Ensure MDNS service definitions are included in standalone binaries

Change-Type: patch

.dockerignore

@@ -1,37 +0,0 @@
-# Reminders:
-# * Matching rules are different to `.gitignore`
-# * A pattern without '**' matches in the project's root directory only
-# * Leading and trailing '/' are discarded (it is not possible to
-#   distinguish between files and directories)
-# * More details: https://github.com/balena-io-modules/dockerignore
-
-# development and testing tools or IDEs
-**/*.log
-**/*.pid
-**/*.seed
-.idea
-.lock-wscript
-.nvmrc
-.nyc_output
-.vscode
-coverage
-lib-cov
-logs
-pids
-
-# OS cache files
-**/.DS_Store
-
-# balena CLI config and build files
-**/.balenaconf
-**/.fast-boot.json
-**/.resinconf
-balenarc.yml
-build
-build-bin
-dist
-node_modules
-oclif.manifest.json
-package-lock.json
-resinrc.yml
-tmp

.gitattributes

@@ -1,16 +0,0 @@
-# Set all files to use line feed endings (since we can't match only ones without an extension)
-* eol=lf
-# And then reset all the files with extensions back to default
-*.* -eol
-
-*.sh text eol=lf
-.dockerignore eol=lf
-Dockerfile eol=lf
-Dockerfile.* eol=lf
-* text=auto eol=lf
-
-# lf for the docs as it's auto-generated and will otherwise trigger an uncommited error on windows
-docs/balena-cli.md text eol=lf
-# crlf for the eol conversion test files
-tests/test-data/projects/docker-compose/basic/service2/file2-crlf.sh eol=crlf
-tests/test-data/projects/no-docker-compose/basic/src/windows-crlf.sh eol=crlf

.github/ISSUE_TEMPLATE.md

@@ -1,76 +1,2 @@
-
-# About this issue tracker
-
-*The balena CLI (Command Line Interface) is a tool used to interact with the balena platform.
-This GitHub issue tracker is used for bug reports and feature requests regarding the CLI
-tool. General and troubleshooting questions (such as setting up your project to work with a
-balenalib base image) are encouraged to be posted to the [balena
-forums](https://forums.balena.io), which are monitored by balena's support team and where the
-community can both contribute and benefit from the answers.*
-
-*Please also check that this issue is not a duplicate. If there is another issue describing
-the same problem or feature please add comments to the existing issue.*
-
-*Thank you for your time and effort creating the issue report, and helping us improve
-the balena CLI!*
-
----
-
-# Expected Behavior
-
-Please describe what you were expecting to happen. If applicable, please add links to
-documentation you were following, or to projects that you were trying to push/build.
-
-# Actual Behavior
-
-Please describe what actually happened instead:
-* Quoting logs and error message is useful. If possible, quote the **full** output of the
-  CLI, not just the error message.
-* Please quote the **full command line** too. Sometimes users report that they were
-  "pushing" or "building" a project, but there are several ways to do so and several
-  possible "targets" such as balenaCloud, openBalena, local balenaOS device, etc.
-  Examples:
-
-```
-balena push myFleet
-balena push 192.168.0.12
-balena deploy myFleet
-balena deploy myFleet --build
-balena build . -f myFleet
-balena build . -A armv7hf -d raspberrypi3
-```
-
-Each of the above command lines executes different code behind the scenes, so quoting the
-full command line is very helpful.
-
-Running the CLI in debug mode (`--debug` flag or `DEBUG=1` environment variable) may reveal
-additional information. The `--logs` option reveals additional information for the commands:
-
-```
-balena build . --logs
-balena deploy myFleet --build --logs
-```
-
-# Steps to Reproduce the Problem
-
-This is the most important and helpful part of a bug report. If we cannot reproduce the
-problem, it is difficult to tell what the fix should be, or whether code changes have
-fixed it.
-
-1.
-1.
-1.
-
-# Specifications
-
-- **balena CLI version:** e.g. 1.2.3 (output of the `"balena version -a"` command)
-- **Cloud backend: openBalena or balenaCloud?** If unsure, it will be balenaCloud
-- **Operating system version:** e.g. Windows 10, Ubuntu 18.04, macOS 10.14.5
-- **32/64 bit OS and processor:** e.g. 32-bit Windows on 64-bit Intel processor
-- **Install method:** npm or standalone package or executable installer
-- **If npm install, Node.js and npm version:** e.g. Node v8.16.0 and npm v6.4.1
-
-# Additional References
-
-If applicable, please add additional links to GitHub projects, forums.balena.io threads,
-gist.github.com, Google Drive attachments, etc.
+- **resin-cli version:**
+- **Operating system and architecture:**

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,26 +0,0 @@
-<!-- You can remove tags that do not apply. -->
-Resolves: # <!-- Refer an issue of this repository that this PR fixes -->  
-Change-type: major|minor|patch <!-- See https://semver.org/ -->  
-Depends-on: <url> <!-- This change depends on a PR to get merged/deployed first -->  
-See: <url> <!-- Refer to any external resource, like a PR, document or discussion -->  
-
----
-Please check the CONTRIBUTING.md file for relevant information and some
-guidance. Keep in mind that the CLI is a cross-platform application that runs
-on Windows, macOS and Linux. Tests will be automatically run by balena CI on
-all three operating systems, but this will only help if you have added test
-code that exercises the modified or added feature code.
-
-Note that each commit message (currently only the first line) will be
-automatically copied to the CHANGELOG.md file, so try writing it in a way
-that describes the feature or fix for CLI users.
-
-If there isn't a linked issue or if the linked issue doesn't quite match the
-PR, please add a PR description to explain its purpose or the features that it
-implements. Adding PR comments to blocks of code that aren't self explanatory
-usually helps with the review process.
-
-If the PR introduces security considerations or affects the development, build
-or release process, please be sure to highlight this in the PR description.
-
-Thank you very much for your contribution!

.github/actions/publish/action.yml

@@ -1,145 +0,0 @@
----
-name: package and draft GitHub release
-# https://github.com/product-os/flowzone/tree/master/.github/actions
-inputs:
-  json:
-    description: 'JSON stringified object containing all the inputs from the calling workflow'
-    required: true
-  secrets:
-    description: 'JSON stringified object containing all the secrets from the calling workflow'
-    required: true
-  variables:
-    description: 'JSON stringified object containing all the variables from the calling workflow'
-    required: true
-
-  # --- custom environment
-  XCODE_APP_LOADER_EMAIL:
-    type: string
-    default: 'accounts+apple@balena.io'
-  NODE_VERSION:
-    type: string
-    default: '22.x'
-  VERBOSE:
-    type: string
-    default: 'true'
-
-runs:
-  # https://docs.github.com/en/actions/creating-actions/creating-a-composite-action
-  using: 'composite'
-  steps:
-    - name: Download custom source artifact
-      uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
-      with:
-        name: custom-${{ github.event.pull_request.head.sha || github.event.head_commit.id }}-${{ runner.os }}-${{ runner.arch }}
-        path: ${{ runner.temp }}
-
-    - name: Extract custom source artifact
-      shell: pwsh
-      working-directory: .
-      run: tar -xf ${{ runner.temp }}/custom.tgz
-
-    - name: Setup Node.js
-      uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
-      with:
-        node-version: ${{ inputs.NODE_VERSION }}
-        cache: npm
-
-    - name: Set up Python 3.11
-      if: runner.os == 'macOS'
-      uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
-      with:
-        python-version: '3.11'
-
-    - name: Install additional tools
-      if: runner.os == 'Windows'
-      shell: bash
-      run: |
-        choco install yq
-
-    - name: Install additional tools
-      if: runner.os == 'macOS'
-      shell: bash
-      run: |
-        brew install coreutils
-
-    # https://www.electron.build/code-signing.html
-    # https://github.com/Apple-Actions/import-codesign-certs
-    - name: Import Apple code signing certificate
-      if: runner.os == 'macOS'
-      uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2
-      with:
-        p12-file-base64: ${{ fromJSON(inputs.secrets).APPLE_SIGNING }}
-        p12-password: ${{ fromJSON(inputs.secrets).APPLE_SIGNING_PASSWORD }}
-
-    - name: Import Windows code signing certificate
-      if: runner.os == 'Windows'
-      shell: powershell
-      run: |
-        Set-Content -Path ${{ runner.temp }}/certificate.base64 -Value $env:SM_CLIENT_CERT_FILE_B64
-        certutil -decode ${{ runner.temp }}/certificate.base64 ${{ runner.temp }}/Certificate_pkcs12.p12
-        Remove-Item -path ${{ runner.temp }} -include certificate.base64
-      env:
-        SM_CLIENT_CERT_FILE_B64: ${{ fromJSON(inputs.secrets).SM_CLIENT_CERT_FILE_B64 }}
-
-    # https://github.com/product-os/scripts/tree/master/shared
-    # https://github.com/product-os/balena-concourse/blob/master/pipelines/github-events/template.yml
-    - name: Package release
-      shell: bash
-      run: |
-        set -ea
-
-        [[ '${{ inputs.VERBOSE }}' =~ on|On|Yes|yes|true|True ]] && set -x
-
-        runner_os="$(echo "${RUNNER_OS}" | tr '[:upper:]' '[:lower:]')"
-        runner_arch="$(echo "${RUNNER_ARCH}" | tr '[:upper:]' '[:lower:]')"
-
-        if [[ $runner_os =~ darwin|macos|osx ]]; then
-            CSC_KEY_PASSWORD='${{ fromJSON(inputs.secrets).APPLE_SIGNING_PASSWORD }}'
-            CSC_KEYCHAIN=signing_temp
-            CSC_LINK=${{ fromJSON(inputs.secrets).APPLE_SIGNING }}
-
-        elif [[ $runner_os =~ windows|win ]]; then
-            SM_HOST=${{ fromJSON(inputs.secrets).SM_HOST }}
-            SM_API_KEY=${{ fromJSON(inputs.secrets).SM_API_KEY }}
-            SM_CLIENT_CERT_FILE='${{ runner.temp }}\Certificate_pkcs12.p12'
-            SM_CLIENT_CERT_PASSWORD=${{ fromJSON(inputs.secrets).SM_CLIENT_CERT_PASSWORD }}
-            SM_CODE_SIGNING_CERT_SHA1_HASH=${{ fromJSON(inputs.secrets).SM_CODE_SIGNING_CERT_SHA1_HASH }}
-
-            curl --silent --retry 3 --fail https://one.digicert.com/signingmanager/api-ui/v1/releases/smtools-windows-x64.msi/download \
-              -H "x-api-key:$SM_API_KEY" \
-              -o smtools-windows-x64.msi
-            msiexec -i smtools-windows-x64.msi -qn
-            PATH="/c/Program Files/DigiCert/DigiCert One Signing Manager Tools:${PATH}"
-            smksp_registrar.exe list
-            smctl.exe keypair ls
-            smctl.exe windows certsync
-            /c/Windows/System32/certutil.exe -csp "DigiCert Signing Manager KSP" -key -user
-
-            # (signtool.exe) https://github.com/actions/runner-images/blob/main/images/win/Windows2019-Readme.md#installed-windows-sdks
-            PATH="/c/Program Files (x86)/Windows Kits/10/bin/${runner_arch}:${PATH}"
-        fi
-
-        npm run package
-
-        find dist -type f -maxdepth 1
-
-      env:
-        # https://github.blog/2020-08-03-github-actions-improvements-for-fork-and-pull-request-workflows/#improvements-for-public-repository-forks
-        # https://docs.github.com/en/actions/managing-workflow-runs/approving-workflow-runs-from-public-forks#about-workflow-runs-from-public-forks
-        CSC_FOR_PULL_REQUEST: true
-        # https://docs.digicert.com/es/software-trust-manager/ci-cd-integrations/plugins/github-custom-action-for-keypair-signing.html
-        TIMESTAMP_SERVER: http://timestamp.digicert.com
-        # Apple notarization (automation/build-bin.ts)
-        XCODE_APP_LOADER_EMAIL: ${{ inputs.XCODE_APP_LOADER_EMAIL }}
-        XCODE_APP_LOADER_PASSWORD: ${{ fromJSON(inputs.secrets).XCODE_APP_LOADER_PASSWORD }}
-        XCODE_APP_LOADER_TEAM_ID: ${{ inputs.XCODE_APP_LOADER_TEAM_ID }}
-
-    - name: Upload artifacts
-      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
-      with:
-        name: gh-release-${{ github.event.pull_request.head.sha || github.event.head_commit.id }}-${{ strategy.job-index }}
-        path: |
-          dist
-          !dist/balena
-        retention-days: 1
-        if-no-files-found: error

.github/actions/test/action.yml

@@ -1,65 +0,0 @@
----
-name: test release
-# https://github.com/product-os/flowzone/tree/master/.github/actions
-inputs:
-  json:
-    description: "JSON stringified object containing all the inputs from the calling workflow"
-    required: true
-  secrets:
-    description: "JSON stringified object containing all the secrets from the calling workflow"
-    required: true
-  variables:
-    description: "JSON stringified object containing all the variables from the calling workflow"
-    required: true
-
-  # --- custom environment
-  NODE_VERSION:
-    type: string
-    default: '22.x'
-  VERBOSE:
-    type: string
-    default: "true"
-
-runs:
-  # https://docs.github.com/en/actions/creating-actions/creating-a-composite-action
-  using: "composite"
-  steps:
-    # https://github.com/actions/setup-node#caching-global-packages-data
-    - name: Setup Node.js
-      uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
-      with:
-        node-version: ${{ inputs.NODE_VERSION }}
-        cache: npm
-
-    - name: Set up Python 3.11
-      if: runner.os == 'macOS'
-      uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
-      with:
-        python-version: "3.11"
-
-    - name: Test release
-      shell: bash
-      run: |
-        set -ea
-
-        [[ '${{ inputs.VERBOSE }}' =~ on|On|Yes|yes|true|True ]] && set -x
-
-        if [[ -e package-lock.json ]] || [[ -e npm-shrinkwrap.json ]]; then
-            npm ci
-        else
-            npm i
-        fi
-
-        npm run build
-        npm run test:core
-
-    - name: Compress custom source
-      shell: pwsh
-      run: tar --exclude-vcs -acf ${{ runner.temp }}/custom.tgz .
-
-    - name: Upload custom artifact
-      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
-      with:
-        name: custom-${{ github.event.pull_request.head.sha || github.event.head_commit.id }}-${{ runner.os }}-${{ runner.arch }}
-        path: ${{ runner.temp }}/custom.tgz
-        retention-days: 1

.github/renovate.json

@@ -1,4 +0,0 @@
-{
-	"extends": ["github>balena-io/renovate-config"],
-	"postUpdateOptions": ["npmDedupe"]
-}

.github/workflows/flowzone.yml

@@ -1,45 +0,0 @@
-name: Flowzone
-on:
-  pull_request:
-    types: [opened, synchronize, closed]
-    branches: [main, master]
-  pull_request_target:
-    types: [opened, synchronize, closed]
-    branches: [main, master]
-jobs:
-  flowzone:
-    name: Flowzone
-    uses: product-os/flowzone/.github/workflows/flowzone.yml@master
-    # prevent duplicate workflow executions for pull_request and pull_request_target
-    if: |
-      (
-        github.event.pull_request.head.repo.full_name == github.repository &&
-        github.event_name == 'pull_request'
-      ) || (
-        github.event.pull_request.head.repo.full_name != github.repository &&
-        github.event_name == 'pull_request_target'
-      )
-    secrets: inherit
-    with:
-      custom_test_matrix: >
-        {
-          "os": [
-            ["self-hosted", "X64"],
-            ["self-hosted", "ARM64"],
-            ["macos-13"],
-            ["windows-2019"],
-            ["macos-latest-xlarge"]
-          ]
-        }
-      custom_publish_matrix: >
-        {
-          "os": [
-            ["self-hosted", "X64"],
-            ["self-hosted", "ARM64"],
-            ["macos-13"],
-            ["windows-2019"],
-            ["macos-latest-xlarge"]
-          ]
-        }
-      github_prerelease: false
-      restrict_custom_actions: false

.gitignore

@@ -1,36 +1,39 @@
-# Reminders:
-# * A pattern without '/' matches in subdirectories as well (files and directories)
-# * A leading '/' anchors matching to the directory where `.gitignore` is defined
-# * A trailing '/' makes the pattern match against directories only
-# More details: https://git-scm.com/docs/gitignore
-
-# development and testing tools or IDEs
+# Logs
+logs
 *.log
+
+# Runtime data
+pids
 *.pid
 *.seed
-/.idea/
-/.lock-wscript
-/.nvmrc
-/.nyc_output/
-/.vscode/
-/coverage/
-/lib-cov/
-/logs
-/pids
 
-# OS cache files
+# Directory for instrumented libs generated by jscoverage/JSCover
+lib-cov
+
+# Coverage directory used by tools like istanbul
+coverage
+
+# node-waf configuration
+.lock-wscript
+
+# Compiled binary addons (http://nodejs.org/api/addons.html)
+build/Release
+
+# Dependency directory
+# Commenting this out is preferred by some people, see
+# https://www.npmjs.org/doc/misc/npm-faq.html#should-i-check-my-node_modules-folder-into-git-
+node_modules
+
+npm-shrinkwrap.json
+package-lock.json
+.resinconf
+resinrc.yml
+
+.idea
+.vscode
 .DS_Store
 
-# balena CLI config and build files
-.balenaconf
-.fast-boot.json
-.resinconf
-/balenarc.yml
-/build/
-/build-bin/
-/dist/
-/node_modules
-/oclif.manifest.json
-/package-lock.json
-/resinrc.yml
-/tmp/
+/tmp
+build/
+build-bin/
+resin-cli-*.zip

.hound.yml

@@ -1,2 +1,5 @@
+coffee_script:
+  config_file: coffeelint.json
+
 javascript:
   enabled: false

.husky/pre-commit

@@ -1 +0,0 @@
-node automation/check-npm-version.js && ts-node automation/check-doc.ts

.mocharc-standalone.js

@@ -1,6 +0,0 @@
-const commonConfig = require('./.mocharc.js');
-
-module.exports = {
-	...commonConfig,
-	spec: ['tests/auth/*.spec.ts', 'tests/commands/**/*.spec.ts'],
-};

.mocharc.js

@@ -1,10 +0,0 @@
-module.exports = {
-	reporter: 'spec',
-	require: 'ts-node/register/transpile-only',
-	file: './tests/config-tests',
-	timeout: 48000,
-	// To test only, say, 'push.spec.ts', do it as follows so that
-	// requests are authenticated:
-	// spec: ['tests/auth/*.spec.ts', 'tests/**/deploy.spec.ts'],
-	spec: 'tests/**/*.spec.ts',
-};

.prettierrc

@@ -1,5 +0,0 @@
-{
-  "singleQuote": true,
-  "trailingComma": "all",
-  "useTabs": true
-}

.travis.yml

@@ -0,0 +1,28 @@
+language: node_js
+os:
+  - linux
+  - osx
+node_js:
+  - "6"
+before_install:
+- npm -g install npm@4
+script: npm run ci
+notifications:
+  email: false
+deploy:
+  - provider: script
+    script: npm run release
+    skip_cleanup: true
+    on:
+      tags: true
+      condition: "$TRAVIS_TAG =~ ^v?[[:digit:]]+\\.[[:digit:]]+\\.[[:digit:]]+"
+      repo: resin-io/resin-cli
+  - provider: npm
+    email: accounts@resin.io
+    api_key:
+      secure: phet6Du13hc1bzStbmpwy2ODNL5BFwjAmnpJ5wMcbWfI7fl0OtQ61s2+vW5hJAvm9fiRLOfiGAEiqOOtoupShZ1X8BNkC708d8+V+iZMoFh3+j6wAEz+N1sVq471PywlOuLAscOcqQNp92giCVt+4VPx2WQYh06nLsunvysGmUM=
+    skip_cleanup: true
+    on:
+      tags: true
+      condition: "$TRAVIS_TAG =~ ^v?[[:digit:]]+\\.[[:digit:]]+\\.[[:digit:]]+"
+      repo: resin-io/resin-cli

CONTRIBUTING.md

@@ -1,315 +0,0 @@
-# Contributing
-
-The balena CLI is an open source project and your contribution is welcome!
-
-* Install the dependencies listed in the [NPM Installation
-  section](./INSTALL-ADVANCED.md#npm-installation) section of the installation instructions. Check
-  the section [Additional Dependencies](./INSTALL-ADVANCED.md#additional-dependencies) too.
-* Clone the `balena-cli` repository (or a [forked
-  repo](https://docs.github.com/en/free-pro-team@latest/github/getting-started-with-github/fork-a-repo),
-  if you are not in the balena team), `cd` to it and run `npm install`.
-* Build the CLI with `npm run build` or `npm test`, and execute it with `./bin/balena`
-  (on a Windows command prompt, you may need to run `node .\bin\balena`).
-
-In order to ease development:
-
-* `npm run build:fast` skips some of the build steps for interactive testing, or
-* `npm run test:source` skips testing the standalone packages (which is rather slow)
-* `./bin/balena-dev` uses `ts-node/register` to transpile on the fly.
-
-Before opening a PR, test your changes with `npm test`. Keep compatibility in mind, as the CLI is
-meant to run on Linux, macOS and Windows. balena CI will run test code on all three platforms, but
-this will only help if you add some test cases for your new code!
-
-## Semantic versioning, commit messages and the ChangeLog
-
-When a pull request is merged, Balena's versionbot / Continuous Integration system takes care of
-automatically creating a new CLI release on both the [npm
-registry](https://www.npmjs.com/package/balena-cli) and the GitHub [releases
-page](https://github.com/balena-io/balena-cli/releases). The release version numbering adheres to
-the [Semantic Versioning's](http://semver.org/) concept of patch, minor and major releases.
-Generally, bug fixes and documentation changes are classed as patch changes, while new features are
-classed as minor changes. If a change breaks backwards compatibility, it is a major change.
-
-A new version entry is also automatically added to the
-[CHANGELOG.md](https://github.com/balena-io/balena-cli/blob/master/CHANGELOG.md) file when a pull
-request is merged. Each pull request corresponds to a single version / release. Each commit in the
-pull request becomes a bullet point entry in the Changelog. The Changelog file should not be
-manually edited.
-
-To support this automation, a commit message should be structured as follows:
-
-```text
-The first line becomes a bullet point in the CHANGELOG file
-
-Optionally, a more detailed description in one or more paragraphs.
-The detailed description can be seen with `git log`, but it is not copied
-to the CHANGELOG file.
-
-Change-type: patch|minor|major
-```
-
-Only the first line of the commit message is copied to the Changelog file. The `Change-type` footer
-must be preceded by a blank line, and indicates the commit's semver change type. When a PR consists
-of multiple commits, the commits may have different change type values. As a whole, the PR will
-produce a release of the "highest" change type. For example, two commits mixing patch and minor
-change types will produce a minor CLI release, while two commits mixing minor and major change
-types will produce a major CLI release.
-
-The commit message is parsed / checked by versionbot with the
-[resin-commit-lint](https://github.com/balena-io-modules/resin-commit-lint#resin-commit-lint)
-package.
-
-Because of the way that the Changelog file is automatically updated from commit messages, which
-become the source of "what's new" for CLI end users, we advocate "meaningful commits" and
-user-focused commit messages. A meaningful commit is one that, in isolation, introduces a fix or
-feature (or part of a fix or feature) that makes sense at the Changelog level, and which leaves the
-CLI in a non-broken state. Sometimes, in the course of preparing a single pull request, a developer
-creates several commits as a way of saving their "work in progress", which may even fail to build
-(e.g. `npm run build` fails), and which is then fixed or undone by further commits in the same PR.
-In this situation, the recommendation is to "squash" or "fixup" the work-in-progress commits into
-fewer, meaningful commits. Interactive rebase is a good tool to achieve this:
-[blog](https://thoughtbot.com/blog/git-interactive-rebase-squash-amend-rewriting-history),
-[docs](https://git-scm.com/book/en/v2/Git-Tools-Rewriting-History).
-
-Mixing multiple distinct features or bug fixes in a single commit is discouraged, because the
-description will likely not fit in the single-line Changelog bullet point and also because it
-makes it harder to review the pull request (especially a large one) and harder to isolate and
-revert individual changes in case a bug is found later on. Create a separate commit for each
-feature / bug fix, or even separate pull requests.
-
-If you need to catch up with changes to the master branch while working on a pull request,
-use rebase instead of merge: [docs](https://git-scm.com/book/en/v2/Git-Branching-Rebasing).
-
-If `package.json` is updated for dependencies listed in the `repo.yml` file (like `balena-sdk`),
-the commit message body should also include a line in the following format:
-```
-Update balena-sdk from 12.0.0 to 12.1.0
-```
-
-This allows versionbot to produce nested Changelog entries (with expandable arrows), pulling in
-commit messages from the upstream repositories. The following npm script can be used to
-automatically produce a commit with a suitable commit message:
-```
-npm run update balena-sdk ^12.1.0
-```
-
-The script will create a new branch (only if `master` is currently checked out), run `npm update`
-with the given target version and commit the `package.json` and `npm-shrinkwrap.json` files. The
-script by default will set the `Change-type` to `patch` or `minor`, depending on the semver change
-of the updated dependency. A `major` change type can specified as an extra argument:
-```
-npm run update balena-sdk ^12.14.0 patch
-npm run update balena-sdk ^13.0.0 major
-```
-
-## Editing documentation files (README, INSTALL, Reference website...)
-
-The `docs/balena-cli.md` file is automatically generated by running `npm run build:doc` (which also
-runs as part of `npm run build`). That file is then pulled by scripts in the
-[balena-io/docs](https://github.com/balena-io/docs/) GitHub repo for publishing at the [CLI
-Documentation page](https://www.balena.io/docs/reference/cli/).
-
-The content sources for the auto generation of `docs/balena-cli.md` are:
-
-* [Selected
-  sections](https://github.com/balena-io/balena-cli/blob/v12.23.0/automation/capitanodoc/capitanodoc.ts#L199-L204)
-  of the README file.
-* The CLI's command documentation in source code (`src/commands/` folder), for example:
-  * `src/commands/push.ts`
-  * `src/commands/env/add.ts`
-
-The README file is manually edited, but subsections are automatically extracted for inclusion in
-`docs/balena-cli.md` by the `getCapitanoDoc()` function in
-[`automation/capitanodoc/capitanodoc.ts`](https://github.com/balena-io/balena-cli/blob/master/automation/capitanodoc/capitanodoc.ts).
-
-**IMPORTANT**
-
-The file [`capitanodoc.ts`](https://github.com/balena-io/balena-cli/blob/master/automation/capitanodoc/capitanodoc.ts) lists 
-commands to generate documentation from. At the moment, it's manually updated and maintained alphabetically. 
-
-To add a new command to be documented, 
-
-1. Find the resource which it is part of or create a new one. 
-2. List the location of the build file 
-3. Make sure to add your files in alphabetical order
-
-Once added, run the command `npm run build` to generate the documentation
-
-The `INSTALL*.md` and `TROUBLESHOOTING.md` files are also manually edited.
-
-## Patches folder
-
-The `patches` folder contains patch files created with the
-[patch-package](https://www.npmjs.com/package/patch-package) tool. Small code changes to
-third-party modules can be made by directly editing Javascript files under the `node_modules`
-folder and then running `patch-package` to create the patch files. The patch files are then
-applied immediately after `npm install`, through the `postinstall` script defined in
-`package.json`.
-
-The subfolders of the `patches` folder are documented in the
-[apply-patches.js](https://github.com/balena-io/balena-cli/blob/master/patches/apply-patches.js)
-script.
-
-To make changes to the patch files under the `patches` folder, **do not edit them directly,**
-not even for a "single character change" because the hash values in the patch files also need
-to be recomputed by `patch-packages`. Instead, edit the relevant files under `node_modules`
-directly, and then run `patch-packages` with the `--patch-dir` option to specify the subfolder
-where the patch should be saved. For example, edit `node_modules/exit-hook/index.js` and then
-run:
-
-```sh
-$ npx patch-package --patch-dir patches/all exit-hook
-```
-
-That said, these kinds of patches should be avoided in favour of creating pull requests
-upstream. Patch files create additional maintenance work over time as the patches need to be
-updated when the dependencies are updated, and they prevent the compounding community benefit
-that sharing fixes upstream have on open source projects like the balena CLI. The typical
-scenario where these patches are used is when the upstream maintainers are unresponsive or
-unwilling to merge the required fixes, the fixes are very small and specific to the balena CLI,
-and creating a fork of the upstream repo is likely to be more long-term effort than maintaining
-the patches.
-
-## Windows
-
-Besides the regular npm installation dependencies, the `npm run build:installer` script
-that produces the `.exe` graphical installer on Windows also requires
-[NSIS](https://sourceforge.net/projects/nsis/) and [MSYS2](https://www.msys2.org/) to be
-installed. Be sure to add `C:\Program Files (x86)\NSIS` to the PATH, so that `makensis`
-is available. MSYS2 is recommended when developing the balena CLI on Windows.
-
-If changes are made to npm scripts in `package.json`, don't assume that a Unix shell like
-bash is available. For example, some Windows shells don't have the `cp` and `rm` commands,
-which is why you'll often find `ncp` and `rimraf` used in `package.json` scripts.
-
-## Updating the 'npm-shrinkwrap.json' file
-
-The `npm-shrinkwrap.json` file is used to control package dependencies, as documented at
-https://docs.npmjs.com/files/shrinkwrap.json.
-
-Changes to `npm-shrinkwrap.json` can be automatically merged by git during operations like
-`rebase`, `pull` and `cherry-pick`, but in some cases this results in suboptimal dependency
-resolution (the `node_modules` folder may end up larger than necessary, with consequences to CLI
-load time too). For this reason, the recommended way to update `npm-shrinkwrap.json` is to run
-`npm install`, possibly alongside `npm dedupe` as well. The following commands can be used to
-fix shrinkwrap issues and optimize the dependencies:
-
-```sh
-git checkout master -- npm-shrinkwrap.json
-rm -rf node_modules
-npm install  # update npm-shrinkwrap.json to satisfy changes to package.json
-npm dedupe   # deduplicate dependencies from npm-shrinkwrap.json
-npm install  # re-add optional dependencies removed by dedupe
-git add npm-shrinkwrap.json  # add it for committing (solve merge errors)
-```
-
-Note that `npm dedupe` should always be followed by `npm install`, as shown above, even if
-`npm install` had already been executed before `npm dedupe`.
-
-Optionally, these steps may be automated by installing the
-[npm-merge-driver](https://www.npmjs.com/package/npm-merge-driver):
-
-```sh
-npx npm-merge-driver install -g
-```
-
-## `fast-boot` and `npm link` - modifying the `node_modules` folder
-
-During development or debugging, it is sometimes useful to temporarily modify the `node_modules`
-folder (with or without making the respective changes to the `npm-shrinkwrap.json` file),
-replacing dependencies with different versions. This can be achieved with the `npm link`
-command, or by manually editing or copying files to the `node_modules` folder.
-
-Unexpected behavior may then be observed because of the CLI's use of the
-[fast-boot2](https://www.npmjs.com/package/fast-boot2) package that caches module resolution.
-`fast-boot2` is configured in `src/fast-boot.ts` to automatically invalidate the cache if
-changes are made to the `package.json` or `npm-shrinkwrap.json` files, but the cache won't
-be automatically invalidated if `npm link` is used or if manual modifications are made to the
-`node_modules` folder. In this situation:
-
-* Manually delete the module cache file (typically `~/.balena/cli-module-cache.json`), or
-* Use the `bin/balena-dev` entry point (instead of `bin/balena`) as it does not activate
-  `fast-boot2`.
-
-## TypeScript and oclif
-
-The CLI currently contains a mix of plain JavaScript and
-[TypeScript](https://www.typescriptlang.org/) code. The goal is to have all code written in
-Typescript, in order to take advantage of static typing and formal programming interfaces.
-The migration towards Typescript is taking place gradually, as part of maintenance work or
-the implementation of new features.
-
-Of historical interest, the CLI was originally written in [CoffeeScript](https://coffeescript.org)
-and used the [Capitano](https://github.com/balena-io/capitano) framework. All CoffeeScript code was
-migrated to either Javascript or Typescript, and Capitano was replaced with oclif. A few file or
-variable names still refer to this legacy, for example `automation/capitanodoc/capitanodoc.ts`.
-
-## Programming style
-
-`npm run build` also runs [balena-lint](https://www.npmjs.com/package/@balena/lint), which automatically
-reformats the code. Beyond that, we have a preference for Javascript promises over callbacks, and for
-`async/await` over `.then()`.
-
-## Common gotchas
-
-One thing that most CLI bugs have in common is the absence of test cases exercising the broken
-code, so writing some test code is a great idea. Having said that, there are also some common
-gotchas to bear in mind:
-
-* Forward slashes ('/') _vs._ backslashes ('\') in file paths. The Node.js
-  [path.sep](https://nodejs.org/docs/latest-v12.x/api/path.html#path_path_sep) variable stores a
-  platform-specific path separator character: the backslash on Windows and the forward slash on
-  Linux and macOS. The
-  [path.join](https://nodejs.org/docs/latest-v12.x/api/path.html#path_path_join_paths) function
-  builds paths using such platform-specific path separator. However:
-  * Note that Windows (kernel, cmd.exe, PowerShell, many applications) accepts ***both*** forward
-    slashes and backslashes as path separators (including mixing them in a path string), so code
-    like `mypath.split(path.sep)` may fail on Windows if `mypath` contains forward slashes. The
-    [path.parse](https://nodejs.org/docs/latest-v12.x/api/path.html#path_path_parse_path) function
-    understands both forward slashes and backslashes on Windows, and the
-    [path.normalize](https://nodejs.org/docs/latest-v12.x/api/path.html#path_path_normalize_path)
-    function will _replace_ forward slashes with backslashes.
-  * In [tar](https://en.wikipedia.org/wiki/Tar_(computing)#File_format) streams sent to the Docker
-    daemon and to balenaCloud, the forward slash is the only acceptable path separator, regardless
-    of the OS where the CLI is running. Therefore, `path.sep` and `path.join` should never be used
-    when handling paths in tar streams! `path.posix.join` may be used instead of `path.join`.
-
-* Avoid using the system shell to execute external commands, for example:  
-  `child_process.exec('ssh "arg1" "arg2"');`  
-  `child_process.spawn('ssh "arg1" "arg2"', { shell: true });`  
-  Besides the usual security concerns of unsanitized strings, another problem is to get argument
-  escaping right because of the differences between the Windows 'cmd.exe' shell and the Unix
-  '/bin/sh'. For example, 'cmd.exe' doesn't recognize single quotes like '/bin/sh', and uses the
-  caret (^) instead of the backslash as the escape character. Bug territory! Most of the time,
-  it is possible to avoid relying on the shell altogether by providing a Javascript array of
-  arguments:  
-  `spawn('ssh', ['arg1', 'arg2'], { shell: false});`  
-  To allow for logging and debugging, the [which](https://www.npmjs.com/package/which) package may
-  be used to get the full path of a command before executing it, without relying on any shell:  
-  `const fullPath = await which('ssh');`  
-  `console.log(fullPath);  # 'C:\WINDOWS\System32\OpenSSH\ssh.EXE'`  
-  `spawn(fullPath, ['arg1', 'arg2'], { shell: false });`
-
-* Avoid the `instanceof` operator when testing against classes/types from external packages
-  (including base classes), because `npm install` may result in multiple versions of the same
-  package being installed (to satisfy declared dependencies) and a false negative may result when
-  comparing an object instance from one package version with a class of another package version
-  (even if the implementations are identical in both packages). For example, once we fixed a bug
-  where the test:  
-  `error instanceof BalenaApplicationNotFound`  
-  changed from true to false because `npm install` added an additional copy of the `balena-errors`
-  package to satisfy a minor `balena-sdk` version update:  
-  `$ find node_modules -name balena-errors`  
-  `node_modules/balena-errors`  
-  `node_modules/balena-sdk/node_modules/balena-errors`  
-  In the case of subclasses of `TypedError`, a string comparison may be used instead:  
-  `error.name === 'BalenaApplicationNotFound'`
-
-## Further debugging notes
-
-* If you need to selectively run specific tests, `it.only` will not work in cases when authorization is required as part of the test cycle.  In order to target specific tests, control execution via `.mocharc.js` instead.  Here is an example of targeting the `deploy` tests.
-
-	replace: `spec: 'tests/**/*.spec.ts',`
-
-	with: `spec: ['tests/auth/*.spec.ts', 'tests/**/deploy.spec.ts'],`

