ninedeploy 0.3.0 → 0.5.0

package/dist/commands/domains.d.ts

@@ -0,0 +1,70 @@
+/**
+ * `ninedeploy domains preset {list,apply}` — Sprint 2, Gap G-07, PR-D.
+ *
+ * The plugin (G-07 PR-C) reacts to the audit firehose so a `domain.add`
+ * from the panel can create the matching DNS record on its own. This
+ * CLI subcommand lets an operator do the same thing on demand without
+ * having to round-trip through the panel's domain flow — useful when a
+ * record is missing after a partial outage, or when an operator is
+ * testing the DNS pipeline against a fresh hostname.
+ *
+ * Split:
+ *   - `list` calls `GET /v1/domain-presets` and prints the registered
+ *     `IDomainProvider` names so the operator can sanity-check the
+ *     kernel boot before chasing a misconfiguration on the provider
+ *     side.
+ *   - `apply <hostname>` calls `POST /v1/domain-presets/apply`, which
+ *     resolves the active provider from the existing
+ *     `dns_records_provider` setting, calls `findZoneForHost` +
+ *     `createRecord` on it, and emits a `domain.preset.manual` audit
+ *     event so the panel's activity log mirrors what the audit-bus path
+ *     produces. The `--content` flag lets the operator override the
+ *     resolved record content (handy for CNAME setups or smoke tests).
+ */
+import type { NineDeployClient } from '../client.js';
+export interface DomainsPresetApplyOptions {
+    /** Optional override for the record content (e.g. an explicit CNAME target). */
+    content?: string;
+}
+/**
+ * Pure entry point — same shape used by the CLI action and the unit
+ * test. Returns the parsed provider list so the test can assert it
+ * without depending on stdout framing.
+ */
+export declare function domainsPresetList(client: NineDeployClient): Promise<{
+    providers: string[];
+}>;
+export declare function domainsPresetListAction(client: NineDeployClient): Promise<void>;
+/**
+ * Pure entry point — same shape used by the CLI action and the unit
+ * test. Returns the upstream response so the test can assert it
+ * without depending on stdout framing.
+ */
+export declare function domainsPresetApply(client: NineDeployClient, hostname: string, opts?: DomainsPresetApplyOptions): Promise<{
+    hostname: string;
+    provider: string;
+    zone: string;
+    recordId: string;
+    type: 'A' | 'CNAME';
+    content: string;
+}>;
+export declare function domainsPresetApplyAction(client: NineDeployClient, hostname: string, opts?: DomainsPresetApplyOptions): Promise<void>;
+export interface DomainsPresetAddNamecheapOptions {
+    /** Namecheap username (the account owner). */
+    apiUser?: string;
+    /** Namecheap API key (encrypted at rest by the server). */
+    apiKey?: string;
+    /** Whitelisted public IP of the server. */
+    clientIp?: string;
+}
+/**
+ * Pure entry point for the Namecheap credential upsert. The handler
+ * shape mirrors the rest of the file (returns the upstream response,
+ * the action layer frames stdout/exit-code).
+ */
+export declare function domainsPresetAddNamecheap(client: NineDeployClient, opts: DomainsPresetAddNamecheapOptions): Promise<{
+    ok: boolean;
+    apiUser: string;
+}>;
+export declare function domainsPresetAddNamecheapAction(client: NineDeployClient, opts: DomainsPresetAddNamecheapOptions): Promise<void>;
+//# sourceMappingURL=domains.d.ts.map

package/dist/commands/domains.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.d.ts","sourceRoot":"","sources":["../../src/commands/domains.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGrD,MAAM,WAAW,yBAAyB;IACxC,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAID;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAElC;AAED,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBrF;AAID;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,gBAAgB,EACxB,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE,yBAA8B,GACnC,OAAO,CAAC;IACT,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAED;AAED,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,gBAAgB,EACxB,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE,yBAA8B,GACnC,OAAO,CAAC,IAAI,CAAC,CAuBf;AAID,MAAM,WAAW,gCAAgC;IAC/C,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,gCAAgC,GACrC,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAS3C;AAED,wBAAsB,+BAA+B,CACnD,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,gCAAgC,GACrC,OAAO,CAAC,IAAI,CAAC,CAqBf"}

