@kaitranntt/ccs 7.79.1-dev.9 → 8.0.0-dev.1

package/dist/commands/config-command.js

@@ -40,6 +40,7 @@ const web_server_1 = require("../web-server");
 const shutdown_1 = require("../web-server/shutdown");
 const service_manager_1 = require("../cliproxy/service-manager");
 const port_manager_1 = require("../cliproxy/config/port-manager");
+const supervisord_lifecycle_1 = require("../docker/supervisord-lifecycle");
 const ui_1 = require("../utils/ui");
 const named_command_router_1 = require("./named-command-router");
 const config_dashboard_host_1 = require("./config-dashboard-host");
@@ -83,6 +84,7 @@ const defaultConfigCommandDependencies = {
     startServer: web_server_1.startServer,
     setupGracefulShutdown: shutdown_1.setupGracefulShutdown,
     ensureCliproxyService: service_manager_1.ensureCliproxyService,
+    isRunningUnderSupervisord: supervisord_lifecycle_1.isRunningUnderSupervisord,
     getDashboardAuthConfig: config_loader_facade_1.getDashboardAuthConfig,
     initUI: ui_1.initUI,
     header: ui_1.header,
@@ -128,31 +130,40 @@ async function handleConfigCommand(args, deps = defaultConfigCommandDependencies
     });
     console.log(deps.header('CCS Config Dashboard'));
     console.log('');
-    // Ensure CLIProxy service is running for dashboard features
-    console.log(deps.info('Starting CLIProxy service...'));
-    const cliproxyResult = await deps.ensureCliproxyService((0, port_manager_1.resolveLifecyclePort)(), verbose);
-    logger.info('cliproxy.ensure_result', 'Config command checked CLIProxy availability', {
-        started: cliproxyResult.started,
-        alreadyRunning: cliproxyResult.alreadyRunning,
-        configRegenerated: cliproxyResult.configRegenerated,
-        port: cliproxyResult.port || null,
-        error: cliproxyResult.error || null,
-    });
-    if (cliproxyResult.started) {
-        if (cliproxyResult.alreadyRunning) {
-            console.log(deps.ok(`CLIProxy already running on port ${cliproxyResult.port}`));
-            if (cliproxyResult.configRegenerated) {
-                console.log(deps.warn('Config updated - restart CLIProxy to apply changes'));
+    const lifecyclePort = (0, port_manager_1.resolveLifecyclePort)();
+    if (deps.isRunningUnderSupervisord?.() ?? false) {
+        logger.info('cliproxy.supervisord_managed', 'Skipping direct CLIProxy startup in Docker', {
+            port: lifecyclePort,
+        });
+        console.log(deps.info(`CLIProxy is managed by supervisord on port ${lifecyclePort}`));
+    }
+    else {
+        // Ensure CLIProxy service is running for dashboard features
+        console.log(deps.info('Starting CLIProxy service...'));
+        const cliproxyResult = await deps.ensureCliproxyService(lifecyclePort, verbose);
+        logger.info('cliproxy.ensure_result', 'Config command checked CLIProxy availability', {
+            started: cliproxyResult.started,
+            alreadyRunning: cliproxyResult.alreadyRunning,
+            configRegenerated: cliproxyResult.configRegenerated,
+            port: cliproxyResult.port || null,
+            error: cliproxyResult.error || null,
+        });
+        if (cliproxyResult.started) {
+            if (cliproxyResult.alreadyRunning) {
+                console.log(deps.ok(`CLIProxy already running on port ${cliproxyResult.port}`));
+                if (cliproxyResult.configRegenerated) {
+                    console.log(deps.warn('Config updated - restart CLIProxy to apply changes'));
+                }
+            }
+            else {
+                console.log(deps.ok(`CLIProxy started on port ${cliproxyResult.port}`));
             }
         }
         else {
-            console.log(deps.ok(`CLIProxy started on port ${cliproxyResult.port}`));
+            console.log(deps.warn(`CLIProxy not available: ${cliproxyResult.error}`));
+            console.log(deps.info('Dashboard will work but Control Panel/Stats may be limited'));
         }
     }
-    else {
-        console.log(deps.warn(`CLIProxy not available: ${cliproxyResult.error}`));
-        console.log(deps.info('Dashboard will work but Control Panel/Stats may be limited'));
-    }
     console.log('');
     console.log(deps.info('Starting dashboard server...'));
     // Find available port

