /etc/containerd/certs.d/127.0.0.1:32000
+      docker exec nuvolaris-control-plane sh -c 'cat > /etc/containerd/certs.d/127.0.0.1:32000/hosts.toml << EOF
+      server = "http://127.0.0.1:32000"
+
+      [host."http://127.0.0.1:32000"]
+        capabilities = ["pull", "resolve", "push"]
+        skip_verify = true
+      EOF'
+      docker exec nuvolaris-control-plane systemctl restart containerd
+      kind export kubeconfig -n nuvolaris --kubeconfig "$OPS_TMP/kubeconfig"
+      echo "waiting for kind ready..."
+      retry -t 100 -m 600 test -e $OPS_TMP/kubeconfig
+      retry kubectl --kubeconfig $OPS_TMP/kubeconfig cluster-info
+
   ingress:
     silent: true
     cmds:
-    - > 
-      kubectl --kubeconfig="$OPS_TMP/kubeconfig" 
+    - >
+      retry kubectl --kubeconfig="$OPS_TMP/kubeconfig"
       apply -f ingress-deploy.yaml
 
   check-space:
@@ -81,38 +96,6 @@ tasks:
     cmds:
       - uv run space.py
 
-  preload:
-    silent: true
-    desc: preload the Apache OpenServerless images in docker to speed up the cluster creation
-    ignore_errors: true
-    status:
-      - config SKIP_PRELOAD_IMAGES
-    cmds:
-    - |
-      for image in "$IMAGES_STREAMER" "$IMAGES_OPERATOR"  "$IMAGES_CONTROLLER"   
-      do
-        docker pull "$image" --platform "linux/{{ARCH}}"
-        if ! kind load docker-image "$image" --name nuvolaris 
-        then 
-          echo "*** Cannot preload images. You can disable preload with ops -config SKIP_PRELOAD_IMAGES=1"
-          echo "*** Workaround on Docker Desktop: disable 'Use containerd for pulling and storing images' on General"
-          echo "*** WARNING! If you skip preload, it can take a lot of time before the system starts. Be patient."
-          exit 1
-        fi
-        docker rmi "$image"
-      done
-    - |
-      jq -r '.runtimes[][]
-      | select(.default == true)
-      | .image
-      | "\(.prefix)/\(.name):\(.tag)"' <$OPS_ROOT/runtimes.json \
-      | rg apache/openserverless-runtime \
-      | while read -r image; do
-          docker pull "$image" --platform "linux/{{ARCH}}"
-          kind load docker-image "$image" --name nuvolaris
-          docker rmi "$image"
-        done
-
   clean-all:
     silent: true
     desc: remove all images and containers from docker
@@ -121,7 +104,7 @@ tasks:
     - echo "Cleaning all docker images and containers"
     - docker ps -qa | while read a ; do docker rm -f "$a" ; done
     - docker images -qa | while read a ; do docker rmi -f "$a" ; done
-    - docker system prune -af 
+    - docker system prune -af
     - docker volume prune -af
     - docker system df
 
@@ -129,18 +112,23 @@ tasks:
     silent: true
     desc: create the Apache OpenServerless cluster in Docker
     cmds:
-    - task: cluster
-    - task: ingress
-    - cp "$OPS_TMP/kubeconfig" "$OPS_TMP/kind.kubeconfig"
-    status:
-    - kind get clusters | rg nuvolaris
+      - |
+        if  kind get clusters | rg {{.CLUSTER}}
+        then kind export kubeconfig --name {{.CLUSTER}} --kubeconfig "$OPS_TMP/kubeconfig"
+        else
+           ops util freeze docker-load
+           ops setup docker cluster
+           ops util freeze kind-load
+           ops setup docker ingress
+        fi
+      - cp "$OPS_TMP/kubeconfig" "$OPS_TMP/kind-{{.CLUSTER}}.kubeconfig"
 
   delete:
     silent: true
     desc: destroy the Apache OpenServerless cluster in Docker
     cmds:
-    - kind delete clusters nuvolaris
-    - rm -f "$OPS_TMP/kubeconfig" "$OPS_TMP/kind.kubeconfig"
+    - kind delete clusters {{.CLUSTER}}
+    - rm -f "$OPS_TMP/kubeconfig" "$OPS_TMP/kind-{{.CLUSTER}}.kubeconfig"
 
   kubeconfig:
     desc: export kubeconfig
diff --git a/setup/docopts.md b/setup/docopts.md
index 926ce402..55e412a0 100644
--- a/setup/docopts.md
+++ b/setup/docopts.md
@@ -24,19 +24,18 @@ Manage installation
 
 ```text
 Usage:
-  setup mini
+  setup mini [<apihost>]
   setup devcluster [--uninstall|--status|[--skip-check-ports] [--skip-preload-images]]
   setup cluster [<context>] [--uninstall|--status]
   setup server <server> [<user>] [--uninstall|--status]
   setup status
   setup uninstall
-  setup prereq
 ```
 
 ## Commands
 
 ```
-  setup mini          deploy mini Apache OpenServerless, slim local installation available as http://devel.miniops.me 
+  setup mini          deploy mini Apache OpenServerless, slim local installation available as http://devel.miniops.me (or your local domain)
   setup cluster       deploy Apache OpenServerless in the Kubernetes cluster using the <context>, default the current
   setup devcluster    deploy Apache OpenServerless in a devcluster created locally
                       you need Docker Desktop available with at least 6G of memory assigned
@@ -44,7 +43,6 @@ Usage:
                       the server must be accessible with ssh using the <user> with sudo power, default root
   setup status        show the status of the last installation
   setup uninstall     uninstall the last installation
-  setup prereq        validate current configuration
 ```
 
 ## Options
diff --git a/setup/kubernetes/crds/whisk-crd.yaml b/setup/kubernetes/crds/whisk-crd.yaml
index dff969c2..73dc3e79 100644
--- a/setup/kubernetes/crds/whisk-crd.yaml
+++ b/setup/kubernetes/crds/whisk-crd.yaml
@@ -149,7 +149,10 @@ spec:
                       type: boolean
                     registry:
                       description: deploys a private registry to load on the fly generated action runtimes (false by default)
-                      type: boolean                                              
+                      type: boolean
+                    seaweedfs:
+                      description: deploys an S3 compatible layer using a standalone deployment of seaweedfs
+                      type: boolean                                                                     
                   required:
                     - openwhisk
                     - couchdb
@@ -835,7 +838,50 @@ spec:
                   - mode
                   - volume-size
                   - auth
-                  - hostname                                         
+                  - hostname
+                seaweedfs:
+                  description: used to configure the internal saweedfs data storage service
+                  type: object
+                  properties:
+                    volume-size:
+                      description: volume size in GB, default to 60GB
+                      type: integer
+                    default-bucket-quota:
+                      description: default bucket quota, default to 1024MB
+                      type: integer
+                    nuvolaris:
+                      description: used to configure the MINIO nuvolaris user used for non administrative purposes
+                      type: object
+                      properties:
+                        user:
+                          type: string
+                        password:
+                          type: string
+                      required:
+                      - user
+                      - password
+                    ingress:
+                      description: configuration option for global minio ingresses exposure
+                      type: object
+                      properties:
+                        s3-enabled:
+                          description: boolean flag to activate SEAWEEDFS S3 compatible ingress. Default to false
+                          type: boolean
+                        s3-hostname:
+                          description: ingress hostname to be used if true (normally s3.<apihost>)
+                          type: string
+                        console-enabled:
+                          description: boolean flag to expose SEAWEEDFS Filer UI
+                          type: boolean
+                        console-hostname:
+                          description: ingress hostname to be used (nora=mally filer.<apihost>)
+                          type: string
+                      required:
+                      - s3-enabled
+                      - console-enabled                           
+                  required:
+                  - volume-size
+                  - nuvolaris                                                           
             status:
               x-kubernetes-preserve-unknown-fields: true
               # type: object
@@ -948,4 +994,9 @@ spec:
           type: string
           priority: 0
           jsonPath: .status.whisk_create.registry
-          description: Registry                                                                                                              
\ No newline at end of file
+          description: Registry 
+        - name: Seaweedfs
+          type: string
+          priority: 0
+          jsonPath: .status.whisk_create.seaweedfs
+          description: Seaweedfs                                                                                                                        
\ No newline at end of file
diff --git a/setup/kubernetes/operator.yaml b/setup/kubernetes/operator.yaml
index c2a4a9fc..121296b5 100644
--- a/setup/kubernetes/operator.yaml
+++ b/setup/kubernetes/operator.yaml
@@ -19,8 +19,8 @@ apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   name: nuvolaris-operator
-  namespace: nuvolaris  
-spec:  
+  namespace: nuvolaris
+spec:
   replicas: 1
   selector:
     matchLabels:
@@ -67,18 +67,18 @@ spec:
         - key: "nuvolaris-role"
           operator: "Equal"
           value: core
-          effect: "NoSchedule"     
+          effect: "NoSchedule"
       securityContext:
           runAsUser: 1001
-          fsGroup: 1001       
+          fsGroup: 1001
       volumes:
       - name: deploy
         persistentVolumeClaim:
-          claimName: nuvolaris-operator-deploy-pvc       
+          claimName: nuvolaris-operator-deploy-pvc
       containers:
         - name: nuvolaris-operator
           image: ${IMAGES_OPERATOR}
-          imagePullPolicy: Always
+          imagePullPolicy: IfNotPresent
           command: ["./run.sh"]
           args: ["--verbose"]
           securityContext:
@@ -87,4 +87,4 @@ spec:
                 - ALL
           volumeMounts:
           - name: deploy
-            mountPath: "/home/nuvolaris/deploy"              
\ No newline at end of file
+            mountPath: "/home/nuvolaris/deploy"
\ No newline at end of file
diff --git a/setup/kubernetes/opsfile.yml b/setup/kubernetes/opsfile.yml
index 6b536e35..733eb8c8 100644
--- a/setup/kubernetes/opsfile.yml
+++ b/setup/kubernetes/opsfile.yml
@@ -31,44 +31,44 @@ env:
       fi
 
 # sets memory parameter for the controller invoker and corresponding pods
-  OPENWHISK_CONTROLLER_JAVA_OPTS: 
+  OPENWHISK_CONTROLLER_JAVA_OPTS:
     sh: |
       if [ -z "$OPENWHISK_CONTROLLER_JVMGB" ]
       then echo -Xmx2G
       else echo -Xmx"$OPENWHISK_CONTROLLER_JVMGB"G
       fi
-  OPENWHISK_INVOKER_JAVA_OPTS: 
+  OPENWHISK_INVOKER_JAVA_OPTS:
     sh: |
       if [ -z "$OPENWHISK_INVOKER_JVMGB" ]
       then echo -Xmx2G
       else echo -Xmx"$OPENWHISK_INVOKER_JVMGB"G
       fi
-  OPENWHISK_INVOKER_CONTAINER_POOL_MEMORY: 
+  OPENWHISK_INVOKER_CONTAINER_POOL_MEMORY:
     sh: |
       if [ -z "$OPENWHISK_INVOKER_CONTAINER_POOLMEMORYGB" ]
       then echo 2048m
       else pool=$OPENWHISK_INVOKER_CONTAINER_POOLMEMORYGB; echo $((pool*1024))m
       fi
-  OPENWHISK_CONTROLLER_RES_MIN_MEM: 
+  OPENWHISK_CONTROLLER_RES_MIN_MEM:
     sh: |
       if [ -z "$OPENWHISK_CONTROLLER_JVMGB" ]
       then echo 2G
       else echo "$OPENWHISK_CONTROLLER_JVMGB"G
       fi
-  OPENWHISK_CONTROLLER_RES_MAX_MEM: 
+  OPENWHISK_CONTROLLER_RES_MAX_MEM:
     sh: |
       if [ -z "$OPENWHISK_CONTROLLER_JVMGB" ]
       then echo 3G
       else mem=$OPENWHISK_CONTROLLER_JVMGB; echo $((mem+1))G
       fi
-  OPENWHISK_INVOKER_RES_MIN_MEM: 
+  OPENWHISK_INVOKER_RES_MIN_MEM:
     sh: |
       if [ -z "$OPENWHISK_INVOKER_JVMGB" ]
-      then echo 3G 
+      then echo 3G
       else mem=$OPENWHISK_INVOKER_JVMGB; echo $((mem))G
       fi
-  OPENWHISK_INVOKER_RES_MAX_MEM: 
-    sh: | 
+  OPENWHISK_INVOKER_RES_MAX_MEM:
+    sh: |
       if [ -z "$OPENWHISK_INVOKER_JVMGB" ] && [ -z "$OPENWHISK_INVOKER_CONTAINER_POOLMEMORYGB" ]
       then echo 4G
       else mem=$OPENWHISK_INVOKER_JVMGB; pool=$OPENWHISK_INVOKER_CONTAINER_POOLMEMORYGB; echo $((mem+1))G
@@ -89,10 +89,10 @@ env:
       fi
 
 tasks:
-  
+
   streamer:
     desc: deploy streamer
-  
+
   status:
     desc: show nuvolaris cluster status
     silent: true
@@ -126,7 +126,7 @@ tasks:
     status:
       - test "{{.COND}}" != "true"
     env:
-      BAR: 
+      BAR:
         sh: printf "%*s" {{.RETRY}} "" | tr ' ' '#'
     cmds:
       - test -n "{{.OBJECT}}" || die "use OBJECT=<to-wait-for>"
@@ -146,7 +146,7 @@ tasks:
         N=0
         RES=false
         while [[ $N -lt {{.RETRY}} ]]
-        do 
+        do
           printf "\rwaiting for {{.OBJECT}} ready: [${BAR:0:$((N++))}]"
           if kubectl -n nuvolaris wait --for=condition=Ready "{{.OBJECT}}" --timeout={{.TIMEOUT}} >/dev/null 2>&1
           then RES=true ; break
@@ -154,7 +154,7 @@ tasks:
         done
         printf "\n"
         $RES
-  
+
   wait-pod:
     #desc: wait for a pod to be available - leave the result in FILE
     silent: true
@@ -166,7 +166,7 @@ tasks:
         - COND
         - FILE
     env:
-      BAR: 
+      BAR:
         sh: printf "%*s" {{.RETRY}} "" | tr ' ' '#'
     cmds:
       - |
@@ -214,7 +214,7 @@ tasks:
       - kubectl -n nuvolaris apply -f _runtimes.yaml
     vars:
       RUNTIMES:
-        sh: |          
+        sh: |
           if test -e "$OPS_TMP/runtimes.json"
           then echo "$OPS_TMP/runtimes.json"
           else echo "$OPS_ROOT/runtimes.json"
@@ -299,41 +299,53 @@ tasks:
       - task: wait
         vars:
           OBJECT: po/redis-0
-          COND: 
+          COND:
             sh: echo "$OPERATOR_COMPONENT_REDIS"
       - task: wait
         vars:
           OBJECT: po/nuvolaris-mongodb-0
-          COND: 
+          COND:
             sh: echo "$OPERATOR_COMPONENT_MONGODB"
       - task: wait
         vars:
           OBJECT: pod/nuvolaris-postgres-1-0
-          COND: 
+          COND:
             sh: echo "$OPERATOR_COMPONENT_POSTGRES"
       - task: wait-pod
         vars:
           SELECTOR: "-l app=minio"
-          COND: 
+          COND:
             sh: echo "$OPERATOR_COMPONENT_MINIO"
           FILE: _minio
+      #- task: wait
+      #  vars:
+      #    OBJECT:
+      #      sh: echo "pod/$(cat _minio)"
+      #    COND:
+      #      sh: echo "$OPERATOR_COMPONENT_MINIO"
+      - task: wait-pod
+        vars:
+          SELECTOR: "-l app=seaweedfs"
+          COND:
+            sh: echo "$OPERATOR_COMPONENT_SEAWEEDFS"
+          FILE: _seaweedfs
       - task: wait
         vars:
           OBJECT:
-            sh: echo "pod/$(cat _minio)"
-          COND: 
-            sh: echo "$OPERATOR_COMPONENT_MINIO"
+            sh: echo "pod/$(cat _seaweedfs)"
+          COND:
+            sh: echo "$OPERATOR_COMPONENT_SEAWEEDFS"
       - task: wait-pod
         vars:
           SELECTOR: "-l name=nuvolaris-milvus"
-          COND: 
+          COND:
             sh: echo "$OPERATOR_COMPONENT_MILVUS"
           FILE: _milvus
       - task: wait
         vars:
           OBJECT:
             sh: echo "pod/$(cat _milvus)"
-          COND: 
+          COND:
             sh: echo "$OPERATOR_COMPONENT_MILVUS"
 
   create:
@@ -357,7 +369,7 @@ tasks:
     - config SKIP_OPERATOR_LAUNCH=1
     - task: create
     - config -r SKIP_OPERATOR_LAUNCH
-  
+
   deploy:
     silent: true
     desc: deploy in namespace (use namespace admin)
@@ -376,7 +388,7 @@ tasks:
     desc: delete cluster
     cmds:
       - source forcedelete.src
-      - kubectl delete clusterissuers/letsencrypt-issuer 2>/dev/null      
+      - kubectl delete clusterissuers/letsencrypt-issuer 2>/dev/null
       - kubectl -n nuvolaris delete sts/nuvolaris-operator --grace-period=0
       - kubectl -n nuvolaris delete po,sts,job,deploy,svc --all --grace-period=0
       - kubectl -n nuvolaris delete cm,secret,sa,role --all
@@ -395,7 +407,7 @@ tasks:
     desc: "unlock locked deletion (removing a finalizers)"
     cmds:
       - >
-        kubectl -n nuvolaris patch wsk/controller --type=merge 
+        kubectl -n nuvolaris patch wsk/controller --type=merge
         --patch '{"metadata": {"finalizers":[] } }'
 
   operator-update:
@@ -405,7 +417,7 @@ tasks:
       - "kubectl apply -f crds"
       - task: operator
       - kubectl -n nuvolaris rollout restart statefulset nuvolaris-operator
-    preconditions:      
+    preconditions:
       - sh: '[ $ENT_IMAGES_OPERATOR != $(nuv debug operator:version) ]'
         msg: "Current OpenServerless operator it is already updated to newest version. Request ignored."
 
@@ -414,9 +426,9 @@ tasks:
     silent: true
     cmds:
       - ops setup kubernetes prepare
-      - ops setup kubernetes whiskcrd      
-      - |        
+      - ops setup kubernetes whiskcrd
+      - |
         kubectl apply -f _whisk.yaml
       - task: wait
         vars:
-          OBJECT: pod/controller-0    
\ No newline at end of file
+          OBJECT: pod/controller-0
\ No newline at end of file
diff --git a/setup/kubernetes/whisk.yaml b/setup/kubernetes/whisk.yaml
index de6b164c..93beb408 100644
--- a/setup/kubernetes/whisk.yaml
+++ b/setup/kubernetes/whisk.yaml
@@ -31,6 +31,7 @@ spec:
       slim: ${OPERATOR_CONFIG_SLIM:-false}
       affinity: ${OPERATOR_CONFIG_AFFINITY:-false}
       tolerations: ${OPERATOR_CONFIG_TOLERATIONS:-false}
+      ingressclass: ${OPERATOR_CONFIG_INGRESSCLASS:-auto}
       preload:
         only-apache: ${OPERATOR_CONFIG_PRELOAD_ONLY_APACHE:-true}    
   components:
@@ -68,6 +69,8 @@ spec:
     milvus: ${OPERATOR_COMPONENT_MILVUS:-false}
     # REGISTRY enabled or not
     registry: ${OPERATOR_COMPONENT_REGISTRY:-false}
+    # REGISTRY enabled or not
+    seaweedfs: ${OPERATOR_COMPONENT_SEAWEEDFS:-false}    
   tls:
     acme-registered-email: ${OPERATOR_CONFIG_TLSEMAIL:-no-reply@email.com}
     acme-server-url: https://acme-v02.api.letsencrypt.org/directory
@@ -247,7 +250,17 @@ spec:
     volume-size: ${REGISTRY_CONFIG_VOLUME_SIZE:-50}
     auth:
       username: ${REGISTRY_CONFIG_USERNAME:-opsuser}
-      password: $REGISTRY_CONFIG_SECRET_PUSH_PULL
+      password: ${REGISTRY_CONFIG_SECRET_PUSH_PULL:-changeme-registry}
     hostname: ${REGISTRY_CONFIG_HOSTNAME:-auto}
     ingress:
-      enabled: ${REGISTRY_CONFIG_INGRESS_ENABLED:-false}       
+      enabled: ${REGISTRY_CONFIG_INGRESS_ENABLED:-false}
+  seaweedfs:
+    volume-size:  ${STORAGE_SIZE_SEAWEEDFS:-60}
+    nuvolaris:
+      user: nuvolaris
+      password: ${SECRET_SEAWEEDFS_NUVOLARIS:-changeme-seaweedfs}
+    ingress:
+      s3-enabled: ${SEAWEEDFS_CONFIG_INGRESS_S3_ENABLED:-true}
+      s3-hostname: ${SEAWEEDFS_CONFIG_INGRESS_S3_HOSTNAME:-auto}
+      console-enabled: ${SEAWEEDFS_CONFIG_INGRESS_CONSOLE_ENABLED:-false}
+      console-hostname: ${SEAWEEDFS_CONFIG_INGRESS_CONSOLE_HOSTNAME:-auto}              
diff --git a/setup/nuvolaris/opsfile.yml b/setup/nuvolaris/opsfile.yml
index 558beedc..b03be406 100644
--- a/setup/nuvolaris/opsfile.yml
+++ b/setup/nuvolaris/opsfile.yml
@@ -23,14 +23,14 @@ vars:
   CAT: '{{if eq .D ""}}true{{else}}cat{{end}}'
   RETRY: 100
   TIMEOUT: 10
-  ETC: 
+  ETC:
     sh: if $WSK_INSECURE ; then echo "-i" ; else echo "" ; fi
   CFG: "kubectl -n nuvolaris get wsk/controller"
   SLEEP: "500"
 
 env:
-  KUBECONFIG: 
-    sh: | 
+  KUBECONFIG:
+    sh: |
         if test -e "$OPS_TMP/kubeconfig"
         then echo "$OPS_TMP/kubeconfig"
         else echo ~/.kube/config
@@ -42,7 +42,7 @@ tasks:
     #desc: wait for apihost available
     silent: true
     env:
-      BAR: 
+      BAR:
         sh: printf "%*s" {{.RETRY}} "" | tr ' ' '#'
     cmds:
     - |
@@ -61,10 +61,10 @@ tasks:
       echo $APIHOST
 
   wait-cm:
-    desc: wait for an annotation in nuvolaris cm/config 
+    desc: wait for an annotation in nuvolaris cm/config
     silent: true
     env:
-      BAR: 
+      BAR:
         sh: printf "%*s" {{.RETRY}} "" | tr ' ' '#'
     cmds:
       - test -n "{{.JSONPATH}}" || die "use JSONPATH=<cm/config-jsonpath-lookup>"
@@ -72,13 +72,13 @@ tasks:
         N=0
         RES=false
         while [[ $N -lt {{.RETRY}} ]]
-        do           
+        do
           ANNOT_VALUE="$(kubectl -n nuvolaris get cm/config -o jsonpath='{{.JSONPATH}}')"
           if [[ -z "$ANNOT_VALUE" ]]
-          then 
+          then
             printf "\rwaiting for completing system initialization: [${BAR:0:$((N++))}]"
             sleep 5
-          else  
+          else
             RES=true; break
           fi
         done
@@ -89,7 +89,7 @@ tasks:
     desc: wait for an annotation in nuvolaris cm/config to be set and have a specific value
     silent: true
     env:
-      BAR: 
+      BAR:
         sh: printf "%*s" {{.RETRY}} "" | tr ' ' '#'
     cmds:
       - test -n "{{.JSONPATH}}" || die "use JSONPATH=<cm/config-jsonpath-lookup>"
@@ -101,10 +101,10 @@ tasks:
         N=0
         RES=false
         while [[ $N -lt {{.RETRY}} ]]
-        do           
+        do
           ANNOT_VALUE="$(kubectl -n nuvolaris get cm/config -o jsonpath='{.metadata.annotations.system_action_status}')"
           if [[ -z "$ANNOT_VALUE" ]]
-          then 
+          then
             printf "\rwaiting for completing system initialization: [${BAR:0:$((N++))}]"
             sleep 5
           else
@@ -120,11 +120,11 @@ tasks:
     silent: true
     cmds:
     - |
-      export OPSDEV_APIHOST=$(kubectl --kubeconfig="$KUBECONFIG" -n nuvolaris get cm/config -o jsonpath='{.metadata.annotations.apihost}')
+      export OPSDEV_APIHOST=$(ops util kubeget cm/config .metadata.annotations.apihost)
       export OPSDEV_USERNAME=nuvolaris
-      export AUTH=$(kubectl --kubeconfig="$KUBECONFIG" -n nuvolaris get wsk/controller -ojsonpath='{.spec.openwhisk.namespaces.nuvolaris}')
+      export AUTH=$(ops util kubeget wsk/controller .spec.openwhisk.namespaces.nuvolaris)
       echo Checking connection...
-      retry -t 100 -m 600 $OPS -wsk {{.ETC}} --apihost "$OPSDEV_APIHOST" --auth "$AUTH" namespace list
+      retry -t 100 -m 600 ops -wsk {{.ETC}} --apihost "$OPSDEV_APIHOST" --auth "$AUTH" namespace list
       export OPS_PASSWORD=$(kubectl -n nuvolaris get wsk/controller -ojsonpath -ojsonpath='{.spec.nuvolaris.password}')
       ops -login "$OPSDEV_APIHOST" "$OPSDEV_USERNAME"
       OPSDEV_HOST_PROT="$(echo "$OPSDEV_APIHOST" | awk -F '://' '{print $1}')"
@@ -167,7 +167,7 @@ tasks:
       MONGODB_URL="$(kubectl -n nuvolaris get cm/config -o jsonpath='{.metadata.annotations.mongodb_url}')"
       {{.RUN}} wsk {{.ETC}} action update hello/mongodb mongodb.js -p mongodb_url "$MONGODB_URL"
     - "{{.RUN}} wsk {{.ETC}} action invoke hello/mongodb -r | rg 'hello'"
-  
+
   redis:
     silent: true
     desc: redis test
@@ -202,7 +202,7 @@ tasks:
   postgres:
     silent: true
     desc: postgres test
-    cmds:    
+    cmds:
     - "{{.RUN}} wsk {{.ETC}} package update hello"
     - |
       POSTGRES_URL="$(kubectl -n nuvolaris get cm/config -o jsonpath='{.metadata.annotations.postgres_url}')"
@@ -210,7 +210,7 @@ tasks:
     - "{{.RUN}} wsk {{.ETC}} action invoke hello/postgres -r"
 
   sleep:
-    desc: sleep 
+    desc: sleep
     silent: true
     cmds:
     - "{{.RUN}} wsk action update sleep sleep.js --web=true --timeout 300000"
@@ -259,10 +259,12 @@ tasks:
             then ops -random --str 8
             else echo "{{.P}}"
             fi
+      FLAGS: '{{or .F "--all"}}'
+
     env:
-      APIHOST: 
+      APIHOST:
         sh: echo "$OPERATOR_CONFIG_HOSTPROTOCOL://$OPERATOR_CONFIG_APIHOST"
-      HOST: 
+      HOST:
         sh: echo "$OPERATOR_CONFIG_HOSTPROTOCOL://{{.USR}}.$OPERATOR_CONFIG_APIHOST"
     cmds:
     #- test ! -e ~/.ops/{{.USR}}.password || die "User {{.USR}} already exists - check .ops/{{.USR}}.password in your home for password"
@@ -272,7 +274,7 @@ tasks:
       fi
     - echo "Creating user {{.USR}} in $APIHOST"
     - |
-      ops admin adduser "{{.USR}}" "{{.USR}}@example.com" '{{.PSW}}' --all
+      ops admin adduser "{{.USR}}" "{{.USR}}@example.com" '{{.PSW}}' {{.FLAGS}}
       sleep 15
     - |
       export OPS_PASSWORD="{{.PSW}}"
diff --git a/setup/nuvolaris/streamer/nginx-template.yaml b/setup/nuvolaris/streamer/nginx-template.yaml
index 72020221..beb7bbcb 100644
--- a/setup/nuvolaris/streamer/nginx-template.yaml
+++ b/setup/nuvolaris/streamer/nginx-template.yaml
@@ -21,10 +21,21 @@ metadata:
     nginx.ingress.kubernetes.io/proxy-connect-timeout: "300"
     nginx.ingress.kubernetes.io/proxy-read-timeout: "300"
     nginx.ingress.kubernetes.io/proxy-send-timeout: "300"
+
+$T    cert-manager.io/cluster-issuer: letsencrypt-prod
+$T    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+
   name: nuvolaris-streamer-api-ingress
   namespace: nuvolaris
+
 spec:
   ingressClassName: nginx
+
+$T  tls:
+$T  - hosts:
+$T      - stream.${STREAMER_API_HOSTNAME:-localhost}
+$T    secretName: streamer-api-tls
+
   rules:
   - host: stream.${STREAMER_API_HOSTNAME:-localhost}    
     http:
diff --git a/setup/nuvolaris/streamer/opsfile.yml b/setup/nuvolaris/streamer/opsfile.yml
index 97a7a8a4..9a0b6661 100644
--- a/setup/nuvolaris/streamer/opsfile.yml
+++ b/setup/nuvolaris/streamer/opsfile.yml
@@ -16,13 +16,14 @@
 # under the License.
 version: '3'
 
-vars: 
+vars:
   VAR: ""
   MSG: ""
   VAL: ""
   RETRY: 100
   TIMEOUT: 15s
   CONTEXT: ""
+  DRY: ""
 
 env:
 
@@ -33,47 +34,50 @@ env:
       else echo ~/.kube/config
       fi
 
-  STREAMER_API_HOSTNAME: 
+  STREAMER_API_HOSTNAME:
       sh: |
-        ops util kubectl -- -n nuvolaris get ingress/apihost -o jsonpath='{.spec.rules[0].host}'       
-  
+        ops util kubeget ingress/apihost .spec.rules[0].host
+
   OW_APIHOST:
     sh: |
-      HOST=$(ops util kubectl -- -n nuvolaris get ingress/apihost -o jsonpath='{.spec.rules[0].host}')
-      if [ $OPERATOR_COMPONENT_INVOKER = true ]; 
+      HOST=$(ops util kubeget ingress/apihost .spec.rules[0].host)
+      if [ $OPERATOR_COMPONENT_INVOKER = true ];
         then echo "$HOST"
         else echo "http://controller:3233"
-      fi 
+      fi
 
   INGRESS_TYPE:
     sh: ops util ingress-type
 
 tasks:
 
-  boh:
-    desc: echo a message
-    silent: true
-    cmds:
-      - echo "$host.Name"
-  
   deploy:
     silent: true
     ignore_error: false
-    desc: deploy the streamer 
+    desc: deploy the streamer
+    vars:
+      T:
+        sh: |
+            if ops util kubeget wsk/controller .status.whisk_create.tls | rg on >/dev/null
+            then echo ""
+            else echo "#"
+            fi
     cmds:
     - test -e ${INGRESS_TYPE}-template.yaml || die "No avalable template for ingress type ${INGRESS_TYPE}."
     - test -n "$IMAGES_STREAMER" || die "IMAGES_STREAMER is not set. Please set it to the desired image version."
     - envsubst -i streamer-template.yaml -o _streamer.yaml > /dev/null 2>&1
-    - envsubst -i "${INGRESS_TYPE}-template.yaml" -o _ingress.yaml > /dev/null 2>&1
-    - kubectl -n nuvolaris apply -f _streamer.yaml
+    - |
+      export T="{{.T}}"
+      envsubst -i "${INGRESS_TYPE}-template.yaml" -o _ingress.yaml > /dev/null 2>&1
+    - "{{.DRY}} kubectl -n nuvolaris apply -f _streamer.yaml"
     #- cat _ingress.yaml
-    - kubectl -n nuvolaris apply -f _ingress.yaml
+    - "{{.DRY}} kubectl -n nuvolaris apply -f _ingress.yaml"
     - |
       echo "Streamer API deployed with HOSTNAME: stream.${STREAMER_API_HOSTNAME} and OW_APIHOST: ${OW_APIHOST}"
 
   undeploy:
     silent: true
-    desc: undeploy the streamer 
+    desc: undeploy the streamer
     ignore_error: true
     cmds:
     - kubectl -n nuvolaris delete sts/nuvolaris-streamer-api ing/nuvolaris-streamer-api-ingress
@@ -82,16 +86,16 @@ tasks:
 
   update:
     silent: true
-    desc: update the streamer 
+    desc: update the streamer
     cmds:
       - task: deploy
       - kubectl -n nuvolaris rollout restart statefulset nuvolaris-streamer-api
-    preconditions:      
+    preconditions:
       - sh: '[ $IMAGES_STREAMER != $CURRENT_STREAMER_VERSION ]'
         msg: "Current nuvolaris streamer API stateful set it is already updated to newest version. Request ignored."
     env:
       CURRENT_STREAMER_VERSION:
         sh: |
           echo "$(kubectl -n nuvolaris get pod/nuvolaris-streamer-api-0 -ojsonpath='{.spec.containers[0].image}')"
-                      
-  
+
+
diff --git a/setup/nuvolaris/streamer/traefik-template.yaml b/setup/nuvolaris/streamer/traefik-template.yaml
index bf85cd1d..24c7cb04 100644
--- a/setup/nuvolaris/streamer/traefik-template.yaml
+++ b/setup/nuvolaris/streamer/traefik-template.yaml
@@ -17,14 +17,26 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   annotations:
-    ingressClassName: traefik
     nginx.ingress.kubernetes.io/proxy-body-size: 1024m
     traefik.ingress.kubernetes.io/transport.respondingTimeouts.idleTimeout: "600"
     traefik.ingress.kubernetes.io/transport.respondingTimeouts.readTimeout: "600"
     traefik.ingress.kubernetes.io/transport.respondingTimeouts.writeTimeout: "600"
+
+$T    cert-manager.io/cluster-issuer: letsencrypt-prod
+$T    traefik.ingress.kubernetes.io/router.tls: "true"
+$T    traefik.ingress.kubernetes.io/router.entrypoints: websecure,web
+
   name: nuvolaris-streamer-api-ingress
   namespace: nuvolaris
+
 spec:
+  ingressClassName: traefik
+
+$T  tls:
+$T    - hosts:
+$T        - stream.${STREAMER_API_HOSTNAME:-localhost}
+$T      secretName: streamer-api-tls
+
   rules:
   - host: stream.${STREAMER_API_HOSTNAME:-localhost}
     http:
@@ -35,4 +47,4 @@ spec:
             port:
               number: 8080
         path: /
-        pathType: Prefix
\ No newline at end of file
+        pathType: Prefix
diff --git a/setup/nuvolaris/system-api/deploy/buildkit/buildkitd.toml b/setup/nuvolaris/system-api/deploy/buildkit/buildkitd.toml
new file mode 100644
index 00000000..37460c45
--- /dev/null
+++ b/setup/nuvolaris/system-api/deploy/buildkit/buildkitd.toml
@@ -0,0 +1,41 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+#
+# =========================
+# Worker OCI (rootlesskit)
+# =========================
+[worker.oci]
+  enabled = true
+  rootless = true
+  no-process-sandbox = true
+  snapshotter = "overlayfs"   # usa overlayfs se il kernel lo consente
+
+[worker.containerd]
+  enabled = false
+
+# =========================
+# Registry HTTP insicuro
+# =========================
+[registry."nuvolaris-registry-svc:5000"]
+  #insecure = true
+  http = true
+
+# =========================
+# Logging
+# =========================
+[log]
+  level = "trace"
\ No newline at end of file
diff --git a/setup/nuvolaris/system-api/opsfile.yml b/setup/nuvolaris/system-api/opsfile.yml
index 79a27680..f5e1767b 100644
--- a/setup/nuvolaris/system-api/opsfile.yml
+++ b/setup/nuvolaris/system-api/opsfile.yml
@@ -36,54 +36,99 @@ env:
   SYS_API_CDB_HOST: couchdb
 
   SYS_API_CDB_USER:
-    sh: $OPS debug kube ctl CMD="-n nuvolaris get wsk/controller -o jsonpath='{.spec.couchdb.admin.user}'"
+    #sh: ops util kubectl -- --kubeconfig "$KUBECONFIG" -n nuvolaris get wsk/controller -o jsonpath='{.spec.couchdb.admin.user}'
+    sh: ops util kubeget wsk/controller .spec.couchdb.admin.user
 
   SYS_API_CDB_PASSWORD:
-    sh: $OPS debug kube ctl CMD="-n nuvolaris get wsk/controller -o jsonpath='{.spec.couchdb.admin.password}'"
+    #sh: ops util kubectl -- --kubeconfig "$KUBECONFIG" -n nuvolaris get wsk/controller -o jsonpath='{.spec.couchdb.admin.password}'
+    sh: ops util kubeget wsk/controller .spec.couchdb.admin.password
 
   SYS_API_HOSTNAME:
-    sh: $OPS debug kube ctl CMD="-n nuvolaris get ingress/apihost -o jsonpath='{.spec.rules[0].host}'"
+    #sh: ops util kubectl -- --kubeconfig "$KUBECONFIG" -n nuvolaris get ingress/apihost -o jsonpath='{.spec.rules[0].host}'
+    sh: ops util kubeget ingress/apihost .spec.rules[0].host
+
+  REGISTRY_PASS:
+    #sh: ops util kubectl -- --kubeconfig "$KUBECONFIG" -n nuvolaris get cm/config  -o jsonpath='{.metadata.annotations.registry_password}'
+    sh: ops util kubeget cm/config .metadata.annotations.registry_password
 
   INGRESS_TYPE:
-    sh: $OPS util ingress-type
+    sh: ops util ingress-type
 
 tasks:
+  install-toml:
+    desc: Update the buildkitd.toml file config map
+    silent: true
+    cmds:
+      - task: remove-toml
+      - kubectl -n nuvolaris create configmap nuvolaris-buildkitd-conf --from-file="$OPS_ROOT/setup/nuvolaris/system-api/deploy/buildkit/buildkitd.toml"
+
+  remove-toml:
+    desc: Remove the buildkitd.toml config map
+    silent: true
+    cmds:
+      - |
+        if kubectl -n nuvolaris get cm nuvolaris-buildkitd-conf >/dev/null 2>&1;
+          then kubectl -n nuvolaris delete configmap nuvolaris-buildkitd-conf
+        fi
+
+  install-secret:
+    desc: Create secret to push to internal registry
+    silent: true
+    cmds:
+      - task: remove-secret
+      - |
+        if ! kubectl -n nuvolaris get secret registry-pull-secret-int >/dev/null 2>&1;
+        then kubectl -n nuvolaris create secret docker-registry registry-pull-secret-int --docker-server=http://nuvolaris-registry-svc:5000 --docker-username=opsuser --docker-password=${REGISTRY_PASS}
+        fi
+
+  remove-secret:
+    desc: Delete secret to push to internal registry
+    silent: true
+    cmds:
+      - |
+        if kubectl -n nuvolaris get secret registry-pull-secret-int >/dev/null 2>&1;
+        then kubectl -n nuvolaris delete secret registry-pull-secret-int
+        fi
 
   deploy:
     silent: true
     ignore_error: false
-    desc: deploy the admin api 
+    desc: deploy the admin api
     cmds:
     - test -e ${INGRESS_TYPE}-template.yaml || die "No avalable template for ingress type ${INGRESS_TYPE}."
     - test -n "$IMAGES_SYSTEMAPI" || die "IMAGES_SYSTEMAPI is not set. Please set it to the desired image version."
     - envsubst -i api-template.yaml -o _api.yaml > /dev/null 2>&1
     - envsubst -i ${INGRESS_TYPE}-template.yaml -o _ingress.yaml > /dev/null 2>&1
-    - $OPS debug kube ctl CMD="-n nuvolaris apply -f $OPS_PWD/setup/nuvolaris/system-api/_api.yaml"
+    - kubectl -n nuvolaris apply -f "$OPS_ROOT/setup/nuvolaris/system-api/_api.yaml"
     #- cat _ingress.yaml
-    - $OPS debug kube ctl CMD="-n nuvolaris apply -f $OPS_PWD/setup/nuvolaris/system-api/_ingress.yaml"
+    - kubectl -n nuvolaris apply -f "$OPS_ROOT/setup/nuvolaris/system-api/_ingress.yaml"
+    - task: install-toml
+    - task: install-secret
     - |
       echo "Admin API deployed with HOSTNAME: ${SYS_API_HOSTNAME}/system"
-  
+
   undeploy:
     silent: true
     desc: undeploy the admin api
-    ignore_error: true
+    ignore_error: false
     cmds:
-    - $OPS debug kube ctl CMD="-n nuvolaris delete sts/nuvolaris-system-api ing/nuvolaris-system-api-ingress svc/nuvolaris-system-api"
+    - task: remove-secret
+    - task: remove-toml
+    - kubectl -n nuvolaris delete sts/nuvolaris-system-api ing/nuvolaris-system-api-ingress svc/nuvolaris-system-api
     - |
       echo "System Admin API undeployed"
-  
+
 
   update:
     silent: true
     desc: update the OpenServerless System Admin Api Stateful Set
     cmds:
       - task: deploy
-      - $OPS debug kube ctl CMD="-n nuvolaris rollout restart statefulset nuvolaris-system-api"
-    preconditions:      
+      - kubectl -n nuvolaris rollout restart statefulset nuvolaris-system-api
+    preconditions:
       - sh: '[ $IMAGES_SYSTEMAPI != $CURRENT_API_VERSION ]'
         msg: "Current OpenServerless System API stateful set it is already updated to newest version. Request ignored."
     env:
       CURRENT_API_VERSION:
         sh: |
-          echo $($OPS debug kube ctl CMD="-n nuvolaris get sts/nuvolaris-system-api -ojsonpath='{.spec.template.spec.containers[0].image}'")
\ No newline at end of file
+          echo $(kubectl -n nuvolaris get sts/nuvolaris-system-api -ojsonpath='{.spec.template.spec.containers[0].image}')
\ No newline at end of file
diff --git a/setup/opsfile.yml b/setup/opsfile.yml
index 44a15122..f4bd7f23 100644
--- a/setup/opsfile.yml
+++ b/setup/opsfile.yml
@@ -31,14 +31,14 @@ tasks:
     vars:
       PORTS: "{{ .PORTS | default \"\" }}"
     cmds:
-      - |        
+      - |
         {{if eq OS "windows"}}
         $ports = "{{ .PORTS }}".Split(" ")
         foreach ($entry in $ports) {
           $parts = $entry -split "/"
           $port = $parts[0]
           $protocol = $parts[1].ToLower()
-        
+
           if ($protocol -eq "tcp" -and (Get-NetTCPConnection -LocalPort $port -ErrorAction SilentlyContinue)) {
             Write-Host "TCP Port $port is in use!" -ForegroundColor Red
             exit 1
@@ -76,26 +76,39 @@ tasks:
         done
         {{end}}
 
