@aopslabs/aops 0.3.31 → 0.3.33

package/dist/commands/community-server.js

@@ -20,7 +20,7 @@ import { asCommunityDiagnosticError } from '../lib/community-diagnostic.js';
 import { assertCommunityNativePathLayout, attestCommunityNativeExternalSnapshot, inspectCommunityNativeInstall, inspectCommunityNativeRuntime, loadExternalPostgresUrl, loadExternalServerAuthConfig, planCommunityNativeInstalledMigration, readCommunityNativeLogs, rollbackCommunityNativeApplication, resolveCommunityNativeInstalledNpmSourceRoot, resolveCommunityNativeLaunchMode, resolveCommunityNativePaths, setupCommunityNativeInstall, startCommunityNativeInstall, stopCommunityNativeInstall, } from '../lib/community-native-lifecycle.js';
 import { inspectPgToolchain, locatePgTool, pgEnvironmentFromUrl } from '../lib/pg-tool-location.js';
 import { readAopsServerEnvConfig } from '../utils/community-host-runtime.js';
-import { inspectCommunityNativeApplicationRecoveryStatus } from '../lib/community-native-application-recovery.js';
+import { inspectCommunityNativeApplicationRecoveryStatus, readCommunityNativeApplicationUpdate, } from '../lib/community-native-application-recovery.js';
 import { inspectCommunityNativeDatabaseRecoveryStatus, restoreCommunityNativeDatabaseForUpdate, } from '../lib/community-native-database-recovery.js';
 import { inspectCommunityNativePostgres, removeCommunityNativePostgresContainerForReset, removeCommunityNativeManagedPostgres, } from '../lib/community-native-postgres.js';
 import { stopCommunityNativeCockpit } from '../lib/community-cockpit-lifecycle.js';
@@ -1420,12 +1420,28 @@ export async function runCommunityServerRollbackApplication(options, dependencie
         throw new Error('community_native_application_rollback_update_id_required');
     if (!options.sourceRoot)
         throw new Error('community_native_application_rollback_source_root_required');
-    if (options.confirmDataRewind === true) {
-        throw new Error('community_native_application_rollback_data_rewind_option_refused');
-    }
     await withMutatingCommandScope(dependencies, async (runtime, signal) => {
-        const result = await withNativeOperation(options, 'rollback', runtime, signal, async (locked) => {
-            return runtime.rollbackNativeApplication({
+        const operation = await withNativeOperation(options, 'rollback', runtime, signal, async (locked) => {
+            const update = readCommunityNativeApplicationUpdate(locked.paths, options.updateId);
+            let databaseRewound = false;
+            if (update.outcome?.migration?.action === 'migrate') {
+                if (options.confirmDataRewind !== true) {
+                    throw new Error('community_native_application_rollback_data_rewind_confirmation_required');
+                }
+                const restored = await runtime.restoreNativeDatabase({
+                    paths: locked.paths,
+                    state: locked.state,
+                    updateId: options.updateId,
+                    sourceRoot: path.resolve(options.sourceRoot),
+                    confirmDataRewind: true,
+                    signal,
+                });
+                if (restored.actionRequired || !restored.completed || !restored.dataRewound) {
+                    throw new Error('community_native_application_rollback_database_restore_incomplete');
+                }
+                databaseRewound = true;
+            }
+            const result = await runtime.rollbackNativeApplication({
                 instanceName: locked.state.instanceName,
                 dataRoot: locked.paths.dataRoot,
                 updateId: options.updateId,
@@ -1434,8 +1450,10 @@ export async function runCommunityServerRollbackApplication(options, dependencie
                 readyTimeoutMs: resolveReadyTimeoutMs(options),
                 signal,
             });
+            return { result, databaseRewound };
         });
         throwIfCommunityCommandAborted(signal);
+        const { result, databaseRewound } = operation;
         const rollback = result.applicationUpdate.rollbackOutcome;
         if (!rollback || rollback.status !== 'community-native-application-rolled-back') {
             throw new Error('community_native_application_rollback_receipt_missing');
@@ -1448,7 +1466,7 @@ export async function runCommunityServerRollbackApplication(options, dependencie
             applicationContentSha256: result.applicationUpdate.prepared.prior.content.applicationContentSha256,
             databaseAction: rollback.migration?.action,
             databasePlanSha256: rollback.migration?.acceptedPlanSha256,
-            databaseRewound: false,
+            databaseRewound,
         }, options.json);
         if (result.launch.waitForExit)
             await result.launch.waitForExit();
@@ -2310,9 +2328,10 @@ export function makeCommunityServerCommand(identity = {}) {
     const rollback = common(command.command('rollback').description('Rollback application code; legacy flat form remains OCI-only until P4'))
         .option('--confirm-data-rewind', 'Confirm that data will be rewound to the pre-update backup')
         .action((options) => runCommunityServerRollback(options, dependencies));
-    common(rollback.command('app').description('Rollback only native application code; never restore or rewind PostgreSQL'))
+    common(rollback.command('app').description('Rollback one native application update; restore its exact pre-migration snapshot when required'))
         .requiredOption('--update-id <id>', 'Exact native application update ID')
         .requiredOption('--source-root <path>', 'Exact prior public release checkout; the CLI never downloads or changes it')
+        .option('--confirm-data-rewind', 'Confirm exact pre-migration snapshot restore when this update changed PostgreSQL')
         .option('--foreground', 'Keep the rolled-back native server attached to this terminal')
         .option('--detach', 'Start the rolled-back native server in the background (default)')
         .option('--ready-timeout-ms <milliseconds>', 'Native Server readiness budget from 1000 to 900000 ms; default 120000')

