@flui-cloud/cli 0.0.1

package/lib/cli/src/commands/env/orphan-volumes.js

@@ -0,0 +1,153 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const chalk_1 = __importDefault(require("chalk"));
+const ora_1 = __importDefault(require("ora"));
+const nest_app_1 = require("../../lib/nest-app");
+const provider_factory_1 = require("../../../../src/modules/providers/core/factories/provider.factory");
+const cloud_provider_enum_1 = require("../../../../src/modules/providers/enums/cloud-provider.enum");
+const cli_cluster_repository_1 = require("../../lib/repositories/cli-cluster.repository");
+const prompts_1 = require("../../lib/prompts");
+const context_banner_1 = require("../../lib/context-banner");
+class EnvOrphanVolumes extends core_1.Command {
+    async run() {
+        const { flags } = await this.parse(EnvOrphanVolumes);
+        (0, context_banner_1.printContextBanner)();
+        const app = await (0, nest_app_1.getNestApp)();
+        try {
+            const providerFactory = app.get(provider_factory_1.ProviderFactory);
+            const clusterRepo = app.get(cli_cluster_repository_1.CliClusterRepository);
+            const clusters = await clusterRepo.find();
+            const knownVolumeIds = new Set();
+            for (const c of clusters) {
+                const id = c.sharedStorageVolumeId;
+                if (!id)
+                    continue;
+                knownVolumeIds.add(id);
+                const colon = id.indexOf(':');
+                if (colon > 0)
+                    knownVolumeIds.add(id.slice(colon + 1));
+                else
+                    knownVolumeIds.add(id);
+            }
+            const targets = flags.provider
+                ? [flags.provider]
+                : [cloud_provider_enum_1.CloudProvider.HETZNER, cloud_provider_enum_1.CloudProvider.SCALEWAY];
+            const spinner = (0, ora_1.default)('Scanning providers for Flui-managed volumes...').start();
+            const orphans = [];
+            for (const p of targets) {
+                try {
+                    const svc = providerFactory.getProvider(p);
+                    if (!svc.listFluiManagedVolumes)
+                        continue;
+                    const list = await svc.listFluiManagedVolumes();
+                    for (const v of list) {
+                        if (knownVolumeIds.has(v.volumeId))
+                            continue;
+                        const colon = v.volumeId.indexOf(':');
+                        const bareId = colon > 0 ? v.volumeId.slice(colon + 1) : v.volumeId;
+                        if (knownVolumeIds.has(bareId))
+                            continue;
+                        orphans.push({
+                            provider: p,
+                            volumeId: v.volumeId,
+                            name: v.name,
+                            sizeGb: v.sizeGb,
+                            region: v.region,
+                            attached: !!v.attachedServerId,
+                        });
+                    }
+                }
+                catch (err) {
+                    spinner.warn(`${p} scan failed: ${err.message}`);
+                }
+            }
+            spinner.succeed(`Scan complete — ${orphans.length} orphan volume(s) found`);
+            if (orphans.length === 0) {
+                console.log(chalk_1.default.green('\n✅ No orphan volumes detected.\n'));
+                return;
+            }
+            console.log('');
+            let totalGb = 0;