-  prereq:
-    silent: true
-    cmds:
-    - exit 0
 
   mini:
     silent: true
     desc: install miniops
+    vars:
+       APIHOST: '{{or ._apihost_ "http://miniops.me"}}'
     cmds:
+      - echo '{{.APIHOST}}' | rg 'https?://(?:[a-zA-Z0-9-]+\.)+[a-zA-Z]+/?' >/dev/null || die "please spefify an accessibile http://host"
+      - task: _mini
+        vars:
+          APIHOST: '{{.APIHOST}}'
+          PROTO:
+            sh:  echo '{{.APIHOST}}' | rg -o '(https?)://' -r '$1'
+          DOMAIN:
+            sh:  echo '{{.APIHOST}}' | rg -o 'https?://((?:[a-zA-Z0-9-]+\.)+[a-zA-Z]+)/?' -r '$1'
+
+  _mini:
+    silent: true
+    cmds:
+      - echo APIHOST={{.APIHOST}}
+      - echo PROTO={{.PROTO}}
+      - echo DOMAIN={{.DOMAIN}}
       - docker -v || die "Docker is not installed. Please install Docker Desktop first."
       - docker info 2>/dev/null >/dev/null || die "Docker is not running. Please start Docker Desktop first."
       - |
         if test -z {{.__skip_check_cluster}}
-        then          
-          if curl -sL http://miniops.me >/dev/null 2>/dev/null
+        then
+          if curl -sL {{.APIHOST}} >/dev/null 2>/dev/null
           then
-            if curl -sL http://miniops.me/api/info 2>/dev/null | jq  -r .description 2>/dev/null | rg OpenWhisk >/dev/null 2>/dev/null
+            if curl -sL {{.APIHOST}}/api/info 2>/dev/null | jq  -r .description 2>/dev/null | rg OpenWhisk >/dev/null 2>/dev/null
             then
               echo "*** Apache OpenServerless mini is already installed."
-              echo "*** Login with: ops ide login devel http://miniops.me"
+              echo "*** Login with: ops ide login devel {{.APIHOST}}"
               echo "*** You can find the password in .ops/devel.password in your home directory"
               echo "*** You can can uninstall and restart with: ops setup docker delete"
               exit 1
@@ -109,9 +122,10 @@ tasks:
         fi
       - ops setup docker check-space
       - ops config slim
-      - ops config apihost miniops.me --protocol=http
+      - ops config apihost '{{.DOMAIN}}' --protocol={{.PROTO}}
       - ops setup devcluster
       - ops setup nuvolaris streamer deploy
+      - ops setup nuvolaris system-api deploy
       - ops setup nuvolaris add-user
 
   devcluster:
@@ -126,18 +140,14 @@ tasks:
       then  {{.RUN}} ops setup docker delete
       else
         if test -z {{.__skip_check_ports}}
-        then 
+        then
           task check-ports PORTS="{{ .PORTS }}"
         fi
         {{.RUN}} ops setup docker create
-        if test -z {{.__skip_preload_images}}
-        then
-          {{.RUN}} ops setup docker preload
-        fi
         {{.RUN}} ops setup kubernetes create
         {{.RUN}} ops setup nuvolaris login
         config STATUS_LAST=devcluster
-      fi   
+      fi
 
   cluster:
     silent: true
@@ -150,8 +160,8 @@ tasks:
       else
             {{.RUN}} ops setup kubernetes create CONTEXT="{{._context_}}"
             {{.RUN}} ops setup nuvolaris login
-            config STATUS_LAST=cluster 
-            if test -n "{{._context_}}" 
+            config STATUS_LAST=cluster
+            if test -n "{{._context_}}"
             then config STATUS_CONTEXT="{{._context_}}"
             fi
       fi
@@ -171,32 +181,32 @@ tasks:
           config STATUS_LAST=server STATUS_SERVER="{{._server_}}"
           if test -n "{{._user_}}"
           then config STATUS_USERNAME="{{._user_}}"
-          fi   
+          fi
       fi
 
   status:
     silent: true
-    cmds: 
+    cmds:
       - |
-        case "$STATUS_LAST" in 
+        case "$STATUS_LAST" in
         (devcluster) {{.RUN}} ops setup devcluster --status ;;
         (cluster)    {{.RUN}} ops setup cluster "$STATUS_CONTEXT" --status ;;
-        (server)     {{.RUN}} ops setup server "$STATUS_SERVER" "$STATUS_USERNAME" --status ;; 
+        (server)     {{.RUN}} ops setup server "$STATUS_SERVER" "$STATUS_USERNAME" --status ;;
         (*) echo nothing installed yet
         esac
 
   uninstall:
     silent: true
-    cmds: 
+    cmds:
       - |
-        case "$STATUS_LAST" in 
-        (devcluster) 
+        case "$STATUS_LAST" in
+        (devcluster)
           {{.RUN}} ops setup devcluster --uninstall
           config -r STATUS_LAST
         ;;
-        (cluster)   
-          if test -n "$STATUS_CONTEXT" 
-          then 
+        (cluster)
+          if test -n "$STATUS_CONTEXT"
+          then
               {{.RUN}} ops setup cluster "$STATUS_CONTEXT" --uninstall
               config -r STATUS_CONTEXT
           else
@@ -204,16 +214,16 @@ tasks:
           fi
           config -r STATUS_LAST
         ;;
-        (server)    
+        (server)
           if test -z "$STATUS_USERNAME"
-          then 
+          then
                 {{.RUN}} ops setup server "$STATUS_SERVER" --uninstall
           else
                 {{.RUN}} ops setup server "$STATUS_SERVER" "$STATUS_USERNAME" --uninstall
                 config -r STATUS_USERNAME
           fi
-          config -r STATUS_LAST STATUS_SERVER 
-        ;; 
+          config -r STATUS_LAST STATUS_SERVER
+        ;;
         (*) echo nothing installed yet
         esac
 
diff --git a/update/opsfile.yml b/update/opsfile.yml
index 0488394e..24d7165a 100644
--- a/update/opsfile.yml
+++ b/update/opsfile.yml
@@ -33,7 +33,6 @@ env:
       fi
 
 tasks:
-  hi: echo hi
 
   cli:
     desc: update the cli
@@ -61,6 +60,9 @@ tasks:
       - config SECRET_POSTGRES_REPLICA="$(kubectl -n nuvolaris get wsk/controller -o jsonpath='{.spec.postgres.admin.replica-password}')"
       - config SECRET_POSTGRES_NUVOLARIS="$(kubectl -n nuvolaris get wsk/controller -ojsonpath='{.spec.postgres.nuvolaris.password}')"
       - config SECRET_NUVOLARIS_METADATA="$(kubectl -n nuvolaris get wsk/controller -ojsonpath='{.spec.nuvolaris.password}')"
+      - config SECRET_MILVUS_ROOT="$(kubectl -n nuvolaris get wsk/controller -ojsonpath='{.spec.milvus.password.root}')"
+      - config SECRET_MILVUS_S3="$(kubectl -n nuvolaris get wsk/controller -ojsonpath='{.spec.milvus.password.s3}')"
+      - config REGISTRY_CONFIG_SECRET_PUSH_PULL="$(kubectl -n nuvolaris get wsk/controller -ojsonpath='{.spec.registry.auth.password}')"
 
   apply:
     desc: apply updated config
@@ -68,7 +70,7 @@ tasks:
       - $OPS update secrets
       - $OPS setup kubernetes runtimes
       - $OPS setup kubernetes instance
-      - $OPS setup kubernetes services
+      - $OPS setup kubernetes wait-services
       - $OPS setup nuvolaris login
 
   operator:
diff --git a/util/config/README.md b/util/config/README.md
index 27988ddd..549e3d8c 100644
--- a/util/config/README.md
+++ b/util/config/README.md
@@ -1,39 +1,51 @@
-## Openserverless Configurator task
+## OpenServerless Configurator
 
-### Development:
+An interactive terminal tool for editing the parameters used by the `ops` CLI.
+It groups parameters by cloud provider or service component, lets you navigate
+with arrow keys, and auto-saves progress so you can resume after an interruption.
 
-The configurator is inside the `configurator` folder.
-The entrypoint is the `configurator/index.ts` file. It simply calls the configurator main function.
+---
 
-All the logic is inside the `configurator/configurator.ts` file. Of course, you can add more files
-and change the structure as you see fit.
+### How `ops` configuration works
 
-Inside the `configurator` folder, first install dependencies:
+The `ops` CLI stores key-value pairs that control the behaviour of deployments.
+
+Display all current values:
 
 ```bash
-bun install
+ops -config -d
 ```
 
-In the `package.json` file there are a couple of scripts. The `start` script will run the configurator:
+Set a single value:
 
 ```bash
-bun run start
+ops -config KEY=value
 ```
 
-### Tests:
-
-There are unit tests inside the `configurator/test` folder. You can run them with the following command:
+Read a single value:
 
 ```bash
-bun run test
+ops -config KEY
 ```
 
-### Building:
-
-To build the configurator and generate the `configurator.js` file, run the following command:
+Remove a key:
 
 ```bash
-bun run build
+ops -config -r KEY
 ```
 
