@tikoci/quickchr 0.5.1 → 0.5.3

package/src/cli/index.ts

@@ -4,6 +4,7 @@
  */
 
 import type { StartOptions, Arch, Channel, DeviceModeOptions, ServiceName, NetworkSpecifier } from "../lib/types.ts";
+import { join } from "node:path";
 import { parseNetworkSpecifier } from "../lib/network.ts";
 import { expandForwardSpec } from "../lib/forward-spec.ts";
 import { ADD_FLAGS, REMOVED_FLAGS, SET_FLAGS, START_FLAGS, VALUE_FLAGS, unknownFlags, unknownFlagMessage, valuelessFlags, valuelessFlagMessage } from "./flags.ts";
@@ -337,6 +338,9 @@ async function main() {
 			case "start":
 				await cmdStart(args.slice(1));
 				break;
+			case "continue":
+				await cmdContinue(args.slice(1));
+				break;
 			case "stop":
 				await cmdStop(args.slice(1));
 				break;
@@ -732,6 +736,7 @@ async function cmdAdd(argv: string[]) {
 		bootSize: flag(flags, "boot-size"),
 		extraDisks: flagList(flags, "add-disk").length > 0 ? flagList(flags, "add-disk") : undefined,
 		extraPorts: flagList(flags, "forward").flatMap(expandForwardSpec),
+		qemuArgs: flagList(flags, "qemu-arg").length > 0 ? flagList(flags, "qemu-arg") : undefined,
 	};
 
 	opts.deviceMode = deviceModeFromFlags(flags);
@@ -1362,15 +1367,16 @@ async function cmdSetup() {
 
 /** Whether the `secure-login` *setting* reaches this start. The setting is a default,
  *  not a request, so it stays out of every start that cannot provision: a closed
- *  window, a `--no-wait` start (#159), and a RouterOS 6 machine (#182). Otherwise a
- *  user with `secure-login=true` configured could never use either. An explicit
- *  `--secure-login` is still passed through, and refused by name. */
+ *  window, a `--no-wait` start (#159), a `--frozen` start (#214), and a RouterOS 6
+ *  machine (#182). Otherwise a user with `secure-login=true` configured could never
+ *  use any of them. An explicit `--secure-login` is still passed through, and
+ *  refused by name. */
 export function secureLoginSettingApplies(
 	flags: Record<string, string | boolean | string[]>,
 	windowOpen: boolean,
 	version: string | undefined,
 ): boolean {
-	return windowOpen && flags.wait !== false && !isRouterOs6(version ?? "");
+	return windowOpen && flags.wait !== false && flags.frozen !== true && !isRouterOs6(version ?? "");
 }
 
 /** `--bg` never did what it reads as (#159): background is the default, and the flag
@@ -1482,6 +1488,7 @@ export async function cmdStart(argv: string[]) {
 		extraPorts: flagList(flags, "forward").flatMap(expandForwardSpec),
 		dryRun: flagBool(flags, "dry-run"),
 		timeoutExtra: await resolveTimeoutExtraMs(flags),
+		qemuArgs: flagList(flags, "qemu-arg").length > 0 ? flagList(flags, "qemu-arg") : undefined,
 	};
 
 	opts.deviceMode = deviceModeFromFlags(flags);
@@ -1525,6 +1532,7 @@ export async function cmdStart(argv: string[]) {
 		));
 	}
 	opts.wait = wait;
+	opts.frozen = flagBool(flags, "frozen") || undefined;
 
 	// Background default: true. Explicitly foreground only with --fg / --foreground / --no-background / --no-bg.
 	// `--bg` / `--background` are accepted and change nothing (see warnDeprecatedBackgroundFlag).
@@ -1541,8 +1549,9 @@ export async function cmdStart(argv: string[]) {
 	}
 
 	// --fg on already-running machine: attach to its serial console.
-	// `--fg --no-wait` skips both foreground blocks so start() refuses the pair before any I/O.
-	if (!opts.background && opts.wait !== false && opts.name) {
+	// `--fg --no-wait` and `--fg --frozen` skip both foreground blocks so start()
+	// refuses the pair before any I/O.
+	if (!opts.background && opts.wait !== false && !opts.frozen && opts.name) {
 		const runningMachine = QuickCHR.list().find((m) => m.name === opts.name && m.status === "running");
 		if (runningMachine) {
 			await attachSerial(runningMachine.name, runningMachine.machineDir);
@@ -1550,7 +1559,7 @@ export async function cmdStart(argv: string[]) {
 		}
 	}
 
