Release 2.21.1

fix: always load tab on remount
it fixes a bug, which leads to missing tab content load when opening package info
2026-07-21 18:01:14 +00:00 · 2026-07-21 10:46:21 +03:00 · 2026-07-21 10:44:20 +03:00 · 2026-07-21 00:24:44 +03:00 · 2026-07-21 00:22:07 +03:00 · 2026-07-21 00:22:07 +03:00
917 changed files with 8865 additions and 4437 deletions
@@ -0,0 +1,5 @@
+[tool.bandit]
+skips = [
+    "B404",
+    "B603",
+]
@@ -1,3 +0,0 @@
-skips:
-  - B404
-  - B603
@@ -12,11 +12,11 @@ pacman -Syyu --noconfirm
 # main dependencies
 pacman -S --noconfirm devtools git npm pyalpm python-bcrypt python-filelock python-inflection python-pyelftools python-requests python-systemd sudo
 # make dependencies
-pacman -S --noconfirm --asdeps base-devel python-build python-flit python-installer python-tox python-wheel
+pacman -S --noconfirm --asdeps base-devel python-build python-hatchling python-installer python-tox python-wheel
 # optional dependencies
 if [[ -z $MINIMAL_INSTALL ]]; then
    # web server
-    pacman -S --noconfirm python-aioauth-client python-aiohttp python-aiohttp-apispec-git python-aiohttp-cors python-aiohttp-jinja2 python-aiohttp-security python-aiohttp-session python-cryptography python-jinja
+    pacman -S --noconfirm python-aioauth-client python-aiohttp python-aiohttp-apispec-git python-aiohttp-cors python-aiohttp-jinja2 python-aiohttp-security python-aiohttp-session python-aiohttp-sse-git python-cryptography python-jinja
    # additional features
    pacman -S --noconfirm gnupg ipython python-boto3 python-cerberus python-matplotlib rsync
 fi
@@ -26,10 +26,10 @@ cp "docker/systemd-nspawn.sh" "/usr/local/bin/systemd-nspawn"
 # create fresh tarball
 tox -e archive
 # run makepkg
-PKGVER=$(python -c "from src.ahriman import __version__; print(__version__)")
-mv "dist/ahriman-$PKGVER.tar.gz" package/archlinux
-chmod +777 package/archlinux  # because fuck you that's why
-cd package/archlinux
+PKGVER=$(PYTHONPATH=ahriman-core/src python -c "from ahriman import __version__; print(__version__)")
+mv "dist/ahriman-$PKGVER.tar.gz" archlinux
+chmod +777 archlinux  # because fuck you that's why
+cd archlinux
 sudo -u nobody -- makepkg -cf --skipchecksums --noconfirm
 sudo -u nobody -- makepkg --packagelist | grep "ahriman-core-$PKGVER" | pacman -U --noconfirm --nodeps -
 if [[ -z $MINIMAL_INSTALL ]]; then
@@ -26,6 +26,10 @@ jobs:

      - uses: docker/setup-buildx-action@v3

+      - name: Set image date
+        id: args
+        run: echo "date=$(date -d yesterday +'%Y-%m-%d')" >> "$GITHUB_OUTPUT"
+
      - name: Login to docker hub
        uses: docker/login-action@v3
        with:
@@ -53,6 +57,8 @@ jobs:
      - name: Build an image and push
        uses: docker/build-push-action@v6
        with:
+          build-args: |
+            BUILD_DATE=${{ steps.args.outputs.date }}
          file: docker/Dockerfile
          push: true
          tags: ${{ steps.meta.outputs.tags }}
@@ -26,7 +26,7 @@ jobs:

      - name: Extract version
        id: version
-        run: echo ::set-output name=VERSION::${GITHUB_REF#refs/tags/}
+        run: echo "version=${GITHUB_REF#refs/tags/}" >> "$GITHUB_OUTPUT"

      - name: Create changelog
        id: changelog
@@ -38,7 +38,7 @@ jobs:
      - name: Create archive
        run: tox -e archive
        env:
-          VERSION: ${{ steps.version.outputs.VERSION }}
+          VERSION: ${{ steps.version.outputs.version }}

      - name: Publish release
        uses: softprops/action-gh-release@v2
@@ -27,7 +27,7 @@ jobs:
      - uses: actions/checkout@v4

      - name: Setup the minimal service in arch linux container
-        run: .github/workflows/setup.sh minimal
+        run: .github/scripts/setup.sh minimal

  run-setup:

@@ -43,4 +43,4 @@ jobs:
      - uses: actions/checkout@v4

      - name: Setup the service in arch linux container
-        run: .github/workflows/setup.sh
+        run: .github/scripts/setup.sh
@@ -103,5 +103,8 @@ docs/html/
 # Frontend
 node_modules/
 package-lock.json
-package/share/ahriman/templates/static/index.js
-package/share/ahriman/templates/static/index.css
+ahriman-web/package/share/ahriman/templates/static/index.js
+ahriman-web/package/share/ahriman/templates/static/index.css
+
+# local configs
+/*.ini
@@ -1,5 +0,0 @@
-[pytest]
-addopts = --cov=ahriman --cov-report=term-missing:skip-covered --no-cov-on-fail --cov-fail-under=100 --spec
-asyncio_default_fixture_loop_scope = function
-asyncio_mode = auto
-spec_test_format = {result} {docstring_summary}
@@ -0,0 +1,8 @@
+[pytest]
+addopts = [
+    "--spec",
+]
+asyncio_default_fixture_loop_scope = "function"
+asyncio_mode = "auto"
+"resource-path.directory-name-test-resources" = "../../tests/testresources"
+spec_test_format = "{result} {docstring_summary}"
@@ -1,15 +1,18 @@
 version: 2

 build:
-  os: ubuntu-20.04
+  os: ubuntu-lts-latest
  tools:
-    python: "3.12"
+    python: "3.14"
  apt_packages:
    - graphviz

 python:
  install:
    - requirements: docs/requirements.txt
+    - path: ahriman-core
+    - path: ahriman-triggers
+    - path: ahriman-web

 formats:
  - pdf
@@ -42,6 +42,8 @@ retry_backoff = 1.0
 ;include_debug_packages = yes
 ; List of additional flags passed to makechrootpkg command.
 ;makechrootpkg_flags =
+; Minimal age in seconds since the latest AUR package modification before automatic updates are allowed.
+;min_age = 0
 ; List of additional flags passed to makepkg command.
 makepkg_flags = --nocolor --ignorearch
 ; List of paths to be used for implicit dependency scan. Regular expressions are supported.
@@ -1,9 +1,9 @@
 # AUTOMATICALLY GENERATED by `shtab`

-_shtab_ahriman_subparsers=('add' 'aur-search' 'check' 'clean' 'config' 'config-validate' 'copy' 'daemon' 'help' 'help-commands-unsafe' 'help-updates' 'help-version' 'init' 'key-import' 'package-add' 'package-changes' 'package-changes-remove' 'package-copy' 'package-remove' 'package-status' 'package-status-remove' 'package-status-update' 'package-update' 'patch-add' 'patch-list' 'patch-remove' 'patch-set-add' 'rebuild' 'remove' 'remove-unknown' 'repo-backup' 'repo-check' 'repo-clean' 'repo-config' 'repo-config-validate' 'repo-create-keyring' 'repo-create-mirrorlist' 'repo-daemon' 'repo-init' 'repo-rebuild' 'repo-remove-unknown' 'repo-report' 'repo-restore' 'repo-setup' 'repo-sign' 'repo-statistics' 'repo-status-update' 'repo-sync' 'repo-tree' 'repo-triggers' 'repo-update' 'report' 'run' 'search' 'service-clean' 'service-config' 'service-config-validate' 'service-key-import' 'service-repositories' 'service-run' 'service-setup' 'service-shell' 'service-tree-migrate' 'setup' 'shell' 'sign' 'status' 'status-update' 'sync' 'update' 'user-add' 'user-list' 'user-remove' 'version' 'web' 'web-reload')
+_shtab_ahriman_subparsers=('add' 'aur-search' 'check' 'clean' 'config' 'config-validate' 'copy' 'daemon' 'help' 'help-commands-unsafe' 'help-updates' 'help-version' 'init' 'key-import' 'package-add' 'package-archives' 'package-changes' 'package-changes-remove' 'package-copy' 'package-hold' 'package-pkgbuild' 'package-pkgbuild-remove' 'package-remove' 'package-rollback' 'package-status' 'package-status-remove' 'package-status-update' 'package-unhold' 'package-update' 'patch-add' 'patch-list' 'patch-remove' 'patch-set-add' 'rebuild' 'remove' 'remove-unknown' 'repo-backup' 'repo-check' 'repo-clean' 'repo-config' 'repo-config-validate' 'repo-create-keyring' 'repo-create-mirrorlist' 'repo-daemon' 'repo-init' 'repo-rebuild' 'repo-remove-unknown' 'repo-report' 'repo-restore' 'repo-setup' 'repo-sign' 'repo-statistics' 'repo-status-update' 'repo-sync' 'repo-tree' 'repo-triggers' 'repo-update' 'report' 'run' 'search' 'service-clean' 'service-config' 'service-config-validate' 'service-key-import' 'service-repositories' 'service-run' 'service-setup' 'service-shell' 'service-tree-migrate' 'setup' 'shell' 'sign' 'status' 'status-update' 'sync' 'update' 'user-add' 'user-list' 'user-remove' 'version' 'web' 'web-reload')

