@studiometa/forge-cli 0.4.4 → 0.4.6

package/dist/cli.js

@@ -1,9 +1,11 @@
 #!/usr/bin/env node
-import { S as isOutputFormat, _ as ApiError, a as createContext, b as ValidationError, c as colors, d as deleteToken, g as setToken, h as setOrganizationSlug, i as runCommand, l as setColorEnabled, m as getToken, n as exitWithValidationError, p as getOrganizationSlug, s as OutputFormatter, u as createConfigStore } from "./error-handler-ByMitiOr.js";
-import { activateCertificate, createAuditLogger, createBackupConfig, createCommand, createDatabaseUser, createMonitor, createNginxTemplate, createRedirectRule, createScheduledJob, createSecurityRule, deleteBackupConfig, deleteDatabaseUser, deleteMonitor, deleteNginxTemplate, deleteRedirectRule, deleteScheduledJob, deleteSecurityRule, deploySiteAndWait, getBackupConfig, getCertificate, getCommand, getDaemon, getDatabase, getDatabaseUser, getEnv, getFirewallRule, getMonitor, getNginxConfig, getNginxTemplate, getRecipe, getRedirectRule, getScheduledJob, getSecurityRule, getServer, getSite, getSshKey, getUser, listBackupConfigs, listCommands, listDaemons, listDatabaseUsers, listDatabases, listDeployments, listFirewallRules, listMonitors, listNginxTemplates, listRecipes, listRedirectRules, listScheduledJobs, listSecurityRules, listServers, listSites, listSshKeys, matchByName, rebootServer, restartDaemon, runRecipe, updateBackupConfig, updateDaemon, updateDatabaseUser, updateEnv, updateNginxConfig, updateNginxTemplate, updateRecipe, updateSecurityRule, updateSite } from "@studiometa/forge-core";
+import { S as isOutputFormat, _ as ApiError, a as createContext, b as ValidationError, c as colors, d as deleteToken, g as setToken, h as setOrganizationSlug, i as runCommand, l as setColorEnabled, m as getToken, n as exitWithValidationError, p as getOrganizationSlug, s as OutputFormatter, u as createConfigStore } from "./error-handler-BA357jIr.js";
+import { RESTARTABLE_SERVICES, activateCertificate, createAuditLogger, createBackupConfig, createCommand, createDatabaseUser, createMonitor, createNginxTemplate, createRedirectRule, createScheduledJob, createSecurityRule, deleteBackupConfig, deleteDatabaseUser, deleteMonitor, deleteNginxTemplate, deleteRedirectRule, deleteScheduledJob, deleteSecurityRule, deploySiteAndWait, getBackupConfig, getCertificate, getCommand, getDaemon, getDaemonLog, getDatabase, getDatabaseUser, getDeploymentLog, getEnv, getFirewallRule, getMonitor, getNginxConfig, getNginxTemplate, getRecipe, getRedirectRule, getScheduledJob, getSecurityRule, getServer, getSite, getSshKey, getUser, listBackupConfigs, listCommands, listDaemons, listDatabaseUsers, listDatabases, listDeployments, listFirewallRules, listMonitors, listNginxTemplates, listRecipes, listRedirectRules, listScheduledJobs, listSecurityRules, listServers, listServices, listSites, listSshKeys, matchByName, rebootServer, restartDaemon, restartService, runRecipe, updateBackupConfig, updateDaemon, updateDatabaseUser, updateEnv, updateNginxConfig, updateNginxTemplate, updateRecipe, updateSecurityRule, updateSite } from "@studiometa/forge-core";
 import { mkdirSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
+import { spawnSync } from "node:child_process";
+//#region src/audit.ts
 /**
 * Shared audit logger for CLI write operations.
 * Lazily initialized on first use.
@@ -13,6 +15,8 @@ function getCliAuditLogger() {
 	if (!_auditLogger) _auditLogger = createAuditLogger("cli");
 	return _auditLogger;
 }
+//#endregion
+//#region src/utils/command-router.ts
 /**
 * Creates a command router function that dispatches to the appropriate handler.
 */
@@ -55,6 +59,8 @@ function createCommandRouter(config) {
 		else await handler(ctx);
 	};
 }
+//#endregion
+//#region src/utils/resolve.ts
 /**
 * Smart resolution utilities for --server and --site options.
 *
@@ -106,6 +112,8 @@ async function resolveSiteId(value, serverId, execCtx) {
 	}
 	return String(partial[0].id);
 }
+//#endregion
+//#region src/commands/backups/handlers.ts
 async function backupsList(ctx) {
 	const server = String(ctx.options.server ?? "");
 	if (!server) exitWithValidationError("server_id", "forge backups list --server <server_id>", ctx.formatter);
@@ -216,7 +224,9 @@ async function backupsDelete(args, ctx) {
 		ctx.formatter.success(`Backup configuration ${id} deleted.`);
 	}, ctx.formatter);
 }
-const handleBackupsCommand = createCommandRouter({
+//#endregion
+//#region src/commands/backups/command.ts
+var handleBackupsCommand = createCommandRouter({
 	resource: "backups",
 	handlers: {
 		list: backupsList,
@@ -232,6 +242,8 @@ const handleBackupsCommand = createCommandRouter({
 		"delete"
 	]
 });
+//#endregion
+//#region src/commands/backups/help.ts
 function showBackupsHelp(subcommand) {
 	if (subcommand === "list" || subcommand === "ls") console.log(`
 ${colors.bold("forge backups list")} - List backup configurations on a server
@@ -309,6 +321,8 @@ ${colors.bold("OPTIONS:")}
 Run ${colors.cyan("forge backups <subcommand> --help")} for details.
 `);
 }
+//#endregion
+//#region src/commands/completion.ts
 /**
 * Shell completion installation command
 */
@@ -322,16 +336,16 @@ _forge_completions() {
   prev="\${COMP_WORDS[COMP_CWORD-1]}"
 
   # Main commands
-  commands="config servers s sites deployments d databases db database-users daemons env nginx certificates certs firewall-rules fw ssh-keys backups commands scheduled-jobs user monitors nginx-templates security-rules redirect-rules recipes completion help"
+  commands="config servers s sites deployments d databases db database-users daemons env nginx certificates certs firewall-rules fw ssh ssh-keys backups commands scheduled-jobs services user monitors nginx-templates security-rules redirect-rules recipes completion help"
 
   # Subcommands for each command
   local config_cmds="set get delete"
   local servers_cmds="list ls get reboot"
   local sites_cmds="list ls get"
-  local deployments_cmds="list ls deploy"
+  local deployments_cmds="list ls deploy logs log"
   local databases_cmds="list ls get"
   local database_users_cmds="list ls get create delete"
-  local daemons_cmds="list ls get restart"
+  local daemons_cmds="list ls get restart logs log"
   local env_cmds="get update"
   local nginx_cmds="get update"
   local certificates_cmds="get activate"
@@ -340,6 +354,7 @@ _forge_completions() {
   local backups_cmds="list ls get create delete"
   local commands_cmds="list ls get create"
   local scheduled_jobs_cmds="list ls get create delete"
+  local services_cmds="list ls restart"
   local user_cmds="get"
   local monitors_cmds="list ls get create delete"
   local nginx_templates_cmds="list ls get create update delete"
@@ -349,7 +364,7 @@ _forge_completions() {
   local completion_cmds="bash zsh fish"
 
