@omnitron-dev/omnitron 0.1.3 → 0.3.0

package/dist/commands/service.js

@@ -0,0 +1,370 @@
+/**
+ * omnitron service install|uninstall|status — OS-level daemon supervision.
+ *
+ * Closes the last supervision gap: omnitron supervises apps and infra, but
+ * nothing supervised the daemon itself — a daemon crash (disk-full, load
+ * spike, dockerd hiccup) left every managed app down until a human ran
+ * `omnitron up`. This registers the daemon with the OS supervisor so it is
+ * resurrected automatically:
+ *
+ *   - macOS: LaunchAgent (~/Library/LaunchAgents/dev.omnitron.daemon.plist)
+ *   - Linux: systemd user unit (~/.config/systemd/user/omnitron-daemon.service)
+ *
+ * Layering stays intact — the OS owns the daemon lifecycle, the daemon owns
+ * app/stack lifecycle (boot-time stack resume via project enabledStacks).
+ *
+ * Restart semantics are crash-only (`KeepAlive={SuccessfulExit:false}` /
+ * `Restart=on-failure`): a graceful `omnitron down` exits 0 and STAYS down;
+ * a crash or SIGKILL exits abnormally and is respawned. This keeps the
+ * existing up/down semantics working unchanged with the service installed.
+ *
+ * The supervisor execs the same dist/daemon/daemon-entry.js that `omnitron
+ * up` forks — one daemon codepath, two launchers. daemon-entry carries a
+ * single-instance pid guard so the two launchers can never double-bind.
+ */
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { execFileSync } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import { log } from '@xec-sh/kit';
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+import { LAUNCHD_LABEL, SYSTEMD_UNIT, unitPathFor, renderLaunchdPlist, renderSystemdUnit, decideScope, } from './service-units.js';
+/** Collect the facts the renderers need from this process. */
+function unitInputs(scope) {
+    return {
+        scope,
+        execPath: process.execPath,
+        entryPath: daemonEntryPath(),
+        workdir: serviceWorkdir(),
+        path: servicePath(),
+        stderrLog: path.join(logsDir(), process.platform === 'darwin' ? 'launchd.err.log' : 'systemd.err.log'),
+        ...(scope === 'system'
+            ? { identity: { user: os.userInfo().username, home: os.homedir() } }
+            : {}),
+    };
+}
+/**
+ * Whether this account's user services survive its last session ending.
+ *
+ * `loginctl enable-linger` is what turns that on, and the previous version of
+ * `serviceInstall` printed it as a tip. A tip changes nothing; this reads the
+ * actual state so a decision can be made on it.
+ */
+function lingerEnabled() {
+    if (process.platform !== 'linux')
+        return false;
+    try {
+        const out = execFileSync('loginctl', ['show-user', os.userInfo().username, '-p', 'Linger'], {
+            encoding: 'utf8',
+        });
+        return out.trim() === 'Linger=yes';
+    }
+    catch {
+        // No loginctl, or no such user session — either way, not proven true.
+        return false;
+    }
+}
+function launchdPlistPath(scope = 'user') {
+    return unitPathFor('darwin', scope, os.homedir());
+}
+function systemdUnitPath(scope = 'user') {
+    return unitPathFor('linux', scope, os.homedir());
+}
+/** True when the current platform's service definition file exists. */
+export function isServiceInstalled() {
+    if (process.platform !== 'darwin' && process.platform !== 'linux')
+        return false;
+    // Either scope counts. A machine with a system unit and a user that never
+    // installed one still has a supervised daemon, and the callers of this —
+    // `omnitron up`, the uninstall path — need to know that.
+    return ['system', 'user'].some((scope) => fs.existsSync(unitPathFor(process.platform, scope, os.homedir())));
+}
+/**
+ * The daemon entry the supervisor execs — same file `omnitron up` forks
+ * (dist/commands → ../daemon/daemon-entry.js), so both launchers run the
+ * identical daemon.
+ */
+function daemonEntryPath() {
+    return path.resolve(__dirname, '../daemon/daemon-entry.js');
+}
+/**
+ * Working directory for the supervised daemon. `path.resolve(__dirname,
+ * '../..')` = the omnitron package root. Two properties matter:
+ *   1. No omnitron.config.ts lives there, so daemon-entry's autoDetect()
+ *      cannot re-register the directory as a phantom project (the daemon
+ *      resolves its project from the registry instead).