INSTALL-ADVANCED.md

@@ -1,168 +0,0 @@
-# balena CLI Advanced Installation Options
-
-**These are alternative, advanced installation options. Most users would prefer the [recommended,
-streamlined installation
-instructions](https://github.com/balena-io/balena-cli/blob/master/INSTALL.md).**
-
-There are 3 options to choose from to install balena's CLI:
-
-* [Executable Installer](#executable-installer): the easiest method on Windows and macOS, using the
-  traditional graphical desktop application installers.
-* [Standalone tar.gz Package](#standalone-targz-package): these are plain tar.gz files with the balena CLI
-  bundled within. Available for all platforms: Linux, Windows, macOS.
-  Recommended also for scripted installation in CI (continuous integration) environments.
-* [NPM Installation](#npm-installation): recommended for Node.js developers who may be interested
-  in integrating the balena CLI in their existing projects or workflow.
-
-Some specific CLI commands have a few extra installation steps: see section [Additional
-Dependencies](#additional-dependencies).
-
-## Executable Installer
-
-This is the recommended installation option on macOS and Windows. Follow the specific OS
-instructions:
-
-* [Windows](./INSTALL-WINDOWS.md)
-* [macOS](./INSTALL-MAC.md)
-
-> Note regarding WSL ([Windows Subsystem for
-> Linux](https://docs.microsoft.com/en-us/windows/wsl/about))  
-> If you would like to use WSL, follow the [installations instructions for
-> Linux](./INSTALL-LINUX.md) rather than Windows, as WSL consists of a Linux environment.
-
-If you had previously installed the CLI using a standalone tar package, it may be a good idea to
-check your system's `PATH` environment variable for duplicate entries, as the terminal will use the
-entry that comes first. Check the [Standalone tar.gz Package](#standalone-targz-package) instructions
-for how to modify the PATH variable.
-
-By default, the CLI is installed to the following folders:
-
-OS  | Folders
---- | ---
-Windows: | `C:\Program Files\balena-cli\`
-macOS:   | `/usr/local/src/balena-cli/` <br> `/usr/local/bin/balena`
-
-## Standalone tar.gz Package
-
-1. Download the latest tar.gz file from the [releases page](https://github.com/balena-io/balena-cli/releases).
-   Look for a file name that ends with the word "standalone", for example:  
-   `balena-cli-vX.Y.Z-linux-x64-standalone.tar.gz`  ← _also for the Windows Subsystem for Linux_  
-   `balena-cli-vX.Y.Z-macOS-x64-standalone.tar.gz`
-   `balena-cli-vX.Y.Z-windows-x64-standalone.tar.gz`
-
-2. Extract the tar.gz file contents to any folder you choose. The extracted contents will be a `balena` folder containing a `bin` subdirectory.
-
-3. Add the `balena/bin` folder to the system's `PATH` environment variable.
-   See instructions for:
-   [Linux](https://stackoverflow.com/questions/14637979/how-to-permanently-set-path-on-linux-unix) |
-   [macOS](https://www.architectryan.com/2012/10/02/add-to-the-path-on-mac-os-x-mountain-lion/#.Uydjga1dXDg) |
-   [Windows](https://www.computerhope.com/issues/ch000549.htm)
-
-> * If you are using macOS 10.15 or later (Catalina, Big Sur), [check this known issue and
->   workaround](https://github.com/balena-io/balena-cli/issues/2244).
-> * **Linux Alpine** and **Busybox:** the standalone tar.gz package is not currently compatible with
->   these "compact" Linux distributions, because of the alternative C libraries they ship with.
->   For these, consider the [NPM Installation](#npm-installation) option.
-> * Note that moving the `balena/bin/balena` executable out of the extracted `balena` folder on its own
->   (e.g. moving it to `/usr/local/bin/balena`) will **not** work, as it depends on the other
->   folders and files also present in the `balena` folder.
-
-To update the CLI to a new version, download a new release tar.gz file and replace the previous
-installation folder. To uninstall, simply delete the folder and edit the PATH environment variable
-as described above.
-
-## NPM Installation
-
-If you are a Node.js developer, you may wish to install the balena CLI via [npm](https://www.npmjs.com).
-The npm installation involves building native (platform-specific) binary modules, which require
-some development tools to be installed first, as follows.
-
-> **The balena CLI currently requires Node.js version >=20.6.0**
-> **Versions 23 and later are not yet fully supported.**
-
-### Install development tools
-
-#### **Linux or WSL** (Windows Subsystem for Linux)
-
-```sh
-$ sudo apt-get update && sudo apt-get -y install curl python3 git make g++
-$ curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.38.0/install.sh | bash
-$ . ~/.bashrc
-$ nvm install 22
-```
-
-The `curl` command line above uses
-[nvm](https://github.com/nvm-sh/nvm/blob/master/README.md#install--update-script) to install
-Node.js, instead of using `apt-get`. Installing Node.js through `apt-get` is a common source of
-problems from permission errors to conflict with other system packages, and therefore not
-recommended.
-
-#### **macOS**
-
-* Download and install Apple's Command Line Tools from https://developer.apple.com/downloads/
-* Install Node.js through [nvm](https://github.com/nvm-sh/nvm/blob/master/README.md#install--update-script):
-
-```sh
-$ curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.38.0/install.sh | bash
-$ . ~/.bashrc
-$ nvm install 22
-```
-
-#### **Windows** (not WSL)
-
-Install:
-
-  * If you'd like the ability to switch between Node.js versions, install
-- Node.js v22 from the [Nodejs.org releases page](https://nodejs.org/en/download/releases/).
-    [nvm-windows](https://github.com/coreybutler/nvm-windows#node-version-manager-nvm-for-windows)
-    instead.
-* The [MSYS2 shell](https://www.msys2.org/), which provides `git`, `make`, `g++` and more:
-  * `pacman -S git gcc make openssh p7zip`
-  * [Set a Windows environment variable](https://www.onmsft.com/how-to/how-to-set-an-environment-variable-in-windows-10): `MSYS2_PATH_TYPE=inherit`
-  * Note that a bug in the MSYS2 launch script (`msys2_shell.cmd`) makes text-based
-    interactive CLI menus to misbehave. [Check this Github issue for a
-    workaround](https://github.com/msys2/MINGW-packages/issues/1633#issuecomment-240583890).
-* The Windows Driver Kit (WDK), which is needed to compile some native Node modules. It is **not**
-  necessary to install Visual Studio, only the WDK, which is "step 2" in the following guides:
-  * [WDK for Windows 10](https://docs.microsoft.com/en-us/windows-hardware/drivers/download-the-wdk#download-icon-step-2-install-refreshed-wdk-for-windows-10-version-2004)
-  * [WDK for earlier versions of Windows](https://docs.microsoft.com/en-us/windows-hardware/drivers/other-wdk-downloads#step-2-install-the-wdk)
-* The [windows-build-tools](https://www.npmjs.com/package/windows-build-tools) npm package,
-  by running the following command on an [administrator
-  console](https://www.howtogeek.com/194041/how-to-open-the-command-prompt-as-administrator-in-windows-8.1/):  
-  `npm install --global --production windows-build-tools`
-
-### Install the balena CLI
-
-After installing the development tools, install the balena CLI with:
-
-```sh
-$ npm install balena-cli --global --production --unsafe-perm
-```
-
-`--unsafe-perm` is needed when `npm install` is executed as the `root` user (e.g. in a Docker
-container) in order to allow npm scripts like `postinstall` to be executed.
-
-## Additional Dependencies
-
-The `balena device ssh`, `device detect`, `build`, `deploy` and `preload` commands may require
-additional software to be installed. Check the Additional Dependencies sections for each operating
-system:
-
-* [Windows](./INSTALL-WINDOWS.md#additional-dependencies)
-* [macOS](./INSTALL-MAC.md#additional-dependencies)
-* [Linux](./INSTALL-LINUX.md#additional-dependencies)
-
-Where Docker or balenaEngine are required, they may be installed on the local machine (where the
-balena CLI is executed), on a remote server, or on a balenaOS device running a [balenaOS development
-image](https://www.balena.io/docs/reference/OS/overview/2.x/#dev-vs-prod-images). Reasons why this
-may be desirable include:
-
-* To avoid having to install Docker on the development machine / laptop.
-* To take advantage of a more powerful server (CPU, memory).
-* To build or run images "natively" on an ARM device, avoiding the need for QEMU emulation.
-
-To use a remote Docker Engine (daemon) or balenaEngine, specify the remote machine's IP address and
-port number with the `--dockerHost` and `--dockerPort` command-line options. The `preload` command
-has additional requirements because the bind mount feature is used. For more details, see
-`balena help` for each command or the [online
-reference](https://www.balena.io/docs/reference/cli/#cli-command-reference).

INSTALL-LINUX.md

@@ -1,85 +0,0 @@
-# balena CLI Installation Instructions for Linux
-
-These instructions are suitable for most Linux distributions on Intel x86, such as
-Ubuntu, Debian, Fedora, Arch Linux and other glibc-based distributions.
-For the ARM architecture and for Linux distributions not based on glibc, such as
-Alpine Linux, follow the [NPM Installation](./INSTALL-ADVANCED.md#npm-installation)
-method.
-
-Selected operating system: **Linux**
-
-1. Download the latest tar.gz file from the [latest release
-   page](https://github.com/balena-io/balena-cli/releases/latest). Look for a file name that ends
-   with "-standalone.tar.gz", for example:  
-   `balena-cli-vX.Y.Z-linux-x64-standalone.tar.gz`
-
-2. Extract the tar.gz file contents to any folder you choose, for example `/home/james`.
-   The extracted contents will include a `balena/bin` folder.
-
-3. Add that folder (e.g. `/home/james/balena/bin`) to the `PATH` environment variable.
-   Check this [StackOverflow
-   post](https://stackoverflow.com/questions/14637979/how-to-permanently-set-path-on-linux-unix)
-   for instructions. Close and reopen the terminal window so that the changes to `PATH`
-   can take effect.
-
-4. Check that the installation was successful by running the following commands on a
-   terminal window:  
-   * `balena version` - should print the CLI's version
-   * `balena help` - should print a list of available commands
-
-To update the balena CLI to a new version, download a new release tar.gz file and replace the previous
-installation folder. To uninstall, simply delete the folder and edit the PATH environment variable
-as described above.
-
-## sudo configuration
-
-A few CLI commands require execution through sudo, e.g. `sudo balena device detect`.  
-If your Linux distribution has an `/etc/sudoers` file that defines a `secure_path`
-setting, run `sudo visudo` to edit it and add the balena CLI's installation folder to
-the ***pre-existing*** `secure_path` setting, for example:
-
-```text
-Defaults   secure_path="/home/james/balena-cli:<pre-existing entries go here>"
-```
-
-If an `/etc/sudoers` file does not exist, or if it does not contain a pre-existing
-`secure_path` setting, do not change it.
-
-If you also have Docker installed, ensure that it can be executed ***without*** `sudo`, so that
-CLI commands like `balena build` and `balena preload` can also be executed without `sudo`.
-Check Docker's [post-installation
-steps](https://docs.docker.com/engine/install/linux-postinstall/) on how to achieve this.
-
-## Additional Dependencies
-
-### build, deploy
-
-These commands require [Docker](https://docs.docker.com/install/overview/) or
-[balenaEngine](https://www.balena.io/engine/) to be available on a local or remote
-machine. Most users will follow [Docker's installation
-instructions](https://docs.docker.com/install/overview/) to install Docker on the same
-workstation as the balena CLI. The [advanced installation
-options](./INSTALL-ADVANCED.md#additional-dependencies) document describes other possibilities.
-
-### balena device ssh
-
-The `balena device ssh` command requires the `ssh` command-line tool to be available. Most Linux
-distributions will already have it installed. Otherwise, `sudo apt-get install openssh-client`
-should do the trick on Debian or Ubuntu.
-
-The `balena device ssh` command also requires an SSH key to be added to your balena account: see [SSH
-Access documentation](https://www.balena.io/docs/learn/manage/ssh-access/). The `balena key*`
-command set can also be used to list and manage SSH keys: see `balena help -v`.
-
-### balena device detect
-
-The `balena device detect` command requires a multicast DNS (mDNS) service like
-[Avahi](https://en.wikipedia.org/wiki/Avahi_(software)), which is installed by default on most
-desktop Linux distributions. Otherwise, on Debian or Ubuntu, the installation command would be
-`sudo apt-get install avahi-daemon`.
-
-### balena preload
-
-Like the `build` and `deploy` commands, the `preload` command requires Docker, with the additional
-restriction that Docker must be installed on the local machine (because Docker's bind mounting
-feature is used).

INSTALL-MAC.md

@@ -1,74 +0,0 @@
-# balena CLI Installation Instructions for macOS
-
-These instructions are for the recommended installation option. Advanced users may also be
-interested in [advanced installation options](./INSTALL-ADVANCED.md).
-
-Selected operating system: **macOS**
-
-1. Download the installer from the [latest release
-   page](https://github.com/balena-io/balena-cli/releases/latest).
-   Look for a file name that ends with "-installer.pkg":
-   `balena-cli-vX.Y.Z-macOS-x64-installer.pkg`
-
-2. Double click on the downloaded file to run the installer and follow the installer's
-   instructions.
-
-3. Check that the installation was successful:
-   - [Open the Terminal
-   app](https://support.apple.com/en-gb/guide/terminal/apd5265185d-f365-44cb-8b09-71a064a42125/mac).
-   - On the terminal prompt, type `balena version` and hit Enter. It should display
-     the version of the balena CLI that you have installed.
-
-No further steps are required to run most CLI commands. The `balena device ssh`, `build`, `deploy`
-and `preload` commands may require additional software to be installed, as described
-in the next section.
-
-To update the balena CLI, repeat the steps above for the new version.  
-To uninstall it, run the following command on a terminal prompt:
-
-```text
-sudo /usr/local/src/balena-cli/bin/uninstall
-```
-
-## Additional Dependencies
-
-### build and deploy
-
-These commands require [Docker](https://docs.docker.com/install/overview/) or
-[balenaEngine](https://www.balena.io/engine/) to be available on a local or remote
-machine. Most users will follow [Docker's installation
-instructions](https://docs.docker.com/install/overview/) to install Docker on the same
-workstation as the balena CLI. The [advanced installation
-options](./INSTALL-ADVANCED.md#additional-dependencies) document describes other possibilities.
-
-### balena device ssh
-
-The `balena device ssh` command requires the `ssh` command-line tool to be available. To check whether
-it is already installed, run `ssh` on a Terminal window. If it is not yet installed, the options
-include:
-
-* Download the Xcode Command Line Tools from https://developer.apple.com/downloads
-* Or, if you have Xcode installed, open Xcode, choose Preferences → General → Downloads →
-  Components → Command Line Tools → Install.
-* Or, install [Homebrew](https://brew.sh/), then `brew install openssh`
-
-The `balena device ssh` command also requires an SSH key to be added to your balena account: see [SSH
-Access documentation](https://www.balena.io/docs/learn/manage/ssh-access/). The `balena key*`
-command set can also be used to list and manage SSH keys: see `balena help -v`.
-
-### balena preload
-
-Like the `build` and `deploy` commands, the `preload` command requires Docker.
-Preloading balenaOS images for some older device types (like the Raspberry
-Pi 3, but not the Raspberry 4) requires Docker to support the [AUFS storage
-driver](https://docs.docker.com/storage/storagedriver/aufs-driver/). Unfortunately, Docker Desktop
-for Windows and macOS dropped support for the AUFS filesystem in Docker CE versions greater than
-18.06.1. The present workarounds are to either:
-
-* Install the balena CLI on Linux (e.g. Ubuntu) with a virtual machine like VirtualBox.
-  This works because Docker for Linux still supports AUFS. Hint: if using a virtual machine,
-  copy the image file over, rather than accessing it through "file sharing", to avoid errors.
-* Downgrade Docker Desktop to version 18.06.1. Link: [Docker CE for
-  Mac](https://docs.docker.com/docker-for-mac/release-notes/#docker-community-edition-18061-ce-mac73-2018-08-29)
-
-We are working on replacing AUFS with overlay2 in balenaOS images of the affected device types.

INSTALL-WINDOWS.md

@@ -1,73 +0,0 @@
-# balena CLI Installation Instructions for Windows
-
-These instructions are for the recommended installation option. Advanced users may also be
-interested in [advanced installation options](./INSTALL-ADVANCED.md).
-
-Selected operating system: **Windows**
-
-1. Download the installer from the [latest release
-   page](https://github.com/balena-io/balena-cli/releases/latest).
-   Look for a file name that ends with "-installer.exe":  
-   `balena-cli-vX.Y.Z-windows-x64-installer.exe`
-
-2. Double click on the downloaded file to run the installer and follow the installer's
-   instructions.
-
-3. Check that the installation was successful:
-   - Click on the Windows Start Menu, type PowerShell, and then click
-     on Windows PowerShell.
-   - On the command prompt, type `balena version` and hit Enter. It should display
-     the version of the balena CLI that you have installed.
-
-No further steps are required to run most CLI commands. The `balena device ssh`, `device detect`, `build`,
-`deploy` and `preload` commands may require additional software to be installed, as
-described below.
-
-## Additional Dependencies
-
-### build and deploy
-
-These commands require [Docker](https://docs.docker.com/install/overview/) or
-[balenaEngine](https://www.balena.io/engine/) to be available on a local or remote
-machine. Most users will follow [Docker's installation
-instructions](https://docs.docker.com/install/overview/) to install Docker on the same
-workstation as the balena CLI. The [advanced installation
-options](./INSTALL-ADVANCED.md#additional-dependencies) document describes other possibilities.
-
-### balena device ssh
-
-The `balena device ssh` command requires the `ssh` command-line tool to be available. Microsoft started
-distributing an SSH client with Windows 10, which is automatically installed through Windows
-Update. To check whether it is installed, run `ssh` on a Windows Command Prompt or PowerShell. It
-can also be [manually
-installed](https://docs.microsoft.com/en-us/windows-server/administration/openssh/openssh_install_firstuse)
-if needed. For older versions of Windows, there are several ssh/OpenSSH clients provided by 3rd
-parties.
-
-The `balena device ssh` command also requires an SSH key to be added to your balena account: see [SSH
-Access documentation](https://www.balena.io/docs/learn/manage/ssh-access/). The `balena key*`
-command set can also be used to list and manage SSH keys: see `balena help -v`.
-
-### balena device detect
-
-The `balena device detect` command requires a multicast DNS (mDNS) service like Apple's Bonjour.
-Many Windows machines will already have this service installed, as it is bundled in popular
-applications such as Skype (Wikipedia lists [several others](https://en.wikipedia.org/wiki/Bonjour_(software))).
-Otherwise, Bonjour for Windows can be downloaded and installed from: https://support.apple.com/kb/DL999
-
-### balena preload
-
-Like the `build` and `deploy` commands, the `preload` command requires Docker.
-Preloading balenaOS images for some older device types (like the Raspberry
-Pi 3, but not the Raspberry 4) requires Docker to support the [AUFS storage
-driver](https://docs.docker.com/storage/storagedriver/aufs-driver/). Unfortunately, Docker Desktop
-for Windows and macOS dropped support for the AUFS filesystem in Docker CE versions greater than
-18.06.1. The present workarounds are to either:
-
-* Install the balena CLI on Linux (e.g. Ubuntu) with a virtual machine like VirtualBox.
-  This works because Docker for Linux still supports AUFS. Hint: if using a virtual machine,
-  copy the image file over, rather than accessing it through "file sharing", to avoid errors.
-* Downgrade Docker Desktop to version 18.06.1. Link: [Docker CE for
-  Windows](https://docs.docker.com/docker-for-windows/release-notes/#docker-community-edition-18061-ce-win73-2018-08-29)
-
-We are working on replacing AUFS with overlay2 in balenaOS images of the affected device types.

INSTALL.md

@@ -1,12 +0,0 @@
-# balena CLI Installation Instructions
-
-Please select your operating system:
-
-* [Windows](./INSTALL-WINDOWS.md)
-* [macOS](./INSTALL-MAC.md)
-* [Linux](./INSTALL-LINUX.md)
-
-> Note regarding WSL ([Windows Subsystem for
-> Linux](https://docs.microsoft.com/en-us/windows/wsl/about))  
-> If you would like to use WSL, follow the installations instructions for Linux
-> rather than Windows, as WSL consists of a Linux environment.

MIGRATIONS.md

@@ -1,45 +0,0 @@
-## Migrating to balena CLI v22
-
-This guide outlines the changes introduced in balena CLI v22 and provides instructions for when and how to migrate.
-
----
-
-### For Installer Users (Windows .exe, macOS .pkg)
-
-If you are using the Windows executable (.exe) or macOS package (.pkg) installers, **no changes** are required for this update. You can continue to use the installers as before.
-
----
-
-### For npm Installation Users
-
-If you installed balena CLI via npm, **no changes** are required for this update. Your existing installation and update process remains the same.
-
----
-
-### For Standalone Installation Users
-
-Users of the standalone balena CLI will need to make the following adjustments:
-
-1.  **Archive Format Change**: The distribution archive format has changed from `.zip` to `.tar.gz`. You will need to use the `tar` command instead of `unzip` to extract the CLI.
-
-    * **Previous command (v21.x.x and older):**
-        ```bash
-        unzip balena-cli-v21.1.12-linux-x64-standalone.zip
-        ```
-    * **New command (v22.0.0 and newer):**
-        ```bash
-        tar -xzf balena-cli-v22.0.0-linux-x64-standalone.tar.gz
-        ```
-
-2.  **Executable Path Change**: The path to the balena CLI executable within the extracted folder has been updated.
-
-    * **Previous path (v21.x.x and older):**
-        ```
-        balena-cli/balena
-        ```
-    * **New path (v22.0.0 and newer):**
-        ```
-        balena/bin/balena
-        ```
-
-Please update your scripts and any aliases to reflect these changes if you are using the standalone version.

README.md

@@ -1,183 +1,124 @@
-# balena CLI
+Resin CLI
+=========
 
-The official balena Command Line Interface.
+> The official resin.io CLI tool.
 
-[![npm version](https://badge.fury.io/js/balena-cli.svg)](http://badge.fury.io/js/balena-cli)
-[![dependencies](https://david-dm.org/balena-io/balena-cli.svg)](https://david-dm.org/balena-io/balena-cli)
+[![npm version](https://badge.fury.io/js/resin-cli.svg)](http://badge.fury.io/js/resin-cli)
+[![dependencies](https://david-dm.org/resin-io/resin-cli.svg)](https://david-dm.org/resin-io/resin-cli)
+[![Gitter](https://badges.gitter.im/Join%20Chat.svg)](https://gitter.im/resin-io/chat)
 
-## About
+Requisites
+----------
 
-The balena CLI is a Command Line Interface for [balenaCloud](https://www.balena.io/cloud/) or
-[openBalena](https://www.balena.io/open/). It is a software tool available for Windows, macOS and
-Linux, used through a command prompt / terminal window. It can be used interactively or invoked in
-scripts. The balena CLI builds on the [balena API](https://www.balena.io/docs/reference/api/overview/)
-and the [balena SDK](https://www.balena.io/docs/reference/sdk/node-sdk/), and can also be directly
-imported in Node.js applications. The balena CLI is an [open-source project on
-GitHub](https://github.com/balena-io/balena-cli/), and your contribution is also welcome!
+If you want to install the CLI directly through npm, you'll need the below. If this looks difficult,
+we do now have an experimental standalone binary release available, see ['Standalone install'](#standalone-install) below.
 
-## Installation
+- [NodeJS](https://nodejs.org) (>= v4)
+- [Git](https://git-scm.com)
+- The following executables should be correctly installed in your shell environment:
+  - `ssh`: Any recent version of the OpenSSH ssh client (required by `resin sync` and `resin ssh`)
+	- if you need `ssh` to work behind the proxy you also need [`proxytunnel`](http://proxytunnel.sourceforge.net/) installed (available as `proxytunnel` package for Ubuntu, for example)
+  - `rsync`: >= 2.6.9 (required by `resin sync`)
 
-Check the [balena CLI installation instructions on
-GitHub](https://github.com/balena-io/balena-cli/blob/master/INSTALL.md).
+##### Windows Support
 
-Note for v22 Migration: If you are upgrading to balena CLI v22 from a previous standalone installation, please [see the v22 Migration Guide](https://github.com/balena-io/balena-cli/blob/master/MIGRATIONS.md) for installation changes.
+Before installing resin-cli, you'll need a working node-gyp environment. If you don't already have one you'll see native module build errors during installation. To fix this, run `npm install -g --production windows-build-tools` in an administrator console (available as 'Command Prompt (Admin)' when pressing windows+x in Windows 7+).
 
-## Choosing a shell (command prompt/terminal)
+`resin sync` and `resin ssh` have not been thoroughly tested on the standard Windows cmd.exe shell. We recommend using bash (or a similar) shell, like Bash for Windows 10 or [Git for Windows](https://git-for-windows.github.io/).
 
-On **Windows,** the standard Command Prompt (`cmd.exe`) and
-[PowerShell](https://docs.microsoft.com/en-us/powershell/scripting/getting-started/getting-started-with-windows-powershell?view=powershell-6)
-are supported. Alternative shells include:
+If you still want to use `cmd.exe` you will have to use a package manager like MinGW or chocolatey. For MinGW the steps are:
 
-* [MSYS2](https://www.msys2.org/):
-  * Install additional packages with the command:  
-    `pacman -S git gcc make openssh p7zip`
-  * [Set a Windows environment variable](https://www.onmsft.com/how-to/how-to-set-an-environment-variable-in-windows-10): `MSYS2_PATH_TYPE=inherit`
-  * Note that a bug in the MSYS2 launch script (`msys2_shell.cmd`) makes text-based interactive CLI
-    menus to break. [Check this Github issue for a
-    workaround](https://github.com/msys2/MINGW-packages/issues/1633#issuecomment-240583890).
+1. Install [MinGW](http://www.mingw.org).
+2. Install the `msys-rsync` and `msys-openssh` packages.
+3. Add MinGW to the `%PATH%` if this hasn't been done by the installer already. The location where the binaries are places is usually `C:\MinGW\msys\1.0\bin`, but it can vary if you selected a different location in the installer.
+4. Copy your SSH keys to `%homedrive%%homepath\.ssh`.
+5. If you need `ssh` to work behind the proxy you also need to install [proxytunnel](http://proxytunnel.sourceforge.net/)
 
-* [MSYS](http://www.mingw.org/wiki/MSYS)
-* [Git for Windows](https://git-for-windows.github.io/)
-  * During the installation, you will be prompted to choose between _"Use MinTTY"_ and _"Use
-    Windows' default console window"._ Choose the latter, because of the same [MSYS2
-    bug](https://github.com/msys2/MINGW-packages/issues/1633) mentioned above (Git for Windows
-    actually uses MSYS2). For a screenshot, check this
-    [comment](https://github.com/balena-io/balena-cli/issues/598#issuecomment-556513098).
+Getting Started
+---------------
 
-* Microsoft's [Windows Subsystem for Linux](https://docs.microsoft.com/en-us/windows/wsl/about)
-  (WSL). In this case, a Linux distribution like Ubuntu is installed via the Microsoft Store, and a
-  balena CLI release **for Linux** should be selected. See
-  [FAQ](https://github.com/balena-io/balena-cli/blob/master/TROUBLESHOOTING.md) for using the
-  balena CLI with WSL and Docker Desktop for Windows.
+### NPM install
 
-On **macOS** and **Linux,** the standard terminal window is supported. Optionally, `bash` command
-auto completion may be enabled by copying the
-[balena_comp](https://github.com/balena-io/balena-cli/blob/master/completion/balena-completion.bash)
-file to your system's `bash_completion` directory: check [Docker's command completion
-guide](https://docs.docker.com/compose/completion/) for system setup instructions.
+If you've got all the requirements above, you should be able to install the CLI directly from npm. If not,
+or if you have any trouble with this, please try the new standalone install steps just below.
 
-## Logging in
-
-Several CLI commands require access to your balenaCloud account, for example in order to push a
-new release to your fleet. Those commands require creating a CLI login session by running:
+This might require elevated privileges in some environments.
 
 ```sh
-$ balena login
+$ npm install --global --production resin-cli
 ```
 
-## Proxy support
+### Standalone install
 
-HTTP(S) proxies can be configured through any of the following methods, in precedence order
-(from higher to lower):
+If you don't have node or a working pre-gyp environment, you can still install the CLI as a standalone
+binary. **This is in experimental and may not work perfectly yet in all environments**, but it seems to work
+well in initial cross-platform testing, so it may be useful, and we'd love your feedback if you hit any issues.
 
-* The `BALENARC_PROXY` environment variable in URL format, with protocol (`http` or `https`),
-  host, port and optionally basic auth. Examples:
-  * `export BALENARC_PROXY='https://bob:secret@proxy.company.com:12345'`
-  * `export BALENARC_PROXY='http://localhost:8000'`
+To install the CLI as a standalone binary:
 
-* The `proxy` setting in the [CLI config
-  file](https://www.npmjs.com/package/balena-settings-client#documentation). It may be:
-  * A string in URL format, e.g. `proxy: 'http://localhost:8000'`
-  * An object in the format:
-    ```yaml
-    proxy:
-        protocol: 'http'
-        host: 'proxy.company.com'
-        port: 12345
-        proxyAuth: 'bob:secret'
-    ```
+* Download the latest zip for your OS from https://github.com/resin-io/resin-cli/releases.
+* Extract the contents, putting the `resin-cli` folder somewhere appropriate for your system (e.g. `C:/resin-cli`, `/usr/local/lib/resin-cli`, etc).
+* Add the `resin-cli` folder to your `PATH`. (
+[Windows instructions](https://www.computerhope.com/issues/ch000549.htm),
+[Linux instructions](https://stackoverflow.com/questions/14637979/how-to-permanently-set-path-on-linux-unix),
+[OSX instructions](https://stackoverflow.com/questions/22465332/setting-path-environment-variable-in-osx-permanently))
+* Running `resin` in a fresh command line should print the resin CLI help.
 
-* The `HTTPS_PROXY` and/or `HTTP_PROXY` environment variables, in the same URL format as
-  `BALENARC_PROXY`.
+To update in future, simply download a new release and replace the extracted folder.
 
-### Proxy setup for balena device ssh
+Have any problems, or see any unexpected behaviour? Please file an issue!
 