 _shtab_ahriman_option_strings=('-h' '--help' '-a' '--architecture' '-c' '--configuration' '--force' '-l' '--lock' '--log-handler' '-q' '--quiet' '--report' '--no-report' '-r' '--repository' '--unsafe' '-V' '--version' '--wait-timeout')
-_shtab_ahriman_add_option_strings=('-h' '--help' '--changes' '--no-changes' '--dependencies' '--no-dependencies' '-e' '--exit-code' '--increment' '--no-increment' '-n' '--now' '-y' '--refresh' '-s' '--source' '-u' '--username' '-v' '--variable')
+_shtab_ahriman_add_option_strings=('-h' '--help' '--changes' '--no-changes' '--dependencies' '--no-dependencies' '-e' '--exit-code' '--increment' '--no-increment' '-n' '--now' '-s' '--source' '-u' '--username' '-v' '--variable' '-y' '--refresh')
 _shtab_ahriman_aur_search_option_strings=('-h' '--help' '-e' '--exit-code' '--info' '--no-info' '--sort-by')
 _shtab_ahriman_check_option_strings=('-h' '--help' '--changes' '--no-changes' '--check-files' '--no-check-files' '-e' '--exit-code' '--vcs' '--no-vcs' '-y' '--refresh')
 _shtab_ahriman_clean_option_strings=('-h' '--help' '--cache' '--no-cache' '--chroot' '--no-chroot' '--manual' '--no-manual' '--packages' '--no-packages' '--pacman' '--no-pacman')
@@ -17,15 +17,21 @@ _shtab_ahriman_help_updates_option_strings=('-h' '--help' '-e' '--exit-code')
 _shtab_ahriman_help_version_option_strings=('-h' '--help')
 _shtab_ahriman_init_option_strings=('-h' '--help' '--build-as-user' '--from-configuration' '--generate-salt' '--no-generate-salt' '--makeflags-jobs' '--no-makeflags-jobs' '--mirror' '--multilib' '--no-multilib' '--packager' '--server' '--sign-key' '--sign-target' '--web-port' '--web-unix-socket')
 _shtab_ahriman_key_import_option_strings=('-h' '--help' '--key-server')
-_shtab_ahriman_package_add_option_strings=('-h' '--help' '--changes' '--no-changes' '--dependencies' '--no-dependencies' '-e' '--exit-code' '--increment' '--no-increment' '-n' '--now' '-y' '--refresh' '-s' '--source' '-u' '--username' '-v' '--variable')
+_shtab_ahriman_package_add_option_strings=('-h' '--help' '--changes' '--no-changes' '--dependencies' '--no-dependencies' '-e' '--exit-code' '--increment' '--no-increment' '-n' '--now' '-s' '--source' '-u' '--username' '-v' '--variable' '-y' '--refresh')
+_shtab_ahriman_package_archives_option_strings=('-h' '--help' '-e' '--exit-code' '--info' '--no-info')
 _shtab_ahriman_package_changes_option_strings=('-h' '--help' '-e' '--exit-code')
 _shtab_ahriman_package_changes_remove_option_strings=('-h' '--help')
 _shtab_ahriman_package_copy_option_strings=('-h' '--help' '-e' '--exit-code' '--remove')
+_shtab_ahriman_package_hold_option_strings=('-h' '--help')
+_shtab_ahriman_package_pkgbuild_option_strings=('-h' '--help' '-e' '--exit-code')
+_shtab_ahriman_package_pkgbuild_remove_option_strings=('-h' '--help')
 _shtab_ahriman_package_remove_option_strings=('-h' '--help')
+_shtab_ahriman_package_rollback_option_strings=('-h' '--help' '--hold' '--no-hold' '-u' '--username')
 _shtab_ahriman_package_status_option_strings=('-h' '--help' '--ahriman' '-e' '--exit-code' '--info' '--no-info' '-s' '--status')
 _shtab_ahriman_package_status_remove_option_strings=('-h' '--help')
 _shtab_ahriman_package_status_update_option_strings=('-h' '--help' '-s' '--status')
-_shtab_ahriman_package_update_option_strings=('-h' '--help' '--changes' '--no-changes' '--dependencies' '--no-dependencies' '-e' '--exit-code' '--increment' '--no-increment' '-n' '--now' '-y' '--refresh' '-s' '--source' '-u' '--username' '-v' '--variable')
+_shtab_ahriman_package_unhold_option_strings=('-h' '--help')
+_shtab_ahriman_package_update_option_strings=('-h' '--help' '--changes' '--no-changes' '--dependencies' '--no-dependencies' '-e' '--exit-code' '--increment' '--no-increment' '-n' '--now' '-s' '--source' '-u' '--username' '-v' '--variable' '-y' '--refresh')
 _shtab_ahriman_patch_add_option_strings=('-h' '--help')
 _shtab_ahriman_patch_list_option_strings=('-h' '--help' '-e' '--exit-code' '-v' '--variable')
 _shtab_ahriman_patch_remove_option_strings=('-h' '--help' '-v' '--variable')
@@ -82,7 +88,7 @@ _shtab_ahriman_web_reload_option_strings=('-h' '--help')