package/dist/commands/config-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-command.js","sourceRoot":"","sources":["../../src/commands/config-command.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,wDAA+B;AAC/B,gDAAwB;AACxB,8CAA4C;AAC5C,qDAA+D;AAC/D,iEAAoE;AACpE,kEAAuE;AACvE,oCAAmE;AACnE,iEAAqF;AACrF,mEAKiC;AACjC,qEAAyF;AACzF,iDAAmD;AACnD,yEAAwE;AAExE,MAAM,MAAM,GAAG,IAAA,sBAAY,EAAC,gBAAgB,CAAC,CAAC;AAE9C,MAAM,wBAAwB,GAAiC;IAC7D;QACE,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACrB,MAAM,EAAE,2BAA2B,EAAE,GAAG,wDAAa,2BAA2B,GAAC,CAAC;YAClF,MAAM,2BAA2B,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACrB,MAAM,EAAE,uBAAuB,EAAE,GAAG,wDAAa,eAAe,GAAC,CAAC;YAClE,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACrB,MAAM,EAAE,gCAAgC,EAAE,GAAG,wDAAa,iCAAiC,GAAC,CAAC;YAC7F,MAAM,gCAAgC,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACrB,MAAM,EAAE,2BAA2B,EAAE,GAAG,wDAAa,2BAA2B,GAAC,CAAC;YAClF,MAAM,2BAA2B,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;KACF;CACF,CAAC;AAmBF,MAAM,gCAAgC,GAA8B;IAClE,OAAO,EAAP,kBAAO;IACP,WAAW,EAAE,cAAI;IACjB,WAAW,EAAX,wBAAW;IACX,qBAAqB,EAArB,gCAAqB;IACrB,qBAAqB,EAArB,uCAAqB;IACrB,sBAAsB,EAAtB,6CAAsB;IACtB,MAAM,EAAN,WAAM;IACN,MAAM,EAAN,WAAM;IACN,EAAE,EAAF,OAAE;IACF,IAAI,EAAJ,SAAI;IACJ,IAAI,EAAJ,SAAI;IACJ,IAAI,EAAJ,SAAI;IACJ,mBAAmB,EAAnB,0CAAmB;IACnB,sBAAsB,EAAE,wBAAwB;CACjD,CAAC;AAEF;;GAEG;AACI,KAAK,UAAU,mBAAmB,CACvC,IAAc,EACd,OAAkC,gCAAgC;IAElE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAC5C,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,IAAA,8CAAqB,GAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC;QACzC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACnE,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IAED,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;IAEpB,MAAM,MAAM,GAAG,IAAA,+CAAsB,EAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,IAAA,8CAAqB,GAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAC5B,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,mCAAmC,EAAE;QAC7E,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;QACzB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;KAC3B,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,4DAA4D;IAC5D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC;IACvD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAA,mCAAoB,GAAE,EAAE,OAAO,CAAC,CAAC;IACzF,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,8CAA8C,EAAE;QACpF,OAAO,EAAE,cAAc,CAAC,OAAO;QAC/B,cAAc,EAAE,cAAc,CAAC,cAAc;QAC7C,iBAAiB,EAAE,cAAc,CAAC,iBAAiB;QACnD,IAAI,EAAE,cAAc,CAAC,IAAI,IAAI,IAAI;QACjC,KAAK,EAAE,cAAc,CAAC,KAAK,IAAI,IAAI;KACpC,CAAC,CAAC;IAEH,IAAI,cAAc,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,cAAc,CAAC,cAAc,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,oCAAoC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAChF,IAAI,cAAc,CAAC,iBAAiB,EAAE,CAAC;gBACrC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,4BAA4B,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC;IAEvD,sBAAsB;IACtB,MAAM,IAAI,GACR,OAAO,CAAC,IAAI;QACZ,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC;YAClB,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;SACrC,CAAC,CAAC,CAAC;IAEN,IAAI,CAAC;QACH,eAAe;QACf,MAAM,aAAa,GAAsC;YACvD,IAAI;YACJ,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC;QACF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,aAAa,CAAC,IAAI,GAAG,IAAA,8CAAsB,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAEvE,0BAA0B;QAC1B,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAEjD,MAAM,IAAI,GAAG,IAAA,4CAAoB,EAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvF,MAAM,uBAAuB,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAA,sCAAc,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAEvF,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC,CAAC;QACrE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,uBAAuB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YACtD,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAChE,CAAC;iBAAM,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;gBACxC,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBAC1C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,uBAAuB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;YACjD,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAC7F,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,IAAA,sCAAc,EAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;gBAC/D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,eAAe;QACf,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,2CAA2C,EAAE;gBACnF,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,iCAAiC,EAAE;gBAC9E,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,mCAAmC,EAAE;YAC3E,OAAO,EAAG,KAAe,CAAC,OAAO;SAClC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA4B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAvJD,kDAuJC;AAED,SAAS,qBAAqB,CAAC,MAE9B;IACC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,OAAO,CAAC,OAAO,CAAC;AACzB,CAAC"}
+{"version":3,"file":"config-command.js","sourceRoot":"","sources":["../../src/commands/config-command.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,wDAA+B;AAC/B,gDAAwB;AACxB,8CAA4C;AAC5C,qDAA+D;AAC/D,iEAAoE;AACpE,kEAAuE;AACvE,2EAA4E;AAC5E,oCAAmE;AACnE,iEAAqF;AACrF,mEAKiC;AACjC,qEAAyF;AACzF,iDAAmD;AACnD,yEAAwE;AAExE,MAAM,MAAM,GAAG,IAAA,sBAAY,EAAC,gBAAgB,CAAC,CAAC;AAE9C,MAAM,wBAAwB,GAAiC;IAC7D;QACE,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACrB,MAAM,EAAE,2BAA2B,EAAE,GAAG,wDAAa,2BAA2B,GAAC,CAAC;YAClF,MAAM,2BAA2B,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACrB,MAAM,EAAE,uBAAuB,EAAE,GAAG,wDAAa,eAAe,GAAC,CAAC;YAClE,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACrB,MAAM,EAAE,gCAAgC,EAAE,GAAG,wDAAa,iCAAiC,GAAC,CAAC;YAC7F,MAAM,gCAAgC,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACrB,MAAM,EAAE,2BAA2B,EAAE,GAAG,wDAAa,2BAA2B,GAAC,CAAC;YAClF,MAAM,2BAA2B,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;KACF;CACF,CAAC;AAoBF,MAAM,gCAAgC,GAA8B;IAClE,OAAO,EAAP,kBAAO;IACP,WAAW,EAAE,cAAI;IACjB,WAAW,EAAX,wBAAW;IACX,qBAAqB,EAArB,gCAAqB;IACrB,qBAAqB,EAArB,uCAAqB;IACrB,yBAAyB,EAAzB,iDAAyB;IACzB,sBAAsB,EAAtB,6CAAsB;IACtB,MAAM,EAAN,WAAM;IACN,MAAM,EAAN,WAAM;IACN,EAAE,EAAF,OAAE;IACF,IAAI,EAAJ,SAAI;IACJ,IAAI,EAAJ,SAAI;IACJ,IAAI,EAAJ,SAAI;IACJ,mBAAmB,EAAnB,0CAAmB;IACnB,sBAAsB,EAAE,wBAAwB;CACjD,CAAC;AAEF;;GAEG;AACI,KAAK,UAAU,mBAAmB,CACvC,IAAc,EACd,OAAkC,gCAAgC;IAElE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAC5C,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,IAAA,8CAAqB,GAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC;QACzC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACnE,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IAED,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;IAEpB,MAAM,MAAM,GAAG,IAAA,+CAAsB,EAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,IAAA,8CAAqB,GAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAC5B,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,mCAAmC,EAAE;QAC7E,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;QACzB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;KAC3B,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,aAAa,GAAG,IAAA,mCAAoB,GAAE,CAAC;IAC7C,IAAI,IAAI,CAAC,yBAAyB,EAAE,EAAE,IAAI,KAAK,EAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,4CAA4C,EAAE;YACxF,IAAI,EAAE,aAAa;SACpB,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,8CAA8C,aAAa,EAAE,CAAC,CAAC,CAAC;IACxF,CAAC;SAAM,CAAC;QACN,4DAA4D;QAC5D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACvD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAChF,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,8CAA8C,EAAE;YACpF,OAAO,EAAE,cAAc,CAAC,OAAO;YAC/B,cAAc,EAAE,cAAc,CAAC,cAAc;YAC7C,iBAAiB,EAAE,cAAc,CAAC,iBAAiB;YACnD,IAAI,EAAE,cAAc,CAAC,IAAI,IAAI,IAAI;YACjC,KAAK,EAAE,cAAc,CAAC,KAAK,IAAI,IAAI;SACpC,CAAC,CAAC;QAEH,IAAI,cAAc,CAAC,OAAO,EAAE,CAAC;YAC3B,IAAI,cAAc,CAAC,cAAc,EAAE,CAAC;gBAClC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,oCAAoC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAChF,IAAI,cAAc,CAAC,iBAAiB,EAAE,CAAC;oBACrC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC,CAAC;gBAC/E,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,4BAA4B,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC1E,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC;IAEvD,sBAAsB;IACtB,MAAM,IAAI,GACR,OAAO,CAAC,IAAI;QACZ,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC;YAClB,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;SACrC,CAAC,CAAC,CAAC;IAEN,IAAI,CAAC;QACH,eAAe;QACf,MAAM,aAAa,GAAsC;YACvD,IAAI;YACJ,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC;QACF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,aAAa,CAAC,IAAI,GAAG,IAAA,8CAAsB,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAEvE,0BAA0B;QAC1B,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAEjD,MAAM,IAAI,GAAG,IAAA,4CAAoB,EAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvF,MAAM,uBAAuB,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAA,sCAAc,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAEvF,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC,CAAC;QACrE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,uBAAuB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YACtD,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAChE,CAAC;iBAAM,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;gBACxC,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBAC1C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,uBAAuB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;YACjD,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAC7F,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,IAAA,sCAAc,EAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;gBAC/D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,eAAe;QACf,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,2CAA2C,EAAE;gBACnF,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,iCAAiC,EAAE;gBAC9E,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,mCAAmC,EAAE;YAC3E,OAAO,EAAG,KAAe,CAAC,OAAO;SAClC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA4B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AA/JD,kDA+JC;AAED,SAAS,qBAAqB,CAAC,MAE9B;IACC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,OAAO,CAAC,OAAO,CAAC;AACzB,CAAC"}