package/dist/commands/domains.js

@@ -0,0 +1,97 @@
+import { error, header, info, success } from '../lib/format.js';
+// ── `ninedeploy domains preset list` ────────────────────────────────────────
+/**
+ * Pure entry point — same shape used by the CLI action and the unit
+ * test. Returns the parsed provider list so the test can assert it
+ * without depending on stdout framing.
+ */
+export async function domainsPresetList(client) {
+    return await client.domainPresets.list();
+}
+export async function domainsPresetListAction(client) {
+    header('Domain presets');
+    let result;
+    try {
+        result = await domainsPresetList(client);
+    }
+    catch (err) {
+        error(err instanceof Error ? err.message : String(err));
+        process.exitCode = 1;
+        return;
+    }
+    if (result.providers.length === 0) {
+        info('No IDomainProvider drivers are registered on this kernel.');
+        info('Set dns_records_provider in Settings → DNS to enable one.');
+        return;
+    }
+    for (const name of result.providers) {
+        info(`• ${name}`);
+    }
+}
+// ── `ninedeploy domains preset apply <hostname>` ────────────────────────────
+/**
+ * Pure entry point — same shape used by the CLI action and the unit
+ * test. Returns the upstream response so the test can assert it
+ * without depending on stdout framing.
+ */
+export async function domainsPresetApply(client, hostname, opts = {}) {
+    return await client.domainPresets.apply({ hostname, content: opts.content });
+}
+export async function domainsPresetApplyAction(client, hostname, opts = {}) {
+    header('Domain preset apply');
+    if (!hostname) {
+        error('Usage: ninedeploy domains preset apply <hostname> [--content <value>]');
+        process.exitCode = 1;
+        return;
+    }
+    let result;
+    try {
+        result = await domainsPresetApply(client, hostname, opts);
+    }
+    catch (err) {
+        error(err instanceof Error ? err.message : String(err));
+        process.exitCode = 1;
+        return;
+    }
+    success(`Applied ${result.type} record for ${result.hostname}`);
+    info(`Provider: ${result.provider}`);
+    info(`Zone:     ${result.zone}`);
+    info(`Record:   ${result.recordId}`);
+    info(`Content:  ${result.content}`);
+}
+/**
+ * Pure entry point for the Namecheap credential upsert. The handler
+ * shape mirrors the rest of the file (returns the upstream response,
+ * the action layer frames stdout/exit-code).
+ */
+export async function domainsPresetAddNamecheap(client, opts) {
+    if (!opts.apiUser || !opts.apiKey || !opts.clientIp) {
+        throw new Error('Missing required flags: --api-user, --api-key, --client-ip');
+    }
+    return await client.settings.namecheap.set({
+        apiUser: opts.apiUser,
+        apiKey: opts.apiKey,
+        clientIp: opts.clientIp,
+    });
+}
+export async function domainsPresetAddNamecheapAction(client, opts) {
+    header('Domain preset add (Namecheap)');
+    if (!opts.apiUser || !opts.apiKey || !opts.clientIp) {
+        error('Usage: ninedeploy domains preset add namecheap --api-user <u> --api-key <k> --client-ip <ip>');
+        error('The client IP must already be whitelisted on the Namecheap account panel.');
+        process.exitCode = 1;
+        return;
+    }
+    let result;
+    try {
+        result = await domainsPresetAddNamecheap(client, opts);
+    }
+    catch (err) {
+        error(err instanceof Error ? err.message : String(err));
+        process.exitCode = 1;
+        return;
+    }
+    success(`Saved Namecheap credentials for ${result.apiUser}`);
+    info('Set dns_records_provider=namecheap in Settings → DNS to use them.');
+}
+//# sourceMappingURL=domains.js.map

package/dist/commands/domains.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.js","sourceRoot":"","sources":["../../src/commands/domains.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAOhE,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAwB;IAExB,OAAO,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAAwB;IACpE,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACzB,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,2DAA2D,CAAC,CAAC;QAClE,IAAI,CAAC,2DAA2D,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAwB,EACxB,QAAgB,EAChB,IAAI,GAA8B,EAAE;IASpC,OAAO,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAwB,EACxB,QAAgB,EAChB,IAAI,GAA8B,EAAE;IAEpC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAE9B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC/E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,MAAsD,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,OAAO,CAAC,WAAW,MAAM,CAAC,IAAI,eAAe,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC,aAAa,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC,aAAa,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,aAAa,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC,aAAa,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;AACtC,CAAC;AAaD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAwB,EACxB,IAAsC;IAEtC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,MAAM,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC;QACzC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,MAAwB,EACxB,IAAsC;IAEtC,MAAM,CAAC,+BAA+B,CAAC,CAAC;IAExC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpD,KAAK,CAAC,8FAA8F,CAAC,CAAC;QACtG,KAAK,CAAC,2EAA2E,CAAC,CAAC;QACnF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,MAA6D,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,OAAO,CAAC,mCAAmC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,mEAAmE,CAAC,CAAC;AAC5E,CAAC"}