-It will generate the `configurator.js` file and move it in the parent, where it can be used by the opsfile task.
+The configurator is a friendlier front-end for these operations: it reads
+`all-config-parameters.toml` to know which keys exist and what their labels and
+defaults are, lets you edit them interactively, and then either calls
+`ops -config KEY=value` for each change or saves the result to a timestamped
+TOML file.
+
+---
+
+### Further reading
+
+- `configurator/docs/user_manual.md` - full usage guide (navigation, exit options,
+  resumability, TOML file format)
+- `configurator/all-config-parameters.toml` - master list of all supported
+  components and parameters
+- `configurator/docs/development.md` - a guide for the Apache Openserverless contributors
\ No newline at end of file
diff --git a/util/config/configurator.js b/util/config/configurator.js
deleted file mode 100644
index 5ba4c1e2..00000000
--- a/util/config/configurator.js
+++ /dev/null
@@ -1,906 +0,0 @@
-// @bun
-var __create = Object.create;
-var __getProtoOf = Object.getPrototypeOf;
-var __defProp = Object.defineProperty;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __toESM = (mod, isNodeMode, target) => {
-  target = mod != null ? __create(__getProtoOf(mod)) : {};
-  const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
-  for (let key of __getOwnPropNames(mod))
-    if (!__hasOwnProp.call(to, key))
-      __defProp(to, key, {
-        get: () => mod[key],
-        enumerable: true
-      });
-  return to;
-};
-var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
-
-// node_modules/sisteransi/src/index.js
-var require_src = __commonJS((exports, module) => {
-  var ESC = "\x1B";
-  var CSI = `${ESC}[`;
-  var beep = "\x07";
-  var cursor = {
-    to(x, y) {
-      if (!y)
-        return `${CSI}${x + 1}G`;
-      return `${CSI}${y + 1};${x + 1}H`;
-    },
-    move(x, y) {
-      let ret = "";
-      if (x < 0)
-        ret += `${CSI}${-x}D`;
-      else if (x > 0)
-        ret += `${CSI}${x}C`;
-      if (y < 0)
-        ret += `${CSI}${-y}A`;
-      else if (y > 0)
-        ret += `${CSI}${y}B`;
-      return ret;
-    },
-    up: (count = 1) => `${CSI}${count}A`,
-    down: (count = 1) => `${CSI}${count}B`,
-    forward: (count = 1) => `${CSI}${count}C`,
-    backward: (count = 1) => `${CSI}${count}D`,
-    nextLine: (count = 1) => `${CSI}E`.repeat(count),
-    prevLine: (count = 1) => `${CSI}F`.repeat(count),
-    left: `${CSI}G`,
-    hide: `${CSI}?25l`,
-    show: `${CSI}?25h`,
-    save: `${ESC}7`,
-    restore: `${ESC}8`
-  };
-  var scroll = {
-    up: (count = 1) => `${CSI}S`.repeat(count),
-    down: (count = 1) => `${CSI}T`.repeat(count)
-  };
-  var erase = {
-    screen: `${CSI}2J`,
-    up: (count = 1) => `${CSI}1J`.repeat(count),
-    down: (count = 1) => `${CSI}J`.repeat(count),
-    line: `${CSI}2K`,
-    lineEnd: `${CSI}K`,
-    lineStart: `${CSI}1K`,
-    lines(count) {
-      let clear = "";
-      for (let i = 0;i < count; i++)
-        clear += this.line + (i < count - 1 ? cursor.up() : "");
-      if (count)
-        clear += cursor.left;
-      return clear;
-    }
-  };
-  module.exports = { cursor, scroll, erase, beep };
-});
-
-// node_modules/picocolors/picocolors.js
-var require_picocolors = __commonJS((exports, module) => {
-  var argv = process.argv || [];
-  var env = process.env;
-  var isColorSupported = !(("NO_COLOR" in env) || argv.includes("--no-color")) && (("FORCE_COLOR" in env) || argv.includes("--color") || process.platform === "win32" || import.meta.require != null && import.meta.require("tty").isatty(1) && env.TERM !== "dumb" || ("CI" in env));
-  var formatter = (open, close, replace = open) => (input) => {
-    let string = "" + input;
-    let index = string.indexOf(close, open.length);
-    return ~index ? open + replaceClose(string, close, replace, index) + close : open + string + close;
-  };
-  var replaceClose = (string, close, replace, index) => {
-    let result = "";
-    let cursor = 0;
-    do {
-      result += string.substring(cursor, index) + replace;
-      cursor = index + close.length;
-      index = string.indexOf(close, cursor);
-    } while (~index);
-    return result + string.substring(cursor);
-  };
-  var createColors = (enabled = isColorSupported) => {
-    let init = enabled ? formatter : () => String;
-    return {
-      isColorSupported: enabled,
-      reset: init("\x1B[0m", "\x1B[0m"),
-      bold: init("\x1B[1m", "\x1B[22m", "\x1B[22m\x1B[1m"),
-      dim: init("\x1B[2m", "\x1B[22m", "\x1B[22m\x1B[2m"),
-      italic: init("\x1B[3m", "\x1B[23m"),
-      underline: init("\x1B[4m", "\x1B[24m"),
-      inverse: init("\x1B[7m", "\x1B[27m"),
-      hidden: init("\x1B[8m", "\x1B[28m"),
-      strikethrough: init("\x1B[9m", "\x1B[29m"),
-      black: init("\x1B[30m", "\x1B[39m"),
-      red: init("\x1B[31m", "\x1B[39m"),
-      green: init("\x1B[32m", "\x1B[39m"),
-      yellow: init("\x1B[33m", "\x1B[39m"),
-      blue: init("\x1B[34m", "\x1B[39m"),
-      magenta: init("\x1B[35m", "\x1B[39m"),
-      cyan: init("\x1B[36m", "\x1B[39m"),
-      white: init("\x1B[37m", "\x1B[39m"),
-      gray: init("\x1B[90m", "\x1B[39m"),
-      bgBlack: init("\x1B[40m", "\x1B[49m"),
-      bgRed: init("\x1B[41m", "\x1B[49m"),
-      bgGreen: init("\x1B[42m", "\x1B[49m"),
-      bgYellow: init("\x1B[43m", "\x1B[49m"),
-      bgBlue: init("\x1B[44m", "\x1B[49m"),
-      bgMagenta: init("\x1B[45m", "\x1B[49m"),
-      bgCyan: init("\x1B[46m", "\x1B[49m"),
-      bgWhite: init("\x1B[47m", "\x1B[49m")
-    };
-  };
-  module.exports = createColors();
-  module.exports.createColors = createColors;
-});
-
-// configurator.ts
-var {$: $2 } = globalThis.Bun;
-
-// node_modules/@clack/core/dist/index.mjs
-var import_sisteransi = __toESM(require_src(), 1);
-import {stdin as $, stdout as k} from "process";
-var import_picocolors = __toESM(require_picocolors(), 1);
-import _ from "readline";
-import {WriteStream as U} from "tty";
-function q({ onlyFirst: t = false } = {}) {
-  const u = ["[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]+)*|[a-zA-Z\\d]+(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)", "(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PR-TZcf-ntqry=><~]))"].join("|");
-  return new RegExp(u, t ? undefined : "g");
-}
-function S(t) {
-  if (typeof t != "string")
-    throw new TypeError(`Expected a \`string\`, got \`${typeof t}\``);
-  return t.replace(q(), "");
-}
-function j(t) {
-  return t && t.__esModule && Object.prototype.hasOwnProperty.call(t, "default") ? t.default : t;
-}
-function A(t, u = {}) {
-  if (typeof t != "string" || t.length === 0 || (u = { ambiguousIsNarrow: true, ...u }, t = S(t), t.length === 0))
-    return 0;
-  t = t.replace(DD(), "  ");
-  const F = u.ambiguousIsNarrow ? 1 : 2;
-  let e = 0;
-  for (const s of t) {
-    const C = s.codePointAt(0);
-    if (C <= 31 || C >= 127 && C <= 159 || C >= 768 && C <= 879)
-      continue;
-    switch (Q.eastAsianWidth(s)) {
-      case "F":
-      case "W":
-        e += 2;
-        break;
-      case "A":
-        e += F;
-        break;
-      default:
-        e += 1;
-    }
-  }
-  return e;
-}
-function tD() {
-  const t = new Map;
-  for (const [u, F] of Object.entries(r)) {
-    for (const [e, s] of Object.entries(F))
-      r[e] = { open: `\x1B[${s[0]}m`, close: `\x1B[${s[1]}m` }, F[e] = r[e], t.set(s[0], s[1]);
-    Object.defineProperty(r, u, { value: F, enumerable: false });
-  }
-  return Object.defineProperty(r, "codes", { value: t, enumerable: false }), r.color.close = "\x1B[39m", r.bgColor.close = "\x1B[49m", r.color.ansi = T(), r.color.ansi256 = P(), r.color.ansi16m = W(), r.bgColor.ansi = T(m), r.bgColor.ansi256 = P(m), r.bgColor.ansi16m = W(m), Object.defineProperties(r, { rgbToAnsi256: { value: (u, F, e) => u === F && F === e ? u < 8 ? 16 : u > 248 ? 231 : Math.round((u - 8) / 247 * 24) + 232 : 16 + 36 * Math.round(u / 255 * 5) + 6 * Math.round(F / 255 * 5) + Math.round(e / 255 * 5), enumerable: false }, hexToRgb: { value: (u) => {
-    const F = /[a-f\d]{6}|[a-f\d]{3}/i.exec(u.toString(16));
-    if (!F)
-      return [0, 0, 0];
-    let [e] = F;
-    e.length === 3 && (e = [...e].map((C) => C + C).join(""));
-    const s = Number.parseInt(e, 16);
-    return [s >> 16 & 255, s >> 8 & 255, s & 255];
-  }, enumerable: false }, hexToAnsi256: { value: (u) => r.rgbToAnsi256(...r.hexToRgb(u)), enumerable: false }, ansi256ToAnsi: { value: (u) => {
-    if (u < 8)
-      return 30 + u;
-    if (u < 16)
-      return 90 + (u - 8);
-    let F, e, s;
-    if (u >= 232)
-      F = ((u - 232) * 10 + 8) / 255, e = F, s = F;
-    else {
-      u -= 16;
-      const i = u % 36;
-      F = Math.floor(u / 36) / 5, e = Math.floor(i / 6) / 5, s = i % 6 / 5;
-    }
-    const C = Math.max(F, e, s) * 2;
-    if (C === 0)
-      return 30;
-    let D = 30 + (Math.round(s) << 2 | Math.round(e) << 1 | Math.round(F));
-    return C === 2 && (D += 60), D;
-  }, enumerable: false }, rgbToAnsi: { value: (u, F, e) => r.ansi256ToAnsi(r.rgbToAnsi256(u, F, e)), enumerable: false }, hexToAnsi: { value: (u) => r.ansi256ToAnsi(r.hexToAnsi256(u)), enumerable: false } }), r;
-}
-function R(t, u, F) {
-  return String(t).normalize().replace(/\r\n/g, `
-`).split(`
-`).map((e) => ED(e, u, F)).join(`
-`);
-}
-function aD(t, u) {
-  if (t === u)
-    return;
-  const F = t.split(`
-`), e = u.split(`
-`), s = [];
-  for (let C = 0;C < Math.max(F.length, e.length); C++)
-    F[C] !== e[C] && s.push(C);
-  return s;
-}
-function hD(t) {
-  return t === V;
-}
-function v(t, u) {
-  t.isTTY && t.setRawMode(u);
-}
-var M = { exports: {} };
-(function(t) {
-  var u = {};
-  t.exports = u, u.eastAsianWidth = function(e) {
-    var s = e.charCodeAt(0), C = e.length == 2 ? e.charCodeAt(1) : 0, D = s;
-    return 55296 <= s && s <= 56319 && 56320 <= C && C <= 57343 && (s &= 1023, C &= 1023, D = s << 10 | C, D += 65536), D == 12288 || 65281 <= D && D <= 65376 || 65504 <= D && D <= 65510 ? "F" : D == 8361 || 65377 <= D && D <= 65470 || 65474 <= D && D <= 65479 || 65482 <= D && D <= 65487 || 65490 <= D && D <= 65495 || 65498 <= D && D <= 65500 || 65512 <= D && D <= 65518 ? "H" : 4352 <= D && D <= 4447 || 4515 <= D && D <= 4519 || 4602 <= D && D <= 4607 || 9001 <= D && D <= 9002 || 11904 <= D && D <= 11929 || 11931 <= D && D <= 12019 || 12032 <= D && D <= 12245 || 12272 <= D && D <= 12283 || 12289 <= D && D <= 12350 || 12353 <= D && D <= 12438 || 12441 <= D && D <= 12543 || 12549 <= D && D <= 12589 || 12593 <= D && D <= 12686 || 12688 <= D && D <= 12730 || 12736 <= D && D <= 12771 || 12784 <= D && D <= 12830 || 12832 <= D && D <= 12871 || 12880 <= D && D <= 13054 || 13056 <= D && D <= 19903 || 19968 <= D && D <= 42124 || 42128 <= D && D <= 42182 || 43360 <= D && D <= 43388 || 44032 <= D && D <= 55203 || 55216 <= D && D <= 55238 || 55243 <= D && D <= 55291 || 63744 <= D && D <= 64255 || 65040 <= D && D <= 65049 || 65072 <= D && D <= 65106 || 65108 <= D && D <= 65126 || 65128 <= D && D <= 65131 || 110592 <= D && D <= 110593 || 127488 <= D && D <= 127490 || 127504 <= D && D <= 127546 || 127552 <= D && D <= 127560 || 127568 <= D && D <= 127569 || 131072 <= D && D <= 194367 || 177984 <= D && D <= 196605 || 196608 <= D && D <= 262141 ? "W" : 32 <= D && D <= 126 || 162 <= D && D <= 163 || 165 <= D && D <= 166 || D == 172 || D == 175 || 10214 <= D && D <= 10221 || 10629 <= D && D <= 10630 ? "Na" : D == 161 || D == 164 || 167 <= D && D <= 168 || D == 170 || 173 <= D && D <= 174 || 176 <= D && D <= 180 || 182 <= D && D <= 186 || 188 <= D && D <= 191 || D == 198 || D == 208 || 215 <= D && D <= 216 || 222 <= D && D <= 225 || D == 230 || 232 <= D && D <= 234 || 236 <= D && D <= 237 || D == 240 || 242 <= D && D <= 243 || 247 <= D && D <= 250 || D == 252 || D == 254 || D == 257 || D == 273 || D == 275 || D == 283 || 294 <= D && D <= 295 || D == 299 || 305 <= D && D <= 307 || D == 312 || 319 <= D && D <= 322 || D == 324 || 328 <= D && D <= 331 || D == 333 || 338 <= D && D <= 339 || 358 <= D && D <= 359 || D == 363 || D == 462 || D == 464 || D == 466 || D == 468 || D == 470 || D == 472 || D == 474 || D == 476 || D == 593 || D == 609 || D == 708 || D == 711 || 713 <= D && D <= 715 || D == 717 || D == 720 || 728 <= D && D <= 731 || D == 733 || D == 735 || 768 <= D && D <= 879 || 913 <= D && D <= 929 || 931 <= D && D <= 937 || 945 <= D && D <= 961 || 963 <= D && D <= 969 || D == 1025 || 1040 <= D && D <= 1103 || D == 1105 || D == 8208 || 8211 <= D && D <= 8214 || 8216 <= D && D <= 8217 || 8220 <= D && D <= 8221 || 8224 <= D && D <= 8226 || 8228 <= D && D <= 8231 || D == 8240 || 8242 <= D && D <= 8243 || D == 8245 || D == 8251 || D == 8254 || D == 8308 || D == 8319 || 8321 <= D && D <= 8324 || D == 8364 || D == 8451 || D == 8453 || D == 8457 || D == 8467 || D == 8470 || 8481 <= D && D <= 8482 || D == 8486 || D == 8491 || 8531 <= D && D <= 8532 || 8539 <= D && D <= 8542 || 8544 <= D && D <= 8555 || 8560 <= D && D <= 8569 || D == 8585 || 8592 <= D && D <= 8601 || 8632 <= D && D <= 8633 || D == 8658 || D == 8660 || D == 8679 || D == 8704 || 8706 <= D && D <= 8707 || 8711 <= D && D <= 8712 || D == 8715 || D == 8719 || D == 8721 || D == 8725 || D == 8730 || 8733 <= D && D <= 8736 || D == 8739 || D == 8741 || 8743 <= D && D <= 8748 || D == 8750 || 8756 <= D && D <= 8759 || 8764 <= D && D <= 8765 || D == 8776 || D == 8780 || D == 8786 || 8800 <= D && D <= 8801 || 8804 <= D && D <= 8807 || 8810 <= D && D <= 8811 || 8814 <= D && D <= 8815 || 8834 <= D && D <= 8835 || 8838 <= D && D <= 8839 || D == 8853 || D == 8857 || D == 8869 || D == 8895 || D == 8978 || 9312 <= D && D <= 9449 || 9451 <= D && D <= 9547 || 9552 <= D && D <= 9587 || 9600 <= D && D <= 9615 || 9618 <= D && D <= 9621 || 9632 <= D && D <= 9633 || 9635 <= D && D <= 9641 || 9650 <= D && D <= 9651 || 9654 <= D && D <= 9655 || 9660 <= D && D <= 9661 || 9664 <= D && D <= 9665 || 9670 <= D && D <= 9672 || D == 9675 || 9678 <= D && D <= 9681 || 9698 <= D && D <= 9701 || D == 9711 || 9733 <= D && D <= 9734 || D == 9737 || 9742 <= D && D <= 9743 || 9748 <= D && D <= 9749 || D == 9756 || D == 9758 || D == 9792 || D == 9794 || 9824 <= D && D <= 9825 || 9827 <= D && D <= 9829 || 9831 <= D && D <= 9834 || 9836 <= D && D <= 9837 || D == 9839 || 9886 <= D && D <= 9887 || 9918 <= D && D <= 9919 || 9924 <= D && D <= 9933 || 9935 <= D && D <= 9953 || D == 9955 || 9960 <= D && D <= 9983 || D == 10045 || D == 10071 || 10102 <= D && D <= 10111 || 11093 <= D && D <= 11097 || 12872 <= D && D <= 12879 || 57344 <= D && D <= 63743 || 65024 <= D && D <= 65039 || D == 65533 || 127232 <= D && D <= 127242 || 127248 <= D && D <= 127277 || 127280 <= D && D <= 127337 || 127344 <= D && D <= 127386 || 917760 <= D && D <= 917999 || 983040 <= D && D <= 1048573 || 1048576 <= D && D <= 1114109 ? "A" : "N";
-  }, u.characterLength = function(e) {
-    var s = this.eastAsianWidth(e);
-    return s == "F" || s == "W" || s == "A" ? 2 : 1;
-  };
-  function F(e) {
-    return e.match(/[\uD800-\uDBFF][\uDC00-\uDFFF]|[^\uD800-\uDFFF]/g) || [];
-  }
-  u.length = function(e) {
-    for (var s = F(e), C = 0, D = 0;D < s.length; D++)
-      C = C + this.characterLength(s[D]);
-    return C;
-  }, u.slice = function(e, s, C) {
-    textLen = u.length(e), s = s || 0, C = C || 1, s < 0 && (s = textLen + s), C < 0 && (C = textLen + C);
-    for (var D = "", i = 0, n = F(e), E = 0;E < n.length; E++) {
-      var h = n[E], o = u.length(h);
-      if (i >= s - (o == 2 ? 1 : 0))
-        if (i + o <= C)
-          D += h;
-        else
-          break;
-      i += o;
-    }
-    return D;
-  };
-})(M);
-var J = M.exports;
-var Q = j(J);
-var X = function() {
-  return /\uD83C\uDFF4\uDB40\uDC67\uDB40\uDC62(?:\uDB40\uDC77\uDB40\uDC6C\uDB40\uDC73|\uDB40\uDC73\uDB40\uDC63\uDB40\uDC74|\uDB40\uDC65\uDB40\uDC6E\uDB40\uDC67)\uDB40\uDC7F|(?:\uD83E\uDDD1\uD83C\uDFFF\u200D\u2764\uFE0F\u200D(?:\uD83D\uDC8B\u200D)?\uD83E\uDDD1|\uD83D\uDC69\uD83C\uDFFF\u200D\uD83E\uDD1D\u200D(?:\uD83D[\uDC68\uDC69]))(?:\uD83C[\uDFFB-\uDFFE])|(?:\uD83E\uDDD1\uD83C\uDFFE\u200D\u2764\uFE0F\u200D(?:\uD83D\uDC8B\u200D)?\uD83E\uDDD1|\uD83D\uDC69\uD83C\uDFFE\u200D\uD83E\uDD1D\u200D(?:\uD83D[\uDC68\uDC69]))(?:\uD83C[\uDFFB-\uDFFD\uDFFF])|(?:\uD83E\uDDD1\uD83C\uDFFD\u200D\u2764\uFE0F\u200D(?:\uD83D\uDC8B\u200D)?\uD83E\uDDD1|\uD83D\uDC69\uD83C\uDFFD\u200D\uD83E\uDD1D\u200D(?:\uD83D[\uDC68\uDC69]))(?:\uD83C[\uDFFB\uDFFC\uDFFE\uDFFF])|(?:\uD83E\uDDD1\uD83C\uDFFC\u200D\u2764\uFE0F\u200D(?:\uD83D\uDC8B\u200D)?\uD83E\uDDD1|\uD83D\uDC69\uD83C\uDFFC\u200D\uD83E\uDD1D\u200D(?:\uD83D[\uDC68\uDC69]))(?:\uD83C[\uDFFB\uDFFD-\uDFFF])|(?:\uD83E\uDDD1\uD83C\uDFFB\u200D\u2764\uFE0F\u200D(?:\uD83D\uDC8B\u200D)?\uD83E\uDDD1|\uD83D\uDC69\uD83C\uDFFB\u200D\uD83E\uDD1D\u200D(?:\uD83D[\uDC68\uDC69]))(?:\uD83C[\uDFFC-\uDFFF])|\uD83D\uDC68(?:\uD83C\uDFFB(?:\u200D(?:\u2764\uFE0F\u200D(?:\uD83D\uDC8B\u200D\uD83D\uDC68(?:\uD83C[\uDFFB-\uDFFF])|\uD83D\uDC68(?:\uD83C[\uDFFB-\uDFFF]))|\uD83E\uDD1D\u200D\uD83D\uDC68(?:\uD83C[\uDFFC-\uDFFF])|[\u2695\u2696\u2708]\uFE0F|\uD83C[\uDF3E\uDF73\uDF7C\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD]))?|(?:\uD83C[\uDFFC-\uDFFF])\u200D\u2764\uFE0F\u200D(?:\uD83D\uDC8B\u200D\uD83D\uDC68(?:\uD83C[\uDFFB-\uDFFF])|\uD83D\uDC68(?:\uD83C[\uDFFB-\uDFFF]))|\u200D(?:\u2764\uFE0F\u200D(?:\uD83D\uDC8B\u200D)?\uD83D\uDC68|(?:\uD83D[\uDC68\uDC69])\u200D(?:\uD83D\uDC66\u200D\uD83D\uDC66|\uD83D\uDC67\u200D(?:\uD83D[\uDC66\uDC67]))|\uD83D\uDC66\u200D\uD83D\uDC66|\uD83D\uDC67\u200D(?:\uD83D[\uDC66\uDC67])|\uD83C[\uDF3E\uDF73\uDF7C\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFF\u200D(?:\uD83E\uDD1D\u200D\uD83D\uDC68(?:\uD83C[\uDFFB-\uDFFE])|\uD83C[\uDF3E\uDF73\uDF7C\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFE\u200D(?:\uD83E\uDD1D\u200D\uD83D\uDC68(?:\uD83C[\uDFFB-\uDFFD\uDFFF])|\uD83C[\uDF3E\uDF73\uDF7C\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFD\u200D(?:\uD83E\uDD1D\u200D\uD83D\uDC68(?:\uD83C[\uDFFB\uDFFC\uDFFE\uDFFF])|\uD83C[\uDF3E\uDF73\uDF7C\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFC\u200D(?:\uD83E\uDD1D\u200D\uD83D\uDC68(?:\uD83C[\uDFFB\uDFFD-\uDFFF])|\uD83C[\uDF3E\uDF73\uDF7C\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|(?:\uD83C\uDFFF\u200D[\u2695\u2696\u2708]|\uD83C\uDFFE\u200D[\u2695\u2696\u2708]|\uD83C\uDFFD\u200D[\u2695\u2696\u2708]|\uD83C\uDFFC\u200D[\u2695\u2696\u2708]|\u200D[\u2695\u2696\u2708])\uFE0F|\u200D(?:(?:\uD83D[\uDC68\uDC69])\u200D(?:\uD83D[\uDC66\uDC67])|\uD83D[\uDC66\uDC67])|\uD83C\uDFFF|\uD83C\uDFFE|\uD83C\uDFFD|\uD83C\uDFFC)?|(?:\uD83D\uDC69(?:\uD83C\uDFFB\u200D\u2764\uFE0F\u200D(?:\uD83D\uDC8B\u200D(?:\uD83D[\uDC68\uDC69])|\uD83D[\uDC68\uDC69])|(?:\uD83C[\uDFFC-\uDFFF])\u200D\u2764\uFE0F\u200D(?:\uD83D\uDC8B\u200D(?:\uD83D[\uDC68\uDC69])|\uD83D[\uDC68\uDC69]))|\uD83E\uDDD1(?:\uD83C[\uDFFB-\uDFFF])\u200D\uD83E\uDD1D\u200D\uD83E\uDDD1)(?:\uD83C[\uDFFB-\uDFFF])|\uD83D\uDC69\u200D\uD83D\uDC69\u200D(?:\uD83D\uDC66\u200D\uD83D\uDC66|\uD83D\uDC67\u200D(?:\uD83D[\uDC66\uDC67]))|\uD83D\uDC69(?:\u200D(?:\u2764\uFE0F\u200D(?:\uD83D\uDC8B\u200D(?:\uD83D[\uDC68\uDC69])|\uD83D[\uDC68\uDC69])|\uD83C[\uDF3E\uDF73\uDF7C\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFF\u200D(?:\uD83C[\uDF3E\uDF73\uDF7C\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFE\u200D(?:\uD83C[\uDF3E\uDF73\uDF7C\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFD\u200D(?:\uD83C[\uDF3E\uDF73\uDF7C\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFC\u200D(?:\uD83C[\uDF3E\uDF73\uDF7C\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFB\u200D(?:\uD83C[\uDF3E\uDF73\uDF7C\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD]))|\uD83E\uDDD1(?:\u200D(?:\uD83E\uDD1D\u200D\uD83E\uDDD1|\uD83C[\uDF3E\uDF73\uDF7C\uDF84\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFF\u200D(?:\uD83C[\uDF3E\uDF73\uDF7C\uDF84\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFE\u200D(?:\uD83C[\uDF3E\uDF73\uDF7C\uDF84\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFD\u200D(?:\uD83C[\uDF3E\uDF73\uDF7C\uDF84\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFC\u200D(?:\uD83C[\uDF3E\uDF73\uDF7C\uDF84\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFB\u200D(?:\uD83C[\uDF3E\uDF73\uDF7C\uDF84\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD]))|\uD83D\uDC69\u200D\uD83D\uDC66\u200D\uD83D\uDC66|\uD83D\uDC69\u200D\uD83D\uDC69\u200D(?:\uD83D[\uDC66\uDC67])|\uD83D\uDC69\u200D\uD83D\uDC67\u200D(?:\uD83D[\uDC66\uDC67])|(?:\uD83D\uDC41\uFE0F\u200D\uD83D\uDDE8|\uD83E\uDDD1(?:\uD83C\uDFFF\u200D[\u2695\u2696\u2708]|\uD83C\uDFFE\u200D[\u2695\u2696\u2708]|\uD83C\uDFFD\u200D[\u2695\u2696\u2708]|\uD83C\uDFFC\u200D[\u2695\u2696\u2708]|\uD83C\uDFFB\u200D[\u2695\u2696\u2708]|\u200D[\u2695\u2696\u2708])|\uD83D\uDC69(?:\uD83C\uDFFF\u200D[\u2695\u2696\u2708]|\uD83C\uDFFE\u200D[\u2695\u2696\u2708]|\uD83C\uDFFD\u200D[\u2695\u2696\u2708]|\uD83C\uDFFC\u200D[\u2695\u2696\u2708]|\uD83C\uDFFB\u200D[\u2695\u2696\u2708]|\u200D[\u2695\u2696\u2708])|\uD83D\uDE36\u200D\uD83C\uDF2B|\uD83C\uDFF3\uFE0F\u200D\u26A7|\uD83D\uDC3B\u200D\u2744|(?:(?:\uD83C[\uDFC3\uDFC4\uDFCA]|\uD83D[\uDC6E\uDC70\uDC71\uDC73\uDC77\uDC81\uDC82\uDC86\uDC87\uDE45-\uDE47\uDE4B\uDE4D\uDE4E\uDEA3\uDEB4-\uDEB6]|\uD83E[\uDD26\uDD35\uDD37-\uDD39\uDD3D\uDD3E\uDDB8\uDDB9\uDDCD-\uDDCF\uDDD4\uDDD6-\uDDDD])(?:\uD83C[\uDFFB-\uDFFF])|\uD83D\uDC6F|\uD83E[\uDD3C\uDDDE\uDDDF])\u200D[\u2640\u2642]|(?:\u26F9|\uD83C[\uDFCB\uDFCC]|\uD83D\uDD75)(?:\uFE0F|\uD83C[\uDFFB-\uDFFF])\u200D[\u2640\u2642]|\uD83C\uDFF4\u200D\u2620|(?:\uD83C[\uDFC3\uDFC4\uDFCA]|\uD83D[\uDC6E\uDC70\uDC71\uDC73\uDC77\uDC81\uDC82\uDC86\uDC87\uDE45-\uDE47\uDE4B\uDE4D\uDE4E\uDEA3\uDEB4-\uDEB6]|\uD83E[\uDD26\uDD35\uDD37-\uDD39\uDD3D\uDD3E\uDDB8\uDDB9\uDDCD-\uDDCF\uDDD4\uDDD6-\uDDDD])\u200D[\u2640\u2642]|[\xA9\xAE\u203C\u2049\u2122\u2139\u2194-\u2199\u21A9\u21AA\u2328\u23CF\u23ED-\u23EF\u23F1\u23F2\u23F8-\u23FA\u24C2\u25AA\u25AB\u25B6\u25C0\u25FB\u25FC\u2600-\u2604\u260E\u2611\u2618\u2620\u2622\u2623\u2626\u262A\u262E\u262F\u2638-\u263A\u2640\u2642\u265F\u2660\u2663\u2665\u2666\u2668\u267B\u267E\u2692\u2694-\u2697\u2699\u269B\u269C\u26A0\u26A7\u26B0\u26B1\u26C8\u26CF\u26D1\u26D3\u26E9\u26F0\u26F1\u26F4\u26F7\u26F8\u2702\u2708\u2709\u270F\u2712\u2714\u2716\u271D\u2721\u2733\u2734\u2744\u2747\u2763\u27A1\u2934\u2935\u2B05-\u2B07\u3030\u303D\u3297\u3299]|\uD83C[\uDD70\uDD71\uDD7E\uDD7F\uDE02\uDE37\uDF21\uDF24-\uDF2C\uDF36\uDF7D\uDF96\uDF97\uDF99-\uDF9B\uDF9E\uDF9F\uDFCD\uDFCE\uDFD4-\uDFDF\uDFF5\uDFF7]|\uD83D[\uDC3F\uDCFD\uDD49\uDD4A\uDD6F\uDD70\uDD73\uDD76-\uDD79\uDD87\uDD8A-\uDD8D\uDDA5\uDDA8\uDDB1\uDDB2\uDDBC\uDDC2-\uDDC4\uDDD1-\uDDD3\uDDDC-\uDDDE\uDDE1\uDDE3\uDDE8\uDDEF\uDDF3\uDDFA\uDECB\uDECD-\uDECF\uDEE0-\uDEE5\uDEE9\uDEF0\uDEF3])\uFE0F|\uD83C\uDFF3\uFE0F\u200D\uD83C\uDF08|\uD83D\uDC69\u200D\uD83D\uDC67|\uD83D\uDC69\u200D\uD83D\uDC66|\uD83D\uDE35\u200D\uD83D\uDCAB|\uD83D\uDE2E\u200D\uD83D\uDCA8|\uD83D\uDC15\u200D\uD83E\uDDBA|\uD83E\uDDD1(?:\uD83C\uDFFF|\uD83C\uDFFE|\uD83C\uDFFD|\uD83C\uDFFC|\uD83C\uDFFB)?|\uD83D\uDC69(?:\uD83C\uDFFF|\uD83C\uDFFE|\uD83C\uDFFD|\uD83C\uDFFC|\uD83C\uDFFB)?|\uD83C\uDDFD\uD83C\uDDF0|\uD83C\uDDF6\uD83C\uDDE6|\uD83C\uDDF4\uD83C\uDDF2|\uD83D\uDC08\u200D\u2B1B|\u2764\uFE0F\u200D(?:\uD83D\uDD25|\uD83E\uDE79)|\uD83D\uDC41\uFE0F|\uD83C\uDFF3\uFE0F|\uD83C\uDDFF(?:\uD83C[\uDDE6\uDDF2\uDDFC])|\uD83C\uDDFE(?:\uD83C[\uDDEA\uDDF9])|\uD83C\uDDFC(?:\uD83C[\uDDEB\uDDF8])|\uD83C\uDDFB(?:\uD83C[\uDDE6\uDDE8\uDDEA\uDDEC\uDDEE\uDDF3\uDDFA])|\uD83C\uDDFA(?:\uD83C[\uDDE6\uDDEC\uDDF2\uDDF3\uDDF8\uDDFE\uDDFF])|\uD83C\uDDF9(?:\uD83C[\uDDE6\uDDE8\uDDE9\uDDEB-\uDDED\uDDEF-\uDDF4\uDDF7\uDDF9\uDDFB\uDDFC\uDDFF])|\uD83C\uDDF8(?:\uD83C[\uDDE6-\uDDEA\uDDEC-\uDDF4\uDDF7-\uDDF9\uDDFB\uDDFD-\uDDFF])|\uD83C\uDDF7(?:\uD83C[\uDDEA\uDDF4\uDDF8\uDDFA\uDDFC])|\uD83C\uDDF5(?:\uD83C[\uDDE6\uDDEA-\uDDED\uDDF0-\uDDF3\uDDF7-\uDDF9\uDDFC\uDDFE])|\uD83C\uDDF3(?:\uD83C[\uDDE6\uDDE8\uDDEA-\uDDEC\uDDEE\uDDF1\uDDF4\uDDF5\uDDF7\uDDFA\uDDFF])|\uD83C\uDDF2(?:\uD83C[\uDDE6\uDDE8-\uDDED\uDDF0-\uDDFF])|\uD83C\uDDF1(?:\uD83C[\uDDE6-\uDDE8\uDDEE\uDDF0\uDDF7-\uDDFB\uDDFE])|\uD83C\uDDF0(?:\uD83C[\uDDEA\uDDEC-\uDDEE\uDDF2\uDDF3\uDDF5\uDDF7\uDDFC\uDDFE\uDDFF])|\uD83C\uDDEF(?:\uD83C[\uDDEA\uDDF2\uDDF4\uDDF5])|\uD83C\uDDEE(?:\uD83C[\uDDE8-\uDDEA\uDDF1-\uDDF4\uDDF6-\uDDF9])|\uD83C\uDDED(?:\uD83C[\uDDF0\uDDF2\uDDF3\uDDF7\uDDF9\uDDFA])|\uD83C\uDDEC(?:\uD83C[\uDDE6\uDDE7\uDDE9-\uDDEE\uDDF1-\uDDF3\uDDF5-\uDDFA\uDDFC\uDDFE])|\uD83C\uDDEB(?:\uD83C[\uDDEE-\uDDF0\uDDF2\uDDF4\uDDF7])|\uD83C\uDDEA(?:\uD83C[\uDDE6\uDDE8\uDDEA\uDDEC\uDDED\uDDF7-\uDDFA])|\uD83C\uDDE9(?:\uD83C[\uDDEA\uDDEC\uDDEF\uDDF0\uDDF2\uDDF4\uDDFF])|\uD83C\uDDE8(?:\uD83C[\uDDE6\uDDE8\uDDE9\uDDEB-\uDDEE\uDDF0-\uDDF5\uDDF7\uDDFA-\uDDFF])|\uD83C\uDDE7(?:\uD83C[\uDDE6\uDDE7\uDDE9-\uDDEF\uDDF1-\uDDF4\uDDF6-\uDDF9\uDDFB\uDDFC\uDDFE\uDDFF])|\uD83C\uDDE6(?:\uD83C[\uDDE8-\uDDEC\uDDEE\uDDF1\uDDF2\uDDF4\uDDF6-\uDDFA\uDDFC\uDDFD\uDDFF])|[#\*0-9]\uFE0F\u20E3|\u2764\uFE0F|(?:\uD83C[\uDFC3\uDFC4\uDFCA]|\uD83D[\uDC6E\uDC70\uDC71\uDC73\uDC77\uDC81\uDC82\uDC86\uDC87\uDE45-\uDE47\uDE4B\uDE4D\uDE4E\uDEA3\uDEB4-\uDEB6]|\uD83E[\uDD26\uDD35\uDD37-\uDD39\uDD3D\uDD3E\uDDB8\uDDB9\uDDCD-\uDDCF\uDDD4\uDDD6-\uDDDD])(?:\uD83C[\uDFFB-\uDFFF])|(?:\u26F9|\uD83C[\uDFCB\uDFCC]|\uD83D\uDD75)(?:\uFE0F|\uD83C[\uDFFB-\uDFFF])|\uD83C\uDFF4|(?:[\u270A\u270B]|\uD83C[\uDF85\uDFC2\uDFC7]|\uD83D[\uDC42\uDC43\uDC46-\uDC50\uDC66\uDC67\uDC6B-\uDC6D\uDC72\uDC74-\uDC76\uDC78\uDC7C\uDC83\uDC85\uDC8F\uDC91\uDCAA\uDD7A\uDD95\uDD96\uDE4C\uDE4F\uDEC0\uDECC]|\uD83E[\uDD0C\uDD0F\uDD18-\uDD1C\uDD1E\uDD1F\uDD30-\uDD34\uDD36\uDD77\uDDB5\uDDB6\uDDBB\uDDD2\uDDD3\uDDD5])(?:\uD83C[\uDFFB-\uDFFF])|(?:[\u261D\u270C\u270D]|\uD83D[\uDD74\uDD90])(?:\uFE0F|\uD83C[\uDFFB-\uDFFF])|[\u270A\u270B]|\uD83C[\uDF85\uDFC2\uDFC7]|\uD83D[\uDC08\uDC15\uDC3B\uDC42\uDC43\uDC46-\uDC50\uDC66\uDC67\uDC6B-\uDC6D\uDC72\uDC74-\uDC76\uDC78\uDC7C\uDC83\uDC85\uDC8F\uDC91\uDCAA\uDD7A\uDD95\uDD96\uDE2E\uDE35\uDE36\uDE4C\uDE4F\uDEC0\uDECC]|\uD83E[\uDD0C\uDD0F\uDD18-\uDD1C\uDD1E\uDD1F\uDD30-\uDD34\uDD36\uDD77\uDDB5\uDDB6\uDDBB\uDDD2\uDDD3\uDDD5]|\uD83C[\uDFC3\uDFC4\uDFCA]|\uD83D[\uDC6E\uDC70\uDC71\uDC73\uDC77\uDC81\uDC82\uDC86\uDC87\uDE45-\uDE47\uDE4B\uDE4D\uDE4E\uDEA3\uDEB4-\uDEB6]|\uD83E[\uDD26\uDD35\uDD37-\uDD39\uDD3D\uDD3E\uDDB8\uDDB9\uDDCD-\uDDCF\uDDD4\uDDD6-\uDDDD]|\uD83D\uDC6F|\uD83E[\uDD3C\uDDDE\uDDDF]|[\u231A\u231B\u23E9-\u23EC\u23F0\u23F3\u25FD\u25FE\u2614\u2615\u2648-\u2653\u267F\u2693\u26A1\u26AA\u26AB\u26BD\u26BE\u26C4\u26C5\u26CE\u26D4\u26EA\u26F2\u26F3\u26F5\u26FA\u26FD\u2705\u2728\u274C\u274E\u2753-\u2755\u2757\u2795-\u2797\u27B0\u27BF\u2B1B\u2B1C\u2B50\u2B55]|\uD83C[\uDC04\uDCCF\uDD8E\uDD91-\uDD9A\uDE01\uDE1A\uDE2F\uDE32-\uDE36\uDE38-\uDE3A\uDE50\uDE51\uDF00-\uDF20\uDF2D-\uDF35\uDF37-\uDF7C\uDF7E-\uDF84\uDF86-\uDF93\uDFA0-\uDFC1\uDFC5\uDFC6\uDFC8\uDFC9\uDFCF-\uDFD3\uDFE0-\uDFF0\uDFF8-\uDFFF]|\uD83D[\uDC00-\uDC07\uDC09-\uDC14\uDC16-\uDC3A\uDC3C-\uDC3E\uDC40\uDC44\uDC45\uDC51-\uDC65\uDC6A\uDC79-\uDC7B\uDC7D-\uDC80\uDC84\uDC88-\uDC8E\uDC90\uDC92-\uDCA9\uDCAB-\uDCFC\uDCFF-\uDD3D\uDD4B-\uDD4E\uDD50-\uDD67\uDDA4\uDDFB-\uDE2D\uDE2F-\uDE34\uDE37-\uDE44\uDE48-\uDE4A\uDE80-\uDEA2\uDEA4-\uDEB3\uDEB7-\uDEBF\uDEC1-\uDEC5\uDED0-\uDED2\uDED5-\uDED7\uDEEB\uDEEC\uDEF4-\uDEFC\uDFE0-\uDFEB]|\uD83E[\uDD0D\uDD0E\uDD10-\uDD17\uDD1D\uDD20-\uDD25\uDD27-\uDD2F\uDD3A\uDD3F-\uDD45\uDD47-\uDD76\uDD78\uDD7A-\uDDB4\uDDB7\uDDBA\uDDBC-\uDDCB\uDDD0\uDDE0-\uDDFF\uDE70-\uDE74\uDE78-\uDE7A\uDE80-\uDE86\uDE90-\uDEA8\uDEB0-\uDEB6\uDEC0-\uDEC2\uDED0-\uDED6]|(?:[\u231A\u231B\u23E9-\u23EC\u23F0\u23F3\u25FD\u25FE\u2614\u2615\u2648-\u2653\u267F\u2693\u26A1\u26AA\u26AB\u26BD\u26BE\u26C4\u26C5\u26CE\u26D4\u26EA\u26F2\u26F3\u26F5\u26FA\u26FD\u2705\u270A\u270B\u2728\u274C\u274E\u2753-\u2755\u2757\u2795-\u2797\u27B0\u27BF\u2B1B\u2B1C\u2B50\u2B55]|\uD83C[\uDC04\uDCCF\uDD8E\uDD91-\uDD9A\uDDE6-\uDDFF\uDE01\uDE1A\uDE2F\uDE32-\uDE36\uDE38-\uDE3A\uDE50\uDE51\uDF00-\uDF20\uDF2D-\uDF35\uDF37-\uDF7C\uDF7E-\uDF93\uDFA0-\uDFCA\uDFCF-\uDFD3\uDFE0-\uDFF0\uDFF4\uDFF8-\uDFFF]|\uD83D[\uDC00-\uDC3E\uDC40\uDC42-\uDCFC\uDCFF-\uDD3D\uDD4B-\uDD4E\uDD50-\uDD67\uDD7A\uDD95\uDD96\uDDA4\uDDFB-\uDE4F\uDE80-\uDEC5\uDECC\uDED0-\uDED2\uDED5-\uDED7\uDEEB\uDEEC\uDEF4-\uDEFC\uDFE0-\uDFEB]|\uD83E[\uDD0C-\uDD3A\uDD3C-\uDD45\uDD47-\uDD78\uDD7A-\uDDCB\uDDCD-\uDDFF\uDE70-\uDE74\uDE78-\uDE7A\uDE80-\uDE86\uDE90-\uDEA8\uDEB0-\uDEB6\uDEC0-\uDEC2\uDED0-\uDED6])|(?:[#\*0-9\xA9\xAE\u203C\u2049\u2122\u2139\u2194-\u2199\u21A9\u21AA\u231A\u231B\u2328\u23CF\u23E9-\u23F3\u23F8-\u23FA\u24C2\u25AA\u25AB\u25B6\u25C0\u25FB-\u25FE\u2600-\u2604\u260E\u2611\u2614\u2615\u2618\u261D\u2620\u2622\u2623\u2626\u262A\u262E\u262F\u2638-\u263A\u2640\u2642\u2648-\u2653\u265F\u2660\u2663\u2665\u2666\u2668\u267B\u267E\u267F\u2692-\u2697\u2699\u269B\u269C\u26A0\u26A1\u26A7\u26AA\u26AB\u26B0\u26B1\u26BD\u26BE\u26C4\u26C5\u26C8\u26CE\u26CF\u26D1\u26D3\u26D4\u26E9\u26EA\u26F0-\u26F5\u26F7-\u26FA\u26FD\u2702\u2705\u2708-\u270D\u270F\u2712\u2714\u2716\u271D\u2721\u2728\u2733\u2734\u2744\u2747\u274C\u274E\u2753-\u2755\u2757\u2763\u2764\u2795-\u2797\u27A1\u27B0\u27BF\u2934\u2935\u2B05-\u2B07\u2B1B\u2B1C\u2B50\u2B55\u3030\u303D\u3297\u3299]|\uD83C[\uDC04\uDCCF\uDD70\uDD71\uDD7E\uDD7F\uDD8E\uDD91-\uDD9A\uDDE6-\uDDFF\uDE01\uDE02\uDE1A\uDE2F\uDE32-\uDE3A\uDE50\uDE51\uDF00-\uDF21\uDF24-\uDF93\uDF96\uDF97\uDF99-\uDF9B\uDF9E-\uDFF0\uDFF3-\uDFF5\uDFF7-\uDFFF]|\uD83D[\uDC00-\uDCFD\uDCFF-\uDD3D\uDD49-\uDD4E\uDD50-\uDD67\uDD6F\uDD70\uDD73-\uDD7A\uDD87\uDD8A-\uDD8D\uDD90\uDD95\uDD96\uDDA4\uDDA5\uDDA8\uDDB1\uDDB2\uDDBC\uDDC2-\uDDC4\uDDD1-\uDDD3\uDDDC-\uDDDE\uDDE1\uDDE3\uDDE8\uDDEF\uDDF3\uDDFA-\uDE4F\uDE80-\uDEC5\uDECB-\uDED2\uDED5-\uDED7\uDEE0-\uDEE5\uDEE9\uDEEB\uDEEC\uDEF0\uDEF3-\uDEFC\uDFE0-\uDFEB]|\uD83E[\uDD0C-\uDD3A\uDD3C-\uDD45\uDD47-\uDD78\uDD7A-\uDDCB\uDDCD-\uDDFF\uDE70-\uDE74\uDE78-\uDE7A\uDE80-\uDE86\uDE90-\uDEA8\uDEB0-\uDEB6\uDEC0-\uDEC2\uDED0-\uDED6])\uFE0F|(?:[\u261D\u26F9\u270A-\u270D]|\uD83C[\uDF85\uDFC2-\uDFC4\uDFC7\uDFCA-\uDFCC]|\uD83D[\uDC42\uDC43\uDC46-\uDC50\uDC66-\uDC78\uDC7C\uDC81-\uDC83\uDC85-\uDC87\uDC8F\uDC91\uDCAA\uDD74\uDD75\uDD7A\uDD90\uDD95\uDD96\uDE45-\uDE47\uDE4B-\uDE4F\uDEA3\uDEB4-\uDEB6\uDEC0\uDECC]|\uD83E[\uDD0C\uDD0F\uDD18-\uDD1F\uDD26\uDD30-\uDD39\uDD3C-\uDD3E\uDD77\uDDB5\uDDB6\uDDB8\uDDB9\uDDBB\uDDCD-\uDDCF\uDDD1-\uDDDD])/g;
-};
-var DD = j(X);
-var m = 10;
-var T = (t = 0) => (u) => `\x1B[${u + t}m`;
-var P = (t = 0) => (u) => `\x1B[${38 + t};5;${u}m`;
-var W = (t = 0) => (u, F, e) => `\x1B[${38 + t};2;${u};${F};${e}m`;
-var r = { modifier: { reset: [0, 0], bold: [1, 22], dim: [2, 22], italic: [3, 23], underline: [4, 24], overline: [53, 55], inverse: [7, 27], hidden: [8, 28], strikethrough: [9, 29] }, color: { black: [30, 39], red: [31, 39], green: [32, 39], yellow: [33, 39], blue: [34, 39], magenta: [35, 39], cyan: [36, 39], white: [37, 39], blackBright: [90, 39], gray: [90, 39], grey: [90, 39], redBright: [91, 39], greenBright: [92, 39], yellowBright: [93, 39], blueBright: [94, 39], magentaBright: [95, 39], cyanBright: [96, 39], whiteBright: [97, 39] }, bgColor: { bgBlack: [40, 49], bgRed: [41, 49], bgGreen: [42, 49], bgYellow: [43, 49], bgBlue: [44, 49], bgMagenta: [45, 49], bgCyan: [46, 49], bgWhite: [47, 49], bgBlackBright: [100, 49], bgGray: [100, 49], bgGrey: [100, 49], bgRedBright: [101, 49], bgGreenBright: [102, 49], bgYellowBright: [103, 49], bgBlueBright: [104, 49], bgMagentaBright: [105, 49], bgCyanBright: [106, 49], bgWhiteBright: [107, 49] } };
-Object.keys(r.modifier);
-var uD = Object.keys(r.color);
-var FD = Object.keys(r.bgColor);
-[...uD];
-var eD = tD();
-var g = new Set(["\x1B", "\x9B"]);
-var sD = 39;
-var b = "\x07";
-var O = "[";
-var CD = "]";
-var I = "m";
-var w = `${CD}8;;`;
-var N = (t) => `${g.values().next().value}${O}${t}${I}`;
-var L = (t) => `${g.values().next().value}${w}${t}${b}`;
-var iD = (t) => t.split(" ").map((u) => A(u));
-var y = (t, u, F) => {
-  const e = [...u];
-  let s = false, C = false, D = A(S(t[t.length - 1]));
-  for (const [i, n] of e.entries()) {
-    const E = A(n);
-    if (D + E <= F ? t[t.length - 1] += n : (t.push(n), D = 0), g.has(n) && (s = true, C = e.slice(i + 1).join("").startsWith(w)), s) {
-      C ? n === b && (s = false, C = false) : n === I && (s = false);
-      continue;
-    }
-    D += E, D === F && i < e.length - 1 && (t.push(""), D = 0);
-  }
-  !D && t[t.length - 1].length > 0 && t.length > 1 && (t[t.length - 2] += t.pop());
-};
-var rD = (t) => {
-  const u = t.split(" ");
-  let F = u.length;
-  for (;F > 0 && !(A(u[F - 1]) > 0); )
-    F--;
-  return F === u.length ? t : u.slice(0, F).join(" ") + u.slice(F).join("");
-};
-var ED = (t, u, F = {}) => {
-  if (F.trim !== false && t.trim() === "")
-    return "";
-  let e = "", s, C;
-  const D = iD(t);
-  let i = [""];
-  for (const [E, h] of t.split(" ").entries()) {
-    F.trim !== false && (i[i.length - 1] = i[i.length - 1].trimStart());
-    let o = A(i[i.length - 1]);
-    if (E !== 0 && (o >= u && (F.wordWrap === false || F.trim === false) && (i.push(""), o = 0), (o > 0 || F.trim === false) && (i[i.length - 1] += " ", o++)), F.hard && D[E] > u) {
-      const B = u - o, p = 1 + Math.floor((D[E] - B - 1) / u);
-      Math.floor((D[E] - 1) / u) < p && i.push(""), y(i, h, u);
-      continue;
-    }
-    if (o + D[E] > u && o > 0 && D[E] > 0) {
-      if (F.wordWrap === false && o < u) {
-        y(i, h, u);
-        continue;
-      }
-      i.push("");
-    }
-    if (o + D[E] > u && F.wordWrap === false) {
-      y(i, h, u);
-      continue;
-    }
-    i[i.length - 1] += h;
-  }
-  F.trim !== false && (i = i.map((E) => rD(E)));
-  const n = [...i.join(`
-`)];
-  for (const [E, h] of n.entries()) {
-    if (e += h, g.has(h)) {
-      const { groups: B } = new RegExp(`(?:\\${O}(?<code>\\d+)m|\\${w}(?<uri>.*)${b})`).exec(n.slice(E).join("")) || { groups: {} };
-      if (B.code !== undefined) {
-        const p = Number.parseFloat(B.code);
-        s = p === sD ? undefined : p;
-      } else
-        B.uri !== undefined && (C = B.uri.length === 0 ? undefined : B.uri);
-    }
-    const o = eD.codes.get(Number(s));
-    n[E + 1] === `
-` ? (C && (e += L("")), s && o && (e += N(o))) : h === `
-` && (s && o && (e += N(s)), C && (e += L(C)));
-  }
-  return e;
-};
-var oD = Object.defineProperty;
-var nD = (t, u, F) => (u in t) ? oD(t, u, { enumerable: true, configurable: true, writable: true, value: F }) : t[u] = F;
-var a = (t, u, F) => (nD(t, typeof u != "symbol" ? u + "" : u, F), F);
-var V = Symbol("clack:cancel");
-var z = new Map([["k", "up"], ["j", "down"], ["h", "left"], ["l", "right"]]);
-var lD = new Set(["up", "down", "left", "right", "space", "enter"]);
-
-class x {
-  constructor({ render: u, input: F = $, output: e = k, ...s }, C = true) {
-    a(this, "input"), a(this, "output"), a(this, "rl"), a(this, "opts"), a(this, "_track", false), a(this, "_render"), a(this, "_cursor", 0), a(this, "state", "initial"), a(this, "value"), a(this, "error", ""), a(this, "subscribers", new Map), a(this, "_prevFrame", ""), this.opts = s, this.onKeypress = this.onKeypress.bind(this), this.close = this.close.bind(this), this.render = this.render.bind(this), this._render = u.bind(this), this._track = C, this.input = F, this.output = e;
-  }
-  prompt() {
-    const u = new U(0);
-    return u._write = (F, e, s) => {
-      this._track && (this.value = this.rl.line.replace(/\t/g, ""), this._cursor = this.rl.cursor, this.emit("value", this.value)), s();
-    }, this.input.pipe(u), this.rl = _.createInterface({ input: this.input, output: u, tabSize: 2, prompt: "", escapeCodeTimeout: 50 }), _.emitKeypressEvents(this.input, this.rl), this.rl.prompt(), this.opts.initialValue !== undefined && this._track && this.rl.write(this.opts.initialValue), this.input.on("keypress", this.onKeypress), v(this.input, true), this.output.on("resize", this.render), this.render(), new Promise((F, e) => {
-      this.once("submit", () => {
-        this.output.write(import_sisteransi.cursor.show), this.output.off("resize", this.render), v(this.input, false), F(this.value);
-      }), this.once("cancel", () => {
-        this.output.write(import_sisteransi.cursor.show), this.output.off("resize", this.render), v(this.input, false), F(V);
-      });
-    });
-  }
-  on(u, F) {
-    const e = this.subscribers.get(u) ?? [];
-    e.push({ cb: F }), this.subscribers.set(u, e);
-  }
-  once(u, F) {
-    const e = this.subscribers.get(u) ?? [];
-    e.push({ cb: F, once: true }), this.subscribers.set(u, e);
-  }
-  emit(u, ...F) {
-    const e = this.subscribers.get(u) ?? [], s = [];
-    for (const C of e)
-      C.cb(...F), C.once && s.push(() => e.splice(e.indexOf(C), 1));
-    for (const C of s)
-      C();
-  }
-  unsubscribe() {
-    this.subscribers.clear();
-  }
-  onKeypress(u, F) {
-    if (this.state === "error" && (this.state = "active"), F?.name && !this._track && z.has(F.name) && this.emit("cursor", z.get(F.name)), F?.name && lD.has(F.name) && this.emit("cursor", F.name), u && (u.toLowerCase() === "y" || u.toLowerCase() === "n") && this.emit("confirm", u.toLowerCase() === "y"), u === "	" && this.opts.placeholder && (this.value || (this.rl.write(this.opts.placeholder), this.emit("value", this.opts.placeholder))), u && this.emit("key", u.toLowerCase()), F?.name === "return") {
-      if (this.opts.validate) {
-        const e = this.opts.validate(this.value);
-        e && (this.error = e, this.state = "error", this.rl.write(this.value));
-      }
-      this.state !== "error" && (this.state = "submit");
-    }
-    u === "" && (this.state = "cancel"), (this.state === "submit" || this.state === "cancel") && this.emit("finalize"), this.render(), (this.state === "submit" || this.state === "cancel") && this.close();
-  }
-  close() {
-    this.input.unpipe(), this.input.removeListener("keypress", this.onKeypress), this.output.write(`
-`), v(this.input, false), this.rl.close(), this.emit(`${this.state}`, this.value), this.unsubscribe();
-  }
-  restoreCursor() {
-    const u = R(this._prevFrame, process.stdout.columns, { hard: true }).split(`
-`).length - 1;
-    this.output.write(import_sisteransi.cursor.move(-999, u * -1));
-  }
-  render() {
-    const u = R(this._render(this) ?? "", process.stdout.columns, { hard: true });
-    if (u !== this._prevFrame) {
-      if (this.state === "initial")
-        this.output.write(import_sisteransi.cursor.hide);
-      else {
-        const F = aD(this._prevFrame, u);
-        if (this.restoreCursor(), F && F?.length === 1) {
-          const e = F[0];
-          this.output.write(import_sisteransi.cursor.move(0, e)), this.output.write(import_sisteransi.erase.lines(1));
-          const s = u.split(`
-`);
-          this.output.write(s[e]), this._prevFrame = u, this.output.write(import_sisteransi.cursor.move(0, s.length - e - 1));
-          return;
-        } else if (F && F?.length > 1) {
-          const e = F[0];
-          this.output.write(import_sisteransi.cursor.move(0, e)), this.output.write(import_sisteransi.erase.down());
-          const s = u.split(`
-`).slice(e);
-          this.output.write(s.join(`
-`)), this._prevFrame = u;
-          return;
-        }
-        this.output.write(import_sisteransi.erase.down());
-      }
-      this.output.write(u), this.state === "initial" && (this.state = "active"), this._prevFrame = u;
-    }
-  }
-}
-var vD = Object.defineProperty;
-var dD = (t, u, F) => (u in t) ? vD(t, u, { enumerable: true, configurable: true, writable: true, value: F }) : t[u] = F;
-var Y = (t, u, F) => (dD(t, typeof u != "symbol" ? u + "" : u, F), F);
-
-class mD extends x {
-  constructor({ mask: u, ...F }) {
-    super(F), Y(this, "valueWithCursor", ""), Y(this, "_mask", "\u2022"), this._mask = u ?? "\u2022", this.on("finalize", () => {
-      this.valueWithCursor = this.masked;
-    }), this.on("value", () => {
-      if (this.cursor >= this.value.length)
-        this.valueWithCursor = `${this.masked}${import_picocolors.default.inverse(import_picocolors.default.hidden("_"))}`;
-      else {
-        const e = this.masked.slice(0, this.cursor), s = this.masked.slice(this.cursor);
-        this.valueWithCursor = `${e}${import_picocolors.default.inverse(s[0])}${s.slice(1)}`;
-      }
-    });
-  }
-  get cursor() {
-    return this._cursor;
-  }
-  get masked() {
-    return this.value.replaceAll(/./g, this._mask);
-  }
-}
-var bD = Object.defineProperty;
-var wD = (t, u, F) => (u in t) ? bD(t, u, { enumerable: true, configurable: true, writable: true, value: F }) : t[u] = F;
-var Z = (t, u, F) => (wD(t, typeof u != "symbol" ? u + "" : u, F), F);
-var yD = class extends x {
-  constructor(u) {
-    super(u, false), Z(this, "options"), Z(this, "cursor", 0), this.options = u.options, this.cursor = this.options.findIndex(({ value: F }) => F === u.initialValue), this.cursor === -1 && (this.cursor = 0), this.changeValue(), this.on("cursor", (F) => {
-      switch (F) {
-        case "left":
-        case "up":
-          this.cursor = this.cursor === 0 ? this.options.length - 1 : this.cursor - 1;
-          break;
-        case "down":
-        case "right":
-          this.cursor = this.cursor === this.options.length - 1 ? 0 : this.cursor + 1;
-          break;
-      }
-      this.changeValue();
-    });
-  }
-  get _value() {
-    return this.options[this.cursor];
-  }
-  changeValue() {
-    this.value = this._value.value;
-  }
-};
-var SD = Object.defineProperty;
-var jD = (t, u, F) => (u in t) ? SD(t, u, { enumerable: true, configurable: true, writable: true, value: F }) : t[u] = F;
-var MD = (t, u, F) => (jD(t, typeof u != "symbol" ? u + "" : u, F), F);
-
-class TD extends x {
-  constructor(u) {
-    super(u), MD(this, "valueWithCursor", ""), this.on("finalize", () => {
-      this.value || (this.value = u.defaultValue), this.valueWithCursor = this.value;
-    }), this.on("value", () => {
-      if (this.cursor >= this.value.length)
-        this.valueWithCursor = `${this.value}${import_picocolors.default.inverse(import_picocolors.default.hidden("_"))}`;
-      else {
-        const F = this.value.slice(0, this.cursor), e = this.value.slice(this.cursor);
-        this.valueWithCursor = `${F}${import_picocolors.default.inverse(e[0])}${e.slice(1)}`;
-      }
-    });
-  }
-  get cursor() {
-    return this._cursor;
-  }
-}
-var PD = globalThis.process.platform.startsWith("win");
-
-// node_modules/@clack/prompts/dist/index.mjs
-var import_picocolors2 = __toESM(require_picocolors(), 1);
-var import_sisteransi2 = __toESM(require_src(), 1);
-import h from "process";
-function q2() {
-  return h.platform !== "win32" ? h.env.TERM !== "linux" : Boolean(h.env.CI) || Boolean(h.env.WT_SESSION) || Boolean(h.env.TERMINUS_SUBLIME) || h.env.ConEmuTask === "{cmd::Cmder}" || h.env.TERM_PROGRAM === "Terminus-Sublime" || h.env.TERM_PROGRAM === "vscode" || h.env.TERM === "xterm-256color" || h.env.TERM === "alacritty" || h.env.TERMINAL_EMULATOR === "JetBrains-JediTerm";
-}
-var _2 = q2();
-var o = (r2, n) => _2 ? r2 : n;
-var H = o("\u25C6", "*");
-var I2 = o("\u25A0", "x");
-var x2 = o("\u25B2", "x");
-var S2 = o("\u25C7", "o");
-var K = o("\u250C", "T");
-var a2 = o("\u2502", "|");
-var d2 = o("\u2514", "\u2014");
-var b2 = o("\u25CF", ">");
-var E = o("\u25CB", " ");
-var C = o("\u25FB", "[\u2022]");
-var w2 = o("\u25FC", "[+]");
-var M2 = o("\u25FB", "[ ]");
-var U2 = o("\u25AA", "\u2022");
-var B = o("\u2500", "-");
-var Z2 = o("\u256E", "+");
-var z2 = o("\u251C", "+");
-var X2 = o("\u256F", "+");
-var J2 = o("\u25CF", "\u2022");
-var Y2 = o("\u25C6", "*");
-var Q2 = o("\u25B2", "!");
-var ee = o("\u25A0", "x");
-var y2 = (r2) => {
-  switch (r2) {
-    case "initial":
-    case "active":
-      return import_picocolors2.default.cyan(H);
-    case "cancel":
-      return import_picocolors2.default.red(I2);
-    case "error":
-      return import_picocolors2.default.yellow(x2);
-    case "submit":
-      return import_picocolors2.default.green(S2);
-  }
-};
-var te = (r2) => new TD({ validate: r2.validate, placeholder: r2.placeholder, defaultValue: r2.defaultValue, initialValue: r2.initialValue, render() {
-  const n = `${import_picocolors2.default.gray(a2)}
-${y2(this.state)}  ${r2.message}
-`, i = r2.placeholder ? import_picocolors2.default.inverse(r2.placeholder[0]) + import_picocolors2.default.dim(r2.placeholder.slice(1)) : import_picocolors2.default.inverse(import_picocolors2.default.hidden("_")), t = this.value ? this.valueWithCursor : i;
-  switch (this.state) {
-    case "error":
-      return `${n.trim()}
-${import_picocolors2.default.yellow(a2)}  ${t}
-${import_picocolors2.default.yellow(d2)}  ${import_picocolors2.default.yellow(this.error)}
-`;
-    case "submit":
-      return `${n}${import_picocolors2.default.gray(a2)}  ${import_picocolors2.default.dim(this.value || r2.placeholder)}`;
-    case "cancel":
-      return `${n}${import_picocolors2.default.gray(a2)}  ${import_picocolors2.default.strikethrough(import_picocolors2.default.dim(this.value ?? ""))}${this.value?.trim() ? `
-` + import_picocolors2.default.gray(a2) : ""}`;
-    default:
-      return `${n}${import_picocolors2.default.cyan(a2)}  ${t}
-${import_picocolors2.default.cyan(d2)}
-`;
-  }
-} }).prompt();
-var re = (r2) => new mD({ validate: r2.validate, mask: r2.mask ?? U2, render() {
-  const n = `${import_picocolors2.default.gray(a2)}
-${y2(this.state)}  ${r2.message}
-`, i = this.valueWithCursor, t = this.masked;
-  switch (this.state) {
-    case "error":
-      return `${n.trim()}
-${import_picocolors2.default.yellow(a2)}  ${t}
-${import_picocolors2.default.yellow(d2)}  ${import_picocolors2.default.yellow(this.error)}
-`;
-    case "submit":
-      return `${n}${import_picocolors2.default.gray(a2)}  ${import_picocolors2.default.dim(t)}`;
-    case "cancel":
-      return `${n}${import_picocolors2.default.gray(a2)}  ${import_picocolors2.default.strikethrough(import_picocolors2.default.dim(t ?? ""))}${t ? `
-` + import_picocolors2.default.gray(a2) : ""}`;
-    default:
-      return `${n}${import_picocolors2.default.cyan(a2)}  ${i}
-${import_picocolors2.default.cyan(d2)}
-`;
-  }
-} }).prompt();
-var ie = (r2) => {
-  const n = (t, s) => {
-    const c2 = t.label ?? String(t.value);
-    return s === "active" ? `${import_picocolors2.default.green(b2)} ${c2} ${t.hint ? import_picocolors2.default.dim(`(${t.hint})`) : ""}` : s === "selected" ? `${import_picocolors2.default.dim(c2)}` : s === "cancelled" ? `${import_picocolors2.default.strikethrough(import_picocolors2.default.dim(c2))}` : `${import_picocolors2.default.dim(E)} ${import_picocolors2.default.dim(c2)}`;
-  };
-  let i = 0;
-  return new yD({ options: r2.options, initialValue: r2.initialValue, render() {
-    const t = `${import_picocolors2.default.gray(a2)}
-${y2(this.state)}  ${r2.message}
-`;
-    switch (this.state) {
-      case "submit":
-        return `${t}${import_picocolors2.default.gray(a2)}  ${n(this.options[this.cursor], "selected")}`;
-      case "cancel":
-        return `${t}${import_picocolors2.default.gray(a2)}  ${n(this.options[this.cursor], "cancelled")}
-${import_picocolors2.default.gray(a2)}`;
-      default: {
-        const s = r2.maxItems === undefined ? 1 / 0 : Math.max(r2.maxItems, 5);
-        this.cursor >= i + s - 3 ? i = Math.max(Math.min(this.cursor - s + 3, this.options.length - s), 0) : this.cursor < i + 2 && (i = Math.max(this.cursor - 2, 0));
-        const c2 = s < this.options.length && i > 0, l2 = s < this.options.length && i + s < this.options.length;
-        return `${t}${import_picocolors2.default.cyan(a2)}  ${this.options.slice(i, i + s).map((u, m2, $2) => m2 === 0 && c2 ? import_picocolors2.default.dim("...") : m2 === $2.length - 1 && l2 ? import_picocolors2.default.dim("...") : n(u, m2 + i === this.cursor ? "active" : "inactive")).join(`
-${import_picocolors2.default.cyan(a2)}  `)}
-${import_picocolors2.default.cyan(d2)}
-`;
-      }
-    }
-  } }).prompt();
-};
-var ue = (r2 = "") => {
-  process.stdout.write(`${import_picocolors2.default.gray(d2)}  ${import_picocolors2.default.red(r2)}
-
-`);
-};
-var oe = (r2 = "") => {
-  process.stdout.write(`${import_picocolors2.default.gray(K)}  ${r2}
-`);
-};
-var $e = (r2 = "") => {
-  process.stdout.write(`${import_picocolors2.default.gray(a2)}
-${import_picocolors2.default.gray(d2)}  ${r2}
-
-`);
-};
-
-// configurator.ts
-var import_picocolors3 = __toESM(require_picocolors(), 1);
-import {parseArgs} from "util";
-async function askMissingData(missingData, override = false) {
-  if (Object.keys(missingData).length === 0) {
-    $e("Configuration set from ops");
-    process.exit(0);
-  }
-  console.log();
-  if (!override) {
-    console.log("Configuration partially set from ops. Need a few more:");
-  }
-  for (const key in missingData) {
-    let inputFromPrompt;
-    const prompt = missingData[key];
-    if (Array.isArray(prompt.type)) {
-      const defaultValueOK = prompt.default && prompt.type.includes(prompt.default);
-      if (prompt.default && !defaultValueOK) {
-        console.log();
-        console.warn(`The default value ${prompt.default} is not in the enum values.`);
-      }
-      const selected = await ie({
-        message: prompt.label || `Pick a value for '${key}'`,
-        options: prompt.type.map((v2) => ({ label: v2, value: v2 })),
-        initialValue: defaultValueOK ? prompt.default : undefined
-      });
-      if (!selected || hD(selected)) {
-        ue("Operation cancelled");
-        process.exit(0);
-      }
-      inputFromPrompt = selected.toString();
-    } else if (prompt.type === "bool") {
-      const selected = await ie({
-        initialValue: prompt.default === "true" || prompt.default === true ? "true" : "false",
-        message: prompt.label || `Pick a true/false for '${key}'`,
-        options: [
-          { label: "true", value: "true" },
-          { label: "false", value: "false" }
-        ]
-      });
-      if (!selected || hD(selected)) {
-        ue("Operation cancelled");
-        process.exit(0);
-      }
-      inputFromPrompt = selected.toString();
-    } else if (prompt.type === "password") {
-      if (prompt.default) {
-        console.log();
-        console.warn("Default password value is not supported. Please enter the password manually.");
-      }
-      const input = await re({
-        message: prompt.label || `Enter password value for ${key}`,
-        validate: (value) => {
-          if (!value) {
-            return "Password cannot be empty";
-          }
-        }
-      });
-      if (hD(input)) {
-        ue("Operation cancelled");
-        process.exit(0);
-      }
-      inputFromPrompt = input;
-    } else {
-      const defaultMsgFragment = prompt.default ? `(default: ${prompt.default})` : "";
-      const message = `Enter value for ${key} ${defaultMsgFragment} (${prompt.type})`;
-      let input = await te({
-        message: prompt.label || message,
-        initialValue: prompt.default?.toString(),
-        validate: (value) => {
-          switch (prompt.type) {
-            case "int":
-              if (!Number.isInteger(Number(value))) {
-                return `Value for ${key} must be an integer number`;
-              }
-              break;
-            case "float":
-              if (!Number(value)) {
-                return `Value for ${key} must be a number`;
-              }
-          }
-          return;
-        }
-      });
-      if (hD(input)) {
-        ue("Operation cancelled");
-        process.exit(0);
-      }
-      inputFromPrompt = input;
-    }
-    console.log(`Setting ${key} to ${inputFromPrompt}`);
-    const { exitCode, stderr } = await $2`${OPS} -config ${key}=${inputFromPrompt}`.nothrow();
-    if (exitCode !== 0) {
-      ue(stderr.toString());
-      return process.exit(1);
-    }
-  }
-}
-function findMissingConfig(config, opsCurrentConfig) {
-  let newConfig = {};
-  let opsConfigKeys = opsCurrentConfig.split("\n").map((line) => line.split("=")[0]);
-  for (const key in config) {
-    if (opsConfigKeys.includes(key)) {
-      continue;
-    }
-    newConfig[key] = config[key];
-  }
-  return newConfig;
-}
-function readPositionalFile(positionals) {
-  if (positionals.length < 2) {
-    console.error("This should not happen");
-    return { success: false, message: "This should not happen" };
-  }
-  if (positionals.length === 2) {
-    return { success: true, help: HelpMsg };
-  }
-  if (positionals.length > 3) {
-    return {
-      success: true,
-      message: AdditionalArgsMsg,
-      jsonFilePath: positionals[2]
-    };
-  }
-  return { success: true, jsonFilePath: positionals[2] };
-}
-async function parsePositionalFile(path) {
-  const file = Bun.file(Bun.pathToFileURL(path));
-  if (!await file.exists()) {
-    return { success: false, message: FileNotFoundJsonMsg + Bun.pathToFileURL(path) };
-  }
-  try {
-    const contents = await file.json();
-    return { success: true, body: contents };
-  } catch (error) {
-    return { success: false, message: NotValidJsonMsg };
-  }
-}
-function isInputConfigValid(body) {
-  if (Object.keys(body).length === 0) {
-    return false;
-  }
-  for (const key in body) {
-    const value = body[key];
-    if (typeof value !== "object") {
-      return false;
-    }
-    if (!value.type) {
-      return false;
-    }
-    if (!["string", "int", "float", "bool", "password"].includes(value.type) && !Array.isArray(value.type)) {
-      return false;
-    }
-  }
-  for (const key in body) {
-    if (!/^[A-Z][A-Z_]|[0-9]*[A-Z]|[0-9]$/.test(key)) {
-      return false;
-    }
-  }
-  return true;
-}
-var OPS = process.env.OPS || "ops";
-var AdditionalArgsMsg = "Additional arguments will be ignored.";
-var NotValidJsonMsg = "Not a valid JSON file";
-var FileNotFoundJsonMsg = "The JSON file was not found. Pathname: ";
-var BadConfigMsg = "Bad configuration file. Check the help message (-h) to see the expected format.";
-var HelpMsg = `
-Usage: config <configjson> [-o | --override]
-
-Description:
-Prompt the user for configuration data defined in the config.json file. 
-The script will ignore the keys from the input config that are already set in ops
-and only prompt the user for the missing data, unless the override flag is set. 
-Then they will be saved in the ops config.
-
-The config.json file must be a JSON file with the following structure:
-      
-  {
-    "KEY": {
-      "type": "string"
-    },
-    "OTHER_KEY": {
-      "label": "An optional custom message",
-      "type": "int"
-    },
-    ...
-  }
-
-The keys must be uppercase words (separated by underscores).
-The value for the "type" key must be either string with the following values:
-- string
-- int
-- float
-- bool
-- password
-- an array of strings with specific values (an enum).
-`;
-async function main() {
-  const options = {
-    showhelp: {
-      type: "boolean"
-    },
-    override: {
-      type: "boolean"
-    }
-  };
-  const { values, positionals } = parseArgs({
-    args: Bun.argv,
-    options,
-    strict: true,
-    allowPositionals: true
-  });
-  if (values.showhelp) {
-    console.log(HelpMsg);
-    return process.exit(0);
-  }
-  const override = values.override || false;
-  const readPosRes = readPositionalFile(positionals);
-  if (!readPosRes.success) {
-    ue(readPosRes.message);
-    return process.exit(1);
-  }
-  if (readPosRes.help) {
-    console.log(readPosRes.help);
-    return process.exit(0);
-  }
-  if (readPosRes.message) {
-    console.warn(readPosRes.message);
-  }
-  const jsonRes = await parsePositionalFile(readPosRes.jsonFilePath);
-  if (!jsonRes.success) {
-    ue(jsonRes.message);
-    return process.exit(1);
-  }
-  const config = jsonRes.body;
-  if (!isInputConfigValid(config)) {
-    ue(BadConfigMsg);
-    return process.exit(1);
-  }
-  const { exitCode, stderr, stdout } = await $2`${OPS} -config -d`.quiet();
-  if (exitCode !== 0) {
-    ue(stderr.toString());
-    return process.exit(1);
-  }
-  const opsCurrentConfig = stdout.toString();
-  let missingData = config;
-  if (!override) {
-    missingData = findMissingConfig(config, opsCurrentConfig);
-  }
-  console.log();
-  oe(import_picocolors3.default.inverse(" ops configurator "));
-  await askMissingData(missingData, override);
-  console.log();
-  $e("You're all set!");
-}
-
-// index.ts
-main().catch(console.error);
diff --git a/util/config/configurator/all-config-parameters.toml b/util/config/configurator/all-config-parameters.toml
new file mode 100644
index 00000000..55a49baa
--- /dev/null
+++ b/util/config/configurator/all-config-parameters.toml
@@ -0,0 +1,248 @@
+# Content: for all the components that Openserverless needs in its configuration,
+# we create a suitable configuration
+# This is a TOML document
+# To obtain some of these arguments, use the command
+# ops -config -d | awk -F= '/=/{print $1}'
+
+
+
+[components.aws]
+
+# taskfile format:
+# VAR={ label="<MSG>", initialValue="<VAL>", userInputValue="<DEFAULT_VALUE>"}
+
+
+#
+# AWS configuration values
+#
+
+# Mandatory values
+AWS_ACCESS_KEY_ID= {label="AWS Access Id", initialValue="AAA", userInputValue="BBB"}
+AWS_SECRET_ACCESS_KEY= {label="AWS Secret Key", initialValue="", userInputValue="", type="password"}
+# Non-mandatory values
+AWS_DEFAULT_REGION= {label="AWS Region to use", initialValue="", userInputValue="us-east-1"}
+
+# Value defined in the aws task
+# Mandatory values
+# None
+
+# Non-mandatory values
+AWS_VM_IMAGE_ID={ label="AWS Image to use for VMs", initialValue="{{.__image}}", userInputValue="ami-052efd3df9dad4825"}
+AWS_VM_IMAGE_USER={ label="AWS Default user for image to use for VMs", initialValue="{{.__vmuser}}", userInputValue="ubuntu"}
+AWS_VM_INSTANCE_TYPE={ label="AWS Instance type to use for VMs", hint="The suggested instance type has 8GB and 2vcpus.\nTo get a list of valid values, use:\naws ec2 describe-instance-types --query 'InstanceTypes[].InstanceType' --output table",  initialValue="{{.__vm}}", userInputValue="t3a.large"}
+AWS_VM_DISK_SIZE={ label="AWS Disk Size to use for VMs", initialValue="{{.__disk}}", userInputValue="100"}
+
+
+#
+# EKS configuration values
+#
+
+[components.eks]
+
+# Mandatory values
+# None
+
+# Non-mandatory values
+EKS_NAME={ label="EKS Name for Cluster and Node Group", initialValue="{{.__name}}", userInputValue="openserverless"}
+EKS_REGION={ label="EKS location", initialValue="{{.__region}}", userInputValue="us-east-2"}
+EKS_COUNT={ label="EKS number of worker nodes", initialValue="{{.__count}}", userInputValue="3"}
+EKS_VM={ label="EKS virtual machine type", initialValue="{{.__vm}}", userInputValue="m5.xlarge"}
+EKS_DISK={ label="EKS disk size in gigabyte", initialValue="{{.__disk}}", userInputValue="50"}
+EKS_KUBERNETES_VERSION={ label="EKS Kubernetes Version", initialValue="{{.__kubever}}", userInputValue="1.25"}
+
+
+#
+# GCLOUD configuration values
+#
+
+[components.gcloud]
+
+
+# Mandatory values
+GCLOUD_PROJECT={ label="GCloud Project Id", initialValue="{{.__project}}", userInputValue=""}
+
+# Non-mandatory values
+GCLOUD_REGION={ label="GCloud Zone", initialValue="{{.__region}}", userInputValue="us-east1"}
+GCLOUD_VM={ label="GCloud virtual machine type", initialValue="{{.__vm}}", userInputValue="n2-standard-4"}
+GCLOUD_DISK={ label="GCloud disk size in gigabyte", initialValue="{{.__disk}}", userInputValue="200"}
+GCLOUD_SSHKEY={ label="GCloud public SSH key", initialValue="{{.__key}}", userInputValue="~/.ssh/id_rsa.pub"}
+GCLOUD_IMAGE={ label="GCloud VM image", initialValue="{{.__image}}", userInputValue="ubuntu-minimal-2204-lts"}
+
+#
+# GKE configuration values
+#
+
+[components.gke]
+
+# Mandatory values
+GKE_PROJECT={ label="GCloud Project Id", initialValue="{{.__project}}", userInputValue=""}
+
+# Non-mandatory values
+GKE_NAME={ label="GCloud Cluster Name", initialValue="{{.__name}}", userInputValue="nuvolaris"}
+GKE_REGION={ label="GCloud Cluster Zone", initialValue="{{.__region}}", userInputValue="us-east1"}
+GKE_COUNT={ label="GCloud number of worker nodes", initialValue="{{.__count}}", userInputValue="3"}
+GKE_VM={ label="GKE virtual machine type", initialValue="{{.__vm}}", userInputValue="e2-standard-2"}
+GKE_DISK={ label="GKE disk size in gigabyte", initialValue="{{.__disk}}", userInputValue="50"}
+
+
+#
+# AZCLOUD configuration values
+#
+
+[components.azcloud]
+
+# Mandatory values
+AZCLOUD_PROJECT={ label="Azure Resource Group", initialValue="{{.__project}}", userInputValue=""}
+
+# Non-mandatory values
+AZCLOUD_REGION={ label="Azure Zone", initialValue="{{.__region}}", userInputValue="eastus"}
+AZCLOUD_VM={ label="Azure virtual machine type", initialValue="{{.__vm}}", userInputValue="Standard_B4s_v2"}
+AZCLOUD_DISK={ label="Azure vm disk size in gigabyte", initialValue="{{.__disk}}", userInputValue="100"}
+AZCLOUD_SSHKEY={ label="Azure Cloud public SSH key", initialValue="{{.__key}}", userInputValue="~/.ssh/id_rsa.pub"}
+AZCLOUD_IMAGE={ label="Azure Cloud VM image", initialValue="{{.__image}}", userInputValue="Ubuntu2204"}
+
+
+#
+# AKS configuration values
+#
+
+[components.aks]
+
+# Mandatory values
+AKS_PROJECT={ label="AKS Name for Resource Group", initialValue="{{.__project}}", userInputValue="openserverless"}
+
+# Non-mandatory values
+AKS_NAME={ label="AKS for Cluster", initialValue="{{.__name}}", userInputValue="openserverless"}
+AKS_COUNT={ label="AKS number of worker nodes", initialValue="{{.__count}}", userInputValue="3"}
+AKS_REGION={ label="AKS location", initialValue="{{.__region}}", userInputValue="eastus"}
+AKS_VM={ label="AKS virtual machine type", initialValue="{{.__vm}}", userInputValue="Standard_B4ms"}
+AKS_DISK={ label="AKS disk size in gigabyte", initialValue="{{.__disk}}", userInputValue="50"}
+AKS_SSHKEY={ label="AKS public SSH key in AWS", initialValue="{{.__key}}", userInputValue="~/.ssh/id_rsa.pub"}
+
+
+
+[components.redis]
+REDIS_URL= {label="Redis URL", initialValue="", userInputValue=""}
+REDIS_SERVICE= {label="Redis Service", initialValue="", userInputValue=""}
+REDIS_PREFIX= {label="Redis Prefix", initialValue="", userInputValue=""}
+REDIS_PASSWORD= {label="Redis password", initialValue="", userInputValue="", type="password"}
+# SECRET_REDIS_DEFAULT
+# REDIS_PORT
+# OPSTUTORIAL_SECRET_REDIS
+# REDIS_PROVIDER
+# REDIS_ALT_URL
+# SECRET_REDIS_NUVOLARIS
+# OPERATOR_COMPONENT_REDIS
+# DEVEL_SECRET_REDIS
+
+[components.postgres]
+POSTGRES_DATABASE={label="Database", initialValue="", userInputValue=""}
+POSTGRES_PORT={label="Port", initialValue="", userInputValue=""}
+POSTGRES_USERNAME={label="Username", initialValue="", userInputValue=""}
+POSTGRES_PASSWORD={label="Password", initialValue="", userInputValue="", type="password"}
+#SECRET_POSTGRES_REPLICA=""
+#OPSTUTORIAL_SECRET_POSTGRES=""
+
+
+
+#OPERATOR_CONFIG_ALERTGMAIL
+#OPENWHISK_TIME_LIMIT_MAX
+#POSTGRES_PORT
+#OPERATOR_COMPONENT_CRON
+#REDIS_PORT
+#S3_BUCKET_STATIC
+#S3_PORT
+#OPERATOR_COMPONENT_INVOKER
+#OPERATOR_COMPONENT_REDIS
+#OPERATOR_CONFIG_TLSEMAIL
+#OPENWHISK_INVOKER_CONTAINER_POOL_MEMORY
+#DEVEL_SECRET_MILVUS
+#OPSTUTORIAL_SECRET_MONGODB
+#IMAGES_STREAMER
+#OPSTUTORIAL_SECRET_MILVUS
+#IMAGES_INVOKER
+#SECRET_NUVOLARIS_METADATA
+#OPERATOR_COMPONENT_ETCD
+#SECRET_MILVUS_ROOT
+#S3_ACCESS_KEY
+#OPSTUTORIAL_SECRET_COUCHDB
+#AUTH
+#SECRET_MONGODB_ADMIN
+#MILVUS_PORT
+#MILVUS_TOKEN
+#SECRET_REDIS_DEFAULT
+#OPERATOR_COMPONENT_KAFKA
+#OPERATOR_CONFIG_HOSTPROTOCOL
+#DEVEL_SECRET_REDIS
+#IMAGES_OPERATOR
+#SECRET_OPENWHISK_SYSTEM
+#MILVUS_HOST
+#S3_API_URL
+#OPERATOR_COMPONENT_TLS
+#DEVEL_SECRET_OPENWHISK
+#OPSDEV_APIHOST
+#OPERATOR_CONFIG_TOLERATIONS
+#MINIO_CONFIG_INGRESS_S3
+#SECRET_COUCHDB_INVOKER
+#OPERATOR_COMPONENT_ZOOKEEPER
+#SECRET_MINIO_NUVOLARIS
+#OPERATOR_COMPONENT_AM
+#CONFIGURED
+#DEVEL_SECRET_MINIO
+#HELLO
+#OPSTUTORIAL_SECRET_MINIO
+#STATUS_LAST
+#OPERATOR_COMPONENT_MILVUS
+#REDIS_PROVIDER
+#SECRET_MONGODB_NUVOLARIS
+#OPERATOR_COMPONENT_STATIC
+#SECRET_ETCD_ROOT
+#OPERATOR_CONFIG_APIHOST
+#OPS_COREUTILS
+#SECRET_COUCHDB_ADMIN
+#USER_V1_API_URL
+#OPSDEV_USERNAME
+#SECRET_POSTGRES_NUVOLARIS
+#S3_PROVIDER
+#ANOTHER
+#OPERATOR_CONFIG_AFFINITY
+#OPERATOR_COMPONENT_POSTGRES
+#S3_HOST
+#SECRET_MILVUS_S3
+#REDIS_URL
+#S3_SECRET_KEY
+#DEVEL_SECRET_POSTGRES
+#SECRET_MILVUS_NUVOLARIS
+#OPERATOR_COMPONENT_MINIO
+#OPERATOR_CONFIG_SLIM
+#POSTGRES_CONFIG_REPLICAS
+#REDIS_PREFIX
+#ETCD_CONFIG_REPLICAS
+#OPERATOR_CONFIG_ALERTSLACK
+#OPSTUTORIAL_SECRET_REDIS
+#STATIC_CONTENT_URL
+#IMAGES_CONTROLLER
+#USER_REST_API_URL
+#DEVEL_SECRET_MONGODB
+#MONGODB_URL
+#HELLO3
+#SECRET_POSTGRES_ADMIN
+#OPERATOR_COMPONENT_MONGODB
+#DEVEL_SECRET_COUCHDB
+#POSTGRES_HOST
+#OPERATOR_COMPONENT_PROMETHEUS
+#REDIS_ALT_URL
+#REDIS_PASSWORD
+#OPERATOR_COMPONENT_REGISTRY
+#OPSTUTORIAL_SECRET_OPENWHISK
+#REGISTRY_CONFIG_SECRET_PUSH_PULL
+#OPSDEV_HOST
+#SECRET_MINIO_ADMIN
+#SECRET_OPENWHISK_NUVOLARIS
+#SECRET_REDIS_NUVOLARIS
+#SECRET_COUCHDB_CONTROLLER
+#OPERATOR_COMPONENT_QUOTA
+#REDIS_SERVICE
+#S3_BUCKET_DATA
+#IMAGES_SYSTEMAPI
+#MILVUS_DB_NAME
diff --git a/util/config/configurator/bun.lockb b/util/config/configurator/bun.lockb
old mode 100644
new mode 100755
index 0cae1e1e..8b5b61e8
Binary files a/util/config/configurator/bun.lockb and b/util/config/configurator/bun.lockb differ
diff --git a/util/config/configurator/config-accessor.ts b/util/config/configurator/config-accessor.ts
new file mode 100644
index 00000000..35c35504
--- /dev/null
+++ b/util/config/configurator/config-accessor.ts
@@ -0,0 +1,141 @@
+import {ComponentConfig, ConfigParameter} from "./types-core.ts";
+import {OpsConfigFile} from "./types-config-file.ts";
+
+/**
+ * Provides clean API for accessing and modifying configuration data.
+ * 
+ * Acts as a facade over OpsConfigFile, simplifying access to nested
+ * configuration data and providing convenience methods for common operations.
+ */
+export class ConfigAccessor {
+  private _config: OpsConfigFile;
+
+  /**
+   * Creates a new ConfigAccessor instance.
+   * 
+   * @param config - The OpsConfigFile to provide access to
+   */
+  constructor(config: OpsConfigFile) {
+    this._config = config;
+  }
+
+  /**
+   * Returns all component names in the configuration.
+   * 
+   * @returns Array of component names
+   */
+  getComponentNames(): string[] {
+    return this._config.getComponentNames();
+  }
+
+  /**
+   * Retrieves a component by name.
+   * 
+   * @param name - The component name to look up
+   * @returns The ComponentConfig if found, undefined otherwise
+   */
+  getComponent(name: string): ComponentConfig | undefined {
+    return this._config.getComponent(name);
+  }
+
+  /**
+   * Retrieves a parameter from a specific component.
+   * 
+   * @param componentName - Name of the component containing the parameter
+   * @param key - The parameter key to look up
+   * @returns The ConfigParameter if found, undefined otherwise
+   */
+  getParameter(componentName: string, key: string): ConfigParameter | undefined {
+    const component = this._config.getComponent(componentName);
+    if (!component) {
+      return undefined;
+    }
+    return component.getParameter(key);
+  }
+
+  /**
+   * Retrieves the effective value of a parameter.
+   * 
+   * Returns userInputValue if set, otherwise initialValue.
+   * This is the preferred method for getting parameter values.
+   * 
+   * @param componentName - Name of the component containing the parameter
+   * @param key - The parameter key to look up
+   * @returns The effective value if found, undefined otherwise
+   */
+  getParameterValue(componentName: string, key: string): string | undefined {
+    const parameter = this.getParameter(componentName, key);
+    if (!parameter) {
+      return undefined;
+    }
+    return parameter.getValue();
+  }
+
+  /**
+   * Sets the user input value for a parameter.
+   * 
+   * This modifies the configuration in memory. Changes can be persisted
+   * by saving the configuration to a file.
+   * 
+   * @param componentName - Name of the component containing the parameter
+   * @param key - The parameter key to modify
+   * @param value - The new user input value
+   * @returns true if parameter was found and updated, false otherwise
+   */
+  setParameterValue(componentName: string, key: string, value: string): boolean {
+    const parameter = this.getParameter(componentName, key);
+    if (!parameter) {
+      return false;
+    }
+    parameter.setUserInputValue(value);
+    return true;
+  }
+
+  /**
+   * Checks if a component exists in the configuration.
+   * 
+   * @param name - The component name to check
+   * @returns true if component exists, false otherwise
+   */
+  hasComponent(name: string): boolean {
+    return this._config.hasComponent(name);
+  }
+
+  /**
+   * Checks if a parameter exists in a specific component.
+   * 
+   * @param componentName - Name of the component to check
+   * @param key - The parameter key to check
+   * @returns true if parameter exists, false otherwise
+   */
+  hasParameter(componentName: string, key: string): boolean {
+    const component = this._config.getComponent(componentName);
+    if (!component) {
+      return false;
+    }
+    return component.hasParameter(key);
+  }
+
+  /**
+   * Returns all components in the configuration.
+   * 
+   * @returns Array of all ComponentConfig instances
+   */
+  getAllComponents(): ComponentConfig[] {
+    return this._config.getAllComponents();
+  }
+
+  /**
+   * Returns the number of parameters in a specific component.
+   * 
+   * @param componentName - Name of the component to count parameters for
+   * @returns Number of parameters, or 0 if component not found
+   */
+  getParameterCount(componentName: string): number {
+    const component = this._config.getComponent(componentName);
+    if (!component) {
+      return 0;
+    }
+    return component.getParameterCount();
+  }
+}
diff --git a/util/config/configurator/config-display.ts b/util/config/configurator/config-display.ts
new file mode 100644
index 00000000..5c9be61f
--- /dev/null
+++ b/util/config/configurator/config-display.ts
@@ -0,0 +1,200 @@
+import { note } from '@clack/prompts';
+import { styleText } from 'node:util';
+import {EditableConfigParameter} from "./types-core.ts";
+
+export class ConfigDisplay {
+  static displayParameterTable(
+    componentName: string,
+    parameters: EditableConfigParameter[]
+  ): void {
+    if (parameters.length === 0) {
+      note('No parameters configured for this component.', componentName);
+      return;
+    }
+
+    const mask = (param: EditableConfigParameter, v: string) =>
+      param.getType() === 'password' ? (v ? '***' : '<EMPTY>') : (v || '<EMPTY>');
+
+    const columnWidths = this.calculateColumnWidths(parameters);
+
+    const header = styleText('dim',
+      'KEY'.padEnd(columnWidths.key) + '  ' +
+      'Label'.padEnd(columnWidths.label) + '  ' +
+      'Initial Value'.padEnd(columnWidths.initial) + '  ' +
+      'Previous Value'.padEnd(columnWidths.previous) + '  ' +
+      'Current Value'
+    );
+
+    const separator = styleText('dim', '─'.repeat(this.getTotalWidth(columnWidths)));
+
+    const rows = parameters.map(param =>
+      param.getKey().padEnd(columnWidths.key) + '  ' +
+      (param.getLabel() || '<EMPTY>').padEnd(columnWidths.label) + '  ' +
+      mask(param, param.getInitialValue()).padEnd(columnWidths.initial) + '  ' +
+      mask(param, param.getPreviousUserInputValue()).padEnd(columnWidths.previous) + '  ' +
+      mask(param, param.getValue())
+    );
+
+    note([header, separator, ...rows].join('\n'), componentName);
+  }
+
+  /**
+   * Displays a summary of all components and their parameter counts.
+   * 
+   * @param components - Array of component data
+   */
+  static displayComponentSummary(
+    components: Array<{ name: string; parameterCount: number; modifiedCount: number }>
+  ): void {
+    console.log(`\n${'='.repeat(60)}`);
+    console.log('Configuration Summary');
+    console.log('='.repeat(60));
+
+    const header = this.formatSimpleRow('Component', 'Parameters', 'Modified');
+    console.log(header);
+    console.log('-'.repeat(60));
+
+    for (const comp of components) {
+      const row = this.formatSimpleRow(
+        comp.name,
+        comp.parameterCount.toString(),
+        comp.modifiedCount.toString()
+      );
+      console.log(row);
+    }
+
+    console.log('='.repeat(60) + '\n');
+  }
+
+  /**
+   * Displays a single parameter's details.
+   * 
+   * @param parameter - The parameter to display
+   */
+  static displayParameterDetail(parameter: EditableConfigParameter): void {
+    console.log(`\nParameter: ${parameter.getKey()}`);
+    console.log('-'.repeat(40));
+    console.log(`Label:              ${parameter.getLabel() || '<EMPTY>'}`);
+    console.log(`Initial Value:      ${parameter.getInitialValue() || '<EMPTY>'}`);
+    console.log(`Previous Value:     ${parameter.getPreviousUserInputValue() || '<EMPTY>'}`);
+    console.log(`Current Value:      ${parameter.getValue() || '<EMPTY>'}`);
+    console.log(`Has User Input:     ${parameter.hasUserInput()}`);
+    console.log(`Is Mandatory:       ${parameter.isMandatory()}`);
+    console.log('-'.repeat(40) + '\n');
+  }
+
+  /**
+   * Calculates optimal column widths for the parameter table.
+   * 
+   * @param parameters - Parameters to analyze
+   * @returns Object with column widths
+   */
+  private static calculateColumnWidths(
+    parameters: EditableConfigParameter[]
+  ): { key: number; label: number; initial: number; previous: number; current: number } {
+    const widths = {
+      key:      'KEY'.length,
+      label:    'Label'.length,
+      initial:  'Initial Value'.length,
+      previous: 'Previous Value'.length,
+      current:  'Current Value'.length,
+    };
+
+    for (const param of parameters) {
+      const mask = (v: string) => param.getType() === 'password' ? (v ? '***' : '<EMPTY>') : (v || '<EMPTY>');
+      widths.key      = Math.max(widths.key,      param.getKey().length);
+      widths.label    = Math.max(widths.label,    (param.getLabel() || '<EMPTY>').length);
+      widths.initial  = Math.max(widths.initial,  mask(param.getInitialValue()).length);
+      widths.previous = Math.max(widths.previous, mask(param.getPreviousUserInputValue()).length);
+      widths.current  = Math.max(widths.current,  mask(param.getValue()).length);
+    }
+
+    return widths;
+  }
+
+  /**
+   * Formats a single row of the parameter table.
+   * 
+   * @param key - Parameter key
+   * @param label - Parameter label
+   * @param initial - Initial value
+   * @param previous - Previous user input value
+   * @param current - Current value
+   * @param widths - Column widths
+   * @returns Formatted row string
+   */
+  private static formatRow(
+    key: string,
+    label: string,
+    initial: string,
+    previous: string,
+    current: string,
+    widths: { key: number; label: number; initial: number; previous: number; current: number }
+  ): string {
+    const padKey = key.padEnd(widths.key).substring(0, widths.key);
+    const padLabel = label.padEnd(widths.label).substring(0, widths.label);
+    const padInitial = initial.padEnd(widths.initial).substring(0, widths.initial);
+    const padPrevious = previous.padEnd(widths.previous).substring(0, widths.previous);
+    const padCurrent = current.padEnd(widths.current).substring(0, widths.current);
+
+    return `${padKey} | ${padLabel} | ${padInitial} | ${padPrevious} | ${padCurrent}`;
+  }
+
+  /**
+   * Formats a simple two-column row.
+   * 
+   * @param col1 - First column value
+   * @param col2 - Second column value
+   * @param col3 - Third column value
+   * @returns Formatted row string
+   */
+  private static formatSimpleRow(col1: string, col2: string, col3: string): string {
+    return `${col1.padEnd(20)} | ${col2.padEnd(15)} | ${col3.padEnd(15)}`;
+  }
+
+  /**
+   * Calculates total table width from column widths.
+   * 
+   * @param widths - Column widths
+   * @returns Total width
+   */
+  private static getTotalWidth(
+    widths: { key: number; label: number; initial: number; previous: number; current: number }
+  ): number {
+    return widths.key + widths.label + widths.initial + widths.previous + widths.current + 8;
+  }
+
+  /**
+   * Displays modifications summary.
+   * 
+   * @param modifications - Array of modified parameters by component
+   */
+  static displayModifications(
+    modifications: Array<{ component: string; parameters: EditableConfigParameter[] }>
+  ): void {
+    if (modifications.length === 0) {
+      console.log('No modifications detected.\n');
+      return;
+    }
+
+    console.log(`\n${'='.repeat(80)}`);
+    console.log('Modified Parameters');
+    console.log('='.repeat(80));
+
+    for (const mod of modifications) {
+      console.log(`\n[${mod.component}]`);
+      for (const param of mod.parameters) {
+        console.log(`  ${param.getKey()}: ${param.getInitialValue() || '<EMPTY>'} → ${param.getValue() || '<EMPTY>'}`);
+      }
+    }
+
+    console.log('\n' + '='.repeat(80) + '\n');
+  }
+
+  /**
+   * Clears the terminal screen.
+   */
+  static clearScreen(): void {
+    console.clear();
+  }
+}
diff --git a/util/config/configurator/config-parser.ts b/util/config/configurator/config-parser.ts
new file mode 100644
index 00000000..e8456445
--- /dev/null
+++ b/util/config/configurator/config-parser.ts
@@ -0,0 +1,179 @@
+import type { Result } from './types';
+import {ComponentConfig, ConfigParameter} from "./types-core.ts";
+import {OpsConfigFile} from "./types-config-file.ts";
+
+/**
+ * Parses TOML configuration files and creates OpsConfigFile instances.
+ * 
+ * Responsible for reading configuration from disk, parsing TOML format,
+ * and constructing the object-oriented configuration structure.
+ */
+export class ConfigParser {
+  private _filePath: string;
+
+  /**
+   * Creates a new ConfigParser instance.
+   * 
+   * @param filePath - Path to the TOML configuration file
+   */
+  constructor(filePath: string) {
+    this._filePath = filePath;
+  }
+
+  /**
+   * Loads and parses the TOML configuration file.
+   * 
+   * Reads the file from disk, parses TOML content, and constructs
+   * an OpsConfigFile object with all components and parameters.
+   * 
+   * @returns Result containing OpsConfigFile on success, or error message on failure
+   */
+  async load(): Promise<Result<OpsConfigFile, string>> {
+    try {
+      const file = Bun.file(Bun.pathToFileURL(this._filePath));
+
+      if (!(await file.exists())) {
+        return {
+          success: false,
+          error: `Configuration file not found: ${this._filePath}`,
+        };
+      }
+
+      const content = await file.text();
+      const rawData = await this.parseToml(content);
+
+      if (!rawData) {
+        return {
+          success: false,
+          error: `Failed to parse TOML file: ${this._filePath}`,
+        };
+      }
+
+      const config = this.extractComponents(rawData);
+
+      return {
+        success: true,
+        data: config,
+      };
+    } catch (error) {
+      return {
+        success: false,
+        error: `Error loading configuration: ${error}`,
+      };
+    }
+  }
+
+  /**
+   * Parses TOML content using Bun's import assertion.
+   * 
+   * @param content - Raw TOML content (unused, file imported directly)
+   * @returns Parsed TOML data as unknown object, or null on failure
+   */
+  private async parseToml(content: string): Promise<unknown> {
+    try {
+      const data = await import(this._filePath, {
+        assert: { type: 'toml' },
+      });
+      return data;
+    } catch (error) {
+      return null;
+    }
+  }
+
+  /**
+   * Extracts all components from parsed TOML data.
+   * 
+   * Iterates through the 'components' section in TOML and creates
+   * ComponentConfig instances for each section found.
+   * 
+   * @param rawData - Parsed TOML data
+   * @returns OpsConfigFile containing all extracted components
+   */
+  extractComponents(rawData: unknown): OpsConfigFile {
+    const config = new OpsConfigFile();
+
+    if (typeof rawData !== 'object' || rawData === null) {
+      return config;
+    }
+
+    const data = rawData as Record<string, unknown>;
+
+    if (!data.components || typeof data.components !== 'object') {
+      return config;
+    }
+
+    const components = data.components as Record<string, unknown>;
+
+    for (const [componentName, componentData] of Object.entries(components)) {
+      const component = this.parseComponentSection(componentName, componentData);
+      if (component.getParameterCount() > 0) {
+        config.addComponent(component);
+      }
+    }
+
+    return config;
+  }
+
+  /**
+   * Parses a single component section from TOML.
+   * 
+   * Processes all key-value pairs in a component section, creating
+   * ConfigParameter instances for each parameter found.
+   * Skips keys that start with '#' (commented-out parameters).
+   * 
+   * @param sectionName - Name of the component section (e.g., 'redis')
+   * @param sectionData - Key-value pairs in this section
+   * @returns ComponentConfig with all parsed parameters
+   */
+  parseComponentSection(sectionName: string, sectionData: unknown): ComponentConfig {
+    const component = new ComponentConfig(sectionName);
+
+    if (typeof sectionData !== 'object' || sectionData === null) {
+      return component;
+    }
+
+    const data = sectionData as Record<string, unknown>;
+
+    for (const [key, value] of Object.entries(data)) {
+      if (key.startsWith('#')) {
+        continue;
+      }
+
+      const parameter = this.parseParameter(key, value);
+      component.addParameter(parameter);
+    }
+
+    return component;
+  }
+
+  /**
+   * Parses a single parameter value from TOML.
+   * 
+   * Handles two formats:
+   * - Simple string: `KEY=""` - uses value as initialValue
+   * - Object with metadata: `KEY={label="", initialValue="", userInputValue=""}`
+   * 
+   * @param key - The parameter key
+   * @param value - The parameter value (string or object)
+   * @returns ConfigParameter instance
+   */
+  parseParameter(key: string, value: unknown): ConfigParameter {
+    if (typeof value === 'string') {
+      return new ConfigParameter(key, '', value, '', false);
+    }
+
+    if (typeof value === 'object' && value !== null) {
+      const data = value as Record<string, unknown>;
+      const label = typeof data.label === 'string' ? data.label : '';
+      const initialValue = typeof data.initialValue === 'string' ? data.initialValue : '';
+      const userInputValue = typeof data.userInputValue === 'string' ? data.userInputValue : '';
+      const isMandatory = typeof data.isMandatory === 'boolean' ? data.isMandatory : false;
+      const type = data.type === 'password' ? 'password' : 'string';
+      const hint = typeof data.hint === 'string' ? data.hint : undefined;
+
+      return new ConfigParameter(key, label, initialValue, userInputValue, isMandatory, type, hint);
+    }
+
+    return new ConfigParameter(key, '', '', '', false);
+  }
+}
diff --git a/util/config/configurator/config-validator.ts b/util/config/configurator/config-validator.ts
new file mode 100644
index 00000000..fe7e59eb
--- /dev/null
+++ b/util/config/configurator/config-validator.ts
@@ -0,0 +1,142 @@
+import type { ValidationResult } from './types';
+import {ComponentConfig, ConfigParameter} from "./types-core.ts";
+import {OpsConfigFile} from "./types-config-file.ts";
+
+/**
+ * List of all managed components in OpenServerless.
+ * Used to validate that configuration only contains known components.
+ */
+const MANAGED_COMPONENTS = [
+  'redis',
+  'postgres',
+  'ferretdb',
+  'cron',
+  'prometheus',
+  'slack',
+  'mail',
+  'affinity',
+  'tolerations',
+  'quota',
+  'alert manager',
+  'aws',
+  'eks',
+  'gcloud',
+  'gke',
+  'azcloud',
+  'alert',
+  'aks',
+];
+
+/**
+ * Validates configuration against business rules.
+ * 
+ * Checks that:
+ * - All component names are from the managed components list
+ * - All parameter keys follow naming conventions (uppercase, underscores)
+ */
+export class ConfigValidator {
+  private _config: OpsConfigFile;
+  private _managedComponents: string[];
+  private _errors: string[];
+
+  /**
+   * Creates a new ConfigValidator instance.
+   * 
+   * @param config - The OpsConfigFile to validate
+   * @param managedComponents - List of valid component names (default: MANAGED_COMPONENTS)
+   */
+  constructor(config: OpsConfigFile, managedComponents: string[] = MANAGED_COMPONENTS) {
+    this._config = config;
+    this._managedComponents = managedComponents;
+    this._errors = [];
+  }
+
+  /**
+   * Runs all validations and returns the result.
+   * 
+   * Validates:
+   * 1. Component names against managed components list
+   * 2. Parameter key naming conventions
+   * 
+   * @returns ValidationResult with success status and any errors found
+   */
+  validate(): ValidationResult {
+    this._errors = [];
+
+    this.validateComponentNames();
+    this.validateAllParameters();
+
+    return {
+      success: this._errors.length === 0,
+      errors: this._errors,
+    };
+  }
+
+  /**
+   * Validates that all component names are in the managed components list.
+   * Adds errors for each unknown component found.
+   */
+  private validateComponentNames(): void {
+    const componentNames = this._config.getComponentNames();
+
+    for (const name of componentNames) {
+      if (!this._managedComponents.includes(name)) {
+        this._errors.push(`Unknown component: '${name}'. Valid components: ${this._managedComponents.join(', ')}`);
+      }
+    }
+  }
+
+  /**
+   * Validates parameters for all components.
+   */
+  private validateAllParameters(): void {
+    const components = this._config.getAllComponents();
+
+    for (const component of components) {
+      this.validateComponentParameters(component);
+    }
+  }
+
+  /**
+   * Validates all parameters in a single component.
+   * 
+   * @param component - The component to validate
+   */
+  private validateComponentParameters(component: ComponentConfig): void {
+    const parameters = component.getAllParameters();
+
+    for (const parameter of parameters) {
+      this.validateParameterKey(component.getName(), parameter);
+    }
+  }
+
+  /**
+   * Validates a parameter key naming convention.
+   * 
+   * Keys must:
+   * - Start with uppercase letter
+   * - Contain only uppercase letters, numbers, and underscores
+   * 
+   * @param componentName - Name of the component (for error messages)
+   * @param parameter - The parameter to validate
+   */
+  private validateParameterKey(componentName: string, parameter: ConfigParameter): void {
+    const key = parameter.getKey();
+
+    if (!/^[A-Z][A-Z0-9_]*$/.test(key)) {
+      this._errors.push(
+        `Invalid parameter key '${key}' in component '${componentName}'. Keys must be uppercase letters, numbers, and underscores only`
+      );
+    }
+  }
+
+  /**
+   * Returns all validation errors found.
+   * Should be called after validate() to get detailed error messages.
+   * 
+   * @returns Array of error messages
+   */
+  getErrors(): string[] {
+    return this._errors;
+  }
+}
diff --git a/util/config/configurator/configurator.ts b/util/config/configurator/configurator.ts
index 6ae98c37..416cff87 100644
--- a/util/config/configurator/configurator.ts
+++ b/util/config/configurator/configurator.ts
@@ -1,17 +1,15 @@
-import { $ } from "bun";
-
 import {
   intro,
   outro,
-  select,
-  isCancel,
   cancel,
-  text,
-  password,
 } from "@clack/prompts";
-import color from "picocolors";
 
