@serve.zone/cli 5.5.1 → 32.9.0

package/cli.js

@@ -1,4 +1,4 @@
 #!/usr/bin/env node
 process.env.CLI_CALL = 'true';
-const cliTool = await import('./dist_ts_cliclient/index.js');
-cliTool.runCli();
+const cli = await import("./dist_ts_cliclient/index.js");
+await cli.runCli();

package/dist_ts_cliclient/classes.cliclient.d.ts

@@ -0,0 +1,6 @@
+import { CloudlyApiClient } from '@serve.zone/api';
+export declare class CliClient {
+    cloudlyApiClient: CloudlyApiClient;
+    constructor(cloudlyApiClientArg: CloudlyApiClient);
+    getClusters(): Promise<void>;
+}

package/dist_ts_cliclient/classes.cliclient.js

@@ -0,0 +1,12 @@
+import * as plugins from './plugins.js';
+import { CloudlyApiClient } from '@serve.zone/api';
+export class CliClient {
+    constructor(cloudlyApiClientArg) {
+        this.cloudlyApiClient = cloudlyApiClientArg;
+    }
+    async getClusters() {
+        const clusters = await this.cloudlyApiClient.cluster.getClusters();
+        console.log(clusters);
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts_cliclient/index.d.ts

@@ -0,0 +1 @@
+export declare const runCli: () => Promise<void>;

package/dist_ts_cliclient/index.js

@@ -0,0 +1,31 @@
+import * as plugins from './plugins.js';
+import { CliClient } from './classes.cliclient.js';
+export const runCli = async () => {
+    // The directory the operator runs the CLI in is read for sources, exactly as before, but the
+    // `required:` list it may find there is never enforced: that list is the Cloudly server's own
+    // start-time contract, and none of a remote server's database, storage or keyring facts is this
+    // client's to hold. The one name this client needs is asked for by name on the next line.
+    const cliQenv = new plugins.qenv.Qenv(process.cwd(), undefined, false);
+    const cloudlyUrl = await cliQenv.getEnvVarOnDemand('CLOUDLY_URL');
+    const token = process.env.CLOUDLY_TOKEN;
+    const username = process.env.CLOUDLY_USERNAME;
+    const password = process.env.CLOUDLY_PASSWORD;
+    const apiClient = new plugins.servezoneApi.CloudlyApiClient({
+        registerAs: 'cli',
+        cloudlyUrl,
+    });
+    await apiClient.start();
+    if (token) {
+        await apiClient.getIdentityByToken(token, { tagConnection: true, statefullIdentity: true });
+    }
+    else if (username && password) {
+        await apiClient.loginWithUsernameAndPassword(username, password);
+    }
+    else {
+        console.log('No credentials provided. Set CLOUDLY_TOKEN or CLOUDLY_USERNAME/CLOUDLY_PASSWORD.');
+    }
+    const cliClient = new CliClient(apiClient);
+    // Default action example: list clusters when invoked without subcommands
+    await cliClient.getClusters();
+};
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts_cliclient/plugins.d.ts

@@ -0,0 +1,6 @@
+import * as servezoneApi from '@serve.zone/api';
+import * as servezoneInterfaces from '@serve.zone/interfaces';
+export { servezoneApi, servezoneInterfaces };
+import * as projectinfo from '@push.rocks/projectinfo';
+import * as qenv from '@push.rocks/qenv';
+export { projectinfo, qenv, };