package/dist/commands/docker/finalize-key-rotation-subcommand.d.ts

@@ -0,0 +1,2 @@
+export declare function handleFinalizeKeyRotation(args: string[]): Promise<void>;
+//# sourceMappingURL=finalize-key-rotation-subcommand.d.ts.map

package/dist/commands/docker/finalize-key-rotation-subcommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finalize-key-rotation-subcommand.d.ts","sourceRoot":"","sources":["../../../src/commands/docker/finalize-key-rotation-subcommand.ts"],"names":[],"mappings":"AAcA,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA6C7E"}

package/dist/commands/docker/finalize-key-rotation-subcommand.js

@@ -0,0 +1,79 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleFinalizeKeyRotation = void 0;
+const fs = __importStar(require("fs"));
+const docker_1 = require("../../docker");
+const config_generator_1 = require("../../cliproxy/config/config-generator");
+const port_manager_1 = require("../../cliproxy/config/port-manager");
+const docker_key_rotation_1 = require("../../docker/docker-key-rotation");
+const ui_1 = require("../../utils/ui");
+const options_1 = require("./options");
+const KNOWN_FLAGS = ['--host', '--container-scope'];
+function shouldWriteContainerVolume(args) {
+    return args.includes('--container-scope') || fs.existsSync('/.dockerenv');
+}
+async function handleFinalizeKeyRotation(args) {
+    await (0, ui_1.initUI)();
+    const parsed = (0, options_1.parseDockerTarget)(args, KNOWN_FLAGS);
+    const remainingArgs = parsed.remainingArgs.filter((arg) => arg !== '--container-scope');
+    const errors = [
+        ...parsed.errors,
+        ...(0, options_1.collectUnexpectedDockerArgs)(remainingArgs, {
+            knownFlags: [],
+            maxPositionals: 0,
+        }),
+    ];
+    if (errors.length > 0) {
+        console.error((0, ui_1.box)((0, ui_1.fail)(errors.join('\n')), { title: 'Docker', padding: 1 }));
+        process.exitCode = 1;
+        return;
+    }
+    if (!shouldWriteContainerVolume(args)) {
+        try {
+            const output = new docker_1.DockerExecutor().finalizeKeyRotation({ host: parsed.host });
+            if (output.trim()) {
+                console.log(output.trim());
+            }
+        }
+        catch (error) {
+            console.error((0, ui_1.box)((0, ui_1.fail)(error instanceof Error ? error.message : String(error)), {
+                title: 'Docker',
+                padding: 1,
+            }));
+            process.exitCode = 1;
+        }
+        return;
+    }
+    const status = (0, docker_key_rotation_1.finalizeDockerKeyRotation)();
+    if ((0, config_generator_1.configExists)(port_manager_1.CLIPROXY_DEFAULT_PORT)) {
+        (0, config_generator_1.regenerateConfig)(port_manager_1.CLIPROXY_DEFAULT_PORT);
+    }
+    console.log((0, ui_1.ok)('Docker CLIProxy legacy API key grace period finalized.'));
+    console.log((0, ui_1.info)(`Current API key: ${status.maskedApiKey ?? '(not configured)'}`));
+    console.log((0, ui_1.info)('Restart CLIProxy if it is already running to reload the regenerated config.'));
+}
+exports.handleFinalizeKeyRotation = handleFinalizeKeyRotation;
+//# sourceMappingURL=finalize-key-rotation-subcommand.js.map

