@agent-vm/agent-vm 0.0.20

package/dist/cli/backup-commands.js

@@ -0,0 +1,46 @@
+import { createResolverFromSystemConfig, readZoneFlag, requireZone, writeJson, } from './agent-vm-cli-support.js';
+export async function runBackupCommand(options) {
+    const backupSubcommand = options.restArguments[0];
+    const zone = requireZone(options.systemConfig, readZoneFlag(options.restArguments));
+    const zoneId = zone.id;
+    const backupDir = `${zone.gateway.stateDir}/backups`;
+    if (backupSubcommand === 'list') {
+        const backupManager = options.dependencies.createZoneBackupManager({
+            decrypt: async () => { },
+            encrypt: async () => { },
+        });
+        writeJson(options.io, backupManager.listBackups({ backupDir, zoneId }));
+        return;
+    }
+    const secretResolver = await createResolverFromSystemConfig(options.systemConfig, options.dependencies);
+    const backupEncryption = options.dependencies.createAgeBackupEncryption({
+        resolveIdentity: async () => await secretResolver.resolve({
+            source: '1password',
+            ref: `op://agent-vm/agent-${zoneId}-backup/password`,
+        }),
+    });
+    const backupManager = options.dependencies.createZoneBackupManager(backupEncryption);
+    if (backupSubcommand === 'create') {
+        writeJson(options.io, await backupManager.createBackup({
+            backupDir,
+            stateDir: zone.gateway.stateDir,
+            workspaceDir: zone.gateway.workspaceDir,
+            zoneId,
+        }));
+        return;
+    }
+    if (backupSubcommand === 'restore') {
+        const backupPath = options.restArguments[1];
+        if (!backupPath || backupPath.startsWith('--')) {
+            throw new Error('Usage: agent-vm backup restore <path> [--zone <id>]');
+        }
+        writeJson(options.io, await backupManager.restoreBackup({
+            backupPath,
+            stateDir: zone.gateway.stateDir,
+            workspaceDir: zone.gateway.workspaceDir,
+        }));
+        return;
+    }
+    throw new Error(`Unknown backup subcommand '${backupSubcommand ?? 'undefined'}'.`);
+}
+//# sourceMappingURL=backup-commands.js.map

package/dist/cli/backup-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-commands.js","sourceRoot":"","sources":["../../src/cli/backup-commands.ts"],"names":[],"mappings":"AACA,OAAO,EACN,8BAA8B,EAG9B,YAAY,EACZ,WAAW,EACX,SAAS,GACT,MAAM,2BAA2B,CAAC;AASnC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAgC;IACtE,MAAM,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,UAAU,CAAC;IAErD,IAAI,gBAAgB,KAAK,MAAM,EAAE,CAAC;QACjC,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,uBAAuB,CAAC;YAClE,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YACvB,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;SACvB,CAAC,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,aAAa,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACxE,OAAO;IACR,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,8BAA8B,CAC1D,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,YAAY,CACpB,CAAC;IACF,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,yBAAyB,CAAC;QACvE,eAAe,EAAE,KAAK,IAAI,EAAE,CAC3B,MAAM,cAAc,CAAC,OAAO,CAAC;YAC5B,MAAM,EAAE,WAAW;YACnB,GAAG,EAAE,uBAAuB,MAAM,kBAAkB;SACpD,CAAC;KACH,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;IAErF,IAAI,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QACnC,SAAS,CACR,OAAO,CAAC,EAAE,EACV,MAAM,aAAa,CAAC,YAAY,CAAC;YAChC,SAAS;YACT,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;YAC/B,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,MAAM;SACN,CAAC,CACF,CAAC;QACF,OAAO;IACR,CAAC;IAED,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACxE,CAAC;QACD,SAAS,CACR,OAAO,CAAC,EAAE,EACV,MAAM,aAAa,CAAC,aAAa,CAAC;YACjC,UAAU;YACV,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;YAC/B,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;SACvC,CAAC,CACF,CAAC;QACF,OAAO;IACR,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,8BAA8B,gBAAgB,IAAI,WAAW,IAAI,CAAC,CAAC;AACpF,CAAC"}

package/dist/cli/build-command.d.ts

@@ -0,0 +1,24 @@
+import type { BuildImageResult } from '@agent-vm/gondolin-adapter';
+import type { LoadedSystemConfig } from '../config/system-config.js';
+export interface BuildCommandDependencies {
+    readonly buildDockerImage?: (options: {
+        readonly dockerfilePath: string;
+        readonly imageTag: string;
+    }) => Promise<void>;
+    readonly buildGondolinImage?: (options: {
+        readonly buildConfigPath: string;
+        readonly systemCacheIdentifierPath: string;
+        readonly cacheDir: string;
+        readonly fullReset?: boolean;
+    }) => Promise<BuildImageResult>;
+    readonly resolveOciImageTag?: (buildConfigPath: string) => Promise<string>;
+    /** Override the task runner for testing (bypasses tasuku terminal rendering). */
+    readonly runTask?: (title: string, fn: () => Promise<void>) => Promise<void>;
+    readonly resolveProjectRootFromDockerfile?: (dockerfilePath: string) => Promise<string>;
+    readonly syncBundledOpenClawPlugin?: (targetDir: string, profileName: string) => Promise<'created' | 'skipped'>;
+}
+export declare function runBuildCommand(options: {
+    readonly forceRebuild?: boolean;
+    readonly systemConfig: LoadedSystemConfig;
+}, dependencies?: BuildCommandDependencies): Promise<void>;
+//# sourceMappingURL=build-command.d.ts.map

package/dist/cli/build-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-command.d.ts","sourceRoot":"","sources":["../../src/cli/build-command.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAMnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAIrE,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE;QACrC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC1B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE;QACvC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;QAC3C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;KAC7B,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3E,iFAAiF;IACjF,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,QAAQ,CAAC,gCAAgC,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACxF,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CACpC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,KACf,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;CACpC;AAoFD,wBAAsB,eAAe,CACpC,OAAO,EAAE;IACR,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;CAC1C,EACD,YAAY,GAAE,wBAA6B,GACzC,OAAO,CAAC,IAAI,CAAC,CAsFf"}