-In order to work behind a proxy server, the `balena device ssh` command requires the
-[`proxytunnel`](http://proxytunnel.sourceforge.net/) package (command-line tool) to be installed.
-`proxytunnel` is available for Linux distributions like Ubuntu/Debian (`apt install proxytunnel`),
-and for macOS through [Homebrew](https://brew.sh/). Windows support is limited to the [Windows
-Subsystem for Linux](https://docs.microsoft.com/en-us/windows/wsl/about) (e.g., by installing
-Ubuntu through the Microsoft App Store).
+### Login
 
-Ensure that the proxy server is configured to allow proxy requests to ssh port 22, using
-SSL encryption. For example, in the case of the [Squid](http://www.squid-cache.org/) proxy
-server, it should be configured with the following rules in the `squid.conf` file:  
-`acl SSL_ports port 22`  
-`acl Safe_ports port 22`  
-
-### Proxy exclusion
-
-The `BALENARC_NO_PROXY` variable may be used to exclude specified destinations from proxying.
-
-> * This feature requires CLI version 11.30.8 or later. In the case of the npm [installation
->   option](https://github.com/balena-io/balena-cli/blob/master/INSTALL.md), it also requires
->   Node.js version 10.16.0 or later.
-> * To exclude a `balena device ssh` target from proxying (IP address or `.local` hostname), the
->   `--noproxy` option should be specified in addition to the `BALENARC_NO_PROXY` variable.
-
-By default (if `BALENARC_NO_PROXY` is not defined), all [private IPv4
-addresses](https://en.wikipedia.org/wiki/Private_network) and `'*.local'` hostnames are excluded
-from proxying. Other hostnames that resolve to private IPv4 addresses are **not** excluded by
-default, because matching takes place before name resolution.
-
-`localhost` and `127.0.0.1` are always excluded from proxying, regardless of the value of
-BALENARC_NO_PROXY.
-
-The format of the `BALENARC_NO_PROXY` environment variable is a comma-separated list of patterns
-that are matched against hostnames or IP addresses. For example:
-
-```
-export BALENARC_NO_PROXY='*.local,dev*.mycompany.com,192.168.*'
+```sh
+$ resin login
 ```
 
-Matched patterns are excluded from proxying. Wildcard expressions are documented at
-[matcher](https://www.npmjs.com/package/matcher#usage). Matching takes place _before_ name
-resolution, so a pattern like `'192.168.*'` will **not** match a hostname that resolves to an IP
-address like `192.168.1.2`.
+_(Typically useful, but not strictly required for all commands)_
 
-## Command reference documentation
+### Run commands
 
-The full CLI command reference is available [on the web](https://www.balena.io/docs/reference/cli/
-) or by running `balena help --verbose`.
+Take a look at the full command documentation at [https://docs.resin.io/tools/cli/](https://docs.resin.io/tools/cli/#table-of-contents
+), or by running `resin help`.
 
-## Support, FAQ and troubleshooting
+---
 
-To learn more, troubleshoot issues, or to contact us for support:
+Plugins
+-------
 
-* Check the [masterclass tutorials](https://www.balena.io/docs/learn/more/masterclasses/overview/)
-* Check our [FAQ / troubleshooting document](https://github.com/balena-io/balena-cli/blob/master/TROUBLESHOOTING.md)
-* Ask us a question in the [balena forums](https://forums.balena.io/c/product-support)
+The Resin CLI can be extended with plugins to automate laborious tasks and overall provide a better experience when working with Resin.io. Check the [plugin development tutorial](https://github.com/resin-io/resin-plugin-hello) to learn how to build your own!
 
-For CLI bug reports or feature requests, check the
-[CLI GitHub issues](https://github.com/balena-io/balena-cli/issues/).
+FAQ
+---
 
-## Deprecation policy
+### Where is my configuration file?
 
-The balena CLI uses [semver versioning](https://semver.org/), with the concepts
-of major, minor and patch version releases.
+The per-user configuration file lives in `$HOME/.resinrc.yml` or `%UserProfile%\_resinrc.yml`, in Unix based operating systems and Windows respectively.
 
-The latest release of a major version of the balena CLI will remain compatible with
-the balenaCloud backend services for at least one year from the date when the
-following major version is released. For example, balena CLI v11.36.0, as the
-latest v11 release, would remain compatible with the balenaCloud backend for one
-year from the date when v12.0.0 was released.
+The Resin CLI also attempts to read a `resinrc.yml` file in the current directory, which takes precedence over the per-user configuration file.
 
-Half way through to that period (6 months after the release of the next major
-version), older major versions of the balena CLI will start printing a deprecation
-warning message when it is used interactively (when `stderr` is attached to a TTY
-device file). At the end of that period, older major versions will exit with an
-error message unless the `--unsupported` flag is used.  This behavior was
-introduced in CLI version 12.47.0 and is also documented by `balena help`.
-To take advantage of the latest backend features and ensure compatibility, users
-are encouraged to regularly update the balena CLI to the latest version.
+### How do I point the Resin CLI to staging?
 
-## Contributing (including editing documentation files)
+The easiest way is to set the `RESINRC_RESIN_URL=resinstaging.io` environment variable.
 
-Please have a look at the [CONTRIBUTING.md](./CONTRIBUTING.md) file for some guidance before
-submitting a pull request or updating documentation (because some files are automatically
-generated). Thank you for your help and interest!
+Alternatively, you can edit your configuration file and set `resinUrl: resinstaging.io` to persist this setting.
 
-## License
+### How do I make the Resin CLI persist data in another directory?
 
-The project is licensed under the [Apache 2.0 License](https://www.apache.org/licenses/LICENSE-2.0).
-A copy is also available in the LICENSE file in this repository.
+The Resin CLI persists your session token, as well as cached images in `$HOME/.resin` or `%UserProfile%\_resin`.
+
+Pointing the Resin CLI to persist data in another location is necessary in certain environments, like a server, where there is no home directory, or a device running resinOS, which erases all data after a restart.
+
+You can accomplish this by setting `RESINRC_DATA_DIRECTORY=/opt/resin` or adding `dataDirectory: /opt/resin` to your configuration file, replacing `/opt/resin` with your desired directory.
+
+Support
+-------
+
+If you're having any problems, check our [troubleshooting guide](https://github.com/resin-io/resin-cli/blob/master/TROUBLESHOOTING.md) and if your problem is not addressed there, please [raise an issue](https://github.com/resin-io/resin-cli/issues/new) on GitHub and the resin.io team will be happy to help.
+
+You can also get in touch with us in the resin.io [forums](https://forums.resin.io/).
+
+License
+-------
+
+The project is licensed under the Apache 2.0 license.

TROUBLESHOOTING.md

@@ -1,131 +1,59 @@
-# balena CLI FAQ & Troubleshooting
+Troubleshooting
+===============
 
-## Where is the balena CLI's configuration file located?
+This document contains common issues related to the Resin CLI, and how to fix them.
 
-The per-user configuration file lives in `$HOME/.balenarc.yml` or `%UserProfile%\_balenarc.yml`, in
-Unix based operating systems and Windows respectively.
+### After burning to an sdcard, my device doesn't boot
 
-The balena CLI also attempts to read a `balenarc.yml` file in the current directory, which takes
-precedence over the per-user configuration file.
+- The downloaded image is not complete (download was interrupted).
 
-## How do I point the balena CLI to the staging environment?
+Please clean the cache (`%HOME/.resin/cache` or `C:\Users\<user>\_resin\cache`) and run the command again. In the future, the CLI will check that the image is not complete and clean the cache for you.
 
-Set the `BALENARC_BALENA_URL=balena-staging.com` environment variable, or add
-`balenaUrl: balena-staging.com` to the balena CLI's configuration file.
+### I get a permission error when burning to an sdcard
 
-## How do I make the balena CLI persist data in another directory?
+- The SDCard is locked.
 
-The balena CLI persists the session token, as well as cached assets, to `$HOME/.balena` or
-`%UserProfile%\_balena`. This directory can be changed by setting an environment variable,
-`BALENARC_DATA_DIRECTORY=/opt/balena`, or by adding `dataDirectory: /opt/balena` to the CLI's
-configuration file, replacing `/opt/balena` with the desired directory.
+### I get EINVAL errors on Cygwin
 
-## After burning to an SD card, my device doesn't boot
-
-Check whether the downloaded image is incomplete (download was interrupted) or corrupted.
-
-Try clearing the cache (`%HOME/.balena/cache` or `C:\Users\<user>\_balena\cache`) and running the
-command again.
-
-## I get a permission error when burning to an SD card
-
-Check whether the SD card is locked (a physical switch on the side of the card).
-
-## I get `connect ETIMEDOUT` with `balena device tunnel`
-
-Please update the CLI to the latest version. This issue was fixed in v12.38.5.
-For more details, see: https://github.com/balena-io/balena-cli/issues/2172
-
-## I get EINVAL errors on Cygwin
-
-The errors may look something like this:
+The errors look something like this:
 
 ```
 net.js:156
     this._handle.open(options.fd);
                  ^
 Error: EINVAL, invalid argument
+  at new Socket (net.js:156:18)
+  at process.stdin (node.js:664:19)
+  at Object.Interface.createInterface (C:\cygwin\home\Juan Cruz Viotti\Projects\resin-cli\node_modules\inquirer\node_modules\readline2\index.js:31:43)
+  at PromptUI.UI (C:\cygwin\home\Juan Cruz Viotti\Projects\resin-cli\node_modules\inquirer\lib\ui\baseUI.js:23:40)
+  at new PromptUI (C:\cygwin\home\Juan Cruz Viotti\Projects\resin-cli\node_modules\inquirer\lib\ui\prompt.js:26:8)
+  at Object.promptModule [as prompt] (C:\cygwin\home\Juan Cruz Viotti\Projects\resin-cli\node_modules\inquirer\lib\inquirer.js:27:14)
 ```
 
-Some interactive widgets don't work on `Cygwin`. On Windows, PowerShell or `cmd.exe` are better
-supported. Alternative shells are [listed in the README
-file](./README.md#choosing-a-shell-command-promptterminal).
+- Some interactive widgets don't work on `Cygwin`. If you're running Windows, it's preferrable that you use `cmd.exe`, as `Cygwin` is [not official supported by Node.js](https://github.com/chjj/blessed/issues/56#issuecomment-42671945).
 
-## I get `Invalid MBR boot signature` when configuring a device
+### I get `Invalid MBR boot signature` when configuring a device
 
 This error, accompanied with something like: `Expected 0xAA55, but saw 0x29FE` usually indicates a corrupted device operating system image in the cache, due to bad a internet connection during the download process.
 
 Try clearing the cache with the following command and trying again:
 
 ```sh
-$ rm -rf $HOME/.balena/cache
+$ rm -rf $HOME/.resin/cache
 ```
 
 Or in Windows:
 
 ```sh
-> del /s /q %UserProfile%\_balena\cache
+> del /s /q %UserProfile%\_resin\cache
 ```
 
-## I get `EACCES: permission denied` when logging in
+### I get `EACCES: permission denied` when logging in
 
-The balena CLI stores the session token in `$HOME/.balena` or `C:\Users\<user>\_balena` in UNIX based
-operating systems and Windows respectively. This error usually indicates that the user doesn't have
-permissions over that directory, which can happen if the CLI was executed as the `root` user.
+The Resin CLI stores the session token in `$HOME/.resin` or `C:\Users\<user>\_resin` in UNIX based operating systems and Windows respectively. This error usually indicates that the user doesn't have permissions over that directory, which can happen if you ran the Resin CLI as `root`, and thus the directory got owned by him.
 
 Try resetting the ownership by running:
 
