@cogenta/cli 0.3.0 → 0.6.0

package/dist/commands/tools.js

@@ -0,0 +1,330 @@
+import { randomUUID } from 'node:crypto';
+import { variantKeyFor } from '@cogenta/api';
+import { createEmailAdapter } from '@cogenta/channels';
+import { CogentaError, } from '@cogenta/core';
+import { checkLinks, createContentStore, reindexAll, } from '@cogenta/schema';
+import { reindexAllVectors } from './assistant.js';
+/**
+ * The seven maintenance tools (fiche 24 task 3): what they do, and the run
+ * bookkeeping the admin polls while they run.
+ *
+ * Every tool goes through the queue, never inline in the request that
+ * triggers it — "un traitement long ne doit pas être une requête HTTP qui
+ * expire" is a literal acceptance criterion of the lot, and the queue
+ * already exists with a degraded (database) tier that needs no Redis (R1).
+ * A run's bookkeeping is a bounded, in-process ring — durability across a
+ * restart is not the point, seeing progress while the process is up is.
+ */
+export const TOOL_DEFINITIONS = [
+    {
+        id: 'purge-cache',
+        labelKey: 'tools.purgeCache',
+        reversible: true,
+        estimatedDurationKey: 'tools.durationSeconds',
+    },
+    {
+        id: 'reindex-search',
+        labelKey: 'tools.reindexSearch',
+        reversible: true,
+        estimatedDurationKey: 'tools.durationMinutes',
+    },
+    {
+        id: 'reindex-vectors',
+        labelKey: 'tools.reindexVectors',
+        reversible: true,
+        estimatedDurationKey: 'tools.durationMinutes',
+    },
+    {
+        id: 'regenerate-images',
+        labelKey: 'tools.regenerateImages',
+        reversible: true,
+        estimatedDurationKey: 'tools.durationMinutes',
+    },
+    {
+        // Internal checking never leaves the site; external does, and the
+        // per-run `{ external: true }` request flag (default off) is what keeps
+        // that opt-in (R1) — this definition itself carries no such switch.
+        id: 'check-links',
+        labelKey: 'tools.checkLinks',
+        reversible: true,
+        estimatedDurationKey: 'tools.durationMinutes',
+    },
+    {
+        id: 'test-email',
+        labelKey: 'tools.testEmail',
+        reversible: true,
+        estimatedDurationKey: 'tools.durationSeconds',
+    },
+    {
+        id: 'purge-trash',
+        labelKey: 'tools.purgeTrash',
+        reversible: false,
+        estimatedDurationKey: 'tools.durationSeconds',
+    },
+];
+function toLike(run) {
+    return {
+        id: run.id,
+        tool: run.tool,
+        status: run.status,
+        startedAt: run.startedAt,
+        finishedAt: run.finishedAt,
+        log: [...run.log],
+        error: run.error,
+    };
+}
+/**
+ * Wires the seven tool bodies to the queue and keeps an in-process run log.
+ *
+ * One queue job name per tool, registered once; `run()` enqueues a job
+ * carrying only the run id, and the handler looks the run up to append to
+ * its log as it goes. Nothing here assumes the queue's optimal (Redis) tier
+ * — the database tier's own test (fiche 24 § 6, "driver dégradé testé")
+ * exercises this exact path.
+ */
+export function createToolRunner(options) {
+    const capacity = options.capacity ?? 50;
+    const now = options.now ?? (() => new Date());
+    const newId = options.newId ?? randomUUID;
+    const runs = new Map();
+    const order = [];
+    for (const definition of TOOL_DEFINITIONS) {
+        const body = options.bodies[definition.id];
+        if (body === undefined)
+            continue;
+        options.queue.process(definition.id, async (job) => {
+            const run = runs.get(job.payload.runId);
+            if (run === undefined)
+                return;
+            run.status = 'running';
+            try {
+                await body({
+                    log: (line) => run.log.push(line),
+                    external: job.payload.external === true,
+                    email: job.payload.email,
+                });
+                run.status = 'completed';
+            }
+            catch (error) {
+                run.status = 'failed';
+                run.error = error instanceof Error ? error.message : String(error);
+                options.logger.error('maintenance tool run failed', {
+                    tool: definition.id,
+                    runId: run.id,
+                    error: run.error,
+                });
+            }
+            finally {
+                run.finishedAt = now().toISOString();
+            }
+        });
+    }
+    return {
+        run: async (toolId, runOptions) => {
+            const id = newId();
+            const run = {
+                id,
+                tool: toolId,
+                status: 'queued',
+                startedAt: now().toISOString(),
+                finishedAt: undefined,
+                log: [],
+                error: undefined,
+            };
+            runs.set(id, run);
+            order.push(id);
+            while (order.length > capacity) {
+                const evicted = order.shift();
+                if (evicted !== undefined)
+                    runs.delete(evicted);
+            }
+            await options.queue.enqueue({
+                name: toolId,
+                payload: {
+                    runId: id,
+                    ...(runOptions.external === undefined ? {} : { external: runOptions.external }),
+                    ...(runOptions.email === undefined ? {} : { email: runOptions.email }),
+                },
+            });
+            // Nudge the degraded (database) queue right away instead of leaving this
+            // run to wait for the next scheduled drain — on `cogenta serve` that is
+            // `SCHEDULED_PUBLISH_TICK_MS` (60s) away, which reads as "stuck forever"
+            // for a tool the admin screen itself labels as taking mere seconds. This
+            // is fire-and-forget on purpose: the response to the caller must still
+            // return the run id immediately, never wait on the tool body itself
+            // (that would turn a long tool into the very "requête HTTP qui expire"
+            // this whole queue exists to avoid). The periodic tick remains the real
+            // drain — for jobs left behind by a crash, and for every backend that
+            // isn't the single in-process caller of `run()`.
