@atlashub/smartstack-cli 4.74.0 → 4.76.0

package/dist/index.js

@@ -127614,7 +127614,7 @@ function resolvePodmanCmd() {
       (0, import_path13.join)(process.env.LOCALAPPDATA || "", "RedHat", "Podman", "podman.exe")
     ];
     for (const p of knownPaths) {
-      if (require("fs").existsSync(p)) return `"${p}"`;
+      if (require("fs").existsSync(p)) return p;
     }
   }
   return "podman";
@@ -127649,6 +127649,22 @@ function getContainerEngineStatus() {
   }
   return null;
 }
+function checkWindowsVirt() {
+  try {
+    (0, import_child_process8.execSync)("wsl --status", { encoding: "utf-8", timeout: 5e3, stdio: "pipe" });
+  } catch {
+    return "wsl-missing";
+  }
+  try {
+    const state = (0, import_child_process8.execSync)(
+      'powershell -NoProfile -Command "(Get-WindowsOptionalFeature -Online -FeatureName VirtualMachinePlatform).State"',
+      { encoding: "utf-8", timeout: 1e4, stdio: "pipe" }
+    ).trim();
+    if (state === "Disabled") return "hyperv-disabled";
+  } catch {
+  }
+  return null;
+}
 function getNodeVersion() {
   return process.version;
 }
@@ -127812,19 +127828,15 @@ var doctorCommand = new Command("doctor").description("Run diagnostics and check
     });
   } else if (containerEngine && !containerEngine.running) {
     const isPodman = containerEngine.name === "Podman";
-    const wslMissing = isPodman && process.platform === "win32" && (() => {
-      try {
-        return (0, import_child_process8.execSync)("wsl --status", { encoding: "utf-8", timeout: 5e3, stdio: "pipe" }) && false;
-      } catch {
-        return true;
-      }
-    })();
+    const virtIssue = isPodman && process.platform === "win32" ? checkWindowsVirt() : null;
+    const virtMessage = virtIssue === "wsl-missing" ? "Podman installed but WSL2 is missing" : virtIssue === "hyperv-disabled" ? "Podman installed but hardware virtualization is not enabled" : `${containerEngine.name} installed but ${isPodman ? "machine" : "daemon"} not running`;
+    const virtFix = virtIssue === "wsl-missing" ? "Run as Admin: wsl --install, restart PC, then: podman machine init && podman machine start" : virtIssue === "hyperv-disabled" ? "Enable VT-x/SVM in BIOS, then run as Admin: wsl --install --no-distribution, restart, then: podman machine init && podman machine start" : isPodman ? "Run: podman machine init && podman machine start" : "Start Docker Desktop, or run: podman machine init && podman machine start";
     diagnostics.push({
       name: "Container Engine",
       status: "warning",
-      message: wslMissing ? "Podman installed but WSL2 is missing" : `${containerEngine.name} installed but ${isPodman ? "machine" : "daemon"} not running`,
-      fix: wslMissing ? "Run as Admin: wsl --install, restart PC, then: podman machine init && podman machine start" : isPodman ? "Run: podman machine init && podman machine start" : "Start Docker Desktop, or run: podman machine init && podman machine start",
-      installCmd: wslMissing ? process.platform === "win32" ? "wsl --install" : void 0 : void 0
+      message: virtMessage,
+      fix: virtFix,
+      installCmd: virtIssue === "wsl-missing" ? process.platform === "win32" ? "wsl --install" : void 0 : void 0
     });
   } else {
     diagnostics.push({
@@ -128248,8 +128260,10 @@ adminCommand.command("reset").description("Reset the localAdmin account password
   const resetViaSqlCmd = async (sqlAuth) => {
     const authLabel = sqlAuth ? "SQL Server Authentication" : "Windows Authentication";
     spinner.text = `Using ${authLabel} (sqlcmd)...`;
-    const checkQuery = `SELECT COUNT(*) FROM [core].[auth_Users] WHERE Email = '${adminEmail}'`;
+    logger.debug(`[admin-reset] Using sqlcmd path (${authLabel})`);
+    const checkQuery = `SET NOCOUNT ON; SELECT COUNT(*) FROM [core].[auth_Users] WHERE Email = '${adminEmail}'`;
     const countResult = executeSqlCmd(connInfo.server, connInfo.database, checkQuery, sqlAuth);
