reorder tests

ahriman-core/package/lib/systemd/system/ahriman-daemon@.service

@@ -0,0 +1,11 @@
+[Unit]
+Description=ArcH linux ReposItory MANager (%i)
+
+[Service]
+Type=simple
+ExecStart=/usr/bin/ahriman --repository-id "%I" repo-daemon --refresh
+User=ahriman
+Group=ahriman
+
+[Install]
+WantedBy=multi-user.target

ahriman-core/package/lib/systemd/system/ahriman@.service

@@ -0,0 +1,7 @@
+[Unit]
+Description=ArcH linux ReposItory MANager (%i)
+
+[Service]
+ExecStart=/usr/bin/ahriman --repository-id "%I" repo-update --refresh
+User=ahriman
+Group=ahriman

ahriman-core/package/lib/systemd/system/ahriman@.timer

@@ -0,0 +1,9 @@
+[Unit]
+Description=ArcH linux ReposItory MANager timer (%i)
+
+[Timer]
+OnCalendar=daily
+RandomizedDelaySec=3600
+
+[Install]
+WantedBy=timers.target

ahriman-core/package/share/ahriman/settings/ahriman.ini

@@ -0,0 +1,318 @@
+[settings]
+; Relative path to directory with configuration files overrides. Overrides will be applied in alphabetic order.
+include = ahriman.ini.d
+; Relative path to configuration used by logging package.
+logging = ahriman.ini.d/logging.ini
+; Perform database migrations on the application start. Do not touch this option unless you know what you are doing.
+;apply_migrations = yes
+; Path to the application SQLite database.
+database = ${repository:root}/ahriman.db
+
+[alpm]
+; Path to pacman system database cache.
+database = /var/lib/pacman
+; Arch linux mirror used by local pacman for synchronization.
+mirror = https://geo.mirror.pkgbuild.com/$repo/os/$arch
+; Space separated list of pacman repositories to search for packages.
+repositories = core extra multilib
+; Pacman's root directory. In the most cases it must point to the system root.
+root = /
+; Sync files databases too, which is required by deep dependencies check.
+sync_files_database = yes
+; Use local packages cache. If this option is enabled, the service will be able to synchronize databases (available
+; as additional option for some subcommands). If set to no, databases must be synchronized manually.
+use_ahriman_cache = yes
+
+[aur]
+; Maximum amount of retries of HTTP requests.
+max_retries = 3
+; Retry exponential backoff.
+retry_backoff = 1.0
+; HTTP request timeout in seconds.
+;timeout = 30
+
+[build]
+; List of additional flags passed to archbuild command.
+;archbuild_flags =
+; Path to build command.
+;build_command =
+; List of packages to be ignored during automatic updates.
+;ignore_packages =
+; Include debug packages.
+;include_debug_packages = yes
+; List of additional flags passed to makechrootpkg command.
+;makechrootpkg_flags =
+; List of additional flags passed to makepkg command.
+makepkg_flags = --nocolor --ignorearch
+; List of paths to be used for implicit dependency scan. Regular expressions are supported.
+scan_paths = ^usr/lib(?!/cmake).*$
+; List of enabled triggers in the order of calls.
+triggers[] = ahriman.core.gitremote.RemotePullTrigger
+triggers[] = ahriman.core.report.ReportTrigger
+triggers[] = ahriman.core.upload.UploadTrigger
+triggers[] = ahriman.core.gitremote.RemotePushTrigger
+triggers[] = ahriman.core.housekeeping.LogsRotationTrigger
+triggers[] = ahriman.core.housekeeping.ArchiveRotationTrigger
+; List of well-known triggers. Used only for configuration purposes.
+triggers_known[] = ahriman.core.gitremote.RemotePullTrigger
+triggers_known[] = ahriman.core.gitremote.RemotePushTrigger
+triggers_known[] = ahriman.core.housekeeping.ArchiveRotationTrigger
+triggers_known[] = ahriman.core.housekeeping.LogsRotationTrigger
+triggers_known[] = ahriman.core.report.ReportTrigger
+triggers_known[] = ahriman.core.upload.UploadTrigger
+; Maximal age in seconds of the VCS packages before their version will be updated with its remote source.
+;vcs_allowed_age = 604800
+
+[repository]
+; Application root.
+root = /var/lib/ahriman
+
+[sign]
+; Enable repository or package signing. Must be one of repository, package.
+target =
+; PGP key used for signing as default.
+;key =
+
+[status]
+; Global switch to enable or disable status reporting.
+enabled = yes
+; Address of the remote service, e.g.:
+;     address = http://127.0.0.1:8080
+; In case if unix sockets are used, it might point to the valid socket with encoded path, e.g.:
+;     address = http+unix://%2Fvar%2Flib%2Fahriman%2Fsocket
+;address = http://${web:host}:${web:port}
+; Maximum amount of retries of HTTP requests.
+;max_retries = 0
+; Optional password for authentication (if enabled).
+;password =
+; Retry exponential backoff.
+;retry_backoff = 0.0
+; Do not log HTTP errors if occurs.
+suppress_http_log_errors = yes
+; HTTP request timeout in seconds.
+;timeout = 30
+; Optional username for authentication (if enabled).
+;username =
+
+[remote-pull]
+; List of configuration section names for git remote pull plugin, e.g.:
+;     target = remote-pull-trigger
+target =
+
+; git remote pull trigger sample.
+;[remote-pull-trigger]
+; Valid URL to pull repository, e.g.:
+;     pull_url = https://github.com/arcan1s/arcanisrepo.git
+;pull_url =
+; Remote branch to pull.
+;pull_branch = master
+
+[remote-push]
+; List of configuration section names for git remote push plugin, e.g.:
+;     target = remote-push-trigger
+target =
+
+; git remote push trigger sample.
+;[remote-push-trigger]
+; Author commit email.
+;commit_email = ahriman@localhost
+; Author commit user.
+;commit_user = ahriman
+; Valid URL to push repository, e.g.:
+;     push_url = https://key:token@github.com/arcan1s/arcanisrepo.git
+; Note, that more likely authentication must be enabled.
+;push_url =
+; Remote branch to push.
+;push_branch = master
+
+[report]
+; List of configuration section names for reporting plugin.
+target = console
+
+; Console reporting trigger configuration sample.
+[console]
+; Trigger type name.
+;type = console
+; Use utf8 symbols in output.
+use_utf = yes
+
+; Email reporting trigger configuration sample.
+[email]
+; Trigger type name.
+;type = email
+; Optional URL to the repository homepage.
+;homepage=
+; SMTP server address.
+;host =
+; Prefix for packages links. Link to a package will be formed as link_path / filename.
+;link_path =
+; Skip report generation if no packages were updated.
+;no_empty_report = yes
+; SMTP password.
+;password =
+; SMTP server port.
+;port =
+; List of emails to receive the reports.
+;receivers =
+; Optional link to the RSS feed.
+;rss_url =
+; Sender email.
+;sender =
+; SMTP server SSL mode, one of ssl, starttls, disabled.
+;ssl = disabled
+; Template name to be used.
+template = email-index.jinja2
+; Template name to be used for full packages list generation (same as HTML report).
+;template_full =
+; List of directories with templates.
+templates[] = ${prefix}/share/ahriman/templates
+; SMTP user.
+;user =
+
+; HTML reporting trigger configuration sample.
+[html]
+; Trigger type name.
+;type = html
+; Optional URL to the repository homepage.
+;homepage=
+; Prefix for packages links. Link to a package will be formed as link_path / filename.
+;link_path =
+; Output path for the HTML report.
+;path =
+; Optional link to the RSS feed.
+;rss_url =
+; Template name to be used.
+template = repo-index.jinja2
+; List of directories with templates.
+templates[] = ${prefix}/share/ahriman/templates
+
+; Remote service callback trigger configuration sample.
+[remote-call]
+; Trigger type name.
+;type = remote-call
+; Call for AUR packages update.
+;aur = no
+; Call for local packages update.
+;local = no
+; Call for manual packages update.
+;manual = no
+; Wait until remote process will be terminated in seconds.
+;wait_timeout = -1
+
+; RSS reporting trigger configuration sample.
+[rss]
+; Trigger type name.
+;type = rss
+; Optional URL to the repository homepage.
+;homepage=
+; Prefix for packages links. Link to a package will be formed as link_path / filename.
+;link_path =
+; Output path for the RSS report.
+;path =
+; Optional link to the RSS feed.
+;rss_url =
+; Template name to be used.
+template = rss.jinja2
+; List of directories with templates.
+templates[] = ${prefix}/share/ahriman/templates
+
+; Telegram reporting trigger configuration sample.
+[telegram]
+; Trigger type name.
+;type = telegram
+; Telegram bot API key.
+;api_key =
+; Telegram chat ID.
+;chat_id =
+; Optional URL to the repository homepage.
+;homepage=
+; Prefix for packages links. Link to a package will be formed as link_path / filename.
+;link_path =
+; Maximum amount of retries of HTTP requests.
+;max_retries = 0
+; Retry exponential backoff.
+;retry_backoff = 0.0
+; Optional link to the RSS feed.
+;rss_url =
+; Template name to be used.
+template = telegram-index.jinja2
+; Telegram specific template mode, one of MarkdownV2, HTML or Markdown.
+;template_type = HTML
+; List of directories with templates.
+templates[] = ${prefix}/share/ahriman/templates
+; HTTP request timeout in seconds.
+;timeout = 30
+
+[upload]
+; List of configuration section names for remote upload plugin, e.g.:
+;     target = rsync s3
+target =
+
+; GitHub upload trigger configuration sample.
+[github]
+; Trigger type name.
+;type = github
+; Maximum amount of retries of HTTP requests.
+;max_retries = 0
+; GitHub repository owner username.
+;owner =
+; GitHub API key. public_repo (repo) scope is required.
+;password =
+; GitHub repository name.
+;repository =
+; Retry exponential backoff.
+;retry_backoff = 0.0
+; HTTP request timeout in seconds.
+;timeout = 30
+; Include repository name to release name (recommended).
+;use_full_release_name = no
+; GitHub authentication username.
+;username =
+
+; Remote instance upload trigger configuration sample.
+[remote-service]
+; Trigger type name.
+;type = remote-service
+; Maximum amount of retries of HTTP requests.
+;max_retries = 0
+; Retry exponential backoff.
+;retry_backoff = 0.0
+; HTTP request timeout in seconds.
+;timeout = 30
+
+; rsync upload trigger configuration sample.
+[rsync]
+; Trigger type name.
+;type = rsync
+; rsync command to run.
+command = rsync --archive --compress --partial --delete
+; Remote address and directory to sync, e.g.:
+;     remote = ahriman@10.0.0.1:/srv/repo
+;remote =
+
+; S3 upload trigger configuration sample.
+[s3]
+; Trigger type name.
+;type = s3
+; AWS services access key.
+;access_key =
+; AWS S3 bucket name.
+;bucket =
+; Chunk size tp calculate ETags. Do not edit this value.
+;chunk_size = 8388608
+; Optional path prefix for stored objects.
+;object_path =
+; AWS S3 bucket region.
+;region =
+; AWS services secret key.
+;secret_key =
+
+; Remote worker configuration sample.
+;[worker]
+; Remotely reachable address of this instance, e.g.:
+;     address = http://10.0.0.1:8080
+;address =
+; Unique identifier of this instance if any.
+;identifier =
+; Maximum amount of time in seconds after which worker will be considered offline in case of no reports.
+;time_to_live = 60

ahriman-core/package/share/ahriman/settings/ahriman.ini.d/00-housekeeping.ini

@@ -0,0 +1,7 @@
+[archive]
+; Keep amount of last built packages in archive. 0 means keep all packages
+keep_built_packages = 1
+
+[logs-rotation]
+; Keep last build logs for each package
+keep_last_logs = 5

ahriman-core/package/share/ahriman/settings/ahriman.ini.d/logging.ini

@@ -0,0 +1,73 @@
+[loggers]
+keys = root,http,stderr,boto3,botocore,nose,s3transfer,sql
+
+[handlers]
+keys = console_handler,journald_handler,syslog_handler
+
+[formatters]
+keys = generic_format,syslog_format
+
+[handler_console_handler]
+class = logging.StreamHandler
+level = DEBUG
+formatter = generic_format
+args = (sys.stderr,)
+
+[handler_journald_handler]
+class = ahriman.core.log.journal_handler.JournalHandler
+level = DEBUG
+formatter = syslog_format
+kwargs = {"SYSLOG_IDENTIFIER": "ahriman"}
+
+[handler_syslog_handler]
+class = logging.handlers.SysLogHandler
+level = DEBUG
+formatter = syslog_format
+args = ("/dev/log",)
+
+[formatter_generic_format]
+format = [{levelname} {asctime}] [{name}]: {message}
+style = {
+
+[formatter_syslog_format]
+format = [{levelname}] [{name}]: {message}
+style = {
+
+[logger_root]
+level = DEBUG
+qualname = root
+
+[logger_http]
+level = WARNING
+qualname = http
+propagate = 0
+
+[logger_stderr]
+level = DEBUG
+handlers = console_handler
+qualname = stderr
+
+[logger_boto3]
+level = INFO
+qualname = boto3
+propagate = 0
+
+[logger_botocore]
+level = INFO
+qualname = botocore
+propagate = 0
+
+[logger_nose]
+level = INFO
+qualname = nose
+propagate = 0
+
+[logger_s3transfer]
+level = INFO
+qualname = s3transfer
+propagate = 0
+
+[logger_sql]
+level = INFO
+qualname = sql
+propagate = 0

ahriman-core/package/share/ahriman/templates/email-index.jinja2

@@ -0,0 +1,43 @@
+{#simplified version of full report#}
+<!doctype html>
+<html lang="en">
+    <head>
+        <title>{{ repository }}</title>
+
+        <meta name="viewport" content="width=device-width, initial-scale=1">
+
+        {% include "utils/style.jinja2" %}
+        {% include "user-style.jinja2" ignore missing %}
+    </head>
+
+    <body>
+
+        <div class="container">
+            <table id="packages" class="table table-striped">
+                <thead class="table-primary">
+                    <tr>
+                        <th>package</th>
+                        <th>version</th>
+                        <th>archive size</th>
+                        <th>installed size</th>
+                        <th>build date</th>
+                    </tr>
+                </thead>
+
+                <tbody>
+                {% for package in packages %}
+                    <tr>
+                        <td><a href="{{ link_path }}/{{ package.filename }}" title="{{ package.name }}">{{ package.name }}</a></td>
+                        <td>{{ package.version }}</td>
+                        <td>{{ package.archive_size }}</td>
+                        <td>{{ package.installed_size }}</td>
+                        <td>{{ package.build_date }}</td>
+                    </tr>
+                {% endfor %}
+                </tbody>
+            </table>
+        </div>
+
+    </body>
+
+</html>

ahriman-core/package/share/ahriman/templates/repo-index.jinja2

@@ -0,0 +1,168 @@
+<!doctype html>
+<html lang="en">
+    <head>
+        <title>{{ repository }}</title>
+
+        <meta name="viewport" content="width=device-width, initial-scale=1">
+
+        {% include "utils/style.jinja2" %}
+        {% include "user-style.jinja2" ignore missing %}
+
+        {% if rss_url is not none %}
+            <link rel="alternate" href="{{ rss_url }}" type="application/rss+xml">
+        {% endif %}
+    </head>
+
+    <body>
+
+        {% include "utils/bootstrap-scripts.jinja2" %}
+
+        <div class="container">
+            <h1>Arch linux user repository</h1>
+        </div>
+
+        <div class="container">
+            {% if pgp_key is not none %}
+                <p>This repository is signed with <a href="https://keyserver.ubuntu.com/pks/lookup?search=0x{{ pgp_key }}&fingerprint=on&op=index" title="key search">{{ pgp_key }}</a> by default.</p>
+            {% endif %}
+
+            <p>In order to use this repository edit your <code>/etc/pacman.conf</code> as following:</p>
+
+            <pre class="language-ini"><code id="pacman-conf" class="language-ini">[{{ repository }}]
+Server = {{ link_path }}
+SigLevel = Database{% if has_repo_signed %}Required{% else %}Never{% endif %} Package{% if has_package_signed %}Required{% else %}Never{% endif %} TrustedOnly</code><button id="copy-btn" type="button" class="btn language-ini" onclick="copyPacmanConf()"><i class="bi bi-clipboard"></i> copy</button></pre>
+        </div>
+
+        <div class="container">
+            <table id="packages"
+                   data-classes="table table-hover"
+                   data-export-options='{"fileName": "packages"}'
+                   data-filter-control="true"
+                   data-filter-control-visible="false"
+                   data-page-list="[10, 25, 50, 100, all]"
+                   data-page-size="10"
+                   data-pagination="true"
+                   data-resizable="true"
+                   data-search="true"
+                   data-show-columns="true"
+                   data-show-columns-search="true"
+                   data-show-columns-toggle-all="true"
+                   data-show-export="true"
+                   data-show-filter-control-switch="true"
+                   data-show-fullscreen="true"
+                   data-show-search-clear-button="true"
+                   data-sortable="true"
+                   data-sort-name="base"
+                   data-sort-order="asc">
+                <thead class="table-primary">
+                    <tr>
+                        <th data-sortable="true" data-switchable="false" data-field="name" data-filter-control="input" data-filter-control-placeholder="(any package)">package</th>
+                        <th data-sortable="true" data-align="right" data-field="version" data-filter-control="input" data-filter-control-placeholder="(any version)">version</th>
+                        <th data-sortable="true" data-visible="false" data-field="architecture" data-filter-control="select" data-filter-control-placeholder="(any arch)">architecture</th>
+                        <th data-sortable="true" data-visible="false" data-field="description" data-filter-control="input" data-filter-control-placeholder="(any description)">description</th>
+                        <th data-sortable="true" data-visible="false" data-field="url">upstream url</th>
+                        <th data-sortable="true" data-visible="false" data-field="licenses" data-filter-control="select" data-filter-data="func:filterListLicenses" data-filter-custom-search="filterList" data-filter-control-placeholder="(any license)">licenses</th>
+                        <th data-sortable="true" data-visible="false" data-field="groups" data-filter-control="select" data-filter-data="func:filterListGroups" data-filter-custom-search="filterList" data-filter-control-placeholder="(any group)">groups</th>
+                        <th data-sortable="true" data-visible="false" data-field="depends" data-filter-control="select" data-filter-data="func:filterListDepends" data-filter-custom-search="filterList" data-filter-control-placeholder="(any depends)">depends</th>
+                        <th data-sortable="true" data-align="right" data-field="archive_size">archive size</th>
+                        <th data-sortable="true" data-align="right" data-field="installed_size">installed size</th>
+                        <th data-sortable="true" data-align="right" data-field="timestamp" data-filter-control="input" data-filter-custom-search="filterDateRange" data-filter-control-placeholder="(any date)">build date</th>
+                    </tr>
+                </thead>
+
+                <tbody>
+                {% for package in packages %}
+                    <tr>
+                        <td><a href="{{ link_path }}/{{ package.filename }}" title="{{ package.name }}">{{ package.name }}</a></td>
+                        <td>{{ package.version }}</td>
+                        <td>{{ package.architecture }}</td>
+                        <td>{{ package.description }}</td>
+                        <td><a href="{{ package.url }}" title="{{ package.name }} upstream url">{{ package.url }}</a></td>
+                        <td>{{ package.licenses | join("<br>" | safe) }}</td>
+                        <td>{{ package.groups | join("<br>" | safe) }}</td>
+                        <td>{{ package.depends | join("<br>" | safe) }}</td>
+                        <td>{{ package.archive_size }}</td>
+                        <td>{{ package.installed_size }}</td>
+                        <td>{{ package.build_date }}</td>
+                    </tr>
+                {% endfor %}
+                </tbody>
+            </table>
+        </div>
+
+        <div class="container">
+            <footer class="d-flex flex-wrap justify-content-between align-items-center border-top">
+                <ul class="nav">
+                    {% if homepage is not none %}
+                        <li><a class="nav-link" href="{{ homepage }}" title="homepage"><i class="bi bi-house"></i> homepage</a></li>
+                    {% endif %}
+                </ul>
+                <ul class="nav">
+                    <li><a class="nav-link" href="https://github.com/arcan1s/ahriman" title="sources"><i class="bi bi-github"></i> ahriman</a></li>
+                </ul>
+            </footer>
+        </div>
+
+        <script>
+            const table = $(document.getElementById("packages"));
+
+            const pacmanConf = document.getElementById("pacman-conf");
+            const pacmanConfCopyButton = document.getElementById("copy-btn");
+
+            async function copyPacmanConf() {
+                const conf = pacmanConf.textContent;
+                await copyToClipboard(conf, pacmanConfCopyButton);
+            }
+
+            function filterListDepends() {
+                return extractDataList(table.bootstrapTable("getData"), "depends");
+            }
+
+            function filterListGroups() {
+                return extractDataList(table.bootstrapTable("getData"), "groups");
+            }
+
+            function filterListLicenses() {
+                return extractDataList(table.bootstrapTable("getData"), "licenses");
+            }
+
+            ready(_ => {
+                table.bootstrapTable({
+                    onCreatedControls: _ => {
+                        new easepick.create({
+                            element: document.querySelector(".bootstrap-table-filter-control-timestamp"),
+                            css: [
+                                "https://cdn.jsdelivr.net/npm/@easepick/bundle@1.2.1/dist/index.css",
+                            ],
+                            grid: 2,
+                            calendars: 2,
+                            autoApply: false,
+                            locale: {
+                                cancel: "Clear",
+                            },
+                            RangePlugin: {
+                                tooltip: false,
+                            },
+                            plugins: [
+                                "RangePlugin",
+                            ],
+                            setup: picker => {
+                                picker.on("select", _ => { table.bootstrapTable("triggerSearch"); });
+                                // replace "Cancel" behaviour to "Clear"
+                                picker.onClickCancelButton = element => {
+                                    if (picker.isCancelButton(element)) {
+                                        picker.clear();
+                                        picker.hide();
+                                        table.bootstrapTable("triggerSearch");
+                                    }
+                                };
+                            },
+                        });
+                    },
+                });
+            });
+        </script>
+
+    </body>
+
+</html>

ahriman-core/package/share/ahriman/templates/rss.jinja2

@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="utf-8"?>
+<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
+    <channel>
+        <title>{{ repository }}: Recent package updates</title>
+        {% if homepage is not none %}
+            <link>{{ homepage }}</link>
+        {% endif %}
+        <description>Recently updated packages in the {{ repository }}.</description>
+        {% if rss_url is not none %}
+            <atom:link href="{{ rss_url }}" rel="self"/>
+        {% endif %}
+        <language>en-us</language>
+        <lastBuildDate>{{ last_update }}</lastBuildDate>
+
+        {% for package in packages %}
+            <item>
+                <title>{{ package.name }} {{ package.version }} {{ package.architecture }}</title>
+                <link>{{ link_path }}/{{ package.filename }}</link>
+                <description>{{ package.description }}</description>
+                <pubDate>{{ package.build_date }}</pubDate>
+                <guid isPermaLink="false">{{ package.tag }}</guid>
+                <category>{{ repository }}</category>
+                <category>{{ package.architecture }}</category>
+            </item>
+        {% endfor %}
+    </channel>
+</rss>

ahriman-core/package/share/ahriman/templates/shell

@@ -0,0 +1,18 @@
+                                              
+                         ▄▄▄    ▄▄▄▄▄▄█▀      
+                       ▄▄▄▄▄▄▄▄▄██▄▄▄█▄▄      
+                       ██▄▄███▄▄▄▄▄██▄▄█▄▄    
+                       █▄██████▄▄▄████▄▄█▄▄  ▄
+                       █▄▄▄█████████▄▄▄▄▀▄█▄█▀
+                      █▄▀▄████▄█▄▄▄▄███▄▄ ▀▀  
+                      █▄▄▄████▄██████████     
+         ▄▄▄▄▄▄▄▄▄     ▀█▄█████▄▄▄▄█▄███▄     
+       ▄▄███▄▄▄▄▄▄▄▄▄    ▀ ▀▄█████▄▄█▄███     
+       ███▄▄████▄▄█▄██▄▄▄   ███▄▄▄▄▄▄█▀▀      
+       ███████▄▀    ▄▄▄██▄▄▄█████             
+       ██▄▄████    █▄█▄▄█████████             
+      ▄▄█▄▄██▄▀    ▀▄████▄██▄██▄▄             
+      ████████      ▄███▄▄▄█▄████             
+     ▄▄▄▄███▄▀     ▄▄█████ ███▄▄▄▄            
+ ▄▄▄██▄▄█▄▄▄▀      █████▄█ █████▄█            
+  ▀▀▀▀▀▀▀           ▀▀▀▀    ▀▀▀▀              

ahriman-core/package/share/ahriman/templates/telegram-index.jinja2

@@ -0,0 +1,5 @@
+{#simplified version of full report#}
+<b>{{ repository }} update</b>
+{% for package in packages %}
+<a href="{{ link_path }}/{{ package.filename }}">{{ package.name }}</a> {{ package.version }}
+{% endfor %}

ahriman-core/package/share/ahriman/templates/utils/bootstrap-scripts.jinja2

@@ -0,0 +1,248 @@
+<script src="https://cdn.jsdelivr.net/npm/jquery@3.7.1/dist/jquery.min.js" crossorigin="anonymous" type="application/javascript"></script>
+<script src="https://cdn.jsdelivr.net/npm/js-md5@0.8.3/src/md5.min.js" crossorigin="anonymous" type="application/javascript"></script>
+
+<script src="https://cdn.jsdelivr.net/npm/tableexport.jquery.plugin@1.33.0/tableExport.min.js" crossorigin="anonymous" type="application/javascript"></script>
+
+<script src="https://cdn.jsdelivr.net/npm/jquery-resizable-columns@0.2.3/dist/jquery.resizableColumns.min.js" crossorigin="anonymous" type="application/javascript"></script>
+
+<script src="https://cdn.jsdelivr.net/npm/@popperjs/core@2.11.8/dist/umd/popper.min.js" crossorigin="anonymous" type="application/javascript"></script>
+<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.7/dist/js/bootstrap.min.js" crossorigin="anonymous" type="application/javascript"></script>
+<script src="https://cdn.jsdelivr.net/npm/bootstrap-table@1.24.1/dist/bootstrap-table.min.js" crossorigin="anonymous" type="application/javascript"></script>
+
+<script src="https://cdn.jsdelivr.net/npm/bootstrap-table@1.24.1/dist/extensions/export/bootstrap-table-export.min.js" crossorigin="anonymous" type="application/javascript"></script>
+<script src="https://cdn.jsdelivr.net/npm/bootstrap-table@1.24.1/dist/extensions/resizable/bootstrap-table-resizable.js" crossorigin="anonymous" type="application/javascript"></script>
+<script src="https://cdn.jsdelivr.net/npm/bootstrap-table@1.24.1/dist/extensions/filter-control/bootstrap-table-filter-control.js" crossorigin="anonymous" type="application/javascript"></script>
+<script src="https://cdn.jsdelivr.net/npm/bootstrap-table@1.24.1/dist/extensions/cookie/bootstrap-table-cookie.min.js" crossorigin="anonymous" type="application/javascript"></script>
+
+<script src="https://cdn.jsdelivr.net/npm/@easepick/bundle@1.2.1/dist/index.umd.min.js" crossorigin="anonymous" type="application/javascript"></script>
+
+<script src="https://cdn.jsdelivr.net/gh/highlightjs/cdn-release@11.11.1/build/highlight.min.js" crossorigin="anonymous" type="application/javascript"></script>
+
+<script src="https://cdn.jsdelivr.net/npm/chart.js@4.5.0/dist/chart.umd.min.js" crossorigin="anonymous" type="application/javascript"></script>
+
+<script>
+    async function copyToClipboard(text, button) {
+        await navigator.clipboard.writeText(text);
+        button.innerHTML = "<i class=\"bi bi-clipboard-check\"></i> copied";
+        setTimeout(_ => {
+            button.innerHTML = "<i class=\"bi bi-clipboard\"></i> copy";
+        }, 2000);
+    }
+
+    function extractDataList(data, column) {
+        const elements = data.flatMap(row => row[column].split("<br>")).filter(v => v); // remove empty elements from array
+        return Array.from(new Set(elements)).sort();
+    }
+
+    function extractListProperties(description, property) {
+        return Object.values(description.packages)
+            .map(pkg => pkg[property])
+            .reduce((left, right) => left.concat(right), []);
+    }
+
+    function filterContains(text, value) {
+        return value.includes(text.toLowerCase().trim());
+    }
+
+    function filterDateRange(text, value) {
+        const asOfStartOfDay = date => date.setUTCHours(0, 0, 0, 0);
+
+        const [minDate, maxDate] = text.split(" - ");
+        const buildDate = asOfStartOfDay(new Date(value));
+
+        return (buildDate >= new Date(minDate)) && (buildDate <= new Date(maxDate));
+    }
+
+    function filterList(index, value, field, data) {
+        const dataList = extractDataList(data, field);
+        // the library removes all symbols from string, so it is just string
+        return value.includes(dataList[index].toLowerCase());
+    }
+
+    function hasActiveSelection() {
+        return !document.getSelection().isCollapsed; // not sure if it is a valid way, but I guess so
+    }
+
+    function hasActiveDropdown() {
+        return Array.from(document.querySelectorAll(".dropdown-menu"))
+            .some(el => el.classList.contains("show"));
+    }
+
+    function hasActiveModal() {
+        return Array.from(document.querySelectorAll(".modal"))
+            .some(el => el.classList.contains("show"));
+    }
+
+    function headerClass(status) {
+        if (status === "pending") return ["bg-warning"];
+        if (status === "building") return ["bg-warning"];
+        if (status === "failed") return ["bg-danger", "text-white"];
+        if (status === "success") return ["bg-success", "text-white"];
+        return ["bg-secondary", "text-white"];
+    }
+
+    function listToTable(data) {
+        return Array.from(new Set(data))
+            .sort()
+            .map(entry => safe(entry))
+            .join("<br>");
+    }
+
+    function makeRequest(url, params, onSuccess, onFailure) {
+        const requestParams = {
+            method: params.method,
+            body: params.json ? JSON.stringify(params.json) : params.json,
+            headers: {
+                "Accept": "application/json",
+                "Content-Type": "application/json",
+            },
+        };
+        if (params.query) {
+            const query = new URLSearchParams(params.query);
+            url += `?${query.toString()}`;
+        }
+        const convert = params.convert ?? (response => response.text());
+
+        return fetch(url, requestParams)
+            .then(response => {
+                if (response.ok) {
+                    return convert(response);
+                } else {
+                    const error = new Error("Network request error");
+                    error.status = response.status;
+                    error.statusText = response.statusText;
+                    return response.text().then(text => {
+                        error.text = text;
+                        throw error;
+                    });
+                }
+            })
+            .then(data => onSuccess && onSuccess(data))
+            .catch(error => onFailure && onFailure(error));
+    }
+
+    function readOptional(extractor, callback) {
+        for (let value = extractor(); !!value; value = null) {
+            callback(value);
+        }
+    }
+
+    function ready(fn) {
+        if (document.readyState === "complete" || document.readyState === "interactive") {
+            setTimeout(fn, 1);
+        } else {
+            document.addEventListener("DOMContentLoaded", fn);
+        }
+    }
+
+    function restoreAutoReloadSettings(toggle, intervalSelector) {
+        readOptional(() => localStorage.getItem(`ahriman-${toggle.id}-refresh-enabled`), value => toggle.checked = value === "true");
+        readOptional(() => localStorage.getItem(`ahriman-${toggle.id}-refresh-interval`), value => toggleActiveElement(intervalSelector, "interval", value));
+    }
+
+    function safe(string) {
+        return String(string)
+            .replace(/&/g, "&amp;")
+            .replace(/</g, "&lt;")
+            .replace(/>/g, "&gt;")
+            .replace(/"/g, "&quot;");
+    }
+
+    // because I'm tired of safe element generation
+    function safeLink(url, text, title) {
+        const element = document.createElement("a");
+        element.href = url;
+        element.innerText = text;
+        if (title) {
+            element.title = title;
+        }
+        return element;
+    }
+
+    function toggleActiveElement(selector, dataType, value) {
+        const targetElement = selector.querySelector(`a[data-${dataType}="${value}"]`);
+        if (targetElement?.classList?.contains("active")) {
+            return; // element is already active, skip processing
+        }
+
+        Array.from(selector.children).forEach(il => {
+            Array.from(il.children).forEach(el => el.classList.remove("active"));
+        });
+        targetElement?.classList?.add("active");
+    }
+
+    function toggleAutoReload(toggle, interval, intervalSelector, callback) {
+        if (interval) {
+            toggle.checked = true; // toggle reload
+        } else {
+            interval = intervalSelector.querySelector(".active")?.dataset?.interval; // find active element
+        }
+
+        let intervalId = null;
+        if (interval) {
+            if (toggle.checked) {
+                // refresh UI
+                toggleActiveElement(intervalSelector, "interval", interval);
+                // finally create timer task
+                intervalId = setInterval(callback, interval);
+            }
+        } else {
+            toggle.checked = false; // no active interval found, disable toggle
+        }
+
+        localStorage.setItem(`ahriman-${toggle.id}-refresh-enabled`, toggle.checked);
+        localStorage.setItem(`ahriman-${toggle.id}-refresh-interval`, interval);
+        return intervalId;
+    }
+
+    function updateTable(table, rows, rowChangedKey) {
+        // instead of using load method here, we just update rows manually to avoid table reinitialization
+        const currentData = table.bootstrapTable("getData").reduce((accumulator, row) => {
+            accumulator[row.id] = {state: row["0"], key: rowChangedKey(row)};
+            return accumulator;
+        }, {});
+        // insert or update rows, skipping ones whose status hasn't changed
+        rows.forEach(row => {
+            if (Object.hasOwn(currentData, row.id)) {
+                if (rowChangedKey(row) === currentData[row.id].key) {
+                    return;
+                }
+                row["0"] = currentData[row.id].state; // copy checkbox state
+                table.bootstrapTable("updateByUniqueId", {
+                    id: row.id,
+                    row: row,
+                    replace: true,
+                });
+            } else {
+                table.bootstrapTable("insertRow", {index: 0, row: row});
+            }
+        });
+        // remove old rows
+        const newData = rows.map(value => value.id);
+        Object.keys(currentData).forEach(id => {
+            if (!newData.includes(id)) {
+                table.bootstrapTable("removeByUniqueId", id);
+            }
+        });
+    }
+
+    Array.prototype.equals = function (right, comparator) {
+        let index = this.length;
+        if (index !== right.length) {
+            return false;
+        }
+
+        while (index--) {
+            if (!comparator(this[index], right[index])) {
+                return false;
+            }
+        }
+
+        return true;
+    }
+
+    Date.prototype.toISOStringShort = function () {
+        const pad = number => String(number).padStart(2, "0");
+        return `${this.getFullYear()}-${pad(this.getMonth() + 1)}-${pad(this.getDate())} ${pad(this.getHours())}:${pad(this.getMinutes())}:${pad(this.getSeconds())}`;
+    }
+</script>

ahriman-core/package/share/ahriman/templates/utils/style.jinja2

@@ -0,0 +1,30 @@
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.7/dist/css/bootstrap.min.css" crossorigin="anonymous" type="text/css">
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.13.1/font/bootstrap-icons.css" crossorigin="anonymous" type="text/css">
+
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-table@1.24.1/dist/bootstrap-table.min.css" crossorigin="anonymous" type="text/css">
+
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/jquery-resizable-columns@0.2.3/dist/jquery.resizableColumns.css" crossorigin="anonymous" type="text/css">
+
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-table@1.24.1/dist/extensions/filter-control/bootstrap-table-filter-control.css" crossorigin="anonymous" type="text/css">
+
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootswatch@5.3.7/dist/cosmo/bootstrap.min.css" crossorigin="anonymous" type="text/css">
+
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/gh/highlightjs/cdn-release@11.11.1/build/styles/github.min.css" crossorigin="anonymous" type="text/css">
+
+<style>
+    .pre-scrollable {
+        display: block;
+        max-height: 680px;
+        overflow-y: scroll;
+    }
+
+    pre[class*="language-"] {
+        position: relative;
+    }
+
+    pre[class*="language-"] button {
+        position: absolute;
+        top: 0;
+        right: 5px;
+    }
+</style>