+            options.queue.tick().catch((error) => {
+                options.logger.error('immediate tool queue tick failed', {
+                    tool: toolId,
+                    runId: id,
+                    error: error instanceof Error ? error.message : String(error),
+                });
+            });
+            return id;
+        },
+        getRun: (id) => {
+            const run = runs.get(id);
+            return run === undefined ? null : toLike(run);
+        },
+        listRuns: () => [...order].reverse().map((id) => toLike(runs.get(id))),
+    };
+}
+/** A fresh, undecorated store per collection — reindexing and link-checking only ever read, so none of the write-path wrapping (`withSearchIndexing`, the read-only guard, …) matters here. */
+function storeForFactory(db, collections) {
+    const cache = new Map();
+    return (collection) => {
+        const existing = cache.get(collection.name);
+        if (existing !== undefined)
+            return existing;
+        const created = createContentStore({ db, collection, siblings: collections });
+        cache.set(collection.name, created);
+        return created;
+    };
+}
+/**
+ * The seven real tool implementations (fiche 24 task 3), each honest about
+ * what it needs and what it does when that is absent — no tool ever throws
+ * because a driver is missing; it logs why and finishes.
+ */
+export function buildToolBodies(options) {
+    const storeFor = storeForFactory(options.db, options.collections);
+    return {
+        'purge-cache': async (ctx) => {
+            if (options.cache === null) {
+                ctx.log('No cache driver is configured on this site — nothing to purge.');
+                return;
+            }
+            await options.cache.clear();
+            ctx.log('Cache cleared.');
+        },
+        'reindex-search': async (ctx) => {
+            let total = 0;
+            for (const collection of options.collections) {
+                const store = storeFor(collection);
+                const count = await reindexAll(store, { collection, index: options.searchIndex });
+                total += count;
+                ctx.log(`${collection.name}: ${count} entr(y/ies) reindexed.`);
+            }
+            ctx.log(`Done. ${total} entr(y/ies) reindexed across ${options.collections.length} collection(s).`);
+        },
+        'reindex-vectors': async (ctx) => {
+            if (options.vectors === null) {
+                ctx.log('No embeddings provider is configured on this site — nothing to reindex.');
+                return;
+            }
+            let total = 0;
+            for (const collection of options.collections) {
+                const store = storeFor(collection);
+                const count = await reindexAllVectors(store, { ...options.vectors, collection });
+                total += count;
+                ctx.log(`${collection.name}: ${count} entr(y/ies) reindexed.`);
+            }
+            ctx.log(`Done. ${total} entr(y/ies) reindexed.`);
+        },
+        'regenerate-images': async (ctx) => {
+            if (options.images === null) {
+                ctx.log('No image driver is available on this host — nothing to regenerate.');
+                return;
+            }
+            const images = options.images;
+            let processed = 0;
+            let cursor;
+            for (;;) {
+                const page = await options.mediaStore.list({
+                    kind: 'image',
+                    limit: 50,
+                    ...(cursor ? { cursor } : {}),
+                });
+                for (const asset of page.items) {
+                    if (asset.width === null || asset.height === null)
+                        continue;
+                    try {
+                        const stream = await options.storage.get(asset.storageKey);
+                        const chunks = [];
+                        for await (const chunk of stream)
+                            chunks.push(chunk);
+                        const bytes = Buffer.concat(chunks);
+                        const variants = await images.variants(bytes, {
+                            width: asset.width,
+                            height: asset.height,
+                        });
+                        for (const variant of variants) {
+                            await options.storage.put(variantKeyFor(asset.id, variant.name), Buffer.from(variant.bytes), {
+                                contentType: variant.contentType,
+                            });
+                        }
+                        processed += 1;
+                        ctx.log(`${asset.filename}: ${variants.length} variant(s) regenerated.`);
+                    }
+                    catch (error) {
+                        ctx.log(`${asset.filename}: failed — ${error instanceof Error ? error.message : String(error)}`);
+                    }
+                }
+                if (!page.hasMore || page.nextCursor === null)
+                    break;
+                cursor = page.nextCursor;
+            }
+            ctx.log(`Done. ${processed} image(s) processed.`);
+        },
+        'check-links': async (ctx) => {
+            const report = await checkLinks({
+                collections: options.collections,
+                storeFor,
+                locales: options.locales,
+                defaultLocale: options.defaultLocale,
+                ...(ctx.external ? { checkExternal: true } : {}),
+            });
+            ctx.log(`Checked ${report.checkedLinks} link(s) across ${report.checkedEntries} published entries.`);
+            if (report.skippedExternal > 0) {