-	if (!opts.background && opts.wait !== false) {
+	if (!opts.background && opts.wait !== false && !opts.frozen) {
 		const wantsDeviceMode = !!opts.deviceMode && !["skip", "none", "off", "disabled"].includes((opts.deviceMode.mode ?? "auto").toLowerCase());
 		const hasProv = !!(
 			opts.installAllPackages ||
@@ -1571,7 +1580,12 @@ export async function cmdStart(argv: string[]) {
 
 	const instance = await QuickCHR.start(opts);
 
-	if (!opts.background) {
+	// The marker describes the machine, not the request: --frozen on an
+	// already-running normal machine returns that handle unfrozen.
+	if (instance.state.frozen) {
+		console.log(`${statusIcon("running")} ${bold(instance.name)} frozen at reset — patch RAM, then ${bold(`quickchr continue ${instance.name}`)}`);
+		console.log(`  GDB:     ${dim(join(instance.state.machineDir, "gdb.sock"))}`);
+	} else if (!opts.background) {
 		console.log(`\n${bold(instance.name)} session ended`);
 		console.log(`  ${dim("Tip: resume session")}   quickchr start ${instance.name} --fg`);
 		console.log(`  ${dim("Tip: run background")}   quickchr start ${instance.name}`);
@@ -1597,6 +1611,39 @@ export async function cmdStart(argv: string[]) {
 	}
 }
 
+export async function cmdContinue(argv: string[]) {
+	const { flags, positional } = parseFlags(argv);
+	applyTimeoutExtraShortFlag(argv, flags, positional);
+	const invalid = unknownFlags(flags, ["wait", "timeout-extra"]);
+	if (invalid.length) throw new QuickCHRError("INVALID_ARGUMENT", "continue accepts only <name>, --no-wait and --timeout-extra <s>");
+	const name = positional[0];
+	if (!name || positional.length !== 1) throw new QuickCHRError("INVALID_ARGUMENT", "Usage: quickchr continue <name> [--no-wait] [--timeout-extra <s>]");
+	const { QuickCHR } = await import("../lib/quickchr.ts");
+	const { machineNotFoundMessage } = await import("./format.ts");
+	const instance = QuickCHR.get(name);
+	if (!instance) {
+		console.error(machineNotFoundMessage(name));
+		process.exit(1);
+	}
+	const wait = flags.wait !== false;
+	const timeoutExtra = await resolveTimeoutExtraMs(flags);
+	await instance.continue({ wait, timeoutExtra });
+	const { statusIcon, bold, link, resolveDisplayCredentials, formatRestUrl, formatSshCommand } = await import("./format.ts");
+	if (!wait) {
+		console.log(`${statusIcon("running")} ${bold(name)} resumed — not waiting for RouterOS (--no-wait)`);
+		printReadinessTip(name, instance.state.version);
+		return;
+	}
+	const creds = await resolveDisplayCredentials(instance.state);
+	console.log(`${statusIcon("running")} ${bold(name)} resumed`);
+	if (isRouterOs6(instance.state.version)) {
+		console.log(`  API:     127.0.0.1:${instance.ports.api}`);
+	} else {
+		console.log(`  REST:    ${link(formatRestUrl(instance.ports.http, creds.user, creds.password))}`);
+	}
+	console.log(`  SSH:     ${formatSshCommand(creds.user, instance.sshPort)}`);
+}
+
 async function cmdShutdown(argv: string[]) {
 	const { flags, positional } = parseFlags(argv);
 	const invalid = unknownFlags(flags, ["timeout"]);
@@ -1691,6 +1738,8 @@ async function cmdList(argv: string[] = []) {
 				networks: s.networks,
 				ports: s.ports,
 				pid: s.pid ?? null,
+				frozen: s.frozen ?? false,
+				qemuArgs: s.qemuArgs ?? [],
 				packages: s.packages,
 				machineDir: s.machineDir,
 				createdAt: s.createdAt,
@@ -1706,6 +1755,10 @@ async function cmdList(argv: string[] = []) {
 		console.log(`  Network:    ${formatNetworks(s.networks)}`);
 		console.log(`  Ports:      ${formatPorts(s.ports)}`);
 		console.log(`  Status:     ${s.status}${s.pid ? ` (PID ${s.pid})` : ""}`);
+		if (s.frozen) {
+			console.log(`  Frozen:     yes — awaiting quickchr continue`);
+			console.log(`  GDB:        ${dim(join(s.machineDir, "gdb.sock"))}`);
+		}
 		console.log(`  Created:    ${new Date(s.createdAt).toLocaleString()}`);
 		if (s.lastStartedAt) console.log(`  Started:    ${new Date(s.lastStartedAt).toLocaleString()}`);
 		if (s.packages.length > 0) console.log(`  Packages:   ${s.packages.join(", ")}`);
@@ -1715,6 +1768,7 @@ async function cmdList(argv: string[] = []) {
 		if (s.status === "running") {
 			const creds = await resolveDisplayCredentials(s);
 			console.log();
+			if (s.frozen) console.log(`  ${dim(`(endpoints answer after 'quickchr continue ${s.name}')`)}`);
 			console.log(`  REST:       ${link(formatRestUrl(instance.ports.http, creds.user, creds.password))}`);
 			console.log(`  WinBox:     127.0.0.1:${instance.ports.winbox}`);
 			console.log(`  SSH:        ${formatSshCommand(creds.user, instance.sshPort)}`);
@@ -1760,7 +1814,7 @@ async function cmdList(argv: string[] = []) {
 	const headers = ["", "Name", "Version", "Arch", "Network", "Ports", "PID"];
 	const rows = machines.map((m) => [
 		statusIcon(m.status),
-		m.name,
+		m.frozen ? `${m.name} (frozen)` : m.name,
 		m.version,
 		m.arch,
 		formatNetworks(m.networks ?? []),
@@ -2149,7 +2203,7 @@ async function cmdSet(argv: string[]) {
 	// --license` printed a usage error while `quickchr license --name lab` worked.
 	const name = positional[0] ?? flag(flags, "name");
 