+    logger.debug(`[admin-reset] COUNT result: "${countResult}"`);
     const exists = parseInt(countResult, 10) > 0;
     if (!exists) {
       spinner.fail(`Account ${source_default.yellow(adminEmail)} does not exist.`);
@@ -128260,9 +128274,48 @@ adminCommand.command("reset").description("Reset the localAdmin account password
     spinner.text = "Generating new password...";
     const newPassword = generatePassword();
     const passwordHash = await import_bcryptjs.default.hash(newPassword, 12);
+    logger.debug(`[admin-reset] Password length: ${newPassword.length}, Hash prefix: ${passwordHash.substring(0, 7)}`);
     spinner.text = "Updating password...";
-    const updateQuery = `UPDATE [core].[auth_Users] SET PasswordHash = '${passwordHash}', MustChangePassword = 0, UpdatedAt = GETUTCDATE() WHERE Email = '${adminEmail}'`;
-    executeSqlCmd(connInfo.server, connInfo.database, updateQuery, sqlAuth);
+    const updateQuery = `SET NOCOUNT ON; UPDATE [core].[auth_Users] SET PasswordHash = '${passwordHash}', MustChangePassword = 0, UpdatedAt = GETUTCDATE() WHERE Email = '${adminEmail}'`;
+    const updateResult = executeSqlCmd(connInfo.server, connInfo.database, updateQuery, sqlAuth);
+    logger.debug(`[admin-reset] UPDATE result: "${updateResult}"`);
+    try {
+      executeSqlCmd(
+        connInfo.server,
+        connInfo.database,
+        `SET NOCOUNT ON; UPDATE [core].[auth_Users] SET IsLocked = 0, LockoutEnd = NULL WHERE Email = '${adminEmail}'`,
+        sqlAuth
+      );
+      logger.debug("[admin-reset] Account unlocked (IsLocked = 0)");
+    } catch (unlockErr) {
+      logger.debug(`[admin-reset] Unlock skipped (columns may not exist): ${unlockErr instanceof Error ? unlockErr.message : unlockErr}`);
+    }
+    try {
+      executeSqlCmd(
+        connInfo.server,
+        connInfo.database,
+        `SET NOCOUNT ON; DELETE FROM [core].[auth_Sessions] WHERE UserId = (SELECT Id FROM [core].[auth_Users] WHERE Email = '${adminEmail}') AND IsSuccessful = 0`,
+        sqlAuth
+      );
+      logger.debug("[admin-reset] Failed login sessions cleared");
+    } catch (sessionErr) {
+      logger.debug(`[admin-reset] Session cleanup skipped: ${sessionErr instanceof Error ? sessionErr.message : sessionErr}`);
+    }
+    const verifyQuery = `SET NOCOUNT ON; SELECT PasswordHash FROM [core].[auth_Users] WHERE Email = '${adminEmail}'`;
+    const storedHash = executeSqlCmd(connInfo.server, connInfo.database, verifyQuery, sqlAuth).trim();
+    if (!storedHash) {
+      spinner.fail("Password update failed: no hash found in database after UPDATE");
+      process.exit(1);
+    }
+    const hashMatch = await import_bcryptjs.default.compare(newPassword, storedHash);
+    if (!hashMatch) {
+      spinner.fail("Password update failed: stored hash does not match generated password");
+      logger.error(`Expected hash prefix: ${passwordHash.substring(0, 10)}`);
+      logger.error(`Stored hash prefix:   ${storedHash.substring(0, 10)}`);
+      logger.error(`Hash lengths: expected=${passwordHash.length}, stored=${storedHash.length}`);
+      process.exit(1);
+    }
+    logger.debug(`[admin-reset] Verification OK \u2014 hash matches password`);
     spinner.succeed("Password reset successfully!");
     displayPasswordResult(adminEmail, newPassword);
   };
@@ -128291,6 +128344,7 @@ adminCommand.command("reset").description("Reset the localAdmin account password
     console.log();
   };
   const resetViaMssql = async (sqlModule) => {
+    logger.debug(`[admin-reset] Using mssql (node driver) path`);
     spinner.text = "Connected. Checking account...";
     const checkResult = await sqlModule.query`
         SELECT COUNT(*) as count
@@ -128308,14 +128362,54 @@ adminCommand.command("reset").description("Reset the localAdmin account password
     spinner.text = "Generating new password...";
     const newPassword = generatePassword();
