everything-dev 1.53.2 → 2.0.0-rc.1

package/dist/cli.cjs

@@ -1,10 +1,15 @@
 #!/usr/bin/env node
 const require_runtime = require('./_virtual/_rolldown/runtime.cjs');
+const require_fastkv = require('./fastkv.cjs');
+const require_network = require('./network.cjs');
 const require_config = require('./config.cjs');
+const require_docker = require('./infra/docker.cjs');
+const require_bundle_fs_resolve = require('./bundle-fs-resolve.cjs');
 const require_timing = require('./cli/timing.cjs');
 const require_theme = require('./utils/theme.cjs');
-const require_infra = require('./cli/infra.cjs');
-const require_cli_init = require('./cli/init.cjs');
+const require_near_cli = require('./near-cli.cjs');
+const require_progress = require('./progress.cjs');
+const require_init = require('./commands/init.cjs');
 const require_framework_version = require('./cli/framework-version.cjs');
 const require_plugin = require('./plugin.cjs');
 const require_catalog = require('./cli/catalog.cjs');
@@ -12,7 +17,9 @@ const require_help = require('./cli/help.cjs');
 const require_parse = require('./cli/parse.cjs');
 const require_prompts = require('./cli/prompts.cjs');
 const require_banner = require('./utils/banner.cjs');
+let node_fs = require("node:fs");
 let node_path = require("node:path");
+let node_fs_promises = require("node:fs/promises");
 let _clack_prompts = require("@clack/prompts");
 _clack_prompts = require_runtime.__toESM(_clack_prompts, 1);
 let every_plugin = require("every-plugin");
@@ -43,6 +50,25 @@ function formatTimeAgo(isoTimestamp) {
 function normalizeVersion(v) {
 	return v.replace(/^[\^~>=v]+/, "").trim();
 }
+const RETIRED_BOOTSTRAP_STUBS = [
+	"ui/src/entry.ts",
+	"ui/src/hydrate.tsx",
+	"ui/src/router.server.tsx",
+	"ui/src/compose.ts"
+];
+/**
+* Hand-modified bootstrap stubs retire as conflicted (backed up, then
+* deleted) — print the mechanical port into the authored seams (ADR 0023).
+*/
+function printStubMigrationGuide(retiredConflicted) {
+	if ((retiredConflicted ?? []).filter((f) => RETIRED_BOOTSTRAP_STUBS.includes(f)).length === 0) return;
+	console.log(`  ${require_theme.colors.yellow("Port your stub customizations into the authored seams:")}`);
+	console.log(`    ${require_theme.colors.dim("- defaultErrorComponent / defaultPendingComponent / defaultNotFoundComponent")}`);
+	console.log(`    ${require_theme.colors.dim("  → set them inside the createRouter factory in ui/src/router.tsx (after ...opts)")}`);
+	console.log(`    ${require_theme.colors.dim("- apiConnectionError copy + SSR locale config (locales, defaultLocale, cookieName)")}`);
+	console.log(`    ${require_theme.colors.dim("  → export apiConnectionError / appLocale from ui/src/app.ts (see the scaffold template)")}`);
+	console.log(`    ${require_theme.colors.dim("  backed-up originals: .bos/sync-backup/<timestamp>/")}`);
+}
 function printTimingSummary(timings) {
 	if (!timings || timings.length === 0) return;
 	console.log(`  ${require_theme.colors.dim("Timings:")}`);
@@ -85,11 +111,15 @@ async function warnIfOutdated(client, command) {
 		const outdated = status.packages.filter((p) => !p.isLinked && p.installed && p.latest && normalizeVersion(p.installed) !== normalizeVersion(p.latest) && frameworkPackages.includes(p.name));
 		if (linked.length > 0) for (const pkg of linked) console.log(require_theme.colors.dim(`    ${pkg.name} is linked locally (v${pkg.installed})`));
 		if (outdated.length === 0) return;
-		console.log();
-		console.log(require_theme.colors.yellow(`  ! Outdated packages detected:`));
-		for (const pkg of outdated) console.log(require_theme.colors.dim(`    ${pkg.name}  ${pkg.installed} → ${pkg.latest}`));
-		console.log(require_theme.colors.dim(`    Run ${require_theme.colors.cyan("bos upgrade")} to update packages and sync template files.`));
-		console.log();
+		const warn = (line) => {
+			if (command === "dev" || command === "start") process.stderr.write(`${line}\n`);
+			else console.log(line);
+		};
+		warn("");
+		warn(require_theme.colors.yellow(`  ! Outdated packages detected:`));
+		for (const pkg of outdated) warn(require_theme.colors.dim(`    ${pkg.name}  ${pkg.installed} → ${pkg.latest}`));
+		warn(require_theme.colors.dim(`    Run ${require_theme.colors.cyan("bos upgrade")} to update packages and sync template files.`));
+		warn("");
 	} catch {}
 }
 async function main() {
@@ -100,7 +130,6 @@ async function main() {
 	}
 	const invocationArgs = args.length > 0 ? args : ["dev"];