-_shtab_ahriman_pos_0_choices=('add' 'aur-search' 'check' 'clean' 'config' 'config-validate' 'copy' 'daemon' 'help' 'help-commands-unsafe' 'help-updates' 'help-version' 'init' 'key-import' 'package-add' 'package-changes' 'package-changes-remove' 'package-copy' 'package-remove' 'package-status' 'package-status-remove' 'package-status-update' 'package-update' 'patch-add' 'patch-list' 'patch-remove' 'patch-set-add' 'rebuild' 'remove' 'remove-unknown' 'repo-backup' 'repo-check' 'repo-clean' 'repo-config' 'repo-config-validate' 'repo-create-keyring' 'repo-create-mirrorlist' 'repo-daemon' 'repo-init' 'repo-rebuild' 'repo-remove-unknown' 'repo-report' 'repo-restore' 'repo-setup' 'repo-sign' 'repo-statistics' 'repo-status-update' 'repo-sync' 'repo-tree' 'repo-triggers' 'repo-update' 'report' 'run' 'search' 'service-clean' 'service-config' 'service-config-validate' 'service-key-import' 'service-repositories' 'service-run' 'service-setup' 'service-shell' 'service-tree-migrate' 'setup' 'shell' 'sign' 'status' 'status-update' 'sync' 'update' 'user-add' 'user-list' 'user-remove' 'version' 'web' 'web-reload')
+_shtab_ahriman_pos_0_choices=('add' 'aur-search' 'check' 'clean' 'config' 'config-validate' 'copy' 'daemon' 'help' 'help-commands-unsafe' 'help-updates' 'help-version' 'init' 'key-import' 'package-add' 'package-archives' 'package-changes' 'package-changes-remove' 'package-copy' 'package-hold' 'package-pkgbuild' 'package-pkgbuild-remove' 'package-remove' 'package-rollback' 'package-status' 'package-status-remove' 'package-status-update' 'package-unhold' 'package-update' 'patch-add' 'patch-list' 'patch-remove' 'patch-set-add' 'rebuild' 'remove' 'remove-unknown' 'repo-backup' 'repo-check' 'repo-clean' 'repo-config' 'repo-config-validate' 'repo-create-keyring' 'repo-create-mirrorlist' 'repo-daemon' 'repo-init' 'repo-rebuild' 'repo-remove-unknown' 'repo-report' 'repo-restore' 'repo-setup' 'repo-sign' 'repo-statistics' 'repo-status-update' 'repo-sync' 'repo-tree' 'repo-triggers' 'repo-update' 'report' 'run' 'search' 'service-clean' 'service-config' 'service-config-validate' 'service-key-import' 'service-repositories' 'service-run' 'service-setup' 'service-shell' 'service-tree-migrate' 'setup' 'shell' 'sign' 'status' 'status-update' 'sync' 'update' 'user-add' 'user-list' 'user-remove' 'version' 'web' 'web-reload')
 _shtab_ahriman___log_handler_choices=('console' 'syslog' 'journald')
 _shtab_ahriman_add__s_choices=('auto' 'archive' 'aur' 'directory' 'local' 'remote' 'repository')
 _shtab_ahriman_add___source_choices=('auto' 'archive' 'aur' 'directory' 'local' 'remote' 'repository')
@@ -102,8 +108,8 @@ _shtab_ahriman_repo_init___sign_target_choices=('disabled' 'packages' 'repositor
 _shtab_ahriman_repo_rebuild__s_choices=('unknown' 'pending' 'building' 'failed' 'success')
 _shtab_ahriman_repo_rebuild___status_choices=('unknown' 'pending' 'building' 'failed' 'success')
 _shtab_ahriman_repo_setup___sign_target_choices=('disabled' 'packages' 'repository')
-_shtab_ahriman_repo_statistics__e_choices=('package-outdated' 'package-removed' 'package-update-failed' 'package-updated')
-_shtab_ahriman_repo_statistics___event_choices=('package-outdated' 'package-removed' 'package-update-failed' 'package-updated')
+_shtab_ahriman_repo_statistics__e_choices=('build-log' 'package-held' 'package-outdated' 'package-removed' 'package-status-changed' 'package-update-failed' 'package-updated' 'service-status-changed')
+_shtab_ahriman_repo_statistics___event_choices=('build-log' 'package-held' 'package-outdated' 'package-removed' 'package-status-changed' 'package-update-failed' 'package-updated' 'service-status-changed')
 _shtab_ahriman_repo_status_update__s_choices=('unknown' 'pending' 'building' 'failed' 'success')
 _shtab_ahriman_repo_status_update___status_choices=('unknown' 'pending' 'building' 'failed' 'success')
 _shtab_ahriman_search___sort_by_choices=('description' 'first_submitted' 'id' 'last_modified' 'maintainer' 'name' 'num_votes' 'out_of_date' 'package_base' 'package_base_id' 'popularity' 'repository' 'submitter' 'url' 'url_path' 'version')
@@ -251,6 +257,12 @@ _shtab_ahriman_package_add__n_nargs=0
 _shtab_ahriman_package_add___now_nargs=0
 _shtab_ahriman_package_add__y_nargs=0
 _shtab_ahriman_package_add___refresh_nargs=0
+_shtab_ahriman_package_archives__h_nargs=0
+_shtab_ahriman_package_archives___help_nargs=0
+_shtab_ahriman_package_archives__e_nargs=0
+_shtab_ahriman_package_archives___exit_code_nargs=0
+_shtab_ahriman_package_archives___info_nargs=0
+_shtab_ahriman_package_archives___no_info_nargs=0
 _shtab_ahriman_package_changes__h_nargs=0
 _shtab_ahriman_package_changes___help_nargs=0
 _shtab_ahriman_package_changes__e_nargs=0
@@ -263,9 +275,22 @@ _shtab_ahriman_package_copy___help_nargs=0
 _shtab_ahriman_package_copy__e_nargs=0
 _shtab_ahriman_package_copy___exit_code_nargs=0
 _shtab_ahriman_package_copy___remove_nargs=0
+_shtab_ahriman_package_hold_pos_0_nargs=+
+_shtab_ahriman_package_hold__h_nargs=0
+_shtab_ahriman_package_hold___help_nargs=0
+_shtab_ahriman_package_pkgbuild__h_nargs=0
+_shtab_ahriman_package_pkgbuild___help_nargs=0
+_shtab_ahriman_package_pkgbuild__e_nargs=0
+_shtab_ahriman_package_pkgbuild___exit_code_nargs=0
+_shtab_ahriman_package_pkgbuild_remove__h_nargs=0
+_shtab_ahriman_package_pkgbuild_remove___help_nargs=0
 _shtab_ahriman_package_remove_pos_0_nargs=+
 _shtab_ahriman_package_remove__h_nargs=0
 _shtab_ahriman_package_remove___help_nargs=0
+_shtab_ahriman_package_rollback__h_nargs=0
+_shtab_ahriman_package_rollback___help_nargs=0
+_shtab_ahriman_package_rollback___hold_nargs=0
+_shtab_ahriman_package_rollback___no_hold_nargs=0
 _shtab_ahriman_package_status_pos_0_nargs=*
 _shtab_ahriman_package_status__h_nargs=0
 _shtab_ahriman_package_status___help_nargs=0
@@ -280,6 +305,9 @@ _shtab_ahriman_package_status_remove___help_nargs=0
 _shtab_ahriman_package_status_update_pos_0_nargs=*
 _shtab_ahriman_package_status_update__h_nargs=0
 _shtab_ahriman_package_status_update___help_nargs=0
+_shtab_ahriman_package_unhold_pos_0_nargs=+
+_shtab_ahriman_package_unhold__h_nargs=0
+_shtab_ahriman_package_unhold___help_nargs=0
 _shtab_ahriman_package_update_pos_0_nargs=+
 _shtab_ahriman_package_update__h_nargs=0
 _shtab_ahriman_package_update___help_nargs=0
@@ -1,9 +1,9 @@
-.TH AHRIMAN "1" "2026\-03\-08" "ahriman 2.20.0rc7" "ArcH linux ReposItory MANager"
+.TH AHRIMAN "1" "2026\-07\-21" "ahriman 2.21.1" "ArcH linux ReposItory MANager"
 .SH NAME
 ahriman \- ArcH linux ReposItory MANager
 .SH SYNOPSIS
-.B [0m[1;35mahriman[0m
-[[32m-h[0m] [[32m-a [33mARCHITECTURE[0m] [[32m-c [33mCONFIGURATION[0m] [[36m--force[0m] [[32m-l [33mLOCK[0m] [[36m--log-handler [33m{console,syslog,journald}[0m] [[32m-q[0m] [[36m--report | --no-report[0m] [[32m-r [33mREPOSITORY[0m] [[36m--unsafe[0m] [[32m-V[0m] [[36m--wait-timeout [33mWAIT_TIMEOUT[0m] [32m{add,aur-search,check,clean,config,config-validate,copy,daemon,help,help-commands-unsafe,help-updates,help-version,init,key-import,package-add,package-changes,package-changes-remove,package-copy,package-remove,package-status,package-status-remove,package-status-update,package-update,patch-add,patch-list,patch-remove,patch-set-add,rebuild,remove,remove-unknown,repo-backup,repo-check,repo-clean,repo-config,repo-config-validate,repo-create-keyring,repo-create-mirrorlist,repo-daemon,repo-init,repo-rebuild,repo-remove-unknown,repo-report,repo-restore,repo-setup,repo-sign,repo-statistics,repo-status-update,repo-sync,repo-tree,repo-triggers,repo-update,report,run,search,service-clean,service-config,service-config-validate,service-key-import,service-repositories,service-run,service-setup,service-shell,service-tree-migrate,setup,shell,sign,status,status-update,sync,update,user-add,user-list,user-remove,version,web,web-reload} ...[0m
+.B ahriman
+[-h] [-a ARCHITECTURE] [-c CONFIGURATION] [--force] [-l LOCK] [--log-handler {console,syslog,journald}] [-q] [--report | --no-report] [-r REPOSITORY] [--unsafe] [-V] [--wait-timeout WAIT_TIMEOUT] {add,aur-search,check,clean,config,config-validate,copy,daemon,help,help-commands-unsafe,help-updates,help-version,init,key-import,package-add,package-archives,package-changes,package-changes-remove,package-copy,package-hold,package-pkgbuild,package-pkgbuild-remove,package-remove,package-rollback,package-status,package-status-remove,package-status-update,package-unhold,package-update,patch-add,patch-list,patch-remove,patch-set-add,rebuild,remove,remove-unknown,repo-backup,repo-check,repo-clean,repo-config,repo-config-validate,repo-create-keyring,repo-create-mirrorlist,repo-daemon,repo-init,repo-rebuild,repo-remove-unknown,repo-report,repo-restore,repo-setup,repo-sign,repo-statistics,repo-status-update,repo-sync,repo-tree,repo-triggers,repo-update,report,run,search,service-clean,service-config,service-config-validate,service-key-import,service-repositories,service-run,service-setup,service-shell,service-tree-migrate,setup,shell,sign,status,status-update,sync,update,user-add,user-list,user-remove,version,web,web-reload} ...
 .SH DESCRIPTION
 ArcH linux ReposItory MANager

