@synteq/cli 0.1.0

package/dist/commands/ssh-key/add.js

@@ -0,0 +1,89 @@
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { Flags } from "@oclif/core";
+import { BaseCommand } from "../../base/command.js";
+import { ok } from "../../ui/glyphs.js";
+import { isInteractive, promptString } from "../../ui/wizard.js";
+import { sshFingerprint } from "./list.js";
+const KEY_RE = /^(ssh-|ecdsa-|sk-)/;
+export default class SshKeyAdd extends BaseCommand {
+    static description = "Add an SSH public key to your account.";
+    static examples = [
+        "<%= config.bin %> ssh-key add                                          # interactive: prompts for name + key",
+        "<%= config.bin %> ssh-key add --name laptop --file ~/.ssh/id_ed25519.pub",
+        "<%= config.bin %> ssh-key add --name ci --public-key \"ssh-ed25519 AAAA… ci@runner\"",
+        "<%= config.bin %> ssh-key add --name ci --file ./deploy.pub -o json",
+    ];
+    static flags = {
+        name: Flags.string({
+            description: "Display name for the key (1–100 chars). Prompted if omitted on a TTY.",
+        }),
+        "public-key": Flags.string({
+            description: "OpenSSH public key string (ssh-ed25519 / ssh-rsa / ecdsa-… / sk-…). Exactly one of --public-key / --file.",
+            exclusive: ["file"],
+        }),
+        file: Flags.string({
+            description: "Path to a .pub file to read the key from (e.g. ~/.ssh/id_ed25519.pub). Exactly one of --public-key / --file.",
+            exclusive: ["public-key"],
+        }),
+    };
+    async run() {
+        await this.initClients();
+        const { flags } = await this.parse(SshKeyAdd);
+        const canPrompt = isInteractive() && this.outputFormat === "table";
+        let name = flags.name;
+        if (!name) {
+            if (!canPrompt) {
+                this.error("Provide --name (the display name for the key).", { exit: 1 });
+            }
+            name = await promptString("Name this key", {
+                validate: (s) => s.trim().length <= 100 ? true : "Keep the name under 100 characters.",
+            });
+        }
+        let publicKey = flags["public-key"];
+        let filePath = flags.file;
+        if (!publicKey && !filePath) {
+            if (!canPrompt) {
+                this.error("Provide exactly one of --public-key or --file.", { exit: 1 });
+            }
+            const pasted = await promptString("Paste the public key (or leave blank to load from a .pub file)", { allowEmpty: true });
+            if (pasted.trim()) {
+                publicKey = pasted;
+            }
+            else {
+                filePath = await promptString("Path to the .pub file", {
+                    default: "~/.ssh/id_ed25519.pub",
+                });
+            }
+        }
+        if (filePath) {
+            const path = filePath.replace(/^~(?=\/|$)/, homedir());
+            try {
+                publicKey = readFileSync(path, "utf8");
+            }
+            catch (e) {
+                this.error(`Could not read ${filePath}: ${e.message}`, { exit: 1 });
+            }
+        }
+        publicKey = (publicKey ?? "").trim();
+        if (!KEY_RE.test(publicKey)) {
+            this.error("That doesn't look like an OpenSSH public key (expected it to start with ssh-, ecdsa-, or sk-).", { exit: 1 });
+        }
+        try {
+            const key = await this.clients.api.sshKeys.add({
+                name: name.trim(),
+                public_key: publicKey,
+            });
+            this.emit(key, () => {
+                this.log(ok(`Added SSH key "${key.name}" (${key.id}).`));
+                const fp = sshFingerprint(key.public_key);
+                if (fp)
+                    this.log(`  ${fp}`);
+            });
+        }
+        catch (err) {
+            this.fail(err);
+        }
+    }
+}
+//# sourceMappingURL=add.js.map

