@meshxdata/fops 0.1.44 → 0.1.45

package/CHANGELOG.md

@@ -1,3 +1,188 @@
+## [0.1.45] - 2026-03-12
+
+- bump fops to 0.1.44 (8c0ef5d)
+- Mlflow and azure plugin fix (176881f)
+- fix lifecycle (a2cb9e7)
+- callback url for localhost (821fb94)
+- disable 4 scaffolding plugin by default. (bfb2b76)
+- jaccard improvements (b7494a0)
+- refactor azure plugin (68dfef4)
+- refactor azure plugin (b24a008)
+- fix trino catalog missing (4928a55)
+- v36 bump and changelog generation on openai (37a0440)
+- v36 bump and changelog generation on openai (a3b02d9)
+- bump (a990058)
+- status bar fix and new plugin for ttyd (27dde1e)
+- file demo and tray (1a3e704)
+- electron app (59ad0bb)
+- compose and fops file plugin (1cf0e81)
+- bump (346ffc1)
+- localhost replaced by 127.0.0.1 (82b9f30)
+- .29 (587b0e1)
+- improve up down and bootstrap script (b79ebaf)
+- checksum (22c8086)
+- checksum (96b434f)
+- checksum (15ed3c0)
+- checksum (8a6543a)
+- bump embed trino linksg (8440504)
+- bump data (765ffd9)
+- bump (cb8b232)
+- broken tests (c532229)
+- release 0.1.18, preflight checks (d902249)
+- fix compute display bug (d10f5d9)
+- cleanup packer files (6330f18)
+- plan mode (cb36a8a)
+- bump to 0.1.16 - agent ui (41ac1a2)
+- bump to 0.1.15 - agent ui (4ebe2e1)
+- bump to 0.1.14 (6c3a7fa)
+- bump to 0.1.13 (8db570f)
+- release 0.1.12 (c1c79e5)
+- bump (11aa3b0)
+- git keep and bump tui (be1678e)
+- skills, index, rrf, compacted context (100k > 10k) (7b2fffd)
+- cloudflare and token consumption, graphs indexing (0ad9eec)
+- bump storage default (22c83ba)
+- storage fix (68a22a0)
+- skills update (7f56500)
+- v9 bump (3864446)
+- bump (c95eedc)
+- rrf (dbf8c95)
+- feat: warning when running predictions (95e8c52)
+- feat: support for local predictions (45cf26b)
+- feat: wip support for predictions + mlflow (3457052)
+- add Reciprocal Rank Fusion (RRF) to knowledge and skill retrieval (61549bc)
+- validate CSV headers in compute_run readiness check (a8c7a43)
+- fix corrupted Iceberg metadata: probe tables + force cleanup on re-apply (50578af)
+- enforce: never use foundation_apply to fix broken products (2e049bf)
+- update SKILL.md with complete tool reference for knowledge retrieval (30b1924)
+- add storage read, input DP table probe, and compute_run improvements (34e6c4c)
+- skills update (1220385)
+- skills update (bb66958)
+- some tui improvement andd tools apply overwrite (e90c35c)
+- skills update (e9227a1)
+- skills update (669c4b3)
+- fix plugin pre-flight checks (f741743)
+- increase agent context (6479aaa)
+- skills and init sql fixes (5fce35e)
+- checksum (3518b56)
+- penging job limit (a139861)
+- checksum (575d28c)
+- bump (92049ba)
+- fix bug per tab status (0a33657)
+- fix bug per tab status (50457c6)
+- checksumming (0ad842e)
+- shot af mardkwon overlapping (51f63b9)
+- add spark dockerfile for multiarch builds (95abbd1)
+- fix plugin initialization (16b9782)
+- split index.js (50902a2)
+- cloudflare cidr (cc4e021)
+- cloduflare restrictions (2f6ba2d)
+- sequential start (86b496e)
+- sequential start (4930fe1)
+- sequential start (353f014)
+- qa tests (2dc6a1a)
+- bump sha for .85 (dc2edfe)
+- preserve env on sudo (7831227)
