@wasmsoft/fantastic 1.0.0

package/dist/commands/uninstall.js

@@ -0,0 +1,290 @@
+import { existsSync, readdirSync } from "node:fs";
+import { isAbsolute, join, relative, resolve } from "node:path";
+import { Args, Flags } from "@oclif/core";
+import { confirm, input } from "@inquirer/prompts";
+import { BaseCommand } from "../base-command.js";
+import { APPLIANCE_DEFAULTS, APPLIANCE_ROOT, createApplianceProfile } from "../profiles/appliance.profile.js";
+import { findApplianceRoot } from "../profiles/resolve.js";
+import { BUNDLE_DIRS } from "../packaging/layout.js";
+import { applyRemoval, planRemoval, sizeOf } from "../packaging/install.js";
+import { unregisterFromMachinePath } from "../packaging/machine-path.js";
+import { BOOT_TASK_NAME, removeBootTask } from "../packaging/boot-task.js";
+import { stopServices } from "../supervisor/orchestrator.js";
+import { forgetInstall, readRegistry, resolveProduct } from "../registry/local-registry.js";
+import { deactivateLicense } from "../probes/internal.client.js";
+import { buildEnvelope, renderJson } from "../render/json.js";
+import { c, formatBytes, glyph, isTty } from "../render/theme.js";
+import { EXIT } from "../exit-codes.js";
+// AR: إزالة نظيفة.
+//
+//     **‎data/‎ يبقى افتراضيًا، وحذفه يحتاج ‎--purge‎ صريحًا.** هذا هو FR-026، وهو أهمّ سطر في الملف:
+//     مكتبةُ عميلٍ وإعداداته وشعاره لا تُمحى لأن أحدهم أراد ترقية. الافتراض الآمن هو الافتراض
+//     الصحيح هنا، والحذف قرارٌ يُتَّخذ لا نتيجةٌ تقع.
+//
+//     **ونُزيل مُدخَل ‎PATH‎ الذي كتبه التثبيت** (٠١٨): ما كتبه التثبيت تُزيله الإزالة، وإلّا بقي على
+//     الجهاز مُدخَلٌ يشير إلى مجلد محذوف. ولا نلمس ما لم نكتبه: لا خدمات ويندوز ولا سواها.
+// EN: Clean removal.
+//
+//     **data/ survives by default; destroying it requires an explicit --purge.** That is FR-026, and
+//     it is the most important line in this file: a customer's library, settings and logo are not
+//     erased because somebody wanted to upgrade. The safe default is the correct default here, and
+//     deletion is a decision taken rather than an outcome that happens.
+//
+//     **And we remove the PATH entry the installer wrote** (018): what the install wrote, the
+//     uninstall removes, or the machine keeps an entry pointing at a deleted folder. We touch nothing
+//     we did not write: no Windows service, nothing else.
+export default class Uninstall extends BaseCommand {
+    static description = "Remove an installed appliance, keeping customer data unless told otherwise";
+    static examples = [
+        "<%= config.bin %> uninstall estraha",
+        "<%= config.bin %> uninstall estraha --purge",
+    ];
+    /** اسم المنتج، كما في ‎install‎. اختياريّ: يُستنتَج حين لا يكون على الآلة إلّا واحد. */
+    static args = {
+        product: Args.string({ description: "Product to remove. Inferred when only one is installed.", required: false }),
+    };
+    static flags = {
+        root: Flags.string({ description: `Installation location (default ${APPLIANCE_ROOT})` }),
+        purge: Flags.boolean({
+            description: "Also delete data/ — the database, settings, theme and owner assets. Irreversible.",
+            default: false,
+        }),
+        yes: Flags.boolean({ description: "Do not ask for confirmation.", default: false }),
+    };
+    /** هل تعمل هذه العملية من داخل الجذر الذي نزيله؟ الواجهة المشحونة تفعل، وويندوز يمنعها من حذف نفسها. */
+    runsFromInside(root) {
+        const step = relative(resolve(root), resolve(process.execPath));
+        return step !== "" && !step.startsWith("..") && !isAbsolute(step);
+    }
+    async run() {
+        const { args, flags } = await this.parse(Uninstall);
+        // AR: **الجهاز الذي نقف فيه، لا الموضع الافتراضي.** كان الأمر يأخذ ‎APPLIANCE_ROOT‎ مباشرة، بينما
+        //     ‎status‎ و‎doctor‎ وكل ما عداه يتبع الملفّ المُستنتَج. فمن يقف في تثبيت على ‎D:\Fantastic‎
+        //     ويكتب ‎uninstall‎ كان يمحو تثبيتًا آخر على ‎C:\Fantastic‎ — أمرٌ لا رجعة فيه يُنفَّذ على هدف
+        //     لم يقصده أحد. وقد وقع هذا فعلًا أثناء تنفيذ ٠١٨.
+        //     ‎--root‎ يبقى تجاوزًا صريحًا، والاستنتاج هو الافتراض — كما في كل أمر آخر.
+        // EN: **The appliance we are standing in, not the default location.** This command took
+        //     `APPLIANCE_ROOT` directly, while `status`, `doctor` and everything else follow the resolved
+        //     profile. So someone standing in an install at `D:\Fantastic` typing `uninstall` erased a
+        //     different installation at `C:\Fantastic` — an irreversible action against a target nobody
+        //     chose. This actually happened while 018 was being built.
+        //     `--root` remains an explicit override, and resolution is the default — as everywhere else.
+        // AR: **السجلّ يعرف المنتجات بأسمائها، والمسح يعرف موضعًا واحدًا** (٠٢٦). فيُسأل السجلّ أولًا،
+        //     ويبقى المسح لما لا يعرفه — جهازٌ ثُبِّت قبل ٠٢٦ ولا قيد له يُزال كما كان يُزال.