   # Global options
-  options="--token --server --site -f --format --no-color -h --help -v --version --name --command --content --from --to --provider --frequency --type --operator --threshold --minutes --key --port --ip-address --user --script --servers --domain --password --credential-id --region --size --project-type --directory"
+  options="--token --server --site -f --format --no-color -h --help -v --version --name --command --content --from --to --provider --frequency --type --operator --threshold --minutes --key --port --ip-address --user --private --dry-run --script --servers --domain --password --credential-id --region --size --project-type --directory"
 
   # Format options
   local formats="json human table"
@@ -408,6 +423,9 @@ _forge_completions() {
         scheduled-jobs)
           COMPREPLY=( $(compgen -W "\${scheduled_jobs_cmds}" -- "\${cur}") )
           ;;
+        services)
+          COMPREPLY=( $(compgen -W "\${services_cmds}" -- "\${cur}") )
+          ;;
         user)
           COMPREPLY=( $(compgen -W "\${user_cmds}" -- "\${cur}") )
           ;;
@@ -486,10 +504,12 @@ _forge() {
         'certs:Manage SSL certificates (alias)'
         'firewall-rules:Manage firewall rules'
         'fw:Manage firewall rules (alias)'
+        'ssh:Open an SSH session to a server'
         'ssh-keys:Manage SSH keys'
         'backups:Manage backup configurations'
         'commands:Manage site commands'
         'scheduled-jobs:Manage scheduled jobs'
+        'services:List and restart server services'
         'user:Display authenticated user profile'
         'monitors:Manage server monitors'
         'nginx-templates:Manage Nginx templates'
@@ -537,6 +557,8 @@ _forge() {
             'list:List deployments'
             'ls:List deployments (alias)'
             'deploy:Trigger a deployment'
+            'logs:Show deployment output'
+            'log:Show deployment output (alias)'
           )
           _describe 'deployments command' deployments_cmds
           ;;
@@ -567,6 +589,8 @@ _forge() {
             'ls:List daemons (alias)'
             'get:Get daemon details'
             'restart:Restart a daemon'
+            'logs:Show daemon log output'
+            'log:Show daemon log output (alias)'
           )
           _describe 'daemons command' daemons_cmds
           ;;
@@ -644,6 +668,15 @@ _forge() {
           )
           _describe 'scheduled-jobs command' scheduled_jobs_cmds
           ;;
+        services)
+          local -a services_cmds
+          services_cmds=(
+            'list:List services on a server'
+            'ls:List services on a server (alias)'
+            'restart:Restart a service'
+          )
+          _describe 'services command' services_cmds
+          ;;
         user)
           local -a user_cmds
           user_cmds=(
@@ -775,10 +808,12 @@ complete -c forge -f -n "__fish_use_subcommand" -a "certificates" -d "Manage SSL
 complete -c forge -f -n "__fish_use_subcommand" -a "certs" -d "Manage SSL certificates (alias)"
 complete -c forge -f -n "__fish_use_subcommand" -a "firewall-rules" -d "Manage firewall rules"
 complete -c forge -f -n "__fish_use_subcommand" -a "fw" -d "Manage firewall rules (alias)"
+complete -c forge -f -n "__fish_use_subcommand" -a "ssh" -d "Open an SSH session to a server"
 complete -c forge -f -n "__fish_use_subcommand" -a "ssh-keys" -d "Manage SSH keys"
 complete -c forge -f -n "__fish_use_subcommand" -a "backups" -d "Manage backup configurations"
 complete -c forge -f -n "__fish_use_subcommand" -a "commands" -d "Manage site commands"
 complete -c forge -f -n "__fish_use_subcommand" -a "scheduled-jobs" -d "Manage scheduled jobs"
+complete -c forge -f -n "__fish_use_subcommand" -a "services" -d "List and restart server services"
 complete -c forge -f -n "__fish_use_subcommand" -a "user" -d "Display authenticated user profile"
 complete -c forge -f -n "__fish_use_subcommand" -a "monitors" -d "Manage server monitors"
 complete -c forge -f -n "__fish_use_subcommand" -a "nginx-templates" -d "Manage Nginx templates"
@@ -808,6 +843,8 @@ complete -c forge -f -n "__fish_seen_subcommand_from sites" -a "get" -d "Get sit
 complete -c forge -f -n "__fish_seen_subcommand_from deployments d" -a "list" -d "List deployments"
 complete -c forge -f -n "__fish_seen_subcommand_from deployments d" -a "ls" -d "List deployments (alias)"
 complete -c forge -f -n "__fish_seen_subcommand_from deployments d" -a "deploy" -d "Trigger a deployment"
+complete -c forge -f -n "__fish_seen_subcommand_from deployments d" -a "logs" -d "Show deployment output"
+complete -c forge -f -n "__fish_seen_subcommand_from deployments d" -a "log" -d "Show deployment output (alias)"
 
 # databases subcommands
 complete -c forge -f -n "__fish_seen_subcommand_from databases db" -a "list" -d "List databases"
@@ -826,6 +863,8 @@ complete -c forge -f -n "__fish_seen_subcommand_from daemons" -a "list" -d "List
 complete -c forge -f -n "__fish_seen_subcommand_from daemons" -a "ls" -d "List daemons (alias)"
 complete -c forge -f -n "__fish_seen_subcommand_from daemons" -a "get" -d "Get daemon details"
 complete -c forge -f -n "__fish_seen_subcommand_from daemons" -a "restart" -d "Restart a daemon"
+complete -c forge -f -n "__fish_seen_subcommand_from daemons" -a "logs" -d "Show daemon log output"
+complete -c forge -f -n "__fish_seen_subcommand_from daemons" -a "log" -d "Show daemon log output (alias)"
 
 # env subcommands
 complete -c forge -f -n "__fish_seen_subcommand_from env" -a "get" -d "Get env variables"
@@ -870,6 +909,11 @@ complete -c forge -f -n "__fish_seen_subcommand_from scheduled-jobs" -a "get" -d
 complete -c forge -f -n "__fish_seen_subcommand_from scheduled-jobs" -a "create" -d "Create a scheduled job"
 complete -c forge -f -n "__fish_seen_subcommand_from scheduled-jobs" -a "delete" -d "Delete a scheduled job"
 
+# services subcommands
+complete -c forge -f -n "__fish_seen_subcommand_from services" -a "list" -d "List services on a server"
+complete -c forge -f -n "__fish_seen_subcommand_from services" -a "ls" -d "List services on a server (alias)"
+complete -c forge -f -n "__fish_seen_subcommand_from services" -a "restart" -d "Restart a service"
+
 # user subcommands
 complete -c forge -f -n "__fish_seen_subcommand_from user" -a "get" -d "Get the authenticated user profile"
 