+            for (const v of orphans) {
+                totalGb += v.sizeGb;
+                console.log(`   ${chalk_1.default.bold(v.provider)}  ${chalk_1.default.cyan(v.volumeId)}  ` +
+                    `${v.sizeGb} GB  ${v.region ?? '?'}  ${chalk_1.default.dim(v.name)}` +
+                    (v.attached ? chalk_1.default.yellow('  [attached]') : ''));
+            }
+            console.log(chalk_1.default.dim(`\n   Total: ${orphans.length} volume(s), ${totalGb} GB\n`));
+            if (!flags.cleanup) {
+                console.log(chalk_1.default.dim('   Re-run with --cleanup to detach and delete these volumes.\n'));
+                return;
+            }
+            if (!flags.yes) {
+                const confirmed = await (0, prompts_1.confirmPrompt)(chalk_1.default.yellow(`Delete ${orphans.length} orphan volume(s)? This is irreversible`), false);
+                if (!confirmed) {
+                    console.log(chalk_1.default.green('\n✅ Cleanup cancelled\n'));
+                    return;
+                }
+            }
+            let deleted = 0;
+            let failed = 0;
+            for (const v of orphans) {
+                const cleanupSpinner = (0, ora_1.default)(`Cleaning up ${v.provider} ${v.volumeId} (${v.sizeGb} GB)...`).start();
+                try {
+                    const svc = providerFactory.getProvider(v.provider);
+                    if (svc.detachVolume) {
+                        try {
+                            await svc.detachVolume(v.volumeId);
+                        }
+                        catch (err) {
+                            cleanupSpinner.text = `Detach failed, attempting delete anyway... (${err.message})`;
+                        }
+                    }
+                    if (!svc.deleteVolume) {
+                        cleanupSpinner.fail(`Provider ${v.provider} has no deleteVolume primitive`);
+                        failed++;
+                        continue;
+                    }
+                    await svc.deleteVolume(v.volumeId);
+                    cleanupSpinner.succeed(`Deleted ${v.provider} ${v.volumeId}`);
+                    deleted++;
+                }
+                catch (err) {
+                    cleanupSpinner.fail(`Failed to delete ${v.volumeId}: ${err.message}`);
+                    failed++;
+                }
+            }
+            console.log('');
+            console.log(chalk_1.default.green(`✅ Deleted ${deleted} volume(s)`) +
+                (failed > 0 ? chalk_1.default.red(` · ${failed} failed`) : ''));
+            console.log('');
+        }
+        finally {
+            await (0, nest_app_1.closeNestApp)();
+        }
+    }
+}
+EnvOrphanVolumes.description = 'List or clean up Flui-managed block volumes left behind by past destroys';
+EnvOrphanVolumes.examples = [
+    '<%= config.bin %> <%= command.id %>',
+    '<%= config.bin %> <%= command.id %> --cleanup',
+    '<%= config.bin %> <%= command.id %> --provider scaleway --cleanup',
+];
+EnvOrphanVolumes.flags = {
+    provider: core_1.Flags.string({
+        char: 'p',
+        description: 'Scan only one provider (hetzner | scaleway)',
+        options: ['hetzner', 'scaleway'],
+    }),
+    cleanup: core_1.Flags.boolean({
+        description: 'Detach and delete the listed orphan volumes',
+        default: false,
+    }),
+    yes: core_1.Flags.boolean({
+        char: 'y',
+        description: 'Skip confirmation prompt during cleanup',
+        default: false,
+    }),
+};
+exports.default = EnvOrphanVolumes;