+        // EN: **The registry knows products by name; the scan knows one location** (026). The registry is
+        //     asked first, and the scan remains for what it does not know — an appliance installed before
+        //     026, with no entry, is removed exactly as it always was.
+        const known = readRegistry().products;
+        const chosen = resolveProduct(known, args.product);
+        if (chosen.unknown && args.product) {
+            this.log("");
+            this.log(c.bad(`no product named "${args.product}" is installed here.`));
+            this.log(c.dim(`   installed: ${known.map((row) => row.id).join(", ") || "nothing"}`));
+            this.log("");
+            this.exit(EXIT.FAILURE);
+        }
+        if (chosen.ambiguous) {
+            this.log("");
+            this.log(c.bad("more than one product is installed here — name the one to remove."));
+            for (const row of known)
+                this.log(c.dim(`   · ${row.id}  (${row.version}, ${row.root})`));
+            this.log("");
+            this.exit(EXIT.FAILURE);
+        }
+        const product = chosen.product?.id ?? args.product ?? "estraha";
+        const root = flags.root ?? chosen.product?.root ?? findApplianceRoot() ?? APPLIANCE_ROOT;
+        if (!existsSync(root) || readdirSync(root).length === 0) {
+            this.log(c.dim(`Nothing installed at ${root}.`));
+            return;
+        }
+        const plan = planRemoval(root, flags.purge);
+        const dataDir = join(root, BUNDLE_DIRS.data);
+        const dataBytes = existsSync(dataDir) ? sizeOf(dataDir) : 0;
+        if (flags.json) {
+            this.log(renderJson(buildEnvelope({
+                command: "uninstall",
+                data: { root, willRemove: plan.removed, willKeep: plan.kept, purge: flags.purge },
+            })));
+            if (!flags.yes)
+                return;
+        }
+        else {
+            this.log("");
+            this.log(`${c.dim("removing from:")} ${c.value(root)}`);
+            this.log(`${c.dim("will remove:")} ${plan.removed.join(", ") || "(nothing)"}`);
+            // يُعلَن ما سيُمَسّ خارج المجلد قبل التأكيد: تعديل PATH الآلة ليس تفصيلًا يُكتشَف بعد وقوعه.
+            this.log(`${c.dim("will also clear:")} the machine PATH entry for ${join(root, BUNDLE_DIRS.bin)}`);
+            this.log(`${c.dim("                ")} the "${BOOT_TASK_NAME}" scheduled task`);
+            if (plan.kept.length > 0) {
+                this.log(`${c.ok("will keep:")}   ${plan.kept.join(", ")} ${c.dim(`(${formatBytes(dataBytes)})`)}`);
+            }
+            else if (flags.purge && dataBytes > 0) {
+                this.log(c.bad(`will DELETE customer data: ${formatBytes(dataBytes)} — this cannot be undone`));
+            }
+            this.log("");
+        }
+        // AR: **‎--yes‎ وحدها لا تكفي لحذف ‎data\‎** (٠٢٦/FR-018).
+        //
+        //     ‎--yes‎ تعني «لا تسألني»، وهي في السكربتات شائعة ومعقولة. أمّا ‎--purge‎ فتعني «امحُ مكتبة
+        //     العميل وقاعدته وإعداداته إلى غير رجعة»، وجمعُهما في سكربتٍ كُتب لغرضٍ آخر يمحو استراحةً
+        //     عاملة بلا أن يقصد أحد. فحذف البيانات يشترط أن **يُكتب اسم المنتج بيد إنسان** — والاسم
+        //     لا يُكتب سهوًا.
+        //
+        //     ولا يُشترط ذلك على الإزالة العادية: هي قابلة للتراجع بإعادة تثبيت، والبيانات تبقى.
+        // EN: **`--yes` alone is not enough to delete `data\`** (026/FR-018).
+        //
+        //     `--yes` means "do not ask me", which is common and reasonable in scripts. `--purge` means
+        //     "erase the customer's library, database and settings irreversibly", and the two together
+        //     inside a script written for another purpose erase a working rest-house with nobody
+        //     intending it. So destroying data requires **the product's name typed by a human** — and a
+        //     name is not typed by accident.
+        //
+        //     Ordinary removal carries no such condition: it is undone by reinstalling, and the data
+        //     stays.
+        if (flags.purge && !isTty) {
+            this.log("");
+            this.log(c.bad("‎--purge‎ يحذف بيانات العميل، ولا يُنفَّذ بلا طرفيةٍ يكتب فيها إنسان اسم المنتج."));
+            this.log(c.dim(`   أزِل بلا ‎--purge‎، ثم احذف ${dataDir} بيدك إن كنت متأكّدًا.`));
+            this.log("");
+            this.exit(EXIT.FAILURE);
+        }
+        if (flags.purge) {
+            const typed = await input({
+                message: `اكتب اسم المنتج «${product}» لتأكيد حذف بيانات العميل في ${dataDir}:`,
+            });
+            if (typed.trim() !== product) {
+                this.log(c.dim("cancelled — nothing was removed."));
+                return;
+            }
+        }
+        else if (!flags.yes) {
+            const proceed = await confirm({
+                message: `Remove the installed product "${product}" from ${root}?`,
+                default: false,
+            });
+            if (!proceed) {
+                this.log(c.dim("cancelled — nothing was removed."));
+                return;
+            }
+        }
+        // AR: **تحرير المقعد أوّلًا، والخدمات ما زالت تعمل** (P4.4).
