CLI Reference
=============

Both CLIs use an interactive console. Enter the directory and run the script.

.. tip::

   Run ``status`` first to verify which containers are up before issuing ``start`` or ``stop`` commands.

Manager CLI
-----------

.. code-block:: bash

   cd manager/
   ./melissae-manager.sh
   manager [3 active] >

.. note::

   The number in brackets (e.g. ``[3 active]``) shows how many manager containers are currently running.

.. list-table::
   :header-rows: 1
   :widths: 15 30 55

   * - Category
     - Command
     - Description
   * - **Core**
     - ``status``
     - Show manager services status
   * -
     - ``start``
     - Start manager services
   * -
     - ``stop``
     - Stop manager services
   * -
     - ``restart``
     - Restart manager services
   * -
     - ``build``
     - Rebuild manager containers
   * -
     - ``update``
     - Stop services, ``git pull --ff-only``, rebuild containers without cache, then prompt to restart
   * - **Agents**
     - ``enroll <name> <host>``
     - Generate enrollment token for new agent
   * -
     - ``agents``
     - List registered agents with health status
   * -
     - ``agent-exec <name> <action> [mod]``
     - Remote: start/stop/restart/status on agent via mTLS. ``<action>`` is one of ``start``, ``stop``, ``restart``, ``status``. ``[mod]`` accepts ``ssh``, ``ftp``, ``proxy`` (web), ``modbus``, ``mqtt``, ``telnet``, or ``all`` (default).
   * -
     - ``revoke <name>``
     - Revoke agent certificate and unregister
   * -
     - ``agent-logs <name> [n]``
     - Show logs from a specific agent
   * - **Certificates**
     - ``certs list``
     - List all issued certificates with expiry
   * -
     - ``certs renew <name>``
     - Renew an agent certificate
   * - **Modules**
     - ``modules``
     - List available honeypot module types
   * - **Monitoring**
     - ``stats``
     - Show attack statistics
   * -
     - ``threats``
     - Show top threat IPs with scores
   * -
     - ``events [count]``
     - Show recent events (default: 20)
   * - **Management**
     - ``install``
     - Install manager and initialize PKI
   * -
     - ``destroy``
     - Stop and remove all containers
   * - **Shell**
     - ``clear``, ``banner``, ``version``, ``exit``
     - Console utilities

Agent CLI
---------

.. code-block:: bash

   cd agent/
   ./melissae-agent.sh
   agent:my-agent [6 active] >

.. note::

   The agent name (e.g. ``my-agent``) is set during enrollment and matches the CN of the agent's TLS certificate. The number in brackets shows running honeypot containers. Before enrollment it displays as ``agent:?``.

.. list-table::
   :header-rows: 1
   :widths: 15 30 55

   * - Category
     - Command
     - Description
   * - **Core**
     - ``status``
     - Show all containers + daemon status
   * -
     - ``start [module|all]``
     - Start honeypots + agent daemon
   * -
     - ``stop [module|all]``
     - Stop modules
   * -
     - ``restart``
     - Restart all services
   * -
     - ``build``
     - Rebuild containers
   * -
     - ``update``
     - Stop modules and daemon, ``git pull --ff-only``, rebuild honeypot containers without cache, then prompt to restart enabled modules
   * - **Modules**
     - ``list``
     - List available modules with status
   * -
     - ``enable <module>``
     - Enable a module in configuration
   * -
     - ``disable <module>``
     - Disable a module in configuration
   * - **Monitoring**
     - ``buffer``
     - Show SQLite buffer status (pending, size)
   * -
     - ``test-connection``
     - Test mTLS connectivity to manager
   * -
     - ``logs <module> [n]``
     - Show local raw logs for a module
   * -
     - ``daemon-log [n]``
     - Show agent daemon log
   * - **Management**
     - ``install <url> <token>``
     - Install agent and enroll with manager
   * - **Shell**
     - ``clear``, ``banner``, ``version``, ``exit``
     - Console utilities