package/dist/commands/community-setup.js

@@ -146,8 +146,7 @@ function addSetupInitOptions(command) {
         .option('--target-name <name>', 'Persistent target name for path 4')
         .option('--target-auth-provider <provider>', 'Path 4 target auth: trusted-local | remote-session (authv2-jwt-session is a one-release alias)')
         .option('--target-tls-policy <policy>', 'Path 4 target TLS: loopback-http for local trusted targets, system-ca for remote-session')
-        .option('--agent-assets <action>', 'Global AOPS gateway action: status | install | repair | skip')
-        .option('--agent-assets-release <path>', 'Advanced offline/maintainer override for --agent-assets install')
+        .option('--agent-assets <action>', 'Global AOPS skill action: status | install | skip')
         .option('--no-catalog', 'Skip the default inert official server catalog import')
         .option('--catalog-release <path>', 'Explicit verified-release override (normally resolved from the Community install)')
         .option('--catalog-idempotency-key <key>', 'Explicit official catalog reconcile replay key')

package/dist/commands/discuss.js

@@ -1207,7 +1207,7 @@ export function makeDiscussCommand() {
     cmd.addHelpText('after', `
 Server-first discussion (no local files):
   Source of truth is the hosted Agentspace discussion ops. The CLI never writes
-  or reads .aops/agentspace/discussions; create/write/read all go through the
+  or reads .aops-cache/agentspace/discussions; create/write/read all go through the
   hosted gateway. discussion-topic.status/.get are authoritative; the CLI maps
   server data into lifecycleState/nextTurn/openQuestions for UX only.
 