+        //
+        //     ترتيبٌ لا يقبل التأخير: النداء يمرّ بالنواة، والنواة تُوقَف بعد أسطر. ولو أُخِّر إلى ما
+        //     بعد الإيقاف لَما وُجد من يبلّغ المركز أصلًا — فيبقى المقعد محجوزًا لجهازٍ لم يعد
+        //     موجودًا، ويصطدم العميل يومًا بسقفٍ لا يقابل واقعه ولا يستطيع أحد شرحه له.
+        //
+        //     **وفشلُه لا يوقف الإزالة، تحذيرٌ فقط.** من يزيل نظامه قد يكون أزال إنترنته قبله؛
+        //     وحبسُ الإزالة على نداء شبكة يترك المالك بنظام نصف مُزال لا يستطيع إتمامه ولا التراجع
+        //     عنه. المقعد يُحرَّر عندئذٍ من لوحة الشركة، وهو إجراء دعمٍ من دقيقة.
+        // EN: **Free the seat first, while the services are still running** (P4.4).
+        //
+        //     An order that cannot slip: the call goes through the core, and the core is stopped a few
+        //     lines below. Deferred past the stop, there would be nobody left to tell the centre — the
+        //     seat would stay held for a machine that no longer exists, and the customer would one day
+        //     meet a limit that matches nothing in his reality and that nobody can explain.
+        //
+        //     **And its failure warns rather than blocks.** Whoever is removing the system may have
+        //     removed his internet first; gating the uninstall on a network call would leave the owner
+        //     with a half-removed system he can neither finish nor undo. The seat is then freed from
+        //     the company dashboard, a one-minute support action.
+        const seat = await this.releaseSeat(root);
+        // AR: PATH **قبل** حذف الملفات: مجلد ‎logs\‎ هو حيث تُحفَظ النسخة الاحتياطية من قيمة PATH، وهو
+        //     ضمن ما سيُحذَف بعد سطور. عكسُ الترتيب يكتب النسخة في مجلد يزول فورًا، فيضيع ما وُضع
+        //     ليُستَرجَع منه.
+        // EN: PATH **before** deleting files: `logs\` is where the PATH backup is written, and it is
+        //     among what gets removed a few lines below. The reverse order writes the backup into a
+        //     directory that vanishes immediately, losing the very thing kept for recovery.
+        const binDir = join(root, BUNDLE_DIRS.bin);
+        const pathChange = await unregisterFromMachinePath(binDir, join(root, BUNDLE_DIRS.logs));
+        // AR: **مهمة الإقلاع تُزال قبل الملفات** (٠٢٠/FR-013): مهمّةٌ باقية بعد الإزالة تحاول تشغيل
+        //     ‎bin\fantastic.cmd‎ في مجلد لم يعد موجودًا **عند كل إقلاع لهذا الجهاز**، فتخلّف خطأً في
+        //     سجلّ ويندوز إلى الأبد على آلة لم يعد لنا فيها شيء. ما يكتبه التثبيت تُزيله الإزالة.
+        // EN: **The boot task goes before the files** (020/FR-013): a task surviving the uninstall tries
+        //     to run `bin\fantastic.cmd` in a directory that no longer exists **on every boot of that
+        //     machine**, leaving a Windows error forever on a box where nothing of ours remains. What
+        //     the install wrote, the uninstall removes.
+        const bootTask = await removeBootTask();
+        // AR: **الإيقاف جزء من الإزالة لا شرطٌ عليها.** كان الأمر يحذف والخدمات تعمل، فيفشل عند أول ملفّ
+        //     تمسكه عملية حيّة (‎libvips-42.dll‎ عادةً) ويقول «أوقف الخدمات أولًا» — بعد أن يكون قد حذف
+        //     الشيمة والواجهة، أي **بعد أن حذف الأمر الذي طلب من الفنّي أن يكتبه**. من يزيل نظامًا يريد
+        //     إزالته، فنوقفه له.
+        // EN: **Stopping is part of removing, not a precondition for it.** The command used to delete
+        //     while the services ran, fail at the first file a live process held (`libvips-42.dll`,
+        //     typically) and say "stop the services first" — having already deleted the shim and the CLI,
+        //     that is, **having deleted the very command it asked the technician to type**. Someone
+        //     removing a system means to remove it, so we stop it for them.
+        const profile = createApplianceProfile({
+            root,
+            corePort: APPLIANCE_DEFAULTS.corePort,
+            livePort: APPLIANCE_DEFAULTS.livePort,
+            logLevel: APPLIANCE_DEFAULTS.logLevel,
+        });
+        await stopServices(profile).catch(() => undefined);
+        const stubborn = applyRemoval(root, plan);
+        // AR: **يُنسى القيد بعد الإزالة لا قبلها** (٠٢٦). قبلها يعني سجلًّا لا يذكر نظامًا ما زال على
+        //     القرص إن تعثّر الحذف — فيقول ‎list‎ إن الآلة نظيفة وهي ليست كذلك، وهو أسوأ من ألّا نسجّل.
+        // EN: **The entry is forgotten after removal, not before** (026). Before would mean a registry
+        //     that omits a system still on disk if the delete stumbles — so `list` reports a clean
+        //     machine that is not clean, which is worse than not recording at all.
+        forgetInstall(product);
+        if (stubborn.length > 0) {
+            this.log(c.bad(`Partly removed. Still present: ${stubborn.join(", ")}`));
+            // AR: **الحالة الغالبة معروفة، فتُسمَّى بدل أن يُترَك الفنّي يخمّن.** الواجهة المشحونة تعمل بـ
+            //     ‎runtime\node.exe‎، وويندوز لا يسمح لعملية بحذف الملفّ الذي تُنفَّذ منه. فلا شيء «معلَّق»
+            //     ولا شيء يُغلَق: العائق هو الأمر نفسه، وحلّه سطرٌ واحد بعد خروجه.
