@bitsocial/bitsocial-cli 0.19.65 → 0.19.66

package/README.md

@@ -298,9 +298,15 @@ $ bitsocial community edit mysub.bso '--roles["author-address.bso"]' null
 ## Commands
 
 <!-- commands -->
+* [`bitsocial challenge add PACKAGE`](#bitsocial-challenge-add-package)
+* [`bitsocial challenge i PACKAGE`](#bitsocial-challenge-i-package)
 * [`bitsocial challenge install PACKAGE`](#bitsocial-challenge-install-package)
 * [`bitsocial challenge list`](#bitsocial-challenge-list)
+* [`bitsocial challenge ls`](#bitsocial-challenge-ls)
 * [`bitsocial challenge remove NAME`](#bitsocial-challenge-remove-name)
+* [`bitsocial challenge rm NAME`](#bitsocial-challenge-rm-name)
+* [`bitsocial challenge un NAME`](#bitsocial-challenge-un-name)
+* [`bitsocial challenge uninstall NAME`](#bitsocial-challenge-uninstall-name)
 * [`bitsocial community create`](#bitsocial-community-create)
 * [`bitsocial community delete ADDRESSES`](#bitsocial-community-delete-addresses)
 * [`bitsocial community edit ADDRESS`](#bitsocial-community-edit-address)
@@ -316,6 +322,72 @@ $ bitsocial community edit mysub.bso '--roles["author-address.bso"]' null
 * [`bitsocial update install [VERSION]`](#bitsocial-update-install-version)
 * [`bitsocial update versions`](#bitsocial-update-versions)
 
+## `bitsocial challenge add PACKAGE`
+
+Install a challenge package (npm package name, git URL, tarball URL, or local path)
+
+```
+USAGE
+  $ bitsocial challenge add PACKAGE [--pkcOptions.dataPath <value>]
+
+ARGUMENTS
+  PACKAGE  Package specifier — anything npm can install (name, name@version, git URL, tarball URL, local path)
+
+FLAGS
+  --pkcOptions.dataPath=<value>  Data path to install the challenge into
+
+DESCRIPTION
+  Install a challenge package (npm package name, git URL, tarball URL, or local path)
+
+ALIASES
+  $ bitsocial challenge i
+  $ bitsocial challenge add
+
+EXAMPLES
+  $ bitsocial challenge install @bitsocial/mintpass-challenge
+
+  $ bitsocial challenge install @bitsocial/mintpass-challenge@1.0.0
+
+  $ bitsocial challenge install github:user/repo
+
+  $ bitsocial challenge install https://example.com/my-challenge-1.0.0.tar.gz
+
+  $ bitsocial challenge install ./my-local-challenge
+```
+
+## `bitsocial challenge i PACKAGE`
+
+Install a challenge package (npm package name, git URL, tarball URL, or local path)
+
+```
+USAGE
+  $ bitsocial challenge i PACKAGE [--pkcOptions.dataPath <value>]
+
+ARGUMENTS
+  PACKAGE  Package specifier — anything npm can install (name, name@version, git URL, tarball URL, local path)
+
+FLAGS
+  --pkcOptions.dataPath=<value>  Data path to install the challenge into
+
+DESCRIPTION
+  Install a challenge package (npm package name, git URL, tarball URL, or local path)
+
+ALIASES
+  $ bitsocial challenge i
+  $ bitsocial challenge add
+
+EXAMPLES
+  $ bitsocial challenge install @bitsocial/mintpass-challenge
+
+  $ bitsocial challenge install @bitsocial/mintpass-challenge@1.0.0
+
+  $ bitsocial challenge install github:user/repo
+
+  $ bitsocial challenge install https://example.com/my-challenge-1.0.0.tar.gz
+
+  $ bitsocial challenge install ./my-local-challenge
+```
+
 ## `bitsocial challenge install PACKAGE`
 
 Install a challenge package (npm package name, git URL, tarball URL, or local path)
@@ -333,6 +405,10 @@ FLAGS
 DESCRIPTION
   Install a challenge package (npm package name, git URL, tarball URL, or local path)
 
+ALIASES
+  $ bitsocial challenge i
+  $ bitsocial challenge add
+
 EXAMPLES
   $ bitsocial challenge install @bitsocial/mintpass-challenge
 
@@ -345,7 +421,7 @@ EXAMPLES
   $ bitsocial challenge install ./my-local-challenge
 ```
 
-_See code: [src/cli/commands/challenge/install.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.65/src/cli/commands/challenge/install.ts)_
+_See code: [src/cli/commands/challenge/install.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.66/src/cli/commands/challenge/install.ts)_
 
 ## `bitsocial challenge list`
 
@@ -362,13 +438,40 @@ FLAGS
 DESCRIPTION
   List installed challenge packages
 
+ALIASES
+  $ bitsocial challenge ls
+
 EXAMPLES
   $ bitsocial challenge list
 
   $ bitsocial challenge list -q
 ```
 
-_See code: [src/cli/commands/challenge/list.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.65/src/cli/commands/challenge/list.ts)_
+_See code: [src/cli/commands/challenge/list.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.66/src/cli/commands/challenge/list.ts)_
+
+## `bitsocial challenge ls`
+
+List installed challenge packages
+
+```
+USAGE
+  $ bitsocial challenge ls [-q] [--pkcOptions.dataPath <value>]
+
+FLAGS
+  -q, --quiet                        Only display challenge names
+      --pkcOptions.dataPath=<value>  Data path where challenges are installed
+
+DESCRIPTION
+  List installed challenge packages
+
+ALIASES
+  $ bitsocial challenge ls
+
+EXAMPLES
+  $ bitsocial challenge list
+
+  $ bitsocial challenge list -q
+```
 
 ## `bitsocial challenge remove NAME`
 
@@ -387,13 +490,102 @@ FLAGS
 DESCRIPTION
   Remove an installed challenge package
 