ahriman-core/package/share/bash-completion/completions/_ahriman

@@ -0,0 +1,715 @@
+# AUTOMATICALLY GENERATED by `shtab`
+
+_shtab_ahriman_subparsers=('add' 'aur-search' 'check' 'clean' 'config' 'config-validate' 'copy' 'daemon' 'help' 'help-commands-unsafe' 'help-updates' 'help-version' 'init' 'key-import' 'package-add' 'package-changes' 'package-changes-remove' 'package-copy' 'package-remove' 'package-status' 'package-status-remove' 'package-status-update' 'package-update' 'patch-add' 'patch-list' 'patch-remove' 'patch-set-add' 'rebuild' 'remove' 'remove-unknown' 'repo-backup' 'repo-check' 'repo-clean' 'repo-config' 'repo-config-validate' 'repo-create-keyring' 'repo-create-mirrorlist' 'repo-daemon' 'repo-init' 'repo-rebuild' 'repo-remove-unknown' 'repo-report' 'repo-restore' 'repo-setup' 'repo-sign' 'repo-statistics' 'repo-status-update' 'repo-sync' 'repo-tree' 'repo-triggers' 'repo-update' 'report' 'run' 'search' 'service-clean' 'service-config' 'service-config-validate' 'service-key-import' 'service-repositories' 'service-run' 'service-setup' 'service-shell' 'service-tree-migrate' 'setup' 'shell' 'sign' 'status' 'status-update' 'sync' 'update' 'user-add' 'user-list' 'user-remove' 'version' 'web' 'web-reload')
+
+_shtab_ahriman_option_strings=('-h' '--help' '-a' '--architecture' '-c' '--configuration' '--force' '-l' '--lock' '--log-handler' '-q' '--quiet' '--report' '--no-report' '-r' '--repository' '--unsafe' '-V' '--version' '--wait-timeout')
+_shtab_ahriman_add_option_strings=('-h' '--help' '--changes' '--no-changes' '--dependencies' '--no-dependencies' '-e' '--exit-code' '--increment' '--no-increment' '-n' '--now' '-y' '--refresh' '-s' '--source' '-u' '--username' '-v' '--variable')
+_shtab_ahriman_aur_search_option_strings=('-h' '--help' '-e' '--exit-code' '--info' '--no-info' '--sort-by')
+_shtab_ahriman_check_option_strings=('-h' '--help' '--changes' '--no-changes' '--check-files' '--no-check-files' '-e' '--exit-code' '--vcs' '--no-vcs' '-y' '--refresh')
+_shtab_ahriman_clean_option_strings=('-h' '--help' '--cache' '--no-cache' '--chroot' '--no-chroot' '--manual' '--no-manual' '--packages' '--no-packages' '--pacman' '--no-pacman')
+_shtab_ahriman_config_option_strings=('-h' '--help' '--info' '--no-info' '--secure' '--no-secure')
+_shtab_ahriman_config_validate_option_strings=('-h' '--help' '-e' '--exit-code')
+_shtab_ahriman_copy_option_strings=('-h' '--help' '-e' '--exit-code' '--remove')
+_shtab_ahriman_daemon_option_strings=('-h' '--help' '-i' '--interval' '--aur' '--no-aur' '--changes' '--no-changes' '--check-files' '--no-check-files' '--dependencies' '--no-dependencies' '--dry-run' '--increment' '--no-increment' '--local' '--no-local' '--manual' '--no-manual' '--partitions' '--no-partitions' '-u' '--username' '--vcs' '--no-vcs' '-y' '--refresh')
+_shtab_ahriman_help_option_strings=('-h' '--help')
+_shtab_ahriman_help_commands_unsafe_option_strings=('-h' '--help')
+_shtab_ahriman_help_updates_option_strings=('-h' '--help' '-e' '--exit-code')
+_shtab_ahriman_help_version_option_strings=('-h' '--help')
+_shtab_ahriman_init_option_strings=('-h' '--help' '--build-as-user' '--from-configuration' '--generate-salt' '--no-generate-salt' '--makeflags-jobs' '--no-makeflags-jobs' '--mirror' '--multilib' '--no-multilib' '--packager' '--server' '--sign-key' '--sign-target' '--web-port' '--web-unix-socket')
+_shtab_ahriman_key_import_option_strings=('-h' '--help' '--key-server')
+_shtab_ahriman_package_add_option_strings=('-h' '--help' '--changes' '--no-changes' '--dependencies' '--no-dependencies' '-e' '--exit-code' '--increment' '--no-increment' '-n' '--now' '-y' '--refresh' '-s' '--source' '-u' '--username' '-v' '--variable')
+_shtab_ahriman_package_changes_option_strings=('-h' '--help' '-e' '--exit-code')
+_shtab_ahriman_package_changes_remove_option_strings=('-h' '--help')
+_shtab_ahriman_package_copy_option_strings=('-h' '--help' '-e' '--exit-code' '--remove')
+_shtab_ahriman_package_remove_option_strings=('-h' '--help')
+_shtab_ahriman_package_status_option_strings=('-h' '--help' '--ahriman' '-e' '--exit-code' '--info' '--no-info' '-s' '--status')
+_shtab_ahriman_package_status_remove_option_strings=('-h' '--help')
+_shtab_ahriman_package_status_update_option_strings=('-h' '--help' '-s' '--status')
+_shtab_ahriman_package_update_option_strings=('-h' '--help' '--changes' '--no-changes' '--dependencies' '--no-dependencies' '-e' '--exit-code' '--increment' '--no-increment' '-n' '--now' '-y' '--refresh' '-s' '--source' '-u' '--username' '-v' '--variable')
+_shtab_ahriman_patch_add_option_strings=('-h' '--help')
+_shtab_ahriman_patch_list_option_strings=('-h' '--help' '-e' '--exit-code' '-v' '--variable')
+_shtab_ahriman_patch_remove_option_strings=('-h' '--help' '-v' '--variable')
+_shtab_ahriman_patch_set_add_option_strings=('-h' '--help' '-t' '--track')
+_shtab_ahriman_rebuild_option_strings=('-h' '--help' '--depends-on' '--dry-run' '--from-database' '--increment' '--no-increment' '-e' '--exit-code' '-s' '--status' '-u' '--username')
+_shtab_ahriman_remove_option_strings=('-h' '--help')
+_shtab_ahriman_remove_unknown_option_strings=('-h' '--help' '--dry-run')
+_shtab_ahriman_repo_backup_option_strings=('-h' '--help')
+_shtab_ahriman_repo_check_option_strings=('-h' '--help' '--changes' '--no-changes' '--check-files' '--no-check-files' '-e' '--exit-code' '--vcs' '--no-vcs' '-y' '--refresh')
+_shtab_ahriman_repo_clean_option_strings=('-h' '--help' '--cache' '--no-cache' '--chroot' '--no-chroot' '--manual' '--no-manual' '--packages' '--no-packages' '--pacman' '--no-pacman')
+_shtab_ahriman_repo_config_option_strings=('-h' '--help' '--info' '--no-info' '--secure' '--no-secure')
+_shtab_ahriman_repo_config_validate_option_strings=('-h' '--help' '-e' '--exit-code')
+_shtab_ahriman_repo_create_keyring_option_strings=('-h' '--help')
+_shtab_ahriman_repo_create_mirrorlist_option_strings=('-h' '--help')
+_shtab_ahriman_repo_daemon_option_strings=('-h' '--help' '-i' '--interval' '--aur' '--no-aur' '--changes' '--no-changes' '--check-files' '--no-check-files' '--dependencies' '--no-dependencies' '--dry-run' '--increment' '--no-increment' '--local' '--no-local' '--manual' '--no-manual' '--partitions' '--no-partitions' '-u' '--username' '--vcs' '--no-vcs' '-y' '--refresh')
+_shtab_ahriman_repo_init_option_strings=('-h' '--help' '--build-as-user' '--from-configuration' '--generate-salt' '--no-generate-salt' '--makeflags-jobs' '--no-makeflags-jobs' '--mirror' '--multilib' '--no-multilib' '--packager' '--server' '--sign-key' '--sign-target' '--web-port' '--web-unix-socket')
+_shtab_ahriman_repo_rebuild_option_strings=('-h' '--help' '--depends-on' '--dry-run' '--from-database' '--increment' '--no-increment' '-e' '--exit-code' '-s' '--status' '-u' '--username')
+_shtab_ahriman_repo_remove_unknown_option_strings=('-h' '--help' '--dry-run')
+_shtab_ahriman_repo_report_option_strings=('-h' '--help')
+_shtab_ahriman_repo_restore_option_strings=('-h' '--help' '-o' '--output')
+_shtab_ahriman_repo_setup_option_strings=('-h' '--help' '--build-as-user' '--from-configuration' '--generate-salt' '--no-generate-salt' '--makeflags-jobs' '--no-makeflags-jobs' '--mirror' '--multilib' '--no-multilib' '--packager' '--server' '--sign-key' '--sign-target' '--web-port' '--web-unix-socket')
+_shtab_ahriman_repo_sign_option_strings=('-h' '--help')
+_shtab_ahriman_repo_statistics_option_strings=('-h' '--help' '--chart' '-e' '--event' '--from-date' '--limit' '--offset' '--to-date')
+_shtab_ahriman_repo_status_update_option_strings=('-h' '--help' '-s' '--status')
+_shtab_ahriman_repo_sync_option_strings=('-h' '--help')
+_shtab_ahriman_repo_tree_option_strings=('-h' '--help' '-p' '--partitions')
+_shtab_ahriman_repo_triggers_option_strings=('-h' '--help')
+_shtab_ahriman_repo_update_option_strings=('-h' '--help' '--aur' '--no-aur' '--changes' '--no-changes' '--check-files' '--no-check-files' '--dependencies' '--no-dependencies' '--dry-run' '-e' '--exit-code' '--increment' '--no-increment' '--local' '--no-local' '--manual' '--no-manual' '-u' '--username' '--vcs' '--no-vcs' '-y' '--refresh')
+_shtab_ahriman_report_option_strings=('-h' '--help')
+_shtab_ahriman_run_option_strings=('-h' '--help')
+_shtab_ahriman_search_option_strings=('-h' '--help' '-e' '--exit-code' '--info' '--no-info' '--sort-by')
+_shtab_ahriman_service_clean_option_strings=('-h' '--help' '--cache' '--no-cache' '--chroot' '--no-chroot' '--manual' '--no-manual' '--packages' '--no-packages' '--pacman' '--no-pacman')
+_shtab_ahriman_service_config_option_strings=('-h' '--help' '--info' '--no-info' '--secure' '--no-secure')
+_shtab_ahriman_service_config_validate_option_strings=('-h' '--help' '-e' '--exit-code')
+_shtab_ahriman_service_key_import_option_strings=('-h' '--help' '--key-server')
+_shtab_ahriman_service_repositories_option_strings=('-h' '--help' '--id-only' '--no-id-only')
+_shtab_ahriman_service_run_option_strings=('-h' '--help')
+_shtab_ahriman_service_setup_option_strings=('-h' '--help' '--build-as-user' '--from-configuration' '--generate-salt' '--no-generate-salt' '--makeflags-jobs' '--no-makeflags-jobs' '--mirror' '--multilib' '--no-multilib' '--packager' '--server' '--sign-key' '--sign-target' '--web-port' '--web-unix-socket')
+_shtab_ahriman_service_shell_option_strings=('-h' '--help' '-o' '--output')
+_shtab_ahriman_service_tree_migrate_option_strings=('-h' '--help')
+_shtab_ahriman_setup_option_strings=('-h' '--help' '--build-as-user' '--from-configuration' '--generate-salt' '--no-generate-salt' '--makeflags-jobs' '--no-makeflags-jobs' '--mirror' '--multilib' '--no-multilib' '--packager' '--server' '--sign-key' '--sign-target' '--web-port' '--web-unix-socket')
+_shtab_ahriman_shell_option_strings=('-h' '--help' '-o' '--output')
+_shtab_ahriman_sign_option_strings=('-h' '--help')
+_shtab_ahriman_status_option_strings=('-h' '--help' '--ahriman' '-e' '--exit-code' '--info' '--no-info' '-s' '--status')
+_shtab_ahriman_status_update_option_strings=('-h' '--help' '-s' '--status')
+_shtab_ahriman_sync_option_strings=('-h' '--help')
+_shtab_ahriman_update_option_strings=('-h' '--help' '--aur' '--no-aur' '--changes' '--no-changes' '--check-files' '--no-check-files' '--dependencies' '--no-dependencies' '--dry-run' '-e' '--exit-code' '--increment' '--no-increment' '--local' '--no-local' '--manual' '--no-manual' '-u' '--username' '--vcs' '--no-vcs' '-y' '--refresh')
+_shtab_ahriman_user_add_option_strings=('-h' '--help' '--key' '--packager' '-p' '--password' '-R' '--role')
+_shtab_ahriman_user_list_option_strings=('-h' '--help' '-e' '--exit-code' '-R' '--role')
+_shtab_ahriman_user_remove_option_strings=('-h' '--help')
+_shtab_ahriman_version_option_strings=('-h' '--help')
+_shtab_ahriman_web_option_strings=('-h' '--help')
+_shtab_ahriman_web_reload_option_strings=('-h' '--help')
+
+
+
+_shtab_ahriman_pos_0_choices=('add' 'aur-search' 'check' 'clean' 'config' 'config-validate' 'copy' 'daemon' 'help' 'help-commands-unsafe' 'help-updates' 'help-version' 'init' 'key-import' 'package-add' 'package-changes' 'package-changes-remove' 'package-copy' 'package-remove' 'package-status' 'package-status-remove' 'package-status-update' 'package-update' 'patch-add' 'patch-list' 'patch-remove' 'patch-set-add' 'rebuild' 'remove' 'remove-unknown' 'repo-backup' 'repo-check' 'repo-clean' 'repo-config' 'repo-config-validate' 'repo-create-keyring' 'repo-create-mirrorlist' 'repo-daemon' 'repo-init' 'repo-rebuild' 'repo-remove-unknown' 'repo-report' 'repo-restore' 'repo-setup' 'repo-sign' 'repo-statistics' 'repo-status-update' 'repo-sync' 'repo-tree' 'repo-triggers' 'repo-update' 'report' 'run' 'search' 'service-clean' 'service-config' 'service-config-validate' 'service-key-import' 'service-repositories' 'service-run' 'service-setup' 'service-shell' 'service-tree-migrate' 'setup' 'shell' 'sign' 'status' 'status-update' 'sync' 'update' 'user-add' 'user-list' 'user-remove' 'version' 'web' 'web-reload')
+_shtab_ahriman___log_handler_choices=('console' 'syslog' 'journald')
+_shtab_ahriman_add__s_choices=('auto' 'archive' 'aur' 'directory' 'local' 'remote' 'repository')
+_shtab_ahriman_add___source_choices=('auto' 'archive' 'aur' 'directory' 'local' 'remote' 'repository')
+_shtab_ahriman_aur_search___sort_by_choices=('description' 'first_submitted' 'id' 'last_modified' 'maintainer' 'name' 'num_votes' 'out_of_date' 'package_base' 'package_base_id' 'popularity' 'repository' 'submitter' 'url' 'url_path' 'version')
+_shtab_ahriman_init___sign_target_choices=('disabled' 'packages' 'repository')
+_shtab_ahriman_package_add__s_choices=('auto' 'archive' 'aur' 'directory' 'local' 'remote' 'repository')
+_shtab_ahriman_package_add___source_choices=('auto' 'archive' 'aur' 'directory' 'local' 'remote' 'repository')
+_shtab_ahriman_package_status__s_choices=('unknown' 'pending' 'building' 'failed' 'success')
+_shtab_ahriman_package_status___status_choices=('unknown' 'pending' 'building' 'failed' 'success')
+_shtab_ahriman_package_status_update__s_choices=('unknown' 'pending' 'building' 'failed' 'success')
+_shtab_ahriman_package_status_update___status_choices=('unknown' 'pending' 'building' 'failed' 'success')
+_shtab_ahriman_package_update__s_choices=('auto' 'archive' 'aur' 'directory' 'local' 'remote' 'repository')
+_shtab_ahriman_package_update___source_choices=('auto' 'archive' 'aur' 'directory' 'local' 'remote' 'repository')
+_shtab_ahriman_rebuild__s_choices=('unknown' 'pending' 'building' 'failed' 'success')
+_shtab_ahriman_rebuild___status_choices=('unknown' 'pending' 'building' 'failed' 'success')
+_shtab_ahriman_repo_init___sign_target_choices=('disabled' 'packages' 'repository')
+_shtab_ahriman_repo_rebuild__s_choices=('unknown' 'pending' 'building' 'failed' 'success')
+_shtab_ahriman_repo_rebuild___status_choices=('unknown' 'pending' 'building' 'failed' 'success')
+_shtab_ahriman_repo_setup___sign_target_choices=('disabled' 'packages' 'repository')
+_shtab_ahriman_repo_statistics__e_choices=('package-outdated' 'package-removed' 'package-update-failed' 'package-updated')
+_shtab_ahriman_repo_statistics___event_choices=('package-outdated' 'package-removed' 'package-update-failed' 'package-updated')
+_shtab_ahriman_repo_status_update__s_choices=('unknown' 'pending' 'building' 'failed' 'success')
+_shtab_ahriman_repo_status_update___status_choices=('unknown' 'pending' 'building' 'failed' 'success')
+_shtab_ahriman_search___sort_by_choices=('description' 'first_submitted' 'id' 'last_modified' 'maintainer' 'name' 'num_votes' 'out_of_date' 'package_base' 'package_base_id' 'popularity' 'repository' 'submitter' 'url' 'url_path' 'version')
+_shtab_ahriman_service_setup___sign_target_choices=('disabled' 'packages' 'repository')
+_shtab_ahriman_setup___sign_target_choices=('disabled' 'packages' 'repository')
+_shtab_ahriman_status__s_choices=('unknown' 'pending' 'building' 'failed' 'success')
+_shtab_ahriman_status___status_choices=('unknown' 'pending' 'building' 'failed' 'success')
+_shtab_ahriman_status_update__s_choices=('unknown' 'pending' 'building' 'failed' 'success')
+_shtab_ahriman_status_update___status_choices=('unknown' 'pending' 'building' 'failed' 'success')
+_shtab_ahriman_user_add__R_choices=('unauthorized' 'read' 'reporter' 'full')
+_shtab_ahriman_user_add___role_choices=('unauthorized' 'read' 'reporter' 'full')
+_shtab_ahriman_user_list__R_choices=('unauthorized' 'read' 'reporter' 'full')
+_shtab_ahriman_user_list___role_choices=('unauthorized' 'read' 'reporter' 'full')
+
+_shtab_ahriman_pos_0_nargs=A...
+_shtab_ahriman__h_nargs=0
+_shtab_ahriman___help_nargs=0
+_shtab_ahriman___force_nargs=0
+_shtab_ahriman__q_nargs=0
+_shtab_ahriman___quiet_nargs=0
+_shtab_ahriman___report_nargs=0
+_shtab_ahriman___no_report_nargs=0
+_shtab_ahriman___unsafe_nargs=0
+_shtab_ahriman__V_nargs=0
+_shtab_ahriman___version_nargs=0
+_shtab_ahriman_add_pos_0_nargs=+
+_shtab_ahriman_add__h_nargs=0
+_shtab_ahriman_add___help_nargs=0
+_shtab_ahriman_add___changes_nargs=0
+_shtab_ahriman_add___no_changes_nargs=0
+_shtab_ahriman_add___dependencies_nargs=0
+_shtab_ahriman_add___no_dependencies_nargs=0
+_shtab_ahriman_add__e_nargs=0
+_shtab_ahriman_add___exit_code_nargs=0
+_shtab_ahriman_add___increment_nargs=0
+_shtab_ahriman_add___no_increment_nargs=0
+_shtab_ahriman_add__n_nargs=0
+_shtab_ahriman_add___now_nargs=0
+_shtab_ahriman_add__y_nargs=0
+_shtab_ahriman_add___refresh_nargs=0
+_shtab_ahriman_aur_search_pos_0_nargs=+
+_shtab_ahriman_aur_search__h_nargs=0
+_shtab_ahriman_aur_search___help_nargs=0
+_shtab_ahriman_aur_search__e_nargs=0
+_shtab_ahriman_aur_search___exit_code_nargs=0
+_shtab_ahriman_aur_search___info_nargs=0
+_shtab_ahriman_aur_search___no_info_nargs=0
+_shtab_ahriman_check_pos_0_nargs=*
+_shtab_ahriman_check__h_nargs=0
+_shtab_ahriman_check___help_nargs=0
+_shtab_ahriman_check___changes_nargs=0
+_shtab_ahriman_check___no_changes_nargs=0
+_shtab_ahriman_check___check_files_nargs=0
+_shtab_ahriman_check___no_check_files_nargs=0
+_shtab_ahriman_check__e_nargs=0
+_shtab_ahriman_check___exit_code_nargs=0
+_shtab_ahriman_check___vcs_nargs=0
+_shtab_ahriman_check___no_vcs_nargs=0
+_shtab_ahriman_check__y_nargs=0
+_shtab_ahriman_check___refresh_nargs=0
+_shtab_ahriman_clean__h_nargs=0
+_shtab_ahriman_clean___help_nargs=0
+_shtab_ahriman_clean___cache_nargs=0
+_shtab_ahriman_clean___no_cache_nargs=0
+_shtab_ahriman_clean___chroot_nargs=0
+_shtab_ahriman_clean___no_chroot_nargs=0
+_shtab_ahriman_clean___manual_nargs=0
+_shtab_ahriman_clean___no_manual_nargs=0
+_shtab_ahriman_clean___packages_nargs=0
+_shtab_ahriman_clean___no_packages_nargs=0
+_shtab_ahriman_clean___pacman_nargs=0
+_shtab_ahriman_clean___no_pacman_nargs=0
+_shtab_ahriman_config__h_nargs=0
+_shtab_ahriman_config___help_nargs=0
+_shtab_ahriman_config___info_nargs=0
+_shtab_ahriman_config___no_info_nargs=0
+_shtab_ahriman_config___secure_nargs=0
+_shtab_ahriman_config___no_secure_nargs=0
+_shtab_ahriman_config_validate__h_nargs=0
+_shtab_ahriman_config_validate___help_nargs=0
+_shtab_ahriman_config_validate__e_nargs=0
+_shtab_ahriman_config_validate___exit_code_nargs=0
+_shtab_ahriman_copy_pos_1_nargs=+
+_shtab_ahriman_copy__h_nargs=0
+_shtab_ahriman_copy___help_nargs=0
+_shtab_ahriman_copy__e_nargs=0
+_shtab_ahriman_copy___exit_code_nargs=0
+_shtab_ahriman_copy___remove_nargs=0
+_shtab_ahriman_daemon__h_nargs=0
+_shtab_ahriman_daemon___help_nargs=0
+_shtab_ahriman_daemon___aur_nargs=0
+_shtab_ahriman_daemon___no_aur_nargs=0
+_shtab_ahriman_daemon___changes_nargs=0
+_shtab_ahriman_daemon___no_changes_nargs=0
+_shtab_ahriman_daemon___check_files_nargs=0
+_shtab_ahriman_daemon___no_check_files_nargs=0
+_shtab_ahriman_daemon___dependencies_nargs=0
+_shtab_ahriman_daemon___no_dependencies_nargs=0
+_shtab_ahriman_daemon___dry_run_nargs=0
+_shtab_ahriman_daemon___increment_nargs=0
+_shtab_ahriman_daemon___no_increment_nargs=0
+_shtab_ahriman_daemon___local_nargs=0
+_shtab_ahriman_daemon___no_local_nargs=0
+_shtab_ahriman_daemon___manual_nargs=0
+_shtab_ahriman_daemon___no_manual_nargs=0
+_shtab_ahriman_daemon___partitions_nargs=0
+_shtab_ahriman_daemon___no_partitions_nargs=0
+_shtab_ahriman_daemon___vcs_nargs=0
+_shtab_ahriman_daemon___no_vcs_nargs=0
+_shtab_ahriman_daemon__y_nargs=0
+_shtab_ahriman_daemon___refresh_nargs=0
+_shtab_ahriman_help__h_nargs=0
+_shtab_ahriman_help___help_nargs=0
+_shtab_ahriman_help_commands_unsafe_pos_0_nargs=*
+_shtab_ahriman_help_commands_unsafe__h_nargs=0
+_shtab_ahriman_help_commands_unsafe___help_nargs=0
+_shtab_ahriman_help_updates__h_nargs=0
+_shtab_ahriman_help_updates___help_nargs=0
+_shtab_ahriman_help_updates__e_nargs=0
+_shtab_ahriman_help_updates___exit_code_nargs=0
+_shtab_ahriman_help_version__h_nargs=0
+_shtab_ahriman_help_version___help_nargs=0
+_shtab_ahriman_init__h_nargs=0
+_shtab_ahriman_init___help_nargs=0
+_shtab_ahriman_init___generate_salt_nargs=0
+_shtab_ahriman_init___no_generate_salt_nargs=0
+_shtab_ahriman_init___makeflags_jobs_nargs=0
+_shtab_ahriman_init___no_makeflags_jobs_nargs=0
+_shtab_ahriman_init___multilib_nargs=0
+_shtab_ahriman_init___no_multilib_nargs=0
+_shtab_ahriman_key_import__h_nargs=0
+_shtab_ahriman_key_import___help_nargs=0
+_shtab_ahriman_package_add_pos_0_nargs=+
+_shtab_ahriman_package_add__h_nargs=0
+_shtab_ahriman_package_add___help_nargs=0
+_shtab_ahriman_package_add___changes_nargs=0
+_shtab_ahriman_package_add___no_changes_nargs=0
+_shtab_ahriman_package_add___dependencies_nargs=0
+_shtab_ahriman_package_add___no_dependencies_nargs=0
+_shtab_ahriman_package_add__e_nargs=0
+_shtab_ahriman_package_add___exit_code_nargs=0
+_shtab_ahriman_package_add___increment_nargs=0
+_shtab_ahriman_package_add___no_increment_nargs=0
+_shtab_ahriman_package_add__n_nargs=0
+_shtab_ahriman_package_add___now_nargs=0
+_shtab_ahriman_package_add__y_nargs=0
+_shtab_ahriman_package_add___refresh_nargs=0
+_shtab_ahriman_package_changes__h_nargs=0
+_shtab_ahriman_package_changes___help_nargs=0
+_shtab_ahriman_package_changes__e_nargs=0
+_shtab_ahriman_package_changes___exit_code_nargs=0
+_shtab_ahriman_package_changes_remove__h_nargs=0
+_shtab_ahriman_package_changes_remove___help_nargs=0
+_shtab_ahriman_package_copy_pos_1_nargs=+
+_shtab_ahriman_package_copy__h_nargs=0
+_shtab_ahriman_package_copy___help_nargs=0
+_shtab_ahriman_package_copy__e_nargs=0
+_shtab_ahriman_package_copy___exit_code_nargs=0
+_shtab_ahriman_package_copy___remove_nargs=0
+_shtab_ahriman_package_remove_pos_0_nargs=+
+_shtab_ahriman_package_remove__h_nargs=0
+_shtab_ahriman_package_remove___help_nargs=0
+_shtab_ahriman_package_status_pos_0_nargs=*
+_shtab_ahriman_package_status__h_nargs=0
+_shtab_ahriman_package_status___help_nargs=0
+_shtab_ahriman_package_status___ahriman_nargs=0
+_shtab_ahriman_package_status__e_nargs=0
+_shtab_ahriman_package_status___exit_code_nargs=0
+_shtab_ahriman_package_status___info_nargs=0
+_shtab_ahriman_package_status___no_info_nargs=0
+_shtab_ahriman_package_status_remove_pos_0_nargs=+
+_shtab_ahriman_package_status_remove__h_nargs=0
+_shtab_ahriman_package_status_remove___help_nargs=0
+_shtab_ahriman_package_status_update_pos_0_nargs=*
+_shtab_ahriman_package_status_update__h_nargs=0
+_shtab_ahriman_package_status_update___help_nargs=0
+_shtab_ahriman_package_update_pos_0_nargs=+
+_shtab_ahriman_package_update__h_nargs=0
+_shtab_ahriman_package_update___help_nargs=0
+_shtab_ahriman_package_update___changes_nargs=0
+_shtab_ahriman_package_update___no_changes_nargs=0
+_shtab_ahriman_package_update___dependencies_nargs=0
+_shtab_ahriman_package_update___no_dependencies_nargs=0
+_shtab_ahriman_package_update__e_nargs=0
+_shtab_ahriman_package_update___exit_code_nargs=0
+_shtab_ahriman_package_update___increment_nargs=0
+_shtab_ahriman_package_update___no_increment_nargs=0
+_shtab_ahriman_package_update__n_nargs=0
+_shtab_ahriman_package_update___now_nargs=0
+_shtab_ahriman_package_update__y_nargs=0
+_shtab_ahriman_package_update___refresh_nargs=0
+_shtab_ahriman_patch_add__h_nargs=0
+_shtab_ahriman_patch_add___help_nargs=0
+_shtab_ahriman_patch_list__h_nargs=0
+_shtab_ahriman_patch_list___help_nargs=0
+_shtab_ahriman_patch_list__e_nargs=0
+_shtab_ahriman_patch_list___exit_code_nargs=0
+_shtab_ahriman_patch_remove__h_nargs=0
+_shtab_ahriman_patch_remove___help_nargs=0
+_shtab_ahriman_patch_set_add__h_nargs=0
+_shtab_ahriman_patch_set_add___help_nargs=0
+_shtab_ahriman_rebuild__h_nargs=0
+_shtab_ahriman_rebuild___help_nargs=0
+_shtab_ahriman_rebuild___dry_run_nargs=0
+_shtab_ahriman_rebuild___from_database_nargs=0
+_shtab_ahriman_rebuild___increment_nargs=0
+_shtab_ahriman_rebuild___no_increment_nargs=0
+_shtab_ahriman_rebuild__e_nargs=0
+_shtab_ahriman_rebuild___exit_code_nargs=0
+_shtab_ahriman_remove_pos_0_nargs=+
+_shtab_ahriman_remove__h_nargs=0
+_shtab_ahriman_remove___help_nargs=0
+_shtab_ahriman_remove_unknown__h_nargs=0
+_shtab_ahriman_remove_unknown___help_nargs=0
+_shtab_ahriman_remove_unknown___dry_run_nargs=0
+_shtab_ahriman_repo_backup__h_nargs=0
+_shtab_ahriman_repo_backup___help_nargs=0
+_shtab_ahriman_repo_check_pos_0_nargs=*
+_shtab_ahriman_repo_check__h_nargs=0
+_shtab_ahriman_repo_check___help_nargs=0
+_shtab_ahriman_repo_check___changes_nargs=0
+_shtab_ahriman_repo_check___no_changes_nargs=0
+_shtab_ahriman_repo_check___check_files_nargs=0
+_shtab_ahriman_repo_check___no_check_files_nargs=0
+_shtab_ahriman_repo_check__e_nargs=0
+_shtab_ahriman_repo_check___exit_code_nargs=0
+_shtab_ahriman_repo_check___vcs_nargs=0
+_shtab_ahriman_repo_check___no_vcs_nargs=0
+_shtab_ahriman_repo_check__y_nargs=0
+_shtab_ahriman_repo_check___refresh_nargs=0
+_shtab_ahriman_repo_clean__h_nargs=0
+_shtab_ahriman_repo_clean___help_nargs=0
+_shtab_ahriman_repo_clean___cache_nargs=0
+_shtab_ahriman_repo_clean___no_cache_nargs=0
+_shtab_ahriman_repo_clean___chroot_nargs=0
+_shtab_ahriman_repo_clean___no_chroot_nargs=0
+_shtab_ahriman_repo_clean___manual_nargs=0
+_shtab_ahriman_repo_clean___no_manual_nargs=0
+_shtab_ahriman_repo_clean___packages_nargs=0
+_shtab_ahriman_repo_clean___no_packages_nargs=0
+_shtab_ahriman_repo_clean___pacman_nargs=0
+_shtab_ahriman_repo_clean___no_pacman_nargs=0
+_shtab_ahriman_repo_config__h_nargs=0
+_shtab_ahriman_repo_config___help_nargs=0
+_shtab_ahriman_repo_config___info_nargs=0
+_shtab_ahriman_repo_config___no_info_nargs=0
+_shtab_ahriman_repo_config___secure_nargs=0
+_shtab_ahriman_repo_config___no_secure_nargs=0
+_shtab_ahriman_repo_config_validate__h_nargs=0
+_shtab_ahriman_repo_config_validate___help_nargs=0
+_shtab_ahriman_repo_config_validate__e_nargs=0
+_shtab_ahriman_repo_config_validate___exit_code_nargs=0
+_shtab_ahriman_repo_create_keyring__h_nargs=0
+_shtab_ahriman_repo_create_keyring___help_nargs=0
+_shtab_ahriman_repo_create_mirrorlist__h_nargs=0
+_shtab_ahriman_repo_create_mirrorlist___help_nargs=0
+_shtab_ahriman_repo_daemon__h_nargs=0
+_shtab_ahriman_repo_daemon___help_nargs=0
+_shtab_ahriman_repo_daemon___aur_nargs=0
+_shtab_ahriman_repo_daemon___no_aur_nargs=0
+_shtab_ahriman_repo_daemon___changes_nargs=0
+_shtab_ahriman_repo_daemon___no_changes_nargs=0
+_shtab_ahriman_repo_daemon___check_files_nargs=0
+_shtab_ahriman_repo_daemon___no_check_files_nargs=0
+_shtab_ahriman_repo_daemon___dependencies_nargs=0
+_shtab_ahriman_repo_daemon___no_dependencies_nargs=0
+_shtab_ahriman_repo_daemon___dry_run_nargs=0
+_shtab_ahriman_repo_daemon___increment_nargs=0
+_shtab_ahriman_repo_daemon___no_increment_nargs=0
+_shtab_ahriman_repo_daemon___local_nargs=0
+_shtab_ahriman_repo_daemon___no_local_nargs=0
+_shtab_ahriman_repo_daemon___manual_nargs=0
+_shtab_ahriman_repo_daemon___no_manual_nargs=0
+_shtab_ahriman_repo_daemon___partitions_nargs=0
+_shtab_ahriman_repo_daemon___no_partitions_nargs=0
+_shtab_ahriman_repo_daemon___vcs_nargs=0
+_shtab_ahriman_repo_daemon___no_vcs_nargs=0
+_shtab_ahriman_repo_daemon__y_nargs=0
+_shtab_ahriman_repo_daemon___refresh_nargs=0
+_shtab_ahriman_repo_init__h_nargs=0
+_shtab_ahriman_repo_init___help_nargs=0
+_shtab_ahriman_repo_init___generate_salt_nargs=0
+_shtab_ahriman_repo_init___no_generate_salt_nargs=0
+_shtab_ahriman_repo_init___makeflags_jobs_nargs=0
+_shtab_ahriman_repo_init___no_makeflags_jobs_nargs=0
+_shtab_ahriman_repo_init___multilib_nargs=0
+_shtab_ahriman_repo_init___no_multilib_nargs=0
+_shtab_ahriman_repo_rebuild__h_nargs=0
+_shtab_ahriman_repo_rebuild___help_nargs=0
+_shtab_ahriman_repo_rebuild___dry_run_nargs=0
+_shtab_ahriman_repo_rebuild___from_database_nargs=0
+_shtab_ahriman_repo_rebuild___increment_nargs=0
+_shtab_ahriman_repo_rebuild___no_increment_nargs=0
+_shtab_ahriman_repo_rebuild__e_nargs=0
+_shtab_ahriman_repo_rebuild___exit_code_nargs=0
+_shtab_ahriman_repo_remove_unknown__h_nargs=0
+_shtab_ahriman_repo_remove_unknown___help_nargs=0
+_shtab_ahriman_repo_remove_unknown___dry_run_nargs=0
+_shtab_ahriman_repo_report__h_nargs=0
+_shtab_ahriman_repo_report___help_nargs=0
+_shtab_ahriman_repo_restore__h_nargs=0
+_shtab_ahriman_repo_restore___help_nargs=0
+_shtab_ahriman_repo_setup__h_nargs=0
+_shtab_ahriman_repo_setup___help_nargs=0
+_shtab_ahriman_repo_setup___generate_salt_nargs=0
+_shtab_ahriman_repo_setup___no_generate_salt_nargs=0
+_shtab_ahriman_repo_setup___makeflags_jobs_nargs=0
+_shtab_ahriman_repo_setup___no_makeflags_jobs_nargs=0
+_shtab_ahriman_repo_setup___multilib_nargs=0
+_shtab_ahriman_repo_setup___no_multilib_nargs=0
+_shtab_ahriman_repo_sign_pos_0_nargs=*
+_shtab_ahriman_repo_sign__h_nargs=0
+_shtab_ahriman_repo_sign___help_nargs=0
+_shtab_ahriman_repo_statistics__h_nargs=0
+_shtab_ahriman_repo_statistics___help_nargs=0
+_shtab_ahriman_repo_status_update__h_nargs=0
+_shtab_ahriman_repo_status_update___help_nargs=0
+_shtab_ahriman_repo_sync__h_nargs=0
+_shtab_ahriman_repo_sync___help_nargs=0
+_shtab_ahriman_repo_tree__h_nargs=0
+_shtab_ahriman_repo_tree___help_nargs=0
+_shtab_ahriman_repo_triggers_pos_0_nargs=*
+_shtab_ahriman_repo_triggers__h_nargs=0
+_shtab_ahriman_repo_triggers___help_nargs=0
+_shtab_ahriman_repo_update_pos_0_nargs=*
+_shtab_ahriman_repo_update__h_nargs=0
+_shtab_ahriman_repo_update___help_nargs=0
+_shtab_ahriman_repo_update___aur_nargs=0
+_shtab_ahriman_repo_update___no_aur_nargs=0
+_shtab_ahriman_repo_update___changes_nargs=0
+_shtab_ahriman_repo_update___no_changes_nargs=0
+_shtab_ahriman_repo_update___check_files_nargs=0
+_shtab_ahriman_repo_update___no_check_files_nargs=0
+_shtab_ahriman_repo_update___dependencies_nargs=0
+_shtab_ahriman_repo_update___no_dependencies_nargs=0
+_shtab_ahriman_repo_update___dry_run_nargs=0
+_shtab_ahriman_repo_update__e_nargs=0
+_shtab_ahriman_repo_update___exit_code_nargs=0
+_shtab_ahriman_repo_update___increment_nargs=0
+_shtab_ahriman_repo_update___no_increment_nargs=0
+_shtab_ahriman_repo_update___local_nargs=0
+_shtab_ahriman_repo_update___no_local_nargs=0
+_shtab_ahriman_repo_update___manual_nargs=0
+_shtab_ahriman_repo_update___no_manual_nargs=0
+_shtab_ahriman_repo_update___vcs_nargs=0
+_shtab_ahriman_repo_update___no_vcs_nargs=0
+_shtab_ahriman_repo_update__y_nargs=0
+_shtab_ahriman_repo_update___refresh_nargs=0
+_shtab_ahriman_report__h_nargs=0
+_shtab_ahriman_report___help_nargs=0
+_shtab_ahriman_run_pos_0_nargs=+
+_shtab_ahriman_run__h_nargs=0
+_shtab_ahriman_run___help_nargs=0
+_shtab_ahriman_search_pos_0_nargs=+
+_shtab_ahriman_search__h_nargs=0
+_shtab_ahriman_search___help_nargs=0
+_shtab_ahriman_search__e_nargs=0
+_shtab_ahriman_search___exit_code_nargs=0
+_shtab_ahriman_search___info_nargs=0
+_shtab_ahriman_search___no_info_nargs=0
+_shtab_ahriman_service_clean__h_nargs=0
+_shtab_ahriman_service_clean___help_nargs=0
+_shtab_ahriman_service_clean___cache_nargs=0
+_shtab_ahriman_service_clean___no_cache_nargs=0
+_shtab_ahriman_service_clean___chroot_nargs=0
+_shtab_ahriman_service_clean___no_chroot_nargs=0
+_shtab_ahriman_service_clean___manual_nargs=0
+_shtab_ahriman_service_clean___no_manual_nargs=0
+_shtab_ahriman_service_clean___packages_nargs=0
+_shtab_ahriman_service_clean___no_packages_nargs=0
+_shtab_ahriman_service_clean___pacman_nargs=0
+_shtab_ahriman_service_clean___no_pacman_nargs=0
+_shtab_ahriman_service_config__h_nargs=0
+_shtab_ahriman_service_config___help_nargs=0
+_shtab_ahriman_service_config___info_nargs=0
+_shtab_ahriman_service_config___no_info_nargs=0
+_shtab_ahriman_service_config___secure_nargs=0
+_shtab_ahriman_service_config___no_secure_nargs=0
+_shtab_ahriman_service_config_validate__h_nargs=0
+_shtab_ahriman_service_config_validate___help_nargs=0
+_shtab_ahriman_service_config_validate__e_nargs=0
+_shtab_ahriman_service_config_validate___exit_code_nargs=0
+_shtab_ahriman_service_key_import__h_nargs=0
+_shtab_ahriman_service_key_import___help_nargs=0
+_shtab_ahriman_service_repositories__h_nargs=0
+_shtab_ahriman_service_repositories___help_nargs=0
+_shtab_ahriman_service_repositories___id_only_nargs=0
+_shtab_ahriman_service_repositories___no_id_only_nargs=0
+_shtab_ahriman_service_run_pos_0_nargs=+
+_shtab_ahriman_service_run__h_nargs=0
+_shtab_ahriman_service_run___help_nargs=0
+_shtab_ahriman_service_setup__h_nargs=0
+_shtab_ahriman_service_setup___help_nargs=0
+_shtab_ahriman_service_setup___generate_salt_nargs=0
+_shtab_ahriman_service_setup___no_generate_salt_nargs=0
+_shtab_ahriman_service_setup___makeflags_jobs_nargs=0
+_shtab_ahriman_service_setup___no_makeflags_jobs_nargs=0
+_shtab_ahriman_service_setup___multilib_nargs=0
+_shtab_ahriman_service_setup___no_multilib_nargs=0
+_shtab_ahriman_service_shell__h_nargs=0
+_shtab_ahriman_service_shell___help_nargs=0
+_shtab_ahriman_service_shell__v_nargs=0
+_shtab_ahriman_service_shell___verbose_nargs=0
+_shtab_ahriman_service_tree_migrate__h_nargs=0
+_shtab_ahriman_service_tree_migrate___help_nargs=0
+_shtab_ahriman_setup__h_nargs=0
+_shtab_ahriman_setup___help_nargs=0
+_shtab_ahriman_setup___generate_salt_nargs=0
+_shtab_ahriman_setup___no_generate_salt_nargs=0
+_shtab_ahriman_setup___makeflags_jobs_nargs=0
+_shtab_ahriman_setup___no_makeflags_jobs_nargs=0
+_shtab_ahriman_setup___multilib_nargs=0
+_shtab_ahriman_setup___no_multilib_nargs=0
+_shtab_ahriman_shell__h_nargs=0
+_shtab_ahriman_shell___help_nargs=0
+_shtab_ahriman_shell__v_nargs=0
+_shtab_ahriman_shell___verbose_nargs=0
+_shtab_ahriman_sign_pos_0_nargs=*
+_shtab_ahriman_sign__h_nargs=0
+_shtab_ahriman_sign___help_nargs=0
+_shtab_ahriman_status_pos_0_nargs=*
+_shtab_ahriman_status__h_nargs=0
+_shtab_ahriman_status___help_nargs=0
+_shtab_ahriman_status___ahriman_nargs=0
+_shtab_ahriman_status__e_nargs=0
+_shtab_ahriman_status___exit_code_nargs=0
+_shtab_ahriman_status___info_nargs=0
+_shtab_ahriman_status___no_info_nargs=0
+_shtab_ahriman_status_update_pos_0_nargs=*
+_shtab_ahriman_status_update__h_nargs=0
+_shtab_ahriman_status_update___help_nargs=0
+_shtab_ahriman_sync__h_nargs=0
+_shtab_ahriman_sync___help_nargs=0
+_shtab_ahriman_update_pos_0_nargs=*
+_shtab_ahriman_update__h_nargs=0
+_shtab_ahriman_update___help_nargs=0
+_shtab_ahriman_update___aur_nargs=0
+_shtab_ahriman_update___no_aur_nargs=0
+_shtab_ahriman_update___changes_nargs=0
+_shtab_ahriman_update___no_changes_nargs=0
+_shtab_ahriman_update___check_files_nargs=0
+_shtab_ahriman_update___no_check_files_nargs=0
+_shtab_ahriman_update___dependencies_nargs=0
+_shtab_ahriman_update___no_dependencies_nargs=0
+_shtab_ahriman_update___dry_run_nargs=0
+_shtab_ahriman_update__e_nargs=0
+_shtab_ahriman_update___exit_code_nargs=0
+_shtab_ahriman_update___increment_nargs=0
+_shtab_ahriman_update___no_increment_nargs=0
+_shtab_ahriman_update___local_nargs=0
+_shtab_ahriman_update___no_local_nargs=0
+_shtab_ahriman_update___manual_nargs=0
+_shtab_ahriman_update___no_manual_nargs=0
+_shtab_ahriman_update___vcs_nargs=0
+_shtab_ahriman_update___no_vcs_nargs=0
+_shtab_ahriman_update__y_nargs=0
+_shtab_ahriman_update___refresh_nargs=0
+_shtab_ahriman_user_add__h_nargs=0
+_shtab_ahriman_user_add___help_nargs=0
+_shtab_ahriman_user_list__h_nargs=0
+_shtab_ahriman_user_list___help_nargs=0
+_shtab_ahriman_user_list__e_nargs=0
+_shtab_ahriman_user_list___exit_code_nargs=0
+_shtab_ahriman_user_remove__h_nargs=0
+_shtab_ahriman_user_remove___help_nargs=0
+_shtab_ahriman_version__h_nargs=0
+_shtab_ahriman_version___help_nargs=0
+_shtab_ahriman_web__h_nargs=0
+_shtab_ahriman_web___help_nargs=0
+_shtab_ahriman_web_reload__h_nargs=0
+_shtab_ahriman_web_reload___help_nargs=0
+
+
+# $1=COMP_WORDS[1]
+_shtab_compgen_files() {
+  compgen -f -- $1  # files
+}
+
+# $1=COMP_WORDS[1]
+_shtab_compgen_dirs() {
+  compgen -d -- $1  # recurse into subdirs
+}
+
+# $1=COMP_WORDS[1]
+_shtab_replace_nonword() {
+  echo "${1//[^[:word:]]/_}"
+}
+
+# set default values (called for the initial parser & any subparsers)
+_set_parser_defaults() {
+  local subparsers_var="${prefix}_subparsers[@]"
+  sub_parsers=${!subparsers_var-}
+
+  local current_option_strings_var="${prefix}_option_strings[@]"
+  current_option_strings=${!current_option_strings_var}
+
+  completed_positional_actions=0
+
+  _set_new_action "pos_${completed_positional_actions}" true
+}
+
+# $1=action identifier
+# $2=positional action (bool)
+# set all identifiers for an action's parameters
+_set_new_action() {
+  current_action="${prefix}_$(_shtab_replace_nonword $1)"
+
+  local current_action_compgen_var=${current_action}_COMPGEN
+  current_action_compgen="${!current_action_compgen_var-}"
+
+  local current_action_choices_var="${current_action}_choices[@]"
+  current_action_choices="${!current_action_choices_var-}"
+
+  local current_action_nargs_var="${current_action}_nargs"
+  if [ -n "${!current_action_nargs_var-}" ]; then
+    current_action_nargs="${!current_action_nargs_var}"
+  else
+    current_action_nargs=1
+  fi
+
+  current_action_args_start_index=$(( $word_index + 1 - $pos_only ))
+
+  current_action_is_positional=$2
+}
+
+# Notes:
+# `COMPREPLY`: what will be rendered after completion is triggered
+# `completing_word`: currently typed word to generate completions for
+# `${!var}`: evaluates the content of `var` and expand its content as a variable
+#     hello="world"
+#     x="hello"
+#     ${!x} -> ${hello} -> "world"
+_shtab_ahriman() {
+  local completing_word="${COMP_WORDS[COMP_CWORD]}"
+  local previous_word="${COMP_WORDS[COMP_CWORD-1]}"
+  local completed_positional_actions
+  local current_action
+  local current_action_args_start_index
+  local current_action_choices
+  local current_action_compgen
+  local current_action_is_positional
+  local current_action_nargs
+  local current_option_strings
+  local sub_parsers
+  COMPREPLY=()
+
+  local prefix=_shtab_ahriman
+  local word_index=0
+  local pos_only=0 # "--" delimeter not encountered yet
+  _set_parser_defaults
+  word_index=1
+
+  # determine what arguments are appropriate for the current state
+  # of the arg parser
+  while [ $word_index -ne $COMP_CWORD ]; do
+    local this_word="${COMP_WORDS[$word_index]}"
+
+    if [[ $pos_only = 1 || " $this_word " != " -- " ]]; then
+      if [[ -n $sub_parsers && " ${sub_parsers[@]} " == *" ${this_word} "* ]]; then
+        # valid subcommand: add it to the prefix & reset the current action
+        prefix="${prefix}_$(_shtab_replace_nonword $this_word)"
+        _set_parser_defaults
+      fi
+
+      if [[ " ${current_option_strings[@]} " == *" ${this_word} "* ]]; then
+        # a new action should be acquired (due to recognised option string or
+        # no more input expected from current action);
+        # the next positional action can fill in here
+        _set_new_action $this_word false
+      fi
+
+      if [[ "$current_action_nargs" != "*" ]] && \
+         [[ "$current_action_nargs" != "+" ]] && \
+         [[ "$current_action_nargs" != "?" ]] && \
+         [[ "$current_action_nargs" != *"..." ]] && \
+         (( $word_index + 1 - $current_action_args_start_index - $pos_only >= \
+            $current_action_nargs )); then
+        $current_action_is_positional && let "completed_positional_actions += 1"
+        _set_new_action "pos_${completed_positional_actions}" true
+      fi
+    else
+      pos_only=1 # "--" delimeter encountered
+    fi
+
+    let "word_index+=1"
+  done
+
+  # Generate the completions
+
+  if [[ $pos_only = 0 && "${completing_word}" == -* ]]; then
+    # optional argument started: use option strings
+    COMPREPLY=( $(compgen -W "${current_option_strings[*]}" -- "${completing_word}") )
+  elif [[ "${previous_word}" == ">" || "${previous_word}" == ">>" ||
+          "${previous_word}" =~ ^[12]">" || "${previous_word}" =~ ^[12]">>" ]]; then
+    # handle redirection operators
+    COMPREPLY=( $(compgen -f -- "${completing_word}") )
+  else
+    # use choices & compgen
+    local IFS=$'\n' # items may contain spaces, so delimit using newline
+    COMPREPLY=( $([ -n "${current_action_compgen}" ] \
+                  && "${current_action_compgen}" "${completing_word}") )
+    unset IFS
+    COMPREPLY+=( $(compgen -W "${current_action_choices[*]}" -- "${completing_word}") )
+  fi
+
+  return 0
+}
+
+complete -o filenames -F _shtab_ahriman ahriman

ahriman-core/pyproject.toml

@@ -0,0 +1,68 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "ahriman-core"
+description = "ArcH linux ReposItory MANager, core package"
+readme = "../README.md"
+requires-python = ">=3.13"
+license = {file = "../COPYING"}
+authors = [
+    {name = "ahriman team"},
+]
+dependencies = [
+    "bcrypt",
+    "filelock",
+    "inflection",
+    "pyelftools",
+    "requests",
+]
+dynamic = ["version"]
+
+[project.optional-dependencies]
+journald = [
+    "systemd-python",
+]
+# FIXME technically this dependency is required, but in some cases we do not have access to
+# the libalpm which is required in order to install the package. Thus in case if we do not
+# really need to run the application we can move it to "optional" dependencies
+pacman = [
+    "pyalpm",
+]
+reports = [
+    "Jinja2",
+]
+s3 = [
+    "boto3",
+]
+shell = [
+    "IPython",
+]
+stats = [
+    "matplotlib",
+]
+unixsocket = [
+    "requests-unixsocket2",
+]
+validator = [
+    "cerberus",
+]
+
+[project.scripts]
+ahriman = "ahriman.application.ahriman:run"
+
+[project.urls]
+Documentation = "https://ahriman.readthedocs.io/"
+Repository = "https://github.com/arcan1s/ahriman"
+Changelog = "https://github.com/arcan1s/ahriman/releases"
+
+[tool.hatch.version]
+path = "src/ahriman/__init__.py"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/ahriman"]
+
+[tool.hatch.build.targets.wheel.shared-data]
+"package/lib" = "lib"
+"package/share" = "share"

ahriman-core/src/ahriman/__init__.py

@@ -0,0 +1,20 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+__version__ = "2.20.0"