package/dist/commands/docker/finalize-key-rotation-subcommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finalize-key-rotation-subcommand.js","sourceRoot":"","sources":["../../../src/commands/docker/finalize-key-rotation-subcommand.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,yCAA8C;AAC9C,6EAAwF;AACxF,qEAA2E;AAC3E,0EAA6E;AAC7E,uCAA6D;AAC7D,uCAA2E;AAE3E,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,mBAAmB,CAAU,CAAC;AAE7D,SAAS,0BAA0B,CAAC,IAAc;IAChD,OAAO,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAC5E,CAAC;AAEM,KAAK,UAAU,yBAAyB,CAAC,IAAc;IAC5D,MAAM,IAAA,WAAM,GAAE,CAAC;IAEf,MAAM,MAAM,GAAG,IAAA,2BAAiB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG;QACb,GAAG,MAAM,CAAC,MAAM;QAChB,GAAG,IAAA,qCAA2B,EAAC,aAAa,EAAE;YAC5C,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,CAAC;SAClB,CAAC;KACH,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,IAAA,QAAG,EAAC,IAAA,SAAI,EAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,uBAAc,EAAE,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/E,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,IAAA,QAAG,EAAC,IAAA,SAAI,EAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE;gBAChE,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,CAAC;aACX,CAAC,CACH,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,+CAAyB,GAAE,CAAC;IAC3C,IAAI,IAAA,+BAAY,EAAC,oCAAqB,CAAC,EAAE,CAAC;QACxC,IAAA,mCAAgB,EAAC,oCAAqB,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAA,OAAE,EAAC,wDAAwD,CAAC,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,oBAAoB,MAAM,CAAC,YAAY,IAAI,kBAAkB,EAAE,CAAC,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,6EAA6E,CAAC,CAAC,CAAC;AACnG,CAAC;AA7CD,8DA6CC"}

package/dist/commands/docker/help-subcommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"help-subcommand.d.ts","sourceRoot":"","sources":["../../../src/commands/docker/help-subcommand.ts"],"names":[],"mappings":"AAEA,wBAAsB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CA+D9C"}
+{"version":3,"file":"help-subcommand.d.ts","sourceRoot":"","sources":["../../../src/commands/docker/help-subcommand.ts"],"names":[],"mappings":"AAEA,wBAAsB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAqE9C"}

package/dist/commands/docker/help-subcommand.js

@@ -20,6 +20,8 @@ async function showHelp() {
                 ['update', 'Update CCS and CLIProxy inside the running container'],
                 ['logs', 'Show or follow container log output'],
                 ['config', 'Show bundled asset paths and deployment defaults'],
+                ['show-key', 'Show the Docker CLIProxy API key masked by default'],
+                ['finalize-key-rotation', 'End the legacy Docker API key grace period'],
             ],
         ],
         [
@@ -36,6 +38,7 @@ async function showHelp() {
                 ['up --proxy-port <port>', 'Publish CLIProxy on a custom host port'],
                 ['logs --follow', 'Stream logs continuously'],
                 ['logs --service <name>', 'Filter logs to ccs or cliproxy'],
+                ['show-key --full', 'Reveal the full Docker CLIProxy API key'],
             ],
         ],
         [
@@ -46,6 +49,9 @@ async function showHelp() {
                 ['ccs docker --host my-box status', 'Use the documented common-option ordering'],
                 ['ccs docker up --host my-box', 'Stage assets to ~/.ccs/docker and deploy remotely'],
                 ['ccs docker logs --follow --service ccs', 'Tail dashboard logs only'],
+                ['ccs docker show-key', 'Print the masked CLIProxy API key from the container'],
+                ['ccs docker show-key --full', 'Reveal the full CLIProxy API key'],
+                ['ccs docker finalize-key-rotation', 'Remove the legacy key immediately'],
                 ['ccs docker update --host my-box', 'Update the running remote stack in place'],
             ],
         ],

package/dist/commands/docker/help-subcommand.js.map

@@ -1 +1 @@
-{"version":3,"file":"help-subcommand.js","sourceRoot":"","sources":["../../../src/commands/docker/help-subcommand.ts"],"names":[],"mappings":";;;AAAA,uCAAuE;AAEhE,KAAK,UAAU,QAAQ;IAC5B,MAAM,IAAA,WAAM,GAAE,CAAC;IACf,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAA,WAAM,EAAC,mBAAmB,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAA,cAAS,EAAC,QAAQ,CAAC,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,UAAK,EAAC,YAAY,EAAE,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,QAAQ,GAAmC;QAC/C;YACE,WAAW;YACX;gBACE,CAAC,IAAI,EAAE,qDAAqD,CAAC;gBAC7D,CAAC,MAAM,EAAE,sCAAsC,CAAC;gBAChD,CAAC,QAAQ,EAAE,2CAA2C,CAAC;gBACvD,CAAC,QAAQ,EAAE,sDAAsD,CAAC;gBAClE,CAAC,MAAM,EAAE,qCAAqC,CAAC;gBAC/C,CAAC,QAAQ,EAAE,kDAAkD,CAAC;aAC/D;SACF;QACD;YACE,iBAAiB;YACjB;gBACE,CAAC,iBAAiB,EAAE,oEAAoE,CAAC;gBACzF,CAAC,YAAY,EAAE,wBAAwB,CAAC;aACzC;SACF;QACD;YACE,sBAAsB;YACtB;gBACE,CAAC,kBAAkB,EAAE,yCAAyC,CAAC;gBAC/D,CAAC,wBAAwB,EAAE,wCAAwC,CAAC;gBACpE,CAAC,eAAe,EAAE,0BAA0B,CAAC;gBAC7C,CAAC,uBAAuB,EAAE,gCAAgC,CAAC;aAC5D;SACF;QACD;YACE,WAAW;YACX;gBACE,CAAC,eAAe,EAAE,gDAAgD,CAAC;gBACnE,CAAC,6CAA6C,EAAE,iCAAiC,CAAC;gBAClF,CAAC,iCAAiC,EAAE,2CAA2C,CAAC;gBAChF,CAAC,6BAA6B,EAAE,mDAAmD,CAAC;gBACpF,CAAC,wCAAwC,EAAE,0BAA0B,CAAC;gBACtE,CAAC,iCAAiC,EAAE,0CAA0C,CAAC;aAChF;SACF;KACF,CAAC;IAEF,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,IAAA,cAAS,EAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,UAAK,EAAC,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CACT,IAAA,QAAG,EAAC,qFAAqF,CAAC,CAC3F,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AA/DD,4BA+DC"}
+{"version":3,"file":"help-subcommand.js","sourceRoot":"","sources":["../../../src/commands/docker/help-subcommand.ts"],"names":[],"mappings":";;;AAAA,uCAAuE;AAEhE,KAAK,UAAU,QAAQ;IAC5B,MAAM,IAAA,WAAM,GAAE,CAAC;IACf,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAA,WAAM,EAAC,mBAAmB,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAA,cAAS,EAAC,QAAQ,CAAC,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,UAAK,EAAC,YAAY,EAAE,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,QAAQ,GAAmC;QAC/C;YACE,WAAW;YACX;gBACE,CAAC,IAAI,EAAE,qDAAqD,CAAC;gBAC7D,CAAC,MAAM,EAAE,sCAAsC,CAAC;gBAChD,CAAC,QAAQ,EAAE,2CAA2C,CAAC;gBACvD,CAAC,QAAQ,EAAE,sDAAsD,CAAC;gBAClE,CAAC,MAAM,EAAE,qCAAqC,CAAC;gBAC/C,CAAC,QAAQ,EAAE,kDAAkD,CAAC;gBAC9D,CAAC,UAAU,EAAE,oDAAoD,CAAC;gBAClE,CAAC,uBAAuB,EAAE,4CAA4C,CAAC;aACxE;SACF;QACD;YACE,iBAAiB;YACjB;gBACE,CAAC,iBAAiB,EAAE,oEAAoE,CAAC;gBACzF,CAAC,YAAY,EAAE,wBAAwB,CAAC;aACzC;SACF;QACD;YACE,sBAAsB;YACtB;gBACE,CAAC,kBAAkB,EAAE,yCAAyC,CAAC;gBAC/D,CAAC,wBAAwB,EAAE,wCAAwC,CAAC;gBACpE,CAAC,eAAe,EAAE,0BAA0B,CAAC;gBAC7C,CAAC,uBAAuB,EAAE,gCAAgC,CAAC;gBAC3D,CAAC,iBAAiB,EAAE,yCAAyC,CAAC;aAC/D;SACF;QACD;YACE,WAAW;YACX;gBACE,CAAC,eAAe,EAAE,gDAAgD,CAAC;gBACnE,CAAC,6CAA6C,EAAE,iCAAiC,CAAC;gBAClF,CAAC,iCAAiC,EAAE,2CAA2C,CAAC;gBAChF,CAAC,6BAA6B,EAAE,mDAAmD,CAAC;gBACpF,CAAC,wCAAwC,EAAE,0BAA0B,CAAC;gBACtE,CAAC,qBAAqB,EAAE,sDAAsD,CAAC;gBAC/E,CAAC,4BAA4B,EAAE,kCAAkC,CAAC;gBAClE,CAAC,kCAAkC,EAAE,mCAAmC,CAAC;gBACzE,CAAC,iCAAiC,EAAE,0CAA0C,CAAC;aAChF;SACF;KACF,CAAC;IAEF,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,IAAA,cAAS,EAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,UAAK,EAAC,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CACT,IAAA,QAAG,EAAC,qFAAqF,CAAC,CAC3F,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AArED,4BAqEC"}