+- bump sha for .84 (6c052f9)
+- non interactive for azure vms (0aa8a2f)
+- keep .env if present (d072450)
+- bump (7a8e732)
+- ensure opa is on compose if not set (f4a5228)
+- checksum bump (a2ccc20)
+- netrc defensive checks (a0b0ccc)
+- netrc defensive checks (ae37403)
+- checksum (ec45d11)
+- update sync and fix up (7f9af72)
+- expand test for azure and add new per app tag support (388a168)
+- checksum on update (44005fc)
+- cleanup for later (15e5313)
+- cleanup for later (11c9597)
+- switch branch feature (822fecc)
+- add pull (d1c19ab)
+- Bump hono from 4.11.9 to 4.12.0 in /operator-cli (ad25144)
+- tests (f180a9a)
+- cleanup (39c49a3)
+- registry (7b7126a)
+- reconcile kafka (832d0db)
+- gh login bug (025886c)
+- cleanup (bb96cab)
+- strip envs from process (2421180)
+- force use of gh creds not tokens in envs var (fff7787)
+- resolve import between npm installs and npm link (79522e1)
+- fix gh scope and azure states (afd846c)
+- refactoring (da50352)
+- split fops repo (d447638)
+- aks (b791f8f)
+- refactor azure (67d3bad)
+- wildcard (391f023)
+- azure plugin (c074074)
+- zap (d7e6e7f)
+- fix knock (cf89c05)
+- azure (4adec98)
+- Bump tar from 7.5.7 to 7.5.9 in /operator-cli (e41e98e)
+- azure stack index.js split (de12272)
+- Bump ajv from 8.17.1 to 8.18.0 in /operator-cli (76da21f)
+- packer (9665fbc)
+- remove stack api (db0fd4d)
+- packer cleanup (fe1bf14)
+- force refresh token (3a3d7e2)
+- provision shell (2ad505f)
+- azure vm management (91dcb31)
+- azure specific (2b0cca8)
+- azure packer (12175b8)
+- init hashed pwd (db8523c)
+- packer (5b5c7c4)
+- doctor for azure vm (ed524fa)
+- packer and 1pwd (c6d053e)
+- split big index.js (dc85a1b)
+- kafka volume update (21815ec)
+- fix openai azure tools confirmation and flow (0118cd1)
+- nighly fixx, test fix (5e0d04f)
+- open ai training (cdc494a)
+- openai integration in azure (1ca1475)
+- ci (672cea9)
+- refresh ghcr creds (4220c48)
+- cleaned up version (1a0074f)
+- traefik on ghcr and templates (8e31a05)
+- apply fcl (e78911f)
+- demo landscape (dd205fe)
+- smarter login and schema (1af514f)
+- no down before up unless something broke (56b1132)
+- dai, reconcile failed containers (12907fa)
+- reconcile dead container (7da75e4)
+- defensive around storage buckets dir (b98871d)
+- defensive around storage buckets dir (e86e132)
+- gear in for multiarch (bf3fa3e)
+- up autofix (99c7f89)
+- autofix stale containers on up (43c7d0f)
+- shared sessions fix (5de1359)
+- share sessions between ui and tui (8321391)
+- fix chat view display details (e263996)
+- fix chat view display details (9babdda)
+- tui up fixes (86e9f17)
+- fix commands init (442538b)
+- enable k3s profile (b2dcfc8)
+- test up till job creation (656d388)
+- tui fixes (0599779)
+- cleanup (27731f0)
+- train (90bf559)
+- training (f809bf6)
+- training (ba2b836)
+- training (6fc5267)
+- training (4af8ac9)
+- fix build script (bd82836)
+- infra test (5b79815)
+- infra test (3a0ac05)
+- infra test (e5c67b5)
+- tests (ae7b621)
+- tests (c09ae6a)
+- update tui (4784153)
+- training (0a5a330)
+- tui (df4dd4a)
+- pkg builds (4dc9993)
+- also source env for creds (9a17d8f)
+- fcl support (e8a5743)
+
 # Changelog
 