ahriman-core/src/ahriman/application/__init__.py

@@ -0,0 +1,19 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#

ahriman-core/src/ahriman/application/ahriman.py

@@ -0,0 +1,120 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from pathlib import Path
+
+import ahriman.application.handlers
+
+from ahriman import __version__
+from ahriman.application.handlers.handler import Handler
+from ahriman.application.help_formatter import _HelpFormatter
+from ahriman.core.module_loader import implementations
+from ahriman.core.utils import enum_values
+from ahriman.models.log_handler import LogHandler
+
+
+__all__: list[str] = []
+
+
+def _parser() -> argparse.ArgumentParser:
+    """
+    command line parser generator
+
+    Returns:
+        argparse.ArgumentParser: command line parser for the application
+    """
+    parser = argparse.ArgumentParser(prog="ahriman", description="ArcH linux ReposItory MANager",
+                                     epilog="""
+Quick setup command (replace repository name, architecture and packager as needed):
+
+>>> ahriman -a x86_64 -r aur service-setup --packager "ahriman bot <ahriman@example.com>"
+
+Add new package from AUR:
+
+>>> ahriman package-add ahriman --now
+
+Check for updates and build out-of-dated packages (add ``--dry-run`` to build it later):
+
+>>> ahriman repo-update
+
+Remove package from the repository:
+
+>>> ahriman package-remove ahriman
+
+Start web service (requires additional configuration):
+
+>>> ahriman web
+""",
+                                     fromfile_prefix_chars="@", formatter_class=_HelpFormatter)
+    parser.add_argument("-a", "--architecture", help="filter by target architecture")
+    parser.add_argument("-c", "--configuration", help="configuration path", type=Path,
+                        default=Path("/") / "etc" / "ahriman.ini")
+    parser.add_argument("--force", help="force run, remove file lock", action="store_true")
+    parser.add_argument("-l", "--lock", help="lock file", type=Path, default=Path("ahriman.pid"))
+    parser.add_argument("--log-handler", help="explicit log handler specification. If none set, the handler will be "
+                                              "guessed from environment",
+                        type=LogHandler, choices=enum_values(LogHandler))
+    parser.add_argument("-q", "--quiet", help="force disable any logging", action="store_true")
+    parser.add_argument("--report", help="force enable or disable reporting to web service",
+                        action=argparse.BooleanOptionalAction, default=True)
+    parser.add_argument("-r", "--repository", help="filter by target repository")
+    # special secret argument for systemd unit. The issue is that systemd doesn't allow multiple arguments to template
+    # name. This parameter accepts [[arch]-repo] in order to keep backward compatibility
+    parser.add_argument("--repository-id", help=argparse.SUPPRESS)
+    parser.add_argument("--unsafe", help="allow to run ahriman as non-ahriman user. Some actions might be unavailable",
+                        action="store_true")
+    parser.add_argument("-V", "--version", action="version", version=__version__)
+    parser.add_argument("--wait-timeout", help="wait for lock to be free. Negative value will lead to "
+                                               "immediate application run even if there is lock file. "
+                                               "In case of zero value, the application will wait infinitely",
+                        type=int, default=-1)
+
+    subparsers = parser.add_subparsers(title="command", help="command to run", dest="command")
+
+    for handler in implementations(ahriman.application.handlers, Handler):
+        for subparser_parser in handler.arguments:
+            subparser = subparser_parser(subparsers)
+            subparser.formatter_class = _HelpFormatter
+            subparser.set_defaults(handler=handler, parser=_parser)
+
+    # sort actions alphabetically in both choices and help message
+    # pylint: disable=protected-access
+    subparsers._choices_actions = sorted(subparsers._choices_actions, key=lambda action: action.dest)
+    subparsers.choices = dict(sorted(subparsers.choices.items()))
+
+    return parser
+
+
+def run() -> int:
+    """
+    run application instance
+
+    Returns:
+        int: application status code
+    """
+    parser = _parser()
+    args = parser.parse_args()
+
+    if args.command is None:  # in case of empty command we would like to print help message
+        parser.exit(status=2, message=parser.format_help())
+
+    handler: Handler = args.handler
+    return handler.execute(args)

ahriman-core/src/ahriman/application/application/__init__.py

@@ -0,0 +1,20 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from ahriman.application.application.application import Application

ahriman-core/src/ahriman/application/application/application.py

@@ -0,0 +1,176 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from collections.abc import Callable, Iterable
+
+from ahriman.application.application.application_packages import ApplicationPackages
+from ahriman.application.application.application_repository import ApplicationRepository
+from ahriman.core.formatters import UpdatePrinter
+from ahriman.core.tree import Tree
+from ahriman.models.package import Package
+from ahriman.models.result import Result
+
+
+class Application(ApplicationPackages, ApplicationRepository):
+    """
+    base application class
+
+    Examples:
+        This class groups :class:`ahriman.core.repository.repository.Repository` methods into specific method which
+        process all supposed actions caused by underlying action. E.g.::
+
+            >>> from ahriman.core.configuration import Configuration
+            >>> from ahriman.models.package_source import PackageSource
+            >>> from ahriman.models.repository_id import RepositoryId
+            >>>
+            >>> configuration = Configuration()
+            >>> application = Application(RepositoryId("x86_64", "x86_64"), configuration, report=True)
+            >>> # add packages to build queue
+            >>> application.add(["ahriman"], PackageSource.AUR)
+            >>>
+            >>> # check for updates
+            >>> updates = application.updates([], aur=True, local=True, manual=True, vcs=True)
+            >>> # updates for specified packages
+            >>> application.update(updates)
+
+        In case if specific actions or their order are required, the direct access to
+        :class:`ahriman.core.repository.repository.Repository` must be used instead.
+    """
+
+    def _known_packages(self) -> set[str]:
+        """
+        load packages from repository and pacman repositories
+
+        Returns:
+            set[str]: list of known packages
+        """
+        known_packages: set[str] = set()
+        # local set
+        # this action is not really needed in case if ``alpm.use_ahriman_cache`` set to yes, because pacman
+        # will eventually contain all the local packages
+        for base in self.repository.packages():
+            for package, properties in base.packages.items():
+                known_packages.add(package)
+                known_packages.update(properties.provides)
+        # known pacman databases
+        known_packages.update(self.repository.pacman.packages())
+        return known_packages
+
+    def on_result(self, result: Result) -> None:
+        """
+        generate report and sync to remote server
+
+        Args:
+            result(Result): build result
+        """
+        packages = self.repository.packages()
+        self.repository.triggers.on_result(result, packages)
+
+    def on_start(self) -> None:
+        """
+        run triggers on start of the application
+        """
+        self.repository.triggers.on_start()
+
+    def on_stop(self) -> None:
+        """
+        run triggers on stop of the application. Note, however, that in most cases this method should not be called
+        directly as it will be called after on_start action
+        """
+        self.repository.triggers.on_stop()
+
+    def print_updates(self, packages: list[Package], *, log_fn: Callable[[str], None]) -> None:
+        """
+        print list of packages to be built. This method will build dependency tree and print updates accordingly
+
+        Args:
+            packages(list[Package]): package list to be printed
+            log_fn(Callable[[str], None]): logger function to log updates
+        """
+        local_versions = {package.base: package.version for package in self.repository.packages()}
+
+        tree = Tree.resolve(packages)
+        for level in tree:
+            for package in level:
+                UpdatePrinter(package, local_versions.get(package.base))(verbose=True, log_fn=log_fn, separator=" -> ")
+
+    def with_dependencies(self, packages: list[Package], *, process_dependencies: bool) -> list[Package]:
+        """
+        add missing dependencies to list of packages. This will extract known packages, check dependencies of
+        the supplied packages and add packages which are not presented in the list of known packages.
+
+        Args:
+            packages(list[Package]): list of source packages of which dependencies have to be processed
+            process_dependencies(bool): if set to ``False``, dependencies will not be processed
+
+        Returns:
+            list[Package]: updated packages list. Packager for dependencies will be copied from the original package
+
+        Examples:
+            In the most cases, in order to avoid build failure, it is required to add missing packages, which can be
+            done by calling::
+
+                >>> application = ...
+                >>> packages = application.with_dependencies(packages, process_dependencies=True)
+                >>> application.print_updates(packages, log_fn=print)
+        """
+        if not process_dependencies or not packages:
+            return packages
+
+        def missing_dependencies(sources: Iterable[Package]) -> dict[str, str | None]:
+            # append list of known packages with packages which are in current sources
+            satisfied_packages = known_packages | {
+                single
+                for source in sources
+                for single in source.packages_full
+            }
+
+            return {
+                dependency: source.packager
+                for source in sources
+                for dependency in source.depends_build
+                if dependency not in satisfied_packages
+            }
+
+        def new_packages(root: Package) -> dict[str, Package]:
+            portion = {root.base: root}
+            while missing := missing_dependencies(portion.values()):
+                for package_name, packager in missing.items():
+                    if (source_dir := self.repository.paths.cache_for(package_name)).is_dir():
+                        # there is local cache, load package from it
+                        leaf = Package.from_build(source_dir, self.repository.repository_id.architecture, packager)
+                    else:
+                        leaf = Package.from_aur(package_name, packager, include_provides=True)
+                    portion[leaf.base] = leaf
+
+                    # register package in the database
+                    self.reporter.set_unknown(leaf)
+
+            return portion
+
+        known_packages = self._known_packages()
+        with_dependencies: dict[str, Package] = {}
+        for package in packages:
+            with self.in_package_context(package.base, package.version):  # use the same context for the logger
+                try:
+                    with_dependencies |= new_packages(package)
+                except Exception:
+                    self.logger.exception("could not process dependencies of %s, skip the package", package.base)
+
+        return list(with_dependencies.values())

ahriman-core/src/ahriman/application/application/application_packages.py

@@ -0,0 +1,182 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import requests
+import shutil
+
+from collections.abc import Iterable
+from pathlib import Path
+from typing import Any
+
+from ahriman.application.application.application_properties import ApplicationProperties
+from ahriman.core.build_tools.sources import Sources
+from ahriman.core.exceptions import UnknownPackageError
+from ahriman.core.utils import package_like
+from ahriman.models.package import Package
+from ahriman.models.package_source import PackageSource
+from ahriman.models.result import Result
+
+
+class ApplicationPackages(ApplicationProperties):
+    """
+    package control class
+    """
+
+    def _add_archive(self, source: str, *_: Any) -> None:
+        """
+        add package from archive
+
+        Args:
+            source(str): path to package archive
+
+        Raises:
+            UnknownPackageError: if specified path doesn't exist
+        """
+        local_path = Path(source)
+        if not local_path.is_file():
+            raise UnknownPackageError(source)
+
+        dst = self.repository.paths.packages / local_path.name
+        shutil.copy(local_path, dst)
+
+    def _add_aur(self, source: str, username: str | None) -> None:
+        """
+        add package from AUR
+
+        Args:
+            source(str): package base name
+            username(str | None): optional override of username for build process
+        """
+        package = Package.from_aur(source, username)
+        self.database.build_queue_insert(package)
+        self.reporter.set_unknown(package)
+
+    def _add_directory(self, source: str, *_: Any) -> None:
+        """
+        add packages from directory
+
+        Args:
+            source(str): path to local directory
+
+        Raises:
+            UnknownPackageError: if specified package is unknown or doesn't exist
+        """
+        local_dir = Path(source)
+        if not local_dir.is_dir():
+            raise UnknownPackageError(source)
+
+        for full_path in filter(package_like, local_dir.iterdir()):
+            self._add_archive(str(full_path))
+
+    def _add_local(self, source: str, username: str | None) -> None:
+        """
+        add package from local PKGBUILDs
+
+        Args:
+            source(str): path to directory with local source files
+            username(str | None): optional override of username for build process
+
+        Raises:
+            UnknownPackageError: if specified package is unknown or doesn't exist
+        """
+        if (source_dir := Path(source)).is_dir():
+            package = Package.from_build(source_dir, self.architecture, username)
+            cache_dir = self.repository.paths.cache_for(package.base)
+            shutil.copytree(source_dir, cache_dir, dirs_exist_ok=True)  # copy package to store in caches
+            Sources.init(cache_dir)  # we need to run init command in directory where we do have permissions
+        elif (source_dir := self.repository.paths.cache_for(source)).is_dir():
+            package = Package.from_build(source_dir, self.architecture, username)
+        else:
+            raise UnknownPackageError(source)
+
+        self.database.build_queue_insert(package)
+
+    def _add_remote(self, source: str, *_: Any) -> None:
+        """
+        add package from remote sources (e.g. HTTP)
+
+        Args:
+            source(str): remote URL of the package archive
+
+        Raises:
+            UnknownPackageError: if specified package is unknown or doesn't exist
+        """
+        # timeout=None to suppress pylint warns. Also suppress bandit warnings
+        try:
+            response = requests.get(source, stream=True, timeout=None)  # nosec
+            response.raise_for_status()
+        except Exception:
+            raise UnknownPackageError(source)
+
+        dst = self.repository.paths.packages / Path(source).name  # URL is path, is not it?
+        with dst.open("wb") as local_file:
+            for chunk in response.iter_content(chunk_size=1024):
+                local_file.write(chunk)
+
+    def _add_repository(self, source: str, username: str | None) -> None:
+        """
+        add package from official repository
+
+        Args:
+            source(str): package base name
+            username(str | None): optional override of username for build process
+        """
+        package = Package.from_official(source, self.repository.pacman, username)
+        self.database.build_queue_insert(package)
+        self.reporter.set_unknown(package)
+
+    def add(self, packages: Iterable[str], source: PackageSource, username: str | None = None) -> None:
+        """
+        add packages for the next build
+
+        Args:
+            packages(Iterable[str]): list of package bases to add
+            source(PackageSource): package source to add
+            username(str | None, optional): optional override of username for build process (Default value = None)
+        """
+        for package in packages:
+            resolved_source = source.resolve(package, self.repository.paths)
+            fn = getattr(self, f"_add_{resolved_source.value}")
+            fn(package, username)
+
+    def on_result(self, result: Result) -> None:
+        """
+        generate report and sync to remote server
+
+        Args:
+            result(Result): build result
+
+        Raises:
+            NotImplementedError: not implemented method
+        """
+        raise NotImplementedError
+
+    def remove(self, packages: Iterable[str]) -> Result:
+        """
+        remove packages from repository
+
+        Args:
+            packages(Iterable[str]): list of packages (either base or name) to remove
+
+        Returns:
+            Result: removal result
+        """
+        result = self.repository.process_remove(packages)
+        self.on_result(result)
+        return result

ahriman-core/src/ahriman/application/application/application_properties.py

@@ -0,0 +1,74 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from ahriman.core.configuration import Configuration
+from ahriman.core.database import SQLite
+from ahriman.core.log import LazyLogging
+from ahriman.core.repository import Repository
+from ahriman.core.status import Client
+from ahriman.models.pacman_synchronization import PacmanSynchronization
+from ahriman.models.repository_id import RepositoryId
+
+
+class ApplicationProperties(LazyLogging):
+    """
+    application base properties class
+
+    Attributes:
+        configuration(Configuration): configuration instance
+        database(SQLite): database instance
+        repository(Repository): repository instance
+        repository_id(RepositoryId): repository unique identifier
+    """
+
+    def __init__(self, repository_id: RepositoryId, configuration: Configuration, *, report: bool,
+                 refresh_pacman_database: PacmanSynchronization = PacmanSynchronization.Disabled) -> None:
+        """
+        Args:
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+            refresh_pacman_database(PacmanSynchronization, optional): pacman database synchronization level
+                (Default value = PacmanSynchronization.Disabled)
+        """
+        self.configuration = configuration
+        self.repository_id = repository_id
+        self.database = SQLite.load(configuration)
+        self.repository = Repository.load(repository_id, configuration, self.database, report=report,
+                                          refresh_pacman_database=refresh_pacman_database)
+
+    @property
+    def architecture(self) -> str:
+        """
+        repository architecture for backward compatibility
+
+        Returns:
+            str: repository architecture
+        """
+        return self.repository_id.architecture
+
+    @property
+    def reporter(self) -> Client:
+        """
+        instance of the web/database client
+
+        Returns:
+            Client: repository reposter
+        """
+        return self.repository.reporter

ahriman-core/src/ahriman/application/application/application_repository.py

@@ -0,0 +1,213 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from collections.abc import Iterable
+
+from ahriman.application.application.application_properties import ApplicationProperties
+from ahriman.application.application.workers import Updater
+from ahriman.core.build_tools.sources import Sources
+from ahriman.core.exceptions import UnknownPackageError
+from ahriman.models.package import Package
+from ahriman.models.packagers import Packagers
+from ahriman.models.result import Result
+
+
+class ApplicationRepository(ApplicationProperties):
+    """
+    repository control class
+    """
+
+    def changes(self, packages: Iterable[Package]) -> None:
+        """
+        generate and update package changes
+
+        Args:
+            packages(Iterable[Package]): list of packages to retrieve changes
+        """
+        for package in packages:
+            last_commit_sha = self.reporter.package_changes_get(package.base).last_commit_sha
+            if last_commit_sha is None:
+                continue  # skip check in case if we can't calculate diff
+
+            if (changes := self.repository.package_changes(package, last_commit_sha)) is not None:
+                self.reporter.package_changes_update(package.base, changes)
+
+    def clean(self, *, cache: bool, chroot: bool, manual: bool, packages: bool, pacman: bool) -> None:
+        """
+        run all clean methods. Warning: some functions might not be available for non-root user
+
+        Args:
+            cache(bool): clear directory with package caches
+            chroot(bool): clear build chroot
+            manual(bool): clear directory with manually added packages' bases
+            packages(bool): clear directory with built packages
+            pacman(bool): clear directory with pacman databases
+        """
+        if cache:
+            self.repository.clear_cache()
+        if chroot:
+            self.repository.clear_chroot()
+        if manual:
+            self.repository.clear_queue()
+        if packages:
+            self.repository.clear_packages()
+        if pacman:
+            self.repository.clear_pacman()
+
+    def on_result(self, result: Result) -> None:
+        """
+        generate report and sync to remote server
+
+        Args:
+            result(Result): build result
+
+        Raises:
+            NotImplementedError: not implemented method
+        """
+        raise NotImplementedError
+
+    def sign(self, packages: Iterable[str]) -> None:
+        """
+        sign packages and repository
+
+        Args:
+            packages(Iterable[str]): only sign specified packages
+        """
+        # copy to prebuilt directory
+        for package in self.repository.packages(packages):
+            for archive in package.packages.values():
+                if archive.filepath is None:
+                    self.logger.warning("filepath is empty for %s", package.base)
+                    continue  # avoid mypy warning
+                self.repository.sign.process_sign_package(archive.filepath, None)
+        # sign repository database if set
+        self.repository.sign.process_sign_repository(self.repository.repo.repo_path)
+        # process triggers
+        self.on_result(Result())
+
+    def unknown(self) -> list[str]:
+        """
+        get packages which were not found in AUR
+
+        Returns:
+            list[str]: unknown package archive list
+        """
+        def has_local(probe: Package) -> bool:
+            cache_dir = self.repository.paths.cache_for(probe.base)
+            return cache_dir.is_dir() and not Sources.has_remotes(cache_dir)
+
+        def unknown_aur(probe: Package) -> list[str]:
+            packages: list[str] = []
+            for single in probe.packages:
+                try:
+                    _ = Package.from_aur(single, None)
+                except UnknownPackageError:
+                    packages.append(single)
+            return packages
+
+        def unknown_local(probe: Package) -> list[str]:
+            cache_dir = self.repository.paths.cache_for(probe.base)
+            local = Package.from_build(cache_dir, self.architecture, None)
+            packages = set(probe.packages.keys()).difference(local.packages.keys())
+            return list(packages)
+
+        result = []
+        for package in self.repository.packages():
+            if has_local(package):
+                result.extend(unknown_local(package))  # there is local package
+            else:
+                result.extend(unknown_aur(package))  # local package not found
+        return result
+
+    def update(self, updates: Iterable[Package], packagers: Packagers | None = None, *,
+               bump_pkgrel: bool = False) -> Result:
+        """
+        run package updates. This method will separate update in the several steps:
+
+            #. Check already built packages.
+            #. Construct builder instance.
+            #. Delegate build process to the builder instance (either remote or local).
+
+        Args:
+            updates(Iterable[Package]): list of packages to update
+            packagers(Packagers | None, optional): optional override of username for build process
+                (Default value = None)
+            bump_pkgrel(bool, optional): bump pkgrel in case of local version conflict (Default value = False)
+
+        Returns:
+            Result: update result
+        """
+        result = Result()
+
+        # process already built packages if any
+        if built_packages := self.repository.packages_built():  # speedup a bit
+            build_result = self.repository.process_update(built_packages, packagers)
+            self.on_result(build_result)
+            result.merge(build_result)
+
+            # filter packages which were prebuilt
+            succeeded = {package.base for package in build_result.success}
+            updates = [package for package in updates if package.base not in succeeded]
+
+        builder = Updater.load(self.repository_id, self.configuration, self.repository)
+
+        # ok so for now we split all packages into chunks and process each chunk accordingly
+        partitions = builder.partition(updates)
+        for num, partition in enumerate(partitions):
+            self.logger.info("processing chunk #%i %s", num, [package.base for package in partition])
+            build_result = builder.update(partition, packagers, bump_pkgrel=bump_pkgrel)
+            self.on_result(build_result)
+            result.merge(build_result)
+
+        return result
+
+    def updates(self, filter_packages: Iterable[str], *,
+                aur: bool, local: bool, manual: bool, vcs: bool, check_files: bool) -> list[Package]:
+        """
+        get list of packages to run update process
+
+        Args:
+            filter_packages(Iterable[str]): do not check every package just specified in the list
+            aur(bool): enable or disable checking for AUR updates
+            local(bool): enable or disable checking of local packages for updates
+            manual(bool): include or exclude manual updates
+            vcs(bool): enable or disable checking of VCS packages
+            check_files(bool): check for broken dependencies
+
+        Returns:
+            list[Package]: list of out-of-dated packages
+        """
+        updates = {}
+
+        # always add already built packages, because they will be always added
+        updates.update({
+            package.base: package
+            for package in self.repository.load_archives(self.repository.packages_built())
+        })
+
+        if aur:
+            updates.update({package.base: package for package in self.repository.updates_aur(filter_packages, vcs=vcs)})
+        if local:
+            updates.update({package.base: package for package in self.repository.updates_local(vcs=vcs)})
+        if manual:
+            updates.update({package.base: package for package in self.repository.updates_manual()})
+        if check_files:
+            updates.update({package.base: package for package in self.repository.updates_dependencies(filter_packages)})
+
+        return [package for _, package in sorted(updates.items())]

ahriman-core/src/ahriman/application/application/updates_iterator.py

@@ -0,0 +1,131 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import time
+
+from collections.abc import Iterator
+from typing import Self
+
+from ahriman.application.application import Application
+from ahriman.core.tree import Tree
+
+
+class UpdatesIterator(Iterator[list[str] | None]):
+    """
+    class-helper for iteration over packages to check for updates. It yields list of packages which were not yet
+    updated
+
+    Attributes:
+        application(Application): application instance
+        interval(int): predefined interval for updates. The updates will be split into chunks in the way in which all
+            packages will be updated in the specified interval
+        updated_packages(set[str]): list of packages which have been already updated
+
+    Examples:
+        Typical usage of this class is something like:
+
+            >>> application = ...
+            >>> iterator = UpdatesIterator(application, None)
+            >>>
+            >>> for updates in iterator:
+            >>>     print(updates)
+    """
+
+    def __init__(self, application: Application, interval: int) -> None:
+        """
+        Args:
+            application(Application): application instance
+            interval(int): predefined interval for updates
+        """
+        self.application = application
+        self.interval = interval
+
+        self.updated_packages: set[str] = set()
+
+    def select_packages(self) -> tuple[list[str] | None, int]:
+        """
+        select next packages partition for updates
+
+        Returns:
+            tuple[list[str] | None, int]: packages partition for updates if any and total amount of partitions.
+        """
+        packages = self.application.repository.packages()
+        if not packages:  # empty repository case
+            return None, 1
+
+        # split packages to the maximal available amount of chunks
+        partitions = Tree.partition(packages, count=len(packages))
+        frequency = len(partitions)  # must be always not-empty
+
+        for partition in partitions:
+            bases = [package.base for package in partition]
+            # check if all packages from this partition have been already updated
+            if self.updated_packages.issuperset(bases):
+                continue
+            # there are packages which were not checked yet, return them
+            return bases, frequency
+
+        # in this case there is nothing to update or repository is empty
+        self.updated_packages.clear()
+
+        # extract bases from the first partition and return them
+        bases = [package.base for package in next(iter(partitions))]
+        return bases, frequency
+
+    def __iter__(self) -> Self:
+        """
+        base iterator method
+
+        Returns:
+            Self: iterator instance
+        """
+        return self
+
+    def __next__(self) -> list[str] | None:
+        """
+        retrieve next element in the iterator. This method will delay result for the amount of time equals
+        :attr:`interval` divided by the amount of chunks
+
+        Returns:
+            list[str] | None: next packages chunk to be updated. ``None`` means no updates
+        """
+        to_update, frequency = self.select_packages()
+        if to_update is not None:
+            # update cached built packages
+            self.updated_packages.update(to_update)
+
+        # wait for update before emit
+        time.sleep(self.interval / frequency)
+
+        return to_update
+
+
+class FixedUpdatesIterator(UpdatesIterator):
+    """
+    implementation of the :class:`UpdatesIterator` which always emits empty list, which is the same as update all
+    """
+
+    def select_packages(self) -> tuple[list[str] | None, int]:
+        """
+        select next packages partition for updates
+
+        Returns:
+            tuple[list[str] | None, int]: packages partition for updates if any and total amount of partitions.
+        """
+        return [], 1

ahriman-core/src/ahriman/application/application/workers/__init__.py

@@ -0,0 +1,20 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from ahriman.application.application.workers.updater import Updater

ahriman-core/src/ahriman/application/application/workers/local_updater.py

@@ -0,0 +1,75 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from collections.abc import Iterable
+
+from ahriman.application.application.workers.updater import Updater
+from ahriman.core.repository import Repository
+from ahriman.core.tree import Tree
+from ahriman.models.package import Package
+from ahriman.models.packagers import Packagers
+from ahriman.models.result import Result
+
+
+class LocalUpdater(Updater):
+    """
+    local build process implementation
+
+    Attributes:
+        repository(Repository): repository instance
+    """
+
+    def __init__(self, repository: Repository) -> None:
+        """
+        Args:
+            repository(Repository): repository instance
+        """
+        self.repository = repository
+
+    def partition(self, packages: Iterable[Package]) -> list[list[Package]]:
+        """
+        split packages into partitions to be processed by this worker
+
+        Args:
+            packages(Iterable[Package]): list of packages to partition
+
+        Returns:
+            list[list[Package]]: packages partitioned by this worker type
+        """
+        return Tree.resolve(packages)
+
+    def update(self, updates: Iterable[Package], packagers: Packagers | None = None, *,
+               bump_pkgrel: bool = False) -> Result:
+        """
+        run package updates
+
+        Args:
+            updates(Iterable[Package]): list of packages to update
+            packagers(Packagers | None, optional): optional override of username for build process
+                (Default value = None)
+            bump_pkgrel(bool, optional): bump pkgrel in case of local version conflict (Default value = False)
+
+        Returns:
+            Result: update result
+        """
+        build_result = self.repository.process_build(updates, packagers, bump_pkgrel=bump_pkgrel)
+        packages = self.repository.packages_built()
+        update_result = self.repository.process_update(packages, packagers)
+
+        return build_result.merge(update_result)

ahriman-core/src/ahriman/application/application/workers/remote_updater.py

@@ -0,0 +1,138 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from collections import deque
+from collections.abc import Iterable
+
+from ahriman.application.application.workers.updater import Updater
+from ahriman.core.configuration import Configuration
+from ahriman.core.http import SyncAhrimanClient
+from ahriman.core.tree import Tree
+from ahriman.models.package import Package
+from ahriman.models.packagers import Packagers
+from ahriman.models.repository_id import RepositoryId
+from ahriman.models.result import Result
+from ahriman.models.worker import Worker
+
+
+class RemoteUpdater(Updater):
+    """
+    remote update worker
+
+    Attributes:
+        configuration(Configuration): configuration instance
+        repository_id(RepositoryId): repository unique identifier
+        workers(list[Worker]): worker identifiers
+    """
+
+    def __init__(self, workers: list[Worker], repository_id: RepositoryId, configuration: Configuration) -> None:
+        """
+        Args:
+            workers(list[Worker]): worker identifiers
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+        """
+        self.workers = workers
+        self.repository_id = repository_id
+        self.configuration = configuration
+
+        self._clients: deque[tuple[Worker, SyncAhrimanClient]] = deque()
+
+    @property
+    def clients(self) -> dict[Worker, SyncAhrimanClient]:
+        """
+        extract loaded clients. Note that this method yields only workers which have been already loaded
+
+        Returns:
+            dict[Worker, SyncAhrimanClient]: map of the worker to the related web client
+        """
+        return dict(self._clients)
+
+    @staticmethod
+    def _update_url(worker: Worker) -> str:
+        """
+        get url for updates
+
+        Args:
+            worker(Worker): worker identifier
+
+        Returns:
+            str: full url for web service to run update process
+        """
+        return f"{worker.address}/api/v1/service/add"
+
+    def next_worker(self) -> tuple[Worker, SyncAhrimanClient]:
+        """
+        generate next not-used web client. In case if all clients have been already used, it yields next not used client
+
+        Returns:
+            tuple[Worker, SyncAhrimanClient]: worker and constructed client instance for the web
+        """
+        # check if there is not used yet worker
+        worker = next((worker for worker in self.workers if worker not in self.clients), None)
+        if worker is not None:
+            client = SyncAhrimanClient(self.configuration, "status")
+            client.address = worker.address
+        else:
+            worker, client = self._clients.popleft()
+
+        # register worker in the queue
+        self._clients.append((worker, client))
+
+        return worker, client
+
+    def partition(self, packages: Iterable[Package]) -> list[list[Package]]:
+        """
+        split packages into partitions to be processed by this worker
+
+        Args:
+            packages(Iterable[Package]): list of packages to partition
+
+        Returns:
+            list[list[Package]]: packages partitioned by this worker type
+        """
+        return Tree.partition(packages, count=len(self.workers))
+
+    def update(self, updates: Iterable[Package], packagers: Packagers | None = None, *,
+               bump_pkgrel: bool = False) -> Result:
+        """
+        run package updates
+
+        Args:
+            updates(Iterable[Package]): list of packages to update
+            packagers(Packagers | None, optional): optional override of username for build process
+                (Default value = None)
+            bump_pkgrel(bool, optional): bump pkgrel in case of local version conflict (Default value = False)
+
+        Returns:
+            Result: update result
+        """
+        payload = {
+            "increment": False,  # force disable increment because it doesn't work yet
+            "packager": packagers.default if packagers is not None else None,
+            "packages": [package.base for package in updates],
+            "patches": [],  # might be used later
+            "refresh": True,
+        }
+
+        worker, client = self.next_worker()
+        client.make_request("POST", self._update_url(worker), params=self.repository_id.query(), json=payload)
+        # we don't block here for process
+
+        return Result()

ahriman-core/src/ahriman/application/application/workers/updater.py

@@ -0,0 +1,99 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from __future__ import annotations
+
+from collections.abc import Iterable
+
+from ahriman.core.configuration import Configuration
+from ahriman.core.log import LazyLogging
+from ahriman.core.repository import Repository
+from ahriman.models.package import Package
+from ahriman.models.packagers import Packagers
+from ahriman.models.repository_id import RepositoryId
+from ahriman.models.result import Result
+from ahriman.models.worker import Worker
+
+
+class Updater(LazyLogging):
+    """
+    updater handler interface
+    """
+
+    @staticmethod
+    def load(repository_id: RepositoryId, configuration: Configuration,
+             repository: Repository, workers: list[Worker] | None = None) -> Updater:
+        """
+        construct updaters from parameters
+
+        Args:
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            repository(Repository): repository instance
+            workers(list[Worker] | None, optional): worker identifiers if any (Default value = None)
+
+        Returns:
+            Updater: constructed updater worker
+        """
+        if workers is None:
+            # no workers set explicitly, try to guess from configuration
+            workers = [Worker(address) for address in configuration.getlist("build", "workers", fallback=[])]
+
+        if workers:
+            # there is something we could use as remote workers
+            from ahriman.application.application.workers.remote_updater import RemoteUpdater
+            return RemoteUpdater(workers, repository_id, configuration)
+
+        # and finally no workers available, just use local service
+        from ahriman.application.application.workers.local_updater import LocalUpdater
+        return LocalUpdater(repository)
+
+    def partition(self, packages: Iterable[Package]) -> list[list[Package]]:
+        """
+        split packages into partitions to be processed by this worker
+
+        Args:
+            packages(Iterable[Package]): list of packages to partition
+
+        Returns:
+            list[list[Package]]: packages partitioned by this worker type
+
+        Raises:
+            NotImplementedError: not implemented method
+        """
+        raise NotImplementedError
+
+    def update(self, updates: Iterable[Package], packagers: Packagers | None = None, *,
+               bump_pkgrel: bool = False) -> Result:
+        """
+        run package updates
+
+        Args:
+            updates(Iterable[Package]): list of packages to update
+            packagers(Packagers | None, optional): optional override of username for build process
+                (Default value = None)
+            bump_pkgrel(bool, optional): bump pkgrel in case of local version conflict (Default value = False)
+
+        Returns:
+            Result: update result
+
+        Raises:
+            NotImplementedError: not implemented method
+        """
+        raise NotImplementedError

ahriman-core/src/ahriman/application/handlers/__init__.py

@@ -0,0 +1,19 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#

ahriman-core/src/ahriman/application/handlers/add.py

@@ -0,0 +1,117 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.application.handlers.update import Update
+from ahriman.core.configuration import Configuration
+from ahriman.core.utils import enum_values, extract_user
+from ahriman.models.package_source import PackageSource
+from ahriman.models.pkgbuild_patch import PkgbuildPatch
+from ahriman.models.repository_id import RepositoryId
+
+
+class Add(Handler):
+    """
+    add packages handler
+    """
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        application = Application(repository_id, configuration, report=report, refresh_pacman_database=args.refresh)
+        application.on_start()
+        Add.perform_action(application, args)
+
+    @staticmethod
+    def _set_package_add_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for package addition subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("package-add", aliases=["add", "package-update"], help="add package",
+                                 description="add existing or new package to the build queue",
+                                 epilog="This subcommand should be used for new package addition. "
+                                        "It also supports flag --now in case if you would like to build "
+                                        "the package immediately. You can add new package from one of "
+                                        "supported sources:\n\n"
+                                        "1. If it is already built package you can specify the path to the archive.\n"
+                                        "2. You can also add built packages from the directory (e.g. during the "
+                                        "migration from another repository source).\n"
+                                        "3. It is also possible to add package from local PKGBUILD, but in this case "
+                                        "it will be ignored during the next automatic updates.\n"
+                                        "4. Ahriman supports downloading archives from remote (e.g. HTTP) sources.\n"
+                                        "5. Finally you can add package from AUR.")
+        parser.add_argument("package", help="package source (base name, path to local files, remote URL)", nargs="+")
+        parser.add_argument("--changes", help="calculate changes from the latest known commit if available",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("--dependencies", help="process missing package dependencies",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("-e", "--exit-code", help="return non-zero exit status if result is empty",
+                            action="store_true")
+        parser.add_argument("--increment", help="increment package release (pkgrel) version on duplicate",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("-n", "--now", help="run update function after", action="store_true")
+        parser.add_argument("-s", "--source", help="explicitly specify the package source for this command",
+                            type=PackageSource, choices=enum_values(PackageSource), default=PackageSource.Auto)
+        parser.add_argument("-u", "--username", help="build as user", default=extract_user())
+        parser.add_argument("-v", "--variable", help="apply specified makepkg variables to the next build",
+                            action="append")
+        parser.add_argument("-y", "--refresh", help="download fresh package databases from the mirror before actions, "
+                                                    "-yy to force refresh even if up to date",
+                            action="count", default=False)
+        parser.set_defaults(aur=False, check_files=False, dry_run=False, local=False, manual=True, vcs=False)
+        return parser
+
+    @staticmethod
+    def perform_action(application: Application, args: argparse.Namespace) -> None:
+        """
+        perform add action
+
+        Args:
+            application(Application): application instance
+            args(argparse.Namespace): command line args
+        """
+        application.add(args.package, args.source, args.username)
+        patches = [PkgbuildPatch.from_env(patch) for patch in args.variable] if args.variable is not None else []
+        for package in args.package:  # for each requested package insert patch
+            for patch in patches:
+                application.reporter.package_patches_update(package, patch)
+
+        if not args.now:
+            return
+        Update.perform_action(application, args)
+
+    arguments = [_set_package_add_parser]

ahriman-core/src/ahriman/application/handlers/archives.py

@@ -0,0 +1,81 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.formatters import PackagePrinter
+from ahriman.models.action import Action
+from ahriman.models.build_status import BuildStatus, BuildStatusEnum
+from ahriman.models.repository_id import RepositoryId
+
+
+class Archives(Handler):
+    """
+    package archives handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # conflicting io
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        application = Application(repository_id, configuration, report=True)
+
+        match args.action:
+            case Action.List:
+                archives = application.repository.package_archives(args.package)
+                for package in archives:
+                    PackagePrinter(package, BuildStatus(BuildStatusEnum.Success))(verbose=args.info)
+
+                Archives.check_status(args.exit_code, bool(archives))
+
+    @staticmethod
+    def _set_package_archives_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for package archives subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("package-archives", help="list package archive versions",
+                                 description="list available archive versions for the package")
+        parser.add_argument("package", help="package base")
+        parser.add_argument("-e", "--exit-code", help="return non-zero exit status if result is empty",
+                            action="store_true")
+        parser.add_argument("--info", help="show additional package information",
+                            action=argparse.BooleanOptionalAction, default=False)
+        parser.set_defaults(action=Action.List, lock=None, quiet=True, report=False, unsafe=True)
+        return parser
+
+    arguments = [_set_package_archives_parser]

ahriman-core/src/ahriman/application/handlers/backup.py

@@ -0,0 +1,106 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+import tarfile
+
+from pathlib import Path
+from pwd import getpwuid
+
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.database import SQLite
+from ahriman.models.repository_id import RepositoryId
+
+
+class Backup(Handler):
+    """
+    backup packages handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # system-wide action
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        backup_paths = Backup.get_paths(configuration)
+        with tarfile.open(args.path, mode="w") as archive:  # well we don't actually use compression
+            for backup_path in backup_paths:
+                archive.add(backup_path)
+
+    @staticmethod
+    def _set_repo_backup_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for repository backup subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("repo-backup", help="backup repository data",
+                                 description="backup repository settings and database")
+        parser.add_argument("path", help="path of the output archive", type=Path)
+        parser.set_defaults(architecture="", lock=None, report=False, repository="", unsafe=True)
+        return parser
+
+    @staticmethod
+    def get_paths(configuration: Configuration) -> set[Path]:
+        """
+        extract paths to back up
+
+        Args:
+            configuration(Configuration): configuration instance
+
+        Returns:
+            set[Path]: map of the filesystem paths
+        """
+        # configuration files
+        root, _ = configuration.check_loaded()
+        paths = set(configuration.includes)
+        paths.add(root)
+
+        # database
+        paths.add(SQLite.database_path(configuration))
+
+        # local caches
+        repository_paths = configuration.repository_paths
+        if repository_paths.cache.is_dir():
+            paths.add(repository_paths.cache)
+
+        # gnupg home with imported keys
+        uid, _ = repository_paths.root_owner
+        system_user = getpwuid(uid)
+        gnupg_home = Path(system_user.pw_dir) / ".gnupg"
+        if gnupg_home.is_dir():
+            paths.add(gnupg_home)
+
+        return paths
+
+    arguments = [_set_repo_backup_parser]

ahriman-core/src/ahriman/application/handlers/change.py

@@ -0,0 +1,98 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.formatters import ChangesPrinter
+from ahriman.models.action import Action
+from ahriman.models.changes import Changes
+from ahriman.models.repository_id import RepositoryId
+
+
+class Change(Handler):
+    """
+    package changes handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # conflicting io
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        client = Application(repository_id, configuration, report=True).reporter
+
+        match args.action:
+            case Action.List:
+                changes = client.package_changes_get(args.package)
+                ChangesPrinter(changes)(verbose=True, separator="")
+                Change.check_status(args.exit_code, changes.changes is not None)
+            case Action.Remove:
+                client.package_changes_update(args.package, Changes())
+
+    @staticmethod
+    def _set_package_changes_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for package changes subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("package-changes", help="get package changes",
+                                 description="retrieve package changes stored in database",
+                                 epilog="This command requests package status from the web interface "
+                                        "if it is available.")
+        parser.add_argument("package", help="package base")
+        parser.add_argument("-e", "--exit-code", help="return non-zero exit status if result is empty",
+                            action="store_true")
+        parser.set_defaults(action=Action.List, lock=None, quiet=True, report=False, unsafe=True)
+        return parser
+
+    @staticmethod
+    def _set_package_changes_remove_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for package change remove subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("package-changes-remove", help="remove package changes",
+                                 description="remove the package changes stored remotely")
+        parser.add_argument("package", help="package base")
+        parser.set_defaults(action=Action.Remove, exit_code=False, lock=None, quiet=True, report=False, unsafe=True)
+        return parser
+
+    arguments = [_set_package_changes_parser, _set_package_changes_remove_parser]

ahriman-core/src/ahriman/application/handlers/clean.py

@@ -0,0 +1,78 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.models.repository_id import RepositoryId
+
+
+class Clean(Handler):
+    """
+    clean caches handler
+    """
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        application = Application(repository_id, configuration, report=report)
+        application.on_start()
+        application.clean(cache=args.cache, chroot=args.chroot, manual=args.manual, packages=args.packages,
+                          pacman=args.pacman)
+
+    @staticmethod
+    def _set_service_clean_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for repository clean subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("service-clean", aliases=["clean", "repo-clean"], help="clean local caches",
+                                 description="remove local caches",
+                                 epilog="The subcommand clears every temporary directories (builds, caches etc). "
+                                        "Normally you should not run this command manually. Also in case if "
+                                        "you are going to clear the chroot directories you will need root privileges.")
+        parser.add_argument("--cache", help="clear directory with package caches",
+                            action=argparse.BooleanOptionalAction, default=False)
+        parser.add_argument("--chroot", help="clear build chroot", action=argparse.BooleanOptionalAction, default=False)
+        parser.add_argument("--manual", help="clear manually added packages queue",
+                            action=argparse.BooleanOptionalAction, default=False)
+        parser.add_argument("--packages", help="clear directory with built packages",
+                            action=argparse.BooleanOptionalAction, default=False)
+        parser.add_argument("--pacman", help="clear directory with pacman local database cache",
+                            action=argparse.BooleanOptionalAction, default=False)
+        parser.set_defaults(lock=None, quiet=True, unsafe=True)
+        return parser
+
+    arguments = [_set_service_clean_parser]

ahriman-core/src/ahriman/application/handlers/copy.py

@@ -0,0 +1,117 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.models.build_status import BuildStatusEnum
+from ahriman.models.package import Package
+from ahriman.models.package_source import PackageSource
+from ahriman.models.repository_id import RepositoryId
+
+
+class Copy(Handler):
+    """
+    copy packages handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # conflicting action
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        application = Application(repository_id, configuration, report=report)
+        application.on_start()
+
+        configuration_path, _ = configuration.check_loaded()
+        source_repository_id = RepositoryId(repository_id.architecture, args.source)
+        source_configuration = Configuration.from_path(configuration_path, source_repository_id)
+        source_application = Application(source_repository_id, source_configuration, report=report)
+
+        packages = source_application.repository.packages(args.package)
+        Copy.check_status(args.exit_code, packages)
+
+        for package in packages:
+            Copy.copy_package(package, application, source_application)
+
+        # run update
+        application.update([])
+
+        if args.remove:
+            source_application.remove(args.package)
+
+    @staticmethod
+    def _set_package_copy_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for package copy subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("package-copy", aliases=["copy"], help="copy package from another repository",
+                                 description="copy package and its metadata from another repository")
+        parser.add_argument("source", help="source repository name")
+        parser.add_argument("package", help="package base", nargs="+")
+        parser.add_argument("-e", "--exit-code", help="return non-zero exit status if result is empty",
+                            action="store_true")
+        parser.add_argument("--remove", help="remove package from the source repository after", action="store_true")
+        return parser
+
+    @staticmethod
+    def copy_package(package: Package, application: Application, source_application: Application) -> None:
+        """
+        copy package ``package`` from source repository to target repository
+
+        Args:
+            package(Package): package to copy
+            application(Application): application instance of the target repository
+            source_application(Application): application instance of the source repository
+        """
+        # copy files
+        source_paths = [
+            str(source_application.repository.paths.repository / source.filename)
+            for source in package.packages.values()
+            if source.filename is not None
+        ]
+        application.add(source_paths, PackageSource.Archive)
+
+        # copy metadata
+        application.reporter.package_changes_update(
+            package.base, source_application.reporter.package_changes_get(package.base)
+        )
+        application.reporter.package_dependencies_update(
+            package.base, source_application.reporter.package_dependencies_get(package.base)
+        )
+        application.reporter.package_update(package, BuildStatusEnum.Pending)
+
+    arguments = [_set_package_copy_parser]