package/dist/commands/egress.d.ts

@@ -0,0 +1,43 @@
+/**
+ * `ninedeploy egress {list,set,clear}` — Sprint 5, Gap G-15.
+ *
+ * Operator-side wrapper around the active `IEgressIpDriver`. The
+ * CLI is the canonical way to attach a stable outbound IP to a
+ * project: hosting providers run `ninedeploy egress set <projectId>
+ * <ip>` after the project is created, and the next deploy's
+ * `service.deployed` event fires the matching iptables SNAT.
+ */
+import type { NineDeployClient } from '../client.js';
+export interface EgressRule {
+    selector: {
+        projectId: number;
+        sourceCidr?: string;
+    };
+    ip: string;
+    createdAt: string;
+}
+export interface EgressDriverView {
+    name: string;
+    rules: EgressRule[];
+}
+/** Pure entry point — same shape used by the CLI action and the unit test. */
+export declare function egressList(client: NineDeployClient): Promise<{
+    drivers: EgressDriverView[];
+}>;
+export declare function egressListAction(client: NineDeployClient): Promise<void>;
+/** Pure entry point — same shape used by the CLI action and the unit test. */
+export declare function egressSet(client: NineDeployClient, projectId: number, ip: string, driver?: string): Promise<{
+    ok: boolean;
+    driver: string;
+    rule: EgressRule;
+}>;
+export declare function egressSetAction(client: NineDeployClient, projectIdStr: string, ip: string, opts?: {
+    driver?: string;
+}): Promise<void>;
+/** Pure entry point — same shape used by the CLI action and the unit test. */
+export declare function egressClear(client: NineDeployClient, projectId: number): Promise<{
+    ok: boolean;
+    driver: string;
+}>;
+export declare function egressClearAction(client: NineDeployClient, projectIdStr: string): Promise<void>;
+//# sourceMappingURL=egress.d.ts.map

package/dist/commands/egress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"egress.d.ts","sourceRoot":"","sources":["../../src/commands/egress.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGrD,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,EAAE,CAAC;CACrB;AAID,8EAA8E;AAC9E,wBAAsB,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,gBAAgB,EAAE,CAAA;CAAE,CAAC,CAEnG;AAED,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwB9E;AAID,8EAA8E;AAC9E,wBAAsB,SAAS,CAC7B,MAAM,EAAE,gBAAgB,EACxB,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,EACV,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,CAE5D;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,gBAAgB,EACxB,YAAY,EAAE,MAAM,EACpB,EAAE,EAAE,MAAM,EACV,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7B,OAAO,CAAC,IAAI,CAAC,CAgBf;AAID,8EAA8E;AAC9E,wBAAsB,WAAW,CAC/B,MAAM,EAAE,gBAAgB,EACxB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAE1C;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,gBAAgB,EACxB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAgBf"}