-import { parseArgs } from "util";
+import { styleText } from "node:util";
+
+import { ConfigParser } from "./config-parser";
+import { ConfigValidator } from "./config-validator";
+import { EditLoop } from "./edit-loop";
+import { PartialConfigManager } from "./partial-config-manager";
 
 type Prompts = Record<string, PromptData>;
 
@@ -22,252 +20,77 @@ type PromptData = {
   value?: string;
 };
 
-const OPS = process.env.OPS || "ops";
-
 export const AdditionalArgsMsg = "Additional arguments will be ignored.";
-export const NotValidJsonMsg = "Not a valid JSON file";
-export const FileNotFoundJsonMsg = "The JSON file was not found. Pathname: ";
-export const BadConfigMsg =
-  "Bad configuration file. Check the help message (-h) to see the expected format.";
 
 export const HelpMsg = `
-Usage: config <configjson> [-o | --override]
+Usage: config [-h | --help]
 
 Description:
-Prompt the user for configuration data defined in the config.json file. 
-The script will ignore the keys from the input config that are already set in ops
-and only prompt the user for the missing data, unless the override flag is set. 
-Then they will be saved in the ops config. You can also define a default value.
-
-The config.json file must be a JSON file with the following structure:
-      
-  {
-    "KEY": {
-      "type": "string"
-    },
-    "OTHER_KEY": {
-      "label": "An optional custom message",
-      "type": "int",
-      "default": "42"
-    },
-    ...
-  }
-
-The keys must be uppercase words (separated by underscores).
-The value for the "type" key must be either string with the following values:
-- string
-- int
-- float
-- bool
-- password
-- an array of strings with specific values (an enum).
+Interactive configuration editor for ops configuration.
+The tool loads configuration from all-config-parameters.toml and provides
+an intuitive interface for editing parameters across all components.
+
+Features:
+- Select components to configure
+- Edit individual parameters
+- Auto-save to .tmp file
+- Resume editing after interruptions
 `;
 
 export default async function main() {
-  const options: { showhelp: { type: 'boolean' }, override: { type: 'boolean' } } = {
-    showhelp: {
-      type: 'boolean',
-    },
-    override: {
-      type: 'boolean',
-    },
-  };
-  const { values, positionals } = parseArgs({
-    args: Bun.argv,
-    options: options,
-    strict: true,
-    allowPositionals: true,
-
-  });
-
-  if (values.showhelp) {
+  if (Bun.argv.includes('-h') || Bun.argv.includes('--help')) {
     console.log(HelpMsg);
     return process.exit(0);
   }
 
-  const override = values.override || false;
+  // Load and parse the TOML configuration file using OOP ConfigParser
+  const filePath = './all-config-parameters.toml';
 
-  // 1. Read input config json
-  const readPosRes = readPositionalFile(positionals);
-  if (!readPosRes.success) {
-    cancel(readPosRes.message);
-    return process.exit(1);
-  }
+  // Create parser instance and load configuration from TOML file
+  const parser = new ConfigParser(filePath);
+  const loadResult = await parser.load();
 
-  if (readPosRes.help) {
-    console.log(readPosRes.help);
-    return process.exit(0);
+  if (!loadResult.success) {
+    cancel(loadResult.error || 'Failed to load configuration');
+    return process.exit(1);
   }
 
-  if (readPosRes.message) {
-    console.warn(readPosRes.message);
-  }
+  const config = loadResult.data!;
 
-  // 2. Parse the json
-  const jsonRes = await parsePositionalFile(readPosRes.jsonFilePath!);
+  // Validate configuration using OOP ConfigValidator
+  // Checks component names and parameter key conventions
+  const validator = new ConfigValidator(config);
+  const validationResult = validator.validate();
 
-  if (!jsonRes.success) {
-    cancel(jsonRes.message);
+  if (!validationResult.success) {
+    console.error('Configuration validation errors:');
+    validationResult.errors.forEach(err => console.error(`  - ${err}`));
+    cancel('Invalid configuration file');
     return process.exit(1);
   }
 
-  const config = jsonRes.body;
-
-  // 3. Validate the given config json
-  if (!isInputConfigValid(config)) {
-    cancel(BadConfigMsg);
+  // Create PartialConfigManager and EditLoop for interactive editing
+  const configManager = new PartialConfigManager(filePath);
+  
+  const loadPartialResult = await configManager.load();
+  if (!loadPartialResult.success) {
+    cancel(loadPartialResult.error || 'Failed to load partial configuration');
     return process.exit(1);
   }
 
-  // 4. Run OPS to get the available config data
-  const { exitCode, stderr, stdout } = await $`${OPS} -config -d`.quiet();
-  if (exitCode !== 0) {
-    cancel(stderr.toString());
-    return process.exit(1);
-  }
+  intro(styleText("inverse", " ops configurator "));
 
-  const opsCurrentConfig = stdout.toString();
+  const editLoop = new EditLoop(configManager);
+  const editResult = await editLoop.start();
 
-  // 5. Remove the keys from config that are already in the opsConfig
-  let missingData = config;
-  if (!override) {
-    missingData = findMissingConfig(config, opsCurrentConfig);
+  if (!editResult.success) {
+    cancel(editResult.error || 'Configuration editing failed');
+    return process.exit(1);
   }
 
-  // 6. Ask the user for the missing data
   console.log();
-  intro(color.inverse(" ops configurator "));
-
-  await askMissingData(missingData, override);
-
-  // 7. Save the data to the config?
-  console.log();
-
   outro("You're all set!");
-}
-
-async function askMissingData(missingData: Prompts, override: boolean = false) {
-  if (Object.keys(missingData).length === 0) {
-    outro("Configuration set from ops");
-    process.exit(0);
-  }
-  console.log();
-
-  if (!override) {
-    console.log("Configuration partially set from ops. Need a few more:");
-  }
-
-  for (const key in missingData) {
-    let inputFromPrompt: string;
-    const prompt: PromptData = missingData[key];
-    // let askedForPassword = false;
-
-    if (Array.isArray(prompt.type)) {
-      const defaultValueOK = prompt.default && prompt.type.includes(prompt.default);
-      if (prompt.default && !defaultValueOK) {
-        console.log();
-        console.warn(`The default value ${prompt.default} is not in the enum values.`);
-      }
-
-      const selected = await select({
-        message: prompt.label || `Pick a value for '${key}'`,
-        options: prompt.type.map((v) => ({ label: v, value: v })),
-        initialValue: defaultValueOK ? prompt.default : undefined,
-      });
-
-      if (!selected || isCancel(selected)) {
-        cancel("Operation cancelled");
-        process.exit(0);
-      }
-
-      inputFromPrompt = selected.toString();
-
-      // inputConfigs[key] = { ...prompt, value: selected.toString() };
-    } else if (prompt.type === "bool") {
-      const selected = await select({
-        initialValue: prompt.default === "true" || prompt.default as unknown as boolean === true ? "true" : "false",
-        message: prompt.label || `Pick a true/false for '${key}'`,
-        options: [
-          { label: "true", value: "true" },
-          { label: "false", value: "false" },
-        ],
-      });
-
-      if (!selected || isCancel(selected)) {
-        cancel("Operation cancelled");
-        process.exit(0);
-      }
-
-      inputFromPrompt = selected.toString();
-      // inputConfigs[key] = { ...prompt, value: selected.toString() };
-    } else if (prompt.type === "password") {
-      if (prompt.default) {
-        console.log();
-        console.warn("Default password value is not supported. Please enter the password manually.");
-      }
-      const input = await password({
-        message: prompt.label || `Enter password value for ${key}`,
-        validate: (value) => {
-          if (!value) {
-            return "Password cannot be empty";
-          }
-        }
-      });
-
-      if (isCancel(input)) {
-        cancel("Operation cancelled");
-        process.exit(0);
-      }
-      inputFromPrompt = input;
-      // askedForPassword = true;
-    } else {
-      const defaultMsgFragment = prompt.default ? `(default: ${prompt.default})` : "";
-      const message = `Enter value for ${key} ${defaultMsgFragment} (${prompt.type})`;
-
-      let input = await text({
-        message: prompt.label || message,
-        // defaultValue: prompt.default?.toString(),
-        initialValue: prompt.default?.toString(),
-        validate: (value) => {
-          switch (prompt.type) {
-            case "int":
-              if (!Number.isInteger(Number(value))) {
-                return `Value for ${key} must be an integer number`;
-              }
-              break;
-            case "float":
-              if (!Number(value)) {
-                return `Value for ${key} must be a number`;
-              }
-          }
-          return;
-        }
-      }) as string;
-
-      if (isCancel(input)) {
-        cancel("Operation cancelled");
-        process.exit(0);
-      }
-
-
-      inputFromPrompt = input;
-      // inputConfigs[key] = { ...prompt, value: input };
-    }
-
-    // if (!askedForPassword) {
-    //   console.log("Setting", key, "to", inputFromPrompt);
-    // } else {
-    //   console.log("Setting", key, "to", "*".repeat(inputFromPrompt.length));
-    // }
-
-    console.log(`Setting ${key} to ${inputFromPrompt}`);
-    const { exitCode, stderr } =
-      await $`${OPS} -config ${key}=${inputFromPrompt}`.nothrow();
-    if (exitCode !== 0) {
-      cancel(stderr.toString());
-      return process.exit(1);
-    }
-  }
+  return process.exit(0);
 }
 
 export function findMissingConfig(
@@ -305,7 +128,7 @@ export function readPositionalFile(positionals: string[]): {
   }
 
   if (positionals.length > 3) {
-    return {
+    return { 
       success: true,
       message: AdditionalArgsMsg,
       jsonFilePath: positionals[2],
@@ -315,32 +138,11 @@ export function readPositionalFile(positionals: string[]): {
   return { success: true, jsonFilePath: positionals[2] };
 }
 
-export async function parsePositionalFile(
-  path: string
-): Promise<{ success: boolean; message?: string; body?: any }> {
-
-  const file = Bun.file(Bun.pathToFileURL(path));
-
-  if (!await file.exists()) {
-    return { success: false, message: FileNotFoundJsonMsg + Bun.pathToFileURL(path) };
-  }
-
-
-  try {
-    const contents = await file.json();
-    return { success: true, body: contents };
-  } catch (error) {
-    return { success: false, message: NotValidJsonMsg };
-  }
-}
-
 export function isInputConfigValid(body: Record<string, any>): boolean {
-  // 1. If the body is empty, return false
   if (Object.keys(body).length === 0) {
     return false;
   }
 