 	const command = invocationArgs[0] ?? "dev";
-	const configPath = require_config.findConfigPath();
 	const commandMatch = require_catalog.findCommandDescriptor(invocationArgs);
 	if (!commandMatch) {
 		console.error(`Unknown command: ${command}`);
@@ -108,7 +137,18 @@ async function main() {
 	}
 	const { descriptor, consumed } = commandMatch;
 	const commandArgs = invocationArgs.slice(consumed);
-	const projectDir = configPath ? (0, node_path.dirname)(configPath) : void 0;
+	let parsedInput;
+	try {
+		parsedInput = require_parse.parseCommandInput(descriptor, commandArgs);
+	} catch (error) {
+		console.error(`[CLI] ${error instanceof Error ? error.message : String(error)}`);
+		process.exit(1);
+	}
+	const bootInput = parsedInput;
+	const cwdConfigPath = require_config.findConfigPath();
+	const configPath = bootInput.configPath ?? cwdConfigPath;
+	require_bundle_fs_resolve.installBundleFetchFromEnv({ configPath });
+	const projectDir = cwdConfigPath ? (0, node_path.dirname)(cwdConfigPath) : void 0;
 	const edResolved = projectDir ? require_framework_version.resolveFrameworkPackage(projectDir, "everything-dev") : void 0;
 	const displayVersion = edResolved?.installedVersion ? `${edResolved.installedVersion}${edResolved.isLinked ? " (linked)" : ""}` : void 0;
 	if (!process.env.BOS_NO_BANNER) require_banner.printBanner("everything-dev", displayVersion);
@@ -117,12 +157,68 @@ async function main() {
 		secrets: {}
 	});
 	const client = (await pluginRuntime.usePlugin.bind(pluginRuntime)("bos", {
-		variables: { configPath: configPath ?? void 0 },
+		variables: {
+			configPath: configPath ?? void 0,
+			configDir: cwdConfigPath ? (0, node_path.dirname)(cwdConfigPath) : void 0
+		},
 		secrets: {}
 	})).createClient();
-	const outdatedWarning = warnIfOutdated(client, command);
+	warnIfOutdated(client, command);
 	try {
-		const input = require_parse.parseCommandInput(descriptor, commandArgs);
+		const input = parsedInput;
+		const rollbackInput = input;
+		if (descriptor.key === "rollback" && !rollbackInput.listOnly && !rollbackInput.version && !rollbackInput.previous) {
+			const listing = await client.rollback({
+				...rollbackInput,
+				listOnly: true
+			});
+			if (listing.status !== "list" || !listing.history?.length) {
+				console.error(listing.error ?? "No publish history found");
+				process.exit(1);
+			}
+			console.log();
+			const selection = await _clack_prompts.select({
+				message: "Roll back to which publish?",
+				options: listing.history.map((entry) => ({
+					value: String(entry.blockHeight),
+					label: `${entry.blockTimestamp}  (block ${entry.blockHeight})`,
+					hint: entry.summary
+				}))
+			});
+			if (_clack_prompts.isCancel(selection)) return;
+			rollbackInput.version = selection;
+		}
+		if (descriptor.key === "keyPublish") {
+			const keyPublishInput = input;
+			if (keyPublishInput.removeOldKeys === void 0) {
+				if (process.stdin.isTTY) {
+					const authored = configPath ? await require_config.readAuthoredConfigInput((0, node_path.dirname)(configPath)) : null;
+					const account = keyPublishInput.env === "staging" ? authored?.staging?.account ?? authored?.account : authored?.account;
+					let listed = null;
+					if (account) {
+						const network = require_network.getNetworkIdForAccount(account);
+						const contract = require_fastkv.getRegistryNamespaceForAccount(account, keyPublishInput.registry);
+						try {
+							listed = await require_near_cli.listPublishKeys({
+								account,
+								contract,
+								network
+							});
+						} catch {
+							listed = null;
+						}
+					}
+					if (listed?.length) {
+						const removeOldKeys = await _clack_prompts.confirm({
+							message: `Remove ${listed.length} existing publish key${listed.length > 1 ? "s" : ""}?`,
+							initialValue: true
+						});
+						if (_clack_prompts.isCancel(removeOldKeys)) return;
+						keyPublishInput.removeOldKeys = removeOldKeys;
+					} else keyPublishInput.removeOldKeys = true;
+				} else keyPublishInput.removeOldKeys = true;
+			}
+		}
 		if (descriptor.key === "dev") {
 			const devSpinner = _clack_prompts.spinner();
 			devSpinner.start("Starting dev environment");
@@ -132,18 +228,19 @@ async function main() {
 				build: "Building...",
 				"resolve config": "Resolving config...",
 				ports: "Finding available ports...",
+				"docker compose up": "Starting local Postgres...",
 				"generate artifacts": "Generating code artifacts..."