-	const usage = "Usage: quickchr set <name> [--license [--level=p1|p10|unlimited]] [--device-mode <mode>] [--device-mode-enable <features>] [--device-mode-disable <features>]";
+	const usage = "Usage: quickchr set <name> [--license [--level=p1|p10|unlimited]] [--device-mode <mode>] [--device-mode-enable <features>] [--device-mode-disable <features>] [--qemu-arg <arg>] [--clear-qemu-args]";
 	if (!name) {
 		console.error(usage);
 		process.exit(1);
@@ -2171,12 +2225,22 @@ async function cmdSet(argv: string[]) {
 
 	const wantsLicense = flagBool(flags, "license");
 	const deviceMode = deviceModeFromFlags(flags);
+	const qemuArgs = flagList(flags, "qemu-arg");
+	const clearQemuArgs = flagBool(flags, "clear-qemu-args");
+	const wantsQemuArgs = qemuArgs.length > 0 || clearQemuArgs;
+	if (qemuArgs.length > 0 && clearQemuArgs) {
+		throw new QuickCHRError("INVALID_ARGUMENT", "--qemu-arg and --clear-qemu-args conflict: --qemu-arg already replaces the recorded args wholesale");
+	}
 
-	if (!wantsLicense && !deviceMode) {
-		console.error("Nothing to set. Available flags: --license, --device-mode, --device-mode-enable, --device-mode-disable");
+	if (!wantsLicense && !deviceMode && !wantsQemuArgs) {
+		console.error("Nothing to set. Available flags: --license, --device-mode, --device-mode-enable, --device-mode-disable, --qemu-arg, --clear-qemu-args");
 		process.exit(1);
 	}
 
+	// Recorded args first: they need a stopped machine, and failing fast here
+	// keeps a running-machine refusal from racing a device-mode power cycle.
+	if (wantsQemuArgs) await applyQemuArgsChange(name, qemuArgs, clearQemuArgs);
+
 	// Device-mode first: it power-cycles the guest, and a license applied beforehand
 	// would be read back across a reboot it did not expect.
 	if (deviceMode) await applyDeviceModeChange(name, deviceMode);
@@ -2186,6 +2250,43 @@ async function cmdSet(argv: string[]) {
 	}
 }
 