-  // 2. Check that each key in the body has the keys as the Prompt type
   for (const key in body) {
     const value = body[key];
     if (typeof value !== "object") {
@@ -359,7 +161,6 @@ export function isInputConfigValid(body: Record<string, any>): boolean {
     }
   }
 
-  // 3. Check that all the keys are uppercase and can only have underscores not at the beginning or end
   for (const key in body) {
     if (!/^[A-Z][A-Z_]|[0-9]*[A-Z]|[0-9]$/.test(key)) {
       return false;
diff --git a/util/config/configurator/docs/configurator-class-diagram.mmd b/util/config/configurator/docs/configurator-class-diagram.mmd
new file mode 100644
index 00000000..5967e293
--- /dev/null
+++ b/util/config/configurator/docs/configurator-class-diagram.mmd
@@ -0,0 +1,146 @@
+classDiagram
+    %% Core Domain Classes (types.ts)
+    class ConfigParameter {
+        -_key: string
+        -_label: string
+        -_initialValue: string
+        -_userInputValue: string
+        +getKey(): string
+        +getLabel(): string
+        +setLabel(label: string): void
+        +getInitialValue(): string
+        +getUserInputValue(): string
+        +setUserInputValue(value: string): void
+        +getValue(): string
+        +hasUserInput(): boolean
+    }
+
+    class ComponentConfig {
+        -_name: string
+        -_parameters: Map~string, ConfigParameter~
+        +getName(): string
+        +addParameter(parameter: ConfigParameter): void
+        +getParameter(key: string): ConfigParameter | undefined
+        +getAllParameters(): ConfigParameter[]
+        +getParameterKeys(): string[]
+        +hasParameter(key: string): boolean
+        +getParameterCount(): number
+    }
+
+    class OpsConfigFile {
+        -_components: Map~string, ComponentConfig~
+        +addComponent(component: ComponentConfig): void
+        +getComponent(name: string): ComponentConfig | undefined
+        +getAllComponents(): ComponentConfig[]
+        +getComponentNames(): string[]
+        +hasComponent(name: string): boolean
+        +getComponentCount(): number
+    }
+
+    class EditableConfigParameter {
+        -_previousUserInputValue: string
+        +getPreviousUserInputValue(): string
+        +setPreviousUserInputValue(value: string): void
+        +updateUserInputValue(value: string): void
+        +revertToPrevious(): boolean
+        +fromConfigParameter(param: ConfigParameter)$ EditableConfigParameter
+    }
+
+    class EditableComponentConfig {
+        +getAllParameters(): EditableConfigParameter[]
+        +getParameter(key: string): EditableConfigParameter | undefined
+    }
+
+    class EditableOpsConfigFile {
+        +getAllComponents(): EditableComponentConfig[]
+        +getComponent(name: string): EditableComponentConfig | undefined
+    }
+
+    %% Inheritance
+    ConfigParameter <|-- EditableConfigParameter
+    ComponentConfig <|-- EditableComponentConfig
+    OpsConfigFile <|-- EditableOpsConfigFile
+
+    %% Composition relationships
+    OpsConfigFile *-- ComponentConfig : contains
+    ComponentConfig *-- ConfigParameter : contains
+    EditableOpsConfigFile *-- EditableComponentConfig : contains
+    EditableComponentConfig *-- EditableConfigParameter : contains
+
+    %% Parser & Validator
+    class ConfigParser {
+        -_filePath: string
+        +load(): Promise~Result~OpsConfigFile, string~~
+        +extractComponents(rawData: unknown): OpsConfigFile
+        +parseComponentSection(sectionName: string, sectionData: unknown): ComponentConfig
+        +parseParameter(key: string, value: unknown): ConfigParameter
+    }
+
+    class ConfigValidator {
+        -_config: OpsConfigFile
+        -_managedComponents: string[]
+        -_errors: string[]
+        +validate(): ValidationResult
+        +getErrors(): string[]
+    }
+
+    ConfigParser ..> OpsConfigFile : creates
+    ConfigValidator ..> OpsConfigFile : validates
+
+    %% Configuration Management
+    class PartialConfigManager {
+        -_configFilePath: string
+        -_tmpFilePath: string
+        -_config: EditableOpsConfigFile
+        +load(): Promise~Result~EditableOpsConfigFile, string~~
+        +save(): Promise~Result~void, string~~
+        +clear(): Promise~Result~void, string~~
+        +getConfig(): EditableOpsConfigFile
+        +setParameter(componentName: string, key: string, value: string): Promise~Result~void, string~~
+        +revertParameter(componentName: string, key: string): Promise~Result~void, string~~
+        +hasModifications(): boolean
+        +getModifiedParameters(): Array
+    }
+
+    PartialConfigManager *-- EditableOpsConfigFile : manages
+
+    %% Interactive Components
+    class EditLoop {
+        -_configManager: PartialConfigManager
+        -_exitHandler: ExitHandler
+        -_running: boolean
+        +start(): Promise~Result~void, string~~
+        +stop(): void
+        +isRunning(): boolean
+    }
+
+    class ExitHandler {
+        -_configManager: PartialConfigManager
+        +handleExit(): Promise~Result~void, string~~
+    }
+
+    class ConfigDisplay {
+        +displayParameterTable(componentName: string, parameters: EditableConfigParameter[])$ void
+        +displayComponentSummary(components: Array)$ void
+        +displayParameterDetail(parameter: EditableConfigParameter)$ void
+        +displayModifications(modifications: Array)$ void
+        +clearScreen()$ void
+    }
+
+    EditLoop *-- ExitHandler : uses
+    EditLoop --> PartialConfigManager : uses
+    EditLoop --> ConfigDisplay : uses
+    ExitHandler --> PartialConfigManager : uses
+    ExitHandler --> ConfigDisplay : uses
+
+    %% Result Types
+    class Result~T, E~ {
+        +success: boolean
+        +data?: T
+        +error?: E
+    }
+
+    class ValidationResult {
+        +success: boolean
+        +errors: string[]
+    }
diff --git a/util/config/configurator/docs/development.md b/util/config/configurator/docs/development.md
new file mode 100644
index 00000000..e0381782
--- /dev/null
+++ b/util/config/configurator/docs/development.md
@@ -0,0 +1,70 @@
+# Development setup
+
+All configurator source code lives inside the `configurator/` folder.
+The entry point is `configurator/index.ts`, which calls the main function in
+`configurator/configurator.ts`.
+
+## Class diagram
+[configurator-class-diagram.mmd](configurator-class-diagram.mmd)
+
+
+From the project root, enter the configurator directory and install dependencies:
+
+```bash
+cd util/config/configurator
+bun install
+```
+
+---
+
+## Available commands
+
+All commands must be run from inside `util/config/configurator/`.
+
+### `bun run start`
+
+Launches the interactive configurator against the master config file
+(`all-config-parameters.toml`). Use arrow keys to navigate components and
+parameters, `ENTER` to confirm, `ESC` or `Ctrl+C` to cancel an edit or exit.
+
+```bash
+bun run start
+```
+
+### `bun run startdebug`
+
+Same as `start`, but waits for a debugger to attach before executing.
+Useful with the VSCode "Attach Bun" launch configuration in `.vscode/launch.json`.
+
+```bash
+bun run startdebug
+```
+
+### `bun run test`
+
+Runs the unit test suite with Bun's built-in test runner.
+
+```bash
+bun run test
+```
+
+To run the full test suite (all test files, not only `index.test.ts`):
+
+```bash
+bun test tests/
+```
+
+### `bun run build`
+
+Bundles the configurator into a single JavaScript file and places it one level
+up as `util/config/configurator.js`, which is the file consumed by the `ops`
+task runner.
+
+```bash
+bun run build
+```
+
+Run this after every change before committing, so the bundled file stays in sync
+with the source.
+
+---
\ No newline at end of file
diff --git a/util/config/configurator/docs/opsfile-variables-input.md b/util/config/configurator/docs/opsfile-variables-input.md
new file mode 100644
index 00000000..c9cab6a4
--- /dev/null
+++ b/util/config/configurator/docs/opsfile-variables-input.md
@@ -0,0 +1,103 @@
+# How does the old ops task file work?
+
+Task file: https://github.com/apache/openserverless-task/blob/eee896f2c11b8ca114ec39a83df0c8acfccb332c/config/opsfile.yml
+
+There are 70 input only variables.
+In this task runner convention, __ prefix denotes CLI flags/arguments supplied by the user when invoking a task.
+The outputs are the config KEY=value calls those flags drive - but the __ variables themselves are never written to, only read.
+
+See the sections below.
+
+## Input variables
+
+All `__` variables are CLI flags/arguments supplied by the user when invoking a task (**Input** only).
+
+
+
+| Variable                      | Type  | Tasks                                                                  |
+|-------------------------------|-------|------------------------------------------------------------------------|
+| `__access`                    | Input | `_aws`                                                                 |
+| `__activation_max_payload`    | Input | `limits`                                                               |
+| `__affinity`                  | Input | `enable`, `disable`                                                    |
+| `__alerting`                  | Input | `volumes`                                                              |
+| `__all`                       | Input | `enable`, `disable`                                                    |
+| `__apiurl`                    | Input | `slack`                                                                |
+| `__auto_compaction_retention` | Input | `etcd`                                                                 |
+| `__backup`                    | Input | `postgres`                                                             |
+| `__blackbox_fraction`         | Input | `limits`                                                               |
+| `__channel`                   | Input | `slack`                                                                |
+| `__class`                     | Input | `storage`, `ingress`                                                   |
+| `__concurrent`                | Input | `limits`                                                               |
+| `__console`                   | Input | `minio`, `seaweefs`                                                    |
+| `__count`                     | Input | `eks`, `gke`, `aks`                                                    |
+| `__couchdb`                   | Input | `volumes`                                                              |
+| `__cron`                      | Input | `enable`, `disable`                                                    |
+| `__delete`                    | Input | `use`                                                                  |
+| `__disk`                      | Input | `aws`, `eks`, `gcloud`, `gke`, `azcloud`, `aks`, `registry`, `volumes` |
+| `__etcd`                      | Input | `enable`, `disable`                                                    |
+| `__failover`                  | Input | `postgres`                                                             |
+| `__image`                     | Input | `aws`, `gcloud`, `azcloud`                                             |
+| `__ingress`                   | Input | `registry`                                                             |
+| `__javaopts`                  | Input | `controller`, `invoker`                                                |
+| `__kafka`                     | Input | `volumes`                                                              |
+| `__key`                       | Input | `_aws`, `gcloud`, `azcloud`, `aks`                                     |
+| `__kubever`                   | Input | `eks`                                                                  |
+| `__loglevel`                  | Input | `controller`, `invoker`                                                |
+| `__mail`                      | Input | `enable`, `disable`                                                    |
+| `__mailfrom`                  | Input | `mail`                                                                 |
+| `__mailpwd`                   | Input | `mail`                                                                 |
+| `__mailto`                    | Input | `mail`                                                                 |
+| `__mailuser`                  | Input | `mail`                                                                 |
+| `__maxdbnum`                  | Input | `milvus`                                                               |
+| `__memory`                    | Input | `limits`                                                               |
+| `__milvus`                    | Input | `enable`, `disable`                                                    |
+| `__minio`                     | Input | `enable`, `disable`                                                    |
+| `__mongodb`                   | Input | `enable`, `disable`                                                    |
+| `__mongodbvol`                | Input | `volumes`                                                              |
+| `__mvvol`                     | Input | `volumes`                                                              |
+| `__mvzookvol`                 | Input | `volumes`                                                              |
+| `__name`                      | Input | `eks`, `gke`, `aks`, `use`                                             |
+| `__perminute`                 | Input | `limits`                                                               |
+| `__pgvol`                     | Input | `volumes`                                                              |
+| `__poolmemory`                | Input | `invoker`                                                              |
+| `__postgres`                  | Input | `enable`, `disable`                                                    |
+| `__project`                   | Input | `gcloud`, `gke`, `azcloud`, `aks`                                      |
+| `__prometheus`                | Input | `enable`, `disable`                                                    |
+| `__provisioner`               | Input | `storage`                                                              |
+| `__protocol`                  | Input | `apihost`                                                              |
+| `__pulsarjournalvol`          | Input | `volumes`                                                              |
+| `__pulsarledgelvol`           | Input | `volumes`                                                              |
+| `__quota`                     | Input | `enable`, `disable`                                                    |
+| `__quota_backend_bytes`       | Input | `etcd`                                                                 |
+| `__redis`                     | Input | `enable`, `disable`                                                    |
+| `__redisvol`                  | Input | `volumes`                                                              |
+| `__regpassword`               | Input | `externalregistry`                                                     |
+| `__regurl`                    | Input | `externalregistry`                                                     |
+| `__reguser`                   | Input | `externalregistry`                                                     |
+| `__region`                    | Input | `_aws`, `eks`, `gcloud`, `gke`, `azcloud`, `aks`                       |
+| `__registry`                  | Input | `enable`, `disable`                                                    |
+| `__rename`                    | Input | `use`                                                                  |
+| `__replicas`                  | Input | `controller`, `invoker`, `postgres`, `etcd`                            |
+| `__s3`                        | Input | `minio`, `seaweefs`                                                    |
+| `__schedule`                  | Input | `postgres`                                                             |
+| `__seaweedfs`                 | Input | `enable`, `disable`                                                    |
+| `__seaweedfsvol`              | Input | `volumes`                                                              |
+| `__secret`                    | Input | `_aws`                                                                 |
+| `__sequencelength`            | Input | `limits`                                                               |
+| `__slack`                     | Input | `enable`, `disable`                                                    |
+| `__static`                    | Input | `enable`, `disable`                                                    |
+| `__storage`                   | Input | `volumes`                                                              |
+| `__time`                      | Input | `limits`                                                               |
+| `__timeoutslogs`              | Input | `invoker`                                                              |
+| `__timeoutsrun`               | Input | `invoker`                                                              |
+| `__tls`                       | Input | `apihost`                                                              |
+| `__tolerations`               | Input | `enable`, `disable`                                                    |
+| `__triggerperminute`          | Input | `limits`                                                               |
+| `__vm`                        | Input | `aws`, `eks`, `gcloud`, `gke`, `azcloud`, `aks`                        |
+| `__vmuser`                    | Input | `aws`                                                                  |
+| `__zookeeper`                 | Input | `volumes`                                                              |
+
+## Output variables
+
+The outputs are the `config KEY=value` calls those flags drive.
+
diff --git a/util/config/configurator/docs/opsfile-variables-output.md b/util/config/configurator/docs/opsfile-variables-output.md
new file mode 100644
index 00000000..b9c53539
--- /dev/null
+++ b/util/config/configurator/docs/opsfile-variables-output.md
@@ -0,0 +1,134 @@
+# How does the old ops task file work? - Output Variables
+
+Task file: https://github.com/apache/openserverless-task/blob/eee896f2c11b8ca114ec39a83df0c8acfccb332c/config/opsfile.yml
+
+Output variables are keys written via `config KEY=value` calls inside tasks.
+
+## Output variables
+
+| Variable                                    | Type   | Tasks                                  |
+|---------------------------------------------|--------|----------------------------------------|
+| `AKS_COUNT`                                 | Output | `aks`                                  |
+| `AKS_DISK`                                  | Output | `aks`                                  |
+| `AKS_NAME`                                  | Output | `aks`                                  |
+| `AKS_PROJECT`                               | Output | `aks`                                  |
+| `AKS_REGION`                                | Output | `aks`                                  |
+| `AKS_SSHKEY`                                | Output | `aks`                                  |
+| `AKS_VM`                                    | Output | `aks`                                  |
+| `AWS_ACCESS_KEY_ID`                         | Output | `_aws`                                 |
+| `AWS_DEFAULT_REGION`                        | Output | `_aws`                                 |
+| `AWS_SECRET_ACCESS_KEY`                     | Output | `_aws`                                 |
+| `AWS_SSHKEY`                                | Output | `_aws`                                 |
+| `AWS_VM_DISK_SIZE`                          | Output | `aws`                                  |
+| `AWS_VM_IMAGE_ID`                           | Output | `aws`                                  |
+| `AWS_VM_IMAGE_USER`                         | Output | `aws`                                  |
+| `AWS_VM_INSTANCE_TYPE`                      | Output | `aws`                                  |
+| `AZCLOUD_DISK`                              | Output | `azcloud`                              |
+| `AZCLOUD_IMAGE`                             | Output | `azcloud`                              |
+| `AZCLOUD_PROJECT`                           | Output | `azcloud`                              |
+| `AZCLOUD_REGION`                            | Output | `azcloud`                              |
+| `AZCLOUD_SSHKEY`                            | Output | `azcloud`                              |
+| `AZCLOUD_VM`                                | Output | `azcloud`                              |
+| `CONFIGURED`                                | Output | `enable`, `minimal`, `slim`            |
+| `ETCD_AUTO_COMPACTION_RETENTION`            | Output | `etcd`                                 |
+| `ETCD_CONFIG_REPLICAS`                      | Output | `etcd`, `slim`                         |
+| `ETCD_QUOTA_BACKEND_BYTES`                  | Output | `etcd`                                 |
+| `EKS_COUNT`                                 | Output | `eks`                                  |
+| `EKS_DISK`                                  | Output | `eks`                                  |
+| `EKS_KUBERNETES_VERSION`                    | Output | `eks`                                  |
+| `EKS_NAME`                                  | Output | `eks`                                  |
+| `EKS_REGION`                                | Output | `eks`                                  |
+| `EKS_VM`                                    | Output | `eks`                                  |
+| `GCLOUD_DISK`                               | Output | `gcloud`                               |
+| `GCLOUD_IMAGE`                              | Output | `gcloud`                               |
+| `GCLOUD_PROJECT`                            | Output | `gcloud`                               |
+| `GCLOUD_REGION`                             | Output | `gcloud`                               |
+| `GCLOUD_SSHKEY`                             | Output | `gcloud`                               |
+| `GCLOUD_VM`                                 | Output | `gcloud`                               |
+| `GKE_COUNT`                                 | Output | `gke`                                  |
+| `GKE_DISK`                                  | Output | `gke`                                  |
+| `GKE_NAME`                                  | Output | `gke`                                  |
+| `GKE_PROJECT`                               | Output | `gke`                                  |
+| `GKE_REGION`                                | Output | `gke`                                  |
+| `GKE_VM`                                    | Output | `gke`                                  |
+| `MINIO_CONFIG_INGRESS_CONSOLE`              | Output | `minio`                                |
+| `MINIO_CONFIG_INGRESS_S3`                   | Output | `minio`                                |
+| `OPENWHISK_ACTION_INVOKE_CONCURRENT`        | Output | `limits`                               |
+| `OPENWHISK_ACTION_INVOKE_PER_MINUTE`        | Output | `limits`                               |
+| `OPENWHISK_ACTION_MEMORY_LIMIT_MAX`         | Output | `limits`                               |
+| `OPENWHISK_ACTION_SEQUENCE_MAX_LENGTH`      | Output | `limits`                               |
+| `OPENWHISK_ACTIVATION_MAX_ALLOWED_PAYLOAD`  | Output | `limits`                               |
+| `OPENWHISK_CONTROLLER_JVMGB`                | Output | `controller`                           |
+| `OPENWHISK_CONTROLLER_LOGGINGLEVEL`         | Output | `controller`                           |
+| `OPENWHISK_CONTROLLER_REPLICAS`             | Output | `controller`                           |
+| `OPENWHISK_INVOKER_CONTAINER_POOL_MEMORY`   | Output | `slim`                                 |
+| `OPENWHISK_INVOKER_CONTAINER_POOLMEMORYGB`  | Output | `invoker`                              |
+| `OPENWHISK_INVOKER_JVMGB`                   | Output | `invoker`                              |
+| `OPENWHISK_INVOKER_KUBERNETES_TIMEOUT_LOGS` | Output | `invoker`                              |
+| `OPENWHISK_INVOKER_KUBERNETES_TIMEOUT_RUN`  | Output | `invoker`                              |
+| `OPENWHISK_INVOKER_LOGGINGLEVEL`            | Output | `invoker`                              |
+| `OPENWHISK_INVOKER_REPLICAS`                | Output | `invoker`                              |
+| `OPENWHISK_LB_BLACKBOX_FRACTION`            | Output | `limits`                               |
+| `OPENWHISK_TIME_LIMIT_MAX`                  | Output | `limits`, `slim`                       |
+| `OPENWHISK_TRIGGER_PER_MINUTE`              | Output | `limits`                               |
+| `OPERATOR_COMPONENT_AM`                     | Output | `enable`, `disable`                    |
+| `OPERATOR_COMPONENT_CRON`                   | Output | `enable`, `disable`, `minimal`, `slim` |
+| `OPERATOR_COMPONENT_ETCD`                   | Output | `enable`, `disable`, `slim`            |
+| `OPERATOR_COMPONENT_INVOKER`                | Output | `slim`                                 |
+| `OPERATOR_COMPONENT_KAFKA`                  | Output | `slim`                                 |
+| `OPERATOR_COMPONENT_MILVUS`                 | Output | `enable`, `disable`, `slim`            |
+| `OPERATOR_COMPONENT_MINIO`                  | Output | `enable`, `disable`, `slim`            |
+| `OPERATOR_COMPONENT_MONGODB`                | Output | `enable`, `disable`, `minimal`, `slim` |
+| `OPERATOR_COMPONENT_POSTGRES`               | Output | `enable`, `disable`, `minimal`, `slim` |
+| `OPERATOR_COMPONENT_PROMETHEUS`             | Output | `enable`, `disable`                    |
+| `OPERATOR_COMPONENT_QUOTA`                  | Output | `enable`, `disable`                    |
+| `OPERATOR_COMPONENT_REDIS`                  | Output | `enable`, `disable`, `minimal`, `slim` |
+| `OPERATOR_COMPONENT_REGISTRY`               | Output | `enable`, `disable`, `slim`            |
+| `OPERATOR_COMPONENT_SEAWEEDFS`              | Output | `enable`, `disable`, `minimal`, `slim` |
+| `OPERATOR_COMPONENT_STATIC`                 | Output | `enable`, `disable`, `minimal`, `slim` |
+| `OPERATOR_COMPONENT_TLS`                    | Output | `apihost`                              |
+| `OPERATOR_COMPONENT_ZOOKEEPER`              | Output | `slim`                                 |
+| `OPERATOR_CONFIG_AFFINITY`                  | Output | `enable`, `disable`                    |
+| `OPERATOR_CONFIG_ALERTGMAIL`                | Output | `enable`, `disable`                    |
+| `OPERATOR_CONFIG_ALERTSLACK`                | Output | `enable`, `disable`                    |
+| `OPERATOR_CONFIG_APIHOST`                   | Output | `apihost`                              |
+| `OPERATOR_CONFIG_EMAIL_FROM`                | Output | `mail`                                 |
+| `OPERATOR_CONFIG_EMAIL_TO`                  | Output | `mail`                                 |
+| `OPERATOR_CONFIG_GMAIL_PASSWORD`            | Output | `mail`                                 |
+| `OPERATOR_CONFIG_GMAIL_USERNAME`            | Output | `mail`                                 |
+| `OPERATOR_CONFIG_HOSTPROTOCOL`              | Output | `apihost`                              |
+| `OPERATOR_CONFIG_INGRESSCLASS`              | Output | `ingress`                              |
+| `OPERATOR_CONFIG_SLACK_APIURL`              | Output | `slack`                                |
+| `OPERATOR_CONFIG_SLACK_CHANNELNAME`         | Output | `slack`                                |
+| `OPERATOR_CONFIG_SLIM`                      | Output | `slim`                                 |
+| `OPERATOR_CONFIG_STORAGECLASS`              | Output | `storage`                              |
+| `OPERATOR_CONFIG_STORAGEPROVISIONER`        | Output | `storage`                              |
+| `OPERATOR_CONFIG_TLSEMAIL`                  | Output | `apihost`                              |
+| `OPERATOR_CONFIG_TOLERATIONS`               | Output | `enable`, `disable`                    |
+| `POSTGRES_CONFIG_BACKUP_ENABLED`            | Output | `postgres`                             |
+| `POSTGRES_CONFIG_BACKUP_SCHEDULE`           | Output | `postgres`                             |
+| `POSTGRES_CONFIG_FAILOVER`                  | Output | `postgres`                             |
+| `POSTGRES_CONFIG_REPLICAS`                  | Output | `postgres`, `slim`                     |
+| `REGISTRY_CONFIG_HOSTNAME`                  | Output | `externalregistry`                     |
+| `REGISTRY_CONFIG_INGRESS_ENABLED`           | Output | `registry`                             |
+| `REGISTRY_CONFIG_MODE`                      | Output | `externalregistry`, `registry`         |
+| `REGISTRY_CONFIG_SECRET_PUSH_PULL`          | Output | `enable`, `externalregistry`, `slim`   |
+| `REGISTRY_CONFIG_USERNAME`                  | Output | `externalregistry`                     |
+| `REGISTRY_CONFIG_VOLUME_SIZE`               | Output | `registry`                             |
+| `ROOTCOORD_MILVUS_DATABASE_NUM`             | Output | `milvus`                               |
+| `SEAWEEDFS_CONFIG_INGRESS_CONSOLE_ENABLED`  | Output | `seaweefs`                             |
+| `SEAWEEDFS_CONFIG_INGRESS_S3_ENABLED`       | Output | `seaweefs`, `slim`                     |
+| `STORAGE_SIZE_COUCHDB`                      | Output | `volumes`                              |
+| `STORAGE_SIZE_ETCD`                         | Output | `volumes`                              |
+| `STORAGE_SIZE_KAFKA`                        | Output | `volumes`                              |
+| `STORAGE_SIZE_MILVUS_CLUSTER`               | Output | `volumes`                              |
+| `STORAGE_SIZE_MILVUS_PULSAR_JOURNAL`        | Output | `volumes`                              |
+| `STORAGE_SIZE_MILVUS_PULSAR_LEDGERS`        | Output | `volumes`                              |
+| `STORAGE_SIZE_MILVUS_ZOOKEEPER`             | Output | `volumes`                              |
+| `STORAGE_SIZE_MINIO`                        | Output | `volumes`                              |
+| `STORAGE_SIZE_MONGODB`                      | Output | `volumes`                              |
+| `STORAGE_SIZE_MONITORING`                   | Output | `volumes`                              |
+| `STORAGE_SIZE_POSTGRES`                     | Output | `volumes`                              |
+| `STORAGE_SIZE_REDIS`                        | Output | `volumes`                              |
+| `STORAGE_SIZE_SEAWEEDFS`                    | Output | `volumes`                              |
+| `STORAGE_SIZE_ZOOKEEPER`                    | Output | `volumes`                              |
diff --git a/util/config/configurator/docs/opsfile-variables.md b/util/config/configurator/docs/opsfile-variables.md
new file mode 100644
index 00000000..a7435af2
--- /dev/null
+++ b/util/config/configurator/docs/opsfile-variables.md
@@ -0,0 +1,535 @@
+# How the ops config opsfile works
+
+Please note that this document is about the *old* configurator, and that it's saved here to keep it
+along with the new configurator.
+`task` is a tool used to run the `opsfile.yml`. 
+
+**Source:** [`config/opsfile.yml`](https://github.com/apache/openserverless-task/blob/eee896f2c11b8ca114ec39a83df0c8acfccb332c/config/opsfile.yml)
+
+The config opsfile is the configuration file for the original sequential configurator.
+Each task prompts the user for values and writes them to the `ops` key-value store via
+`config KEY=value` calls. The configuration file of the new interactive configurator
+(`all-config-parameters.toml`) replaces this workflow, but the output keys remain the same.
+
+Complete variable lists: [inputs](opsfile-variables-input.md) · [outputs](opsfile-variables-output.md)
+
+---
+
+## Variable naming conventions
+
+### Input variables (`__` prefix)
+
+All CLI flags supplied by the user at invocation time use the `__` double-underscore
+prefix. They are **read-only**: the opsfile never writes to them, it only reads them.
+
+```
+ops config aws --vm=t3a.large --disk=100
+               ↑              ↑
+            __vm            __disk   (read inside the task, never stored)
+```
+
+### Output variables (uppercase)
+
+Output variables are keys written to the `ops` store via `config KEY=value`.
+They follow a hierarchical naming convention:
+
+| Pattern                | Meaning                                                                     |
+|------------------------|-----------------------------------------------------------------------------|
+| `CLOUD_*`              | Cloud provider credentials and VM settings (e.g. `AWS_`, `GCLOUD_`, `AKS_`) |
+| `OPERATOR_COMPONENT_*` | Boolean toggle for a deployable service component                           |
+| `OPERATOR_CONFIG_*`    | Scalar operator configuration (host, ingress class, alert targets, …)       |
+| `OPENWHISK_*`          | OpenWhisk runtime limits and tuning                                         |
+| `STORAGE_SIZE_*`       | PVC sizes (in gigabytes) for each component                                 |
+| `POSTGRES_CONFIG_*`    | Postgres HA and backup settings                                             |
+| `REGISTRY_CONFIG_*`    | Container image registry settings                                           |
+| `ETCD_*`               | ETCD cluster settings                                                       |
+
+---
+
+## Helper primitives
+
+Two internal tasks handle all interactive prompting. They are never called directly.
+
+### `read` - prompt with default
+
+Prompts the user and falls back to a default when the input is blank.
+Used for optional or tuneable parameters.
+
+```yaml
+task: read
+vars:
+  VAR:  STORAGE_SIZE_REDIS   # key written to ops store
+  MSG:  "Redis volume size"  # prompt text
+  VAL:  "{{.__redisvol}}"    # CLI flag value (may be empty)
+  DEF:  "25"                 # default used when VAL and current value are empty
+  HINT: "..."                # optional extra guidance shown before the prompt
+```
+
+### `readforce` - prompt without default
+
+Same as `read` but **loops until a non-empty value is provided**.
+Used for mandatory fields like credentials and project IDs.
+
+---
+
+## Task reference
+
+Tasks are grouped below by what they configure. For each task the table shows
+the CLI flag it reads and the config key it writes.
+
+### Cloud provider - `_aws` (credentials shared by `aws` and `eks`)
+
+```bash
+ops config _aws [--access=…] [--secret=…] [--region=…] [--key=…]
+```
+
+| Input flag   | Output key              | Default              |
+|--------------|-------------------------|----------------------|
+| `--access`   | `AWS_ACCESS_KEY_ID`     | *(mandatory)*        |
+| `--secret`   | `AWS_SECRET_ACCESS_KEY` | *(mandatory)*        |
+| `--region`   | `AWS_DEFAULT_REGION`    | `us-east-1`          |
+| `--key`      | `AWS_SSHKEY`            | `openserverless-key` |
+
+---
+
+### Cloud provider - `aws` (VM infrastructure on AWS)
+
+```bash
+ops config aws [--image=…] [--vmuser=…] [--vm=…] [--disk=…]
+```
+
+Calls `_aws` first, then adds:
+
+| Input flag  | Output key             | Default                 |
+|-------------|------------------------|-------------------------|
+| `--image`   | `AWS_VM_IMAGE_ID`      | `ami-052efd3df9dad4825` |
+| `--vmuser`  | `AWS_VM_IMAGE_USER`    | `ubuntu`                |
+| `--vm`      | `AWS_VM_INSTANCE_TYPE` | `t3a.large`             |
+| `--disk`    | `AWS_VM_DISK_SIZE`     | `100`                   |
+
+---
+
+### Cloud provider - `eks` (Amazon EKS cluster)
+
+```bash
+ops config eks [--name=…] [--region=…] [--count=…] [--vm=…] [--disk=…] [--kubever=…]
+```
+
+Calls `_aws` first, then adds:
+
+| Input flag  | Output key               | Default          |
+|-------------|--------------------------|------------------|
+| `--name`    | `EKS_NAME`               | `openserverless` |
+| `--region`  | `EKS_REGION`             | `us-east-2`      |
+| `--count`   | `EKS_COUNT`              | `3`              |
+| `--vm`      | `EKS_VM`                 | `m5.xlarge`      |
+| `--disk`    | `EKS_DISK`               | `50`             |
+| `--kubever` | `EKS_KUBERNETES_VERSION` | `1.25`           |
+
+---
+
+### Cloud provider - `gcloud` (Google Cloud VM infrastructure)
+
+```bash
+ops config gcloud [--project=…] [--region=…] [--vm=…] [--disk=…] [--key=…] [--image=…]
+```
+
+| Input flag   | Output key       | Default |
+|--------------|------------------|---|
+| `--project`  | `GCLOUD_PROJECT` | *(mandatory)* |
+| `--region`   | `GCLOUD_REGION`  | `us-east1` |
+| `--vm`       | `GCLOUD_VM`      | `n2-standard-4` |
+| `--disk`     | `GCLOUD_DISK`    | `200` |
+| `--key`      | `GCLOUD_SSHKEY`  | `~/.ssh/id_rsa.pub` |
+| `--image`    | `GCLOUD_IMAGE`   | `ubuntu-minimal-2204-lts` |
+
+---
+
+### Cloud provider - `gke` (Google Kubernetes Engine)
+
+```bash
+ops config gke [--project=…] [--name=…] [--region=…] [--count=…] [--vm=…] [--disk=…]
+```
+
+| Input flag   | Output key    | Default         |
+|--------------|---------------|-----------------|
+| `--project`  | `GKE_PROJECT` | *(mandatory)*   |
+| `--name`     | `GKE_NAME`    | `nuvolaris`     |
+| `--region`   | `GKE_REGION`  | `us-east1`      |
+| `--count`    | `GKE_COUNT`   | `3`             |
+| `--vm`       | `GKE_VM`      | `e2-standard-2` |
+| `--disk`     | `GKE_DISK`    | `50`            |
+
+---
+
+### Cloud provider - `azcloud` (Azure VM infrastructure)
+
+```bash
+ops config azcloud [--project=…] [--region=…] [--vm=…] [--disk=…] [--key=…] [--image=…]
+```
+
+| Input flag  | Output key        | Default             |
+|-------------|-------------------|---------------------|
+| `--project` | `AZCLOUD_PROJECT` | *(mandatory)*       |
+| `--region`  | `AZCLOUD_REGION`  | `eastus`            |
+| `--vm`      | `AZCLOUD_VM`      | `Standard_B4s_v2`   |
+| `--disk`    | `AZCLOUD_DISK`    | `100`               |
+| `--key`     | `AZCLOUD_SSHKEY`  | `~/.ssh/id_rsa.pub` |
+| `--image`   | `AZCLOUD_IMAGE`   | `Ubuntu2204`        |
+
+---
+
+### Cloud provider - `aks` (Azure Kubernetes Service)
+
+```bash
+ops config aks [--project=…] [--name=…] [--count=…] [--region=…] [--vm=…] [--disk=…] [--key=…]
+```
+
+| Input flag   | Output key    | Default             |
+|--------------|---------------|---------------------|
+| `--project`  | `AKS_PROJECT` | `openserverless`    |
+| `--name`     | `AKS_NAME`    | `openserverless`    |
+| `--count`    | `AKS_COUNT`   | `3`                 |
+| `--region`   | `AKS_REGION`  | `eastus`            |
+| `--vm`       | `AKS_VM`      | `Standard_B4ms`     |
+| `--disk`     | `AKS_DISK`    | `50`                |
+| `--key`      | `AKS_SSHKEY`  | `~/.ssh/id_rsa.pub` |
+
+---
+
+### Component toggles - `enable` / `disable`
+
+```bash
+ops config enable  [--redis] [--mongodb] [--minio] [--cron] [--static] [--postgres]
+                   [--prometheus] [--slack] [--mail] [--affinity] [--tolerations]
+                   [--quota] [--milvus] [--registry] [--seaweedfs] [--etcd] [--all]
+ops config disable [same flags]
+```
+
+Each flag sets the corresponding output key to `true` (enable) or `false` (disable).
+
+| Flag            | Output key                           | Cascade                                                  |
+|-----------------|--------------------------------------|----------------------------------------------------------|
+| `--redis`       | `OPERATOR_COMPONENT_REDIS`           | -                                                        |
+| `--mongodb`     | `OPERATOR_COMPONENT_MONGODB`         | also enables `POSTGRES`                                  |
+| `--minio`       | `OPERATOR_COMPONENT_MINIO`           | -                                                        |
+| `--cron`        | `OPERATOR_COMPONENT_CRON`            | -                                                        |
+| `--static`      | `OPERATOR_COMPONENT_STATIC`          | -                                                        |
+| `--postgres`    | `OPERATOR_COMPONENT_POSTGRES`        | disabling also disables `MONGODB`                        |
+| `--prometheus`  | `OPERATOR_COMPONENT_PROMETHEUS`      | disabling also disables `AM`, `ALERTGMAIL`, `ALERTSLACK` |
+| `--slack`       | `OPERATOR_CONFIG_ALERTSLACK`         | also enables `PROMETHEUS` + `AM`                         |
+| `--mail`        | `OPERATOR_CONFIG_ALERTGMAIL`         | also enables `PROMETHEUS` + `AM`                         |
+| `--affinity`    | `OPERATOR_CONFIG_AFFINITY`           | -                                                        |
+| `--tolerations` | `OPERATOR_CONFIG_TOLERATIONS`        | -                                                        |
+| `--quota`       | `OPERATOR_COMPONENT_QUOTA`           | -                                                        |
+| `--milvus`      | `OPERATOR_COMPONENT_MILVUS` + `ETCD` | also enables `MINIO`                                     |
+| `--registry`    | `OPERATOR_COMPONENT_REGISTRY`        | generates `REGISTRY_CONFIG_SECRET_PUSH_PULL`             |
+| `--seaweedfs`   | `OPERATOR_COMPONENT_SEAWEEDFS`       | -                                                        |
+| `--all`         | all of the above                     | -                                                        |
+
+Both tasks also set `CONFIGURED=true` when done.
+
+---
+
+### API host - `apihost`
+
+```bash
+ops config apihost [--tls=<email>] [--protocol=<http|https|auto>]
+```
+
+| Input flag    | Output key                                                 | Default                           |
+|---------------|------------------------------------------------------------|-----------------------------------|
+| *(positional)* | `OPERATOR_CONFIG_APIHOST`                                  | *(set externally as `_apihost_`)* |
+| `--tls`       | `OPERATOR_CONFIG_TLSEMAIL` + `OPERATOR_COMPONENT_TLS=true` | `none` / `false`                  |
+| `--protocol`  | `OPERATOR_CONFIG_HOSTPROTOCOL`                             | `auto`                            |
+
+---
+
+### Alerting - `slack`
+
+```bash
+ops config slack --apiurl=<url> [--channel=<name>]
+```
+
+| Input flag   | Output key                          | Default                      |
+|--------------|-------------------------------------|------------------------------|
+| `--apiurl`   | `OPERATOR_CONFIG_SLACK_APIURL`      | *(mandatory)*                |
+| `--channel`  | `OPERATOR_CONFIG_SLACK_CHANNELNAME` | `#monitoring-openserverless` |
+
+---
+
+### Alerting - `mail`
+
+```bash
+ops config mail --mailuser=<user> --mailpwd=<pwd> [--mailfrom=<addr>] [--mailto=<addr>]
+```
+
+| Input flag   | Output key                       | Default                 |
+|--------------|----------------------------------|-------------------------|
+| `--mailuser` | `OPERATOR_CONFIG_GMAIL_USERNAME` | *(mandatory)*           |
+| `--mailpwd`  | `OPERATOR_CONFIG_GMAIL_PASSWORD` | *(mandatory)*           |
+| `--mailfrom` | `OPERATOR_CONFIG_EMAIL_FROM`     | `msciabarra@apache.org` |
+| `--mailto`   | `OPERATOR_CONFIG_EMAIL_TO`       | `nomail@mail.com`       |
+
+---
+
+### Storage volumes - `volumes`
+
+```bash
+ops config volumes [--couchdb=…] [--kafka=…] [--redisvol=…] [--mongodbvol=…]
+                   [--pgvol=…] [--storage=…] [--alerting=…] [--zookeeper=…]
+                   [--mvzookvol=…] [--mvvol=…] [--pulsarjournalvol=…]
+                   [--pulsarledgelvol=…] [--seaweedfsvol=…]
+```
+
+All values are storage sizes in gigabytes.
+
+| Input flag           | Output key                           | Default |
+|----------------------|--------------------------------------|---------|
+| `--couchdb`          | `STORAGE_SIZE_COUCHDB`               | `30`    |
+| `--kafka`            | `STORAGE_SIZE_KAFKA`                 | `30`    |
+| `--redisvol`         | `STORAGE_SIZE_REDIS`                 | `25`    |
+| `--mongodbvol`       | `STORAGE_SIZE_MONGODB`               | `50`    |
+| `--pgvol`            | `STORAGE_SIZE_POSTGRES`              | `50`    |
+| `--storage`          | `STORAGE_SIZE_MINIO`                 | `50`    |
+| `--alerting`         | `STORAGE_SIZE_MONITORING`            | `30`    |
+| `--zookeeper`        | `STORAGE_SIZE_ZOOKEEPER`             | `5`     |
+| `--mvzookvol`        | `STORAGE_SIZE_ETCD`                  | `25`    |
+| `--mvvol`            | `STORAGE_SIZE_MILVUS_CLUSTER`        | `20`    |
+| `--mvzookvol`        | `STORAGE_SIZE_MILVUS_ZOOKEEPER`      | `10`    |
+| `--pulsarjournalvol` | `STORAGE_SIZE_MILVUS_PULSAR_JOURNAL` | `25`    |
+| `--pulsarledgelvol`  | `STORAGE_SIZE_MILVUS_PULSAR_LEDGERS` | `20`    |
+| `--seaweedfsvol`     | `STORAGE_SIZE_SEAWEEDFS`             | `60`    |
+
+---
+
+### OpenWhisk controller - `controller`
+
+```bash
+ops config controller [--javaopts=…] [--loglevel=…] [--replicas=…]
+```
+
+| Input flag   | Output key                          | Default |
+|--------------|-------------------------------------|---------|
+| `--javaopts` | `OPENWHISK_CONTROLLER_JVMGB`        | `2`     |
+| `--loglevel` | `OPENWHISK_CONTROLLER_LOGGINGLEVEL` | `INFO`  |
+| `--replicas` | `OPENWHISK_CONTROLLER_REPLICAS`     | `1`     |
+
+---
+
+### OpenWhisk invoker - `invoker`
+
+```bash
+ops config invoker [--javaopts=…] [--poolmemory=…] [--timeoutsrun=…]
+                   [--timeoutslogs=…] [--loglevel=…] [--replicas=…]
+```
+
+| Input flag       | Output key                                  | Default |
+|------------------|---------------------------------------------|---------|
+| `--javaopts`     | `OPENWHISK_INVOKER_JVMGB`                   | `2`     |
+| `--poolmemory`   | `OPENWHISK_INVOKER_CONTAINER_POOLMEMORYGB`  | `2`     |
+| `--timeoutsrun`  | `OPENWHISK_INVOKER_KUBERNETES_TIMEOUT_RUN`  | `1`     |
+| `--timeoutslogs` | `OPENWHISK_INVOKER_KUBERNETES_TIMEOUT_LOGS` | `1`     |
+| `--loglevel`     | `OPENWHISK_INVOKER_LOGGINGLEVEL`            | `INFO`  |
+| `--replicas`     | `OPENWHISK_INVOKER_REPLICAS`                | `1`     |
+
+---
+
+### OpenWhisk limits - `limits`
+
+```bash
+ops config limits [--time=…] [--memory=…] [--sequencelength=…] [--perminute=…]
+                  [--concurrent=…] [--triggerperminute=…]
+                  [--activation_max_payload=…] [--blackbox_fraction=…]
+```
+
+| Input flag                 | Output key                                 | Default   |
+|----------------------------|--------------------------------------------|-----------|
+| `--time`                   | `OPENWHISK_TIME_LIMIT_MAX`                 | `5min`    |
+| `--memory`                 | `OPENWHISK_ACTION_MEMORY_LIMIT_MAX`        | `2048m`   |
+| `--sequencelength`         | `OPENWHISK_ACTION_SEQUENCE_MAX_LENGTH`     | `50`      |
+| `--perminute`              | `OPENWHISK_ACTION_INVOKE_PER_MINUTE`       | `999`     |
+| `--concurrent`             | `OPENWHISK_ACTION_INVOKE_CONCURRENT`       | `250`     |
+| `--triggerperminute`       | `OPENWHISK_TRIGGER_PER_MINUTE`             | `999`     |
+| `--activation_max_payload` | `OPENWHISK_ACTIVATION_MAX_ALLOWED_PAYLOAD` | `1048576` |
+| `--blackbox_fraction`      | `OPENWHISK_LB_BLACKBOX_FRACTION`           | `100%`    |
+
+---
+
+### Kubernetes storage class - `storage`
+
+```bash
+ops config storage [--class=…] [--provisioner=…]
+```
+
+| Input flag      | Output key                           | Default |
+|-----------------|--------------------------------------|---------|
+| `--class`       | `OPERATOR_CONFIG_STORAGECLASS`       | `auto`  |
+| `--provisioner` | `OPERATOR_CONFIG_STORAGEPROVISIONER` | `auto`  |
+
+---
+
+### Ingress class - `ingress`
+
+```bash
+ops config ingress [--class=…]
+```
+
+| Input flag | Output key                     | Default |
+|------------|--------------------------------|---------|
+| `--class`  | `OPERATOR_CONFIG_INGRESSCLASS` | `auto`  |
+
+---
+
+### Postgres HA - `postgres`
+
+```bash
+ops config postgres [--backup] [--failover] [--schedule=…] [--replicas=…]
+```
+
+| Input flag   | Output key                            | Default       |
+|--------------|---------------------------------------|---------------|
+| `--backup`   | `POSTGRES_CONFIG_BACKUP_ENABLED=true` | -             |
+| `--failover` | `POSTGRES_CONFIG_FAILOVER=true`       | -             |
+| `--schedule` | `POSTGRES_CONFIG_BACKUP_SCHEDULE`     | `0 */1 * * *` |
+| `--replicas` | `POSTGRES_CONFIG_REPLICAS`            | `2`           |
+
+---
+
+### MinIO ingress - `minio`
+
+```bash
+ops config minio [--s3] [--console]
+```
+
+| Input flag  | Output key                          |
+|-------------|-------------------------------------|
+| `--s3`      | `MINIO_CONFIG_INGRESS_S3=true`      |
+| `--console` | `MINIO_CONFIG_INGRESS_CONSOLE=true` |
+
+---
+
+### ETCD - `etcd`
+
+```bash
+ops config etcd [--replicas=…] [--auto_compaction_retention=…] [--quota_backend_bytes=…]
+```
+
+| Input flag                    | Output key                       | Default      |
+|-------------------------------|----------------------------------|--------------|
+| `--replicas`                  | `ETCD_CONFIG_REPLICAS`           | `3`          |
+| `--auto_compaction_retention` | `ETCD_AUTO_COMPACTION_RETENTION` | `1`          |
+| `--quota_backend_bytes`       | `ETCD_QUOTA_BACKEND_BYTES`       | `2147483648` |
+
+---
+
+### Milvus - `milvus`
+
+```bash
+ops config milvus [--maxdbnum=…]
+```
+
+| Input flag   | Output key                      | Default |
+|--------------|---------------------------------|---------|
+| `--maxdbnum` | `ROOTCOORD_MILVUS_DATABASE_NUM` | `64`    |
+
+---
+
+### Container registry - `registry` (internal)
+
+```bash
+ops config registry [--ingress] [--disk=…]
+```
+
+| Input flag  | Output key                             | Default |
+|-------------|----------------------------------------|---------|
+| *(always)*  | `REGISTRY_CONFIG_MODE=internal`        | -       |
+| `--ingress` | `REGISTRY_CONFIG_INGRESS_ENABLED=true` | -       |
+| `--disk`    | `REGISTRY_CONFIG_VOLUME_SIZE`          | `50`    |
+
+---
+
+### Container registry - `externalregistry`
+
+```bash
+ops config externalregistry --regurl=<host> --reguser=<user> --regpassword=<pwd>
+```
+
+| Input flag      | Output key                         |
+|-----------------|------------------------------------|
+| *(always)*      | `REGISTRY_CONFIG_MODE=external`    |
+| `--regurl`      | `REGISTRY_CONFIG_HOSTNAME`         |
+| `--reguser`     | `REGISTRY_CONFIG_USERNAME`         |
+| `--regpassword` | `REGISTRY_CONFIG_SECRET_PUSH_PULL` |
+
+---
+
+### SeaweedFS ingress - `seaweefs`
+
+```bash
+ops config seaweefs [--s3] [--console]
+```
+
+| Input flag  | Output key                                      |
+|-------------|-------------------------------------------------|
+| `--s3`      | `SEAWEEDFS_CONFIG_INGRESS_S3_ENABLED=true`      |
+| `--console` | `SEAWEEDFS_CONFIG_INGRESS_CONSOLE_ENABLED=true` |
+
+---
+
+## Preset configurations
+
+These tasks take no input flags and apply a fixed set of keys. They always call
+`status` at the end and set `CONFIGURED=true`.
+
+### `minimal`
+
+Resets the config then enables the smallest viable deployment:
+
+| Key                            | Value  |
+|--------------------------------|--------|
+| `OPERATOR_COMPONENT_REDIS`     | `true` |
+| `OPERATOR_COMPONENT_MONGODB`   | `true` |
+| `OPERATOR_COMPONENT_SEAWEEDFS` | `true` |
+| `OPERATOR_COMPONENT_CRON`      | `true` |
+| `OPERATOR_COMPONENT_STATIC`    | `true` |
+| `OPERATOR_COMPONENT_POSTGRES`  | `true` |
+
+### `slim`
+
+Applies a tuned single-node profile (Milvus-capable, no Kafka/Zookeeper):
+
+| Key                                       | Value                     |
+|-------------------------------------------|---------------------------|
+| `OPERATOR_COMPONENT_INVOKER`              | `false`                   |
+| `OPERATOR_COMPONENT_ZOOKEEPER`            | `false`                   |
+| `OPERATOR_COMPONENT_KAFKA`                | `false`                   |
+| `OPERATOR_COMPONENT_MINIO`                | `false`                   |
+| `OPERATOR_COMPONENT_REDIS`                | `true`                    |
+| `OPERATOR_COMPONENT_MONGODB`              | `true`                    |
+| `OPERATOR_COMPONENT_SEAWEEDFS`            | `true`                    |
+| `OPERATOR_COMPONENT_CRON`                 | `true`                    |
+| `OPERATOR_COMPONENT_STATIC`               | `true`                    |
+| `OPERATOR_COMPONENT_POSTGRES`             | `true`                    |
+| `OPERATOR_COMPONENT_ETCD`                 | `true`                    |
+| `OPERATOR_COMPONENT_MILVUS`               | `true`                    |
+| `OPERATOR_COMPONENT_REGISTRY`             | `true`                    |
+| `SEAWEEDFS_CONFIG_INGRESS_S3_ENABLED`     | `true`                    |
+| `ETCD_CONFIG_REPLICAS`                    | `1`                       |
+| `POSTGRES_CONFIG_REPLICAS`                | `1`                       |
+| `OPERATOR_CONFIG_SLIM`                    | `true`                    |
+| `OPENWHISK_TIME_LIMIT_MAX`                | `10min`                   |
+| `OPENWHISK_INVOKER_CONTAINER_POOL_MEMORY` | `6g`                      |
+| `REGISTRY_CONFIG_SECRET_PUSH_PULL`        | *(random 12-char string)* |
+
+---
+
+## Utility tasks
+
+| Task       | What it does                                                         |
+|------------|----------------------------------------------------------------------|
+| `status`   | Prints all `OPERATOR_`, `AKS_`, `EKS_`, `GKE_` keys currently stored |
+| `export`   | Dumps config as `export KEY=value` shell lines + helper aliases      |
+| `reset`    | Deletes `config.json` and `runtimes.json`, then dumps current config |
+| `use`      | Lists or switches between stored kubeconfig files                    |
+| `runtimes` | Displays or imports a custom `runtimes.json`                         |
diff --git a/util/config/configurator/docs/user_manual.md b/util/config/configurator/docs/user_manual.md
new file mode 100644
index 00000000..112b1e81
--- /dev/null
+++ b/util/config/configurator/docs/user_manual.md
@@ -0,0 +1,320 @@
+# ops configurator - User Manual
+
+The ops configurator is an interactive terminal tool for editing the configuration parameters used by the `ops` CLI. It groups parameters by cloud provider or service component, lets you navigate with arrow keys, and saves your work automatically so you can resume after an interruption.
+
+---
+
+## Table of contents
+
+1. [Prerequisites](#1-prerequisites)
+2. [Starting the tool](#2-starting-the-tool)
+3. [Navigating the component menu](#3-navigating-the-component-menu)
+4. [Editing parameters](#4-editing-parameters)
+5. [Exiting and saving your work](#5-exiting-and-saving-your-work)
+6. [Resuming an interrupted session](#6-resuming-an-interrupted-session)
+7. [Available components](#7-available-components)
+8. [Keyboard reference](#8-keyboard-reference)
+9. [TOML configuration file format](#9-toml-configuration-file-format)
+
+---
+
+## 1. Prerequisites
+
+- `bun` runtime installed
+- Dependencies installed in the configurator directory:
+
+```bash
+cd util/config/configurator
+bun install
+```
+
+If you use the `ops` CLI, the configurator is invoked automatically and no separate setup is needed.
+
+---
+
+## 2. Starting the tool
+
+### From the ops CLI (standard usage)
+
+```bash
+ops util config
+```
+
+### Directly with bun (development / standalone)
+
+```bash
+cd util/config/configurator
+bun run start
+```
+
+### Help
+
+```bash
+bun run start -- --help
+```
+
+When started, the tool displays a banner and loads the master configuration file `all-config-parameters.toml` located in the same directory. If a previous session was interrupted, it automatically resumes from the saved draft (see [section 6](#6-resuming-an-interrupted-session)).
+
+---
+
+## 3. Navigating the component menu
+
+After the banner, a component selection menu appears:
+
+```
+◆ Select a component to configure (use ↑/↓ arrows, ENTER to select):
+│  aws (7 parameters)
+│  eks (6 parameters)
+│  gcloud (6 parameters)
+│  gke (6 parameters)
+│  azcloud (6 parameters)
+│  aks (7 parameters)
+│  redis (4 parameters)
+│  postgres (4 parameters)
+│  Exit Configuration
+```
+
+- **`↑` / `↓`** - move between components
+- **`ENTER`** - open the selected component
+- **`ESC` or `Ctrl+C`** - cancel and go to the exit menu
+
+Select **Exit Configuration** to leave the component loop and reach the exit menu where you can apply, save, or discard changes.
+
+---
+
+## 4. Editing parameters
+
+### Parameter list
+
+After selecting a component, the screen clears and shows a parameter table followed by a selection menu:
+
+```
+┌─────────────────────────────────────────────────────────┐
+│ Component: redis                                        │
+├──────────────────┬──────────────────────────────────────┤
+│ Key              │ Value                                 │
+├──────────────────┼──────────────────────────────────────┤
+│ REDIS_URL        │ <EMPTY>                               │
+│ REDIS_SERVICE    │ <EMPTY>                               │
+│ REDIS_PREFIX     │ <EMPTY>                               │
+│ REDIS_PASSWORD   │ <EMPTY>                               │
+└──────────────────┴──────────────────────────────────────┘
+
+◆ Select a parameter to edit (use ↑/↓ arrows, ENTER to select, ESC or CTRL+C to Cancel):
+│  Redis URL = <EMPTY>
+│  Redis Service = <EMPTY>
+│  Redis Prefix = <EMPTY>
+│  Redis password = <EMPTY>
+│  ← Back to components
+```
+
+Each option shows the parameter's human-readable label and its current value. Password fields always display `***` when set, never the actual value.
+
+Select **← Back to components** to return to the component menu without editing anything.
+
+### Editing a value
+
+When you select a parameter, an input prompt appears:
+
+```
+◆ Enter new value for Redis URL:
+│  Enter value...
+```
+
+- Type the new value and press **`ENTER`** to confirm.
+- Press **`Ctrl+C`** or **`ESC`** to cancel - the previous value is preserved unchanged.
+- For **mandatory parameters**, submitting an empty value is rejected with an error message.
+
+### Password parameters
+
+Password fields use a masked prompt:
+
+```
+◆ Enter new value for Redis password:
+│  ········
+```
+
+Input is hidden. The same cancel behaviour applies.
+
+### Parameters with hints
+
+Some parameters include a hint note displayed before the prompt, explaining valid values or pointing to external commands. For example, `AWS_VM_INSTANCE_TYPE` shows:
+
+```
+┌─ What is this parameter for? ────────────────────────────┐
+│                                                          │
+│  The suggested instance type has 8GB and 2vcpus.        │
+│  To get a list of valid values, use:                     │
+│  aws ec2 describe-instance-types \                       │
+│    --query 'InstanceTypes[].InstanceType' --output table │
+│                                                          │
+└──────────────────────────────────────────────────────────┘
+
+◆ Enter new value for AWS Instance type to use for VMs:
+│  t3a.large
+```
+
+### After saving a value
+
+A confirmation line is printed immediately:
+
+```
+✓ Updated REDIS_URL to: redis://localhost:6379
+```
+
+The change is also written to the `.tmp` draft file automatically (see [section 6](#6-resuming-an-interrupted-session)).
+
+---
+
+## 5. Exiting and saving your work
+
+When you exit the component loop (via "Exit Configuration" or `Ctrl+C`), the tool shows a summary of all modified parameters and then presents three options:
+
+```
+┌─ Modified parameters ──────────────────────────────────┐
+│  redis                                                 │
+│    REDIS_URL: redis://localhost:6379                   │
+│    REDIS_PASSWORD: ***                                 │
+└────────────────────────────────────────────────────────┘
+
+◆ What would you like to do with your changes?
+│  Apply configuration directly
+│  Save configuration to file
+│  Discard all changes
+```
+
+### Apply configuration directly
+
+Runs `ops -config KEY=VALUE` for every modified parameter. Skips parameters with an empty value. Prints a result line for each:
+
+```
+✓ Set REDIS_URL=redis://localhost:6379
+✓ Set REDIS_PASSWORD=***
+Applied 2 configuration(s).
+```
+
+On full success, the `.tmp` draft file is deleted.
+
+### Save configuration to file
+
+Writes only the modified parameters to a timestamped TOML file in the current directory:
+
+```
+✓ Configuration saved to: ops-config-2026-06-08T14-30-00.toml
+```
+
+You are then asked whether to clear the draft file:
+
+```
+◆ Clear partial configuration?
+│  Yes
+│  No
+```
+
+The saved TOML file can be reviewed, edited by hand, or fed back into the tool later.
+
+### Discard all changes
+
+Deletes the `.tmp` draft file and exits cleanly:
+
+```
+✓ All changes discarded.
+```
+
+---
+
+## 6. Resuming an interrupted session
+
+Every time you confirm a parameter value, the full current state is written to a sidecar file named `<config-file>.tmp` (for example, `all-config-parameters.tmp`). This happens automatically - you do not need to do anything to enable it.
+
+If the tool is closed unexpectedly (power loss, terminal killed, `Ctrl+C` mid-edit), the draft is preserved. The next time you start the tool with the same config file, it detects the `.tmp` file and loads from it instead of the original, so all previously entered values are pre-filled.
+
+To start fresh and discard any saved draft, choose **Discard all changes** at the exit menu, or delete the `.tmp` file manually:
+
+```bash
+rm all-config-parameters.tmp
+```
+
+---
+
+## 7. Available components
+
+The master config file `all-config-parameters.toml` contains the following components:
+
+| Component | Description | Key parameters |
+|-----------|-------------|----------------|
+| `aws` | AWS credentials and VM configuration | `AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY`, `AWS_DEFAULT_REGION`, `AWS_VM_INSTANCE_TYPE`, … |
+| `eks` | Amazon Elastic Kubernetes Service cluster | `EKS_NAME`, `EKS_REGION`, `EKS_COUNT`, `EKS_VM`, `EKS_DISK`, `EKS_KUBERNETES_VERSION` |
+| `gcloud` | Google Cloud VM infrastructure | `GCLOUD_PROJECT`, `GCLOUD_REGION`, `GCLOUD_VM`, `GCLOUD_DISK`, `GCLOUD_SSHKEY`, `GCLOUD_IMAGE` |
+| `gke` | Google Kubernetes Engine cluster | `GKE_PROJECT`, `GKE_NAME`, `GKE_REGION`, `GKE_COUNT`, `GKE_VM`, `GKE_DISK` |
+| `azcloud` | Azure VM infrastructure | `AZCLOUD_PROJECT`, `AZCLOUD_REGION`, `AZCLOUD_VM`, `AZCLOUD_DISK`, `AZCLOUD_SSHKEY`, `AZCLOUD_IMAGE` |
+| `aks` | Azure Kubernetes Service cluster | `AKS_PROJECT`, `AKS_NAME`, `AKS_REGION`, `AKS_COUNT`, `AKS_VM`, `AKS_DISK`, `AKS_SSHKEY` |
+| `redis` | Redis connection details | `REDIS_URL`, `REDIS_SERVICE`, `REDIS_PREFIX`, `REDIS_PASSWORD` |
+| `postgres` | PostgreSQL connection details | `POSTGRES_DATABASE`, `POSTGRES_PORT`, `POSTGRES_USERNAME`, `POSTGRES_PASSWORD` |
+
+---
+
+## 8. Keyboard reference
+
+| Key | Where | Effect |
+|-----|-------|--------|
+| `↑` / `↓` | Any menu | Move selection up / down |
+| `ENTER` | Any menu | Confirm selection |
+| `ESC` or `Ctrl+C` | Component menu | Go to exit menu |
+| `ESC` or `Ctrl+C` | Parameter menu | Go back to component menu |
+| `ESC` or `Ctrl+C` | Value input | Cancel edit, keep previous value |
+| `ENTER` | Value input | Save new value |
+
+---
+
+## 9. TOML configuration file format
+
+The configurator reads any TOML file that follows the `[components.<name>]` section structure. This lets you create custom config files for your own components or a subset of parameters.
+
+### Minimal example
+
+```toml
+[components.myapp]
+APP_HOST = { label = "Application host", initialValue = "localhost", userInputValue = "" }
+APP_PORT = { label = "Application port", initialValue = "8080", userInputValue = "" }
+```
+
+### Full parameter syntax
+
+```toml
+KEY = {
+  label          = "Human-readable label shown in the UI",
+  initialValue   = "Default value pre-filled from the template",
+  userInputValue = "Value entered by the user (empty until edited)",
+  isMandatory    = false,
+  type           = "string",
+  hint           = "Optional multi-line guidance shown before the input prompt"
+}
+```
+
+| Field | Required | Values | Description |
+|-------|----------|--------|-------------|
+| `label` | no | string | Text shown in the selection list and input prompt |
+| `initialValue` | no | string | Template default; shown as the pre-filled value on first edit |
+| `userInputValue` | no | string | The value actually used; updated every time you save |
+| `isMandatory` | no | `true` / `false` | If `true`, the prompt rejects an empty submission |
+| `type` | no | `"string"` / `"password"` | `"password"` masks the input field |
+| `hint` | no | string | Shown as a note box before the input prompt; use `\n` for line breaks |
+
+### Simplified syntax
+
+A bare string value sets the `initialValue` with no label:
+
+```toml
+APP_HOST = "localhost"
+```
+
+### Disabling a parameter
+
+Prefix the key with `#` to make the parser skip it:
+
+```toml
+"#DISABLED_PARAM" = { label = "Not shown", initialValue = "", userInputValue = "" }
+```
+
+This is used in `all-config-parameters.toml` to document known ops keys that are not yet wired into the interactive UI.
diff --git a/util/config/configurator/edit-loop.ts b/util/config/configurator/edit-loop.ts
new file mode 100644
index 00000000..102b7249
--- /dev/null
+++ b/util/config/configurator/edit-loop.ts
@@ -0,0 +1,280 @@
+import { select, isCancel, cancel, text, password, note } from '@clack/prompts';
+import { PartialConfigManager } from './partial-config-manager';
+import { ConfigDisplay } from './config-display';
+import { ExitHandler } from './exit-handler';
+import type { Result } from './types';
+import {EditableComponentConfig, EditableConfigParameter} from "./types-core.ts";
+
+/**
+ * Manages the interactive editing loop for configuration.
+ * 
+ * Provides the main workflow:
+ * 1. Display list of components
+ * 2. User selects component with arrows + ENTER
+ * 3. Display parameters table
+ * 4. User selects parameter to edit
+ * 5. Edit parameter value
+ * 6. Save changes
+ * 7. Loop until user exits
+ */
+export class EditLoop {
+  private _configManager: PartialConfigManager;
+  private _exitHandler: ExitHandler;
+  private _running: boolean;
+
+  /**
+   * Creates a new EditLoop instance.
+   * 
+   * @param configManager - The configuration manager instance
+   */
+  constructor(configManager: PartialConfigManager) {
+    this._configManager = configManager;
+    this._exitHandler = new ExitHandler(configManager);
+    this._running = false;
+  }
+
+  /**
+   * Starts the interactive editing loop.
+   * 
+   * Continues until user chooses to exit.
+   */
+  async start(): Promise<Result<void, string>> {
+    this._running = true;
+
+    while (this._running) {
+      const result = await this.selectComponent();
+
+      if (!result.success) {
+        if (result.error === 'User cancelled') {
+          this._running = false;
+          continue;
+        }
+        return { success: false, error: result.error };
+      }
+
+      if (!result.data) {
+        this._running = false;
+        continue;
+      }
+
+      await this.editComponent(result.data);