+ *   2. `--import tsx/esm` resolves from here upward through node_modules —
+ *      needed because project configs are TypeScript.
+ *
+ * The second point used to end "which the package's install tree provides",
+ * and that was an assertion rather than a fact. `tsx` was a devDependency,
+ * which npm does not install for a published package, so on a node prepared
+ * from the registry the tree provided nothing. Measured there:
+ * `import('tsx')` → ERR_MODULE_NOT_FOUND. The unit this function's callers
+ * write would have failed at install and at every boot after it, with an
+ * ExecStart naming a loader that is not there.
+ *
+ * It is a runtime dependency now. Nothing in this file could have caught
+ * that: `tsx` is never imported, only named in an argv, so the scanners that
+ * read import specifiers cannot see it — which is why
+ * `a-dependency-the-package-does-not-declare.test.ts` checks `--import`
+ * flags separately.
+ */
+function serviceWorkdir() {
+    return path.resolve(__dirname, '../..');
+}
+/**
+ * PATH for the supervised daemon. launchd/systemd give services a minimal
+ * PATH (/usr/bin:/bin) — but the daemon shells out to `docker` for infra
+ * provisioning, so resolve the directories of node and docker at install
+ * time and bake them in.
+ */
+function servicePath() {
+    const dirs = new Set();
+    dirs.add(path.dirname(process.execPath));
+    try {
+        const docker = execFileSync('/bin/sh', ['-lc', 'command -v docker'], { encoding: 'utf8' }).trim();
+        if (docker)
+            dirs.add(path.dirname(docker));
+    }
+    catch {
+        // docker not found now — the standard locations below still cover
+        // a later install.
+    }
+    for (const d of ['/opt/homebrew/bin', '/usr/local/bin', '/usr/bin', '/bin', '/usr/sbin', '/sbin']) {
+        dirs.add(d);
+    }
+    return Array.from(dirs).join(':');
+}
+function logsDir() {
+    const dir = path.join(os.homedir(), '.omnitron', 'logs');
+    fs.mkdirSync(dir, { recursive: true });
+    return dir;
+}
+function launchctl(args, opts = {}) {
+    try {
+        return execFileSync('launchctl', args, { encoding: 'utf8' });
+    }
+    catch (err) {
+        if (opts.allowFail)
+            return '';
+        throw err;
+    }
+}
+/**
+ * `systemctl`, for the scope being operated on.
+ *
+ * `--user` and no flag address two different registries: a unit installed in
+ * `/etc/systemd/system` is invisible to `systemctl --user`, and the reverse.
+ * Getting this wrong does not error — it reports "unit not found" for a unit
+ * that is there, in the other one.
+ */
+function systemctl(scope, args, opts = {}) {
+    const scoped = scope === 'system' ? args : ['--user', ...args];
+    try {
+        return execFileSync('systemctl', scoped, { encoding: 'utf8' });
+    }
+    catch (err) {
+        if (opts.allowFail)
+            return '';
+        throw err;
+    }
+}
+/**
+ * launchd's domain for a scope: the login session, or the machine.
+ *
+ * `system` is where a LaunchDaemon lives and is the only domain that exists
+ * before anybody logs in.
+ */
+function domain(scope) {
+    return scope === 'system' ? 'system' : `gui/${process.getuid?.() ?? 501}`;
+}
+/**
+ * The scope actually installed on this machine, for the callers that operate
+ * on whatever is there — `serviceKickstart` after a `daemon down`, and the
+ * uninstall path. Defaults to `user` when nothing is installed, which is what
+ * the pre-scope code always assumed.
+ */
+function currentScope() {
+    return fs.existsSync(unitPathFor(process.platform, 'system', os.homedir())) ? 'system' : 'user';
+}
+/** Load (or reload) the service with the supervisor and start it. */
+export function serviceBootstrap(scope = currentScope()) {
+    if (process.platform === 'darwin') {
+        // bootout first so a re-install picks up a rewritten plist; ignore
+        // "not loaded" failures.