package/lib/cli/src/commands/env/refresh-kubeconfig.d.ts

@@ -0,0 +1,6 @@
+import { Command } from '@oclif/core';
+export default class EnvRefreshKubeconfig extends Command {
+    static readonly description: string;
+    static readonly examples: string[];
+    run(): Promise<void>;
+}

package/lib/cli/src/commands/env/refresh-kubeconfig.js

@@ -0,0 +1,66 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const chalk_1 = __importDefault(require("chalk"));
+const ora_1 = __importDefault(require("ora"));
+const nest_app_1 = require("../../lib/nest-app");
+const cli_observability_cluster_service_1 = require("../../services/cli-observability-cluster.service");
+const cli_ssh_service_1 = require("../../services/cli-ssh.service");
+const cli_cluster_repository_1 = require("../../lib/repositories/cli-cluster.repository");
+const encryption_service_1 = require("../../../../src/modules/shared/encryption/services/encryption.service");
+const cluster_entity_1 = require("../../../../src/modules/infrastructure/clusters/entities/cluster.entity");
+const context_banner_1 = require("../../lib/context-banner");
+class EnvRefreshKubeconfig extends core_1.Command {
+    async run() {
+        (0, context_banner_1.printContextBanner)();
+        const spinner = (0, ora_1.default)('Fetching kubeconfig from K3s master...').start();
+        try {
+            const app = await (0, nest_app_1.getNestApp)();
+            const observabilityService = app.get(cli_observability_cluster_service_1.CliObservabilityClusterService);
+            const sshService = app.get(cli_ssh_service_1.CliSshService);
+            const clusterRepo = app.get(cli_cluster_repository_1.CliClusterRepository);
+            const encryptionService = app.get(encryption_service_1.EncryptionService);
+            const cluster = await observabilityService.getObservabilityCluster();
+            if (!cluster) {
+                spinner.fail('No observability cluster found');
+                return;
+            }
+            if (cluster.status !== cluster_entity_1.ClusterStatus.READY) {
+                spinner.fail(`Cluster is not ready (status: ${cluster.status})`);
+                return;
+            }
+            const masterIp = cluster.masterIpAddress;
+            if (!masterIp) {
+                spinner.fail('Master IP address not available');
+                return;
+            }
+            // Fetch real kubeconfig from K3s master
+            const raw = await sshService.sshExec(masterIp, 'sudo cat /etc/rancher/k3s/k3s.yaml');
+            // Replace localhost with real master IP
+            const kubeconfig = raw.replaceAll('127.0.0.1', masterIp);
+            // Encrypt and save
+            cluster.kubeconfigEncrypted = encryptionService.encrypt(kubeconfig);
+            await clusterRepo.save(cluster);
+            spinner.succeed('Kubeconfig refreshed from K3s master');
+            console.log(chalk_1.default.green(`\n  Cluster: ${cluster.name} (${cluster.id})`));
+            console.log(chalk_1.default.green(`  Master:  ${masterIp}`));
+            console.log(chalk_1.default.green(`  Size:    ${kubeconfig.length} bytes`));
+            console.log(chalk_1.default.dim('\n  The kubeconfig now uses real K3s admin certificates.'));
+        }
+        catch (error) {
+            spinner.fail('Failed to refresh kubeconfig');
+            console.error(chalk_1.default.red(`\n  ${error.message}\n`));
+            this.exit(1);
+        }
+        finally {
+            await (0, nest_app_1.closeNestApp)();
+        }
+    }
+}
+EnvRefreshKubeconfig.description = 'Refresh kubeconfig by fetching the real one from the K3s master via SSH.\n' +
+    'This replaces the locally generated kubeconfig with the actual /etc/rancher/k3s/k3s.yaml.';
+EnvRefreshKubeconfig.examples = ['<%= config.bin %> <%= command.id %>'];
+exports.default = EnvRefreshKubeconfig;

package/lib/cli/src/commands/env/repair-ssh-ca.d.ts

@@ -0,0 +1,11 @@
+import { Command } from '@oclif/core';
+export default class EnvRepairSshCa extends Command {
+    static readonly description = "Backfill the SSH CA private key into the cluster flui-secrets Secret. Used to repair clusters that were provisioned before the CA seeding flow was complete \u2014 symptom is the Dashboard SSH terminal failing with \"CA private key not available\". Reads the CA private key from the active profile (~/.flui/profiles/<profile>/ca/ca_key) and patches the in-cluster Secret over SSH+cert.";
+    static readonly examples: string[];
+    static readonly flags: {
+        'no-restart': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        profile: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+    private readActiveProfile;
+}