package/dist/cli/build-command.js

@@ -0,0 +1,132 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import task from 'tasuku';
+import { z } from 'zod';
+import { buildDockerImage as buildDockerImageDefault } from '../build/docker-image-builder.js';
+import { buildGondolinImage as buildGondolinImageDefault } from '../build/gondolin-image-builder.js';
+import { formatZodError } from './format-zod-error.js';
+import { syncBundledOpenClawPluginBundle } from './openclaw-plugin-bundle.js';
+const ociImageTagSchema = z.object({
+    oci: z.object({
+        image: z.string().min(1),
+    }),
+});
+function imageTargetKey(imageTarget) {
+    return `${imageTarget.family}/${imageTarget.name}`;
+}
+async function resolveOciImageTagFromConfig(buildConfigPath) {
+    const rawConfig = JSON.parse(await fs.readFile(buildConfigPath, 'utf8'));
+    const parsedConfig = ociImageTagSchema.safeParse(rawConfig);
+    if (!parsedConfig.success) {
+        throw new Error(formatZodError(`Invalid build-config.json at ${buildConfigPath}:`, parsedConfig.error));
+    }
+    return parsedConfig.data.oci.image;
+}
+async function assertUniqueDockerImageTags(imageTargets, resolveOciImageTag) {
+    const profileByTag = new Map();
+    const tagByProfile = new Map();
+    for (const imageTarget of imageTargets) {
+        // oxlint-disable-next-line no-await-in-loop -- collision errors are clearer in stable target order
+        const imageTag = await resolveOciImageTag(imageTarget.buildConfigPath);
+        const existingProfile = profileByTag.get(imageTag);
+        if (existingProfile) {
+            throw new Error(`Docker image tag '${imageTag}' is used by both image profiles '${existingProfile}' and '${imageTarget.name}'. Give each Docker-backed image profile a unique oci.image tag.`);
+        }
+        profileByTag.set(imageTag, imageTarget.name);
+        tagByProfile.set(imageTarget.name, imageTag);
+    }
+    return tagByProfile;
+}
+async function defaultRunTask(title, fn) {
+    await task(title, async (taskState) => {
+        taskState.startTime();
+        await fn();
+        taskState.setTitle(`${title} done`);
+    });
+}
+async function resolveProjectRootFromDockerfile(dockerfilePath) {
+    let searchDirectory = path.dirname(path.resolve(dockerfilePath));
+    for (;;) {
+        try {
+            // oxlint-disable-next-line no-await-in-loop -- upward root discovery is intentionally sequential
+            await fs.access(path.join(searchDirectory, 'config', 'system.json'));
+            return searchDirectory;
+        }
+        catch {
+            const parentDirectory = path.dirname(searchDirectory);
+            if (parentDirectory === searchDirectory) {
+                // Fallback for older test scaffolds and legacy layouts that still follow the
+                // standard vm-images/gateways/openclaw/Dockerfile shape but do not materialize config/system.json.
+                return path.resolve(dockerfilePath, '..', '..', '..');
+            }
+            searchDirectory = parentDirectory;
+        }
+    }
+}
+export async function runBuildCommand(options, dependencies = {}) {
+    const buildDockerImage = dependencies.buildDockerImage ?? buildDockerImageDefault;
+    const buildGondolinImage = dependencies.buildGondolinImage ?? buildGondolinImageDefault;
+    const resolveOciImageTag = dependencies.resolveOciImageTag ?? resolveOciImageTagFromConfig;
+    const runTaskStep = dependencies.runTask ?? defaultRunTask;
+    const resolveProjectRoot = dependencies.resolveProjectRootFromDockerfile ?? resolveProjectRootFromDockerfile;
+    const syncBundledOpenClawPlugin = dependencies.syncBundledOpenClawPlugin ?? syncBundledOpenClawPluginBundle;
+    const systemCacheIdentifierPath = options.systemConfig.systemCacheIdentifierPath;
+    const gatewayImageTargets = Object.entries(options.systemConfig.imageProfiles.gateways).map(([profileName, profile]) => ({
+        buildConfigPath: profile.buildConfig,
+        cacheDirectory: path.join(options.systemConfig.cacheDir, 'gateway-images', profileName),
+        systemCacheIdentifierPath,
+        dockerfile: profile.dockerfile,
+        family: 'gateway',
+        gatewayType: profile.type,
+        name: profileName,
+    }));
+    const toolVmImageTargets = Object.entries(options.systemConfig.imageProfiles.toolVms).map(([profileName, profile]) => ({
+        buildConfigPath: profile.buildConfig,
+        cacheDirectory: path.join(options.systemConfig.cacheDir, 'tool-vm-images', profileName),
+        systemCacheIdentifierPath,
+        dockerfile: profile.dockerfile,
+        family: 'toolVm',
+        name: profileName,
+    }));
+    const imageTargets = [...gatewayImageTargets, ...toolVmImageTargets];
+    const dockerImageTargets = imageTargets.filter((imageTarget) => imageTarget.dockerfile !== undefined);
+    const dockerImageTagByProfile = await assertUniqueDockerImageTags(dockerImageTargets, resolveOciImageTag);
+    // oxlint-disable-next-line no-await-in-loop -- image builds are intentionally sequential for stable task output and shared image tags
+    for (const imageTarget of dockerImageTargets) {
+        const imageTag = dockerImageTagByProfile.get(imageTarget.name);
+        if (!imageTag) {
+            throw new Error(`Missing resolved Docker image tag for image profile '${imageTarget.name}'.`);
+        }
+        if (imageTarget.family === 'gateway' && imageTarget.gatewayType === 'openclaw') {
+            // Resolve the scaffold root via config/system.json instead of assuming a fixed
+            // vm-images/gateways/openclaw/Dockerfile depth.
+            // oxlint-disable-next-line no-await-in-loop -- root discovery belongs to the matching build target
+            const projectRootDirectory = await resolveProjectRoot(imageTarget.dockerfile);
+            // oxlint-disable-next-line no-await-in-loop -- bundle sync must complete before the matching docker build starts
+            await runTaskStep('OpenClaw plugin bundle', async () => {
+                await syncBundledOpenClawPlugin(projectRootDirectory, imageTarget.name);
+            });
+        }
+        // oxlint-disable-next-line no-await-in-loop -- docker builds intentionally run one at a time to keep task output readable
+        await runTaskStep(`Docker: ${imageTarget.family}/${imageTarget.name} (${imageTag})`, async () => {
+            await buildDockerImage({
+                dockerfilePath: imageTarget.dockerfile,
+                imageTag,
+            });
+        });
+    }
+    const dockerBackedTargets = new Set(dockerImageTargets.map((imageTarget) => imageTargetKey(imageTarget)));
+    for (const imageTarget of imageTargets) {
+        const shouldResetGondolinCache = options.forceRebuild === true || dockerBackedTargets.has(imageTargetKey(imageTarget));
+        // oxlint-disable-next-line no-await-in-loop -- gondolin cache rebuilds are intentionally sequenced per image target
+        await runTaskStep(`Gondolin: ${imageTarget.family}/${imageTarget.name}`, async () => {
+            await buildGondolinImage({
+                buildConfigPath: imageTarget.buildConfigPath,
+                systemCacheIdentifierPath: imageTarget.systemCacheIdentifierPath,
+                cacheDir: imageTarget.cacheDirectory,
+                ...(shouldResetGondolinCache ? { fullReset: true } : {}),
+            });
+        });
+    }
+}
+//# sourceMappingURL=build-command.js.map