+        launchctl(['bootout', `${domain(scope)}/${LAUNCHD_LABEL}`], { allowFail: true });
+        launchctl(['bootstrap', domain(scope), launchdPlistPath(scope)]);
+        launchctl(['enable', `${domain(scope)}/${LAUNCHD_LABEL}`], { allowFail: true });
+    }
+    else if (process.platform === 'linux') {
+        systemctl(scope, ['daemon-reload']);
+        systemctl(scope, ['enable', '--now', SYSTEMD_UNIT]);
+    }
+}
+/** Unload the service (stops the daemon via supervisor SIGTERM). */
+export function serviceBootout(scope = currentScope()) {
+    if (process.platform === 'darwin') {
+        launchctl(['bootout', `${domain(scope)}/${LAUNCHD_LABEL}`], { allowFail: true });
+    }
+    else if (process.platform === 'linux') {
+        systemctl(scope, ['disable', '--now', SYSTEMD_UNIT], { allowFail: true });
+    }
+}
+/** Ask the supervisor to start the (already loaded) service now. */
+export function serviceKickstart(scope = currentScope()) {
+    if (process.platform === 'darwin') {
+        // If a previous bootout unloaded the job, bootstrap it back first.
+        const loaded = launchctl(['print', `${domain(scope)}/${LAUNCHD_LABEL}`], { allowFail: true });
+        if (!loaded) {
+            launchctl(['bootstrap', domain(scope), launchdPlistPath(scope)]);
+            launchctl(['enable', `${domain(scope)}/${LAUNCHD_LABEL}`], { allowFail: true });
+            return; // RunAtLoad starts it
+        }
+        launchctl(['kickstart', `${domain(scope)}/${LAUNCHD_LABEL}`], { allowFail: true });
+    }
+    else if (process.platform === 'linux') {
+        systemctl(scope, ['start', SYSTEMD_UNIT]);
+    }
+}
+export async function serviceInstall(options = {}) {
+    if (process.platform !== 'darwin' && process.platform !== 'linux') {
+        log.error(`Unsupported platform for service install: ${process.platform}`);
+        process.exitCode = 1;
+        return;
+    }
+    // The scope decides whether this survives a logout, which for a slave is
+    // the whole point of installing it. See `service-units.ts`.
+    const { readSavedDaemonConfig } = await import('./up.js');
+    const decision = decideScope({
+        requested: options.scope,
+        role: readSavedDaemonConfig()?.role,
+        isRoot: process.getuid?.() === 0,
+        lingerEnabled: lingerEnabled(),
+        platform: process.platform,
+    });
+    if (decision.refusal) {
+        // Not a warning beside an install that happened anyway. A slave
+        // supervised by something that stops at logout is not supervised, and
+        // reporting success for it moves the failure to a later hour and a
+        // different machine.
+        log.error(decision.refusal);
+        process.exitCode = 1;
+        return;
+    }
+    const scope = decision.scope;
+    // Stop a manually-started daemon first so the supervised one can bind
+    // the socket immediately (daemon-entry's pid guard would otherwise make
+    // the service exit until the foreign daemon dies).
+    const { daemonStop } = await import('./daemon-cmd.js');
+    await daemonStop().catch(() => { });
+    // A scope change leaves the other scope's definition behind, and two
+    // supervisors racing for one socket is worse than either alone.
+    removeOtherScope(scope);
+    const inputs = unitInputs(scope);
+    if (process.platform === 'darwin') {
+        const plist = launchdPlistPath(scope);
+        fs.mkdirSync(path.dirname(plist), { recursive: true });
+        fs.writeFileSync(plist, renderLaunchdPlist(inputs));
+        serviceBootstrap(scope);
+        log.success(`${scope === 'system' ? 'LaunchDaemon' : 'LaunchAgent'} installed: ${plist}`);
+        log.info(`  Label: ${LAUNCHD_LABEL} (KeepAlive on crash, RunAtLoad at boot)`);
+    }
+    else {
+        const unit = systemdUnitPath(scope);
+        fs.mkdirSync(path.dirname(unit), { recursive: true });
+        fs.writeFileSync(unit, renderSystemdUnit(inputs));
+        serviceBootstrap(scope);
+        log.success(`systemd ${scope} unit installed: ${unit}`);
+        log.info(`  Unit: ${SYSTEMD_UNIT} (Restart=on-failure)`);
+    }
+    log.info(`  Scope: ${scope} — ${decision.because}.`);
+    if (scope === 'system') {
+        log.info(`  Runs as: ${os.userInfo().username} (root installs the unit; root does not run the daemon).`);
+    }
+    log.info('  Crash → auto-restart; `omnitron down` → stays down until `omnitron up`.');
+}
+/**
+ * Remove the definition for the scope we are NOT installing.