 ```sh
-$ sudo chown -R <user> $HOME/.balena
+$ sudo chown -R <user> $HOME/.resin
 ```
-
-## Broken line wrapping / cursor behavior with `balena device ssh`
-
-Users sometimes come across broken line wrapping or cursor behavior in text terminals, for example
-when long command lines are typed in a `balena device ssh` session, or when using text editors like `vim`
-or `nano`. This is not something specific to the balena CLI, being also a commonly reported issue
-with standard remote terminal tools like `ssh` or `telnet`.  It is often a remote shell
-configuration issue (files like `/etc/profile`, `~/.bash_profile`, `~/.bash_login`, `~/.profile`
-and the like on the remote machine), including UTF-8 misconfiguration, the use of unsupported ASCII
-control characters in shell prompt formatting (e.g. the `$PS1` env var) or the output of tools or
-log files that use colored text. The issue can sometimes be fixed by simply resizing the client
-terminal window, or by running one or more of the following commands on the shell:
-
-```sh
-export TERMINAL=linux
-stty sane
-shopt -s checkwinsize
-bind 'set horizontal-scroll-mode off'
-```
-
-Terminal multiplexer tools like GNU `screen` or `tmux` are sometimes reported to fix the issues, though at other times they are reported as the _cause_ of the problem. They have their own configuration files to take into account.
-
-Further reference:
-* https://stackoverflow.com/questions/1133031/shell-prompt-line-wrapping-issue
-* https://superuser.com/questions/46948/any-way-to-fix-screens-mishandling-of-line-wrap-maybe-only-terminal-app
-* https://unix.stackexchange.com/questions/105958/terminal-prompt-not-wrapping-correctly
-* https://unix.stackexchange.com/questions/529377/terminal-long-line-wrapping
-* https://github.com/microsoft/WSL/issues/1436
-
-If nothing seems to help, consider also using a different client-side terminal application:
-* Linux: xterm, KDE Konsole, GNOME Terminal
-* Mac: Terminal, iTerm2
-* Windows: PowerShell, PuTTY, WSL (Windows Subsystem for Linux)
-
-## "Docker seems to be unavailable" error when using Windows Subsystem for Linux (WSL)
-
-When running on WSL, the recommendation is to install a CLI release for Linux, like the standalone
-tar.gz package for Linux. However, commands like "balena build" will, by default, attempt to reach the
-Docker daemon at the Unix socket path `/var/run/docker.sock`, while Docker Desktop for Windows uses
-a Windows named pipe at `//./pipe/docker_engine` (which the Linux CLI on WSL cannot use). A
-solution is:
-
-- Open the Docker Desktop for Windows settings panel and tick the checkbox _"Expose daemon on tcp://localhost:2375 without TLS"._
-- On the WSL command line, set an env var:  
-`export DOCKER_HOST=tcp://localhost:2375`  
-Alternatively, use the command-line options `-h 127.0.0.1 -p 2375` for commands like `balena build` and `balena deploy`.
-
-Further reference:
-
-- https://techcommunity.microsoft.com/t5/Containers/WSL-Interoperability-with-Docker/ba-p/382405
-- https://forums.docker.com/t/wsl-and-docker-for-windows-cannot-connect-to-the-docker-daemon-at-tcp-localhost-2375-is-the-docker-daemon-running/63571/12

appveyor.yml

@@ -0,0 +1,34 @@
+# appveyor file
+# http://www.appveyor.com/docs/appveyor-yml
+
+init:
+  - git config --global core.autocrlf input
+
+cache:
+  - C:\Users\appveyor\.node-gyp
+  - '%AppData%\npm-cache'
+
+matrix:
+  fast_finish: true
+
+# what combinations to test
+environment:
+  matrix:
+    - nodejs_version: 6
+
+install:
+  - ps: Install-Product node $env:nodejs_version x64
+  - npm install -g npm@4
+  - set PATH=%APPDATA%\npm;%PATH%
+  - npm install
+
+build: off
+
+test_script:
+  - node --version
+  - npm --version
+  - cmd: npm test
+
+deploy_script:
+  - IF "%APPVEYOR_REPO_TAG%" == "true" (npm run release)
+  - IF NOT "%APPVEYOR_REPO_TAG%" == "true" (echo 'Not tagged, skipping deploy')

automation/build-bin.ts

@@ -1,357 +1,34 @@
-/**
- * @license
- * Copyright 2019 Balena Ltd.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *    http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-import { run as oclifRun } from '@oclif/core';
-import { exec, execFile } from 'child_process';
-import type { Stats } from 'fs';
-import * as fs from 'fs-extra';
-import * as klaw from 'klaw';
 import * as path from 'path';
-import * as rimraf from 'rimraf';
-import { promisify } from 'util';
-import { notarize } from '@electron/notarize';
+import * as fs from 'fs-extra';
+import * as filehound from 'filehound';
+import { exec as execPkg } from 'pkg';
 
-import { loadPackageJson, ROOT, whichSpawn } from './utils';
+const ROOT = path.join(__dirname, '..');
 
-const execFileAsync = promisify(execFile);
-const execAsync = promisify(exec);
-const rimrafAsync = promisify(rimraf);
+console.log('Building package...\n');
 
-export const packageJSON = loadPackageJson();
-export const version = 'v' + packageJSON.version;
-const arch = process.arch;
+execPkg([
+	'--target', 'host',
+	'--output', 'build-bin/resin',
+	'package.json'
+]).then(() => fs.copy(
+	path.join(ROOT, 'node_modules', 'opn', 'xdg-open'),
+	path.join(ROOT, 'build-bin', 'xdg-open')
+)).then(() => {
+	return filehound.create()
+		.paths(path.join(ROOT, 'node_modules'))
+		.ext(['node', 'dll'])
+		.find();
+}).then((nativeExtensions) => {
+	console.log(`\nCopying to build-bin:\n${nativeExtensions.join('\n')}`);
 
-function dPath(...paths: string[]) {
-	return path.join(ROOT, 'dist', ...paths);
-}
-
-interface PathByPlatform {
-	[platform: string]: string;
-}
-
-const getOclifInstallersOriginalNames = async (): Promise<PathByPlatform> => {
-	const { stdout } = await execAsync('git rev-parse --short HEAD');
-	const sha = stdout.trim();
-	return {
-		darwin: dPath('macos', `balena-${version}-${sha}-${arch}.pkg`),
-		win32: dPath('win32', `balena-${version}-${sha}-${arch}.exe`),
-	};
-};
-
-const renamedOclifInstallers: PathByPlatform = {
-	darwin: dPath(`balena-cli-${version}-macOS-${arch}-installer.pkg`),
-	win32: dPath(`balena-cli-${version}-windows-${arch}-installer.exe`),
-};
-
-const getOclifStandaloneOriginalNames = async (): Promise<PathByPlatform> => {
-	const { stdout } = await execAsync('git rev-parse --short HEAD');
-	const sha = stdout.trim();
-	return {
-		linux: dPath(`balena-${version}-${sha}-linux-${arch}.tar.gz`),
-		darwin: dPath(`balena-${version}-${sha}-darwin-${arch}.tar.gz`),
-		win32: dPath(`balena-${version}-${sha}-win32-${arch}.tar.gz`),
-	};
-};
-
-const renamedOclifStandalone: PathByPlatform = {
-	linux: dPath(`balena-cli-${version}-linux-${arch}-standalone.tar.gz`),
-	darwin: dPath(`balena-cli-${version}-macOS-${arch}-standalone.tar.gz`),
-	win32: dPath(`balena-cli-${version}-windows-${arch}-standalone.tar.gz`),
-};
-
-export async function signFilesForNotarization() {
-	console.log('Signing files for notarization');
-	// If signFilesForNotarization is called on the test CI environment (which will not set CSC_LINK)
-	// then we skip the signing process.
-	if (process.platform !== 'darwin' || !process.env.CSC_LINK) {
-		console.log('Skipping signing for notarization');
-		return;
-	}
-	console.log('Deleting unneeded zip files...');
-	await new Promise((resolve, reject) => {
-		klaw('node_modules/')
-			.on('data', (item: { path: string; stats: Stats }) => {
-				if (!item.stats.isFile()) {
-					return;
-				}
-				if (path.basename(item.path).endsWith('.node.bak')) {
-					console.log('Removing pkg .node.bak file', item.path);
-					fs.unlinkSync(item.path);
-				}
-				if (
-					path.basename(item.path).endsWith('.zip') &&
-					path.dirname(item.path).includes('test')
-				) {
-					console.log('Removing zip', item.path);
-					fs.unlinkSync(item.path);
-				}
-			})
-			.on('end', resolve)
-			.on('error', reject);
+	return nativeExtensions.map((extPath) => {
+		return fs.copy(
+			extPath,
+			extPath.replace(
+				path.join(ROOT, 'node_modules'),
+				path.join(ROOT, 'build-bin')
+			)
+		);
 	});
-	// Sign all .node files first
-	console.log('Signing .node files...');
-	await new Promise((resolve, reject) => {
-		klaw('node_modules/')
-			.on('data', async (item: { path: string; stats: Stats }) => {
-				if (!item.stats.isFile()) {
-					return;
-				}
-				if (path.basename(item.path).endsWith('.node')) {
-					console.log('running command:', 'codesign', [
-						'-d',
-						'-f',
-						'-s',
-						'Developer ID Application: Balena Ltd (66H43P8FRG)',
-						item.path,
-					]);
-					await whichSpawn('codesign', [
-						'-d',
-						'-f',
-						'-s',
-						'Developer ID Application: Balena Ltd (66H43P8FRG)',
-						item.path,
-					]);
-				}
-			})
-			.on('end', resolve)
-			.on('error', reject);
-	});
-	console.log('Signing other binaries...');
-	console.log('running command:', 'codesign', [
-		'-d',
-		'-f',
-		'--options=runtime',
-		'-s',
-		'Developer ID Application: Balena Ltd (66H43P8FRG)',
-		'node_modules/denymount/bin/denymount',
-	]);
-	await whichSpawn('codesign', [
-		'-d',
-		'-f',
-		'--options=runtime',
-		'-s',
-		'Developer ID Application: Balena Ltd (66H43P8FRG)',
-		'node_modules/denymount/bin/denymount',
-	]);
-	console.log('running command:', 'codesign', [
-		'-d',
-		'-f',
-		'--options=runtime',
-		'-s',
-		'Developer ID Application: Balena Ltd (66H43P8FRG)',
-		'node_modules/macmount/bin/macmount',
-	]);
-	await whichSpawn('codesign', [
-		'-d',
-		'-f',
-		'--options=runtime',
-		'-s',
-		'Developer ID Application: Balena Ltd (66H43P8FRG)',
-		'node_modules/macmount/bin/macmount',
-	]);
-}
-
-export async function buildStandalone() {
-	console.log(`Building standalone tarball for CLI ${version}`);
-	fs.rmSync('./tmp', { recursive: true, force: true });
-	fs.rmSync('./dist', { recursive: true, force: true });
-	fs.mkdirSync('./dist');
-	try {
-		let packOpts = ['-r', ROOT, '--no-xz'];
-		if (process.platform === 'darwin') {
-			packOpts = packOpts.concat('--targets', `darwin-${arch}`);
-		} else if (process.platform === 'win32') {
-			packOpts = packOpts.concat('--targets', 'win32-x64');
-		} else if (process.platform === 'linux') {
-			packOpts = packOpts.concat('--targets', `linux-${arch}`);
-		}
-
-		console.log(`Building oclif installer for CLI ${version}`);
-		const packCmd = `pack:tarballs`;
-		console.log('=======================================================');
-		console.log(`oclif ${packCmd} ${packOpts.join(' ')}`);
-		console.log(`cwd="${process.cwd()}" ROOT="${ROOT}"`);
-		console.log('=======================================================');
-		const oclifPath = path.join(ROOT, 'node_modules', 'oclif');
-		await oclifRun([packCmd].concat(...packOpts), oclifPath);
-		await renameStandalone();
-
-		console.log(`Standalone tarball package build completed`);
-	} catch (error) {
-		console.error(`Error creating or testing standalone tarball package`);
-		throw error;
-	}
-}
-
-async function renameInstallers() {
-	const oclifInstallers = await getOclifInstallersOriginalNames();
-	if (await fs.pathExists(oclifInstallers[process.platform])) {
-		await fs.rename(
-			oclifInstallers[process.platform],
-			renamedOclifInstallers[process.platform],
-		);
-	}
-}
-
-async function renameStandalone() {
-	const oclifStandalone = await getOclifStandaloneOriginalNames();
-	if (await fs.pathExists(oclifStandalone[process.platform])) {
-		await fs.rename(
-			oclifStandalone[process.platform],
-			renamedOclifStandalone[process.platform],
-		);
-	}
-}
-
-/**
- * If the CSC_LINK and CSC_KEY_PASSWORD env vars are set, digitally sign the
- * executable installer using Microsoft SignTool.exe (Sign Tool)
- * https://learn.microsoft.com/en-us/dotnet/framework/tools/signtool-exe
- */
-async function signWindowsInstaller() {
-	if (process.env.SM_CODE_SIGNING_CERT_SHA1_HASH) {
-		const exeName = (await getOclifInstallersOriginalNames())[process.platform];
-		console.log(`Signing installer "${exeName}"`);
-		// trust ...
-		await execFileAsync('signtool.exe', [
-			'sign',
-			'-sha1',
-			process.env.SM_CODE_SIGNING_CERT_SHA1_HASH,
-			'-tr',
-			process.env.TIMESTAMP_SERVER || 'http://timestamp.comodoca.com',
-			'-td',
-			'SHA256',
-			'-fd',
-			'SHA256',
-			'-d',
-			`balena-cli ${version}`,
-			exeName,
-		]);
-		// ... but verify
-		await execFileAsync('signtool.exe', ['verify', '-pa', '-v', exeName]);
-	} else {
-		console.log(
-			'Skipping installer signing step because CSC_* env vars are not set',
-		);
-	}
-}
-
-/**
- * Wait for Apple Installer Notarization to continue
- */
-async function notarizeMacInstaller(): Promise<void> {
-	const teamId = process.env.XCODE_APP_LOADER_TEAM_ID || '66H43P8FRG';
-	const appleId =
-		process.env.XCODE_APP_LOADER_EMAIL || 'accounts+apple@balena.io';
-	const appleIdPassword = process.env.XCODE_APP_LOADER_PASSWORD;
-	const appPath = (await getOclifInstallersOriginalNames())[process.platform];
-	console.log(`Notarizing file "${appPath}"`);
-
-	if (appleIdPassword && teamId) {
-		await notarize({
-			tool: 'notarytool',
-			teamId,
-			appPath,
-			appleId,
-			appleIdPassword,
-		});
-	}
-}
-
-/**
- * Run the `oclif pack:win` or `pack:macos` command (depending on the value
- * of process.platform) to generate the native installers (which end up under
- * the 'dist' folder). There are some harcoded options such as selecting only
- * 64-bit binaries under Windows.
- */
-export async function buildOclifInstaller() {
-	let packOS = '';
-	let packOpts = ['-r', ROOT];
-	if (process.platform === 'darwin') {
-		packOS = 'macos';
-		packOpts = packOpts.concat('--targets', `darwin-${arch}`);
-	} else if (process.platform === 'win32') {
-		packOS = 'win';
-		packOpts = packOpts.concat('--targets', 'win32-x64');
-	}
-	if (packOS) {
-		console.log(`Building oclif installer for CLI ${version}`);
-		const packCmd = `pack:${packOS}`;
-		const dirs = [path.join(ROOT, 'dist', packOS)];
-		if (packOS === 'win') {
-			dirs.push(path.join(ROOT, 'tmp', 'win*'));
-		}
-		for (const dir of dirs) {
-			console.log(`rimraf(${dir})`);
-			await rimrafAsync(dir);
-		}
-		console.log('=======================================================');
-		console.log(`oclif ${packCmd} ${packOpts.join(' ')}`);
-		console.log(`cwd="${process.cwd()}" ROOT="${ROOT}"`);
-		console.log('=======================================================');
-		const oclifPath = path.join(ROOT, 'node_modules', 'oclif');
-		await oclifRun([packCmd].concat(...packOpts), oclifPath);
-		// The Windows installer is explicitly signed here (oclif doesn't do it).
-		// The macOS installer is automatically signed by oclif (which runs the
-		// `pkgbuild` tool), using the certificate name given in package.json
-		// (`oclif.macos.sign` section).
-		if (process.platform === 'win32') {
-			await signWindowsInstaller();
-		} else if (process.platform === 'darwin') {
-			console.log('Notarizing package...');
-			await notarizeMacInstaller(); // Notarize
-			console.log('Package notarized.');
-		}
-		await renameInstallers();
-		console.log(`oclif installer build completed`);
-	}
-}
-
-/**
- * Wrapper around the npm `catch-uncommitted` package in order to run it
- * conditionally, only when:
- * - A CI env var is set (CI=true), and
- * - The OS is not Windows. (`catch-uncommitted` fails on Windows)
- */
-export async function catchUncommitted(): Promise<void> {
-	if (process.env.DEBUG) {
-		console.error(`[debug] CI=${process.env.CI} platform=${process.platform}`);
-	}
-	if (
-		process.env.CI &&
-		['true', 'yes', '1'].includes(process.env.CI.toLowerCase()) &&
-		process.platform !== 'win32'
-	) {
-		await whichSpawn('npx', [
-			'catch-uncommitted',
-			'--catch-no-git',
-			'--skip-node-versionbot-changes',
-			'--ignore-space-at-eol',
-		]);
-	}
-}
-
-export async function testShrinkwrap(): Promise<void> {
-	if (process.env.DEBUG) {
-		console.error(`[debug] platform=${process.platform}`);
-	}
-	if (process.platform !== 'win32') {
-		await whichSpawn(path.resolve(__dirname, 'test-lock-deduplicated.sh'));
-	}
-	await Promise.resolve();
-}
+});

automation/capitanodoc/capitanodoc.ts

@@ -1,159 +0,0 @@
-/**
- * @license
- * Copyright 2019 Balena Ltd.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *    http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-import * as path from 'path';
-import { MarkdownFileParser } from './utils';
-import { GlobSync } from 'glob';
-
-/**
- * This is the skeleton of CLI documentation/reference web page at:
- * https://www.balena.io/docs/reference/cli/
- *
- * The `getCapitanoDoc` function in this module parses README.md and adds
- * some content to this object.
- *
- * IMPORTANT
- *
- * All commands need to be stored under a folder in src/commands to maintain uniformity
- * Generating docs will error out if directive not followed
- * To add a custom heading for command docs, add the heading next to the folder name
- * in the `commandHeadings` dictionary.
- *
- * This dictionary is the source of truth that creates the docs config which is used
- * to generate the CLI documentation. By default, the folder name will be used.
- *
- */
-
-interface Category {
-	title: string;
-	files: string[];
-}
-
-interface Documentation {
-	title: string;
-	introduction: string;
-	categories: Category[];
-}
-
-// Mapping folders names to custom headings in the docs
-const commandHeadings: { [key: string]: string } = {
-	'api-key': 'API Keys',
-	login: 'Authentication',
-	whoami: 'Authentication',
-	logout: 'Authentication',
-	env: 'Environment Variables',
-	help: 'Help and Version',
-	'ssh-key': 'SSH Keys',
-	organization: 'Organizations',
-	os: 'OS',
-	util: 'Utilities',
-	build: 'Deploy',
-	join: 'Platform',
-	leave: 'Platform',
-	app: 'Apps',
-	block: 'Blocks',
-	device: 'Devices',
-	fleet: 'Fleets',
-	release: 'Releases',
-	tag: 'Tags',
-};
-
-// Fetch all available commands
-const allCommandsPaths = new GlobSync('build/commands/**/*.js', {
-	ignore: 'build/commands/internal/**',
-}).found;
-
-// Throw error if any commands found outside of command directories
-const illegalCommandPaths = allCommandsPaths.filter((commandPath: string) =>
-	/^build\/commands\/[^/]+\.js$/.test(commandPath),
-);
-
-if (illegalCommandPaths.length !== 0) {
-	throw new Error(
-		`Found the following commands without a command directory: ${illegalCommandPaths}\n
-		To resolve this error, move the respective commands to their resource directories or create new ones.\n
-		Refer to the automation/capitanodoc/capitanodoc.ts file for more information.`,
-	);
-}
-
-// Docs config template
-const capitanoDoc: Documentation = {
-	title: 'balena CLI Documentation',
-	introduction: '',
-	categories: [],
-};
-
-// Helper function to capitalize each word of directory name
-function formatTitle(dir: string): string {
-	return dir.replace(/(^\w|\s\w)/g, (word) => word.toUpperCase());
-}
-
-// Create a map to track the categories for faster lookup
-const categoriesMap: { [key: string]: Category } = {};
-
-for (const commandPath of allCommandsPaths) {
-	const commandDir = path.basename(path.dirname(commandPath));
-	const heading = commandHeadings[commandDir] || formatTitle(commandDir);
-
-	if (!categoriesMap[heading]) {
-		categoriesMap[heading] = { title: heading, files: [] };
-		capitanoDoc.categories.push(categoriesMap[heading]);
-	}
-
-	categoriesMap[heading].files.push(commandPath);
-}
-
-// Sort Category titles alphabetically
-capitanoDoc.categories = capitanoDoc.categories.sort((a, b) =>
-	a.title.localeCompare(b.title),
-);
-
-// Sort Category file paths alphabetically
-capitanoDoc.categories.forEach((category) => {
-	category.files.sort((a, b) => a.localeCompare(b));
-});
-
-/**
- * Modify and return the `capitanoDoc` object above in order to generate the
- * CLI documentation at docs/balena-cli.md
- *
- * This function parses the README.md file to extract relevant sections
- * for the documentation web page.
- */
-export async function getCapitanoDoc(): Promise<typeof capitanoDoc> {
-	const readmePath = path.join(__dirname, '..', '..', 'README.md');
-	const mdParser = new MarkdownFileParser(readmePath);
-	const sections: string[] = await Promise.all([
-		mdParser.getSectionOfTitle('About').then((sectionLines: string) => {
-			// delete the title of the 'About' section for the web page
-			const match = /^(#+)\s+.+?\n\s*([^]*)/.exec(sectionLines);
-			if (!match || match.length < 3) {
-				throw new Error(`Error parsing section title`);
-			}
-			// match[1] has the title, match[2] has the rest
-			return match?.[2];
-		}),
-		mdParser.getSectionOfTitle('Installation'),
-		mdParser.getSectionOfTitle('Choosing a shell (command prompt/terminal)'),
-		mdParser.getSectionOfTitle('Logging in'),
-		mdParser.getSectionOfTitle('Proxy support'),
-		mdParser.getSectionOfTitle('Support, FAQ and troubleshooting'),
-		mdParser.getSectionOfTitle('Deprecation policy'),
-	]);
-	capitanoDoc.introduction = sections.join('\n');
-	return capitanoDoc;
-}

automation/capitanodoc/doc-types.d.ts

@@ -1,32 +0,0 @@
-/**
- * @license
- * Copyright 2019 Balena Ltd.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *    http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-import type { Command as OclifCommandClass } from '@oclif/core';
-
-type OclifCommand = typeof OclifCommandClass;
-
-export interface Document {
-	title: string;
-	introduction: string;
-	categories: Category[];
-}
-
-export interface Category {
-	title: string;
-	commands: Array<OclifCommand & { name: string }>;
-}
-
-export { OclifCommand };

automation/capitanodoc/index.ts

@@ -1,82 +0,0 @@
-/**
- * @license
- * Copyright 2019 Balena Ltd.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *    http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-import * as path from 'path';
-import { getCapitanoDoc } from './capitanodoc';
-import type { Category, Document, OclifCommand } from './doc-types';
-import * as markdown from './markdown';
-
-/**
- * Generates the markdown document (as a string) for the CLI documentation
- * page on the web: https://www.balena.io/docs/reference/cli/
- */
-export async function renderMarkdown(): Promise<string> {
-	const capitanodoc = await getCapitanoDoc();
-	const result: Document = {
-		title: capitanodoc.title,
-		introduction: capitanodoc.introduction,
-		categories: [],
-	};
-
-	for (const commandCategory of capitanodoc.categories) {
-		const category: Category = {
-			title: commandCategory.title,
-			commands: [],
-		};
-
-		for (const jsFilename of commandCategory.files) {
-			category.commands.push(await importOclifCommands(jsFilename));
-		}
-		result.categories.push(category);
-	}
-
-	return markdown.render(result);
-}
-
-async function importOclifCommands(jsFilename: string) {
-	const command = (await import(path.join(process.cwd(), jsFilename)))
-		.default as OclifCommand;
-
-	return {
-		...command,
-		// build/commands/device/index.js -> device
-		// build/commands/device/list.js -> device list
-		name: jsFilename
-			.split('/')
-			.slice(2)
-			.join(' ')
-			.split('.')
-			.slice(0, 1)
-			.join(' ')
-			.split(' index')[0],
-	} as Category['commands'][0];
-}
-
-/**
- * Print the CLI docs markdown to stdout.
- * See package.json for how the output is redirected to a file.
- */
-async function printMarkdown() {
-	try {
-		console.log(await renderMarkdown());
-	} catch (error) {
-		console.error(error);
-		process.exitCode = 1;
-	}
-}
-
-// eslint-disable-next-line @typescript-eslint/no-floating-promises
-printMarkdown();

automation/capitanodoc/markdown.ts

@@ -1,117 +0,0 @@
-/**
- * @license
- * Copyright 2019 Balena Ltd.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *    http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-import { Parser } from '@oclif/core';
-import * as ent from 'ent';
-import * as _ from 'lodash';
-
-import { capitanoizeOclifUsage } from '../../src/utils/oclif-utils';
-import type { Category, Document } from './doc-types';
-
-function renderOclifCommand(command: Category['commands'][0]): string[] {
-	const result = [`## ${ent.encode(command.name || '')}`];
-	if (command.aliases?.length) {
-		result.push('### Aliases');
-		result.push(
-			command.aliases
-				.map(
-					(alias) =>
-						`- \`${alias}\`${command.deprecateAliases ? ' *(deprecated)*' : ''}`,
-				)
-				.join('\n'),
-		);
-		result.push(
-			`\nTo use one of the aliases, replace \`${command.name}\` with the alias.`,
-		);
-	}
-
-	result.push('### Description');
-	const description = (command.description || '')
-		.split('\n')
-		.slice(1) // remove the first line, which oclif uses as help header
-		.join('\n')
-		.trim();
-	result.push(description);
-
-	if (!_.isEmpty(command.examples)) {
-		result.push('Examples:', command.examples!.map((v) => `\t${v}`).join('\n'));
-	}
-
-	if (!_.isEmpty(command.args)) {
-		result.push('### Arguments');
-		for (const [name, arg] of Object.entries(command.args!)) {
-			result.push(`#### ${name.toUpperCase()}`, arg.description || '');
-		}
-	}
-
-	if (!_.isEmpty(command.flags)) {
-		result.push('### Options');
-		for (const [name, flag] of Object.entries(command.flags!)) {
-			if (name === 'help') {
-				continue;
-			}
-			flag.name = name;
-			const flagUsage = Parser.flagUsages([flag])
-				.map(([usage, _description]) => usage)
-				.join()
-				.trim();
-			result.push(`#### ${flagUsage}`);
-			result.push(flag.description || '');
-		}
-	}
-	return result;
-}
-
-function renderCategory(category: Category): string[] {
-	const result = [`# ${category.title}`];
-	for (const command of category.commands) {
-		result.push(...renderOclifCommand(command));
-	}
-	return result;
-}
-
-function getAnchor(cmdSignature: string): string {
-	return `#${_.trim(cmdSignature.replace(/\W+/g, '-'), '-').toLowerCase()}`;
-}
-
-function renderToc(categories: Category[]): string[] {
-	const result = [`# CLI Command Reference`];
-
-	for (const category of categories) {
-		result.push(`- ${category.title}`);
-		result.push(
-			category.commands
-				.map((command) => {
-					const signature = capitanoizeOclifUsage(command.name);
-					return `\t- [${ent.encode(signature)}](${getAnchor(signature)})`;
-				})
-				.join('\n'),
-		);
-	}
-	return result;
-}
-
-export function render(doc: Document) {
-	const result = [
-		`# ${doc.title}`,
-		doc.introduction,
-		...renderToc(doc.categories),
-	];
-	for (const category of doc.categories) {
-		result.push(...renderCategory(category));
-	}
-	return result.join('\n\n');
-}

automation/capitanodoc/utils.ts

@@ -1,104 +0,0 @@
-/**
- * @license
- * Copyright 2019 Balena Ltd.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *    http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-import * as fs from 'fs';
-import * as readline from 'readline';
-
-export class MarkdownFileParser {
-	constructor(public mdFilePath: string) {}
-
-	/**
-	 * Extract the lines of a markdown document section with the given title.
-	 * For example, consider this sample markdown document:
-	 * ```
-	 *     # balena CLI
-	 *
-	 *     ## Introduction
-	 *     Lorem ipsum dolor sit amet, consectetur adipiscing elit,
-	 *
-	 *     ## Getting Started
-	 *     sed do eiusmod tempor incididunt ut labore et dolore magna aliqua.
-	 *
-	 *     ### Prerequisites
-	 *     - Foo
-	 *     - Bar
-	 *
-	 *     ## Support
-	 *     Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris.
-	 * ```
-	 *
-	 * Calling getSectionOfTitle('Getting Started') for the markdown doc above
-	 * returns everything from line '## Getting Started' (included) to line
-	 * '## Support' (excluded). This method counts the number of '#' characters
-	 * to determine that subsections should be included as part of the parent
-	 * section.
-	 *
-	 * @param title The section title without '#' chars, eg. 'Getting Started'
-	 */
-	public async getSectionOfTitle(
-		title: string,
-		includeSubsections = true,
-	): Promise<string> {
-		let foundSectionLines: string[];
-		let foundSectionLevel = 0;
-
-		const rl = readline.createInterface({
-			input: fs.createReadStream(this.mdFilePath),
-			crlfDelay: Infinity,
-		});
-
-		rl.on('line', (line) => {
-			// try to match a line like "## Getting Started", where the number
-			// of '#' characters is the sectionLevel ('##' -> 2), and the
-			// sectionTitle is "Getting Started"
-			const match = /^(#+)\s+(.+)/.exec(line);
-			if (match) {
-				const sectionLevel = match[1].length;
-				const sectionTitle = match[2];
-
-				// If the target section had already been found: append a line, or end it
-				if (foundSectionLines) {
-					if (!includeSubsections || sectionLevel <= foundSectionLevel) {
-						// end previously found section
-						rl.close();
-					}
-				} else if (sectionTitle === title) {
-					// found the target section
-					foundSectionLevel = sectionLevel;
-					foundSectionLines = [];
-				}
-			}
-			if (foundSectionLines) {
-				foundSectionLines.push(line);
-			}
-		});
-
-		return await new Promise((resolve, reject) => {
-			rl.on('close', () => {
-				if (foundSectionLines) {
-					resolve(foundSectionLines.join('\n'));
-				} else {
-					reject(
-						new Error(
-							`Markdown section not found: title="${title}" file="${this.mdFilePath}"`,
-						),
-					);
-				}
-			});
-		});
-	}
-}

automation/check-doc.ts

@@ -1,86 +0,0 @@
-/**
- * @license
- * Copyright 2020 Balena Ltd.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *    http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-// eslint-disable-next-line no-restricted-imports
-import { stripIndent } from 'common-tags';
-import * as _ from 'lodash';
-import { promises as fs } from 'fs';
-import * as path from 'path';
-import { simpleGit } from 'simple-git';
-
-const ROOT = path.normalize(path.join(__dirname, '..'));
-
-/**
- * Compare the timestamp of balena-cli.md with the timestamp of staged files,
- * issuing an error if balena-cli.md is older.
- * If balena-cli.md does not require updating and the developer cannot run
- * `npm run build` on their laptop, the error message suggests a workaround
- * using `touch`.
- */
-async function checkBuildTimestamps() {
-	const git = simpleGit(ROOT);
-	const docFile = path.join(ROOT, 'docs', 'balena-cli.md');
-	const [docStat, gitStatus] = await Promise.all([
-		fs.stat(docFile),
-		git.status(),
-	]);
-	const stagedFiles = _.uniq([
-		...gitStatus.created,
-		...gitStatus.staged,
-		...gitStatus.renamed.map((o) => o.to),
-	])
-		// select only staged files that start with src/ or typings/
-		.filter((f) => f.match(/^(src|typings)[/\\]/))
-		.map((f) => path.join(ROOT, f));
-
-	const fStats = await Promise.all(stagedFiles.map((f) => fs.stat(f)));
-	fStats.forEach((fStat, index) => {
-		if (fStat.mtimeMs > docStat.mtimeMs) {
-			const fPath = stagedFiles[index];
-			throw new Error(stripIndent`
-				--------------------------------------------------------------------------------
-				ERROR: at least one staged file: "${fPath}"
-				has a more recent modification timestamp than the documentation file:
-				"${docFile}"
-
-				This probably means that \`npm run build\` or \`npm test\` have not been executed,
-				and this error can be fixed by doing so. Running \`npm run build\` or \`npm test\`
-				before commiting is required in order to update the CLI markdown documentation
-				(in case any command-line options were updated, added or removed) and also to
-				catch Typescript type check errors sooner and reduce overall waiting time, given
-				that the CI build/tests are currently rather lengthy.
-
-				If you need/wish to bypass this check without running \`npm run build\`, run:
-				  npx touch -am "${docFile}"
-				and then try again.
-				--------------------------------------------------------------------------------
-			`);
-		}
-	});
-}
-
-async function run() {
-	try {
-		await checkBuildTimestamps();
-	} catch (err) {
-		console.error(err.message);
-		process.exitCode = 1;
-	}
-}
-
-// eslint-disable-next-line @typescript-eslint/no-floating-promises
-run();

automation/check-npm-version.js

@@ -1,71 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-/**
- * Check that semver v1 is greater than or equal to semver v2.
- *
- * We don't `require('semver')` to allow this script to be run as a npm
- * 'preinstall' hook, at which point no dependencies have been installed.
- *
- * @param {string} version
- */
-function parseSemver(version) {
-	const match = /v?(\d+)\.(\d+).(\d+)/.exec(version);
-	if (match == null) {
-		throw new Error(`Invalid semver version: ${version}`);
-	}
-	const [, major, minor, patch] = match;
-	return [parseInt(major, 10), parseInt(minor, 10), parseInt(patch, 10)];
-}
-
-/**
- * @param {string} v1
- * @param {string} v2
- */
-function semverGte(v1, v2) {
-	const v1Array = parseSemver(v1);
-	const v2Array = parseSemver(v2);
-	for (let i = 0; i < 3; i++) {
-		if (v1Array[i] < v2Array[i]) {
-			return false;
-		} else if (v1Array[i] > v2Array[i]) {
-			return true;
-		}
-	}
-	return true;
-}
-
-function checkNpmVersion() {
-	const execSync = require('child_process').execSync;
-	const npmVersion = execSync('npm --version').toString().trim();
-	const requiredVersion = '6.9.0';
-	if (!semverGte(npmVersion, requiredVersion)) {
-		// In case you take issue with the error message below:
-		//   "At this point, however, your 'npm-shrinkwrap.json' file has
-		//    already been damaged"
-		// ... and think: "why not add the check to the 'preinstall' hook?",
-		// the reason is that it would unnecessarily prevent end users from
-		// using npm v6.4.1 that ships with Node 8.  (It is OK for the
-		// shrinkwrap file to get damaged if it is not going to be reused.)
-		throw new Error(`\
------------------------------------------------------------------------------
-Error: npm version '${npmVersion}' detected. Please upgrade to npm v${requiredVersion} or later
-because of a bug that causes the 'npm-shrinkwrap.json' file to be damaged.
-At this point, however, your 'npm-shrinkwrap.json' file has already been
-damaged. Please revert it to the master branch state with a command such as:
-"git checkout master -- npm-shrinkwrap.json"
-Then re-run "npm install" using npm version ${requiredVersion} or later.
------------------------------------------------------------------------------`);
-	}
-}
-
-function main() {
-	try {
-		checkNpmVersion();
-	} catch (e) {
-		console.error(e.message || e);
-		process.exitCode = 1;
-	}
-}
-
-main();

automation/custom-types.d.ts

@@ -0,0 +1,35 @@
+declare module 'pkg' {
+	export function exec(args: string[]): Promise<void>;
+}
+
+declare module 'filehound' {
+	export function create(): FileHound;
+
+	export interface FileHound {
+		paths(paths: string[]): FileHound;
+		paths(...paths: string[]): FileHound;
+		ext(extensions: string[]): FileHound;
+		ext(...extensions: string[]): FileHound;
+		find(): Promise<string[]>;
+	}
+}
+
+declare module 'publish-release' {
+	interface PublishOptions {
+		token: string,
+		owner: string,
+		repo: string,
+		tag: string,
+		name: string,
+		reuseRelease?: boolean
+		assets: string[]
+	}
+
+	interface Release {
+		html_url: string;
+	}
+
+	let publishRelease: (args: PublishOptions, callback: (e: Error, release: Release) => void) => void;
+
+	export = publishRelease;
+}

automation/deploy-bin.ts

@@ -0,0 +1,53 @@
+import * as Promise from 'bluebird';
+import * as path from 'path';
+import * as os from 'os';
+import * as fs from 'fs-extra';
+import * as publishRelease from 'publish-release';
+import * as archiver from 'archiver';
+
+const publishReleaseAsync = Promise.promisify(publishRelease);
+
+const { GITHUB_TOKEN } = process.env;
+const ROOT = path.join(__dirname, '..');
+
+const version = 'v' + require('../package.json').version;
+const outputFile = path.join(ROOT, `resin-cli-${version}-${os.platform()}-${os.arch()}.zip`);
+
+new Promise((resolve, reject) => {
+	console.log('Zipping build...');
+
+	let archive = archiver('zip', {
+		zlib: { level: 7 }
+	});
+	archive.directory(path.join(ROOT, 'build-bin'), 'resin-cli');
+
+	let outputStream = fs.createWriteStream(outputFile);
+
+	outputStream.on('close', resolve);
+	outputStream.on('error', reject);
+
+	archive.on('error', reject);
+	archive.on('warning', console.warn);
+
+	archive.pipe(outputStream);
+	archive.finalize();
+}).then(() => {
+	console.log('Build zipped');
+	console.log('Publishing build...');
+
+	return publishReleaseAsync({
+		token: GITHUB_TOKEN,
+		owner: 'resin-io',
+		repo: 'resin-cli',
+		tag: version,
+		name: `Resin-CLI ${version}`,
+		reuseRelease: true,
+		assets: [outputFile]
+	});
+}).then((release) => {
+	console.log(`Release ${version} successful: ${release.html_url}`);
+}).catch((err) => {
+	console.error('Release failed');
+	console.error(err);
+	process.exit(1);
+});

automation/run.ts

@@ -1,87 +0,0 @@
-/**
- * @license
- * Copyright 2019 Balena Ltd.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *    http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-import * as _ from 'lodash';
-
-import {
-	buildOclifInstaller,
-	buildStandalone,
-	catchUncommitted,
-	signFilesForNotarization,
-	testShrinkwrap,
-} from './build-bin';
-
-// DEBUG set to falsy for negative values else is truthy
-process.env.DEBUG = ['0', 'no', 'false', '', undefined].includes(
-	process.env.DEBUG?.toLowerCase(),
-)
-	? ''
-	: '1';
-
-/**
- * Trivial command-line parser. Check whether the command-line argument is one
- * of the following strings, then call the appropriate functions:
- *     'build:installer'   (to build a native oclif installer)
- * 	   'build:standalone'  (to build a standalone package)
- *
- * @param args Arguments to parse (default is process.argv.slice(2))
- */
-async function parse(args?: string[]) {
-	args = args || process.argv.slice(2);
-	console.error(`[debug] automation/run.ts process.argv=[${process.argv}]`);
-	console.error(`[debug] automation/run.ts args=[${args}]`);
-	if (_.isEmpty(args)) {
-		throw new Error('missing command-line arguments');
-	}
-	const commands: { [cmd: string]: () => void | Promise<void> } = {
-		'build:installer': buildOclifInstaller,
-		'build:standalone': buildStandalone,
-		'sign:binaries': signFilesForNotarization,
-		'catch-uncommitted': catchUncommitted,
-		'test-shrinkwrap': testShrinkwrap,
-	};
-	for (const arg of args) {
-		if (!Object.hasOwn(commands, arg)) {
-			throw new Error(`command unknown: ${arg}`);
-		}
-	}
-
-	for (const arg of args) {
-		try {
-			const cmdFunc = commands[arg];
-			await cmdFunc();
-		} catch (err) {
-			if (typeof err === 'object') {
-				err.message = `"${arg}": ${err.message}`;
-			}
-			throw err;
-		}
-	}
-}
-
-/** See jsdoc for parse() function above */
-export async function run(args?: string[]) {
-	try {
-		await parse(args);
-	} catch (e) {
-		console.error(e.message ? `Error: ${e.message}` : e);
-		process.exitCode = 1;
-	}
-}
-
-// eslint-disable-next-line @typescript-eslint/no-floating-promises
-run();

automation/test-lock-deduplicated.sh

@@ -1,20 +0,0 @@
-#!/bin/bash
-
-set -e
-
-cp npm-shrinkwrap.json npm-shrinkwrap.json.old
-npm i
-npm dedupe
-npm i
-