package/dist/cli/build-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-command.js","sourceRoot":"","sources":["../../src/cli/build-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,IAAI,MAAM,QAAQ,CAAC;AAC1B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,IAAI,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC/F,OAAO,EAAE,kBAAkB,IAAI,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAErG,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AAuB9E,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACxB,CAAC;CACF,CAAC,CAAC;AAYH,SAAS,cAAc,CAAC,WAAiD;IACxE,OAAO,GAAG,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,eAAuB;IAClE,MAAM,SAAS,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;IAClF,MAAM,YAAY,GAAG,iBAAiB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC5D,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACd,cAAc,CAAC,gCAAgC,eAAe,GAAG,EAAE,YAAY,CAAC,KAAK,CAAC,CACtF,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,2BAA2B,CACzC,YAAwE,EACxE,kBAAgE;IAEhE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE/C,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACxC,mGAAmG;QACnG,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;QACvE,MAAM,eAAe,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACd,qBAAqB,QAAQ,qCAAqC,eAAe,UAAU,WAAW,CAAC,IAAI,kEAAkE,CAC7K,CAAC;QACH,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;QAC7C,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,YAAY,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,KAAa,EAAE,EAAuB;IACnE,MAAM,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;QACrC,SAAS,CAAC,SAAS,EAAE,CAAC;QACtB,MAAM,EAAE,EAAE,CAAC;QACX,SAAS,CAAC,QAAQ,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gCAAgC,CAAC,cAAsB;IACrE,IAAI,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IAEjE,SAAS,CAAC;QACT,IAAI,CAAC;YACJ,iGAAiG;YACjG,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;YACrE,OAAO,eAAe,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YACtD,IAAI,eAAe,KAAK,eAAe,EAAE,CAAC;gBACzC,6EAA6E;gBAC7E,mGAAmG;gBACnG,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACvD,CAAC;YACD,eAAe,GAAG,eAAe,CAAC;QACnC,CAAC;IACF,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,OAGC,EACD,eAAyC,EAAE;IAE3C,MAAM,gBAAgB,GAAG,YAAY,CAAC,gBAAgB,IAAI,uBAAuB,CAAC;IAClF,MAAM,kBAAkB,GAAG,YAAY,CAAC,kBAAkB,IAAI,yBAAyB,CAAC;IACxF,MAAM,kBAAkB,GAAG,YAAY,CAAC,kBAAkB,IAAI,4BAA4B,CAAC;IAC3F,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,IAAI,cAAc,CAAC;IAC3D,MAAM,kBAAkB,GACvB,YAAY,CAAC,gCAAgC,IAAI,gCAAgC,CAAC;IACnF,MAAM,yBAAyB,GAC9B,YAAY,CAAC,yBAAyB,IAAI,+BAA+B,CAAC;IAC3E,MAAM,yBAAyB,GAAG,OAAO,CAAC,YAAY,CAAC,yBAAyB,CAAC;IAEjF,MAAM,mBAAmB,GAA2B,MAAM,CAAC,OAAO,CACjE,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,QAAQ,CAC3C,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QAClC,eAAe,EAAE,OAAO,CAAC,WAAW;QACpC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,EAAE,gBAAgB,EAAE,WAAW,CAAC;QACvF,yBAAyB;QACzB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM,EAAE,SAAkB;QAC1B,WAAW,EAAE,OAAO,CAAC,IAAI;QACzB,IAAI,EAAE,WAAW;KACjB,CAAC,CAAC,CAAC;IACJ,MAAM,kBAAkB,GAA2B,MAAM,CAAC,OAAO,CAChE,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,OAAO,CAC1C,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QAClC,eAAe,EAAE,OAAO,CAAC,WAAW;QACpC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,EAAE,gBAAgB,EAAE,WAAW,CAAC;QACvF,yBAAyB;QACzB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM,EAAE,QAAiB;QACzB,IAAI,EAAE,WAAW;KACjB,CAAC,CAAC,CAAC;IACJ,MAAM,YAAY,GAA2B,CAAC,GAAG,mBAAmB,EAAE,GAAG,kBAAkB,CAAC,CAAC;IAC7F,MAAM,kBAAkB,GAAG,YAAY,CAAC,MAAM,CAC7C,CAAC,WAAW,EAAgE,EAAE,CAC7E,WAAW,CAAC,UAAU,KAAK,SAAS,CACrC,CAAC;IACF,MAAM,uBAAuB,GAAG,MAAM,2BAA2B,CAChE,kBAAkB,EAClB,kBAAkB,CAClB,CAAC;IAEF,sIAAsI;IACtI,KAAK,MAAM,WAAW,IAAI,kBAAkB,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,wDAAwD,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,IAAI,WAAW,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YAChF,+EAA+E;YAC/E,gDAAgD;YAChD,mGAAmG;YACnG,MAAM,oBAAoB,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YAC9E,iHAAiH;YACjH,MAAM,WAAW,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;gBACtD,MAAM,yBAAyB,CAAC,oBAAoB,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;YACzE,CAAC,CAAC,CAAC;QACJ,CAAC;QACD,0HAA0H;QAC1H,MAAM,WAAW,CAChB,WAAW,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,IAAI,KAAK,QAAQ,GAAG,EACjE,KAAK,IAAI,EAAE;YACV,MAAM,gBAAgB,CAAC;gBACtB,cAAc,EAAE,WAAW,CAAC,UAAU;gBACtC,QAAQ;aACR,CAAC,CAAC;QACJ,CAAC,CACD,CAAC;IACH,CAAC;IACD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAClC,kBAAkB,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CACpE,CAAC;IAEF,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACxC,MAAM,wBAAwB,GAC7B,OAAO,CAAC,YAAY,KAAK,IAAI,IAAI,mBAAmB,CAAC,GAAG,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC;QACvF,oHAAoH;QACpH,MAAM,WAAW,CAAC,aAAa,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE,EAAE,KAAK,IAAI,EAAE;YACnF,MAAM,kBAAkB,CAAC;gBACxB,eAAe,EAAE,WAAW,CAAC,eAAe;gBAC5C,yBAAyB,EAAE,WAAW,CAAC,yBAAyB;gBAChE,QAAQ,EAAE,WAAW,CAAC,cAAc;gBACpC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxD,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;AACF,CAAC"}