 			};
 			const onDevProgress = (event) => {
 				const label = devPhaseLabels[event.phase] ?? event.phase;
 				if (event.status === "running") devSpinner.message(label);
 			};
-			require_plugin.pluginEvents.on("progress", onDevProgress);
+			require_progress.pluginEvents.on("progress", onDevProgress);
 			let result;
 			try {
 				result = await client.dev(input);
 			} finally {
-				require_plugin.pluginEvents.off("progress", onDevProgress);
+				require_progress.pluginEvents.off("progress", onDevProgress);
 			}
 			if (result.status === "error") {
 				devSpinner.stop("Failed");
@@ -152,11 +249,10 @@ async function main() {
 			}
 			devSpinner.stop();
 			clearSpinnerStopLine();
-			const session = require_plugin.consumeDevSession();
-			await outdatedWarning;
+			const session = result.session;
 			if (session) {
 				const { devApp } = await Promise.resolve().then(() => require("./dev-session.cjs"));
-				devApp(session.orchestrator, session.services, session.runtimeConfig);
+				devApp(projectDir ?? process.cwd(), session.orchestrator, session.services, session.runtimeConfig, session.envGenerated, session.shellEnv);
 			}
 			return;
 		}
@@ -171,12 +267,12 @@ async function main() {
 				const label = startPhaseLabels[event.phase] ?? event.phase;
 				if (event.status === "running") startSpinner.message(label);
 			};
-			require_plugin.pluginEvents.on("progress", onStartProgress);
+			require_progress.pluginEvents.on("progress", onStartProgress);
 			let result;
 			try {
 				result = await client.start(input);
 			} finally {
-				require_plugin.pluginEvents.off("progress", onStartProgress);
+				require_progress.pluginEvents.off("progress", onStartProgress);
 			}
 			if (result.status === "error") {
 				startSpinner.stop("Failed");
@@ -184,13 +280,12 @@ async function main() {
 				process.exit(1);
 			}
 			startSpinner.stop("Ready");
-			const session = require_plugin.consumeDevSession();
-			await outdatedWarning;
+			const session = result.session;
+			const summary = result.summary;
 			if (session) {
-				const summary = session.summary;
 				if (summary) printStartSummary(summary);
 				const { startApp } = await Promise.resolve().then(() => require("./dev-session.cjs"));
-				startApp(session.orchestrator, session.services, session.runtimeConfig);
+				startApp(projectDir ?? process.cwd(), session.orchestrator, session.services, session.runtimeConfig, session.envGenerated, session.shellEnv);
 			}
 			return;
 		}
@@ -207,8 +302,9 @@ async function main() {
 				const fetchSpinner = _clack_prompts.spinner();
 				fetchSpinner.start("Fetching parent config");
 				try {
-					parentConfig = await require_cli_init.fetchParentConfig(basic.extendsAccount, basic.extendsGateway);
-					if (parentConfig?.plugins && typeof parentConfig.plugins === "object") parentPluginKeys = Object.keys(parentConfig.plugins);
+					const parent = await require_init.fetchInitParent(basic.extendsAccount, basic.extendsGateway);
+					parentConfig = parent.parentConfig;
+					parentPluginKeys = parent.parentPluginKeys;
 				} catch {
 					fetchSpinner.stop("Config not found");
 					console.error(`[CLI] No config found at bos://${basic.extendsAccount}/${basic.extendsGateway}`);
@@ -225,7 +321,8 @@ async function main() {
 				const overrides = await require_prompts.promptInitOverrides({
 					parentPluginKeys,
 					plugins: initInput.plugins,
-					overrides: initInput.overrides
+					overrides: initInput.overrides,
+					level: initInput.level
 				});
 				const directory = initInput.directory || basic.domain || basic.extendsGateway;
 				initInput = {
@@ -236,6 +333,7 @@ async function main() {
 					domain: basic.domain || void 0,
 					plugins: overrides.plugins,
 					overrides: overrides.overrides,
+					level: overrides.level ?? initInput.level,
 					noInteractive: true
 				};
 			}
@@ -260,12 +358,12 @@ async function main() {
 				const label = phaseLabels[event.phase] ?? event.phase;
 				if (event.status === "running") initSpinner.message(label);
 			};