@@ -74,6 +74,9 @@ application version
 \fBahriman\fR \fI\,package\-add\/\fR
 add package
 .TP
+\fBahriman\fR \fI\,package\-archives\/\fR
+list package archive versions
+.TP
 \fBahriman\fR \fI\,package\-changes\/\fR
 get package changes
 .TP
@@ -83,9 +86,21 @@ remove package changes
 \fBahriman\fR \fI\,package\-copy\/\fR
 copy package from another repository
 .TP
+\fBahriman\fR \fI\,package\-hold\/\fR
+hold package
+.TP
+\fBahriman\fR \fI\,package\-pkgbuild\/\fR
+get package pkgbuild
+.TP
+\fBahriman\fR \fI\,package\-pkgbuild\-remove\/\fR
+remove package pkgbuild
+.TP
 \fBahriman\fR \fI\,package\-remove\/\fR
 remove package
 .TP
+\fBahriman\fR \fI\,package\-rollback\/\fR
+rollback package
+.TP
 \fBahriman\fR \fI\,package\-status\/\fR
 get package status
 .TP
@@ -95,6 +110,9 @@ remove package status
 \fBahriman\fR \fI\,package\-status\-update\/\fR
 update package status
 .TP
+\fBahriman\fR \fI\,package\-unhold\/\fR
+unhold package
+.TP
 \fBahriman\fR \fI\,patch\-add\/\fR
 add patch for PKGBUILD function
 .TP
@@ -198,9 +216,9 @@ web server
 reload configuration

 .SH COMMAND \fI\,'ahriman aur\-search'\/\fR
-[1;34musage: [0m[1;35mahriman aur\-search[0m [[32m\-h[0m] [[32m\-e[0m] [[36m\-\-info | \-\-no\-info[0m]
-                          [[36m\-\-sort\-by [33m{description,first_submitted,id,last_modified,maintainer,name,num_votes,out_of_date,package_base,package_base_id,popularity,repository,submitter,url,url_path,version}[0m]
-                          [32msearch [search ...][0m
+usage: ahriman aur\-search [\-h] [\-e] [\-\-info | \-\-no\-info]
+                          [\-\-sort\-by {description,first_submitted,id,last_modified,maintainer,name,num_votes,out_of_date,package_base,package_base_id,popularity,repository,submitter,url,url_path,version}]
+                          search [search ...]

 search for package in AUR using API

@@ -223,7 +241,7 @@ sort field by this field. In case if two packages have the same value of the spe
 by name

 .SH COMMAND \fI\,'ahriman help'\/\fR
-[1;34musage: [0m[1;35mahriman help[0m [[32m\-h[0m] [32m[subcommand][0m
+usage: ahriman help [\-h] [subcommand]

 show help message for application or command and exit

@@ -232,7 +250,7 @@ show help message for application or command and exit
 show help message for specific command

 .SH COMMAND \fI\,'ahriman help\-commands\-unsafe'\/\fR
-[1;34musage: [0m[1;35mahriman help\-commands\-unsafe[0m [[32m\-h[0m] [32m[subcommand ...][0m
+usage: ahriman help\-commands\-unsafe [\-h] [subcommand ...]

 list unsafe commands as defined in default args

@@ -242,7 +260,7 @@ instead of showing commands, just test command line for unsafe subcommand and re
 otherwise

 .SH COMMAND \fI\,'ahriman help\-updates'\/\fR
-[1;34musage: [0m[1;35mahriman help\-updates[0m [[32m\-h[0m] [[32m\-e[0m]
+usage: ahriman help\-updates [\-h] [\-e]

 request AUR for current version and compare with current service version

@@ -252,15 +270,15 @@ request AUR for current version and compare with current service version
 return non\-zero exit code if updates available

 .SH COMMAND \fI\,'ahriman help\-version'\/\fR
-[1;34musage: [0m[1;35mahriman help\-version[0m [[32m\-h[0m]
+usage: ahriman help\-version [\-h]

 print application and its dependencies versions

 .SH COMMAND \fI\,'ahriman package\-add'\/\fR
-[1;34musage: [0m[1;35mahriman package\-add[0m [[32m\-h[0m] [[36m\-\-changes | \-\-no\-changes[0m] [[36m\-\-dependencies | \-\-no\-dependencies[0m] [[32m\-e[0m]
-                           [[36m\-\-increment | \-\-no\-increment[0m] [[32m\-n[0m] [[32m\-y[0m]
-                           [[32m\-s [33m{auto,archive,aur,directory,local,remote,repository}[0m] [[32m\-u [33mUSERNAME[0m] [[32m\-v [33mVARIABLE[0m]
-                           [32mpackage [package ...][0m
+usage: ahriman package\-add [\-h] [\-\-changes | \-\-no\-changes] [\-\-dependencies | \-\-no\-dependencies] [\-e]
+                           [\-\-increment | \-\-no\-increment] [\-n] [\-s {auto,archive,aur,directory,local,remote,repository}]
+                           [\-u USERNAME] [\-v VARIABLE] [\-y]
+                           package [package ...]

 add existing or new package to the build queue

@@ -289,10 +307,6 @@ increment package release (pkgrel) version on duplicate
 \fB\-n\fR, \fB\-\-now\fR
 run update function after

-.TP
-\fB\-y\fR, \fB\-\-refresh\fR
-download fresh package databases from the mirror before actions, \-yy to force refresh even if up to date
-
 .TP
 \fB\-s\fR \fI\,{auto,archive,aur,directory,local,remote,repository}\/\fR, \fB\-\-source\fR \fI\,{auto,archive,aur,directory,local,remote,repository}\/\fR
 explicitly specify the package source for this command
@@ -305,8 +319,30 @@ build as user
 \fB\-v\fR \fI\,VARIABLE\/\fR, \fB\-\-variable\fR \fI\,VARIABLE\/\fR
 apply specified makepkg variables to the next build

+.TP
+\fB\-y\fR, \fB\-\-refresh\fR
+download fresh package databases from the mirror before actions, \-yy to force refresh even if up to date
+
+.SH COMMAND \fI\,'ahriman package\-archives'\/\fR
+usage: ahriman package\-archives [\-h] [\-e] [\-\-info | \-\-no\-info] package
+
+list available archive versions for the package
+
+.TP
+\fBpackage\fR
+package base
+
+.SH OPTIONS \fI\,'ahriman package\-archives'\/\fR
+.TP
+\fB\-e\fR, \fB\-\-exit\-code\fR
+return non\-zero exit status if result is empty
+
+.TP
+\fB\-\-info\fR, \fB\-\-no\-info\fR
+show additional package information
+
 .SH COMMAND \fI\,'ahriman package\-changes'\/\fR
-[1;34musage: [0m[1;35mahriman package\-changes[0m [[32m\-h[0m] [[32m\-e[0m] [32mpackage[0m
+usage: ahriman package\-changes [\-h] [\-e] package

 retrieve package changes stored in database

@@ -320,7 +356,7 @@ package base
 return non\-zero exit status if result is empty

 .SH COMMAND \fI\,'ahriman package\-changes\-remove'\/\fR
-[1;34musage: [0m[1;35mahriman package\-changes\-remove[0m [[32m\-h[0m] [32mpackage[0m
+usage: ahriman package\-changes\-remove [\-h] package

 remove the package changes stored remotely

@@ -329,7 +365,7 @@ remove the package changes stored remotely
 package base

 .SH COMMAND \fI\,'ahriman package\-copy'\/\fR
-[1;34musage: [0m[1;35mahriman package\-copy[0m [[32m\-h[0m] [[32m\-e[0m] [[36m\-\-remove[0m] [32msource[0m [32mpackage [package ...][0m
+usage: ahriman package\-copy [\-h] [\-e] [\-\-remove] source package [package ...]

 copy package and its metadata from another repository

@@ -350,8 +386,40 @@ return non\-zero exit status if result is empty
 \fB\-\-remove\fR
 remove package from the source repository after

