@calltelemetry/cli 0.12.11 → 0.12.13

package/dist/commands/ship-sql-monitor.js

@@ -0,0 +1,89 @@
+import { readEnvKeys, updateEnvKeys } from '../lib/env.js';
+import { composeUp, compose } from '../lib/compose.js';
+import { attachSqlMonitorPassword } from './go-parity.js';
+import * as out from '../utils/output.js';
+const PROFILE = 'sql-monitor';
+const SERVICE = 'pghero';
+function parseProfiles(raw) {
+    return (raw ?? '')
+        .split(',')
+        .map((p) => p.trim())
+        .filter(Boolean);
+}
+function isEnabled(raw) {
+    return parseProfiles(raw).includes(PROFILE);
+}
+function addProfile(raw) {
+    const p = parseProfiles(raw);
+    if (!p.includes(PROFILE))
+        p.push(PROFILE);
+    return p.join(',');
+}
+function removeProfile(raw) {
+    return parseProfiles(raw).filter((x) => x !== PROFILE).join(',');
+}
+export function registerShipSqlMonitorCommand(program) {
+    const sql = program
+        .command('sql-monitor')
+        .description('PgHero SQL-health dashboard (opt-in compose profile)');
+    attachSqlMonitorPassword(sql);
+    sql
+        .command('status')
+        .description('Show whether sql-monitor profile is enabled')
+        .action(() => {
+        const env = readEnvKeys();
+        const on = isEnabled(env.COMPOSE_PROFILES);
+        console.log(`sql-monitor profile: ${on ? 'enabled' : 'disabled'}`);
+        console.log(`COMPOSE_PROFILES=${env.COMPOSE_PROFILES ?? '(unset)'}`);
+    });
+    sql
+        .command('enable')
+        .description('Enable sql-monitor compose profile and start pghero')
+        .action(async () => {
+        try {
+            const env = readEnvKeys();
+            await updateEnvKeys({ COMPOSE_PROFILES: addProfile(env.COMPOSE_PROFILES) });
+            out.ok('sql-monitor profile enabled in .env');
+            try {
+                await composeUp(['-d', SERVICE]);
+                out.ok(`${SERVICE} started`);
+            }
+            catch {
+                out.info('Profile written. Recreate stack: ct restart');
+            }
+        }
+        catch (err) {
+            out.fail(err instanceof Error ? err.message : String(err));
+            process.exitCode = 1;
+        }
+    });
+    sql
+        .command('disable')
+        .description('Disable sql-monitor compose profile and stop pghero')
+        .action(async () => {
+        try {
+            const env = readEnvKeys();
+            const next = removeProfile(env.COMPOSE_PROFILES);
+            await updateEnvKeys({
+                COMPOSE_PROFILES: next.length > 0 ? next : undefined,
+            });
+            out.ok('sql-monitor profile removed from .env');
+            try {
+                await compose(['stop', SERVICE]);
+                await compose(['rm', '-f', SERVICE]);
+                out.ok(`${SERVICE} stopped`);
+            }
+            catch {
+                out.info('Profile cleared. Stop remaining containers if needed.');
+            }
+        }
+        catch (err) {
+            out.fail(err instanceof Error ? err.message : String(err));
+            process.exitCode = 1;
+        }
+    });
+    sql.action(() => {
+        console.log('Usage: ct sql-monitor status|enable|disable|password|rotate-password');
+    });
+}
+//# sourceMappingURL=ship-sql-monitor.js.map