package/dist/cli/cache-commands.d.ts

@@ -0,0 +1,32 @@
+import { type StaleImageEntry } from '../build/stale-image-cleaner.js';
+import type { LoadedSystemConfig } from '../config/system-config.js';
+interface CacheCommandIo {
+    readonly stderr: Pick<NodeJS.WriteStream, 'write'>;
+    readonly stdout: Pick<NodeJS.WriteStream, 'write'>;
+}
+interface CacheEntry {
+    readonly current: boolean;
+    readonly fingerprint: string;
+}
+type ImageProfileFamily = 'gateway' | 'toolVm';
+interface CurrentImageFingerprints {
+    readonly gateways: Record<string, string>;
+    readonly toolVms: Record<string, string>;
+}
+export interface CacheCommandDependencies {
+    readonly computeFingerprintFromConfigPath?: (buildConfigPath: string, systemCacheIdentifierPath: string) => Promise<string>;
+    readonly deleteStaleImageDirectories?: (entries: readonly StaleImageEntry[]) => Promise<void>;
+    readonly findStaleImageDirectories?: (options: {
+        readonly cacheDir: string;
+        readonly currentFingerprints: CurrentImageFingerprints;
+    }) => Promise<readonly StaleImageEntry[]>;
+    readonly listCacheEntries?: (cacheDir: string, family: ImageProfileFamily, profileName: string, currentFingerprint: string) => Promise<readonly CacheEntry[]>;
+}
+export declare function imageProfileCacheDirectoryName(family: ImageProfileFamily): string;
+export declare function runCacheCommand(options: {
+    readonly confirm?: boolean;
+    readonly subcommand: string;
+    readonly systemConfig: LoadedSystemConfig;
+}, io: CacheCommandIo, dependencies?: CacheCommandDependencies): Promise<void>;
+export {};
+//# sourceMappingURL=cache-commands.d.ts.map

package/dist/cli/cache-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-commands.d.ts","sourceRoot":"","sources":["../../src/cli/cache-commands.ts"],"names":[],"mappings":"AAIA,OAAO,EAGN,KAAK,eAAe,EACpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE,UAAU,cAAc;IACvB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CACnD;AAED,UAAU,UAAU;IACnB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AAED,KAAK,kBAAkB,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE/C,UAAU,wBAAwB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAQD,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,gCAAgC,CAAC,EAAE,CAC3C,eAAe,EAAE,MAAM,EACvB,yBAAyB,EAAE,MAAM,KAC7B,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,QAAQ,CAAC,2BAA2B,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9F,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,mBAAmB,EAAE,wBAAwB,CAAC;KACvD,KAAK,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC,CAAC;IAC1C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAC3B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,kBAAkB,EAC1B,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,MAAM,KACtB,OAAO,CAAC,SAAS,UAAU,EAAE,CAAC,CAAC;CACpC;AAED,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAEjF;AAwFD,wBAAsB,eAAe,CACpC,OAAO,EAAE;IACR,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;CAC1C,EACD,EAAE,EAAE,cAAc,EAClB,YAAY,GAAE,wBAA6B,GACzC,OAAO,CAAC,IAAI,CAAC,CA+Df"}