+ALIASES
+  $ bitsocial challenge uninstall
+  $ bitsocial challenge rm
+  $ bitsocial challenge un
+
+EXAMPLES
+  $ bitsocial challenge remove my-challenge
+
+  $ bitsocial challenge remove @scope/my-challenge
+```
+
+_See code: [src/cli/commands/challenge/remove.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.66/src/cli/commands/challenge/remove.ts)_
+
+## `bitsocial challenge rm NAME`
+
+Remove an installed challenge package
+
+```
+USAGE
+  $ bitsocial challenge rm NAME [--pkcOptions.dataPath <value>]
+
+ARGUMENTS
+  NAME  The challenge package name (e.g., my-challenge or @scope/my-challenge)
+
+FLAGS
+  --pkcOptions.dataPath=<value>  Data path where challenges are installed
+
+DESCRIPTION
+  Remove an installed challenge package
+
+ALIASES
+  $ bitsocial challenge uninstall
+  $ bitsocial challenge rm
+  $ bitsocial challenge un
+
+EXAMPLES
+  $ bitsocial challenge remove my-challenge
+
+  $ bitsocial challenge remove @scope/my-challenge
+```
+
+## `bitsocial challenge un NAME`
+
+Remove an installed challenge package
+
+```
+USAGE
+  $ bitsocial challenge un NAME [--pkcOptions.dataPath <value>]
+
+ARGUMENTS
+  NAME  The challenge package name (e.g., my-challenge or @scope/my-challenge)
+
+FLAGS
+  --pkcOptions.dataPath=<value>  Data path where challenges are installed
+
+DESCRIPTION
+  Remove an installed challenge package
+
+ALIASES
+  $ bitsocial challenge uninstall
+  $ bitsocial challenge rm
+  $ bitsocial challenge un
+
 EXAMPLES
   $ bitsocial challenge remove my-challenge
 
   $ bitsocial challenge remove @scope/my-challenge
 ```
 
-_See code: [src/cli/commands/challenge/remove.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.65/src/cli/commands/challenge/remove.ts)_
+## `bitsocial challenge uninstall NAME`
+
+Remove an installed challenge package
+
+```
+USAGE
+  $ bitsocial challenge uninstall NAME [--pkcOptions.dataPath <value>]
+
+ARGUMENTS
+  NAME  The challenge package name (e.g., my-challenge or @scope/my-challenge)
+
+FLAGS
+  --pkcOptions.dataPath=<value>  Data path where challenges are installed
+
+DESCRIPTION
+  Remove an installed challenge package
+
+ALIASES
+  $ bitsocial challenge uninstall
+  $ bitsocial challenge rm
+  $ bitsocial challenge un
+
+EXAMPLES
+  $ bitsocial challenge remove my-challenge
+
+  $ bitsocial challenge remove @scope/my-challenge
+```
 
 ## `bitsocial community create`
 
@@ -423,7 +615,7 @@ EXAMPLES
     $ bitsocial community create --jsonFile ./create-options.json
 ```
 
-_See code: [src/cli/commands/community/create.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.65/src/cli/commands/community/create.ts)_
+_See code: [src/cli/commands/community/create.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.66/src/cli/commands/community/create.ts)_
 
 ## `bitsocial community delete ADDRESSES`
 
@@ -448,7 +640,7 @@ EXAMPLES
   $ bitsocial community delete 12D3KooWG3XbzoVyAE6Y9vHZKF64Yuuu4TjdgQKedk14iYmTEPWu
 ```
 
-_See code: [src/cli/commands/community/delete.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.65/src/cli/commands/community/delete.ts)_
+_See code: [src/cli/commands/community/delete.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.66/src/cli/commands/community/delete.ts)_
 
 ## `bitsocial community edit ADDRESS`
 
@@ -518,7 +710,7 @@ EXAMPLES
     $ bitsocial community edit bitsocial.bso --jsonFile ./edit-options.json
 ```
 
-_See code: [src/cli/commands/community/edit.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.65/src/cli/commands/community/edit.ts)_
+_See code: [src/cli/commands/community/edit.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.66/src/cli/commands/community/edit.ts)_
 
 ## `bitsocial community export [ADDRESS]`
 
@@ -559,7 +751,7 @@ EXAMPLES
   $ bitsocial community export --publicKey 12D3KooWG3XbzoVyAE6Y9vHZKF64Yuuu4TjdgQKedk14iYmTEPWu
 ```
 
-_See code: [src/cli/commands/community/export.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.65/src/cli/commands/community/export.ts)_
+_See code: [src/cli/commands/community/export.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.66/src/cli/commands/community/export.ts)_
 
 ## `bitsocial community get [ADDRESS]`
 
@@ -590,7 +782,7 @@ EXAMPLES
   $ bitsocial community get --publicKey 12D3KooWG3XbzoVyAE6Y9vHZKF64Yuuu4TjdgQKedk14iYmTEPWu
 ```
 
-_See code: [src/cli/commands/community/get.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.65/src/cli/commands/community/get.ts)_
+_See code: [src/cli/commands/community/get.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.66/src/cli/commands/community/get.ts)_
 
 ## `bitsocial community list`
 
@@ -613,7 +805,7 @@ EXAMPLES
   $ bitsocial community list
 ```
 
-_See code: [src/cli/commands/community/list.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.65/src/cli/commands/community/list.ts)_
+_See code: [src/cli/commands/community/list.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.66/src/cli/commands/community/list.ts)_
 
 ## `bitsocial community start ADDRESSES`
 
@@ -647,7 +839,7 @@ EXAMPLES
     $ bitsocial community start $(bitsocial community list -q) --concurrency 1
 ```
 
-_See code: [src/cli/commands/community/start.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.65/src/cli/commands/community/start.ts)_
+_See code: [src/cli/commands/community/start.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.66/src/cli/commands/community/start.ts)_
 
 ## `bitsocial community stop ADDRESSES`
 
@@ -672,7 +864,7 @@ EXAMPLES
   $ bitsocial community stop Qmb99crTbSUfKXamXwZBe829Vf6w5w5TktPkb6WstC9RFW
 ```
 
-_See code: [src/cli/commands/community/stop.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.65/src/cli/commands/community/stop.ts)_
+_See code: [src/cli/commands/community/stop.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.66/src/cli/commands/community/stop.ts)_
 
 ## `bitsocial daemon`
 
@@ -719,7 +911,7 @@ EXAMPLES
   $ bitsocial daemon --no-allowPrivateKeyExport
 ```
 
-_See code: [src/cli/commands/daemon.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.65/src/cli/commands/daemon.ts)_
+_See code: [src/cli/commands/daemon.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.66/src/cli/commands/daemon.ts)_
 
 ## `bitsocial help [COMMAND]`
 
@@ -785,7 +977,7 @@ EXAMPLES
   $ bitsocial logs --stdout -f
 ```
 
-_See code: [src/cli/commands/logs.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.65/src/cli/commands/logs.ts)_
+_See code: [src/cli/commands/logs.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.66/src/cli/commands/logs.ts)_
 
 ## `bitsocial update check`
 
@@ -802,7 +994,7 @@ EXAMPLES
   $ bitsocial update check
 ```
 