package/dist/commands/ship-sql-monitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ship-sql-monitor.js","sourceRoot":"","sources":["../../src/commands/ship-sql-monitor.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAE1C,MAAM,OAAO,GAAG,aAAa,CAAC;AAC9B,MAAM,OAAO,GAAG,QAAQ,CAAC;AAEzB,SAAS,aAAa,CAAC,GAAuB;IAC5C,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;SACf,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,SAAS,CAAC,GAAuB;IACxC,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,UAAU,CAAC,GAAuB;IACzC,MAAM,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,aAAa,CAAC,GAAuB;IAC5C,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,OAAgB;IAC5D,MAAM,GAAG,GAAG,OAAO;SAChB,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,sDAAsD,CAAC,CAAC;IAEvE,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAE9B,GAAG;SACA,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,6CAA6C,CAAC;SAC1D,MAAM,CAAC,GAAG,EAAE;QACX,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,CAAC,gBAAgB,IAAI,SAAS,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,qDAAqD,CAAC;SAClE,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;YAC1B,MAAM,aAAa,CAAC,EAAE,gBAAgB,EAAE,UAAU,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;YAC5E,GAAG,CAAC,EAAE,CAAC,qCAAqC,CAAC,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;gBACjC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,UAAU,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,qDAAqD,CAAC;SAClE,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YACjD,MAAM,aAAa,CAAC;gBAClB,gBAAgB,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aACrD,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,uCAAuC,CAAC,CAAC;YAChD,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;gBACjC,MAAM,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;gBACrC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,UAAU,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/ship-status.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Slim non-Ink `ct status` for the multi-arch ship binary.
+ */
+import type { Command } from 'commander';
+export declare function registerShipStatusCommand(program: Command): void;
+//# sourceMappingURL=ship-status.d.ts.map

package/dist/commands/ship-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ship-status.d.ts","sourceRoot":"","sources":["../../src/commands/ship-status.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIzC,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAgBhE"}

package/dist/commands/ship-status.js

@@ -0,0 +1,21 @@
+import { collectShipStatus, formatShipStatus } from '../lib/ship-status.js';
+import * as out from '../utils/output.js';
+export function registerShipStatusCommand(program) {
+    program
+        .command('status')
+        .description('Show appliance status (compose, version, install dir)')
+        .action(async () => {
+        try {
+            const snapshot = await collectShipStatus();
+            console.log(formatShipStatus(snapshot));
+            if (snapshot.error && !snapshot.composeFileExists) {
+                process.exitCode = 1;
+            }
+        }
+        catch (err) {
+            out.fail(err?.message ?? String(err));
+            process.exitCode = 1;
+        }
+    });
+}
+//# sourceMappingURL=ship-status.js.map

package/dist/commands/ship-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ship-status.js","sourceRoot":"","sources":["../../src/commands/ship-status.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC5E,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAE1C,MAAM,UAAU,yBAAyB,CAAC,OAAgB;IACxD,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,uDAAuD,CAAC;SACpE,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,EAAE,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;YACxC,IAAI,QAAQ,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;gBAClD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/ship-update.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Slim non-Ink `ct update` for the multi-arch ship binary.
+ *
+ * Uses lib/update-steps (preflightSteps + executeSteps + runStepsCli) — the same
+ * pipeline as the full Node CLI, without Ink TUI or Node runtime self-upgrade.
+ */
+import type { Command } from 'commander';
+/**
+ * Resolve the operator's version argument / flags to a concrete release string.
+ * Fail-closed on unknown targets.
+ */
+export declare function resolveShipUpdateTarget(versionArg: string | undefined, opts: {
+    latest?: boolean;
+    rc?: boolean;
+    stable?: boolean;
+    line?: string;
+    channel?: string;
+}): Promise<string>;
+/** Run the non-Ink update pipeline. Throws / sets exitCode on failure. */
+export declare function runShipUpdate(versionArg: string | undefined, opts: {
+    latest?: boolean;
+    rc?: boolean;
+    stable?: boolean;
+    line?: string;
+    channel?: string;
+    forceUpgrade?: boolean;
+    cleanup?: boolean;
+    backupDb?: boolean;
+}): Promise<void>;
+export declare function registerShipUpdateCommand(program: Command): void;
+//# sourceMappingURL=ship-update.d.ts.map

package/dist/commands/ship-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ship-update.d.ts","sourceRoot":"","sources":["../../src/commands/ship-update.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYzC;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,IAAI,EAAE;IACJ,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACA,OAAO,CAAC,MAAM,CAAC,CAkGjB;AAED,0EAA0E;AAC1E,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,IAAI,EAAE;IACJ,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,GACA,OAAO,CAAC,IAAI,CAAC,CAmFf;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA2ChE"}