package/dist/commands/doc.js

@@ -1991,7 +1991,7 @@ function localMirrorLimit(value) {
     return parsed && parsed > 0 ? parsed : 10;
 }
 function resolveDocMirrorRoot(context, mirrorDir) {
-    const requested = normalizeNonEmpty(mirrorDir) ?? path.join('.aops', 'docman');
+    const requested = normalizeNonEmpty(mirrorDir) ?? path.join('.aops-cache', 'docman');
     return path.isAbsolute(requested) ? requested : path.resolve(context.repoRoot, requested);
 }
 function resolveLocalMirrorIndexPath(root) {
@@ -2968,7 +2968,7 @@ export async function runDocMirrorPull(options = {}) {
         if (target !== 'markdown' && target !== 'html') {
             throw new Error('Target must be markdown or html.');
         }
-        const outputRoot = path.resolve(normalizeNonEmpty(options.outDir) ?? path.join('.aops', 'docman'));
+        const outputRoot = path.resolve(normalizeNonEmpty(options.outDir) ?? path.join('.aops-cache', 'docman'));
         const groupUid = normalizeNonEmpty(options.groupUid);
         const groups = await listDocGroups(apiState, options, resolvedContext);
         const groupsById = new Map();
@@ -3085,7 +3085,7 @@ export async function runDocMirrorPull(options = {}) {
         if (await guardMirrorFileWrite({
             options,
             command: 'doc.mirror.pull',
-            surface: 'docman materialize -> .aops/docman',
+            surface: 'docman materialize -> .aops-cache/docman',
             resolvedContext,
             input,
         }))
@@ -3206,7 +3206,7 @@ export async function runDocMirrorPull(options = {}) {
         await emitDocResult({
             options,
             command: 'doc.mirror.pull',
-            surface: 'docman materialize -> .aops/docman',
+            surface: 'docman materialize -> .aops-cache/docman',
             resolvedContext,
             input,
             result: {
@@ -3697,6 +3697,36 @@ export async function runDocCreate(options = {}) {
         process.exitCode = 1;
     }
 }
+export function buildDocDeleteInput(options) {
+    const id = normalizeNonEmpty(options.id);
+    if (!id)
+        throw new Error('Provide --id.');
+    if (typeof options.confirmName !== 'string' || options.confirmName.length === 0) {
+        throw new Error('Provide --confirm-name with the exact document title.');
+    }
+    return { id, confirmName: options.confirmName };
+}
+export async function runDocDelete(options = {}) {
+    try {
+        const input = buildDocDeleteInput(options);
+        const apiState = await requireApiState(options);
+        if (!apiState)
+            return;
+        const resolvedContext = await resolveDocContext(options, apiState);
+        await invokeDocCrudMutationTool(apiState, options, resolvedContext, {
+            command: 'doc.delete',
+            toolId: 'docman.document.delete.safe',
+            input,
+            successText: 'Document deleted safely.',
+            destructive: true,
+            artifacts: collectDocArtifacts,
+        });
+    }
+    catch (error) {
+        logError(error instanceof Error ? error.message : String(error));
+        process.exitCode = 1;
+    }
+}
 export async function runDocGroupCreate(options = {}) {
     try {
         const seed = readJsonObjectInput(options.input);
@@ -4528,9 +4558,31 @@ export async function runDocPageUnlink(options = {}) {
         const resolvedContext = await resolveDocContext(options, apiState);
         await invokeDocCrudMutationTool(apiState, options, resolvedContext, {
             command: 'doc.page.unlink',
+            toolId: 'docman.document-section-link.delete',
+            input: { id: linkId },
+            successText: 'Page node unlinked from the document outline.',
+            artifacts: collectDocArtifacts,
+        });
+    }
+    catch (error) {
+        logError(error instanceof Error ? error.message : String(error));
+        process.exitCode = 1;
+    }
+}
+export async function runDocSectionPageLinkDelete(options = {}) {
+    try {
+        const linkId = normalizeNonEmpty(options.linkId);
+        if (!linkId)
+            throw new Error('Provide --link-id.');
+        const apiState = await requireApiState(options);
+        if (!apiState)
+            return;
+        const resolvedContext = await resolveDocContext(options, apiState);
+        await invokeDocCrudMutationTool(apiState, options, resolvedContext, {
+            command: 'doc.page.membership-unlink',
             toolId: 'docman.section-page-link.delete',
             input: { id: linkId },
-            successText: 'Page unlinked.',
+            successText: 'Reusable section page link deleted.',
             artifacts: collectDocArtifacts,
         });
     }
@@ -5395,6 +5447,13 @@ export function makeDocCommand() {
         .option('--tag <value>', 'Repeatable tag', collectRepeatedOption, [])).action(async (options) => {
         await runDocUpdate(options);
     }));
+    applyDocContextOptions(applyWriteOptions(cmd
+        .command('delete')
+        .description('Safely delete one Docman document graph after exact title confirmation')
+        .requiredOption('--id <id>', 'Document id')
+        .requiredOption('--confirm-name <title>', 'Exact current document title required by document.delete.safe')).action(async (options) => {
+        await runDocDelete(options);
+    }));
     const group = cmd.command('group').description('Docman document-group commands');
     applyDocContextOptions(group
         .command('list')
@@ -5623,10 +5682,16 @@ export function makeDocCommand() {