-_See code: [src/cli/commands/update/check.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.65/src/cli/commands/update/check.ts)_
+_See code: [src/cli/commands/update/check.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.66/src/cli/commands/update/check.ts)_
 
 ## `bitsocial update install [VERSION]`
 
@@ -834,7 +1026,7 @@ EXAMPLES
   $ bitsocial update install --no-restart-daemons
 ```
 
-_See code: [src/cli/commands/update/install.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.65/src/cli/commands/update/install.ts)_
+_See code: [src/cli/commands/update/install.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.66/src/cli/commands/update/install.ts)_
 
 ## `bitsocial update versions`
 
@@ -856,7 +1048,7 @@ EXAMPLES
   $ bitsocial update versions --limit 5
 ```
 
-_See code: [src/cli/commands/update/versions.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.65/src/cli/commands/update/versions.ts)_
+_See code: [src/cli/commands/update/versions.ts](https://github.com/bitsocialnet/bitsocial-cli/blob/v0.19.66/src/cli/commands/update/versions.ts)_
 <!-- commandsstop -->
 
 ## Contribution

package/dist/challenge-packages/challenge-utils.d.ts

@@ -21,4 +21,5 @@ export declare function ensureNpmAvailable(): Promise<void>;
 export declare function runNpmPack(packageSpec: string, destDir: string): Promise<string>;
 export declare function runNpmInstall(challengeDir: string): Promise<void>;
 export declare function verifyNativeModuleAbi(challengeDir: string): Promise<void>;
-export declare function loadChallengesIntoPKC(dataPath?: string): Promise<string[]>;
+export declare function formatChallengeNameVersion(challenge: Pick<InstalledChallenge, "name" | "version">): string;
+export declare function loadChallengesIntoPKC(dataPath?: string): Promise<InstalledChallenge[]>;

package/dist/challenge-packages/challenge-utils.js

@@ -285,12 +285,15 @@ export async function verifyNativeModuleAbi(challengeDir) {
             `Ensure the challenge package was built for this Node.js version.`);
     }
 }
+export function formatChallengeNameVersion(challenge) {
+    return challenge.version && challenge.version !== "unknown" ? `${challenge.name}@${challenge.version}` : challenge.name;
+}
 export async function loadChallengesIntoPKC(dataPath) {
     const challenges = await listInstalledChallenges(dataPath);
     if (challenges.length === 0)
         return [];
     const PKC = await import("@pkcprotocol/pkc-js");
-    const loadedNames = [];
+    const loaded = [];
     for (const challenge of challenges) {
         try {
             const pkg = await readChallengePackageJson(challenge.path);
@@ -300,11 +303,11 @@ export async function loadChallengesIntoPKC(dataPath) {
             const imported = await import(pathToFileURL(entryPath).href);
             const factory = imported.default || imported;
             PKC.default.challenges[challenge.name] = factory;
-            loadedNames.push(challenge.name);
+            loaded.push(challenge);
         }
         catch (err) {
             console.error(`Failed to load challenge "${challenge.name}":`, err);
         }
     }
-    return loadedNames;
+    return loaded;
 }

package/dist/cli/commands/challenge/install.d.ts

@@ -1,6 +1,7 @@
 import { Command } from "@oclif/core";
 export default class Install extends Command {
     static description: string;
+    static aliases: string[];
     static args: {
         package: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
     };

package/dist/cli/commands/challenge/install.js

@@ -6,6 +6,7 @@ import defaults from "../../../common-utils/defaults.js";
 import { ensureNpmAvailable, ensureChallengesDir, challengeNameToDir, readChallengePackageJson, runNpmPack, runNpmInstall, verifyNativeModuleAbi } from "../../../challenge-packages/challenge-utils.js";
 export default class Install extends Command {
     static description = "Install a challenge package (npm package name, git URL, tarball URL, or local path)";
+    static aliases = ["challenge:i", "challenge:add"];
     static args = {
         package: Args.string({
             description: "Package specifier — anything npm can install (name, name@version, git URL, tarball URL, local path)",
@@ -26,9 +27,9 @@ export default class Install extends Command {
         "bitsocial challenge install ./my-local-challenge"
     ];
     async run() {
+        const startTime = Date.now();
         const { args, flags } = await this.parse(Install);
         const dataPath = flags["pkcOptions.dataPath"] || defaults.PKC_DATA_PATH;
-        this.log("Installing challenge package — this may take a few minutes...");
         // 1. Check npm is available
         await ensureNpmAvailable();
         // 2. Use npm pack to download the package as a tarball
@@ -68,7 +69,16 @@ export default class Install extends Command {
             }
             // 5. Read package info
             const pkg = await readChallengePackageJson(pkgDir);
-            // 6. Check not already installed
+            // 6. Run npm install in the temp dir, so a failed install never
+            //    touches an existing working installation of the same package
+            process.stderr.write(`[challenge-install] starting npm install in ${pkgDir}\n`);
+            await runNpmInstall(pkgDir);
+            process.stderr.write("[challenge-install] npm install completed\n");
+            // 7. Verify native modules are ABI-compatible (still in the temp dir,
+            //    so failure needs no rollback — the temp dir is cleaned up below)
+            await verifyNativeModuleAbi(pkgDir);
+            // 8. Swap the verified package into the challenges dir, replacing any
+            //    existing installation (idempotent, like npm install)
             const challengesDir = await ensureChallengesDir(dataPath);
             const destDir = challengeNameToDir(challengesDir, pkg.name);
             let alreadyExists = true;
@@ -78,44 +88,30 @@ export default class Install extends Command {
             catch {
                 alreadyExists = false;
             }
-            if (alreadyExists) {
-                this.error(`Challenge "${pkg.name}" is already installed. Remove it first with: bitsocial challenge remove ${pkg.name}`);
-            }
-            // 7. Move to challenges dir
+            // Move any existing install aside (same filesystem — tmpDir lives under
+            // dataPath) so it can be restored if the final rename fails
+            const backupDir = path.join(tmpDir, "previous-install");
+            if (alreadyExists)
+                await fs.rename(destDir, backupDir);
             if (pkg.name.startsWith("@")) {
                 // Ensure scope dir exists for scoped packages
                 const scopeDir = path.dirname(destDir);
                 await fs.mkdir(scopeDir, { recursive: true });
             }
-            await fs.rename(pkgDir, destDir);
-            // 8. Run npm install
-            process.stderr.write(`[challenge-install] starting npm install in ${destDir}\n`);
-            await runNpmInstall(destDir);
-            process.stderr.write("[challenge-install] npm install completed\n");
-            // 9. Verify native modules are ABI-compatible
             try {
-                await verifyNativeModuleAbi(destDir);
+                await fs.rename(pkgDir, destDir);
             }
             catch (err) {
-                // Roll back the installation on ABI mismatch
-                await fs.rm(destDir, { recursive: true, force: true });
-                if (pkg.name.startsWith("@")) {
-                    const scopeDir = path.dirname(destDir);
-                    try {
-                        const entries = await fs.readdir(scopeDir);
-                        if (entries.length === 0)
-                            await fs.rmdir(scopeDir);
-                    }
-                    catch {
-                        // ignore
-                    }
-                }
-                this.error(err instanceof Error ? err.message : String(err));
+                // Restore the previous installation before surfacing the error
+                if (alreadyExists)
+                    await fs.rename(backupDir, destDir);
+                throw err;
             }
-            // 10. Print success
+            // 9. Print success (npm-style)
             const version = pkg.version ? `@${pkg.version}` : "";
-            this.log(`Installed challenge '${pkg.name}${version}'`);
-            // 11. Best-effort reload via daemon
+            const elapsedSeconds = Math.max(1, Math.round((Date.now() - startTime) / 1000));
+            this.log(`${alreadyExists ? "changed" : "added"} ${pkg.name}${version} in ${elapsedSeconds}s`);
+            // 10. Best-effort reload via daemon
             try {
                 await fetch("http://localhost:9138/api/challenges/reload", { method: "POST" });
             }
@@ -124,7 +120,7 @@ export default class Install extends Command {
             }
         }
         finally {
-            // 12. Clean up temp dir
+            // 11. Clean up temp dir (includes the previous-install backup, if any)
             await fs.rm(tmpDir, { recursive: true, force: true });
         }
     }