package/dist/commands/ssh-key/add.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.js","sourceRoot":"","sources":["../../../src/commands/ssh-key/add.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,MAAM,MAAM,GAAG,oBAAoB,CAAC;AAEpC,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,WAAW;IAChD,MAAM,CAAC,WAAW,GAAG,wCAAwC,CAAC;IAC9D,MAAM,CAAC,QAAQ,GAAG;QAChB,8GAA8G;QAC9G,0EAA0E;QAC1E,sFAAsF;QACtF,qEAAqE;KACtE,CAAC;IACF,MAAM,CAAC,KAAK,GAAG;QACb,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;YACjB,WAAW,EAAE,uEAAuE;SACrF,CAAC;QACF,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC;YACzB,WAAW,EACT,2GAA2G;YAC7G,SAAS,EAAE,CAAC,MAAM,CAAC;SACpB,CAAC;QACF,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;YACjB,WAAW,EACT,8GAA8G;YAChH,SAAS,EAAE,CAAC,YAAY,CAAC;SAC1B,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAE9C,MAAM,SAAS,GACb,aAAa,EAAE,IAAI,IAAI,CAAC,YAAY,KAAK,OAAO,CAAC;QAEnD,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,IAAI,CAAC,KAAK,CAAC,gDAAgD,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,GAAG,MAAM,YAAY,CAAC,eAAe,EAAE;gBACzC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CACd,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,qCAAqC;aACxE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;QACpC,IAAI,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC;QAC1B,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,IAAI,CAAC,KAAK,CAAC,gDAAgD,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,gEAAgE,EAChE,EAAE,UAAU,EAAE,IAAI,EAAE,CACrB,CAAC;YACF,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClB,SAAS,GAAG,MAAM,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,MAAM,YAAY,CAAC,uBAAuB,EAAE;oBACrD,OAAO,EAAE,uBAAuB;iBACjC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;YACvD,IAAI,CAAC;gBACH,SAAS,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,KAAK,CAAC,kBAAkB,QAAQ,KAAM,CAAW,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QAED,SAAS,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CACR,gGAAgG,EAChG,EAAE,IAAI,EAAE,CAAC,EAAE,CACZ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;gBAC7C,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;gBACjB,UAAU,EAAE,SAAS;aACtB,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;gBAClB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAkB,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;gBACzD,MAAM,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAC1C,IAAI,EAAE;oBAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC"}

package/dist/commands/ssh-key/delete.d.ts

@@ -0,0 +1,12 @@
+import { BaseCommand } from "../../base/command.js";
+export default class SshKeyDelete extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        yes: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/ssh-key/delete.js

@@ -0,0 +1,43 @@
+import { Args, Flags } from "@oclif/core";
+import { BaseCommand } from "../../base/command.js";
+import { confirmAction, isInteractive } from "../../ui/wizard.js";
+import { ok } from "../../ui/glyphs.js";
+export default class SshKeyDelete extends BaseCommand {
+    static description = "Delete an SSH key from your account.";
+    static examples = [
+        "<%= config.bin %> ssh-key delete 019e…            # asks for confirmation on a TTY",
+        "<%= config.bin %> ssh-key delete 019e… --yes      # required when scripted / piped",
+    ];
+    static args = {
+        id: Args.string({ description: "SSH key id (from `synteq ssh-key list`).", required: true }),
+    };
+    static flags = {
+        yes: Flags.boolean({
+            description: "Skip the confirmation prompt. Required when stdout/stdin isn't a TTY (scripts, agents, pipes).",
+        }),
+    };
+    async run() {
+        await this.initClients();
+        const { args, flags } = await this.parse(SshKeyDelete);
+        try {
+            if (!flags.yes) {
+                if (!isInteractive() || this.outputFormat === "json") {
+                    this.error("Refusing to delete without confirmation. Pass --yes when running non-interactively.", { exit: 1 });
+                }
+                const key = (await this.clients.api.sshKeys.list()).find((k) => k.id === args.id);
+                const label = key ? `"${key.name}" (${args.id})` : args.id;
+                const go = await confirmAction(`Delete SSH key ${label}?`, false);
+                if (!go)
+                    this.error("Cancelled.", { exit: 1 });
+            }
+            await this.clients.api.sshKeys.remove(args.id);
+            this.emit({ deleted: true, id: args.id }, () => {
+                this.log(ok(`Deleted SSH key ${args.id}.`));
+            });
+        }
+        catch (err) {
+            this.fail(err);
+        }
+    }
+}
+//# sourceMappingURL=delete.js.map

package/dist/commands/ssh-key/delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../src/commands/ssh-key/delete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAC;AAExC,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,WAAW;IACnD,MAAM,CAAC,WAAW,GAAG,sCAAsC,CAAC;IAC5D,MAAM,CAAC,QAAQ,GAAG;QAChB,oFAAoF;QACpF,oFAAoF;KACrF,CAAC;IACF,MAAM,CAAC,IAAI,GAAG;QACZ,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,0CAA0C,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;KAC7F,CAAC;IACF,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC;YACjB,WAAW,EACT,gGAAgG;SACnG,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAEvD,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBACf,IAAI,CAAC,aAAa,EAAE,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;oBACrD,IAAI,CAAC,KAAK,CACR,qFAAqF,EACrF,EAAE,IAAI,EAAE,CAAC,EAAE,CACZ,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;gBAClF,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3D,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,kBAAkB,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC;gBAClE,IAAI,CAAC,EAAE;oBAAE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACjD,CAAC;YAED,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE;gBAC7C,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,mBAAmB,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9C,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC"}