 All notable changes to @meshxdata/fops (Foundation Operator CLI) are documented here.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meshxdata/fops",
-  "version": "0.1.44",
+  "version": "0.1.45",
   "description": "CLI to install and manage data mesh platforms",
   "keywords": [
     "fops",

package/src/commands/lifecycle.js

@@ -159,6 +159,26 @@ export function registerLifecycleCommands(program, registry) {
       await dockerCompose(root, args);
     });
 
+  program
+    .command("restart")
+    .description("Restart Foundation services (all or specific)")
+    .argument("[services...]", "Services to restart (e.g. backend, watcher)")
+    .action(async (services) => {
+      const root = requireRoot(program);
+      const serviceNames = (services || []).filter(Boolean).flatMap((s) => {
+        const sub = COMPONENT_SUBMODULES[s];
+        if (sub) return sub.restart;
+        return [resolveServiceName(root, s)];
+      });
+      if (serviceNames.length) {
+        console.log(chalk.cyan(`  Restarting ${serviceNames.join(", ")}...`));
+        await dockerCompose(root, ["restart", ...serviceNames]);
+      } else {
+        console.log(chalk.cyan("  Restarting all services..."));
+        await dockerCompose(root, ["restart"]);
+      }
+    });
+
   program
     .command("bake")
     .description("Build and push multi-arch base container images (node, etc.)")

package/src/plugins/bundled/fops-plugin-azure/lib/azure-ops.js

@@ -2136,6 +2136,35 @@ export async function azureLogs(service, opts = {}) {
   ], { stdio: "inherit", reject: false });
 }
 
+// ── restart ─────────────────────────────────────────────────────────────────
+
+export async function azureRestart(service, opts = {}) {
+  const state = requireVmState(opts.vmName);
+  const ip = state.publicIp;
+  if (!ip) { console.error(chalk.red("\n  No IP. Is the VM running?\n")); process.exit(1); }
+
+  await knockForVm(state);
+
+  const { execa } = await import("execa");
+  const adminUser = DEFAULTS.adminUser;
+
+  const svcArg = service ? (service.startsWith("foundation-") ? service : `foundation-${service}`) : "";
+  const label = svcArg || "all services";
+  console.log(chalk.cyan(`  Restarting ${label} on ${state.vmName || ip}...`));
+
+  const { exitCode } = await execa("ssh", [
+    "-o", "StrictHostKeyChecking=no",
+    `${adminUser}@${ip}`,
+    `cd /opt/foundation-compose && sudo docker compose restart ${svcArg}`,
+  ], { stdio: "inherit", reject: false });
+
+  if (exitCode === 0) {
+    console.log(chalk.green(`  ✓ ${label} restarted`));
+  } else {
+    console.error(chalk.red(`  ✗ restart failed (exit ${exitCode})`));
+  }
+}
+
 // ── grant-admin ─────────────────────────────────────────────────────────────
 
 export async function azureGrantAdmin(opts = {}) {

package/src/plugins/bundled/fops-plugin-azure/lib/azure-results.js

@@ -235,6 +235,79 @@ export async function resultsPush(target, qaResult, opts = {}) {
   return { blob, account: store.account };
 }
 