package/dist/cli/commands/challenge/list.d.ts

@@ -1,6 +1,7 @@
 import { Command } from "@oclif/core";
 export default class List extends Command {
     static description: string;
+    static aliases: string[];
     static flags: {
         quiet: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         "pkcOptions.dataPath": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;

package/dist/cli/commands/challenge/list.js

@@ -1,10 +1,11 @@
 import { Flags, Command } from "@oclif/core";
 import { EOL } from "os";
-import { printTable } from "@oclif/table";
+import path from "path";
 import defaults from "../../../common-utils/defaults.js";
-import { listInstalledChallenges } from "../../../challenge-packages/challenge-utils.js";
+import { getChallengesDir, listInstalledChallenges, formatChallengeNameVersion } from "../../../challenge-packages/challenge-utils.js";
 export default class List extends Command {
     static description = "List installed challenge packages";
+    static aliases = ["challenge:ls"];
     static flags = {
         quiet: Flags.boolean({ char: "q", summary: "Only display challenge names" }),
         "pkcOptions.dataPath": Flags.directory({
@@ -16,7 +17,8 @@ export default class List extends Command {
     async run() {
         const { flags } = await this.parse(List);
         const dataPath = flags["pkcOptions.dataPath"] || defaults.PKC_DATA_PATH;
-        const challenges = await listInstalledChallenges(dataPath);
+        // Sort alphabetically like npm ls (readdir order is filesystem-dependent)
+        const challenges = (await listInstalledChallenges(dataPath)).sort((a, b) => a.name.localeCompare(b.name));
         if (challenges.length === 0) {
             this.log("No challenge packages installed.");
             return;
@@ -25,12 +27,11 @@ export default class List extends Command {
             this.log(challenges.map((c) => c.name).join(EOL));
         }
         else {
-            printTable({
-                data: challenges.map((c) => ({
-                    name: c.name,
-                    version: c.version,
-                    description: c.description
-                }))
+            // npm-ls-style tree: challenges dir header, then name@version entries
+            this.log(path.resolve(getChallengesDir(dataPath)));
+            challenges.forEach((c, i) => {
+                const branch = i === challenges.length - 1 ? "└── " : "├── ";
+                this.log(`${branch}${formatChallengeNameVersion(c)}`);
             });
         }
     }

package/dist/cli/commands/challenge/remove.d.ts

@@ -1,6 +1,7 @@
 import { Command } from "@oclif/core";
 export default class Remove extends Command {
     static description: string;
+    static aliases: string[];
     static args: {
         name: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
     };

package/dist/cli/commands/challenge/remove.js

@@ -2,9 +2,10 @@ import { Args, Flags, Command } from "@oclif/core";
 import fs from "fs/promises";
 import path from "path";
 import defaults from "../../../common-utils/defaults.js";
-import { getChallengesDir, challengeNameToDir } from "../../../challenge-packages/challenge-utils.js";
+import { getChallengesDir, challengeNameToDir, readChallengePackageJson } from "../../../challenge-packages/challenge-utils.js";
 export default class Remove extends Command {
     static description = "Remove an installed challenge package";
+    static aliases = ["challenge:uninstall", "challenge:rm", "challenge:un"];
     static args = {
         name: Args.string({
             description: "The challenge package name (e.g., my-challenge or @scope/my-challenge)",
@@ -33,6 +34,16 @@ export default class Remove extends Command {
         catch {
             this.error(`Challenge "${args.name}" is not installed.`);
         }
+        // Read the installed version for the success message (best-effort)
+        let version = "";
+        try {
+            const pkg = await readChallengePackageJson(challengeDir);
+            if (pkg.version)
+                version = `@${pkg.version}`;
+        }
+        catch {
+            // unreadable package.json — report the name only
+        }
         // Remove the challenge directory
         await fs.rm(challengeDir, { recursive: true, force: true });
         // Clean up empty @scope/ dir for scoped packages
@@ -48,7 +59,7 @@ export default class Remove extends Command {
                 // ignore
             }
         }
-        this.log(`Removed challenge '${args.name}'`);
+        this.log(`removed ${args.name}${version}`);
         // Best-effort reload via daemon
         try {
             await fetch("http://localhost:9138/api/challenges/reload", { method: "POST" });