+/** `set <name> --qemu-arg…` — the recovery route for recorded passthrough.
+ *
+ *  Boot config, not provisioning: it takes effect on the next start, so the
+ *  machine must be stopped — accepting it on a running machine would promise a
+ *  change that cannot happen until reboot. Replaces the recorded args wholesale
+ *  (one element per flag, like `add`); `--clear-qemu-args` drops them. A bad
+ *  recorded arg otherwise fails every start until `machine.json` is hand-edited;
+ *  this is the supported way back. */
+async function applyQemuArgsChange(name: string, qemuArgs: string[], clear: boolean) {
+	const { QuickCHR } = await import("../lib/quickchr.ts");
+	const { bold, machineNotFoundMessage } = await import("./format.ts");
+	const { loadMachine, saveMachine } = await import("../lib/state.ts");
+
+	const instance = QuickCHR.get(name);
+	if (!instance) {
+		console.error(machineNotFoundMessage(name));
+		process.exit(1);
+	}
+	if (instance.state.status === "running") {
+		console.error(`Machine "${name}" is running — stop it first: qemuArgs apply at boot, so 'set' only records them on a stopped machine.`);
+		process.exit(1);
+	}
+	const current = loadMachine(name);
+	if (!current) {
+		console.error(machineNotFoundMessage(name));
+		process.exit(1);
+	}
+	current.qemuArgs = clear ? undefined : [...qemuArgs];
+	saveMachine(current);
+	instance.state.qemuArgs = current.qemuArgs;
+	if (clear) {
+		console.log(`Cleared recorded QEMU args on ${bold(name)} — the next start boots without passthrough.`);
+	} else {
+		console.log(`Recorded QEMU args on ${bold(name)}: ${qemuArgs.join(" ")}`);
+	}
+}
+
 /** `set <name> --device-mode…` — the post-boot route the refusal names.
  *
  *  Device-mode needs a **power cycle**: RouterOS will not apply it otherwise, and
@@ -3179,6 +3280,7 @@ Commands:
   setup                   Interactive setup wizard (TTY only)
   add [options]           Create a new CHR machine (without starting)
   start [<name>|options]  Start or restart a CHR instance
+  continue <name>         Resume a machine started with --frozen
   stop [<name>|--all]     Power cut — print list if no name
   shutdown <name>         Request guest shutdown, then bounded hard-stop fallback
   list [<name>] [--json]  List all instances, or detail for one
@@ -3233,7 +3335,7 @@ options still work on older versions when the required host tools are installed.
 ${ROUTEROS6_HELP}
 
 Options:
-  --name <name>         Instance name (required)
+  --name <name>         Instance name (auto-generated if omitted)
   --version <ver>       RouterOS version (e.g., 7.22.1)
   --channel <ch>        Channel: stable, long-term, testing, development
   --arch <arch>         Architecture: arm64, x86, auto (default: host native)
@@ -3257,6 +3359,7 @@ Options:
   --install-all-packages  Install all packages on first boot
   --add-user <u:p>      Create user on first boot (name:password)
   --disable-admin       Disable the default admin account on first boot
+  --secure-login        Create a managed login; use --disable-admin to disable admin
   --no-secure-login     Keep admin with no password (skip managed account)
   --port-base <port>    Starting port number (default: auto-allocated from 9100)
   --no-winbox           Exclude WinBox port mapping
@@ -3268,6 +3371,10 @@ Options:
   --add-network <spec>  Add a network NIC (repeatable). Specs: user, shared, bridged:<if>,
                         socket::<name>, tap:<if>. Default: single user NIC.
   --no-network          Start with no NICs (headless)
+  --qemu-arg <arg>      Extra QEMU argv element, appended verbatim after quickchr's
+                        own args (repeatable, space-form only: one element per
+                        flag). Recorded here and reused every boot; a start-time
+                        value replaces it for that boot only.
 
