dsh-ensp 0.6.0 → 0.8.0

package/docs/UI-ANCHORS.md

@@ -120,6 +120,27 @@
 所以置顶问题必须由用户解决。但提权是输入注入的前提：Medium 上下文里 `SendInput` 虽然返回成功，
 输入队列却不变，eNSP 收不到点击；以管理员身份运行后输入注入恢复正常。因此本工具需要以管理员身份运行。
 
+## 拓扑是否真的打开了（渲染判定）
+
+`ensp open` 打开 `.topo` 之后要确认 eNSP 真的把拓扑画出来了，否则会在空白画布上继续点"启动设备"。
+这个判定以前用像素统计：数画布上饱和蓝的图标像素与近黑的连线像素，两项都超过阈值就算渲染成功。
+实测证明两边都错：
+
+| 画面 | 图标像素 | 连线像素 | 旧判定 |
+|---|---|---|---|
+| 单台交换机 | 1983 | 16 | 未渲染，重试三次后报错 |
+| 两台路由器加一条线 | 2986 | 352 | 渲染成功 |
+| 欢迎页（没加载任何拓扑） | 4010 | 2517 | 渲染成功 |
+
+单设备实验没有连线，连线像素必然接近 0，于是合法的实验被判为没打开，`launchEnsp` 会重试三次
+然后放弃，用户看到的是同一份拓扑被反复打开。反过来，欢迎页的示例树与缩略图颜色足够鲜艳，
+像素数比真实拓扑还高，会被当成渲染成功。
+
+真正的信号在窗口树里：eNSP 给画布上每台设备生成一个隐藏的 `Edit` 子窗口，数量与设备数完全一致。
+欢迎页是 0 个，一台设备是 1 个，三台设备是 3 个。实测四种情况后改用这个计数，
+`topologyRendered(hwnd)` 现在是 `canvasDeviceCount(hwnd) >= 1`。`canvasDeviceCount` 单独导出，
+可以顺带知道画布上有几台设备。
+
 ## 设备控制台
 
 | 项 | 值 |

package/docs/plugin-detail.en.md

@@ -10,7 +10,9 @@ Automation for Huawei eNSP: generate topologies, boot devices, push configuratio
 - Checks that every device image is installed before launching, and names the missing component instead of letting eNSP open the topology and quit silently
 - Runs seven preflight checks (images, ports, memory, input injection), each with a stated fix, then verifies the scenario against what the devices actually report
 - Must run elevated, with the eNSP window visible (see the run-permissions section in the repository documentation)
+- The blueprint addressing plan becomes interface commands with `--config`, or one `.cfg` per device that `ensp apply` reads directly
 - Each scenario points at the vendor manual chapter that teaches it, with that chapter's goals and the display commands it uses to prove the result; the index is searchable
+- Writes a finished lab out as a Word report on request: six fixed chapters, configuration quoted from the devices, verification output quoted verbatim
 - Usable as a CLI, an MCP server, or a DeepSeek Harness plugin
 
 Full documentation: [repository](https://github.com/lizi600jin/dsh-ensp#readme).

package/docs/plugin-detail.zh.md

@@ -10,7 +10,9 @@
 - 启动前检查机型镜像是否齐全，缺镜像时说明缺失组件，避免 eNSP 打开后静默退出
 - 提供七项环境自检（镜像、端口、内存、输入注入能力），逐条给出结论与修法；配置下发后按场景断言验收
 - 需要以管理员身份运行，并保持 eNSP 窗口可见（详见仓库文档“运行权限”）
+- 场景蓝图自带地址规划，可用 `--config` 输出成接口配置，或写成每台设备一个 `.cfg` 直接交给 `ensp apply`
 - 场景附带厂商实验手册的章节索引：该章的学习目标与官方用来验证结果的 display 命令，可按关键词检索
+- 按需把一次实验写成 Word 报告：六章固定结构，配置取自设备实际生效的内容，验证输出逐条附原文
 - 提供 CLI、MCP Server 与 DeepSeek Harness 插件三种调用方式
 