     }));
     applyDocContextOptions(applyWriteOptions(page
         .command('unlink')
-        .description('Unlink a page version from a section without deleting the page')
-        .requiredOption('--link-id <id>', 'Section-page-link id')).action(async (options) => {
+        .description('Unlink a page node created in the document outline without deleting the page')
+        .requiredOption('--link-id <id>', 'Document-section-link id whose kind is page')).action(async (options) => {
         await runDocPageUnlink(options);
     }));
+    applyDocContextOptions(applyWriteOptions(page
+        .command('membership-unlink')
+        .description('Delete a reusable section-page-link without deleting the page')
+        .requiredOption('--link-id <id>', 'Section-page-link id')).action(async (options) => {
+        await runDocSectionPageLinkDelete(options);
+    }));
     applyDocContextOptions(applyWriteOptions(page
         .command('draft-save')
         .description('Create or update a page-version draft through the canonical flow surface')
@@ -5696,12 +5761,6 @@ export function makeDocCommand() {
         .option('--numbering <text>', 'Optional numbering override')).action(async (options) => {
         await runDocLinkPage(options);
     }));
-    applyDocContextOptions(applyWriteOptions(linkPage
-        .command('delete')
-        .description('Alias for doc page unlink')
-        .requiredOption('--link-id <id>', 'Section-page-link id')).action(async (options) => {
-        await runDocPageUnlink(options);
-    }));
     const order = cmd.command('order').description('Docman outline ordering commands');
     applyDocContextOptions(applyWriteOptions(order
         .command('sections')
@@ -5753,9 +5812,9 @@ export function makeDocCommand() {
         .option('--limit <count>', 'Result limit', (value) => Number.parseInt(String(value), 10))
         .option('--retrieval-strategy <mode>', 'Retrieval strategy: lexical, hybrid, semantic', 'hybrid')
         .option('--ensure <mode>', 'Hosted pre-read build: none = read existing, index = refresh rows, summary = refresh rows + summaries', 'summary')
-        .option('--local', 'Search only the repo-local .aops/docman mirror')
+        .option('--local', 'Search only the repo-local .aops-cache/docman mirror')
         .option('--remote', 'Use the hosted Docman API directly instead of local-first auto mode')
-        .option('--mirror-dir <path>', 'Repo-local Docman mirror directory for local-first/--local', path.join('.aops', 'docman'))
+        .option('--mirror-dir <path>', 'Repo-local Docman mirror directory for local-first/--local', path.join('.aops-cache', 'docman'))
         .action(async (options) => {
         await runDocSearch(options);
     }));
@@ -5766,9 +5825,9 @@ export function makeDocCommand() {
         .requiredOption('--q <text>', 'Search query')
         .option('--limit <count>', 'Result limit', (value) => Number.parseInt(String(value), 10))
         .option('--retrieval-strategy <mode>', 'Retrieval strategy: lexical, hybrid, semantic', 'hybrid')
-        .option('--local', 'Search only the repo-local .aops/docman mirror')
+        .option('--local', 'Search only the repo-local .aops-cache/docman mirror')
         .option('--remote', 'Use the hosted Docman API directly instead of local-first auto mode')
-        .option('--mirror-dir <path>', 'Repo-local Docman mirror directory for local-first/--local', path.join('.aops', 'docman'))
+        .option('--mirror-dir <path>', 'Repo-local Docman mirror directory for local-first/--local', path.join('.aops-cache', 'docman'))
         .action(async (options) => {
         await runDocScopeSearch(options);
     }));
@@ -5778,9 +5837,9 @@ export function makeDocCommand() {
         .requiredOption('--q <text>', 'Question text')
         .option('--limit <count>', 'Citation limit', (value) => Number.parseInt(String(value), 10))
         .option('--retrieval-strategy <mode>', 'Retrieval strategy: lexical, hybrid, semantic', 'hybrid')
-        .option('--local', 'Read only from the repo-local .aops/docman mirror')
+        .option('--local', 'Read only from the repo-local .aops-cache/docman mirror')
         .option('--remote', 'Use the hosted Docman API directly instead of local-first auto mode')
-        .option('--mirror-dir <path>', 'Repo-local Docman mirror directory for local-first/--local', path.join('.aops', 'docman'))
+        .option('--mirror-dir <path>', 'Repo-local Docman mirror directory for local-first/--local', path.join('.aops-cache', 'docman'))
         .action(async (options) => {
         await runDocScopeAnswer(options);
     }));
@@ -5805,8 +5864,8 @@ export function makeDocCommand() {
     }));
     importCommand.addHelpText('after', buildOperatorCookbook({
         examples: [
-            'aops-cli doc import --from-markdown --document-version-id <docver-id> --source ./candidate.md --baseline ./.aops/docman/<group>/<document>.md --guard-target "<intended heading>" --dry-run --json',
-            'aops-cli doc import --from-markdown --document-version-id <docver-id> --source ./candidate.md --baseline ./.aops/docman/<group>/<document>.md --guard-target "<intended heading>" --synthesize-overview-pages --dry-run --json',
+            'aops-cli doc import --from-markdown --document-version-id <docver-id> --source ./candidate.md --baseline ./.aops-cache/docman/<group>/<document>.md --guard-target "<intended heading>" --dry-run --json',