+ *
+ * Switching a node from user to system supervision otherwise leaves both on
+ * disk: the old one still enabled, the new one starting at boot, and both
+ * trying to bind one unix socket. The pid guard in `daemon-entry` makes that
+ * survivable and unexplainable — one of them exits immediately, for ever,
+ * and which one depends on the order they start.
+ */
+function removeOtherScope(keeping) {
+    const other = keeping === 'system' ? 'user' : 'system';
+    const otherPath = unitPathFor(process.platform, other, os.homedir());
+    if (!fs.existsSync(otherPath))
+        return;
+    try {
+        serviceBootout(other);
+        fs.rmSync(otherPath, { force: true });
+        log.info(`  Removed the previous ${other} definition: ${otherPath}`);
+    }
+    catch (err) {
+        // Reported, not fatal: an operator who cannot remove the old one still
+        // needs to know it is there.
+        log.warn(`  Could not remove the previous ${other} definition at ${otherPath}: ${err.message}`);
+    }
+}
+export async function serviceUninstall() {
+    if (!isServiceInstalled()) {
+        log.warn('Service is not installed.');
+        return;
+    }
+    // Both scopes, not just the one this process would install. An uninstall
+    // that leaves the other definition on disk is how a machine ends up with a
+    // daemon nobody asked for starting at boot.
+    for (const scope of ['system', 'user']) {
+        const unitPath = unitPathFor(process.platform, scope, os.homedir());
+        if (!fs.existsSync(unitPath))
+            continue;
+        try {
+            serviceBootout(scope);
+            if (process.platform === 'linux')
+                systemctl(scope, ['daemon-reload'], { allowFail: true });
+            fs.rmSync(unitPath, { force: true });
+            log.success(`Removed the ${scope} service definition: ${unitPath}`);
+        }
+        catch (err) {
+            log.error(`Could not remove ${unitPath}: ${err.message}`);
+            process.exitCode = 1;
+        }
+    }
+    log.info('  Use `omnitron up` to run the daemon unsupervised again.');
+}
+export async function serviceStatus() {
+    if (!isServiceInstalled()) {
+        log.info('Service: not installed. Run `omnitron service install` to supervise the daemon.');
+        return;
+    }
+    const scope = currentScope();
+    if (process.platform === 'darwin') {
+        log.info(`Service: installed, ${scope} scope (${launchdPlistPath(scope)})`);
+        const out = launchctl(['print', `${domain(scope)}/${LAUNCHD_LABEL}`], { allowFail: true });
+        if (!out) {
+            log.warn('  State: not loaded (boot it with `omnitron up` or `launchctl bootstrap`)');
+            return;
+        }
+        const state = out.match(/state = (.+)/)?.[1]?.trim();
+        const pid = out.match(/pid = (\d+)/)?.[1];
+        const lastExit = out.match(/last exit code = (.+)/)?.[1]?.trim();
+        log.info(`  State: ${state ?? 'unknown'}${pid ? ` (PID: ${pid})` : ''}`);
+        if (lastExit && lastExit !== '(never exited)')
+            log.info(`  Last exit: ${lastExit}`);
+    }
+    else {
+        log.info(`Service: installed, ${scope} scope (${systemdUnitPath(scope)})`);
+        const out = systemctl(scope, ['status', '--no-pager', SYSTEMD_UNIT], { allowFail: true });
+        log.info(out.split('\n').slice(0, 5).map((l) => `  ${l}`).join('\n'));
+        if (scope === 'user' && !lingerEnabled()) {
+            // Said where it is true, rather than as a tip beside every install: a
+            // user unit without lingering stops when the last session ends.