ahriman-core/src/ahriman/application/handlers/daemon.py

@@ -0,0 +1,106 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from pathlib import Path
+
+from ahriman.application.application import Application
+from ahriman.application.application.updates_iterator import FixedUpdatesIterator, UpdatesIterator
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.application.handlers.update import Update
+from ahriman.core.configuration import Configuration
+from ahriman.core.utils import extract_user
+from ahriman.models.repository_id import RepositoryId
+
+
+class Daemon(Handler):
+    """
+    daemon packages handler
+    """
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        application = Application(repository_id, configuration, report=report, refresh_pacman_database=args.refresh)
+        if args.partitions:
+            iterator = UpdatesIterator(application, args.interval)
+        else:
+            iterator = FixedUpdatesIterator(application, args.interval)
+
+        for packages in iterator:
+            if packages is None:
+                continue  # nothing to check case
+
+            args.package = packages
+            Update.run(args, repository_id, configuration, report=report)
+
+    @staticmethod
+    def _set_repo_daemon_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for daemon subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("repo-daemon", aliases=["daemon"], help="run application as daemon",
+                                 description="start process which periodically will run update process")
+        parser.add_argument("-i", "--interval", help="interval between runs in seconds", type=int, default=60 * 60 * 12)
+        parser.add_argument("--aur", help="enable or disable checking for AUR updates",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("--changes", help="calculate changes from the latest known commit if available. "
+                                              "Only applicable in dry run mode",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("--check-files", help="enable or disable checking of broken dependencies "
+                                                  "(e.g. dynamically linked libraries or modules directories)",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("--dependencies", help="process missing package dependencies",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("--dry-run", help="just perform check for updates, same as check command",
+                            action="store_true")
+        parser.add_argument("--increment", help="increment package release (pkgrel) on duplicate",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("--local", help="enable or disable checking of local packages for updates",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("--manual", help="include or exclude manual updates",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("--partitions", help="instead of updating whole repository, split updates into chunks",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("-u", "--username", help="build as user", default=extract_user())
+        parser.add_argument("--vcs", help="fetch actual version of VCS packages",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("-y", "--refresh", help="download fresh package databases from the mirror before actions, "
+                                                    "-yy to force refresh even if up to date",
+                            action="count", default=False)
+        parser.set_defaults(exit_code=False, lock=Path("ahriman-daemon.pid"), package=[])
+        return parser
+
+    arguments = [_set_repo_daemon_parser]

ahriman-core/src/ahriman/application/handlers/dump.py

@@ -0,0 +1,85 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.formatters import ConfigurationPathsPrinter, ConfigurationPrinter, StringPrinter
+from ahriman.models.repository_id import RepositoryId
+
+
+class Dump(Handler):
+    """
+    dump configuration handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # conflicting io
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        if args.info:
+            root, _ = configuration.check_loaded()
+            ConfigurationPathsPrinter(root, configuration.includes)(verbose=True, separator=" = ")
+
+        match (args.section, args.key):
+            case None, None:  # full configuration
+                dump = configuration.dump()
+                for section, values in sorted(dump.items()):
+                    ConfigurationPrinter(section, values)(verbose=not args.secure, separator=" = ")
+            case section, None:  # section only
+                values = dict(configuration.items(section)) if configuration.has_section(section) else {}
+                ConfigurationPrinter(section, values)(verbose=not args.secure, separator=" = ")
+            case section, key:  # key only
+                value = configuration.get(section, key, fallback="")
+                StringPrinter(value)(verbose=False)
+
+    @staticmethod
+    def _set_service_config_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for config subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("service-config", aliases=["config", "repo-config"], help="dump configuration",
+                                 description="dump configuration for the specified architecture")
+        parser.add_argument("section", help="filter settings by section", nargs="?")
+        parser.add_argument("key", help="filter settings by key", nargs="?")
+        parser.add_argument("--info", help="show additional information, e.g. configuration files",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("--secure", help="hide passwords and secrets from output",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.set_defaults(lock=None, quiet=True, report=False, unsafe=True)
+        return parser
+
+    arguments = [_set_service_config_parser]

ahriman-core/src/ahriman/application/handlers/handler.py

@@ -0,0 +1,188 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+import logging
+
+from collections.abc import Callable
+from multiprocessing import Pool
+from typing import ClassVar, TypeVar
+
+from ahriman.application.lock import Lock
+from ahriman.core.configuration import Configuration
+from ahriman.core.exceptions import ExitCode, MissingArchitectureError, MultipleArchitecturesError
+from ahriman.core.log.log_loader import LogLoader
+from ahriman.core.repository import Explorer
+from ahriman.core.types import ExplicitBool
+from ahriman.models.repository_id import RepositoryId
+
+
+# this workaround is for several things
+# firstly python devs don't think that is it error and asking you for workarounds https://bugs.python.org/issue41592
+# secondly linters don't like when you are importing private members
+# thirdly new mypy doesn't like _SubParsersAction and thinks it is a template
+SubParserAction = TypeVar("SubParserAction", bound="argparse._SubParsersAction[argparse.ArgumentParser]")
+
+
+class Handler:
+    """
+    base handler class for command callbacks
+
+    Attributes:
+        ALLOW_MULTI_ARCHITECTURE_RUN(bool): (class attribute) allow running with multiple architectures
+        arguments(list[Callable[[SubParserAction], argparse.ArgumentParser]]): (class attribute) argument parser
+            methods, which will be called to create command line parsers
+
+    Examples:
+        Wrapper for all command line actions, though each derived class implements :func:`run()` method, it usually
+        must not be called directly. The recommended way is to call :func:`execute()` class method, e.g.::
+
+            >>> from ahriman.application.handlers.add import Add
+            >>>
+            >>> Add.execute(args)
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN: ClassVar[bool] = True
+    arguments: ClassVar[list[Callable[[SubParserAction], argparse.ArgumentParser]]]
+
+    @classmethod
+    def call(cls, args: argparse.Namespace, repository_id: RepositoryId) -> bool:
+        """
+        additional function to wrap all calls for multiprocessing library
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+
+        Returns:
+            bool: ``True`` on success, ``False`` otherwise
+        """
+        try:
+            configuration = Configuration.from_path(args.configuration, repository_id)
+
+            log_handler = LogLoader.handler(args.log_handler)
+            LogLoader.load(repository_id, configuration, log_handler, quiet=args.quiet, report=args.report)
+
+            with Lock(args, repository_id, configuration):
+                cls.run(args, repository_id, configuration, report=args.report)
+
+            return True
+        except ExitCode:
+            return False
+        except Exception:
+            # we are basically always want to print error to stderr instead of default logger
+            logging.getLogger("stderr").exception("process exception")
+            return False
+
+    @classmethod
+    def execute(cls, args: argparse.Namespace) -> int:
+        """
+        execute function for all aru
+
+        Args:
+            args(argparse.Namespace): command line args
+
+        Returns:
+            int: 0 on success, 1 otherwise
+
+        Raises:
+            MultipleArchitecturesError: if more than one architecture supplied and no multi architecture supported
+        """
+        repositories = cls.repositories_extract(args)
+
+        # actually we do not have to spawn another process if it is single-process application, do we?
+        if len(repositories) > 1:
+            if not cls.ALLOW_MULTI_ARCHITECTURE_RUN:
+                raise MultipleArchitecturesError(args.command, repositories)
+
+            with Pool(len(repositories)) as pool:
+                result = pool.starmap(cls.call, [(args, repository_id) for repository_id in repositories])
+        else:
+            result = [cls.call(args, repositories.pop())]
+
+        return 0 if all(result) else 1
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+
+        Raises:
+            NotImplementedError: not implemented method
+        """
+        raise NotImplementedError
+
+    @staticmethod
+    def check_status(enabled: bool, status: ExplicitBool | Callable[[], ExplicitBool]) -> None:
+        """
+        check condition and flag and raise ExitCode exception in case if it is enabled and condition match
+
+        Args:
+            enabled(bool): if ``False`` no check will be performed
+            status(ExplicitBool | Callable[[], ExplicitBool]): return status or function to check.
+                ``True`` means success and vice versa
+
+        Raises:
+            ExitCode: if result is empty and check is enabled
+        """
+        if not enabled:
+            return
+
+        status = status() if callable(status) else status
+        if not status:
+            raise ExitCode
+
+    @staticmethod
+    def repositories_extract(args: argparse.Namespace) -> list[RepositoryId]:
+        """
+        get known architectures
+
+        Args:
+            args(argparse.Namespace): command line args
+
+        Returns:
+            list[RepositoryId]: list of repository names and architectures for which tree is created
+
+        Raises:
+            MissingArchitectureError: if no architecture set and automatic detection is not allowed or failed
+        """
+        # preparse systemd repository-id argument
+        # we are using unescaped values, so / is not allowed here, because it is impossible to separate if from dashes
+        if args.repository_id is not None:
+            separator = "/" if "/" in args.repository_id else "-"  # systemd and non-systemd identifiers
+            # repository parts is optional for backward compatibility
+            architecture, *repository_parts = args.repository_id.split(separator)  # maxsplit isn't used intentionally
+            args.architecture = architecture
+            if repository_parts:
+                args.repository = "-".join(repository_parts)  # replace slash with dash
+
+        configuration = Configuration()
+        configuration.load(args.configuration)
+        repositories = Explorer.repositories_extract(configuration, args.repository, args.architecture)
+
+        if not repositories:
+            raise MissingArchitectureError(args.command)
+        return sorted(repositories)

ahriman-core/src/ahriman/application/handlers/help.py

@@ -0,0 +1,69 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.models.repository_id import RepositoryId
+
+
+class Help(Handler):
+    """
+    help handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # system-wide action
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        parser: argparse.ArgumentParser = args.parser()
+        if args.subcommand is None:
+            parser.parse_args(["--help"])
+        else:
+            parser.parse_args([args.subcommand, "--help"])
+
+    @staticmethod
+    def _set_help_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for listing help subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("help", help="show help message",
+                                 description="show help message for application or command and exit")
+        parser.add_argument("subcommand", help="show help message for specific command", nargs="?")
+        parser.set_defaults(architecture="", lock=None, quiet=True, report=False, repository="", unsafe=True)
+        return parser
+
+    arguments = [_set_help_parser]

ahriman-core/src/ahriman/application/handlers/hold.py

@@ -0,0 +1,93 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.models.action import Action
+from ahriman.models.repository_id import RepositoryId
+
+
+class Hold(Handler):
+    """
+    package hold handler
+    """
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        client = Application(repository_id, configuration, report=True).reporter
+
+        match args.action:
+            case Action.Remove:
+                for package in args.package:
+                    client.package_hold_update(package, enabled=False)
+            case Action.Update:
+                for package in args.package:
+                    client.package_hold_update(package, enabled=True)
+
+    @staticmethod
+    def _set_package_hold_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for hold package subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("package-hold", help="hold package",
+                                 description="hold package from automatic updates")
+        parser.add_argument("package", help="package base", nargs="+")
+        parser.set_defaults(action=Action.Update, lock=None, quiet=True, report=False, unsafe=True)
+        return parser
+
+    @staticmethod
+    def _set_package_unhold_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for unhold package subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("package-unhold", help="unhold package",
+                                 description="remove package hold, allowing automatic updates")
+        parser.add_argument("package", help="package base", nargs="+")
+        parser.set_defaults(action=Action.Remove, lock=None, quiet=True, report=False, unsafe=True)
+        return parser
+
+    arguments = [
+        _set_package_hold_parser,
+        _set_package_unhold_parser,
+    ]

ahriman-core/src/ahriman/application/handlers/key_import.py

@@ -0,0 +1,72 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.models.repository_id import RepositoryId
+
+
+class KeyImport(Handler):
+    """
+    key import packages handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # system-wide action
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        application = Application(repository_id, configuration, report=report)
+        application.repository.sign.key_import(args.key_server, args.key)
+
+    @staticmethod
+    def _set_service_key_import_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for key import subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("service-key-import", aliases=["key-import"], help="import PGP key",
+                                 description="import PGP key from public sources to the repository user",
+                                 epilog="By default ahriman runs build process with package sources validation "
+                                        "(in case if signature and keys are available in PKGBUILD). This process will "
+                                        "fail in case if key is not known for build user. This subcommand can be used "
+                                        "in order to import the PGP key to user keychain.")
+        parser.add_argument("--key-server", help="key server for key import", default="keyserver.ubuntu.com")
+        parser.add_argument("key", help="PGP key to import from public server")
+        parser.set_defaults(architecture="", lock=None, report=False, repository="")
+        return parser
+
+    arguments = [_set_service_key_import_parser]

ahriman-core/src/ahriman/application/handlers/patch.py

@@ -0,0 +1,257 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+import sys
+
+from pathlib import Path
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.build_tools.sources import Sources
+from ahriman.core.configuration import Configuration
+from ahriman.core.formatters import PatchPrinter
+from ahriman.models.action import Action
+from ahriman.models.package import Package
+from ahriman.models.pkgbuild_patch import PkgbuildPatch
+from ahriman.models.repository_id import RepositoryId
+
+
+class Patch(Handler):
+    """
+    patch control handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # system-wide action
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        application = Application(repository_id, configuration, report=report)
+        application.on_start()
+
+        match args.action:
+            case Action.Update if args.variable is not None:
+                patch = Patch.patch_create_from_function(args.variable, args.patch)
+                Patch.patch_set_create(application, args.package, patch)
+            case Action.Update:
+                package_base, patch = Patch.patch_create_from_diff(args.package, repository_id.architecture, args.track)
+                Patch.patch_set_create(application, package_base, patch)
+            case Action.List:
+                Patch.patch_set_list(application, args.package, args.variable, args.exit_code)
+            case Action.Remove:
+                Patch.patch_set_remove(application, args.package, args.variable)
+
+    @staticmethod
+    def _set_patch_add_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for new single-function patch subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("patch-add", help="add patch for PKGBUILD function",
+                                 description="create or update patched PKGBUILD function or variable",
+                                 epilog="Unlike ``patch-set-add``, this function allows to patch only one PKGBUILD "
+                                        "function, e.g. typing ``ahriman patch-add ahriman pkgver`` it will change the "
+                                        "``pkgver`` inside PKGBUILD, typing ``ahriman patch-add ahriman build()`` "
+                                        "it will change ``build()`` function inside PKGBUILD.")
+        parser.add_argument("package", help="package base")
+        parser.add_argument("variable", help="PKGBUILD variable or function name. If variable is a function, "
+                                             "it must end with ()")
+        parser.add_argument("patch", help="path to file which contains function or variable value. If not set, "
+                                          "the value will be read from stdin", type=Path, nargs="?")
+        parser.set_defaults(action=Action.Update, architecture="", exit_code=False, lock=None, report=False,
+                            repository="")
+        return parser
+
+    @staticmethod
+    def _set_patch_list_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for list patches subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("patch-list", help="list patch sets",
+                                 description="list available patches for the package")
+        parser.add_argument("package", help="package base")
+        parser.add_argument("-e", "--exit-code", help="return non-zero exit status if result is empty",
+                            action="store_true")
+        parser.add_argument("-v", "--variable", help="if set, show only patches for specified PKGBUILD variables",
+                            action="append")
+        parser.set_defaults(action=Action.List, architecture="", lock=None, report=False, repository="", unsafe=True)
+        return parser
+
+    @staticmethod
+    def _set_patch_remove_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for remove patches subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("patch-remove", help="remove patch set", description="remove patches for the package")
+        parser.add_argument("package", help="package base")
+        parser.add_argument("-v", "--variable",
+                            help="should be used for single-function patches in case if you wold like "
+                                 "to remove only specified PKGBUILD variables. In case if not set, "
+                                 "it will remove all patches related to the package",
+                            action="append")
+        parser.set_defaults(action=Action.Remove, architecture="", exit_code=False, lock=None, report=False,
+                            repository="")
+        return parser
+
+    @staticmethod
+    def _set_patch_set_add_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for new full-diff patch subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("patch-set-add", help="add patch set", description="create or update source patches",
+                                 epilog="In order to add a patch set for the package you will need to:\n\n"
+                                        "1. Clone the AUR package manually.\n"
+                                        "2. Add required changes (e.g. external patches, edit PKGBUILD).\n"
+                                        "3. Run command, e.g. ``ahriman patch-set-add path/to/directory``.\n\n"
+                                        "By default it tracks ``*.patch`` and ``*.diff`` files, but this behavior "
+                                        "can be changed by using ``--track`` option.")
+        parser.add_argument("package", help="path to directory with changed files for patch addition/update", type=Path)
+        parser.add_argument("-t", "--track", help="files which has to be tracked", action="append",
+                            default=["*.diff", "*.patch"])
+        parser.set_defaults(action=Action.Update, architecture="", exit_code=False, lock=None, report=False,
+                            repository="", variable=None)
+        return parser
+
+    @staticmethod
+    def patch_create_from_diff(sources_dir: Path, architecture: str, track: list[str]) -> tuple[str, PkgbuildPatch]:
+        """
+        create PKGBUILD plain diff patches from sources directory
+
+        Args:
+            sources_dir(Path): path to directory with the package sources
+            architecture(str): repository architecture
+            track(list[str]): track files which match the glob before creating the patch
+
+        Returns:
+            tuple[str, PkgbuildPatch]: package base and created PKGBUILD patch based on the diff from master HEAD
+            to current files
+        """
+        package = Package.from_build(sources_dir, architecture, None)
+        patch = Sources.patch_create(sources_dir, *track)
+        return package.base, PkgbuildPatch(None, patch)
+
+    @staticmethod
+    def patch_create_from_function(variable: str, patch_path: Path | None) -> PkgbuildPatch:
+        """
+        create single-function patch set for the package base
+
+        Args:
+            variable(str): function or variable name inside PKGBUILD
+            patch_path(Path | None): optional path to patch content. If not set, it will be read from stdin
+
+        Returns:
+            PkgbuildPatch: created patch for the PKGBUILD function
+        """
+        if patch_path is None:
+            # pylint: disable=bad-builtin
+            print("Post new function or variable value below. Press Ctrl-D to finish:", file=sys.stderr)
+            patch = "".join(list(sys.stdin))
+        else:
+            patch = patch_path.read_text(encoding="utf8")
+        # remove spaces around the patch and parse to correct type
+        return PkgbuildPatch.parse(variable, patch.strip())
+
+    @staticmethod
+    def patch_set_create(application: Application, package_base: str, patch: PkgbuildPatch) -> None:
+        """
+        create patch set for the package base
+
+        Args:
+            application(Application): application instance
+            package_base(str): package base
+            patch(PkgbuildPatch): patch descriptor
+        """
+        application.reporter.package_patches_update(package_base, patch)
+
+    @staticmethod
+    def patch_set_list(application: Application, package_base: str, variables: list[str] | None,
+                       exit_code: bool) -> None:
+        """
+        list patches available for the package base
+
+        Args:
+            application(Application): application instance
+            package_base(str): package base
+            variables(list[str] | None): extract patches only for specified PKGBUILD variables
+            exit_code(bool): exit with error on empty search result
+        """
+        patches = [
+            patch
+            for patch in application.reporter.package_patches_get(package_base, None)
+            if variables is None or patch.key in variables
+        ]
+        Patch.check_status(exit_code, patches)
+
+        PatchPrinter(package_base, patches)(verbose=True, separator=" = ")
+
+    @staticmethod
+    def patch_set_remove(application: Application, package_base: str, variables: list[str] | None) -> None:
+        """
+        remove patch set for the package base
+
+        Args:
+            application(Application): application instance
+            package_base(str): package base
+            variables(list[str] | None): remove patches only for specified PKGBUILD variables
+        """
+        if variables is not None:
+            for variable in variables:  # iterate over single variable
+                application.reporter.package_patches_remove(package_base, variable)
+        else:
+            application.reporter.package_patches_remove(package_base, None)  # just pass as is
+
+    arguments = [
+        _set_patch_add_parser,
+        _set_patch_list_parser,
+        _set_patch_remove_parser,
+        _set_patch_set_add_parser,
+    ]

ahriman-core/src/ahriman/application/handlers/pkgbuild.py

@@ -0,0 +1,100 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from dataclasses import replace
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.formatters import PkgbuildPrinter
+from ahriman.models.action import Action
+from ahriman.models.repository_id import RepositoryId
+
+
+class Pkgbuild(Handler):
+    """
+    package pkgbuild handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # conflicting io
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        client = Application(repository_id, configuration, report=True).reporter
+
+        match args.action:
+            case Action.List:
+                changes = client.package_changes_get(args.package)
+                PkgbuildPrinter(changes)(verbose=True, separator="")
+                Pkgbuild.check_status(args.exit_code, changes.pkgbuild is not None)
+            case Action.Remove:
+                changes = client.package_changes_get(args.package)
+                client.package_changes_update(args.package, replace(changes, pkgbuild=None))
+
+    @staticmethod
+    def _set_package_pkgbuild_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for package pkgbuild subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("package-pkgbuild", help="get package pkgbuild",
+                                 description="retrieve package PKGBUILD stored in database",
+                                 epilog="This command requests package status from the web interface "
+                                        "if it is available.")
+        parser.add_argument("package", help="package base")
+        parser.add_argument("-e", "--exit-code", help="return non-zero exit status if result is empty",
+                            action="store_true")
+        parser.set_defaults(action=Action.List, lock=None, quiet=True, report=False, unsafe=True)
+        return parser
+
+    @staticmethod
+    def _set_package_pkgbuild_remove_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for package pkgbuild remove subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("package-pkgbuild-remove", help="remove package pkgbuild",
+                                 description="remove the package PKGBUILD stored remotely")
+        parser.add_argument("package", help="package base")
+        parser.set_defaults(action=Action.Remove, exit_code=False, lock=None, quiet=True, report=False, unsafe=True)
+        return parser
+
+    arguments = [_set_package_pkgbuild_parser, _set_package_pkgbuild_remove_parser]

ahriman-core/src/ahriman/application/handlers/rebuild.py

@@ -0,0 +1,118 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.utils import enum_values, extract_user
+from ahriman.models.build_status import BuildStatusEnum
+from ahriman.models.package import Package
+from ahriman.models.packagers import Packagers
+from ahriman.models.repository_id import RepositoryId
+
+
+class Rebuild(Handler):
+    """
+    make world handler
+    """
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        application = Application(repository_id, configuration, report=report)
+        application.on_start()
+
+        packages = Rebuild.extract_packages(application, args.status, from_database=args.from_database)
+        packages = application.repository.packages_depend_on(packages, args.depends_on)
+
+        Rebuild.check_status(args.exit_code, packages)
+        if args.dry_run:
+            application.print_updates(packages, log_fn=print)
+            return
+
+        result = application.update(packages, Packagers(args.username), bump_pkgrel=args.increment)
+        Rebuild.check_status(args.exit_code, not result.is_empty)
+
+    @staticmethod
+    def _set_repo_rebuild_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for repository rebuild subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("repo-rebuild", aliases=["rebuild"], help="rebuild repository",
+                                 description="force rebuild whole repository")
+        parser.add_argument("--depends-on", help="only rebuild packages that depend on specified packages",
+                            action="append")
+        parser.add_argument("--dry-run", help="just perform check for packages without rebuild process itself",
+                            action="store_true")
+        parser.add_argument("--from-database",
+                            help="read packages from database instead of filesystem. This feature in particular is "
+                                 "required in case if you would like to restore repository from another repository "
+                                 "instance. Note, however, that in order to restore packages you need to have original "
+                                 "ahriman instance run with web service and have run repo-update at least once.",
+                            action="store_true")
+        parser.add_argument("--increment", help="increment package release (pkgrel) on duplicate",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("-e", "--exit-code", help="return non-zero exit status if result is empty",
+                            action="store_true")
+        parser.add_argument("-s", "--status", help="filter packages by status. Requires --from-database to be set",
+                            type=BuildStatusEnum, choices=enum_values(BuildStatusEnum))
+        parser.add_argument("-u", "--username", help="build as user", default=extract_user())
+        return parser
+
+    @staticmethod
+    def extract_packages(application: Application, status: BuildStatusEnum | None, *,
+                         from_database: bool) -> list[Package]:
+        """
+        extract packages from database file
+
+        Args:
+            application(Application): application instance
+            status(BuildStatusEnum | None): optional filter by package status
+            from_database(bool): extract packages from database instead of repository filesystem
+
+        Returns:
+            list[Package]: list of packages which were stored in database
+        """
+        if from_database:
+            return [
+                package
+                for (package, last_status) in application.reporter.package_get(None)
+                if status is None or last_status.status == status
+            ]
+
+        return application.repository.packages()
+
+    arguments = [_set_repo_rebuild_parser]

ahriman-core/src/ahriman/application/handlers/reload.py

@@ -0,0 +1,69 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.models.repository_id import RepositoryId
+
+
+class Reload(Handler):
+    """
+    web server reload handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # system-wide action
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        client = Application(repository_id, configuration, report=True).reporter
+        client.configuration_reload()
+
+    @staticmethod
+    def _set_web_reload_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for web reload subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("web-reload", help="reload configuration",
+                                 description="reload web server configuration",
+                                 epilog="This method forces the web server to reload its configuration. "
+                                        "Note, however, that this method does not apply all configuration changes "
+                                        "(like ports, authentication, etc)")
+        parser.set_defaults(architecture="", lock=None, quiet=True, report=False, repository="", unsafe=True)
+        return parser
+
+    arguments = [_set_web_reload_parser]

ahriman-core/src/ahriman/application/handlers/remove.py

@@ -0,0 +1,65 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.models.repository_id import RepositoryId
+
+
+class Remove(Handler):
+    """
+    remove packages handler
+    """
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        application = Application(repository_id, configuration, report=report)
+        application.on_start()
+        application.remove(args.package)
+
+    @staticmethod
+    def _set_package_remove_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for package removal subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("package-remove", aliases=["remove"], help="remove package",
+                                 description="remove package from the repository")
+        parser.add_argument("package", help="package name or base", nargs="+")
+        return parser
+
+    arguments = [_set_package_remove_parser]

ahriman-core/src/ahriman/application/handlers/remove_unknown.py

@@ -0,0 +1,73 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.formatters import StringPrinter
+from ahriman.models.repository_id import RepositoryId
+
+
+class RemoveUnknown(Handler):
+    """
+    remove unknown packages handler
+    """
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        application = Application(repository_id, configuration, report=report)
+        application.on_start()
+        unknown_packages = application.unknown()
+
+        if args.dry_run:
+            for package in sorted(unknown_packages):
+                StringPrinter(package)(verbose=False)
+            return
+
+        application.remove(unknown_packages)
+
+    @staticmethod
+    def _set_repo_remove_unknown_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for remove unknown packages subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("repo-remove-unknown", aliases=["remove-unknown"], help="remove unknown packages",
+                                 description="remove packages which are missing in AUR and do not have local PKGBUILDs")
+        parser.add_argument("--dry-run", help="just perform check for packages without removal", action="store_true")
+        return parser
+
+    arguments = [_set_repo_remove_unknown_parser]

ahriman-core/src/ahriman/application/handlers/repositories.py

@@ -0,0 +1,74 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.formatters import RepositoryPrinter
+from ahriman.models.repository_id import RepositoryId
+
+
+class Repositories(Handler):
+    """
+    repositories listing handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # system-wide action
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        dummy_args = argparse.Namespace(
+            architecture=None,
+            configuration=args.configuration,
+            repository=None,
+            repository_id=None,
+        )
+        for repository in cls.repositories_extract(dummy_args):
+            RepositoryPrinter(repository)(verbose=not args.id_only)
+
+    @staticmethod
+    def _set_service_repositories(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for repositories listing
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("service-repositories", help="show repositories",
+                                 description="list all available repositories")
+        parser.add_argument("--id-only", help="show machine readable identifier instead",
+                            action=argparse.BooleanOptionalAction, default=False)
+        parser.set_defaults(architecture="", lock=None, report=False, repository="", unsafe=True)
+        return parser
+
+    arguments = [_set_service_repositories]

ahriman-core/src/ahriman/application/handlers/restore.py

@@ -0,0 +1,70 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+import tarfile
+
+from pathlib import Path
+
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.models.repository_id import RepositoryId
+
+
+class Restore(Handler):
+    """
+    restore packages handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # system-wide action
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        with tarfile.open(args.path) as archive:
+            archive.extractall(path=args.output, filter="data")
+
+    @staticmethod
+    def _set_repo_restore_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for repository restore subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("repo-restore", help="restore repository data",
+                                 description="restore settings and database")
+        parser.add_argument("path", help="path of the input archive", type=Path)
+        parser.add_argument("-o", "--output", help="root path of the extracted files", type=Path, default=Path("/"))
+        parser.set_defaults(architecture="", lock=None, report=False, repository="", unsafe=True)
+        return parser
+
+    arguments = [_set_repo_restore_parser]

ahriman-core/src/ahriman/application/handlers/rollback.py

@@ -0,0 +1,131 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from dataclasses import replace
+from pathlib import Path
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.add import Add
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.exceptions import UnknownPackageError
+from ahriman.core.utils import extract_user
+from ahriman.models.package import Package
+from ahriman.models.package_source import PackageSource
+from ahriman.models.repository_id import RepositoryId
+
+
+class Rollback(Handler):
+    """
+    package rollback handler
+    """
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        application = Application(repository_id, configuration, report=report)
+        application.on_start()
+
+        package = Rollback.package_load(application, args.package, args.version)
+        artifacts = Rollback.package_artifacts(application, package)
+
+        args.package = [str(artifact) for artifact in artifacts]
+        Add.perform_action(application, args)
+
+        if args.hold:
+            application.reporter.package_hold_update(package.base, enabled=True)
+
+    @staticmethod
+    def _set_package_rollback_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for package rollback subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("package-rollback", help="rollback package",
+                                 description="rollback package to specified version from archives")
+        parser.add_argument("package", help="package base")
+        parser.add_argument("version", help="package version")
+        parser.add_argument("--hold", help="hold package afterwards",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("-u", "--username", help="build as user", default=extract_user())
+        parser.set_defaults(aur=False, changes=False, check_files=False, dependencies=False, dry_run=False,
+                            exit_code=True, increment=False, now=True, local=False, manual=False, refresh=False,
+                            source=PackageSource.Archive, variable=None, vcs=False)
+        return parser
+
+    @staticmethod
+    def package_artifacts(application: Application, package: Package) -> list[Path]:
+        """
+        look for requested package artifacts and return paths to them
+
+        Args:
+            application(Application): application instance
+            package(Package): package descriptor
+
+        Returns:
+            list[Path]: paths to found artifacts
+
+        Raises:
+            UnknownPackageError: if artifacts do not exist
+        """
+        # lookup for built artifacts
+        artifacts = application.repository.package_archives_lookup(package)
+        if not artifacts:
+            raise UnknownPackageError(package.base)
+        return artifacts
+
+    @staticmethod
+    def package_load(application: Application, package_base: str, version: str) -> Package:
+        """
+        load package from repository, while setting requested version
+
+        Args:
+            application(Application): application instance
+            package_base(str): package base
+            version(str): package version
+
+        Returns:
+            Package: loaded package
+
+        Raises:
+            UnknownPackageError: if package does not exist
+        """
+        try:
+            package, _ = next(iter(application.reporter.package_get(package_base)))
+            return replace(package, version=version)
+        except StopIteration:
+            raise UnknownPackageError(package_base) from None
+
+    arguments = [_set_package_rollback_parser]

ahriman-core/src/ahriman/application/handlers/run.py

@@ -0,0 +1,87 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+import shlex
+
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.models.repository_id import RepositoryId
+
+
+class Run(Handler):
+    """
+    multicommand handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # system-wide action
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        parser = args.parser()
+        for command in args.command:
+            status = Run.run_command(shlex.split(command), parser)
+            Run.check_status(True, status)
+
+    @staticmethod
+    def _set_service_run(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for multicommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("service-run", aliases=["run"], help="run multiple commands",
+                                 description="run multiple commands on success run of the previous command",
+                                 epilog="Commands must be quoted by using usual bash rules. Processes will be spawned "
+                                        "under the same user as this command.")
+        parser.add_argument("command", help="command to be run (quoted) without ``ahriman``", nargs="+")
+        parser.set_defaults(architecture="", lock=None, report=False, repository="", unsafe=True)
+        return parser
+
+    @staticmethod
+    def run_command(command: list[str], parser: argparse.ArgumentParser) -> bool:
+        """
+        run command specified by the argument
+
+        Args:
+            command(list[str]): command to run
+            parser(argparse.ArgumentParser): generated argument parser
+
+        Returns:
+            bool: status of the command
+        """
+        args = parser.parse_args(command)
+        handler: Handler = args.handler
+        return handler.execute(args) == 0
+
+    arguments = [_set_service_run]

ahriman-core/src/ahriman/application/handlers/search.py

@@ -0,0 +1,123 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from collections.abc import Callable, Iterable
+from dataclasses import fields
+from typing import ClassVar
+
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.alpm.remote import AUR, Official
+from ahriman.core.configuration import Configuration
+from ahriman.core.exceptions import OptionError
+from ahriman.core.formatters import AurPrinter
+from ahriman.core.types import Comparable
+from ahriman.models.aur_package import AURPackage
+from ahriman.models.repository_id import RepositoryId
+
+
+class Search(Handler):
+    """
+    packages search handler
+
+    Attributes:
+        SORT_FIELDS(set[str]): (class attribute) allowed fields to sort the package list
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # system-wide action
+    SORT_FIELDS: ClassVar[set[str]] = {
+        field.name
+        for field in fields(AURPackage)
+        if field.default_factory is not list
+    }
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        official_packages_list = Official.multisearch(*args.search)
+        aur_packages_list = AUR.multisearch(*args.search)
+        non_empty = bool(official_packages_list or aur_packages_list)
+        Search.check_status(args.exit_code, non_empty)
+
+        for packages_list in (official_packages_list, aur_packages_list):
+            # keep sorting by packages source
+            for package in Search.sort(packages_list, args.sort_by):
+                AurPrinter(package)(verbose=args.info)
+
+    @staticmethod
+    def _set_aur_search_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for AUR search subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("aur-search", aliases=["search"], help="search for package",
+                                 description="search for package in AUR using API")
+        parser.add_argument("search",
+                            help="search terms, can be specified multiple times, the result will match all terms",
+                            nargs="+")
+        parser.add_argument("-e", "--exit-code", help="return non-zero exit status if result is empty",
+                            action="store_true")
+        parser.add_argument("--info", help="show additional package information",
+                            action=argparse.BooleanOptionalAction, default=False)
+        parser.add_argument("--sort-by",
+                            help="sort field by this field. In case if two packages have the same value of "
+                                 "the specified field, they will be always sorted by name",
+                            default="name", choices=sorted(Search.SORT_FIELDS))
+        parser.set_defaults(architecture="", lock=None, quiet=True, report=False, repository="", unsafe=True)
+        return parser
+
+    @staticmethod
+    def sort(packages: Iterable[AURPackage], sort_by: str) -> list[AURPackage]:
+        """
+        sort package list by specified field
+
+        Args:
+            packages(Iterable[AURPackage]): packages list to sort
+            sort_by(str): AUR package field name to sort by
+
+        Returns:
+            list[AURPackage]: sorted list for packages
+
+        Raises:
+            OptionError: if search fields is not in list of allowed ones
+        """
+        if sort_by not in Search.SORT_FIELDS:
+            raise OptionError(sort_by)
+        # always sort by package name at the last
+        # well technically it is not a string, but we can deal with it
+        comparator: Callable[[AURPackage], Comparable] = \
+            lambda package: (getattr(package, sort_by), package.name)
+        return sorted(packages, key=comparator)
+
+    arguments = [_set_aur_search_parser]

ahriman-core/src/ahriman/application/handlers/service_updates.py

@@ -0,0 +1,80 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman import __version__
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.formatters import UpdatePrinter
+from ahriman.models.package import Package
+from ahriman.models.repository_id import RepositoryId
+
+
+class ServiceUpdates(Handler):
+    """
+    service updates handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # system-wide action
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        remote = Package.from_aur("ahriman", None)
+        _, release = remote.version.rsplit("-", maxsplit=1)  # we don't store pkgrel locally, so we just append it
+        local_version = f"{__version__}-{release}"
+
+        # technically we would like to compare versions, but it is fine to raise an exception in case if locally
+        # installed package is newer than in AUR
+        same_version = remote.version == local_version
+        if same_version:
+            return
+
+        UpdatePrinter(remote, local_version)(verbose=True, separator=" -> ")
+        ServiceUpdates.check_status(args.exit_code, same_version)
+
+    @staticmethod
+    def _set_help_updates_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for service update check subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("help-updates", help="check for service updates",
+                                 description="request AUR for current version and compare with current service version")
+        parser.add_argument("-e", "--exit-code", help="return non-zero exit code if updates available",
+                            action="store_true")
+        parser.set_defaults(architecture="", lock=None, quiet=True, report=False, repository="", unsafe=True)
+        return parser
+
+    arguments = [_set_help_updates_parser]

ahriman-core/src/ahriman/application/handlers/setup.py

@@ -0,0 +1,287 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from pathlib import Path
+from pwd import getpwuid
+from typing import ClassVar
+from urllib.parse import quote_plus as url_encode
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.exceptions import MissingArchitectureError
+from ahriman.core.utils import enum_values
+from ahriman.models.repository_id import RepositoryId
+from ahriman.models.repository_paths import RepositoryPaths
+from ahriman.models.sign_settings import SignSettings
+from ahriman.models.user import User
+
+
+class Setup(Handler):
+    """
+    setup handler
+
+    Attributes:
+        ARCHBUILD_COMMAND_PATH(Path): (class attribute) default devtools command
+        MIRRORLIST_PATH(Path): (class attribute) path to pacman default mirrorlist (used by multilib repository)
+        SUDOERS_DIR_PATH(Path): (class attribute) path to sudoers.d includes directory
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # conflicting io
+
+    ARCHBUILD_COMMAND_PATH: ClassVar[Path] = Path("/") / "usr" / "bin" / "archbuild"
+    MIRRORLIST_PATH: ClassVar[Path] = Path("/") / "etc" / "pacman.d" / "mirrorlist"
+    SUDOERS_DIR_PATH: ClassVar[Path] = Path("/") / "etc" / "sudoers.d"
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        # special check for args to avoid auto definition for setup command
+        if args.architecture is None or args.repository is None:
+            raise MissingArchitectureError(args.command)
+
+        Setup.configuration_create_ahriman(args, repository_id, configuration)
+        configuration.reload()
+
+        application = Application(repository_id, configuration, report=report)
+
+        # basically we create configuration here as root, but it is ok, because those files are only used for reading
+        Setup.configuration_create_makepkg(args.packager, args.makeflags_jobs, application.repository.paths)
+        Setup.executable_create(application.repository.paths, repository_id)
+        repository_server = f"file://{application.repository.paths.repository}" if args.server is None else args.server
+        Setup.configuration_create_devtools(
+            repository_id, args.from_configuration, args.mirror, args.multilib, repository_server)
+        Setup.configuration_create_sudo(application.repository.paths, repository_id)
+
+        # finish initialization
+        with application.repository.paths.preserve_owner():
+            application.repository.repo.init()
+            # lazy database sync
+            application.repository.pacman.handle  # pylint: disable=pointless-statement
+
+    @staticmethod
+    def _set_service_setup_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for setup subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("service-setup", aliases=["init", "repo-init", "repo-setup", "setup"],
+                                 help="initial service configuration",
+                                 description="create initial service configuration, requires root",
+                                 epilog="Create minimal configuration for the service according to provided options.")
+        parser.add_argument("--build-as-user", help="force makepkg user to the specific one")
+        parser.add_argument("--from-configuration", help="path to default devtools pacman configuration",
+                            type=Path,
+                            default=Path("/") / "usr" / "share" / "devtools" / "pacman.conf.d" / "extra.conf")
+        parser.add_argument("--generate-salt", help="generate salt for user passwords",
+                            action=argparse.BooleanOptionalAction, default=False)
+        parser.add_argument("--makeflags-jobs",
+                            help="append MAKEFLAGS variable with parallelism set to number of cores",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("--mirror", help="use the specified explicitly mirror instead of including mirrorlist")
+        parser.add_argument("--multilib", help="add or do not multilib repository",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("--packager", help="packager name and email", required=True)
+        parser.add_argument("--server", help="server to be used for devtools. If none set, local files will be used")
+        parser.add_argument("--sign-key", help="sign key id")
+        parser.add_argument("--sign-target", help="sign options", action="append",
+                            type=SignSettings.from_option, choices=enum_values(SignSettings))
+        parser.add_argument("--web-port", help="port of the web service", type=int)
+        parser.add_argument("--web-unix-socket", help="path to unix socket used for interprocess communications",
+                            type=Path)
+        parser.set_defaults(lock=None, quiet=True, report=False, unsafe=True)
+        return parser
+
+    @staticmethod
+    def build_command(root: Path, repository_id: RepositoryId) -> Path:
+        """
+        generate build command name
+
+        Args:
+            root(Path): root directory for the build command (must be root of the repository)
+            repository_id(RepositoryId): repository unique identifier
+
+        Returns:
+            Path: valid devtools command name
+        """
+        return root / f"{repository_id.name}-{repository_id.architecture}-build"
+
+    @staticmethod
+    def configuration_create_ahriman(args: argparse.Namespace, repository_id: RepositoryId,
+                                     root: Configuration) -> None:
+        """
+        create service specific configuration
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            root(Configuration): root configuration instance
+        """
+        configuration = Configuration()
+
+        section = Configuration.section_name("build", repository_id.name, repository_id.architecture)
+        build_command = Setup.build_command(root.repository_paths.root, repository_id)
+        configuration.set_option(section, "build_command", str(build_command))
+        configuration.set_option("repository", "name", repository_id.name)  # backward compatibility for docker
+        if args.build_as_user is not None:
+            configuration.set_option(section, "makechrootpkg_flags", f"-U {args.build_as_user}")
+
+        section = Configuration.section_name("alpm", repository_id.name, repository_id.architecture)
+        if args.mirror is not None:
+            configuration.set_option(section, "mirror", args.mirror)
+        if not args.multilib:
+            repositories = filter(lambda r: r != "multilib", root.getlist("alpm", "repositories"))
+            configuration.set_option(section, "repositories", " ".join(repositories))
+
+        section = Configuration.section_name("sign", repository_id.name, repository_id.architecture)
+        if args.sign_key is not None:
+            sign_targets = args.sign_target or []
+            configuration.set_option(section, "target", " ".join([target.name.lower() for target in sign_targets]))
+            configuration.set_option(section, "key", args.sign_key)
+
+        if args.web_port is not None:
+            configuration.set_option("web", "port", str(args.web_port))
+            if (host := root.get("web", "host", fallback=None)) is not None:
+                configuration.set_option("status", "address", f"http://{host}:{args.web_port}")
+        if args.web_unix_socket is not None:
+            unix_socket = str(args.web_unix_socket)
+            configuration.set_option("web", "unix_socket", unix_socket)
+            configuration.set_option("status", "address", f"http+unix://{url_encode(unix_socket)}")
+
+        if args.generate_salt:
+            configuration.set_option("auth", "salt", User.generate_password(20))
+
+        (root.include / "00-setup-overrides.ini").unlink(missing_ok=True)  # remove old-style configuration
+        target = root.include / f"00-setup-overrides-{repository_id.id}.ini"
+        with target.open("w", encoding="utf8") as ahriman_configuration:
+            configuration.write(ahriman_configuration)
+
+    @staticmethod
+    def configuration_create_devtools(repository_id: RepositoryId, source: Path, mirror: str | None,
+                                      multilib: bool, repository_server: str) -> None:
+        """
+        create configuration for devtools based on ``source`` configuration
+
+        Notes:
+            devtools does not allow to specify the pacman configuration, thus we still have to use configuration in /usr
+
+        Args:
+            repository_id(RepositoryId): repository unique identifier
+            source(Path): path to source configuration file
+            mirror(str | None): link to package server mirror
+            multilib(bool): add or do not multilib repository to the configuration
+            repository_server(str): url of the repository
+        """
+        # allow_no_value=True is required because pacman uses boolean configuration in which just keys present
+        # (e.g. NoProgressBar) which will lead to exception. allow_multi_key=False is set just for fun
+        configuration = Configuration(allow_no_value=True, allow_multi_key=False)
+        # preserve case
+        # stupid mypy thinks that it is impossible
+        configuration.optionxform = lambda optionstr: optionstr  # type: ignore[method-assign]
+
+        # load default configuration first
+        # we cannot use Include here because it will be copied to new chroot, thus no includes there
+        configuration.read(source)
+
+        # set our architecture now
+        configuration.set_option("options", "Architecture", repository_id.architecture)
+
+        # add multilib
+        if multilib:
+            configuration.set_option("multilib", "Include", str(Setup.MIRRORLIST_PATH))
+
+        # override Include option to Server in case if mirror option set
+        if mirror is not None:
+            for section in filter(lambda s: s != "options", configuration.sections()):
+                if configuration.get(section, "Include", fallback=None) != str(Setup.MIRRORLIST_PATH):
+                    continue
+                configuration.remove_option(section, "Include")
+                configuration.set_option(section, "Server", mirror)
+
+        # add repository itself
+        configuration.set_option(repository_id.name, "SigLevel", "Never")  # we don't care
+        configuration.set_option(repository_id.name, "Server", repository_server)
+
+        target = source.parent / f"{repository_id.name}-{repository_id.architecture}.conf"
+        with target.open("w", encoding="utf8") as devtools_configuration:
+            configuration.write(devtools_configuration)
+
+    @staticmethod
+    def configuration_create_makepkg(packager: str, makeflags_jobs: bool, paths: RepositoryPaths) -> None:
+        """
+        create configuration for makepkg
+
+        Args:
+            packager(str): packager identifier (e.g. name, email)
+            makeflags_jobs(bool): set MAKEFLAGS variable to number of cores
+            paths(RepositoryPaths): repository paths instance
+        """
+
+        content = f"PACKAGER='{packager}'\n"
+        if makeflags_jobs:
+            content += "MAKEFLAGS=\"-j$(nproc)\"\n"
+
+        uid, _ = paths.root_owner
+        home_dir = Path(getpwuid(uid).pw_dir)
+        (home_dir / ".makepkg.conf").write_text(content, encoding="utf8")
+
+    @staticmethod
+    def configuration_create_sudo(paths: RepositoryPaths, repository_id: RepositoryId) -> None:
+        """
+        create configuration to run build command with sudo without password
+
+        Args:
+            paths(RepositoryPaths): repository paths instance
+            repository_id(RepositoryId): repository unique identifier
+        """
+        command = Setup.build_command(paths.root, repository_id)
+        sudoers_file = Setup.build_command(Setup.SUDOERS_DIR_PATH, repository_id)
+        sudoers_file.write_text(f"ahriman ALL=(ALL) NOPASSWD:SETENV: {command} *\n", encoding="utf8")
+        sudoers_file.chmod(0o400)  # security!
+
+    @staticmethod
+    def executable_create(paths: RepositoryPaths, repository_id: RepositoryId) -> None:
+        """
+        create executable for the service
+
+        Args:
+            paths(RepositoryPaths): repository paths instance
+            repository_id(RepositoryId): repository unique identifier
+        """
+        command = Setup.build_command(paths.root, repository_id)
+        command.unlink(missing_ok=True)
+        command.symlink_to(Setup.ARCHBUILD_COMMAND_PATH)
+
+    arguments = [_set_service_setup_parser]