package/lib/cli/src/commands/env/repair-ssh-ca.js

@@ -0,0 +1,137 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const chalk_1 = __importDefault(require("chalk"));
+const ora_1 = __importDefault(require("ora"));
+const fs = __importStar(require("node:fs/promises"));
+const path = __importStar(require("node:path"));
+const os = __importStar(require("node:os"));
+const nest_app_1 = require("../../lib/nest-app");
+const cli_observability_cluster_service_1 = require("../../services/cli-observability-cluster.service");
+const cli_ssh_service_1 = require("../../services/cli-ssh.service");
+const context_banner_1 = require("../../lib/context-banner");
+class EnvRepairSshCa extends core_1.Command {
+    async run() {
+        const { flags } = await this.parse(EnvRepairSshCa);
+        (0, context_banner_1.printContextBanner)();
+        const profile = flags.profile ?? process.env.FLUI_PROFILE ?? this.readActiveProfile();
+        const caKeyPath = path.join(os.homedir(), '.flui', 'profiles', profile, 'ca', 'ca_key');
+        const spinner = (0, ora_1.default)('Reading local CA private key...').start();
+        let caPrivateKey;
+        try {
+            caPrivateKey = (await fs.readFile(caKeyPath, 'utf-8')).trimEnd() + '\n';
+            if (!caPrivateKey.includes('PRIVATE KEY')) {
+                spinner.fail('CA private key file does not look like an OpenSSH key');
+                this.exit(1);
+                return;
+            }
+            spinner.succeed(`CA private key loaded from ${chalk_1.default.dim(caKeyPath)} (${caPrivateKey.length} bytes)`);
+        }
+        catch (err) {
+            spinner.fail(`Could not read CA private key at ${caKeyPath}: ${err.message}`);
+            this.log(chalk_1.default.yellow('\n  Hint: this profile may have never been initialized with a CA, or the path is wrong.'));
+            this.exit(1);
+            return;
+        }
+        const app = await (0, nest_app_1.getNestApp)();
+        try {
+            const obs = app.get(cli_observability_cluster_service_1.CliObservabilityClusterService);
+            const ssh = app.get(cli_ssh_service_1.CliSshService);
+            const cluster = await obs.getObservabilityCluster();
+            if (!cluster?.masterIpAddress) {
+                this.log(chalk_1.default.red('  No observability cluster found in this profile.'));
+                this.exit(1);
+                return;
+            }
+            const patchSpinner = (0, ora_1.default)(`Patching flui-secrets on ${cluster.masterIpAddress}...`).start();
+            const base64 = Buffer.from(caPrivateKey).toString('base64');
+            const patchCmd = `kubectl -n flui-system patch secret flui-secrets ` +
+                `--type='json' -p='[{"op":"replace","path":"/data/SSH_CA_PRIVATE_KEY","value":"${base64}"}]'`;
+            try {
+                await ssh.sshExec(cluster.masterIpAddress, patchCmd);
+                patchSpinner.succeed('Secret SSH_CA_PRIVATE_KEY patched');
+            }
+            catch (err) {
+                patchSpinner.fail(`Patch failed: ${err.message}`);
+                this.exit(1);
+                return;
+            }
+            if (!flags['no-restart']) {
+                const restartSpinner = (0, ora_1.default)('Restarting flui-api...').start();
+                try {
+                    await ssh.sshExec(cluster.masterIpAddress, 'kubectl -n flui-system rollout restart deployment/flui-api');
+                    restartSpinner.succeed('flui-api rolling restart triggered');
+                }
+                catch (err) {
+                    restartSpinner.warn(`Restart failed (Secret was patched OK): ${err.message}`);
+                }
+            }
+            this.log('');
+            this.log(chalk_1.default.green('  ✅ CA repair complete. Dashboard terminal should now work.'));
+            this.log(chalk_1.default.dim('     Hard-refresh the dashboard if it was already open.\n'));
+        }
+        finally {
+            await (0, nest_app_1.closeNestApp)();
+        }
+    }
+    readActiveProfile() {
+        try {
+            const contextFile = path.join(os.homedir(), '.flui', 'context');
+            const fsSync = require('node:fs');
+            return fsSync.readFileSync(contextFile, 'utf-8').trim() || 'default';
+        }
+        catch {
+            return 'default';
+        }
+    }
+}
+EnvRepairSshCa.description = 'Backfill the SSH CA private key into the cluster flui-secrets Secret. Used to repair clusters that were provisioned before the CA seeding flow was complete — symptom is the Dashboard SSH terminal failing with "CA private key not available". Reads the CA private key from the active profile (~/.flui/profiles/<profile>/ca/ca_key) and patches the in-cluster Secret over SSH+cert.';
+EnvRepairSshCa.examples = [
+    '<%= config.bin %> <%= command.id %>',
+    '<%= config.bin %> <%= command.id %> --no-restart',
+];
+EnvRepairSshCa.flags = {
+    'no-restart': core_1.Flags.boolean({
+        description: 'Skip the flui-api rolling restart after patching the Secret',
+    }),
+    profile: core_1.Flags.string({
+        description: 'Active profile name (default: $FLUI_PROFILE or contents of ~/.flui/context, fallback "default")',
+    }),
+};
+exports.default = EnvRepairSshCa;

package/lib/cli/src/commands/env/restart.d.ts

@@ -0,0 +1,10 @@
+import { Command } from '@oclif/core';
+export default class EnvRestart extends Command {
+    static readonly description = "Restart stopped observability cluster servers";
+    static readonly examples: string[];
+    run(): Promise<void>;
+    /**
+     * Sleep helper
+     */
+    private sleep;
+}