package/dist/commands/egress.js

@@ -0,0 +1,80 @@
+import { error, header, info, success } from '../lib/format.js';
+// ── `ninedeploy egress list` ──────────────────────────────────────────────
+/** Pure entry point — same shape used by the CLI action and the unit test. */
+export async function egressList(client) {
+    return await client.egress.list();
+}
+export async function egressListAction(client) {
+    header('Egress IP rules');
+    let result;
+    try {
+        result = await egressList(client);
+    }
+    catch (err) {
+        error(err instanceof Error ? err.message : String(err));
+        process.exitCode = 1;
+        return;
+    }
+    if (result.drivers.length === 0) {
+        info('No egress IP drivers are registered. Install one via Settings → Plugins.');
+        return;
+    }
+    for (const d of result.drivers) {
+        info(`Driver: ${d.name}`);
+        if (d.rules.length === 0) {
+            info('  (no rules)');
+        }
+        else {
+            for (const r of d.rules) {
+                info(`  project ${r.selector.projectId} → ${r.ip}  (since ${r.createdAt})`);
+            }
+        }
+    }
+}
+// ── `ninedeploy egress set <projectId> <ip>` ──────────────────────────────
+/** Pure entry point — same shape used by the CLI action and the unit test. */
+export async function egressSet(client, projectId, ip, driver) {
+    return await client.egress.set({ projectId, ip, driver });
+}
+export async function egressSetAction(client, projectIdStr, ip, opts = {}) {
+    const projectId = Number(projectIdStr);
+    if (!Number.isFinite(projectId)) {
+        error('Usage: ninedeploy egress set <projectId> <ip> [--driver <name>]');
+        process.exitCode = 1;
+        return;
+    }
+    let result;
+    try {
+        result = await egressSet(client, projectId, ip, opts.driver);
+    }
+    catch (err) {
+        error(err instanceof Error ? err.message : String(err));
+        process.exitCode = 1;
+        return;
+    }
+    success(`Egress IP ${result.rule.ip} attached to project ${projectId} via ${result.driver}`);
+}
+// ── `ninedeploy egress clear <projectId>` ────────────────────────────────
+/** Pure entry point — same shape used by the CLI action and the unit test. */
+export async function egressClear(client, projectId) {
+    return await client.egress.clear(projectId);
+}
+export async function egressClearAction(client, projectIdStr) {
+    const projectId = Number(projectIdStr);
+    if (!Number.isFinite(projectId)) {
+        error('Usage: ninedeploy egress clear <projectId>');
+        process.exitCode = 1;
+        return;
+    }
+    let result;
+    try {
+        result = await egressClear(client, projectId);
+    }
+    catch (err) {
+        error(err instanceof Error ? err.message : String(err));
+        process.exitCode = 1;
+        return;
+    }
+    success(`Egress IP cleared for project ${projectId} via ${result.driver}`);
+}
+//# sourceMappingURL=egress.js.map

package/dist/commands/egress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"egress.js","sourceRoot":"","sources":["../../src/commands/egress.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAahE,6EAA6E;AAE7E,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAwB;IACvD,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAwB;IAC7D,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC1B,IAAI,MAAuC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC,0EAA0E,CAAC,CAAC;QACjF,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1B,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,cAAc,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;gBACxB,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,SAAS,MAAM,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,6EAA6E;AAE7E,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAwB,EACxB,SAAiB,EACjB,EAAU,EACV,MAAe;IAEf,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAwB,EACxB,YAAoB,EACpB,EAAU,EACV,IAAI,GAAwB,EAAE;IAE9B,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACzE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,MAA6C,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,OAAO,CAAC,aAAa,MAAM,CAAC,IAAI,CAAC,EAAE,wBAAwB,SAAS,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED,4EAA4E;AAE5E,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAwB,EACxB,SAAiB;IAEjB,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAwB,EACxB,YAAoB;IAEpB,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACpD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,MAA+C,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,OAAO,CAAC,iCAAiC,SAAS,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7E,CAAC"}

package/dist/commands/emailTemplates.d.ts

@@ -0,0 +1,19 @@
+/**
+ * `ninedeploy email-templates {list,set,reset,preview}` —
+ * G-30 transactional email template overrides.
+ *
+ * The CLI is a thin wrapper around the SDK; the heavy
+ * lifting is `lib/emailTemplates.ts`. The `set` and
+ * `reset` commands require the workspace's admin role
+ * server-side, so a non-admin operator gets a clean
+ * 403 rather than a silent no-op.
+ */
+import type { NineDeployClient } from '@ninedeploy/sdk';
+export declare function emailTemplatesList(client: NineDeployClient, widStr: string): Promise<void>;
+export declare function emailTemplatesPreview(client: NineDeployClient, widStr: string, name: string, vars?: string[]): Promise<void>;
+export declare function emailTemplatesSet(client: NineDeployClient, widStr: string, name: string, opts: {
+    subject: string;
+    text: string;
+}): Promise<void>;
+export declare function emailTemplatesReset(client: NineDeployClient, widStr: string, name: string): Promise<void>;
+//# sourceMappingURL=emailTemplates.d.ts.map

package/dist/commands/emailTemplates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emailTemplates.d.ts","sourceRoot":"","sources":["../../src/commands/emailTemplates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAqB,MAAM,iBAAiB,CAAC;AAuB3E,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhG;AAED,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,MAAM,EAAO,GAClB,OAAO,CAAC,IAAI,CAAC,CAuBf;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACtC,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW/G"}