 Provisioning flags apply on the machine's first boot — whether they are given
 here or on that first 'start'. After the guest has booted, a flag the machine already
@@ -3319,7 +3426,7 @@ ${CENTRS_SEE_ALSO}`);
 		case "start":
 			console.log(`quickchr start [<name>] [options]
 
-  <name>              Restart an existing stopped machine by name.
+  <name>              Restart a stopped machine; an unknown name creates a fresh machine.
                       Omit to see a list of stopped machines.
 
 Creation flags below apply when using 'start' to create a new machine in one step.
@@ -3345,6 +3452,8 @@ Options:
                         (plus the deprecated no-op --bg / --background); any other
                         option is refused rather than ignored
   --no-wait             Return once QEMU is running; do not wait for RouterOS (not with --fg)
+  --frozen              Boot frozen at reset (-S) with a gdbstub on <machineDir>/gdb.sock;
+                        resume with 'quickchr continue' (not with --fg, --all or provisioning)
   --fg / --foreground   Run in foreground — serial console on stdio
   --bg / --background   Deprecated, does nothing: background is already the default
   --version <ver>       RouterOS version (e.g., 7.22.1)
@@ -3367,6 +3476,7 @@ Options:
                         btest:9200-9210:2000-2010/udp.
   --add-user <u:p>      Create user with name:password
   --disable-admin       Disable the default admin account
+  --secure-login        Create a managed login; use --disable-admin to disable admin
   --no-secure-login     Keep admin with no password (skip managed account)
   --port-base <port>    Starting port number (default: auto-allocated from 9100)
   --no-winbox           Exclude WinBox port mapping
@@ -3384,6 +3494,10 @@ Options:
   --no-device-mode      Skip device-mode provisioning entirely
   --timeout-extra <s>, -T <s>  Add extra seconds to the auto-computed boot timeout
   --dry-run             Print what would run without starting
+  --qemu-arg <arg>      Extra QEMU argv element, appended verbatim after quickchr's
+                        own args (repeatable, space-form only: one element per
+                        flag). Recorded when creating; on an existing machine it
+                        replaces recorded args for this boot only.
 
 Provisioning flags (packages, login, device-mode, license) apply only on a machine's
 first boot. On a machine that has booted, a flag the machine already has (same
@@ -3392,6 +3506,22 @@ naming where the change can still be made — often 'quickchr set <name>'. Only
 'quickchr clean <name>' if you mean it: it resets the disk to factory, erasing the
 guest's configuration, and reopens the first-boot window.`);
 			break;
+		case "continue":
+			console.log(`quickchr continue <name> [--no-wait] [--timeout-extra <s>]
+
+Resume a machine started with 'start --frozen' (held at reset with a gdbstub
+on <machineDir>/gdb.sock). Sends one monitor 'cont', then waits for RouterOS
+to become ready — the same promise 'start' makes.
+
+  <name>      Name of a frozen (or otherwise paused) running machine.
+  --no-wait   Return right after resuming; do not wait for RouterOS.
+  --timeout-extra <s>, -T <s>
+              Add extra seconds to the auto-computed resume timeout.
+
+Resuming is idempotent: when the guest is already running (e.g. gdb continued
+it), this just clears the frozen marker. A wait that never reaches readiness
+is a BOOT_TIMEOUT; the machine is stopped and preserved.`);
+			break;
 		case "stop":
 			console.log(`quickchr stop [<name>] [--all]
 
@@ -3543,6 +3673,10 @@ Flags:
   --device-mode <m>   Set device-mode: rose|advanced|basic|home|auto
   --device-mode-enable <f>   Set one or more device-mode flags to yes (e.g. container)
   --device-mode-disable <f>  Set one or more device-mode flags to no
+  --qemu-arg <arg>    Replace the recorded QEMU passthrough args (repeatable,
+                      space-form only). The machine must be stopped; takes
+                      effect on the next start.
+  --clear-qemu-args   Drop the recorded QEMU passthrough args. Stopped only.
 