-if ! diff -q npm-shrinkwrap.json npm-shrinkwrap.json.old > /dev/null; then
-  rm npm-shrinkwrap.json.old
-  echo "** npm-shrinkwrap.json was not deduplicated or not fully committed - FAIL **";
-  echo "** This can usually be fixed with: **";
-  echo "** git checkout master -- npm-shrinkwrap.json **";
-  echo "** rm -rf node_modules **";
-  echo "** npm install && npm dedupe && npm install **";
-  exit 1;
-fi
-
-rm npm-shrinkwrap.json.old

automation/tsconfig.json

@@ -0,0 +1,15 @@
+{
+	"compilerOptions": {
+		"module": "commonjs",
+		"target": "es2015",
+		"strict": true,
+		"noUnusedLocals": true,
+		"noUnusedParameters": true,
+		"preserveConstEnums": true,
+		"removeComments": true,
+		"sourceMap": true
+	},
+	"include": [
+		"./**/*.ts"
+	]
+}

automation/update-module.ts

@@ -1,139 +0,0 @@
-import { exec } from 'child_process';
-import * as semver from 'semver';
-
-const changeTypes = ['major', 'minor', 'patch'] as const;
-
-const validateChangeType = (maybeChangeType = 'minor') => {
-	maybeChangeType = maybeChangeType.toLowerCase();
-	switch (maybeChangeType) {
-		case 'patch':
-		case 'minor':
-		case 'major':
-			return maybeChangeType;
-		default:
-			throw new Error(`Invalid change type: '${maybeChangeType}'`);
-	}
-};
-
-const compareSemverChangeType = (oldVersion: string, newVersion: string) => {
-	const oldSemver = semver.parse(oldVersion)!;
-	const newSemver = semver.parse(newVersion)!;
-
-	for (const changeType of changeTypes) {
-		if (oldSemver[changeType] !== newSemver[changeType]) {
-			return changeType;
-		}
-	}
-};
-
-const run = async (cmd: string) => {
-	console.info(`Running '${cmd}'`);
-	return new Promise<{ stdout: string; stderr: string }>((resolve, reject) => {
-		const p = exec(cmd, { encoding: 'utf8' }, (err, stdout, stderr) => {
-			if (err) {
-				reject(err);
-				return;
-			}
-			resolve({ stdout, stderr });
-		});
-		p.stdout?.pipe(process.stdout);
-		p.stderr?.pipe(process.stderr);
-	});
-};
-
-const getVersion = async (module: string): Promise<string> => {
-	const { stdout } = await run(`npm ls --json --depth 0 ${module}`);
-	return JSON.parse(stdout).dependencies[module].version;
-};
-
-interface Upstream {
-	repo: string;
-	url: string;
-	module?: string;
-}
-
-const getUpstreams = async () => {
-	const fs = await import('fs');
-	const repoYaml = fs.readFileSync(__dirname + '/../repo.yml', 'utf8');
-
-	const yaml = await import('js-yaml');
-	const { upstream } = yaml.load(repoYaml) as {
-		upstream: Upstream[];
-	};
-
-	return upstream;
-};
-
-const getUsage = (upstreams: Upstream[], upstreamName: string) => `
-Usage: npm run update ${upstreamName} $version [$changeType=minor]
-
-Upstream names: ${upstreams.map(({ repo }) => repo).join(', ')}
-`;
-
-async function $main() {
-	const upstreams = await getUpstreams();
-
-	if (process.argv.length < 3) {
-		throw new Error(getUsage(upstreams, '$upstreamName'));
-	}
-
-	const upstreamName = process.argv[2];
-
-	const upstream = upstreams.find((v) => v.repo === upstreamName);
-
-	if (!upstream) {
-		throw new Error(
-			`Invalid upstream name '${upstreamName}', valid options: ${upstreams
-				.map(({ repo }) => repo)
-				.join(', ')}`,
-		);
-	}
-
-	if (process.argv.length < 4) {
-		throw new Error(getUsage(upstreams, upstreamName));
-	}
-
-	const packageName = upstream.module || upstream.repo;
-
-	const oldVersion = await getVersion(packageName);
-	await run(`npm install ${packageName}@${process.argv[3]}`);
-	const newVersion = await getVersion(packageName);
-	if (newVersion === oldVersion) {
-		throw new Error(`Already on version '${newVersion}'`);
-	}
-
-	console.log(`Updated ${upstreamName} from ${oldVersion} to ${newVersion}`);
-	const semverChangeType = compareSemverChangeType(oldVersion, newVersion);
-
-	const changeType = process.argv[4]
-		? // if the caller specified a change type, use that one
-			validateChangeType(process.argv[4])
-		: // use the same change type as in the dependency, but avoid major bumps
-			semverChangeType && semverChangeType !== 'major'
-			? semverChangeType
-			: 'minor';
-	console.log(`Using Change-type: ${changeType}`);
-
-	let { stdout: currentBranch } = await run('git rev-parse --abbrev-ref HEAD');
-	currentBranch = currentBranch.trim();
-	console.log(`Currenty on branch: '${currentBranch}'`);
-	if (currentBranch === 'master') {
-		await run(`git checkout -b "update-${upstreamName}-${newVersion}"`);
-	}
-
-	await run(`git add package.json npm-shrinkwrap.json`);
-	await run(
-		`git commit --message "Update ${upstreamName} to ${newVersion}" --message "Update ${upstreamName} from ${oldVersion} to ${newVersion}" --message "Change-type: ${changeType}"`,
-	);
-}
-
-async function main() {
-	try {
-		await $main();
-	} catch (e) {
-		console.error(e);
-		process.exitCode = 1;
-	}
-}
-
-void main();

automation/utils.ts

@@ -1,88 +0,0 @@
-/**
- * @license
- * Copyright 2019-2020 Balena Ltd.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *    http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-import { spawn } from 'child_process';
-import * as path from 'path';
-import * as fs from 'fs';
-import * as whichMod from 'which';
-
-export const ROOT = path.join(__dirname, '..');
-
-export function loadPackageJson() {
-	const packageJsonPath = path.join(ROOT, 'package.json');
-
-	const packageJson = fs.readFileSync(packageJsonPath, 'utf8');
-	return JSON.parse(packageJson);
-}
-
-/**
- * Error handling wrapper around the npm `which` package:
- * "Like the unix which utility. Finds the first instance of a specified
- * executable in the PATH environment variable. Does not cache the results,
- * so hash -r is not needed when the PATH changes."
- *
- * @param program Basename of a program, for example 'ssh'
- * @returns The program's full path, e.g. 'C:\WINDOWS\System32\OpenSSH\ssh.EXE'
- */
-export async function which(program: string): Promise<string> {
-	let programPath: string;
-	try {
-		programPath = await whichMod(program);
-	} catch (err) {
-		if (err.code === 'ENOENT') {
-			throw new Error(`'${program}' program not found. Is it installed?`);
-		}
-		throw err;
-	}
-	return programPath;
-}
-
-/**
- * Call which(programName) and spawn() with the given arguments. Throw an error
- * if the process exit code is not zero.
- */
-export async function whichSpawn(
-	programName: string,
-	args: string[] = [],
-): Promise<void> {
-	const program = await which(programName);
-	let error: Error | undefined;
-	let exitCode: number | undefined;
-	try {
-		exitCode = await new Promise<number>((resolve, reject) => {
-			try {
-				spawn(program, args, { stdio: 'inherit' })
-					.on('error', reject)
-					.on('close', resolve);
-			} catch (err) {
-				reject(err as Error);
-			}
-		});
-	} catch (err) {
-		error = err;
-	}
-	if (error || exitCode) {
-		const msg = [
-			`${programName} failed with exit code ${exitCode}:`,
-			`"${program}" [${args}]`,
-		];
-		if (error) {
-			msg.push(`${error}`);
-		}
-		throw new Error(msg.join('\n'));
-	}
-}

bin/balena

@@ -1 +0,0 @@
-run.js

bin/balena-dev

@@ -1 +0,0 @@
-dev.js

bin/dev.cmd

@@ -1,3 +0,0 @@
-@echo off
-
-node "%~dp0\run" %*

bin/dev.js

@@ -1,90 +0,0 @@
-#!/usr/bin/env node
-
-// ****************************************************************************
-// THIS IS FOR DEV PURPOSES ONLY AND WILL NOT BE PART OF THE PUBLISHED PACKAGE
-// Before opening a PR you should build and test your changes using bin/balena
-// ****************************************************************************
-
-// We boost the threadpool size as ext2fs can deadlock with some
-// operations otherwise, if the pool runs out.
-process.env.UV_THREADPOOL_SIZE = '64';
-
-// Note on `fast-boot2`: We do not use `fast-boot2` with `balena-dev` because:
-// * fast-boot2's cacheKiller option is configured to include the timestamps of
-//   the package.json and npm-shrinkwrap.json files, to avoid unexpected CLI
-//   behavior when changes are made to dependencies during development. This is
-//   generally a good thing, however, `balena-dev` (a few lines below) edits
-//   `package.json` to modify oclif paths, and this results in cache
-//   invalidation and a performance hit rather than speedup.
-// * Even if the timestamps are removed from cacheKiller, so that there is no
-//   cache invalidation, fast-boot's speedup is barely noticeable when ts-node
-//   is used, e.g. 1.43s vs 1.4s when running `balena version`.
-// * `fast-boot` causes unexpected behavior when used with `npm link` or
-//   when the `node_modules` folder is manually modified (affecting transitive
-//   dependencies) during development (e.g. bug investigations). A workaround
-//   is to use `balena-dev` without `fast-boot`. See also notes in
-//   `CONTRIBUTING.md`.
-
-const path = require('path');
-const rootDir = path.join(__dirname, '..');
-
-// Allow balena-dev to work with oclif by temporarily
-// pointing oclif config options to src/ instead of build/
-modifyOclifPaths();
-// Undo changes on exit
-process.on('exit', function () {
-	modifyOclifPaths(true);
-});
-// Undo changes in case of ctrl-c
-process.on('SIGINT', function () {
-	modifyOclifPaths(true);
-	// Note process exit here will interfere with commands that do their own SIGINT handling,
-	// but without it commands can not be exited.
-	// So currently using balena-dev does not guarantee proper exit behaviour when using ctrl-c.
-	// Ideally a better solution is needed.
-	process.exit();
-});
-
-// Set the desired es version for downstream modules that support it
-require('@balena/es-version').set('es2018');
-
-// Note: before ts-node v6.0.0, 'transpile-only' (no type checking) was the
-// default option. We upgraded ts-node and found that adding 'transpile-only'
-// was necessary to avoid a mysterious 'null' error message. On the plus side,
-// it is supposed to run faster. We still benefit from type checking when
-// running 'npm run build'.
-require('ts-node').register({
-	project: path.join(rootDir, 'tsconfig.json'),
-	transpileOnly: true,
-});
-void require('../src/app').run(undefined, {
-	dir: __dirname,
-	development: true,
-});
-
-// Modify package.json oclif paths from build/ -> src/, or vice versa
-function modifyOclifPaths(revert) {
-	const fs = require('fs');
-	const packageJsonPath = path.join(rootDir, 'package.json');
-
-	const packageJson = fs.readFileSync(packageJsonPath, 'utf8');
-	const packageObj = JSON.parse(packageJson);
-
-	if (!packageObj.oclif) {
-		return;
-	}
-
-	let oclifSectionText = JSON.stringify(packageObj.oclif);
-	if (!revert) {
-		oclifSectionText = oclifSectionText.replace(/\/build\//g, '/src/');
-	} else {
-		oclifSectionText = oclifSectionText.replace(/\/src\//g, '/build/');
-	}
-
-	packageObj.oclif = JSON.parse(oclifSectionText);
-	fs.writeFileSync(
-		packageJsonPath,
-		`${JSON.stringify(packageObj, null, 2)}\n`,
-		'utf8',
-	);
-}

bin/resin

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require('../build/app');

bin/run.cmd

@@ -1,3 +0,0 @@
-@echo off
-
-node "%~dp0\run" %*

bin/run.js

@@ -1,21 +0,0 @@
-#!/usr/bin/env node
-
-// We boost the threadpool size as ext2fs can deadlock with some
-// operations otherwise, if the pool runs out.
-process.env.UV_THREADPOOL_SIZE = '64';
-
-// Disable oclif registering ts-node
-process.env.OCLIF_TS_NODE = '0';
-
-async function run() {
-	// Use fast-boot to cache require lookups, speeding up startup
-	await require('../build/fast-boot').start();
-
-	// Set the desired es version for downstream modules that support it
-	require('@balena/es-version').set('es2018');
-
-	// Run the CLI
-	await require('../build/app').run(undefined, { dir: __dirname });
-}
-
-void run();

capitanodoc.coffee

@@ -0,0 +1,115 @@
+# coffeelint: disable=max_line_length
+
+module.exports =
+	title: 'Resin CLI Documentation'
+	introduction: '''
+		This tool allows you to interact with the resin.io api from the comfort of your command line.
+
+		Please make sure your system meets the requirements as specified in the [README](https://github.com/resin-io/resin-cli).
+
+		To get started download the CLI from npm.
+
+			$ npm install resin-cli -g
+
+		Then authenticate yourself:
+
+			$ resin login
+
+		Now you have access to all the commands referenced below.
+
+		## Proxy support
+
+		The CLI does support HTTP(S) proxies.
+
+		You can configure the proxy using several methods (in order of their precedence):
+
+		* set the `RESINRC_PROXY` environment variable in the URL format (with protocol, host, port, and optionally the basic auth),
+		* use the [resin config file](https://www.npmjs.com/package/resin-settings-client#documentation) (project-specific or user-level)
+		and set the `proxy` setting. This can be:
+			* a string in the URL format,
+			* or an object following [this format](https://www.npmjs.com/package/global-tunnel-ng#options), which allows more control,
+		* or set the conventional `https_proxy` / `HTTPS_PROXY` / `http_proxy` / `HTTP_PROXY`
+		environment variable (in the same standard URL format).
+	'''
+
+	categories: [
+		{
+			title: 'Application'
+			files: [ 'lib/actions/app.coffee' ]
+		},
+		{
+			title: 'Authentication',
+			files: [ 'lib/actions/auth.coffee' ]
+		},
+		{
+			title: 'Device',
+			files: [ 'lib/actions/device.coffee' ]
+		},
+		{
+			title: 'Environment Variables',
+			files: [ 'lib/actions/environment-variables.coffee' ]
+		},
+		{
+			title: 'Help',
+			files: [ 'lib/actions/help.coffee' ]
+		},
+		{
+			title: 'Information',
+			files: [ 'lib/actions/info.coffee' ]
+		},
+		{
+			title: 'Keys',
+			files: [ 'lib/actions/keys.coffee' ]
+		},
+		{
+			title: 'Logs',
+			files: [ 'lib/actions/logs.coffee' ]
+		},
+		{
+			title: 'Sync',
+			files: [ 'lib/actions/sync.coffee' ]
+		},
+		{
+			title: 'SSH',
+			files: [ 'lib/actions/ssh.coffee' ]
+		},
+		{
+			title: 'Notes',
+			files: [ 'lib/actions/notes.coffee' ]
+		},
+		{
+			title: 'OS',
+			files: [ 'lib/actions/os.coffee' ]
+		},
+		{
+			title: 'Config',
+			files: [ 'lib/actions/config.coffee' ]
+		},
+		{
+			title: 'Preload',
+			files: [ 'lib/actions/preload.coffee' ]
+		},
+		{
+			title: 'Settings',
+			files: [ 'lib/actions/settings.coffee' ]
+		},
+		{
+			title: 'Wizard',
+			files: [ 'lib/actions/wizard.coffee' ]
+		},
+		{
+			title: 'Local',
+			files: [ 'lib/actions/local/index.coffee' ]
+		},
+		{
+			title: 'Deploy',
+			files: [
+				'lib/actions/build.coffee'
+				'lib/actions/deploy.coffee'
+			]
+		},
+		{
+			title: 'Utilities',
+			files: [ 'lib/actions/util.coffee' ]
+		},
+	]

coffeelint.json

@@ -0,0 +1,127 @@
+{
+    "coffeescript_error": {
+        "level": "error"
+    },
+    "arrow_spacing": {
+        "name": "arrow_spacing",
+        "level": "error"
+    },
+    "no_tabs": {
+        "name": "no_tabs",
+        "level": "ignore"
+    },
+    "no_trailing_whitespace": {
+        "name": "no_trailing_whitespace",
+        "level": "error",
+        "allowed_in_comments": false,
+        "allowed_in_empty_lines": false
+    },
+    "max_line_length": {
+        "name": "max_line_length",
+        "value": 120,
+        "level": "error",
+        "limitComments": true
+    },
+    "line_endings": {
+        "name": "line_endings",
+        "level": "ignore",
+        "value": "unix"
+    },
+    "no_trailing_semicolons": {
+        "name": "no_trailing_semicolons",
+        "level": "error"
+    },
+    "indentation": {
+        "name": "indentation",
+        "value": 1,
+        "level": "error"
+    },
+    "camel_case_classes": {
+        "name": "camel_case_classes",
+        "level": "error"
+    },
+    "colon_assignment_spacing": {
+        "name": "colon_assignment_spacing",
+        "level": "error",
+        "spacing": {
+            "left": 0,
+            "right": 1
+        }
+    },
+    "no_implicit_braces": {
+        "name": "no_implicit_braces",
+        "level": "ignore",
+        "strict": false
+    },
+    "no_plusplus": {
+        "name": "no_plusplus",
+        "level": "ignore"
+    },
+    "no_throwing_strings": {
+        "name": "no_throwing_strings",
+        "level": "error"
+    },
+    "no_backticks": {
+        "name": "no_backticks",
+        "level": "error"
+    },
+    "no_implicit_parens": {
+        "name": "no_implicit_parens",
+        "strict": false,
+        "level": "ignore"
+    },
+    "no_empty_param_list": {
+        "name": "no_empty_param_list",
+        "level": "error"
+    },
+    "no_stand_alone_at": {
+        "name": "no_stand_alone_at",
+        "level": "ignore"
+    },
+    "space_operators": {
+        "name": "space_operators",
+        "level": "error"
+    },
+    "duplicate_key": {
+        "name": "duplicate_key",
+        "level": "error"
+    },
+    "empty_constructor_needs_parens": {
+        "name": "empty_constructor_needs_parens",
+        "level": "ignore"
+    },
+    "cyclomatic_complexity": {
+        "name": "cyclomatic_complexity",
+        "value": 10,
+        "level": "ignore"
+    },
+    "newlines_after_classes": {
+        "name": "newlines_after_classes",
+        "value": 3,
+        "level": "ignore"
+    },
+    "no_unnecessary_fat_arrows": {
+        "name": "no_unnecessary_fat_arrows",
+        "level": "error"
+    },
+    "missing_fat_arrows": {
+        "name": "missing_fat_arrows",
+        "level": "ignore"
+    },
+    "non_empty_constructor_needs_parens": {
+        "name": "non_empty_constructor_needs_parens",
+        "level": "ignore"
+    },
+    "no_unnecessary_double_quotes": {
+        "name": "no_unnecessary_double_quotes",
+        "level": "error"
+    },
+    "no_debugger": {
+        "name": "no_debugger",
+        "level": "warn"
+    },
+    "no_interpolation_in_single_quotes": {
+        "name": "no_interpolation_in_single_quotes",
+        "level": "error"
+    }
+}

completion/_balena

@@ -1,95 +0,0 @@
-#compdef balena
-#autoload
-
-#GENERATED FILE DON'T MODIFY#
-
-_balena() {
-  typeset -A opt_args
-  local context state line curcontext="$curcontext"
-
-  # Valid top-level completions
-  main_commands=( api-key app block build config deploy device device-type env fleet internal join leave local login logout organization os preload push release settings ssh-key support tag util version whoami )
-  # Sub-completions
-  api_key_cmds=( generate list revoke )
-  app_cmds=( create )
-  block_cmds=( create )
-  config_cmds=( generate inject read reconfigure write )
-  device_type_cmds=( list )
-  device_cmds=( deactivate detect identify init list local-mode logs move note os-update pin public-url purge reboot register rename restart rm shutdown ssh start-service stop-service track-fleet tunnel )
-  env_cmds=( list rename rm set )
-  fleet_cmds=( create list pin purge rename restart rm track-latest )
-  internal_cmds=( osinit )
-  local_cmds=( configure flash )
-  organization_cmds=( list )
-  os_cmds=( build-config configure download initialize versions )
-  release_cmds=( finalize invalidate list validate )
-  ssh_key_cmds=( add list rm )
-  tag_cmds=( list rm set )
-
-
-  _arguments -C \
-    '(- 1 *)--version[show version and exit]' \
-    '(- 1 *)--help[show help options and exit]' \
-    '1:first command:_balena_main_cmds' \
-    '2:second command:_balena_sec_cmds' \
-  && ret=0
-}
-
-(( $+functions[_balena_main_cmds] )) ||
-_balena_main_cmds() {
-  _describe -t main_commands 'command' main_commands "$@" && ret=0
-}
-
-(( $+functions[_balena_sec_cmds] )) ||
-_balena_sec_cmds() {
-  case $line[1] in
-      "api-key")
-        _describe -t api_key_cmds 'api-key_cmd' api_key_cmds "$@" && ret=0
-      ;;
-      "app")
-        _describe -t app_cmds 'app_cmd' app_cmds "$@" && ret=0
-      ;;
-      "block")
-        _describe -t block_cmds 'block_cmd' block_cmds "$@" && ret=0
-      ;;
-      "config")
-        _describe -t config_cmds 'config_cmd' config_cmds "$@" && ret=0
-      ;;
-      "device-type")
-        _describe -t device_type_cmds 'device-type_cmd' device_type_cmds "$@" && ret=0
-      ;;
-      "device")
-        _describe -t device_cmds 'device_cmd' device_cmds "$@" && ret=0
-      ;;
-      "env")
-        _describe -t env_cmds 'env_cmd' env_cmds "$@" && ret=0
-      ;;
-      "fleet")
-        _describe -t fleet_cmds 'fleet_cmd' fleet_cmds "$@" && ret=0
-      ;;
-      "internal")
-        _describe -t internal_cmds 'internal_cmd' internal_cmds "$@" && ret=0
-      ;;
-      "local")
-        _describe -t local_cmds 'local_cmd' local_cmds "$@" && ret=0
-      ;;
-      "organization")
-        _describe -t organization_cmds 'organization_cmd' organization_cmds "$@" && ret=0
-      ;;
-      "os")
-        _describe -t os_cmds 'os_cmd' os_cmds "$@" && ret=0
-      ;;
-      "release")
-        _describe -t release_cmds 'release_cmd' release_cmds "$@" && ret=0
-      ;;
-      "ssh-key")
-        _describe -t ssh_key_cmds 'ssh-key_cmd' ssh_key_cmds "$@" && ret=0
-      ;;
-      "tag")
-        _describe -t tag_cmds 'tag_cmd' tag_cmds "$@" && ret=0
-      ;;
-
-  esac
-}
-
-_balena "$@"

completion/balena-completion.bash

@@ -1,92 +0,0 @@
-#!/bin/bash
-
-#GENERATED FILE DON'T MODIFY#
-
-_balena_complete()
-{
-  local cur prev
-
-  # Valid top-level completions
-  main_commands="api-key app block build config deploy device device-type env fleet internal join leave local login logout organization os preload push release settings ssh-key support tag util version whoami"
-  # Sub-completions
-  api_key_cmds="generate list revoke"
-  app_cmds="create"
-  block_cmds="create"
-  config_cmds="generate inject read reconfigure write"
-  device_type_cmds="list"
-  device_cmds="deactivate detect identify init list local-mode logs move note os-update pin public-url purge reboot register rename restart rm shutdown ssh start-service stop-service track-fleet tunnel"
-  env_cmds="list rename rm set"
-  fleet_cmds="create list pin purge rename restart rm track-latest"
-  internal_cmds="osinit"
-  local_cmds="configure flash"
-  organization_cmds="list"
-  os_cmds="build-config configure download initialize versions"
-  release_cmds="finalize invalidate list validate"
-  ssh_key_cmds="add list rm"
-  tag_cmds="list rm set"
-
-
-
-  COMPREPLY=()
-  cur=${COMP_WORDS[COMP_CWORD]}
-  prev=${COMP_WORDS[COMP_CWORD-1]}
-
-  if [ $COMP_CWORD -eq 1 ]
-  then
-    COMPREPLY=( $(compgen -W "${main_commands}" -- $cur) )
-  elif [ $COMP_CWORD -eq 2 ]
-  then
-    case "$prev" in
-      api-key)
-        COMPREPLY=( $(compgen -W "$api_key_cmds" -- $cur) )
-        ;;
-      app)
-        COMPREPLY=( $(compgen -W "$app_cmds" -- $cur) )
-        ;;
-      block)
-        COMPREPLY=( $(compgen -W "$block_cmds" -- $cur) )
-        ;;
-      config)
-        COMPREPLY=( $(compgen -W "$config_cmds" -- $cur) )
-        ;;
-      device-type)
-        COMPREPLY=( $(compgen -W "$device_type_cmds" -- $cur) )
-        ;;
-      device)
-        COMPREPLY=( $(compgen -W "$device_cmds" -- $cur) )
-        ;;
-      env)
-        COMPREPLY=( $(compgen -W "$env_cmds" -- $cur) )
-        ;;
-      fleet)
-        COMPREPLY=( $(compgen -W "$fleet_cmds" -- $cur) )
-        ;;
-      internal)
-        COMPREPLY=( $(compgen -W "$internal_cmds" -- $cur) )
-        ;;
-      local)
-        COMPREPLY=( $(compgen -W "$local_cmds" -- $cur) )
-        ;;
-      organization)
-        COMPREPLY=( $(compgen -W "$organization_cmds" -- $cur) )
-        ;;
-      os)
-        COMPREPLY=( $(compgen -W "$os_cmds" -- $cur) )
-        ;;
-      release)
-        COMPREPLY=( $(compgen -W "$release_cmds" -- $cur) )
-        ;;
-      ssh-key)
-        COMPREPLY=( $(compgen -W "$ssh_key_cmds" -- $cur) )
-        ;;
-      tag)
-        COMPREPLY=( $(compgen -W "$tag_cmds" -- $cur) )
-        ;;
-
-      "*")
-        ;;
-    esac
-  fi
-
-}
-complete -F _balena_complete balena

completion/generate-completion.js

@@ -1,175 +0,0 @@
-/**
- * @license
- * Copyright 2021 Balena Ltd.
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *    http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-const path = require('path');
-const rootDir = path.join(__dirname, '..');
-const fs = require('fs');
-const manifestFile = 'oclif.manifest.json';
-
-commandsFilePath = path.join(rootDir, manifestFile);
-if (fs.existsSync(commandsFilePath)) {
-	console.log('Generating shell auto completion files...');
-} else {
-	console.error(`generate-completion.js: Could not find "${manifestFile}"`);
-	process.exitCode = 1;
-	return;
-}
-
-const commandsJson = JSON.parse(fs.readFileSync(commandsFilePath, 'utf8'));
-
-const mainCommands = [];
-const additionalCommands = [];
-for (const key of Object.keys(commandsJson.commands).sort()) {
-	const cmd = key.split(':');
-	if (cmd.length > 1) {
-		additionalCommands.push(cmd);
-		if (!mainCommands.includes(cmd[0])) {
-			mainCommands.push(cmd[0]);
-		}
-	} else {
-		mainCommands.push(cmd[0]);
-	}
-}
-const mainCommandsStr = mainCommands.join(' ');
-
-// GENERATE BASH COMPLETION FILE
-bashFilePathIn = path.join(__dirname, '/templates/bash.template');
-bashFilePathOut = path.join(__dirname, 'balena-completion.bash');
-
-try {
-	fs.unlinkSync(bashFilePathOut);
-} catch (error) {
-	process.exitCode = 1;
-	return console.error(error);
-}
-
-fs.readFile(bashFilePathIn, 'utf8', function (err, data) {
-	if (err) {
-		process.exitCode = 1;
-		return console.error(err);
-	}
-
-	data = data.replace(
-		'#TEMPLATE FILE FOR BASH COMPLETION#',
-		"#GENERATED FILE DON'T MODIFY#",
-	);
-
-	data = data.replace(
-		/\$main_commands\$/g,
-		'main_commands="' + mainCommandsStr + '"',
-	);
-	let subCommands = [];
-	let prevElement = additionalCommands[0][0];
-	additionalCommands.forEach(function (element) {
-		if (element[0] === prevElement) {
-			subCommands.push(element[1]);
-		} else {
-			const prevElement2 = prevElement.replace(/-/g, '_') + '_cmds';
-			data = data.replace(
-				/\$sub_cmds\$/g,
-				'  ' + prevElement2 + '="' + subCommands.join(' ') + '"\n$sub_cmds$',
-			);
-			data = data.replace(
-				/\$sub_cmds_prev\$/g,
-				'      ' +
-					prevElement +
-					')\n        COMPREPLY=( $(compgen -W "$' +
-					prevElement2 +
-					'" -- $cur) )\n        ;;\n$sub_cmds_prev$',
-			);
-			prevElement = element[0];
-			subCommands = [];
-			subCommands.push(element[1]);
-		}
-	});
-	// cleanup placeholders
-	data = data.replace(/\$sub_cmds\$/g, '');
-	data = data.replace(/\$sub_cmds_prev\$/g, '');
-
-	fs.writeFile(bashFilePathOut, data, 'utf8', function (error) {
-		if (error) {
-			process.exitCode = 1;
-			return console.error(error);
-		}
-	});
-});
-
-// GENERATE ZSH COMPLETION FILE
-zshFilePathIn = path.join(__dirname, '/templates/zsh.template');
-zshFilePathOut = path.join(__dirname, '_balena');
-
-try {
-	fs.unlinkSync(zshFilePathOut);
-} catch (error) {
-	process.exitCode = 1;
-	return console.error(error);
-}
-
-fs.readFile(zshFilePathIn, 'utf8', function (err, data) {
-	if (err) {
-		process.exitCode = 1;
-		return console.error(err);
-	}
-
-	data = data.replace(
-		'#TEMPLATE FILE FOR ZSH COMPLETION#',
-		"#GENERATED FILE DON'T MODIFY#",
-	);
-
-	data = data.replace(
-		/\$main_commands\$/g,
-		'main_commands=( ' + mainCommandsStr + ' )',
-	);
-	let subCommands = [];
-	let prevElement = additionalCommands[0][0];
-	additionalCommands.forEach(function (element) {
-		if (element[0] === prevElement) {
-			subCommands.push(element[1]);
-		} else {
-			const prevElement2 = prevElement.replace(/-/g, '_') + '_cmds';
-			data = data.replace(
-				/\$sub_cmds\$/g,
-				'  ' + prevElement2 + '=( ' + subCommands.join(' ') + ' )\n$sub_cmds$',
-			);
-			data = data.replace(
-				/\$sub_cmds_prev\$/g,
-				'      "' +
-					prevElement +
-					'")\n        _describe -t ' +
-					prevElement2 +
-					" '" +
-					prevElement +
-					"_cmd' " +
-					prevElement2 +
-					' "$@" && ret=0\n      ;;\n$sub_cmds_prev$',
-			);
-			prevElement = element[0];
-			subCommands = [];
-			subCommands.push(element[1]);
-		}
-	});
-	// cleanup placeholders
-	data = data.replace(/\$sub_cmds\$/g, '');
-	data = data.replace(/\$sub_cmds_prev\$/g, '');
-
-	fs.writeFile(zshFilePathOut, data, 'utf8', function (error) {
-		if (error) {
-			process.exitCode = 1;
-			return console.error(error);
-		}
-	});
-});

completion/templates/bash.template

@@ -1,32 +0,0 @@
-#!/bin/bash
-
-#TEMPLATE FILE FOR BASH COMPLETION#
-
-_balena_complete()
-{
-  local cur prev
-
-  # Valid top-level completions
-  $main_commands$
-  # Sub-completions
-$sub_cmds$
-
-
-  COMPREPLY=()
-  cur=${COMP_WORDS[COMP_CWORD]}
-  prev=${COMP_WORDS[COMP_CWORD-1]}
-
-  if [ $COMP_CWORD -eq 1 ]
-  then
-    COMPREPLY=( $(compgen -W "${main_commands}" -- $cur) )
-  elif [ $COMP_CWORD -eq 2 ]
-  then
-    case "$prev" in
-$sub_cmds_prev$
-      "*")
-        ;;
-    esac
-  fi
-
-}
-complete -F _balena_complete balena

completion/templates/zsh.template

@@ -1,35 +0,0 @@
-#compdef balena
-#autoload
-
-#TEMPLATE FILE FOR ZSH COMPLETION#
-
-_balena() {
-  typeset -A opt_args
-  local context state line curcontext="$curcontext"
-
-  # Valid top-level completions
-  $main_commands$
-  # Sub-completions
-$sub_cmds$
-
-  _arguments -C \
-    '(- 1 *)--version[show version and exit]' \
-    '(- 1 *)--help[show help options and exit]' \
-    '1:first command:_balena_main_cmds' \
-    '2:second command:_balena_sec_cmds' \
-  && ret=0
-}
-
-(( $+functions[_balena_main_cmds] )) ||
-_balena_main_cmds() {
-  _describe -t main_commands 'command' main_commands "$@" && ret=0
-}
-
-(( $+functions[_balena_sec_cmds] )) ||
-_balena_sec_cmds() {
-  case $line[1] in
-$sub_cmds_prev$
-  esac
-}
-
-_balena "$@"

doc/automated-init.md

@@ -0,0 +1,112 @@
+# Provisioning Resin.io devices in automated (non-interactive) mode
+
+This document describes how to run the `device init` command in non-interactive mode.
+
+It requires collecting some preliminary information _once_.
+
+The final command to provision the device looks like this:
+
+```bash
+resin device init --app APP_ID --os-version OS_VERSION --drive DRIVE --config CONFIG_FILE --yes
+
+```
+
+You can run this command as many times as you need, putting the new medium (SD card / USB stick) each time.
+
+But before you can run it you need to collect the parameters and build the configuration file. Keep reading to figure out how to do it.
+
+
+## Collect all the required parameters.
+
+1. `DEVICE_TYPE`. Run
+	```bash
+	resin devices supported
+	```
+	and find the _slug_ for your target device type, like _raspberrypi3_.
+
+1. `APP_ID`. Create an application (`resin app create APP_NAME --type DEVICE_TYPE`) or find an existing one (`resin apps`) and notice its ID.
+
+1. `OS_VERSION`. Run
+	```bash
+	resin os versions DEVICE_TYPE
+	```
+	and pick the version that you need, like _v2.0.6+rev1.prod_.
+	_Note_ that even though we support _semver ranges_ it's recommended to use the exact version when doing the automated provisioning as it
+	guarantees full compatibility between the steps.
+
+1. `DRIVE`. Plug in your target medium (SD card or the USB stick, depending on your device type) and run
+	```bash
+	resin util available-drives
+	```
+	and get the drive name, like _/dev/sdb_ or _/dev/mmcblk0_.
+	The resin CLI will not display the system drives to protect you,
+	but still please check very carefully that you've picked the correct drive as it will be erased during the provisioning process.
+
+Now we have all the parameters -- time to build the config file.
+
+## Build the config file
+
+Interactive device provisioning process often includes collecting some extra device configuration, like the networking mode and wifi credentials.
+
+To skip this interactive step we need to buid this configuration once and save it to the JSON file for later reuse.
+
+Let's say we will place it into the `CONFIG_FILE` path, like _./resin-os/raspberrypi3-config.json_.
+
+We also need to put the OS image somewhere, let's call this path `OS_IMAGE_PATH`, it can be something like _./resin-os/raspberrypi3-v2.0.6+rev1.prod.img_.
+
+1. First we need to download the OS image once. That's needed for building the config, and will speedup the subsequent operations as the downloaded OS image is placed into the local cache.
+
+	Run:
+	```bash
+	resin os download DEVICE_TYPE --output OS_IMAGE_PATH --version OS_VERSION
+	```
+
+1. Now we're ready to build the config:
+
+	```bash
+	resin os build-config OS_IMAGE_PATH DEVICE_TYPE --output CONFIG_FILE
+	```
+
+	This will run you through the interactive configuration wizard and in the end save the generated config as `CONFIG_FILE`. You can then verify it's not empty:
+
+	```bash
+	cat CONFIG_FILE
+	```
+
+## Done
+
+Now you're ready to run the command in the beginning of this guide.
+
+Please note again that all of these steps only need to be done once (unless you need to change something), and once all the parameters are collected the main init command can be run unchanged.
+
+But there are still some nuances to cover, please read below. 
+
+## Nuances
+
+### `sudo` password on *nix systems
+
+In order to write the image to the raw device we need the root permissions, this is unavoidable.
+
+To improve the security we only run the minimal subcommand with `sudo`.
+
+This means that with the default setup you're interrupted closer to the end of the device init process to enter your sudo password for this subcommand to work.
+
+There are several ways to eliminate it and make the process fully non-interactive.
+
+#### Option 1: make passwordless sudo.
+
+Obviously you shouldn't do that if the machine you're working on has access to any sensitive resources or information.
+
+But if you're using a machine dedicated to resin provisioning this can be fine, and also the simplest thing to do.
+
+#### Option 2: `NOPASSWD` directive
+
+You can configure the `resin` CLI command to be sudo-runnable without the password. Check [this post](https://askubuntu.com/questions/159007/how-do-i-run-specific-sudo-commands-without-a-password) for an example.
+
+### Extra initialization config
+
+As of June 2017 all the supported devices should not require any other interactive configuration.
+
+But by the design of our system it is _possible_ (though it doesn't look very likely it's going to happen any time soon) that some extra initialization options may be requested for the specific device types.
+
+If that is the case please raise the issue in the resin CLI repository and the maintainers will add the necessary options to build the similar JSON config for this step.

eslint.config.js

@@ -1,32 +0,0 @@
-const { FlatCompat } = require('@eslint/eslintrc');
-
-const compat = new FlatCompat({
-	baseDirectory: __dirname,
-});
-module.exports = [
-	...require('@balena/lint/config/eslint.config'),
-	...compat.config({
-		parserOptions: {
-			project: 'tsconfig.dev.json',
-		},
-		ignorePatterns: ['**/generate-completion.js', '**/bin/**/*'],
-		rules: {
-			ignoreDefinitionFiles: 0,
-			'@typescript-eslint/no-non-null-assertion': 'off',
-			'@typescript-eslint/no-shadow': 'off',
-			'@typescript-eslint/no-var-requires': 'off',
-			'@typescript-eslint/no-require-imports': 'off',
-			'@typescript-eslint/no-unnecessary-type-assertion': 'off',
-			'@typescript-eslint/prefer-nullish-coalescing': 'warn',
-
-			'no-restricted-imports': ['error', {
-				paths: ['resin-cli-visuals', 'chalk', 'common-tags', 'resin-cli-form'],
-			}],
-
-			'@typescript-eslint/no-unused-vars': ['error', {
-				argsIgnorePattern: '^_',
-				caughtErrorsIgnorePattern: '^_',
-			}],
-		},
-	}),
-];

extras/capitanodoc/index.coffee

@@ -0,0 +1,46 @@
+_ = require('lodash')
+path = require('path')
+capitanodoc = require('../../capitanodoc')
+markdown = require('./markdown')
+
+result = {}
+result.title = capitanodoc.title
+result.introduction = capitanodoc.introduction
+result.categories = []
+
+for commandCategory in capitanodoc.categories
+	category = {}
+	category.title = commandCategory.title
+	category.commands = []
+
+	for file in commandCategory.files
+		actions = require(path.join(process.cwd(), file))
+
+		if actions.signature?
+			category.commands.push(_.omit(actions, 'action'))
+		else
+			for actionName, actionCommand of actions
+				category.commands.push(_.omit(actionCommand, 'action'))
+
+	result.categories.push(category)
+
+result.toc = _.cloneDeep(result.categories)
+result.toc = _.map result.toc, (category) ->
+	category.commands = _.map category.commands, (command) ->
+		return {
+			signature: command.signature
+			anchor: '#' + command.signature
+								.replace(/\s/g,'-')
+								.replace(/</g, '60-')
+								.replace(/>/g, '-62-')
+								.replace(/\[/g, '')
+								.replace(/\]/g, '-')
+								.replace(/--/g, '-')
+								.replace(/\.\.\./g, '')
+								.replace(/\|/g, '')
+								.toLowerCase()
+		}
+
+	return category
+
+console.log(markdown.display(result))

extras/capitanodoc/markdown.coffee

@@ -0,0 +1,66 @@
+_ = require('lodash')
+ent = require('ent')
+utils = require('./utils')
+
+exports.command = (command) ->
+	result = """
+		## #{ent.encode(command.signature)}
+
+		#{command.help}\n
+	"""
+
+	if not _.isEmpty(command.options)
+		result += '\n### Options'
+
+		for option in command.options
+			result += """
+				\n\n#### #{utils.parseSignature(option)}
+
+				#{option.description}
+			"""
+
+		result += '\n'
+
+	return result
+
+exports.category = (category) ->
+	result = """
+		# #{category.title}\n
+	"""
+
+	for command in category.commands
+		result += '\n' + exports.command(command)
+
+	return result
+
+exports.toc = (toc) ->
+	result = '''
+		# Table of contents\n
+	'''
+
+	for category in toc
+
+		result += """
+			\n- #{category.title}\n\n
+		"""
+
+		for command in category.commands
+			result += """
+				\t- [#{ent.encode(command.signature)}](#{command.anchor})\n
+			"""
+
+	return result
+
+exports.display = (doc) ->
+	result = """
+		# #{doc.title}
+
+		#{doc.introduction}
+
+		#{exports.toc(doc.toc)}
+	"""
+
+	for category in doc.categories
+		result += '\n' + exports.category(category)
+
+	return result

extras/capitanodoc/utils.coffee

@@ -0,0 +1,26 @@
+_ = require('lodash')
+ent = require('ent')
+
+exports.getOptionPrefix = (signature) ->
+	if signature.length > 1
+		return '--'
+	else
+		return '-'
+
+exports.getOptionSignature = (signature) ->
+	return "#{exports.getOptionPrefix(signature)}#{signature}"
+
+exports.parseSignature = (option) ->
+	result = exports.getOptionSignature(option.signature)
+
+	if not _.isEmpty(option.alias)
+		if _.isString(option.alias)
+			result += ", #{exports.getOptionSignature(option.alias)}"
+		else
+			for alias in option.alias
+				result += ", #{exports.getOptionSignature(option.alias)}"
+
+	if option.parameter?
+		result += " <#{option.parameter}>"
+
+	return ent.encode(result)

gulpfile.coffee

@@ -0,0 +1,50 @@
+path = require('path')
+gulp = require('gulp')
+coffee = require('gulp-coffee')
+coffeelint = require('gulp-coffeelint')
+inlinesource = require('gulp-inline-source')
+mocha = require('gulp-mocha')
+shell = require('gulp-shell')