@@ -1053,6 +1097,8 @@ function handleCompletionCommand(shell, options = {}) {
 		process.exit(1);
 	}
 }
+//#endregion
+//#region src/commands/certificates/handlers.ts
 function requireServerSiteDomainRaw(ctx, usage) {
 	const server = String(ctx.options.server ?? "");
 	const site = String(ctx.options.site ?? "");
@@ -1104,7 +1150,9 @@ async function certificatesActivate(args, ctx) {
 		ctx.formatter.success(`Certificate for domain ${domainId} activated.`);
 	}, ctx.formatter);
 }
-const handleCertificatesCommand = createCommandRouter({
+//#endregion
+//#region src/commands/certificates/command.ts
+var handleCertificatesCommand = createCommandRouter({
 	resource: "certificates",
 	handlers: {
 		get: [certificatesGet, "args"],
@@ -1112,6 +1160,8 @@ const handleCertificatesCommand = createCommandRouter({
 	},
 	writeSubcommands: ["activate"]
 });
+//#endregion
+//#region src/commands/certificates/help.ts
 function showCertificatesHelp(subcommand) {
 	if (subcommand === "get") console.log(`
 ${colors.bold("forge certificates get")} - Get certificate for a domain
@@ -1150,6 +1200,8 @@ ${colors.bold("NOTE:")}
 Run ${colors.cyan("forge certificates <subcommand> --help")} for details.
 `);
 }
+//#endregion
+//#region src/commands/commands/handlers.ts
 function requireServerAndSiteRaw$2(ctx, usage) {
 	const server = String(ctx.options.server ?? "");
 	const site = String(ctx.options.site ?? "");
@@ -1219,7 +1271,9 @@ async function commandsCreate(ctx) {
 		ctx.formatter.success("Command queued for execution.");
 	}, ctx.formatter);
 }
-const handleCommandsCommand = createCommandRouter({
+//#endregion
+//#region src/commands/commands/command.ts
+var handleCommandsCommand = createCommandRouter({
 	resource: "commands",
 	handlers: {
 		list: commandsList,
@@ -1229,6 +1283,8 @@ const handleCommandsCommand = createCommandRouter({
 	},
 	writeSubcommands: ["create"]
 });
+//#endregion
+//#region src/commands/commands/help.ts
 function showCommandsHelp(subcommand) {
 	if (subcommand === "list" || subcommand === "ls") console.log(`
 ${colors.bold("forge commands list")} - List commands executed on a site
@@ -1278,6 +1334,8 @@ ${colors.bold("OPTIONS:")}
 Run ${colors.cyan("forge commands <subcommand> --help")} for details.
 `);
 }
+//#endregion
+//#region src/commands/config.ts
 /**
 * Config command — manage forge configuration
 */
@@ -1362,6 +1420,8 @@ function handleConfigCommand(subcommand, args, options) {
 function maskToken(token) {
 	return token.length > 8 ? `${token.slice(0, 4)}${"*".repeat(token.length - 8)}${token.slice(-4)}` : "****";
 }
+//#endregion
+//#region src/commands/daemons/handlers.ts
 async function daemonsList(ctx) {
 	const server = String(ctx.options.server ?? "");
 	if (!server) exitWithValidationError("server_id", "forge daemons list --server <server_id>", ctx.formatter);
@@ -1400,6 +1460,22 @@ async function daemonsGet(args, ctx) {
 		]);
 	}, ctx.formatter);
 }
+async function daemonsLogs(args, ctx) {
+	const [id] = args;
+	const server = String(ctx.options.server ?? "");
+	if (!id) exitWithValidationError("daemon_id", "forge daemons logs <daemon_id> --server <server_id>", ctx.formatter);
+	if (!server) exitWithValidationError("server_id", "forge daemons logs <daemon_id> --server <server_id>", ctx.formatter);
+	await runCommand(async () => {
+		const token = ctx.getToken();
+		const execCtx = ctx.createExecutorContext(token);
+		const result = await getDaemonLog({
+			server_id: await resolveServerId(server, execCtx),
+			id
+		}, execCtx);
+		if (result.data) ctx.formatter.outputText(result.data);
+		else ctx.formatter.info("No log output available.");
+	}, ctx.formatter);
+}
 async function daemonsUpdate(args, ctx) {
 	const [id] = args;
 	const server = String(ctx.options.server ?? "");
@@ -1443,17 +1519,23 @@ async function daemonsRestart(args, ctx) {
 		ctx.formatter.success(`Daemon ${id} restarted.`);
 	}, ctx.formatter);
 }
-const handleDaemonsCommand = createCommandRouter({
+//#endregion
+//#region src/commands/daemons/command.ts
+var handleDaemonsCommand = createCommandRouter({
 	resource: "daemons",
 	handlers: {
 		list: daemonsList,
 		ls: daemonsList,
 		get: [daemonsGet, "args"],
+		logs: [daemonsLogs, "args"],
+		log: [daemonsLogs, "args"],
 		restart: [daemonsRestart, "args"],
 		update: [daemonsUpdate, "args"]
 	},
 	writeSubcommands: ["restart", "update"]
 });
+//#endregion
+//#region src/commands/daemons/help.ts
 function showDaemonsHelp(subcommand) {
 	if (subcommand === "list" || subcommand === "ls") console.log(`
 ${colors.bold("forge daemons list")} - List daemons on a server
@@ -1466,6 +1548,12 @@ ${colors.bold("forge daemons get")} - Get daemon details
 
 ${colors.bold("USAGE:")}
   forge daemons get <daemon_id> --server <server_id>
+`);
+	else if (subcommand === "logs" || subcommand === "log") console.log(`
+${colors.bold("forge daemons logs")} - Show the log output of a daemon
+
+${colors.bold("USAGE:")}
+  forge daemons logs <daemon_id> --server <server_id>
 `);
 	else if (subcommand === "update") console.log(`
 ${colors.bold("forge daemons update")} - Update a daemon
@@ -1488,6 +1576,7 @@ ${colors.bold("USAGE:")}
 ${colors.bold("SUBCOMMANDS:")}
   list, ls            List daemons
   get <id>            Get daemon details
+  logs <id>           Show the log output of a daemon
   update <id>         Update a daemon
   restart <id>        Restart a daemon
 