+            log.warn('  This unit stops when your last session ends (lingering is off for this account).');
+        }
+    }
+}
+//# sourceMappingURL=service.js.map

package/dist/commands/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/commands/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE/D,OAAO,EACL,aAAa,EACb,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,WAAW,GAEZ,MAAM,oBAAoB,CAAC;AAE5B,8DAA8D;AAC9D,SAAS,UAAU,CAAC,KAAmB;IACrC,OAAO;QACL,KAAK;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,eAAe,EAAE;QAC5B,OAAO,EAAE,cAAc,EAAE;QACzB,IAAI,EAAE,WAAW,EAAE;QACnB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC;QACtG,GAAG,CAAC,KAAK,KAAK,QAAQ;YACpB,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE;YACpE,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa;IACpB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE;YAC1F,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,EAAE,KAAK,YAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAK,GAAiB,MAAM;IACpD,OAAO,WAAW,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,eAAe,CAAC,KAAK,GAAiB,MAAM;IACnD,OAAO,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,kBAAkB;IAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAChF,0EAA0E;IAC1E,yEAAyE;IACzE,yDAAyD;IACzD,OAAQ,CAAC,QAAQ,EAAE,MAAM,CAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAClD,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAClE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe;IACtB,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,2BAA2B,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAS,cAAc;IACrB,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW;IAClB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,mBAAmB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClG,IAAI,MAAM;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;QAClE,mBAAmB;IACrB,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC;QAClG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,OAAO;IACd,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACzD,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,IAAc,EAAE,IAAI,GAA4B,EAAE;IACnE,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,KAAmB,EAAE,IAAc,EAAE,IAAI,GAA4B,EAAE;IACxF,MAAM,MAAM,GAAG,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,MAAM,CAAC,KAAmB;IACjC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC;AAC5E,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY;IACnB,OAAO,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;AAClG,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,gBAAgB,CAAC,KAAK,GAAiB,YAAY,EAAE;IACnE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,mEAAmE;QACnE,yBAAyB;QACzB,SAAS,CAAC,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjF,SAAS,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACjE,SAAS,CAAC,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClF,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACxC,SAAS,CAAC,KAAK,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QACpC,SAAS,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,KAAK,GAAiB,YAAY,EAAE;IACjE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,SAAS,CAAC,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACxC,SAAS,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,KAAK,GAAiB,YAAY,EAAE;IACnE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,mEAAmE;QACnE,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9F,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACjE,SAAS,CAAC,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChF,OAAO,CAAC,sBAAsB;QAChC,CAAC;QACD,SAAS,CAAC,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACxC,SAAS,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAO,GAA6B,EAAE;IACzE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClE,GAAG,CAAC,KAAK,CAAC,6CAA6C,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,yEAAyE;IACzE,4DAA4D;IAC5D,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,WAAW,CAAC;QAC3B,SAAS,EAAE,OAAO,CAAC,KAAK;QACxB,IAAI,EAAE,qBAAqB,EAAE,EAAE,IAAI;QACnC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC;QAChC,aAAa,EAAE,aAAa,EAAE;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,gEAAgE;QAChE,sEAAsE;QACtE,mEAAmE;QACnE,qBAAqB;QACrB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAE7B,sEAAsE;IACtE,wEAAwE;IACxE,mDAAmD;IACnD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACvD,MAAM,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAA4B,CAAC,CAAC,CAAC;IAE7D,qEAAqE;IACrE,gEAAgE;IAChE,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAExB,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACtC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;QACpD,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxB,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,eAAe,KAAK,EAAE,CAAC,CAAC;QAC1F,GAAG,CAAC,IAAI,CAAC,YAAY,aAAa,0CAA0C,CAAC,CAAC;IAChF,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACpC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxB,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,oBAAoB,IAAI,EAAE,CAAC,CAAC;QACxD,GAAG,CAAC,IAAI,CAAC,WAAW,YAAY,uBAAuB,CAAC,CAAC;IAC3D,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,MAAM,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC;IACrD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,0DAA0D,CAAC,CAAC;IAC3G,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CAAC,OAAqB;IAC7C,MAAM,KAAK,GAAiB,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IACrE,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO;IACtC,IAAI,CAAC;QACH,cAAc,CAAC,KAAK,CAAC,CAAC;QACtB,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,0BAA0B,KAAK,gBAAgB,SAAS,EAAE,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uEAAuE;QACvE,6BAA6B;QAC7B,GAAG,CAAC,IAAI,CAAC,mCAAmC,KAAK,kBAAkB,SAAS,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7G,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IACD,yEAAyE;IACzE,2EAA2E;IAC3E,4CAA4C;IAC5C,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAU,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QACvC,IAAI,CAAC;YACH,cAAc,CAAC,KAAK,CAAC,CAAC;YACtB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAAE,SAAS,CAAC,KAAK,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3F,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACrC,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,wBAAwB,QAAQ,EAAE,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,oBAAoB,QAAQ,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACrE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;QAC5F,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,uBAAuB,KAAK,WAAW,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;YACtF,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACjE,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,IAAI,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,QAAQ,IAAI,QAAQ,KAAK,gBAAgB;YAAE,GAAG,CAAC,IAAI,CAAC,gBAAgB,QAAQ,EAAE,CAAC,CAAC;IACtF,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,uBAAuB,KAAK,WAAW,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9E,IAAI,KAAK,KAAK,MAAM,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YACzC,sEAAsE;YACtE,gEAAgE;YAChE,GAAG,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/spinner.d.ts

@@ -0,0 +1,29 @@
+/**
+ * A spinner that knows whether anyone is watching.