+packageJSON = require('./package.json')
+
+OPTIONS =
+	config:
+		coffeelint: path.join(__dirname, 'coffeelint.json')
+	files:
+		coffee: [ 'lib/**/*.coffee', 'gulpfile.coffee' ]
+		app: 'lib/**/*.coffee'
+		tests: 'tests/**/*.spec.coffee'
+		pages: 'lib/auth/pages/*.ejs'
+	directories:
+		build: 'build/'
+
+gulp.task 'pages', ->
+	gulp.src(OPTIONS.files.pages)
+		.pipe(inlinesource())
+		.pipe(gulp.dest('build/auth/pages'))
+
+gulp.task 'coffee', [ 'lint' ], ->
+	gulp.src(OPTIONS.files.app)
+		.pipe(coffee(bare: true, header: true))
+		.pipe(gulp.dest(OPTIONS.directories.build))
+
+gulp.task 'lint', ->
+	gulp.src(OPTIONS.files.coffee)
+		.pipe(coffeelint({
+			optFile: OPTIONS.config.coffeelint
+		}))
+		.pipe(coffeelint.reporter())
+
+gulp.task 'test', ->
+	gulp.src(OPTIONS.files.tests, read: false)
+		.pipe(mocha({
+			reporter: 'min'
+		}))
+
+gulp.task 'build', [
+	'coffee',
+	'pages'
+]
+
+gulp.task 'watch', [ 'build' ], ->
+	gulp.watch([ OPTIONS.files.coffee ], [ 'build' ])

lib/actions/app.coffee

@@ -0,0 +1,157 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+commandOptions = require('./command-options')
+
+exports.create =
+	signature: 'app create <name>'
+	description: 'create an application'
+	help: '''
+		Use this command to create a new resin.io application.
+
+		You can specify the application device type with the `--type` option.
+		Otherwise, an interactive dropdown will be shown for you to select from.
+
+		You can see a list of supported device types with
+
+			$ resin devices supported
+
+		Examples:
+
+			$ resin app create MyApp
+			$ resin app create MyApp --type raspberry-pi
+	'''
+	options: [
+		{
+			signature: 'type'
+			parameter: 'type'
+			description: 'application device type (Check available types with `resin devices supported`)'
+			alias: 't'
+		}
+	]
+	permission: 'user'
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		patterns = require('../utils/patterns')
+
+		# Validate the the application name is available
+		# before asking the device type.
+		# https://github.com/resin-io/resin-cli/issues/30
+		resin.models.application.has(params.name).then (hasApplication) ->
+			if hasApplication
+				throw new Error('You already have an application with that name!')
+
+		.then ->
+			return options.type or patterns.selectDeviceType()
+		.then (deviceType) ->
+			return resin.models.application.create(params.name, deviceType)
+		.then (application) ->
+			console.info("Application created: #{application.app_name} (#{application.device_type}, id #{application.id})")
+		.nodeify(done)
+
+exports.list =
+	signature: 'apps'
+	description: 'list all applications'
+	help: '''
+		Use this command to list all your applications.
+
+		Notice this command only shows the most important bits of information for each app.
+		If you want detailed information, use resin app <name> instead.
+
+		Examples:
+
+			$ resin apps
+	'''
+	permission: 'user'
+	primary: true
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		visuals = require('resin-cli-visuals')
+
+		resin.models.application.getAll().then (applications) ->
+			console.log visuals.table.horizontal applications, [
+				'id'
+				'app_name'
+				'device_type'
+				'online_devices'
+				'devices_length'
+			]
+		.nodeify(done)
+
+exports.info =
+	signature: 'app <name>'
+	description: 'list a single application'
+	help: '''
+		Use this command to show detailed information for a single application.
+
+		Examples:
+
+			$ resin app MyApp
+	'''
+	permission: 'user'
+	primary: true
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		visuals = require('resin-cli-visuals')
+
+		resin.models.application.get(params.name).then (application) ->
+			console.log visuals.table.vertical application, [
+				"$#{application.app_name}$"
+				'id'
+				'device_type'
+				'git_repository'
+				'commit'
+			]
+		.nodeify(done)
+
+exports.restart =
+	signature: 'app restart <name>'
+	description: 'restart an application'
+	help: '''
+		Use this command to restart all devices that belongs to a certain application.
+
+		Examples:
+
+			$ resin app restart MyApp
+	'''
+	permission: 'user'
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		resin.models.application.restart(params.name).nodeify(done)
+
+exports.remove =
+	signature: 'app rm <name>'
+	description: 'remove an application'
+	help: '''
+		Use this command to remove a resin.io application.
+
+		Notice this command asks for confirmation interactively.
+		You can avoid this by passing the `--yes` boolean option.
+
+		Examples:
+
+			$ resin app rm MyApp
+			$ resin app rm MyApp --yes
+	'''
+	options: [ commandOptions.yes ]
+	permission: 'user'
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		patterns = require('../utils/patterns')
+
+		patterns.confirm(options.yes, 'Are you sure you want to delete the application?').then ->
+			resin.models.application.remove(params.name)
+		.nodeify(done)

lib/actions/auth.coffee

@@ -0,0 +1,206 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+exports.login	=
+	signature: 'login'
+	description: 'login to resin.io'
+	help: '''
+		Use this command to login to your resin.io account.
+
+		This command will prompt you to login using the following login types:
+
+		- Web authorization: open your web browser and prompt you to authorize the CLI
+		from the dashboard.
+
+		- Credentials: using email/password and 2FA.
+
+		- Token: using the authentication token from the preferences page.
+
+		Examples:
+
+			$ resin login
+			$ resin login --web
+			$ resin login --token "..."
+			$ resin login --credentials
+			$ resin login --credentials --email johndoe@gmail.com --password secret
+	'''
+	options: [
+		{
+			signature: 'token'
+			description: 'auth token'
+			parameter: 'token'
+			alias: 't'
+		}
+		{
+			signature: 'web'
+			description: 'web-based login'
+			boolean: true
+			alias: 'w'
+		}
+		{
+			signature: 'credentials'
+			description: 'credential-based login'
+			boolean: true
+			alias: 'c'
+		}
+		{
+ 			signature: 'email'
+ 			parameter: 'email'
+ 			description: 'email'
+ 			alias: [ 'e', 'u' ]
+ 		}
+ 		{
+ 			signature: 'password'
+ 			parameter: 'password'
+ 			description: 'password'
+ 			alias: 'p'
+ 		}
+	]
+	primary: true
+	action: (params, options, done) ->
+		_ = require('lodash')
+		Promise = require('bluebird')
+		resin = require('resin-sdk-preconfigured')
+		auth = require('../auth')
+		form = require('resin-cli-form')
+		patterns = require('../utils/patterns')
+		messages = require('../utils/messages')
+
+		login = (options) ->
+			if options.token?
+				return Promise.try ->
+					return options.token if _.isString(options.token)
+					return form.ask
+						message: 'Token (from the preferences page)'
+						name: 'token'
+						type: 'input'
+				.then(resin.auth.loginWithToken)
+			else if options.credentials
+				return patterns.authenticate(options)
+			else if options.web
+				console.info('Connecting to the web dashboard')
+				return auth.login()
+
+			return patterns.askLoginType().then (loginType) ->
+
+				if loginType is 'register'
+					capitanoRunAsync = Promise.promisify(require('capitano').run)
+					return capitanoRunAsync('signup')
+
+				options[loginType] = true
+				return login(options)
+
+		resin.settings.get('resinUrl').then (resinUrl) ->
+			console.log(messages.resinAsciiArt)
+			console.log("\nLogging in to #{resinUrl}")
+			return login(options)
+		.then(resin.auth.whoami)
+		.tap (username) ->
+			console.info("Successfully logged in as: #{username}")
+			console.info """
+
+				Find out about the available commands by running:
+
+				  $ resin help
+
+				#{messages.reachingOut}
+			"""
+		.nodeify(done)
+
+exports.logout =
+	signature: 'logout'
+	description: 'logout from resin.io'
+	help: '''
+		Use this command to logout from your resin.io account.o
+
+		Examples:
+
+			$ resin logout
+	'''
+	permission: 'user'
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		resin.auth.logout().nodeify(done)
+
+exports.signup =
+	signature: 'signup'
+	description: 'signup to resin.io'
+	help: '''
+		Use this command to signup for a resin.io account.
+
+		If signup is successful, you'll be logged in to your new user automatically.
+
+		Examples:
+
+			$ resin signup
+			Email: johndoe@acme.com
+			Password: ***********
+
+			$ resin whoami
+			johndoe
+	'''
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		form = require('resin-cli-form')
+		validation = require('../utils/validation')
+
+		resin.settings.get('resinUrl').then (resinUrl) ->
+			console.log("\nRegistering to #{resinUrl}")
+
+			form.run [
+				message: 'Email:'
+				name: 'email'
+				type: 'input'
+				validate: validation.validateEmail
+			,
+				message: 'Password:'
+				name: 'password'
+				type: 'password',
+				validate: validation.validatePassword
+			]
+
+		.then(resin.auth.register)
+		.then(resin.auth.loginWithToken)
+		.nodeify(done)
+
+exports.whoami =
+	signature: 'whoami'
+	description: 'get current username and email address'
+	help: '''
+		Use this command to find out the current logged in username and email address.
+
+		Examples:
+
+			$ resin whoami
+	'''
+	permission: 'user'
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		resin = require('resin-sdk-preconfigured')
+		visuals = require('resin-cli-visuals')
+
+		Promise.props
+			username: resin.auth.whoami()
+			email: resin.auth.getEmail()
+			url: resin.settings.get('resinUrl')
+		.then (results) ->
+			console.log visuals.table.vertical results, [
+				'$account information$'
+				'username'
+				'email'
+				'url'
+			]
+		.nodeify(done)

lib/actions/build.coffee

@@ -0,0 +1,64 @@
+# Imported here because it's needed for the setup
+# of this action
+Promise = require('bluebird')
+dockerUtils = require('../utils/docker')
+
+getBundleInfo = Promise.method (options) ->
+	helpers = require('../utils/helpers')
+
+	if options.application?
+		# An application was provided
+		return helpers.getAppInfo(options.application)
+		.then (app) ->
+			return [app.arch, app.device_type]
+	else if options.arch? and options.deviceType?
+		return [options.arch, options.deviceType]
+	else
+		# No information, cannot do resolution
+		return undefined
+
+module.exports =
+	signature: 'build [source]'
+	description: 'Build a container locally'
+	permission: 'user'
+	help: '''
+		Use this command to build a container with a provided docker daemon.
+
+		You must provide either an application or a device-type/architecture
+		pair to use the resin Dockerfile pre-processor
+		(e.g. Dockerfile.template -> Dockerfile).
+
+		Examples:
+
+			$ resin build
+			$ resin build ./source/
+			$ resin build --deviceType raspberrypi3 --arch armhf
+			$ resin build --application MyApp ./source/
+			$ resin build --docker '/var/run/docker.sock'
+			$ resin build --dockerHost my.docker.host --dockerPort 2376 --ca ca.pem --key key.pem --cert cert.pem
+	'''
+	options: dockerUtils.appendOptions [
+		{
+			signature: 'arch'
+			parameter: 'arch'
+			description: 'The architecture to build for'
+			alias: 'A'
+		},
+		{
+			signature: 'deviceType'
+			parameter: 'deviceType'
+			description: 'The type of device this build is for'
+			alias: 'd'
+		},
+		{
+			signature: 'application'
+			parameter: 'application'
+			description: 'The target resin.io application this build is for'
+			alias: 'a'
+		},
+	]
+	action: (params, options, done) ->
+		Logger = require('../utils/logger')
+		dockerUtils.runBuild(params, options, getBundleInfo, new Logger())
+		.asCallback(done)
+

lib/actions/command-options.coffee

@@ -0,0 +1,100 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+_ = require('lodash')
+
+exports.yes =
+	signature: 'yes'
+	description: 'confirm non interactively'
+	boolean: true
+	alias: 'y'
+
+exports.optionalApplication =
+	signature: 'application'
+	parameter: 'application'
+	description: 'application name'
+	alias: [ 'a', 'app' ]
+
+exports.application = _.defaults
+	required: 'You have to specify an application'
+, exports.optionalApplication
+
+exports.optionalDevice =
+	signature: 'device'
+	parameter: 'device'
+	description: 'device uuid'
+	alias: 'd'
+
+exports.optionalDeviceApiKey =
+	signature: 'deviceApiKey'
+	description: 'custom device key - note that this is only supported on ResinOS 2.0.3+'
+	parameter: 'device-api-key'
+	alias: 'k'
+
+exports.booleanDevice =
+	signature: 'device'
+	description: 'device'
+	boolean: true
+	alias: 'd'
+
+exports.osVersion =
+	signature: 'version'
+	description: """
+		exact version number, or a valid semver range,
+		or 'latest' (includes pre-releases),
+		or 'default' (excludes pre-releases if at least one stable version is available),
+		or 'recommended' (excludes pre-releases, will fail if only pre-release versions are available),
+		or 'menu' (will show the interactive menu)
+	"""
+	parameter: 'version'
+
+exports.network =
+	signature: 'network'
+	parameter: 'network'
+	description: 'network type'
+	alias: 'n'
+
+exports.wifiSsid =
+	signature: 'ssid'
+	parameter: 'ssid'
+	description: 'wifi ssid, if network is wifi'
+	alias: 's'
+
+exports.wifiKey =
+	signature: 'key'
+	parameter: 'key'
+	description: 'wifi key, if network is wifi'
+	alias: 'k'
+
+exports.forceUpdateLock =
+	signature: 'force'
+	description: 'force action if the update lock is set'
+	boolean: true
+	alias: 'f'
+
+exports.drive =
+	signature: 'drive'
+	description: 'the drive to write the image to, like `/dev/sdb` or `/dev/mmcblk0`.
+		Careful with this as you can erase your hard drive.
+		Check `resin util available-drives` for available options.'
+	parameter: 'drive'
+	alias: 'd'
+
+exports.advancedConfig =
+	signature: 'advanced'
+	description: 'show advanced configuration options'
+	boolean: true
+	alias: 'v'

lib/actions/config.coffee

@@ -0,0 +1,311 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+commandOptions = require('./command-options')
+
+exports.read =
+	signature: 'config read'
+	description: 'read a device configuration'
+	help: '''
+		Use this command to read the config.json file from the mounted filesystem (e.g. SD card) of a provisioned device"
+
+		Examples:
+
+			$ resin config read --type raspberry-pi
+			$ resin config read --type raspberry-pi --drive /dev/disk2
+	'''
+	options: [
+		{
+			signature: 'type'
+			description: 'device type (Check available types with `resin devices supported`)'
+			parameter: 'type'
+			alias: 't'
+			required: 'You have to specify a device type'
+		}
+		{
+			signature: 'drive'
+			description: 'drive'
+			parameter: 'drive'
+			alias: 'd'
+		}
+	]
+	permission: 'user'
+	root: true
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		config = require('resin-config-json')
+		visuals = require('resin-cli-visuals')
+		umountAsync = Promise.promisify(require('umount').umount)
+		prettyjson = require('prettyjson')
+
+		Promise.try ->
+			return options.drive or visuals.drive('Select the device drive')
+		.tap(umountAsync)
+		.then (drive) ->
+			return config.read(drive, options.type)
+		.tap (configJSON) ->
+			console.info(prettyjson.render(configJSON))
+		.nodeify(done)
+
+exports.write =
+	signature: 'config write <key> <value>'
+	description: 'write a device configuration'
+	help: '''
+		Use this command to write the config.json file to the mounted filesystem (e.g. SD card) of a provisioned device
+
+		Examples:
+
+			$ resin config write --type raspberry-pi username johndoe
+			$ resin config write --type raspberry-pi --drive /dev/disk2 username johndoe
+			$ resin config write --type raspberry-pi files.network/settings "..."
+	'''
+	options: [
+		{
+			signature: 'type'
+			description: 'device type (Check available types with `resin devices supported`)'
+			parameter: 'type'
+			alias: 't'
+			required: 'You have to specify a device type'
+		}
+		{
+			signature: 'drive'
+			description: 'drive'
+			parameter: 'drive'
+			alias: 'd'
+		}
+	]
+	permission: 'user'
+	root: true
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		_ = require('lodash')
+		config = require('resin-config-json')
+		visuals = require('resin-cli-visuals')
+		umountAsync = Promise.promisify(require('umount').umount)
+
+		Promise.try ->
+			return options.drive or visuals.drive('Select the device drive')
+		.tap(umountAsync)
+		.then (drive) ->
+			config.read(drive, options.type).then (configJSON) ->
+				console.info("Setting #{params.key} to #{params.value}")
+				_.set(configJSON, params.key, params.value)
+				return configJSON
+			.tap ->
+				return umountAsync(drive)
+			.then (configJSON) ->
+				return config.write(drive, options.type, configJSON)
+		.tap ->
+			console.info('Done')
+		.nodeify(done)
+
+exports.inject =
+	signature: 'config inject <file>'
+	description: 'inject a device configuration file'
+	help: '''
+		Use this command to inject a config.json file to the mounted filesystem (e.g. SD card) of a provisioned device"
+
+		Examples:
+
+			$ resin config inject my/config.json --type raspberry-pi
+			$ resin config inject my/config.json --type raspberry-pi --drive /dev/disk2
+	'''
+	options: [
+		{
+			signature: 'type'
+			description: 'device type (Check available types with `resin devices supported`)'
+			parameter: 'type'
+			alias: 't'
+			required: 'You have to specify a device type'
+		}
+		{
+			signature: 'drive'
+			description: 'drive'
+			parameter: 'drive'
+			alias: 'd'
+		}
+	]
+	permission: 'user'
+	root: true
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		config = require('resin-config-json')
+		visuals = require('resin-cli-visuals')
+		umountAsync = Promise.promisify(require('umount').umount)
+		readFileAsync = Promise.promisify(require('fs').readFile)
+
+		Promise.try ->
+			return options.drive or visuals.drive('Select the device drive')
+		.tap(umountAsync)
+		.then (drive) ->
+			readFileAsync(params.file, 'utf8').then(JSON.parse).then (configJSON) ->
+				return config.write(drive, options.type, configJSON)
+		.tap ->
+			console.info('Done')
+		.nodeify(done)
+
+exports.reconfigure =
+	signature: 'config reconfigure'
+	description: 'reconfigure a provisioned device'
+	help: '''
+		Use this command to reconfigure a provisioned device
+
+		Examples:
+
+			$ resin config reconfigure --type raspberry-pi
+			$ resin config reconfigure --type raspberry-pi --advanced
+			$ resin config reconfigure --type raspberry-pi --drive /dev/disk2
+	'''
+	options: [
+		{
+			signature: 'type'
+			description: 'device type (Check available types with `resin devices supported`)'
+			parameter: 'type'
+			alias: 't'
+			required: 'You have to specify a device type'
+		}
+		{
+			signature: 'drive'
+			description: 'drive'
+			parameter: 'drive'
+			alias: 'd'
+		}
+		{
+			signature: 'advanced'
+			description: 'show advanced commands'
+			boolean: true
+			alias: 'v'
+		}
+	]
+	permission: 'user'
+	root: true
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		config = require('resin-config-json')
+		visuals = require('resin-cli-visuals')
+		capitanoRunAsync = Promise.promisify(require('capitano').run)
+		umountAsync = Promise.promisify(require('umount').umount)
+
+		Promise.try ->
+			return options.drive or visuals.drive('Select the device drive')
+		.tap(umountAsync)
+		.then (drive) ->
+			config.read(drive, options.type).get('uuid')
+				.tap ->
+					umountAsync(drive)
+				.then (uuid) ->
+					configureCommand = "os configure #{drive} #{uuid}"
+					if options.advanced
+						configureCommand += ' --advanced'
+					return capitanoRunAsync(configureCommand)
+		.then ->
+			console.info('Done')
+		.nodeify(done)
+
+exports.generate =
+	signature: 'config generate'
+	description: 'generate a config.json file'
+	help: '''
+		Use this command to generate a config.json for a device or application.
+
+		This is interactive by default, but you can do this automatically without interactivity
+		by specifying an option for each question on the command line, if you know the questions
+		that will be asked for the relevant device type.
+
+		Examples:
+
+			$ resin config generate --device 7cf02a6
+			$ resin config generate --device 7cf02a6 --device-api-key <existingDeviceKey>
+			$ resin config generate --device 7cf02a6 --output config.json
+			$ resin config generate --app MyApp
+			$ resin config generate --app MyApp --output config.json
+			$ resin config generate --app MyApp --network wifi --wifiSsid mySsid --wifiKey abcdefgh --appUpdatePollInterval 1
+	'''
+	options: [
+		commandOptions.optionalApplication
+		commandOptions.optionalDevice
+		commandOptions.optionalDeviceApiKey
+		{
+			signature: 'output'
+			description: 'output'
+			parameter: 'output'
+			alias: 'o'
+		}
+		# Options for non-interactive configuration
+		{
+			signature: 'network'
+			description: 'the network type to use: ethernet or wifi'
+			parameter: 'network'
+		}
+		{
+			signature: 'wifiSsid'
+			description: 'the wifi ssid to use (used only if --network is set to wifi)'
+			parameter: 'wifiSsid'
+		}
+		{
+			signature: 'wifiKey'
+			description: 'the wifi key to use (used only if --network is set to wifi)'
+			parameter: 'wifiKey'
+		}
+		{
+			signature: 'appUpdatePollInterval'
+			description: 'how frequently (in minutes) to poll for application updates'
+			parameter: 'appUpdatePollInterval'
+		}
+	]
+	permission: 'user'
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		writeFileAsync = Promise.promisify(require('fs').writeFile)
+		resin = require('resin-sdk-preconfigured')
+		_ = require('lodash')
+		form = require('resin-cli-form')
+		deviceConfig = require('resin-device-config')
+		prettyjson = require('prettyjson')
+		{ generateDeviceConfig, generateApplicationConfig } = require('../utils/config')
+
+		if not options.device? and not options.application?
+			throw new Error '''
+				You have to pass either a device or an application.
+
+				See the help page for examples:
+
+				  $ resin help config generate
+			'''
+
+		Promise.try ->
+			if options.device?
+				return resin.models.device.get(options.device)
+			return resin.models.application.get(options.application)
+		.then (resource) ->
+			resin.models.device.getManifestBySlug(resource.device_type)
+			.get('options')
+			.then (formOptions) ->
+				# Pass params as an override: if there is any param with exactly the same name as a
+				# required option, that value is used (and the corresponding question is not asked)
+				form.run(formOptions, override: options)
+			.then (answers) ->
+				if resource.uuid?
+					generateDeviceConfig(resource, options.deviceApiKey, answers)
+				else
+					generateApplicationConfig(resource, answers)
+		.then (config) ->
+			deviceConfig.validate(config)
+			if options.output?
+				return writeFileAsync(options.output, JSON.stringify(config))
+
+			console.log(prettyjson.render(config))
+		.nodeify(done)

lib/actions/deploy.coffee

@@ -0,0 +1,229 @@
+Promise = require('bluebird')
+dockerUtils = require('../utils/docker')
+
+getBuilderPushEndpoint = (baseUrl, owner, app) ->
+	querystring = require('querystring')
+	args = querystring.stringify({ owner, app })
+	"https://builder.#{baseUrl}/v1/push?#{args}"
+
+getBuilderLogPushEndpoint = (baseUrl, buildId, owner, app) ->
+	querystring = require('querystring')
+	args = querystring.stringify({ owner, app, buildId })
+	"https://builder.#{baseUrl}/v1/pushLogs?#{args}"
+
+formatImageName = (image) ->
+	image.split('/').pop()
+
+parseInput = Promise.method (params, options) ->
+	if not params.appName?
+		throw new Error('Need an application to deploy to!')
+	appName = params.appName
+	image = undefined
+	if params.image?
+		if options.build or options.source?
+			throw new Error('Build and source parameters are not applicable when specifying an image')
+		options.build = false
+		image = params.image
+	else if options.build
+		source = options.source || '.'
+	else
+		throw new Error('Need either an image or a build flag!')
+
+	return [appName, options.build, source, image]
+
+showPushProgress = (message) ->
+	visuals = require('resin-cli-visuals')
+	progressBar = new visuals.Progress(message)
+	progressBar.update({ percentage: 0 })
+	return progressBar
+
+getBundleInfo = (options) ->
+	helpers = require('../utils/helpers')
+
+	helpers.getAppInfo(options.appName)
+	.then (app) ->
+		[app.arch, app.device_type]
+
+performUpload = (imageStream, token, username, url, appName, logger) ->
+	request = require('request')
+	progressStream = require('progress-stream')
+	zlib = require('zlib')
+
+	# Need to strip off the newline
+	progressMessage = logger.formatMessage('info', 'Deploying').slice(0, -1)
+	progressBar = showPushProgress(progressMessage)
+	streamWithProgress = imageStream.pipe progressStream
+		time: 500,
+		length: imageStream.length
+	, ({ percentage, eta }) ->
+		progressBar.update
+			percentage: Math.min(percentage, 100)
+			eta: eta
+
+	uploadRequest = request.post
+		url: getBuilderPushEndpoint(url, username, appName)
+		headers:
+			'Content-Encoding': 'gzip'
+		auth:
+			bearer: token
+		body: streamWithProgress.pipe(zlib.createGzip({
+			level: 6
+		}))
+
+	uploadToPromise(uploadRequest, logger)
+
+uploadLogs = (logs, token, url, buildId, username, appName) ->
+	request = require('request')
+	request.post
+		json: true
+		url: getBuilderLogPushEndpoint(url, buildId, username, appName)
+		auth:
+			bearer: token
+		body: Buffer.from(logs)
+
+uploadToPromise = (uploadRequest, logger) ->
+	new Promise (resolve, reject) ->
+
+		handleMessage = (data) ->
+			data = data.toString()
+			logger.logDebug("Received data: #{data}")
+
+			try
+				obj = JSON.parse(data)
+			catch e
+				logger.logError('Error parsing reply from remote side')
+				reject(e)
+				return
+
+			if obj.type?
+				switch obj.type
+					when 'error' then reject(new Error("Remote error: #{obj.error}"))
+					when 'success' then resolve(obj)
+					when 'status' then logger.logInfo("Remote: #{obj.message}")
+					else reject(new Error("Received unexpected reply from remote: #{data}"))
+			else
+				reject(new Error("Received unexpected reply from remote: #{data}"))
+
+		uploadRequest
+		.on('error', reject)
+		.on('data', handleMessage)
+
+module.exports =
+	signature: 'deploy <appName> [image]'
+	description: 'Deploy an image to a resin.io application'
+	help: '''
+		Use this command to deploy an image to an application, optionally building it first.
+
+		Usage: `deploy <appName> ([image] | --build [--source build-dir])`
+
+		To deploy to an app on which you're a collaborator, use
+		`resin deploy <appOwnerUsername>/<appName>`.
+
+		Note: If building with this command, all options supported by `resin build`
+		are also supported with this command.
+
+		Examples:
+			$ resin deploy myApp --build --source myBuildDir/
+			$ resin deploy myApp myApp/myImage
+	'''
+	permission: 'user'
+	options: dockerUtils.appendOptions [
+		{
+			signature: 'build'
+			boolean: true
+			description: 'Build image then deploy'
+			alias: 'b'
+		},
+		{
+			signature: 'source'
+			parameter: 'source'
+			description: 'The source directory to use when building the image'
+			alias: 's'
+		},
+		{
+			signature: 'nologupload'
+			description: "Don't upload build logs to the dashboard with image (if building)"
+			boolean: true
+		}
+	]
+	action: (params, options, done) ->
+		_ = require('lodash')
+		tmp = require('tmp')
+		tmpNameAsync = Promise.promisify(tmp.tmpName)
+		resin = require('resin-sdk-preconfigured')
+
+		Logger = require('../utils/logger')
+		logger = new Logger()
+
+		# Ensure the tmp files gets deleted
+		tmp.setGracefulCleanup()
+
+		logs = ''
+
+		upload = (token, username, url) ->
+			dockerUtils.getDocker(options)
+			.then (docker) ->
+				# Check input parameters
+				parseInput(params, options)
+				.then ([appName, build, source, imageName]) ->
+					tmpNameAsync()
+					.then (bufferFile) ->
+
+						# Setup the build args for how the build routine expects them
+						options = _.assign({}, options, { appName })
+						params = _.assign({}, params, { source })
+
+						Promise.try ->
+							if build
+								dockerUtils.runBuild(params, options, getBundleInfo, logger)
+							else
+								{ image: imageName, log: '' }
+						.then ({ image: imageName, log: buildLogs }) ->
+							logger.logInfo('Initializing deploy...')
+
+							logs = buildLogs
+							Promise.all [
+								dockerUtils.bufferImage(docker, imageName, bufferFile)
+								token
+								username
+								url
+								params.appName
+								logger
+							]
+							.spread(performUpload)
+						.finally ->
+							# If the file was never written to (for instance because an error
+							# has occured before any data was written) this call will throw an
+							# ugly error, just suppress it
+							Promise.try ->
+								require('mz/fs').unlink(bufferFile)
+							.catch(_.noop)
+				.tap ({ image: imageName, buildId }) ->
+					logger.logSuccess("Successfully deployed image: #{formatImageName(imageName)}")
+					return buildId
+				.then ({ image: imageName, buildId }) ->
+					if logs is '' or options.nologupload?
+						return ''
+
+					logger.logInfo('Uploading logs to dashboard...')
+
+					Promise.join(
+						logs
+						token
+						url
+						buildId
+						username
+						params.appName
+						uploadLogs
+					)
+					.return('Successfully uploaded logs')
+				.then (msg) ->
+					logger.logSuccess(msg) if msg isnt ''
+				.asCallback(done)
+
+		Promise.join(
+			resin.auth.getToken()
+			resin.auth.whoami()
+			resin.settings.get('resinUrl')
+			upload
+		)

lib/actions/device.coffee

@@ -0,0 +1,446 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+commandOptions = require('./command-options')
+_ = require('lodash')
+
+exports.list =
+	signature: 'devices'
+	description: 'list all devices'
+	help: '''
+		Use this command to list all devices that belong to you.
+
+		You can filter the devices by application by using the `--application` option.
+
+		Examples:
+
+			$ resin devices
+			$ resin devices --application MyApp
+			$ resin devices --app MyApp
+			$ resin devices -a MyApp
+	'''
+	options: [ commandOptions.optionalApplication ]
+	permission: 'user'
+	primary: true
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		resin = require('resin-sdk-preconfigured')
+		visuals = require('resin-cli-visuals')
+
+		Promise.try ->
+			if options.application?
+				return resin.models.device.getAllByApplication(options.application)
+			return resin.models.device.getAll()
+
+		.tap (devices) ->
+			devices = _.map devices, (device) ->
+				device.uuid = device.uuid.slice(0, 7)
+				return device
+
+			console.log visuals.table.horizontal devices, [
+				'id'
+				'uuid'
+				'name'
+				'device_type'
+				'application_name'
+				'status'
+				'is_online'
+				'supervisor_version'
+				'os_version'
+				'dashboard_url'
+			]
+		.nodeify(done)
+
+exports.info =
+	signature: 'device <uuid>'
+	description: 'list a single device'
+	help: '''
+		Use this command to show information about a single device.
+
+		Examples:
+
+			$ resin device 7cf02a6
+	'''
+	permission: 'user'
+	primary: true
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		visuals = require('resin-cli-visuals')
+
+		resin.models.device.get(params.uuid).then (device) ->
+
+			resin.models.device.getStatus(device).then (status) ->
+				device.status = status
+
+				console.log visuals.table.vertical device, [
+					"$#{device.name}$"
+					'id'
+					'device_type'
+					'status'
+					'is_online'
+					'ip_address'
+					'application_name'
+					'last_seen'
+					'uuid'
+					'commit'
+					'supervisor_version'
+					'is_web_accessible'
+					'note'
+					'os_version'
+					'dashboard_url'
+				]
+		.nodeify(done)
+
+exports.supported =
+	signature: 'devices supported'
+	description: 'list all supported devices'
+	help: '''
+		Use this command to get the list of all supported devices
+
+		Examples:
+
+			$ resin devices supported
+	'''
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		visuals = require('resin-cli-visuals')
+
+		resin.models.config.getDeviceTypes().then (deviceTypes) ->
+			console.log visuals.table.horizontal deviceTypes, [
+				'slug'
+				'name'
+			]
+		.nodeify(done)
+
+exports.register =
+	signature: 'device register <application>'
+	description: 'register a device'
+	help: '''
+		Use this command to register a device to an application.
+
+		Note that device api keys are only supported on ResinOS 2.0.3+
+
+		Examples:
+
+			$ resin device register MyApp
+			$ resin device register MyApp --uuid <uuid>
+			$ resin device register MyApp --uuid <uuid> --device-api-key <existingDeviceKey>
+	'''
+	permission: 'user'
+	options: [
+		{
+			signature: 'uuid'
+			description: 'custom uuid'
+			parameter: 'uuid'
+			alias: 'u'
+		}
+		commandOptions.optionalDeviceApiKey
+	]
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		resin = require('resin-sdk-preconfigured')
+
+		Promise.join(
+			resin.models.application.get(params.application)
+			options.uuid ? resin.models.device.generateUniqueKey()
+			options.deviceApiKey ? resin.models.device.generateUniqueKey()
+			(application, uuid, deviceApiKey) ->
+				console.info("Registering to #{application.app_name}: #{uuid}")
+				if not options.deviceApiKey?
+					console.info("Using generated device api key: #{deviceApiKey}")
+				else
+					console.info('Using provided device api key')
+				return resin.models.device.register(application.id, uuid, deviceApiKey)
+		)
+		.get('uuid')
+		.nodeify(done)
+
+exports.remove =
+	signature: 'device rm <uuid>'
+	description: 'remove a device'
+	help: '''
+		Use this command to remove a device from resin.io.
+
+		Notice this command asks for confirmation interactively.
+		You can avoid this by passing the `--yes` boolean option.
+
+		Examples:
+
+			$ resin device rm 7cf02a6
+			$ resin device rm 7cf02a6 --yes
+	'''
+	options: [ commandOptions.yes ]
+	permission: 'user'
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		patterns = require('../utils/patterns')
+
+		patterns.confirm(options.yes, 'Are you sure you want to delete the device?').then ->
+			resin.models.device.remove(params.uuid)
+		.nodeify(done)
+
+exports.identify =
+	signature: 'device identify <uuid>'
+	description: 'identify a device with a UUID'
+	help: '''
+		Use this command to identify a device.
+
+		In the Raspberry Pi, the ACT led is blinked several times.
+
+		Examples:
+
+			$ resin device identify 23c73a1
+	'''
+	permission: 'user'
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		resin.models.device.identify(params.uuid).nodeify(done)
+
+exports.reboot =
+	signature: 'device reboot <uuid>'
+	description: 'restart a device'
+	help: '''
+		Use this command to remotely reboot a device
+
+		Examples:
+
+			$ resin device reboot 23c73a1
+	'''
+	options: [ commandOptions.forceUpdateLock ]
+	permission: 'user'
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		resin.models.device.reboot(params.uuid, options).nodeify(done)
+
+exports.shutdown =
+	signature: 'device shutdown <uuid>'
+	description: 'shutdown a device'
+	help: '''
+		Use this command to remotely shutdown a device
+
+		Examples:
+
+			$ resin device shutdown 23c73a1
+	'''
+	options: [ commandOptions.forceUpdateLock ]
+	permission: 'user'
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		resin.models.device.shutdown(params.uuid, options).nodeify(done)
+
+exports.enableDeviceUrl =
+	signature: 'device public-url enable <uuid>'
+	description: 'enable public URL for a device'
+	help: '''
+		Use this command to enable public URL for a device
+
+		Examples:
+
+			$ resin device public-url enable 23c73a1
+	'''
+	permission: 'user'
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		resin.models.device.enableDeviceUrl(params.uuid).nodeify(done)
+
+exports.disableDeviceUrl =
+	signature: 'device public-url disable <uuid>'
+	description: 'disable public URL for a device'
+	help: '''
+		Use this command to disable public URL for a device
+
+		Examples:
+
+			$ resin device public-url disable 23c73a1
+	'''
+	permission: 'user'
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		resin.models.device.disableDeviceUrl(params.uuid).nodeify(done)
+
+exports.getDeviceUrl =
+	signature: 'device public-url <uuid>'
+	description: 'gets the public URL of a device'
+	help: '''
+		Use this command to get the public URL of a device
+
+		Examples:
+
+			$ resin device public-url 23c73a1
+	'''
+	permission: 'user'
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		resin.models.device.getDeviceUrl(params.uuid).then (url) ->
+			console.log(url)
+		.nodeify(done)
+
+exports.hasDeviceUrl =
+	signature: 'device public-url status <uuid>'
+	description: 'Returns true if public URL is enabled for a device'
+	help: '''
+		Use this command to determine if public URL is enabled for a device
+
+		Examples:
+
+			$ resin device public-url status 23c73a1
+	'''
+	permission: 'user'
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		resin.models.device.hasDeviceUrl(params.uuid).then (hasDeviceUrl) ->
+			console.log(hasDeviceUrl)
+		.nodeify(done)
+
+exports.rename =
+	signature: 'device rename <uuid> [newName]'
+	description: 'rename a resin device'
+	help: '''
+		Use this command to rename a device.
+
+		If you omit the name, you'll get asked for it interactively.
+
+		Examples:
+
+			$ resin device rename 7cf02a6
+			$ resin device rename 7cf02a6 MyPi
+	'''
+	permission: 'user'
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		resin = require('resin-sdk-preconfigured')
+		form = require('resin-cli-form')
+
+		Promise.try ->
+			return params.newName if not _.isEmpty(params.newName)
+
+			form.ask
+				message: 'How do you want to name this device?'
+				type: 'input'
+
+		.then(_.partial(resin.models.device.rename, params.uuid))
+		.nodeify(done)
+
+exports.move =
+	signature: 'device move <uuid>'
+	description: 'move a device to another application'
+	help: '''
+		Use this command to move a device to another application you own.
+
+		If you omit the application, you'll get asked for it interactively.
+
+		Examples:
+
+			$ resin device move 7cf02a6
+			$ resin device move 7cf02a6 --application MyNewApp
+	'''
+	permission: 'user'
+	options: [ commandOptions.optionalApplication ]
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		patterns = require('../utils/patterns')
+
+		resin.models.device.get(params.uuid).then (device) ->
+			return options.application or patterns.selectApplication (application) ->
+				return _.every [
+					application.device_type is device.device_type
+					device.application_name isnt application.app_name
+				]
+		.tap (application) ->
+			return resin.models.device.move(params.uuid, application)
+		.then (application) ->
+			console.info("#{params.uuid} was moved to #{application}")
+		.nodeify(done)
+
+exports.init =
+	signature: 'device init'
+	description: 'initialise a device with resinOS'
+	help: '''
+		Use this command to download the OS image of a certain application and write it to an SD Card.
+
+		Notice this command may ask for confirmation interactively.