package/dist/cli/commands/daemon.js

@@ -6,7 +6,7 @@ import tcpPortUsed from "tcp-port-used";
 import { getLanIpV4Address, PKCLogger, setupDebugLogger, loadKuboConfigFile, parseMultiAddrKuboRpcToUrl, parseMultiAddrIpfsGatewayToUrl } from "../../util.js";
 import { startDaemonServer } from "../../webui/daemon-server.js";
 import { printBanner } from "../ascii-banner.js";
-import { loadChallengesIntoPKC } from "../../challenge-packages/challenge-utils.js";
+import { loadChallengesIntoPKC, formatChallengeNameVersion } from "../../challenge-packages/challenge-utils.js";
 import { migrateDataDirectory } from "../../common-utils/data-migration.js";
 import { createBsoResolvers, DEFAULT_PROVIDERS } from "../../common-utils/resolvers.js";
 import { pruneStaleStates, writeDaemonState, deleteDaemonState } from "../../common-utils/daemon-state.js";
@@ -275,7 +275,10 @@ export default class Daemon extends Command {
             let pendingKuboStart;
             // Kubo Node may fail randomly, we need to set a listener so when it exits because of an error we restart it
             let kuboProcess;
-            const keepKuboUp = async () => {
+            // Every kubo we've spawned that hasn't exited yet. Exit cleanup kills all of these,
+            // so a kubo that slipped out of kuboProcess tracking still dies with the daemon (issue #70)
+            const liveKuboPids = new Set();
+            const keepKuboUpOnce = async () => {
                 if (mainProcessExited)
                     return;
                 const kuboApiPort = Number(kuboRpcEndpoint.port);
@@ -283,6 +286,17 @@ export default class Daemon extends Command {
                     return; // already started, no need to intervene
                 const connectHostname = toConnectableHostname(kuboRpcEndpoint.hostname);
                 const isKuboApiPortTaken = await tcpPortUsed.check(kuboApiPort, connectHostname);
+                // Test hook: widens the window between the re-entrancy guard above and the pendingKuboStart
+                // assignment below, so tests can deterministically reproduce concurrent keepKuboUp entries
+                // (issue #70, see test/cli/daemon-kubo-restart-race.test.ts)
+                const portCheckDelayRaw = process.env["PKC_CLI_TEST_KEEPKUBOUP_PORTCHECK_DELAY_MS"];
+                const portCheckDelay = portCheckDelayRaw ? Number(portCheckDelayRaw) : 0;
+                if (Number.isFinite(portCheckDelay) && portCheckDelay > 0)
+                    await new Promise((resolve) => setTimeout(resolve, portCheckDelay));
+                // Re-check after the awaits above: the daemon may have begun shutting down, or another
+                // kubo may have been adopted in the meantime — spawning now would race it (issue #70)
+                if (mainProcessExited || kuboProcess || pendingKuboStart)
+                    return;
                 if (isKuboApiPortTaken) {
                     const connectableEndpoint = new URL(kuboRpcEndpoint.toString());
                     connectableEndpoint.hostname = connectHostname;
@@ -306,8 +320,15 @@ export default class Daemon extends Command {
                     }
                     throw new Error(`Cannot start IPFS daemon because the IPFS API port ${kuboRpcEndpoint.hostname}:${kuboApiPort} (configured as ${kuboRpcEndpoint.toString()}) is already in use.`);
                 }
+                let spawnedProcess;
                 const startPromise = startKuboNode(kuboRpcEndpoint, ipfsGatewayEndpoint, mergedPkcOptions.dataPath, (process) => {
+                    spawnedProcess = process;
                     kuboProcess = process;
+                    if (process.pid) {
+                        const pid = process.pid;
+                        liveKuboPids.add(pid);
+                        process.once("exit", () => liveKuboPids.delete(pid));
+                    }
                 });
                 pendingKuboStart = startPromise;
                 let startedProcess;
@@ -315,12 +336,15 @@ export default class Daemon extends Command {
                     startedProcess = await startPromise;
                 }
                 catch (error) {
-                    pendingKuboStart = undefined;
-                    if (!mainProcessExited)
+                    // Only clear state this attempt owns — it may track another attempt's healthy kubo (issue #70)
+                    if (pendingKuboStart === startPromise)
+                        pendingKuboStart = undefined;
+                    if (!mainProcessExited && spawnedProcess && kuboProcess === spawnedProcess)
                         kuboProcess = undefined;
                     throw error;
                 }
-                pendingKuboStart = undefined;
+                if (pendingKuboStart === startPromise)
+                    pendingKuboStart = undefined;
                 if (mainProcessExited) {
                     if (startedProcess?.pid && !startedProcess.killed) {
                         // Race condition: Kubo finished starting after mainProcessExited.
@@ -341,7 +365,8 @@ export default class Daemon extends Command {
                             /* best effort */
                         }
                     }
-                    kuboProcess = undefined;
+                    if (kuboProcess === startedProcess)
+                        kuboProcess = undefined;
                     return;
                 }
                 kuboProcess = startedProcess;
@@ -353,7 +378,8 @@ export default class Daemon extends Command {
                     // Restart Kubo process because it failed
                     if (!mainProcessExited) {
                         log(`Kubo node with pid (${currentProcess?.pid}) exited. Will attempt to restart it`);
-                        kuboProcess = undefined;
+                        if (kuboProcess === currentProcess)
+                            kuboProcess = undefined;
                         try {
                             await keepKuboUp();
                         }
@@ -367,6 +393,19 @@ export default class Daemon extends Command {
                 };
                 currentProcess.once("exit", onKuboExit);
             };
+            // Single-flight wrapper: keepKuboUp is invoked from independent places (the kubo exit
+            // handler and the watchdog interval). Concurrent callers must share one attempt —
+            // otherwise both can pass keepKuboUpOnce's re-entrancy guard during its awaits and
+            // spawn two kubo processes whose failure handling corrupts shared state (issue #70)
+            let keepKuboUpInFlight;
+            const keepKuboUp = () => {
+                if (!keepKuboUpInFlight) {
+                    keepKuboUpInFlight = keepKuboUpOnce().finally(() => {
+                        keepKuboUpInFlight = undefined;
+                    });
+                }
+                return keepKuboUpInFlight;
+            };
             let startedOwnRpc = false;
             let daemonServer;