+    }
+
+    return await this._exitHandler.handleExit();
+  }
+
+  /**
+   * Displays component selection prompt.
+   *
+   * User can navigate with ↑/↓ arrows and select with ENTER. Pressing ESC or CTRL+C cancels the selection.
+   *
+   * @returns Result with selected component name or error
+   * 
+   * Result can be:
+   * - { success: false, error: 'No components found in configuration' } when no components are found in the given configuration.
+   * - { success: false, error: 'User cancelled' } when user cancels the selection
+   * - { success: true, data: 'ComponentName' } when a component is selected
+   * - { success: true, data: null } when user chooses to exit
+   * - { success: false, error: 'Error message' } on failure or cancellation
+   */
+  private async selectComponent(): Promise<Result<string | null, string>> {
+    const config = this._configManager.getConfig();
+    const components = config.getAllComponents();
+
+    if (components.length === 0) {
+      return {
+        success: false,
+        error: 'No components found in configuration',
+      };
+    }
+
+    const options = components.map((comp) => {
+      const paramCount = comp.getParameterCount();
+      return {
+        label: `${comp.getName()} (${paramCount} parameters)`,
+        value: comp.getName(),
+      };
+    });
+
+    options.push({ label: 'Exit Configuration', value: '__exit__' });
+
+    const selected = await select({
+      message: 'Select a component to configure (use ↑/↓ arrows, ENTER to select):',
+      options,
+    });
+
+    if (isCancel(selected)) {
+      return { success: false, error: 'User cancelled' };
+    }
+
+    if (selected === '__exit__') {
+      return { success: true, data: null };
+    }
+
+    return { success: true, data: selected as string };
+  }
+
+  /**
+   * Handles editing of a specific component.
+   * 
+   * @param componentName - Name of the component to edit
+   */
+  private async editComponent(componentName: string): Promise<void> {
+    const component = this._configManager.getConfig().getComponent(componentName);
+
+    if (!component) {
+      console.error(`Component '${componentName}' not found`);
+      return;
+    }
+
+    let editingComponent = true;
+
+    while (editingComponent) {
+      ConfigDisplay.clearScreen();
+      ConfigDisplay.displayParameterTable(componentName, component.getAllParameters());
+
+      const result = await this.selectParameter(component);
+
+      if (!result.success) {
+        editingComponent = false;
+        continue;
+      }
+
+      if (!result.data) {
+        editingComponent = false;
+        continue;
+      }
+
+      await this.editParameter(component, result.data);
+    }
+  }
+
+  /**
+   * Displays parameter selection prompt for a component.
+   * 
+   * @param component - The component to select parameters from
+   * @returns Result with selected parameter key or error
+   */
+  private async selectParameter(
+    component: EditableComponentConfig
+  ): Promise<Result<string | null, string>> {
+    const parameters = component.getAllParameters();
+
+    if (parameters.length === 0) {
+      return { success: false, error: 'No parameters in this component' };
+    }
+
+    const options = parameters.map((param) => {
+      const raw = param.getValue();
+      const currentValue = param.getType() === 'password'
+        ? (raw ? '***' : '<EMPTY>')
+        : (raw || '<EMPTY>');
+      return {
+        label: `${param.getLabel()} = ${currentValue}`,
+        value: param.getKey(),
+      };
+    });
+
+    options.push({ label: '← Back to components', value: '__back__' });
+
+    const selected = await select({
+      message: 'Select a parameter to edit (use ↑/↓ arrows, ENTER to select, ESC or CTRL+C to Cancel):',
+      options,
+    });
+
+    if (isCancel(selected)) {
+      return { success: false, error: 'User cancelled' };
+    }
+
+    if (selected === '__back__') {
+      return { success: true, data: null };
+    }
+
+    return { success: true, data: selected as string };
+  }
+
+  /**
+   * Handles editing of a specific parameter.
+   * 
+   * @param component - The component containing the parameter
+   * @param paramKey - The parameter key to edit
+   */
+  private async editParameter(
+    component: EditableComponentConfig,
+    paramKey: string
+  ): Promise<void> {
+    const parameter = component.getParameter(paramKey);
+
+    if (!parameter) {
+      console.error(`Parameter '${paramKey}' not found`);
+      return;
+    }
+
+    // ConfigDisplay.displayParameterDetail(parameter);
+
+    // note("Type new value and press ENTER to confirm\nPress CTRL+C or ESC to cancel. The previous value will be preserved if cancelled\n","Instructions")
+
+    const currentValue = parameter.getUserInputValue() || parameter.getInitialValue();
+    const isPassword = parameter.getType() === 'password';
+    const hint = parameter.getHint();
+
+    if (hint) {
+      note(hint, "What is this parameter for?");
+    }
+
+    let value: string | null;
+
+    const promptInput = isPassword
+      ? await password({
+          //message: `Enter new value for ${paramKey}:`,
+          message: `Enter new value for ${parameter.getLabel()}:`,
+          validate: (v) => {
+            if (parameter.isMandatory() && !v) return 'this field is mandatory and cannot be empty';
+            return undefined;
+          },
+        })
+      : await text({
+          message: `Enter new value for ${parameter.getLabel()}:`,
+          initialValue: currentValue,
+          placeholder: currentValue || 'Enter value...',
+          validate: (v) => {
+            if (parameter.isMandatory() && !v) return 'this field is mandatory and cannot be empty';
+            return undefined;
+          },
+        });
+
+    if (isCancel(promptInput)) {
+      console.log('\nCancelled - value unchanged.\n');
+      return;
+    }
+    value = promptInput as string;
+
+    const result = await this._configManager.setParameter(
+      component.getName(),
+      paramKey,
+      value
+    );
+
+    if (result.success) {
+      console.log(`\n✓ Updated ${paramKey} to: ${isPassword ? '***' : value}\n`);
+    } else {
+      console.error(`\n✗ Failed to update ${paramKey}: ${result.error}\n`);
+    }
+  }
+
+  /**
+   * Stops the editing loop.
+   */
+  stop(): void {
+    this._running = false;
+  }
+
+  /**
+   * Checks if the editing loop is running.
+   * 
+   * @returns true if running, false otherwise
+   */
+  isRunning(): boolean {
+    return this._running;
+  }
+}
diff --git a/util/config/configurator/exit-handler.ts b/util/config/configurator/exit-handler.ts
new file mode 100644
index 00000000..371405ac
--- /dev/null
+++ b/util/config/configurator/exit-handler.ts
@@ -0,0 +1,245 @@
+import { $ } from 'bun';
+import { select, isCancel, cancel } from '@clack/prompts';
+import { PartialConfigManager } from './partial-config-manager';
+import { ConfigDisplay } from './config-display';
+import type { Result } from './types';
+
+const OPS = process.env.OPS || 'ops';
+
+/**
+ * Handles application exit workflow with configuration options.
+ * 
+ * Provides options to:
+ * - Apply configuration directly to ops
+ * - Save configuration to a file
+ * - Discard all changes
+ */
+export class ExitHandler {
+  private _configManager: PartialConfigManager;
+
+  /**
+   * Creates a new ExitHandler instance.
+   * 
+   * @param configManager - The configuration manager instance
+   */
+  constructor(configManager: PartialConfigManager) {
+    this._configManager = configManager;
+  }
+
+  /**
+   * Handles the exit workflow by presenting options to the user.
+   * 
+   * @returns Result indicating success or failure with error message
+   */
+  async handleExit(): Promise<Result<void, string>> {
+    const hasModifications = this._configManager.hasModifications();
+
+    if (!hasModifications) {
+      console.log('\nNo modifications to apply.\n');
+      await this._configManager.clear();
+      return { success: true };
+    }
+
+    const modifications = this._configManager.getModifiedParameters();
+    ConfigDisplay.displayModifications(modifications);
+
+    const action = await select({
+      message: 'What would you like to do with your changes?',
+      options: [
+        { label: 'Apply configuration directly', value: 'apply' },
+        { label: 'Save configuration to file', value: 'save' },
+        { label: 'Discard all changes', value: 'discard' },
+      ],
+    });
+
+    if (isCancel(action)) {
+      return { success: true };
+    }
+
+    switch (action) {
+      case 'apply':
+        return await this.applyConfiguration();
+      case 'save':
+        return await this.saveConfigurationToFile();
+      case 'discard':
+        return await this.discardChanges();
+      default:
+        return { success: true };
+    }
+  }
+
+  /**
+   * Applies configuration directly to ops by executing ops -config KEY=VALUE commands.
+   * 
+   * @returns Result indicating success or failure
+   */
+  private async applyConfiguration(): Promise<Result<void, string>> {
+    const modifications = this._configManager.getModifiedParameters();
+
+    if (modifications.length === 0) {
+      console.log('No modifications to apply.\n');
+      return { success: true };
+    }
+
+    console.log('\nApplying configuration to ops...\n');
+
+    let appliedCount = 0;
+    let errorCount = 0;
+
+    for (const mod of modifications) {
+      for (const param of mod.parameters) {
+        const key = param.getKey();
+        const value = param.getValue();
+
+        if (!value || value === '') {
+          console.log(`Skipping ${key} (empty value)`);
+          continue;
+        }
+
+        try {
+          const { exitCode, stderr } = await $`${OPS} -config ${key}=${value}`.nothrow().quiet();
+
+          if (exitCode === 0) {
+            console.log(`✓ Set ${key}=${value}`);
+            appliedCount++;
+          } else {
+            console.error(`✗ Failed to set ${key}: ${stderr.toString()}`);
+            errorCount++;
+          }
+        } catch (error) {
+          console.error(`✗ Error setting ${key}: ${error}`);
+          errorCount++;
+        }
+      }
+    }
+
+    console.log(`\nApplied ${appliedCount} configuration(s).`);
+    if (errorCount > 0) {
+      console.log(`Failed to apply ${errorCount} configuration(s).\n`);
+    } else {
+      console.log();
+    }
+
+    if (errorCount === 0) {
+      await this._configManager.clear();
+      return { success: true };
+    } else {
+      return {
+        success: false,
+        error: `Failed to apply ${errorCount} configuration(s)`,
+      };
+    }
+  }
+
+  /**
+   * Saves configuration to a TOML file that can be used later.
+   * 
+   * @returns Result indicating success or failure
+   */
+  private async saveConfigurationToFile(): Promise<Result<void, string>> {
+    const timestamp = new Date().toISOString().replace(/[:.]/g, '-').substring(0, 19);
+    const outputFileName = `ops-config-${timestamp}.toml`;
+
+    try {
+      const config = this._configManager.getConfig();
+      const tomlData = this.serializeConfigToToml(config);
+
+      await Bun.write(outputFileName, tomlData);
+
+      console.log(`\n✓ Configuration saved to: ${outputFileName}\n`);
+
+      const shouldClear = await select({
+        message: 'Clear partial configuration?',
+        options: [
+          { label: 'Yes', value: 'yes' },
+          { label: 'No', value: 'no' },
+        ],
+      });
+
+      if (!isCancel(shouldClear) && shouldClear === 'yes') {
+        await this._configManager.clear();
+        console.log('Partial configuration cleared.\n');
+      }
+
+      return { success: true };
+    } catch (error) {
+      return {
+        success: false,
+        error: `Failed to save configuration: ${error}`,
+      };
+    }
+  }
+
+  /**
+   * Discards all changes by clearing the partial configuration.
+   * 
+   * @returns Result indicating success or failure
+   */
+  private async discardChanges(): Promise<Result<void, string>> {
+    const clearResult = await this._configManager.clear();
+
+    if (clearResult.success) {
+      console.log('\n✓ All changes discarded.\n');
+    }
+
+    return clearResult;
+  }
+
+  /**
+   * Serializes configuration to TOML format for file output.
+   * 
+   * @param config - The configuration to serialize
+   * @returns TOML formatted string
+   */
+  private serializeConfigToToml(config: any): string {
+    let toml = '# OpenServerless Configuration\n';
+    toml += `# Generated: ${new Date().toISOString()}\n\n`;
+
+    const components = config.getAllComponents();
+    for (const component of components) {
+      const parameters = component.getAllParameters();
+      const modifiedParams = parameters.filter(
+        (p: any) => p.getValue() !== '' && p.getValue() !== p.getInitialValue()
+      );
+
+      if (modifiedParams.length === 0) {
+        continue;
+      }
+
+      toml += `[components.${component.getName()}]\n`;
+
+      for (const param of modifiedParams) {
+        const key = param.getKey();
+        const value = param.getValue();
+        const label = param.getLabel();
+        const escapedValue = this.escapeTomlValue(value);
+
+        if (label) {
+          const escapedLabel = this.escapeTomlValue(label);
+          toml += `${key}={label="${escapedLabel}", userInputValue="${escapedValue}"}\n`;
+        } else {
+          toml += `${key}="${escapedValue}"\n`;
+        }
+      }
+
+      toml += '\n';
+    }
+
+    return toml;
+  }
+
+  /**
+   * Escapes a value for TOML format.
+   * 
+   * @param value - The value to escape
+   * @returns Escaped string safe for TOML
+   */
+  private escapeTomlValue(value: string): string {
+    return value
+      .replace(/\\/g, '\\\\')
+      .replace(/"/g, '\\"')
+      .replace(/\n/g, '\\n')
+      .replace(/\r/g, '\\r')
+      .replace(/\t/g, '\\t');
+  }
+}
diff --git a/util/config/configurator/package-lock.json b/util/config/configurator/package-lock.json
new file mode 100644
index 00000000..da30228d
--- /dev/null
+++ b/util/config/configurator/package-lock.json
@@ -0,0 +1,123 @@
+{
+  "name": "prompt",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "prompt",
+      "dependencies": {
+        "@clack/prompts": "^1.0.1",
+        "toml": "^3.0.0"
+      },
+      "devDependencies": {
+        "@types/bun": "latest"
+      },
+      "peerDependencies": {
+        "typescript": "^5.0.0"
+      }
+    },
+    "node_modules/@clack/core": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/@clack/core/-/core-1.3.0.tgz",
+      "integrity": "sha512-xJPHpAmEQUBrXSLx0gF+q5K/IyihXpsHZcha+jB+tyahsKRK3Dxo4D0coZDewHo12NhiuzC3dTtMPbm53GEAAA==",
+      "dependencies": {
+        "fast-wrap-ansi": "^0.2.0",
+        "sisteransi": "^1.0.5"
+      },
+      "engines": {
+        "node": ">= 20.12.0"
+      }
+    },
+    "node_modules/@clack/prompts": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/@clack/prompts/-/prompts-1.3.0.tgz",
+      "integrity": "sha512-GgcWwRCs/xPtaqlMy8qRhPnZf9vlWcWZNHAitnVQ3yk7JmSralSiq5q07yaffYE8SogtDm7zFeKccx1QNVARpw==",
+      "dependencies": {
+        "@clack/core": "1.3.0",
+        "fast-string-width": "^3.0.2",
+        "fast-wrap-ansi": "^0.2.0",
+        "sisteransi": "^1.0.5"
+      },
+      "engines": {
+        "node": ">= 20.12.0"
+      }
+    },
+    "node_modules/@types/bun": {
+      "version": "1.3.13",
+      "resolved": "https://registry.npmjs.org/@types/bun/-/bun-1.3.13.tgz",
+      "integrity": "sha512-9fqXWk5YIHGGnUau9TEi+qdlTYDAnOj+xLCmSTwXfAIqXr2x4tytJb43E9uCvt09zJURKXwAtkoH4nLQfzeTXw==",
+      "dev": true,
+      "dependencies": {
+        "bun-types": "1.3.13"
+      }
+    },
+    "node_modules/@types/node": {
+      "version": "25.6.0",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-25.6.0.tgz",
+      "integrity": "sha512-+qIYRKdNYJwY3vRCZMdJbPLJAtGjQBudzZzdzwQYkEPQd+PJGixUL5QfvCLDaULoLv+RhT3LDkwEfKaAkgSmNQ==",
+      "dev": true,
+      "dependencies": {
+        "undici-types": "~7.19.0"
+      }
+    },
+    "node_modules/bun-types": {
+      "version": "1.3.13",
+      "resolved": "https://registry.npmjs.org/bun-types/-/bun-types-1.3.13.tgz",
+      "integrity": "sha512-QXKeHLlOLqQX9LgYaHJfzdBaV21T63HhFJnvuRCcjZiaUDpbs5ED1MgxbMra71CsryN/1dAoXuJJJwIv/2drVA==",
+      "dev": true,
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
+    "node_modules/fast-string-truncated-width": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/fast-string-truncated-width/-/fast-string-truncated-width-3.0.3.tgz",
+      "integrity": "sha512-0jjjIEL6+0jag3l2XWWizO64/aZVtpiGE3t0Zgqxv0DPuxiMjvB3M24fCyhZUO4KomJQPj3LTSUnDP3GpdwC0g=="
+    },
+    "node_modules/fast-string-width": {
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/fast-string-width/-/fast-string-width-3.0.2.tgz",
+      "integrity": "sha512-gX8LrtNEI5hq8DVUfRQMbr5lpaS4nMIWV+7XEbXk2b8kiQIizgnlr12B4dA3ZEx3308ze0O4Q1R+cHts8kyUJg==",
+      "dependencies": {
+        "fast-string-truncated-width": "^3.0.2"
+      }
+    },
+    "node_modules/fast-wrap-ansi": {
+      "version": "0.2.0",
+      "resolved": "https://registry.npmjs.org/fast-wrap-ansi/-/fast-wrap-ansi-0.2.0.tgz",
+      "integrity": "sha512-rLV8JHxTyhVmFYhBJuMujcrHqOT2cnO5Zxj37qROj23CP39GXubJRBUFF0z8KFK77Uc0SukZUf7JZhsVEQ6n8w==",
+      "dependencies": {
+        "fast-string-width": "^3.0.2"
+      }
+    },
+    "node_modules/sisteransi": {
+      "version": "1.0.5",
+      "resolved": "https://registry.npmjs.org/sisteransi/-/sisteransi-1.0.5.tgz",
+      "integrity": "sha512-bLGGlR1QxBcynn2d5YmDX4MGjlZvy2MRBDRNHLJ8VI6l6+9FUiyTFNJ0IveOSP0bcXgVDPRcfGqA0pjaqUpfVg=="
+    },
+    "node_modules/toml": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/toml/-/toml-3.0.0.tgz",
+      "integrity": "sha512-y/mWCZinnvxjTKYhJ+pYxwD0mRLVvOtdS2Awbgxln6iEnt4rk0yBxeSBHkGJcPucRiG0e55mwWp+g/05rsrd6w=="
+    },
+    "node_modules/typescript": {
+      "version": "5.9.3",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
+      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
+      "peer": true,
+      "bin": {
+        "tsc": "bin/tsc",
+        "tsserver": "bin/tsserver"
+      },
+      "engines": {
+        "node": ">=14.17"
+      }
+    },
+    "node_modules/undici-types": {
+      "version": "7.19.2",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.19.2.tgz",
+      "integrity": "sha512-qYVnV5OEm2AW8cJMCpdV20CDyaN3g0AjDlOGf1OW4iaDEx8MwdtChUp4zu4H0VP3nDRF/8RKWH+IPp9uW0YGZg==",
+      "dev": true
+    }
+  }
+}
diff --git a/util/config/configurator/package.json b/util/config/configurator/package.json
index bbd833cf..606eeba0 100644
--- a/util/config/configurator/package.json
+++ b/util/config/configurator/package.json
@@ -4,6 +4,7 @@
   "type": "module",
   "scripts": {
     "start": "bun index.ts",
+    "startdebug": "bun --inspect-wait index.ts",
     "test": "bun test tests/index.test.ts",
     "build": "bun build --target=bun index.ts > configurator.js && mv configurator.js ../configurator.js"
   },
@@ -14,6 +15,7 @@
     "typescript": "^5.0.0"
   },
   "dependencies": {
-    "@clack/prompts": "^0.7.0"
+    "@clack/prompts": "^1.0.1",
+    "toml": "^3.0.0"
   }
 }
diff --git a/util/config/configurator/partial-config-manager.ts b/util/config/configurator/partial-config-manager.ts
new file mode 100644
index 00000000..53536cdc
--- /dev/null
+++ b/util/config/configurator/partial-config-manager.ts
@@ -0,0 +1,424 @@
+import type { Result } from './types';
+import {EditableComponentConfig, EditableConfigParameter} from "./types-core.ts";
+import {EditableOpsConfigFile} from "./types-config-file.ts";
+
+/**
+ * Manages partial configuration state with persistence to .tmp file.
+ * 
+ * This class provides an abstraction layer for reading and writing
+ * partial configuration, enabling users to continue where they left off
+ * after exiting the application.
+ */
+export class PartialConfigManager {
+  private _configFilePath: string;
+  private _tmpFilePath: string;
+  private _config: EditableOpsConfigFile;
+
+  /**
+   * Creates a new PartialConfigManager instance.
+   * 
+   * @param configFilePath - Path to the main configuration file
+   */
+  constructor(configFilePath: string) {
+    this._configFilePath = configFilePath;
+    this._tmpFilePath = configFilePath.replace(/\.toml$/, '.tmp');
+    this._config = new EditableOpsConfigFile();
+  }
+
+  /**
+   * Returns the path to the temporary file.
+   * 
+   * @returns The .tmp file path
+   */
+  getTmpFilePath(): string {
+    return this._tmpFilePath;
+  }
+
+  /**
+   * Returns the path to the main configuration file.
+   * 
+   * @returns The configuration file path
+   */
+  getConfigFilePath(): string {
+    return this._configFilePath;
+  }
+
+  /**
+   * Checks if a partial configuration file exists.
+   * 
+   * @returns true if .tmp file exists, false otherwise
+   */
+  async hasPartialConfig(): Promise<boolean> {
+    const file = Bun.file(this._tmpFilePath);
+    return await file.exists();
+  }
+
+  /**
+   * Loads configuration from the .tmp file if it exists,
+   * otherwise loads from the main configuration file.
+   * 
+   * @returns Result containing the loaded configuration or error message
+   */
+  async load(): Promise<Result<EditableOpsConfigFile, string>> {
+    try {
+      const hasPartial = await this.hasPartialConfig();
+      const filePathToLoad = hasPartial ? this._tmpFilePath : this._configFilePath;
+
+      const file = Bun.file(filePathToLoad);
+      if (!(await file.exists())) {
+        return {
+          success: false,
+          error: `Configuration file not found: ${filePathToLoad}`,
+        };
+      }
+
+      const content = await file.text();
+      const rawData = await this.parseTomlContent(content);
+
+      if (!rawData) {
+        return {
+          success: false,
+          error: `Failed to parse TOML file: ${filePathToLoad}`,
+        };
+      }
+
+      this._config = this.extractComponents(rawData);
+
+      return {
+        success: true,
+        data: this._config,
+      };
+    } catch (error) {
+      return {
+        success: false,
+        error: `Error loading configuration: ${error}`,
+      };
+    }
+  }
+
+  /**
+   * Parses TOML content directly without caching.
+   * 
+   * @param content - Raw TOML content
+   * @returns Parsed TOML data as unknown object, or null on failure
+   */
+  private async parseTomlContent(content: string): Promise<unknown> {
+    try {
+      const toml = await import('toml');
+      return toml.parse(content);
+    } catch (error) {
+      return null;
+    }
+  }
+
+  /**
+   * Saves the current configuration state to the .tmp file.
+   * 
+   * @returns Result indicating success or failure with error message
+   */
+  async save(): Promise<Result<void, string>> {
+    try {
+      const tomlData = this.serializeToToml();
+      await Bun.write(this._tmpFilePath, tomlData);
+
+      return { success: true };
+    } catch (error) {
+      return {
+        success: false,
+        error: `Error saving configuration: ${error}`,
+      };
+    }
+  }
+
+  /**
+   * Clears the partial configuration by deleting the .tmp file.
+   * 
+   * @returns Result indicating success or failure with error message
+   */
+  async clear(): Promise<Result<void, string>> {
+    try {
+      const file = Bun.file(this._tmpFilePath);
+      if (await file.exists()) {
+        const { $ } = await import('bun');
+        await $`rm ${this._tmpFilePath}`.quiet();
+      }
+      return { success: true };
+    } catch (error) {
+      return {
+        success: false,
+        error: `Error clearing partial configuration: ${error}`,
+      };
+    }
+  }
+
+  /**
+   * Returns the current configuration state.
+   * 
+   * @returns The editable configuration
+   */
+  getConfig(): EditableOpsConfigFile {
+    return this._config;
+  }
+
+  /**
+   * Retrieves a parameter from a specific component.
+   * 
+   * @param componentName - Name of the component
+   * @param key - Parameter key
+   * @returns The parameter if found, undefined otherwise
+   */
+  getParameter(componentName: string, key: string): EditableConfigParameter | undefined {
+    const component = this._config.getComponent(componentName);
+    if (!component) {
+      return undefined;
+    }
+    return component.getParameter(key);
+  }
+
+  /**
+   * Sets the user input value for a parameter.
+   * 
+   * Updates the parameter and automatically saves to the .tmp file.
+   * Tracks the previous value in previousUserInputValue.
+   * 
+   * @param componentName - Name of the component
+   * @param key - Parameter key
+   * @param value - New user input value
+   * @returns Result indicating success or failure
+   */
+  async setParameter(
+    componentName: string,
+    key: string,
+    value: string
+  ): Promise<Result<void, string>> {
+    const parameter = this.getParameter(componentName, key);
+    if (!parameter) {
+      return {
+        success: false,
+        error: `Parameter '${key}' not found in component '${componentName}'`,
+      };
+    }
+
+    parameter.updateUserInputValue(value);
+    
+    const saveResult = await this.save();
+    if (!saveResult.success) {
+      return saveResult;
+    }
+
+    return { success: true };
+  }
+
+  /**
+   * Reverts a parameter to its previous user input value.
+   * 
+   * @param componentName - Name of the component
+   * @param key - Parameter key
+   * @returns Result indicating success or failure
+   */
+  async revertParameter(
+    componentName: string,
+    key: string
+  ): Promise<Result<void, string>> {
+    const parameter = this.getParameter(componentName, key);
+    if (!parameter) {
+      return {
+        success: false,
+        error: `Parameter '${key}' not found in component '${componentName}'`,
+      };
+    }
+
+    const reverted = parameter.revertToPrevious();
+    if (!reverted) {
+      return {
+        success: false,
+        error: `No previous value to revert for parameter '${key}'`,
+      };
+    }
+
+    const saveResult = await this.save();
+    if (!saveResult.success) {
+      return saveResult;
+    }
+
+    return { success: true };
+  }
+
+  /**
+   * Extracts all components from parsed TOML data.
+   * 
+   * @param rawData - Parsed TOML data
+   * @returns EditableOpsConfigFile containing all extracted components
+   */
+  private extractComponents(rawData: unknown): EditableOpsConfigFile {
+    const config = new EditableOpsConfigFile();
+
+    if (typeof rawData !== 'object' || rawData === null) {
+      return config;
+    }
+
+    const data = rawData as Record<string, unknown>;
+
+    if (!data.components || typeof data.components !== 'object') {
+      return config;
+    }
+
+    const components = data.components as Record<string, unknown>;
+
+    for (const [componentName, componentData] of Object.entries(components)) {
+      const component = this.parseComponentSection(componentName, componentData);
+      if (component.getParameterCount() > 0) {
+        config.addComponent(component);
+      }
+    }
+
+    return config;
+  }
+
+  /**
+   * Parses a single component section from TOML.
+   * 
+   * @param sectionName - Name of the component section
+   * @param sectionData - Key-value pairs in this section
+   * @returns EditableComponentConfig with all parsed parameters
+   */
+  private parseComponentSection(sectionName: string, sectionData: unknown): EditableComponentConfig {
+    const component = new EditableComponentConfig(sectionName);
+
+    if (typeof sectionData !== 'object' || sectionData === null) {
+      return component;
+    }
+
+    const data = sectionData as Record<string, unknown>;
+
+    for (const [key, value] of Object.entries(data)) {
+      if (key.startsWith('#')) {
+        continue;
+      }
+
+      const parameter = this.parseParameter(key, value);
+      component.addParameter(parameter);
+    }
+
+    return component;
+  }
+
+  /**
+   * Parses a single parameter value from TOML.
+   * 
+   * @param key - The parameter key
+   * @param value - The parameter value
+   * @returns EditableConfigParameter instance
+   */
+  private parseParameter(key: string, value: unknown): EditableConfigParameter {
+    if (typeof value === 'string') {
+      return new EditableConfigParameter(key, '', value, '', '', false);
+    }
+
+    if (typeof value === 'object' && value !== null) {
+      const data = value as Record<string, unknown>;
+      const label = typeof data.label === 'string' ? data.label : '';
+      const initialValue = typeof data.initialValue === 'string' ? data.initialValue : '';
+      const userInputValue = typeof data.userInputValue === 'string' ? data.userInputValue : '';
+      const previousUserInputValue = typeof data.previousUserInputValue === 'string'
+        ? data.previousUserInputValue : '';
+      const isMandatory = typeof data.isMandatory === 'boolean' ? data.isMandatory : false;
+      const type = data.type === 'password' ? 'password' : 'string';
+      const hint = typeof data.hint === 'string' ? data.hint : undefined;
+
+      return new EditableConfigParameter(key, label, initialValue, userInputValue, previousUserInputValue, isMandatory, type, hint);
+    }
+
+    return new EditableConfigParameter(key, '', '', '', '', false);
+  }
+
+  /**
+   * Serializes the editable configuration to TOML format.
+   * 
+   * Format: KEY={label="<LABEL>", initialValue="<VALUE>", userInputValue="<VALUE>", previousUserInputValue="<VALUE>"}
+   * 
+   * @returns TOML formatted string
+   */
+  private serializeToToml(): string {
+    let toml = '# Partial configuration file\n';
+    toml += '# Auto-generated by the ops configurator\n\n';
+
+    const components = this._config.getAllComponents();
+    for (const component of components) {
+      toml += `[components.${component.getName()}]\n`;
+
+      const parameters = component.getAllParameters();
+      for (const param of parameters) {
+        const label = this.escapeTomlValue(param.getLabel());
+        const initialValue = this.escapeTomlValue(param.getInitialValue());
+        const userInputValue = this.escapeTomlValue(param.getUserInputValue());
+        const previousUserInputValue = this.escapeTomlValue(param.getPreviousUserInputValue());
+
+        const hintPart = param.getHint() ? `, hint="${this.escapeTomlValue(param.getHint()!)}"` : '';
+        toml += `${param.getKey()}={label="${label}", initialValue="${initialValue}", userInputValue="${userInputValue}", previousUserInputValue="${previousUserInputValue}", isMandatory=${param.isMandatory()}, type="${param.getType()}"${hintPart}}\n`;
+      }
+
+      toml += '\n';
+    }
+
+    return toml;
+  }
+
+  /**
+   * Escapes a value for TOML format.
+   * 
+   * @param value - The value to escape
+   * @returns Escaped string safe for TOML
+   */
+  private escapeTomlValue(value: string): string {
+    return value
+      .replace(/\\/g, '\\\\')
+      .replace(/"/g, '\\"')
+      .replace(/\n/g, '\\n')
+      .replace(/\r/g, '\\r')
+      .replace(/\t/g, '\\t');
+  }
+
+  /**
+   * Checks if there are any modifications since the initial load.
+   * 
+   * @returns true if any parameter has been modified, false otherwise
+   */
+  hasModifications(): boolean {
+    const components = this._config.getAllComponents();
+    for (const component of components) {
+      const parameters = component.getAllParameters();
+      for (const param of parameters) {
+        if (param.getUserInputValue() !== '' || param.getPreviousUserInputValue() !== '') {
+          return true;
+        }
+      }
+    }
+    return false;
+  }
+
+  /**
+   * Returns all modified parameters across all components.
+   * 
+   * @returns Array of objects containing component name and modified parameters
+   */
+  getModifiedParameters(): Array<{ component: string; parameters: EditableConfigParameter[] }> {
+    const modified: Array<{ component: string; parameters: EditableConfigParameter[] }> = [];
+
+    const components = this._config.getAllComponents();
+    for (const component of components) {
+      const modifiedParams = component.getAllParameters().filter(
+        param => param.getUserInputValue() !== '' || param.getPreviousUserInputValue() !== ''
+      );
+
+      if (modifiedParams.length > 0) {
+        modified.push({
+          component: component.getName(),
+          parameters: modifiedParams,
+        });
+      }
+    }
+
+    return modified;
+  }
+}
diff --git a/util/config/configurator/tests/config-parser.test.ts b/util/config/configurator/tests/config-parser.test.ts
new file mode 100644
index 00000000..1692cb5d
--- /dev/null
+++ b/util/config/configurator/tests/config-parser.test.ts
@@ -0,0 +1,323 @@
+import { expect, test, describe } from 'bun:test';
+import { ConfigParser } from '../config-parser';
+import { join } from 'path';
+
+const fixturesDir = join(import.meta.dir, 'fixtures');
+
+// ─── parseParameter ──────────────────────────────────────────────────────────
+
+describe('ConfigParser.parseParameter', () => {
+    const parser = new ConfigParser('');
+
+    test('string value uses value as initialValue', () => {
+        const param = parser.parseParameter('MY_KEY', 'hello');
+        expect(param.getKey()).toBe('MY_KEY');
+        expect(param.getInitialValue()).toBe('hello');
+        expect(param.getLabel()).toBe('');
+        expect(param.getUserInputValue()).toBe('');
+        expect(param.isMandatory()).toBe(false);
+        expect(param.getType()).toBe('string');
+    });
+
+    test('empty string value produces empty initialValue', () => {
+        const param = parser.parseParameter('EMPTY', '');
+        expect(param.getInitialValue()).toBe('');
+        expect(param.isMandatory()).toBe(false);
+    });
+
+    test('object value maps all fields', () => {
+        const param = parser.parseParameter('DB_HOST', {
+            label: 'Database host',
+            initialValue: '127.0.0.1',
+            userInputValue: 'prod.db.local',
+            isMandatory: false,
+        });
+        expect(param.getKey()).toBe('DB_HOST');
+        expect(param.getLabel()).toBe('Database host');
+        expect(param.getInitialValue()).toBe('127.0.0.1');
+        expect(param.getUserInputValue()).toBe('prod.db.local');
+        expect(param.isMandatory()).toBe(false);
+        expect(param.getType()).toBe('string');
+    });
+
+    test('object with isMandatory true', () => {
+        const param = parser.parseParameter('SECRET', {
+            label: 'Secret key',
+            initialValue: '',
+            userInputValue: '',
+            isMandatory: true,
+        });
+        expect(param.isMandatory()).toBe(true);
+    });
+
+    test('object with type password', () => {
+        const param = parser.parseParameter('API_SECRET', {
+            label: 'API Secret',
+            initialValue: '',
+            userInputValue: '',
+            type: 'password',
+        });
+        expect(param.getType()).toBe('password');
+    });
+
+    test('object with type string is explicit string', () => {
+        const param = parser.parseParameter('API_KEY', {
+            label: 'API Key',
+            initialValue: '',
+            userInputValue: '',
+            type: 'string',
+        });
+        expect(param.getType()).toBe('string');
+    });
+
+    test('object with unknown type defaults to string', () => {
+        const param = parser.parseParameter('KEY', { type: 'email' });
+        expect(param.getType()).toBe('string');
+    });
+
+    test('object without type defaults to string', () => {
+        const param = parser.parseParameter('KEY', { label: 'Some label' });
+        expect(param.getType()).toBe('string');
+    });
+
+    test('object with missing fields falls back to defaults', () => {
+        const param = parser.parseParameter('KEY', {});
+        expect(param.getLabel()).toBe('');
+        expect(param.getInitialValue()).toBe('');
+        expect(param.getUserInputValue()).toBe('');
+        expect(param.isMandatory()).toBe(false);
+    });
+
+    test('object with non-string label field is ignored', () => {
+        const param = parser.parseParameter('KEY', { label: 42, initialValue: 'x' });
+        expect(param.getLabel()).toBe('');
+        expect(param.getInitialValue()).toBe('x');
+    });
+
+    test('null value returns parameter with empty fields', () => {
+        const param = parser.parseParameter('KEY', null);
+        expect(param.getKey()).toBe('KEY');
+        expect(param.getInitialValue()).toBe('');
+        expect(param.getUserInputValue()).toBe('');
+        expect(param.isMandatory()).toBe(false);
+    });
+
+    test('number value returns parameter with empty fields', () => {
+        const param = parser.parseParameter('NUM_KEY', 42);
+        expect(param.getInitialValue()).toBe('');
+        expect(param.getUserInputValue()).toBe('');
+    });
+
+    test('object with hint field extracts it', () => {
+        const param = parser.parseParameter('VM_TYPE', {
+            label: 'VM instance type',
+            hint: 'Choose an instance with at least 8GB RAM',
+        });
+        expect(param.getHint()).toBe('Choose an instance with at least 8GB RAM');
+    });
+
+    test('object with multiline hint preserves newlines', () => {
+        const param = parser.parseParameter('VM_TYPE', {
+            hint: 'Line one\nLine two\nLine three',
+        });
+        expect(param.getHint()).toBe('Line one\nLine two\nLine three');
+    });
+
+    test('object without hint field returns undefined', () => {
+        const param = parser.parseParameter('NO_HINT', { label: 'No hint here' });
+        expect(param.getHint()).toBeUndefined();
+    });
+
+    test('object with non-string hint is ignored', () => {
+        const param = parser.parseParameter('BAD_HINT', { hint: 42 });
+        expect(param.getHint()).toBeUndefined();
+    });
+
+    test('string value has no hint', () => {
+        const param = parser.parseParameter('PLAIN', 'somevalue');
+        expect(param.getHint()).toBeUndefined();
+    });
+});
+
+// ─── parseComponentSection ───────────────────────────────────────────────────
+
+describe('ConfigParser.parseComponentSection', () => {
+    const parser = new ConfigParser('');
+
+    test('returns component with correct name', () => {
+        const component = parser.parseComponentSection('redis', {});
+        expect(component.getName()).toBe('redis');
+    });
+
+    test('null sectionData returns empty component', () => {
+        const component = parser.parseComponentSection('redis', null);
+        expect(component.getParameterCount()).toBe(0);
+    });
+
+    test('non-object sectionData returns empty component', () => {
+        const component = parser.parseComponentSection('redis', 'invalid');
+        expect(component.getParameterCount()).toBe(0);
+    });
+
+    test('parses string-valued parameters', () => {
+        const component = parser.parseComponentSection('aws', {
+            AWS_REGION: 'us-east-1',
+            AWS_PROFILE: 'default',
+        });
+        expect(component.getParameterCount()).toBe(2);
+        expect(component.getParameter('AWS_REGION')?.getInitialValue()).toBe('us-east-1');
+        expect(component.getParameter('AWS_PROFILE')?.getInitialValue()).toBe('default');
+    });
+
+    test('parses object-valued parameters', () => {
+        const component = parser.parseComponentSection('redis', {
+            REDIS_URL: { label: 'Redis URL', initialValue: 'localhost', userInputValue: '' },
+        });
+        expect(component.getParameterCount()).toBe(1);
+        expect(component.getParameter('REDIS_URL')?.getLabel()).toBe('Redis URL');
+    });
+
+    test('skips keys starting with #', () => {
+        const component = parser.parseComponentSection('aws', {
+            ACTIVE_KEY: 'value',
+            '#COMMENTED_KEY': 'should-be-skipped',
+        });
+        expect(component.getParameterCount()).toBe(1);
+        expect(component.hasParameter('ACTIVE_KEY')).toBe(true);
+        expect(component.hasParameter('#COMMENTED_KEY')).toBe(false);
+    });
+
+    test('adds all parameters to component', () => {
+        const component = parser.parseComponentSection('multi', {
+            KEY1: 'a',
+            KEY2: 'b',
+            KEY3: { label: 'C', initialValue: 'c', userInputValue: '' },
+        });
+        expect(component.getParameterCount()).toBe(3);
+        expect(component.getParameterKeys()).toEqual(expect.arrayContaining(['KEY1', 'KEY2', 'KEY3']));
+    });
+});
+
+// ─── extractComponents ───────────────────────────────────────────────────────
+
+describe('ConfigParser.extractComponents', () => {
+    const parser = new ConfigParser('');
+
+    test('null rawData returns empty config', () => {
+        const config = parser.extractComponents(null);
+        expect(config.getComponentCount()).toBe(0);
+    });
+
+    test('non-object rawData returns empty config', () => {
+        const config = parser.extractComponents('not an object');
+        expect(config.getComponentCount()).toBe(0);
+    });
+
+    test('rawData without components key returns empty config', () => {
+        const config = parser.extractComponents({ other: 'value' });
+        expect(config.getComponentCount()).toBe(0);
+    });
+
+    test('components value that is not an object returns empty config', () => {
+        const config = parser.extractComponents({ components: 'invalid' });
+        expect(config.getComponentCount()).toBe(0);
+    });
+
+    test('extracts a single component with parameters', () => {
+        const config = parser.extractComponents({
+            components: {
+                redis: { REDIS_HOST: 'localhost' },
+            },
+        });
+        expect(config.getComponentCount()).toBe(1);
+        expect(config.hasComponent('redis')).toBe(true);
+        expect(config.getComponent('redis')?.getParameterCount()).toBe(1);
+    });
+
+    test('extracts multiple components', () => {
+        const config = parser.extractComponents({
+            components: {
+                redis: { REDIS_HOST: 'localhost' },
+                postgres: { DB_NAME: 'mydb', DB_HOST: '127.0.0.1' },
+            },
+        });
+        expect(config.getComponentCount()).toBe(2);
+        expect(config.hasComponent('redis')).toBe(true);
+        expect(config.hasComponent('postgres')).toBe(true);
+        expect(config.getComponent('postgres')?.getParameterCount()).toBe(2);
+    });
+
+    test('excludes components with no parameters', () => {
+        const config = parser.extractComponents({
+            components: {
+                empty: {},
+                redis: { REDIS_HOST: 'localhost' },
+            },
+        });
+        expect(config.getComponentCount()).toBe(1);
+        expect(config.hasComponent('redis')).toBe(true);
+        expect(config.hasComponent('empty')).toBe(false);
+    });
+
+    test('component with only commented-out keys is excluded', () => {
+        const config = parser.extractComponents({
+            components: {
+                aws: { '#DISABLED': 'value' },
+            },
+        });
+        expect(config.getComponentCount()).toBe(0);
+    });
+
+    test('password type flows through to parameter', () => {
+        const config = parser.extractComponents({
+            components: {
+                auth: {
+                    API_SECRET: { label: 'API Secret', initialValue: '', userInputValue: '', type: 'password' },
+                    API_KEY: { label: 'API Key', initialValue: '', userInputValue: '' },
+                },
+            },
+        });
+        expect(config.getComponent('auth')?.getParameter('API_SECRET')?.getType()).toBe('password');
+        expect(config.getComponent('auth')?.getParameter('API_KEY')?.getType()).toBe('string');
+    });
+});
+
+// ─── load ─────────────────────────────────────────────────────────────────────
+
+describe('ConfigParser.load', () => {
+    test('returns error when file does not exist', async () => {
+        const parser = new ConfigParser('/nonexistent/path/config.toml');
+        const result = await parser.load();
+        expect(result.success).toBe(false);
+        expect(result.error).toContain('/nonexistent/path/config.toml');
+    });
+
+    test('loads simple.toml and extracts both components', async () => {
+        const parser = new ConfigParser(join(fixturesDir, 'simple.toml'));
+        const result = await parser.load();
+        expect(result.success).toBe(true);
+        const config = result.data!;
+        expect(config.getComponentCount()).toBe(2);
+        expect(config.hasComponent('redis')).toBe(true);
+        expect(config.hasComponent('postgres')).toBe(true);
+    });
+
+    test('redis component has three parameters with correct values', async () => {
+        const parser = new ConfigParser(join(fixturesDir, 'simple.toml'));
+        const result = await parser.load();
+        const redis = result.data!.getComponent('redis')!;
+        expect(redis.getParameterCount()).toBe(3);
+        expect(redis.getParameter('REDIS_HOST')?.getLabel()).toBe('Redis hostname');
+        expect(redis.getParameter('REDIS_HOST')?.getInitialValue()).toBe('localhost');
+        expect(redis.getParameter('REDIS_HOST')?.getUserInputValue()).toBe('redis.example.com');
+        expect(redis.getParameter('REDIS_PASSWORD')?.isMandatory()).toBe(true);
+    });
+
+    test('postgres component has two parameters including plain string', async () => {
+        const parser = new ConfigParser(join(fixturesDir, 'simple.toml'));
+        const result = await parser.load();
+        const postgres = result.data!.getComponent('postgres')!;
+        expect(postgres.getParameterCount()).toBe(2);
+        expect(postgres.getParameter('DB_NAME')?.getInitialValue()).toBe('mydb');
+    });
+});
diff --git a/util/config/configurator/tests/configuration-file-components-parameters.test.ts b/util/config/configurator/tests/configuration-file-components-parameters.test.ts
new file mode 100644
index 00000000..1e0ea4b3
--- /dev/null
+++ b/util/config/configurator/tests/configuration-file-components-parameters.test.ts
@@ -0,0 +1,250 @@
+import { expect, test, describe, beforeEach, afterEach } from 'bun:test';
+import { PartialConfigManager } from '../partial-config-manager';
+import { ConfigDisplay } from '../config-display';
+import { existsSync, unlinkSync, writeFileSync } from 'fs';
+import {ConfigParameter, EditableComponentConfig, EditableConfigParameter} from "../types-core.ts";
+import {EditableOpsConfigFile} from "../types-config-file.ts";
+
+describe('ConfigParameter - isMandatory', () => {
+    test('should default isMandatory to false', () => {
+        const param = new ConfigParameter('KEY');
+        expect(param.isMandatory()).toBe(false);
+    });
+
+    test('should set isMandatory to true when specified', () => {
+        const param = new ConfigParameter('KEY', 'Label', '', '', true);
+        expect(param.isMandatory()).toBe(true);
+    });
+
+    test('should set isMandatory to false when explicitly false', () => {
+        const param = new ConfigParameter('KEY', 'Label', 'val', '', false);
+        expect(param.isMandatory()).toBe(false);
+    });
+
+    test('should not affect other fields', () => {
+        const param = new ConfigParameter('MY_KEY', 'My Label', 'init', 'input', true);
+        expect(param.getKey()).toBe('MY_KEY');
+        expect(param.getLabel()).toBe('My Label');
+        expect(param.getInitialValue()).toBe('init');
+        expect(param.getUserInputValue()).toBe('input');
+        expect(param.isMandatory()).toBe(true);
+    });
+});
+
+describe('EditableConfigParameter - isMandatory', () => {
+    test('should default isMandatory to false', () => {
+        const param = new EditableConfigParameter('KEY', '', '', '', '');
+        expect(param.isMandatory()).toBe(false);
+    });
+
+    test('should accept isMandatory true', () => {
+        const param = new EditableConfigParameter('KEY', 'Label', 'init', '', '', true);
+        expect(param.isMandatory()).toBe(true);
+    });
+
+    test('should preserve isMandatory through fromConfigParameter', () => {
+        const base = new ConfigParameter('KEY', 'Label', 'init', 'input', true);
+        const editable = EditableConfigParameter.fromConfigParameter(base);
+
+        expect(editable.getKey()).toBe('KEY');
+        expect(editable.isMandatory()).toBe(true);
+        expect(editable.getPreviousUserInputValue()).toBe('');
+    });
+
+    test('fromConfigParameter should preserve isMandatory false', () => {
+        const base = new ConfigParameter('KEY', '', '', '', false);
+        const editable = EditableConfigParameter.fromConfigParameter(base);
+        expect(editable.isMandatory()).toBe(false);
+    });
+
+    test('isMandatory should not be affected by updateUserInputValue', () => {
+        const param = new EditableConfigParameter('KEY', '', '', '', '', true);
+        param.updateUserInputValue('new_value');
+        expect(param.isMandatory()).toBe(true);
+    });
+
+    test('isMandatory should not be affected by revertToPrevious', () => {
+        const param = new EditableConfigParameter('KEY', '', '', 'current', 'previous', true);
+        param.revertToPrevious();
+        expect(param.isMandatory()).toBe(true);
+    });
+});
+
+describe('EditableConfigParameter', () => {
+    test('should create instance with all properties', () => {
+        const param = new EditableConfigParameter('TEST_KEY', 'Test Label', 'initial', 'current', 'previous');
+
+        expect(param.getKey()).toBe('TEST_KEY');
+        expect(param.getLabel()).toBe('Test Label');
+        expect(param.getInitialValue()).toBe('initial');
+        expect(param.getUserInputValue()).toBe('current');
+        expect(param.getPreviousUserInputValue()).toBe('previous');
+    });
+
+    test('should update user input value and track previous', () => {
+        const param = new EditableConfigParameter('KEY', '', '', 'old_value', '');
+
+        param.updateUserInputValue('new_value');
+
+        expect(param.getUserInputValue()).toBe('new_value');
+        expect(param.getPreviousUserInputValue()).toBe('old_value');
+    });
+
+    test('should revert to previous value', () => {
+        const param = new EditableConfigParameter('KEY', '', '', 'current', 'previous');
+
+        const reverted = param.revertToPrevious();
+
+        expect(reverted).toBe(true);
+        expect(param.getUserInputValue()).toBe('previous');
+        expect(param.getPreviousUserInputValue()).toBe('');
+    });
+
+    test('should not revert when no previous value', () => {
+        const param = new EditableConfigParameter('KEY', '', '', 'current', '');
+
+        const reverted = param.revertToPrevious();
+
+        expect(reverted).toBe(false);
+        expect(param.getUserInputValue()).toBe('current');
+    });
+
+    test('should create from ConfigParameter', () => {
+        const baseParam = new EditableConfigParameter('KEY', 'Label', 'initial', 'user', '');
+        const editableParam = EditableConfigParameter.fromConfigParameter(baseParam);
+
+        expect(editableParam.getKey()).toBe('KEY');
+        expect(editableParam.getLabel()).toBe('Label');
+        expect(editableParam.getInitialValue()).toBe('initial');
+        expect(editableParam.getUserInputValue()).toBe('user');
+        expect(editableParam.getPreviousUserInputValue()).toBe('');
+    });
+});
+
+describe('ConfigParameter - type', () => {
+    test('should default type to string', () => {
+        const param = new ConfigParameter('KEY');
+        expect(param.getType()).toBe('string');
+    });
+
+    test('should set type to password when specified', () => {
+        const param = new ConfigParameter('KEY', '', '', '', false, 'password');
+        expect(param.getType()).toBe('password');
+    });
+
+    test('should set type to string when explicitly specified', () => {
+        const param = new ConfigParameter('KEY', '', '', '', false, 'string');
+        expect(param.getType()).toBe('string');
+    });
+
+    test('should not affect other fields when type is password', () => {
+        const param = new ConfigParameter('MY_KEY', 'My Label', 'init', 'input', true, 'password');
+        expect(param.getKey()).toBe('MY_KEY');
+        expect(param.getLabel()).toBe('My Label');
+        expect(param.getInitialValue()).toBe('init');
+        expect(param.getUserInputValue()).toBe('input');
+        expect(param.isMandatory()).toBe(true);
+        expect(param.getType()).toBe('password');
+    });
+});
+
+describe('EditableConfigParameter - type', () => {
+    test('should default type to string', () => {
+        const param = new EditableConfigParameter('KEY');
+        expect(param.getType()).toBe('string');
+    });
+
+    test('should accept type password', () => {
+        const param = new EditableConfigParameter('KEY', 'Label', 'init', '', '', false, 'password');
+        expect(param.getType()).toBe('password');
+    });
+
+    test('should preserve type through fromConfigParameter', () => {
+        const base = new ConfigParameter('KEY', 'Label', 'init', '', false, 'password');
+        const editable = EditableConfigParameter.fromConfigParameter(base);
+        expect(editable.getType()).toBe('password');
+    });
+
+    test('fromConfigParameter should preserve type string', () => {
+        const base = new ConfigParameter('KEY', '', '', '', false, 'string');
+        const editable = EditableConfigParameter.fromConfigParameter(base);
+        expect(editable.getType()).toBe('string');
+    });
+
+    test('type should not be affected by updateUserInputValue', () => {
+        const param = new EditableConfigParameter('KEY', '', '', '', '', false, 'password');
+        param.updateUserInputValue('secret');
+        expect(param.getType()).toBe('password');
+    });
+
+    test('type should not be affected by revertToPrevious', () => {
+        const param = new EditableConfigParameter('KEY', '', '', 'current', 'previous', false, 'password');
+        param.revertToPrevious();
+        expect(param.getType()).toBe('password');
+    });
+});
+
+describe('ConfigParameter - hint', () => {
+    test('should default hint to undefined', () => {
+        const param = new ConfigParameter('KEY');
+        expect(param.getHint()).toBeUndefined();
+    });
+
+    test('should store hint when provided', () => {
+        const param = new ConfigParameter('KEY', '', '', '', false, 'string', 'Choose wisely');
+        expect(param.getHint()).toBe('Choose wisely');
+    });
+
+    test('should store multiline hint', () => {
+        const hint = 'Line one\nLine two';
+        const param = new ConfigParameter('KEY', '', '', '', false, 'string', hint);
+        expect(param.getHint()).toBe(hint);
+    });
+
+    test('hint should not affect other fields', () => {
+        const param = new ConfigParameter('MY_KEY', 'My Label', 'init', 'input', true, 'password', 'a hint');
+        expect(param.getKey()).toBe('MY_KEY');
+        expect(param.getLabel()).toBe('My Label');
+        expect(param.getInitialValue()).toBe('init');
+        expect(param.getUserInputValue()).toBe('input');
+        expect(param.isMandatory()).toBe(true);
+        expect(param.getType()).toBe('password');
+        expect(param.getHint()).toBe('a hint');
+    });
+});
+
+describe('EditableConfigParameter - hint', () => {
+    test('should default hint to undefined', () => {
+        const param = new EditableConfigParameter('KEY');
+        expect(param.getHint()).toBeUndefined();
+    });
+
+    test('should store hint when provided', () => {
+        const param = new EditableConfigParameter('KEY', '', '', '', '', false, 'string', 'Use t3a.large');
+        expect(param.getHint()).toBe('Use t3a.large');
+    });
+
+    test('should preserve hint through fromConfigParameter', () => {
+        const base = new ConfigParameter('KEY', 'Label', 'init', '', false, 'string', 'helpful hint');
+        const editable = EditableConfigParameter.fromConfigParameter(base);
+        expect(editable.getHint()).toBe('helpful hint');
+    });
+
+    test('fromConfigParameter with no hint gives undefined', () => {
+        const base = new ConfigParameter('KEY', 'Label', 'init', '', false, 'string');
+        const editable = EditableConfigParameter.fromConfigParameter(base);
+        expect(editable.getHint()).toBeUndefined();
+    });
+
+    test('hint should not be affected by updateUserInputValue', () => {
+        const param = new EditableConfigParameter('KEY', '', '', '', '', false, 'string', 'my hint');
+        param.updateUserInputValue('new_value');
+        expect(param.getHint()).toBe('my hint');
+    });
+
+    test('hint should not be affected by revertToPrevious', () => {
+        const param = new EditableConfigParameter('KEY', '', '', 'current', 'previous', false, 'string', 'my hint');
+        param.revertToPrevious();
+        expect(param.getHint()).toBe('my hint');
+    });
+});
\ No newline at end of file
diff --git a/util/config/configurator/tests/configuration-file-components.test.ts b/util/config/configurator/tests/configuration-file-components.test.ts
new file mode 100644
index 00000000..82bd547e
--- /dev/null
+++ b/util/config/configurator/tests/configuration-file-components.test.ts
@@ -0,0 +1,24 @@
+import { expect, test, describe, beforeEach, afterEach } from 'bun:test';
+import { PartialConfigManager } from '../partial-config-manager';
+import { ConfigDisplay } from '../config-display';
+import { existsSync, unlinkSync, writeFileSync } from 'fs';
+import {EditableComponentConfig, EditableConfigParameter} from "../types-core.ts";
+import {EditableOpsConfigFile} from "../types-config-file.ts";
+
+describe('EditableComponentConfig', () => {
+    test('should create component with editable parameters', () => {
+        const component = new EditableComponentConfig('test');
+        const param1 = new EditableConfigParameter('KEY1', '', '', '', '');
+        const param2 = new EditableConfigParameter('KEY2', '', '', '', '');
+
+        component.addParameter(param1);
+        component.addParameter(param2);
+
+        expect(component.getName()).toBe('test');
+        expect(component.getParameterCount()).toBe(2);
+        expect(component.getAllParameters()).toHaveLength(2);
+        expect(component.getParameter('KEY1')).toBeDefined();
+        expect(component.getParameter('KEY3')).toBeUndefined();
+    });
+});
+
diff --git a/util/config/configurator/tests/configuration-file.test.ts b/util/config/configurator/tests/configuration-file.test.ts
new file mode 100644
index 00000000..6fae5fab
--- /dev/null
+++ b/util/config/configurator/tests/configuration-file.test.ts
@@ -0,0 +1,140 @@
+import { expect, test, describe, beforeEach, afterEach } from 'bun:test';
+import { PartialConfigManager } from '../partial-config-manager';
+import { ConfigDisplay } from '../config-display';
+import { existsSync, unlinkSync, writeFileSync } from 'fs';
+import {EditableComponentConfig, EditableConfigParameter} from "../types-core.ts";
+import {EditableOpsConfigFile} from "../types-config-file.ts";
+
+
+describe('EditableOpsConfigFile', () => {
+    test('should create config with editable components', () => {
+        const config = new EditableOpsConfigFile();
+        const component = new EditableComponentConfig('redis');
+        component.addParameter(new EditableConfigParameter('REDIS_URL', '', '', '', ''));
+
+        config.addComponent(component);
+
+        expect(config.getComponentCount()).toBe(1);
+        expect(config.getComponent('redis')).toBeDefined();
+        expect(config.getAllComponents()).toHaveLength(1);
+        expect(config.getComponentNames()).toContain('redis');
+    });
+});
+
+
+describe('ConfigDisplay', () => {
+    test('should format parameter table', () => {
+        const params = [
+            new EditableConfigParameter('KEY1', 'Label 1', 'initial1', 'current1', 'prev1'),
+            new EditableConfigParameter('KEY2', 'Label 2', 'initial2', '', ''),
+        ];
+
+        let output = '';
+        const originalWrite = process.stdout.write.bind(process.stdout);
+        process.stdout.write = (chunk: any) => { output += chunk.toString(); return true; };
+
+        ConfigDisplay.displayParameterTable('test-component', params);
+
+        process.stdout.write = originalWrite;
+
+        expect(output.length).toBeGreaterThan(0);
+        expect(output).toContain('test-component');
+        expect(output).toContain('KEY1');
+        expect(output).toContain('KEY2');
+    });
+
+    test('should format empty parameter table', () => {
+        let output = '';
+        const originalWrite = process.stdout.write.bind(process.stdout);
+        process.stdout.write = (chunk: any) => { output += chunk.toString(); return true; };
+
+        ConfigDisplay.displayParameterTable('empty-component', []);
+
+        process.stdout.write = originalWrite;
+
+        expect(output).toContain('No parameters configured');
+    });
+
+    test('should display component summary', () => {
+        const components = [
+            { name: 'redis', parameterCount: 4, modifiedCount: 1 },
+            { name: 'postgres', parameterCount: 5, modifiedCount: 0 },
+        ];
+
+        const logs: string[] = [];
+        const originalLog = console.log;
+        console.log = (...args: any[]) => logs.push(args.join(' '));
+
+        ConfigDisplay.displayComponentSummary(components);
+
+        console.log = originalLog;
+
+        expect(logs.length).toBeGreaterThan(0);
+    });
+
+    test('should display parameter detail', () => {
+        const param = new EditableConfigParameter('TEST_KEY', 'Test Label', 'initial', 'current', 'prev');
+
+        const logs: string[] = [];
+        const originalLog = console.log;
+        console.log = (...args: any[]) => logs.push(args.join(' '));
+
+        ConfigDisplay.displayParameterDetail(param);
+
+        console.log = originalLog;
+
+        expect(logs.some(l => l.includes('TEST_KEY'))).toBe(true);
+        expect(logs.some(l => l.includes('Test Label'))).toBe(true);
+    });
+
+    test('should not display hint in parameter detail (hint is shown by editParameter)', () => {
+        const param = new EditableConfigParameter(
+            'VM_TYPE', 'VM instance type', '', '', '', false, 'string',
+            'The suggested instance type has 8GB RAM'
+        );
+
+        const logs: string[] = [];
+        const originalLog = console.log;
+        console.log = (...args: any[]) => logs.push(args.join(' '));
+
+        ConfigDisplay.displayParameterDetail(param);
+
+        console.log = originalLog;
+
+        expect(logs.some(l => l.includes('Hint:'))).toBe(false);
+    });
+
+    test('should display modifications', () => {
+        const modifications = [
+            {
+                component: 'redis',
+                parameters: [
+                    new EditableConfigParameter('REDIS_URL', 'URL', '', 'new_url', 'old_url'),
+                ],
+            },
+        ];
+
+        const logs: string[] = [];
+        const originalLog = console.log;
+        console.log = (...args: any[]) => logs.push(args.join(' '));
+
+        ConfigDisplay.displayModifications(modifications);
+
+        console.log = originalLog;
+
+        expect(logs.some(l => l.includes('redis'))).toBe(true);
+        expect(logs.some(l => l.includes('REDIS_URL'))).toBe(true);
+    });
+
+    test('should display message when no modifications', () => {
+        const logs: string[] = [];
+        const originalLog = console.log;
+        console.log = (...args: any[]) => logs.push(args.join(' '));
+
+        ConfigDisplay.displayModifications([]);
+
+        console.log = originalLog;
+
+        expect(logs.some(l => l.includes('No modifications detected'))).toBe(true);
+    });
+});
\ No newline at end of file
diff --git a/util/config/configurator/tests/fixtures/commented-params.toml b/util/config/configurator/tests/fixtures/commented-params.toml
new file mode 100644
index 00000000..7432f825
--- /dev/null
+++ b/util/config/configurator/tests/fixtures/commented-params.toml
@@ -0,0 +1,4 @@
+[components.aws]
+OUT_AWS_ACCESS_KEY_ID = { label = "AWS Access Id", initialValue = "AAA", userInputValue = "BBB" }
+"#OUT_AWS_DISABLED" = { label = "Disabled param", initialValue = "", userInputValue = "" }
+OUT_AWS_REGION = "us-east-1"
diff --git a/util/config/configurator/tests/fixtures/components-list.json b/util/config/configurator/tests/fixtures/components-list.json
new file mode 100644
index 00000000..b6a7b4f0
--- /dev/null
+++ b/util/config/configurator/tests/fixtures/components-list.json
@@ -0,0 +1,59 @@
+{
+  "components" : {
+    "REDIS": {
+      "type": "component",
+      "label": "Redis server",
+      "enabled": {
+        "label": "Do you want to enable Redis?",
+        "type": "bool",
+        "initialValue=": true,
+        "userInputValue" :true
+      },
+      "parameters" : {
+        "REDIS_URL": {
+          "label": "Redis URL",
+          "initialValue=": "",
+          "userInputValue" : ""
+        },
+        "REDIS_SERVICE": {
+          "label": "Redis Service",
+          "initialValue=": "",
+          "userInputValue" : ""
+        },
+        "REDIS_PREFIX": {
+          "label": "Redis Prefix",
+          "initialValue=": "",
+          "userInputValue" : ""
+        },
+        "REDIS_PASSWORD": {
+          "label": "Redis password",
+          "initialValue=": "",
+          "userInputValue" : ""
+        }
+      }
+    }
+  },
+  "POSTGRESQL": {
+    "type": "component",
+    "label": "PostgreSql server",
+    "enabled": {
+      "label": "Do you want to enable PostgreSql?",
+      "type": "bool",
+      "initialValue=": true,
+      "userInputValue" :true
+    },
+    "parameters" : {
+      "POSTGRES_USERNAME": {
+        "label": "PostgreSql Username",
+        "initialValue=": "",
+        "userInputValue" : ""
+      },
+      "POSTGRES_DATABASE": {
+        "label": "PostgreSql database",
+        "initialValue=": "",
+        "userInputValue" : ""
+      },
+    }
+  }
+}
+}
diff --git a/util/config/configurator/tests/fixtures/simple.toml b/util/config/configurator/tests/fixtures/simple.toml
new file mode 100644
index 00000000..30d72a92
--- /dev/null
+++ b/util/config/configurator/tests/fixtures/simple.toml
@@ -0,0 +1,8 @@
+[components.redis]
+REDIS_HOST = { label = "Redis hostname", initialValue = "localhost", userInputValue = "redis.example.com" }
+REDIS_PORT = { label = "Redis port", initialValue = "6379", userInputValue = "" }
+REDIS_PASSWORD = { label = "Redis password", initialValue = "", userInputValue = "secret", isMandatory = true }
+
+[components.postgres]
+DB_HOST = { label = "Postgres hostname", initialValue = "127.0.0.1", userInputValue = "" }
+DB_NAME = "mydb"
diff --git a/util/config/configurator/tests/fixtures/tutorial.json b/util/config/configurator/tests/fixtures/tutorial.json
new file mode 100644
index 00000000..b4e76280
--- /dev/null
+++ b/util/config/configurator/tests/fixtures/tutorial.json
@@ -0,0 +1,5 @@
+{
+  "POSTGRES_PORT": {
+    "type": "string"
+  }
+}
diff --git a/util/config/configurator/tests/index.test.ts b/util/config/configurator/tests/index.test.ts
index eb35110f..012746b2 100644
--- a/util/config/configurator/tests/index.test.ts
+++ b/util/config/configurator/tests/index.test.ts
@@ -1,13 +1,10 @@
 import { expect, test, describe } from "bun:test";
 import {
   readPositionalFile,
-  parsePositionalFile,
-  NotValidJsonMsg,
   HelpMsg,
   AdditionalArgsMsg,
   isInputConfigValid,
   findMissingConfig,
-  FileNotFoundJsonMsg,
 } from "../configurator.ts";
 