package/dist/commands/ship-update.js

@@ -0,0 +1,234 @@
+import { fetchLatestVersion, fetchLatestForLine, fetchLatestForChannel } from '../lib/bundle.js';
+import { detectTargetType, getPin, setPin } from '../lib/prefs.js';
+import { getCurrentVersion } from '../lib/update.js';
+import { createDatabaseBackup } from '../lib/db-backup.js';
+import { preflightSteps, executeSteps, runStepsCli } from '../lib/update-steps.js';
+import { capturePostUpgradeHealth } from '../lib/post-upgrade-health.js';
+import { getDockerVersion } from '../lib/system.js';
+import { updateService } from '../lib/ops-port.js';
+import { reportOpsResult } from './go-parity.js';
+import * as out from '../utils/output.js';
+/**
+ * Resolve the operator's version argument / flags to a concrete release string.
+ * Fail-closed on unknown targets.
+ */
+export async function resolveShipUpdateTarget(versionArg, opts) {
+    let version = versionArg;
+    let pinIntent = null;
+    if (opts.line) {
+        pinIntent = { type: 'line', value: opts.line };
+        version = opts.line;
+    }
+    else if (opts.channel) {
+        pinIntent = { type: 'channel', value: opts.channel };
+        version = opts.channel;
+    }
+    else if (versionArg) {
+        const detected = detectTargetType(versionArg);
+        if (detected === 'line')
+            pinIntent = { type: 'line', value: versionArg };
+        else if (detected === 'channel')
+            pinIntent = { type: 'channel', value: versionArg };
+        else if (detected === 'unknown') {
+            throw new Error(`Don't know how to interpret target '${versionArg}'. Accepted forms:\n` +
+                `  ct update                   # follow saved pin or global stable\n` +
+                `  ct update 0.8.6             # pin to the 0.8.6 line\n` +
+                `  ct update 0.8.6.5           # install exact version\n` +
+                `  ct update stable            # follow the stable channel\n` +
+                `  ct update --line 0.8.6      # explicit line flag\n` +
+                `  ct update --channel stable  # explicit channel flag`);
+        }
+    }
+    if (pinIntent) {
+        setPin(pinIntent);
+        console.log(`Pinned: ${pinIntent.type} = ${pinIntent.value}`);
+        console.log(`(saved to ~/.ct/preferences.json)`);
+    }
+    if (!version && !opts.latest && !opts.rc && !opts.stable) {
+        const saved = getPin();
+        if (saved) {
+            console.log(`Using saved pin: ${saved.type} = ${saved.value}`);
+            version = saved.value;
+        }
+    }
+    const targetType = detectTargetType(version);
+    if (targetType === 'line') {
+        console.log(`Fetching latest stable for line ${version}...`);
+        const resolved = await fetchLatestForLine(version);
+        console.log(`Latest ${version} stable: ${resolved}`);
+        return resolved;
+    }
+    if (targetType === 'channel') {
+        console.log(`Fetching latest on channel '${version}'...`);
+        const resolved = await fetchLatestForChannel(version);
+        console.log(`Latest on ${version}: ${resolved}`);
+        return resolved;
+    }
+    if (targetType === 'keyword') {
+        if (version === 'latest') {
+            console.log('Fetching latest version (including pre-releases)...');
+            const resolved = await fetchLatestVersion('latest');
+            console.log(`Latest version: ${resolved}`);
+            return resolved;
+        }
+        if (version === 'rc') {
+            console.log('Fetching latest release candidate...');
+            const resolved = await fetchLatestVersion('rc');
+            console.log(`Latest release candidate: ${resolved}`);
+            return resolved;
+        }
+        if (version === 'dev') {
+            console.log("Fetching latest on channel 'dev'...");
+            const resolved = await fetchLatestForChannel('dev');
+            console.log(`Latest on dev: ${resolved}`);
+            return resolved;
+        }
+        console.log('Fetching latest stable version...');
+        const resolved = await fetchLatestVersion('stable');
+        console.log(`Latest stable version: ${resolved}`);
+        return resolved;
+    }
+    if (!version && opts.latest) {
+        console.log('Fetching latest version (including pre-releases)...');
+        const resolved = await fetchLatestVersion('latest');
+        console.log(`Latest version: ${resolved}`);
+        return resolved;
+    }
+    if (!version && opts.rc) {
+        console.log('Fetching latest release candidate...');
+        const resolved = await fetchLatestVersion('rc');
+        console.log(`Latest release candidate: ${resolved}`);
+        return resolved;
+    }
+    if (!version || opts.stable) {
+        console.log('Fetching latest stable version...');
+        const resolved = await fetchLatestVersion('stable');
+        console.log(`Latest stable version: ${resolved}`);
+        return resolved;
+    }