+            // EN: **The common case is known, so it is named rather than left to guesswork.** The shipped
+            //     CLI runs from `runtime\node.exe`, and Windows does not let a process delete the file it is
+            //     executing from. Nothing is "stuck" and nothing needs closing: the obstacle is this command
+            //     itself, and the fix is one line after it exits.
+            if (this.runsFromInside(root)) {
+                this.log(c.dim(`   this command runs from ${root} — Windows cannot delete a running program.`));
+                this.log(`${c.accent(glyph.arrow)} From anywhere else, once this exits:  rmdir /s /q "${root}"`);
+            }
+            else {
+                this.log(`${c.accent(glyph.arrow)} Something still holds them. Close anything reading ${root}, then run this again.`);
+            }
+            this.exit(EXIT.FAILURE);
+        }
+        this.log(`${c.ok(glyph.pass)} Removed.`);
+        if (this.runsFromInside(root)) {
+            // نجحت الإزالة، لكن هذا الملفّ ما زال يُنفَّذ من مجلد لم يعد فيه شيء آخر.
+            this.log(c.dim(`   the runtime under ${root} goes when this command exits.`));
+        }
+        // جهازٌ أُزيل عنه النظام لا يبقى في PATH أثرٌ ميّت يشير إلى مجلد لم يعد موجودًا.
+        this.log(`${pathChange.changed ? c.ok(glyph.pass) : c.dim("·")} PATH ${c.dim(pathChange.detail)}`);
+        this.log(`${bootTask.changed ? c.ok(glyph.pass) : c.dim("·")} Boot task ${c.dim(bootTask.detail)}`);
+        this.log(`${seat.freed ? c.ok(glyph.pass) : c.warn("!")} Licence seat ${c.dim(seat.detail)}`);
+        if (!seat.freed && seat.attempted) {
+            this.log(`${c.accent(glyph.arrow)} ${c.dim("Free it from the Fantastic dashboard: Devices → deauthorize.")}`);
+        }
+        if (plan.kept.length > 0) {
+            this.log(c.dim(`   ${dataDir} was kept. Delete it with --purge, or by hand.`));
+        }
+    }
+    /**
+     * يبلّغ المركز بإيقاف تفعيل هذا الجهاز عبر النواة. **لا يرمي أبدًا**: كل مسار يعيد وصفًا،
+     * لأن استثناءً هنا يوقف إزالةً لأسبابٍ خارجة عن الجهاز أصلًا.
+     */
+    async releaseSeat(root) {
+        const profile = createApplianceProfile({
+            root,
+            corePort: APPLIANCE_DEFAULTS.corePort,
+            livePort: APPLIANCE_DEFAULTS.livePort,
+            logLevel: APPLIANCE_DEFAULTS.logLevel,
+        });
+        const result = await deactivateLicense(profile).catch(() => null);
+        if (!result)
+            return { freed: false, attempted: true, detail: "could not be released" };
+        if (result.ok) {
+            return result.data.ok
+                ? { freed: true, attempted: true, detail: "released at the centre" }
+                : { freed: false, attempted: true, detail: result.data.message };
+        }
+        // النواة متوقّفة أصلًا: لا مقعد يُحرَّر، ولا شيء أخطأ. لا تحذير في هذه الحالة.
+        if (result.unreachable) {
+            return { freed: false, attempted: false, detail: "the core was not running — nothing to release" };
+        }
+        return { freed: false, attempted: true, detail: result.reason };
+    }
+}
+//# sourceMappingURL=uninstall.js.map

package/dist/commands/uninstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uninstall.js","sourceRoot":"","sources":["../../src/commands/uninstall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC9G,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC5F,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAExC,mBAAmB;AACnB,EAAE;AACF,sGAAsG;AACtG,8FAA8F;AAC9F,sDAAsD;AACtD,EAAE;AACF,sGAAsG;AACtG,2FAA2F;AAC3F,qBAAqB;AACrB,EAAE;AACF,qGAAqG;AACrG,kGAAkG;AAClG,mGAAmG;AACnG,wEAAwE;AACxE,EAAE;AACF,8FAA8F;AAC9F,sGAAsG;AACtG,0DAA0D;AAE1D,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,WAAW;IAChD,MAAM,CAAC,WAAW,GAAG,4EAA4E,CAAC;IAElG,MAAM,CAAC,QAAQ,GAAG;QAChB,qCAAqC;QACrC,6CAA6C;KAC9C,CAAC;IAEF,wFAAwF;IACxF,MAAM,CAAC,IAAI,GAAG;QACZ,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,yDAAyD,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;KAClH,CAAC;IAEF,MAAM,CAAC,KAAK,GAAG;QACb,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kCAAkC,cAAc,GAAG,EAAE,CAAC;QACxF,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;YACnB,WAAW,EAAE,mFAAmF;YAChG,OAAO,EAAE,KAAK;SACf,CAAC;QACF,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,8BAA8B,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;KACpF,CAAC;IAEF,wGAAwG;IAChG,cAAc,CAAC,IAAY;QACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChE,OAAO,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,kGAAkG;QAClG,iGAAiG;QACjG,mGAAmG;QACnG,uDAAuD;QACvD,gFAAgF;QAChF,wFAAwF;QACxF,kGAAkG;QAClG,+FAA+F;QAC/F,gGAAgG;QAChG,+DAA+D;QAC/D,iGAAiG;QACjG,+FAA+F;QAC/F,sFAAsF;QACtF,kGAAkG;QAClG,kGAAkG;QAClG,+DAA+D;QAC/D,