package/lib/cli/src/commands/env/restart.js

@@ -0,0 +1,187 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const chalk_1 = __importDefault(require("chalk"));
+const ora_1 = __importDefault(require("ora"));
+const nest_app_1 = require("../../lib/nest-app");
+const cli_observability_cluster_service_1 = require("../../services/cli-observability-cluster.service");
+const hetzner_provider_service_1 = require("../../../../src/modules/providers/services/hetzner-provider.service");
+const cluster_entity_1 = require("../../../../src/modules/infrastructure/clusters/entities/cluster.entity");
+const cli_cluster_repository_1 = require("../../lib/repositories/cli-cluster.repository");
+const context_banner_1 = require("../../lib/context-banner");
+class EnvRestart extends core_1.Command {
+    async run() {
+        (0, context_banner_1.printContextBanner)();
+        let spinner = (0, ora_1.default)('Initializing...').start();
+        try {
+            // Bootstrap NestJS and get services
+            const app = await (0, nest_app_1.getNestApp)();
+            spinner.succeed('Initialized');
+            console.log(chalk_1.default.cyan('\n🔄 Restarting Observability Cluster\n'));
+            spinner = (0, ora_1.default)('Finding cluster...').start();
+            const observabilityService = app.get(cli_observability_cluster_service_1.CliObservabilityClusterService);
+            // Get observability cluster
+            const cluster = await observabilityService.getObservabilityCluster();
+            if (!cluster) {
+                spinner.fail('No observability cluster found');
+                console.log(chalk_1.default.yellow('\n⚠️  No observability cluster exists.\n'));
+                console.log(`Create one with: ${chalk_1.default.cyan('flui env create')}\n`);
+                return;
+            }
+            if (!cluster.nodes || cluster.nodes.length === 0) {
+                spinner.fail('No cluster nodes found');
+                console.log(chalk_1.default.yellow('\n⚠️  Cluster has no nodes.\n'));
+                return;
+            }
+            spinner.succeed(`Found cluster with ${cluster.nodes.length} node(s)`);
+            // Check if cluster is already running
+            if (cluster.status === cluster_entity_1.ClusterStatus.READY) {
+                console.log(chalk_1.default.yellow('\n⚠️  Cluster is already running.\n'));
+                console.log(`   Check status with: ${chalk_1.default.cyan('flui env status')}\n`);
+                return;
+            }
+            // Get Hetzner provider (we need the concrete type for poweron)
+            const hetznerProvider = app.get(hetzner_provider_service_1.HetznerProviderService);
+            // Check current server states
+            let allRunning = true;
+            const serverStates = [];
+            spinner = (0, ora_1.default)('Checking server states...').start();
+            for (const node of cluster.nodes) {
+                try {
+                    const serverDto = await hetznerProvider.getServerDetailsAsDto(node.providerResourceId);
+                    if (serverDto) {
+                        serverStates.push({
+                            name: node.serverName,
+                            id: node.providerResourceId,
+                            status: serverDto.status,
+                        });
+                        if (serverDto.status !== 'running') {
+                            allRunning = false;
+                        }
+                    }
+                }
+                catch {
+                    spinner.warn(`Could not check status for ${node.serverName}`);
+                }
+            }
+            spinner.succeed('Server states checked');
+            if (allRunning) {
+                console.log(chalk_1.default.yellow('\n⚠️  All cluster servers are already running.\n'));
+                // Update cluster status to READY
+                spinner = (0, ora_1.default)('Updating cluster status...').start();
+                const clusterRepository = app.get(cli_cluster_repository_1.CliClusterRepository);
+                cluster.status = cluster_entity_1.ClusterStatus.READY;
+                await clusterRepository.save(cluster);
+                spinner.succeed('Cluster status updated to READY');
+                console.log(`\n   Check status with: ${chalk_1.default.cyan('flui env status')}\n`);
+                return;
+            }
+            // Show cluster info
+            console.log(chalk_1.default.cyan('\n📋 Cluster Information:\n'));
+            console.log(`   ${chalk_1.default.bold('Name:')}   ${cluster.name}`);
+            console.log(`   ${chalk_1.default.bold('ID:')}     ${cluster.id}`);
+            console.log(`   ${chalk_1.default.bold('Nodes:')}  ${cluster.nodes.length}`);
+            console.log(`   ${chalk_1.default.bold('Region:')} ${cluster.region}\n`);
+            // Start all stopped servers
+            let startedCount = 0;
+            for (const state of serverStates) {
+                if (state.status === 'off') {
+                    spinner = (0, ora_1.default)(`Powering on ${state.name}...`).start();
+                    try {
+                        await hetznerProvider.powerOnServer(state.id);
+                        spinner.succeed(`${state.name} powered on`);