+    // exact version
+    return version;
+}
+/** Run the non-Ink update pipeline. Throws / sets exitCode on failure. */
+export async function runShipUpdate(versionArg, opts) {
+    const version = await resolveShipUpdateTarget(versionArg, opts);
+    const currentVersion = getCurrentVersion();
+    console.log(`Current version: ${currentVersion}`);
+    console.log(`Target version: ${version}`);
+    console.log();
+    if (!opts.forceUpgrade) {
+        try {
+            await runStepsCli(preflightSteps(version));
+            console.log();
+        }
+        catch {
+            out.fail('Pre-flight checks failed. Use --force-upgrade to proceed anyway.');
+            process.exitCode = 1;
+            return;
+        }
+    }
+    const dockerVer = await getDockerVersion();
+    if (dockerVer === null) {
+        out.warn('Docker not found or not responding');
+    }
+    else if (dockerVer < 26) {
+        out.warn(`Docker version ${dockerVer} detected — Docker 26+ is recommended`);
+        // Ship path: fail-closed when force not set (no automatic dnf upgrade here).
+        if (!opts.forceUpgrade) {
+            out.fail('Docker < 26. Use --force-upgrade to continue, or upgrade Docker first.');
+            process.exitCode = 1;
+            return;
+        }
+    }
+    else {
+        out.ok(`Docker version ${dockerVer} is supported`);
+    }
+    console.log();
+    console.log(`Upgrading from ${currentVersion} to ${version}`);
+    console.log('(ship binary — non-interactive step runner; no Ink TUI)');
+    let steps = executeSteps(version);
+    if (opts.forceUpgrade) {
+        steps = steps.filter((s) => s.label !== 'Check image availability');
+    }
+    if (opts.cleanup === false) {
+        steps = steps.filter((s) => s.label !== 'Cleanup unused resources');
+    }
+    if (opts.backupDb) {
+        steps = [
+            {
+                label: 'Database backup',
+                run: async (ctx) => {
+                    ctx?.log('Creating database backup before update...');
+                    const backup = await createDatabaseBackup();
+                    return backup.filePath;
+                },
+            },
+            ...steps,
+        ];
+    }
+    console.log();
+    let stepError;
+    try {
+        await runStepsCli(steps);
+    }
+    catch (err) {
+        stepError = err;
+    }
+    console.log();
+    const anyFailed = await capturePostUpgradeHealth(`post-upgrade container health check (${version})`, { upgradeFailed: Boolean(stepError) });
+    if (stepError) {
+        out.fail(`Update failed: ${stepError instanceof Error ? stepError.message : String(stepError)}`);
+        process.exitCode = 1;
+        return;
+    }
+    if (anyFailed) {
+        out.warn('Update applied, but one or more containers are unhealthy — see captured logs above.');
+        process.exitCode = 1;
+    }
+    else {
+        out.successBox('Update complete!');
+    }
+}
+export function registerShipUpdateCommand(program) {
+    const update = program
+        .command('update [version]')
+        .description('Update to a version, line, channel, or latest stable (ship binary step runner)')
+        .option('--latest', 'Use latest build including pre-releases')
+        .option('--rc', 'Use latest release candidate')
+        .option('--stable', 'Use latest stable release (default)')
+        .option('--line <X.Y.Z>', 'Pin to a specific version line')
+        .option('--channel <name>', 'Pin to a customer-facing channel')
+        .option('--force-upgrade', 'Skip preflight / allow Docker < 26')
+        .option('--no-cleanup', 'Skip Docker cleanup after update')
+        .option('--backup-db', 'Create a database backup before update', false)
+        .option('--no-backup-db', 'Skip database backup before update')
+        .action(async (versionArg, opts) => {
+        try {
+            await runShipUpdate(versionArg, {
+                latest: opts.latest,
+                rc: opts.rc,
+                stable: opts.stable,
+                line: opts.line,
+                channel: opts.channel,
+                forceUpgrade: opts.forceUpgrade,
+                cleanup: opts.cleanup,
+                backupDb: opts.backupDb,
+            });
+        }
+        catch (err) {
+            out.fail(err?.message ?? String(err));
+            process.exitCode = 1;
+        }
+    });
+    // Dual-form: ct update service <svc> <tag> (also top-level update-service via go-parity)
+    update
+        .command('service <service> <tag>')
+        .description('Update ONE compose service image tag (atomic recreate)')
+        .option('-y, --yes', 'Confirm non-interactive apply')
+        .option('--dry-run', 'Show plan only')
+        .action(async (service, tag, opts) => {
+        const r = await updateService(service, tag, { yes: opts.yes, dryRun: opts.dryRun });
+        reportOpsResult(r);
+    });
+}
+//# sourceMappingURL=ship-update.js.map