@@ -1498,6 +1587,8 @@ ${colors.bold("OPTIONS:")}
 Run ${colors.cyan("forge daemons <subcommand> --help")} for details.
 `);
 }
+//#endregion
+//#region src/commands/databases/handlers.ts
 async function databasesList(ctx) {
 	const server = String(ctx.options.server ?? "");
 	if (!server) exitWithValidationError("server_id", "forge databases list --server <server_id>", ctx.formatter);
@@ -1532,7 +1623,9 @@ async function databasesGet(args, ctx) {
 		]);
 	}, ctx.formatter);
 }
-const handleDatabasesCommand = createCommandRouter({
+//#endregion
+//#region src/commands/databases/command.ts
+var handleDatabasesCommand = createCommandRouter({
 	resource: "databases",
 	handlers: {
 		list: databasesList,
@@ -1540,6 +1633,8 @@ const handleDatabasesCommand = createCommandRouter({
 		get: [databasesGet, "args"]
 	}
 });
+//#endregion
+//#region src/commands/databases/help.ts
 function showDatabasesHelp(subcommand) {
 	if (subcommand === "list" || subcommand === "ls") console.log(`
 ${colors.bold("forge databases list")} - List databases on a server
@@ -1577,6 +1672,8 @@ ${colors.bold("OPTIONS:")}
 Run ${colors.cyan("forge databases <subcommand> --help")} for details.
 `);
 }
+//#endregion
+//#region src/commands/database-users/handlers.ts
 async function databaseUsersList(ctx) {
 	const server = String(ctx.options.server ?? "");
 	if (!server) exitWithValidationError("server_id", "forge database-users list --server <server_id>", ctx.formatter);
@@ -1677,7 +1774,9 @@ async function databaseUsersDelete(args, ctx) {
 		ctx.formatter.success(`Database user ${id} deleted.`);
 	}, ctx.formatter);
 }
-const handleDatabaseUsersCommand = createCommandRouter({
+//#endregion
+//#region src/commands/database-users/command.ts
+var handleDatabaseUsersCommand = createCommandRouter({
 	resource: "database-users",
 	handlers: {
 		list: databaseUsersList,
@@ -1693,6 +1792,8 @@ const handleDatabaseUsersCommand = createCommandRouter({
 		"delete"
 	]
 });
+//#endregion
+//#region src/commands/database-users/help.ts
 function showDatabaseUsersHelp(subcommand) {
 	if (subcommand === "list" || subcommand === "ls") console.log(`
 ${colors.bold("forge database-users list")} - List database users on a server
@@ -1761,6 +1862,8 @@ ${colors.bold("OPTIONS:")}
 Run ${colors.cyan("forge database-users <subcommand> --help")} for details.
 `);
 }
+//#endregion
+//#region src/commands/deployments/handlers.ts
 async function deploymentsList(ctx) {
 	const server = String(ctx.options.server ?? "");
 	const site = String(ctx.options.site ?? "");
@@ -1782,6 +1885,38 @@ async function deploymentsList(ctx) {
 		], "No deployments found.", (d) => `${String(d.id).padEnd(8)} ${d.status.padEnd(12)} ${(d.commit.hash ?? "—").padEnd(10)} ${d.started_at}`);
 	}, ctx.formatter);
 }
+async function deploymentsLogs(args, ctx) {
+	const [deploymentId] = args;
+	const server = String(ctx.options.server ?? "");
+	const site = String(ctx.options.site ?? "");
+	if (!server) exitWithValidationError("server_id", "forge deployments logs [deployment_id] --server <server_id> --site <site_id>", ctx.formatter);
+	if (!site) exitWithValidationError("site_id", "forge deployments logs [deployment_id] --server <server_id> --site <site_id>", ctx.formatter);
+	await runCommand(async () => {
+		const token = ctx.getToken();
+		const execCtx = ctx.createExecutorContext(token);
+		const server_id = await resolveServerId(server, execCtx);
+		const site_id = await resolveSiteId(site, server_id, execCtx);
+		let deployment_id = deploymentId;
+		if (!deployment_id) {
+			const deployments = await listDeployments({
+				server_id,
+				site_id
+			}, execCtx);
+			if (deployments.data.length === 0) {
+				ctx.formatter.info("No deployments found.");
+				return;
+			}
+			deployment_id = String(deployments.data[0].id);
+		}
+		const result = await getDeploymentLog({
+			server_id,
+			site_id,
+			deployment_id
+		}, execCtx);
+		if (result.data) ctx.formatter.outputText(result.data);
+		else ctx.formatter.info("No log output available.");
+	}, ctx.formatter);
+}
 async function deploymentsDeploy(ctx) {
 	const server = String(ctx.options.server ?? "");
 	const site = String(ctx.options.site ?? "");
@@ -1811,15 +1946,21 @@ async function deploymentsDeploy(ctx) {
 		else throw new ApiError(`Deployment failed for site ${site_id} (${elapsedSec}s).`);
 	}, ctx.formatter);
 }
-const handleDeploymentsCommand = createCommandRouter({
+//#endregion
+//#region src/commands/deployments/command.ts
+var handleDeploymentsCommand = createCommandRouter({
 	resource: "deployments",
 	handlers: {
 		list: deploymentsList,
 		ls: deploymentsList,
-		deploy: deploymentsDeploy
+		deploy: deploymentsDeploy,
+		logs: [deploymentsLogs, "args"],
+		log: [deploymentsLogs, "args"]
 	},
 	writeSubcommands: ["deploy"]
 });
+//#endregion
+//#region src/commands/deployments/help.ts
 function showDeploymentsHelp(subcommand) {
 	if (subcommand === "list" || subcommand === "ls") console.log(`
 ${colors.bold("forge deployments list")} - List deployments for a site
@@ -1827,6 +1968,17 @@ ${colors.bold("forge deployments list")} - List deployments for a site
 ${colors.bold("USAGE:")}
   forge deployments list --server <server_id> --site <site_id> [options]
 
+${colors.bold("OPTIONS:")}
+  --server <id>       Server ID (required)
+  --site <id>         Site ID (required)
+  -f, --format <fmt>  Output format: json, human, table
+`);
+	else if (subcommand === "logs" || subcommand === "log") console.log(`
+${colors.bold("forge deployments logs")} - Show output of a deployment (latest if no id)
+
+${colors.bold("USAGE:")}
+  forge deployments logs [deployment_id] --server <server_id> --site <site_id>
+
 ${colors.bold("OPTIONS:")}
   --server <id>       Server ID (required)
   --site <id>         Site ID (required)
@@ -1856,6 +2008,7 @@ ${colors.bold("ALIASES:")}
 ${colors.bold("SUBCOMMANDS:")}
   list, ls            List deployments for a site
   deploy              Trigger a deployment
+  logs                Show output of a deployment (latest if no id)
 