package/dist/commands/docker/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/docker/index.ts"],"names":[],"mappings":"AA8BA,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgCvE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/docker/index.ts"],"names":[],"mappings":"AAgCA,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAkCvE"}

package/dist/commands/docker/index.js

@@ -4,8 +4,10 @@ exports.handleDockerCommand = void 0;
 const arg_extractor_1 = require("../arg-extractor");
 const config_subcommand_1 = require("./config-subcommand");
 const down_subcommand_1 = require("./down-subcommand");
+const finalize_key_rotation_subcommand_1 = require("./finalize-key-rotation-subcommand");
 const help_subcommand_1 = require("./help-subcommand");
 const logs_subcommand_1 = require("./logs-subcommand");
+const show_key_subcommand_1 = require("./show-key-subcommand");
 const status_subcommand_1 = require("./status-subcommand");
 const up_subcommand_1 = require("./up-subcommand");
 const update_subcommand_1 = require("./update-subcommand");
@@ -40,6 +42,8 @@ async function handleDockerCommand(args) {
         update: update_subcommand_1.handleUpdate,
         logs: logs_subcommand_1.handleLogs,
         config: config_subcommand_1.handleConfig,
+        'show-key': show_key_subcommand_1.handleShowKey,
+        'finalize-key-rotation': finalize_key_rotation_subcommand_1.handleFinalizeKeyRotation,
         help: async () => (0, help_subcommand_1.showHelp)(),
     };
     if (!command) {

package/dist/commands/docker/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/docker/index.ts"],"names":[],"mappings":";;;AAAA,oDAA6D;AAC7D,2DAAmD;AACnD,uDAA+C;AAC/C,uDAA6C;AAC7C,uDAA+C;AAC/C,2DAAmD;AACnD,mDAA2C;AAC3C,2DAAmD;AAEnD,SAAS,uBAAuB,CAAC,IAAc;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,IAAA,6BAAa,EAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE;QAChD,UAAU,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;KACvC,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1F,CAAC;AAEM,KAAK,UAAU,mBAAmB,CAAC,IAAc;IACtD,MAAM,cAAc,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAErD,IAAI,IAAA,0BAAU,EAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,IAAA,0BAAQ,GAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,eAAe,GAAyD;QAC5E,EAAE,EAAE,wBAAQ;QACZ,IAAI,EAAE,4BAAU;QAChB,MAAM,EAAE,gCAAY;QACpB,MAAM,EAAE,gCAAY;QACpB,IAAI,EAAE,4BAAU;QAChB,MAAM,EAAE,gCAAY;QACpB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAA,0BAAQ,GAAE;KAC7B,CAAC;IAEF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAA,0BAAQ,GAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAA,0BAAQ,GAAE,CAAC;QACjB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAhCD,kDAgCC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/docker/index.ts"],"names":[],"mappings":";;;AAAA,oDAA6D;AAC7D,2DAAmD;AACnD,uDAA+C;AAC/C,yFAA+E;AAC/E,uDAA6C;AAC7C,uDAA+C;AAC/C,+DAAsD;AACtD,2DAAmD;AACnD,mDAA2C;AAC3C,2DAAmD;AAEnD,SAAS,uBAAuB,CAAC,IAAc;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,IAAA,6BAAa,EAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE;QAChD,UAAU,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;KACvC,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1F,CAAC;AAEM,KAAK,UAAU,mBAAmB,CAAC,IAAc;IACtD,MAAM,cAAc,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAErD,IAAI,IAAA,0BAAU,EAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,IAAA,0BAAQ,GAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,eAAe,GAAyD;QAC5E,EAAE,EAAE,wBAAQ;QACZ,IAAI,EAAE,4BAAU;QAChB,MAAM,EAAE,gCAAY;QACpB,MAAM,EAAE,gCAAY;QACpB,IAAI,EAAE,4BAAU;QAChB,MAAM,EAAE,gCAAY;QACpB,UAAU,EAAE,mCAAa;QACzB,uBAAuB,EAAE,4DAAyB;QAClD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAA,0BAAQ,GAAE;KAC7B,CAAC;IAEF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAA,0BAAQ,GAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAA,0BAAQ,GAAE,CAAC;QACjB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAlCD,kDAkCC"}