package/dist/cli/cache-commands.js

@@ -0,0 +1,106 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { computeFingerprintFromConfigPath } from '../build/gondolin-image-builder.js';
+import { deleteStaleImageDirectories as deleteStaleImageDirectoriesDefault, findStaleImageDirectories as findStaleImageDirectoriesDefault, } from '../build/stale-image-cleaner.js';
+function recordFromEntries(entries) {
+    return Object.fromEntries(entries);
+}
+export function imageProfileCacheDirectoryName(family) {
+    return family === 'gateway' ? 'gateway-images' : 'tool-vm-images';
+}
+function formatBytes(sizeBytes) {
+    if (sizeBytes < 1024 * 1024) {
+        return `${Math.round(sizeBytes / 1024)}KB`;
+    }
+    if (sizeBytes < 1024 * 1024 * 1024) {
+        return `${(sizeBytes / (1024 * 1024)).toFixed(1)}MB`;
+    }
+    return `${(sizeBytes / (1024 * 1024 * 1024)).toFixed(1)}GB`;
+}
+async function listCacheEntries(cacheDir, family, profileName, currentFingerprint) {
+    const typeDirectory = path.join(cacheDir, imageProfileCacheDirectoryName(family), profileName);
+    let entries;
+    try {
+        entries = await fs.readdir(typeDirectory, { withFileTypes: true });
+    }
+    catch (error) {
+        if (error && typeof error === 'object' && 'code' in error && error.code === 'ENOENT') {
+            return [];
+        }
+        throw error;
+    }
+    return entries
+        .filter((entry) => entry.isDirectory())
+        .map((entry) => ({
+        current: entry.name === currentFingerprint,
+        fingerprint: entry.name,
+    }));
+}
+async function resolveCurrentFingerprints(systemConfig, dependencies) {
+    const computeFingerprint = dependencies.computeFingerprintFromConfigPath ?? computeFingerprintFromConfigPath;
+    const systemCacheIdentifierPath = systemConfig.systemCacheIdentifierPath;
+    return {
+        gateways: recordFromEntries(await Promise.all(Object.entries(systemConfig.imageProfiles.gateways).map(async ([profileName, profile]) => [
+            profileName,
+            await computeFingerprint(profile.buildConfig, systemCacheIdentifierPath),
+        ]))),
+        toolVms: recordFromEntries(await Promise.all(Object.entries(systemConfig.imageProfiles.toolVms).map(async ([profileName, profile]) => [
+            profileName,
+            await computeFingerprint(profile.buildConfig, systemCacheIdentifierPath),
+        ]))),
+    };
+}
+async function listEntriesByProfile(options) {
+    return recordFromEntries(await Promise.all(Object.entries(options.currentFingerprints).map(async ([profileName, currentFingerprint]) => [
+        profileName,
+        await options.listEntries(options.cacheDir, options.family, profileName, currentFingerprint),
+    ])));
+}
+export async function runCacheCommand(options, io, dependencies = {}) {
+    const currentFingerprints = await resolveCurrentFingerprints(options.systemConfig, dependencies);
+    if (options.subcommand === 'list') {
+        const listEntries = dependencies.listCacheEntries ?? listCacheEntries;
+        io.stdout.write(`${JSON.stringify({
+            cacheDir: options.systemConfig.cacheDir,
+            currentFingerprints,
+            gateways: await listEntriesByProfile({
+                cacheDir: options.systemConfig.cacheDir,
+                currentFingerprints: currentFingerprints.gateways,
+                family: 'gateway',
+                listEntries,
+            }),
+            toolVms: await listEntriesByProfile({
+                cacheDir: options.systemConfig.cacheDir,
+                currentFingerprints: currentFingerprints.toolVms,
+                family: 'toolVm',
+                listEntries,
+            }),
+        }, null, 2)}\n`);
+        return;
+    }
+    if (options.subcommand === 'clean') {
+        const findStaleDirectories = dependencies.findStaleImageDirectories ?? findStaleImageDirectoriesDefault;
+        const staleEntries = await findStaleDirectories({
+            cacheDir: options.systemConfig.cacheDir,
+            currentFingerprints,
+        });
+        if (staleEntries.length === 0) {
+            io.stderr.write('[cache] No stale images found.\n');
+            return;
+        }
+        io.stderr.write(`[cache] ${staleEntries.length} stale image(s):\n`);
+        for (const entry of staleEntries) {
+            io.stderr.write(`  ${imageProfileCacheDirectoryName(entry.family)}/${entry.profileName}/${entry.fingerprint} (${formatBytes(entry.sizeBytes)})\n`);
+        }
+        if (!options.confirm) {
+            io.stderr.write('\n[cache] Run with --confirm to delete. Stop the controller first.\n');
+            return;
+        }
+        const deleteStaleDirectories = dependencies.deleteStaleImageDirectories ?? deleteStaleImageDirectoriesDefault;
+        await deleteStaleDirectories(staleEntries);
+        io.stderr.write(`[cache] Deleted ${staleEntries.length} stale image(s).\n`);
+        return;
+    }
+    throw new Error(`Unknown cache subcommand '${options.subcommand}'.`);
+}
+//# sourceMappingURL=cache-commands.js.map