 完整说明见 [仓库文档](https://github.com/lizi600jin/dsh-ensp#readme)。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-ensp",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "description": "Automate Huawei eNSP labs: generate .topo files, start and stop devices, and push configuration one command at a time with per-command error reporting.",
   "keywords": [
     "dsh",
@@ -15,6 +15,7 @@
   ],
   "type": "module",
   "license": "GPL-3.0-or-later",
+  "icon": "./assets/icon.webp",
   "main": "./src/dsh/index.mjs",
   "exports": {
     ".": "./src/dsh/index.mjs",
@@ -38,20 +39,19 @@
   "files": [
     "src",
     "locale/*.json",
+    "assets/icon.webp",
     "docs",
     "scripts",
     "cordis.patch.yml",
-    "screenshots.json",
     "README.md",
     "README.en.md",
     "LICENSE"
   ],
   "scripts": {
-    "test": "node --test tests/core.test.mjs",
+    "test": "node --test tests/core.test.mjs tests/ooxml.test.mjs",
     "probe": "node src/cli/ensp.mjs probe",
     "docs": "node scripts/gen-scenarios-doc.mjs",
     "docs:check": "node scripts/gen-scenarios-doc.mjs --check",
-    "knowledge": "node scripts/gen-knowledge.mjs",
     "curriculum": "node scripts/gen-curriculum.mjs"
   },
   "engines": {

package/scripts/gen-scenarios-doc.mjs

@@ -17,6 +17,7 @@ import { fileURLToPath } from 'node:url'
 
 import { SCENARIOS, SCENARIO_IDS, byLevel } from '../src/core/presets.mjs'
 import { LABS, LAB_IDS, hasLab, labAddressing, labDevices, labModels } from '../src/core/labs.mjs'
+import { hasLabConfig } from '../src/core/labconfig.mjs'
 import { imageNotesFor } from '../src/core/compat.mjs'
 import { hasChecks, EXPECTATIONS } from '../src/core/acceptance.mjs'
 import { curriculumFor } from '../src/core/curriculum.mjs'
@@ -103,14 +104,14 @@ function render(catalogue = SCENARIOS) {
     out.push('', `## ${LEVEL_TITLES[level]}`, '')
     for (const id of groups[level]) {
       const s = catalogue[id]
-      out.push(`### ${id} — ${s.title}`, '')
+      out.push(`### ${id} · ${s.title}`, '')
       out.push(`- **英文名**：${s.titleEn}`)
       out.push(`- **来源**：${s.source}`)
       out.push(`- **设备**：${s.devices}`)
       out.push(`- **目标**：${s.goal}`)
       out.push('', '**配置顺序**', '')
       s.steps.forEach((step, i) => {
-        const detail = step.detail ? ` — ${step.detail}` : ''
+        const detail = step.detail ? `：${step.detail}` : ''
         out.push(`${i + 1}. **${step.do}**${detail}`)
         if (step.verify) out.push(`   - 验证：\`${step.verify}\``)
       })
@@ -133,9 +134,12 @@ function render(catalogue = SCENARIOS) {
         const notes = imageNotesFor(labModels(id))
         for (const [model, note] of notes) out.push(`- 设备镜像：${model} ${note}`)
         out.push('', `生成：\`ensp preset ${id} --topo ${id}.topo\``)
+        if (hasLabConfig(id)) {
+          out.push(`地址配置：\`ensp preset ${id} --config [目录]\``)
+        }
         const verifyLine = hasChecks(id)
           ? `- 验收：\`ensp verify ${id} --topology ${id}.topo\`（${EXPECTATIONS[id].length} 条断言）`
-          : `- 验收：\`ensp verify ${id} --topology ${id}.topo\`（无专门断言，逐条跑本场景的验证命令）`
+          : `- 验收：\`ensp verify ${id} --topology ${id}.topo\`（无专门断言，只跑本场景的验证命令并报告 unverified）`
         out.push(verifyLine)
       }
 

package/scripts/survey-topologies.mjs

@@ -12,11 +12,20 @@
 import { readFileSync, readdirSync, statSync } from 'node:fs'
 import path from 'node:path'
 
-const DEFAULT_ROOTS = [
-  'E:/Huawei/eNSP/examples',
-  'C:/Program Files/Huawei/eNSP/examples',
-  '/opt/ensp/examples',
-]
+import { resolveEnspRoot } from '../src/core/paths.mjs'
+
+/** Locations to scan when `ENSP_EXAMPLES` says nothing; the install on this machine comes first. */
+function defaultRoots() {
+  const installed = resolveEnspRoot()
+  const roots = installed ? [path.join(installed, 'examples')] : []
+  roots.push(
+    'C:/Program Files/Huawei/eNSP/examples',
+    'D:/Huawei/eNSP/examples',
+    'E:/Huawei/eNSP/examples',
+    '/opt/ensp/examples',
+  )
+  return roots
+}
 