     const passwordHash = await import_bcryptjs.default.hash(newPassword, 12);
+    logger.debug(`[admin-reset] Password length: ${newPassword.length}, Hash prefix: ${passwordHash.substring(0, 7)}`);
     spinner.text = "Updating password...";
-    await sqlModule.query`
+    const updateResult = await sqlModule.query`
         UPDATE [core].[auth_Users]
         SET PasswordHash = ${passwordHash},
             MustChangePassword = ${false},
             UpdatedAt = ${/* @__PURE__ */ new Date()}
         WHERE Email = ${adminEmail}
       `;
+    logger.debug(`[admin-reset] UPDATE rowsAffected: ${JSON.stringify(updateResult.rowsAffected)}`);
+    if (!updateResult.rowsAffected || updateResult.rowsAffected[0] === 0) {
+      await sqlModule.close();
+      spinner.fail("Password update failed: UPDATE affected 0 rows");
+      process.exit(1);
+    }
+    try {
+      await sqlModule.query`
+          UPDATE [core].[auth_Users]
+          SET IsLocked = ${false}, LockoutEnd = ${null}
+          WHERE Email = ${adminEmail}
+        `;
+      logger.debug("[admin-reset] Account unlocked (IsLocked = 0)");
+    } catch (unlockErr) {
+      logger.debug(`[admin-reset] Unlock skipped (columns may not exist): ${unlockErr instanceof Error ? unlockErr.message : unlockErr}`);
+    }
+    try {
+      await sqlModule.query`
+          DELETE FROM [core].[auth_Sessions]
+          WHERE UserId = (SELECT Id FROM [core].[auth_Users] WHERE Email = ${adminEmail})
+            AND IsSuccessful = ${false}
+        `;
+      logger.debug("[admin-reset] Failed login sessions cleared");
+    } catch (sessionErr) {
+      logger.debug(`[admin-reset] Session cleanup skipped: ${sessionErr instanceof Error ? sessionErr.message : sessionErr}`);
+    }
+    const verifyResult = await sqlModule.query`
+        SELECT PasswordHash FROM [core].[auth_Users] WHERE Email = ${adminEmail}
+      `;
+    const storedHash = verifyResult.recordset[0]?.PasswordHash;
+    const hashMatch = storedHash ? await import_bcryptjs.default.compare(newPassword, storedHash) : false;
+    if (!hashMatch) {
+      await sqlModule.close();
+      spinner.fail("Password update failed: stored hash does not match generated password");
+      logger.error(`Expected hash prefix: ${passwordHash.substring(0, 10)}`);
+      logger.error(`Stored hash prefix:   ${(storedHash || "(null)").substring(0, 10)}`);
+      process.exit(1);
+    }
+    logger.debug(`[admin-reset] Verification OK \u2014 hash matches password`);
     await sqlModule.close();
     spinner.succeed("Password reset successfully!");
     displayPasswordResult(adminEmail, newPassword);
@@ -128339,8 +128433,10 @@ adminCommand.command("reset").description("Reset the localAdmin account password
     }
   };
   try {
+    logger.debug(`[admin-reset] Windows Auth: ${connInfo.useWindowsAuth}, Server: ${connInfo.server}, Database: ${connInfo.database}`);
     if (connInfo.useWindowsAuth) {
       const nativeDriver = tryLoadNativeDriver();
+      logger.debug(`[admin-reset] msnodesqlv8 available: ${!!nativeDriver}`);
       let nativeConnected = false;
       if (nativeDriver) {
         try {
@@ -130294,7 +130390,6 @@ function resolveEngineCmd(name) {
   try {
     const result = (0, import_child_process12.spawnSync)(name, ["--version"], {
       encoding: "utf-8",
-      shell: true,
       timeout: 5e3,
       stdio: "pipe"
     });
@@ -130309,13 +130404,12 @@ function resolveEngineCmd(name) {
     for (const p of knownPaths) {
       if (import_fs_extra16.default.existsSync(p)) {
         try {
-          const result = (0, import_child_process12.spawnSync)(`"${p}"`, ["--version"], {
+          const result = (0, import_child_process12.spawnSync)(p, ["--version"], {
             encoding: "utf-8",
-            shell: true,
             timeout: 5e3,
             stdio: "pipe"
           });
-          if (result.status === 0) return `"${p}"`;