+                ctx.log(`${report.skippedExternal} external link(s) were not followed (external checking is off).`);
+            }
+            if (report.broken.length === 0) {
+                ctx.log('Nothing broken.');
+                return;
+            }
+            for (const broken of report.broken) {
+                const target = broken.link.kind === 'url'
+                    ? broken.link.href
+                    : `${broken.link.collection}/${broken.link.id}`;
+                ctx.log(`${broken.collection}/${broken.entryId} [${broken.locale}] ${broken.at} → ${target}: ${broken.reason}`);
+            }
+        },
+        'test-email': async (ctx) => {
+            if (ctx.email === undefined) {
+                ctx.log('No destination address was given.');
+                throw new CogentaError({
+                    code: 'MAINT_TOOL_INPUT_INVALID',
+                    message: 'The "test email" tool needs a destination address.',
+                    hint: 'Send { "email": "you@example.com" } in the run request body.',
+                });
+            }
+            const adapter = createEmailAdapter({ transport: options.emailTransport });
+            try {
+                await adapter.send({ id: ctx.email }, {
+                    level: 'notification',
+                    text: `${options.siteName} — this is a test message from the admin's "Tools" screen. If it reached you, outgoing mail works.`,
+                });
+                ctx.log(`Sent to ${ctx.email}.`);
+            }
+            catch (error) {
+                ctx.log(`Transport error: ${error instanceof Error ? error.message : String(error)}`);
+                throw error;
+            }
+        },
+        'purge-trash': async (ctx) => {
+            let total = 0;
+            for (const collection of options.collections) {
+                const store = storeFor(collection);
+                const report = await store.purgeExpired();
+                if (report.purged > 0)
+                    ctx.log(`${collection.name}: ${report.purged} entr(y/ies) purged.`);
+                total += report.purged;
+            }
+            ctx.log(`Done. ${total} entr(y/ies) purged in total.`);
+        },
+    };
+}
+//# sourceMappingURL=tools.js.map

package/dist/commands/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/commands/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAOxC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,kBAAkB,EAAuB,MAAM,mBAAmB,CAAA;AAC3E,OAAO,EAEL,YAAY,GAMb,MAAM,eAAe,CAAA;AACtB,OAAO,EAGL,UAAU,EACV,kBAAkB,EAClB,UAAU,GAEX,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,iBAAiB,EAA8B,MAAM,gBAAgB,CAAA;AAE9E;;;;;;;;;;GAUG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAkC;IAC7D;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,kBAAkB;QAC5B,UAAU,EAAE,IAAI;QAChB,oBAAoB,EAAE,uBAAuB;KAC9C;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EAAE,qBAAqB;QAC/B,UAAU,EAAE,IAAI;QAChB,oBAAoB,EAAE,uBAAuB;KAC9C;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,QAAQ,EAAE,sBAAsB;QAChC,UAAU,EAAE,IAAI;QAChB,oBAAoB,EAAE,uBAAuB;KAC9C;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,wBAAwB;QAClC,UAAU,EAAE,IAAI;QAChB,oBAAoB,EAAE,uBAAuB;KAC9C;IACD;QACE,kEAAkE;QAClE,wEAAwE;QACxE,oEAAoE;QACpE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,kBAAkB;QAC5B,UAAU,EAAE,IAAI;QAChB,oBAAoB,EAAE,uBAAuB;KAC9C;IACD;QACE,EAAE,EAAE,YAAY;QAChB,QAAQ,EAAE,iBAAiB;QAC3B,UAAU,EAAE,IAAI;QAChB,oBAAoB,EAAE,uBAAuB;KAC9C;IACD;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,kBAAkB;QAC5B,UAAU,EAAE,KAAK;QACjB,oBAAoB,EAAE,uBAAuB;KAC9C;CACO,CAAA;AAuCV,SAAS,MAAM,CAAC,GAAe;IAC7B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC;QACjB,KAAK,EAAE,GAAG,CAAC,KAAK;KACjB,CAAA;AACH,CAAC;AAQD;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA0B;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAA;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAS,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAA;IAEzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAA;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,KAAK,MAAM,UAAU,IAAI,gBAAgB,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAC1C,IAAI,IAAI,KAAK,SAAS;YAAE,SAAQ;QAChC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAa,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACvC,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAM;YAC7B,GAAG,CAAC,MAAM,GAAG,SAAS,CAAA;YACtB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC;oBACT,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;oBACjC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI;oBACvC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK;iBACzB,CAAC,CAAA;gBACF,GAAG,CAAC,MAAM,GAAG,WAAW,CAAA;YAC1B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAA;gBACrB,GAAG,CAAC,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBAClE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;oBAClD,IAAI,EAAE,UAAU,CAAC,EAAE;oBACnB,KAAK,EAAE,GAAG,CAAC,EAAE;oBACb,KAAK,EAAE,GAAG,CAAC,KAAK;iBACjB,CAAC,CAAA;YACJ,CAAC;oBAAS,CAAC;gBACT,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAA;YACtC,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE;YAChC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAA;YAClB,MAAM,GAAG,GAAe;gBACtB,EAAE;gBACF,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;gBAC9B,UAAU,EAAE,SAAS;gBACrB,GAAG,EAAE,EAAE;gBACP,KAAK,EAAE,SAAS;aACjB,CAAA;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;YACjB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACd,OAAO,KAAK,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;gBAC7B,IAAI,OAAO,KAAK,SAAS;oBAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACjD,CAAC;YACD,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;gBAC1B,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE;oBACP,KAAK,EAAE,EAAE;oBACT,GAAG,CAAC,UAAU,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;oBAC/E,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;iBACvE;aACF,CAAC,CAAA;YACF,yEAAyE;YACzE,wEAAwE;YACxE,yEAAyE;YACzE,yEAAyE;YACzE,uEAAuE;YACvE,oEAAoE;YACpE,uEAAuE;YACvE,wEAAwE;YACxE,sEAAsE;YACtE,iDAAiD;YACjD,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE;oBACvD,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,EAAE;oBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;YACF,OAAO,EAAE,CAAA;QACX,CAAC;QACD,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE;YACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACxB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC/C,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAe,CAAC,CAAC;KACrF,CAAA;AACH,CAAC;AAiBD,+LAA+L;AAC/L,SAAS,eAAe,CACtB,EAAkB,EAClB,WAA4C;IAE5C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAA;IAC7C,OAAO,CAAC,UAAU,EAAE,EAAE;QACpB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QAC3C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAA;QAC3C,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAA;QAC7E,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACnC,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,OAA+B;IAC7D,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;IAEjE,OAAO;QACL,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC3B,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC3B,GAAG,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAA;gBACzE,OAAM;YACR,CAAC;YACD,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;YAC3B,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;QAC3B,CAAC;QAED,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC9B,IAAI,KAAK,GAAG,CAAC,CAAA;YACb,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAA;gBAClC,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;gBACjF,KAAK,IAAI,KAAK,CAAA;gBACd,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,KAAK,KAAK,yBAAyB,CAAC,CAAA;YAChE,CAAC;YACD,GAAG,CAAC,GAAG,CACL,SAAS,KAAK,iCAAiC,OAAO,CAAC,WAAW,CAAC,MAAM,iBAAiB,CAC3F,CAAA;QACH,CAAC;QAED,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC/B,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC7B,GAAG,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAA;gBAClF,OAAM;YACR,CAAC;YACD,IAAI,KAAK,GAAG,CAAC,CAAA;YACb,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAA;gBAClC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAA;gBAChF,KAAK,IAAI,KAAK,CAAA;gBACd,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,KAAK,KAAK,yBAAyB,CAAC,CAAA;YAChE,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,yBAAyB,CAAC,CAAA;QAClD,CAAC;QAED,mBAAmB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACjC,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC5B,GAAG,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAA;gBAC7E,OAAM;YACR,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;YAC7B,IAAI,SAAS,GAAG,CAAC,CAAA;YACjB,IAAI,MAA0B,CAAA;YAC9B,SAAS,CAAC;gBACR,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;oBACzC,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE;oBACT,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9B,CAAC,CAAA;gBACF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC/B,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;wBAAE,SAAQ;oBAC3D,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;wBAC1D,MAAM,MAAM,GAAa,EAAE,CAAA;wBAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM;4BAAE,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAA;wBAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;wBACnC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE;4BAC5C,KAAK,EAAE,KAAK,CAAC,KAAK;4BAClB,MAAM,EAAE,KAAK,CAAC,MAAM;yBACrB,CAAC,CAAA;wBACF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;4BAC/B,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CACvB,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EACrC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAC1B;gCACE,WAAW,EAAE,OAAO,CAAC,WAAW;6BACjC,CACF,CAAA;wBACH,CAAC;wBACD,SAAS,IAAI,CAAC,CAAA;wBACd,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,MAAM,0BAA0B,CAAC,CAAA;oBAC1E,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,GAAG,CAAC,GAAG,CACL,GAAG,KAAK,CAAC,QAAQ,cAAc,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACxF,CAAA;oBACH,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI;oBAAE,MAAK;gBACpD,MAAM,GAAG,IAAI,CAAC,UAAU,CAAA;YAC1B,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,SAAS,SAAS,sBAAsB,CAAC,CAAA;QACnD,CAAC;QAED,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC3B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;gBAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,QAAQ;gBACR,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjD,CAAC,CAAA;YACF,GAAG,CAAC,GAAG,CACL,WAAW,MAAM,CAAC,YAAY,mBAAmB,MAAM,CAAC,cAAc,qBAAqB,CAC5F,CAAA;YACD,IAAI,MAAM,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;gBAC/B,GAAG,CAAC,GAAG,CACL,GAAG,MAAM,CAAC,eAAe,iEAAiE,CAC3F,CAAA;YACH,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;gBAC1B,OAAM;YACR,CAAC;YACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnC,MAAM,MAAM,GACV,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK;oBACxB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI;oBAClB,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAA;gBACnD,GAAG,CAAC,GAAG,CACL,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,MAAM,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CACvG,CAAA;YACH,CAAC;QACH,CAAC;QAED,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC1B,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC5B,GAAG,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAA;gBAC5C,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,0BAA0B;oBAChC,OAAO,EAAE,oDAAoD;oBAC7D,IAAI,EAAE,8DAA8D;iBACrE,CAAC,CAAA;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;YACzE,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,IAAI,CAChB,EAAE,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,EACjB;oBACE,KAAK,EAAE,cAAc;oBACrB,IAAI,EAAE,GAAG,OAAO,CAAC,QAAQ,oGAAoG;iBAC9H,CACF,CAAA;gBACD,GAAG,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,KAAK,GAAG,CAAC,CAAA;YAClC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,GAAG,CAAC,oBAAoB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBACrF,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;QAED,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC3B,IAAI,KAAK,GAAG,CAAC,CAAA;YACb,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAA;gBAClC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE,CAAA;gBACzC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;oBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,sBAAsB,CAAC,CAAA;gBAC1F,KAAK,IAAI,MAAM,CAAC,MAAM,CAAA;YACxB,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,+BAA+B,CAAC,CAAA;QACxD,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/commands/update.d.ts

@@ -0,0 +1,25 @@
+import { type Logger } from '@cogenta/core';
+import type { Output, Writer } from '../output.js';
+import { type RunPackageInstall } from '../update/index.js';
+/**
+ * `cogenta update` (L22 task 9) — the CLI half of the same logic the admin
+ * screen's "Update now" button calls (`@cogenta/api`'s `createUpdateRouter`,
+ * wired in `serve.ts`). Both go through exactly `checkForUpdates`/
+ * `applyUpdate` from `../update/index.js`, never a second implementation.
+ */
+export type UpdateSubcommand = 'check' | 'apply' | 'history';
+export interface UpdateOptions {
+    readonly subcommand: string | undefined;
+    readonly cwd?: string;
+    readonly env?: Record<string, string | undefined>;
+    readonly logger?: Logger;
+    readonly out: Output;
+    readonly stderr: Writer;
+    readonly confirmBreaking?: boolean;
+    readonly dir?: string;
+    readonly fetchImpl?: typeof fetch;
+    /** Test seam only — real `cogenta update apply` always uses the real `npm install`. */
+    readonly runInstall?: RunPackageInstall;
+}
+export declare function runUpdate(options: UpdateOptions): Promise<number>;
+//# sourceMappingURL=update.d.ts.map

package/dist/commands/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../src/commands/update.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgD,KAAK,MAAM,EAAE,MAAM,eAAe,CAAA;AACzF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,EAML,KAAK,iBAAiB,EAMvB,MAAM,oBAAoB,CAAA;AAI3B;;;;;GAKG;AAEH,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAA;AAE5D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IACvC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACjC,uFAAuF;IACvF,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAA;CACxC;AAmED,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CA8IvE"}

package/dist/commands/update.js

@@ -0,0 +1,193 @@
+import process from 'node:process';
+import { classifyAuditActor, createAuditLog, ensureAuthTables } from '@cogenta/auth';
+import { createLogger, getCoreVersion, isCogentaError } from '@cogenta/core';
+import { applyUpdate, checkForUpdates, listRestorePoints, listUpdateHistory, recordUpdateHistory, UPDATE_APPLIED_ACTION, UPDATE_APPLY_FAILED_ACTION, UPDATE_CHECKED_ACTION, } from '../update/index.js';
+import { getCliVersion } from '../version.js';
+import { defaultBackupDir, openSite } from './backup.js';
+const UPDATE_USAGE = `Usage
+  cogenta update check     Compare the installed version against npm
+  cogenta update apply     Apply an available update (creates a restore point first)
+  cogenta update history   Show past checks, applies and the restore points they took
+
+Options
+  --confirm-breaking       apply: proceed even though a contract-risk warning was found
+  --dir <path>             Where restore points are written/read (default .cogenta/backups)
+`;
+function installedPackages() {
+    return [
+        { name: '@cogenta/core', installed: getCoreVersion() },
+        { name: '@cogenta/cli', installed: getCliVersion() },
+    ];
+}
+function printReport(report, out) {
+    out.heading('Update check');
+    out.line(`Checked at ${report.checkedAt}`);
+    for (const pkg of report.packages) {
+        if (pkg.checkError !== undefined) {
+            out.line(`${pkg.name}: installed ${pkg.installed} — could not check npm: ${pkg.checkError}`);
+            continue;
+        }
+        if (!pkg.updateAvailable) {
+            out.line(`${pkg.name}: ${pkg.installed} — up to date`);
+            continue;
+        }
+        out.line(`${pkg.name}: ${pkg.installed} -> ${pkg.latest} (${pkg.bump})`);
+        if (pkg.contractRisk === null)
+            continue;
+        if (!pkg.contractRisk.available) {
+            out.line(`  contract risk: could not be determined — ${pkg.contractRisk.reason ?? 'unknown reason'}`);
+            continue;
+        }
+        if (pkg.contractRisk.warnings.length === 0) {
+            out.line('  contract risk: none of the scanned changelog entries mention a frozen contract');
+        }
+        else {
+            out.line('  contract risk: possible — a scan of the changelog found a mention of a frozen contract (review before applying):');
+            for (const warning of pkg.contractRisk.warnings) {
+                out.line(`    ${warning.version}: ${warning.excerpt}`);
+            }
+        }
+    }
+    if (!report.updateAvailable)
+        out.line('Everything is up to date.');
+}
+async function withAuditLog(options, logger, run) {
+    const { db, dispose } = await openSite(options, logger);
+    try {
+        await ensureAuthTables(db);
+        return await run(createAuditLog(db));
