@atlashub/smartstack-cli 4.73.0 → 4.75.0

package/dist/index.js

@@ -127614,7 +127614,7 @@ function resolvePodmanCmd() {
       (0, import_path13.join)(process.env.LOCALAPPDATA || "", "RedHat", "Podman", "podman.exe")
     ];
     for (const p of knownPaths) {
-      if (require("fs").existsSync(p)) return `"${p}"`;
+      if (require("fs").existsSync(p)) return p;
     }
   }
   return "podman";
@@ -127649,6 +127649,22 @@ function getContainerEngineStatus() {
   }
   return null;
 }
+function checkWindowsVirt() {
+  try {
+    (0, import_child_process8.execSync)("wsl --status", { encoding: "utf-8", timeout: 5e3, stdio: "pipe" });
+  } catch {
+    return "wsl-missing";
+  }
+  try {
+    const state = (0, import_child_process8.execSync)(
+      'powershell -NoProfile -Command "(Get-WindowsOptionalFeature -Online -FeatureName VirtualMachinePlatform).State"',
+      { encoding: "utf-8", timeout: 1e4, stdio: "pipe" }
+    ).trim();
+    if (state === "Disabled") return "hyperv-disabled";
+  } catch {
+  }
+  return null;
+}
 function getNodeVersion() {
   return process.version;
 }
@@ -127812,19 +127828,15 @@ var doctorCommand = new Command("doctor").description("Run diagnostics and check
     });
   } else if (containerEngine && !containerEngine.running) {
     const isPodman = containerEngine.name === "Podman";
-    const wslMissing = isPodman && process.platform === "win32" && (() => {
-      try {
-        return (0, import_child_process8.execSync)("wsl --status", { encoding: "utf-8", timeout: 5e3, stdio: "pipe" }) && false;
-      } catch {
-        return true;
-      }
-    })();
+    const virtIssue = isPodman && process.platform === "win32" ? checkWindowsVirt() : null;
+    const virtMessage = virtIssue === "wsl-missing" ? "Podman installed but WSL2 is missing" : virtIssue === "hyperv-disabled" ? "Podman installed but hardware virtualization is not enabled" : `${containerEngine.name} installed but ${isPodman ? "machine" : "daemon"} not running`;
+    const virtFix = virtIssue === "wsl-missing" ? "Run as Admin: wsl --install, restart PC, then: podman machine init && podman machine start" : virtIssue === "hyperv-disabled" ? "Enable VT-x/SVM in BIOS, then run as Admin: wsl --install --no-distribution, restart, then: podman machine init && podman machine start" : isPodman ? "Run: podman machine init && podman machine start" : "Start Docker Desktop, or run: podman machine init && podman machine start";
     diagnostics.push({
       name: "Container Engine",
       status: "warning",
-      message: wslMissing ? "Podman installed but WSL2 is missing" : `${containerEngine.name} installed but ${isPodman ? "machine" : "daemon"} not running`,
-      fix: wslMissing ? "Run as Admin: wsl --install, restart PC, then: podman machine init && podman machine start" : isPodman ? "Run: podman machine init && podman machine start" : "Start Docker Desktop, or run: podman machine init && podman machine start",
-      installCmd: wslMissing ? process.platform === "win32" ? "wsl --install" : void 0 : void 0
+      message: virtMessage,
+      fix: virtFix,
+      installCmd: virtIssue === "wsl-missing" ? process.platform === "win32" ? "wsl --install" : void 0 : void 0
     });
   } else {
     diagnostics.push({
@@ -128050,6 +128062,7 @@ var import_bcryptjs = __toESM(require_bcryptjs());
 var import_fs4 = require("fs");
 var import_path14 = require("path");
 var import_os6 = require("os");
+var import_crypto8 = require("crypto");
 var import_child_process9 = require("child_process");
 function tryLoadNativeDriver() {
   try {
@@ -128066,11 +128079,25 @@ var DEFAULT_CONFIG = {
 var PASSWORD_CHARS = "ABCDEFGHJKLMNPQRSTUVWXYZabcdefghjkmnpqrstuvwxyz23456789!@#$%&*";
 var PASSWORD_LENGTH = 16;
 function generatePassword() {
-  let password = "";
+  const bytes = (0, import_crypto8.randomBytes)(PASSWORD_LENGTH);
+  const chars = [];
   for (let i = 0; i < PASSWORD_LENGTH; i++) {
-    password += PASSWORD_CHARS.charAt(Math.floor(Math.random() * PASSWORD_CHARS.length));
-  }
-  return password;
+    chars.push(PASSWORD_CHARS.charAt(bytes[i] % PASSWORD_CHARS.length));
+  }