ahriman-core/src/ahriman/application/handlers/shell.py

@@ -0,0 +1,88 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+import sys
+
+from pathlib import Path
+
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.application.interactive_shell import InteractiveShell
+from ahriman.core.configuration import Configuration
+from ahriman.core.formatters import StringPrinter
+from ahriman.models.repository_id import RepositoryId
+
+
+class Shell(Handler):
+    """
+    python shell handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # conflicting io
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        if args.verbose:
+            # licensed by https://creativecommons.org/licenses/by-sa/3.0
+            path = Path(sys.prefix) / "share" / "ahriman" / "templates" / "shell"
+            StringPrinter(path.read_text(encoding="utf8"))(verbose=False)
+
+        local_variables = {
+            "architecture": repository_id.architecture,
+            "configuration": configuration,
+            "repository_id": repository_id,
+        }
+        console = InteractiveShell(locals=local_variables)
+
+        match args.code:
+            case None:
+                console.interact()
+            case snippet:
+                console.runcode(snippet)
+
+    @staticmethod
+    def _set_service_shell_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for shell subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("service-shell", aliases=["shell"], help="invoke python shell",
+                                 description="drop into python shell")
+        parser.add_argument("code", help="instead of dropping into shell, just execute the specified code", nargs="?")
+        parser.add_argument("-v", "--verbose", help=argparse.SUPPRESS, action="store_true")
+        parser.add_argument("-o", "--output", help="output commands and result to the file", type=Path)
+        parser.set_defaults(lock=None, report=False)
+        return parser
+
+    arguments = [_set_service_shell_parser]

ahriman-core/src/ahriman/application/handlers/sign.py

@@ -0,0 +1,64 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.models.repository_id import RepositoryId
+
+
+class Sign(Handler):
+    """
+    (re-)sign handler
+    """
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        Application(repository_id, configuration, report=report).sign(args.package)
+
+    @staticmethod
+    def _set_repo_sign_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for sign subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("repo-sign", aliases=["sign"], help="sign packages",
+                                 description="(re-)sign packages and repository database according to current settings",
+                                 epilog="Sign repository and/or packages as configured.")
+        parser.add_argument("package", help="sign only specified packages", nargs="*")
+        return parser
+
+    arguments = [_set_repo_sign_parser]

ahriman-core/src/ahriman/application/handlers/statistics.py

@@ -0,0 +1,197 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+import datetime
+import itertools
+
+from collections.abc import Callable
+from pathlib import Path
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.formatters import EventStatsPrinter, PackageStatsPrinter, RepositoryStatsPrinter
+from ahriman.core.utils import enum_values, pretty_datetime
+from ahriman.models.event import Event, EventType
+from ahriman.models.repository_id import RepositoryId
+
+
+class Statistics(Handler):
+    """
+    repository statistics handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # conflicting io
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        application = Application(repository_id, configuration, report=True)
+
+        from_date = to_date = None
+        if (value := args.from_date) is not None:
+            from_date = datetime.datetime.fromisoformat(value).timestamp()
+        if (value := args.to_date) is not None:
+            to_date = datetime.datetime.fromisoformat(value).timestamp()
+
+        events = application.reporter.event_get(args.event, args.package, from_date, to_date, args.limit, args.offset)
+
+        match args.package:
+            case None:
+                RepositoryStatsPrinter(repository_id, application.reporter.statistics())(verbose=True)
+                Statistics.stats_per_package(args.event, events, args.chart)
+            case _:
+                Statistics.stats_for_package(args.event, events, args.chart)
+
+    @staticmethod
+    def _set_repo_statistics_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for repository statistics subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("repo-statistics", help="repository statistics",
+                                 description="fetch repository statistics")
+        parser.add_argument("package", help="fetch only events for the specified package", nargs="?")
+        parser.add_argument("--chart", help="create updates chart and save it to the specified path", type=Path)
+        parser.add_argument("-e", "--event", help="event type filter",
+                            type=EventType, choices=enum_values(EventType), default=EventType.PackageUpdated)
+        parser.add_argument("--from-date", help="only fetch events which are newer than the date")
+        parser.add_argument("--limit", help="limit response by specified amount of events", type=int, default=-1)
+        parser.add_argument("--offset", help="skip specified amount of events", type=int, default=0)
+        parser.add_argument("--to-date", help="only fetch events which are older than the date")
+        parser.set_defaults(lock=None, quiet=True, report=False, unsafe=True)
+        return parser
+
+    @staticmethod
+    def event_stats(event_type: str, events: list[Event]) -> None:
+        """
+        calculate event stats
+
+        Args:
+            event_type(str): event type
+            events(list[Event]): list of events
+        """
+        times = [event.get("took") for event in events if event.get("took") is not None]
+        EventStatsPrinter(f"{event_type} duration, s", times)(verbose=True)
+
+    @staticmethod
+    def plot_packages(event_type: str, events: dict[str, int], path: Path) -> None:
+        """
+        plot packages frequency
+
+        Args:
+            event_type(str): event type
+            events(dict[str, int]): list of events
+            path(Path): path to save plot
+        """
+        from matplotlib import pyplot as plt
+
+        x, y = list(events.keys()), list(events.values())
+        plt.bar(x, y)
+
+        plt.xlabel("Package base")
+        plt.ylabel("Frequency")
+        plt.title(f"Frequency of the {event_type} event per package")
+
+        plt.savefig(path)
+
+    @staticmethod
+    def plot_times(event_type: str, events: list[Event], path: Path) -> None:
+        """
+        plot events timeline
+
+        Args:
+            event_type(str): event type
+            events(list[Event]): list of events
+            path(Path): path to save plot
+        """
+        from matplotlib import pyplot as plt
+
+        figure = plt.figure()
+
+        x, y = zip(*[(pretty_datetime(event.created), event.get("took")) for event in events])
+        plt.plot(x, y)
+
+        plt.xlabel("Event timestamp")
+        plt.ylabel("Duration, s")
+        plt.title(f"Duration of the {event_type} event")
+        figure.autofmt_xdate()
+
+        plt.savefig(path)
+
+    @staticmethod
+    def stats_for_package(event_type: str, events: list[Event], chart_path: Path | None) -> None:
+        """
+        calculate statistics for a package
+
+        Args:
+            event_type(str): event type
+            events(list[Event]): list of events
+            chart_path(Path): path to save plot if any
+        """
+        # event statistics
+        Statistics.event_stats(event_type, events)
+
+        # chart if enabled
+        if chart_path is not None:
+            Statistics.plot_times(event_type, events, chart_path)
+
+    @staticmethod
+    def stats_per_package(event_type: str, events: list[Event], chart_path: Path | None) -> None:
+        """
+        calculate overall statistics
+
+        Args:
+            event_type(str): event type
+            events(list[Event]): list of events
+            chart_path(Path): path to save plot if any
+        """
+        key: Callable[[Event], str] = lambda event: event.object_id
+        by_object_id = {
+            object_id: len(list(related))
+            for object_id, related in itertools.groupby(sorted(events, key=key), key=key)
+        }
+
+        # distribution per package
+        PackageStatsPrinter(by_object_id)(verbose=True)
+        EventStatsPrinter(f"{event_type} frequency", list(by_object_id.values()))(verbose=True)
+
+        # event statistics
+        Statistics.event_stats(event_type, events)
+
+        # chart if enabled
+        if chart_path is not None:
+            Statistics.plot_packages(event_type, by_object_id, chart_path)
+
+    arguments = [_set_repo_statistics_parser]

ahriman-core/src/ahriman/application/handlers/status.py

@@ -0,0 +1,100 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from collections.abc import Callable
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.formatters import PackagePrinter, StatusPrinter
+from ahriman.core.types import Comparable
+from ahriman.core.utils import enum_values
+from ahriman.models.build_status import BuildStatus, BuildStatusEnum
+from ahriman.models.package import Package
+from ahriman.models.repository_id import RepositoryId
+
+
+class Status(Handler):
+    """
+    package status handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # conflicting io
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        # we are using reporter here
+        client = Application(repository_id, configuration, report=True).reporter
+        if args.ahriman:
+            service_status = client.status_get()
+            StatusPrinter(service_status.status)(verbose=args.info)
+        if args.package:
+            packages: list[tuple[Package, BuildStatus]] = sum(
+                (client.package_get(base) for base in args.package),
+                start=[])
+        else:
+            packages = client.package_get(None)
+
+        Status.check_status(args.exit_code, packages)
+
+        comparator: Callable[[tuple[Package, BuildStatus]], Comparable] = lambda item: item[0].base
+        filter_fn: Callable[[tuple[Package, BuildStatus]], bool] = \
+            lambda item: args.status is None or item[1].status == args.status
+        for package, package_status in sorted(filter(filter_fn, packages), key=comparator):
+            PackagePrinter(package, package_status)(verbose=args.info)
+
+    @staticmethod
+    def _set_package_status_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for package status subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("package-status", aliases=["status"], help="get package status",
+                                 description="request status of the package",
+                                 epilog="This command requests package status from the web interface "
+                                        "if it is available.")
+        parser.add_argument("package", help="filter status by package base", nargs="*")
+        parser.add_argument("--ahriman", help="get service status itself", action="store_true")
+        parser.add_argument("-e", "--exit-code", help="return non-zero exit status if result is empty",
+                            action="store_true")
+        parser.add_argument("--info", help="show additional package information",
+                            action=argparse.BooleanOptionalAction, default=False)
+        parser.add_argument("-s", "--status", help="filter packages by status",
+                            type=BuildStatusEnum, choices=enum_values(BuildStatusEnum))
+        parser.set_defaults(lock=None, quiet=True, report=False, unsafe=True)
+        return parser
+
+    arguments = [_set_package_status_parser]

ahriman-core/src/ahriman/application/handlers/status_update.py

@@ -0,0 +1,126 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.utils import enum_values
+from ahriman.models.action import Action
+from ahriman.models.build_status import BuildStatusEnum
+from ahriman.models.repository_id import RepositoryId
+
+
+class StatusUpdate(Handler):
+    """
+    status update handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # conflicting io
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        client = Application(repository_id, configuration, report=True).reporter
+
+        match args.action:
+            case Action.Update if args.package:
+                # update packages statuses
+                for package in args.package:
+                    client.package_status_update(package, args.status)
+            case Action.Update:
+                # update service status
+                client.status_update(args.status)
+            case Action.Remove:
+                for package in args.package:
+                    client.package_remove(package)
+
+    @staticmethod
+    def _set_package_status_remove_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for package status remove subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("package-status-remove", help="remove package status",
+                                 description="remove the package from the status page",
+                                 epilog="Please note that this subcommand does not remove the package itself, it just "
+                                        "clears the status page.")
+        parser.add_argument("package", help="remove specified packages from status page", nargs="+")
+        parser.set_defaults(action=Action.Remove, lock=None, quiet=True, report=False, unsafe=True)
+        return parser
+
+    @staticmethod
+    def _set_package_status_update_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for package status update subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("package-status-update", aliases=["status-update"], help="update package status",
+                                 description="update package status on the status page")
+        parser.add_argument("package", help="set status for specified packages. "
+                                            "If no packages supplied, service status will be updated",
+                            nargs="*")
+        parser.add_argument("-s", "--status", help="new package build status",
+                            type=BuildStatusEnum, choices=enum_values(BuildStatusEnum), default=BuildStatusEnum.Success)
+        parser.set_defaults(action=Action.Update, lock=None, quiet=True, report=False, unsafe=True)
+        return parser
+
+    @staticmethod
+    def _set_repo_status_update_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for repository status update subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("repo-status-update", help="update repository status",
+                                 description="update repository status on the status page")
+        parser.add_argument("-s", "--status", help="new status",
+                            type=BuildStatusEnum, choices=enum_values(BuildStatusEnum), default=BuildStatusEnum.Success)
+        parser.set_defaults(action=Action.Update, lock=None, package=[], quiet=True, report=False, unsafe=True)
+        return parser
+
+    arguments = [
+        _set_package_status_remove_parser,
+        _set_package_status_update_parser,
+        _set_repo_status_update_parser,
+    ]

ahriman-core/src/ahriman/application/handlers/structure.py

@@ -0,0 +1,80 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.formatters import StringPrinter, TreePrinter
+from ahriman.core.tree import Tree
+from ahriman.models.repository_id import RepositoryId
+
+
+class Structure(Handler):
+    """
+    dump repository structure handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # conflicting io
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        application = Application(repository_id, configuration, report=report)
+        partitions = Tree.partition(application.repository.packages(), count=args.partitions)
+
+        for partition_id, partition in enumerate(partitions):
+            StringPrinter(f"partition #{partition_id}")(verbose=False)
+
+            tree = Tree.resolve(partition)
+            for num, level in enumerate(tree):
+                TreePrinter(num, level)(verbose=True, separator=" ")
+
+            # empty line
+            StringPrinter("")(verbose=False)
+
+    @staticmethod
+    def _set_repo_tree_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for repository tree subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("repo-tree", help="dump repository tree",
+                                 description="dump repository tree based on packages dependencies")
+        parser.add_argument("-p", "--partitions", help="also divide packages by independent partitions",
+                            type=int, default=1)
+        parser.set_defaults(lock=None, quiet=True, report=False, unsafe=True)
+        return parser
+
+    arguments = [_set_repo_tree_parser]

ahriman-core/src/ahriman/application/handlers/tree_migrate.py

@@ -0,0 +1,104 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.utils import symlink_relative, walk
+from ahriman.models.repository_id import RepositoryId
+from ahriman.models.repository_paths import RepositoryPaths
+
+
+class TreeMigrate(Handler):
+    """
+    tree migration handler
+    """
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        current_tree = configuration.repository_paths
+        target_tree = RepositoryPaths(current_tree.root, current_tree.repository_id, _force_current_tree=True)
+
+        # create repository tree
+        target_tree.tree_create()
+        # perform migration
+        TreeMigrate.tree_move(current_tree, target_tree)
+        TreeMigrate.symlinks_fix(target_tree)
+
+    @staticmethod
+    def _set_service_tree_migrate_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for tree migration subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("service-tree-migrate", help="migrate repository tree",
+                                 description="migrate repository tree between versions")
+        parser.set_defaults(lock=None, quiet=True, report=False)
+        return parser
+
+    @staticmethod
+    def symlinks_fix(paths: RepositoryPaths) -> None:
+        """
+        fix package archive symlinks
+
+        Args:
+            paths(RepositoryPaths): new repository paths
+        """
+        archives = {path.name: path for path in walk(paths.archive)}
+        for symlink in walk(paths.repository):
+            if symlink.exists():  # no need to check for symlinks as we have just walked through the tree
+                continue
+            if (source_archive := archives.get(symlink.name)) is not None:
+                symlink.unlink()
+                symlink_relative(symlink, source_archive)
+
+    @staticmethod
+    def tree_move(from_tree: RepositoryPaths, to_tree: RepositoryPaths) -> None:
+        """
+        move files between trees. Trees must be created in advance
+
+        Args:
+            from_tree(RepositoryPaths): old repository tree
+            to_tree(RepositoryPaths): new repository tree
+        """
+        # we don't care about devtools chroot
+        for attribute in (
+            RepositoryPaths.packages,
+            RepositoryPaths.pacman,
+            RepositoryPaths.repository,
+        ):
+            attribute.fget(from_tree).rename(attribute.fget(to_tree))  # type: ignore[attr-defined]
+
+    arguments = [_set_service_tree_migrate_parser]

ahriman-core/src/ahriman/application/handlers/triggers.py

@@ -0,0 +1,108 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.models.repository_id import RepositoryId
+from ahriman.models.result import Result
+
+
+class Triggers(Handler):
+    """
+    triggers handlers
+    """
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        application = Application(repository_id, configuration, report=report)
+        if args.trigger:
+            loader = application.repository.triggers
+            loader.triggers = [loader.load_trigger(trigger, repository_id, configuration) for trigger in args.trigger]
+        application.on_start()
+        application.on_result(Result())
+
+    @staticmethod
+    def _set_repo_report_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for report subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("repo-report", aliases=["report"], help="generate report",
+                                 description="generate repository report according to current settings",
+                                 epilog="Create and/or update repository report as configured.")
+        parser.set_defaults(trigger=["ahriman.core.report.ReportTrigger"])
+        return parser
+
+    @staticmethod
+    def _set_repo_sync_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for repository sync subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("repo-sync", aliases=["sync"], help="sync repository",
+                                 description="sync repository files to remote server according to current settings",
+                                 epilog="Synchronize the repository to remote services as configured.")
+        parser.set_defaults(trigger=["ahriman.core.upload.UploadTrigger"])
+        return parser
+
+    @staticmethod
+    def _set_repo_triggers_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for repository triggers subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("repo-triggers", help="run triggers",
+                                 description="run triggers on empty build result as configured by settings")
+        parser.add_argument("trigger", help="instead of running all triggers as set by configuration, just process "
+                                            "specified ones in order of mention", nargs="*")
+        return parser
+
+    arguments = [
+        _set_repo_report_parser,
+        _set_repo_sync_parser,
+        _set_repo_triggers_parser,
+    ]

ahriman-core/src/ahriman/application/handlers/unsafe_commands.py

@@ -0,0 +1,104 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.formatters import StringPrinter
+from ahriman.models.repository_id import RepositoryId
+
+
+class UnsafeCommands(Handler):
+    """
+    unsafe command help parser
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # system-wide action
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        parser = args.parser()
+        unsafe_commands = UnsafeCommands.get_unsafe_commands(parser)
+        if args.subcommand:
+            UnsafeCommands.check_unsafe(args.subcommand, unsafe_commands, parser)
+        else:
+            for command in unsafe_commands:
+                StringPrinter(command)(verbose=True)
+
+    @staticmethod
+    def _set_help_commands_unsafe_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for listing unsafe commands
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("help-commands-unsafe", help="list unsafe commands",
+                                 description="list unsafe commands as defined in default args")
+        parser.add_argument("subcommand",
+                            help="instead of showing commands, just test command line for unsafe subcommand "
+                                 "and return 0 in case if command is safe and 1 otherwise", nargs="*")
+        parser.set_defaults(architecture="", lock=None, quiet=True, report=False, repository="", unsafe=True)
+        return parser
+
+    @staticmethod
+    def check_unsafe(command: list[str], unsafe_commands: list[str], parser: argparse.ArgumentParser) -> None:
+        """
+        check if command is unsafe
+
+        Args:
+            command(str): command to check
+            unsafe_commands(list[str]): list of unsafe commands
+            parser(argparse.ArgumentParser): generated argument parser
+        """
+        args = parser.parse_args(command)
+        UnsafeCommands.check_status(True, args.command not in unsafe_commands)
+
+    @staticmethod
+    def get_unsafe_commands(parser: argparse.ArgumentParser) -> list[str]:
+        """
+        extract unsafe commands from argument parser
+
+        Args:
+            parser(argparse.ArgumentParser): generated argument parser
+
+        Returns:
+            list[str]: list of commands with default unsafe flag
+        """
+        # should never fail
+        # pylint: disable=protected-access
+        subparser = next((action for action in parser._actions if isinstance(action, argparse._SubParsersAction)), None)
+        actions = subparser.choices if subparser is not None else {}
+        return sorted(action_name for action_name, action in actions.items() if action.get_default("unsafe"))
+
+    arguments = [_set_help_commands_unsafe_parser]

ahriman-core/src/ahriman/application/handlers/update.py

@@ -0,0 +1,169 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from collections.abc import Callable
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.utils import extract_user
+from ahriman.models.packagers import Packagers
+from ahriman.models.repository_id import RepositoryId
+
+
+class Update(Handler):
+    """
+    package update handler
+    """
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        application = Application(repository_id, configuration, report=report, refresh_pacman_database=args.refresh)
+        application.on_start()
+        Update.perform_action(application, args)
+
+    @staticmethod
+    def _set_repo_check_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for repository check subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("repo-check", aliases=["check"], help="check for updates",
+                                 description="check for packages updates. Same as repo-update --dry-run --no-manual")
+        parser.add_argument("package", help="filter check by package base", nargs="*")
+        parser.add_argument("--changes", help="calculate changes from the latest known commit if available",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("--check-files", help="enable or disable checking of broken dependencies "
+                                                  "(e.g. dynamically linked libraries or modules directories)",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("-e", "--exit-code", help="return non-zero exit status if result is empty",
+                            action="store_true")
+        parser.add_argument("--vcs", help="fetch actual version of VCS packages",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("-y", "--refresh", help="download fresh package databases from the mirror before actions, "
+                                                    "-yy to force refresh even if up to date",
+                            action="count", default=False)
+        parser.set_defaults(aur=True, dependencies=False, dry_run=True, increment=False, local=True, manual=False,
+                            username=None)
+        return parser
+
+    @staticmethod
+    def _set_repo_update_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for repository update subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("repo-update", aliases=["update"], help="update packages",
+                                 description="check for packages updates and run build process if requested")
+        parser.add_argument("package", help="filter check by package base", nargs="*")
+        parser.add_argument("--aur", help="enable or disable checking for AUR updates",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("--changes", help="calculate changes from the latest known commit if available. "
+                                              "Only applicable in dry run mode",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("--check-files", help="enable or disable checking of broken dependencies "
+                                                  "(e.g. dynamically linked libraries or modules directories)",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("--dependencies", help="process missing package dependencies",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("--dry-run", help="just perform check for updates, same as check command",
+                            action="store_true")
+        parser.add_argument("-e", "--exit-code", help="return non-zero exit status if result is empty",
+                            action="store_true")
+        parser.add_argument("--increment", help="increment package release (pkgrel) on duplicate",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("--local", help="enable or disable checking of local packages for updates",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("--manual", help="include or exclude manual updates",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("-u", "--username", help="build as user", default=extract_user())
+        parser.add_argument("--vcs", help="fetch actual version of VCS packages",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("-y", "--refresh", help="download fresh package databases from the mirror before actions, "
+                                                    "-yy to force refresh even if up to date",
+                            action="count", default=False)
+        return parser
+
+    @staticmethod
+    def log_fn(application: Application, dry_run: bool) -> Callable[[str], None]:
+        """
+        package updates log function
+
+        Args:
+            application(Application): application instance
+            dry_run(bool): do not perform update itself
+
+        Returns:
+            Callable[[str], None]: in case if dry_run is set it will return print, logger otherwise
+        """
+        def inner(line: str) -> None:
+            return print(line) if dry_run else application.logger.info(line)  # pylint: disable=bad-builtin
+        return inner
+
+    @staticmethod
+    def perform_action(application: Application, args: argparse.Namespace) -> None:
+        """
+        perform update action
+
+        Args:
+            application(Application): application instance
+            args(argparse.Namespace): command line args
+        """
+        packages = application.updates(args.package, aur=args.aur, local=args.local, manual=args.manual, vcs=args.vcs,
+                                       check_files=args.check_files)
+        if args.changes:  # generate changes if requested
+            application.changes(packages)
+
+        if args.dry_run:  # exit from application if no build requested
+            Update.check_status(args.exit_code, packages)  # status code check
+            return
+
+        packages = application.with_dependencies(packages, process_dependencies=args.dependencies)
+        packagers = Packagers(args.username, {package.base: package.packager for package in packages})
+
+        application.print_updates(packages, log_fn=application.logger.info)
+        result = application.update(packages, packagers, bump_pkgrel=args.increment)
+        Update.check_status(args.exit_code, not result.is_empty)
+
+    arguments = [
+        _set_repo_check_parser,
+        _set_repo_update_parser,
+    ]

ahriman-core/src/ahriman/application/handlers/users.py

@@ -0,0 +1,169 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+import getpass
+
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.database import SQLite
+from ahriman.core.exceptions import PasswordError
+from ahriman.core.formatters import UserPrinter
+from ahriman.core.utils import enum_values
+from ahriman.models.action import Action
+from ahriman.models.repository_id import RepositoryId
+from ahriman.models.user import User
+from ahriman.models.user_access import UserAccess
+
+
+class Users(Handler):
+    """
+    user management handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # system-wide action
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        database = SQLite.load(configuration)
+
+        match args.action:
+            case Action.Update:
+                user = Users.user_create(args)
+                # if password is left blank we are not going to require salt to be set
+                salt = configuration.get("auth", "salt", fallback="") if user.password else ""
+                database.user_update(user.hash_password(salt))
+            case Action.List:
+                users = database.user_list(args.username, args.role)
+                for user in users:
+                    UserPrinter(user)(verbose=True)
+                Users.check_status(args.exit_code, users)
+            case Action.Remove:
+                database.user_remove(args.username)
+
+    @staticmethod
+    def _set_user_add_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for create user subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("user-add", help="create or update user",
+                                 description="update user for web services with the given password and role. "
+                                             "In case if password was not entered it will be asked interactively")
+        parser.add_argument("username", help="username for web service")
+        parser.add_argument("--key", help="optional PGP key used by this user. The private key must be imported")
+        parser.add_argument("--packager", help="optional packager id used for build process in form of "
+                                               "`Name Surname <mail@example.com>`")
+        parser.add_argument(
+            "-p", "--password", help="user password. Blank password will be treated as empty password, "
+            "which is in particular must be used for OAuth2 authorization type.")
+        parser.add_argument("-R", "--role", help="user access level",
+                            type=UserAccess, choices=enum_values(UserAccess), default=UserAccess.Read)
+        parser.set_defaults(action=Action.Update, architecture="", exit_code=False, lock=None, quiet=True,
+                            report=False, repository="")
+        return parser
+
+    @staticmethod
+    def _set_user_list_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for user list subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("user-list", help="user known users and their access",
+                                 description="list users from the user mapping and their roles")
+        parser.add_argument("username", help="filter users by username", nargs="?")
+        parser.add_argument("-e", "--exit-code", help="return non-zero exit status if result is empty",
+                            action="store_true")
+        parser.add_argument("-R", "--role", help="filter users by role", type=UserAccess,
+                            choices=enum_values(UserAccess))
+        parser.set_defaults(action=Action.List, architecture="", lock=None, quiet=True, report=False, repository="",
+                            unsafe=True)
+        return parser
+
+    @staticmethod
+    def _set_user_remove_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for user removal subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("user-remove", help="remove user",
+                                 description="remove user from the user mapping and update the configuration")
+        parser.add_argument("username", help="username for web service")
+        parser.set_defaults(action=Action.Remove, architecture="", exit_code=False, lock=None, quiet=True,
+                            report=False, repository="")
+        return parser
+
+    @staticmethod
+    def user_create(args: argparse.Namespace) -> User:
+        """
+        create user descriptor from arguments
+
+        Args:
+            args(argparse.Namespace): command line args
+
+        Returns:
+            User: built user descriptor
+
+        Raises:
+            PasswordError: password input is invalid
+        """
+        def read_password() -> str:
+            first_password = getpass.getpass()
+            second_password = getpass.getpass("Repeat password: ")
+            if first_password != second_password:
+                raise PasswordError("passwords don't match")
+            return first_password
+
+        password = args.password
+        if password is None:
+            password = read_password()
+
+        return User(username=args.username, password=password, access=args.role,
+                    packager_id=args.packager, key=args.key)
+
+    arguments = [
+        _set_user_add_parser,
+        _set_user_list_parser,
+        _set_user_remove_parser,
+    ]

ahriman-core/src/ahriman/application/handlers/validate.py

@@ -0,0 +1,158 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+import copy
+
+from typing import Any
+
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.configuration.schema import CONFIGURATION_SCHEMA, ConfigurationSchema
+from ahriman.core.exceptions import ExtensionError
+from ahriman.core.formatters import ValidationPrinter
+from ahriman.core.triggers import TriggerLoader
+from ahriman.models.repository_id import RepositoryId
+
+
+class Validate(Handler):
+    """
+    configuration validator handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # conflicting io
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        from ahriman.core.configuration.validator import Validator
+
+        schema = Validate.schema(configuration)
+        validator = Validator(configuration=configuration, schema=schema)
+
+        if validator.validate(configuration.dump()):
+            return  # no errors found
+        for node, errors in validator.errors.items():
+            ValidationPrinter(node, errors)(verbose=True)
+
+        # as we reach this part it means that we always have errors
+        Validate.check_status(args.exit_code, False)
+
+    @staticmethod
+    def _set_service_config_validate_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for config validation subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("service-config-validate", aliases=["config-validate", "repo-config-validate"],
+                                 help="validate system configuration",
+                                 description="validate configuration and print found errors")
+        parser.add_argument("-e", "--exit-code", help="return non-zero exit status if configuration is invalid",
+                            action="store_true")
+        parser.set_defaults(lock=None, quiet=True, report=False, unsafe=True)
+        return parser
+
+    @staticmethod
+    def schema(configuration: Configuration) -> ConfigurationSchema:
+        """
+        get schema with triggers
+
+        Args:
+            configuration(Configuration): configuration instance
+
+        Returns:
+            ConfigurationSchema: configuration validation schema
+        """
+        root = copy.deepcopy(CONFIGURATION_SCHEMA)
+
+        # create trigger loader instance
+        loader = TriggerLoader()
+        triggers = loader.selected_triggers(configuration) + loader.known_triggers(configuration)
+
+        for trigger in set(triggers):
+            try:
+                trigger_class = loader.load_trigger_class(trigger)
+            except ExtensionError:
+                continue
+
+            # default settings if any
+            for schema_name, schema in trigger_class.configuration_schema(None).items():
+                erased = Validate.schema_erase_required(copy.deepcopy(schema))
+                root[schema_name] = Validate.schema_merge(root.get(schema_name, {}), erased)
+
+            # settings according to enabled triggers
+            for schema_name, schema in trigger_class.configuration_schema(configuration).items():
+                root[schema_name] = Validate.schema_merge(root.get(schema_name, {}), copy.deepcopy(schema))
+
+        return root
+
+    @staticmethod
+    def schema_erase_required(schema: ConfigurationSchema) -> ConfigurationSchema:
+        """
+        recursively remove required field from supplied cerberus schema
+
+        Args:
+            schema(ConfigurationSchema): source schema from which required field must be removed
+
+        Returns:
+            ConfigurationSchema: schema without required fields. Note, that source schema will be modified in-place
+        """
+        schema.pop("required", None)
+        for value in filter(lambda v: isinstance(v, dict), schema.values()):
+            Validate.schema_erase_required(value)
+        return schema
+
+    @staticmethod
+    def schema_merge(source: dict[str, Any], schema: dict[str, Any]) -> dict[str, Any]:
+        """
+        merge child schema into source. In case if source already contains values, new keys will be added
+            (possibly with overrides - in case if such key already set also)
+
+        Args:
+            source(dict[str, Any]): source (current) schema into which will be merged
+            schema(dict[str, Any]): new schema to be merged
+
+        Returns:
+            dict[str, Any]: schema with added elements from source schema if they were set before and not presented
+            in the new one. Note, that schema will be modified in-place
+        """
+        for key, value in source.items():
+            if key not in schema:
+                schema[key] = value  # new key found, just add it as is
+            elif isinstance(value, dict):
+                # value is dictionary, so we need to go deeper
+                Validate.schema_merge(value, schema[key])
+
+        return schema
+
+    arguments = [_set_service_config_validate_parser]

ahriman-core/src/ahriman/application/handlers/versions.py

@@ -0,0 +1,117 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+import re
+import sys
+
+from collections.abc import Iterator
+from importlib import metadata
+from typing import ClassVar
+
+from ahriman import __version__
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.formatters import VersionPrinter
+from ahriman.models.repository_id import RepositoryId
+
+
+class Versions(Handler):
+    """
+    version handler
+
+    Attributes:
+        PEP423_PACKAGE_NAME(re.Pattern[str]): (class attribute) special regex for valid PEP423 package name
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # system-wide action
+    PEP423_PACKAGE_NAME: ClassVar[re.Pattern[str]] = re.compile(r"^[A-Za-z0-9._-]+")
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        VersionPrinter(f"Module version {__version__}",
+                       {"Python": sys.version})(verbose=False, separator=" ")
+        packages = Versions.package_dependencies("ahriman")
+        VersionPrinter("Installed packages", dict(packages))(verbose=False, separator=" ")
+
+    @staticmethod
+    def _set_help_version_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for version subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("help-version", aliases=["version"], help="application version",
+                                 description="print application and its dependencies versions")
+        parser.set_defaults(architecture="", lock=None, quiet=True, report=False, repository="", unsafe=True)
+        return parser
+
+    @staticmethod
+    def package_dependencies(root: str) -> Iterator[tuple[str, str]]:
+        """
+        extract list of ahriman package dependencies installed into system with their versions
+
+        Args:
+            root(str): root package name
+
+        Yields:
+            tuple[str, str]: map of installed dependency to its version
+        """
+        def dependencies_by_key(key: str) -> Iterator[str]:
+            # in importlib it returns requires in the following format
+            # ["pytest (>=3.0.0) ; extra == 'test'", "pytest-cov ; extra == 'test'"]
+            try:
+                requires = metadata.requires(key)
+            except metadata.PackageNotFoundError:
+                return
+            for entry in requires or []:
+                yield from Versions.PEP423_PACKAGE_NAME.findall(entry)
+
+        keys: list[str] = []
+        portion = set(dependencies_by_key(root))
+        while portion:
+            keys.extend(portion)
+            portion = {
+                key
+                for key in sum((list(dependencies_by_key(key)) for key in portion), start=[])
+                if key not in keys
+            }
+
+        for key in keys:
+            try:
+                distribution = metadata.distribution(key)
+                yield distribution.name, distribution.version
+            except metadata.PackageNotFoundError:
+                continue
+
+    arguments = [_set_help_version_parser]

ahriman-core/src/ahriman/application/help_formatter.py

@@ -0,0 +1,54 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+import re
+import textwrap
+
+
+class _HelpFormatter(argparse.ArgumentDefaultsHelpFormatter):
+    """
+    :class:`argparse.ArgumentDefaultsHelpFormatter` extension which keeps new lines in help messages
+    """
+
+    def __init__(self, prog: str) -> None:
+        """
+        Args:
+            prog(str): application name
+        """
+        argparse.ArgumentDefaultsHelpFormatter.__init__(self, prog, width=120)
+        self._whitespace_matcher = re.compile(r"[ \t]+")
+
+    def _fill_text(self, text: str, width: int, indent: str) -> str:
+        """
+        implementation of the protected method to format text. Format text, keeping new lines
+
+        Args:
+            text(str): text to format
+            width(int): maximal text width
+            indent(str): indentation string
+
+        Returns:
+            str: formatted text
+        """
+        text = self._whitespace_matcher.sub(" ", text).strip()
+        return "\n".join([
+            textwrap.fill(line, width, initial_indent=indent, subsequent_indent=indent)
+            for line in text.splitlines()
+        ])

ahriman-core/src/ahriman/application/interactive_shell.py

@@ -0,0 +1,60 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from code import InteractiveConsole
+from importlib.util import find_spec
+from typing import Any
+
+
+class InteractiveShell(InteractiveConsole):
+    """
+    wrapper around :class:`code.InteractiveConsole` to pass :func:`interact()` to IPython shell
+    """
+
+    @staticmethod
+    def has_ipython() -> bool:
+        """
+        check if IPython shell is available
+
+        Returns:
+            bool: ``True`` if IPython shell is available, ``False`` otherwise
+        """
+        try:
+            return find_spec("IPython.terminal.embed") is not None
+        except ModuleNotFoundError:
+            return False
+
+    def interact(self, *args: Any, **kwargs: Any) -> None:
+        """
+        pass controller to IPython shell
+
+        Args:
+            *args(Any): positional arguments
+            **kwargs(Any): keyword arguments
+        """
+        if self.has_ipython():
+            from IPython.terminal.embed import InteractiveShellEmbed
+
+            shell = InteractiveShellEmbed(user_ns=self.locals)  # type: ignore[no-untyped-call]
+            shell.show_banner()  # type: ignore[no-untyped-call]
+            shell.interact()  # type: ignore[no-untyped-call]
+        else:
+            # fallback to default
+            import readline  # pylint: disable=unused-import
+            InteractiveConsole.interact(self, *args, **kwargs)

ahriman-core/src/ahriman/application/lock.py

@@ -0,0 +1,231 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+import fcntl
+import os
+
+from io import TextIOWrapper
+from pathlib import Path
+from types import TracebackType
+from typing import Literal, Self
+
+from ahriman import __version__
+from ahriman.core.configuration import Configuration
+from ahriman.core.exceptions import DuplicateRunError
+from ahriman.core.log import LazyLogging
+from ahriman.core.status import Client
+from ahriman.core.utils import check_user
+from ahriman.models.build_status import BuildStatusEnum
+from ahriman.models.repository_id import RepositoryId
+from ahriman.models.waiter import Waiter
+
+
+class Lock(LazyLogging):
+    """
+    wrapper for application lock file. Credits for idea to https://github.com/bmhatfield/python-pidfile.git
+
+    Attributes:
+        force(bool): remove lock file on start if any
+        path(Path): path to lock file if any
+        reporter(Client): build status reporter instance
+        paths(RepositoryPaths): repository paths instance
+        unsafe(bool): skip user check
+        wait_timeout(int): wait in seconds until lock will free
+
+    Examples:
+        Instance of this class except for controlling file-based lock is also required for basic applications checks.
+        The common flow is to create instance in ``with`` block and handle exceptions after all::
+
+            >>> from ahriman.core.configuration import Configuration
+            >>> from ahriman.models.repository_id import RepositoryId
+            >>>
+            >>> configuration = Configuration()
+            >>> try:
+            >>>     with Lock(args, RepositoryId("x86_64", "aur"), configuration):
+            >>>         do_something()
+            >>> except Exception as exception:
+            >>>     handle_exceptions(exception)
+    """
+
+    def __init__(self, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration) -> None:
+        """
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+        """
+        self.path: Path | None = None
+        if args.lock is not None:
+            self.path = args.lock
+            if not repository_id.is_empty:
+                self.path = self.path.with_stem(f"{args.lock.stem}_{repository_id.id}")
+            if not self.path.is_absolute():
+                # prepend full path to the lock file
+                self.path = Path("/") / "run" / "ahriman" / self.path
+        self._pid_file: TextIOWrapper | None = None
+
+        self.force: bool = args.force
+        self.unsafe: bool = args.unsafe
+        self.wait_timeout: int = args.wait_timeout
+
+        self.paths = configuration.repository_paths
+        self.reporter = Client.load(repository_id, configuration, report=args.report)
+
+    @staticmethod
+    def perform_lock(fd: int) -> bool:
+        """
+        perform file lock
+
+        Args:
+            fd(int): file descriptor:
+
+        Returns:
+            bool: ``True`` in case if file is locked and ``False`` otherwise
+        """
+        try:
+            fcntl.flock(fd, fcntl.LOCK_EX | fcntl.LOCK_NB)
+        except OSError:
+            return False
+
+        return True
+
+    def _open(self) -> None:
+        """
+        create lock file
+        """
+        if self.path is None:
+            return
+        self._pid_file = self.path.open("a+", encoding="utf8")
+
+    def _watch(self) -> bool:
+        """
+        watch until lock disappear
+
+        Returns:
+            bool: ``True`` in case if file is locked and ``False`` otherwise
+        """
+        # there are reasons why we are not using inotify here. First of all, if we would use it, it would bring to
+        # race conditions because multiple processes will be notified at the same time. Secondly, it is good library,
+        # but platform-specific, and we only need to check if file exists
+        if self._pid_file is None:
+            return False
+
+        waiter = Waiter(self.wait_timeout)
+        return bool(waiter.wait(lambda fd: not self.perform_lock(fd), self._pid_file.fileno()))
+
+    def _write(self, *, is_locked: bool = False) -> None:
+        """
+        write pid to the lock file
+
+        Args:
+            is_locked(bool, optional): indicates if file was already locked or not (Default value = False)
+
+        Raises:
+            DuplicateRunError: if it cannot lock PID file
+        """
+        if self._pid_file is None:
+            return
+        if not is_locked:
+            if not self.perform_lock(self._pid_file.fileno()):
+                raise DuplicateRunError
+
+        self._pid_file.seek(0)  # reset position and remove file content if any
+        self._pid_file.truncate()
+
+        self._pid_file.write(str(os.getpid()))  # write current pid
+        self._pid_file.flush()  # flush data to disk
+
+        self._pid_file.seek(0)  # reset position again
+
+    def check_user(self) -> None:
+        """
+        check if current user is actually owner of ahriman root
+        """
+        check_user(self.paths.root, unsafe=self.unsafe)
+        self.paths.tree_create()
+
+    def check_version(self) -> None:
+        """
+        check web server version
+        """
+        status = self.reporter.status_get()
+        if status.version is not None and status.version != __version__:
+            self.logger.warning("status watcher version mismatch, our %s, their %s",
+                                __version__, status.version)
+
+    def clear(self) -> None:
+        """
+        remove lock file
+        """
+        if self._pid_file is not None:  # close file descriptor
+            try:
+                self._pid_file.close()
+            except IOError:
+                pass  # suppress any IO errors occur
+        if self.path is not None:  # remove lock file
+            self.path.unlink(missing_ok=True)
+
+    def lock(self) -> None:
+        """
+        create pid file
+        """
+        if self.force:  # remove lock if force flag is set
+            self.clear()
+        self._open()
+        is_locked = self._watch()
+        self._write(is_locked=is_locked)
+
+    def __enter__(self) -> Self:
+        """
+        default workflow is the following:
+
+            #. Check user UID
+            #. Check web status watcher status
+            #. Open lock file
+            #. Wait for lock file to be free
+            #. Write current PID to the lock file
+            #. Report to status page if enabled
+
+        Returns:
+            Self: always instance of self
+        """
+        self.check_user()
+        self.check_version()
+        self.lock()
+        self.reporter.status_update(BuildStatusEnum.Building)
+        return self
+
+    def __exit__(self, exc_type: type[Exception] | None, exc_val: Exception | None,
+                 exc_tb: TracebackType) -> Literal[False]:
+        """
+        remove lock file when done
+
+        Args:
+            exc_type(type[Exception] | None): exception type name if any
+            exc_val(Exception | None): exception raised if any
+            exc_tb(TracebackType): exception traceback if any
+
+        Returns:
+            Literal[False]: always ``False`` (do not suppress any exception)
+        """
+        self.clear()
+        status = BuildStatusEnum.Success if exc_val is None else BuildStatusEnum.Failed
+        self.reporter.status_update(status)
+        return False