+// ── Remove ──────────────────────────────────────────────────────────────────
+
+export async function resultsRemove(target, opts = {}) {
+  const execa = await lazyExeca();
+  await ensureAzCli(execa);
+  await ensureAzAuth(execa, { subscription: opts.subscription });
+
+  // 1. Clear local state
+  const state = readState();
+  const vm = state.azure?.vms?.[target];
+  if (vm?.qa) {
+    delete vm.qa;
+    saveState(state);
+    console.log(OK(`  ✓ Local QA state cleared for "${target}"`));
+  } else {
+    console.log(DIM(`  No local QA state found for "${target}"`));
+  }
+
+  // 2. Delete blobs from storage
+  const store = getResultsConfig();
+  if (!store?.account) {
+    console.log(DIM("  No results storage configured — skipping blob deletion."));
+    return;
+  }
+
+  const prefix = `${BLOB_PREFIX}/${target}/`;
+  let blobs;
+  try {
+    const { stdout } = await execa("az", [
+      "storage", "blob", "list",
+      "--account-name", store.account,
+      "--container-name", CONTAINER_NAME,
+      "--prefix", prefix,
+      "--query", "[].name",
+      "--output", "json",
+      ...AUTH,
+      ...subArgs(opts.subscription),
+    ], { timeout: 30000 });
+    blobs = JSON.parse(stdout || "[]");
+  } catch (err) {
+    console.log(WARN(`  ⚠ Could not list blobs: ${err.message}`));
+    return;
+  }
+
+  if (blobs.length === 0) {
+    console.log(DIM(`  No stored results found in blob storage for "${target}"`));
+    return;
+  }
+
+  console.log(chalk.cyan(`\n  Deleting ${blobs.length} result(s) from ${store.account}/${CONTAINER_NAME}/${prefix}…\n`));
+
+  let deleted = 0;
+  for (const blobName of blobs) {
+    try {
+      await execa("az", [
+        "storage", "blob", "delete",
+        "--account-name", store.account,
+        "--container-name", CONTAINER_NAME,
+        "--name", blobName,
+        ...AUTH,
+        "--output", "none",
+        ...subArgs(opts.subscription),
+      ], { timeout: 15000 });
+      console.log(`  ${DIM(`✗ ${blobName}`)}`);
+      deleted++;
+    } catch (err) {
+      console.log(WARN(`  ⚠ Failed to delete ${blobName}: ${err.message}`));
+    }
+  }
+
+  console.log(OK(`\n  ✓ Removed ${deleted}/${blobs.length} result(s) for "${target}"\n`));
+}
+
 // ── List ────────────────────────────────────────────────────────────────────
 
 export async function resultsList(opts = {}) {

package/src/plugins/bundled/fops-plugin-azure/lib/azure.js

@@ -48,7 +48,7 @@ export {
 export {
   azureStatus, azureTrinoStatus, azureSsh, azureSshWhitelistMe, azurePortForward, azureSshAdminAdd, azureVmCheck, azureAgent, azureOpenAiDebugVm,
   azureDeploy, azurePull, azureDeployVersion, azureRunUp, azureConfig, azureConfigVersions, azureUpdate,
-  azureLogs, azureGrantAdmin, azureContext,
+  azureLogs, azureRestart, azureGrantAdmin, azureContext,
   azureList, azureApply,
   azureKnock, azureKnockClose, azureKnockDisable, azureKnockVerify, azureKnockFix,
 } from "./azure-ops.js";

package/src/plugins/bundled/fops-plugin-azure/lib/commands/test-cmds.js

@@ -56,6 +56,39 @@ export function registerTestCommands(azure) {
       });
       let { bearerToken, qaUser, qaPass, useTokenMode } = auth;
 