package/dist/commands/ship-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ship-update.js","sourceRoot":"","sources":["../../src/commands/ship-update.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAE1C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAA8B,EAC9B,IAMC;IAED,IAAI,OAAO,GAAuB,UAAU,CAAC;IAC7C,IAAI,SAAS,GAAuD,IAAI,CAAC;IAEzE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,SAAS,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/C,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;IACtB,CAAC;SAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACxB,SAAS,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACrD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IACzB,CAAC;SAAM,IAAI,UAAU,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,MAAM;YAAE,SAAS,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;aACpE,IAAI,QAAQ,KAAK,SAAS;YAAE,SAAS,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;aAC/E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,uCAAuC,UAAU,sBAAsB;gBACrE,qEAAqE;gBACrE,yDAAyD;gBACzD,yDAAyD;gBACzD,6DAA6D;gBAC7D,sDAAsD;gBACtD,uDAAuD,CAC1D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,SAAS,CAAC,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,WAAW,SAAS,CAAC,IAAI,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC;QACvB,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/D,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,mCAAmC,OAAO,KAAK,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,OAAQ,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,UAAU,OAAO,YAAY,QAAQ,EAAE,CAAC,CAAC;QACrD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,+BAA+B,OAAO,MAAM,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,OAAQ,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,KAAK,QAAQ,EAAE,CAAC,CAAC;QACjD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;YAC3C,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACpD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC;YACrD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,kBAAkB,QAAQ,EAAE,CAAC,CAAC;YAC1C,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAC;QAClD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;QAC3C,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC;QACrD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAC;QAClD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,gBAAgB;IAChB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAA8B,EAC9B,IASC;IAED,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAChE,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,oBAAoB,cAAc,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;YAC7E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,gBAAgB,EAAE,CAAC;IAC3C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACjD,CAAC;SAAM,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,kBAAkB,SAAS,uCAAuC,CAAC,CAAC;QAC7E,6EAA6E;QAC7E,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;YACnF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;IACH,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,EAAE,CAAC,kBAAkB,SAAS,eAAe,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,kBAAkB,cAAc,OAAO,OAAO,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IAEvE,IAAI,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,0BAA0B,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC3B,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,0BAA0B,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,KAAK,GAAG;YACN;gBACE,KAAK,EAAE,iBAAiB;gBACxB,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;oBACjB,GAAG,EAAE,GAAG,CAAC,2CAA2C,CAAC,CAAC;oBACtD,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAC;oBAC5C,OAAO,MAAM,CAAC,QAAQ,CAAC;gBACzB,CAAC;aACF;YACD,GAAG,KAAK;SACT,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,SAAS,GAAG,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAC9C,wCAAwC,OAAO,GAAG,EAClD,EAAE,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,CACtC,CAAC;IAEF,IAAI,SAAS,EAAE,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,kBAAkB,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACjG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;QAChG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAgB;IACxD,MAAM,MAAM,GAAG,OAAO;SACnB,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CACV,gFAAgF,CACjF;SACA,MAAM,CAAC,UAAU,EAAE,yCAAyC,CAAC;SAC7D,MAAM,CAAC,MAAM,EAAE,8BAA8B,CAAC;SAC9C,MAAM,CAAC,UAAU,EAAE,qCAAqC,CAAC;SACzD,MAAM,CAAC,gBAAgB,EAAE,gCAAgC,CAAC;SAC1D,MAAM,CAAC,kBAAkB,EAAE,kCAAkC,CAAC;SAC9D,MAAM,CAAC,iBAAiB,EAAE,oCAAoC,CAAC;SAC/D,MAAM,CAAC,cAAc,EAAE,kCAAkC,CAAC;SAC1D,MAAM,CAAC,aAAa,EAAE,wCAAwC,EAAE,KAAK,CAAC;SACtE,MAAM,CAAC,gBAAgB,EAAE,oCAAoC,CAAC;SAC9D,MAAM,CAAC,KAAK,EAAE,UAA8B,EAAE,IAAI,EAAE,EAAE;QACrD,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,UAAU,EAAE;gBAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,yFAAyF;IACzF,MAAM;SACH,OAAO,CAAC,yBAAyB,CAAC;SAClC,WAAW,CAAC,wDAAwD,CAAC;SACrE,MAAM,CAAC,WAAW,EAAE,+BAA+B,CAAC;SACpD,MAAM,CAAC,WAAW,EAAE,gBAAgB,CAAC;SACrC,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,GAAW,EAAE,IAAyC,EAAE,EAAE;QACxF,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACpF,eAAe,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/ship-users.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Ship (no-Ink) users: list | orgs | reset-password.
+ * Uses lib/users.ts RPC. Top-level alias: ct reset-password.
+ */
+import type { Command } from 'commander';
+export declare function registerShipUsersCommand(program: Command): void;
+//# sourceMappingURL=ship-users.d.ts.map