-			require_plugin.pluginEvents.on("progress", onProgress);
+			require_progress.pluginEvents.on("progress", onProgress);
 			let result;
 			try {
 				result = await client.init(initInput);
 			} finally {
-				require_plugin.pluginEvents.off("progress", onProgress);
+				require_progress.pluginEvents.off("progress", onProgress);
 			}
 			if (result.status === "error") {
 				initSpinner.stop("Failed");
@@ -284,13 +382,10 @@ async function main() {
 			console.log();
 			console.log(require_theme.colors.dim("  Next steps:"));
 			console.log(require_theme.colors.dim(`    cd ${result.directory}`));
-			if (!initInput.noInstall) {
-				console.log(require_theme.colors.dim("    docker compose up -d --wait"));
-				console.log(require_theme.colors.dim("    bun run dev"));
-			} else {
-				console.log(require_theme.colors.dim("    bun install"));
-				console.log(require_theme.colors.dim("    docker compose up -d --wait"));
-				console.log(require_theme.colors.dim("    bun run dev"));
+			if (!initInput.noInstall) console.log(require_theme.colors.dim("    pnpm run dev"));
+			else {
+				console.log(require_theme.colors.dim("    pnpm install"));
+				console.log(require_theme.colors.dim("    pnpm run dev"));
 			}
 			console.log();
 			if (initInput.noInteractive !== true && !initInput.noInstall && result.targetDir) {
@@ -300,43 +395,22 @@ async function main() {
 				}) === true) {
 					const dockerSpinner = _clack_prompts.spinner();
 					dockerSpinner.start("Starting Docker services");
-					try {
-						await require_cli_init.runDockerComposeUp(result.targetDir);
-						dockerSpinner.stop("Docker services ready");
-					} catch (error) {
+					const compose = await require_docker.runDockerComposeUp(result.targetDir);
+					if (compose.ok) dockerSpinner.stop("Docker services ready");
+					else {
 						dockerSpinner.stop("Docker services not started");
-						_clack_prompts.log.warn(`docker compose up -d --wait failed: ${error instanceof Error ? error.message : error}`);
+						_clack_prompts.log.warn(`docker compose up -d --wait failed${compose.tail ? `:\n${compose.tail}` : ""}`);
 					}
 				}
 			}
 			return;
 		}
-		await outdatedWarning;
 		const result = await client[descriptor.key](input);
 		if (descriptor.key === "dbStudio") {
 			if (result.status === "error") {
 				console.error(`[CLI] ${result.error || "Unknown error"}`);
 				process.exit(1);
 			}
-			const configPath = require_config.findConfigPath();
-			if (configPath) require_infra.loadProjectEnv((0, node_path.dirname)(configPath));
-			const { runStudioLocal, runStudioRemote } = await Promise.resolve().then(() => require("./cli/db-studio.cjs"));
-			const info = {
-				key: result.plugin,
-				source: result.source,
-				section: result.section,
-				databaseSecret: result.databaseSecret,
-				databaseUrl: result.databaseUrl,
-				workspaceDir: result.workspaceDir,
-				projectDir: (0, node_path.dirname)(configPath ?? process.cwd())
-			};
-			try {
-				if (info.source === "local" && info.workspaceDir) await runStudioLocal(info);
-				else await runStudioRemote(info);
-			} catch (error) {
-				console.error(`[CLI] ${error instanceof Error ? error.message : String(error)}`);
-				process.exit(1);
-			}
 			return;
 		}
 		if (descriptor.key === "dbDoctor") {
@@ -386,7 +460,7 @@ async function main() {
 		}
 		if (descriptor.key === "config") {
 			if (!result.config) {
-				console.error("No bos.config.json found");
+				console.error(require_config.MISSING_CONFIG_MESSAGE);
 				process.exit(1);
 			}
 			printConfigView(result.config);
@@ -405,7 +479,8 @@ async function main() {
 			}
 			if (result.status === "dry-run") console.log(require_theme.colors.cyan(`${require_theme.icons.ok} Dry run — no files written`));
 			else console.log(require_theme.colors.green(`${require_theme.icons.ok} Synced`));
-			if (result.updated.length > 0 || result.added.length > 0 || result.conflicted.length > 0) {
+			const hasRetirement = (result.retired?.length ?? 0) > 0 || (result.retiredConflicted?.length ?? 0) > 0;