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC,QAAQ,CAAC;QACtC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAEnD,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,OAAO,sBAAsB,CAAC,CAAC,CAAC;YACzE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;YACvF,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC,CAAC;YACrF,KAAK,MAAM,GAAG,IAAI,KAAK;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,OAAO,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YAC1F,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC;QAChE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,iBAAiB,EAAE,IAAI,cAAc,CAAC;QAEzF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,wBAAwB,IAAI,GAAG,CAAC,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5D,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CACN,UAAU,CACR,aAAa,CAAC;gBACZ,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;aAClF,CAAC,CACH,CACF,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,GAAG;gBAAE,OAAO;QACzB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACxD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;YAC/E,6FAA6F;YAC7F,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,+BAA+B,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,SAAS,cAAc,kBAAkB,CAAC,CAAC;YAEhF,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtG,CAAC;iBAAM,IAAI,KAAK,CAAC,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;gBACxC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,8BAA8B,WAAW,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC,CAAC;YAClG,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACf,CAAC;QAED,2DAA2D;QAC3D,EAAE;QACF,iGAAiG;QACjG,8FAA8F;QAC9F,4FAA4F;QAC5F,sBAAsB;QACtB,EAAE;QACF,yFAAyF;QACzF,sEAAsE;QACtE,EAAE;QACF,gGAAgG;QAChG,+FAA+F;QAC/F,yFAAyF;QACzF,gGAAgG;QAChG,qCAAqC;QACrC,EAAE;QACF,6FAA6F;QAC7F,aAAa;QACb,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC,CAAC;YACpG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,kCAAkC,OAAO,wBAAwB,CAAC,CAAC,CAAC;YACnF,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC;gBACxB,OAAO,EAAE,oBAAoB,OAAO,iCAAiC,OAAO,GAAG;aAChF,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC;gBAC5B,OAAO,EAAE,iCAAiC,OAAO,UAAU,IAAI,GAAG;gBAClE,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,EAAE;QACF,8FAA8F;QAC9F,uFAAuF;QACvF,gFAAgF;QAChF,EAAE;QACF,uFAAuF;QACvF,2FAA2F;QAC3F,0EAA0E;QAC1E,4EAA4E;QAC5E,EAAE;QACF,+FAA+F;QAC/F,+FAA+F;QAC/F,+FAA+F;QAC/F,oFAAoF;QACpF,EAAE;QACF,4FAA4F;QAC5F,+FAA+F;QAC/F,6FAA6F;QAC7F,0DAA0D;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAE1C,+FAA+F;QAC/F,0FAA0F;QAC1F,sBAAsB;QACtB,6FAA6F;QAC7F,4FAA4F;QAC5F,oFAAoF;QACpF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAEzF,4FAA4F;QAC5F,8FAA8F;QAC9F,0FAA0F;QAC1F,iGAAiG;QACjG,8FAA8F;QAC9F,8FAA8F;QAC9F,gDAAgD;QAChD,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAE,CAAC;QAExC,iGAAiG;QACjG,gGAAgG;QAChG,gGAAgG;QAChG,yBAAyB;QACzB,8FAA8F;QAC9F,4FAA4F;QAC5F,kGAAkG;QAClG,4FAA4F;QAC5F,oEAAoE;QACpE,MAAM,OAAO,GAAG,sBAAsB,CAAC;YACrC,IAAI;YACJ,QAAQ,EAAE,kBAAkB,CAAC,QAAQ;YACrC,QAAQ,EAAE,kBAAkB,CAAC,QAAQ;YACrC,QAAQ,EAAE,kBAAkB,CAAC,QAAQ;SACtC,CAAC,CAAC;QACH,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAEnD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAE1C,8FAA8F;QAC9F,gGAAgG;QAChG,+FAA+F;QAC/F,2FAA2F;QAC3F,2EAA2E;QAC3E,aAAa,CAAC,OAAO,CAAC,CAAC;QAEvB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,kCAAkC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACzE,+FAA+F;YAC/F,gGAAgG;YAChG,uEAAuE;YACvE,8FAA8F;YAC9F,iGAAiG;YACjG,iGAAiG;YACjG,sDAAsD;YACtD,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,6BAA6B,IAAI,6CAA6C,CAAC,CAAC,CAAC;gBAChG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,uDAAuD,IAAI,GAAG,CAAC,CAAC;YACnG,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,uDAAuD,IAAI,wBAAwB,CAAC,CAAC;YACxH,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,0EAA0E;YAC1E,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,wBAAwB,IAAI,gCAAgC,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,iFAAiF;QACjF,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnG,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpG,IAAI,CAAC,GAAG,CACN,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CACpF,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,8DAA8D,CAAC,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,OAAO,gDAAgD,CAAC,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,WAAW,CAAC,IAAY;QACpC,MAAM,OAAO,GAAG,sBAAsB,CAAC;YACrC,IAAI;YACJ,QAAQ,EAAE,kBAAkB,CAAC,QAAQ;YACrC,QAAQ,EAAE,kBAAkB,CAAC,QAAQ;YACrC,QAAQ,EAAE,kBAAkB,CAAC,QAAQ;SACtC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAElE,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QAEvF,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE;gBACnB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,wBAAwB,EAAE;gBACpE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACrE,CAAC;QAED,+EAA+E;QAC/E,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,+CAA+C,EAAE,CAAC;QACrG,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAClE,CAAC"}