ahriman-core/src/ahriman/core/__init__.py

@@ -0,0 +1,105 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from collections.abc import Iterator
+from contextvars import ContextVar
+from typing import Any, TypeVar
+
+from ahriman.models.context_key import ContextKey
+
+
+T = TypeVar("T")
+
+
+class _Context:
+    """
+    simple ahriman global context implementation
+    """
+
+    def __init__(self) -> None:
+        """"""
+        self._content: dict[str, Any] = {}
+
+    def get(self, key: ContextKey[T] | type[T]) -> T:
+        """
+        get value for the specified key
+
+        Args:
+            key(ContextKey[T] | type[T]): context key name
+
+        Returns:
+            T: value associated with the key
+
+        Raises:
+            KeyError: in case if the specified context variable was not found
+            ValueError: in case if type of value is not an instance of specified return type
+        """
+        if not isinstance(key, ContextKey):
+            key = ContextKey.from_type(key)
+
+        if key.key not in self._content:
+            raise KeyError(key.key)
+        value = self._content[key.key]
+        if not isinstance(value, key.return_type):
+            raise ValueError(f"Value {value} is not an instance of {key.return_type}")
+
+        return value
+
+    def set(self, key: ContextKey[T] | type[T], value: T) -> None:
+        """
+        set value for the specified key
+
+        Args:
+            key(ContextKey[T] | type[T]): context key name
+            value(T): context value associated with the specified key
+
+        Raises:
+            KeyError: in case if the specified context variable already exists
+            ValueError: in case if type of value is not an instance of specified return type
+        """
+        if not isinstance(key, ContextKey):
+            key = ContextKey.from_type(key)
+
+        if key.key in self._content:
+            raise KeyError(key.key)
+        if not isinstance(value, key.return_type):
+            raise ValueError(f"Value {value} is not an instance of {key.return_type}")
+
+        self._content[key.key] = value
+
+    def __iter__(self) -> Iterator[str]:
+        """
+        iterate over keys in local storage
+
+        Returns:
+            str: context key iterator
+        """
+        return iter(self._content)
+
+    def __len__(self) -> int:
+        """
+        get count of the context variables set
+
+        Returns:
+            int: count of stored context variables
+        """
+        return len(self._content)
+
+
+context = ContextVar("context", default=_Context())

ahriman-core/src/ahriman/core/alpm/__init__.py

@@ -0,0 +1,19 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#

ahriman-core/src/ahriman/core/alpm/pacman.py

@@ -0,0 +1,275 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import itertools
+import shutil
+import tarfile
+
+from collections.abc import Iterable, Iterator
+from functools import cached_property
+from pathlib import Path
+from pyalpm import DB, Package, SIG_DATABASE_OPTIONAL, SIG_PACKAGE_OPTIONAL  # type: ignore[import-not-found]
+from string import Template
+
+from ahriman.core.alpm.pacman_database import PacmanDatabase
+from ahriman.core.alpm.pacman_handle import PacmanHandle
+from ahriman.core.configuration import Configuration
+from ahriman.core.log import LazyLogging
+from ahriman.core.utils import trim_package
+from ahriman.models.pacman_synchronization import PacmanSynchronization
+from ahriman.models.repository_id import RepositoryId
+
+
+class Pacman(LazyLogging):
+    """
+    alpm wrapper
+
+    Attributes:
+        configuration(Configuration): configuration instance
+        refresh_database(PacmanSynchronization): synchronize local cache to remote
+        repository_id(RepositoryId): repository unique identifier
+        repository_paths(RepositoryPaths): repository paths instance
+    """
+
+    def __init__(self, repository_id: RepositoryId, configuration: Configuration, *,
+                 refresh_database: PacmanSynchronization) -> None:
+        """
+        Args:
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            refresh_database(PacmanSynchronization): synchronize local cache to remote
+        """
+        self.configuration = configuration
+        self.repository_id = repository_id
+        self.repository_paths = configuration.repository_paths
+
+        self.refresh_database = refresh_database
+
+    @cached_property
+    def handle(self) -> PacmanHandle:
+        """
+        pyalpm handle
+
+        Returns:
+            PacmanHandle: generated pyalpm handle instance
+        """
+        return self.__create_handle(refresh_database=self.refresh_database)
+
+    def __create_handle(self, *, refresh_database: PacmanSynchronization) -> PacmanHandle:
+        """
+        create lazy handle function
+
+        Args:
+            refresh_database(PacmanSynchronization): synchronize local cache to remote
+
+        Returns:
+            PacmanHandle: fully initialized pacman handle
+        """
+        pacman_root = self.configuration.getpath("alpm", "database")
+        use_ahriman_cache = self.configuration.getboolean("alpm", "use_ahriman_cache")
+
+        database_path = self.repository_paths.pacman if use_ahriman_cache else pacman_root
+        root = self.configuration.getpath("alpm", "root")
+        handle = PacmanHandle(str(root), str(database_path))
+
+        for repository in self.configuration.getlist("alpm", "repositories"):
+            database = self.database_init(handle, repository, self.repository_id.architecture)
+            self.database_copy(handle, database, pacman_root, use_ahriman_cache=use_ahriman_cache)
+
+        # install repository database too (without copying)
+        self.database_init(handle, self.repository_id.name, self.repository_id.architecture)
+
+        if use_ahriman_cache and refresh_database:
+            self.database_sync(handle, force=refresh_database == PacmanSynchronization.Force)
+
+        return handle
+
+    def database_copy(self, handle: PacmanHandle, database: DB, pacman_root: Path, *, use_ahriman_cache: bool) -> None:
+        """
+        copy database from the operating system root to the ahriman local home
+
+        Args:
+            handle(PacmanHandle): pacman handle which will be used for database copying
+            database(DB): pacman database instance to be copied
+            pacman_root(Path): operating system pacman root
+            use_ahriman_cache(bool): use local ahriman cache instead of system one
+        """
+        def repository_database(root: Path) -> Path:
+            return root / "sync" / f"{database.name}.db"
+
+        if not use_ahriman_cache:
+            return
+
+        # copy root database if no local copy found
+        pacman_db_path = Path(handle.dbpath)
+        if not pacman_db_path.is_dir():
+            return  # root directory does not exist yet
+        dst = repository_database(pacman_db_path)
+        if dst.is_file():
+            return  # file already exists, do not copy
+        dst.parent.mkdir(mode=0o755, exist_ok=True)  # create sync directory if it doesn't exist
+
+        src = repository_database(pacman_root)
+        if not src.is_file():
+            self.logger.warning("repository %s is set to be used, however, no working copy was found", database.name)
+            return  # database for some reason deos not exist
+
+        self.logger.info("copy pacman database %s from operating system root to ahriman's home %s", src, dst)
+        with self.repository_paths.preserve_owner():
+            shutil.copy(src, dst)
+
+    def database_init(self, handle: PacmanHandle, repository: str, architecture: str) -> DB:
+        """
+        create database instance from pacman handler and set its properties
+
+        Args:
+            handle(PacmanHandle): pacman handle which will be used for database initializing
+            repository(str): pacman repository name (e.g. core)
+            architecture(str): repository architecture
+
+        Returns:
+            DB: loaded pacman database instance
+        """
+        self.logger.info("loading pacman database %s", repository)
+        database: DB = handle.register_syncdb(repository, SIG_DATABASE_OPTIONAL | SIG_PACKAGE_OPTIONAL)
+
+        if repository != self.repository_id.name:
+            mirror = self.configuration.get("alpm", "mirror")
+            # replace variables in mirror address
+            variables = {
+                "arch": architecture,
+                "repo": repository,
+            }
+            server = Template(mirror).safe_substitute(variables)
+        else:
+            # special case, same database, use local storage instead
+            server = f"file://{self.repository_paths.repository}"
+
+        database.servers = [server]
+
+        return database
+
+    def database_sync(self, handle: PacmanHandle, *, force: bool) -> None:
+        """
+        sync local database
+
+        Args:
+            handle(PacmanHandle): pacman handle which will be used for database sync
+            force(bool): force database synchronization (same as ``pacman -Syy``)
+        """
+        self.logger.info("refresh ahriman's home pacman database (force refresh %s)", force)
+        transaction = handle.init_transaction()
+        for database in handle.get_syncdbs():
+            PacmanDatabase(database, self.configuration).sync(force=force)
+        transaction.release()
+
+    def files(self, packages: Iterable[str]) -> dict[str, set[str]]:
+        """
+        extract list of known packages from the databases
+
+        Args:
+            packages(Iterable[str]): filter by package names
+
+        Returns:
+            dict[str, set[str]]: map of package name to its list of files
+        """
+        def extract(tar: tarfile.TarFile, versions: dict[str, str]) -> Iterator[tuple[str, set[str]]]:
+            for package_name, version in versions.items():
+                path = Path(f"{package_name}-{version}") / "files"
+                try:
+                    content = tar.extractfile(str(path))
+                except KeyError:
+                    # in case if database and its files has been desync somehow, the extractfile will raise
+                    # KeyError because the entry doesn't exist
+                    content = None
+                if content is None:
+                    continue
+
+                # this is just array of files, however, the directories are with trailing slash,
+                # which previously has been removed by the conversion to ``pathlib.Path``
+                files = {filename.decode("utf8").rstrip().removesuffix("/") for filename in content.readlines()}
+                yield package_name, files
+
+        # sort is required for the following group by operation
+        descriptors = sorted(
+            (package for package_name in packages for package in self.package(package_name)),
+            key=lambda package: package.db.name
+        )
+
+        result: dict[str, set[str]] = {}
+        for database_name, pacman_packages in itertools.groupby(descriptors, lambda package: package.db.name):
+            database_file = self.repository_paths.pacman / "sync" / f"{database_name}.files.tar.gz"
+            if not database_file.is_file():
+                continue  # no database file found
+
+            package_names = {package.name: package.version for package in pacman_packages}
+            with tarfile.open(database_file, "r:gz") as archive:
+                result.update(extract(archive, package_names))
+
+        return result
+
+    def package(self, package_name: str) -> Iterator[Package]:
+        """
+        retrieve list of the packages from the repository by name
+
+        Args:
+            package_name(str): package name to search
+
+        Yields:
+            Package: list of packages which were returned by the query
+        """
+        for database in self.handle.get_syncdbs():
+            package = database.get_pkg(package_name)
+            if package is None:
+                continue
+            yield package
+
+    def packages(self) -> set[str]:
+        """
+        get list of packages known for alpm
+
+        Returns:
+            set[str]: list of package names
+        """
+        result: set[str] = set()
+        for database in self.handle.get_syncdbs():
+            for package in database.pkgcache:
+                # package itself
+                result.add(package.name)
+                # provides list for meta-packages
+                result.update(trim_package(provides) for provides in package.provides)
+
+        return result
+
+    def provided_by(self, package_name: str) -> Iterator[Package]:
+        """
+        search through databases and emit packages which provides the ``package_name``
+
+        Args:
+            package_name(str): package name to search
+
+        Yields:
+            Package: list of packages which were returned by the query
+        """
+        def is_package_provided(package: Package) -> bool:
+            provides = [trim_package(name) for name in package.provides]
+            return package_name in provides
+
+        for database in self.handle.get_syncdbs():
+            yield from filter(is_package_provided, database.search(package_name))

ahriman-core/src/ahriman/core/alpm/pacman_database.py

@@ -0,0 +1,176 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import os
+import shutil
+
+from email.utils import parsedate_to_datetime
+from pathlib import Path
+from pyalpm import DB  # type: ignore[import-not-found]
+from typing import ClassVar
+from urllib.parse import urlparse
+
+from ahriman.core.configuration import Configuration
+from ahriman.core.exceptions import PacmanError
+from ahriman.core.http import SyncHttpClient
+
+
+class PacmanDatabase(SyncHttpClient):
+    """
+    implementation for database sync, because pyalpm is not always enough
+
+    Attributes:
+        LAST_MODIFIED_HEADER(str): last modified header name
+        database(DB): pyalpm database object
+        repository_paths(RepositoryPaths): repository paths instance
+        sync_files_database(bool): sync files database
+    """
+
+    LAST_MODIFIED_HEADER: ClassVar[str] = "Last-Modified"
+
+    def __init__(self, database: DB, configuration: Configuration) -> None:
+        """
+        Args:
+            database(DB): pyalpm database object
+            configuration(Configuration): configuration instance
+        """
+        SyncHttpClient.__init__(self)
+        self.timeout = None  # reset timeout
+
+        self.database = database
+        self.repository_paths = configuration.repository_paths
+
+        self.sync_files_database = configuration.getboolean("alpm", "sync_files_database")
+
+    @staticmethod
+    def copy(remote_path: Path, local_path: Path) -> None:
+        """
+        copy local database file
+
+        Args:
+            remote_path(Path): path to source (remote) file
+            local_path(Path): path to locally stored file
+        """
+        shutil.copy(remote_path, local_path)
+
+    def download(self, url: str, local_path: Path) -> None:
+        """
+        download remote file and store it to local path with the correct last modified headers
+
+        Args:
+            url(str): remote url to request file
+            local_path(Path): path to locally stored file
+
+        Raises:
+            PacmanError: in case if no last-modified header was found
+        """
+        response = self.make_request("GET", url, stream=True)
+        if self.LAST_MODIFIED_HEADER not in response.headers:
+            raise PacmanError("No last-modified header found")
+
+        with local_path.open("wb") as local_file:
+            for chunk in response.iter_content(chunk_size=1024):
+                local_file.write(chunk)
+
+        # set correct (a,m)time for the file
+        remote_changed = parsedate_to_datetime(response.headers[self.LAST_MODIFIED_HEADER]).timestamp()
+        os.utime(local_path, (remote_changed, remote_changed))
+
+    def is_outdated(self, url: str, local_path: Path) -> bool:
+        """
+        check if local file is outdated
+
+        Args:
+            url(str): remote url to request last modified header
+            local_path(Path): path to locally stored file
+
+        Returns:
+            bool: ``True`` in case if remote file is newer than local file
+
+        Raises:
+            PacmanError: in case if no last-modified header was found
+        """
+        if not local_path.is_file():
+            return True  # no local file found, requires to update
+
+        response = self.make_request("HEAD", url)
+        if self.LAST_MODIFIED_HEADER not in response.headers:
+            raise PacmanError("No last-modified header found")
+
+        remote_changed = parsedate_to_datetime(response.headers["Last-Modified"]).timestamp()
+        local_changed = local_path.stat().st_mtime
+
+        return remote_changed > local_changed
+
+    def sync(self, *, force: bool) -> None:
+        """
+        sync packages and files databases
+
+        Args:
+            force(bool): force database synchronization (same as ``pacman -Syy``)
+        """
+        try:
+            self.sync_packages(force=force)
+            if self.sync_files_database:
+                self.sync_files(force=force)
+        except Exception:
+            self.logger.exception("exception during update %s", self.database.name)
+
+    def sync_files(self, *, force: bool) -> None:
+        """
+        sync files by using http request
+
+        Args:
+            force(bool): force database synchronization (same as ``pacman -Syy``)
+
+        Raises:
+            PacmanError: on operation error (invalid scheme or incomplete configuration)
+        """
+        try:
+            server = next(iter(self.database.servers))
+        except StopIteration:
+            raise PacmanError("No configured servers available for database") from None
+        filename = f"{self.database.name}.files.tar.gz"
+        url = f"{server}/{filename}"
+
+        remote_uri = urlparse(url)
+        local_path = Path(self.repository_paths.pacman / "sync" / filename)
+
+        match remote_uri.scheme:
+            case "http" | "https":
+                if not force and not self.is_outdated(url, local_path):
+                    return
+
+                self.download(url, local_path)
+
+            case "file":
+                # just copy file as it is relatively cheap operation, no need to check timestamps
+                self.copy(Path(remote_uri.path), local_path)
+
+            case other:
+                raise PacmanError(f"Unknown or unsupported URL scheme {other}")
+
+    def sync_packages(self, *, force: bool) -> None:
+        """
+        sync packages by using built-in pyalpm methods
+
+        Args:
+            force(bool): force database synchronization (same as ``pacman -Syy``)
+        """
+        self.database.update(force)

ahriman-core/src/ahriman/core/alpm/pacman_handle.py

@@ -0,0 +1,81 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from pathlib import Path
+from pyalpm import Handle, Package  # type: ignore[import-not-found]
+from tempfile import TemporaryDirectory
+from typing import Any, ClassVar, Self
+
+
+class PacmanHandle:
+    """
+    lightweight wrapper for pacman handle to be used for direct alpm operations (e.g. package load)
+
+    Attributes:
+        handle(Handle): pyalpm handle instance
+    """
+
+    _ephemeral: ClassVar[Self | None] = None
+
+    def __init__(self, *args: Any, **kwargs: Any) -> None:
+        """
+        Args:
+            *args(Any): positional arguments for :class:`pyalpm.Handle`
+            **kwargs(Any): keyword arguments for :class:`pyalpm.Handle`
+        """
+        self.handle = Handle(*args, **kwargs)
+
+    @classmethod
+    def ephemeral(cls) -> Self:
+        """
+        create temporary instance with no access to real databases
+
+        Returns:
+            Self: loaded class
+        """
+        if cls._ephemeral is None:
+            # handle creates alpm version file, but we don't use it
+            # so it is ok to just remove it
+            with TemporaryDirectory(ignore_cleanup_errors=True) as dir_name:
+                cls._ephemeral = cls("/", dir_name)
+        return cls._ephemeral
+
+    def package_load(self, path: Path) -> Package:
+        """
+        load package from path to the archive
+
+        Args:
+            path(Path): path to package archive
+
+        Returns:
+            Package: package instance
+        """
+        return self.handle.load_pkg(str(path))
+
+    def __getattr__(self, item: str) -> Any:
+        """
+        proxy methods for :class:`pyalpm.Handle`, because it doesn't allow subclassing
+
+        Args:
+            item(str): property name
+
+        Returns:
+            Any: attribute by its name
+        """
+        return self.handle.__getattribute__(item)

ahriman-core/src/ahriman/core/alpm/pkgbuild_parser.py

@@ -0,0 +1,371 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import itertools
+import re
+import shlex
+
+from collections.abc import Iterator
+from enum import StrEnum
+from typing import IO
+
+from ahriman.core.exceptions import PkgbuildParserError
+from ahriman.models.pkgbuild_patch import PkgbuildPatch
+
+
+class PkgbuildToken(StrEnum):
+    """
+    well-known tokens dictionary
+
+    Attributes:
+        ArrayEnds(PkgbuildToken): array ends token
+        ArrayStarts(PkgbuildToken): array starts token
+        Comma(PkgbuildToken): comma token
+        Comment(PkgbuildToken): comment token
+        FunctionDeclaration(PkgbuildToken): function declaration token
+        FunctionEnds(PkgbuildToken): function ends token
+        FunctionStarts(PkgbuildToken): function starts token
+        NewLine(PkgbuildToken): new line token
+    """
+
+    ArrayStarts = "("
+    ArrayEnds = ")"
+
+    Comma = ","
+
+    Comment = "#"
+
+    FunctionDeclaration = "()"
+    FunctionStarts = "{"
+    FunctionEnds = "}"
+
+    NewLine = "\n"
+
+
+class PkgbuildParser(shlex.shlex):
+    """
+    simple pkgbuild reader implementation in pure python, because others suck.
+
+    What is it:
+
+    #. Simple PKGBUILD parser written in python.
+    #. No shell execution, so it is free from random shell attacks.
+    #. Able to parse simple constructions (assignments, comments, functions, arrays).
+
+    What it is not:
+
+    #. Fully functional shell parser.
+    #. Shell executor.
+    #. No parameter expansion.
+
+    For more details what does it support, please, consult with the test cases.
+
+    Examples:
+        This class is heavily based on :mod:`shlex` parser, but instead of strings operates with the
+        :class:`ahriman.models.pkgbuild_patch.PkgbuildPatch` objects. The main way to use it is to call :func:`parse()`
+        function and collect parsed objects, e.g.::
+
+            >>> parser = PkgbuildParser(StringIO("input string"))
+            >>> for patch in parser.parse():
+            >>>     print(f"{patch.key} = {patch.value}")
+
+        It doesn't store the state of the fields (but operates with the :mod:`shlex` parser state), so no shell
+        post-processing is performed (e.g. variable substitution).
+    """
+
+    _ARRAY_ASSIGNMENT = re.compile(r"^(?P<key>\w+)=$")
+    # in addition to usual assignment, functions can have dash
+    _FUNCTION_DECLARATION = re.compile(r"^(?P<key>[\w-]+)$")
+    _STRING_ASSIGNMENT = re.compile(r"^(?P<key>\w+)=(?P<value>.+)$")
+
+    def __init__(self, stream: IO[str]) -> None:
+        """
+        Args:
+            stream(IO[str]): input stream containing PKGBUILD content
+        """
+        shlex.shlex.__init__(self, stream, posix=True, punctuation_chars=True)
+        self._io = stream  # direct access without type casting
+
+        # ignore substitution and extend bash symbols
+        self.wordchars += "${}#:+-@!"
+        # in case of default behavior, it will ignore, for example, segment part of url outside of quotes
+        self.commenters = ""
+
+    @staticmethod
+    def _expand_array(array: list[str]) -> list[str]:
+        """
+        bash array expansion simulator. It takes raw array and tries to expand constructions like
+        ``(first prefix-{mid1,mid2}-suffix last)`` into ``(first, prefix-mid1-suffix prefix-mid2-suffix last)``
+
+        Args:
+            array(list[str]): input array
+
+        Returns:
+            list[str]: either source array or expanded array if possible
+
+        Raises:
+            PkgbuildParserError: if there are errors in parser
+        """
+        # we are using comma as marker for expansion (if any)
+        if PkgbuildToken.Comma not in array:
+            return array
+        # again sanity check, for expansion there are at least 3 elements (first, last and comma)
+        if len(array) < 3:
+            return array
+
+        result = []
+        buffer, prefix = [], None
+
+        for index, (first, second) in enumerate(itertools.pairwise(array)):
+            match (first, second):
+                # in this case we check if expansion should be started
+                # this condition matches "prefix{first", ","
+                case (_, PkgbuildToken.Comma) if PkgbuildToken.FunctionStarts in first:
+                    prefix, part = first.rsplit(PkgbuildToken.FunctionStarts, maxsplit=1)
+                    buffer.append(f"{prefix}{part}")
+
+                # the last element case, it matches either ",", "last}" or ",", "last}suffix"
+                # in case if there is suffix, it must be appended to all list elements
+                case (PkgbuildToken.Comma, _) if prefix is not None and PkgbuildToken.FunctionEnds in second:
+                    part, suffix = second.rsplit(PkgbuildToken.FunctionEnds, maxsplit=1)
+                    buffer.append(f"{prefix}{part}")
+                    result.extend([f"{part}{suffix}" for part in buffer])
+                    # reset state
+                    buffer, prefix = [], None
+
+                # we have already got prefix string, so we are in progress of expansion
+                # we always operate the last element, so this matches ",", "next"
+                case (PkgbuildToken.Comma, _) if prefix is not None:
+                    buffer.append(f"{prefix}{second}")
+
+                # exactly first element of the list
+                case (_, _) if prefix is None and index == 0:
+                    result.append(first)
+
+                # any next normal element
+                case (_, _) if prefix is None:
+                    result.append(second)
+
+        # small sanity check
+        if prefix is not None:
+            raise PkgbuildParserError("error in array expansion", array)
+
+        return result
+
+    def _is_escaped(self) -> bool:
+        """
+        check if the last element was quoted. ``shlex.shlex`` parser doesn't provide information about was the token
+        quoted or not, thus there is no difference between "'#'" (sharp in quotes) and "#" (sharp without quotes). This
+        method simply rolls back to the last non-space character and check if it is a quotation mark
+
+        Returns:
+            bool: ``True`` if the previous element of the stream is a quote or escaped and ``False`` otherwise
+        """
+        current_position = self._io.tell()
+
+        last_char = penultimate_char = None
+        index = current_position - 1
+        while index > 0:
+            index, last_char = self._read_last(index)
+            if last_char.isspace():
+                index -= 1
+                continue
+
+            if index > 1:
+                _, penultimate_char = self._read_last(index - 1)
+
+            break
+
+        self._io.seek(current_position)  # reset position of the stream
+        is_quoted = last_char is not None and last_char in self.quotes
+        is_escaped = penultimate_char is not None and penultimate_char in self.escape
+
+        return is_quoted or is_escaped
+
+    def _parse_array(self) -> list[str]:
+        """
+        parse array from the PKGBUILD. This method will extract tokens from parser until it matches closing array,
+        modifying source parser state
+
+        Returns:
+            list[str]: extracted arrays elements
+
+        Raises:
+            PkgbuildParserError: if array is not closed
+        """
+        def extract() -> Iterator[str]:
+            while token := self.get_token():
+                match token:
+                    case _ if self._is_escaped():
+                        pass
+                    case PkgbuildToken.ArrayEnds:
+                        break
+                    case comment if comment.startswith(PkgbuildToken.Comment):
+                        self._read_comment()
+                        continue
+
+                yield token
+
+            if token != PkgbuildToken.ArrayEnds:
+                raise PkgbuildParserError("no closing array bracket found")
+
+        return self._expand_array(list(extract()))
+
+    def _parse_function(self) -> str:
+        """
+        parse function from the PKGBUILD. This method will extract tokens from parser until it matches closing function,
+        modifying source parser state. Instead of trying to combine tokens together, it uses positions of the file
+        and reads content again in this range
+
+        Returns:
+            str: function body
+
+        Raises:
+            PkgbuildParserError: if function body wasn't found or parser input stream doesn't support position reading
+        """
+        # find start and end positions
+        start_position = end_position = -1
+        counter = 0  # simple processing of the inner "{" and "}"
+        for token in self:
+            match token:
+                case _ if self._is_escaped():
+                    continue
+                case PkgbuildToken.FunctionStarts:
+                    if counter == 0:
+                        start_position = self._io.tell() - 1
+                    counter += 1
+                case PkgbuildToken.FunctionEnds:
+                    end_position = self._io.tell()
+                    if self.state != self.eof:  # type: ignore[attr-defined]
+                        end_position -= 1  # if we are not at the end of the file, position is _after_ the token
+                    counter -= 1
+                    if counter == 0:
+                        break
+                case comment if comment.startswith(PkgbuildToken.Comment):
+                    self._read_comment()
+
+        if not 0 < start_position < end_position:
+            raise PkgbuildParserError("function body wasn't found")
+
+        # read the specified interval from source stream
+        self._io.seek(start_position - 1)  # start from the previous symbol
+        # we cannot use :func:`read()` here, because it reads characters, not bytes
+        content = ""
+        while self._io.tell() != end_position and (next_char := self._io.read(1)):
+            content += next_char
+
+        # special case of the end of file
+        if self.state == self.eof:  # type: ignore[attr-defined]
+            content += self._io.read(1)
+
+        return content
+
+    def _parse_token(self, token: str) -> Iterator[PkgbuildPatch]:
+        """
+        parse single token to the PKGBUILD field
+
+        Args:
+            token(str): current token
+
+        Yields:
+            PkgbuildPatch: extracted a PKGBUILD node
+        """
+        # simple assignment rule
+        if m := self._STRING_ASSIGNMENT.match(token):
+            key = m.group("key")
+            value = m.group("value")
+            yield PkgbuildPatch(key, value)
+            return
+
+        if token.startswith(PkgbuildToken.Comment):
+            self._read_comment()
+            return
+
+        match self.get_token():
+            # array processing. Arrays will be sent as "key=", "(", values, ")"
+            case PkgbuildToken.ArrayStarts if m := self._ARRAY_ASSIGNMENT.match(token):
+                key = m.group("key")
+                value = self._parse_array()
+                yield PkgbuildPatch(key, value)
+
+            # functions processing. Function will be sent as "name", "()", "{", body, "}"
+            case PkgbuildToken.FunctionDeclaration if self._FUNCTION_DECLARATION.match(token):
+                key = f"{token}{PkgbuildToken.FunctionDeclaration}"
+                value = self._parse_function()
+                yield PkgbuildPatch(key, value)  # this is not mistake, assign to token without ()
+
+            # special function case, where "(" and ")" are separated tokens, e.g. "pkgver ( )"
+            case PkgbuildToken.ArrayStarts if self._FUNCTION_DECLARATION.match(token):
+                next_token = self.get_token()
+                if next_token == PkgbuildToken.ArrayEnds:  # replace closing bracket with "()"
+                    next_token = PkgbuildToken.FunctionDeclaration
+                self.push_token(next_token)  # type: ignore[arg-type]
+                yield from self._parse_token(token)
+
+            # some random token received without continuation, lets guess it is empty assignment (i.e. key=)
+            case other if other is not None:
+                yield from self._parse_token(other)
+
+    def _read_comment(self) -> None:
+        """
+        read comment from the current position. This method doesn't check comment itself, just read the stream
+        until the comment line ends
+        """
+        _, last_symbol = self._read_last()
+        if last_symbol != PkgbuildToken.NewLine:
+            self.instream.readline()
+
+    def _read_last(self, initial_index: int | None = None) -> tuple[int, str]:
+        """
+        wrapper around read to read the last symbol from the input stream. This method is designed to process UTF-8
+        symbols correctly. This method does not reset current stream position
+
+        Args:
+            initial_index(int | None, optional): initial index to start reading from. If none set, the previous position
+                will be used (Default value = None)
+
+        Returns:
+            tuple[int, str]: last symbol and its position in the stream
+
+        Raises:
+            PkgbuildParserError: in case if stream reached starting position, but no valid symbols were found
+        """
+        if initial_index is None:
+            initial_index = self._io.tell() - 1
+        if initial_index < 0:
+            raise PkgbuildParserError("stream is on starting position")
+        self._io.seek(initial_index)
+
+        while (position := self._io.tell()) > 0:
+            try:
+                return position, self._io.read(1)
+            except UnicodeDecodeError:
+                self._io.seek(position - 1)
+
+        raise PkgbuildParserError("reached starting position, no valid symbols found")
+
+    def parse(self) -> Iterator[PkgbuildPatch]:
+        """
+        parse source stream and yield parsed entries
+
+        Yields:
+            PkgbuildPatch: extracted a PKGBUILD node
+        """
+        for token in self:
+            yield from self._parse_token(token)

ahriman-core/src/ahriman/core/alpm/remote/__init__.py

@@ -0,0 +1,23 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from ahriman.core.alpm.remote.aur import AUR
+from ahriman.core.alpm.remote.official import Official
+from ahriman.core.alpm.remote.official_syncdb import OfficialSyncdb
+from ahriman.core.alpm.remote.remote import Remote

ahriman-core/src/ahriman/core/alpm/remote/aur.py

@@ -0,0 +1,165 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from typing import Any, ClassVar
+
+from ahriman.core.alpm.pacman import Pacman
+from ahriman.core.alpm.remote.remote import Remote
+from ahriman.core.exceptions import PackageInfoError, UnknownPackageError
+from ahriman.models.aur_package import AURPackage
+
+
+class AUR(Remote):
+    """
+    AUR RPC wrapper
+
+    Attributes:
+        DEFAULT_AUR_URL(str): (class attribute) default AUR url
+        DEFAULT_RPC_URL(str): (class attribute) default AUR RPC url
+        DEFAULT_RPC_VERSION(str): (class attribute) default AUR RPC version
+    """
+
+    DEFAULT_AUR_URL: ClassVar[str] = "https://aur.archlinux.org"
+    DEFAULT_RPC_URL: ClassVar[str] = f"{DEFAULT_AUR_URL}/rpc"
+    DEFAULT_RPC_VERSION: ClassVar[str] = "5"
+
+    @classmethod
+    def remote_git_url(cls, package_base: str, repository: str) -> str:
+        """
+        generate remote git url from the package base
+
+        Args:
+            package_base(str): package base
+            repository(str): repository name
+
+        Returns:
+            str: git url for the specific base
+        """
+        return f"{AUR.DEFAULT_AUR_URL}/{package_base}.git"
+
+    @classmethod
+    def remote_web_url(cls, package_base: str) -> str:
+        """
+        generate remote web url from the package base
+
+        Args:
+            package_base(str): package base
+
+        Returns:
+            str: web url for the specific base
+        """
+        return f"{AUR.DEFAULT_AUR_URL}/packages/{package_base}"
+
+    @staticmethod
+    def parse_response(response: dict[str, Any]) -> list[AURPackage]:
+        """
+        parse RPC response to package list
+
+        Args:
+            response(dict[str, Any]): RPC response JSON
+
+        Returns:
+            list[AURPackage]: list of parsed packages
+
+        Raises:
+            PackageInfoError: for error API response
+        """
+        response_type = response["type"]
+        if response_type == "error":
+            error_details = response.get("error", "Unknown API error")
+            raise PackageInfoError(error_details)
+        return [AURPackage.from_json(package) for package in response["results"]]
+
+    def aur_request(self, request_type: str, *args: str, **kwargs: str) -> list[AURPackage]:
+        """
+        perform request to AUR RPC
+
+        Args:
+            request_type(str): AUR request type, e.g. search, info
+            *args(str): list of arguments to be passed as args query parameter
+            **kwargs(str): list of additional named parameters like by
+
+        Returns:
+            list[AURPackage]: response parsed to package list
+
+        Raises:
+            PackageInfoError: if multiple arguments are passed
+        """
+        if len(args) != 1:
+            raise PackageInfoError("AUR API requires exactly one argument to search")
+
+        url = f"{self.DEFAULT_RPC_URL}/v{self.DEFAULT_RPC_VERSION}/{request_type}/{args[0]}"
+        query = list(kwargs.items())
+
+        response = self.make_request("GET", url, params=query)
+        return self.parse_response(response.json())
+
+    def package_info(self, package_name: str, *, pacman: Pacman | None) -> AURPackage:
+        """
+        get package info by its name
+
+        Args:
+            package_name(str): package name to search
+            pacman(Pacman | None): alpm wrapper instance, required for official repositories search
+
+        Returns:
+            AURPackage: package which match the package name
+
+        Raises:
+            UnknownPackageError: package doesn't exist
+        """
+        packages = self.aur_request("info", package_name)
+        try:
+            return next(package for package in packages if package.name == package_name)
+        except StopIteration:
+            raise UnknownPackageError(package_name) from None
+
+    def package_provided_by(self, package_name: str, *, pacman: Pacman | None) -> list[AURPackage]:
+        """
+        get package list which provide the specified package name
+
+        Args:
+            package_name(str): package name to search
+            pacman(Pacman | None): alpm wrapper instance, required for official repositories search
+
+        Returns:
+            list[AURPackage]: list of packages which match the criteria
+        """
+        return [
+            package
+            # search api provides reduced models
+            for stub in self.package_search(package_name, pacman=pacman, search_by="provides")
+            # verity that found package actually provides it
+            if package_name in (package := self.package_info(stub.name, pacman=pacman)).provides
+        ]
+
+    def package_search(self, *keywords: str, pacman: Pacman | None, search_by: str | None) -> list[AURPackage]:
+        """
+        search package in AUR web
+
+        Args:
+            *keywords(str): keywords to search
+            pacman(Pacman | None): alpm wrapper instance, required for official repositories search
+            search_by(str | None): search by keywords
+
+        Returns:
+            list[AURPackage]: list of packages which match the criteria
+        """
+        search_by = search_by or "name-desc"
+        return self.aur_request("search", *keywords, by=search_by)

ahriman-core/src/ahriman/core/alpm/remote/official.py

@@ -0,0 +1,143 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from typing import Any, ClassVar
+
+from ahriman.core.alpm.pacman import Pacman
+from ahriman.core.alpm.remote.remote import Remote
+from ahriman.core.exceptions import PackageInfoError, UnknownPackageError
+from ahriman.models.aur_package import AURPackage
+
+
+class Official(Remote):
+    """
+    official repository RPC wrapper
+
+    Attributes:
+        DEFAULT_ARCHLINUX_URL(str): (class attribute) default archlinux url
+        DEFAULT_ARCHLINUX_GIT_URL(str): (class attribute) default url for git packages
+        DEFAULT_SEARCH_REPOSITORIES(list[str]): (class attribute) default list of repositories to search
+        DEFAULT_RPC_URL(str): (class attribute) default archlinux repositories RPC url
+    """
+
+    DEFAULT_ARCHLINUX_GIT_URL: ClassVar[str] = "https://gitlab.archlinux.org"
+    DEFAULT_ARCHLINUX_URL: ClassVar[str] = "https://archlinux.org"
+    DEFAULT_SEARCH_REPOSITORIES: ClassVar[list[str]] = ["Core", "Extra", "Multilib"]
+    DEFAULT_RPC_URL: ClassVar[str] = "https://archlinux.org/packages/search/json"
+
+    @classmethod
+    def remote_git_url(cls, package_base: str, repository: str) -> str:
+        """
+        generate remote git url from the package base
+
+        Args:
+            package_base(str): package base
+            repository(str): repository name
+
+        Returns:
+            str: git url for the specific base
+        """
+        return f"{Official.DEFAULT_ARCHLINUX_GIT_URL}/archlinux/packaging/packages/{package_base}.git"
+
+    @classmethod
+    def remote_web_url(cls, package_base: str) -> str:
+        """
+        generate remote web url from the package base
+
+        Args:
+            package_base(str): package base
+
+        Returns:
+            str: web url for the specific base
+        """
+        return f"{Official.DEFAULT_ARCHLINUX_URL}/packages/{package_base}"
+
+    @staticmethod
+    def parse_response(response: dict[str, Any]) -> list[AURPackage]:
+        """
+        parse RPC response to package list
+
+        Args:
+            response(dict[str, Any]): RPC response JSON
+
+        Returns:
+            list[AURPackage]: list of parsed packages
+
+        Raises:
+            PackageInfoError: for error API response
+        """
+        if not response["valid"]:
+            raise PackageInfoError("API validation error")
+        return [AURPackage.from_repo(package) for package in response["results"]]
+
+    def arch_request(self, *args: str, by: str) -> list[AURPackage]:
+        """
+        perform request to official repositories RPC
+
+        Args:
+            *args(str): list of arguments to be passed as args query parameter
+            by(str): search by the field
+
+        Returns:
+            list[AURPackage]: response parsed to package list
+        """
+        query: list[tuple[str, str]] = [
+            ("repo", repository)
+            for repository in self.DEFAULT_SEARCH_REPOSITORIES
+        ]
+        for arg in args:
+            query.append((by, arg))
+
+        response = self.make_request("GET", self.DEFAULT_RPC_URL, params=query)
+        return self.parse_response(response.json())
+
+    def package_info(self, package_name: str, *, pacman: Pacman | None) -> AURPackage:
+        """
+        get package info by its name
+
+        Args:
+            package_name(str): package name to search
+            pacman(Pacman | None): alpm wrapper instance, required for official repositories search
+
+        Returns:
+            AURPackage: package which match the package name
+
+        Raises:
+            UnknownPackageError: package doesn't exist
+        """
+        packages = self.arch_request(package_name, by="name")
+        try:
+            return next(package for package in packages if package.name == package_name)
+        except StopIteration:
+            raise UnknownPackageError(package_name) from None
+
+    def package_search(self, *keywords: str, pacman: Pacman | None, search_by: str | None) -> list[AURPackage]:
+        """
+        search package in AUR web
+
+        Args:
+            *keywords(str): keywords to search
+            pacman(Pacman | None): alpm wrapper instance, required for official repositories search
+            search_by(str | None): search by keywords
+
+        Returns:
+            list[AURPackage]: list of packages which match the criteria
+        """
+        search_by = search_by or "q"
+        return self.arch_request(*keywords, by=search_by)

ahriman-core/src/ahriman/core/alpm/remote/official_syncdb.py

@@ -0,0 +1,80 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from ahriman.core.alpm.pacman import Pacman
+from ahriman.core.alpm.remote.official import Official
+from ahriman.core.exceptions import UnknownPackageError
+from ahriman.models.aur_package import AURPackage
+
+
+class OfficialSyncdb(Official):
+    """
+    official repository wrapper based on synchronized databases.
+
+    Despite the fact that official repository provides an API for the interaction according to the comment in issue
+    https://github.com/arcan1s/ahriman/pull/59#issuecomment-1106412297 we might face rate limits while requesting
+    updates.
+
+    This approach also has limitations, because we don't require superuser rights (neither going to download database
+    separately), the database file might be outdated and must be handled manually (or kind of). This behavior might be
+    changed in the future.
+
+    Still we leave search function based on the official repositories RPC.
+    """
+
+    def package_info(self, package_name: str, *, pacman: Pacman | None) -> AURPackage:
+        """
+        get package info by its name
+
+        Args:
+            package_name(str): package name to search
+            pacman(Pacman | None): alpm wrapper instance, required for official repositories search
+
+        Returns:
+            AURPackage: package which match the package name
+
+        Raises:
+            UnknownPackageError: package doesn't exist
+        """
+        if pacman is None:
+            raise UnknownPackageError(package_name)
+
+        try:
+            return next(AURPackage.from_pacman(package) for package in pacman.package(package_name))
+        except StopIteration:
+            raise UnknownPackageError(package_name) from None
+
+    def package_provided_by(self, package_name: str, *, pacman: Pacman | None) -> list[AURPackage]:
+        """
+        get package list which provide the specified package name
+
+        Args:
+            package_name(str): package name to search
+            pacman(Pacman | None): alpm wrapper instance, required for official repositories search
+
+        Returns:
+            list[AURPackage]: list of packages which match the criteria
+        """
+        if pacman is None:
+            return []
+
+        return [
+            AURPackage.from_pacman(package)
+            for package in pacman.provided_by(package_name)
+        ]