+			if (result.updated.length > 0 || result.added.length > 0 || result.conflicted.length > 0 || hasRetirement) {
 				console.log(`  ${require_theme.colors.dim("Sync results:")} ${result.updated.length} updated, ${result.added.length} added, ${result.conflicted.length} conflicted`);
 				if (result.updated.length > 0) for (const f of result.updated) console.log(`    ${require_theme.colors.dim(f)}`);
 				if (result.added.length > 0) for (const f of result.added) console.log(`    ${require_theme.colors.dim(f)}`);
@@ -414,8 +489,15 @@ async function main() {
 					if (result.backupDir) console.log(`    ${require_theme.colors.dim(result.backupDir)}`);
 					for (const f of result.conflicted) console.log(`    ${require_theme.colors.dim(f)}`);
 				}
+				if (hasRetirement) {
+					console.log(`  ${require_theme.colors.yellow("Retired")} (replaced by generated stubs — ADR 0023):`);
+					if (result.retiredBackupDir) console.log(`    ${require_theme.colors.dim(result.retiredBackupDir)}`);
+					for (const f of result.retiredConflicted ?? []) console.log(`    ${require_theme.colors.dim(`${f} (backed up)`)}`);
+					for (const f of result.retired ?? []) console.log(`    ${require_theme.colors.dim(f)}`);
+					printStubMigrationGuide(result.retiredConflicted);
+				}
 			}
-			if (result.updated.length === 0 && result.added.length === 0 && result.conflicted.length === 0) console.log(`  ${require_theme.colors.dim("Already up to date")}`);
+			if (result.updated.length === 0 && result.added.length === 0 && result.conflicted.length === 0 && !hasRetirement) console.log(`  ${require_theme.colors.dim("Already up to date")}`);
 			console.log();
 			return;
 		}
@@ -444,14 +526,22 @@ async function main() {
 			if (result.selectedPlugins && result.selectedPlugins.length > 0) console.log(`  Added plugins: ${result.selectedPlugins.join(", ")}`);
 			if (result.sync) {
 				const sync = result.sync;
+				const hasRetirement = (sync.retired?.length ?? 0) > 0 || (sync.retiredConflicted?.length ?? 0) > 0;
 				console.log(`  ${require_theme.colors.dim("Sync results:")}`);
-				if (sync.updated.length > 0 || sync.added.length > 0 || sync.conflicted.length > 0) {
+				if (sync.updated.length > 0 || sync.added.length > 0 || sync.conflicted.length > 0 || hasRetirement) {
 					console.log(`  ${sync.updated.length} updated, ${sync.added.length} added, ${sync.conflicted.length} conflicted`);
 					if (sync.conflicted.length > 0) {
 						console.log(`  ${require_theme.colors.yellow("Conflicted")} (template applied, your changes backed up):`);
 						if (sync.backupDir) console.log(`    ${require_theme.colors.dim(sync.backupDir)}`);
 						for (const f of sync.conflicted) console.log(`    ${require_theme.colors.dim(f)}`);
 					}
+					if (hasRetirement) {
+						console.log(`  ${require_theme.colors.yellow("Retired")} (replaced by generated stubs — ADR 0023):`);
+						if (sync.retiredBackupDir) console.log(`    ${require_theme.colors.dim(sync.retiredBackupDir)}`);
+						for (const f of sync.retiredConflicted ?? []) console.log(`    ${require_theme.colors.dim(`${f} (backed up)`)}`);
+						for (const f of sync.retired ?? []) console.log(`    ${require_theme.colors.dim(f)}`);
+						printStubMigrationGuide(sync.retiredConflicted);
+					}
 				} else console.log(`  ${require_theme.colors.dim("Already up to date")}`);
 			}
 			if (result.migrated && result.migrated.length > 0) {
@@ -468,7 +558,7 @@ async function main() {
 					console.log(require_theme.colors.dim(`  ${result.sync.conflicted.length} file(s) had local conflicts — template version applied, backups at ${result.sync.backupDir || ".bos/sync-backup/"}.`));
 					console.log(require_theme.colors.dim(`  If local changes should be preserved upstream, open a PR: https://github.com/${parentRepo}${somedelta ? `/compare/${somedelta}` : ""}`));
 				}
-				console.log(require_theme.colors.dim("  Load matching intent skills: bunx @tanstack/intent@latest load everything-dev#..."));
+				console.log(require_theme.colors.dim("  Load matching intent skills: pnpm dlx @tanstack/intent@latest load everything-dev#..."));