 Device-mode notes:
   RouterOS only applies device-mode across a power cycle, so 'set' restarts the

package/src/cli/wizard.ts

@@ -37,6 +37,9 @@ export function resolveUserChoiceOptions(
 
 /** Run the interactive wizard using @clack/prompts. */
 export async function runWizard(wizardOpts?: { firstRun?: boolean }): Promise<void> {
+	const { requireQemuImg } = await import("../lib/platform.ts");
+	requireQemuImg();
+
 	// Dynamic import — only loaded when wizard is actually used
 	const clack = await import("@clack/prompts");
 	const { QuickCHR } = await import("../lib/quickchr.ts");
@@ -148,75 +151,68 @@ export async function runWizard(wizardOpts?: { firstRun?: boolean }): Promise<vo
 	});
 	if (clack.isCancel(mem)) { clack.cancel("Cancelled."); process.exit(0); }
 
-	// 4b. Disk configuration — requires qemu-img; skip gracefully if absent
+	// 4b. Disk configuration — qemu-img was checked before any prompts
 	let bootSize: string | undefined;
 	let bootDiskFormat: "qcow2" | "raw" = "qcow2";
 	const extraDisks: string[] = [];
 
-	const { findQemuImg, getQemuInstallHint } = await import("../lib/platform.ts");
 	const { isValidDiskSize } = await import("../lib/disk.ts");
-	const qemuImg = findQemuImg();
+	const diskFormatChoice = await clack.select({
+		message: "Boot disk format:",
+		options: [
+			{ value: "qcow2", label: "qcow2 (recommended)", hint: "supports snapshots and resize" },
+			{ value: "raw", label: "raw", hint: "no resize support" },
+		],
+		initialValue: "qcow2",
+	});
+	if (clack.isCancel(diskFormatChoice)) { clack.cancel("Cancelled."); process.exit(0); }
+	bootDiskFormat = diskFormatChoice as "qcow2" | "raw";
 
-	if (!qemuImg) {
-		clack.log.warn(`Disk features (boot resize, extra disks) require qemu-img. Run 'quickchr doctor' to confirm setup. ${getQemuInstallHint()}`);
-	} else {
-		const diskFormatChoice = await clack.select({
-			message: "Boot disk format:",
-			options: [
-				{ value: "qcow2", label: "qcow2 (recommended)", hint: "supports snapshots and resize" },
-				{ value: "raw", label: "raw", hint: "no resize support" },
-			],
-			initialValue: "qcow2",
+	if (bootDiskFormat === "qcow2") {
+		const wantBootResize = await clack.confirm({
+			message: "Resize the boot disk? (default is ~128 MB)",
+			initialValue: false,
 		});
-		if (clack.isCancel(diskFormatChoice)) { clack.cancel("Cancelled."); process.exit(0); }
-		bootDiskFormat = diskFormatChoice as "qcow2" | "raw";
-
-		if (bootDiskFormat === "qcow2") {
-			const wantBootResize = await clack.confirm({
-				message: "Resize the boot disk? (default is ~128 MB)",
-				initialValue: false,
+		if (clack.isCancel(wantBootResize)) { clack.cancel("Cancelled."); process.exit(0); }
+
+		if (wantBootResize) {
+			const size = await clack.text({
+				message: "Boot disk size (e.g., 512M, 1G, 2G):",
+				validate: (v) => {
+					if (!isValidDiskSize(v)) return "Size like 512M, 1G, or 2048";
+				},
 			});
-			if (clack.isCancel(wantBootResize)) { clack.cancel("Cancelled."); process.exit(0); }
-
-			if (wantBootResize) {
-				const size = await clack.text({
-					message: "Boot disk size (e.g., 512M, 1G, 2G):",
-					validate: (v) => {
-						if (!isValidDiskSize(v)) return "Size like 512M, 1G, or 2048";
-					},
-				});
-				if (clack.isCancel(size)) { clack.cancel("Cancelled."); process.exit(0); }
-				bootSize = size.trim();
-			}
-		} else {
-			clack.log.info("Raw boot disk selected — boot resize is disabled.");
+			if (clack.isCancel(size)) { clack.cancel("Cancelled."); process.exit(0); }
+			bootSize = size.trim();
 		}
+	} else {
+		clack.log.info("Raw boot disk selected — boot resize is disabled.");
+	}
 