package/dist_ts_cliclient/plugins.js

@@ -0,0 +1,9 @@
+// @serve.zone scope
+import * as servezoneApi from '@serve.zone/api';
+import * as servezoneInterfaces from '@serve.zone/interfaces';
+export { servezoneApi, servezoneInterfaces };
+// @push.rocks scope
+import * as projectinfo from '@push.rocks/projectinfo';
+import * as qenv from '@push.rocks/qenv';
+export { projectinfo, qenv, };
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -1,39 +1,69 @@
 {
+  "author": "Task Venture Capital GmbH",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://code.foss.global/serve.zone/cloudly.git"
+  },
+  "homepage": "https://code.foss.global/serve.zone/cloudly#readme",
+  "bugs": {
+    "url": "https://code.foss.global/serve.zone/cloudly/issues"
+  },
+  "keywords": [
+    "multi-cloud management",
+    "Docker Swarmkit",
+    "container orchestration",
+    "cloud services",
+    "API integration",
+    "web interface",
+    "CLI",
+    "CI/CD integration",
+    "cloud providers",
+    "DigitalOcean",
+    "Hetzner Cloud",
+    "Cloudflare",
+    "TypeScript",
+    "Node.js",
+    "infrastructure automation",
+    "devOps",
+    "secret management",
+    "configuration management",
+    "task scheduling",
+    "logging",
+    "SSL management",
+    "system logging",
+    "cloud API client",
+    "frontend",
+    "backend",
+    "security"
+  ],
   "name": "@serve.zone/cli",
-  "version": "5.5.1",
+  "version": "32.9.0",
   "type": "module",
-  "description": "",
+  "description": "A comprehensive tool for managing containerized applications across multiple cloud providers using Docker Swarmkit, featuring web, CLI, and API interfaces.",
+  "main": "./dist_ts_cliclient/index.js",
+  "types": "./dist_ts_cliclient/index.d.ts",
   "exports": {
     ".": {
+      "types": "./dist_ts_cliclient/index.d.ts",
       "import": "./dist_ts_cliclient/index.js"
     }
   },
   "dependencies": {
-    "@serve.zone/api": "^5.3.5",
-    "@serve.zone/interfaces": "^5.5.0",
+    "@serve.zone/api": "32.0.0",
+    "@serve.zone/interfaces": "32.18.0",
     "@push.rocks/projectinfo": "^5.1.0",
-    "@push.rocks/qenv": "^6.1.4",
-    "@push.rocks/smartcli": "^4.0.21"
-  },
-  "devDependencies": {
-    "@git.zone/tsbuild": "2.1.67"
+    "@push.rocks/qenv": "^8.1.0",
+    "@push.rocks/smartcli": "^4.3.0"
   },
-  "files": [
-    "ts/**/*",
-    "ts_*/**/*",
-    "dist/**/*",
-    "dist_*/**/*",
-    "dist_ts/**/*",
-    "dist_ts_web/**/*",
-    "assets/**/*",
-    "cli.js",
-    ".smartconfig.json",
-    "readme.md"
-  ],
   "bin": {
     "servezone": "./cli.js"
   },
-  "scripts": {
-    "build": "tsbuild tsfolders"
-  }
+  "files": [
+    "ts_cliclient",
+    "dist_ts_cliclient",
+    "readme.md",
+    "license",
+    "cli.js"
+  ]
 }

package/readme.md

@@ -20,10 +20,10 @@ It is not currently a full command tree for services, secrets, deployments, logs
 
 ## Installation
 
-The package is published from `cloudly/ts_cliclient` via `tspublish.json` under the name `@serve.zone/cli` with the `servezone` binary.
+Every Cloudly release publishes the package from `cloudly/ts_cliclient`, through its `tspublish.json`, under the name `@serve.zone/cli` with the `servezone` binary and at the Cloudly version. Its registry versions therefore jump from 5.5.1 to Cloudly's 32.x line.
 
 ```sh
-pnpm add -g @serve.zone/cli
+pnpm add --global @serve.zone/cli
 ```
 
 For local development inside the Cloudly repository, build the parent package:
@@ -52,11 +52,11 @@ CLOUDLY_PASSWORD=change-me \
 servezone
 ```
 
-When `CLOUDLY_TOKEN` is present, the CLI requests a stateful identity and asks Cloudly to tag the WebSocket connection. When username/password are present instead, it uses Cloudly's admin login flow. If no credentials are provided, the CLI prints a warning before attempting the default cluster-list operation.
+When `CLOUDLY_TOKEN` is present, the CLI exchanges it for an identity and tags the WebSocket with a JWT-only credential. Cloudly verifies the JWT and reconstructs authoritative identity fields from persisted user data. Machine JWTs never outlive their source tokens, and cluster machine users must belong to exactly one persisted cluster. When username/password are present instead, the CLI uses Cloudly's admin login flow. If no credentials are provided, it prints a warning before attempting the default cluster-list operation.
 
 ## Programmatic Use
 
-The submodule exports the `runCli()` entry point and uses `CliClient` internally:
+The published submodule exports the `runCli()` entry point. For automation, most callers should use `@serve.zone/api` directly; the internal `CliClient` currently wraps `CloudlyApiClient` only to run the default cluster-list action:
 