+.SH COMMAND \fI\,'ahriman package\-hold'\/\fR
+usage: ahriman package\-hold [\-h] package [package ...]
+
+hold package from automatic updates
+
+.TP
+\fBpackage\fR
+package base
+
+.SH COMMAND \fI\,'ahriman package\-pkgbuild'\/\fR
+usage: ahriman package\-pkgbuild [\-h] [\-e] package
+
+retrieve package PKGBUILD stored in database
+
+.TP
+\fBpackage\fR
+package base
+
+.SH OPTIONS \fI\,'ahriman package\-pkgbuild'\/\fR
+.TP
+\fB\-e\fR, \fB\-\-exit\-code\fR
+return non\-zero exit status if result is empty
+
+.SH COMMAND \fI\,'ahriman package\-pkgbuild\-remove'\/\fR
+usage: ahriman package\-pkgbuild\-remove [\-h] package
+
+remove the package PKGBUILD stored remotely
+
+.TP
+\fBpackage\fR
+package base
+
 .SH COMMAND \fI\,'ahriman package\-remove'\/\fR
-[1;34musage: [0m[1;35mahriman package\-remove[0m [[32m\-h[0m] [32mpackage [package ...][0m
+usage: ahriman package\-remove [\-h] package [package ...]

 remove package from the repository

@@ -359,9 +427,31 @@ remove package from the repository
 \fBpackage\fR
 package name or base

+.SH COMMAND \fI\,'ahriman package\-rollback'\/\fR
+usage: ahriman package\-rollback [\-h] [\-\-hold | \-\-no\-hold] [\-u USERNAME] package version
+
+rollback package to specified version from archives
+
+.TP
+\fBpackage\fR
+package base
+
+.TP
+\fBversion\fR
+package version
+
+.SH OPTIONS \fI\,'ahriman package\-rollback'\/\fR
+.TP
+\fB\-\-hold\fR, \fB\-\-no\-hold\fR
+hold package afterwards
+
+.TP
+\fB\-u\fR \fI\,USERNAME\/\fR, \fB\-\-username\fR \fI\,USERNAME\/\fR
+build as user
+
 .SH COMMAND \fI\,'ahriman package\-status'\/\fR
-[1;34musage: [0m[1;35mahriman package\-status[0m [[32m\-h[0m] [[36m\-\-ahriman[0m] [[32m\-e[0m] [[36m\-\-info | \-\-no\-info[0m] [[32m\-s [33m{unknown,pending,building,failed,success}[0m]
-                              [32m[package ...][0m
+usage: ahriman package\-status [\-h] [\-\-ahriman] [\-e] [\-\-info | \-\-no\-info] [\-s {unknown,pending,building,failed,success}]
+                              [package ...]

 request status of the package

@@ -387,7 +477,7 @@ show additional package information
 filter packages by status

 .SH COMMAND \fI\,'ahriman package\-status\-remove'\/\fR
-[1;34musage: [0m[1;35mahriman package\-status\-remove[0m [[32m\-h[0m] [32mpackage [package ...][0m
+usage: ahriman package\-status\-remove [\-h] package [package ...]

 remove the package from the status page

@@ -396,7 +486,7 @@ remove the package from the status page
 remove specified packages from status page

 .SH COMMAND \fI\,'ahriman package\-status\-update'\/\fR
-[1;34musage: [0m[1;35mahriman package\-status\-update[0m [[32m\-h[0m] [[32m\-s [33m{unknown,pending,building,failed,success}[0m] [32m[package ...][0m
+usage: ahriman package\-status\-update [\-h] [\-s {unknown,pending,building,failed,success}] [package ...]

 update package status on the status page

@@ -409,8 +499,17 @@ set status for specified packages. If no packages supplied, service status will
 \fB\-s\fR \fI\,{unknown,pending,building,failed,success}\/\fR, \fB\-\-status\fR \fI\,{unknown,pending,building,failed,success}\/\fR
 new package build status

+.SH COMMAND \fI\,'ahriman package\-unhold'\/\fR
+usage: ahriman package\-unhold [\-h] package [package ...]
+
+remove package hold, allowing automatic updates
+
+.TP
+\fBpackage\fR
+package base
+
 .SH COMMAND \fI\,'ahriman patch\-add'\/\fR
-[1;34musage: [0m[1;35mahriman patch\-add[0m [[32m\-h[0m] [32mpackage[0m [32mvariable[0m [32m[patch][0m
+usage: ahriman patch\-add [\-h] package variable [patch]

 create or update patched PKGBUILD function or variable

@@ -427,7 +526,7 @@ PKGBUILD variable or function name. If variable is a function, it must end with
 path to file which contains function or variable value. If not set, the value will be read from stdin

 .SH COMMAND \fI\,'ahriman patch\-list'\/\fR
-[1;34musage: [0m[1;35mahriman patch\-list[0m [[32m\-h[0m] [[32m\-e[0m] [[32m\-v [33mVARIABLE[0m] [32mpackage[0m
+usage: ahriman patch\-list [\-h] [\-e] [\-v VARIABLE] package

 list available patches for the package

@@ -445,7 +544,7 @@ return non\-zero exit status if result is empty
 if set, show only patches for specified PKGBUILD variables

 .SH COMMAND \fI\,'ahriman patch\-remove'\/\fR
-[1;34musage: [0m[1;35mahriman patch\-remove[0m [[32m\-h[0m] [[32m\-v [33mVARIABLE[0m] [32mpackage[0m
+usage: ahriman patch\-remove [\-h] [\-v VARIABLE] package

 remove patches for the package

@@ -460,7 +559,7 @@ should be used for single\-function patches in case if you wold like to remove o
 if not set, it will remove all patches related to the package

 .SH COMMAND \fI\,'ahriman patch\-set\-add'\/\fR
-[1;34musage: [0m[1;35mahriman patch\-set\-add[0m [[32m\-h[0m] [[32m\-t [33mTRACK[0m] [32mpackage[0m
+usage: ahriman patch\-set\-add [\-h] [\-t TRACK] package

 create or update source patches

@@ -474,7 +573,7 @@ path to directory with changed files for patch addition/update
 files which has to be tracked

 .SH COMMAND \fI\,'ahriman repo\-backup'\/\fR
-[1;34musage: [0m[1;35mahriman repo\-backup[0m [[32m\-h[0m] [32mpath[0m
+usage: ahriman repo\-backup [\-h] path

 backup repository settings and database

@@ -483,9 +582,9 @@ backup repository settings and database
 path of the output archive

 .SH COMMAND \fI\,'ahriman repo\-check'\/\fR
-[1;34musage: [0m[1;35mahriman repo\-check[0m [[32m\-h[0m] [[36m\-\-changes | \-\-no\-changes[0m] [[36m\-\-check\-files | \-\-no\-check\-files[0m] [[32m\-e[0m] [[36m\-\-vcs | \-\-no\-vcs[0m]
-                          [[32m\-y[0m]
-                          [32m[package ...][0m
+usage: ahriman repo\-check [\-h] [\-\-changes | \-\-no\-changes] [\-\-check\-files | \-\-no\-check\-files] [\-e] [\-\-vcs | \-\-no\-vcs]
+                          [\-y]
+                          [package ...]

 check for packages updates. Same as repo\-update \-\-dry\-run \-\-no\-manual

@@ -515,20 +614,20 @@ fetch actual version of VCS packages
 download fresh package databases from the mirror before actions, \-yy to force refresh even if up to date

 .SH COMMAND \fI\,'ahriman repo\-create\-keyring'\/\fR
-[1;34musage: [0m[1;35mahriman repo\-create\-keyring[0m [[32m\-h[0m]
+usage: ahriman repo\-create\-keyring [\-h]

 create package which contains list of trusted keys as set by configuration. Note, that this action will only create package, the package itself has to be built manually

 .SH COMMAND \fI\,'ahriman repo\-create\-mirrorlist'\/\fR
-[1;34musage: [0m[1;35mahriman repo\-create\-mirrorlist[0m [[32m\-h[0m]
+usage: ahriman repo\-create\-mirrorlist [\-h]

 create package which contains list of available mirrors as set by configuration. Note, that this action will only create package, the package itself has to be built manually

 .SH COMMAND \fI\,'ahriman repo\-daemon'\/\fR
-[1;34musage: [0m[1;35mahriman repo\-daemon[0m [[32m\-h[0m] [[32m\-i [33mINTERVAL[0m] [[36m\-\-aur | \-\-no\-aur[0m] [[36m\-\-changes | \-\-no\-changes[0m]
-                           [[36m\-\-check\-files | \-\-no\-check\-files[0m] [[36m\-\-dependencies | \-\-no\-dependencies[0m] [[36m\-\-dry\-run[0m]
-                           [[36m\-\-increment | \-\-no\-increment[0m] [[36m\-\-local | \-\-no\-local[0m] [[36m\-\-manual | \-\-no\-manual[0m]
-                           [[36m\-\-partitions | \-\-no\-partitions[0m] [[32m\-u [33mUSERNAME[0m] [[36m\-\-vcs | \-\-no\-vcs[0m] [[32m\-y[0m]
+usage: ahriman repo\-daemon [\-h] [\-i INTERVAL] [\-\-aur | \-\-no\-aur] [\-\-changes | \-\-no\-changes]
+                           [\-\-check\-files | \-\-no\-check\-files] [\-\-dependencies | \-\-no\-dependencies] [\-\-dry\-run]
+                           [\-\-increment | \-\-no\-increment] [\-\-local | \-\-no\-local] [\-\-manual | \-\-no\-manual]
+                           [\-\-partitions | \-\-no\-partitions] [\-u USERNAME] [\-\-vcs | \-\-no\-vcs] [\-y]

 start process which periodically will run update process

@@ -586,8 +685,8 @@ fetch actual version of VCS packages
 download fresh package databases from the mirror before actions, \-yy to force refresh even if up to date