 /** Recursively collect .topo paths. */
 function findTopologies(root, out = []) {
@@ -103,7 +112,7 @@ function inspect(file) {
 function main() {
   const json = process.argv.includes('--json')
   const roots = (process.env.ENSP_EXAMPLES ?? '').split(path.delimiter).filter(Boolean)
-  const searchRoots = roots.length ? roots : DEFAULT_ROOTS
+  const searchRoots = roots.length ? roots : defaultRoots()
 
   const files = searchRoots.flatMap((r) => findTopologies(r))
   if (!files.length) {

package/src/cli/ensp.mjs

@@ -16,7 +16,7 @@
  * @module dsh-ensp/cli
  */
 
-import { readFile, access } from 'node:fs/promises'
+import { readFile, access, mkdir, writeFile } from 'node:fs/promises'
 import { constants } from 'node:fs'
 import path from 'node:path'
 import process from 'node:process'
@@ -28,14 +28,15 @@ import {
   startAllDevices,
   stopAllDevices,
   launchEnsp,
+  showEnsp,
   waitForConsole,
 } from '../core/launcher.mjs'
 import { calibrateAnchors, inspectAnchors, DEFAULT_ANCHORS } from '../core/calibrate.mjs'
 import { doctor, formatDoctor, modelsOf } from '../core/doctor.mjs'
 import { runAcceptance, formatAcceptance, hasChecks, planFor } from '../core/acceptance.mjs'
 import { pushConfig } from '../core/provision.mjs'
+import { writeReport } from '../core/report.mjs'
 import { SCENARIOS, SCENARIO_IDS, byLevel, renderScenario, searchScenarios } from '../core/presets.mjs'
-import { knowledgeFor, renderKnowledge, searchKnowledge } from '../core/knowledge.mjs'
 import { curriculumFor, renderCurriculum, searchCurriculum } from '../core/curriculum.mjs'
 import {
   LAB_IDS,
@@ -44,7 +45,8 @@ import {
   labAddressing,
   labDevices,
 } from '../core/labs.mjs'
-import { checkTopologySupport } from '../core/compat.mjs'
+import { countLabConfigs, hasLabConfig, labConfigScript, labConfigs } from '../core/labconfig.mjs'
+import { checkTopologySupport, pluginMediaPlan, pluginModels, installPluginMedia } from '../core/compat.mjs'
 import { writeTopology } from '../core/topology.mjs'
 
 const C = {
@@ -64,9 +66,12 @@ ${C.bold('USAGE')}
   ensp status  [--topology <topology.topo>]
   ensp doctor  [--topology <topology.topo>] [--json] [--shallow]
   ensp verify  <scenario-id> --topology <topology.topo> [--json] [--wait MS]
+  ensp report  <scenario-id> [--topology <topology.topo>] [--out <file.docx>] [--json]
   ensp probe   [--json]
+  ensp show    [--json]         (bring the eNSP window back to the front)
+  ensp images  [--json] [<model>] [--install <image>]
   ensp stop    [--topology <topology.topo>]
-  ensp preset  [<id>] [--search <keyword>] [--syllabus <keyword>] [--topo <out.topo>] [--json]
+  ensp preset  [<id>] [--search <keyword>] [--syllabus <keyword>] [--topo <out.topo>] [--config] [--json]
   ensp mcp     (start the MCP server on stdio)
 
 ${C.bold('OPTIONS')}
@@ -76,8 +81,10 @@ ${C.bold('OPTIONS')}
   --device NAME     apply only to one device
   --timeout MS      per-device readiness timeout (default 240000)
   --wait MS         verify: how long a failing assertion may keep being retried (default 60000)
+  --out PATH        report: where to write the .docx (default <scenario>-report.docx)
+  --install PATH    images: put this device image where this machine's eNSP looks for it
   --syllabus KW     search the vendor manual chapter index (goals and verification commands)
-  --knowledge KW    search the term index (short answers filed by topic)
+  --config [DIR]    print the scenario's addressing plan as commands, or write one .cfg per device into DIR
   --topo PATH       write the scenario's topology blueprint to a .topo file
   --topology PATH   the .topo file that is running (doctor, verify)
   --exe PATH        full path to eNSP_Client.exe (default: auto-detect via registry and install roots)
@@ -90,10 +97,14 @@ ${C.bold('EXAMPLES')}
   ensp up lab.topo
   ensp doctor --topology lab.topo
   ensp verify ospf-single --topology lab.topo
+  ensp report ospf-single --topology lab.topo --out ospf-single.docx
   ensp apply ./configs --topology lab.topo --save
   ensp status --topology lab.topo
   ensp up lab.topo --exe "C:/Program Files/Huawei/eNSP/eNSP_Client.exe"
   ensp probe
+  ensp show
+  ensp images
+  ensp images USG6000V --install D:/downloads/vfw_usg.vdi
   ensp preset --search ospf
   ensp preset --syllabus "MPLS"
   ensp preset ospf-single
@@ -343,23 +354,6 @@ async function cmdPreset({ positional, flags }) {
     return 0
   }
 