 ${colors.bold("OPTIONS:")}
   --server <id>       Server ID (required)
@@ -1865,6 +2018,8 @@ ${colors.bold("OPTIONS:")}
 Run ${colors.cyan("forge deployments <subcommand> --help")} for details.
 `);
 }
+//#endregion
+//#region src/commands/env/handlers.ts
 async function envGet(ctx) {
 	const server = String(ctx.options.server ?? "");
 	const site = String(ctx.options.site ?? "");
@@ -1901,7 +2056,9 @@ async function envUpdate(ctx) {
 		ctx.formatter.success("Environment variables updated.");
 	}, ctx.formatter);
 }
-const handleEnvCommand = createCommandRouter({
+//#endregion
+//#region src/commands/env/command.ts
+var handleEnvCommand = createCommandRouter({
 	resource: "env",
 	handlers: {
 		get: envGet,
@@ -1909,6 +2066,8 @@ const handleEnvCommand = createCommandRouter({
 	},
 	writeSubcommands: ["update"]
 });
+//#endregion
+//#region src/commands/env/help.ts
 function showEnvHelp(subcommand) {
 	if (subcommand === "get") console.log(`
 ${colors.bold("forge env get")} - Get environment variables
@@ -1941,6 +2100,8 @@ ${colors.bold("OPTIONS:")}
 Run ${colors.cyan("forge env <subcommand> --help")} for details.
 `);
 }
+//#endregion
+//#region src/commands/firewall-rules/handlers.ts
 async function firewallRulesList(ctx) {
 	const server = String(ctx.options.server ?? "");
 	if (!server) exitWithValidationError("server_id", "forge firewall-rules list --server <server_id>", ctx.formatter);
@@ -1981,7 +2142,9 @@ async function firewallRulesGet(args, ctx) {
 		]);
 	}, ctx.formatter);
 }
-const handleFirewallRulesCommand = createCommandRouter({
+//#endregion
+//#region src/commands/firewall-rules/command.ts
+var handleFirewallRulesCommand = createCommandRouter({
 	resource: "firewall-rules",
 	handlers: {
 		list: firewallRulesList,
@@ -1989,6 +2152,8 @@ const handleFirewallRulesCommand = createCommandRouter({
 		get: [firewallRulesGet, "args"]
 	}
 });
+//#endregion
+//#region src/commands/firewall-rules/help.ts
 function showFirewallRulesHelp(subcommand) {
 	if (subcommand === "list" || subcommand === "ls") console.log(`
 ${colors.bold("forge firewall-rules list")} - List firewall rules on a server
@@ -2022,6 +2187,8 @@ ${colors.bold("OPTIONS:")}
 Run ${colors.cyan("forge firewall-rules <subcommand> --help")} for details.
 `);
 }
+//#endregion
+//#region src/commands/monitors/handlers.ts
 async function monitorsList(ctx) {
 	const server = String(ctx.options.server ?? "");
 	if (!server) exitWithValidationError("server_id", "forge monitors list --server <server_id>", ctx.formatter);
@@ -2107,7 +2274,9 @@ async function monitorsDelete(args, ctx) {
 		ctx.formatter.success(`Monitor ${id} deleted.`);
 	}, ctx.formatter);
 }
-const handleMonitorsCommand = createCommandRouter({
+//#endregion
+//#region src/commands/monitors/command.ts
+var handleMonitorsCommand = createCommandRouter({
 	resource: "monitors",
 	handlers: {
 		list: monitorsList,
@@ -2118,6 +2287,8 @@ const handleMonitorsCommand = createCommandRouter({
 	},
 	writeSubcommands: ["create", "delete"]
 });
+//#endregion
+//#region src/commands/monitors/help.ts
 function showMonitorsHelp(subcommand) {
 	if (subcommand === "list" || subcommand === "ls") console.log(`
 ${colors.bold("forge monitors list")} - List monitors on a server
@@ -2174,6 +2345,8 @@ ${colors.bold("OPTIONS:")}
 Run ${colors.cyan("forge monitors <subcommand> --help")} for details.
 `);
 }
+//#endregion
+//#region src/commands/nginx/handlers.ts
 async function nginxGet(ctx) {
 	const server = String(ctx.options.server ?? "");
 	const site = String(ctx.options.site ?? "");
@@ -2210,7 +2383,9 @@ async function nginxUpdate(ctx) {
 		ctx.formatter.success("Nginx configuration updated.");
 	}, ctx.formatter);
 }
-const handleNginxCommand = createCommandRouter({
+//#endregion
+//#region src/commands/nginx/command.ts
+var handleNginxCommand = createCommandRouter({
 	resource: "nginx",
 	handlers: {
 		get: nginxGet,
@@ -2218,6 +2393,8 @@ const handleNginxCommand = createCommandRouter({
 	},
 	writeSubcommands: ["update"]
 });
+//#endregion
+//#region src/commands/nginx/help.ts
 function showNginxHelp(subcommand) {
 	if (subcommand === "get") console.log(`
 ${colors.bold("forge nginx get")} - Get nginx configuration
@@ -2249,6 +2426,8 @@ ${colors.bold("OPTIONS:")}
 Run ${colors.cyan("forge nginx <subcommand> --help")} for details.
 `);
 }
+//#endregion
+//#region src/commands/nginx-templates/handlers.ts
 async function nginxTemplatesList(ctx) {
 	const server = String(ctx.options.server ?? "");
 	if (!server) exitWithValidationError("server_id", "forge nginx-templates list --server <server_id>", ctx.formatter);
@@ -2313,11 +2492,14 @@ async function nginxTemplatesUpdate(args, ctx) {
 	await runCommand(async () => {
 		const token = ctx.getToken();
 		const execCtx = ctx.createExecutorContext(token);
+		const server_id = await resolveServerId(server, execCtx);
+		const name = ctx.options.name ? String(ctx.options.name) : void 0;
+		const content = ctx.options.content ? String(ctx.options.content) : void 0;
 		const result = await updateNginxTemplate({
-			server_id: await resolveServerId(server, execCtx),
+			server_id,
 			id,
-			name: ctx.options.name ? String(ctx.options.name) : void 0,
-			content: ctx.options.content ? String(ctx.options.content) : void 0
+			name,
+			content
 		}, execCtx);
 		ctx.formatter.outputOne(result.data, [
 			"id",
@@ -2341,7 +2523,9 @@ async function nginxTemplatesDelete(args, ctx) {
 		ctx.formatter.success(`Nginx template ${id} deleted.`);
 	}, ctx.formatter);
 }
-const handleNginxTemplatesCommand = createCommandRouter({
+//#endregion
+//#region src/commands/nginx-templates/command.ts
+var handleNginxTemplatesCommand = createCommandRouter({
 	resource: "nginx-templates",
 	handlers: {
 		list: nginxTemplatesList,
@@ -2357,6 +2541,8 @@ const handleNginxTemplatesCommand = createCommandRouter({
 		"delete"
 	]
 });
+//#endregion
+//#region src/commands/nginx-templates/help.ts
 function showNginxTemplatesHelp(subcommand) {
 	if (subcommand === "list" || subcommand === "ls") console.log(`
 ${colors.bold("forge nginx-templates list")} - List Nginx templates on a server
@@ -2424,6 +2610,8 @@ ${colors.bold("OPTIONS:")}
 Run ${colors.cyan("forge nginx-templates <subcommand> --help")} for details.
 `);
 }
+//#endregion
+//#region src/commands/recipes/handlers.ts
 async function recipesList(ctx) {
 	await runCommand(async () => {
 		const token = ctx.getToken();
@@ -2492,7 +2680,9 @@ async function recipesRun(args, ctx) {
 		ctx.formatter.success(`Recipe ${id} dispatched to ${servers.length} server(s).`);
 	}, ctx.formatter);
 }
-const handleRecipesCommand = createCommandRouter({
+//#endregion
+//#region src/commands/recipes/command.ts
+var handleRecipesCommand = createCommandRouter({
 	resource: "recipes",
 	handlers: {
 		list: recipesList,
@@ -2503,6 +2693,8 @@ const handleRecipesCommand = createCommandRouter({
 	},
 	writeSubcommands: ["update", "run"]
 });
+//#endregion
+//#region src/commands/recipes/help.ts
 function showRecipesHelp(subcommand) {
 	if (subcommand === "list" || subcommand === "ls") console.log(`
 ${colors.bold("forge recipes list")} - List all recipes
@@ -2554,6 +2746,8 @@ ${colors.bold("OPTIONS:")}
 Run ${colors.cyan("forge recipes <subcommand> --help")} for details.
 `);
 }
+//#endregion
+//#region src/commands/redirect-rules/handlers.ts
 function requireServerAndSiteRaw$1(ctx, usage) {
 	const server = String(ctx.options.server ?? "");
 	const site = String(ctx.options.site ?? "");
@@ -2644,7 +2838,9 @@ async function redirectRulesDelete(args, ctx) {
 		ctx.formatter.success(`Redirect rule ${id} deleted.`);
 	}, ctx.formatter);
 }
-const handleRedirectRulesCommand = createCommandRouter({
+//#endregion
+//#region src/commands/redirect-rules/command.ts
+var handleRedirectRulesCommand = createCommandRouter({
 	resource: "redirect-rules",
 	handlers: {
 		list: redirectRulesList,
@@ -2655,6 +2851,8 @@ const handleRedirectRulesCommand = createCommandRouter({
 	},
 	writeSubcommands: ["create", "delete"]
 });
+//#endregion
+//#region src/commands/redirect-rules/help.ts
 function showRedirectRulesHelp(subcommand) {
 	if (subcommand === "list" || subcommand === "ls") console.log(`
 ${colors.bold("forge redirect-rules list")} - List redirect rules for a site
@@ -2712,6 +2910,8 @@ ${colors.bold("OPTIONS:")}
 Run ${colors.cyan("forge redirect-rules <subcommand> --help")} for details.
 `);
 }
+//#endregion
+//#region src/commands/scheduled-jobs/handlers.ts
 async function scheduledJobsList(ctx) {
 	const server = String(ctx.options.server ?? "");
 	const site = ctx.options.site ? String(ctx.options.site) : void 0;