package/dist/commands/update.d.ts

@@ -0,0 +1,21 @@
+import { BaseCommand } from "../base-command.js";
+export default class Update extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        check: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        yes: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        component: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        channel: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    static help: string;
+    run(): Promise<void>;
+    private install;
+    private progressDrawn;
+    private drawProgress;
+    private finishProgress;
+    /** سطر خطوة واحد. **ما بعد نقطة السقوط لا يُرسَم**، لأنه لم يُنفَّذ. */
+    private step;
+    private failWith;
+}
+//# sourceMappingURL=update.d.ts.map

package/dist/commands/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../src/commands/update.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAkB,MAAM,oBAAoB,CAAC;AAqEjE,MAAM,CAAC,OAAO,OAAO,MAAO,SAAQ,WAAW;IAC7C,MAAM,CAAC,WAAW,SAAoE;IAEtF,MAAM,CAAC,QAAQ,WAIb;IAEF,MAAM,CAAC,KAAK;;;;;MASV;IAEF,MAAM,CAAC,IAAI,SAAkB;IAEvB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;YA+HZ,OAAO;IA6GrB,OAAO,CAAC,aAAa,CAAS;IAE9B,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,cAAc;IAKtB,wEAAwE;IACxE,OAAO,CAAC,IAAI;IAMZ,OAAO,CAAC,QAAQ;CAMjB"}

package/dist/commands/update.js

@@ -0,0 +1,290 @@
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { confirm } from "@inquirer/prompts";
+import { Flags } from "@oclif/core";
+import { BaseCommand, EXIT_CODE_HELP } from "../base-command.js";
+import { readManifest } from "../packaging/manifest.js";
+import { getInternal } from "../probes/internal.client.js";
+import { INTERNAL_PATHS } from "../probes/internal-paths.js";
+import { buildEnvelope, renderJson } from "../render/json.js";
+import { c, glyph, isTty } from "../render/theme.js";
+import { startServices, stopServices } from "../supervisor/orchestrator.js";
+import { discardPrevious, extractInto, swapAside, targetFor } from "../updating/apply.js";
+import { downloadBundle } from "../updating/download.js";
+import { rollback } from "../updating/rollback.js";
+import { verifyChecksum } from "../updating/verify.js";
+import { installedVersion, recordInstalledComponent } from "../updating/versions.js";
+import { checkCompatibility } from "../acquire/compatibility.js";
+import { EXIT } from "../exit-codes.js";
+// AR: ‎fantastic update‎ — يفحص وينزّل ويتحقّق ويركّب، ويتراجع عند الفشل.
+//
+//     **الأمر لا ينادي البوّابة المركزية.** ينادي ‎/internal/updates/check‎، والنواة تسأل
+//     المركز بنفس ‎LicenseService‎ الذي تسأله به عن الرخصة — نفس قاعدة P4.4 ولنفس السبب:
+//     هوية الجهاز وعنوان المركز والمفتاح العام تعيش في النواة وحدها.
+//
+//     ثم **ينزّل من الرابط الموقَّع مباشرةً**، وهذا ليس خرقًا للقاعدة بل تطبيقٌ لها: الرابط
+//     رمزٌ قصير العمر أصدره المركز لهذا الجهاز ولهذا الإصدار، والـ CLI لا يحمل سرًّا يصنعه —
+//     يحمل ورقةً أُعطيت له. ونصف غيغابايت يمرّ عبر النواة يعني بثًّا مضاعفًا خلال عمليةٍ
+//     تخدم المشاهدين في اللحظة نفسها.
+//
+// EN: `fantastic update` — checks, downloads, verifies, installs, and rolls back on failure.
+//
+//     **The command never calls the central portal.** It calls `/internal/updates/check`, and the
+//     core asks the centre through the same `LicenseService` it uses for the licence — P4.4's rule
+//     for P4.4's reason: the device identity, the centre's address and the public key live in the
+//     core alone.
+//
+//     It then **downloads from the signed link directly**, which is not a breach of that rule but
+//     an application of it: the link is a short-lived token the centre issued for this device and
+//     this release, and the CLI holds no secret that mints it — it holds a paper it was handed.
+//     Streaming half a gigabyte through the core would mean doubling the transfer inside a process
+//     serving viewers at that very moment.
+/**
+ * AR: ترتيب التركيب. **الترتيب هو الأمان، لا التنظيم.**
+ *
+ *     التحقّق (٣) يسبق الإيقاف (٥) — لو عُكسا لَتوقّف نظامٌ يعمل من أجل حزمة تالفة. وكل ما
+ *     قبل الإيقاف لا يلمس التثبيت، فالفشل فيه يخرج بلا تراجع لأن لا شيء تراجَع.
+ * EN: The install order. **The order is the safety, not the tidiness.**
+ *
+ *     Verification (3) precedes the stop (5) — reversed, a working system goes down for a corrupt
+ *     bundle. Everything before the stop leaves the installation untouched, so a failure there
+ *     exits without rollback because nothing rolled forward.