package/dist/commands/ssh-key/list.d.ts

@@ -0,0 +1,7 @@
+import { BaseCommand } from "../../base/command.js";
+export declare function sshFingerprint(publicKey: string): string;
+export default class SshKeyList extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    run(): Promise<void>;
+}

package/dist/commands/ssh-key/list.js

@@ -0,0 +1,47 @@
+import { createHash } from "node:crypto";
+import { BaseCommand } from "../../base/command.js";
+import { renderTable } from "../../ui/table.js";
+export function sshFingerprint(publicKey) {
+    try {
+        const b64 = publicKey.trim().split(/\s+/)[1];
+        if (!b64)
+            return "";
+        const digest = createHash("sha256")
+            .update(Buffer.from(b64, "base64"))
+            .digest("base64")
+            .replace(/=+$/, "");
+        return `SHA256:${digest}`;
+    }
+    catch {
+        return "";
+    }
+}
+export default class SshKeyList extends BaseCommand {
+    static description = "List SSH public keys saved on your account.";
+    static examples = [
+        "<%= config.bin %> ssh-key list",
+        "<%= config.bin %> ssh-key list -o json   # full payload incl. the public keys",
+    ];
+    async run() {
+        await this.initClients();
+        try {
+            const keys = await this.clients.api.sshKeys.list();
+            this.emit(keys, () => {
+                if (keys.length === 0) {
+                    this.log("No SSH keys. Add one with `synteq ssh-key add --name … --file …`.");
+                    return;
+                }
+                this.log(renderTable(["ID", "NAME", "FINGERPRINT", "CREATED"], keys.map((k) => [
+                    k.id,
+                    k.name,
+                    sshFingerprint(k.public_key),
+                    k.created_at.slice(0, 10),
+                ])));
+            });
+        }
+        catch (err) {
+            this.fail(err);
+        }
+    }
+}
+//# sourceMappingURL=list.js.map

package/dist/commands/ssh-key/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../src/commands/ssh-key/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;aAChC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;aAClC,MAAM,CAAC,QAAQ,CAAC;aAChB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtB,OAAO,UAAU,MAAM,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,MAAM,CAAC,WAAW,GAAG,6CAA6C,CAAC;IACnE,MAAM,CAAC,QAAQ,GAAG;QAChB,gCAAgC;QAChC,+EAA+E;KAChF,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE;gBACnB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACtB,IAAI,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;oBAC9E,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,GAAG,CACN,WAAW,CACT,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC,EACxC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;oBACd,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,IAAI;oBACN,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC;oBAC5B,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;iBAC1B,CAAC,CACH,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC"}

package/dist/commands/storage/attach.d.ts

@@ -0,0 +1,12 @@
+import { BaseCommand } from "../../base/command.js";
+export default class StorageAttach extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        volume: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        vps: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/storage/attach.js

@@ -0,0 +1,48 @@
+import { Args, Flags } from "@oclif/core";
+import { BaseCommand } from "../../base/command.js";
+import { resolveVolume } from "../../ui/volume-resolve.js";
+import { resolveVpsRef } from "../../ui/vps-resolve.js";
+export default class StorageAttach extends BaseCommand {
+    static description = [
+        "Attach a block volume to a VPS.",
+        "",
+        "The volume must be detached and live on the same cluster/location as",
+        "the target VPS. Re-attaching a volume re-binds its existing disk, so",
+        "data is preserved across detach/attach cycles.",
+    ].join("\n");
+    static examples = [
+        "<%= config.bin %> storage attach backups --vps web-01               # by volume name + VPS hostname",
+        "<%= config.bin %> storage attach 019e... --vps 019f...",
+        "<%= config.bin %> storage attach 019e... --vps 019f... -o json      # emits {status, volume_id, vps_id, disk_slot}",
+    ];
+    static args = {
+        volume: Args.string({
+            description: "Volume — short id from `storage list`, full UUID, or name. Must be detached.",
+            required: true,
+        }),
+    };
+    static flags = {
+        vps: Flags.string({
+            description: "Target VPS — short id from `vps list`, full UUID, hostname, or IP. Must be on the volume's cluster.",
+            required: true,
+        }),
+    };
+    async run() {
+        await this.initClients();
+        const { args, flags } = await this.parse(StorageAttach);
+        try {
+            const volume = await resolveVolume(this.clients.api, args.volume);
+            const vps = await resolveVpsRef(this.clients.api, flags.vps);
+            const result = await this.clients.api.storage.attach(volume.id, vps.id);
+            this.emit(result, () => {
+                this.log(`Attached ${volume.name} → ${vps.hostname}`);
+                if (result.disk_slot)
+                    this.log(`Disk slot: ${result.disk_slot}`);
+            });
+        }
+        catch (err) {
+            this.fail(err);
+        }
+    }
+}
+//# sourceMappingURL=attach.js.map