             const createOrConnectRpc = async () => {
@@ -384,7 +423,7 @@ export default class Daemon extends Command {
                 // Load installed challenge packages before starting the RPC server
                 const loadedChallenges = await loadChallengesIntoPKC(mergedPkcOptions.dataPath);
                 if (loadedChallenges.length > 0)
-                    console.log(`Loaded challenge packages: ${loadedChallenges.join(", ")}`);
+                    console.log(`Loaded challenge packages: ${loadedChallenges.map(formatChallengeNameVersion).join(", ")}`);
                 daemonServer = await startDaemonServer(pkcRpcUrl, ipfsGatewayEndpoint, mergedPkcOptions, {
                     allowPrivateKeyExport: flags.allowPrivateKeyExport
                 });
@@ -429,14 +468,19 @@ export default class Daemon extends Command {
                 }
             };
             const killKuboProcess = async () => {
-                if (pendingKuboStart) {
-                    try {
-                        await pendingKuboStart;
-                    }
-                    catch {
-                        /* ignore */
-                    }
-                }
+                // Wait (bounded) for any in-flight start attempt so we kill the kubo it may still
+                // spawn. Both promises settle on all failure paths (issue #70), but a spawned kubo
+                // that wedges before "Daemon is ready" without exiting keeps them pending — the
+                // bound ensures shutdown still reaches the SIGINT/SIGKILL flow below, which kills
+                // it via kuboProcess (set in onSpawn) or the liveKuboPids sweep (PR #71 review).
+                const inFlightStarts = [keepKuboUpInFlight, pendingKuboStart]
+                    .filter((promise) => promise !== undefined)
+                    .map((promise) => promise.catch(() => { }));
+                if (inFlightStarts.length > 0)
+                    await Promise.race([
+                        Promise.all(inFlightStarts),
+                        new Promise((resolve) => setTimeout(resolve, 15_000).unref())
+                    ]);
                 if (kuboProcess?.pid && !kuboProcess.killed) {
                     const pid = kuboProcess.pid;
                     log("Attempting to kill kubo process with pid", pid);
@@ -466,6 +510,11 @@ export default class Daemon extends Command {
                         kuboProcess = undefined;
                     }
                 }
+                // Defense in depth: SIGKILL any spawned kubo that slipped out of kuboProcess
+                // tracking (e.g. via a state race) so nothing outlives the daemon (issue #70)
+                for (const pid of liveKuboPids)
+                    killKuboProcessGroup(pid, "SIGKILL");
+                liveKuboPids.clear();
             };
             asyncExitHook(async () => {
                 if (keepKuboUpInterval)
@@ -492,13 +541,58 @@ export default class Daemon extends Command {
             }, { wait: 120000 } // could take two minutes to shut down
             );
             // Emergency cleanup: if the process force-exits (e.g. double Ctrl+C),
-            // synchronously SIGKILL kubo's process group. This is a no-op if
-            // killKuboProcess() already ran (it sets kuboProcess = undefined).
+            // synchronously SIGKILL every live kubo's process group. This is a no-op if
+            // killKuboProcess() already ran (it clears kuboProcess and liveKuboPids).
             process.on("exit", () => {
                 if (kuboProcess?.pid) {
                     killKuboProcessGroup(kuboProcess.pid, "SIGKILL");
                 }
+                for (const pid of liveKuboPids)
+                    killKuboProcessGroup(pid, "SIGKILL");
             });
+            // Persistent signal guard (issue #70): exit-hook registers its SIGINT/SIGTERM handlers
+            // with process.once, so its listener vanishes from the listener list the moment a
+            // signal is dispatched. signal-exit (loaded by @pkcprotocol/proper-lock-file and other
+            // dependencies) re-raises the signal when every remaining listener is its own — which
+            // would kill the process while the async exit hook above is still shutting kubo down.
+            // A persistent non-signal-exit listener keeps that heuristic from ever firing.
+            // A repeated signal force-quits immediately (impatient Ctrl+C): process.exit triggers
+            // the emergency "exit" handler above, which SIGKILLs every live kubo.
+            let terminationSignalCount = 0;
+            for (const signal of ["SIGINT", "SIGTERM"]) {
+                process.on(signal, () => {
+                    terminationSignalCount++;
+                    if (terminationSignalCount >= 2) {
+                        log(`Received ${signal} again during shutdown, force-quitting`);
+                        process.exit(signal === "SIGINT" ? 130 : 143);
+                    }
+                });
+            }
+            // Test hook (issue #70): simulates a dependency registering a signal-exit handler
+            // AFTER the asyncExitHook above — what @pkcprotocol/proper-lock-file (and the
+            // signal-exit copies under ink/restore-cursor) do at module load. signal-exit
+            // re-raises the signal when every remaining listener belongs to the signal-exit
+            // family (`if (listeners.length === count) { ... process.kill(process.pid, s) }`),
+            // which kills the daemon while the async exit hook is still cleaning up kubo —
+            // exit-hook registers with process.once, so its listener is already gone by then.
+            if (process.env["PKC_CLI_TEST_SIMULATE_LATE_SIGNAL_EXIT"]) {
+                for (const signal of ["SIGINT", "SIGTERM"]) {
+                    // Real signal-exit copies only count each other as "family" (via a shared
+                    // global marker); any other listener makes them defer. Identify family by
+                    // source: signal-exit's dispatcher carries the "an exit is coming" comment.
+                    const isSignalExitFamily = (listener) => String(listener).includes("an exit is coming");
+                    const reRaiser = () => {
+                        const onlyFamilyLeft = process
+                            .listeners(signal)
+                            .every((listener) => listener === reRaiser || isSignalExitFamily(listener));
+                        if (onlyFamilyLeft) {
+                            process.removeListener(signal, reRaiser);
+                            process.kill(process.pid, signal);
+                        }
+                    };
+                    process.on(signal, reRaiser);
+                }
+            }
             // RPC port was already verified free above (fail-fast); only the kuboRpcClientsOptions branch skips local kubo.
             if (!pkcOptionsFromFlag?.kuboRpcClientsOptions)
                 await keepKuboUp();