+    }
+    finally {
+        await dispose();
+    }
+}
+export async function runUpdate(options) {
+    const { out, stderr } = options;
+    const logger = options.logger ?? createLogger({ level: 'silent' });
+    const cwd = options.cwd ?? process.cwd();
+    const dir = options.dir ?? defaultBackupDir(cwd);
+    if (options.subcommand === undefined) {
+        stderr(`cogenta update needs a subcommand.\n\n${UPDATE_USAGE}`);
+        return 2;
+    }
+    if (options.subcommand !== 'check' &&
+        options.subcommand !== 'apply' &&
+        options.subcommand !== 'history') {
+        stderr(`Unknown subcommand "${options.subcommand}".\n\n${UPDATE_USAGE}`);
+        return 2;
+    }
+    try {
+        if (options.subcommand === 'history') {
+            const [history, restorePoints] = await withAuditLog(options, logger, async (auditLog) => [
+                await listUpdateHistory(auditLog),
+                await listRestorePoints(dir),
+            ]);
+            out.heading('Update history');
+            if (history.length === 0)
+                out.line('No update has been checked or applied yet.');
+            for (const entry of history) {
+                const actor = entry.actorId ?? `(${classifyAuditActor(entry)})`;
+                out.line(`${entry.at}  ${entry.action}  by ${actor}`);
+            }
+            out.heading('Restore points');
+            if (restorePoints.length === 0)
+                out.line('No restore point exists yet.');
+            for (const point of restorePoints) {
+                out.line(`${point.createdAt}  ${point.path}  ${point.tables} tables, ${point.rows} rows${point.triggeredByUpdate ? '  (taken automatically before an update)' : ''}`);
+            }
+            return 0;
+        }
+        if (options.subcommand === 'check') {
+            const report = await checkForUpdates({
+                packages: installedPackages(),
+                ...(options.fetchImpl === undefined ? {} : { fetchImpl: options.fetchImpl }),
+            });
+            printReport(report, out);
+            await withAuditLog(options, logger, (auditLog) => recordUpdateHistory(auditLog, {
+                actorId: null,
+                actorRoles: ['admin'],
+                action: UPDATE_CHECKED_ACTION,
+                diff: {
+                    packages: report.packages.map((pkg) => ({
+                        name: pkg.name,
+                        installed: pkg.installed,
+                        latest: pkg.latest,
+                        bump: pkg.bump,
+                    })),
+                },
+            })).catch((error) => {
+                logger.error('update history record failed', { error: String(error) });
+            });
+            return 0;
+        }
+        // apply
+        let result;
+        try {
+            result = await applyUpdate({
+                cwd,
+                ...(options.env === undefined ? {} : { env: options.env }),
+                logger,
+                packages: installedPackages(),
+                confirmBreakingChange: options.confirmBreaking === true,
+                backupDir: dir,
+                ...(options.fetchImpl === undefined ? {} : { fetchImpl: options.fetchImpl }),
+                ...(options.runInstall === undefined ? {} : { runInstall: options.runInstall }),
+            });
+        }
+        catch (error) {
+            await withAuditLog(options, logger, (auditLog) => recordUpdateHistory(auditLog, {
+                actorId: null,
+                actorRoles: ['admin'],
+                action: UPDATE_APPLY_FAILED_ACTION,
+                diff: { error: isCogentaError(error) ? error.message : String(error) },
+            })).catch(() => undefined);
+            throw error;
+        }
+        if (result.kind === 'up-to-date') {
+            out.heading('Nothing to update');
+            out.line('Every checked package is already at the latest version.');
+            return 0;
+        }
+        if (result.kind === 'confirmation-required') {
+            out.heading('Update refused — contract risk found');
+            out.line('The following packages have an update available whose changelog mentions a frozen contract. Review before proceeding:');
+            for (const pkg of result.risky) {
+                out.line(`${pkg.name}: ${pkg.installed} -> ${pkg.latest}`);
+                for (const warning of pkg.contractRisk?.warnings ?? []) {
+                    out.line(`  ${warning.version}: ${warning.excerpt}`);
+                }
+            }
+            out.line('Re-run with --confirm-breaking once you have reviewed this, to proceed anyway.');
+            return 1;
+        }
+        out.heading('Update applied');
+        out.line(`Restore point: ${result.restorePoint.path}`);
+        for (const pkg of result.installed)
+            out.line(`${pkg.name} -> ${pkg.version}`);
+        out.line('Restart cogenta for the new version to take effect.');
+        await withAuditLog(options, logger, (auditLog) => recordUpdateHistory(auditLog, {
+            actorId: null,
+            actorRoles: ['admin'],
+            action: UPDATE_APPLIED_ACTION,
+            diff: {
+                installed: result.installed,
+                restorePoint: result.restorePoint.path,
+            },
+        })).catch((error) => {
+            logger.error('update history record failed', { error: String(error) });
+        });
+        return 0;
+    }
+    catch (error) {
+        if (isCogentaError(error)) {
+            stderr(`${error.code}: ${error.message}\n`);
+            if (error.hint !== undefined)
+                stderr(`${error.hint}\n`);
+        }
+        else {