package/dist/commands/docker/show-key-subcommand.d.ts

@@ -0,0 +1,2 @@
+export declare function handleShowKey(args: string[]): Promise<void>;
+//# sourceMappingURL=show-key-subcommand.d.ts.map

package/dist/commands/docker/show-key-subcommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"show-key-subcommand.d.ts","sourceRoot":"","sources":["../../../src/commands/docker/show-key-subcommand.ts"],"names":[],"mappings":"AAeA,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAiEjE"}

package/dist/commands/docker/show-key-subcommand.js

@@ -0,0 +1,96 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleShowKey = void 0;
+const fs = __importStar(require("fs"));
+const docker_1 = require("../../docker");
+const docker_key_rotation_1 = require("../../docker/docker-key-rotation");
+const ui_1 = require("../../utils/ui");
+const options_1 = require("./options");
+const KNOWN_FLAGS = ['--host', '--full', '--container-scope', '--banner-only'];
+function shouldReadContainerVolume(args) {
+    return args.includes('--container-scope') || fs.existsSync('/.dockerenv');
+}
+async function handleShowKey(args) {
+    const bannerOnly = args.includes('--banner-only');
+    if (!bannerOnly) {
+        await (0, ui_1.initUI)();
+    }
+    const parsed = (0, options_1.parseDockerTarget)(args, KNOWN_FLAGS);
+    const remainingArgs = parsed.remainingArgs.filter((arg) => arg !== '--full' && arg !== '--container-scope' && arg !== '--banner-only');
+    const errors = [
+        ...parsed.errors,
+        ...(0, options_1.collectUnexpectedDockerArgs)(remainingArgs, {
+            knownFlags: [],
+            maxPositionals: 0,
+        }),
+    ];
+    if (errors.length > 0) {
+        console.error((0, ui_1.box)((0, ui_1.fail)(errors.join('\n')), { title: 'Docker', padding: 1 }));
+        process.exitCode = 1;
+        return;
+    }
+    const full = args.includes('--full');
+    if (!shouldReadContainerVolume(args)) {
+        try {
+            const output = new docker_1.DockerExecutor().showKey({ host: parsed.host }, full);
+            if (output.trim()) {
+                console.log(output.trim());
+            }
+        }
+        catch (error) {
+            console.error((0, ui_1.box)((0, ui_1.fail)(error instanceof Error ? error.message : String(error)), {
+                title: 'Docker',
+                padding: 1,
+            }));
+            process.exitCode = 1;
+        }
+        return;
+    }
+    const status = (0, docker_key_rotation_1.getDockerKeyRotationStatus)();
+    if (bannerOnly) {
+        const banner = (0, docker_key_rotation_1.renderDockerKeyRotationBanner)(status);
+        if (banner) {
+            console.log(banner);
+        }
+        return;
+    }
+    const displayKey = full ? status.apiKey : status.maskedApiKey;
+    console.log((0, ui_1.header)('Docker CLIProxy API Key'));
+    console.log('');
+    console.log((0, ui_1.info)(`API key: ${displayKey ?? '(not configured)'}`));
+    if (status.legacyGraceActive && status.legacyGrace) {
+        console.log((0, ui_1.info)(`Legacy key: ${status.legacyGrace.legacyKey}`));
+        console.log((0, ui_1.info)(`Legacy key expires: ${status.legacyGrace.expiresAt}`));
+    }
+    else {
+        console.log((0, ui_1.info)('Legacy key grace: inactive'));
+    }
+    if (status.stateCorrupted) {
+        console.log((0, ui_1.info)(`State marker was unreadable and will be recreated: ${status.statePath}`));
+    }
+}
+exports.handleShowKey = handleShowKey;
+//# sourceMappingURL=show-key-subcommand.js.map

package/dist/commands/docker/show-key-subcommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"show-key-subcommand.js","sourceRoot":"","sources":["../../../src/commands/docker/show-key-subcommand.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,yCAA8C;AAC9C,0EAG0C;AAC1C,uCAAiE;AACjE,uCAA2E;AAE3E,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,mBAAmB,EAAE,eAAe,CAAU,CAAC;AAExF,SAAS,yBAAyB,CAAC,IAAc;IAC/C,OAAO,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAC5E,CAAC;AAEM,KAAK,UAAU,aAAa,CAAC,IAAc;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAA,WAAM,GAAE,CAAC;IACjB,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,2BAAiB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC,MAAM,CAC/C,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,mBAAmB,IAAI,GAAG,KAAK,eAAe,CACpF,CAAC;IACF,MAAM,MAAM,GAAG;QACb,GAAG,MAAM,CAAC,MAAM;QAChB,GAAG,IAAA,qCAA2B,EAAC,aAAa,EAAE;YAC5C,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,CAAC;SAClB,CAAC;KACH,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,IAAA,QAAG,EAAC,IAAA,SAAI,EAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,uBAAc,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;YACzE,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,IAAA,QAAG,EAAC,IAAA,SAAI,EAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE;gBAChE,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,CAAC;aACX,CAAC,CACH,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,gDAA0B,GAAE,CAAC;IAC5C,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,IAAA,mDAA6B,EAAC,MAAM,CAAC,CAAC;QACrD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,IAAA,WAAM,EAAC,yBAAyB,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,YAAY,UAAU,IAAI,kBAAkB,EAAE,CAAC,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,eAAe,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,uBAAuB,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC3E,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,4BAA4B,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,sDAAsD,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAjED,sCAiEC"}

package/dist/commands/docker/up-subcommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"up-subcommand.d.ts","sourceRoot":"","sources":["../../../src/commands/docker/up-subcommand.ts"],"names":[],"mappings":"AAUA,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA6C5D"}
+{"version":3,"file":"up-subcommand.d.ts","sourceRoot":"","sources":["../../../src/commands/docker/up-subcommand.ts"],"names":[],"mappings":"AAUA,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAiD5D"}