-  if (flags.knowledge) {
-    const hits = searchKnowledge(String(flags.knowledge))
-    if (flags.json) {
-      console.log(JSON.stringify(hits, null, 2))
-      return hits.length ? 0 : 1
-    }
-    if (!hits.length) {
-      console.log(C.yellow('no knowledge point matched') + ` "${flags.knowledge}"`)
-      return 1
-    }
-    for (const h of hits) {
-      console.log(`${C.bold('#' + h.n)} ${C.dim('[' + h.topic + ']')} ${h.q}`)
-      console.log(`   答: ${h.a}`)
-    }
-    return 0
-  }
-
   if (flags.search) {
     const hits = searchScenarios(String(flags.search))
     if (flags.json) {
@@ -398,6 +392,50 @@ async function cmdPreset({ positional, flags }) {
   }
 
   try {
+    if (flags.config) {
+      if (!hasLabConfig(id)) {
+        console.error(
+          C.red('error:') +
+            ` scenario "${id}" has no addressing plan to turn into a script; ${countLabConfigs()} of ${SCENARIO_IDS.length} have one`,
+        )
+        return 2
+      }
+      const script = labConfigScript(id)
+      if (flags.config !== true) {
+        // A path was given, so write the one-file-per-device directory that
+        // `ensp apply` reads instead of printing a script the reader has to
+        // split by hand.
+        const dir = path.resolve(String(flags.config))
+        await mkdir(dir, { recursive: true })
+        const written = []
+        for (const entry of labConfigs(id)) {
+          const file = path.join(dir, entry.device + '.cfg')
+          await writeFile(file, entry.script + '\n', 'utf8')
+          written.push(file)
+        }
+        if (flags.json) {
+          console.log(JSON.stringify({ scenario: id, directory: dir, files: written }, null, 2))
+          return 0
+        }
+        for (const file of written) console.log(`${C.green('wrote')} ${file}`)
+        console.log(
+          C.dim(`\n# 只有地址规划 · 路由与策略仍按步骤自己配\n# 下一步: ensp apply ${dir} --topology <lab.topo>`),
+        )
+        return 0
+      }
+      if (flags.json) {
+        console.log(JSON.stringify({ scenario: id, script }, null, 2))
+        return 0
+      }
+      console.log(script)
+      console.log(
+        C.dim(
+          `\n# 只覆盖地址规划，路由与策略仍按步骤自己配 · 给 --config 一个目录即可写成每台设备一个 .cfg`,
+        ),
+      )
+      return 0
+    }
+
     if (flags.topo) {
       if (!hasLab(id)) {
         console.error(
@@ -432,7 +470,6 @@ async function cmdPreset({ positional, flags }) {
     }
 
     const text = renderScenario(id)
-    const points = knowledgeFor(id)
     const chapters = curriculumFor(id).map((c) => ({
       level: c.level,
       title: c.title,
@@ -441,16 +478,17 @@ async function cmdPreset({ positional, flags }) {
     }))
     console.log(
       flags.json
-        ? JSON.stringify({ ...SCENARIOS[id], knowledge: points, curriculum: chapters }, null, 2)
+        ? JSON.stringify({ ...SCENARIOS[id], curriculum: chapters }, null, 2)
         : text,
     )
     const taught = renderCurriculum(id)
     if (taught) console.log(taught)
-    const knowledge = renderKnowledge(id)
-    if (knowledge) console.log(knowledge)
     if (hasLab(id)) {
       console.log(C.dim(`\n可生成拓扑: ensp preset ${id} --topo ${id}.topo`))
     }
+    if (hasLabConfig(id)) {
+      console.log(C.dim(`地址规划: ensp preset ${id} --config`))
+    }
     return 0
   } catch (error) {
     console.error(C.red('error:') + ' ' + error.message)
@@ -497,6 +535,43 @@ async function cmdProbe({ flags }) {
   return r.resolved?.method === 'measured' ? 0 : 1
 }
 