+		You can avoid this by passing the `--yes` boolean option.
+
+		Examples:
+
+			$ resin device init
+			$ resin device init --application MyApp
+	'''
+	options: [
+		commandOptions.optionalApplication
+		commandOptions.yes
+		commandOptions.advancedConfig
+		_.assign({}, commandOptions.osVersion, { signature: 'os-version', parameter: 'os-version' })
+		commandOptions.drive
+		{
+			signature: 'config'
+			description: 'path to the config JSON file, see `resin os build-config`'
+			parameter: 'config'
+		}
+	]
+	permission: 'user'
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		capitanoRunAsync = Promise.promisify(require('capitano').run)
+		rimraf = Promise.promisify(require('rimraf'))
+		tmp = require('tmp')
+		tmpNameAsync = Promise.promisify(tmp.tmpName)
+		tmp.setGracefulCleanup()
+
+		resin = require('resin-sdk-preconfigured')
+		helpers = require('../utils/helpers')
+		patterns = require('../utils/patterns')
+
+		Promise.try ->
+			return options.application if options.application?
+			return patterns.selectApplication()
+		.then(resin.models.application.get)
+		.then (application) ->
+
+			download = ->
+				tmpNameAsync().then (tempPath) ->
+					osVersion = options['os-version'] or 'default'
+					capitanoRunAsync("os download #{application.device_type} --output '#{tempPath}' --version #{osVersion}")
+				.disposer (tempPath) ->
+					return rimraf(tempPath)
+
+			Promise.using download(), (tempPath) ->
+				capitanoRunAsync("device register #{application.app_name}")
+					.then(resin.models.device.get)
+					.tap (device) ->
+						configureCommand = "os configure '#{tempPath}' #{device.uuid}"
+						if options.config
+							configureCommand += " --config '#{options.config}'"
+						else if options.advanced
+							configureCommand += ' --advanced'
+						capitanoRunAsync(configureCommand)
+						.then ->
+							osInitCommand = "os initialize '#{tempPath}' --type #{application.device_type}"
+							if options.yes
+								osInitCommand += ' --yes'
+							if options.drive
+								osInitCommand += " --drive #{options.drive}"
+							capitanoRunAsync(osInitCommand)
+						# Make sure the device resource is removed if there is an
+						# error when configuring or initializing a device image
+						.catch (error) ->
+							resin.models.device.remove(device.uuid).finally ->
+								throw error
+			.then (device) ->
+				console.log('Done')
+				return device.uuid
+
+		.nodeify(done)

lib/actions/environment-variables.coffee

@@ -0,0 +1,182 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+commandOptions = require('./command-options')
+
+exports.list =
+	signature: 'envs'
+	description: 'list all environment variables'
+	help: '''
+		Use this command to list all environment variables for
+		a particular application or device.
+
+		This command lists all custom environment variables.
+		If you want to see all environment variables, including private
+		ones used by resin, use the verbose option.
+
+		Example:
+
+			$ resin envs --application MyApp
+			$ resin envs --application MyApp --verbose
+			$ resin envs --device 7cf02a6
+	'''
+	options: [
+		commandOptions.optionalApplication
+		commandOptions.optionalDevice
+
+		{
+			signature: 'verbose'
+			description: 'show private environment variables'
+			boolean: true
+			alias: 'v'
+		}
+	]
+	permission: 'user'
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		_ = require('lodash')
+		resin = require('resin-sdk-preconfigured')
+		visuals = require('resin-cli-visuals')
+
+		Promise.try ->
+			if options.application?
+				return resin.models.environmentVariables.getAllByApplication(options.application)
+			else if options.device?
+				return resin.models.environmentVariables.device.getAll(options.device)
+			else
+				throw new Error('You must specify an application or device')
+
+		.tap (environmentVariables) ->
+			if _.isEmpty(environmentVariables)
+				throw new Error('No environment variables found')
+			if not options.verbose
+				isSystemVariable = resin.models.environmentVariables.isSystemVariable
+				environmentVariables = _.reject(environmentVariables, isSystemVariable)
+
+			console.log visuals.table.horizontal environmentVariables, [
+				'id'
+				'name'
+				'value'
+			]
+		.nodeify(done)
+
+exports.remove =
+	signature: 'env rm <id>'
+	description: 'remove an environment variable'
+	help: '''
+		Use this command to remove an environment variable from an application.
+
+		Don't remove resin specific variables, as things might not work as expected.
+
+		Notice this command asks for confirmation interactively.
+		You can avoid this by passing the `--yes` boolean option.
+
+		If you want to eliminate a device environment variable, pass the `--device` boolean option.
+
+		Examples:
+
+			$ resin env rm 215
+			$ resin env rm 215 --yes
+			$ resin env rm 215 --device
+	'''
+	options: [
+		commandOptions.yes
+		commandOptions.booleanDevice
+	]
+	permission: 'user'
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		patterns = require('../utils/patterns')
+
+		patterns.confirm(options.yes, 'Are you sure you want to delete the environment variable?').then ->
+			if options.device
+				resin.models.environmentVariables.device.remove(params.id)
+			else
+				resin.models.environmentVariables.remove(params.id)
+		.nodeify(done)
+
+exports.add =
+	signature: 'env add <key> [value]'
+	description: 'add an environment variable'
+	help: '''
+		Use this command to add an enviroment variable to an application.
+
+		If value is omitted, the tool will attempt to use the variable's value
+		as defined in your host machine.
+
+		Use the `--device` option if you want to assign the environment variable
+		to a specific device.
+
+		If the value is grabbed from the environment, a warning message will be printed.
+		Use `--quiet` to remove it.
+
+		Examples:
+
+			$ resin env add EDITOR vim --application MyApp
+			$ resin env add TERM --application MyApp
+			$ resin env add EDITOR vim --device 7cf02a6
+	'''
+	options: [
+		commandOptions.optionalApplication
+		commandOptions.optionalDevice
+	]
+	permission: 'user'
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		resin = require('resin-sdk-preconfigured')
+
+		Promise.try ->
+			if not params.value?
+				params.value = process.env[params.key]
+
+				if not params.value?
+					throw new Error("Environment value not found for key: #{params.key}")
+				else
+					console.info("Warning: using #{params.key}=#{params.value} from host environment")
+
+			if options.application?
+				resin.models.environmentVariables.create(options.application, params.key, params.value)
+			else if options.device?
+				resin.models.environmentVariables.device.create(options.device, params.key, params.value)
+			else
+				throw new Error('You must specify an application or device')
+		.nodeify(done)
+
+exports.rename =
+	signature: 'env rename <id> <value>'
+	description: 'rename an environment variable'
+	help: '''
+		Use this command to rename an enviroment variable from an application.
+
+		Pass the `--device` boolean option if you want to rename a device environment variable.
+
+		Examples:
+
+			$ resin env rename 376 emacs
+			$ resin env rename 376 emacs --device
+	'''
+	permission: 'user'
+	options: [ commandOptions.booleanDevice ]
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		resin = require('resin-sdk-preconfigured')
+
+		Promise.try ->
+			if options.device
+				resin.models.environmentVariables.device.update(params.id, params.value)
+			else
+				resin.models.environmentVariables.update(params.id, params.value)
+		.nodeify(done)

lib/actions/help.coffee

@@ -0,0 +1,124 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+_ = require('lodash')
+capitano = require('capitano')
+columnify = require('columnify')
+messages = require('../utils/messages')
+
+parse = (object) ->
+	return _.fromPairs _.map object, (item) ->
+
+		# Hacky way to determine if an object is
+		# a function or a command
+		if item.alias?
+			signature = item.toString()
+		else
+			signature = item.signature.toString()
+
+		return [
+			signature
+			item.description
+		]
+
+indent = (text) ->
+	text = _.map text.split('\n'), (line) ->
+		return '    ' + line
+	return text.join('\n')
+
+print = (data) ->
+	console.log indent columnify data,
+		showHeaders: false
+		minWidth: 35
+
+general = (params, options, done) ->
+	console.log('Usage: resin [COMMAND] [OPTIONS]\n')
+	console.log(messages.reachingOut)
+	console.log('\nPrimary commands:\n')
+
+	# We do not want the wildcard command
+	# to be printed in the help screen.
+	commands = _.reject capitano.state.commands, (command) ->
+		return command.hidden or command.isWildcard()
+
+	groupedCommands = _.groupBy commands, (command) ->
+		if command.plugin
+			return 'plugins'
+		if command.primary
+			return 'primary'
+		return 'secondary'
+
+	print(parse(groupedCommands.primary))
+
+	if options.verbose
+		if not _.isEmpty(groupedCommands.plugins)
+			console.log('\nInstalled plugins:\n')
+			print(parse(groupedCommands.plugins))
+
+		console.log('\nAdditional commands:\n')
+		print(parse(groupedCommands.secondary))
+	else
+		console.log('\nRun `resin help --verbose` to list additional commands')
+
+	if not _.isEmpty(capitano.state.globalOptions)
+		console.log('\nGlobal Options:\n')
+		print(parse(capitano.state.globalOptions))
+
+	return done()
+
+command = (params, options, done) ->
+	capitano.state.getMatchCommand params.command, (error, command) ->
+		return done(error) if error?
+
+		if not command? or command.isWildcard()
+			return done(new Error("Command not found: #{params.command}"))
+
+		console.log("Usage: #{command.signature}")
+
+		if command.help?
+			console.log("\n#{command.help}")
+		else if command.description?
+			console.log("\n#{_.capitalize(command.description)}")
+
+		if not _.isEmpty(command.options)
+			console.log('\nOptions:\n')
+			print(parse(command.options))
+
+		return done()
+
+exports.help =
+	signature: 'help [command...]'
+	description: 'show help'
+	help: '''
+		Get detailed help for an specific command.
+
+		Examples:
+
+			$ resin help apps
+			$ resin help os download
+	'''
+	primary: true
+	options: [
+		signature: 'verbose'
+		description: 'show additional commands'
+		boolean: true
+		alias: 'v'
+	]
+	action: (params, options, done) ->
+		if params.command?
+			command(params, options, done)
+		else
+			general(params, options, done)

lib/actions/index.coffee

@@ -0,0 +1,38 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+module.exports =
+	wizard: require('./wizard')
+	app: require('./app')
+	info: require('./info')
+	auth: require('./auth')
+	device: require('./device')
+	env: require('./environment-variables')
+	keys: require('./keys')
+	logs: require('./logs')
+	local: require('./local')
+	notes: require('./notes')
+	help: require('./help')
+	os: require('./os')
+	settings: require('./settings')
+	config: require('./config')
+	sync: require('./sync')
+	ssh: require('./ssh')
+	internal: require('./internal')
+	build: require('./build')
+	deploy: require('./deploy')
+	util: require('./util')
+	preload: require('./preload')

lib/actions/info.coffee

@@ -1,5 +1,5 @@
-/*
-Copyright 2016-2020 Balena
+###
+Copyright 2016-2017 Resin.io
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
@@ -12,15 +12,15 @@ distributed under the License is distributed on an "AS IS" BASIS,
 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
 limitations under the License.
-*/
+###
 
-import type { OptionalNavigationResource } from 'balena-sdk';
-
-export const getExpanded = <T extends object>(
-	obj: OptionalNavigationResource<T>,
-) => (Array.isArray(obj) && obj[0]) || undefined;
-
-export const getExpandedProp = <T extends object, K extends keyof T>(
-	obj: OptionalNavigationResource<T>,
-	key: K,
-) => (Array.isArray(obj) && obj[0] && obj[0][key]) || undefined;
+exports.version =
+	signature: 'version'
+	description: 'output the version number'
+	help: '''
+		Display the Resin CLI version.
+	'''
+	action: (params, options, done) ->
+		packageJSON = require('../../package.json')
+		console.log(packageJSON.version)
+		return done()

lib/actions/internal.coffee

@@ -0,0 +1,37 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+# These are internal commands we want to be runnable from the outside
+# One use-case for this is spawning the minimal operation with root priviledges
+
+exports.osInit =
+	signature: 'internal osinit <image> <type> <config>'
+	description: 'do actual init of the device with the preconfigured os image'
+	help: '''
+		Don't use this command directly! Use `resin os initialize <image>` instead.
+	'''
+	hidden: true
+	root: true
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		init = require('resin-device-init')
+		helpers = require('../utils/helpers')
+
+		return Promise.try ->
+			config = JSON.parse(params.config)
+			init.initialize(params.image, params.type, config)
+		.then(helpers.osProgressHandler)
+		.nodeify(done)

lib/actions/keys.coffee

@@ -0,0 +1,123 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+commandOptions = require('./command-options')
+
+exports.list =
+	signature: 'keys'
+	description: 'list all ssh keys'
+	help: '''
+		Use this command to list all your SSH keys.
+
+		Examples:
+
+			$ resin keys
+	'''
+	permission: 'user'
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		visuals = require('resin-cli-visuals')
+
+		resin.models.key.getAll().then (keys) ->
+			console.log visuals.table.horizontal keys, [
+				'id'
+				'title'
+			]
+		.nodeify(done)
+
+exports.info =
+	signature: 'key <id>'
+	description: 'list a single ssh key'
+	help: '''
+		Use this command to show information about a single SSH key.
+
+		Examples:
+
+			$ resin key 17
+	'''
+	permission: 'user'
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		visuals = require('resin-cli-visuals')
+
+		resin.models.key.get(params.id).then (key) ->
+			console.log visuals.table.vertical key, [
+				'id'
+				'title'
+			]
+
+			# Since the public key string is long, it might
+			# wrap to lines below, causing the table layout to break.
+			# See https://github.com/resin-io/resin-cli/issues/151
+			console.log('\n' + key.public_key)
+		.nodeify(done)
+
+exports.remove =
+	signature: 'key rm <id>'
+	description: 'remove a ssh key'
+	help: '''
+		Use this command to remove a SSH key from resin.io.
+
+		Notice this command asks for confirmation interactively.
+		You can avoid this by passing the `--yes` boolean option.
+
+		Examples:
+
+			$ resin key rm 17
+			$ resin key rm 17 --yes
+	'''
+	options: [ commandOptions.yes ]
+	permission: 'user'
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		patterns = require('../utils/patterns')
+
+		patterns.confirm(options.yes, 'Are you sure you want to delete the key?').then ->
+			resin.models.key.remove(params.id)
+		.nodeify(done)
+
+exports.add =
+	signature: 'key add <name> [path]'
+	description: 'add a SSH key to resin.io'
+	help: '''
+		Use this command to associate a new SSH key with your account.
+
+		If `path` is omitted, the command will attempt
+		to read the SSH key from stdin.
+
+		Examples:
+
+			$ resin key add Main ~/.ssh/id_rsa.pub
+			$ cat ~/.ssh/id_rsa.pub | resin key add Main
+	'''
+	permission: 'user'
+	action: (params, options, done) ->
+		_ = require('lodash')
+		Promise = require('bluebird')
+		readFileAsync = Promise.promisify(require('fs').readFile)
+		capitano = require('capitano')
+		resin = require('resin-sdk-preconfigured')
+
+		Promise.try ->
+			return readFileAsync(params.path, encoding: 'utf8') if params.path?
+
+			# TODO: should this be promisified for consistency?
+			Promise.fromNode (callback) ->
+				capitano.utils.getStdin (data) ->
+					return callback(null, data)
+
+		.then(_.partial(resin.models.key.create, params.name))
+		.nodeify(done)

lib/actions/local/common.coffee

@@ -0,0 +1,61 @@
+Promise = require('bluebird')
+_ = require('lodash')
+Docker = require('docker-toolbelt')
+form = require('resin-cli-form')
+chalk = require('chalk')
+
+exports.dockerPort = dockerPort = 2375
+exports.dockerTimeout = dockerTimeout = 2000
+
+exports.filterOutSupervisorContainer = filterOutSupervisorContainer = (container) ->
+	for name in container.Names
+		return false if name.includes('resin_supervisor')
+	return true
+
+exports.selectContainerFromDevice = Promise.method (deviceIp, filterSupervisor = false) ->
+	docker = new Docker(host: deviceIp, port: dockerPort, timeout: dockerTimeout)
+
+	# List all containers, including those not running
+	docker.listContainersAsync(all: true)
+	.filter (container) ->
+		return true if not filterSupervisor
+		filterOutSupervisorContainer(container)
+	.then (containers) ->
+		if _.isEmpty(containers)
+			throw new Error("No containers found in #{deviceIp}")
+
+		return form.ask
+			message: 'Select a container'
+			type: 'list'
+			choices: _.map containers, (container) ->
+				containerName = container.Names[0] or 'Untitled'
+				shortContainerId = ('' + container.Id).substr(0, 11)
+				containerStatus = container.Status
+
+				return {
+					name: "#{containerName} (#{shortContainerId}) - #{containerStatus}"
+					value: container.Id
+				}
+
+exports.pipeContainerStream = Promise.method ({ deviceIp, name, outStream, follow = false }) ->
+	docker = new Docker(host: deviceIp, port: dockerPort)
+
+	container = docker.getContainer(name)
+	container.inspectAsync()
+	.then (containerInfo) ->
+		return containerInfo?.State?.Running
+	.then (isRunning) ->
+		container.attachAsync
+			logs: not follow or not isRunning
+			stream: follow and isRunning
+			stdout: true
+			stderr: true
+	.then (containerStream) ->
+		containerStream.pipe(outStream)
+	.catch (err) ->
+		err = '' + err.statusCode
+		if err is '404'
+			return console.log(chalk.red.bold("Container '#{name}' not found."))
+		throw err
+
+exports.getSubShellCommand = require('../../utils/helpers').getSubShellCommand

lib/actions/local/configure.coffee

@@ -0,0 +1,228 @@
+###
+Copyright 2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+BOOT_PARTITION = { primary: 1 }
+CONNECTIONS_FOLDER = '/system-connections'
+
+getConfigurationSchema = (connnectionFileName = 'resin-wifi') ->
+	mapper: [
+		{
+			template:
+				persistentLogging: '{{persistentLogging}}'
+			domain: [
+				[ 'config_json', 'persistentLogging' ]
+			]
+		}
+		{
+			template:
+				hostname: '{{hostname}}'
+			domain: [
+				[ 'config_json', 'hostname' ]
+			]
+		}
+		{
+			template:
+				wifi:
+					ssid: '{{networkSsid}}'
+				'wifi-security':
+					psk: '{{networkKey}}'
+			domain: [
+				[ 'system_connections', connnectionFileName, 'wifi' ]
+				[ 'system_connections', connnectionFileName, 'wifi-security' ]
+			]
+		}
+	]
+	files:
+		system_connections:
+			fileset: true
+			type: 'ini'
+			location:
+				path: CONNECTIONS_FOLDER.slice(1)
+				partition: BOOT_PARTITION
+		config_json:
+			type: 'json'
+			location:
+				path: 'config.json'
+				partition: BOOT_PARTITION
+
+inquirerOptions = (data) -> [
+	{
+		message: 'Network SSID'
+		type: 'input'
+		name: 'networkSsid'
+		default: data.networkSsid
+	}
+	{
+		message: 'Network Key'
+		type: 'input'
+		name: 'networkKey'
+		default: data.networkKey
+	}
+	{
+		message: 'Do you want to set advanced settings?'
+		type: 'confirm'
+		name: 'advancedSettings'
+		default: false
+	}
+	{
+		message: 'Device Hostname'
+		type: 'input'
+		name: 'hostname'
+		default: data.hostname,
+		when: (answers) ->
+			answers.advancedSettings
+	}
+	{
+		message: 'Do you want to enable persistent logging?'
+		type: 'confirm'
+		name: 'persistentLogging'
+		default: data.persistentLogging
+		when: (answers) ->
+			answers.advancedSettings
+	}
+]
+
+getConfiguration = (data) ->
+	_ = require('lodash')
+	inquirer = require('inquirer')
+
+	# `persistentLogging` can be `undefined`, so we want
+	# to make sure that case defaults to `false`
+	data = _.assign data,
+		persistentLogging: data.persistentLogging or false
+
+	inquirer.prompt(inquirerOptions(data))
+	.then (answers) ->
+		return _.merge(data, answers)
+
+# Taken from https://goo.gl/kr1kCt
+CONNECTION_FILE = '''
+	[connection]
+	id=resin-wifi
+	type=wifi
+
+	[wifi]
+	hidden=true
+	mode=infrastructure
+	ssid=My_Wifi_Ssid
+
+	[wifi-security]
+	auth-alg=open
+	key-mgmt=wpa-psk
+	psk=super_secret_wifi_password
+
+	[ipv4]
+	method=auto
+
+	[ipv6]
+	addr-gen-mode=stable-privacy
+	method=auto
+'''
+
+###
+* if the `resin-wifi` file exists (previously configured image or downloaded from the UI) it's used and reconfigured
+* if the `resin-sample.ignore` exists it's copied to `resin-wifi`
+* if the `resin-sample` exists it's reconfigured (legacy mode, will be removed eventually)
+* otherwise, the new file is created
+###
+prepareConnectionFile = (target) ->
+	_ = require('lodash')
+	imagefs = require('resin-image-fs')
+
+	imagefs.listDirectory
+		image: target
+		partition: BOOT_PARTITION
+		path: CONNECTIONS_FOLDER
+	.then (files) ->
+		# The required file already exists
+		if _.includes(files, 'resin-wifi')
+			return null
+
+		# Fresh image, new mode, accoding to https://github.com/resin-os/meta-resin/pull/770/files
+		if _.includes(files, 'resin-sample.ignore')
+			return imagefs.copy
+				image: target
+				partition: BOOT_PARTITION
+				path: "#{CONNECTIONS_FOLDER}/resin-sample.ignore"
+			,
+				image: target
+				partition: BOOT_PARTITION
+				path: "#{CONNECTIONS_FOLDER}/resin-wifi"
+			.thenReturn(null)
+
+		# Legacy mode, to be removed later
+		# We return the file name override from this branch
+		# When it is removed the following cleanup should be done:
+		# * delete all the null returns from this method
+		# * turn `getConfigurationSchema` back into the constant, with the connection filename always being `resin-wifi`
+		# * drop the final `then` from this method
+		# * adapt the code in the main listener to not receive the config from this method, and use that constant instead
+		if _.includes(files, 'resin-sample')
+			return 'resin-sample'
+
+		# In case there's no file at all (shouldn't happen normally, but the file might have been removed)
+		return imagefs.writeFile
+			image: target
+			partition: BOOT_PARTITION
+			path: "#{CONNECTIONS_FOLDER}/resin-wifi"
+		, CONNECTION_FILE
+		.thenReturn(null)
+
+	.then (connectionFileName) ->
+		return getConfigurationSchema(connectionFileName)
+
+removeHostname = (schema) ->
+	_ = require('lodash')
+	schema.mapper = _.reject schema.mapper, (mapper) ->
+		_.isEqual(Object.keys(mapper.template), ['hostname'])
+
+module.exports =
+	signature: 'local configure <target>'
+	description: '(Re)configure a resinOS drive or image'
+	help: '''
+		Use this command to configure or reconfigure a resinOS drive or image.
+
+		Examples:
+
+			$ resin local configure /dev/sdc
+			$ resin local configure path/to/image.img
+	'''
+	root: true
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		umount = require('umount')
+		umountAsync = Promise.promisify(umount.umount)
+		isMountedAsync = Promise.promisify(umount.isMounted)
+		reconfix = require('reconfix')
+		denymount = Promise.promisify(require('denymount'))
+
+		prepareConnectionFile(params.target)
+		.tap ->
+			isMountedAsync(params.target).then (isMounted) ->
+				return if not isMounted
+				umountAsync(params.target)
+		.then (configurationSchema) ->
+			denymount params.target, (cb) ->
+				reconfix.readConfiguration(configurationSchema, params.target)
+				.then(getConfiguration)
+				.then (answers) ->
+					if not answers.hostname
+						removeHostname(configurationSchema)
+					reconfix.writeConfiguration(configurationSchema, answers, params.target)
+				.asCallback(cb)
+		.then ->
+			console.log('Done!')
+		.asCallback(done)

lib/actions/local/flash.coffee

@@ -0,0 +1,120 @@
+###
+Copyright 2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the 'License');
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	 http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an 'AS IS' BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+module.exports =
+	signature: 'local flash <image>'
+	description: 'Flash an image to a drive'
+	help: '''
+		Use this command to flash a resinOS image to a drive.
+
+		Examples:
+
+			$ resin local flash path/to/resinos.img
+			$ resin local flash path/to/resinos.img --drive /dev/disk2
+			$ resin local flash path/to/resinos.img --drive /dev/disk2 --yes
+	'''
+	options: [
+			signature: 'yes'
+			boolean: true
+			description: 'confirm non-interactively'
+			alias: 'y'
+	,
+			signature: 'drive'
+			parameter: 'drive'
+			description: 'drive'
+			alias: 'd'
+	]
+	root: true
+	action: (params, options, done) ->
+
+		_ = require('lodash')
+		os = require('os')
+		Promise = require('bluebird')
+		umountAsync = Promise.promisify(require('umount').umount)
+		fs = Promise.promisifyAll(require('fs'))
+		driveListAsync = Promise.promisify(require('drivelist').list)
+		chalk = require('chalk')
+		visuals = require('resin-cli-visuals')
+		form = require('resin-cli-form')
+		imageWrite = require('etcher-image-write')
+
+		form.run [
+			{
+				message: 'Select drive'
+				type: 'drive'
+				name: 'drive'
+			},
+			{
+				message: 'This will erase the selected drive. Are you sure?'
+				type: 'confirm'
+				name: 'yes'
+				default: false
+			}
+		],
+			override:
+				drive: options.drive
+
+				# If `options.yes` is `false`, pass `undefined`,
+				# otherwise the question will not be asked because
+				# `false` is a defined value.
+				yes: options.yes || undefined
+
+		# TODO: dedupe with the resin-device-operations
+		.then (answers) ->
+			if answers.yes isnt true
+				console.log(chalk.red.bold('Aborted image flash'))
+				process.exit(0)
+
+			driveListAsync().then (drives) ->
+				selectedDrive = _.find(drives, device: answers.drive)
+
+				if not selectedDrive?
+					throw new Error("Drive not found: #{answers.drive}")
+
+				return selectedDrive
+		.then (selectedDrive) ->
+			progressBars =
+				write: new visuals.Progress('Flashing')
+				check: new visuals.Progress('Validating')
+
+			umountAsync(selectedDrive.device).then ->
+				Promise.props
+					imageSize: fs.statAsync(params.image).get('size'),
+					imageStream: Promise.resolve(fs.createReadStream(params.image))
+					driveFileDescriptor: fs.openAsync(selectedDrive.raw, 'rs+')
+			.then (results) ->
+				imageWrite.write
+					fd: results.driveFileDescriptor
+					device: selectedDrive.raw
+					size: selectedDrive.size
+				,
+					stream: results.imageStream,
+					size: results.imageSize
+				,
+					check: true
+			.then (writer) ->
+				new Promise (resolve, reject) ->
+					writer.on 'progress', (state) ->
+						progressBars[state.type].update(state)
+					writer.on('error', reject)
+					writer.on('done', resolve)
+			.then ->
+				if (os.platform() is 'win32') and selectedDrive.mountpoint?
+					ejectAsync = Promise.promisify(require('removedrive').eject)
+					return ejectAsync(selectedDrive.mountpoint)
+
+				return umountAsync(selectedDrive.device)
+		.asCallback(done)

lib/actions/local/index.coffee

@@ -0,0 +1,23 @@
+###
+Copyright 2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+exports.configure = require('./configure')
+exports.flash = require('./flash')
+exports.logs = require('./logs')
+exports.scan = require('./scan')
+exports.ssh = require('./ssh')
+exports.push = require('./push')
+exports.stop = require('./stop')

lib/actions/local/logs.coffee

@@ -0,0 +1,66 @@
+###
+Copyright 2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	 http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+# A function to reliably execute a command
+# in all supported operating systems, including
+# different Windows environments like `cmd.exe`
+# and `Cygwin` should be encapsulated in a
+# re-usable package.
+#
+module.exports =
+	signature: 'local logs [deviceIp]'
+	description: 'Get or attach to logs of a running container on a resinOS device'
+	help: '''
+
+		Examples:
+
+			$ resin local logs
+			$ resin local logs -f
+			$ resin local logs 192.168.1.10
+			$ resin local logs 192.168.1.10 -f
+			$ resin local logs 192.168.1.10 -f --app-name myapp
+	'''
+	options: [
+			signature: 'follow'
+			boolean: true
+			description: 'follow log'
+			alias: 'f'
+	,
+			signature: 'app-name'
+			parameter: 'name'
+			description: 'name of container to get logs from'
+			alias: 'a'
+	]
+	root: true
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		{ forms } = require('resin-sync')
+		{ selectContainerFromDevice, pipeContainerStream } = require('./common')
+
+		Promise.try ->
+			if not params.deviceIp?
+				return forms.selectLocalResinOsDevice()
+			return params.deviceIp
+		.then (@deviceIp) =>
+			if not options['app-name']?
+				return selectContainerFromDevice(@deviceIp)
+			return options['app-name']
+		.then (appName) =>
+			pipeContainerStream
+				deviceIp: @deviceIp
+				name: appName
+				outStream: process.stdout
+				follow: options['follow']

lib/actions/local/push.coffee

@@ -0,0 +1,76 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+# Loads '.resin-sync.yml' configuration from 'source' directory.
+# Returns the configuration object on success
+#
+
+_ = require('lodash')
+
+resinPush = require('resin-sync').capitano('resin-toolbox')
+
+# TODO: This is a temporary workaround to reuse the existing `rdt push`
+# capitano frontend in `resin local push`.
+
+resinPushHelp = '''
+	Warning: 'resin local push' requires an openssh-compatible client and 'rsync' to
+	be correctly installed in your shell environment. For more information (including
+	Windows support) please check the README here: https://github.com/resin-io/resin-cli
+
+	Use this command to push your local changes to a container on a LAN-accessible resinOS device on the fly.
+
+	If `Dockerfile` or any file in the 'build-triggers' list is changed,
+	a new container will be built and run on your device.
+	If not, changes will simply be synced with `rsync` into the application container.
+
+	After every 'resin local push' the updated settings will be saved in
+	'<source>/.resin-sync.yml' and will be used in later invocations. You can
+	also change any option by editing '.resin-sync.yml' directly.
+
+	Here is an example '.resin-sync.yml' :
+
+		$ cat $PWD/.resin-sync.yml
+		destination: '/usr/src/app'
+		before: 'echo Hello'
+		after: 'echo Done'
+		ignore:
+			- .git
+			- node_modules/
+
+	Command line options have precedence over the ones saved in '.resin-sync.yml'.
+
+	If '.gitignore' is found in the source directory then all explicitly listed files will be
+	excluded when using rsync to update the container. You can choose to change this default behavior with the
+	'--skip-gitignore' option.
+
+	Examples:
+
+		$ resin local push
+		$ resin local push --app-name test-server --build-triggers package.json,requirements.txt
+		$ resin local push --force-build
+		$ resin local push --force-build --skip-logs
+		$ resin local push --ignore lib/
+		$ resin local push --verbose false
+		$ resin local push 192.168.2.10 --source . --destination /usr/src/app
+		$ resin local push 192.168.2.10 -s /home/user/myResinProject -d /usr/src/app --before 'echo Hello' --after 'echo Done'
+'''
+
+
+module.exports = _.assign resinPush,
+	signature: 'local push [deviceIp]'
+	help: resinPushHelp
+	primary: true
+	root: true

lib/actions/local/scan.coffee

@@ -0,0 +1,99 @@
+###
+Copyright 2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	 http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+dockerInfoProperties = [
+	'Containers'
+	'ContainersRunning'
+	'ContainersPaused'
+	'ContainersStopped'
+	'Images'
+	'Driver'
+	'SystemTime'
+	'KernelVersion'
+	'OperatingSystem'
+	'Architecture'
+]
+
+dockerVersionProperties = [
+	'Version'
+	'ApiVersion'
+]
+
+module.exports =
+	signature: 'local scan'
+	description: 'Scan for resinOS devices in your local network'
+	help: '''
+
+		Examples:
+
+			$ resin local scan
+			$ resin local scan --timeout 120
+			$ resin local scan --verbose
+	'''
+	options: [
+		signature: 'verbose'
+		boolean: true
+		description: 'Display full info'
+		alias: 'v'
+	,
+		signature: 'timeout'
+		parameter: 'timeout'
+		description: 'Scan timeout in seconds'
+		alias: 't'
+	]
+	primary: true
+	root: true
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		_ = require('lodash')
+		prettyjson = require('prettyjson')
+		Docker = require('docker-toolbelt')
+		{ discover } = require('resin-sync')
+		{ SpinnerPromise } = require('resin-cli-visuals')
+		{ dockerPort, dockerTimeout } = require('./common')
+
+		if options.timeout?
+			options.timeout *= 1000
+
+		Promise.try ->
+			new SpinnerPromise
+				promise: discover.discoverLocalResinOsDevices(options.timeout)
+				startMessage: 'Scanning for local resinOS devices..'
+				stopMessage: 'Reporting scan results'
+		.filter ({ address }) ->
+			Promise.try ->
+				docker = new Docker(host: address, port: dockerPort, timeout: dockerTimeout)
+				docker.pingAsync()
+			.return(true)
+			.catchReturn(false)
+		.tap (devices) ->
+			if _.isEmpty(devices)
+				throw new Error('Could not find any resinOS devices in the local network')
+		.map ({ host, address }) ->
+			docker = new Docker(host: address, port: dockerPort, timeout: dockerTimeout)
+			Promise.props
+				dockerInfo: docker.infoAsync().catchReturn('Could not get Docker info')
+				dockerVersion: docker.versionAsync().catchReturn('Could not get Docker version')
+			.then ({ dockerInfo, dockerVersion }) ->
+
+				if not options.verbose
+					dockerInfo = _.pick(dockerInfo, dockerInfoProperties) if _.isObject(dockerInfo)
+					dockerVersion = _.pick(dockerVersion, dockerVersionProperties) if _.isObject(dockerVersion)
+
+				return { host, address, dockerInfo, dockerVersion }
+		.then (devicesInfo) ->
+			console.log(prettyjson.render(devicesInfo, noColor: true))
+		.nodeify(done)

lib/actions/local/ssh.coffee

@@ -0,0 +1,109 @@
+###
+Copyright 2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	 http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+module.exports =
+	signature: 'local ssh [deviceIp]'
+	description: 'Get a shell into a resinOS device'
+	help: '''
+		Warning: 'resin local ssh' requires an openssh-compatible client to be correctly
+		installed in your shell environment. For more information (including Windows
+		support) please check the README here: https://github.com/resin-io/resin-cli
+
+		Use this command to get a shell into the running application container of
+		your device.
+
+		The '--host' option will get you a shell into the Host OS of the resinOS device.
+		No option will return a list of containers to enter or you can explicitly select
+		one by passing its name to the --container option
+
+		Examples:
+
+			$ resin local ssh
+			$ resin local ssh --host
+			$ resin local ssh --container chaotic_water
+			$ resin local ssh --container chaotic_water --port 22222
+			$ resin local ssh --verbose
+	'''
+	options: [
+			signature: 'verbose'
+			boolean: true
+			description: 'increase verbosity'
+			alias: 'v'
+	,
+			signature: 'host'
+			boolean: true
+			description: 'get a shell into the host OS'
+			alias: 's'
+	,
+			signature: 'container'
+			parameter: 'container'
+			default: null
+			description: 'name of container to access'
+			alias: 'c'
+	,
+			signature: 'port'
+			parameter: 'port'
+			description: 'ssh port number (default: 22222)'
+			alias: 'p'
+	]
+	root: true
+	action: (params, options, done) ->
+		child_process = require('child_process')
+		Promise = require 'bluebird'
+		_ = require('lodash')
+		{ forms } = require('resin-sync')
+		{ selectContainerFromDevice, getSubShellCommand } = require('./common')
+
+		if (options.host is true and options.container?)
+			throw new Error('Please pass either --host or --container option')
+
+		if not options.port?
+			options.port = 22222
+
+		verbose = if options.verbose then '-vvv' else ''
+
+		Promise.try ->
+			if not params.deviceIp?
+				return forms.selectLocalResinOsDevice()
+			return params.deviceIp
+		.then (deviceIp) ->
+			_.assign(options, { deviceIp })
+
+			return if options.host
+
+			if not options.container?
+				return selectContainerFromDevice(deviceIp)
+
+			return options.container
+		.then (container) ->
+
+			command = "ssh \
+				#{verbose} \
+				-t \
+				-p #{options.port} \
+				-o LogLevel=ERROR \
+				-o StrictHostKeyChecking=no \
+				-o UserKnownHostsFile=/dev/null \
+				 root@#{options.deviceIp}"
+
+			if not options.host
+				shellCmd = '''/bin/sh -c $"'if [ -e /bin/bash ]; then exec /bin/bash; else exec /bin/sh; fi'"'''
+				command += " docker exec -ti #{container} #{shellCmd}"
+
+			subShellCommand = getSubShellCommand(command)
+			child_process.spawn subShellCommand.program, subShellCommand.args,
+				stdio: 'inherit'
+		.nodeify(done)

lib/actions/local/stop.coffee

@@ -0,0 +1,79 @@
+###
+Copyright 2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	 http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+# A function to reliably execute a command
+# in all supported operating systems, including
+# different Windows environments like `cmd.exe`
+# and `Cygwin` should be encapsulated in a
+# re-usable package.
+#
+module.exports =
+	signature: 'local stop [deviceIp]'
+	description: 'Stop a running container on a resinOS device'
+	help: '''
+
+		Examples:
+
+			$ resin local stop
+			$ resin local stop --app-name myapp
+			$ resin local stop --all
+			$ resin local stop 192.168.1.10
+			$ resin local stop 192.168.1.10 --app-name myapp
+	'''
+	options: [
+			signature: 'all'
+			boolean: true
+			description: 'stop all containers'
+	,
+			signature: 'app-name'
+			parameter: 'name'
+			description: 'name of container to stop'
+			alias: 'a'
+	]
+	root: true
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		chalk = require('chalk')
+		{ forms, config, ResinLocalDockerUtils } = require('resin-sync')
+		{ selectContainerFromDevice, filterOutSupervisorContainer } = require('./common')
+
+		Promise.try ->
+			if not params.deviceIp?
+				return forms.selectLocalResinOsDevice()
+			return params.deviceIp
+		.then (@deviceIp) =>
+			@docker = new ResinLocalDockerUtils(@deviceIp)
+
+			if options.all
+				# Only list running containers
+				return @docker.docker.listContainersAsync(all: false)
+				.filter(filterOutSupervisorContainer)
+				.then (containers) =>
+					Promise.map containers, ({ Names, Id }) =>
+						console.log(chalk.yellow.bold("* Stopping container #{Names[0]}"))
+						@docker.stopContainer(Id)
+
+			ymlConfig = config.load()
+			@appName = options['app-name'] ? ymlConfig['local_resinos']?['app-name']
+			@docker.checkForRunningContainer(@appName)
+			.then (isRunning) =>
+				if not isRunning
+					return selectContainerFromDevice(@deviceIp, true)
+
+				console.log(chalk.yellow.bold("* Stopping container #{@appName}"))
+				return @appName
+			.then (runningContainerName) =>
+				@docker.stopContainer(runningContainerName)

lib/actions/logs.coffee