package/dist/commands/emailTemplates.js

@@ -0,0 +1,86 @@
+import { c, error, header, info, spinner, success, table } from '../lib/format.js';
+const num = (v, usage) => {
+    const n = Number(v);
+    if (!n) {
+        error(usage);
+        throw new Error(usage);
+    }
+    return n;
+};
+const fail = (err) => {
+    error(err instanceof Error ? err.message : String(err));
+};
+const NAMES = [
+    'password-reset',
+    'workspace-invitation',
+    'domain-transfer',
+    'backup-drill-failed',
+];
+export async function emailTemplatesList(client, widStr) {
+    const wid = num(widStr, 'Usage: ninedeploy email-templates list <workspaceId>');
+    const res = await spinner('Fetching', () => client.emailTemplates.list(wid));
+    header(`Email templates (workspace ${wid})`);
+    table(res.templates.map((t) => ({
+        name: t.name,
+        overridden: t.overridden ? 'yes' : c.dim('no'),
+        subject: t.subject ?? c.dim('(default)'),
+    })), ['name', 'overridden', 'subject']);
+}
+export async function emailTemplatesPreview(client, widStr, name, vars = []) {
+    const wid = num(widStr, 'Usage: ninedeploy email-templates preview <workspaceId> <name> [key=value ...]');
+    if (!NAMES.includes(name)) {
+        error(`Unknown template: ${name}. Valid names: ${NAMES.join(', ')}`);
+        process.exitCode = 1;
+        return;
+    }
+    const parsed = {};
+    for (const raw of vars) {
+        const eq = raw.indexOf('=');
+        if (eq <= 0) {
+            error(`--var expects key=value pairs, got: ${raw}`);
+            return;
+        }
+        parsed[raw.slice(0, eq)] = raw.slice(eq + 1);
+    }
+    const res = await spinner('Rendering', () => client.emailTemplates.preview(wid, name, parsed));
+    header(`Preview: ${name}${res.overridden ? c.cyan(' (overridden)') : ''}`);
+    info(`Subject:  ${res.subject}`);
+    console.log();
+    console.log(res.text);
+}
+export async function emailTemplatesSet(client, widStr, name, opts) {
+    const wid = num(widStr, 'Usage: ninedeploy email-templates set <workspaceId> <name> --subject <s> --text <t>');
+    if (!NAMES.includes(name)) {
+        error(`Unknown template: ${name}. Valid names: ${NAMES.join(', ')}`);
+        process.exitCode = 1;
+        return;
+    }
+    if (!opts.subject || !opts.text) {
+        error('Both --subject and --text are required');
+        process.exitCode = 1;
+        return;
+    }
+    try {
+        await client.emailTemplates.set(wid, name, opts.subject, opts.text);
+        success(`Override set for ${name}.`);
+    }
+    catch (err) {
+        fail(err);
+    }
+}
+export async function emailTemplatesReset(client, widStr, name) {
+    const wid = num(widStr, 'Usage: ninedeploy email-templates reset <workspaceId> <name>');
+    if (!NAMES.includes(name)) {
+        error(`Unknown template: ${name}. Valid names: ${NAMES.join(', ')}`);
+        process.exitCode = 1;
+        return;
+    }
+    try {
+        await client.emailTemplates.reset(wid, name);
+        success(`Override removed for ${name}.`);
+    }
+    catch (err) {
+        fail(err);
+    }
+}
+//# sourceMappingURL=emailTemplates.js.map