+            'aops-cli doc import --from-markdown --document-version-id <docver-id> --source ./candidate.md --baseline ./.aops-cache/docman/<group>/<document>.md --guard-target "<intended heading>" --synthesize-overview-pages --dry-run --json',
         ],
         guide: GUIDE_PATHS.docman,
         notes: [
@@ -5855,7 +5914,7 @@ export function makeDocCommand() {
         .option('--document-slug <slug>', 'Only pull matching document slug (repeatable)', collectRepeatedOption, [])
         .option('--status <value>', 'Document status filter')
         .option('--limit <count>', 'Document limit', (value) => Number.parseInt(String(value), 10))
-        .option('--out-dir <path>', 'Repo-local mirror output directory', path.join('.aops', 'docman'))
+        .option('--out-dir <path>', 'Repo-local mirror output directory', path.join('.aops-cache', 'docman'))
         .option('--target <target>', 'Publish target: markdown or html', 'markdown')).action(async (options) => {
         await runDocMirrorPull(options);
     }));
@@ -5867,9 +5926,9 @@ export function makeDocCommand() {
         .option('--limit <count>', 'Citation limit', (value) => Number.parseInt(String(value), 10))
         .option('--retrieval-strategy <mode>', 'Retrieval strategy: lexical, hybrid, semantic', 'hybrid')
         .option('--ensure <mode>', 'Hosted pre-read build: none = read existing, index = refresh rows, summary = refresh rows + summaries', 'summary')
-        .option('--local', 'Read a deterministic answer pack only from the repo-local .aops/docman mirror')
+        .option('--local', 'Read a deterministic answer pack only from the repo-local .aops-cache/docman mirror')
         .option('--remote', 'Use the hosted Docman API directly instead of local-first auto mode')
-        .option('--mirror-dir <path>', 'Repo-local Docman mirror directory for local-first/--local', path.join('.aops', 'docman'))
+        .option('--mirror-dir <path>', 'Repo-local Docman mirror directory for local-first/--local', path.join('.aops-cache', 'docman'))
         .action(async (options) => {
         await runDocAnswer(options);
     }));
@@ -5898,13 +5957,15 @@ export function makeDocCommand() {
     cmd.addHelpText('after', buildOperatorCookbook({
         examples: [
             'aops-cli doc create --title "Power Tree" --apply --json',
+            'aops-cli doc delete --id <doc-id> --confirm-name "Power Tree" --preview --json',
+            'aops-cli doc delete --id <doc-id> --confirm-name "Power Tree" --apply --confirm --json',
             'aops-cli doc group create --title "Guides" --apply --json',
             'aops-cli doc group list --json',
             'aops-cli doc version create --document-id <doc-id> --version 1 --status draft --apply --json',
             'aops-cli doc section create --document-version-id <docver-id> --title "Overview" --apply --json',
             'aops-cli doc page create --document-version-id <docver-id> --section-id <section-id> --title "Startup" --content \'@./page.md\' --apply --json',
             'aops-cli doc import --from-markdown --document-version-id <docver-id> --source ./ui-system-v2.md --dry-run --json',
-            'aops-cli doc import --from-markdown --document-version-id <docver-id> --source ./user_guide.md --baseline ./.aops/docman/eops-cli/user_guide.md --guard-target "BOM Variant Build Models" --dry-run --json',
+            'aops-cli doc import --from-markdown --document-version-id <docver-id> --source ./user_guide.md --baseline ./.aops-cache/docman/eops-cli/user_guide.md --guard-target "BOM Variant Build Models" --dry-run --json',
             'aops-cli doc import --from-markdown --document-version-id <docver-id> --source ./ui-system-v2.md --apply --json',
             'aops-cli doc outline get --document-version-id <docver-id> --json',
             'aops-cli doc index build --document-version-id <docver-id> --json',
@@ -5915,7 +5976,7 @@ export function makeDocCommand() {
             'aops-cli doc answer --document-version-id <docver-id> --q "Enable pin behavior?" --json',
             'aops-cli doc answer --document-version-id <docver-id> --q "Enable pin behavior?" --remote --ensure summary --json',
             'aops-cli doc publish --document-version-id <docver-id> --target markdown --out ./tmp/doc.md',
-            'aops-cli doc mirror pull --project-slug aops --group-uid architecture --out-dir ./.aops/docman --apply --json',
+            'aops-cli doc mirror pull --project-slug aops --group-uid architecture --out-dir ./.aops-cache/docman --apply --json',
             'aops-cli doc mirror push --project-slug aops --source-dir ./docs --group-uid architecture --group-title Architecture --apply --json  # import-only helper',
             'aops-cli doc scope search --project-id <project-id> --q "startup current" --json',
             'aops-cli doc scope answer --project-id <project-id> --q "startup current" --json',
@@ -5927,7 +5988,7 @@ export function makeDocCommand() {
         notes: [
             'For one-page/one-section edits, prefer clone_all + page/section CRUD + set-current-version + mirror pull.',
             'Use doc import --baseline for full-document imports; apply is blocked on unrelated deltas unless --confirm is explicit.',
-            '.aops/docman/** is a read-only mirror. Refresh it with doc mirror pull after canonical Docman changes.',
+            '.aops-cache/docman/** is a generated mirror. Refresh it with doc mirror pull after canonical Docman changes; only text-file v3 sidecars are eligible for doc mirror push.',
         ],
     }));
     return cmd;