package/dist/commands/ship-users.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ship-users.d.ts","sourceRoot":"","sources":["../../src/commands/ship-users.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqFzC,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAsD/D"}

package/dist/commands/ship-users.js

@@ -0,0 +1,118 @@
+import { listOrgs, listOrgUsers, resetUserPassword, generateUserPassword, } from '../lib/users.js';
+import { attachUsersAddAdmin } from './go-parity.js';
+import * as out from '../utils/output.js';
+async function printOrgs() {
+    const orgs = await listOrgs();
+    if (orgs.length === 0) {
+        console.log('No organizations found.');
+        return;
+    }
+    console.log('Organizations');
+    for (const org of orgs) {
+        console.log(`  ${String(org.id).padStart(4)}  ${org.name}`);
+    }
+}
+async function printUsers() {
+    const orgs = await listOrgs();
+    if (orgs.length === 0) {
+        console.log('No organizations found.');
+        return;
+    }
+    for (const org of orgs) {
+        console.log(`\nOrganization: ${org.name} (id=${org.id})`);
+        const users = await listOrgUsers(org.id);
+        if (users.length === 0) {
+            console.log('  (no users)');
+            continue;
+        }
+        console.log('  ID    Email                          Role');
+        for (const u of users) {
+            const roles = u.roles?.length ? u.roles.join(',') : u.role || '-';
+            console.log(`  ${String(u.id).padEnd(5)} ${u.email.padEnd(30)} ${roles}`);
+        }
+    }
+}
+async function doResetPassword(opts) {
+    if (!opts.user) {
+        out.fail('Usage: ct users reset-password --user <id> [--password <pw>|--generate]');
+        out.info('Legacy: ct reset-password --user <id>');
+        process.exitCode = 1;
+        return;
+    }
+    const userId = parseInt(opts.user, 10);
+    if (Number.isNaN(userId) || userId <= 0) {
+        out.fail(`Invalid user id: ${opts.user}`);
+        process.exitCode = 1;
+        return;
+    }
+    let password = opts.password;
+    if (!password || opts.generate) {
+        password = generateUserPassword();
+    }
+    if (password.length < 8) {
+        out.fail('Password must be at least 8 characters');
+        process.exitCode = 1;
+        return;
+    }
+    try {
+        await resetUserPassword(userId, password);
+        out.ok(`Password reset for user ${userId}`);
+        console.log(`  New password: ${password}`);
+    }
+    catch (err) {
+        out.fail(err instanceof Error ? err.message : String(err));
+        process.exitCode = 1;
+    }
+}
+export function registerShipUsersCommand(program) {
+    const users = program.command('users').description('Manage application user accounts');
+    // Hidden experimental add-admin (requires --experimental)
+    attachUsersAddAdmin(users);
+    users
+        .command('list')
+        .description('List users across all organizations (RPC)')
+        .action(async () => {
+        try {
+            await printUsers();
+        }
+        catch (err) {
+            out.fail(err instanceof Error ? err.message : String(err));
+            process.exitCode = 1;
+        }
+    });
+    users
+        .command('orgs')
+        .description('List organizations (RPC)')
+        .action(async () => {
+        try {
+            await printOrgs();