 ```ts
 import { CloudlyApiClient } from '@serve.zone/api';
@@ -81,7 +81,7 @@ await cli.getClusters();
 | `index.ts` | Runtime entry point for the published CLI. |
 | `classes.cliclient.ts` | Minimal client wrapper; currently exposes `getClusters()`. |
 | `plugins.ts` | Centralized imports for the submodule. |
-| `tspublish.json` | Published package name, dependencies, registry targets, and `servezone` bin metadata. |
+| `tspublish.json` | Published package name, dependencies, `servezone` bin metadata, and `useBase`, which takes the registries from the release's npm target. |
 
 ## License and Legal Information
 

package/ts_cliclient/index.ts

@@ -2,7 +2,11 @@ import * as plugins from './plugins.js';
 import { CliClient } from './classes.cliclient.js';
 
 export const runCli = async () => {
-  const cliQenv = new plugins.qenv.Qenv();
+  // The directory the operator runs the CLI in is read for sources, exactly as before, but the
+  // `required:` list it may find there is never enforced: that list is the Cloudly server's own
+  // start-time contract, and none of a remote server's database, storage or keyring facts is this
+  // client's to hold. The one name this client needs is asked for by name on the next line.
+  const cliQenv = new plugins.qenv.Qenv(process.cwd(), undefined, false);
   const cloudlyUrl = await cliQenv.getEnvVarOnDemand('CLOUDLY_URL');
   const token = process.env.CLOUDLY_TOKEN;
   const username = process.env.CLOUDLY_USERNAME;

package/ts_cliclient/readme.md

@@ -20,10 +20,10 @@ It is not currently a full command tree for services, secrets, deployments, logs
 
 ## Installation
 
-The package is published from `cloudly/ts_cliclient` via `tspublish.json` under the name `@serve.zone/cli` with the `servezone` binary.
+Every Cloudly release publishes the package from `cloudly/ts_cliclient`, through its `tspublish.json`, under the name `@serve.zone/cli` with the `servezone` binary and at the Cloudly version. Its registry versions therefore jump from 5.5.1 to Cloudly's 32.x line.
 
 ```sh
-pnpm add -g @serve.zone/cli
+pnpm add --global @serve.zone/cli
 ```
 
 For local development inside the Cloudly repository, build the parent package:
@@ -52,11 +52,11 @@ CLOUDLY_PASSWORD=change-me \
 servezone
 ```
 
-When `CLOUDLY_TOKEN` is present, the CLI requests a stateful identity and asks Cloudly to tag the WebSocket connection. When username/password are present instead, it uses Cloudly's admin login flow. If no credentials are provided, the CLI prints a warning before attempting the default cluster-list operation.
+When `CLOUDLY_TOKEN` is present, the CLI exchanges it for an identity and tags the WebSocket with a JWT-only credential. Cloudly verifies the JWT and reconstructs authoritative identity fields from persisted user data. Machine JWTs never outlive their source tokens, and cluster machine users must belong to exactly one persisted cluster. When username/password are present instead, the CLI uses Cloudly's admin login flow. If no credentials are provided, it prints a warning before attempting the default cluster-list operation.
 
 ## Programmatic Use
 
-The submodule exports the `runCli()` entry point and uses `CliClient` internally:
+The published submodule exports the `runCli()` entry point. For automation, most callers should use `@serve.zone/api` directly; the internal `CliClient` currently wraps `CloudlyApiClient` only to run the default cluster-list action:
 
 ```ts
 import { CloudlyApiClient } from '@serve.zone/api';
@@ -81,7 +81,7 @@ await cli.getClusters();
 | `index.ts` | Runtime entry point for the published CLI. |
 | `classes.cliclient.ts` | Minimal client wrapper; currently exposes `getClusters()`. |
 | `plugins.ts` | Centralized imports for the submodule. |
-| `tspublish.json` | Published package name, dependencies, registry targets, and `servezone` bin metadata. |
+| `tspublish.json` | Published package name, dependencies, `servezone` bin metadata, and `useBase`, which takes the registries from the release's npm target. |
 
 ## License and Legal Information
 

package/ts_cliclient/tspublish.json

@@ -1,15 +0,0 @@
-{
-  "name": "@serve.zone/cli",
-  "dependencies": [
-    "@serve.zone/api",
-    "@serve.zone/interfaces",
-    "@push.rocks/projectinfo",
-    "@push.rocks/qenv",
-    "@push.rocks/smartcli"
-  ],
-  "registries": [
-    "registry.npmjs.org:public",
-    "verdaccio.lossless.digital:public"
-  ],
-  "bin": ["servezone"]
-}