package/dist/commands/storage/attach.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attach.js","sourceRoot":"","sources":["../../../src/commands/storage/attach.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,WAAW;IACpD,MAAM,CAAC,WAAW,GAAG;QACnB,iCAAiC;QACjC,EAAE;QACF,sEAAsE;QACtE,sEAAsE;QACtE,gDAAgD;KACjD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,CAAC,QAAQ,GAAG;QAChB,qGAAqG;QACrG,wDAAwD;QACxD,oHAAoH;KACrH,CAAC;IACF,MAAM,CAAC,IAAI,GAAG;QACZ,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;YAClB,WAAW,EACT,8EAA8E;YAChF,QAAQ,EAAE,IAAI;SACf,CAAC;KACH,CAAC;IACF,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC;YAChB,WAAW,EACT,qGAAqG;YACvG,QAAQ,EAAE,IAAI;SACf,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAClE,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;gBACrB,IAAI,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACtD,IAAI,MAAM,CAAC,SAAS;oBAAE,IAAI,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;YACnE,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC"}

package/dist/commands/storage/detach.d.ts

@@ -0,0 +1,12 @@
+import { BaseCommand } from "../../base/command.js";
+export default class StorageDetach extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        volume: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        yes: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/storage/detach.js

@@ -0,0 +1,60 @@
+import { Args, Flags } from "@oclif/core";
+import { BaseCommand } from "../../base/command.js";
+import { confirmDestructive, yesRequiredMessage } from "../../ui/confirm.js";
+import { isInteractive } from "../../ui/wizard.js";
+import { resolveVolume } from "../../ui/volume-resolve.js";
+export default class StorageDetach extends BaseCommand {
+    static description = [
+        "Detach a block volume from its current VPS.",
+        "",
+        "Disruptive if the guest still has the disk mounted — asks for",
+        "confirmation on a TTY (default No). When stdout is piped, pass --yes",
+        "or the command exits 1 without acting. Data on the volume is kept.",
+    ].join("\n");
+    static examples = [
+        "<%= config.bin %> storage detach backups                    # by name",
+        "<%= config.bin %> storage detach 019e... --yes -o json      # no prompt (required when piped)",
+    ];
+    static args = {
+        volume: Args.string({
+            description: "Volume — short id from `storage list`, full UUID, or name.",
+            required: true,
+        }),
+    };
+    static flags = {
+        yes: Flags.boolean({
+            char: "y",
+            description: "Skip the confirmation prompt. Required when stdout is not a TTY.",
+        }),
+    };
+    async run() {
+        await this.initClients();
+        const { args, flags } = await this.parse(StorageDetach);
+        try {
+            const volume = await resolveVolume(this.clients.api, args.volume);
+            if (!flags.yes) {
+                if (!isInteractive()) {
+                    this.error(yesRequiredMessage("`storage detach` (disruptive to a mounted volume)"), {
+                        exit: 1,
+                    });
+                }
+                const target = volume.vps_hostname ? ` from ${volume.vps_hostname}` : "";
+                const outcome = await confirmDestructive({
+                    message: `Detach ${volume.name} (${volume.size_gb} GB)${target}?`,
+                });
+                if (outcome !== "confirmed") {
+                    this.log("Aborted — volume left attached.");
+                    return;
+                }
+            }
+            const result = await this.clients.api.storage.detach(volume.id);
+            this.emit(result, () => {
+                this.log(`Detached ${volume.name}.`);
+            });
+        }
+        catch (err) {
+            this.fail(err);
+        }
+    }
+}
+//# sourceMappingURL=detach.js.map