+        }
+        catch (err) {
+            out.fail(err instanceof Error ? err.message : String(err));
+            process.exitCode = 1;
+        }
+    });
+    users
+        .command('reset-password')
+        .description('Reset a user password via RPC')
+        .option('--user <id>', 'User ID')
+        .option('--password <pw>', 'New password (default: generate)')
+        .option('--generate', 'Force generate a random password')
+        .action(async (opts) => {
+        await doResetPassword(opts);
+    });
+    users.action(() => {
+        console.log('Usage: ct users list|orgs|reset-password|add-admin');
+    });
+    // Legacy Go/cli.sh alias
+    program
+        .command('reset-password')
+        .description('Alias for ct users reset-password')
+        .option('--user <id>', 'User ID')
+        .option('--password <pw>', 'New password (default: generate)')
+        .option('--generate', 'Force generate a random password')
+        .action(async (opts) => {
+        await doResetPassword(opts);
+    });
+}
+//# sourceMappingURL=ship-users.js.map

package/dist/commands/ship-users.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ship-users.js","sourceRoot":"","sources":["../../src/commands/ship-users.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,QAAQ,EACR,YAAY,EACZ,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAE1C,KAAK,UAAU,SAAS;IACtB,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU;IACvB,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;QAC3D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC;YAClE,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAC7D,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAI9B;IACC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,GAAG,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;QACpF,GAAG,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QAClD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC7B,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/B,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QACnD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC1C,GAAG,CAAC,EAAE,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,kCAAkC,CAAC,CAAC;IAEvF,0DAA0D;IAC1D,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAE3B,KAAK;SACF,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,2CAA2C,CAAC;SACxD,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,UAAU,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,KAAK;SACF,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,0BAA0B,CAAC;SACvC,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,SAAS,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,KAAK;SACF,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,+BAA+B,CAAC;SAC5C,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC;SAChC,MAAM,CAAC,iBAAiB,EAAE,kCAAkC,CAAC;SAC7D,MAAM,CAAC,YAAY,EAAE,kCAAkC,CAAC;SACxD,MAAM,CAAC,KAAK,EAAE,IAA8D,EAAE,EAAE;QAC/E,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE;QAChB,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,yBAAyB;IACzB,OAAO;SACJ,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,mCAAmC,CAAC;SAChD,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC;SAChC,MAAM,CAAC,iBAAiB,EAAE,kCAAkC,CAAC;SAC7D,MAAM,CAAC,YAAY,EAAE,kCAAkC,CAAC;SACxD,MAAM,CAAC,KAAK,EAAE,IAA8D,EAAE,EAAE;QAC/E,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/update.d.ts