-		const wantExtraDisks = await clack.confirm({
-			message: "Add extra blank disks?",
-			initialValue: false,
-		});
-		if (clack.isCancel(wantExtraDisks)) { clack.cancel("Cancelled."); process.exit(0); }
-
-		if (wantExtraDisks) {
-			let addMore = true;
-			while (addMore) {
-				const diskSize = await clack.text({
-					message: `Extra disk ${extraDisks.length + 1} size (e.g., 64M, 512M, 1G):`,
-					validate: (v) => {
-						if (!isValidDiskSize(v)) return "Size like 64M, 512M, or 1G";
-					},
-				});
-				if (clack.isCancel(diskSize)) { clack.cancel("Cancelled."); process.exit(0); }
-				extraDisks.push(diskSize.trim());
+	const wantExtraDisks = await clack.confirm({
+		message: "Add extra blank disks?",
+		initialValue: false,
+	});
+	if (clack.isCancel(wantExtraDisks)) { clack.cancel("Cancelled."); process.exit(0); }
+
+	if (wantExtraDisks) {
+		let addMore = true;
+		while (addMore) {
+			const diskSize = await clack.text({
+				message: `Extra disk ${extraDisks.length + 1} size (e.g., 64M, 512M, 1G):`,
+				validate: (v) => {
+					if (!isValidDiskSize(v)) return "Size like 64M, 512M, or 1G";
+				},
+			});
+			if (clack.isCancel(diskSize)) { clack.cancel("Cancelled."); process.exit(0); }
+			extraDisks.push(diskSize.trim());
 
-				const another = await clack.confirm({
-					message: "Add another disk?",
-					initialValue: false,
-				});
-				if (clack.isCancel(another)) { clack.cancel("Cancelled."); process.exit(0); }
-				addMore = another;
-			}
+			const another = await clack.confirm({
+				message: "Add another disk?",
+				initialValue: false,
+			});
+			if (clack.isCancel(another)) { clack.cancel("Cancelled."); process.exit(0); }
+			addMore = another;
 		}
 	}
 

package/src/index.ts

@@ -32,6 +32,7 @@ export type {
 	Channel,
 	ChrInstance,
 	ChrPorts,
+	ContinueOptions,
 	CustomForward,
 	Descriptor,
 	DeviceModeOptions,

package/src/lib/completions.ts

@@ -328,7 +328,7 @@ _quickchr() {
         cword=${D}COMP_CWORD
     }
 
-    local commands="add start stop shutdown list ls status inspect env get set remove rm clean console exec qga license disk snapshot snap networks net cache doctor settings setup completions version help"
+    local commands="add start continue stop shutdown list ls status inspect env get set remove rm clean console exec qga license disk snapshot snap networks net cache doctor settings setup completions version help"
 
     if [[ ${D}cword -eq 1 ]]; then
         COMPREPLY=( $(compgen -W "${D}commands" -- "${D}cur") )
@@ -337,7 +337,7 @@ _quickchr() {
 
     local cmd="${D}{words[1]}"
     case "${D}cmd" in
-        start|remove|rm|clean|console|exec|qga|license|disk|snapshot|snap|status|inspect|env|get|set)
+        start|continue|remove|rm|clean|console|exec|qga|license|disk|snapshot|snap|status|inspect|env|get|set)
             local machines
             machines=$(quickchr completions --machines 2>/dev/null)
             COMPREPLY=( $(compgen -W "${D}machines" -- "${D}cur") )
@@ -387,6 +387,7 @@ _quickchr() {
             local commands=(
                 'add:Create a new CHR machine (without starting)'
                 'start:Start or restart a CHR instance'
+                'continue:Resume a machine started with --frozen'
                 'stop:Power cut instance(s)'
                 'shutdown:Request guest shutdown'
                 'list:List all instances'
@@ -421,7 +422,7 @@ _quickchr() {
         args)
             local cmd="${D}{words[2]}"
             case ${D}cmd in
-                start|remove|rm|clean|console|exec|qga|license|disk|snapshot|snap|status|inspect|env|get|set)
+                start|continue|remove|rm|clean|console|exec|qga|license|disk|snapshot|snap|status|inspect|env|get|set)
                     local machines
                     machines=(${D}{(f)"${D}(quickchr completions --machines 2>/dev/null)"})
                     _describe 'machine' machines
@@ -447,7 +448,7 @@ _quickchr() {
                     _describe 'cache subcommand' subcommands
                     ;;
                 help)
-                    local commands=(add start stop shutdown list status inspect env get set remove clean console exec qga license disk snapshot networks cache doctor settings setup completions version)
+                    local commands=(add start continue stop shutdown list status inspect env get set remove clean console exec qga license disk snapshot networks cache doctor settings setup completions version)
                     _describe 'command' commands
                     ;;
             esac
@@ -463,7 +464,7 @@ function generateFishCompletion(): string {
 	return `# quickchr fish completion
 # Generated by quickchr. Fish auto-loads files from ~/.config/fish/completions/.
 