package/dist/commands/docs.js

@@ -0,0 +1,68 @@
+import { readFileSync, writeFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { Command } from 'commander';
+import { refreshGeneratedUserGuideSections, refreshGeneratedDocmanGuideSections, refreshGeneratedChatv3GuideSections, refreshGeneratedAgentspaceGuideSections, refreshGeneratedTaskerGuideSections, renderGeneratedUserGuideSections, renderGeneratedDocmanGuideSections, renderGeneratedChatv3GuideSections, renderGeneratedAgentspaceGuideSections, renderGeneratedTaskerGuideSections, } from '../lib/user-guide-sections.js';
+export function makeDocsCommand(getProgram) {
+    const command = new Command('docs').description('Generate AOPS documentation sections from live CLI registrations');
+    command
+        .command('user-guide')
+        .description('Generate or refresh the dynamic appendix sections in the AOPS CLI user guide')
+        .option('--guide <name>', 'Guide profile: aops-cli, docman, chatv3, agentspace, or tasker', 'aops-cli')
+        .option('--source <path>', 'Authored Markdown containing an Appendices section and generated markers')
+        .option('--out <path>', 'Write the generated Markdown to this path instead of stdout')
+        .option('--check', 'Fail without writing when --source is not already current')
+        .action((options) => {
+        if (options.check && !options.source) {
+            throw new Error('user_guide_check_requires_source');
+        }
+        if (options.check && options.out) {
+            throw new Error('user_guide_check_does_not_write');
+        }
+        const program = getProgram();
+        if (options.guide !== 'aops-cli'
+            && options.guide !== 'docman'
+            && options.guide !== 'chatv3'
+            && options.guide !== 'agentspace'
+            && options.guide !== 'tasker') {
+            throw new Error('user_guide_profile_must_be_aops_cli_docman_chatv3_agentspace_or_tasker');
+        }
+        const sourcePath = options.source ? resolve(options.source) : undefined;
+        const source = sourcePath ? readFileSync(sourcePath, 'utf8') : undefined;
+        const rendered = options.guide === 'docman'
+            ? source === undefined
+                ? renderGeneratedDocmanGuideSections(program)
+                : refreshGeneratedDocmanGuideSections(source, program)
+            : options.guide === 'chatv3'
+                ? source === undefined
+                    ? renderGeneratedChatv3GuideSections(program)
+                    : refreshGeneratedChatv3GuideSections(source, program)
+                : options.guide === 'agentspace'
+                    ? source === undefined
+                        ? renderGeneratedAgentspaceGuideSections(program)
+                        : refreshGeneratedAgentspaceGuideSections(source, program)
+                    : options.guide === 'tasker'
+                        ? source === undefined
+                            ? renderGeneratedTaskerGuideSections(program)
+                            : refreshGeneratedTaskerGuideSections(source, program)
+                        : source === undefined
+                            ? renderGeneratedUserGuideSections(program)
+                            : refreshGeneratedUserGuideSections(source, program);
+        if (options.check) {
+            if (rendered !== source) {
+                process.stderr.write(`AOPS CLI user guide generated sections are stale: ${sourcePath}\n`);
+                process.exitCode = 1;
+                return;
+            }
+            process.stdout.write(`AOPS CLI user guide generated sections are current: ${sourcePath}\n`);
+            return;
+        }
+        if (options.out) {
+            const outPath = resolve(options.out);
+            writeFileSync(outPath, rendered, 'utf8');
+            process.stdout.write(`${outPath}\n`);
+            return;
+        }
+        process.stdout.write(rendered);
+    });
+    return command;
+}