package/dist/common-utils/daemon-state.d.ts

@@ -3,6 +3,8 @@ export interface DaemonState {
     startedAt: string;
     argv: string[];
     pkcRpcUrl: string;
+    /** OS-reported process start time, used to detect PID reuse. Absent in legacy state files. */
+    procStartTime?: string;
 }
 /** Write a daemon state file atomically (write to .tmp then rename). */
 export declare function writeDaemonState(state: DaemonState): Promise<void>;
@@ -10,7 +12,7 @@ export declare function writeDaemonState(state: DaemonState): Promise<void>;
 export declare function readAllDaemonStates(): Promise<DaemonState[]>;
 /** Delete a specific daemon's state file. Ignores ENOENT. */
 export declare function deleteDaemonState(pid: number): Promise<void>;
-/** Delete state files for dead PIDs from disk. */
+/** Delete state files for dead or reused PIDs from disk. */
 export declare function pruneStaleStates(): Promise<void>;
-/** Read all states, delete stale files (dead PIDs) from disk, return only alive ones. */
+/** Read all states, delete stale files (dead or reused PIDs) from disk, return only alive ones. */
 export declare function getAliveDaemonStates(): Promise<DaemonState[]>;

package/dist/common-utils/daemon-state.js

@@ -1,12 +1,60 @@
 import defaults from "./defaults.js";
 import path from "path";
 import fs from "fs/promises";
+import { execFile } from "child_process";
+import { promisify } from "util";
+const execFileAsync = promisify(execFile);
 const DAEMON_STATES_DIR = path.join(defaults.PKC_DATA_PATH, ".daemon_states");
 function stateFilePath(pid) {
     return path.join(DAEMON_STATES_DIR, `${pid}-daemon.state`);
 }
+/**
+ * OS-reported start time of a process, used as an identity token: if a state file's PID
+ * was reused by an unrelated process, its start time won't match the recorded one.
+ * Linux: starttime (field 22) of /proc/<pid>/stat, in clock ticks since boot.
+ * Other unix: `ps -o lstart=` output. Returns undefined when it can't be determined.
+ */
+async function getProcessStartTime(pid) {
+    try {
+        const stat = await fs.readFile(`/proc/${pid}/stat`, "utf-8");
+        // comm (field 2) may contain spaces/parens — real fields resume after the last ')'
+        const fields = stat.slice(stat.lastIndexOf(")") + 2).split(" ");
+        return fields[19]; // field 22 (starttime), offset by the 3 fields before the split
+    }
+    catch {
+        try {
+            const { stdout } = await execFileAsync("ps", ["-p", String(pid), "-o", "lstart="]);
+            return stdout.trim() || undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
+}
+/** Full command line of a process, or undefined when it can't be determined. */
+async function getProcessCommandLine(pid) {
+    try {
+        // An empty /proc cmdline is meaningful (kernel thread — not a daemon), so keep it
+        const raw = await fs.readFile(`/proc/${pid}/cmdline`, "utf-8");
+        return raw.split("\0").join(" ").trim();
+    }
+    catch {
+        try {
+            const { stdout } = await execFileAsync("ps", ["-p", String(pid), "-o", "args="]);
+            return stdout.trim() || undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
+}
 /** Write a daemon state file atomically (write to .tmp then rename). */
 export async function writeDaemonState(state) {
+    if (state.procStartTime === undefined) {
+        const procStartTime = await getProcessStartTime(state.pid);
+        if (procStartTime !== undefined)
+            state = { ...state, procStartTime };
+    }
     await fs.mkdir(DAEMON_STATES_DIR, { recursive: true });
     const dest = stateFilePath(state.pid);
     const tmp = dest + ".tmp";
@@ -60,21 +108,37 @@ function isPidAlive(pid) {
         return false; // ESRCH — no such process
     }
 }
-/** Delete state files for dead PIDs from disk. */
-export async function pruneStaleStates() {
-    const states = await readAllDaemonStates();
-    for (const state of states) {
-        if (!isPidAlive(state.pid)) {
-            await deleteDaemonState(state.pid);
-        }
+/**
+ * Check whether the daemon that wrote `state` is still the process running under its PID.
+ * A bare liveness check is not enough: a stale state file's PID may have been reused by an
+ * unrelated process (e.g. a state file written inside a Docker container whose PID maps to
+ * a kernel thread on the host — issue #66).
+ */
+async function isDaemonStateAlive(state) {
+    if (!isPidAlive(state.pid))
+        return false;
+    if (state.procStartTime !== undefined) {
+        const current = await getProcessStartTime(state.pid);
+        if (current !== undefined)
+            return current === state.procStartTime; // mismatch — PID was reused
+        return true; // identity undeterminable — fall back to liveness only
     }
+    // Legacy state file without procStartTime — heuristic: the command line must reference bitsocial
+    const cmdline = await getProcessCommandLine(state.pid);
+    if (cmdline === undefined)
+        return true; // identity undeterminable — fall back to liveness only
+    return cmdline.includes("bitsocial");
+}
+/** Delete state files for dead or reused PIDs from disk. */
+export async function pruneStaleStates() {
+    await getAliveDaemonStates();
 }
-/** Read all states, delete stale files (dead PIDs) from disk, return only alive ones. */
+/** Read all states, delete stale files (dead or reused PIDs) from disk, return only alive ones. */
 export async function getAliveDaemonStates() {
     const states = await readAllDaemonStates();
     const alive = [];
     for (const state of states) {
-        if (isPidAlive(state.pid)) {
+        if (await isDaemonStateAlive(state)) {
             alive.push(state);
         }
         else {