+  let hasLower = false, hasUpper = false, hasDigit = false, hasSpecial = false;
+  for (const c of chars) {
+    if (c >= "a" && c <= "z") hasLower = true;
+    else if (c >= "A" && c <= "Z") hasUpper = true;
+    else if (c >= "0" && c <= "9") hasDigit = true;
+    else hasSpecial = true;
+  }
+  const extra = (0, import_crypto8.randomBytes)(4);
+  let pos = 0;
+  if (!hasLower) chars[pos++] = "abcdefghjkmnpqrstuvwxyz"[extra[0] % 23];
+  if (!hasUpper) chars[pos++] = "ABCDEFGHJKLMNPQRSTUVWXYZ"[extra[1] % 24];
+  if (!hasDigit) chars[pos++] = "23456789"[extra[2] % 8];
+  if (!hasSpecial) chars[pos] = "!@#$%&*"[extra[3] % 7];
+  return chars.join("");
 }
 function findAppSettings(apiFolder) {
   if (!(0, import_fs4.existsSync)(apiFolder)) {
@@ -128260,11 +128287,23 @@ adminCommand.command("reset").description("Reset the localAdmin account password
     spinner.text = "Generating new password...";
     const newPassword = generatePassword();
     const passwordHash = await import_bcryptjs.default.hash(newPassword, 12);
-    spinner.text = "Updating password...";
-    const updateQuery = `UPDATE [core].[auth_Users] SET PasswordHash = '${passwordHash}', MustChangePassword = 0, UpdatedAt = GETUTCDATE() WHERE Email = '${adminEmail}'`;
+    spinner.text = "Updating password and unlocking account...";
+    const userId = executeSqlCmd(
+      connInfo.server,
+      connInfo.database,
+      `SELECT CAST(Id AS NVARCHAR(36)) FROM [core].[auth_Users] WHERE Email = '${adminEmail}'`,
+      sqlAuth
+    ).trim();
+    const updateQuery = `UPDATE [core].[auth_Users] SET PasswordHash = '${passwordHash}', MustChangePassword = 0, IsLocked = 0, LockoutEnd = NULL, UpdatedAt = GETUTCDATE() WHERE Email = '${adminEmail}'`;
     executeSqlCmd(connInfo.server, connInfo.database, updateQuery, sqlAuth);
-    spinner.succeed("Password reset successfully!");
+    const deleteSessionsQuery = `DELETE FROM [core].[auth_Sessions] WHERE UserId = '${userId}' AND IsSuccessful = 0`;
+    try {
+      executeSqlCmd(connInfo.server, connInfo.database, deleteSessionsQuery, sqlAuth);
+    } catch {
+    }
+    spinner.succeed("Password reset and account unlocked!");
     displayPasswordResult(adminEmail, newPassword);
+    spinner.stop();
   };
   const displayPasswordResult = (email, password) => {
     if (options.json) {
@@ -128308,17 +128347,28 @@ adminCommand.command("reset").description("Reset the localAdmin account password
     spinner.text = "Generating new password...";
     const newPassword = generatePassword();
     const passwordHash = await import_bcryptjs.default.hash(newPassword, 12);
-    spinner.text = "Updating password...";
+    spinner.text = "Updating password and unlocking account...";
     await sqlModule.query`
         UPDATE [core].[auth_Users]
         SET PasswordHash = ${passwordHash},
             MustChangePassword = ${false},
+            IsLocked = ${false},
+            LockoutEnd = ${null},
             UpdatedAt = ${/* @__PURE__ */ new Date()}
         WHERE Email = ${adminEmail}
       `;
+    try {
+      await sqlModule.query`
+          DELETE FROM [core].[auth_Sessions]
+          WHERE UserId = (SELECT Id FROM [core].[auth_Users] WHERE Email = ${adminEmail})
+            AND IsSuccessful = ${false}
+        `;
+    } catch {
+    }
     await sqlModule.close();
-    spinner.succeed("Password reset successfully!");
+    spinner.succeed("Password reset and account unlocked!");
     displayPasswordResult(adminEmail, newPassword);
+    spinner.stop();
   };
   const tryWithSqlCmd = async () => {
     try {
@@ -130294,7 +130344,6 @@ function resolveEngineCmd(name) {
   try {
     const result = (0, import_child_process12.spawnSync)(name, ["--version"], {
       encoding: "utf-8",
-      shell: true,
       timeout: 5e3,
       stdio: "pipe"
     });
@@ -130309,13 +130358,12 @@ function resolveEngineCmd(name) {
     for (const p of knownPaths) {
       if (import_fs_extra16.default.existsSync(p)) {
         try {
-          const result = (0, import_child_process12.spawnSync)(`"${p}"`, ["--version"], {
+          const result = (0, import_child_process12.spawnSync)(p, ["--version"], {