+ */
+const STEPS = ["Downloading", "Verifying checksum", "Verifying signature", "Backing up", "Installing"];
+export default class Update extends BaseCommand {
+    static description = "Check for and install a signed update, with automatic rollback";
+    static examples = [
+        "<%= config.bin %> update --check",
+        "<%= config.bin %> update --yes",
+        "<%= config.bin %> update --component live --yes",
+    ];
+    static flags = {
+        check: Flags.boolean({ description: "Report only; install nothing.", default: false }),
+        yes: Flags.boolean({ char: "y", description: "Skip the confirmation prompt.", default: false }),
+        component: Flags.string({
+            description: "Component to update.",
+            options: ["core", "live", "interface"],
+            default: "core",
+        }),
+        channel: Flags.string({ description: "Release channel.", options: ["stable", "beta"], default: "stable" }),
+    };
+    static help = EXIT_CODE_HELP;
+    async run() {
+        const { flags } = await this.parse(Update);
+        const profile = this.loadProfile(flags.profile, false, flags.product);
+        const manifest = readManifest(profile.root);
+        if (!manifest) {
+            this.log("");
+            this.log(c.dim("No bundle manifest here; this is a repository, not an installed appliance."));
+            this.log("");
+            this.exit(EXIT.NO_PROFILE);
+            return;
+        }
+        // AR: **حارس التوافق قبل أيّ عمل** (٠٢٦/FR-026). الحزمة المثبَّتة تُعلن أدنى واجهةٍ تفهم
+        //     شجرتها، وواجهةٌ أقدم منها لا يجوز أن تبدأ تحديثًا: ستنزّل، وتوقف خدمات، ثم تعجز عن
+        //     تركيب ما نزّلته — على جهازٍ كان يعمل.
+        // EN: **The compatibility guard before any work** (026/FR-026). The installed bundle declares the
+        //     lowest CLI that understands its tree, and an older one must not begin an update: it would
+        //     download, stop services, then fail to install what it fetched — on a machine that was
+        //     working.
+        const compatible = checkCompatibility(manifest.bundle.minCliVersion);
+        if (!compatible.ok) {
+            this.log("");
+            this.log(c.bad(compatible.message));
+            this.log(`${c.accent(glyph.arrow)} ${compatible.remedy}`);
+            this.log("");
+            this.exit(EXIT.FAILURE);
+            return;
+        }
+        const component = flags.component;
+        const current = installedVersion(manifest, component);
+        if (!current) {
+            this.log("");
+            this.log(c.warn(`versions.json has no version for ${component}.`));
+            this.log("");
+            this.exit(EXIT.FAILURE);
+            return;
+        }
+        // AR: ١ — الفحص عبر النواة، وهي تسأل المركز.
+        //
+        //     **المكوّن والإصدار المركَّب والقناة تُمرَّر في الاستعلام.** النواة لا تعرف أيًّا
+        //     منها: هي مكوّنٌ واحد من أربعة، و‎versions.json‎ الذي يعرفها يقرؤه الـ CLI. وإرسال
+        //     الطلب بلا استعلام كان يصل المركز بـ‎current‎ فارغة فيردّ «الإصدار المركَّب يجب أن
+        //     يكون بصيغة 1.2.3» — رسالةٌ صحيحة عن عطلٍ مكانه هنا. وُجد بالتشغيل.
+        // EN: 1 — the check through the core, which asks the centre.
+        //
+        //     **Component, installed version and channel travel in the query.** The core knows none of
+        //     them: it is one component of four, and `versions.json` — which knows them all — is read
+        //     by the CLI. Sending the request without a query reached the centre with an empty
+        //     `current` and answered "the installed version must look like 1.2.3" — a correct message
+        //     about a fault that lives here. Found by running it.
+        const query = new URLSearchParams({ component, current, channel: flags.channel });
+        const probe = await getInternal(profile, `${INTERNAL_PATHS.UPDATES_CHECK}?${query.toString()}`, 45_000);
+        if (!probe.ok) {
+            if (probe.unreachable)
+                this.coreUnreachable("update", profile, probe.reason, false);
+            this.failWith(probe.error?.message ?? probe.reason, EXIT.FAILURE);
+            return;
+        }
+        const check = probe.data;
+        if (flags.json) {
+            // نفس غلاف ‎buildEnvelope‎ لا شكلٌ خاصّ بهذا الأمر — نفس قرار P4.4.
+            renderJson(buildEnvelope({ command: "update", profile, data: { component, installed: current, check } }));
+            return;
+        }
+        if (!check.ok) {
+            this.log("");
+            this.log(`${glyph.fail} ${c.bad(check.message)}`);
+            this.log("");
+            // AR: تعذّرُ الوصول ‎4‎ ورفضُ المركز ‎1‎ — نفس تفريق P4.4، وسكربت التثبيت يعيد المحاولة
+            //     على الأول ولا يعيدها على الثاني مهما تكرّر.
+            // EN: Unreachable is `4` and a refusal is `1` — P4.4's split, and the installer script
+            //     retries the first and never the second however often it repeats.
+            this.exit(check.code === "CENTRAL_UNREACHABLE" ? EXIT.UNREACHABLE : EXIT.FAILURE);
+            return;
+        }
+        this.log("");
+        this.log(`${c.dim("installed:")} ${c.value(current)}   ${c.dim(component)}`);
+        if (!check.available) {
+            this.log(`${c.dim("available:")} ${c.dim("nothing newer")}`);
+            this.log("");
+            return;
+        }
+        const { update } = check;
+        this.log(`${c.dim("available:")} ${c.value(update.version)}   ` +
+            (update.mandatory ? c.bad("mandatory") : c.dim("optional")));
+        if (update.releaseNotes)
+            this.log(`${c.dim("   notes:")} ${update.releaseNotes}`);
+        this.log("");
+        // ‎--check‎ يفحص ويطبع ولا يركّب.