 .SH COMMAND \fI\,'ahriman repo\-rebuild'\/\fR
-[1;34musage: [0m[1;35mahriman repo\-rebuild[0m [[32m\-h[0m] [[36m\-\-depends\-on [33mDEPENDS_ON[0m] [[36m\-\-dry\-run[0m] [[36m\-\-from\-database[0m] [[36m\-\-increment | \-\-no\-increment[0m]
-                            [[32m\-e[0m] [[32m\-s [33m{unknown,pending,building,failed,success}[0m] [[32m\-u [33mUSERNAME[0m]
+usage: ahriman repo\-rebuild [\-h] [\-\-depends\-on DEPENDS_ON] [\-\-dry\-run] [\-\-from\-database] [\-\-increment | \-\-no\-increment]
+                            [\-e] [\-s {unknown,pending,building,failed,success}] [\-u USERNAME]

 force rebuild whole repository

@@ -623,7 +722,7 @@ filter packages by status. Requires \-\-from\-database to be set
 build as user

 .SH COMMAND \fI\,'ahriman repo\-remove\-unknown'\/\fR
-[1;34musage: [0m[1;35mahriman repo\-remove\-unknown[0m [[32m\-h[0m] [[36m\-\-dry\-run[0m]
+usage: ahriman repo\-remove\-unknown [\-h] [\-\-dry\-run]

 remove packages which are missing in AUR and do not have local PKGBUILDs

@@ -633,12 +732,12 @@ remove packages which are missing in AUR and do not have local PKGBUILDs
 just perform check for packages without removal

 .SH COMMAND \fI\,'ahriman repo\-report'\/\fR
-[1;34musage: [0m[1;35mahriman repo\-report[0m [[32m\-h[0m]
+usage: ahriman repo\-report [\-h]

 generate repository report according to current settings

 .SH COMMAND \fI\,'ahriman repo\-restore'\/\fR
-[1;34musage: [0m[1;35mahriman repo\-restore[0m [[32m\-h[0m] [[32m\-o [33mOUTPUT[0m] [32mpath[0m
+usage: ahriman repo\-restore [\-h] [\-o OUTPUT] path

 restore settings and database

@@ -652,7 +751,7 @@ path of the input archive
 root path of the extracted files

 .SH COMMAND \fI\,'ahriman repo\-sign'\/\fR
-[1;34musage: [0m[1;35mahriman repo\-sign[0m [[32m\-h[0m] [32m[package ...][0m
+usage: ahriman repo\-sign [\-h] [package ...]

 (re\-)sign packages and repository database according to current settings

@@ -661,10 +760,10 @@ root path of the extracted files
 sign only specified packages

 .SH COMMAND \fI\,'ahriman repo\-statistics'\/\fR
-[1;34musage: [0m[1;35mahriman repo\-statistics[0m [[32m\-h[0m] [[36m\-\-chart [33mCHART[0m]
-                               [[32m\-e [33m{package\-outdated,package\-removed,package\-update\-failed,package\-updated}[0m]
-                               [[36m\-\-from\-date [33mFROM_DATE[0m] [[36m\-\-limit [33mLIMIT[0m] [[36m\-\-offset [33mOFFSET[0m] [[36m\-\-to\-date [33mTO_DATE[0m]
-                               [32m[package][0m
+usage: ahriman repo\-statistics [\-h] [\-\-chart CHART]
+                               [\-e {build\-log,package\-held,package\-outdated,package\-removed,package\-status\-changed,package\-update\-failed,package\-updated,service\-status\-changed}]
+                               [\-\-from\-date FROM_DATE] [\-\-limit LIMIT] [\-\-offset OFFSET] [\-\-to\-date TO_DATE]
+                               [package]

 fetch repository statistics

@@ -678,7 +777,7 @@ fetch only events for the specified package
 create updates chart and save it to the specified path

 .TP
-\fB\-e\fR \fI\,{package\-outdated,package\-removed,package\-update\-failed,package\-updated}\/\fR, \fB\-\-event\fR \fI\,{package\-outdated,package\-removed,package\-update\-failed,package\-updated}\/\fR
+\fB\-e\fR \fI\,{build\-log,package\-held,package\-outdated,package\-removed,package\-status\-changed,package\-update\-failed,package\-updated,service\-status\-changed}\/\fR, \fB\-\-event\fR \fI\,{build\-log,package\-held,package\-outdated,package\-removed,package\-status\-changed,package\-update\-failed,package\-updated,service\-status\-changed}\/\fR
 event type filter

 .TP
@@ -698,7 +797,7 @@ skip specified amount of events
 only fetch events which are older than the date

 .SH COMMAND \fI\,'ahriman repo\-status\-update'\/\fR
-[1;34musage: [0m[1;35mahriman repo\-status\-update[0m [[32m\-h[0m] [[32m\-s [33m{unknown,pending,building,failed,success}[0m]
+usage: ahriman repo\-status\-update [\-h] [\-s {unknown,pending,building,failed,success}]

 update repository status on the status page

@@ -708,12 +807,12 @@ update repository status on the status page
 new status

 .SH COMMAND \fI\,'ahriman repo\-sync'\/\fR
-[1;34musage: [0m[1;35mahriman repo\-sync[0m [[32m\-h[0m]
+usage: ahriman repo\-sync [\-h]

 sync repository files to remote server according to current settings

 .SH COMMAND \fI\,'ahriman repo\-tree'\/\fR
-[1;34musage: [0m[1;35mahriman repo\-tree[0m [[32m\-h[0m] [[32m\-p [33mPARTITIONS[0m]
+usage: ahriman repo\-tree [\-h] [\-p PARTITIONS]

 dump repository tree based on packages dependencies

@@ -723,7 +822,7 @@ dump repository tree based on packages dependencies
 also divide packages by independent partitions

 .SH COMMAND \fI\,'ahriman repo\-triggers'\/\fR
-[1;34musage: [0m[1;35mahriman repo\-triggers[0m [[32m\-h[0m] [32m[trigger ...][0m
+usage: ahriman repo\-triggers [\-h] [trigger ...]

 run triggers on empty build result as configured by settings

@@ -732,10 +831,10 @@ run triggers on empty build result as configured by settings
 instead of running all triggers as set by configuration, just process specified ones in order of mention

 .SH COMMAND \fI\,'ahriman repo\-update'\/\fR
-[1;34musage: [0m[1;35mahriman repo\-update[0m [[32m\-h[0m] [[36m\-\-aur | \-\-no\-aur[0m] [[36m\-\-changes | \-\-no\-changes[0m] [[36m\-\-check\-files | \-\-no\-check\-files[0m]
-                           [[36m\-\-dependencies | \-\-no\-dependencies[0m] [[36m\-\-dry\-run[0m] [[32m\-e[0m] [[36m\-\-increment | \-\-no\-increment[0m]
-                           [[36m\-\-local | \-\-no\-local[0m] [[36m\-\-manual | \-\-no\-manual[0m] [[32m\-u [33mUSERNAME[0m] [[36m\-\-vcs | \-\-no\-vcs[0m] [[32m\-y[0m]
-                           [32m[package ...][0m
+usage: ahriman repo\-update [\-h] [\-\-aur | \-\-no\-aur] [\-\-changes | \-\-no\-changes] [\-\-check\-files | \-\-no\-check\-files]
+                           [\-\-dependencies | \-\-no\-dependencies] [\-\-dry\-run] [\-e] [\-\-increment | \-\-no\-increment]
+                           [\-\-local | \-\-no\-local] [\-\-manual | \-\-no\-manual] [\-u USERNAME] [\-\-vcs | \-\-no\-vcs] [\-y]
+                           [package ...]

 check for packages updates and run build process if requested

@@ -793,8 +892,8 @@ fetch actual version of VCS packages
 download fresh package databases from the mirror before actions, \-yy to force refresh even if up to date