+                        startedCount++;
+                    }
+                    catch (error) {
+                        spinner.fail(`Failed to power on ${state.name}: ${error.message}`);
+                    }
+                }
+                else {
+                    console.log(chalk_1.default.dim(`   ${state.name} - already running`));
+                }
+            }
+            if (startedCount > 0) {
+                console.log(chalk_1.default.green(`\n✅ Successfully started ${startedCount} server(s)\n`));
+                // Wait for servers to become ready
+                spinner = (0, ora_1.default)('Waiting for servers to boot...').start();
+                await this.sleep(10000); // Wait 10 seconds for servers to boot
+                spinner.succeed('Servers should be booting');
+                // Wait for K3s services to be ready
+                console.log(chalk_1.default.cyan('\n⏳ Waiting for services to be ready...\n'));
+                console.log(chalk_1.default.dim('   This may take 1-2 minutes as K3s restarts...\n'));
+                const maxAttempts = 24; // 2 minutes with 5 second intervals
+                let servicesReady = false;
+                for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+                    spinner = (0, ora_1.default)(`Checking services (attempt ${attempt}/${maxAttempts})...`).start();
+                    try {
+                        const servicesHealth = await observabilityService.checkObservabilityServices(cluster.masterIpAddress, cluster.nipHostnameToken);
+                        const allHealthy = servicesHealth.prometheus === 'healthy' &&
+                            servicesHealth.grafana === 'healthy' &&
+                            servicesHealth.loki === 'healthy';
+                        if (allHealthy) {
+                            spinner.succeed('All services are ready!');
+                            servicesReady = true;
+                            break;
+                        }
+                        else {
+                            spinner.text = `Services not ready yet (${attempt}/${maxAttempts})...`;
+                            spinner.color = 'yellow';
+                            await this.sleep(5000);
+                            spinner.stop();
+                        }
+                    }
+                    catch {
+                        spinner.stop();
+                        if (attempt < maxAttempts) {
+                            await this.sleep(5000);
+                        }
+                    }
+                }
+                if (!servicesReady) {
+                    console.log(chalk_1.default.yellow('\n⚠️  Services are taking longer than expected to start.\n'));
+                    console.log(chalk_1.default.dim('   They may still be initializing. Check again with:'));
+                    console.log(`   ${chalk_1.default.cyan('flui env status')}\n`);
+                }
+                // Update cluster status to READY
+                spinner = (0, ora_1.default)('Updating cluster status...').start();
+                const clusterRepository = app.get(cli_cluster_repository_1.CliClusterRepository);
+                cluster.status = cluster_entity_1.ClusterStatus.READY;
+                await clusterRepository.save(cluster);
+                spinner.succeed('Cluster status updated to READY');
+            }
+            console.log(chalk_1.default.cyan('\n💰 Cost Information:\n'));
+            console.log(`   ${chalk_1.default.bold('Current cost:')} ~${7.5 * cluster.nodes.length}€/month (running)`);
+            console.log(`   ${chalk_1.default.dim('To save costs when not in use:')}`);
+            console.log(`   ${chalk_1.default.cyan('flui env stop')}\n`);
+            console.log(chalk_1.default.cyan('\n🔗 Next Steps:\n'));
+            console.log(`   Check cluster status: ${chalk_1.default.cyan('flui env status')}`);
+            console.log(`   View endpoints and credentials\n`);
+        }
+        catch (error) {
+            spinner.fail('Failed to restart environment');
+            console.log(chalk_1.default.red('\n❌ Error:\n'));
+            if (error instanceof Error) {
+                console.log(`   ${error.message}\n`);
+            }
+            else {
+                console.log(`   ${String(error)}\n`);
+            }
+            this.exit(1);
+        }
+        finally {
+            await (0, nest_app_1.closeNestApp)();
+        }
+    }
+    /**
+     * Sleep helper
+     */
+    sleep(ms) {
+        return new Promise((resolve) => setTimeout(resolve, ms));
+    }
+}
+EnvRestart.description = 'Restart stopped observability cluster servers';
+EnvRestart.examples = ['<%= config.bin %> <%= command.id %>'];
+exports.default = EnvRestart;

package/lib/cli/src/commands/env/scale-master.d.ts

@@ -0,0 +1,11 @@
+import { Command } from '@oclif/core';
+export default class EnvScaleMaster extends Command {
+    static readonly description: string;
+    static readonly examples: string[];
+    static readonly flags: {
+        type: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        upgradeDisk: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        confirm: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}