+          if (result.status === 0) return p;
         } catch {
         }
       }
@@ -130328,7 +130422,6 @@ function checkEngine(name) {
   try {
     const version2 = (0, import_child_process12.spawnSync)(cmd, ["--version"], {
       encoding: "utf-8",
-      shell: true,
       timeout: 5e3,
       stdio: "pipe"
     });
@@ -130337,7 +130430,6 @@ function checkEngine(name) {
     }
     const info = (0, import_child_process12.spawnSync)(cmd, ["info"], {
       encoding: "utf-8",
-      shell: true,
       timeout: 1e4,
       stdio: "pipe"
     });
@@ -130346,6 +130438,33 @@ function checkEngine(name) {
     return { name, installed: false, running: false, cmd };
   }
 }
+function checkWindowsVirtualization() {
+  try {
+    const r = (0, import_child_process12.spawnSync)("wsl", ["--status"], { encoding: "utf-8", timeout: 5e3, stdio: "pipe" });
+    if (r.status !== 0) return "wsl-missing";
+  } catch {
+    return "wsl-missing";
+  }
+  try {
+    const r = (0, import_child_process12.spawnSync)("wsl", ["--list", "--quiet"], { encoding: "utf-8", timeout: 5e3, stdio: "pipe" });
+    const output = ((r.stdout || "") + (r.stderr || "")).toLowerCase();
+    if (/virtual machine platform|hypervisor/i.test(output) && r.status !== 0) {
+      return "hyperv-disabled";
+    }
+  } catch {
+  }
+  try {
+    const r = (0, import_child_process12.spawnSync)("powershell", [
+      "-NoProfile",
+      "-Command",
+      "(Get-WindowsOptionalFeature -Online -FeatureName VirtualMachinePlatform).State"
+    ], { encoding: "utf-8", timeout: 1e4, stdio: "pipe" });
+    const state = (r.stdout || "").trim();
+    if (state === "Disabled") return "hyperv-disabled";
+  } catch {
+  }
+  return null;
+}
 function detectEngine() {
   const docker = checkEngine("docker");
   if (docker.installed && docker.running) return docker;
@@ -130355,15 +130474,8 @@ function detectEngine() {
     return podman;
   }
   if (podman.installed && !podman.running) {
-    const wslMissing = process.platform === "win32" && (() => {
-      try {
-        const r = (0, import_child_process12.spawnSync)("wsl", ["--status"], { encoding: "utf-8", shell: true, timeout: 5e3, stdio: "pipe" });
-        return r.status !== 0;
-      } catch {
-        return true;
-      }
-    })();
-    if (wslMissing) {
+    const virtIssue = process.platform === "win32" ? checkWindowsVirtualization() : null;
+    if (virtIssue === "wsl-missing") {
       logger.error("WSL2 is required by Podman but is not installed.");
       console.log();
       console.log(`  Install WSL2 first (run as Administrator):`);
@@ -130371,6 +130483,16 @@ function detectEngine() {
       console.log(`  Restart your PC, then:`);
       console.log(`    ${source_default.cyan("podman machine init")}`);
       console.log(`    ${source_default.cyan("podman machine start")}`);
+    } else if (virtIssue === "hyperv-disabled") {
+      logger.error("Hardware virtualization is not enabled.");
+      console.log();
+      console.log(`  To build Docker images, you need to enable virtualization:`);
+      console.log(`    1. Enable VT-x (Intel) or SVM (AMD) in your BIOS/UEFI settings`);
+      console.log(`    2. Then run as Administrator:`);
+      console.log(`       ${source_default.cyan("wsl --install --no-distribution")}`);
+      console.log(`    3. Restart your PC, then:`);
+      console.log(`       ${source_default.cyan("podman machine init")}`);
+      console.log(`       ${source_default.cyan("podman machine start")}`);
     } else {
       logger.error("Podman is installed but the machine is not running.");
       console.log();
@@ -130449,7 +130571,6 @@ function runCompose(engine, composePath, args) {
   }
   const result = (0, import_child_process12.spawnSync)(engine.cmd, ["compose", "-f", composePath, ...args], {
     encoding: "utf-8",
-    shell: true,
     stdio: "pipe",
     cwd: process.cwd(),
     env: { ...process.env, ...extraEnv }