+      // Fetch CF Access service token (needed to bypass Cloudflare Access)
+      // Priority: local .env file → process.env → remote VM .env
+      let cfAccessClientId = "";
+      let cfAccessClientSecret = "";
+      const localEnvPath = path.join(root, ".env");
+      try {
+        const localEnv = await fsp.readFile(localEnvPath, "utf8");
+        for (const line of localEnv.split("\n")) {
+          const m = line.match(/^CF_ACCESS_CLIENT_(ID|SECRET)=(.+)$/);
+          if (m?.[1] === "ID") cfAccessClientId = m[2].trim().replace(/^["']|["']$/g, "");
+          if (m?.[1] === "SECRET") cfAccessClientSecret = m[2].trim().replace(/^["']|["']$/g, "");
+        }
+      } catch { /* no local .env */ }
+      if (!cfAccessClientId) {
+        cfAccessClientId = process.env.CF_ACCESS_CLIENT_ID || "";
+        cfAccessClientSecret = process.env.CF_ACCESS_CLIENT_SECRET || "";
+      }
+      if (!cfAccessClientId && ip) {
+        try {
+          const sshUser = state?.adminUser || "azureuser";
+          const { stdout: cfOut } = await sshCmd(execa, ip, sshUser,
+            "grep -E '^CF_ACCESS_CLIENT_(ID|SECRET)=' /opt/foundation-compose/.env",
+            10_000,
+          );
+          for (const line of (cfOut || "").split("\n")) {
+            const m = line.match(/^CF_ACCESS_CLIENT_(ID|SECRET)=(.+)$/);
+            if (m?.[1] === "ID") cfAccessClientId = m[2].trim();
+            if (m?.[1] === "SECRET") cfAccessClientSecret = m[2].trim();
+          }
+          if (cfAccessClientId) console.log(chalk.green("  ✓ Got CF Access service token from VM"));
+        } catch { /* optional — tests still run without it */ }
+      }
+
       if (!bearerToken && !qaUser) {
         console.error(chalk.red("\n  No credentials found (local or remote)."));
         console.error(chalk.dim("  Set BEARER_TOKEN or QA_USERNAME/QA_PASSWORD, or ensure the VM has Auth0 configured in .env\n"));
@@ -94,6 +127,10 @@ export function registerTestCommands(azure) {
         envContent = setVar(envContent, "BEARER_TOKEN", bearerToken);
         envContent = setVar(envContent, "TOKEN_AUTH0", bearerToken);
       }
+      if (cfAccessClientId) {
+        envContent = setVar(envContent, "CF_ACCESS_CLIENT_ID", cfAccessClientId);
+        envContent = setVar(envContent, "CF_ACCESS_CLIENT_SECRET", cfAccessClientSecret);
+      }
 
       await fsp.writeFile(envPath, envContent);
       console.log(chalk.green(`  ✓ Configured QA .env → ${apiUrl}`));
@@ -155,6 +192,10 @@ export function registerTestCommands(azure) {
         testEnv.BEARER_TOKEN = bearerToken;
         testEnv.TOKEN_AUTH0 = bearerToken;
       }
+      if (cfAccessClientId) {
+        testEnv.CF_ACCESS_CLIENT_ID = cfAccessClientId;
+        testEnv.CF_ACCESS_CLIENT_SECRET = cfAccessClientSecret;
+      }
 
       const startMs = Date.now();
       const proc = execa(
@@ -245,6 +286,15 @@ export function registerTestCommands(azure) {
       await resultsCompare({ target, last: parseInt(opts.last) });
     });
 
+  test
+    .command("rm <target>")
+    .description("Remove all stored test results for a VM (local state + blob storage)")
+    .option("--profile <subscription>", "Azure subscription name or ID")
+    .action(async (target, opts) => {
+      const { resultsRemove } = await import("../azure-results.js");
+      await resultsRemove(target, { subscription: opts.profile });
+    });
+
   test
     .command("push [target]")
     .description("Push local QA results to blob storage (default: all VMs with results)")

package/src/plugins/bundled/fops-plugin-azure/lib/commands/vm-cmds.js

@@ -875,6 +875,16 @@ export function registerVmCommands(azure, api, registry) {
       await azureLogs(service, { vmName: opts.vmName || name });
     });
 
+  // ── restart ─────────────────────────────────────────────────────────────────
+  azure
+    .command("restart [name] [service]")
+    .description("Restart Foundation services on the VM (all or specific)")
+    .option("--vm-name <name>", "Target VM (default: active VM)")
+    .action(async (name, service, opts) => {
+      const { azureRestart } = await import("../azure.js");
+      await azureRestart(service, { vmName: opts.vmName || name });
+    });
+
   // ── context ───────────────────────────────────────────────────────────────
   azure
     .command("context [name]")