package/dist/commands/docker/up-subcommand.js

@@ -26,6 +26,10 @@ async function handleUp(args) {
     console.log((0, ui_1.info)(`Starting integrated Docker stack${parsed.host ? ` on ${parsed.host}` : ''}...`));
     try {
         await executor.up({ host: parsed.host, port, proxyPort });
+        const rotationBanner = executor.getKeyRotationBanner({ host: parsed.host });
+        if (rotationBanner) {
+            console.error(rotationBanner);
+        }
         console.log((0, ui_1.ok)(`Docker stack is running${parsed.host ? ` on ${parsed.host}` : ' locally'}.`));
         console.log((0, ui_1.info)(`Dashboard port: ${port}`));
         console.log((0, ui_1.info)(`CLIProxy port: ${proxyPort}`));

package/dist/commands/docker/up-subcommand.js.map

@@ -1 +1 @@
-{"version":3,"file":"up-subcommand.js","sourceRoot":"","sources":["../../../src/commands/docker/up-subcommand.ts"],"names":[],"mappings":";;;AAAA,yCAIsB;AACtB,uCAA6D;AAC7D,uCAA8E;AAE9E,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,cAAc,CAAU,CAAC;AAE3D,KAAK,UAAU,QAAQ,CAAC,IAAc;IAC3C,MAAM,IAAA,WAAM,GAAE,CAAC;IACf,MAAM,MAAM,GAAG,IAAA,8BAAoB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG;QACb,GAAG,MAAM,CAAC,MAAM;QAChB,GAAG,IAAA,qCAA2B,EAAC,MAAM,CAAC,aAAa,EAAE;YACnD,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,CAAC;SAClB,CAAC;KACH,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,IAAA,QAAG,EAAC,IAAA,SAAI,EAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,uBAAc,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,sCAA6B,CAAC;IAC1D,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,kCAAyB,CAAC;IAEhE,OAAO,CAAC,GAAG,CACT,IAAA,SAAI,EAAC,mCAAmC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CACtF,CAAC;IACF,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,IAAA,OAAE,EAAC,0BAA0B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;QAC9F,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,kBAAkB,SAAS,EAAE,CAAC,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,IAAA,SAAI,EACF,6KAA6K,CAC9K,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CACX,IAAA,QAAG,EAAC,IAAA,SAAI,EAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE;YAChE,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,CAAC;SACX,CAAC,CACH,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AA7CD,4BA6CC"}
+{"version":3,"file":"up-subcommand.js","sourceRoot":"","sources":["../../../src/commands/docker/up-subcommand.ts"],"names":[],"mappings":";;;AAAA,yCAIsB;AACtB,uCAA6D;AAC7D,uCAA8E;AAE9E,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,cAAc,CAAU,CAAC;AAE3D,KAAK,UAAU,QAAQ,CAAC,IAAc;IAC3C,MAAM,IAAA,WAAM,GAAE,CAAC;IACf,MAAM,MAAM,GAAG,IAAA,8BAAoB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG;QACb,GAAG,MAAM,CAAC,MAAM;QAChB,GAAG,IAAA,qCAA2B,EAAC,MAAM,CAAC,aAAa,EAAE;YACnD,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,CAAC;SAClB,CAAC;KACH,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,IAAA,QAAG,EAAC,IAAA,SAAI,EAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,uBAAc,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,sCAA6B,CAAC;IAC1D,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,kCAAyB,CAAC;IAEhE,OAAO,CAAC,GAAG,CACT,IAAA,SAAI,EAAC,mCAAmC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CACtF,CAAC;IACF,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1D,MAAM,cAAc,GAAG,QAAQ,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5E,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAA,OAAE,EAAC,0BAA0B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;QAC9F,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,kBAAkB,SAAS,EAAE,CAAC,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,IAAA,SAAI,EACF,6KAA6K,CAC9K,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CACX,IAAA,QAAG,EAAC,IAAA,SAAI,EAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE;YAChE,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,CAAC;SACX,CAAC,CACH,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAjDD,4BAiDC"}

package/dist/commands/persist-command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"persist-command.d.ts","sourceRoot":"","sources":["../../src/commands/persist-command.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAstBH,mCAAmC;AACnC,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAqNxE"}
+{"version":3,"file":"persist-command.d.ts","sourceRoot":"","sources":["../../src/commands/persist-command.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAm0BH,mCAAmC;AACnC,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAkOxE"}