package/dist/cli/cache-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-commands.js","sourceRoot":"","sources":["../../src/cli/cache-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EACN,2BAA2B,IAAI,kCAAkC,EACjE,yBAAyB,IAAI,gCAAgC,GAE7D,MAAM,iCAAiC,CAAC;AAoBzC,SAAS,iBAAiB,CACzB,OAA+C;IAE/C,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAA2B,CAAC;AAC9D,CAAC;AAoBD,MAAM,UAAU,8BAA8B,CAAC,MAA0B;IACxE,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC;AACnE,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB;IACrC,IAAI,SAAS,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QAC7B,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC;IAC5C,CAAC;IAED,IAAI,SAAS,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QACpC,OAAO,GAAG,CAAC,SAAS,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAED,OAAO,GAAG,CAAC,SAAS,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,MAA0B,EAC1B,WAAmB,EACnB,kBAA0B;IAE1B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,8BAA8B,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;IAC/F,IAAI,OAA4D,CAAC;IACjE,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtF,OAAO,EAAE,CAAC;QACX,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;IAED,OAAO,OAAO;SACZ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;SACtC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAChB,OAAO,EAAE,KAAK,CAAC,IAAI,KAAK,kBAAkB;QAC1C,WAAW,EAAE,KAAK,CAAC,IAAI;KACvB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,KAAK,UAAU,0BAA0B,CACxC,YAAgC,EAChC,YAAgF;IAEhF,MAAM,kBAAkB,GACvB,YAAY,CAAC,gCAAgC,IAAI,gCAAgC,CAAC;IACnF,MAAM,yBAAyB,GAAG,YAAY,CAAC,yBAAyB,CAAC;IAEzE,OAAO;QACN,QAAQ,EAAE,iBAAiB,CAC1B,MAAM,OAAO,CAAC,GAAG,CAChB,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;YACzF,WAAW;YACX,MAAM,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,yBAAyB,CAAC;SACxE,CAAC,CACF,CACD;QACD,OAAO,EAAE,iBAAiB,CACzB,MAAM,OAAO,CAAC,GAAG,CAChB,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;YACxF,WAAW;YACX,MAAM,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,yBAAyB,CAAC;SACxE,CAAC,CACF,CACD;KACD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,OAKnC;IACA,OAAO,iBAAiB,CACvB,MAAM,OAAO,CAAC,GAAG,CAChB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,EAAE,CAAC;QAC5F,WAAW;QACX,MAAM,OAAO,CAAC,WAAW,CACxB,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,MAAM,EACd,WAAW,EACX,kBAAkB,CAClB;KACD,CAAC,CACF,CACD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,OAIC,EACD,EAAkB,EAClB,eAAyC,EAAE;IAE3C,MAAM,mBAAmB,GAAG,MAAM,0BAA0B,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAEjG,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,YAAY,CAAC,gBAAgB,IAAI,gBAAgB,CAAC;QACtE,EAAE,CAAC,MAAM,CAAC,KAAK,CACd,GAAG,IAAI,CAAC,SAAS,CAChB;YACC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,QAAQ;YACvC,mBAAmB;YACnB,QAAQ,EAAE,MAAM,oBAAoB,CAAC;gBACpC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,QAAQ;gBACvC,mBAAmB,EAAE,mBAAmB,CAAC,QAAQ;gBACjD,MAAM,EAAE,SAAS;gBACjB,WAAW;aACX,CAAC;YACF,OAAO,EAAE,MAAM,oBAAoB,CAAC;gBACnC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,QAAQ;gBACvC,mBAAmB,EAAE,mBAAmB,CAAC,OAAO;gBAChD,MAAM,EAAE,QAAQ;gBAChB,WAAW;aACX,CAAC;SACF,EACD,IAAI,EACJ,CAAC,CACD,IAAI,CACL,CAAC;QACF,OAAO;IACR,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;QACpC,MAAM,oBAAoB,GACzB,YAAY,CAAC,yBAAyB,IAAI,gCAAgC,CAAC;QAC5E,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC;YAC/C,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,QAAQ;YACvC,mBAAmB;SACnB,CAAC,CAAC;QAEH,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACpD,OAAO;QACR,CAAC;QAED,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,YAAY,CAAC,MAAM,oBAAoB,CAAC,CAAC;QACpE,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YAClC,EAAE,CAAC,MAAM,CAAC,KAAK,CACd,KAAK,8BAA8B,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CACjI,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACtB,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;YACxF,OAAO;QACR,CAAC;QAED,MAAM,sBAAsB,GAC3B,YAAY,CAAC,2BAA2B,IAAI,kCAAkC,CAAC;QAChF,MAAM,sBAAsB,CAAC,YAAY,CAAC,CAAC;QAC3C,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,YAAY,CAAC,MAAM,oBAAoB,CAAC,CAAC;QAC5E,OAAO;IACR,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC;AACtE,CAAC"}

package/dist/cli/commands/auth-interactive-definition.d.ts

@@ -0,0 +1,15 @@
+import { type CliDependencies, type CliIo } from '../agent-vm-cli-support.js';
+export declare function createAuthInteractiveCommand(io: CliIo, dependencies: CliDependencies): Partial<import("cmd-ts/dist/cjs/argparser.js").Register> & {
+    parse(context: import("cmd-ts/dist/cjs/argparser.js").ParseContext): Promise<import("cmd-ts/dist/cjs/argparser.js").ParsingResult<{
+        config: string | undefined;
+        provider: string;
+        zone: string | undefined;
+    }>>;
+} & import("cmd-ts/dist/cjs/helpdoc.js").PrintHelp & import("cmd-ts/dist/cjs/helpdoc.js").ProvidesHelp & import("cmd-ts/dist/cjs/helpdoc.js").Named & Partial<import("cmd-ts/dist/cjs/helpdoc.js").Versioned> & import("cmd-ts/dist/cjs/argparser.js").Register & import("cmd-ts/dist/cjs/runner.js").Handling<{
+    config: string | undefined;
+    provider: string;
+    zone: string | undefined;
+}, Promise<void>> & {
+    run(context: import("cmd-ts/dist/cjs/argparser.js").ParseContext): Promise<import("cmd-ts/dist/cjs/argparser.js").ParsingResult<Promise<void>>>;
+} & Partial<import("cmd-ts/dist/cjs/helpdoc.js").Versioned & import("cmd-ts/dist/cjs/helpdoc.js").Descriptive & import("cmd-ts/dist/cjs/helpdoc.js").Aliased>;
+//# sourceMappingURL=auth-interactive-definition.d.ts.map

package/dist/cli/commands/auth-interactive-definition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-interactive-definition.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/auth-interactive-definition.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,KAAK,EAAe,MAAM,4BAA4B,CAAC;AAQ3F,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,eAAe;;;;;;;;;;;;8JA6BpF"}

package/dist/cli/commands/auth-interactive-definition.js

@@ -0,0 +1,36 @@
+// oxlint-disable typescript-eslint/explicit-function-return-type
+import { command, positional, string } from 'cmd-ts';
+import { loadGatewayLifecycle } from '../../gateway/gateway-lifecycle-loader.js';
+import { requireZone } from '../agent-vm-cli-support.js';
+import { runAuthInteractiveCommand } from '../auth-interactive-command.js';
+import { createConfigOption, createZoneOption, loadSystemConfigFromOption, } from './command-definition-support.js';
+export function createAuthInteractiveCommand(io, dependencies) {
+    return command({
+        name: 'auth-interactive',
+        description: 'Run interactive auth for a gateway zone.',
+        args: {
+            config: createConfigOption(),
+            provider: positional({
+                displayName: 'provider',
+                type: string,
+                description: 'Provider name (for example: codex).',
+            }),
+            zone: createZoneOption(),
+        },
+        handler: async ({ config, provider, zone }) => {
+            const systemConfig = await loadSystemConfigFromOption(config, dependencies);
+            const selectedZone = requireZone(systemConfig, zone);
+            const lifecycle = loadGatewayLifecycle(selectedZone.gateway.type);
+            await runAuthInteractiveCommand({
+                authConfig: lifecycle.authConfig,
+                dependencies,
+                io,
+                provider,
+                systemConfig,
+                zoneId: selectedZone.id,
+                ...(dependencies.runCommand ? { runCommand: dependencies.runCommand } : {}),
+            });
+        },
+    });
+}
+//# sourceMappingURL=auth-interactive-definition.js.map