package/dist/ipfs/startIpfs.js

@@ -185,53 +185,53 @@ async function ensureIpfsPortsAreAvailable(log, configPath, apiUrl, gatewayUrl)
     }
 }
 export async function startKuboNode(apiUrl, gatewayUrl, dataPath, onSpawn) {
-    return new Promise(async (resolve, reject) => {
-        const log = PKCLogger("bitsocial-cli:ipfs:startKuboNode");
-        const ipfsDataPath = process.env["IPFS_PATH"] || path.join(dataPath, ".bitsocial-cli.ipfs");
-        await fs.promises.mkdir(ipfsDataPath, { recursive: true });
-        const ipfsConfigPath = path.join(ipfsDataPath, "config");
-        const kuboExePath = await getKuboExePath();
-        const kuboVersion = await getKuboVersion();
-        log(`Using Kubo version: ${kuboVersion}`);
-        log(`IpfsDataPath (${ipfsDataPath}), kuboExePath (${kuboExePath})`, "kubo ipfs config file", path.join(ipfsDataPath, "config"));
-        log("If you would like to change kubo config, please edit the config file at", path.join(ipfsDataPath, "config"));
-        const env = { IPFS_PATH: ipfsDataPath, DEBUG_COLORS: "1" };
-        let configJustInitialized = false;
-        try {
-            await _spawnAsync(log, kuboExePath, ["init"], { env, hideWindows: true });
-            configJustInitialized = true;
-        }
-        catch (e) {
-            const error = e;
-            if (!error?.message?.includes("ipfs configuration file already exists!"))
-                throw new Error("Failed to call ipfs init" + error);
-        }
-        if (configJustInitialized) {
-            await _spawnAsync(log, kuboExePath, ["config", "profile", "apply", `server`], {
-                env,
-                hideWindows: true
-            });
-            log("Called 'ipfs config profile apply server' successfully");
-            await mergeCliDefaultsIntoIpfsConfig(log, ipfsConfigPath, apiUrl, gatewayUrl);
-        }
-        else {
-            log("IPFS config already exists; skipping config overrides to preserve user changes.");
-        }
-        try {
-            await _spawnAsync(log, kuboExePath, ["repo", "migrate"], { env, hideWindows: true });
-            log("Ensured IPFS repository is migrated to the latest supported version.");
-        }
-        catch (migrationError) {
-            log.error("Failed to run IPFS repo migrations automatically", migrationError);
-            throw migrationError;
-        }
-        try {
-            await ensureIpfsPortsAreAvailable(log, ipfsConfigPath, apiUrl, gatewayUrl);
-        }
-        catch (error) {
-            reject(error instanceof Error ? error : new Error(String(error)));
-            return;
-        }
+    // Preparation phase runs as plain awaits so any failure rejects the returned promise.
+    // It must NOT live inside the new Promise() executor below: an async executor swallows
+    // throws as unhandledRejections and the promise never settles, which wedges the daemon's
+    // pendingKuboStart tracking and hangs its shutdown (issue #70).
+    const log = PKCLogger("bitsocial-cli:ipfs:startKuboNode");
+    const ipfsDataPath = process.env["IPFS_PATH"] || path.join(dataPath, ".bitsocial-cli.ipfs");
+    await fs.promises.mkdir(ipfsDataPath, { recursive: true });
+    const ipfsConfigPath = path.join(ipfsDataPath, "config");
+    const kuboExePath = await getKuboExePath();
+    const kuboVersion = await getKuboVersion();
+    log(`Using Kubo version: ${kuboVersion}`);
+    log(`IpfsDataPath (${ipfsDataPath}), kuboExePath (${kuboExePath})`, "kubo ipfs config file", path.join(ipfsDataPath, "config"));
+    log("If you would like to change kubo config, please edit the config file at", path.join(ipfsDataPath, "config"));
+    const env = { IPFS_PATH: ipfsDataPath, DEBUG_COLORS: "1" };
+    let configJustInitialized = false;
+    try {
+        await _spawnAsync(log, kuboExePath, ["init"], { env, hideWindows: true });
+        configJustInitialized = true;
+    }
+    catch (e) {
+        const error = e;
+        if (!error?.message?.includes("ipfs configuration file already exists!"))
+            throw new Error("Failed to call ipfs init" + error);
+    }
+    if (configJustInitialized) {
+        await _spawnAsync(log, kuboExePath, ["config", "profile", "apply", `server`], {
+            env,
+            hideWindows: true
+        });
+        log("Called 'ipfs config profile apply server' successfully");
+        await mergeCliDefaultsIntoIpfsConfig(log, ipfsConfigPath, apiUrl, gatewayUrl);
+    }
+    else {
+        log("IPFS config already exists; skipping config overrides to preserve user changes.");
+    }
+    try {
+        await _spawnAsync(log, kuboExePath, ["repo", "migrate"], { env, hideWindows: true });
+        log("Ensured IPFS repository is migrated to the latest supported version.");
+    }
+    catch (migrationError) {
+        log.error("Failed to run IPFS repo migrations automatically", migrationError);
+        throw migrationError;
+    }
+    await ensureIpfsPortsAreAvailable(log, ipfsConfigPath, apiUrl, gatewayUrl);
+    // Spawn phase: the promise only wraps the event-driven wait for kubo's "Daemon is ready",
+    // so every settle path goes through resolve/reject.
+    return new Promise((resolve, reject) => {
         const daemonArgs = ["--enable-namesys-pubsub", "--migrate"];
         const kuboProcess = spawn(kuboExePath, ["daemon", ...daemonArgs], {
             env,

package/dist/webui/daemon-server.js

@@ -6,7 +6,7 @@ import fs from "fs/promises";
 import { PKCLogger } from "../util.js";
 import { randomBytes } from "crypto";
 import express from "express";
-import { loadChallengesIntoPKC } from "../challenge-packages/challenge-utils.js";
+import { loadChallengesIntoPKC, formatChallengeNameVersion } from "../challenge-packages/challenge-utils.js";
 const rootHashRedirectScriptPattern = /<script\b[^>]*>(?:(?!<\/script>)[\s\S])*?window\.location\.replace\(["']\/#["']\s*\+\s*window\.location\.pathname\s*\+\s*window\.location\.search\);(?:(?!<\/script>)[\s\S])*?<\/script>/;
 async function _generateModifiedIndexHtmlWithRpcSettings(webuiPath, webuiName, ipfsGatewayPort) {
     const indexHtmlString = (await fs.readFile(path.join(webuiPath, "index_backup_no_rpc.html")))
@@ -124,7 +124,7 @@ export async function startDaemonServer(rpcUrl, ipfsGatewayUrl, pkcOptions, rpcS
     // Challenge reload endpoints
     const handleChallengeReload = async (_req, res) => {
         try {
-            const loadedNames = await loadChallengesIntoPKC(pkcOptions.dataPath);
+            const loadedChallenges = await loadChallengesIntoPKC(pkcOptions.dataPath);
             // Notify all connected RPC clients about the updated challenges
             const onSettingsChange = rpcServer._onSettingsChange;
             if (onSettingsChange) {
@@ -139,7 +139,7 @@ export async function startDaemonServer(rpcUrl, ipfsGatewayUrl, pkcOptions, rpcS
                     }
                 }
             }
-            res.json({ ok: true, challenges: loadedNames });
+            res.json({ ok: true, challenges: loadedChallenges.map(formatChallengeNameVersion) });
         }
         catch (err) {
             log.error("Failed to reload challenges", err);

package/oclif.manifest.json

@@ -161,7 +161,10 @@
       ]
     },
     "challenge:install": {
-      "aliases": [],
+      "aliases": [
+        "challenge:i",
+        "challenge:add"
+      ],
       "args": {
         "package": {
           "description": "Package specifier — anything npm can install (name, name@version, git URL, tarball URL, local path)",
@@ -205,7 +208,9 @@
       ]
     },
     "challenge:list": {
-      "aliases": [],
+      "aliases": [
+        "challenge:ls"
+      ],
       "args": {},
       "description": "List installed challenge packages",
       "examples": [
@@ -247,7 +252,11 @@
       ]
     },
     "challenge:remove": {
-      "aliases": [],
+      "aliases": [
+        "challenge:uninstall",
+        "challenge:rm",
+        "challenge:un"
+      ],
       "args": {
         "name": {
           "description": "The challenge package name (e.g., my-challenge or @scope/my-challenge)",
@@ -862,5 +871,5 @@
       ]
     }
   },
-  "version": "0.19.65"
+  "version": "0.19.66"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@bitsocial/bitsocial-cli",
-    "version": "0.19.65",
+    "version": "0.19.66",
     "description": "Command line interface to Bitsocial API",
     "types": "./dist/index.d.ts",
     "homepage": "https://github.com/bitsocialnet/bitsocial-cli",