@@ -2742,10 +2942,11 @@ async function scheduledJobsGet(args, ctx) {
 		const token = ctx.getToken();
 		const execCtx = ctx.createExecutorContext(token);
 		const server_id = await resolveServerId(server, execCtx);
+		const site_id = site ? await resolveSiteId(site, server_id, execCtx) : void 0;
 		const result = await getScheduledJob({
 			server_id,
 			id,
-			site_id: site ? await resolveSiteId(site, server_id, execCtx) : void 0
+			site_id
 		}, execCtx);
 		ctx.formatter.outputOne(result.data, [
 			"id",
@@ -2800,15 +3001,18 @@ async function scheduledJobsDelete(args, ctx) {
 		const token = ctx.getToken();
 		const execCtx = ctx.createExecutorContext(token);
 		const server_id = await resolveServerId(server, execCtx);
+		const site_id = site ? await resolveSiteId(site, server_id, execCtx) : void 0;
 		await deleteScheduledJob({
 			server_id,
 			id,
-			site_id: site ? await resolveSiteId(site, server_id, execCtx) : void 0
+			site_id
 		}, execCtx);
 		ctx.formatter.success(`Scheduled job ${id} deleted.`);
 	}, ctx.formatter);
 }
-const handleScheduledJobsCommand = createCommandRouter({
+//#endregion
+//#region src/commands/scheduled-jobs/command.ts
+var handleScheduledJobsCommand = createCommandRouter({
 	resource: "scheduled-jobs",
 	handlers: {
 		list: scheduledJobsList,
@@ -2819,6 +3023,8 @@ const handleScheduledJobsCommand = createCommandRouter({
 	},
 	writeSubcommands: ["create", "delete"]
 });
+//#endregion
+//#region src/commands/scheduled-jobs/help.ts
 function showScheduledJobsHelp(subcommand) {
 	if (subcommand === "list" || subcommand === "ls") console.log(`
 ${colors.bold("forge scheduled-jobs list")} - List scheduled jobs on a server
@@ -2872,6 +3078,8 @@ ${colors.bold("OPTIONS:")}
 Run ${colors.cyan("forge scheduled-jobs <subcommand> --help")} for details.
 `);
 }
+//#endregion
+//#region src/commands/security-rules/handlers.ts
 function requireServerAndSiteRaw(ctx, usage) {
 	const server = String(ctx.options.server ?? "");
 	const site = String(ctx.options.site ?? "");
@@ -2987,7 +3195,9 @@ async function securityRulesDelete(args, ctx) {
 		ctx.formatter.success(`Security rule ${id} deleted.`);
 	}, ctx.formatter);
 }
-const handleSecurityRulesCommand = createCommandRouter({
+//#endregion
+//#region src/commands/security-rules/command.ts
+var handleSecurityRulesCommand = createCommandRouter({
 	resource: "security-rules",
 	handlers: {
 		list: securityRulesList,
@@ -3003,6 +3213,8 @@ const handleSecurityRulesCommand = createCommandRouter({
 		"delete"
 	]
 });
+//#endregion
+//#region src/commands/security-rules/help.ts
 function showSecurityRulesHelp(subcommand) {
 	if (subcommand === "list" || subcommand === "ls") console.log(`
 ${colors.bold("forge security-rules list")} - List security rules for a site
@@ -3072,6 +3284,8 @@ ${colors.bold("OPTIONS:")}
 Run ${colors.cyan("forge security-rules <subcommand> --help")} for details.
 `);
 }
+//#endregion
+//#region src/commands/servers/handlers.ts
 /**
 * CLI handlers for servers commands.
 * Delegates all HTTP logic to forge-core executors.
@@ -3121,7 +3335,9 @@ async function serversReboot(args, ctx) {
 		ctx.formatter.success(`Server ${server_id} reboot initiated.`);
 	}, ctx.formatter);
 }
-const handleServersCommand = createCommandRouter({
+//#endregion
+//#region src/commands/servers/command.ts
+var handleServersCommand = createCommandRouter({
 	resource: "servers",
 	handlers: {
 		list: serversList,
@@ -3131,6 +3347,8 @@ const handleServersCommand = createCommandRouter({
 	},
 	writeSubcommands: ["reboot"]
 });
+//#endregion
+//#region src/commands/servers/help.ts
 function showServersHelp(subcommand) {
 	if (subcommand === "list" || subcommand === "ls") console.log(`
 ${colors.bold("forge servers list")} - List all servers
@@ -3201,6 +3419,124 @@ ${colors.bold("EXAMPLES:")}
 Run ${colors.cyan("forge servers <subcommand> --help")} for subcommand details.
 `);
 }
+//#endregion
+//#region src/commands/services/handlers.ts
+/**
+* List services on a server with a derived availability flag.
+*/
+async function servicesList(args, ctx) {
+	const [server] = args;
+	if (!server) exitWithValidationError("server", "forge services list <server>", ctx.formatter);
+	await runCommand(async () => {
+		const token = ctx.getToken();
+		const execCtx = ctx.createExecutorContext(token);
+		const result = await listServices({ server_id: await resolveServerId(server, execCtx) }, execCtx);
+		ctx.formatter.outputList(result.data, [
+			"service",
+			"available",
+			"detail"
+		], "No services.", (row) => {
+			const status = row.available ? "yes" : "no";
+			const detail = row.detail ? ` (${row.detail})` : "";
+			return `${row.service.padEnd(12)}${status}${detail}`;
+		});
+	}, ctx.formatter);
+}
+/**
+* Restart a service on a server.
+*/
+async function servicesRestart(args, ctx) {
+	const [server, service] = args;
+	if (!server) exitWithValidationError("server", "forge services restart <server> <service>", ctx.formatter);
+	if (!service) exitWithValidationError("service", "forge services restart <server> <service>", ctx.formatter);
+	const version = ctx.options.version ? String(ctx.options.version) : void 0;
+	await runCommand(async () => {
+		if (!RESTARTABLE_SERVICES.includes(service)) throw new ValidationError(`Invalid service "${service}"`, "service", [`Valid services: ${RESTARTABLE_SERVICES.join(", ")}`]);
+		const token = ctx.getToken();
+		const execCtx = ctx.createExecutorContext(token);
+		const server_id = await resolveServerId(server, execCtx);
+		let resolvedVersion = version;
+		if (service === "php" && !resolvedVersion) {
+			const { data: srv } = await getServer({ server_id }, execCtx);
+			if (!srv.php_version) throw new ValidationError("The php service requires a version", "version", ["Pass --version <php_version> (e.g. --version php83)"]);
+			resolvedVersion = srv.php_version;
+		}
+		await restartService({
+			server_id,
+			service,
+			version: resolvedVersion
+		}, execCtx);
+		ctx.formatter.success(`${service} restart initiated on server ${server_id}.`);
+	}, ctx.formatter);
+}
+//#endregion
+//#region src/commands/services/command.ts
+var handleServicesCommand = createCommandRouter({
+	resource: "services",
+	handlers: {
+		list: [servicesList, "args"],
+		ls: [servicesList, "args"],
+		restart: [servicesRestart, "args"]
+	},
+	writeSubcommands: ["restart"]
+});
+//#endregion
+//#region src/commands/services/help.ts
+function showServicesHelp(subcommand) {
+	if (subcommand === "list" || subcommand === "ls") console.log(`
+${colors.bold("forge services list")} - List services on a server
+
+${colors.bold("USAGE:")}
+  forge services list <server> [options]
+
+${colors.bold("ARGUMENTS:")}
+  <server>            Server ID or name (required)
+
+${colors.bold("NOTES:")}
+  Availability is a heuristic derived from the server object — the API has
+  no services listing endpoint.
+
+${colors.bold("EXAMPLES:")}
+  forge services list 123
+  forge services list my-server --format json
+`);
+	else if (subcommand === "restart") console.log(`
+${colors.bold("forge services restart")} - Restart a service on a server
+
+${colors.bold("USAGE:")}
+  forge services restart <server> <service> [options]
+
+${colors.bold("ARGUMENTS:")}
+  <server>            Server ID or name (required)
+  <service>           One of: nginx, php, mysql, postgres, redis, supervisor
+
+${colors.bold("OPTIONS:")}
+  --version <ver>     PHP version (e.g. php83) — required for the php service
+                        (defaults to the server's php_version when omitted)
+
+${colors.bold("EXAMPLES:")}
+  forge services restart 123 nginx
+  forge services restart 123 php --version php83
+`);
+	else console.log(`
+${colors.bold("forge services")} - List and restart server services
+
+${colors.bold("USAGE:")}
+  forge services <subcommand> [options]
+
+${colors.bold("SUBCOMMANDS:")}
+  list, ls            List services on a server
+  restart <service>   Restart a service (nginx, php, mysql, postgres, redis, supervisor)
+
+${colors.bold("OPTIONS:")}
+  --version <ver>     PHP version (for the php service)
+  -f, --format <fmt>  Output format: json, human, table
+
+Run ${colors.cyan("forge services <subcommand> --help")} for details.
+`);
+}
+//#endregion
+//#region src/commands/sites/handlers.ts
 async function sitesList(ctx) {
 	const server = String(ctx.options.server ?? "");
 	if (!server) exitWithValidationError("server_id", "forge sites list --server <server_id>", ctx.formatter);
@@ -3276,7 +3612,9 @@ async function sitesUpdate(args, ctx) {
 		]);
 	}, ctx.formatter);
 }