 .SH COMMAND \fI\,'ahriman service\-clean'\/\fR
-[1;34musage: [0m[1;35mahriman service\-clean[0m [[32m\-h[0m] [[36m\-\-cache | \-\-no\-cache[0m] [[36m\-\-chroot | \-\-no\-chroot[0m] [[36m\-\-manual | \-\-no\-manual[0m]
-                             [[36m\-\-packages | \-\-no\-packages[0m] [[36m\-\-pacman | \-\-no\-pacman[0m]
+usage: ahriman service\-clean [\-h] [\-\-cache | \-\-no\-cache] [\-\-chroot | \-\-no\-chroot] [\-\-manual | \-\-no\-manual]
+                             [\-\-packages | \-\-no\-packages] [\-\-pacman | \-\-no\-pacman]

 remove local caches

@@ -820,7 +919,7 @@ clear directory with built packages
 clear directory with pacman local database cache

 .SH COMMAND \fI\,'ahriman service\-config'\/\fR
-[1;34musage: [0m[1;35mahriman service\-config[0m [[32m\-h[0m] [[36m\-\-info | \-\-no\-info[0m] [[36m\-\-secure | \-\-no\-secure[0m] [32m[section][0m [32m[key][0m
+usage: ahriman service\-config [\-h] [\-\-info | \-\-no\-info] [\-\-secure | \-\-no\-secure] [section] [key]

 dump configuration for the specified architecture

@@ -842,7 +941,7 @@ show additional information, e.g. configuration files
 hide passwords and secrets from output

 .SH COMMAND \fI\,'ahriman service\-config\-validate'\/\fR
-[1;34musage: [0m[1;35mahriman service\-config\-validate[0m [[32m\-h[0m] [[32m\-e[0m]
+usage: ahriman service\-config\-validate [\-h] [\-e]

 validate configuration and print found errors

@@ -852,7 +951,7 @@ validate configuration and print found errors
 return non\-zero exit status if configuration is invalid

 .SH COMMAND \fI\,'ahriman service\-key\-import'\/\fR
-[1;34musage: [0m[1;35mahriman service\-key\-import[0m [[32m\-h[0m] [[36m\-\-key\-server [33mKEY_SERVER[0m] [32mkey[0m
+usage: ahriman service\-key\-import [\-h] [\-\-key\-server KEY_SERVER] key

 import PGP key from public sources to the repository user

@@ -866,7 +965,7 @@ PGP key to import from public server
 key server for key import

 .SH COMMAND \fI\,'ahriman service\-repositories'\/\fR
-[1;34musage: [0m[1;35mahriman service\-repositories[0m [[32m\-h[0m] [[36m\-\-id\-only | \-\-no\-id\-only[0m]
+usage: ahriman service\-repositories [\-h] [\-\-id\-only | \-\-no\-id\-only]

 list all available repositories

@@ -876,7 +975,7 @@ list all available repositories
 show machine readable identifier instead

 .SH COMMAND \fI\,'ahriman service\-run'\/\fR
-[1;34musage: [0m[1;35mahriman service\-run[0m [[32m\-h[0m] [32mcommand [command ...][0m
+usage: ahriman service\-run [\-h] command [command ...]

 run multiple commands on success run of the previous command

@@ -885,11 +984,11 @@ run multiple commands on success run of the previous command
 command to be run (quoted) without ``ahriman``

 .SH COMMAND \fI\,'ahriman service\-setup'\/\fR
-[1;34musage: [0m[1;35mahriman service\-setup[0m [[32m\-h[0m] [[36m\-\-build\-as\-user [33mBUILD_AS_USER[0m] [[36m\-\-from\-configuration [33mFROM_CONFIGURATION[0m]
-                             [[36m\-\-generate\-salt | \-\-no\-generate\-salt[0m] [[36m\-\-makeflags\-jobs | \-\-no\-makeflags\-jobs[0m]
-                             [[36m\-\-mirror [33mMIRROR[0m] [[36m\-\-multilib | \-\-no\-multilib[0m] [36m\-\-packager [33mPACKAGER[0m [[36m\-\-server [33mSERVER[0m]
-                             [[36m\-\-sign\-key [33mSIGN_KEY[0m] [[36m\-\-sign\-target [33m{disabled,packages,repository}[0m] [[36m\-\-web\-port [33mWEB_PORT[0m]
-                             [[36m\-\-web\-unix\-socket [33mWEB_UNIX_SOCKET[0m]
+usage: ahriman service\-setup [\-h] [\-\-build\-as\-user BUILD_AS_USER] [\-\-from\-configuration FROM_CONFIGURATION]
+                             [\-\-generate\-salt | \-\-no\-generate\-salt] [\-\-makeflags\-jobs | \-\-no\-makeflags\-jobs]
+                             [\-\-mirror MIRROR] [\-\-multilib | \-\-no\-multilib] \-\-packager PACKAGER [\-\-server SERVER]
+                             [\-\-sign\-key SIGN_KEY] [\-\-sign\-target {disabled,packages,repository}] [\-\-web\-port WEB_PORT]
+                             [\-\-web\-unix\-socket WEB_UNIX_SOCKET]

 create initial service configuration, requires root

@@ -943,7 +1042,7 @@ port of the web service
 path to unix socket used for interprocess communications

 .SH COMMAND \fI\,'ahriman service\-shell'\/\fR
-[1;34musage: [0m[1;35mahriman service\-shell[0m [[32m\-h[0m] [[32m\-o [33mOUTPUT[0m] [32m[code][0m
+usage: ahriman service\-shell [\-h] [\-o OUTPUT] [code]

 drop into python shell

@@ -957,13 +1056,13 @@ instead of dropping into shell, just execute the specified code
 output commands and result to the file

 .SH COMMAND \fI\,'ahriman service\-tree\-migrate'\/\fR
-[1;34musage: [0m[1;35mahriman service\-tree\-migrate[0m [[32m\-h[0m]
+usage: ahriman service\-tree\-migrate [\-h]

 migrate repository tree between versions

 .SH COMMAND \fI\,'ahriman user\-add'\/\fR
-[1;34musage: [0m[1;35mahriman user\-add[0m [[32m\-h[0m] [[36m\-\-key [33mKEY[0m] [[36m\-\-packager [33mPACKAGER[0m] [[32m\-p [33mPASSWORD[0m] [[32m\-R [33m{unauthorized,read,reporter,full}[0m]
-                        [32musername[0m
+usage: ahriman user\-add [\-h] [\-\-key KEY] [\-\-packager PACKAGER] [\-p PASSWORD] [\-R {unauthorized,read,reporter,full}]
+                        username

 update user for web services with the given password and role. In case if password was not entered it will be asked interactively

@@ -990,7 +1089,7 @@ authorization type.
 user access level

 .SH COMMAND \fI\,'ahriman user\-list'\/\fR
-[1;34musage: [0m[1;35mahriman user\-list[0m [[32m\-h[0m] [[32m\-e[0m] [[32m\-R [33m{unauthorized,read,reporter,full}[0m] [32m[username][0m
+usage: ahriman user\-list [\-h] [\-e] [\-R {unauthorized,read,reporter,full}] [username]

 list users from the user mapping and their roles

@@ -1008,7 +1107,7 @@ return non\-zero exit status if result is empty
 filter users by role

 .SH COMMAND \fI\,'ahriman user\-remove'\/\fR
-[1;34musage: [0m[1;35mahriman user\-remove[0m [[32m\-h[0m] [32musername[0m
+usage: ahriman user\-remove [\-h] username

 remove user from the user mapping and update the configuration

@@ -1017,12 +1116,12 @@ remove user from the user mapping and update the configuration
 username for web service