ahriman-core/src/ahriman/core/alpm/remote/remote.py

@@ -0,0 +1,202 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from ahriman.core.alpm.pacman import Pacman
+from ahriman.core.exceptions import UnknownPackageError
+from ahriman.core.http import SyncHttpClient
+from ahriman.models.aur_package import AURPackage
+
+
+class Remote(SyncHttpClient):
+    """
+    base class for remote package search
+
+    Examples:
+        These classes are designed to be used without instancing. In order to achieve it several class methods are
+        provided: :func:`info()`, :func:`multisearch()` and :func:`search()`. Thus, the basic flow is the following::
+
+            >>> from ahriman.core.alpm.remote import AUR, Official
+            >>>
+            >>> package = AUR.info("ahriman")
+            >>> search_result = Official.multisearch("pacman", "manager", pacman=pacman)
+
+        Difference between :func:`search()` and :func:`multisearch()` is that :func:`search()` passes all arguments to
+        underlying wrapper directly, whereas :func:`multisearch()` splits search one by one and finds intersection
+        between search results.
+    """
+
+    @classmethod
+    def info(cls, package_name: str, *, pacman: Pacman | None = None, include_provides: bool = False) -> AURPackage:
+        """
+        get package info by its name. If ``include_provides`` is set to ``True``, then, in addition, this method
+        will perform search by :attr:`ahriman.models.aur_package.AURPackage.provides` and return first package found.
+        Note, however, that in this case some implementation might not provide this method and search result will might
+        not be stable
+
+        Args:
+            package_name(str): package name to search
+            pacman(Pacman | None, optional): alpm wrapper instance, required for official repositories search
+                (Default value = None)
+            include_provides(bool, optional): search by provides if no exact match found (Default value = False)
+
+        Returns:
+            AURPackage: package which match the package name
+
+        Raises:
+            UnknownPackageError: if requested package not found
+        """
+        instance = cls()
+        try:
+            return instance.package_info(package_name, pacman=pacman)
+        except UnknownPackageError:
+            if include_provides and (provided_by := instance.package_provided_by(package_name, pacman=pacman)):
+                return next(iter(provided_by))
+            raise
+
+    @classmethod
+    def multisearch(cls, *keywords: str, pacman: Pacman | None = None,
+                    search_by: str | None = None) -> list[AURPackage]:
+        """
+        search in remote repository by using API with multiple words. This method is required in order to handle
+        https://bugs.archlinux.org/task/49133. In addition, short words will be dropped
+
+        Args:
+            *keywords(str): search terms, e.g. "ahriman", "is", "cool"
+            pacman(Pacman | None, optional): alpm wrapper instance, required for official repositories search
+                (Default value = None)
+            search_by(str | None, optional): search by keywords (Default value = None)
+
+        Returns:
+            list[AURPackage]: list of packages each of them matches all search terms
+        """
+        instance = cls()
+        packages: dict[str, AURPackage] = {}
+        for term in filter(lambda word: len(word) >= 3, keywords):
+            portion = instance.package_search(term, pacman=pacman, search_by=search_by)
+            packages = {
+                package.name: package  # not mistake to group them by name
+                for package in portion
+                if package.name in packages or not packages
+            }
+
+        # simple check for duplicates. This method will remove all packages under base if there is
+        # a package named exactly as its base
+        packages = {
+            package.name: package
+            for package in packages.values()
+            if package.package_base not in packages or package.package_base == package.name
+        }
+
+        return list(packages.values())
+
+    @classmethod
+    def remote_git_url(cls, package_base: str, repository: str) -> str:
+        """
+        generate remote git url from the package base
+
+        Args:
+            package_base(str): package base
+            repository(str): repository name
+
+        Returns:
+            str: git url for the specific base
+
+        Raises:
+            NotImplementedError: not implemented method
+        """
+        raise NotImplementedError
+
+    @classmethod
+    def remote_web_url(cls, package_base: str) -> str:
+        """
+        generate remote web url from the package base
+
+        Args:
+            package_base(str): package base
+
+        Returns:
+            str: web url for the specific base
+
+        Raises:
+            NotImplementedError: not implemented method
+        """
+        raise NotImplementedError
+
+    @classmethod
+    def search(cls, *keywords: str, pacman: Pacman | None = None, search_by: str | None = None) -> list[AURPackage]:
+        """
+        search package in AUR web
+
+        Args:
+            *keywords(str): search terms, e.g. "ahriman", "is", "cool"
+            pacman(Pacman | None, optional): alpm wrapper instance, required for official repositories search
+                (Default value = None)
+            search_by(str | None, optional): search by keywords (Default value = None)
+
+        Returns:
+            list[AURPackage]: list of packages which match the criteria
+        """
+        return cls().package_search(*keywords, pacman=pacman, search_by=search_by)
+
+    def package_info(self, package_name: str, *, pacman: Pacman | None) -> AURPackage:
+        """
+        get package info by its name
+
+        Args:
+            package_name(str): package name to search
+            pacman(Pacman | None): alpm wrapper instance, required for official repositories search
+
+        Returns:
+            AURPackage: package which match the package name
+
+        Raises:
+            NotImplementedError: not implemented method
+        """
+        raise NotImplementedError
+
+    def package_provided_by(self, package_name: str, *, pacman: Pacman | None) -> list[AURPackage]:
+        """
+        get package list which provide the specified package name
+
+        Args:
+            package_name(str): package name to search
+            pacman(Pacman | None): alpm wrapper instance, required for official repositories search
+
+        Returns:
+            list[AURPackage]: list of packages which match the criteria
+        """
+        del package_name, pacman
+        return []
+
+    def package_search(self, *keywords: str, pacman: Pacman | None, search_by: str | None) -> list[AURPackage]:
+        """
+        search package in AUR web
+
+        Args:
+            *keywords(str): keywords to search
+            pacman(Pacman | None): alpm wrapper instance, required for official repositories search
+            search_by(str | None): search by keywords
+
+        Returns:
+            list[AURPackage]: list of packages which match the criteria
+
+        Raises:
+            NotImplementedError: not implemented method
+        """
+        raise NotImplementedError

ahriman-core/src/ahriman/core/alpm/repo.py

@@ -0,0 +1,103 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from pathlib import Path
+
+from ahriman.core.exceptions import BuildError
+from ahriman.core.log import LazyLogging
+from ahriman.core.utils import check_output
+from ahriman.models.repository_paths import RepositoryPaths
+
+
+class Repo(LazyLogging):
+    """
+    repo-add and repo-remove wrapper
+
+    Attributes:
+        name(str): repository name
+        root(Path): repository root
+        sign_args(list[str]): additional args which have to be used to sign repository archive
+        uid(int): uid of the repository owner user
+    """
+
+    def __init__(self, name: str, paths: RepositoryPaths, sign_args: list[str], root: Path | None = None) -> None:
+        """
+        Args:
+            name(str): repository name
+            paths(RepositoryPaths): repository paths instance
+            sign_args(list[str]): additional args which have to be used to sign repository archive
+            root(Path | None, optional): repository root. If none set, the default will be used (Default value = None)
+        """
+        self.name = name
+        self.root = root or paths.repository
+        self.uid, _ = paths.root_owner
+        self.sign_args = sign_args
+
+    @property
+    def repo_path(self) -> Path:
+        """
+        get full path to the repository database
+
+        Returns:
+            Path: path to repository database
+        """
+        return self.root / f"{self.name}.db.tar.gz"
+
+    def add(self, path: Path) -> None:
+        """
+        add new package to repository
+
+        Args:
+            path(Path): path to archive to add
+        """
+        check_output(
+            "repo-add", *self.sign_args, "--remove", str(self.repo_path), str(path),
+            exception=BuildError.from_process(path.name),
+            cwd=self.root,
+            logger=self.logger,
+            user=self.uid,
+        )
+
+    def init(self) -> None:
+        """
+        create empty repository database. It just calls add with empty arguments
+        """
+        check_output("repo-add", *self.sign_args, str(self.repo_path),
+                     cwd=self.root, logger=self.logger, user=self.uid)
+
+    def remove(self, package_name: str, filename: Path) -> None:
+        """
+        remove package from repository
+
+        Args:
+            package_name(str): package name to remove
+            filename(Path): package filename to remove
+        """
+        # remove package and signature (if any) from filesystem
+        for full_path in self.root.glob(f"{filename.name}*"):
+            full_path.unlink()
+
+        # remove package from registry
+        check_output(
+            "repo-remove", *self.sign_args, str(self.repo_path), package_name,
+            exception=BuildError.from_process(package_name),
+            cwd=self.root,
+            logger=self.logger,
+            user=self.uid,
+        )

ahriman-core/src/ahriman/core/build_tools/__init__.py

@@ -0,0 +1,19 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#

ahriman-core/src/ahriman/core/build_tools/package_archive.py

@@ -0,0 +1,263 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from elftools.elf.dynamic import DynamicSection
+from elftools.elf.elffile import ELFFile
+from pathlib import Path
+from typing import IO
+
+from ahriman.core.alpm.pacman import Pacman
+from ahriman.core.alpm.remote import OfficialSyncdb
+from ahriman.core.exceptions import UnknownPackageError
+from ahriman.core.utils import walk
+from ahriman.models.dependencies import Dependencies
+from ahriman.models.filesystem_package import FilesystemPackage
+from ahriman.models.package import Package
+from ahriman.models.scan_paths import ScanPaths
+
+
+class PackageArchive:
+    """
+    helper for package archives
+
+    Attributes:
+        package(Package): package descriptor
+        pacman(Pacman): alpm wrapper instance
+        root(Path): path to root filesystem
+        scan_paths(ScanPaths): scan paths holder
+    """
+
+    def __init__(self, root: Path, package: Package, pacman: Pacman, scan_paths: ScanPaths) -> None:
+        """
+        Args:
+            root(Path): path to root filesystem
+            package(Package): package descriptor
+            pacman(Pacman): alpm wrapper instance
+            scan_paths(ScanPaths): scan paths holder
+        """
+        self.root = root
+        self.package = package
+        self.pacman = pacman
+        self.scan_paths = scan_paths
+
+    @staticmethod
+    def dynamic_needed(binary_path: Path) -> list[str]:
+        """
+        extract dynamic libraries required by the specified file
+
+        Args:
+            binary_path(Path): path to library, file, etc
+
+        Returns:
+            list[str]: libraries which this file linked dynamically. Returns empty set in case if file is not
+            a binary or no dynamic section has been found
+        """
+        with binary_path.open("rb") as binary_file:
+            if not PackageArchive.is_elf(binary_file):
+                return []
+
+            elf_file = ELFFile(binary_file)
+            dynamic_section = next(
+                (section for section in elf_file.iter_sections()
+                 if isinstance(section, DynamicSection)),
+                None)
+            if dynamic_section is None:
+                return []
+
+            return [
+                tag.needed  # type: ignore[attr-defined]
+                for tag in dynamic_section.iter_tags()
+                if tag.entry.d_tag == "DT_NEEDED"
+            ]
+
+    @staticmethod
+    def is_elf(content: IO[bytes]) -> bool:
+        """
+        check if the content is actually elf file
+
+        Args:
+            content(IO[bytes]): content of the file
+
+        Returns:
+            bool: ``True`` in case if file has elf header and ``False`` otherwise
+        """
+        expected = b"\x7fELF"
+        length = len(expected)
+
+        magic_bytes = content.read(length)
+        content.seek(0)  # reset reading position
+
+        return magic_bytes == expected
+
+    def _load_pacman_package(self, path: Path) -> FilesystemPackage:
+        """
+        load pacman package model from path
+
+        Args:
+            path(Path): path to package files database
+
+        Returns:
+            FilesystemPackage: generated pacman package model with empty paths
+        """
+        package_name, *_ = path.parent.name.rsplit("-", maxsplit=2)
+        try:
+            pacman_package = OfficialSyncdb.info(package_name, pacman=self.pacman)
+            return FilesystemPackage(
+                package_name=package_name,
+                depends=set(pacman_package.depends),
+                opt_depends=set(pacman_package.opt_depends),
+            )
+        except UnknownPackageError:
+            return FilesystemPackage(package_name=package_name, depends=set(), opt_depends=set())
+
+    def _raw_dependencies_packages(self) -> dict[Path, list[FilesystemPackage]]:
+        """
+        extract the initial list of packages which contain specific path this package depends on
+
+        Returns:
+            dict[Path, list[FilesystemPackage]]: map of path to packages containing this path
+        """
+        dependencies, roots = self.depends_on_paths()
+        installed_packages = self.installed_packages()
+        # build list of packages, which contains both the package itself and (possible) debug packages
+        packages = list(self.package.packages) + [f"{self.package.base}-debug"]
+
+        # build initial map of file path -> packages containing this path
+        # in fact, keys will contain all libraries the package linked to and all directories it contains
+        dependencies_per_path: dict[Path, list[FilesystemPackage]] = {}
+        for package_base, package in installed_packages.items():
+            if package_base in packages:
+                continue  # skip package itself
+
+            required_by = [directory for directory in package.directories if directory in roots]
+            required_by.extend(library for library in package.files if library.name in dependencies)
+
+            for path in required_by:
+                dependencies_per_path.setdefault(path, []).append(package)
+
+        return dependencies_per_path
+
+    def _refine_dependencies(self, source: dict[Path, list[FilesystemPackage]]) -> dict[Path, list[FilesystemPackage]]:
+        """
+        reduce the initial dependency list by removing packages which are already satisfied (e.g. by other path or by
+        dependency list, or belonging to the base packages)
+
+        Args:
+            source(dict[Path, list[FilesystemPackage]]): the initial map of path to packages containing it
+
+        Returns:
+            dict[Path, list[FilesystemPackage]]: reduced source map of packages
+        """
+        # base packages should be always excluded from checking
+        base_packages = OfficialSyncdb.info("base", pacman=self.pacman).depends
+
+        result: dict[Path, list[FilesystemPackage]] = {}
+        # sort items from children directories to root
+        for path, packages in sorted(source.items(), reverse=True):
+            # skip if this path belongs to the one of the base packages
+            if any(package.package_name in base_packages for package in packages):
+                continue
+
+            # check path against the black/white listed
+            if not self.scan_paths.is_allowed(path):
+                continue
+
+            # remove explicit dependencies
+            packages = [package for package in packages if package.is_root_package(packages, include_optional=False)]
+            # remove optional dependencies
+            packages = [package for package in packages if package.is_root_package(packages, include_optional=True)]
+
+            # check if there is already parent of current path in the result and has the same packages
+            for children_path, children_packages in result.items():
+                if not children_path.is_relative_to(path):
+                    continue
+                children_packages_names = {package.package_name for package in children_packages}
+                packages = [package for package in packages if package.package_name not in children_packages_names]
+
+            result[path] = packages
+
+        return result
+
+    def depends_on(self) -> Dependencies:
+        """
+        extract packages and paths which are required for this package
+
+        Returns:
+            Dependencies: map of the package name to set of paths used by this package
+        """
+        initial_packages = self._raw_dependencies_packages()
+        refined_packages = self._refine_dependencies(initial_packages)
+
+        paths = {
+            str(path): [package.package_name for package in packages]
+            for path, packages in refined_packages.items()
+        }
+        return Dependencies(paths)
+
+    def depends_on_paths(self) -> tuple[set[str], set[Path]]:
+        """
+        extract dependencies from installation
+
+        Returns:
+            tuple[set[str], set[Path]]: tuple of dynamically linked libraries and directory paths
+        """
+        dependencies = set()
+        roots: set[Path] = set()
+
+        for package in self.package.packages:
+            package_dir = self.root / "build" / self.package.base / "pkg" / package
+            for path in filter(lambda p: p.is_file(), walk(package_dir)):
+                dependencies.update(PackageArchive.dynamic_needed(path))
+                filesystem_path = Path(*path.relative_to(package_dir).parts)
+                roots.update(filesystem_path.parents[:-1])  # last element is always . because paths are relative
+
+        return dependencies, roots
+
+    def installed_packages(self) -> dict[str, FilesystemPackage]:
+        """
+        extract list of the installed packages and their content
+
+        Returns:
+            dict[str, FilesystemPackage]: map of package name to list of directories and files contained
+            by this package
+        """
+        result = {}
+
+        pacman_local_files = self.root / "var" / "lib" / "pacman" / "local"
+        for path in filter(lambda fn: fn.name == "files", walk(pacman_local_files)):
+            package = self._load_pacman_package(path)
+
+            is_files_section = False
+            for line in path.read_text(encoding="utf8").splitlines():
+                if not line:  # skip empty lines
+                    continue
+                if line.startswith("%") and line.endswith("%"):  # directive started
+                    is_files_section = line == "%FILES%"
+                if not is_files_section:  # not a files directive
+                    continue
+
+                entry = Path(line)
+                if line.endswith("/"):  # simple check if it is directory
+                    package.directories.append(entry)
+                else:
+                    package.files.append(entry)
+
+            result[package.package_name] = package
+
+        return result

ahriman-core/src/ahriman/core/build_tools/package_version.py

@@ -0,0 +1,114 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from ahriman.core.build_tools.task import Task
+from ahriman.core.configuration import Configuration
+from ahriman.core.log import LazyLogging
+from ahriman.core.utils import full_version, utcnow
+from ahriman.models.package import Package
+from ahriman.models.pkgbuild import Pkgbuild
+
+
+class PackageVersion(LazyLogging):
+    """
+    package version extractor and helper
+
+    Attributes:
+        package(Package): package definitions
+    """
+
+    def __init__(self, package: Package) -> None:
+        """
+        Args:
+            package(Package): package definitions
+        """
+        self.package = package
+
+    def actual_version(self, configuration: Configuration) -> str:
+        """
+        additional method to handle VCS package versions
+
+        Args:
+            configuration(Configuration): configuration instance
+
+        Returns:
+            str: package version if package is not VCS and current version according to VCS otherwise
+        """
+        if not self.package.is_vcs:
+            return self.package.version
+
+        _, repository_id = configuration.check_loaded()
+        paths = configuration.repository_paths
+        task = Task(self.package, configuration, repository_id.architecture, paths)
+
+        try:
+            # create fresh chroot environment, fetch sources and - automagically - update PKGBUILD
+            task.init(paths.cache_for(self.package.base), [], None)
+            pkgbuild = Pkgbuild.from_file(paths.cache_for(self.package.base) / "PKGBUILD")
+
+            return full_version(pkgbuild.get("epoch"), pkgbuild["pkgver"], pkgbuild["pkgrel"])
+        except Exception:
+            self.logger.exception("cannot determine version of VCS package")
+        finally:
+            # clear log files generated by devtools
+            for log_file in paths.cache_for(self.package.base).glob("*.log"):
+                log_file.unlink()
+
+        return self.package.version
+
+    def is_newer_than(self, timestamp: float | int) -> bool:
+        """
+        check if package was built after the specified timestamp
+
+        Args:
+            timestamp(float | int): timestamp to check build date against
+
+        Returns:
+            bool: ``True`` in case if package was built after the specified date and ``False`` otherwise.
+            In case if build date is not set by any of packages, it returns False
+        """
+        return any(
+            package.build_date > timestamp
+            for package in self.package.packages.values()
+            if package.build_date is not None
+        )
+
+    def is_outdated(self, remote: Package, configuration: Configuration, *,
+                    calculate_version: bool = True) -> bool:
+        """
+        check if package is out-of-dated
+
+        Args:
+            remote(Package): package properties from remote source
+            configuration(Configuration): configuration instance
+            calculate_version(bool, optional): expand version to actual value (by calculating git versions)
+                (Default value = True)
+
+        Returns:
+            bool: ``True`` if the package is out-of-dated and ``False`` otherwise
+        """
+        vcs_allowed_age = configuration.getint("build", "vcs_allowed_age", fallback=0)
+        min_vcs_build_date = utcnow().timestamp() - vcs_allowed_age
+
+        if calculate_version and not self.is_newer_than(min_vcs_build_date):
+            remote_version = PackageVersion(remote).actual_version(configuration)
+        else:
+            remote_version = remote.version
+
+        return self.package.vercmp(remote_version) < 0

ahriman-core/src/ahriman/core/build_tools/sources.py

@@ -0,0 +1,435 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import shutil
+
+from collections.abc import Iterator
+from pathlib import Path
+from typing import ClassVar
+
+from ahriman.core.exceptions import CalledProcessError
+from ahriman.core.log import LazyLogging
+from ahriman.core.utils import check_output, utcnow, walk
+from ahriman.models.changes import Changes
+from ahriman.models.package import Package
+from ahriman.models.pkgbuild import Pkgbuild
+from ahriman.models.pkgbuild_patch import PkgbuildPatch
+from ahriman.models.remote_source import RemoteSource
+from ahriman.models.repository_paths import RepositoryPaths
+
+
+class Sources(LazyLogging):
+    """
+    helper to download package sources (PKGBUILD etc...) and perform some operations with git
+
+    Attributes:
+        DEFAULT_BRANCH(str): (class attribute) default branch to process git repositories.
+            Must be used only for local stored repositories, use RemoteSource descriptor instead for real packages
+        DEFAULT_COMMIT_AUTHOR(tuple[str, str]): (class attribute) default commit author to be used if none set
+        GITCONFIG(dict[str, str]): (class attribute) git config options to suppress annoying hints
+    """
+
+    DEFAULT_BRANCH: ClassVar[str] = "master"  # default fallback branch
+    DEFAULT_COMMIT_AUTHOR: ClassVar[tuple[str, str]] = ("ahriman", "ahriman@localhost")
+    GITCONFIG: ClassVar[dict[str, str]] = {
+        "init.defaultBranch": DEFAULT_BRANCH,
+    }
+
+    @staticmethod
+    def changes(source_dir: Path, last_commit_sha: str) -> Changes:
+        """
+        extract changes from the last known commit if available
+
+        Args:
+            source_dir(Path): local path to directory with source files
+            last_commit_sha(str): last known commit hash
+
+        Returns:
+            Changes: changes from the last commit if available
+        """
+        instance = Sources()
+
+        diff = None
+        if instance.fetch_until(source_dir, commit_sha=last_commit_sha) is not None:
+            diff = instance.diff(source_dir, last_commit_sha)
+        pkgbuild = instance.read(source_dir, "HEAD", Path("PKGBUILD"))
+
+        return Changes(last_commit_sha, diff, pkgbuild)
+
+    @staticmethod
+    def extend_architectures(sources_dir: Path, architecture: str) -> list[PkgbuildPatch]:
+        """
+        extend existing PKGBUILD with repository architecture
+
+        Args:
+            sources_dir(Path): local path to directory with source files
+            architecture(str): repository architecture
+
+        Returns:
+            list[PkgbuildPatch]: generated patch for PKGBUILD architectures if required
+        """
+        architectures = Pkgbuild.supported_architectures(sources_dir)
+        if "any" in architectures:  # makepkg does not like when there is any other arch except for any
+            return []
+        architectures.add(architecture)
+        return [PkgbuildPatch("arch", list(architectures))]
+
+    @staticmethod
+    def fetch(sources_dir: Path, remote: RemoteSource) -> str | None:
+        """
+        either clone repository or update it to origin/``remote.branch``
+
+        Args:
+            sources_dir(Path): local path to fetch
+            remote(RemoteSource): remote target (from where to fetch)
+
+        Returns:
+            str | None: current commit sha if available
+        """
+        instance = Sources()
+        # local directory exists and there is .git directory
+        is_initialized_git = (sources_dir / ".git").is_dir()
+        if is_initialized_git and not instance.has_remotes(sources_dir):
+            # there is git repository, but no remote configured so far
+            instance.logger.info("skip update at %s because there are no branches configured", sources_dir)
+            return instance.head(sources_dir)
+
+        branch = remote.branch or instance.DEFAULT_BRANCH
+        if is_initialized_git:
+            instance.logger.info("update HEAD to remote at %s using branch %s", sources_dir, branch)
+            instance.fetch_until(sources_dir, branch=branch)
+        elif remote.git_url is not None:
+            instance.logger.info("clone remote %s to %s using branch %s", remote.git_url, sources_dir, branch)
+            check_output(*instance.git(), "clone", "--quiet", "--depth", "1", "--branch", branch, "--single-branch",
+                         remote.git_url, str(sources_dir), cwd=sources_dir.parent, logger=instance.logger)
+        else:
+            # it will cause an exception later
+            instance.logger.error("%s is not initialized, but no remote provided", sources_dir)
+
+        # and now force reset to our branch
+        check_output(*instance.git(), "checkout", "--force", branch, cwd=sources_dir, logger=instance.logger)
+        check_output(*instance.git(), "reset", "--quiet", "--hard", f"origin/{branch}",
+                     cwd=sources_dir, logger=instance.logger)
+
+        # move content if required
+        # we are using full path to source directory in order to make append possible
+        pkgbuild_dir = remote.pkgbuild_dir or sources_dir.resolve()
+        instance.move((sources_dir / pkgbuild_dir).resolve(), sources_dir)
+
+        return instance.head(sources_dir)
+
+    @staticmethod
+    def has_remotes(sources_dir: Path) -> bool:
+        """
+        check if there are remotes for the repository
+
+        Args:
+            sources_dir(Path): local path to git repository
+
+        Returns:
+            bool: ``True`` in case if there is any remote and false otherwise
+        """
+        instance = Sources()
+        remotes = check_output(*instance.git(), "remote", cwd=sources_dir, logger=instance.logger)
+        return bool(remotes)
+
+    @staticmethod
+    def init(sources_dir: Path) -> None:
+        """
+        create empty git repository at the specified path
+
+        Args:
+            sources_dir(Path): local path to sources
+        """
+        instance = Sources()
+        if not (sources_dir / ".git").is_dir():
+            # skip initializing in case if it was already
+            check_output(*instance.git(), "init", "--quiet", "--initial-branch", instance.DEFAULT_BRANCH,
+                         cwd=sources_dir, logger=instance.logger)
+
+        # extract local files...
+        files = ["PKGBUILD", ".SRCINFO"] + [str(path) for path in Pkgbuild.local_files(sources_dir)]
+        instance.add(sources_dir, *files)
+        # ...and commit them
+        instance.commit(sources_dir)
+
+    @staticmethod
+    def load(sources_dir: Path, package: Package, patches: list[PkgbuildPatch], paths: RepositoryPaths) -> str | None:
+        """
+        fetch sources from remote and apply patches
+
+        Args:
+            sources_dir(Path): local path to fetch
+            package(Package): package definitions
+            patches(list[PkgbuildPatch]): optional patch to be applied
+            paths(RepositoryPaths): repository paths instance
+
+        Returns:
+            str | None: current commit sha if available
+        """
+        instance = Sources()
+        if (cache_dir := paths.cache_for(package.base)).is_dir() and cache_dir != sources_dir:
+            # no need to clone whole repository, just copy from cache first
+            shutil.copytree(cache_dir, sources_dir, dirs_exist_ok=True)
+        last_commit_sha = instance.fetch(sources_dir, package.remote)
+
+        patches.extend(instance.extend_architectures(sources_dir, paths.repository_id.architecture))
+        for patch in patches:
+            instance.patch_apply(sources_dir, patch)
+
+        return last_commit_sha
+
+    @staticmethod
+    def patch_create(sources_dir: Path, *pattern: str) -> str:
+        """
+        create patch set for the specified local path
+
+        Args:
+            sources_dir(Path): local path to git repository
+            *pattern(str): glob patterns
+
+        Returns:
+            str: patch as plain text
+        """
+        instance = Sources()
+        instance.add(sources_dir, *pattern, intent_to_add=True)
+        diff = instance.diff(sources_dir)
+        return f"{diff}\n"  # otherwise, patch will be broken
+
+    @staticmethod
+    def push(sources_dir: Path, remote: RemoteSource, *pattern: str,
+             commit_author: tuple[str, str] | None = None) -> None:
+        """
+        commit selected changes and push files to the remote repository
+
+        Args:
+            sources_dir(Path): local path to git repository
+            remote(RemoteSource): remote target, branch and url
+            *pattern(str): glob patterns
+            commit_author(tuple[str, str] | None, optional): commit author if any (Default value = None)
+        """
+        instance = Sources()
+        instance.add(sources_dir, *pattern)
+        if not instance.commit(sources_dir, commit_author=commit_author):
+            return  # no changes to push, just skip action
+
+        git_url, branch = remote.git_source()
+        check_output(*instance.git(), "push", "--quiet", git_url, branch, cwd=sources_dir, logger=instance.logger)
+
+    def add(self, sources_dir: Path, *pattern: str, intent_to_add: bool = False) -> None:
+        """
+        track found files via git
+
+        Args:
+            sources_dir(Path): local path to git repository
+            *pattern(str): glob patterns
+            intent_to_add(bool, optional): record only the fact that it will be added later, acts as
+                --intent-to-add git flag (Default value = False)
+        """
+        # glob directory to find files which match the specified patterns
+        found_files: list[Path] = []
+        for glob in pattern:
+            found_files.extend(sources_dir.glob(glob))
+        if not found_files:
+            return  # no additional files found
+        self.logger.info("found matching files %s", found_files)
+        # add them to index
+        args = ["--intent-to-add"] if intent_to_add else []
+        check_output(*self.git(), "add", *args, *[str(fn.relative_to(sources_dir)) for fn in found_files],
+                     cwd=sources_dir, logger=self.logger)
+
+    def commit(self, sources_dir: Path, message: str | None = None,
+               commit_author: tuple[str, str] | None = None) -> bool:
+        """
+        commit changes
+
+        Args:
+            sources_dir(Path): local path to git repository
+            message(str | None, optional): optional commit message if any. If none set, message will be generated
+                according to the current timestamp (Default value = None)
+            commit_author(tuple[str, str] | None, optional): optional commit author if any (Default value = None)
+
+        Returns:
+            bool: ``True`` in case if changes have been committed and ``False`` otherwise
+        """
+        if not self.has_changes(sources_dir):
+            return False  # nothing to commit
+
+        if message is None:
+            message = f"Autogenerated commit at {utcnow()}"
+        args = ["--message", message]
+
+        if commit_author is None:
+            commit_author = self.DEFAULT_COMMIT_AUTHOR
+        user, email = commit_author
+        gitconfig = {
+            "user.email": email,
+            "user.name": user,
+        }
+
+        check_output(*self.git(gitconfig), "commit", "--quiet", *args, cwd=sources_dir, logger=self.logger)
+
+        return True
+
+    def diff(self, sources_dir: Path, sha: str | None = None) -> str:
+        """
+        generate diff from the current version and write it to the output file
+
+        Args:
+            sources_dir(Path): local path to git repository
+            sha(str | None, optional): optional commit sha to calculate diff (Default value = None)
+
+        Returns:
+            str: patch as plain string
+        """
+        args = []
+        if sha is not None:
+            args.append(sha)
+        return check_output(*self.git(), "diff", *args, cwd=sources_dir, logger=self.logger)
+
+    def fetch_until(self, sources_dir: Path, *, branch: str | None = None, commit_sha: str | None = None,
+                    max_depth: int = 10) -> str | None:
+        """
+        fetch repository until commit sha
+
+        Args:
+            sources_dir(Path): local path to git repository
+            branch(str | None, optional): use specified branch (Default value = None)
+            commit_sha(str | None, optional): commit hash to fetch. If none set, only one will be fetched
+                (Default value = None)
+            max_depth(int, optional): maximal amount of commits to fetch if ``commit_sha`` is set (Default value = 10)
+
+        Returns:
+            str | None: fetched ``commit_sha`` (if set) and ``None`` in case if commit wasn't found or
+            ``commit_sha`` is not set
+        """
+        commit_sha = commit_sha or "HEAD"  # if none set we just fetch the last commit
+
+        commits_count = 1
+        while commits_count <= max_depth:
+            command = self.git() + ["fetch", "--quiet", "--depth", str(commits_count)]
+            if branch is not None:
+                command += ["origin", branch]
+            check_output(*command, cwd=sources_dir, logger=self.logger)  # fetch one more level
+
+            try:
+                # check if there is an object in current git directory
+                check_output(*self.git(), "cat-file", "-e", commit_sha, cwd=sources_dir, logger=self.logger)
+                return commit_sha  # found the required commit
+            except CalledProcessError:
+                commits_count += 1  # increase depth
+
+        # no commits found at the requested depth
+        return None
+
+    def git(self, gitconfig: dict[str, str] | None = None) -> list[str]:
+        """
+        git command prefix
+
+        Args:
+            gitconfig(dict[str, str] | None, optional): additional git config flags if any (Default value = None)
+
+        Returns:
+            list[str]: git command prefix with valid default flags
+        """
+        gitconfig = gitconfig or {}
+
+        def configuration_flags() -> Iterator[str]:
+            for option, value in (self.GITCONFIG | gitconfig).items():
+                yield "-c"
+                yield f"{option}=\"{value}\""
+
+        return ["git"] + list(configuration_flags())
+
+    def has_changes(self, sources_dir: Path) -> bool:
+        """
+        check if there are changes in current git tree
+
+        Args:
+            sources_dir(Path): local path to git repository
+
+        Returns:
+            bool: ``True`` if there are uncommitted changes and ``False`` otherwise
+        """
+        # there is --exit-code argument to diff, however, there might be other process errors
+        changes = check_output(*self.git(), "diff", "--cached", "--name-only", cwd=sources_dir, logger=self.logger)
+        return bool(changes)
+
+    def head(self, sources_dir: Path, ref_name: str = "HEAD") -> str:
+        """
+        extract HEAD reference for the current git repository
+
+        Args:
+            sources_dir(Path): local path to git repository
+            ref_name(str, optional): reference name (Default value = "HEAD")
+
+        Returns:
+            str: HEAD commit hash
+        """
+        # we might want to parse git files instead though
+        return check_output(*self.git(), "rev-parse", ref_name, cwd=sources_dir, logger=self.logger)
+
+    def move(self, pkgbuild_dir: Path, sources_dir: Path) -> None:
+        """
+        move content from pkgbuild_dir to sources_dir
+
+        Args:
+            pkgbuild_dir(Path): path to directory with pkgbuild from which need to move
+            sources_dir(Path): path to target directory
+        """
+        del self
+        if pkgbuild_dir == sources_dir:
+            return  # directories are the same, no need to move
+        for src in walk(pkgbuild_dir):
+            dst = sources_dir / src.relative_to(pkgbuild_dir)
+            shutil.move(src, dst)
+
+    def patch_apply(self, sources_dir: Path, patch: PkgbuildPatch) -> None:
+        """
+        apply patches if any
+
+        Args:
+            sources_dir(Path): local path to directory with git sources
+            patch(PkgbuildPatch): patch to be applied
+        """
+        # create patch
+        self.logger.info("apply patch %s from database at %s", patch.key, sources_dir)
+        if patch.is_plain_diff:
+            check_output(*self.git(), "apply", "--ignore-space-change", "--ignore-whitespace",
+                         cwd=sources_dir, input_data=patch.serialize(), logger=self.logger)
+        else:
+            patch.write(sources_dir / "PKGBUILD")
+
+    def read(self, sources_dir: Path, commit_sha: str, path: Path) -> str | None:
+        """
+        read file content from the specified commit
+
+        Args:
+            sources_dir(Path): local path to git repository
+            commit_sha(str): commit hash to read from
+            path(Path): path to file inside the repository
+
+        Returns:
+            str | None: file content at specified commit if available
+        """
+        try:
+            return check_output(*self.git(), "show", f"{commit_sha}:{path}", cwd=sources_dir, logger=self.logger)
+        except CalledProcessError:
+            self.logger.exception("failed to read file %s at %s", path, commit_sha)
+            return None

ahriman-core/src/ahriman/core/build_tools/task.py

@@ -0,0 +1,165 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from collections.abc import Iterator
+from pathlib import Path
+
+from ahriman.core.build_tools.sources import Sources
+from ahriman.core.configuration import Configuration
+from ahriman.core.exceptions import BuildError
+from ahriman.core.log import LazyLogging
+from ahriman.core.utils import check_output, package_like
+from ahriman.models.package import Package
+from ahriman.models.pkgbuild_patch import PkgbuildPatch
+from ahriman.models.repository_paths import RepositoryPaths
+
+
+class Task(LazyLogging):
+    """
+    base package build task
+
+    Attributes:
+        archbuild_flags(list[str]): command flags for archbuild command
+        architecture(str): repository architecture
+        build_command(str): build command
+        include_debug_packages(bool): whether to include debug packages or not
+        makechrootpkg_flags(list[str]): command flags for makechrootpkg command
+        makepkg_flags(list[str]): command flags for makepkg command
+        package(Package): package definitions
+        paths(RepositoryPaths): repository paths instance
+        uid(int): uid of the repository owner user
+    """
+
+    def __init__(self, package: Package, configuration: Configuration, architecture: str,
+                 paths: RepositoryPaths) -> None:
+        """
+        Args:
+            package(Package): package definitions
+            configuration(Configuration): configuration instance
+            architecture(str): repository architecture
+            paths(RepositoryPaths): repository paths instance
+        """
+        self.package = package
+        self.paths = paths
+        self.uid, _ = paths.root_owner
+        self.architecture = architecture
+
+        self.archbuild_flags = configuration.getlist("build", "archbuild_flags", fallback=[])
+        self.build_command = configuration.get("build", "build_command")
+        self.include_debug_packages = configuration.getboolean("build", "include_debug_packages", fallback=True)
+        self.makepkg_flags = configuration.getlist("build", "makepkg_flags", fallback=[])
+        self.makechrootpkg_flags = configuration.getlist("build", "makechrootpkg_flags", fallback=[])
+
+    def _package_archives(self, sources_dir: Path, source_files: list[Path]) -> list[Path]:
+        """
+        extract package archives from the directory
+
+        Args:
+            sources_dir(Path): path to where sources are
+            source_files(list[Path]): list of files which were initially in the directory
+
+        Returns:
+            list[Path]: list of file paths which looks like freshly generated archives
+        """
+        def files() -> Iterator[Path]:
+            for filepath in sources_dir.iterdir():
+                if filepath in source_files:
+                    continue  # skip files which were already there
+                if filepath.suffix == ".log":
+                    continue  # skip log files
+                if not package_like(filepath):
+                    continue  # path doesn't look like a package
+                yield filepath
+
+        # debug packages are always formed as package.base-debug
+        # see /usr/share/makepkg/util/pkgbuild.sh for more details
+        debug_package_prefix = f"{self.package.base}-debug-"
+        return [
+            package
+            for package in files()
+            if self.include_debug_packages or not package.name.startswith(debug_package_prefix)
+        ]
+
+    def build(self, sources_dir: Path, *, dry_run: bool = False, **kwargs: str | None) -> list[Path]:
+        """
+        run package build
+
+        Args:
+            sources_dir(Path): path to where sources are
+            dry_run(bool, optional): do not perform build itself (Default value = False)
+            **kwargs(str | None): environment variables to be passed to build processes
+
+        Returns:
+            list[Path]: paths of produced packages
+        """
+        command = [self.build_command, "-r", str(self.paths.chroot)]
+        command.extend(self.archbuild_flags)
+        command.extend(["--", "-D", str(self.paths.archive)] + self.makechrootpkg_flags)
+        command.extend(["--"] + self.makepkg_flags)
+        if dry_run:
+            command.extend(["--nobuild"])
+        self.logger.info("using %s for %s", command, self.package.base)
+
+        environment: dict[str, str] = {
+            key: value
+            for key, value in kwargs.items()
+            if value is not None
+        }
+        self.logger.info("using environment variables %s", environment)
+
+        source_files = list(sources_dir.iterdir())
+        check_output(
+            *command,
+            exception=BuildError.from_process(self.package.base),
+            cwd=sources_dir,
+            logger=self.logger,
+            user=self.uid,
+            environment=environment,
+        )
+
+        return self._package_archives(sources_dir, source_files)
+
+    def init(self, sources_dir: Path, patches: list[PkgbuildPatch], local_version: str | None) -> str | None:
+        """
+        fetch package from git
+
+        Args:
+            sources_dir(Path): local path to fetch
+            patches(list[PkgbuildPatch]): list of patches for the package
+            local_version(str | None): local version of the package. If set and equal to current version, it will
+                automatically bump pkgrel
+
+        Returns:
+            str | None: current commit sha if available
+        """
+        last_commit_sha = Sources.load(sources_dir, self.package, patches, self.paths)
+        if self.package.is_vcs:  # if package is VCS, then make sure to update PKGBUILD to the latest version
+            self.build(sources_dir, dry_run=True)
+
+        if local_version is None:  # there is no local package or pkgrel increment is disabled
+            return last_commit_sha
+
+        # load fresh package
+        loaded_package = Package.from_build(sources_dir, self.architecture, None)
+        if (pkgrel := loaded_package.next_pkgrel(local_version)) is not None:
+            self.logger.info("package %s is the same as in repo, bumping pkgrel to %s", self.package.base, pkgrel)
+            patch = PkgbuildPatch("pkgrel", pkgrel)
+            patch.write(sources_dir / "PKGBUILD")
+
+        return last_commit_sha

ahriman-core/src/ahriman/core/configuration/__init__.py

@@ -0,0 +1,20 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from ahriman.core.configuration.configuration import Configuration