+            stderr(`${error instanceof Error ? error.stack : String(error)}\n`);
+        }
+        return 1;
+    }
+}
+//# sourceMappingURL=update.js.map

package/dist/commands/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../src/commands/update.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AACpF,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAe,MAAM,eAAe,CAAA;AAEzF,OAAO,EAEL,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EAEjB,mBAAmB,EACnB,qBAAqB,EACrB,0BAA0B,EAC1B,qBAAqB,GAEtB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAyBxD,MAAM,YAAY,GAAG;;;;;;;;CAQpB,CAAA;AAED,SAAS,iBAAiB;IACxB,OAAO;QACL,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE;QACtD,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE;KACrD,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAAyB,EAAE,GAAW;IACzD,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;IAC3B,GAAG,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,SAAS,EAAE,CAAC,CAAA;IAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClC,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACjC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,eAAe,GAAG,CAAC,SAAS,2BAA2B,GAAG,CAAC,UAAU,EAAE,CAAC,CAAA;YAC5F,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,SAAS,eAAe,CAAC,CAAA;YACtD,SAAQ;QACV,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,SAAS,OAAO,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAA;QACxE,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI;YAAE,SAAQ;QACvC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;YAChC,GAAG,CAAC,IAAI,CACN,8CAA8C,GAAG,CAAC,YAAY,CAAC,MAAM,IAAI,gBAAgB,EAAE,CAC5F,CAAA;YACD,SAAQ;QACV,CAAC;QACD,IAAI,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAA;QAC9F,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CACN,oHAAoH,CACrH,CAAA;YACD,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAChD,GAAG,CAAC,IAAI,CAAC,OAAO,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;YACxD,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,eAAe;QAAE,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;AACpE,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAqF,EACrF,MAAc,EACd,GAAgE;IAEhE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACvD,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAA;QAC1B,OAAO,MAAM,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAA;IACtC,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAA;IACjB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IAClE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAEhD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,CAAC,yCAAyC,YAAY,EAAE,CAAC,CAAA;QAC/D,OAAO,CAAC,CAAA;IACV,CAAC;IACD,IACE,OAAO,CAAC,UAAU,KAAK,OAAO;QAC9B,OAAO,CAAC,UAAU,KAAK,OAAO;QAC9B,OAAO,CAAC,UAAU,KAAK,SAAS,EAChC,CAAC;QACD,MAAM,CAAC,uBAAuB,OAAO,CAAC,UAAU,SAAS,YAAY,EAAE,CAAC,CAAA;QACxE,OAAO,CAAC,CAAA;IACV,CAAC;IAED,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC;gBACvF,MAAM,iBAAiB,CAAC,QAAQ,CAAC;gBACjC,MAAM,iBAAiB,CAAC,GAAG,CAAC;aAC7B,CAAC,CAAA;YACF,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;YAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAA;YAChF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAA;gBAC/D,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,MAAM,QAAQ,KAAK,EAAE,CAAC,CAAA;YACvD,CAAC;YACD,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;YAC7B,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;YACxE,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;gBAClC,GAAG,CAAC,IAAI,CACN,GAAG,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,YAAY,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5J,CAAA;YACH,CAAC;YACD,OAAO,CAAC,CAAA;QACV,CAAC;QAED,IAAI,OAAO,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;gBACnC,QAAQ,EAAE,iBAAiB,EAAE;gBAC7B,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;aAC7E,CAAC,CAAA;YACF,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;YACxB,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAC/C,mBAAmB,CAAC,QAAQ,EAAE;gBAC5B,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,CAAC,OAAO,CAAC;gBACrB,MAAM,EAAE,qBAAqB;gBAC7B,IAAI,EAAE;oBACJ,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;wBACtC,IAAI,EAAE,GAAG,CAAC,IAAI;wBACd,SAAS,EAAE,GAAG,CAAC,SAAS;wBACxB,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;qBACf,CAAC,CAAC;iBACJ;aACF,CAAC,CACH,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACzB,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YACxE,CAAC,CAAC,CAAA;YACF,OAAO,CAAC,CAAA;QACV,CAAC;QAED,QAAQ;QACR,IAAI,MAAyB,CAAA;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,WAAW,CAAC;gBACzB,GAAG;gBACH,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC1D,MAAM;gBACN,QAAQ,EAAE,iBAAiB,EAAE;gBAC7B,qBAAqB,EAAE,OAAO,CAAC,eAAe,KAAK,IAAI;gBACvD,SAAS,EAAE,GAAG;gBACd,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC5E,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;aAChF,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAC/C,mBAAmB,CAAC,QAAQ,EAAE;gBAC5B,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,CAAC,OAAO,CAAC;gBACrB,MAAM,EAAE,0BAA0B;gBAClC,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aACvE,CAAC,CACH,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACxB,MAAM,KAAK,CAAA;QACb,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACjC,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAA;YAChC,GAAG,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAA;YACnE,OAAO,CAAC,CAAA;QACV,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;YAC5C,GAAG,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAA;YACnD,GAAG,CAAC,IAAI,CACN,uHAAuH,CACxH,CAAA;YACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC/B,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,SAAS,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;gBAC1D,