package/dist/commands/global-update.js

@@ -774,6 +774,7 @@ function rollbackServerApplication(run, cliPath, updateId, serverPath, expectedR
         updateId,
         '--source-root',
         serverPath,
+        '--confirm-data-rewind',
         '--detach',
         '--json',
     ]);
@@ -781,6 +782,22 @@ function rollbackServerApplication(run, cliPath, updateId, serverPath, expectedR
     assert.equal(result.updateId, updateId);
     assert.equal(result.releaseVersion, expectedRelease);
 }
+function restoreServerDatabase(run, cliPath, updateId, serverPath) {
+    const result = runInstalledJson(run, cliPath, [
+        'server',
+        'restore',
+        'db',
+        '--update-id',
+        updateId,
+        '--source-root',
+        serverPath,
+        '--confirm-data-rewind',
+        '--json',
+    ]);
+    assert.equal(result.status, 'community-native-database-restored');
+    assert.equal(result.updateId, updateId);
+    assert.equal(result.dataRewound, true);
+}
 const defaultExecutionDependencies = {
     fetch: globalThis.fetch.bind(globalThis),
     sleep: (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)),
@@ -1288,6 +1305,17 @@ export async function applyGlobalUpdate(options, run = defaultRunner, execution
         try {
             stopService(run, plan.cliPath, 'cockpit', true);
             stopService(run, plan.cliPath, 'server', true);
+            if (applicationUpdateId) {
+                const target = inspectGlobalInstall(run);
+                try {
+                    restoreServerDatabase(run, target.cliPath, applicationUpdateId, target.serverPath);
+                    events.push('restored:server-database');
+                }
+                catch (error) {
+                    events.push('failed:server-database-restore');
+                    throw new ForwardSchemaRetainsTarget(error);
+                }
+            }
             installGlobalUpdateClosure(run, plan, plan.restorePackages, plan.prior.topology);
             events.push('installed:restore');
             const restored = inspectGlobalInstall(run);

package/dist/commands/init.js

@@ -5,6 +5,7 @@ import { Command } from 'commander';
 import { logError, logInfo, logSuccess, logWarn } from '@aopslabs/xf-cli-ui';
 import { findWorkspaceRoot } from '../utils/workspace-root.js';
 import { buildAopsRepoConfig } from '../utils/repo-config.js';
+import { ensureAopsPrivatePathsIgnored } from '../utils/repo-first-storage.js';
 function nonEmpty(value) {
     if (typeof value !== 'string')
         return undefined;
@@ -26,7 +27,7 @@ This section is generated by AOPS Community.
 
 Server-first model:
 - The local AOPS server is canonical for Projectman, Agentspace, and Docman writes.
-- .aops/aops.config.json stores repo metadata; hosted mirror and planning views under .aops are read-only caches.
+- .aops/aops.config.json stores private repo metadata; generated mirrors and planning views live under ignored .aops-cache.
 - Use aops-cli agent tools for capability discovery and aops-cli host health for readiness.
 - ChatV3 runs self-hosted/local-trusted in this distribution.
 `;
@@ -74,6 +75,7 @@ export async function runInit(options = {}) {
     const config = buildAopsRepoConfig({ repoName, projectName, projectSlug, projectId });
     await fs.mkdir(path.dirname(configPath), { recursive: true });
     await fs.writeFile(configPath, `${JSON.stringify(config, null, 2)}\n`, 'utf8');
+    await ensureAopsPrivatePathsIgnored(rootDir);
     if (options.agentsMd !== false) {
         try {
             await writeCommunityAgentsSection(rootDir);