package/dist/commands/persist-command.js

@@ -46,6 +46,7 @@ const profile_detector_1 = __importDefault(require("../auth/profile-detector"));
 const claude_config_path_1 = require("../utils/claude-config-path");
 const arg_extractor_1 = require("./arg-extractor");
 const claude_extension_setup_1 = require("../shared/claude-extension-setup");
+const stale_codex_translator_settings_1 = require("../shared/stale-codex-translator-settings");
 const PERSIST_KNOWN_FLAGS = [
     '--yes',
     '-y',
@@ -62,6 +63,7 @@ const PERSIST_LOCK_STALE_MS = 10000;
 const PERSIST_LOCK_RETRIES = 5;
 const PERSIST_LOCK_RETRY_MIN_MS = 100;
 const PERSIST_LOCK_RETRY_MAX_MS = 500;
+const NATIVE_CODEX_TARGETS = ['ccsxp', 'ccs codex --target codex'];
 function isPermissionMode(value) {
     return VALID_PERMISSION_MODES.includes(value);
 }
@@ -456,6 +458,71 @@ function isSensitiveEnvKey(key) {
         compact.includes('PASSWORD') ||
         compact.includes('CREDENTIAL'));
 }
+function buildPersistReceipt(existingEnv, existingSettings, mergedSettings, resolved, resolvedPermissionMode) {
+    const mergedEnv = typeof mergedSettings.env === 'object' &&
+        mergedSettings.env !== null &&
+        !Array.isArray(mergedSettings.env)
+        ? mergedSettings.env
+        : {};
+    const clearedKeys = resolved.clearEnvKeys.filter((key) => Object.prototype.hasOwnProperty.call(existingEnv, key) && mergedEnv[key] === undefined);
+    const clearedCodexTranslatorUrlKeys = clearedKeys.filter((key) => (0, stale_codex_translator_settings_1.findCodexTranslatorUrlPaths)(existingEnv[key]).length > 0);
+    const writtenKeys = Object.entries(resolved.env)
+        .filter(([key, value]) => existingEnv[key] !== value)
+        .map(([key]) => key)
+        .sort((left, right) => left.localeCompare(right));
+    const unchangedWrittenKeys = Object.entries(resolved.env)
+        .filter(([key, value]) => existingEnv[key] === value)
+        .map(([key]) => key)
+        .sort((left, right) => left.localeCompare(right));
+    const existingPermissions = typeof existingSettings.permissions === 'object' &&
+        existingSettings.permissions !== null &&
+        !Array.isArray(existingSettings.permissions)
+        ? existingSettings.permissions
+        : {};
+    const writtenSettings = resolvedPermissionMode && existingPermissions.defaultMode !== resolvedPermissionMode
+        ? ['permissions.defaultMode']
+        : [];
+    const unchangedSettings = resolvedPermissionMode && existingPermissions.defaultMode === resolvedPermissionMode
+        ? ['permissions.defaultMode']
+        : [];
+    return {
+        clearedKeys,
+        clearedCodexTranslatorUrlKeys,
+        writtenKeys,
+        unchangedWrittenKeys,
+        writtenSettings,
+        unchangedSettings,
+        codexTranslatorUrlPaths: (0, stale_codex_translator_settings_1.findCodexTranslatorUrlPaths)(mergedSettings),
+    };
+}
+function formatKeyList(keys) {
+    return keys.length > 0 ? keys.join(', ') : 'none';
+}
+function printPersistReceipt(receipt) {
+    console.log((0, ui_1.subheader)('Config Receipt'));
+    console.log(`  Settings: ${getClaudeSettingsDisplayPath()}`);
+    console.log(`  Cleared managed keys: ${formatKeyList(receipt.clearedKeys)}`);
+    console.log(`  Written/rewritten managed keys: ${formatKeyList(receipt.writtenKeys)}`);
+    if (receipt.unchangedWrittenKeys.length > 0) {
+        console.log(`  Already current keys: ${formatKeyList(receipt.unchangedWrittenKeys)}`);
+    }
+    if (receipt.writtenSettings.length > 0 || receipt.unchangedSettings.length > 0) {
+        console.log(`  Written/rewritten managed settings: ${formatKeyList(receipt.writtenSettings)}`);
+        if (receipt.unchangedSettings.length > 0) {
+            console.log(`  Already current settings: ${formatKeyList(receipt.unchangedSettings)}`);
+        }
+    }
+    const hadCodexTranslatorCleanup = receipt.clearedCodexTranslatorUrlKeys.length > 0;
+    if (receipt.codexTranslatorUrlPaths.length > 0) {
+        console.log((0, ui_1.warn)(`  Codex translator URL: still found at ${(0, stale_codex_translator_settings_1.formatSettingsPathList)(receipt.codexTranslatorUrlPaths)} (${stale_codex_translator_settings_1.CODEX_TRANSLATOR_URL_MARKER})`));
+    }
+    else {
+        console.log((0, ui_1.ok)('  Codex translator URL: not found'));
+    }
+    if (hadCodexTranslatorCleanup || receipt.codexTranslatorUrlPaths.length > 0) {
+        console.log(`  Native Codex target: ${NATIVE_CODEX_TARGETS.join(' or ')}`);
+    }
+}
 /** Resolve shared Claude settings payload for a profile */
 async function resolveProfileEnvVars(profileName) {
     const setup = await (0, claude_extension_setup_1.resolveClaudeExtensionSetup)(profileName);
@@ -615,7 +682,7 @@ async function showHelp() {
     console.log('');
     console.log((0, ui_1.subheader)('Supported Profile Types'));
     console.log(`  ${(0, ui_1.color)('API profiles', 'command')}      glm, km, custom API profiles`);
-    console.log(`  ${(0, ui_1.color)('CLIProxy', 'command')}          gemini, codex, agy, qwen, kiro, ghcp`);
+    console.log(`  ${(0, ui_1.color)('CLIProxy', 'command')}          gemini, agy, qwen, kiro, ghcp`);
     console.log(`  ${(0, ui_1.color)('Copilot', 'command')}           copilot (requires copilot-api daemon)`);
     console.log(`  ${(0, ui_1.color)('Account profiles', 'command')}  work, personal, client (persists CLAUDE_CONFIG_DIR)`);
     console.log(`  ${(0, ui_1.color)('default', 'command')}           Clears CCS-managed overrides or inherits mapped continuity`);
@@ -631,7 +698,7 @@ async function showHelp() {
     console.log(`  ${(0, ui_1.color)('ccs persist glm --permission-mode acceptEdits', 'command')}`);
     console.log('');
     console.log(`  ${(0, ui_1.dim)('# Persist with auto-approve enabled')}`);
-    console.log(`  ${(0, ui_1.color)('ccs persist codex --dangerously-skip-permissions', 'command')}`);
+    console.log(`  ${(0, ui_1.color)('ccs persist glm --dangerously-skip-permissions', 'command')}`);
     console.log('');
     console.log(`  ${(0, ui_1.dim)('# Persist an account profile for IDE/native Claude use')}`);
     console.log(`  ${(0, ui_1.color)('ccs persist work --yes', 'command')}`);
@@ -650,6 +717,7 @@ async function showHelp() {
     console.log('');
     console.log((0, ui_1.subheader)('Notes'));
     console.log('  [i] CLIProxy profiles require the proxy to be running.');
+    console.log('  [i] Codex CLIProxy profiles are native Codex-only: use ccsxp or ccs codex --target codex.');
     console.log('  [i] Copilot profiles require copilot-api daemon.');
     console.log('  [i] Account/default flows remove stale ANTHROPIC_* overrides before applying new setup.');
     console.log('  [i] For IDE-local settings.json snippets, use: ccs env <profile> --format claude-extension');
@@ -845,6 +913,13 @@ async function handlePersistCommand(args) {
                 };
             }
             await writeClaudeSettings(mergedSettings);
+            const persistedSettings = await readClaudeSettings();
+            const receipt = buildPersistReceipt(existingEnv, existingSettings, persistedSettings, resolved, resolvedPermissionMode);
+            console.log('');
+            console.log((0, ui_1.ok)(`Profile '${parsedArgs.profile}' written to ${getClaudeSettingsDisplayPath()}`));
+            console.log('');
+            printPersistReceipt(receipt);
+            console.log('');
         });
     }
     catch (error) {
@@ -863,9 +938,6 @@ async function handlePersistCommand(args) {
         }
         process.exit(1);
     }
-    console.log('');
-    console.log((0, ui_1.ok)(`Profile '${parsedArgs.profile}' written to ${getClaudeSettingsDisplayPath()}`));
-    console.log('');
     console.log((0, ui_1.info)('Claude Code will now use this profile by default.'));
     console.log((0, ui_1.dim)('    To revert, restore the backup or edit settings.json manually.'));
     console.log('');