+/**
+ * `ensp show` (alias `ensp front`)
+ *
+ * Bring eNSP back out of the taskbar and in front, so the lab can be watched while
+ * it is being configured. Booting minimises the window on purpose, which is fine
+ * until someone wants to look at it.
+ */
+async function cmdShow({ flags }) {
+  const pid = enspPid()
+  if (!pid) {
+    console.error(C.red('error:') + ' eNSP is not running')
+    return 1
+  }
+  const hwnd = locateWindow(pid)
+  if (!hwnd) {
+    console.error(C.red('error:') + ' eNSP window not found')
+    return 1
+  }
+  const r = showEnsp(hwnd)
+  if (flags.json) {
+    console.log(JSON.stringify({ pid, hwnd, ...r }, null, 2))
+    return r.raised ? 0 : 1
+  }
+  console.log(`${C.bold('window')} ${hwnd} (pid ${pid})`)
+  console.log(r.restored ? `${C.green('restored')} from the taskbar` : C.dim('was not minimised'))
+  if (r.raised) {
+    console.log(`${C.green('in front')}`)
+    return 0
+  }
+  console.error(
+    C.yellow('warning:') +
+      ' the window was restored but another window still holds the foreground. Windows does not let another ' +
+      'process raise a foreign window, so click the taskbar button once.',
+  )
+  return 1
+}
+
 /**
  * `ensp doctor [--topology t.topo] [--json] [--shallow]`
  *
@@ -504,6 +579,87 @@ async function cmdProbe({ flags }) {
  * carries its own fix, because the failure modes here (missing image, covered
  * window, dead input queue) all look the same from the outside.
  */
+/**
+ * Report which plugin device images this installation has, and install one.
+ *
+ * The destination is never guessed here: `pluginMediaPlan` reads it out of the
+ * model's own VirtualBox template, so the same command works on a machine that
+ * installed eNSP somewhere else.
+ */
+async function cmdImages({ positional, flags }) {
+  const model = positional[0]
+
+  if (flags.install) {
+    if (!model) {
+      console.error(C.red('error:') + ' usage: ensp images <model> --install <image-file>')
+      return 2
+    }
+    const source = path.resolve(String(flags.install))
+    if (!(await exists(source))) {
+      console.error(C.red('error:') + ` no such file: ${source}`)
+      return 2
+    }
+    let result
+    try {
+      result = installPluginMedia(model, source, { overwrite: Boolean(flags.overwrite) })
+    } catch (error) {
+      console.error(C.red('error:') + ' ' + error.message)
+      return 1
+    }
+    if (flags.json) {
+      console.log(JSON.stringify(result, null, 2))
+      return 0
+    }
+    if (!result.bytes) {
+      console.log(`${C.bold(model)} already has its image at ${result.target}`)
+      console.log(C.dim('pass --overwrite to replace it'))
+      return 0
+    }
+    console.log(`${C.green('installed')} ${model} → ${result.target} (${result.bytes} bytes)`)
+    if (result.iniUpdated) console.log(C.dim('ImgFile updated in the plugin system.ini'))
+    console.log(C.dim('restart eNSP if it is open, then run ensp doctor --topology <file>'))
+    return 0
+  }
+
+  const models = model ? [model] : pluginModels()
+  if (!models.length) {
+    console.error(C.red('error:') + ' this eNSP installation declares no plugin devices')
+    return 1
+  }
+  const plans = models.map((name) => pluginMediaPlan(name))
+
+  if (flags.json) {
+    console.log(JSON.stringify(plans, null, 2))
+    return plans.every((p) => p.ready) ? 0 : 1
+  }
+
+  for (const plan of plans) {
+    if (!plan.plugin) {
+      console.log(`${C.bold(plan.model)} ${C.dim('not a plugin device in this installation')}`)
+      continue
+    }
+    if (plan.ready) {
+      console.log(`${C.green('ready')} ${plan.model} ${C.dim(plan.media.find((m) => m.present).relative)}`)
+      continue
+    }
+    console.log(`${C.yellow('missing')} ${plan.model} ${C.dim(plan.target ?? 'no template')}`)
+  }
+
+  const missing = plans.filter((p) => p.plugin && !p.ready)
+  if (missing.length) {
+    console.log(
+      '\n' +
+        C.dim(
+          'Install one with: ensp images <model> --install <image-file>\n' +
+            'Or reinstall eNSP and tick the device component. eNSP opens a topology that ' +
+            'uses these models, renders it, then quits by itself.',
+        ),
+    )
+  }
+  return missing.length ? 1 : 0
+}
+
+/** `ensp doctor [--topology t.topo] [--json] [--shallow]` */
 async function cmdDoctor({ positional, flags }) {
   let models
   if (flags.topology || positional[0]) {
@@ -529,6 +685,20 @@ async function cmdDoctor({ positional, flags }) {
   return report.ok ? 0 : 1
 }
 