 describe("findMissingConfig", () => {
@@ -94,32 +91,3 @@ describe("readPositionalFile", () => {
     expect(res.jsonFilePath).toBe("config.json");
   });
 });
-
-describe("parsePositionalFile", () => {
-  test("file does not exist", async () => {
-    const filename = "not-existing.json";
-    const jsonRes = await parsePositionalFile(filename);
-    expect(jsonRes.success).toBe(false);
-    expect(jsonRes.message).toBe(FileNotFoundJsonMsg + Bun.pathToFileURL(filename));
-  });
-
-  test("not a json file", async () => {
-    const jsonRes = await parsePositionalFile("tests/fixtures/not-json.txt");
-    expect(jsonRes.success).toBe(false);
-    expect(jsonRes.message).toBe(NotValidJsonMsg);
-  });
-
-  test("not a valid json", async () => {
-    const jsonRes = await parsePositionalFile("tests/fixtures/bad.json");
-    expect(jsonRes.success).toBe(false);
-    expect(jsonRes.message).toBe(NotValidJsonMsg);
-  });
-
-  test("valid json", async () => {
-    const jsonRes = await parsePositionalFile("tests//fixtures/valid.json");
-    expect(jsonRes.success).toBe(true);
-    expect(jsonRes.body).toHaveProperty("HELLO", { type: "string" }  );
-    expect(jsonRes.body).toHaveProperty("HELLO3", { type: "string" } );
-    expect(jsonRes.body).toHaveProperty("HELLO_3", { type: "string" });
-  });
-});
diff --git a/util/config/configurator/tests/partial-config.test.ts b/util/config/configurator/tests/partial-config.test.ts
new file mode 100644
index 00000000..52e1085b
--- /dev/null
+++ b/util/config/configurator/tests/partial-config.test.ts
@@ -0,0 +1,259 @@
+import { expect, test, describe, beforeEach, afterEach } from 'bun:test';
+import { PartialConfigManager } from '../partial-config-manager';
+import { ConfigDisplay } from '../config-display';
+import { existsSync, unlinkSync, writeFileSync } from 'fs';
+import {EditableComponentConfig, EditableConfigParameter} from "../types-core.ts";
+import {EditableOpsConfigFile} from "../types-config-file.ts";
+
+
+
+
+describe('PartialConfigManager', () => {
+  const testConfigPath = './test-config.toml';
+  const testTmpPath = './test-config.tmp';
+
+  beforeEach(() => {
+    const testConfig = `[components.redis]
+REDIS_URL = {label="Redis URL", initialValue="", userInputValue=""}
+REDIS_PORT = {label="Redis Port", initialValue="6379", userInputValue=""}
+`;
+    writeFileSync(testConfigPath, testConfig);
+  });
+
+  afterEach(() => {
+    try {
+      if (existsSync(testConfigPath)) {
+        unlinkSync(testConfigPath);
+      }
+      if (existsSync(testTmpPath)) {
+        unlinkSync(testTmpPath);
+      }
+    } catch (error) {
+      // Ignore cleanup errors
+    }
+  });
+
+  test('should check if partial config exists', async () => {
+    const manager = new PartialConfigManager(testConfigPath);
+
+    expect(await manager.hasPartialConfig()).toBe(false);
+    
+    writeFileSync(testTmpPath, '# Partial config');
+    
+    expect(await manager.hasPartialConfig()).toBe(true);
+  });
+
+  test('should load configuration from main file', async () => {
+    const manager = new PartialConfigManager(testConfigPath);
+    const result = await manager.load();
+    
+    expect(result.success).toBe(true);
+    expect(result.data).toBeDefined();
+    
+    const config = result.data!;
+    expect(config.getComponentCount()).toBe(1);
+    expect(config.getComponent('redis')).toBeDefined();
+    
+    const component = config.getComponent('redis')!;
+    expect(component.getParameterCount()).toBe(2);
+  });
+
+  test('should save and load partial configuration', async () => {
+    const manager = new PartialConfigManager(testConfigPath);
+    await manager.load();
+    
+    await manager.setParameter('redis', 'REDIS_URL', 'redis://localhost');
+    
+    expect(existsSync(testTmpPath)).toBe(true);
+    
+    const manager2 = new PartialConfigManager(testConfigPath);
+    const result = await manager2.load();
+    
+    expect(result.success).toBe(true);
+    expect(result.data).toBeDefined();
+    
+    const redisComponent = result.data!.getComponent('redis');
+    expect(redisComponent).toBeDefined();
+    
+    if (redisComponent) {
+      const urlParam = redisComponent.getParameter('REDIS_URL');
+      expect(urlParam).toBeDefined();
+      if (urlParam) {
+        expect(urlParam.getUserInputValue()).toBe('redis://localhost');
+      }
+    }
+  });
+
+  test('should detect modifications', async () => {
+    const manager = new PartialConfigManager(testConfigPath);
+    await manager.load();
+    
+    expect(manager.hasModifications()).toBe(false);
+    
+    await manager.setParameter('redis', 'REDIS_URL', 'redis://localhost');
+    
+    expect(manager.hasModifications()).toBe(true);
+  });
+
+  test('should get modified parameters', async () => {
+    const manager = new PartialConfigManager(testConfigPath);
+    await manager.load();
+    
+    await manager.setParameter('redis', 'REDIS_URL', 'redis://localhost');
+    
+    const modified = manager.getModifiedParameters();
+    
+    expect(modified).toHaveLength(1);
+    expect(modified[0].component).toBe('redis');
+    expect(modified[0].parameters).toHaveLength(1);
+    expect(modified[0].parameters[0].getKey()).toBe('REDIS_URL');
+  });
+
+  test('should clear partial configuration', async () => {
+    const manager = new PartialConfigManager(testConfigPath);
+    await manager.load();
+    
+    await manager.setParameter('redis', 'REDIS_URL', 'test');
+    
+    expect(existsSync(testTmpPath)).toBe(true);
+    
+    const result = await manager.clear();
+    
+    expect(result.success).toBe(true);
+    expect(existsSync(testTmpPath)).toBe(false);
+  });
+
+  test('should revert parameter to previous value', async () => {
+    const manager = new PartialConfigManager(testConfigPath);
+    await manager.load();
+    
+    await manager.setParameter('redis', 'REDIS_URL', 'first_value');
+    await manager.setParameter('redis', 'REDIS_URL', 'second_value');
+    
+    const param = manager.getParameter('redis', 'REDIS_URL')!;
+    expect(param.getUserInputValue()).toBe('second_value');
+    expect(param.getPreviousUserInputValue()).toBe('first_value');
+    
+    await manager.revertParameter('redis', 'REDIS_URL');
+    
+    const revertedParam = manager.getParameter('redis', 'REDIS_URL')!;
+    expect(revertedParam.getUserInputValue()).toBe('first_value');
+    expect(revertedParam.getPreviousUserInputValue()).toBe('');
+  });
+
+  test('should return error for non-existent parameter', async () => {
+    const manager = new PartialConfigManager(testConfigPath);
+    await manager.load();
+
+    const result = await manager.setParameter('redis', 'NONexistent', 'value');
+
+    expect(result.success).toBe(false);
+    expect(result.error).toContain('not found');
+  });
+});
+
+describe('PartialConfigManager - serializeToToml (round-trip)', () => {
+  const testConfigPath = './test-serial.toml';
+  const testTmpPath = './test-serial.tmp';
+
+  beforeEach(() => {
+    const testConfig = `[components.postgres]
+POSTGRES_HOST = {label="Postgres host", initialValue="localhost", userInputValue=""}
+POSTGRES_PASSWORD = {label="Postgres password", initialValue="", userInputValue="", type="password"}
+POSTGRES_PORT = {label="Postgres port", initialValue="5432", userInputValue="", isMandatory=true}
+`;
+    writeFileSync(testConfigPath, testConfig);
+  });
+
+  afterEach(() => {
+    if (existsSync(testConfigPath)) unlinkSync(testConfigPath);
+    if (existsSync(testTmpPath)) unlinkSync(testTmpPath);
+  });
+
+  test('should preserve type=password through save and reload', async () => {
+    const manager = new PartialConfigManager(testConfigPath);
+    await manager.load();
+    await manager.setParameter('postgres', 'POSTGRES_PASSWORD', 'secret');
+
+    const manager2 = new PartialConfigManager(testConfigPath);
+    await manager2.load();
+
+    const param = manager2.getParameter('postgres', 'POSTGRES_PASSWORD')!;
+    expect(param.getType()).toBe('password');
+  });
+
+  test('should preserve type=string through save and reload', async () => {
+    const manager = new PartialConfigManager(testConfigPath);
+    await manager.load();
+    await manager.setParameter('postgres', 'POSTGRES_HOST', 'db.example.com');
+
+    const manager2 = new PartialConfigManager(testConfigPath);
+    await manager2.load();
+
+    const param = manager2.getParameter('postgres', 'POSTGRES_HOST')!;
+    expect(param.getType()).toBe('string');
+  });
+
+  test('should preserve userInputValue for password parameter through save and reload', async () => {
+    const manager = new PartialConfigManager(testConfigPath);
+    await manager.load();
+    await manager.setParameter('postgres', 'POSTGRES_PASSWORD', 'mysecret');
+
+    const manager2 = new PartialConfigManager(testConfigPath);
+    await manager2.load();
+
+    const param = manager2.getParameter('postgres', 'POSTGRES_PASSWORD')!;
+    expect(param.getUserInputValue()).toBe('mysecret');
+    expect(param.getType()).toBe('password');
+  });
+
+  test('should preserve isMandatory through save and reload', async () => {
+    const manager = new PartialConfigManager(testConfigPath);
+    await manager.load();
+    await manager.setParameter('postgres', 'POSTGRES_PORT', '5433');
+
+    const manager2 = new PartialConfigManager(testConfigPath);
+    await manager2.load();
+
+    const param = manager2.getParameter('postgres', 'POSTGRES_PORT')!;
+    expect(param.isMandatory()).toBe(true);
+  });
+
+  test('should preserve previousUserInputValue through save and reload', async () => {
+    const manager = new PartialConfigManager(testConfigPath);
+    await manager.load();
+    await manager.setParameter('postgres', 'POSTGRES_PASSWORD', 'first');
+    await manager.setParameter('postgres', 'POSTGRES_PASSWORD', 'second');
+
+    const manager2 = new PartialConfigManager(testConfigPath);
+    await manager2.load();
+
+    const param = manager2.getParameter('postgres', 'POSTGRES_PASSWORD')!;
+    expect(param.getUserInputValue()).toBe('second');
+    expect(param.getPreviousUserInputValue()).toBe('first');
+    expect(param.getType()).toBe('password');
+  });
+
+  test('should preserve all fields for all parameters through save and reload', async () => {
+    const manager = new PartialConfigManager(testConfigPath);
+    await manager.load();
+    await manager.setParameter('postgres', 'POSTGRES_HOST', 'db.example.com');
+    await manager.setParameter('postgres', 'POSTGRES_PASSWORD', 'topsecret');
+
+    const manager2 = new PartialConfigManager(testConfigPath);
+    await manager2.load();
+
+    const host = manager2.getParameter('postgres', 'POSTGRES_HOST')!;
+    expect(host.getType()).toBe('string');
+    expect(host.getUserInputValue()).toBe('db.example.com');
+    expect(host.getLabel()).toBe('Postgres host');
+    expect(host.getInitialValue()).toBe('localhost');
+
+    const pw = manager2.getParameter('postgres', 'POSTGRES_PASSWORD')!;
+    expect(pw.getType()).toBe('password');
+    expect(pw.getUserInputValue()).toBe('topsecret');
+    expect(pw.getLabel()).toBe('Postgres password');
+  });
+});
+
+
diff --git a/util/config/configurator/tsconfig.json b/util/config/configurator/tsconfig.json
index 238655f2..ce9dd17e 100644
--- a/util/config/configurator/tsconfig.json
+++ b/util/config/configurator/tsconfig.json
@@ -1,5 +1,6 @@
 {
   "compilerOptions": {
+    "types": ["@types/bun"],
     // Enable latest features
     "lib": ["ESNext", "DOM"],
     "target": "ESNext",
diff --git a/util/config/configurator/types-config-file.ts b/util/config/configurator/types-config-file.ts
new file mode 100644
index 00000000..efbea383
--- /dev/null
+++ b/util/config/configurator/types-config-file.ts
@@ -0,0 +1,118 @@
+import {ComponentConfig, EditableComponentConfig} from "./types-core.ts";
+
+/**
+ * Represents the complete configuration in RAM.
+ * This class doesn't handle any file I/O or persistence. It is purely an in-memory representation.
+ *
+ * The class is a simple data structure that stores configuration parameters in memory (RAM). It has:
+ * - Private instance variables (_key, _label, _initialValue, _userInputValue)
+ * - Getters and setters for these values
+ * - No file I/O operations
+ * - No database connections
+ * - No localStorage/sessionStorage usage
+ *
+ * Contains all managed components and their configuration parameters.
+ * This is the root object for the configuration hierarchy.
+ */
+export class OpsConfigFile {
+    private _components: Map<string, ComponentConfig>;
+
+    /**
+     * Creates a new OpsConfigFile instance.
+     * Initializes with an empty components map.
+     */
+    constructor() {
+        this._components = new Map<string, ComponentConfig>();
+    }
+
+    /**
+     * Adds a component configuration.
+     * If a component with the same name exists, it will be replaced.
+     *
+     * @param component - The ComponentConfig to add
+     */
+    addComponent(component: ComponentConfig): void {
+        this._components.set(component.getName(), component);
+    }
+
+    /**
+     * Retrieves a component by its name.
+     *
+     * @param name - The component name to look up
+     * @returns The ComponentConfig if found, undefined otherwise
+     */
+    getComponent(name: string): ComponentConfig | undefined {
+        return this._components.get(name);
+    }
+
+    /**
+     * Returns all components in this configuration.
+     *
+     * @returns Array of all ComponentConfig instances
+     */
+    getAllComponents(): ComponentConfig[] {
+        return Array.from(this._components.values());
+    }
+
+    /**
+     * Returns all component names in this configuration.
+     *
+     * @returns Array of component names (strings)
+     */
+    getComponentNames(): string[] {
+        return Array.from(this._components.keys());
+    }
+
+    /**
+     * Checks if a component with the given name exists.
+     *
+     * @param name - The component name to check
+     * @returns True if component exists, false otherwise
+     */
+    hasComponent(name: string): boolean {
+        return this._components.has(name);
+    }
+
+    /**
+     * Returns the number of components in this configuration.
+     *
+     * @returns The component count
+     */
+    getComponentCount(): number {
+        return this._components.size;
+    }
+}
+
+/**
+ * Represents the complete editable configuration with edit tracking.
+ *
+ * Extends OpsConfigFile to use EditableComponentConfig instead of ComponentConfig,
+ * enabling full edit history tracking for all components and parameters.
+ */
+export class EditableOpsConfigFile extends OpsConfigFile {
+    /**
+     * Creates a new EditableOpsConfigFile instance.
+     */
+    constructor() {
+        super();
+    }
+
+    /**
+     * Returns all components in this configuration as EditableComponentConfig instances.
+     *
+     * @returns Array of all EditableComponentConfig instances
+     */
+    getAllComponents(): EditableComponentConfig[] {
+        return Array.from((this as any)._components.values()) as EditableComponentConfig[];
+    }
+
+    /**
+     * Retrieves a component by its name.
+     *
+     * @param name - The component name to look up
+     * @returns The EditableComponentConfig if found, undefined otherwise
+     */
+    getComponent(name: string): EditableComponentConfig | undefined {
+        return (this as any)._components.get(name) as EditableComponentConfig | undefined;
+    }
+}
\ No newline at end of file
diff --git a/util/config/configurator/types-core.ts b/util/config/configurator/types-core.ts
new file mode 100644
index 00000000..28b2f410
--- /dev/null
+++ b/util/config/configurator/types-core.ts
@@ -0,0 +1,375 @@
+/**
+ * Represents a single configuration parameter with metadata.
+ *
+ * Encapsulates key-value pairs with additional information like label,
+ * initial value (from file), and user-provided input value.
+ *
+ * The `key`, `initialValue`, and `isMandatory` are immutable after construction.
+ * Only `label` and `userInputValue` can be modified.
+ */
+export class ConfigParameter {
+    private _key: string;
+    private _label: string;
+    private _initialValue: string;
+    private _userInputValue: string;
+    private _isMandatory: boolean;
+    private _type: 'string' | 'password';
+    private _hint: string | undefined;
+
+    /**
+     * Creates a new ConfigParameter instance.
+     *
+     * @param key - The unique identifier for this parameter (immutable)
+     * @param label - Human-readable label for display in UI (default: '')
+     * @param initialValue - Initial value loaded from TOML file (default: '')
+     * @param userInputValue - User-provided value (default: '')
+     * @param isMandatory - Whether this parameter must have a non-empty value (default: false)
+     * @param type - Input type: 'string' for plain text, 'password' for masked input (default: 'string')
+     * @param hint - Optional guidance text shown to the user when editing this parameter
+     */
+    constructor(
+        key: string,
+        label: string = '',
+        initialValue: string = '',
+        userInputValue: string = '',
+        isMandatory: boolean = false,
+        type: 'string' | 'password' = 'string',
+        hint?: string
+    ) {
+        this._key = key;
+        this._label = label;
+        this._initialValue = initialValue;
+        this._userInputValue = userInputValue;
+        this._isMandatory = isMandatory;
+        this._type = type;
+        this._hint = hint;
+    }
+
+    /**
+     * Returns the unique key identifier for this parameter.
+     *
+     * @returns The parameter key (immutable)
+     */
+    getKey(): string {
+        return this._key;
+    }
+
+    /**
+     * Returns the human-readable label for this parameter.
+     *
+     * @returns The parameter label
+     */
+    getLabel(): string {
+        return this._label;
+    }
+
+    /**
+     * Sets the human-readable label for this parameter.
+     *
+     * @param label - The new label to set
+     */
+    setLabel(label: string): void {
+        this._label = label;
+    }
+
+    /**
+     * Returns the initial value loaded from the TOML file.
+     * This value is immutable after construction.
+     *
+     * @returns The initial value from file
+     */
+    getInitialValue(): string {
+        return this._initialValue;
+    }
+
+    /**
+     * Returns the user-provided input value.
+     *
+     * @returns The user input value
+     */
+    getUserInputValue(): string {
+        return this._userInputValue;
+    }
+
+    /**
+     * Sets the user-provided input value.
+     *
+     * @param value - The new user input value
+     */
+    setUserInputValue(value: string): void {
+        this._userInputValue = value;
+    }
+
+    /**
+     * Returns the effective value for this parameter.
+     *
+     * Returns `userInputValue` if set, otherwise falls back to `initialValue`.
+     * This follows the requirement that user input takes precedence.
+     *
+     * @returns The effective value (userInput || initialValue)
+     */
+    getValue(): string {
+        return this._userInputValue || this._initialValue;
+    }
+
+    /**
+     * Checks if user has provided input for this parameter.
+     *
+     * @returns True if userInputValue is not empty, false otherwise
+     */
+    hasUserInput(): boolean {
+        return this._userInputValue !== '';
+    }
+
+    /**
+     * Returns whether this parameter must have a non-empty value.
+     *
+     * @returns True if the parameter is mandatory, false otherwise
+     */
+    isMandatory(): boolean {
+        return this._isMandatory;
+    }
+
+    /**
+     * Returns the input type for this parameter.
+     *
+     * @returns 'password' if input should be masked, 'string' otherwise
+     */
+    getType(): 'string' | 'password' {
+        return this._type;
+    }
+
+    /**
+     * Returns the optional hint text for this parameter.
+     *
+     * @returns The hint string if present, undefined otherwise
+     */
+    getHint(): string | undefined {
+        return this._hint;
+    }
+}
+
+/**
+ * Represents configuration for a single managed component.
+ *
+ * A managed component (e.g., redis, postgres) contains multiple
+ * configuration parameters organized as key-value pairs.
+ */
+export class ComponentConfig {
+    private _name: string;
+    private _parameters: Map<string, ConfigParameter>;
+
+    /**
+     * Creates a new ComponentConfig instance.
+     *
+     * @param name - The name of the managed component (e.g., 'redis', 'postgres')
+     */
+    constructor(name: string) {
+        this._name = name;
+        this._parameters = new Map<string, ConfigParameter>();
+    }
+
+    /**
+     * Returns the name of this component.
+     *
+     * @returns The component name
+     */
+    getName(): string {
+        return this._name;
+    }
+
+    /**
+     * Adds a configuration parameter to this component.
+     * If a parameter with the same key exists, it will be replaced.
+     *
+     * @param parameter - The ConfigParameter to add
+     */
+    addParameter(parameter: ConfigParameter): void {
+        this._parameters.set(parameter.getKey(), parameter);
+    }
+
+    /**
+     * Retrieves a parameter by its key.
+     *
+     * @param key - The parameter key to look up
+     * @returns The ConfigParameter if found, undefined otherwise
+     */
+    getParameter(key: string): ConfigParameter | undefined {
+        return this._parameters.get(key);
+    }
+
+    /**
+     * Returns all parameters for this component.
+     *
+     * @returns Array of all ConfigParameter instances
+     */
+    getAllParameters(): ConfigParameter[] {
+        return Array.from(this._parameters.values());
+    }
+
+    /**
+     * Returns all parameter keys for this component.
+     *
+     * @returns Array of parameter keys (strings)
+     */
+    getParameterKeys(): string[] {
+        return Array.from(this._parameters.keys());
+    }
+
+    /**
+     * Checks if a parameter with the given key exists.
+     *
+     * @param key - The parameter key to check
+     * @returns True if parameter exists, false otherwise
+     */
+    hasParameter(key: string): boolean {
+        return this._parameters.has(key);
+    }
+
+    /**
+     * Returns the number of parameters in this component.
+     *
+     * @returns The parameter count
+     */
+    getParameterCount(): number {
+        return this._parameters.size;
+    }
+}
+
+/**
+ * Extends ConfigParameter with edit history tracking.
+ *
+ * Tracks previousUserInputValue to enable undo functionality
+ * and maintain a complete edit history for the configuration workflow.
+ */
+export class EditableConfigParameter extends ConfigParameter {
+    private _previousUserInputValue: string;
+
+    /**
+     * Creates a new EditableConfigParameter instance.
+     *
+     * @param key - The unique identifier for this parameter (immutable)
+     * @param label - Human-readable label for display in UI (default: '')
+     * @param initialValue - Initial value loaded from TOML file (default: '')
+     * @param userInputValue - Current user-provided value (default: '')
+     * @param previousUserInputValue - Previous user input value (default: '')
+     * @param isMandatory - Whether this parameter must have a non-empty value (default: false)
+     * @param type - Input type: 'string' for plain text, 'password' for masked input (default: 'string')
+     * @param hint - Optional guidance text shown to the user when editing this parameter
+     */
+    constructor(
+        key: string,
+        label: string = '',
+        initialValue: string = '',
+        userInputValue: string = '',
+        previousUserInputValue: string = '',
+        isMandatory: boolean = false,
+        type: 'string' | 'password' = 'string',
+        hint?: string
+    ) {
+        super(key, label, initialValue, userInputValue, isMandatory, type, hint);
+        this._previousUserInputValue = previousUserInputValue;
+    }
+
+    /**
+     * Returns the previous user input value.
+     *
+     * @returns The previous user input value
+     */
+    getPreviousUserInputValue(): string {
+        return this._previousUserInputValue;
+    }
+
+    /**
+     * Sets the previous user input value.
+     *
+     * @param value - The previous user input value to set
+     */
+    setPreviousUserInputValue(value: string): void {
+        this._previousUserInputValue = value;
+    }
+
+    /**
+     * Updates the user input value and tracks the previous value.
+     *
+     * Automatically moves the current userInputValue to previousUserInputValue
+     * before setting the new value.
+     *
+     * @param value - The new user input value
+     */
+    updateUserInputValue(value: string): void {
+        this._previousUserInputValue = this.getUserInputValue();
+        this.setUserInputValue(value);
+    }
+
+    /**
+     * Reverts to the previous user input value.
+     *
+     * Sets userInputValue to previousUserInputValue and clears previousUserInputValue.
+     *
+     * @returns true if there was a previous value to revert to, false otherwise
+     */
+    revertToPrevious(): boolean {
+        if (this._previousUserInputValue !== '') {
+            this.setUserInputValue(this._previousUserInputValue);
+            this._previousUserInputValue = '';
+            return true;
+        }
+        return false;
+    }
+
+    /**
+     * Creates an EditableConfigParameter from a ConfigParameter instance.
+     *
+     * @param param - The ConfigParameter to convert
+     * @returns A new EditableConfigParameter instance
+     */
+    static fromConfigParameter(param: ConfigParameter): EditableConfigParameter {
+        return new EditableConfigParameter(
+            param.getKey(),
+            param.getLabel(),
+            param.getInitialValue(),
+            param.getUserInputValue(),
+            '',
+            param.isMandatory(),
+            param.getType(),
+            param.getHint()
+        );
+    }
+}
+
+/**
+ * Represents configuration for a single managed component with edit tracking.
+ *
+ * Extends ComponentConfig to use EditableConfigParameter instead of ConfigParameter,
+ * enabling full edit history tracking for all parameters in the component.
+ */
+export class EditableComponentConfig extends ComponentConfig {
+    /**
+     * Creates a new EditableComponentConfig instance.
+     *
+     * @param name - The name of the managed component (e.g., 'redis', 'postgres')
+     */
+    constructor(name: string) {
+        super(name);
+    }
+
+    /**
+     * Returns all parameters for this component as EditableConfigParameter instances.
+     *
+     * @returns Array of all EditableConfigParameter instances
+     */
+    getAllParameters(): EditableConfigParameter[] {
+        return Array.from((this as any)._parameters.values()) as EditableConfigParameter[];
+    }
+
+    /**
+     * Retrieves a parameter by its key.
+     *
+     * @param key - The parameter key to look up
+     * @returns The EditableConfigParameter if found, undefined otherwise
+     */
+    getParameter(key: string): EditableConfigParameter | undefined {
+        return (this as any)._parameters.get(key) as EditableConfigParameter | undefined;
+    }
+}
\ No newline at end of file
diff --git a/util/config/configurator/types.ts b/util/config/configurator/types.ts
new file mode 100644
index 00000000..56108a1f
--- /dev/null
+++ b/util/config/configurator/types.ts
@@ -0,0 +1,19 @@
+/**
+ * Result type for operations that can succeed or fail.
+ *
+ * @template T - The type of data returned on success
+ * @template E - The type of error returned on failure
+ */
+export type Result<T, E> = {
+  success: boolean;
+  data?: T;
+  error?: E;
+};
+
+/**
+ * Result type for validation operations.
+ */
+export type ValidationResult = {
+  success: boolean;
+  errors: string[];
+};
\ No newline at end of file
diff --git a/util/docopts.md b/util/docopts.md
index 3173608b..1ab16290 100644
--- a/util/docopts.md
+++ b/util/docopts.md
@@ -24,6 +24,7 @@ OpenServerless Utilities
 
 ```text
 Usage:
+  util apihost
   util system
   util update-cli
   util check-operator-version <version>
@@ -33,6 +34,7 @@ Usage:
   util no-user-secrets <username>
   util kubectl <args>...
   util kubeconfig
+  util kubeget <object> <jsonpath>
   util config <configjson> [--override] [--showhelp]
   util clean
   util upload [<folder>] [--batchsize=<batchsize>] [--verbose] [--clean]
@@ -42,21 +44,22 @@ Usage:
   util ingress-type
   util edit [<plugin>]
   util link-plugin <plugin>
-  util docker-proxy [<port>] [<host>] [--remove]
 ```
 