+ *
+ * `@xec-sh/kit`'s spinner animates unconditionally: it repaints its frame
+ * with cursor-movement escapes on every tick, whether stdout is a terminal or
+ * a pipe. Redirected — into a log, a CI job, `2>&1 | tail`, a script reading
+ * the output — those repaints are not overwritten by anything, so they all
+ * survive as text. One `omnitron restart` produced several hundred lines of
+ * `⠙ Restarting payments[1G[J` for a command whose actual output is one line.
+ *
+ * The result is worse than noise: the answer is at the end of a wall of
+ * control codes, and a script grepping for it may not find it at all.
+ *
+ * `--json` already suppresses this, but only for commands that honour the
+ * flag, and the failure has nothing to do with JSON — a human tailing a log
+ * has the same problem. So the test is the terminal, not the flag.
+ */
+export interface Spinner {
+    start(message?: string): void;
+    stop(message?: string, code?: number): void;
+    message(message?: string): void;
+}
+/**
+ * A spinner for a terminal, a line-printer for anything else.
+ *
+ * Same three methods either way, so call sites do not branch.
+ */
+export declare function spinner(): Spinner;
+//# sourceMappingURL=spinner.d.ts.map

package/dist/commands/spinner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spinner.d.ts","sourceRoot":"","sources":["../../src/commands/spinner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,MAAM,WAAW,OAAO;IACtB,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAiBD;;;;GAIG;AACH,wBAAgB,OAAO,IAAI,OAAO,CAEjC"}

package/dist/commands/spinner.js

@@ -0,0 +1,44 @@
+/**
+ * A spinner that knows whether anyone is watching.
+ *
+ * `@xec-sh/kit`'s spinner animates unconditionally: it repaints its frame
+ * with cursor-movement escapes on every tick, whether stdout is a terminal or
+ * a pipe. Redirected — into a log, a CI job, `2>&1 | tail`, a script reading
+ * the output — those repaints are not overwritten by anything, so they all
+ * survive as text. One `omnitron restart` produced several hundred lines of
+ * `⠙ Restarting payments[1G[J` for a command whose actual output is one line.
+ *
+ * The result is worse than noise: the answer is at the end of a wall of
+ * control codes, and a script grepping for it may not find it at all.
+ *
+ * `--json` already suppresses this, but only for commands that honour the
+ * flag, and the failure has nothing to do with JSON — a human tailing a log
+ * has the same problem. So the test is the terminal, not the flag.
+ */
+import { spinner as kitSpinner } from '@xec-sh/kit';
+/** Emits one line per state change, for when nothing can repaint. */
+function quietSpinner() {
+    return {
+        start(message) {
+            if (message)
+                process.stdout.write(`${message}\n`);
+        },
+        stop(message) {
+            if (message)
+                process.stdout.write(`${message}\n`);
+        },
+        message(message) {
+            if (message)
+                process.stdout.write(`${message}\n`);
+        },
+    };
+}
+/**
+ * A spinner for a terminal, a line-printer for anything else.
+ *
+ * Same three methods either way, so call sites do not branch.