package/dist/commands/storage/detach.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detach.js","sourceRoot":"","sources":["../../../src/commands/storage/detach.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAE3D,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,WAAW;IACpD,MAAM,CAAC,WAAW,GAAG;QACnB,6CAA6C;QAC7C,EAAE;QACF,+DAA+D;QAC/D,sEAAsE;QACtE,oEAAoE;KACrE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,CAAC,QAAQ,GAAG;QAChB,uEAAuE;QACvE,+FAA+F;KAChG,CAAC;IACF,MAAM,CAAC,IAAI,GAAG;QACZ,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;YAClB,WAAW,EACT,4DAA4D;YAC9D,QAAQ,EAAE,IAAI;SACf,CAAC;KACH,CAAC;IACF,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC;YACjB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,kEAAkE;SAChF,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAElE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBACf,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;oBACrB,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,mDAAmD,CAAC,EAAE;wBAClF,IAAI,EAAE,CAAC;qBACR,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC;oBACvC,OAAO,EAAE,UAAU,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,OAAO,MAAM,GAAG;iBAClE,CAAC,CAAC;gBACH,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;oBAC5B,IAAI,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;oBAC5C,OAAO;gBACT,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;gBACrB,IAAI,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC"}

package/dist/commands/storage/list.d.ts

@@ -0,0 +1,9 @@
+import { BaseCommand } from "../../base/command.js";
+export default class StorageList extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        project: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/storage/list.js

@@ -0,0 +1,41 @@
+import { Flags } from "@oclif/core";
+import { BaseCommand } from "../../base/command.js";
+import { renderTable, shortId } from "../../ui/table.js";
+import { statusColor } from "../../ui/glyphs.js";
+export default class StorageList extends BaseCommand {
+    static description = "List block storage volumes.";
+    static examples = [
+        "<%= config.bin %> storage list",
+        "<%= config.bin %> storage list --project 019e...",
+        "<%= config.bin %> storage list -o json",
+    ];
+    static flags = {
+        project: Flags.string({ description: "Scope to a project id." }),
+    };
+    async run() {
+        await this.initClients();
+        const { flags } = await this.parse(StorageList);
+        try {
+            const volumes = await this.clients.api.storage.list(flags.project);
+            this.emit(volumes, () => {
+                if (volumes.length === 0) {
+                    this.log("No storage volumes.");
+                    return;
+                }
+                const formatSize = (gb) => gb >= 1024 && gb % 1024 === 0 ? `${gb / 1024} TB` : `${gb} GB`;
+                this.log(renderTable(["ID", "NAME", "SIZE", "STATUS", "ATTACHED TO", "PROJECT"], volumes.map((v) => [
+                    shortId(v.id),
+                    v.name,
+                    formatSize(v.size_gb),
+                    statusColor(v.status),
+                    v.vps_hostname ?? (v.vps_id ? shortId(v.vps_id) : ""),
+                    v.project_name ?? "",
+                ])));
+            });
+        }
+        catch (err) {
+            this.fail(err);
+        }
+    }
+}
+//# sourceMappingURL=list.js.map

package/dist/commands/storage/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../src/commands/storage/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,WAAW;IAClD,MAAM,CAAC,WAAW,GAAG,6BAA6B,CAAC;IACnD,MAAM,CAAC,QAAQ,GAAG;QAChB,gCAAgC;QAChC,kDAAkD;QAClD,wCAAwC;KACzC,CAAC;IACF,MAAM,CAAC,KAAK,GAAG;QACb,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;KACjE,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;gBACtB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;oBAChC,OAAO;gBACT,CAAC;gBACD,MAAM,UAAU,GAAG,CAAC,EAAU,EAAU,EAAE,CACxC,EAAE,IAAI,IAAI,IAAI,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC;gBACjE,IAAI,CAAC,GAAG,CACN,WAAW,CACT,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC,EAC1D,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;oBACjB,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBACb,CAAC,CAAC,IAAI;oBACN,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;oBACrB,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;oBACrB,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrD,CAAC,CAAC,YAAY,IAAI,EAAE;iBACrB,CAAC,CACH,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC"}

package/dist/commands/storage/order.d.ts

@@ -0,0 +1,16 @@
+import { BaseCommand } from "../../base/command.js";
+export default class StorageOrder extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        name: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        size: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        location: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "attach-vps": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "payment-method": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "apply-credits": import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        "no-interactive": import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+    private runWizard;
+}