             encoding: "utf-8",
-            shell: true,
             timeout: 5e3,
             stdio: "pipe"
           });
-          if (result.status === 0) return `"${p}"`;
+          if (result.status === 0) return p;
         } catch {
         }
       }
@@ -130328,7 +130376,6 @@ function checkEngine(name) {
   try {
     const version2 = (0, import_child_process12.spawnSync)(cmd, ["--version"], {
       encoding: "utf-8",
-      shell: true,
       timeout: 5e3,
       stdio: "pipe"
     });
@@ -130337,7 +130384,6 @@ function checkEngine(name) {
     }
     const info = (0, import_child_process12.spawnSync)(cmd, ["info"], {
       encoding: "utf-8",
-      shell: true,
       timeout: 1e4,
       stdio: "pipe"
     });
@@ -130346,6 +130392,33 @@ function checkEngine(name) {
     return { name, installed: false, running: false, cmd };
   }
 }
+function checkWindowsVirtualization() {
+  try {
+    const r = (0, import_child_process12.spawnSync)("wsl", ["--status"], { encoding: "utf-8", timeout: 5e3, stdio: "pipe" });
+    if (r.status !== 0) return "wsl-missing";
+  } catch {
+    return "wsl-missing";
+  }
+  try {
+    const r = (0, import_child_process12.spawnSync)("wsl", ["--list", "--quiet"], { encoding: "utf-8", timeout: 5e3, stdio: "pipe" });
+    const output = ((r.stdout || "") + (r.stderr || "")).toLowerCase();
+    if (/virtual machine platform|hypervisor/i.test(output) && r.status !== 0) {
+      return "hyperv-disabled";
+    }
+  } catch {
+  }
+  try {
+    const r = (0, import_child_process12.spawnSync)("powershell", [
+      "-NoProfile",
+      "-Command",
+      "(Get-WindowsOptionalFeature -Online -FeatureName VirtualMachinePlatform).State"
+    ], { encoding: "utf-8", timeout: 1e4, stdio: "pipe" });
+    const state = (r.stdout || "").trim();
+    if (state === "Disabled") return "hyperv-disabled";
+  } catch {
+  }
+  return null;
+}
 function detectEngine() {
   const docker = checkEngine("docker");
   if (docker.installed && docker.running) return docker;
@@ -130355,15 +130428,8 @@ function detectEngine() {
     return podman;
   }
   if (podman.installed && !podman.running) {
-    const wslMissing = process.platform === "win32" && (() => {
-      try {
-        const r = (0, import_child_process12.spawnSync)("wsl", ["--status"], { encoding: "utf-8", shell: true, timeout: 5e3, stdio: "pipe" });
-        return r.status !== 0;
-      } catch {
-        return true;
-      }
-    })();
-    if (wslMissing) {
+    const virtIssue = process.platform === "win32" ? checkWindowsVirtualization() : null;
+    if (virtIssue === "wsl-missing") {
       logger.error("WSL2 is required by Podman but is not installed.");
       console.log();
       console.log(`  Install WSL2 first (run as Administrator):`);
@@ -130371,6 +130437,16 @@ function detectEngine() {
       console.log(`  Restart your PC, then:`);
       console.log(`    ${source_default.cyan("podman machine init")}`);
       console.log(`    ${source_default.cyan("podman machine start")}`);
+    } else if (virtIssue === "hyperv-disabled") {
+      logger.error("Hardware virtualization is not enabled.");
+      console.log();
+      console.log(`  To build Docker images, you need to enable virtualization:`);
+      console.log(`    1. Enable VT-x (Intel) or SVM (AMD) in your BIOS/UEFI settings`);
+      console.log(`    2. Then run as Administrator:`);
+      console.log(`       ${source_default.cyan("wsl --install --no-distribution")}`);
+      console.log(`    3. Restart your PC, then:`);
+      console.log(`       ${source_default.cyan("podman machine init")}`);
+      console.log(`       ${source_default.cyan("podman machine start")}`);
     } else {
       logger.error("Podman is installed but the machine is not running.");
       console.log();
@@ -130449,7 +130525,6 @@ function runCompose(engine, composePath, args) {
   }
   const result = (0, import_child_process12.spawnSync)(engine.cmd, ["compose", "-f", composePath, ...args], {
     encoding: "utf-8",
-    shell: true,
     stdio: "pipe",
     cwd: process.cwd(),
     env: { ...process.env, ...extraEnv }