+ */
+export function spinner() {
+    return process.stdout.isTTY ? kitSpinner() : quietSpinner();
+}
+//# sourceMappingURL=spinner.js.map

package/dist/commands/spinner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spinner.js","sourceRoot":"","sources":["../../src/commands/spinner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,aAAa,CAAC;AAQpD,qEAAqE;AACrE,SAAS,YAAY;IACnB,OAAO;QACL,KAAK,CAAC,OAAO;YACX,IAAI,OAAO;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,OAAO;YACV,IAAI,OAAO;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,CAAC,OAAO;YACb,IAAI,OAAO;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;QACpD,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO;IACrB,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,UAAU,EAAc,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;AAC3E,CAAC"}

package/dist/commands/stack.d.ts

@@ -7,8 +7,56 @@ export declare function stackListCommand(options?: {
     project?: string;
 }): Promise<void>;
 export declare function stackStatusCommand(projectName: string, stackName: string): Promise<void>;
-export declare function stackStartCommand(projectName: string, stackName: string): Promise<void>;
+export declare function stackStartCommand(projectName: string, stackName: string, opts?: {
+    allowDirty?: boolean;
+    release?: string;
+    reinstall?: boolean;
+}): Promise<void>;
 export declare function stackStopCommand(projectName: string, stackName: string): Promise<void>;
+/** Why these `stack account` options say no one thing to do — or `null`. */
+export declare function accountOptionsRefusal(options: {
+    username?: string;
+    show?: string;
+    remove?: string;
+    census?: boolean;
+    leftovers?: boolean | string;
+    also?: string;
+    id?: string;
+    role?: string;
+    displayName?: string;
+    vaultKey?: string;
+}): string | null;
+/**
+ * `omnitron stack maintenance <project> <stack> [status|on|off]` — the stack's
+ * maintenance lock at its gateway, as the gateway enforces it. `on` holds the
+ * platform for `--minutes` (default 15, at most 60) and lets go by itself;
+ * `off` lets go now — also a lock a failed deployment left behind.
+ */
+export declare function stackMaintenanceCommand(projectName: string, stackName: string, action: string | undefined, options: {
+    minutes?: string;
+}): Promise<void>;
+/**
+ * `omnitron stack account` — accounts on a remote stack's stand, by the
+ * project's own tool on the node:
+ *
+ *   --username <name>          make one; its password goes to the daemon's
+ *                              vault, and the command that reads it is
+ *                              printed — never the password
+ *   --show <name>              what the stand holds under a name
+ *   --remove <name> --id <id>  take one away, with its password in the vault
+ */
+export declare function stackAccountCommand(projectName: string, stackName: string, options: {
+    username?: string;
+    show?: string;
+    remove?: string;
+    census?: boolean;
+    leftovers?: boolean | string;
+    also?: string;
+    id?: string;
+    role?: string;
+    displayName?: string;
+    vaultKey?: string;
+}): Promise<void>;
 export declare function stackCreateCommand(projectName: string, stackName: string, options: {
     type?: string;
     apps?: string;

package/dist/commands/stack.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stack.d.ts","sourceRoot":"","sources":["../../src/commands/stack.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAsCH,wBAAsB,gBAAgB,CAAC,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuDpF;AAED,wBAAsB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA0E9F;AAED,wBAAsB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqB7F;AAED,wBAAsB,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAY5F;AAED,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACxC,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED,wBAAsB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAY9F;AAED,wBAAsB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW/F"}
+{"version":3,"file":"stack.d.ts","sourceRoot":"","sources":["../../src/commands/stack.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAwCH,wBAAsB,gBAAgB,CAAC,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAqEpF;AAED,wBAAsB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA2F9F;AA+BD,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GACrE,OAAO,CAAC,IAAI,CAAC,CA0Ef;AAED,wBAAsB,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB5F;AAED,4EAA4E;AAC5E,wBAAgB,qBAAqB,CAAC,OAAO,EAAE;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,MAAM,GAAG,IAAI,CA6BhB;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5B,OAAO,CAAC,IAAI,CAAC,CAuCf;AAED;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE;IACP,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACA,OAAO,CAAC,IAAI,CAAC,CA2If;AAED,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACxC,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED,wBAAsB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAY9F;AAED,wBAAsB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW/F"}