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,YAAY,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;oBACvD,GAAG,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;gBACtD,CAAC;YACH,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAA;YAC1F,OAAO,CAAC,CAAA;QACV,CAAC;QAED,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;QAC7B,GAAG,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAA;QACtD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;QAC7E,GAAG,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAA;QAE/D,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAC/C,mBAAmB,CAAC,QAAQ,EAAE;YAC5B,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,qBAAqB;YAC7B,IAAI,EAAE;gBACJ,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI;aACvC;SACF,CAAC,CACH,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACzB,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACxE,CAAC,CAAC,CAAA;QAEF,OAAO,CAAC,CAAA;IACV,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,IAAI,CAAC,CAAA;YAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,CAAA;QACzD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACrE,CAAC;QACD,OAAO,CAAC,CAAA;IACV,CAAC;AACH,CAAC"}

package/dist/commands/users.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../src/commands/users.ts"],"names":[],"mappings":"AAWA,OAAO,EAKL,KAAK,MAAM,EAEZ,MAAM,eAAe,CAAA;AACtB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAElD,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,gBAAgB,CAAA;AAEzD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IACvC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB,sEAAsE;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,kFAAkF;IAClF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,yFAAyF;IACzF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AA6MD;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAwErE"}
+{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../src/commands/users.ts"],"names":[],"mappings":"AAUA,OAAO,EAKL,KAAK,MAAM,EAEZ,MAAM,eAAe,CAAA;AACtB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAGlD,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,gBAAgB,CAAA;AAEzD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IACvC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB,sEAAsE;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,kFAAkF;IAClF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,yFAAyF;IACzF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AAyKD;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAwErE"}

package/dist/commands/users.js

@@ -2,8 +2,8 @@ import { randomBytes } from 'node:crypto';
 import { resolve } from 'node:path';
 import process from 'node:process';
 import { createCredentialStore, createPasswordResetStore, createSessionStore, createUserStore, ensureAuthTables, } from '@cogenta/auth';
-import { createEmailAdapter, createFileEmailTransport } from '@cogenta/channels';
 import { createDatabaseRegistry, createLogger, isCogentaError, loadConfig, } from '@cogenta/core';
+import { sendResetMail as sendResetMailShared } from '../reset-mail.js';
 const USAGE = `Usage
   cogenta users create --email <email> [--roles <role,role>] [--admin]
   cogenta users reset-password --email <email>
@@ -62,44 +62,14 @@ async function withDatabase(options, logger, use) {
     }
 }
 /**
- * Sends the reset mail through `@cogenta/channels`, not through a second
- * mailer of this command's own — the email adapter and its transport
- * interface already exist and are the project's one way out.
- *
- * The transport is the file one, because it is the only one that exists: a
- * real SMTP transport is a documented, deliberate gap in that package
- * (`providers/email/transport.ts`). So this writes a real message to a real
- * file and says exactly where, rather than pretending mail left the machine.
+ * The terminal's own wrapper around the shared `sendResetMail` (`../reset-mail.js`),
+ * which is also what `cogenta serve` calls for `POST /api/auth/forgot-password` —
+ * one function decides how the mail is worded, this only resolves *where* it
+ * is written from this command's own `--mail-dir`/`--cwd` options.
  */
 async function sendResetMail(options, site, address, token, expiresAt) {
     const directory = options.mailDir ?? resolve(options.cwd ?? process.cwd(), '.cogenta', 'mail');
-    const adapter = createEmailAdapter({
-        transport: createFileEmailTransport({ directory }),
-    });
-    // `report` of the three fixed message levels: `notification` is one line
-    // with nowhere to put a token, and `alert` would stamp "[WARNING]" on the
-    // subject and demand an incident's `expectedAction`/`adminUrl`. None of the
-    // three was designed for transactional mail; a fourth level would change a
-    // closed union every one of the five adapters renders, for one caller.
-    await adapter.send({ id: address }, {
-        level: 'report',
-        title: `${site.name} — password reset`,
-        keyFigures: [
-            { label: 'Valid until', value: expiresAt },
-            { label: 'Uses left', value: '1' },
-        ],
-        sections: [
-            {
-                heading: 'Your one-time token',
-                body: token,
-            },
-            {
-                heading: 'How to use it',
-                body: `Run: cogenta users reset-password --token ${token}\n\nThe token works once and expires at ${expiresAt}. If you did not ask for this, ignore this message — the token is useless without it, and asking again replaces it.`,
-            },
-        ],
-    });
-    return directory;
+    return sendResetMailShared({ mailDir: directory }, site, address, token, expiresAt);
 }
 async function issueReset(options, logger) {
     const { out, stderr } = options;