 ## Commands
 
 ```
+-  apihost                 current apihost
 -  system                  system info (<os>-<arch> in Go format)
 -  update-cli              update the cli downloading the binary
 -  check-operator-version  check if you need to update the operator
--  secrets                 generate system secrets 
+-  secrets                 generate system secrets
 -  nosecrets               remove system secrets
 -  user-secrets            generate user secrets for the given user
 -  no-user-secrets         remove user secrets for the given user
 -  kubectl                 execute kubectl on current kubeconfig
 -  kubeconfig              export OVERWRITING current kubeconfig to ~/.kube/config
+-  kubeget                 extract info from an object with a jsonpath
 -  config                  update configuration file interactively
 -  clean                   clean up the web bucket
 -  upload                  uploads a folder to the web bucket in OpenServerless.
@@ -66,7 +69,6 @@ Usage:
 -  ingress-type            return the ingress type
 -  edit                    edit (with vscode) the current tasks or a plugin
 -  link-plugin             link the <plugin> in current directory to the global list
--  docker-proxy            launch (or remove) in docker a proxy listening in public <port> (default 8080) to the <host> (default devel.miniops.me)
 ```
 
 ## Options
diff --git a/util/freeze/opsfile.yml b/util/freeze/opsfile.yml
new file mode 100644
index 00000000..5ebb6b4f
--- /dev/null
+++ b/util/freeze/opsfile.yml
@@ -0,0 +1,176 @@
+version: 3
+
+vars:
+  CLUSTER: nuvolaris
+  KIND_CLUSTER: '{{.CLUSTER}}-control-plane'
+  BASE:
+    sh: echo ~/.ops
+  IMAGES:
+     sh: >
+        echo {{.BASE}}/{{OS}}-{{ARCH}}/images
+  KIND_IMAGE:
+    sh: >
+       awk '/image:/{print $2}' $OPS_ROOT/setup/docker/kind.yaml | tee _docker.lst
+
+tasks:
+
+  docker-list:
+    silent: true
+    desc: list docker images
+    cmds:
+    - docker inspect  {{.KIND_CLUSTER}} 2>/dev/null | jq -r '.[0].Config.Image'
+
+  kind-list:
+    silent: true
+    env:
+      CLU: "{{.KIND_CLUSTER}}"
+    desc: list images in kindes
+    cmds:
+    - awk '/image:/ {print $2}' $OPS_ROOT/setup/docker/ingress-deploy.yaml | tee _kind.lst
+    - >
+      docker exec -it "$CLU" crictl images 2>/dev/null
+      | awk 'NR > 1  && !/^(registry.k8s.io\/(kube-|coredns|etc|pause|ingress-nginx)|docker.io\/kindest\/)/ {print  $1 ":" $2 }'
+      | tee _kind.lst
+
+  docker-save:
+    silent: true
+    desc: save images in docker
+    cmds:
+    - docker inspect  {{.KIND_CLUSTER}} | jq -r '.[0].Config.Image' >_docker.lst
+    - mkdir -p {{.IMAGES}}/docker
+    - |
+      cat _docker.lst | while read img
+      do
+        file={{.IMAGES}}/docker/$(base64 -e "$img")
+        if test -e "$file"
+        then echo "already saved $img.{{ARCH}} "
+        else echo ">>> Saving: $img"
+             if docker pull --platform linux/{{ARCH}} "$img"
+             then echo "OK: save $file"
+             else echo "*** FAIL: pull $img"
+             fi
+             if docker save "$img" -o "$file"
+             then echo "OK: save $file"
+             else echo "*** FAIL: save $file"
+             fi
+        fi
+      done
+
+  kind-save:
+    silent: true
+    desc: list images in kindes
+    env:
+      CLU: "{{.KIND_CLUSTER}}"
+    cmds:
+    - awk '/image:/ {print $2}' $OPS_ROOT/setup/docker/ingress-deploy.yaml > _kind.lst
+    - >
+      docker exec -it "$CLU" crictl images 2>/dev/null
+      | awk 'NR > 1  && !/^(registry.k8s.io\/(kube-|coredns|etc|pause|ingress-nginx)|docker.io\/kindest\/)/ {print  $1 ":" $2 }'
+      >> _kind.lst
+    - mkdir -p {{.IMAGES}}/kind
+    - |
+      cat _kind.lst | while read img
+      do
+        file={{.IMAGES}}/kind/"$(base64 -e "$img")"
+        if test -e "$file"
+        then echo "already saved $img"
+        else echo ">>> Saving: {{ARCH}} $img"
+            if !  docker pull --platform linux/{{ARCH}} "$img"
+            then echo "*** FAIL pull $img" ; continue
+            fi
+            if ! docker save "$img" -o "$file"
+            then echo "*** FAIL save $file" ; continue
+            fi
+            echo "OK: save $file"
+        fi
+      done
+
+  image-save:
+    desc: save images
+    cmds:
+    - kind get clusters | grep {{.CLUSTER}} || die "please setup an ops cluster first"
+    - task: docker-save
+    - task: kind-save
+
+  image-list:
+    silent: true
+    desc: list images
+    cmds:
+      - rm -f _images.lst
+      - |
+        for dir in docker kind
+        do for file in {{.IMAGES}}/$dir/*
+           do if test -e "$file"
+              then
+                b64=$(basename "$file")
+                img=$(base64 -d "${b64}")
+                echo $dir/$img
+                echo $img >>_images.lst
+              fi
+           done
+        done
+
+  image-clean:
+    prompt: "are you sure you wnat to remote images fron disk"
+    silent: true
+    desc: clean images
+    cmds:
+    - rm -f -v  {{.IMAGES}}/docker/* {{.IMAGES}}/kind/*
+
+  docker-load:
+    silent: true
+    desc: load disk images in docker
+    cmds:
+      - |
+        for file in {{.IMAGES}}/docker/*
+        do
+          b64=$(basename "$file")
+          img=$(base64 -d "${b64#*-}")
+          echo Docker: loading "$img"
+          docker load -i "$file"
+          #docker tag $(awk '{print $4}' _image) $img
+          docker tag ${img#*@} ${img%@*}
+        done
+    status:
+      - test -z "$(ls {{.IMAGES}}/docker/* 2>/dev/null)"
+
+  kind-load:
+    silent: true
+    desc: load disk images in kind
+    cmds:
+      - |
+        for file in {{.IMAGES}}/kind/*
+        do
+           b64="$(basename "$file")"
+           img="$(base64 -d "${b64#*-}")"
+           echo "Kind: loading $img"
+           docker exec -i {{.CLUSTER}}-control-plane ctr --namespace=k8s.io images import --snapshotter=overlayfs - < "$file"
+        done
+        echo 'Images loaded:'
+      - task: kind-list
+    status:
+      - test -z "$(ls {{.IMAGES}}/kind/* 2>/dev/null)"
+
+  test-clean:
+  ignore_errors: true
+  cmds:
+  - task: docker-clean
+  - kind delete cluster --name=test
+
+  test-compare:
+  - task: docker-list
+  - task: kind-list
+  - task: image-list
+  - cat _docker.lst _kind.lst | sort >_loaded.lst
+  - sort <_images.lst >_saved.lst
+  - echo "Comparing differences loaded and saved"
+  - diff _loaded.lst _saved.lst
+
+  test:
+  - task: test-clean
+  - task: docker-load
+  - kind create cluster --name=test --image={{.KIND_IMAGE}}
+  - task: kind-load
+  - task: test-compare
+  - task: test-clean
+
diff --git a/util/kube/opsfile.yml b/util/kube/opsfile.yml
index 129f03ce..5d16367e 100644
--- a/util/kube/opsfile.yml
+++ b/util/kube/opsfile.yml
@@ -33,7 +33,7 @@ env:
 tasks:
 
   waitfor:
-    desc: wait for an object matching a condition 
+    desc: wait for an object matching a condition
     silent: true
     cmds:
       - test -n "{{.OBJ}}" || die "use OBJ=<pod/pod-name>"
@@ -42,14 +42,14 @@ tasks:
         N=0
         RES=false
         while [[ $N -lt {{.RETRY}} ]]
-        do           
+        do
           if kubectl -n nuvolaris wait --for="{{.FOR}}" "{{.OBJ}}" --timeout="{{.TIMEOUT}}s"
-          then RES=true; break            
+          then RES=true; break
           else echo "$((N++)) Waiting {{.OBJ}} for {{.FOR}}"
                sleep "{{.SLEEP}}s"
           fi
         done
-        $RES 
+        $RES
 
   wait:
     desc: wait for a value matching the given jsonpath on the specific resources under the namespace nuvolaris
@@ -61,17 +61,17 @@ tasks:
         N=0
         RES=false
         while [[ $N -lt {{.RETRY}} ]]
-        do           
+        do
           MATCHING_VALUE="$(kubectl -n nuvolaris get {{.OBJECT}} -o jsonpath='{{.JSONPATH}}')"
           if [[ -z "$MATCHING_VALUE" ]]
-          then 
+          then
             echo "$((N++)) Waiting for {{.JSONPATH}} to be non empty value"
             sleep 5
-          else  
+          else
             RES=true; break
           fi
         done
-        $RES 
+        $RES
 
   export:
     desc: exporting NAMEd kubeconfig to specified FILE
@@ -80,7 +80,7 @@ tasks:
     - test -e "$OPS_TMP/{{.NAME}}.kubeconfig" || die "no {{.NAME}} kubeconfig"
     - |
       FILE="$(realpath {{.FILE}})"
-      cp "$OPS_TMP/kubeconfig" "$FILE" 
+      cp "$OPS_TMP/kubeconfig" "$FILE"
 
   import:
     desc: importing FILE  to the NAMEd kubeconfig
diff --git a/util/opsfile.yml b/util/opsfile.yml
index eacf8af2..3d7e00ed 100644
--- a/util/opsfile.yml
+++ b/util/opsfile.yml
@@ -36,7 +36,7 @@ tasks:
         if {{.__showhelp}}
         then FLAGS="$FLAGS --showhelp"
         fi
-        if {{.__override}} 
+        if {{.__override}}
         then FLAGS="$FLAGS --override"
         fi
         bun config/configurator.js $(opspath {{._configjson_}}) $FLAGS
@@ -47,6 +47,12 @@ tasks:
     cmds:
       - echo "{{OS}}-{{ARCH}}"
 
+  apihost:
+    desc: current apihost
+    silent: true
+    cmds:
+      - ops -wsk property get | awk '/whisk API host/{print $4}'
+
   update-cli:
     desc: update CLI
     silent: true
@@ -70,7 +76,7 @@ tasks:
           else echo "cannot auto update ops - update it manually"
                echo "please run 'curl -sL bit.ly/get-ops | bash'"
           fi
-        else 
+        else
           echo "skipping rename $OPS_TMP/ops{{.EXE}} $OPS_CMD"
         fi
 
@@ -92,6 +98,7 @@ tasks:
       - config SECRET_POSTGRES_ADMIN="$(random --str 12)" SECRET_POSTGRES_REPLICA="$(random --str 12)" SECRET_POSTGRES_NUVOLARIS="$(random --str 12)"
       - config SECRET_ETCD_ROOT="$(random --str 12)" SECRET_MILVUS_ROOT="$(random --str 12)" SECRET_MILVUS_S3="$(random --str 12)" SECRET_MILVUS_NUVOLARIS="$(random --str 12)"
       - config SECRET_NUVOLARIS_METADATA="$(random --str 12)"
+      - config SECRET_SEAWEEDFS_NUVOLARIS="$(random --str 12)"
       - echo "Generated $(config -d | rg SECRET_ | wc -l) secrets."
 
   user-secrets:
@@ -144,7 +151,7 @@ tasks:
     cmds:
       - |
         # no quote here - syntax array generated by docps
-        args={{._args_}} 
+        args={{._args_}}
         # exanded and assigned to positional parameter
         set -- ${args[@]}
         # removing the '--' at the beginning required to pass extra flags
@@ -159,6 +166,21 @@ tasks:
           else echo ~/.kube/config
           fi
 
+  kubeget:
+    desc: extract informations from
+    silent: true
+    cmds:
+    - kubectl -n nuvolaris get "$OBJECT" -o jsonpath="{$JSONPATH}"
+    env:
+      JSONPATH: '{{._jsonpath_}}'
+      OBJECT: '{{._object_}}'
+      KUBECONFIG:
+        sh: |-
+          if test -e "$OPS_TMP/kubeconfig"
+          then echo "$OPS_TMP/kubeconfig"
+          else echo ~/.kube/config
+          fi
+
   kubeconfig:
     silent: true
     prompt: Are you sure? I am overwriting your ~/.kube/config
@@ -166,7 +188,7 @@ tasks:
     cmds:
       - |
         if test -e "$OPS_TMP/kubeconfig"
-        then  
+        then
           if test -e ~/.kube/config
           then BKP=~/.kube/config.$(datefmt -f ms)
                mv ~/.kube/config $(realpath $BKP)
@@ -199,7 +221,7 @@ tasks:
     env:
       FOLDER_PATH:
         sh: |
-          if test -n "{{._folder_}}" 
+          if test -n "{{._folder_}}"
           then opspath "{{._folder_}}"
           else opspath .
           fi
@@ -257,30 +279,6 @@ tasks:
           exit 1
         fi
 
-  docker-proxy:
-    desc: create in docker a proxy to expose miniops.me (or others)
-    silent: true
-    vars:
-      PORT: '{{or ._port_ "8080"}}'
-      HOST: '{{or ._host_ "devel.miniops.me"}}'
-      NGINX_CONF: >
-        server {
-           listen 80;
-           location / { 
-             proxy_pass http://nuvolaris-control-plane:80;
-             proxy_set_header Host {{.HOST}}; 
-           } 
-        }
-    cmds:
-    - |
-      if {{.__remove}}
-      then docker rm docker-proxy-{{.PORT}} -f
-      else
-        if docker run -d --name docker-proxy-{{.PORT}} -p {{.PORT}}:80 --network kind nginx:alpine sh -c \
-           "echo '{{.NGINX_CONF}}' > /etc/nginx/conf.d/default.conf && nginx -g 'daemon off;'"
-        then echo "docker-proxy started on port {{.PORT}} to  http://{{.HOST}}"
-        else echo "Cannot start docker-proxy-{{.PORT}} - either the port is busy or another instance is running, remove it" 
-        fi       
-      fi
-
+  freeze:
+    desc: freeze util