+/**
+ * Exit code for an acceptance report.
+ *
+ * 0 means the checks that carry an assertion all passed and at least one of them
+ * existed. 1 means something contradicted the expected state. 3 means the lab was
+ * reachable but nothing was asserted against it, so the run proved only that the
+ * commands were accepted.
+ */
+function exitCodeFor(report) {
+  if (report.ok === true) return 0
+  if (report.ok === false) return 1
+  return 3
+}
+
 /**
  * `ensp verify <scenario-id> --topology t.topo [--json]`
  *
@@ -567,10 +737,57 @@ async function cmdVerify({ positional, flags }) {
   })
   if (flags.json) {
     console.log(JSON.stringify(report, null, 2))
-    return report.ok ? 0 : 1
+    return exitCodeFor(report)
   }
   console.log(formatAcceptance(report))
-  return report.ok ? 0 : 1
+  return exitCodeFor(report)
+}
+
+async function cmdReport({ positional, flags }) {
+  const id = positional[0]
+  if (!id) {
+    console.error(C.red('error:') + ' usage: ensp report <scenario-id> [--topology <topology.topo>] [--out <file.docx>]')
+    return 2
+  }
+  if (!SCENARIOS[id]) {
+    console.error(C.red('error:') + ` unknown scenario "${id}"`)
+    return 2
+  }
+  const out = flags.out ? String(flags.out) : undefined
+  if (!flags.json) {
+    console.log(C.dim(`collecting evidence for ${id}${flags.topology ? ` from ${flags.topology}` : ' (blueprint ports)'}`))
+  }
+  const result = await writeReport({
+    id,
+    topology: flags.topology ? String(flags.topology) : undefined,
+    out,
+    timeoutMs: flags.timeout ? Number(flags.timeout) : undefined,
+    waitMs: flags.wait ? Number(flags.wait) : undefined,
+    onProgress: flags.json
+      ? undefined
+      : (e) => {
+          if (e.phase === 'check') process.stderr.write(C.dim(`  checking ${e.id} on ${e.device}\n`))
+          else if (e.phase === 'retry')
+            process.stderr.write(C.dim(`  waiting ${Math.round(e.waited / 1000)}s for ${e.id} on ${e.device}\n`))
+        },
+  })
+  const { verdict } = result.evidence
+  if (flags.json) {
+    console.log(
+      JSON.stringify(
+        { path: result.path, bytes: result.bytes, scenario: result.evidence.id, verdict },
+        null,
+        2,
+      ),
+    )
+  } else {
+    console.log(`wrote ${result.path} (${result.bytes} bytes)`)
+    console.log(
+      `verdict: ${verdict.ok === true ? 'passed' : verdict.ok === false ? 'failed' : 'unverified'} ` +
+        `(${verdict.passed} passed, ${verdict.failed} failed, ${verdict.unverified} unverified of ${verdict.total})`,
+    )
+  }
+  return verdict.ok === false ? 1 : 0
 }
 
 // ------------------------------------------------------------------------- main
@@ -598,8 +815,15 @@ async function main() {
       return cmdDoctor({ positional, flags })
     case 'verify':
       return cmdVerify({ positional, flags })
+    case 'report':
+      return cmdReport({ positional, flags })
     case 'stop':
       return cmdUp({ positional, flags: { ...flags, stop: true } })
+    case 'show':
+    case 'front':
+      return cmdShow({ flags })
+    case 'images':
+      return cmdImages({ positional, flags })
     case 'preset':
       return cmdPreset({ positional, flags })
     case 'mcp':