package/dist/cli/commands/auth-interactive-definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-interactive-definition.js","sourceRoot":"","sources":["../../../src/cli/commands/auth-interactive-definition.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAoC,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC3F,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EACN,kBAAkB,EAClB,gBAAgB,EAChB,0BAA0B,GAC1B,MAAM,iCAAiC,CAAC;AAEzC,MAAM,UAAU,4BAA4B,CAAC,EAAS,EAAE,YAA6B;IACpF,OAAO,OAAO,CAAC;QACd,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,0CAA0C;QACvD,IAAI,EAAE;YACL,MAAM,EAAE,kBAAkB,EAAE;YAC5B,QAAQ,EAAE,UAAU,CAAC;gBACpB,WAAW,EAAE,UAAU;gBACvB,IAAI,EAAE,MAAM;gBACZ,WAAW,EAAE,qCAAqC;aAClD,CAAC;YACF,IAAI,EAAE,gBAAgB,EAAE;SACxB;QACD,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE;YAC7C,MAAM,YAAY,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YAC5E,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YACrD,MAAM,SAAS,GAAG,oBAAoB,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAElE,MAAM,yBAAyB,CAAC;gBAC/B,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,YAAY;gBACZ,EAAE;gBACF,QAAQ;gBACR,YAAY;gBACZ,MAAM,EAAE,YAAY,CAAC,EAAE;gBACvB,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3E,CAAC,CAAC;QACJ,CAAC;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/cli/commands/backup-definition.d.ts

@@ -0,0 +1,63 @@
+import { type CliDependencies, type CliIo } from '../agent-vm-cli-support.js';
+export declare function createBackupSubcommands(io: CliIo, dependencies: CliDependencies): Partial<import("cmd-ts/dist/cjs/argparser.js").Register> & {
+    parse(context: import("cmd-ts/dist/cjs/argparser.js").ParseContext): Promise<import("cmd-ts/dist/cjs/argparser.js").ParsingResult<{
+        command: "list";
+        args: {
+            config: string | undefined;
+            zone: string | undefined;
+        };
+    } | {
+        command: "create";
+        args: {
+            config: string | undefined;
+            zone: string | undefined;
+        };
+    } | {
+        command: "restore";
+        args: {
+            backupPath: string;
+            config: string | undefined;
+            zone: string | undefined;
+        };
+    }>>;
+} & import("cmd-ts/dist/cjs/helpdoc.js").Named & Partial<import("cmd-ts/dist/cjs/helpdoc.js").Descriptive & import("cmd-ts/dist/cjs/helpdoc.js").Versioned> & import("cmd-ts/dist/cjs/helpdoc.js").PrintHelp & Partial<import("cmd-ts/dist/cjs/helpdoc.js").Versioned> & import("cmd-ts/dist/cjs/argparser.js").Register & import("cmd-ts/dist/cjs/runner.js").Handling<{
+    command: "list";
+    args: {
+        config: string | undefined;
+        zone: string | undefined;
+    };
+} | {
+    command: "create";
+    args: {
+        config: string | undefined;
+        zone: string | undefined;
+    };
+} | {
+    command: "restore";
+    args: {
+        backupPath: string;
+        config: string | undefined;
+        zone: string | undefined;
+    };
+}, {
+    command: "list";
+    value: Promise<void>;
+} | {
+    command: "create";
+    value: Promise<void>;
+} | {
+    command: "restore";
+    value: Promise<void>;
+}> & {
+    run(context: import("cmd-ts/dist/cjs/argparser.js").ParseContext): Promise<import("cmd-ts/dist/cjs/argparser.js").ParsingResult<{
+        command: "list";
+        value: Promise<void>;
+    } | {
+        command: "create";
+        value: Promise<void>;
+    } | {
+        command: "restore";
+        value: Promise<void>;
+    }>>;
+};
+//# sourceMappingURL=backup-definition.d.ts.map

package/dist/cli/commands/backup-definition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-definition.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/backup-definition.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,KAAK,EAAe,MAAM,4BAA4B,CAAC;AAS3F,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkE/E"}