 				console.log(require_theme.colors.dim("  Review AGENTS.md — local updates may need merging."));
 			}
 			console.log();
@@ -547,6 +637,41 @@ async function main() {
 			}
 			return;
 		}
+		if (descriptor.key === "logs") {
+			const logsResult = result;
+			const opts = input;
+			for (const line of logsResult.lines) console.log(line);
+			if (logsResult.lines.length === 0) console.log(require_theme.colors.dim(`  No matching log lines in ${logsResult.logFile}.`));
+			if (opts.follow) {
+				if (logsResult.logFile === "unknown" || !(0, node_fs.existsSync)(logsResult.logFile)) console.log(require_theme.colors.dim("  No log file to follow — nothing was found on disk."));
+				else {
+					const filter = opts.service;
+					let byteOffset = 0;
+					for (const line of logsResult.lines) byteOffset += Buffer.byteLength(line, "utf8") + 1;
+					const followMatch = (line) => {
+						if (!filter) return true;
+						const source = /\] \[([^\]]+)\] \[(?:OUT|ERR)\] /.exec(line)?.[1];
+						return source === filter || source === `plugin:${filter}`;
+					};
+					const watcher = (0, node_fs.watch)(logsResult.logFile, (event) => {
+						if (event !== "change") return;
+						(0, node_fs_promises.readFile)(logsResult.logFile, "utf8").then((text) => {
+							const newLines = text.slice(byteOffset).split("\n").filter((line) => line.length > 0 && followMatch(line));
+							byteOffset = Buffer.byteLength(text, "utf8");
+							for (const line of newLines) console.log(line);
+						}).catch(() => {
+							watcher.close();
+						});
+					});
+					console.log(require_theme.colors.dim("  Following — Ctrl+C to stop."));
+					process.on("SIGINT", () => {
+						watcher.close();
+						process.exit(0);
+					});
+				}
+			}
+			return;
+		}
 		if (descriptor.key === "kill") {
 			const killResult = result;
 			console.log();
@@ -620,17 +745,83 @@ async function main() {
 			console.log();
 			return;
 		}
+		if (descriptor.key === "typecheck") {
+			console.log();
+			if (result.status === "error") {
+				console.error(`[CLI] ${result.error || "Unknown error"}`);
+				process.exit(1);
+			}
+			const failed = result.results.filter((r) => !r.passed);
+			const passed = result.results.filter((r) => r.passed);
+			console.log(require_theme.colors.cyan(require_theme.frames.top(52)));
+			console.log(`  ${require_theme.icons.app} ${require_theme.gradients.cyber("TYPECHECK")}`);
+			console.log(require_theme.colors.cyan(require_theme.frames.bottom(52)));
+			console.log();
+			for (const r of result.results) {
+				const icon = r.passed ? require_theme.colors.green("✓") : require_theme.colors.error("✗");
+				console.log(`  ${icon} ${r.workspace}`);
+			}
+			if (result.skipped.length > 0) console.log(`  ${require_theme.colors.dim(`Skipped: ${result.skipped.join(", ")}`)}`);
+			console.log();
+			if (failed.length > 0) {
+				console.log(`  ${require_theme.colors.error(`${failed.length} failed`)}`);
+				for (const f of failed) if (f.error) console.log(`    ${require_theme.colors.dim(f.error)}`);
+				console.log();
+				process.exit(1);
+			}
+			console.log(`  ${require_theme.colors.green(`${passed.length} passed`)}`);
+			console.log();
+			return;
+		}
+		if (descriptor.key === "mfCheck") {
+			console.log();
+			console.log(`  ${require_theme.colors.dim("Host")}   ${result.hostReachable ? require_theme.colors.green("OK  ") : require_theme.colors.error("FAIL")}  ${result.hostVersion ?? "unreachable"}${result.hostReason ? `  (${result.hostReason})` : ""}`);
+			for (const r of result.remotes) {
+				const tag = r.ok ? require_theme.colors.green("OK  ") : require_theme.colors.error("FAIL");
+				console.log(`  ${require_theme.colors.dim(r.role.padEnd(10))} ${tag} ${r.url}  pluginVersion=${r.pluginVersion ?? "?"}${r.reason ? `  ↳ ${r.reason}` : ""}`);
+			}
+			console.log();
+			if (result.status !== "ok") {
+				console.log(require_theme.colors.error("  mf-compat: ✗ federation manifests NOT compatible — redeploy affected plugin(s) so pluginVersion and shared versions match host"));