ahriman-core/src/ahriman/core/configuration/configuration.py

@@ -0,0 +1,419 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+# pylint: disable=too-many-public-methods
+import configparser
+import os
+import shlex
+import sys
+
+from pathlib import Path
+from typing import Any, ClassVar, Self
+
+from ahriman.core.configuration.configuration_multi_dict import ConfigurationMultiDict
+from ahriman.core.configuration.shell_interpolator import ShellInterpolator
+from ahriman.core.exceptions import InitializeError
+from ahriman.models.repository_id import RepositoryId
+from ahriman.models.repository_paths import RepositoryPaths
+
+
+class Configuration(configparser.RawConfigParser):
+    """
+    extension for built-in configuration parser
+
+    Attributes:
+        ARCHITECTURE_SPECIFIC_SECTIONS(list[str]): (class attribute) known sections which can be architecture specific.
+            Required by dump and merging functions
+        SYSTEM_CONFIGURATION_PATH(Path): (class attribute) default system configuration path distributed by package
+        includes(list[Path]): list of includes which were read
+        path(Path | None): path to root configuration file
+
+    Examples:
+        Configuration class provides additional method in order to handle application configuration. Since this class is
+        derived from built-in :class:`configparser.RawConfigParser` class, the same flow is applicable here.
+        Nevertheless, it is recommended to use :func:`from_path()` class method which also calls initialization
+        methods::
+
+            >>> from pathlib import Path
+            >>>
+            >>> configuration = Configuration.from_path(Path("/etc/ahriman.ini"), RepositoryId("x86_64", "aur"))
+            >>> repository_name = configuration.get("repository", "name")
+            >>> makepkg_flags = configuration.getlist("build", "makepkg_flags")
+
+        The configuration instance loaded in this way will contain only sections which are defined for the specified
+        architecture according to the merge rules. Moreover, the architecture names will be removed from section names.
+
+        In order to get current settings, the :func:`check_loaded()` method can be used. This method will raise an
+        :exc:`ahriman.core.exceptions.InitializeError` in case if configuration was not yet loaded::
+
+            >>> path, repository_id = configuration.check_loaded()
+    """
+
+    _LEGACY_ARCHITECTURE_SPECIFIC_SECTIONS = ["web"]
+    ARCHITECTURE_SPECIFIC_SECTIONS: ClassVar[list[str]] = ["alpm", "build", "sign"]
+    SYSTEM_CONFIGURATION_PATH: ClassVar[Path] = Path(sys.prefix) / "share" / "ahriman" / "settings" / "ahriman.ini"
+
+    def __init__(self, allow_no_value: bool = False, allow_multi_key: bool = True) -> None:
+        """
+        Args:
+            allow_no_value(bool, optional): copies :class:`configparser.RawConfigParser` behavior. In case if it is set
+                to ``True``, the keys without values will be allowed (Default value = False)
+            allow_multi_key(bool, optional): if set to ``False``, then the default dictionary class will be used to
+                store keys internally. Otherwise, the special implementation will be used, which supports arrays
+                (Default value = True)
+        """
+        configparser.RawConfigParser.__init__(
+            self,
+            dict_type=ConfigurationMultiDict if allow_multi_key else dict,
+            allow_no_value=allow_no_value,
+            strict=False,
+            empty_lines_in_values=not allow_multi_key,
+            interpolation=ShellInterpolator(),
+            converters={
+                "intlist": lambda value: list(map(int, shlex.split(value))),
+                "list": shlex.split,
+                "path": self._convert_path,
+                "pathlist": lambda value: list(map(self._convert_path, shlex.split(value))),
+            },
+        )
+
+        self._repository_id: RepositoryId | None = None
+        self.path: Path | None = None
+        self.includes: list[Path] = []
+
+    @property
+    def architecture(self) -> str:
+        """
+        repository architecture for backward compatibility
+
+        Returns:
+            str: repository architecture
+        """
+        _, repository_id = self.check_loaded()
+        return repository_id.architecture
+
+    @property
+    def include(self) -> Path:
+        """
+        get full path to include directory
+
+        Returns:
+            Path: path to directory with configuration includes
+        """
+        return self.getpath("settings", "include")
+
+    @property
+    def logging_path(self) -> Path:
+        """
+        get full path to logging configuration
+
+        Returns:
+            Path: path to logging configuration
+        """
+        return self.getpath("settings", "logging")
+
+    @property
+    def repository_id(self) -> RepositoryId | None:
+        """
+        repository identifier
+
+        Returns:
+            RepositoryId: repository unique identifier
+        """
+        return self._repository_id
+
+    @repository_id.setter
+    def repository_id(self, repository_id: RepositoryId | None) -> None:
+        """
+        setter for repository identifier
+
+        Args:
+            repository_id(RepositoryId | None): repository unique identifier
+        """
+        self._repository_id = repository_id
+        if repository_id is None or repository_id.is_empty:
+            self.remove_option("repository", "name")
+            self.remove_option("repository", "architecture")
+        else:
+            self.set_option("repository", "name", repository_id.name)
+            self.set_option("repository", "architecture", repository_id.architecture)
+
+    @property
+    def repository_name(self) -> str:
+        """
+        repository name for backward compatibility
+
+        Returns:
+            str: repository name
+        """
+        _, repository_id = self.check_loaded()
+        return repository_id.name
+
+    @property
+    def repository_paths(self) -> RepositoryPaths:
+        """
+        construct RepositoryPaths instance based on the configuration
+
+        Returns:
+            RepositoryPaths: repository paths instance
+        """
+        _, repository_id = self.check_loaded()
+        return RepositoryPaths(self.getpath("repository", "root"), repository_id)
+
+    @classmethod
+    def from_path(cls, path: Path, repository_id: RepositoryId) -> Self:
+        """
+        constructor with full object initialization
+
+        Args:
+            path(Path): path to root configuration file
+            repository_id(RepositoryId): repository unique identifier
+
+        Returns:
+            Self: configuration instance
+        """
+        configuration = cls()
+        configuration.load(path)
+        configuration.load_environment()
+        configuration.merge_sections(repository_id)
+        return configuration
+
+    @staticmethod
+    def section_name(section: str, *suffixes: str | None) -> str:
+        """
+        generate section name for sections which depends on context
+
+        Args:
+            section(str): section name
+            *suffixes(str | None): session suffix, e.g. repository architecture
+
+        Returns:
+            str: correct section name for repository specific section
+        """
+        for suffix in filter(bool, suffixes):
+            section = f"{section}:{suffix}"
+        return section
+
+    def _convert_path(self, value: str) -> Path:
+        """
+        convert string value to path object
+
+        Args:
+            value(str): string configuration value
+
+        Returns:
+            Path: path object which represents the configuration value
+        """
+        path = Path(value)
+        if self.path is None or path.is_absolute():
+            return path
+        return self.path.parent / path
+
+    def check_loaded(self) -> tuple[Path, RepositoryId]:
+        """
+        check if service was actually loaded
+
+        Returns:
+            tuple[Path, RepositoryId]: configuration root path and architecture if loaded
+
+        Raises:
+            InitializeError: in case if architecture and/or path are not set
+        """
+        if self.path is None or self.repository_id is None:
+            raise InitializeError("Configuration path and/or repository id are not set")
+        return self.path, self.repository_id
+
+    def copy_from(self, configuration: Self) -> None:
+        """
+        copy values from another instance overriding existing
+
+        Args:
+            configuration(Self): configuration instance to merge from
+        """
+        for section in configuration.sections():
+            for key, value in configuration.items(section):
+                self.set_option(section, key, value)
+
+    def dump(self) -> dict[str, dict[str, str]]:
+        """
+        dump configuration to dictionary
+
+        Returns:
+            dict[str, dict[str, str]]: configuration dump for specific architecture
+        """
+        return {
+            section: dict(self.items(section))
+            for section in self.sections()
+            if self[section]
+        }
+
+    # pylint and mypy are too stupid to find these methods
+    # pylint: disable=missing-function-docstring,unused-argument
+    def getintlist(self, *args: Any, **kwargs: Any) -> list[int]: ...  # type: ignore[empty-body]
+
+    def getlist(self, *args: Any, **kwargs: Any) -> list[str]: ...  # type: ignore[empty-body]
+
+    def getpath(self, *args: Any, **kwargs: Any) -> Path: ...  # type: ignore[empty-body]
+
+    def getpathlist(self, *args: Any, **kwargs: Any) -> list[Path]: ...  # type: ignore[empty-body]
+
+    def gettype(self, section: str, repository_id: RepositoryId, *, fallback: str | None = None) -> tuple[str, str]:
+        """
+        get type variable with fallback to old logic. Despite the fact that it has same semantics as other get* methods,
+        but it has different argument list
+
+        Args:
+            section(str): section name
+            repository_id(RepositoryId): repository unique identifier
+            fallback(str | None, optional): optional fallback type if any. If set, second element of the tuple will
+                be always set to this value (Default value = None)
+
+        Returns:
+            tuple[str, str]: section name and found type name
+
+        Raises:
+            configparser.NoSectionError: in case if no section found
+        """
+        if (group_type := self.get(section, "type", fallback=fallback)) is not None:
+            return section, group_type  # new-style logic
+        # okay lets check for the section with architecture name
+        for specific in self.override_sections(section, repository_id):
+            if self.has_section(specific):
+                return specific, section
+        # okay lets just use section as type
+        if self.has_section(section):
+            return section, section
+        raise configparser.NoSectionError(section)
+
+    def load(self, path: Path) -> None:
+        """
+        fully load configuration
+
+        Args:
+            path(Path): path to root configuration file
+        """
+        if not path.is_file():  # fallback to the system file
+            path = self.SYSTEM_CONFIGURATION_PATH
+        self.path = path
+
+        self.read(self.path)
+        self.load_includes()  # load includes
+
+    def load_environment(self) -> None:
+        """
+        load environment variables into configuration
+        """
+        for name, value in os.environ.items():
+            if ":" not in name:
+                continue
+            section, key = name.rsplit(":", maxsplit=1)
+            self.set_option(section, key, value)
+
+    def load_includes(self, path: Path | None = None) -> None:
+        """
+        load configuration includes from specified path
+
+        Args:
+            path(Path | None, optional): path to directory with include files. If none set, the default path will be
+                used (Default value = None)
+        """
+        self.includes = []  # reset state
+
+        try:
+            path = path or self.include
+            for include in sorted(path.glob("*.ini")):
+                if include == self.logging_path:
+                    continue  # we don't want to load logging explicitly
+                self.read(include)
+                self.includes.append(include)
+        except (FileNotFoundError, configparser.NoOptionError, configparser.NoSectionError):
+            pass
+
+    def merge_sections(self, repository_id: RepositoryId) -> None:
+        """
+        merge architecture and repository specific sections into main configuration
+
+        Args:
+            repository_id(RepositoryId): repository unique identifier
+        """
+        self.repository_id = repository_id
+
+        for section in self.ARCHITECTURE_SPECIFIC_SECTIONS + self._LEGACY_ARCHITECTURE_SPECIFIC_SECTIONS:
+            for specific in self.override_sections(section, repository_id):
+                if self.has_section(specific):
+                    # if there is no such section it means that there is no overrides for this arch,
+                    # but we anyway will have to delete sections for others architectures
+                    for key, value in self[specific].items():
+                        self.set_option(section, key, value)
+
+            # remove any arch/repo specific section
+            for foreign in self.sections():
+                # we would like to use lambda filter here, but pylint is too dumb
+                if not foreign.startswith(f"{section}:"):
+                    continue
+                self.remove_section(foreign)
+
+    def override_sections(self, section: str, repository_id: RepositoryId) -> list[str]:
+        """
+        extract override sections
+
+        Args:
+            section(str): section name
+            repository_id(RepositoryId): repository unique identifier
+
+        Returns:
+            list[str]: architecture and repository specific sections in correct order
+        """
+        if repository_id.is_empty:  # special case, guess sections from configuration
+            return sorted(specific for specific in self.sections() if specific.startswith(f"{section}:"))
+        # the valid order is global < per architecture < per repository < per repository and architecture
+        return [
+            Configuration.section_name(section, repository_id.architecture),  # architecture specific override
+            Configuration.section_name(section, repository_id.name),  # override with repository name
+            Configuration.section_name(section, repository_id.name, repository_id.architecture),  # both
+        ]
+
+    def reload(self) -> None:
+        """
+        reload configuration if possible or raise exception otherwise
+        """
+        # get current properties and validate input
+        path, repository_id = self.check_loaded()
+
+        # clear current content
+        for section in self.sections():
+            self.remove_section(section)
+
+        # create another instance and copy values from there
+        instance = self.from_path(path, repository_id)
+        self.copy_from(instance)
+
+    def set_option(self, section: str, option: str, value: str) -> None:
+        """
+        set option. Unlike default :func:`configparser.RawConfigParser.set()` it also creates section if
+        it does not exist
+
+        Args:
+            section(str): section name
+            option(str): option name
+            value(str): option value as string in parsable format
+        """
+        if not self.has_section(section):
+            self.add_section(section)
+        self.set(section, option, value)

ahriman-core/src/ahriman/core/configuration/configuration_multi_dict.py

@@ -0,0 +1,91 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from typing import Any
+
+from ahriman.core.exceptions import OptionError
+
+
+class ConfigurationMultiDict(dict[str, Any]):
+    """
+    wrapper around :class:`dict` to handle multiple configuration keys as lists if they end with ``[]``.
+
+    Examples:
+        This class is designed to be used only with :class:`configparser.RawConfigParser` class, but idea is that
+        if the key ends with ``[]`` it will be treated as array and the result will be appended to the current value.
+        In addition, if the value is empty, then it will clear previous values, e.g.:
+
+            >>> data = ConfigurationMultiDict()
+            >>>
+            >>> data["single"] = "value"  # append normal key
+            >>> print(data)  # {"single": "value"}
+            >>>
+            >>> data["array[]"] = ["value1"]  # append array value
+            >>> data["array[]"] = ["value2"]
+            >>> print(data)  # {"single": "value", "array": ["value1 value2"]}
+            >>>
+            >>> data["array[]"] = [""]  # clear previous values
+            >>> data["array[]"] = ["value3"]
+            >>> print(data)  # {"single": "value", "array": ["value3"]}
+    """
+
+    def _set_array_value(self, key: str, value: Any) -> None:
+        """
+        set array value. If the key already exists in the dictionary, its value will be prepended to new value
+
+        Args:
+            key(str): key to insert
+            value(Any): value of the related key
+
+        Raises:
+            OptionError: if the key already exists in the dictionary, but not a single value list or a string
+        """
+        match self.get(key):
+            case [current_value] | (str() as current_value):
+                value = f"{current_value} {value}"
+            case None:
+                pass
+            case other:
+                raise OptionError(other)
+        super().__setitem__(key, [value])
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        """
+        set ``key`` to ``value``. If the value equals to ``[""]`` (array with empty string), then the key
+        will be removed (as expected from :class:`configparser.RawConfigParser`). If the key ends with
+        ``[]``, the value will be treated as an array and vice versa.
+
+        Args:
+            key(str): key to insert
+            value(Any): value of the related key
+
+        Raises:
+            OptionError: if ``key`` contains ``[]``, but not at the end of the string (e.g. ``prefix[]suffix``)
+        """
+        real_key, is_key_array, remaining = key.partition("[]")
+        if remaining:
+            raise OptionError(key)
+
+        match value:
+            case [""]:  # empty value key
+                self.pop(real_key, None)
+            case [array_value] if is_key_array:  # update array value
+                self._set_array_value(real_key, array_value)
+            case _:  # normal key
+                super().__setitem__(real_key, value)

ahriman-core/src/ahriman/core/configuration/schema.py

@@ -0,0 +1,458 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from typing import Any
+
+
+__all__ = ["CONFIGURATION_SCHEMA", "ConfigurationSchema"]
+
+
+ConfigurationSchema = dict[str, dict[str, Any]]
+
+
+CONFIGURATION_SCHEMA: ConfigurationSchema = {
+    "settings": {
+        "type": "dict",
+        "schema": {
+            "apply_migrations": {
+                "type": "boolean",
+                "coerce": "boolean",
+            },
+            "database": {
+                "type": "path",
+                "coerce": "absolute_path",
+                "required": True,
+            },
+            "include": {
+                "type": "path",
+                "coerce": "absolute_path",
+                "path_exists": True,
+                "path_type": "dir",
+            },
+            "logging": {
+                "type": "path",
+                "coerce": "absolute_path",
+                "required": True,
+                "path_exists": True,
+                "path_type": "file",
+            },
+        },
+    },
+    "alpm": {
+        "type": "dict",
+        "schema": {
+            "database": {
+                "type": "path",
+                "coerce": "absolute_path",
+                "required": True,
+            },
+            "mirror": {
+                "type": "string",
+                "required": True,
+                "empty": False,
+                "is_url": [],
+            },
+            "repositories": {
+                "type": "list",
+                "coerce": "list",
+                "schema": {
+                    "type": "string",
+                    "empty": False,
+                },
+                "required": True,
+                "empty": False,
+            },
+            "root": {
+                "type": "path",
+                "coerce": "absolute_path",
+                "required": True,
+                "path_exists": True,
+                "path_type": "dir",
+            },
+            "sync_files_database": {
+                "type": "boolean",
+                "coerce": "boolean",
+                "required": True,
+            },
+            "use_ahriman_cache": {
+                "type": "boolean",
+                "coerce": "boolean",
+                "required": True,
+            },
+        },
+    },
+    "aur": {
+        "type": "dict",
+        "schema": {
+            "max_retries": {
+                "type": "integer",
+                "coerce": "integer",
+                "min": 0,
+            },
+            "retry_backoff": {
+                "type": "float",
+                "coerce": "float",
+                "min": 0,
+            },
+            "timeout": {
+                "type": "integer",
+                "coerce": "integer",
+                "min": 0,
+            },
+        },
+    },
+    "auth": {
+        "type": "dict",
+        "schema": {
+            "target": {
+                "type": "string",
+                "oneof": [
+                    {"allowed": ["disabled"]},
+                    {"allowed": ["configuration", "mapping"]},
+                    {"allowed": ["oauth"], "dependencies": [
+                        "client_id",
+                        "client_secret",
+                        "oauth_provider",
+                        "oauth_scopes",
+                    ]},
+                    {"allowed": ["pam"], "dependencies": ["full_access_group"]},
+                ],
+            },
+            "allow_read_only": {
+                "type": "boolean",
+                "coerce": "boolean",
+                "required": True,
+            },
+            "client_id": {
+                "type": "string",
+                "empty": False,
+            },
+            "client_secret": {
+                "type": "string",
+                "empty": False,
+            },
+            "cookie_secret_key": {
+                "type": "string",
+                "minlength": 32,
+                "maxlength": 64,  # we cannot verify maxlength, because base64 representation might be longer than bytes
+            },
+            "full_access_group": {
+                "type": "string",
+                "empty": False,
+            },
+            "max_age": {
+                "type": "integer",
+                "coerce": "integer",
+                "min": 0,
+            },
+            "oauth_provider": {
+                "type": "string",
+                "empty": False,
+            },
+            "oauth_scopes": {
+                "type": "string",
+                "empty": False,
+            },
+            "permit_root_login": {
+                "type": "boolean",
+                "coerce": "boolean",
+            },
+            "salt": {
+                "type": "string",
+            },
+        },
+    },
+    "build": {
+        "type": "dict",
+        "schema": {
+            "archbuild_flags": {
+                "type": "list",
+                "coerce": "list",
+                "schema": {
+                    "type": "string",
+                    "empty": False,
+                },
+            },
+            "build_command": {
+                "type": "string",
+                "required": True,
+                "empty": False,
+            },
+            "ignore_packages": {
+                "type": "list",
+                "coerce": "list",
+                "schema": {
+                    "type": "string",
+                    "empty": False,
+                },
+            },
+            "include_debug_packages": {
+                "type": "boolean",
+                "coerce": "boolean",
+            },
+            "makepkg_flags": {
+                "type": "list",
+                "coerce": "list",
+                "schema": {
+                    "type": "string",
+                    "empty": False,
+                },
+            },
+            "makechrootpkg_flags": {
+                "type": "list",
+                "coerce": "list",
+                "schema": {
+                    "type": "string",
+                    "empty": False,
+                },
+            },
+            "scan_paths": {
+                "type": "list",
+                "coerce": "list",
+                "schema": {
+                    "type": "string",
+                    "empty": False,
+                },
+            },
+            "triggers": {
+                "type": "list",
+                "coerce": "list",
+                "schema": {
+                    "type": "string",
+                    "empty": False,
+                },
+            },
+            "triggers_known": {
+                "type": "list",
+                "coerce": "list",
+                "schema": {
+                    "type": "string",
+                    "empty": False,
+                },
+            },
+            "vcs_allowed_age": {
+                "type": "integer",
+                "coerce": "integer",
+                "min": 0,
+            },
+            "workers": {
+                "type": "list",
+                "coerce": "list",
+                "schema": {
+                    "type": "string",
+                    "empty": False,
+                    "is_url": [],
+                },
+            },
+        },
+    },
+    "repository": {
+        "type": "dict",
+        "schema": {
+            "architecture": {
+                "type": "string",
+                "empty": False,
+            },
+            "name": {
+                "type": "string",
+                "empty": False,
+            },
+            "root": {
+                "type": "path",
+                "coerce": "absolute_path",
+                "required": True,
+                "path_exists": True,
+                "path_type": "dir",
+            },
+        },
+    },
+    "sign": {
+        "type": "dict",
+        "allow_unknown": True,
+        "schema": {
+            "target": {
+                "type": "list",
+                "coerce": "list",
+                "oneof": [
+                    {"allowed": []},
+                    {"allowed": ["package", "repository"], "dependencies": ["key"]},
+                ],
+            },
+            "key": {
+                "type": "string",
+                "empty": False,
+            },
+        },
+    },
+    "status": {
+        "type": "dict",
+        "schema": {
+            "enabled": {
+                "type": "boolean",
+                "coerce": "boolean",
+            },
+            "address": {
+                "type": "string",
+                "empty": False,
+                "is_url": [],
+            },
+            "max_retries": {
+                "type": "integer",
+                "coerce": "integer",
+                "min": 0,
+            },
+            "password": {
+                "type": "string",
+                "empty": False,
+            },
+            "retry_backoff": {
+                "type": "float",
+                "coerce": "float",
+                "min": 0,
+            },
+            "suppress_http_log_errors": {
+                "type": "boolean",
+                "coerce": "boolean",
+            },
+            "timeout": {
+                "type": "integer",
+                "coerce": "integer",
+                "min": 0,
+            },
+            "username": {
+                "type": "string",
+                "empty": False,
+            },
+        },
+    },
+    "web": {
+        "type": "dict",
+        "schema": {
+            "address": {
+                "type": "string",
+                "empty": False,
+                "is_url": ["http", "https"],
+            },
+            "autorefresh_intervals": {
+                "type": "list",
+                "coerce": "list",
+                "schema": {
+                    "type": "integer",
+                    "coerce": "integer",
+                    "min": 0,
+                },
+            },
+            "cors_allow_headers": {
+                "type": "list",
+                "coerce": "list",
+                "schema": {
+                    "type": "string",
+                    "empty": False,
+                },
+            },
+            "cors_allow_methods": {
+                "type": "list",
+                "coerce": "list",
+                "schema": {
+                    "type": "string",
+                    "empty": False,
+                },
+            },
+            "cors_allow_origins": {
+                "type": "list",
+                "coerce": "list",
+                "schema": {
+                    "type": "string",
+                    "empty": False,
+                },
+            },
+            "cors_expose_headers": {
+                "type": "list",
+                "coerce": "list",
+                "schema": {
+                    "type": "string",
+                    "empty": False,
+                },
+            },
+            "enable_archive_upload": {
+                "type": "boolean",
+                "coerce": "boolean",
+            },
+            "host": {
+                "type": "string",
+                "empty": False,
+                "is_ip_address": ["localhost"],
+            },
+            "index_url": {
+                "type": "string",
+                "empty": False,
+                "is_url": ["http", "https"],
+            },
+            "max_body_size": {
+                "type": "integer",
+                "coerce": "integer",
+                "min": 0,
+            },
+            "port": {
+                "type": "integer",
+                "coerce": "integer",
+                "min": 0,
+                "max": 65535,
+            },
+            "service_only": {
+                "type": "boolean",
+                "coerce": "boolean",
+            },
+            "static_path": {
+                "type": "path",
+                "coerce": "absolute_path",
+                "required": True,
+                "path_exists": True,
+                "path_type": "dir",
+            },
+            "template": {
+                "type": "string",
+                "empty": False,
+            },
+            "templates": {
+                "type": "list",
+                "coerce": "list",
+                "schema": {
+                    "type": "path",
+                    "coerce": "absolute_path",
+                    "path_exists": True,
+                    "path_type": "dir",
+                },
+                "empty": False,
+            },
+            "unix_socket": {
+                "type": "path",
+                "coerce": "absolute_path",
+            },
+            "unix_socket_unsafe": {
+                "type": "boolean",
+                "coerce": "boolean",
+            },
+            "wait_timeout": {
+                "type": "integer",
+                "coerce": "integer",
+            }
+        },
+    },
+}

ahriman-core/src/ahriman/core/configuration/shell_interpolator.py

@@ -0,0 +1,122 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import configparser
+import os
+import sys
+
+from collections.abc import Iterator, Mapping, MutableMapping
+from string import Template
+from typing import Any, ClassVar
+
+from ahriman.core.configuration.shell_template import ShellTemplate
+
+
+class ShellInterpolator(configparser.Interpolation):
+    """
+    custom string interpolator, because we cannot use defaults argument due to config validation
+    """
+
+    DATA_LINK_ESCAPE: ClassVar[str] = "\x10"
+
+    @staticmethod
+    def _extract_variables(parser: MutableMapping[str, Mapping[str, str]], value: str,
+                           defaults: Mapping[str, str]) -> Iterator[tuple[str, str]]:
+        """
+        extract keys and values (if available) from the configuration. In case if a key is not available, it will be
+        silently skipped from the result
+
+        Args:
+            parser(MutableMapping[str, Mapping[str, str]]): option parser
+            value(str): source (not-converted) value
+            defaults(Mapping[str, str]): default values
+
+        Yields:
+            tuple[str, str]: variable name used for substitution and its value
+        """
+        def identifiers() -> Iterator[tuple[str | None, str]]:
+            # extract all found identifiers and parse them
+            for identifier in ShellTemplate(value).get_identifiers():
+                match identifier.rsplit(":", maxsplit=1):
+                    case [lookup_option]:  # single option from the same section
+                        yield None, lookup_option
+                    case [lookup_section, lookup_option]:  # reference to another section
+                        yield lookup_section, lookup_option
+
+        for section, option in identifiers():
+            # key to be substituted
+            key = f"{section}:{option}" if section else option
+
+            if section is not None:  # foreign section case
+                if section not in parser:
+                    continue  # section was not found, silently skip it
+                values = parser[section]
+            else:  # same section
+                values = defaults
+
+            if (raw := values.get(option)) is not None:
+                yield key, raw
+
+    @staticmethod
+    def environment() -> dict[str, str]:
+        """
+        extract environment variables
+
+        Returns:
+            dict[str, str]: environment variables and some custom variables
+        """
+        return os.environ | {
+            "prefix": sys.prefix,
+        }
+
+    def before_get(self, parser: MutableMapping[str, Mapping[str, str]], section: Any, option: Any, value: str,
+                   defaults: Mapping[str, str]) -> str:
+        """
+        interpolate option value
+
+        Notes:
+            This method is using :class:`string.Template` class in order to render both cross-references and
+            environment variables, because it seems that it is the most legit way to handle it. In addition,
+            we are using shell-like variables in some cases (see :attr:`alpm.mirror` option),  thus we would like
+            to keep them alive.
+
+            First this method resolves substitution from the configuration and then renders environment variables
+
+        Args:
+            parser(MutableMapping[str, Mapping[str, str]]): option parser
+            section(Any): section name
+            option(Any): option name
+            value(str): source (not-converted) value
+            defaults(Mapping[str, str]): default values
+
+        Returns:
+            str: substituted value
+        """
+        # because any substitution effectively replace escaped $ ($$) in result, we have to escape it manually
+        escaped = value.replace("$$", self.DATA_LINK_ESCAPE)
+
+        # resolve internal references
+        variables = dict(self._extract_variables(parser, value, defaults))
+        internal = ShellTemplate(escaped).safe_substitute(variables)
+
+        # resolve enriched environment variables by using default Template class
+        environment = Template(internal).safe_substitute(self.environment())
+
+        # replace escaped values back
+        return environment.replace(self.DATA_LINK_ESCAPE, "$")

ahriman-core/src/ahriman/core/configuration/shell_template.py

@@ -0,0 +1,155 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import fnmatch
+import re
+
+from collections.abc import Iterator, Mapping
+from string import Template
+
+
+class ShellTemplate(Template):
+    """
+    extension to the default :class:`Template` class, which also adds additional tokens to braced regex and enables
+    bash expansion
+    """
+
+    braceidpattern = r"(?a:[_a-z0-9][^}]*)"
+
+    _REMOVE_BACK = re.compile(r"^(?P<key>\w+)%(?P<pattern>.+)$")
+    _REMOVE_FRONT = re.compile(r"^(?P<key>\w+)#(?P<pattern>.+)$")
+    _REPLACE = re.compile(r"^(?P<key>\w+)/(?P<pattern>.+)/(?P<replacement>.+)$")
+
+    @staticmethod
+    def _remove_back(source: str, pattern: str, *, greedy: bool) -> str:
+        """
+        resolve "${var%(%)pattern}" constructions
+
+        Args:
+            source(str): source string to match the pattern inside
+            pattern(str): shell expression to match
+            greedy(bool): match as much as possible or not
+
+        Returns:
+            str: result after removal ``pattern`` from the end of the string
+        """
+        regex = fnmatch.translate(pattern)
+        compiled = re.compile(regex)
+
+        result = source
+        start_pos = 0
+
+        while m := compiled.search(source, start_pos):
+            result = source[:m.start()]
+            start_pos += m.start() + 1
+            if greedy:
+                break
+
+        return result
+
+    @staticmethod
+    def _remove_front(source: str, pattern: str, *, greedy: bool) -> str:
+        """
+        resolve "${var#(#)pattern}" constructions
+
+        Args:
+            source(str): source string to match the pattern inside
+            pattern(str): shell expression to match
+            greedy(bool): match as much as possible or not
+
+        Returns:
+            str: result after removal ``pattern`` from the start of the string
+        """
+        regex = fnmatch.translate(pattern)[:-2]  # remove \Z at the end of the regex
+        if not greedy:
+            regex = regex.replace("*", "*?")
+        compiled = re.compile(regex)
+
+        m = compiled.match(source)
+        if m is None:
+            return source
+
+        return source[m.end():]
+
+    @staticmethod
+    def _replace(source: str, pattern: str, replacement: str, *, greedy: bool) -> str:
+        """
+        resolve "${var/(/)pattern/replacement}" constructions
+
+        Args:
+            source(str): source string to match the pattern inside
+            pattern(str): shell expression to match
+            replacement(str): new substring
+            greedy(bool): replace as much as possible or not
+
+        Returns:
+            str: result after replacing ``pattern`` by ``replacement``
+        """
+        match pattern:
+            case from_back if from_back.startswith("%"):
+                removed = ShellTemplate._remove_back(source, from_back[1:], greedy=False)
+                return removed if removed == source else removed + replacement
+
+            case from_front if from_front.startswith("#"):
+                removed = ShellTemplate._remove_front(source, from_front[1:], greedy=False)
+                return removed if removed == source else replacement + removed
+
+            case regular:
+                regex = fnmatch.translate(regular)[:-2]  # remove \Z at the end of the regex
+                compiled = re.compile(regex)
+                return compiled.sub(replacement, source, count=not greedy)
+
+    def shell_substitute(self, mapping: Mapping[str, str], /, **kwargs: str) -> str:
+        """
+        this method behaves the same as :func:`safe_substitute`, however also expands bash string operations
+
+        Args:
+            mapping(Mapping[str, str]): key-value dictionary of variables
+            **kwargs(str): key-value dictionary of variables passed as kwargs
+
+        Returns:
+            str: string with replaced values
+        """
+        substitutions = (
+            (self._REMOVE_BACK, self._remove_back, "%"),
+            (self._REMOVE_FRONT, self._remove_front, "#"),
+            (self._REPLACE, self._replace, "/"),
+        )
+
+        def generator(variables: dict[str, str]) -> Iterator[tuple[str, str]]:
+            for identifier in self.get_identifiers():
+                for regex, function, greediness in substitutions:
+                    if m := regex.match(identifier):
+                        source = variables.get(m.group("key"))
+                        if source is None:
+                            continue
+
+                        # replace pattern with non-greedy
+                        pattern = m.group("pattern").removeprefix(greediness)
+                        greedy = m.group("pattern").startswith(greediness)
+                        # gather all additional args
+                        args = {key: value for key, value in m.groupdict().items() if key not in ("key", "pattern")}
+
+                        yield identifier, function(source, pattern, **args, greedy=greedy)
+                        break
+
+        kwargs.update(mapping)
+        kwargs.update(dict(generator(kwargs)))
+
+        return self.safe_substitute(kwargs)

ahriman-core/src/ahriman/core/configuration/validator.py

@@ -0,0 +1,194 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import ipaddress
+
+from cerberus import TypeDefinition, Validator as RootValidator  # type: ignore[import-untyped]
+from pathlib import Path
+from typing import Any
+from urllib.parse import urlparse
+
+from ahriman.core.configuration import Configuration
+
+
+class Validator(RootValidator):
+    """
+    class which defines custom validation methods for the service configuration
+
+    Attributes:
+        configuration(Configuration): configuration instance
+    """
+
+    types_mapping = RootValidator.types_mapping | {
+        "path": TypeDefinition("path", (Path,), ()),
+    }
+
+    def __init__(self, *args: Any, **kwargs: Any) -> None:
+        """
+        Args:
+            configuration(Configuration): configuration instance used for extraction
+            *args(Any): positional arguments to be passed to base validator
+            **kwargs(Any): keyword arguments to be passed to base validator
+        """
+        RootValidator.__init__(self, *args, **kwargs)
+        self.configuration: Configuration = kwargs["configuration"]
+
+    def _normalize_coerce_absolute_path(self, value: str) -> Path:
+        """
+        extract path from string value
+
+        Args:
+            value(str): converting value
+
+        Returns:
+            Path: value converted to path instance according to configuration rules
+        """
+        converted: Path = self.configuration.converters["path"](value)
+        return converted
+
+    def _normalize_coerce_boolean(self, value: str) -> bool:
+        """
+        extract boolean from string value
+
+        Args:
+            value(str): converting value
+
+        Returns:
+            bool: value converted to boolean according to configuration rules
+        """
+        # pylint: disable=protected-access
+        converted: bool = self.configuration._convert_to_boolean(value)  # type: ignore[attr-defined]
+        return converted
+
+    def _normalize_coerce_float(self, value: str) -> float:
+        """
+        extract float from string value
+
+        Args:
+            value(str): converting value
+
+        Returns:
+            float: value converted to float according to configuration rules
+        """
+        del self
+        return float(value)
+
+    def _normalize_coerce_integer(self, value: str) -> int:
+        """
+        extract integer from string value
+
+        Args:
+            value(str): converting value
+
+        Returns:
+            int: value converted to int according to configuration rules
+        """
+        del self
+        return int(value)
+
+    def _normalize_coerce_list(self, value: str) -> list[str]:
+        """
+        extract string list from string value
+
+        Args:
+            value(str): converting value
+
+        Returns:
+            list[str]: value converted to string list instance according to configuration rules
+        """
+        converted: list[str] = self.configuration.converters["list"](value)
+        return converted
+
+    def _validate_is_ip_address(self, constraint: list[str], field: str, value: str) -> None:
+        """
+        check if the specified value is valid ip address
+
+        Args:
+            constraint(list[str]): optional list of allowed special words (e.g. ``localhost``)
+            field(str): field name to be checked
+            value(str): value to be checked
+
+        Examples:
+            The rule's arguments are validated against this schema:
+            {"type": "list", "schema": {"type": "string"}}
+        """
+        if value in constraint:
+            return
+        try:
+            ipaddress.ip_address(value)
+        except ValueError:
+            self._error(field, f"Value {value} must be valid IP address")
+
+    def _validate_is_url(self, constraint: list[str], field: str, value: str) -> None:
+        """
+        check if the specified value is a valid url
+
+        Args:
+            constraint(list[str]): optional list of supported schemas. If empty, no schema validation will be performed
+            field(str): field name to be checked
+            value(str): value to be checked
+
+        Examples:
+            The rule's arguments are validated against this schema:
+            {"type": "list", "schema": {"type": "string"}}
+        """
+        match urlparse(value):  # it probably will never rise exceptions on parse
+            case url if not url.scheme:
+                self._error(field, f"Url scheme is not set for {value}")
+            case url if not url.netloc and url.scheme not in ("file",):
+                self._error(field, f"Location must be set for url {value} of scheme {url.scheme}")
+            case url if constraint and url.scheme not in constraint:
+                self._error(field, f"Url {value} scheme must be one of {constraint}")
+
+    def _validate_path_exists(self, constraint: bool, field: str, value: Path) -> None:
+        """
+        check if paths exists
+
+        Args:
+            constraint(bool): ``True`` in case if path must exist and ``False`` otherwise
+            field(str): field name to be checked
+            value(Path): value to be checked
+
+        Examples:
+            The rule's arguments are validated against this schema:
+            {"type": "boolean"}
+        """
+        match value.exists():
+            case True if not constraint:
+                self._error(field, f"Path {value} must not exist")
+            case False if constraint:
+                self._error(field, f"Path {value} must exist")
+
+    def _validate_path_type(self, constraint: str, field: str, value: Path) -> None:
+        """
+        check if paths is file, directory or whatever. The match will be performed as call of ``is_{constraint}``
+        method of the path object
+
+        Args:
+            constraint(str): path type to be matched
+            field(str): field name to be checked
+            value(Path): value to be checked
+
+        Examples:
+            The rule's arguments are validated against this schema:
+            {"type": "string"}
+        """
+        fn = getattr(value, f"is_{constraint}")
+        if not fn():
+            self._error(field, f"Path {value} must be type of {constraint}")

ahriman-core/src/ahriman/core/database/__init__.py

@@ -0,0 +1,20 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from ahriman.core.database.sqlite import SQLite

ahriman-core/src/ahriman/core/database/migrations/__init__.py

@@ -0,0 +1,175 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from collections.abc import Callable
+from importlib import import_module
+from pathlib import Path
+from pkgutil import iter_modules
+from sqlite3 import Connection, Cursor
+
+from ahriman.core.configuration import Configuration
+from ahriman.core.log import LazyLogging
+from ahriman.models.migration import Migration
+from ahriman.models.migration_result import MigrationResult
+
+
+class Migrations(LazyLogging):
+    """
+    simple migration wrapper for the sqlite
+    idea comes from https://www.ash.dev/blog/simple-migration-system-in-sqlite/
+
+    Attributes:
+        configuration(Configuration): configuration instance
+        connection(Connection): database connection
+    """
+
+    def __init__(self, connection: Connection, configuration: Configuration) -> None:
+        """
+        Args:
+            connection(Connection): database connection
+            configuration(Configuration): configuration instance
+        """
+        self.connection = connection
+        self.configuration = configuration
+
+    @staticmethod
+    def migrate(connection: Connection, configuration: Configuration) -> MigrationResult:
+        """
+        perform migrations implicitly
+
+        Args:
+            connection(Connection): database connection
+            configuration(Configuration): configuration instance
+
+        Returns:
+            MigrationResult: current schema version
+        """
+        return Migrations(connection, configuration).run()
+
+    def apply_migrations(self, migrations: list[Migration]) -> None:
+        """
+        perform migrations explicitly
+
+        Args:
+            migrations(list[Migration]): list of migrations to perform
+        """
+        previous_isolation = self.connection.isolation_level
+        try:
+            self.connection.isolation_level = None
+            cursor = self.connection.cursor()
+            try:
+                cursor.execute("begin exclusive")
+                for migration in migrations:
+                    self.perform_migration(cursor, migration)
+            except Exception:
+                self.logger.exception("migration failed with exception")
+                cursor.execute("rollback")
+                raise
+            else:
+                cursor.execute("commit")
+            finally:
+                cursor.close()
+        finally:
+            self.connection.isolation_level = previous_isolation
+
+    def migrations(self) -> list[Migration]:
+        """
+        extract all migrations from the current package
+        idea comes from https://julienharbulot.com/python-dynamical-import.html
+
+        Returns:
+            list[Migration]: list of found migrations
+        """
+        migrations: list[Migration] = []
+
+        package_dir = Path(__file__).resolve().parent
+        modules = [module_name for (_, module_name, _) in iter_modules([str(package_dir)])]
+
+        for index, module_name in enumerate(sorted(modules)):
+            module = import_module(f"{__name__}.{module_name}")
+
+            steps: list[str] = getattr(module, "steps", [])
+            self.logger.debug("found migration %s at index %s with steps count %s", module_name, index, len(steps))
+
+            migrate_data: Callable[[Connection, Configuration], None] = \
+                getattr(module, "migrate_data", lambda *args: None)
+
+            migrations.append(
+                Migration(
+                    index=index,
+                    name=module_name,
+                    steps=steps,
+                    migrate_data=migrate_data
+                )
+            )
+
+        return migrations
+
+    def perform_migration(self, cursor: Cursor, migration: Migration) -> None:
+        """
+        perform single migration
+
+        Args:
+            cursor(Cursor): connection cursor
+            migration(Migration): single migration to perform
+        """
+        self.logger.info("applying table migration %s at index %s", migration.name, migration.index)
+        for statement in migration.steps:
+            cursor.execute(statement)
+        self.logger.info("table migration %s at index %s has been applied", migration.name, migration.index)
+
+        self.logger.info("perform data migration %s at index %s", migration.name, migration.index)
+        migration.migrate_data(self.connection, self.configuration)
+        self.logger.info(
+            "data migration %s at index %s has been performed",
+            migration.name, migration.index)
+
+    def run(self) -> MigrationResult:
+        """
+        perform migrations
+
+        Return:
+            MigrationResult: current schema version
+        """
+        migrations = self.migrations()
+
+        current_version = self.user_version()
+        expected_version = len(migrations)
+        result = MigrationResult(old_version=current_version, new_version=expected_version)
+
+        if not result.is_outdated:
+            self.logger.info("no migrations required")
+            return result
+
+        self.apply_migrations(migrations[current_version:])
+        self.connection.execute(f"pragma user_version = {expected_version}")  # no support for ? placeholders
+
+        self.logger.info("migrations have been performed from version %s to %s", result.old_version, result.new_version)
+        return result
+
+    def user_version(self) -> int:
+        """
+        get schema version from sqlite database
+
+        Returns:
+            int: current schema version
+        """
+        cursor = self.connection.execute("pragma user_version")
+        current_version: int = cursor.fetchone()["user_version"]
+        return current_version

ahriman-core/src/ahriman/core/database/migrations/m000_initial.py

@@ -0,0 +1,191 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import json
+
+from sqlite3 import Connection
+
+from ahriman.core.configuration import Configuration
+from ahriman.models.build_status import BuildStatus
+from ahriman.models.package import Package
+from ahriman.models.repository_paths import RepositoryPaths
+
+
+__all__ = ["migrate_data", "steps"]
+
+
+steps = [
+    """
+    create table build_queue (
+        package_base text not null unique,
+        properties json not null
+    )
+    """,
+    """
+    create table package_bases (
+        package_base text not null unique,
+        version text not null,
+        aur_url text not null
+    )
+    """,
+    """
+    create table package_statuses (
+        package_base text not null unique,
+        status text not null,
+        last_updated integer
+    )
+    """,
+    """
+    create table packages (
+        package text not null,
+        package_base text not null,
+        architecture text,
+        archive_size integer,
+        build_date integer,
+        depends json,
+        description text,
+        filename text,
+        "groups" json,
+        installed_size integer,
+        licenses json,
+        provides json,
+        url text,
+        unique (package, architecture)
+    )
+    """,
+    """
+    create table patches (
+        package_base text not null unique,
+        patch blob not null
+    )
+    """,
+    """
+    create table users (
+        username text not null unique,
+        access text not null,
+        password text
+    )
+    """,
+]
+
+
+def migrate_data(connection: Connection, configuration: Configuration) -> None:
+    """
+    perform data migration
+
+    Args:
+        connection(Connection): database connection
+        configuration(Configuration): configuration instance
+    """
+    migrate_package_statuses(connection, configuration.repository_paths)
+    migrate_patches(connection, configuration.repository_paths)
+    migrate_users_data(connection, configuration)
+
+
+def migrate_package_statuses(connection: Connection, paths: RepositoryPaths) -> None:
+    """
+    perform migration for package statuses
+
+    Args:
+        connection(Connection): database connection
+        paths(RepositoryPaths): repository paths instance
+    """
+    def insert_base(metadata: Package, last_status: BuildStatus) -> None:
+        connection.execute(
+            """
+            insert into package_bases
+            (package_base, version, aur_url)
+            values
+            (:package_base, :version, :aur_url)
+            """,
+            {"package_base": metadata.base, "version": metadata.version, "aur_url": ""})
+        connection.execute(
+            """
+            insert into package_statuses
+            (package_base, status, last_updated)
+            values
+            (:package_base, :status, :last_updated)""",
+            {"package_base": metadata.base, "status": last_status.status.value, "last_updated": last_status.timestamp})
+
+    def insert_packages(metadata: Package) -> None:
+        package_list = []
+        for name, description in metadata.packages.items():
+            package_list.append({"package": name, "package_base": metadata.base, **description.view()})
+        connection.executemany(
+            """
+            insert into packages
+            (package, package_base, architecture, archive_size, build_date, depends, description,
+            filename, "groups", installed_size, licenses, provides, url)
+            values
+            (:package, :package_base, :architecture, :archive_size, :build_date, :depends, :description,
+            :filename, :groups, :installed_size, :licenses, :provides, :url)
+            """,
+            package_list)
+
+    cache_path = paths.root / "status_cache.json"
+    if not cache_path.is_file():
+        return  # no file found
+    with cache_path.open(encoding="utf8") as cache:
+        dump = json.load(cache)
+
+    for item in dump.get("packages", []):
+        package = Package.from_json(item["package"])
+        status = BuildStatus.from_json(item["status"])
+        insert_base(package, status)
+        insert_packages(package)
+
+
+def migrate_patches(connection: Connection, paths: RepositoryPaths) -> None:
+    """
+    perform migration for patches
+
+    Args:
+        connection(Connection): database connection
+        paths(RepositoryPaths): repository paths instance
+    """
+    root = paths.root / "patches"
+    if not root.is_dir():
+        return  # no directory found
+
+    for package in root.iterdir():
+        patch_path = package / "00-main.patch"
+        if not patch_path.is_file():
+            continue  # not exist
+        content = patch_path.read_text(encoding="utf8")
+        connection.execute(
+            """insert into patches (package_base, patch) values (:package_base, :patch)""",
+            {"package_base": package.name, "patch": content})
+
+
+def migrate_users_data(connection: Connection, configuration: Configuration) -> None:
+    """
+    perform migration for users
+
+    Args:
+        connection(Connection): database connection
+        configuration(Configuration): configuration instance
+    """
+    for section in configuration.sections():
+        for option, value in configuration[section].items():
+            if not section.startswith("auth:"):
+                continue
+            access = section[5:]
+            connection.execute(
+                """insert into users (username, access, password) values (:username, :access, :password)""",
+                {"username": option.lower(), "access": access, "password": value})

ahriman-core/src/ahriman/core/database/migrations/m001_package_source.py

@@ -0,0 +1,113 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from sqlite3 import Connection
+
+from ahriman.core.configuration import Configuration
+from ahriman.models.package_source import PackageSource
+from ahriman.models.remote_source import RemoteSource
+from ahriman.models.repository_paths import RepositoryPaths
+
+
+__all__ = ["migrate_data", "steps"]
+
+
+steps = [
+    """
+    alter table package_bases add column branch text
+    """,
+    """
+    alter table package_bases add column git_url text
+    """,
+    """
+    alter table package_bases add column path text
+    """,
+    """
+    alter table package_bases add column web_url text
+    """,
+    """
+    alter table package_bases add column source text
+    """,
+    """
+    alter table package_bases drop column aur_url
+    """,
+]
+
+
+def migrate_data(connection: Connection, configuration: Configuration) -> None:
+    """
+    perform data migration
+
+    Args:
+        connection(Connection): database connection
+        configuration(Configuration): configuration instance
+    """
+    migrate_package_remotes(connection, configuration.repository_paths)
+
+
+# pylint: disable=protected-access
+def migrate_package_remotes(connection: Connection, paths: RepositoryPaths) -> None:
+    """
+    perform migration for package remote sources
+
+    Args:
+        connection(Connection): database connection
+        paths(RepositoryPaths): repository paths instance
+    """
+    from ahriman.core.alpm.remote import AUR
+    from ahriman.models.package import Package
+
+    def get_packages() -> dict[str, Package]:
+        return {
+            row["package_base"]: Package(
+                base=row["package_base"],
+                version=row["version"],
+                remote=RemoteSource.from_json(row),
+                packages={},
+                packager=row.get("packager") or None,
+            ) for row in connection.execute("""select * from package_bases""")
+        }
+
+    def insert_remote(base: str, remote: RemoteSource) -> None:
+        connection.execute(
+            """
+            update package_bases set
+            branch = :branch, git_url = :git_url, path = :path,
+            web_url = :web_url, source = :source
+            where package_base = :package_base
+            """,
+            {
+                "package_base": base,
+                "branch": remote.branch, "git_url": remote.git_url, "path": remote.path,
+                "web_url": remote.web_url, "source": remote.source
+            }
+        )
+
+    for package_base, package in get_packages().items():
+        local_cache = paths.cache_for(package_base)
+        if local_cache.exists() and not package.is_vcs:
+            continue  # skip packages which are not VCS and with local cache
+        remote_source = RemoteSource(
+            source=PackageSource.AUR,
+            git_url=AUR.remote_git_url(package_base, "aur"),
+            web_url=AUR.remote_web_url(package_base),
+            path=".",
+            branch="master",
+        )
+        insert_remote(package_base, remote_source)