@@ -0,0 +1,69 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+module.exports =
+	signature: 'logs <uuid>'
+	description: 'show device logs'
+	help: '''
+		Use this command to show logs for a specific device.
+
+		By default, the command prints all log messages and exit.
+
+		To continuously stream output, and see new logs in real time, use the `--tail` option.
+
+		Note that for now you need to provide the whole UUID for this command to work correctly.
+
+		This is due to some technical limitations that we plan to address soon.
+
+		Examples:
+
+			$ resin logs 23c73a1
+			$ resin logs 23c73a1
+	'''
+	options: [
+		{
+			signature: 'tail'
+			description: 'continuously stream output'
+			boolean: true
+			alias: 't'
+		}
+	]
+	permission: 'user'
+	primary: true
+	action: (params, options, done) ->
+		_ = require('lodash')
+		resin = require('resin-sdk-preconfigured')
+		moment = require('moment')
+
+		printLine = (line) ->
+			timestamp = moment(line.timestamp).format('DD.MM.YY HH:mm:ss (ZZ)')
+			console.log("#{timestamp} #{line.message}")
+
+		promise = resin.logs.history(params.uuid).each(printLine)
+
+		if not options.tail
+
+			# PubNub keeps the process alive after a history query.
+			# Until this is fixed, we force the process to exit.
+			# This of course prevents this command to be used programatically
+			return promise.catch(done).finally ->
+				process.exit(0)
+
+		promise.then ->
+			resin.logs.subscribe(params.uuid).then (logs) ->
+				logs.on('line', printLine)
+				logs.on('error', done)
+		.catch(done)

lib/actions/notes.coffee

@@ -0,0 +1,50 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+exports.set =
+	signature: 'note <|note>'
+	description: 'set a device note'
+	help: '''
+		Use this command to set or update a device note.
+
+		If note command isn't passed, the tool attempts to read from `stdin`.
+
+		To view the notes, use $ resin device <uuid>.
+
+		Examples:
+
+			$ resin note "My useful note" --device 7cf02a6
+			$ cat note.txt | resin note --device 7cf02a6
+	'''
+	options: [
+		signature: 'device'
+		parameter: 'device'
+		description: 'device uuid'
+		alias: [ 'd', 'dev' ]
+		required: 'You have to specify a device'
+	]
+	permission: 'user'
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		_ = require('lodash')
+		resin = require('resin-sdk-preconfigured')
+
+		Promise.try ->
+			if _.isEmpty(params.note)
+				throw new Error('Missing note content')
+
+			resin.models.device.note(options.device, params.note)
+		.nodeify(done)

lib/actions/os.coffee

@@ -0,0 +1,372 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+commandOptions = require('./command-options')
+_ = require('lodash')
+
+formatVersion = (v, isRecommended) ->
+	result = "v#{v}"
+	if isRecommended
+		result += ' (recommended)'
+	return result
+
+resolveVersion = (deviceType, version) ->
+	if version isnt 'menu'
+		if version[0] == 'v'
+			version = version.slice(1)
+		return Promise.resolve(version)
+
+	form = require('resin-cli-form')
+	resin = require('resin-sdk-preconfigured')
+
+	resin.models.os.getSupportedVersions(deviceType)
+	.then ({ versions, recommended }) ->
+		choices = versions.map (v) ->
+			value: v
+			name: formatVersion(v, v is recommended)
+
+		return form.ask
+			message: 'Select the OS version:'
+			type: 'list'
+			choices: choices
+			default: recommended
+
+exports.versions =
+	signature: 'os versions <type>'
+	description: 'show the available resinOS versions for the given device type'
+	help: '''
+		Use this command to show the available resinOS versions for a certain device type.
+		Check available types with `resin devices supported`
+
+		Example:
+
+			$ resin os versions raspberrypi3
+	'''
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+
+		resin.models.os.getSupportedVersions(params.type)
+		.then ({ versions, recommended }) ->
+			versions.forEach (v) ->
+				console.log(formatVersion(v, v is recommended))
+
+exports.download =
+	signature: 'os download <type>'
+	description: 'download an unconfigured os image'
+	help: '''
+		Use this command to download an unconfigured os image for a certain device type.
+		Check available types with `resin devices supported`
+
+		If version is not specified the newest stable (non-pre-release) version of OS
+		is downloaded if available, or the newest version otherwise (if all existing
+		versions for the given device type are pre-release).
+
+		You can pass `--version menu` to pick the OS version from the interactive menu
+		of all available versions.
+
+		Examples:
+
+			$ resin os download raspberrypi3 -o ../foo/bar/raspberry-pi.img
+			$ resin os download raspberrypi3 -o ../foo/bar/raspberry-pi.img --version 1.24.1
+			$ resin os download raspberrypi3 -o ../foo/bar/raspberry-pi.img --version ^1.20.0
+			$ resin os download raspberrypi3 -o ../foo/bar/raspberry-pi.img --version latest
+			$ resin os download raspberrypi3 -o ../foo/bar/raspberry-pi.img --version default
+			$ resin os download raspberrypi3 -o ../foo/bar/raspberry-pi.img --version menu
+	'''
+	permission: 'user'
+	options: [
+		{
+			signature: 'output'
+			description: 'output path'
+			parameter: 'output'
+			alias: 'o'
+			required: 'You have to specify the output location'
+		}
+		commandOptions.osVersion
+	]
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		unzip = require('unzip2')
+		fs = require('fs')
+		rindle = require('rindle')
+		manager = require('resin-image-manager')
+		visuals = require('resin-cli-visuals')
+
+		console.info("Getting device operating system for #{params.type}")
+
+		displayVersion = ''
+		Promise.try ->
+			if not options.version
+				console.warn('OS version is not specified, using the default version:
+					the newest stable (non-pre-release) version if available,
+					or the newest version otherwise (if all existing
+					versions for the given device type are pre-release).')
+				return 'default'
+			return resolveVersion(params.type, options.version)
+		.then (version) ->
+			if version isnt 'default'
+				displayVersion = " #{version}"
+			return manager.get(params.type, version)
+		.then (stream) ->
+			bar = new visuals.Progress("Downloading Device OS#{displayVersion}")
+			spinner = new visuals.Spinner("Downloading Device OS#{displayVersion} (size unknown)")
+
+			stream.on 'progress', (state) ->
+				if state?
+					bar.update(state)
+				else
+					spinner.start()
+
+			stream.on 'end', ->
+				spinner.stop()
+
+			# We completely rely on the `mime` custom property
+			# to make this decision.
+			# The actual stream should be checked instead.
+			if stream.mime is 'application/zip'
+				output = unzip.Extract(path: options.output)
+			else
+				output = fs.createWriteStream(options.output)
+
+			return rindle.wait(stream.pipe(output)).return(options.output)
+		.tap (output) ->
+			console.info('The image was downloaded successfully')
+		.nodeify(done)
+
+buildConfig = (image, deviceType, advanced = false) ->
+	form = require('resin-cli-form')
+	helpers = require('../utils/helpers')
+
+	helpers.getManifest(image, deviceType)
+	.get('options')
+	.then (questions) ->
+		if not advanced
+			advancedGroup = _.find questions,
+				name: 'advanced'
+				isGroup: true
+
+			if advancedGroup?
+				override = helpers.getGroupDefaults(advancedGroup)
+
+		return form.run(questions, { override })
+
+exports.buildConfig =
+	signature: 'os build-config <image> <device-type>'
+	description: 'build the OS config and save it to the JSON file'
+	help: '''
+		Use this command to prebuild the OS config once and skip the interactive part of `resin os configure`.
+
+		Example:
+
+			$ resin os build-config ../path/rpi3.img raspberrypi3 --output rpi3-config.json
+			$ resin os configure ../path/rpi3.img 7cf02a6 --config "$(cat rpi3-config.json)"
+	'''
+	permission: 'user'
+	options: [
+		commandOptions.advancedConfig
+		{
+			signature: 'output'
+			description: 'the path to the output JSON file'
+			alias: 'o'
+			required: 'the output path is required'
+			parameter: 'output'
+		}
+	]
+	action: (params, options, done) ->
+		fs = require('fs')
+		Promise = require('bluebird')
+		writeFileAsync = Promise.promisify(fs.writeFile)
+
+		buildConfig(params.image, params['device-type'], options.advanced)
+		.then (answers) ->
+			writeFileAsync(options.output, JSON.stringify(answers, null, 4))
+		.nodeify(done)
+
+exports.configure =
+	signature: 'os configure <image> [uuid] [deviceApiKey]'
+	description: 'configure an os image'
+	help: '''
+		Use this command to configure a previously downloaded operating system image for
+		the specific device or for an application generally.
+
+		Note that device api keys are only supported on ResinOS 2.0.3+.
+
+		This comand still supports the *deprecated* format where the UUID and optionally device key
+		are passed directly on the command line, but the recommended way is to pass either an --app or
+		--device argument. The deprecated format will be remove in a future release.
+
+		Examples:
+
+			$ resin os configure ../path/rpi.img --device 7cf02a6
+			$ resin os configure ../path/rpi.img --device 7cf02a6 --deviceApiKey <existingDeviceKey>
+			$ resin os configure ../path/rpi.img --app MyApp
+	'''
+	permission: 'user'
+	options: [
+		commandOptions.advancedConfig
+		commandOptions.optionalApplication
+		commandOptions.optionalDevice
+		commandOptions.optionalDeviceApiKey
+		{
+			signature: 'config'
+			description: 'path to the config JSON file, see `resin os build-config`'
+			parameter: 'config'
+		}
+	]
+	action: (params, options, done) ->
+		fs = require('fs')
+		Promise = require('bluebird')
+		readFileAsync = Promise.promisify(fs.readFile)
+		resin = require('resin-sdk-preconfigured')
+		init = require('resin-device-init')
+		helpers = require('../utils/helpers')
+		patterns = require('../utils/patterns')
+		{ generateDeviceConfig, generateApplicationConfig } = require('../utils/config')
+
+		if _.filter([
+			options.device
+			options.application
+			params.uuid
+		]).length != 1
+			patterns.expectedError '''
+				To configure an image, you must provide exactly one of:
+
+				* A device, with --device <uuid>
+				* An application, with --app <appname>
+				* [Deprecated] A device, passing its uuid directly on the command line
+
+				See the help page for examples:
+
+				  $ resin help os configure
+			'''
+		if params.uuid
+			console.warn(
+				'Directly passing a UUID to `resin os configure` is deprecated. Pass it with --uuid <uuid> instead.' +
+				if params.deviceApiKey
+					' Device api keys can be passed with --deviceApiKey.\n'
+				else '\n'
+			)
+
+		uuid = options.device || params.uuid
+		deviceApiKey = options.deviceApiKey || params.deviceApiKey
+
+		console.info('Configuring operating system image')
+
+		configurationResourceType = if uuid then 'device' else 'application'
+
+		resin.models[configurationResourceType].get(uuid || options.application)
+		.then (appOrDevice) ->
+			Promise.try ->
+				if options.config
+					return readFileAsync(options.config, 'utf8')
+						.then(JSON.parse)
+				return buildConfig(params.image, appOrDevice.device_type, options.advanced)
+			.then (answers) ->
+				(if configurationResourceType == 'device'
+					generateDeviceConfig(appOrDevice, deviceApiKey, answers)
+				else
+					generateApplicationConfig(appOrDevice, answers)
+				).then (config) ->
+					init.configure(params.image, appOrDevice.device_type, config, answers)
+		.then(helpers.osProgressHandler)
+		.nodeify(done)
+
+INIT_WARNING_MESSAGE = '''
+	Note: Initializing the device may ask for administrative permissions
+	because we need to access the raw devices directly.
+'''
+
+exports.initialize =
+	signature: 'os initialize <image>'
+	description: 'initialize an os image'
+	help: """
+		Use this command to initialize a device with previously configured operating system image.
+
+		#{INIT_WARNING_MESSAGE}
+
+		Examples:
+
+			$ resin os initialize ../path/rpi.img --type 'raspberry-pi'
+	"""
+	permission: 'user'
+	options: [
+		commandOptions.yes
+		{
+			signature: 'type'
+			description: 'device type (Check available types with `resin devices supported`)'
+			parameter: 'type'
+			alias: 't'
+			required: 'You have to specify a device type'
+		}
+		commandOptions.drive
+	]
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		umountAsync = Promise.promisify(require('umount').umount)
+		form = require('resin-cli-form')
+		patterns = require('../utils/patterns')
+		helpers = require('../utils/helpers')
+
+		console.info("""
+			Initializing device
+
+			#{INIT_WARNING_MESSAGE}
+		""")
+		helpers.getManifest(params.image, options.type)
+			.then (manifest) ->
+				return manifest.initialization?.options
+			.then (questions) ->
+				return form.run questions,
+					override:
+						drive: options.drive
+			.tap (answers) ->
+				return if not answers.drive?
+				patterns.confirm(
+					options.yes
+					"This will erase #{answers.drive}. Are you sure?"
+					"Going to erase #{answers.drive}."
+				)
+					.return(answers.drive)
+					.then(umountAsync)
+			.tap (answers) ->
+				return helpers.sudo([
+					'internal'
+					'osinit'
+					params.image
+					options.type
+					JSON.stringify(answers)
+				])
+			.then (answers) ->
+				return if not answers.drive?
+
+				# TODO: resin local makes use of ejectAsync, see below
+				# DO we need this / should we do that here?
+
+				# getDrive = (drive) ->
+				# 	driveListAsync().then (drives) ->
+				# 		selectedDrive = _.find(drives, device: drive)
+
+				# 		if not selectedDrive?
+				# 			throw new Error("Drive not found: #{drive}")
+
+				# 		return selectedDrive
+				# if (os.platform() is 'win32') and selectedDrive.mountpoint?
+				# 	ejectAsync = Promise.promisify(require('removedrive').eject)
+				# 	return ejectAsync(selectedDrive.mountpoint)
+
+				umountAsync(answers.drive).tap ->
+					console.info("You can safely remove #{answers.drive} now")
+		.nodeify(done)

lib/actions/preload.coffee

@@ -0,0 +1,276 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+dockerUtils = require('../utils/docker')
+
+LATEST = 'latest'
+
+getApplicationsWithSuccessfulBuilds = (deviceType) ->
+	preload = require('resin-preload')
+	resin = require('resin-sdk-preconfigured')
+
+	resin.pine.get
+		resource: 'my_application'
+		options:
+			filter:
+				device_type: deviceType
+				build:
+					$any:
+						$alias: 'b'
+						$expr:
+							b:
+								status: 'success'
+			expand: preload.applicationExpandOptions
+			select: [ 'id', 'app_name', 'device_type', 'commit' ]
+			orderby: 'app_name asc'
+
+selectApplication = (deviceType) ->
+	visuals = require('resin-cli-visuals')
+	form = require('resin-cli-form')
+	{ expectedError } = require('../utils/patterns')
+
+	applicationInfoSpinner = new visuals.Spinner('Downloading list of applications and builds.')
+	applicationInfoSpinner.start()
+
+	getApplicationsWithSuccessfulBuilds(deviceType)
+	.then (applications) ->
+		applicationInfoSpinner.stop()
+		if applications.length == 0
+			expectedError("You have no apps with successful builds for a '#{deviceType}' device type.")
+		form.ask
+			message: 'Select an application'
+			type: 'list'
+			choices: applications.map (app) ->
+				name: app.app_name
+				value: app
+
+selectApplicationCommit = (builds) ->
+	form = require('resin-cli-form')
+	{ expectedError } = require('../utils/patterns')
+
+	if builds.length == 0
+		expectedError('This application has no successful builds.')
+	DEFAULT_CHOICE = {'name': LATEST, 'value': LATEST}
+	choices = [ DEFAULT_CHOICE ].concat builds.map (build) ->
+		name: "#{build.push_timestamp} - #{build.commit_hash}"
+		value: build.commit_hash
+	return form.ask
+		message: 'Select a build'
+		type: 'list'
+		default: LATEST
+		choices: choices
+
+offerToDisableAutomaticUpdates = (application, commit) ->
+	Promise = require('bluebird')
+	resin = require('resin-sdk-preconfigured')
+	form = require('resin-cli-form')
+
+	if commit == LATEST or not application.should_track_latest_release
+		return Promise.resolve()
+	message = '''
+
+		This application is set to automatically update all devices to the latest available version.
+		This might be unexpected behaviour: with this enabled, the preloaded device will still
+		download and install the latest build once it is online.
+
+		Do you want to disable automatic updates for this application?
+	'''
+	form.ask
+		message: message,
+		type: 'confirm'
+	.then (update) ->
+		if not update
+			return
+		resin.pine.patch
+			resource: 'application'
+			id: application.id
+			body:
+				should_track_latest_release: false
+
+module.exports =
+	signature: 'preload <image>'
+	description: '(beta) preload an app on a disk image (or Edison zip archive)'
+	help: '''
+		Warning: "resin preload" requires Docker to be correctly installed in
+		your shell environment. For more information (including Windows support)
+		please check the README here: https://github.com/resin-io/resin-cli .
+
+		Use this command to preload an application to a local disk image (or
+		Edison zip archive) with a built commit from Resin.io.
+		This can be used with cloud builds, or images deployed with resin deploy.
+
+		Examples:
+		  $ resin preload resin.img --app 1234 --commit e1f2592fc6ee949e68756d4f4a48e49bff8d72a0 --splash-image some-image.png
+		  $ resin preload resin.img
+	'''
+	permission: 'user'
+	primary: true
+	options: dockerUtils.appendConnectionOptions [
+		{
+			signature: 'app'
+			parameter: 'appId'
+			description: 'id of the application to preload'
+			alias: 'a'
+		}
+		{
+			signature: 'commit'
+			parameter: 'hash'
+			description: '''
+				a specific application commit to preload, use "latest" to specify the latest commit
+				(ignored if no appId is given)
+			'''
+			alias: 'c'
+		}
+		{
+			signature: 'splash-image'
+			parameter: 'splashImage.png'
+			description: 'path to a png image to replace the splash screen'
+			alias: 's'
+		}
+		{
+			signature: 'dont-check-device-type'
+			boolean: true
+			description: 'Disables check for matching device types in image and application'
+		}
+	]
+	action: (params, options, done) ->
+		_ = require('lodash')
+		Promise = require('bluebird')
+		resin = require('resin-sdk-preconfigured')
+		streamToPromise = require('stream-to-promise')
+		form = require('resin-cli-form')
+		preload = require('resin-preload')
+		errors = require('resin-errors')
+		visuals = require('resin-cli-visuals')
+		nodeCleanup = require('node-cleanup')
+		{ expectedError } = require('../utils/patterns')
+
+		progressBars = {}
+
+		progressHandler = (event) ->
+			progressBar = progressBars[event.name]
+			if not progressBar
+				progressBar = progressBars[event.name] = new visuals.Progress(event.name)
+			progressBar.update(percentage: event.percentage)
+
+		spinners = {}
+
+		spinnerHandler = (event) ->
+			spinner = spinners[event.name]
+			if not spinner
+				spinner = spinners[event.name] = new visuals.Spinner(event.name)
+			if event.action == 'start'
+				spinner.start()
+			else
+				console.log()
+				spinner.stop()
+
+		options.image = params.image
+		options.appId = options.app
+		delete options.app
+
+		options.splashImage = options['splash-image']
+		delete options['splash-image']
+
+		if options['dont-check-device-type'] and not options.appId
+			expectedError('You need to specify an app id if you disable the device type check.')
+
+		# Get a configured dockerode instance
+		dockerUtils.getDocker(options)
+		.then (docker) ->
+
+			preloader = new preload.Preloader(
+				resin,
+				docker,
+				options.appId,
+				options.commit,
+				options.image,
+				options.splashImage,
+				options.proxy,
+			)
+
+			gotSignal = false
+
+			nodeCleanup (exitCode, signal) ->
+				if signal
+					gotSignal = true
+					nodeCleanup.uninstall()  # don't call cleanup handler again
+					preloader.cleanup()
+					.then ->
+						# calling process.exit() won't inform parent process of signal
+						process.kill(process.pid, signal)
+					return false
+
+			if process.env.DEBUG
+				preloader.stderr.pipe(process.stderr)
+
+			preloader.on('progress', progressHandler)
+			preloader.on('spinner', spinnerHandler)
+
+			return new Promise (resolve, reject) ->
+				preloader.on('error', reject)
+
+				preloader.build()
+				.then ->
+					preloader.prepare()
+				.then ->
+					preloader.getDeviceTypeAndPreloadedBuilds()
+				.then (info) ->
+					Promise.try ->
+						if options.appId
+							return preloader.fetchApplication()
+							.catch(errors.ResinApplicationNotFound, expectedError)
+						selectApplication(info.device_type)
+					.then (application) ->
+						preloader.setApplication(application)
+						# Check that the app device type and the image device type match
+						if not options['dont-check-device-type'] and info.device_type != application.device_type
+							expectedError(
+								"Image device type (#{info.device_type}) and application device type (#{application.device_type}) do not match"
+							)
+
+						# Use the commit given as --commit or show an interactive commit selection menu
+						Promise.try ->
+							if options.commit
+								if options.commit == LATEST and application.commit
+									# handle `--commit latest`
+									return LATEST
+								else if not _.find(application.build, commit_hash: options.commit)
+									expectedError('There is no build matching this commit')
+								return options.commit
+							selectApplicationCommit(application.build)
+						.then (commit) ->
+							if commit == LATEST
+								preloader.commit = application.commit
+							else
+								preloader.commit = commit
+
+							# Propose to disable automatic app updates if the commit is not the latest
+							offerToDisableAutomaticUpdates(application, commit)
+					.then ->
+						builds = info.preloaded_builds.map (build) ->
+							build.slice(-preload.BUILD_HASH_LENGTH)
+						if preloader.commit in builds
+							throw new preload.errors.ResinError('This build is already preloaded in this image.')
+						# All options are ready: preload the image.
+						preloader.preload()
+						.catch(preload.errors.ResinError, expectedError)
+				.then(resolve)
+				.catch(reject)
+			.then(done)
+			.finally ->
+				if not gotSignal
+					preloader.cleanup()

lib/actions/settings.coffee

@@ -0,0 +1,34 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+exports.list =
+	signature: 'settings'
+	description: 'print current settings'
+	help: '''
+		Use this command to display detected settings
+
+		Examples:
+
+			$ resin settings
+	'''
+	action: (params, options, done) ->
+		resin = require('resin-sdk-preconfigured')
+		prettyjson = require('prettyjson')
+
+		resin.settings.getAll()
+			.then(prettyjson.render)
+			.then(console.log)
+			.nodeify(done)

lib/actions/ssh.coffee

@@ -0,0 +1,130 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+module.exports =
+	signature: 'ssh [uuid]'
+	description: '(beta) get a shell into the running app container of a device'
+	help: '''
+		Warning: 'resin ssh' requires an openssh-compatible client to be correctly
+		installed in your shell environment. For more information (including Windows
+		support) please check the README here: https://github.com/resin-io/resin-cli
+
+		Use this command to get a shell into the running application container of
+		your device.
+
+		Examples:
+
+			$ resin ssh MyApp
+			$ resin ssh 7cf02a6
+			$ resin ssh 7cf02a6 --port 8080
+			$ resin ssh 7cf02a6 -v
+	'''
+	permission: 'user'
+	primary: true
+	options: [
+			signature: 'port'
+			parameter: 'port'
+			description: 'ssh gateway port'
+			alias: 'p'
+	,
+			signature: 'verbose'
+			boolean: true
+			description: 'increase verbosity'
+			alias: 'v'
+	,
+			signature: 'noproxy'
+			boolean: true
+			description: "don't use the proxy configuration for this connection.
+				Only makes sense if you've configured proxy globally."
+	]
+	action: (params, options, done) ->
+		child_process = require('child_process')
+		Promise = require('bluebird')
+		resin = require('resin-sdk-preconfigured')
+		_ = require('lodash')
+		bash = require('bash')
+		hasbin = require('hasbin')
+		{ getSubShellCommand } = require('../utils/helpers')
+		patterns = require('../utils/patterns')
+
+		options.port ?= 22
+
+		verbose = if options.verbose then '-vvv' else ''
+
+		proxyConfig = global.PROXY_CONFIG
+		useProxy = !!proxyConfig and not options.noproxy
+
+		getSshProxyCommand = (hasTunnelBin) ->
+			return '' if not useProxy
+
+			if not hasTunnelBin
+				console.warn('''
+					Proxy is enabled but the `proxytunnel` binary cannot be found.
+					Please install it if you want to route the `resin ssh` requests through the proxy.
+					Alternatively you can pass `--noproxy` param to the `resin ssh` command to ignore the proxy config
+					for the `ssh` requests.
+
+					Attemmpting the unproxied request for now.
+				''')
+				return ''
+
+			tunnelOptions =
+				proxy: "#{proxyConfig.host}:#{proxyConfig.port}"
+				dest: '%h:%p'
+			{ proxyAuth } = proxyConfig
+			if proxyAuth
+				i = proxyAuth.indexOf(':')
+				_.assign tunnelOptions,
+					user: proxyAuth.substring(0, i)
+					pass: proxyAuth.substring(i + 1)
+			proxyCommand = "proxytunnel #{bash.args(tunnelOptions, '--', '=')}"
+			return "-o #{bash.args({ ProxyCommand: proxyCommand }, '', '=')}"
+
+		Promise.try ->
+			return false if not params.uuid
+			return resin.models.device.has(params.uuid)
+		.then (uuidExists) ->
+			return params.uuid if uuidExists
+			return patterns.inferOrSelectDevice()
+		.then (uuid) ->
+			console.info("Connecting to: #{uuid}")
+			resin.models.device.get(uuid)
+		.then (device) ->
+			throw new Error('Device is not online') if not device.is_online
+
+			Promise.props
+				username: resin.auth.whoami()
+				uuid: device.uuid
+				# get full uuid
+				containerId: resin.models.device.getApplicationInfo(device.uuid).get('containerId')
+				proxyUrl: resin.settings.get('proxyUrl')
+
+				hasTunnelBin: if useProxy then hasbin('proxytunnel') else null
+			.then ({ username, uuid, containerId, proxyUrl, hasTunnelBin }) ->
+				throw new Error('Did not find running application container') if not containerId?
+				Promise.try ->
+					sshProxyCommand = getSshProxyCommand(hasTunnelBin)
+					command = "ssh #{verbose} -t \
+						-o LogLevel=ERROR \
+						-o StrictHostKeyChecking=no \
+						-o UserKnownHostsFile=/dev/null \
+						#{sshProxyCommand} \
+						-p #{options.port} #{username}@ssh.#{proxyUrl} enter #{uuid} #{containerId}"
+
+					subShellCommand = getSubShellCommand(command)
+					child_process.spawn subShellCommand.program, subShellCommand.args,
+						stdio: 'inherit'
+		.nodeify(done)

lib/actions/sync.coffee

@@ -0,0 +1,17 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+module.exports = require('resin-sync').capitano('resin-cli')

lib/actions/util.coffee

@@ -0,0 +1,56 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+_ = require('lodash')
+
+exports.availableDrives =
+	# TODO: dedupe with https://github.com/resin-io-modules/resin-cli-visuals/blob/master/lib/widgets/drive/index.coffee
+	signature: 'util available-drives'
+	description: 'list available drives'
+	help: """
+		Use this command to list your machine's drives usable for writing the OS image to.
+		Skips the system drives.
+	"""
+	action: ->
+		Promise = require('bluebird')
+		drivelist = require('drivelist')
+		driveListAsync = Promise.promisify(drivelist.list)
+		chalk = require('chalk')
+		visuals = require('resin-cli-visuals')
+
+		formatDrive = (drive) ->
+			size = drive.size / 1000000000
+			return {
+				device: drive.device
+				size: "#{size.toFixed(1)} GB"
+				description: drive.description
+			}
+
+		getDrives = ->
+			driveListAsync().then (drives) ->
+				return _.reject(drives, system: true)
+
+		getDrives()
+		.then (drives) ->
+			if not drives.length
+				console.error("#{chalk.red('x')} No available drives were detected, plug one in!")
+				return
+
+			console.log visuals.table.horizontal drives.map(formatDrive), [
+				'device'
+				'size'
+				'description'
+			]

lib/actions/wizard.coffee

@@ -0,0 +1,75 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+exports.wizard =
+	signature: 'quickstart [name]'
+	description: 'getting started with resin.io'
+	help: '''
+		Use this command to run a friendly wizard to get started with resin.io.
+
+		The wizard will guide you through:
+
+			- Create an application.
+			- Initialise an SDCard with the resin.io operating system.
+			- Associate an existing project directory with your resin.io application.
+			- Push your project to your devices.
+
+		Examples:
+
+			$ resin quickstart
+			$ resin quickstart MyApp
+	'''
+	primary: true
+	action: (params, options, done) ->
+		Promise = require('bluebird')
+		capitanoRunAsync = Promise.promisify(require('capitano').run)
+		resin = require('resin-sdk-preconfigured')
+		patterns = require('../utils/patterns')
+
+		resin.auth.isLoggedIn().then (isLoggedIn) ->
+			return if isLoggedIn
+			console.info('Looks like you\'re not logged in yet!')
+			console.info('Lets go through a quick wizard to get you started.\n')
+			return capitanoRunAsync('login')
+		.then ->
+			return if params.name?
+			patterns.selectOrCreateApplication().tap (applicationName) ->
+				resin.models.application.has(applicationName).then (hasApplication) ->
+					return applicationName if hasApplication
+					capitanoRunAsync("app create #{applicationName}")
+			.then (applicationName) ->
+				params.name = applicationName
+		.then ->
+			return capitanoRunAsync("device init --application #{params.name}")
+		.tap(patterns.awaitDevice)
+		.then (uuid) ->
+			return capitanoRunAsync("device #{uuid}")
+		.then ->
+			return resin.models.application.get(params.name)
+		.then (application) ->
+			console.log """
+				Your device is ready to start pushing some code!
+
+				Check our official documentation for more information:
+
+				    http://docs.resin.io/#/pages/introduction/introduction.md
+
+				Clone an example or go to an existing application directory and run:
+
+				    $ git remote add resin #{application.git_repository}
+				    $ git push resin master
+			"""
+		.nodeify(done)

lib/app.coffee

@@ -0,0 +1,224 @@
+###
+Copyright 2016-2017 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+Raven = require('raven')
+Raven.disableConsoleAlerts()
+Raven.config require('./config').sentryDsn,
+	captureUnhandledRejections: true
+	release: require('../package.json').version
+.install (logged, error) ->
+	console.error(error)
+	process.exit(1)
+Raven.setContext
+	extra:
+		args: process.argv
+		node_version: process.version
+
+validNodeVersions = require('../package.json').engines.node
+if not require('semver').satisfies(process.version, validNodeVersions)
+	console.warn """
+	Warning: this version of Node does not match the requirements of this package.
+	This package expects #{validNodeVersions}, but you're using #{process.version}.
+	This may cause unexpected behaviour.
+
+	To upgrade your Node, visit https://nodejs.org/en/download/
+
+	"""
+
+
+# Doing this before requiring any other modules,
+# including the 'resin-sdk', to prevent any module from reading the http proxy config
+# before us
+globalTunnel = require('global-tunnel-ng')
+settings = require('resin-settings-client')
+try
+	proxy = settings.get('proxy') or null
+catch
+	proxy = null
+# Init the tunnel even if the proxy is not configured
+# because it can also get the proxy from the http(s)_proxy env var
+# If that is not set as well the initialize will do nothing
+globalTunnel.initialize(proxy)
+
+# TODO: make this a feature of capitano https://github.com/resin-io/capitano/issues/48
+global.PROXY_CONFIG = globalTunnel.proxyConfig
+
+_ = require('lodash')
+Promise = require('bluebird')
+capitano = require('capitano')
+capitanoExecuteAsync = Promise.promisify(capitano.execute)
+
+# We don't yet use resin-sdk directly everywhere, but we set up shared
+# options correctly so we can do safely in submodules
+require('resin-sdk').setSharedOptions(
+	apiUrl: settings.get('apiUrl')
+	imageMakerUrl: settings.get('imageMakerUrl')
+	dataDirectory: settings.get('dataDirectory')
+	retries: 2
+)
+# Keep using sdk-preconfigured for now, but only temporarily
+resin = require('resin-sdk-preconfigured')
+
+actions = require('./actions')
+errors = require('./errors')
+events = require('./events')
+plugins = require('./utils/plugins')
+update = require('./utils/update')
+
+# Assign bluebird as the global promise library
+# stream-to-promise will produce native promises if not
+# for this module, which could wreak havoc in this
+# bluebird-only codebase.
+require('any-promise/register/bluebird')
+
+capitano.permission 'user', (done) ->
+	resin.auth.isLoggedIn().then (isLoggedIn) ->
+		if not isLoggedIn
+			throw new Error '''
+				You have to log in to continue
+
+				Run the following command to go through the login wizard:
+
+				  $ resin login
+			'''
+	.nodeify(done)
+
+capitano.command
+	signature: '*'
+	action: ->
+		capitano.execute(command: 'help')
+
+capitano.globalOption
+	signature: 'help'
+	boolean: true
+	alias: 'h'
+
+# ---------- Info Module ----------
+capitano.command(actions.info.version)
+
+# ---------- Help Module ----------
+capitano.command(actions.help.help)
+
+# ---------- Wizard Module ----------
+capitano.command(actions.wizard.wizard)
+
+# ---------- Auth Module ----------
+capitano.command(actions.auth.login)
+capitano.command(actions.auth.logout)
+capitano.command(actions.auth.signup)
+capitano.command(actions.auth.whoami)
+
+# ---------- App Module ----------
+capitano.command(actions.app.create)
+capitano.command(actions.app.list)
+capitano.command(actions.app.remove)
+capitano.command(actions.app.restart)
+capitano.command(actions.app.info)
+
+# ---------- Device Module ----------
+capitano.command(actions.device.list)
+capitano.command(actions.device.supported)
+capitano.command(actions.device.rename)
+capitano.command(actions.device.init)
+capitano.command(actions.device.remove)
+capitano.command(actions.device.identify)
+capitano.command(actions.device.reboot)
+capitano.command(actions.device.shutdown)
+capitano.command(actions.device.enableDeviceUrl)
+capitano.command(actions.device.disableDeviceUrl)
+capitano.command(actions.device.getDeviceUrl)
+capitano.command(actions.device.hasDeviceUrl)
+capitano.command(actions.device.register)
+capitano.command(actions.device.move)
+capitano.command(actions.device.info)
+
+# ---------- Notes Module ----------
+capitano.command(actions.notes.set)
+
+# ---------- Keys Module ----------
+capitano.command(actions.keys.list)
+capitano.command(actions.keys.add)
+capitano.command(actions.keys.info)
+capitano.command(actions.keys.remove)
+
+# ---------- Env Module ----------
+capitano.command(actions.env.list)
+capitano.command(actions.env.add)
+capitano.command(actions.env.rename)
+capitano.command(actions.env.remove)
+
+# ---------- OS Module ----------
+capitano.command(actions.os.versions)
+capitano.command(actions.os.download)
+capitano.command(actions.os.buildConfig)
+capitano.command(actions.os.configure)
+capitano.command(actions.os.initialize)
+
+# ---------- Config Module ----------
+capitano.command(actions.config.read)
+capitano.command(actions.config.write)
+capitano.command(actions.config.inject)
+capitano.command(actions.config.reconfigure)
+capitano.command(actions.config.generate)
+
+# ---------- Settings Module ----------
+capitano.command(actions.settings.list)
+
+# ---------- Logs Module ----------
+capitano.command(actions.logs)
+
+# ---------- Sync Module ----------
+capitano.command(actions.sync)
+
+# ---------- Preload Module ----------
+capitano.command(actions.preload)
+
+# ---------- SSH Module ----------
+capitano.command(actions.ssh)
+
+# ---------- Local ResinOS Module ----------
+capitano.command(actions.local.configure)
+capitano.command(actions.local.flash)
+capitano.command(actions.local.logs)
+capitano.command(actions.local.push)
+capitano.command(actions.local.ssh)
+capitano.command(actions.local.scan)
+capitano.command(actions.local.stop)
+
+# ---------- Public utils ----------
+capitano.command(actions.util.availableDrives)
+
+# ---------- Internal utils ----------
+capitano.command(actions.internal.osInit)
+
+#------------ Local build and deploy -------
+capitano.command(actions.build)
+capitano.command(actions.deploy)
+
+update.notify()
+
+plugins.register(/^resin-plugin-(.+)$/).then ->
+	cli = capitano.parse(process.argv)
+
+	runCommand = ->
+		if cli.global?.help
+			capitanoExecuteAsync(command: "help #{cli.command ? ''}")
+		else
+			capitanoExecuteAsync(cli)
+
+	Promise.all([events.trackCommand(cli), runCommand()])
+
+.catch(errors.handle)

lib/auth/index.coffee

@@ -0,0 +1,63 @@
+###
+Copyright 2016 Resin.io
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+###
+
+###*
+# @module auth
+###
+
+open = require('opn')
+resin = require('resin-sdk-preconfigured')
+server = require('./server')
+utils = require('./utils')
+
+###*
+# @summary Login to the Resin CLI using the web dashboard
+# @function
+# @public
+#
+# @description
+# This function opens the user's default browser and points it
+# to the Resin.io dashboard where the session token exchange will
+# take place.
+#
+# Once the the token is retrieved, it's automatically persisted.
+#
+# @fulfil {String} - session token
+# @returns {Promise}
+#
+# @example
+# auth.login().then (sessionToken) ->
+#   console.log('I\'m logged in!')
+#   console.log("My session token is: #{sessionToken}")
+###
+exports.login = ->
+	options =
+		port: 8989
+		path: '/auth'
+
+	# Needs to be 127.0.0.1 not localhost, because the ip only is whitelisted
+	# from mixed content warnings (as the target of a form in the result page)
+	callbackUrl = "http://127.0.0.1:#{options.port}#{options.path}"
+	return utils.getDashboardLoginURL(callbackUrl).then (loginUrl) ->
+
+		# Leave a bit of time for the
+		# server to get up and runing
+		setTimeout ->
+			open(loginUrl)
+		, 1000
+
+		return server.awaitForToken(options)
+			.tap(resin.auth.loginWithToken)

lib/auth/pages/error.ejs

@@ -3,7 +3,7 @@
 <head>
 	<meta charset="utf-8">
 	<meta http-equiv="x-ua-compatible" content="ie=edge">
-	<title>balena CLI - Error</title>
+	<title>Resin CLI - Error</title>
 	<meta name="description" content="">
 	<meta name="viewport" content="width=device-width, initial-scale=1">
 	<link rel="stylesheet" type="text/css" href="./static/style.css" inline>
@@ -12,11 +12,10 @@
 	<div class="center">
 		<img class="icon" src="./static/images/sad.png" inline>
 		<h1>Something went wrong</h1>
-		<br>
-		<p>The balena CLI login was not successful.</p>
+		<p>You couldn't login to the Resin CLI for some reason</p>
 		<br>
 		<br>
-		<a href="https://forums.balena.io/" class="button danger">Get help in our forums</a>
+		<a href="https://forums.resin.io/" class="button danger">Get help in our forums</a>
 	</div>
 </body>
 </html>