package/dist/commands/emailTemplates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emailTemplates.js","sourceRoot":"","sources":["../../src/commands/emailTemplates.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAEnF,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,KAAa,EAAU,EAAE;IAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG,CAAC,GAAY,EAAQ,EAAE;IAClC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,CAAC,CAAC;AAEF,MAAM,KAAK,GAAwB;IACjC,gBAAgB;IAChB,sBAAsB;IACtB,iBAAiB;IACjB,qBAAqB;CACtB,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAwB,EAAE,MAAc;IAC/E,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,sDAAsD,CAAC,CAAC;IAChF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7E,MAAM,CAAC,8BAA8B,GAAG,GAAG,CAAC,CAAC;IAC7C,KAAK,CACH,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAC9C,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;KACzC,CAAC,CAAC,EACH,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,CAAC,CAClC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAwB,EACxB,MAAc,EACd,IAAY,EACZ,IAAI,GAAa,EAAE;IAEnB,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,gFAAgF,CAAC,CAAC;IAC1G,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAyB,CAAC,EAAE,CAAC;QAC/C,KAAK,CAAC,qBAAqB,IAAI,kBAAkB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACZ,KAAK,CAAC,uCAAuC,GAAG,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,GAAG,EAAE,CAC1C,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,IAAyB,EAAE,MAAM,CAAC,CACtE,CAAC;IACF,MAAM,CAAC,YAAY,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,aAAa,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAwB,EACxB,MAAc,EACd,IAAY,EACZ,IAAuC;IAEvC,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,qFAAqF,CAAC,CAAC;IAC/G,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAyB,CAAC,EAAE,CAAC;QAC/C,KAAK,CAAC,qBAAqB,IAAI,kBAAkB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAChD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,IAAyB,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACzF,OAAO,CAAC,oBAAoB,IAAI,GAAG,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAwB,EAAE,MAAc,EAAE,IAAY;IAC9F,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,8DAA8D,CAAC,CAAC;IACxF,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAyB,CAAC,EAAE,CAAC;QAC/C,KAAK,CAAC,qBAAqB,IAAI,kBAAkB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,IAAyB,CAAC,CAAC;QAClE,OAAO,CAAC,wBAAwB,IAAI,GAAG,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC"}

package/dist/commands/housekeeping.d.ts

@@ -1,3 +1,27 @@
 import type { NineDeployClient } from '@ninedeploy/sdk';
 export declare function housekeepingPrune(client: NineDeployClient): Promise<void>;
+/**
+ * `ninedeploy images ls` — every image on the host, with
+ * repo / tag / size / age / dangling / in-use columns. The
+ * default sort is by size descending so the operator sees
+ * the biggest offenders first; `--sort age` switches to
+ * "oldest first" which is what the panel usually wants for
+ * a prune sweep.
+ */
+export declare function imagesList(client: NineDeployClient, opts?: {
+    sort?: 'size' | 'age';
+}): Promise<void>;
+/**
+ * `ninedeploy images prune` — fine-grained retention.
+ * The CLI builds a small opts object from flags and posts
+ * to `/v1/housekeeping/images/prune`. `--dry-run` is the
+ * default expectation on a first run: the operator
+ * eyeballs the would-delete set, then re-runs without it.
+ */
+export declare function imagesPrune(client: NineDeployClient, opts?: {
+    keepLast?: number;
+    olderThan?: number;
+    dangling?: boolean;
+    dryRun?: boolean;
+}): Promise<void>;
 //# sourceMappingURL=housekeeping.d.ts.map

package/dist/commands/housekeeping.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"housekeeping.d.ts","sourceRoot":"","sources":["../../src/commands/housekeeping.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGxD,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ/E"}
+{"version":3,"file":"housekeeping.d.ts","sourceRoot":"","sources":["../../src/commands/housekeeping.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGxD,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ/E;AAED;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,gBAAgB,EACxB,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,GAAG,KAAK,CAAA;CAAO,GACnC,OAAO,CAAC,IAAI,CAAC,CAuBf;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,gBAAgB,EACxB,IAAI,GAAE;IACJ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CACb,GACL,OAAO,CAAC,IAAI,CAAC,CAuBf"}