-set -l quickchr_commands add start stop shutdown list ls status inspect env get set remove rm clean console exec qga license disk snapshot snap networks net cache doctor settings setup completions version help
+set -l quickchr_commands add start continue stop shutdown list ls status inspect env get set remove rm clean console exec qga license disk snapshot snap networks net cache doctor settings setup completions version help
 
 # Disable file completions globally for quickchr
 complete -c quickchr -f
@@ -473,6 +474,8 @@ complete -c quickchr -n "not __fish_seen_subcommand_from $quickchr_commands" \\
     -a "add"         -d "Create a new CHR machine"
 complete -c quickchr -n "not __fish_seen_subcommand_from $quickchr_commands" \\
     -a "start"       -d "Start or restart a CHR instance"
+complete -c quickchr -n "not __fish_seen_subcommand_from $quickchr_commands" \\
+    -a "continue"    -d "Resume a machine started with --frozen"
 complete -c quickchr -n "not __fish_seen_subcommand_from $quickchr_commands" \\
     -a "stop"        -d "Power cut instance(s)"
 complete -c quickchr -n "not __fish_seen_subcommand_from $quickchr_commands" \\
@@ -528,7 +531,7 @@ complete -c quickchr -n "__fish_seen_subcommand_from stop shutdown" \\
     -d "machine"
 
 # Machine name completions for commands that take any machine
-complete -c quickchr -n "__fish_seen_subcommand_from start remove rm clean console exec qga license disk snapshot snap status inspect env get set" \\
+complete -c quickchr -n "__fish_seen_subcommand_from start continue remove rm clean console exec qga license disk snapshot snap status inspect env get set" \\
     -a "(quickchr completions --machines 2>/dev/null)" \\
     -d "machine"
 

package/src/lib/lock.ts

@@ -61,6 +61,7 @@ export type LockOperation =
 	| "foreground"
 	| "stop"
 	| "shutdown"
+	| "continue"
 	| "clean"
 	| "remove"
 	| "device-mode"

package/src/lib/platform.ts

@@ -3,7 +3,7 @@
  */
 
 import { existsSync, readdirSync, statSync } from "node:fs";
-import type { AccelMode, EfiFirmwarePaths, HostInterface, PackageManager, PlatformInfo, SocketVmnetInfo } from "./types.ts";
+import type { AccelMode, EfiFirmwarePaths, HostInterface, PackageManager, PlatformInfo, SocketVmnetInfo, DoctorCheck } from "./types.ts";
 import { QuickCHRError as QError, parseAccelMode } from "./types.ts";
 // settings-file.ts, not settings.ts: the latter's graph (cache → state → network
 // → platform) is a cycle that would load eagerly on every CLI start.
@@ -590,3 +590,15 @@ export function resolveInterfaceAlias(
 		`No interface found for alias '${alias}' — run 'quickchr doctor' to see available interfaces`,
 	);
 }
+
+/** Compare the running Bun against the same pin CI installs. */
+export async function bunRuntimeCheck(version = Bun.version): Promise<DoctorCheck> {
+	const pin = (await Bun.file(new URL("../../.bun-version", import.meta.url)).text()).trim();
+	// Runtimes predating the Semver API are also older than the tested pin.
+	const older = typeof Bun.semver?.order !== "function" || Bun.semver.order(version, pin) < 0;
+	return {
+		label: "Bun runtime",
+		status: older ? "warn" : "ok",
+		detail: `bun ${version}; tested with Bun ${pin}${older ? ` — upgrade to ${pin} or newer` : ""}`,
+	};
+}