+				console.log();
+				process.exit(1);
+			}
+			console.log(require_theme.colors.green("  mf-compat: ✓ all federation manifests compatible"));
+			console.log();
+			return;
+		}
 		if (result?.status === "error" && descriptor.key !== "publish" && descriptor.key !== "deploy") {
 			console.error(`[CLI] ${result.error || "Unknown error"}`);
 			process.exit(1);
 		}
+		if (descriptor.key === "login") {
+			console.log();
+			console.log(require_theme.colors.green(`${require_theme.icons.ok} Logged in to ${result.siteUrl}`));
+			if (result.accountId) console.log(`  ${require_theme.colors.dim("Account:")} ${result.accountId}`);
+			if (result.expiresAt) console.log(`  ${require_theme.colors.dim("Expires:")} ${result.expiresAt}`);
+			if (result.warning) console.log(`  ${require_theme.colors.yellow("⚠")} ${result.warning}`);
+			if (result.publishKey) console.log(`  ${require_theme.colors.dim("Publish key:")} ${result.publishKey.publicKey} ${require_theme.colors.dim(`(${result.publishKey.network}, exported to ${result.publishKey.exportedTo})`)}`);
+			console.log();
+			return;
+		}
+		if (descriptor.key === "logout") {
+			console.log();
+			console.log(require_theme.colors.green(`${require_theme.icons.ok} Logged out`));
+			if (result.revokedApiKey) console.log(`  ${require_theme.colors.dim("Revoked API key")}`);
+			if (result.removedPublishKey) console.log(`  ${require_theme.colors.dim("Removed exported publish key")}`);
+			if (result.warning) console.log(`  ${require_theme.colors.yellow("⚠")} ${result.warning}`);
+			console.log();
+			return;
+		}
 		if (descriptor.key === "keyPublish") {
 			process.stdout.write(`Generated publish key for ${result.account}\n`);
 			process.stdout.write(`  Network: ${result.network}\n`);
 			process.stdout.write(`  Allowance: ${result.allowance}\n`);
 			process.stdout.write(`\n`);
-			process.stdout.write(`  Set this as NEAR_PRIVATE_KEY in GitHub Actions or before calling publish:\n`);
-			process.stdout.write(`  NEAR_PRIVATE_KEY=${result.privateKey}\n`);
+			const secretName = result.env === "staging" ? "NEAR_TESTNET_PRIVATE_KEY" : "NEAR_PRIVATE_KEY";
+			if (!process.stdout.isTTY) process.stderr.write(`  ⚠ Non-interactive stdout: this private key will be captured in any log or pipe (GitHub Actions logs persist stdout).\n`);
+			process.stdout.write(`  Set this as ${secretName} in GitHub Actions or before calling publish:\n`);
+			process.stdout.write(`${secretName}=${result.privateKey}\n`);
 		}
 		if (descriptor.key === "pluginAdd") {
 			console.log();
@@ -665,8 +856,22 @@ async function main() {
 			console.log();
 			console.log(require_theme.colors.green(`${require_theme.icons.ok} Published plugin ${result.key}`));
 			if (result.path) console.log(`  ${require_theme.colors.dim("Path:")} ${result.path}`);
-			if (result.script) console.log(`  ${require_theme.colors.dim("Script:")} bun run ${result.script}`);
 			if (result.production) console.log(`  ${require_theme.colors.dim("Production:")} ${result.production}`);
+			if (result.version) console.log(`  ${require_theme.colors.dim("Version:")} ${result.version}`);
+			if (result.fingerprint) console.log(`  ${require_theme.colors.dim("Fingerprint:")} ${result.fingerprint}`);
+			console.log();
+			return;
+		}
+		if (descriptor.key === "registryUse") {
+			console.log();
+			if (result.status === "error") {
+				console.error(require_theme.colors.error(`${require_theme.icons.err} ${result.error || "Unknown error"}`));
+				process.exit(1);
+			}
+			console.log(require_theme.colors.green(`${require_theme.icons.ok} ${result.status === "dry-run" ? "Dry run" : "Composed"} from ${result.from}`));
+			for (const section of result.applied) console.log(`  ${require_theme.colors.green("+")} ${section}`);
+			if (result.configPath) console.log(`  ${require_theme.colors.dim("Config:")} ${result.configPath}`);
+			if (result.status === "updated") console.log(require_theme.colors.dim("  Run bos types gen to refresh generated types."));
