fix(setup): only manage k8s lifecycle on a verified-local context

Greptile: sim down/reset used the ambient kube-context, so switching context after setup could uninstall a same-named sim-dev release from the wrong cluster. Gate k8sInstall on the same locality check the wizard uses (API server is loopback/docker-internal) via a shared isLocalKubeContext helper — the wizard only ever deploys locally, so a remote current-context is never treated as a Sim install.

Author: TheodoreSpeaks

scripts/setup/lifecycle.ts

@@ -2,6 +2,7 @@ import { spawnSync } from 'node:child_process'
 import { DB_CONTAINER, type Detection, REDIS_CONTAINER, runDetection } from './detect.ts'
 import { archiveEnvFile, ROOT } from './env-files.ts'
 import { SetupError } from './errors.ts'
+import { isLocalKubeContext } from './modes/k8s.ts'
 import { httpHealth } from './probes.ts'
 import * as p from './prompter.ts'
 import { glyph, theme } from './theme.ts'
@@ -93,7 +94,11 @@ function devInstall(detection: Detection): DevInstall | null {
 
 function k8sInstall(detection: Detection): K8sInstall | null {
   const context = detection.kubeContext
-  if (!context) return null
+  // Only manage k8s on a verified-local context. The ambient current-context can
+  // change after setup, and the wizard only ever deploys to a local cluster — so
+  // gating on locality stops `down`/`reset` from uninstalling a same-named release
+  // from a remote cluster the user happens to be pointed at.
+  if (!context || !isLocalKubeContext(context)) return null
   const status = spawnSync(
     'helm',
     ['status', K8S_RELEASE, '--kube-context', context, '-n', K8S_NAMESPACE],

scripts/setup/modes/k8s.ts

@@ -38,6 +38,12 @@ const LOCAL_SERVER_HOSTS = new Set([
   'host.docker.internal',
 ])
 
+/** True when a context's API server is a loopback/host address — i.e. a local cluster. */
+export function isLocalKubeContext(context: string): boolean {
+  const server = contextServerHost(context)
+  return server !== null && LOCAL_SERVER_HOSTS.has(server)
+}
+
 /** The API server host a context points at, or null if kubectl can't resolve it. */
 function contextServerHost(context: string): string | null {
   const result = spawnSync(