+        if (flags.check)
+            return;
+        if (!flags.yes) {
+            const proceed = await confirm({
+                message: `Install ${component} ${update.version} now? Services will restart.`,
+                default: update.mandatory,
+            }).catch(() => false);
+            if (!proceed) {
+                this.log(c.dim("   nothing installed."));
+                this.log("");
+                return;
+            }
+        }
+        await this.install(profile, manifest, component, current, update);
+    }
+    async install(profile, manifest, component, current, update) {
+        if (!targetFor(profile.root, component)) {
+            this.failWith(`No install location is defined for ${component}.`, EXIT.FAILURE);
+            return;
+        }
+        const workspace = mkdtempSync(join(tmpdir(), "fantastic-update-"));
+        const archive = join(workspace, `${component}-${update.version}.zip`);
+        try {
+            // ٢ — التنزيل إلى مجلد مؤقّت. **لا شيء في التثبيت لُمس بعد.**
+            const download = await downloadBundle({
+                url: update.downloadUrl,
+                destination: archive,
+                expectedBytes: update.sizeBytes,
+                onProgress: (progress) => this.drawProgress(progress.percent),
+            });
+            if (!download.ok) {
+                this.finishProgress(false);
+                this.failWith(download.reason, download.unreachable ? EXIT.UNREACHABLE : EXIT.FAILURE);
+                return;
+            }
+            this.finishProgress(true);
+            // AR: ٣ ★ — التحقّق. **فشلٌ هنا يتوقّف ولا شيء لُمس.**
+            //
+            //     خطوة التوقيع تُرسَم ناجحةً قبل خطوة البصمة لأنها **جرت فعلًا وقبل التنزيل**:
+            //     النواة تحقّقت من البيان في ‎checkUpdate‎ ولولا نجاحها لَما وصل رابطٌ أصلًا. فلا
+            //     مؤقّت هنا ولا تمثيل: كلا السطرين يصف فحصًا وقع فعلًا.
+            // EN: 3 ★ — verification. **A failure here stops, and nothing has been touched.**
+            //
+            //     `Verifying checksum` runs now, against the digest read out of the signed manifest.
+            //     `Verifying signature` describes the check the core already performed in `checkUpdate`
+            //     **before this download existed** — had it failed, no link would have arrived at all.
+            //     Its line is drawn from an established fact, not from a timer: both lines describe a
+            //     check that really happened.
+            const checksum = await verifyChecksum(archive, update.sha256, update.sizeBytes);
+            if (!checksum.ok) {
+                this.step(1, false);
+                this.log("");
+                this.log(`${glyph.fail} ${c.bad(checksum.message)}`);
+                this.log(`${c.dim("   expected")} ${checksum.expected}`);
+                this.log(`${c.dim("   got     ")} ${checksum.actual}`);
+                this.log(c.dim("   Nothing was installed; the appliance is untouched."));
+                this.log("");
+                this.exit(EXIT.FAILURE);
+                return;
+            }
+            this.step(1, true);
+            this.step(2, true);
+            // ٤ — إزاحة الشجرة القائمة جانبًا. من هنا فصاعدًا كل فشل يستدعي تراجعًا.
+            await stopServices(profile);
+            const handle = await swapAside(profile.root, component, current);
+            this.step(3, true);
+            try {
+                // ٦ — التركيب.
+                await extractInto(archive, handle.target);
+                this.step(4, true);
+                // ٧ — التشغيل وفحص الصحة.
+                const started = await startServices(profile);
+                if (!started.ok)
+                    throw new Error("الخدمات لم تصبح جاهزة بعد التركيب.");
+                // ٨ — نجاح: تُحدَّث ‎versions.json‎ **الآن وليس قبل**، وتُزال الشجرة السابقة.
+                recordInstalledComponent(profile.root, manifest, component, update.version);
+                discardPrevious(handle);
+                this.log("");
+                this.log(`${glyph.pass} ${c.ok(`Updated ${component} ${current} → ${update.version}`)}`);
+                this.log("");
+            }
+            catch (error) {
+                this.step(4, false);
+                const report = await rollback(profile, handle);
+                this.log("");
+                this.log(`${glyph.fail} ${c.bad(error instanceof Error ? error.message : String(error))}`);
+                if (report.restored) {
+                    this.log(`${glyph.pass} ${c.warn(`Rolled back to ${current}`)}` +
+                        (report.running ? c.dim(" — services are running.") : c.bad(" — services did NOT start.")));
+                }
+                else {
+                    // أسوأ حالة ممكنة، وتُقال صراحةً: الفنيّ يحتاج المسار لا اعتذارًا.
+                    this.log(`${glyph.fail} ${c.bad("Rollback failed.")} ${c.dim(report.problem ?? "")}`);
+                    this.log(c.dim(`   The previous build is at: ${handle.previous}`));
+                }
+                this.log("");
+                this.exit(EXIT.FAILURE);
+            }
+        }
+        finally {
+            // الحزمة المنزَّلة تُزال دائمًا: نصف غيغابايت في ‎%TEMP%‎ عن كل تحديث يملأ قرص الجهاز.
+            rmSync(workspace, { recursive: true, force: true });
+        }
+    }
+    progressDrawn = false;
+    drawProgress(percent) {
+        if (!isTty)
+            return;
+        process.stdout.write(`\r ${glyph.step} ${STEPS[0].padEnd(22, ".")} ${String(percent).padStart(3)}%`);
+        this.progressDrawn = true;
+    }
+    finishProgress(ok) {
+        if (this.progressDrawn)
+            process.stdout.write("\r");
+        this.step(0, ok, ok ? "100%" : undefined);
+    }
+    /** سطر خطوة واحد. **ما بعد نقطة السقوط لا يُرسَم**، لأنه لم يُنفَّذ. */
+    step(index, ok, suffix) {
+        const label = STEPS[index].padEnd(22, ".");
+        const mark = ok ? c.ok(suffix ?? "ok") : c.bad("failed");
+        this.log(` ${glyph.step} ${label} ${mark}`);
+    }
+    failWith(message, code) {
+        this.log("");
+        this.log(`${glyph.fail} ${c.bad(message)}`);
+        this.log("");
+        this.exit(code);
+    }
+}
+//# sourceMappingURL=update.js.map