@@ -1,4 +1,40 @@
 import { Command } from 'commander';
+/**
+ * Public-doc metadata for appliance update / lifecycle commands.
+ *
+ * @publicDoc
+ * @command update
+ * @category Updates
+ * @summary Update the CallTelemetry appliance to a version, line, or channel
+ * @when Routine upgrades, pin to a release line/channel, or apply a specific build
+ * @danger Updates restart services; use --backup-db for a pre-update database dump. Prefer non-peak windows.
+ * @see https://docs.calltelemetry.com
+ * @example ct update
+ * @example ct update 0.8.6
+ * @example ct update --latest
+ * @example ct update --backup-db
+ */
+export declare const updatePublicDoc: import("../lib/public-doc.js").PublicDocMeta;
+/**
+ * @publicDoc
+ * @command rollback
+ * @category Updates
+ * @summary Roll back to the previous docker-compose configuration
+ * @when Immediately after a failed or undesired update when a compose backup exists
+ * @danger Restores the last compose backup and restarts services; does not restore the database
+ * @example ct rollback
+ */
+export declare const rollbackPublicDoc: import("../lib/public-doc.js").PublicDocMeta;
+/**
+ * @publicDoc
+ * @command reset
+ * @category Updates
+ * @summary Stop the application, remove Docker volumes, and restart (destructive)
+ * @when Recovering a broken install when data loss is acceptable
+ * @danger Removes application containers and volumes; irreversible without external backups. Requires --yes or interactive confirm.
+ * @example ct reset --yes
+ */
+export declare const resetPublicDoc: import("../lib/public-doc.js").PublicDocMeta;
 /** @internal */
 export declare const dockerPackageUpdateArgs: readonly ["dnf", "update", "-y", "docker-ce", "docker-ce-cli", "containerd.io", "docker-buildx-plugin", "docker-compose-plugin"];
 /** @internal */
@@ -8,6 +44,15 @@ export declare function sudoNonInteractive(args: string[], options?: {
     stdout?: 'inherit' | 'ignore';
 }): Promise<void>;
 export declare function ensureNodeRuntime(): Promise<string>;
+/**
+ * Register update, rollback, and service lifecycle commands (start/stop/restart/reset).
+ *
+ * @publicDoc
+ * @command update
+ * @category Updates
+ * @summary Appliance update and lifecycle management
+ * @when Upgrades, rollbacks, and compose lifecycle control
+ */
 export declare function registerUpdateCommand(program: Command): void;
 /**
  * Phase 3: pin / unpin commands for multi-line concurrent shipping.

package/dist/commands/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../src/commands/update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgBpC,gBAAgB;AAChB,eAAO,MAAM,uBAAuB,kIAS1B,CAAC;AAEX,gBAAgB;AAChB,wBAAsB,6BAA6B,IAAI,OAAO,CAAC,IAAI,CAAC,CASnE;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAA;CAAO,GACvE,OAAO,CAAC,IAAI,CAAC,CAoCf;AAOD,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC,CAkBzD;AAOD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,QA0YrD;AAaD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,QAuCnD"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../src/commands/update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiBpC;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,eAAe,8CAQ1B,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,8CAO5B,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc,8CAOzB,CAAC;AAEH,gBAAgB;AAChB,eAAO,MAAM,uBAAuB,kIAS1B,CAAC;AAEX,gBAAgB;AAChB,wBAAsB,6BAA6B,IAAI,OAAO,CAAC,IAAI,CAAC,CASnE;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAA;CAAO,GACvE,OAAO,CAAC,IAAI,CAAC,CAoCf;AAOD,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC,CAkBzD;AAOD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,QA8YrD;AAaD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,QAuCnD"}