package/dist/commands/housekeeping.js

@@ -1,4 +1,4 @@
-import { fmtBytes, spinner } from '../lib/format.js';
+import { error, fmtBytes, header, info, spinner, success, table } from '../lib/format.js';
 export async function housekeepingPrune(client) {
     const res = await spinner('Running system prune', () => client.housekeeping.runPrune());
     console.log('  ✓ System housekeeping prune completed.');
@@ -8,4 +8,65 @@ export async function housekeepingPrune(client) {
         console.log(`    Images freed:    ${res.details.imagesFreed}`);
     }
 }
+/**
+ * `ninedeploy images ls` — every image on the host, with
+ * repo / tag / size / age / dangling / in-use columns. The
+ * default sort is by size descending so the operator sees
+ * the biggest offenders first; `--sort age` switches to
+ * "oldest first" which is what the panel usually wants for
+ * a prune sweep.
+ */
+export async function imagesList(client, opts = {}) {
+    header('Images');
+    const { images, totalBytes } = await spinner('Listing', () => client.housekeeping.listImages());
+    if (images.length === 0) {
+        info('No images on the host.');
+        return;
+    }
+    const sorted = [...images].sort((a, b) => {
+        if (opts.sort === 'age')
+            return b.ageHours - a.ageHours;
+        return b.sizeBytes - a.sizeBytes;
+    });
+    table(sorted.map((i) => ({
+        repository: i.repository,
+        tag: i.tag,
+        size: i.size,
+        ageHours: i.ageHours.toFixed(1),
+        dangling: i.dangling ? 'yes' : '',
+        inUse: i.inUse ? 'yes' : '',
+    })), ['repository', 'tag', 'size', 'ageHours', 'dangling', 'inUse']);
+    info(`${images.length} images, total ${fmtBytes(totalBytes)}.`);
+}
+/**
+ * `ninedeploy images prune` — fine-grained retention.
+ * The CLI builds a small opts object from flags and posts
+ * to `/v1/housekeeping/images/prune`. `--dry-run` is the
+ * default expectation on a first run: the operator
+ * eyeballs the would-delete set, then re-runs without it.
+ */
+export async function imagesPrune(client, opts = {}) {
+    header('Image prune');
+    if (!opts.dangling && !opts.keepLast && !opts.olderThan) {
+        error('Refusing to prune with no filter. Set --dangling, --keep-last <N>, or --older-than <hours>.');
+        process.exitCode = 1;
+        return;
+    }
+    const res = await spinner(opts.dryRun ? 'Computing candidate set' : 'Pruning', () => client.housekeeping.pruneImages({
+        keepLast: opts.keepLast,
+        olderThanHours: opts.olderThan,
+        danglingOnly: opts.dangling,
+        dryRun: opts.dryRun,
+    }));
+    if (res.dryRun) {
+        info(`dryRun: would remove ${res.removed.length} images, freeing ${fmtBytes(res.freedBytes)}.`);
+        for (const label of res.removedLabels.slice(0, 25))
+            console.log(`  ${label}`);
+        if (res.removedLabels.length > 25)
+            info(`  …and ${res.removedLabels.length - 25} more.`);
+        return;
+    }
+    success(`Removed ${res.removed.length} images, freed ${fmtBytes(res.freedBytes)}.`);
+    console.log(res.output);
+}
 //# sourceMappingURL=housekeeping.js.map

package/dist/commands/housekeeping.js.map

@@ -1 +1 @@
-{"version":3,"file":"housekeeping.js","sourceRoot":"","sources":["../../src/commands/housekeeping.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAwB;IAC9D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxF,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,wBAAwB,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,CAAC,oBAAoB,GAAG,CAAC,CAAC;IACjE,IAAI,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC"}
+{"version":3,"file":"housekeeping.js","sourceRoot":"","sources":["../../src/commands/housekeeping.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE1F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAwB;IAC9D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxF,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,wBAAwB,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,CAAC,oBAAoB,GAAG,CAAC,CAAC;IACjE,IAAI,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAwB,EACxB,IAAI,GAA8B,EAAE;IAEpC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC,CAAC;IAChG,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC/B,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACvC,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;QACxD,OAAO,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,KAAK,CACH,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/B,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QACjC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;KAC5B,CAAC,CAAC,EACH,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,CAC/D,CAAC;IACF,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,kBAAkB,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAwB,EACxB,IAAI,GAKA,EAAE;IAEN,MAAM,CAAC,aAAa,CAAC,CAAC;IACtB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACxD,KAAK,CAAC,6FAA6F,CAAC,CAAC;QACrG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,CAClF,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC;QAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,cAAc,EAAE,IAAI,CAAC,SAAS;QAC9B,YAAY,EAAE,IAAI,CAAC,QAAQ;QAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CACH,CAAC;IACF,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,IAAI,CAAC,wBAAwB,GAAG,CAAC,OAAO,CAAC,MAAM,oBAAoB,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAChG,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;QAC9E,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,EAAE;YAAE,IAAI,CAAC,UAAU,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,EAAE,QAAQ,CAAC,CAAC;QACzF,OAAO;IACT,CAAC;IACD,OAAO,CAAC,WAAW,GAAG,CAAC,OAAO,CAAC,MAAM,kBAAkB,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC1B,CAAC"}