-const handleSitesCommand = createCommandRouter({
+//#endregion
+//#region src/commands/sites/command.ts
+var handleSitesCommand = createCommandRouter({
 	resource: "sites",
 	handlers: {
 		list: sitesList,
@@ -3285,6 +3623,8 @@ const handleSitesCommand = createCommandRouter({
 		update: [sitesUpdate, "args"]
 	}
 });
+//#endregion
+//#region src/commands/sites/help.ts
 function showSitesHelp(subcommand) {
 	if (subcommand === "list" || subcommand === "ls") console.log(`
 ${colors.bold("forge sites list")} - List sites on a server
@@ -3335,6 +3675,172 @@ ${colors.bold("EXAMPLES:")}
 Run ${colors.cyan("forge sites <subcommand> --help")} for subcommand details.
 `);
 }
+/**
+* Resolve the concrete user/host/port to connect to.
+*
+* @throws {ValidationError} when the selected IP is not available yet, or the port override is invalid.
+*/
+function resolveSshTarget(server, options = {}) {
+	const user = options.user?.trim() || "forge";
+	const host = options.private ? server.private_ip_address : server.ip_address;
+	if (!host) {
+		const which = options.private ? "private IP address" : "IP address";
+		const hints = [server.is_ready ? "The server is ready but no address is available — check the Forge dashboard." : "The server is still provisioning. Wait until it is ready, then try again.", options.private ? void 0 : "Use --private to connect over the private network."].filter((hint) => Boolean(hint));
+		throw new ValidationError(`Server "${server.name}" has no ${which} available`, "server", hints);
+	}
+	let port = server.ssh_port;
+	if (options.port !== void 0) {
+		const parsed = Number(options.port);
+		if (!Number.isInteger(parsed) || parsed < 1 || parsed > 65535) throw new ValidationError(`Invalid SSH port "${options.port}"`, "port", ["Port must be an integer between 1 and 65535."]);
+		port = parsed;
+	}
+	return {
+		user,
+		host,
+		port
+	};
+}
+/**
+* Build the argument list passed to the `ssh` binary.
+*
+* Any {@link remoteCommand} is appended after the connection flags, so
+* `forge ssh web uptime` runs `uptime` remotely and exits.
+*/
+function buildSshArgs(target, remoteCommand = []) {
+	const args = [
+		`${target.user}@${target.host}`,
+		"-p",
+		String(target.port)
+	];
+	if (remoteCommand.length > 0) args.push(...remoteCommand);
+	return args;
+}
+//#endregion
+//#region src/commands/ssh/handlers.ts
+/**
+* CLI handler for `forge ssh` — open an interactive SSH session to a server.
+*
+* Resolves the server, reads its connection details from the API, then hands
+* off to the local `ssh` binary with an inherited stdio (interactive) session.
+*/
+/**
+* Connect to a server over SSH.
+*
+* @param server - Server ID or name (resolved via {@link resolveServerId}).
+* @param remote - Optional remote command to run instead of an interactive shell.
+* @param ctx - CLI command context.
+*/
+async function sshConnect(server, remote, ctx) {
+	if (!server) exitWithValidationError("server", "forge ssh <server> [command...]", ctx.formatter);
+	await runCommand(async () => {
+		const token = ctx.getToken();
+		const execCtx = ctx.createExecutorContext(token);
+		const server_id = await resolveServerId(server, execCtx);
+		const { data } = await getServer({ server_id }, execCtx);
+		const target = resolveSshTarget(data, {
+			user: typeof ctx.options.user === "string" ? ctx.options.user : void 0,
+			private: ctx.options.private === true,
+			port: typeof ctx.options.port === "string" ? ctx.options.port : void 0
+		});
+		const sshArgs = buildSshArgs(target, remote);
+		const printable = `ssh ${sshArgs.join(" ")}`;
+		if (ctx.formatter.isJson()) {
+			ctx.formatter.output({
+				command: printable,
+				...target,
+				args: sshArgs
+			});
+			return;
+		}
+		if (ctx.options["dry-run"] === true) {
+			console.log(printable);
+			return;
+		}
+		const auditArgs = {
+			server: server_id,
+			user: target.user,
+			host: target.host,
+			port: target.port
+		};
+		try {
+			const child = spawnSync("ssh", sshArgs, { stdio: "inherit" });
+			if (child.error) throw child.error;
+			getCliAuditLogger().log({
+				source: "cli",
+				resource: "ssh",
+				action: "connect",
+				args: auditArgs,
+				status: "success"
+			});
+			if (typeof child.status === "number" && child.status !== 0) process.exit(child.status);
+		} catch (err) {
+			getCliAuditLogger().log({
+				source: "cli",
+				resource: "ssh",
+				action: "connect",
+				args: auditArgs,
+				status: "error",
+				error: err instanceof Error ? err.message : String(err)
+			});
+			throw err;
+		}
+	}, ctx.formatter);
+}
+//#endregion
+//#region src/commands/ssh/command.ts
+/**
+* Route the top-level `forge ssh` command.
+*
+* Unlike resource commands there is no sub-action: the first positional is the
+* server, and any remaining positionals form an optional remote command.
+*/
+async function handleSshCommand(server, remote, options) {
+	await sshConnect(server, remote, createContext(options));
+}
+//#endregion
+//#region src/commands/ssh/help.ts
+function showSshHelp() {
+	console.log(`
+${colors.bold("forge ssh")} - Open an SSH session to a server
+
+${colors.bold("USAGE:")}
+  forge ssh <server> [command...] [options]
+
+${colors.bold("ARGUMENTS:")}
+  <server>            Server ID or name (required)
+  [command...]        Optional remote command to run, then exit
+
+${colors.bold("OPTIONS:")}
+  --user <name>       SSH user (default: forge)
+  --private           Connect over the private IP address
+  --port <n>          Override the server's SSH port
+  --dry-run           Print the ssh command instead of connecting
+  -f, --format json   Print the resolved connection details as JSON
+  -h, --help          Show this help
+
+${colors.bold("EXAMPLES:")}
+  # Interactive session (connects as forge@<ip>)
+  forge ssh my-server
+
+  # Connect as a custom user
+  forge ssh my-server --user deploy
+
+  # Use the private network
+  forge ssh my-server --private
+
+  # Run a one-off remote command
+  forge ssh my-server uptime
+
+  # Just show the command that would run
+  forge ssh my-server --dry-run
+
+${colors.bold("NOTES:")}
+  Requires your local SSH key to be authorized on the server; this command
+  launches ssh, it does not upload keys.
+`);
+}
+//#endregion
+//#region src/commands/ssh-keys/handlers.ts
 async function sshKeysList(ctx) {
 	const server = String(ctx.options.server ?? "");
 	if (!server) exitWithValidationError("server_id", "forge ssh-keys list --server <server_id>", ctx.formatter);
@@ -3369,7 +3875,9 @@ async function sshKeysGet(args, ctx) {
 		]);
 	}, ctx.formatter);
 }
-const handleSshKeysCommand = createCommandRouter({
+//#endregion
+//#region src/commands/ssh-keys/command.ts
+var handleSshKeysCommand = createCommandRouter({
 	resource: "ssh-keys",
 	handlers: {
 		list: sshKeysList,
@@ -3377,6 +3885,8 @@ const handleSshKeysCommand = createCommandRouter({
 		get: [sshKeysGet, "args"]
 	}
 });
+//#endregion
+//#region src/commands/ssh-keys/help.ts
 function showSshKeysHelp(subcommand) {
 	if (subcommand === "list" || subcommand === "ls") console.log(`
 ${colors.bold("forge ssh-keys list")} - List SSH keys on a server
@@ -3407,6 +3917,8 @@ ${colors.bold("OPTIONS:")}
 Run ${colors.cyan("forge ssh-keys <subcommand> --help")} for details.
 `);
 }
+//#endregion
+//#region src/commands/user/handlers.ts
 async function userGet(ctx) {
 	await runCommand(async () => {
 		const token = ctx.getToken();
@@ -3414,10 +3926,14 @@ async function userGet(ctx) {
 		ctx.formatter.output(result.data);
 	}, ctx.formatter);
 }
-const handleUserCommand = createCommandRouter({
+//#endregion
+//#region src/commands/user/command.ts
+var handleUserCommand = createCommandRouter({
 	resource: "user",
 	handlers: { get: userGet }
 });
+//#endregion
+//#region src/commands/user/help.ts
 function showUserHelp(subcommand) {
 	if (subcommand === "get") console.log(`
 ${colors.bold("forge user get")} - Get the authenticated user profile
@@ -3443,6 +3959,8 @@ ${colors.bold("OPTIONS:")}
 Run ${colors.cyan("forge user <subcommand> --help")} for details.
 `);
 }
+//#endregion
+//#region src/utils/args.ts
 function parseArgs(argv = process.argv.slice(2)) {
 	const options = {};
 	const positional = [];
@@ -3479,7 +3997,9 @@ function parseArgs(argv = process.argv.slice(2)) {
 		positional
 	};
 }
-var VERSION = "0.4.4";
+//#endregion
+//#region src/cli.ts
+var VERSION = "0.4.6";
 function showHelp() {
 	console.log(`
 ${colors.bold("forge")} v${VERSION}
@@ -3538,6 +4058,9 @@ ${colors.bold("COMMANDS:")}
     list, ls            List firewall rules (requires --server)
     get <id>            Get firewall rule details (requires --server)
 