 			console.log();
 			return;
 		}
@@ -714,8 +919,47 @@ async function main() {
 				return;
 			}
 		}
+		if (descriptor.key === "rollback") {
+			const rollbackResult = result;
+			if (rollbackResult.status === "error") {
+				console.log();
+				console.log(require_theme.colors.error(`${require_theme.icons.err} Roll back failed`));
+				if (rollbackResult.error) console.log(`  ${require_theme.colors.dim("Error:")} ${rollbackResult.error}`);
+				if (rollbackResult.verification) {
+					console.log();
+					for (const check of rollbackResult.verification) {
+						const mark = check.ok ? require_theme.colors.green(require_theme.icons.ok) : require_theme.colors.error(require_theme.icons.err);
+						const reason = check.reason ? require_theme.colors.dim(` — ${check.reason}`) : "";
+						console.log(`  ${mark} ${check.slot}${reason}`);
+					}
+				}
+				console.log();
+				process.exit(1);
+			}
+			if (rollbackResult.status === "dry-run") {
+				console.log();
+				console.log(require_theme.colors.cyan(`${require_theme.icons.ok} Rollback dry run complete`));
+				console.log(`  ${require_theme.colors.dim("Registry URL:")} ${rollbackResult.registryUrl}`);
+				console.log();
+				return;
+			}
+			console.log();
+			console.log(require_theme.colors.green(`${require_theme.icons.ok} Rolled back`));
+			console.log(`  ${require_theme.colors.dim("Registry URL:")} ${rollbackResult.registryUrl}`);
+			if (rollbackResult.txHash) console.log(`  ${require_theme.colors.dim("Transaction:")} ${rollbackResult.txHash}`);
+			console.log();
+			return;
+		}
 		if (descriptor.key === "deploy") {
 			const deployResult = result;
+			if (deployResult.status === "list") {
+				console.log();
+				console.log(require_theme.colors.cyan("Recent publishes (audit trail)"));
+				for (const entry of deployResult.history ?? []) console.log(`  ${entry.blockTimestamp}  ${require_theme.colors.dim(`block ${entry.blockHeight}`)}${entry.publishedAt ? require_theme.colors.dim(`  ${entry.publishedAt}`) : ""}`);
+				console.log();
+				return;
+			}
+			if (deployResult.fingerprint) console.log(`  ${require_theme.colors.dim("Fingerprint:")} ${deployResult.fingerprint}`);
 			if (deployResult.status === "dry-run") {
 				console.log();
 				console.log(require_theme.colors.cyan(`${require_theme.icons.ok} Dry run complete`));
@@ -755,21 +999,25 @@ async function main() {
 						for (const w of warnings) console.log(`    ${require_theme.colors.dim(w)}`);
 					}
 				}
-				if (deployResult.redeployed) console.log(`  ${require_theme.colors.dim("Railway:")} redeployed ${deployResult.service ?? "service"}`);
-				else if (!process.env.RAILWAY_TOKEN) console.log(`  ${require_theme.colors.yellow("Railway:")} skipped (RAILWAY_TOKEN not set)`);
+				if (deployResult.image) console.log(`  ${require_theme.colors.dim("Image:")} ${deployResult.image}`);
+				if (deployResult.service) console.log(`  ${require_theme.colors.dim("Railway:")} deployed ${deployResult.service}`);
 				console.log();
 				return;
 			}
 			if (deployResult.status === "published") {
 				console.log();
-				console.log(require_theme.colors.yellow(`${require_theme.icons.err} Config published, but Railway redeploy failed`));
+				console.log(require_theme.colors.yellow(`${require_theme.icons.err} Config published, but a deploy leg failed`));
 				console.log(`  ${require_theme.colors.dim("Registry URL:")} ${deployResult.registryUrl}`);
 				if (deployResult.txHash) console.log(`  ${require_theme.colors.dim("Transaction:")} ${deployResult.txHash}`);
-				if (deployResult.error) console.log(`  ${require_theme.colors.dim("Railway:")} ${deployResult.error}`);
+				if (deployResult.error) console.log(`  ${require_theme.colors.dim("Error:")} ${deployResult.error}`);
 				console.log();
 				process.exit(1);
 			}
 		}
+		if (descriptor.key === "infraExport") {
+			process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+			return;
+		}
 	} catch (error) {
 		console.error(`[CLI] ${error instanceof Error ? error.message : String(error)}`);
 		process.exit(1);