package/dist/cli/commands/backup-definition.js

@@ -0,0 +1,73 @@
+// oxlint-disable typescript-eslint/explicit-function-return-type
+import { command, positional, string, subcommands } from 'cmd-ts';
+import { requireZone } from '../agent-vm-cli-support.js';
+import { runBackupCommand } from '../backup-commands.js';
+import { appendZoneArgument, createConfigOption, createZoneOption, loadSystemConfigFromOption, } from './command-definition-support.js';
+export function createBackupSubcommands(io, dependencies) {
+    return subcommands({
+        name: 'backup',
+        description: 'Manage encrypted zone backups',
+        cmds: {
+            create: command({
+                name: 'create',
+                description: 'Create a zone backup',
+                args: {
+                    config: createConfigOption(),
+                    zone: createZoneOption(),
+                },
+                handler: async ({ config, zone }) => {
+                    const systemConfig = await loadSystemConfigFromOption(config, dependencies);
+                    const selectedZone = requireZone(systemConfig, zone);
+                    await runBackupCommand({
+                        dependencies,
+                        io,
+                        restArguments: appendZoneArgument(['create'], selectedZone.id),
+                        systemConfig,
+                    });
+                },
+            }),
+            list: command({
+                name: 'list',
+                description: 'List backups for a zone',
+                args: {
+                    config: createConfigOption(),
+                    zone: createZoneOption(),
+                },
+                handler: async ({ config, zone }) => {
+                    const systemConfig = await loadSystemConfigFromOption(config, dependencies);
+                    const selectedZone = requireZone(systemConfig, zone);
+                    await runBackupCommand({
+                        dependencies,
+                        io,
+                        restArguments: appendZoneArgument(['list'], selectedZone.id),
+                        systemConfig,
+                    });
+                },
+            }),
+            restore: command({
+                name: 'restore',
+                description: 'Restore a backup into a zone',
+                args: {
+                    backupPath: positional({
+                        displayName: 'path',
+                        type: string,
+                        description: 'Path to the encrypted backup file',
+                    }),
+                    config: createConfigOption(),
+                    zone: createZoneOption(),
+                },
+                handler: async ({ backupPath, config, zone }) => {
+                    const systemConfig = await loadSystemConfigFromOption(config, dependencies);
+                    const selectedZone = requireZone(systemConfig, zone);
+                    await runBackupCommand({
+                        dependencies,
+                        io,
+                        restArguments: appendZoneArgument(['restore', backupPath], selectedZone.id),
+                        systemConfig,
+                    });
+                },
+            }),
+        },
+    });
+}
+//# sourceMappingURL=backup-definition.js.map

package/dist/cli/commands/backup-definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-definition.js","sourceRoot":"","sources":["../../../src/cli/commands/backup-definition.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAElE,OAAO,EAAoC,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC3F,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EACN,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,0BAA0B,GAC1B,MAAM,iCAAiC,CAAC;AAEzC,MAAM,UAAU,uBAAuB,CAAC,EAAS,EAAE,YAA6B;IAC/E,OAAO,WAAW,CAAC;QAClB,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,+BAA+B;QAC5C,IAAI,EAAE;YACL,MAAM,EAAE,OAAO,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,sBAAsB;gBACnC,IAAI,EAAE;oBACL,MAAM,EAAE,kBAAkB,EAAE;oBAC5B,IAAI,EAAE,gBAAgB,EAAE;iBACxB;gBACD,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;oBACnC,MAAM,YAAY,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;oBAC5E,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;oBACrD,MAAM,gBAAgB,CAAC;wBACtB,YAAY;wBACZ,EAAE;wBACF,aAAa,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC;wBAC9D,YAAY;qBACZ,CAAC,CAAC;gBACJ,CAAC;aACD,CAAC;YACF,IAAI,EAAE,OAAO,CAAC;gBACb,IAAI,EAAE,MAAM;gBACZ,WAAW,EAAE,yBAAyB;gBACtC,IAAI,EAAE;oBACL,MAAM,EAAE,kBAAkB,EAAE;oBAC5B,IAAI,EAAE,gBAAgB,EAAE;iBACxB;gBACD,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;oBACnC,MAAM,YAAY,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;oBAC5E,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;oBACrD,MAAM,gBAAgB,CAAC;wBACtB,YAAY;wBACZ,EAAE;wBACF,aAAa,EAAE,kBAAkB,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC;wBAC5D,YAAY;qBACZ,CAAC,CAAC;gBACJ,CAAC;aACD,CAAC;YACF,OAAO,EAAE,OAAO,CAAC;gBAChB,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,8BAA8B;gBAC3C,IAAI,EAAE;oBACL,UAAU,EAAE,UAAU,CAAC;wBACtB,WAAW,EAAE,MAAM;wBACnB,IAAI,EAAE,MAAM;wBACZ,WAAW,EAAE,mCAAmC;qBAChD,CAAC;oBACF,MAAM,EAAE,kBAAkB,EAAE;oBAC5B,IAAI,EAAE,gBAAgB,EAAE;iBACxB;gBACD,OAAO,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;oBAC/C,MAAM,YAAY,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;oBAC5E,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;oBACrD,MAAM,gBAAgB,CAAC;wBACtB,YAAY;wBACZ,EAAE;wBACF,aAAa,EAAE,kBAAkB,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC;wBAC3E,YAAY;qBACZ,CAAC,CAAC;gBACJ,CAAC;aACD,CAAC;SACF;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/cli/commands/build-definition.d.ts

@@ -0,0 +1,13 @@
+import type { CliDependencies, CliIo } from '../agent-vm-cli-support.js';
+export declare function createBuildCommand(_io: CliIo, dependencies: CliDependencies): Partial<import("cmd-ts/dist/cjs/argparser.js").Register> & {
+    parse(context: import("cmd-ts/dist/cjs/argparser.js").ParseContext): Promise<import("cmd-ts/dist/cjs/argparser.js").ParsingResult<{
+        config: string | undefined;
+        force: boolean;
+    }>>;
+} & import("cmd-ts/dist/cjs/helpdoc.js").PrintHelp & import("cmd-ts/dist/cjs/helpdoc.js").ProvidesHelp & import("cmd-ts/dist/cjs/helpdoc.js").Named & Partial<import("cmd-ts/dist/cjs/helpdoc.js").Versioned> & import("cmd-ts/dist/cjs/argparser.js").Register & import("cmd-ts/dist/cjs/runner.js").Handling<{
+    config: string | undefined;
+    force: boolean;
+}, Promise<void>> & {
+    run(context: import("cmd-ts/dist/cjs/argparser.js").ParseContext): Promise<import("cmd-ts/dist/cjs/argparser.js").ParsingResult<Promise<void>>>;
+} & Partial<import("cmd-ts/dist/cjs/helpdoc.js").Versioned & import("cmd-ts/dist/cjs/helpdoc.js").Descriptive & import("cmd-ts/dist/cjs/helpdoc.js").Aliased>;
+//# sourceMappingURL=build-definition.d.ts.map

package/dist/cli/commands/build-definition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-definition.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/build-definition.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AAKzE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,eAAe;;;;;;;;;;8JAuB3E"}