package/dist/commands/logs.d.ts

@@ -0,0 +1,15 @@
+/**
+ * `ninedeploy logs search` — G-16 cluster log search via
+ * the configured Loki drain. The CLI is a thin renderer
+ * around `client.logDrains.search(...)`: the heavy
+ * lifting is the upstream Loki query.
+ */
+import type { NineDeployClient } from '../client.js';
+export declare function logsSearch(client: NineDeployClient, query: string, opts?: {
+    service?: string;
+    since?: string;
+    limit?: string;
+    drain?: string;
+    json?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=logs.d.ts.map

package/dist/commands/logs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.d.ts","sourceRoot":"","sources":["../../src/commands/logs.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAYrD,wBAAsB,UAAU,CAC9B,MAAM,EAAE,gBAAgB,EACxB,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAC9F,OAAO,CAAC,IAAI,CAAC,CA+Bf"}

package/dist/commands/logs.js

@@ -0,0 +1,58 @@
+import { c, error, header, info, spinner } from '../lib/format.js';
+const num = (v, usage) => {
+    const n = Number(v);
+    if (!n) {
+        error(usage);
+        throw new Error(usage);
+    }
+    return n;
+};
+export async function logsSearch(client, query, opts = {}) {
+    if (!query) {
+        error('Usage: ninedeploy logs search <query> [--service <id>] [--since 15m] [--drain <id>]');
+        return;
+    }
+    const sinceMinutes = parseSinceMinutes(opts.since ?? '15m');
+    const limit = opts.limit ? num(opts.limit, 'Usage: --limit <N>') : undefined;
+    const drainId = opts.drain ? num(opts.drain, 'Usage: --drain <id>') : undefined;
+    const serviceId = opts.service ? num(opts.service, 'Usage: --service <id>') : undefined;
+    const result = await spinner('Searching logs', () => client.logDrains.search({ query, serviceId, sinceMinutes, limit, drainId }));
+    if (opts.json) {
+        console.log(JSON.stringify(result, null, 2));
+        return;
+    }
+    header('Log search');
+    info(`Drain:      ${result.drain.name} (${result.drain.type})`);
+    info(`Window:     ${result.window.since} → ${result.window.until}`);
+    if (result.serviceId != null)
+        info(`Service ID: ${result.serviceId}`);
+    info(`Matches:    ${result.lines.length}`);
+    if (result.lines.length === 0) {
+        info('(no matches in the window)');
+        return;
+    }
+    console.log();
+    for (const line of result.lines) {
+        const ts = new Date(line.ts).toISOString();
+        const svc = line.service ? c.dim(`[${line.service}]`) : '';
+        console.log(`${c.dim(ts)} ${svc} ${line.line}`);
+    }
+}
+/** Parse `15m` / `2h` / `30s` / `1d` into minutes. The
+ *  search route caps at 7d, so anything larger is clamped. */
+function parseSinceMinutes(input) {
+    const m = /^(\d+)([smhd])$/.exec(input.trim());
+    if (!m) {
+        error(`Invalid --since value "${input}" (expected e.g. 15m, 2h, 1d)`);
+        throw new Error(`Invalid --since value: ${input}`);
+    }
+    const n = Number(m[1]);
+    switch (m[2]) {
+        case 's': return Math.max(1, Math.ceil(n / 60));
+        case 'm': return n;
+        case 'h': return Math.min(7 * 24 * 60, n * 60);
+        case 'd': return Math.min(7 * 24 * 60, n * 24 * 60);
+        default: return 15;
+    }
+}
+//# sourceMappingURL=logs.js.map

package/dist/commands/logs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.js","sourceRoot":"","sources":["../../src/commands/logs.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEnE,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,KAAa,EAAU,EAAE;IAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAwB,EACxB,KAAa,EACb,IAAI,GAAyF,EAAE;IAE/F,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,CAAC,qFAAqF,CAAC,CAAC;QAC7F,OAAO;IACT,CAAC;IACD,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAClD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAC5E,CAAC;IACF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IACD,MAAM,CAAC,YAAY,CAAC,CAAC;IACrB,IAAI,CAAC,eAAe,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;IAChE,IAAI,CAAC,eAAe,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI;QAAE,IAAI,CAAC,eAAe,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACtE,IAAI,CAAC,eAAe,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACnC,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED;8DAC8D;AAC9D,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,KAAK,CAAC,0BAA0B,KAAK,+BAA+B,CAAC,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvB,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACb,KAAK,GAAG,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAChD,KAAK,GAAG,EAAE,OAAO,CAAC,CAAC;QACnB,KAAK,GAAG,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/C,KAAK,GAAG,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,SAAS,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC"}