+  ssh <server>        Open an SSH session to a server
+                        --user <name> (default: forge), --private, --port <n>
+
   ssh-keys            Manage SSH keys
     list, ls            List SSH keys (requires --server)
     get <id>            Get SSH key details (requires --server)
@@ -3559,6 +4082,10 @@ ${colors.bold("COMMANDS:")}
     create              Create a scheduled job (requires --server --command)
     delete <id>         Delete a scheduled job (requires --server)
 
+  services            List and restart server services
+    list, ls            List services on a server (forge services list <server>)
+    restart <service>   Restart a service (forge services restart <server> <service>)
+
   user                Display authenticated user profile
     get                 Get the authenticated user profile
 
@@ -3647,7 +4174,7 @@ async function main() {
 		showHelp();
 		process.exit(0);
 	}
-	if (options.version || options.v) {
+	if (options.version === true || options.v === true) {
 		console.log(VERSION);
 		process.exit(0);
 	}
@@ -3740,6 +4267,13 @@ async function main() {
 				}
 				await handleFirewallRulesCommand(subcommand ?? "list", positional, options);
 				break;
+			case "ssh":
+				if (wantsHelp) {
+					showSshHelp();
+					process.exit(0);
+				}
+				await handleSshCommand(subcommand, positional, options);
+				break;
 			case "ssh-keys":
 				if (wantsHelp) {
 					showSshKeysHelp(subcommand);
@@ -3768,6 +4302,13 @@ async function main() {
 				}
 				await handleScheduledJobsCommand(subcommand ?? "list", positional, options);
 				break;
+			case "services":
+				if (wantsHelp) {
+					showServicesHelp(subcommand);
+					process.exit(0);
+				}
+				await handleServicesCommand(subcommand ?? "list", positional, options);
+				break;
 			case "user":
 				if (wantsHelp) {
 					showUserHelp(subcommand);
@@ -3831,5 +4372,6 @@ main().catch((error) => {
 	console.error(colors.red("Unhandled error:"), error);
 	process.exit(1);
 });
+//#endregion
 
 //# sourceMappingURL=cli.js.map