 .SH COMMAND \fI\,'ahriman web'\/\fR
-[1;34musage: [0m[1;35mahriman web[0m [[32m\-h[0m]
+usage: ahriman web [\-h]

 start web server

 .SH COMMAND \fI\,'ahriman web\-reload'\/\fR
-[1;34musage: [0m[1;35mahriman web\-reload[0m [[32m\-h[0m]
+usage: ahriman web\-reload [\-h]

 reload web server configuration

@@ -20,13 +20,19 @@ _shtab_ahriman_commands() {
    "init:create initial service configuration, requires root"
    "key-import:import PGP key from public sources to the repository user"
    "package-add:add existing or new package to the build queue"
+    "package-archives:list available archive versions for the package"
    "package-changes:retrieve package changes stored in database"
    "package-changes-remove:remove the package changes stored remotely"
    "package-copy:copy package and its metadata from another repository"
+    "package-hold:hold package from automatic updates"
+    "package-pkgbuild:retrieve package PKGBUILD stored in database"
+    "package-pkgbuild-remove:remove the package PKGBUILD stored remotely"
    "package-remove:remove package from the repository"
+    "package-rollback:rollback package to specified version from archives"
    "package-status:request status of the package"
    "package-status-remove:remove the package from the status page"
    "package-status-update:update package status on the status page"
+    "package-unhold:remove package hold, allowing automatic updates"
    "package-update:add existing or new package to the build queue"
    "patch-add:create or update patched PKGBUILD function or variable"
    "patch-list:list available patches for the package"
@@ -110,10 +116,10 @@ _shtab_ahriman_add_options=(
  {-e,--exit-code}"[return non-zero exit status if result is empty (default\: False)]"
  {--increment,--no-increment}"[increment package release (pkgrel) version on duplicate (default\: True)]:increment:"
  {-n,--now}"[run update function after (default\: False)]"
-  "*"{-y,--refresh}"[download fresh package databases from the mirror before actions, -yy to force refresh even if up to date (default\: False)]"
  {-s,--source}"[explicitly specify the package source for this command (default\: auto)]:source:(auto archive aur directory local remote repository)"
  {-u,--username}"[build as user (default\: None)]:username:"
  "*"{-v,--variable}"[apply specified makepkg variables to the next build (default\: None)]:variable:"
+  "*"{-y,--refresh}"[download fresh package databases from the mirror before actions, -yy to force refresh even if up to date (default\: False)]"
  "(*):package source (base name, path to local files, remote URL):"
 )

@@ -272,16 +278,26 @@ _shtab_ahriman_package_add_options=(
  {-e,--exit-code}"[return non-zero exit status if result is empty (default\: False)]"
  {--increment,--no-increment}"[increment package release (pkgrel) version on duplicate (default\: True)]:increment:"
  {-n,--now}"[run update function after (default\: False)]"
-  "*"{-y,--refresh}"[download fresh package databases from the mirror before actions, -yy to force refresh even if up to date (default\: False)]"
  {-s,--source}"[explicitly specify the package source for this command (default\: auto)]:source:(auto archive aur directory local remote repository)"
  {-u,--username}"[build as user (default\: None)]:username:"
  "*"{-v,--variable}"[apply specified makepkg variables to the next build (default\: None)]:variable:"
+  "*"{-y,--refresh}"[download fresh package databases from the mirror before actions, -yy to force refresh even if up to date (default\: False)]"
  "(*):package source (base name, path to local files, remote URL):"
 )

 # guard to ensure default positional specs are added only once per session
 _shtab_ahriman_package_add_defaults_added=0

+_shtab_ahriman_package_archives_options=(
+  "(- : *)"{-h,--help}"[show this help message and exit]"
+  {-e,--exit-code}"[return non-zero exit status if result is empty (default\: False)]"
+  {--info,--no-info}"[show additional package information (default\: False)]:info:"
+  ":package base:"
+)
+
+# guard to ensure default positional specs are added only once per session
+_shtab_ahriman_package_archives_defaults_added=0
+
 _shtab_ahriman_package_changes_options=(
  "(- : *)"{-h,--help}"[show this help message and exit]"
  {-e,--exit-code}"[return non-zero exit status if result is empty (default\: False)]"
@@ -310,6 +326,31 @@ _shtab_ahriman_package_copy_options=(
 # guard to ensure default positional specs are added only once per session
 _shtab_ahriman_package_copy_defaults_added=0

+_shtab_ahriman_package_hold_options=(
+  "(- : *)"{-h,--help}"[show this help message and exit]"
+  "(*):package base:"
+)
+
+# guard to ensure default positional specs are added only once per session
+_shtab_ahriman_package_hold_defaults_added=0
+
+_shtab_ahriman_package_pkgbuild_options=(
+  "(- : *)"{-h,--help}"[show this help message and exit]"
+  {-e,--exit-code}"[return non-zero exit status if result is empty (default\: False)]"
+  ":package base:"
+)
+
+# guard to ensure default positional specs are added only once per session
+_shtab_ahriman_package_pkgbuild_defaults_added=0
+
+_shtab_ahriman_package_pkgbuild_remove_options=(
+  "(- : *)"{-h,--help}"[show this help message and exit]"
+  ":package base:"
+)
+
+# guard to ensure default positional specs are added only once per session
+_shtab_ahriman_package_pkgbuild_remove_defaults_added=0
+
 _shtab_ahriman_package_remove_options=(
  "(- : *)"{-h,--help}"[show this help message and exit]"
  "(*):package name or base:"
@@ -318,6 +359,17 @@ _shtab_ahriman_package_remove_options=(
 # guard to ensure default positional specs are added only once per session
 _shtab_ahriman_package_remove_defaults_added=0

+_shtab_ahriman_package_rollback_options=(
+  "(- : *)"{-h,--help}"[show this help message and exit]"
+  {--hold,--no-hold}"[hold package afterwards (default\: True)]:hold:"
+  {-u,--username}"[build as user (default\: None)]:username:"
+  ":package base:"
+  ":package version:"
+)
+
+# guard to ensure default positional specs are added only once per session
+_shtab_ahriman_package_rollback_defaults_added=0
+
 _shtab_ahriman_package_status_options=(
  "(- : *)"{-h,--help}"[show this help message and exit]"
  "--ahriman[get service status itself (default\: False)]"
@@ -347,6 +399,14 @@ _shtab_ahriman_package_status_update_options=(
 # guard to ensure default positional specs are added only once per session
 _shtab_ahriman_package_status_update_defaults_added=0

+_shtab_ahriman_package_unhold_options=(
+  "(- : *)"{-h,--help}"[show this help message and exit]"
+  "(*):package base:"
+)
+
+# guard to ensure default positional specs are added only once per session
+_shtab_ahriman_package_unhold_defaults_added=0
+
 _shtab_ahriman_package_update_options=(
  "(- : *)"{-h,--help}"[show this help message and exit]"
  {--changes,--no-changes}"[calculate changes from the latest known commit if available (default\: True)]:changes:"
@@ -354,10 +414,10 @@ _shtab_ahriman_package_update_options=(
  {-e,--exit-code}"[return non-zero exit status if result is empty (default\: False)]"
  {--increment,--no-increment}"[increment package release (pkgrel) version on duplicate (default\: True)]:increment:"
  {-n,--now}"[run update function after (default\: False)]"
-  "*"{-y,--refresh}"[download fresh package databases from the mirror before actions, -yy to force refresh even if up to date (default\: False)]"
  {-s,--source}"[explicitly specify the package source for this command (default\: auto)]:source:(auto archive aur directory local remote repository)"
  {-u,--username}"[build as user (default\: None)]:username:"
  "*"{-v,--variable}"[apply specified makepkg variables to the next build (default\: None)]:variable:"
+  "*"{-y,--refresh}"[download fresh package databases from the mirror before actions, -yy to force refresh even if up to date (default\: False)]"
  "(*):package source (base name, path to local files, remote URL):"
 )

@@ -605,7 +665,7 @@ _shtab_ahriman_repo_sign_defaults_added=0
 _shtab_ahriman_repo_statistics_options=(
  "(- : *)"{-h,--help}"[show this help message and exit]"
  "--chart[create updates chart and save it to the specified path (default\: None)]:chart:"
-  {-e,--event}"[event type filter (default\: package-updated)]:event:(package-outdated package-removed package-update-failed package-updated)"
+  {-e,--event}"[event type filter (default\: package-updated)]:event:(build-log package-held package-outdated package-removed package-status-changed package-update-failed package-updated service-status-changed)"
  "--from-date[only fetch events which are newer than the date (default\: None)]:from_date:"
  "--limit[limit response by specified amount of events (default\: -1)]:limit:"
  "--offset[skip specified amount of events (default\: 0)]:offset:"
@@ -953,13 +1013,19 @@ _shtab_ahriman() {
        init) _arguments -C -s $_shtab_ahriman_init_options ;;
        key-import) _arguments -C -s $_shtab_ahriman_key_import_options ;;
        package-add) _arguments -C -s $_shtab_ahriman_package_add_options ;;
+        package-archives) _arguments -C -s $_shtab_ahriman_package_archives_options ;;
        package-changes) _arguments -C -s $_shtab_ahriman_package_changes_options ;;
        package-changes-remove) _arguments -C -s $_shtab_ahriman_package_changes_remove_options ;;
        package-copy) _arguments -C -s $_shtab_ahriman_package_copy_options ;;
+        package-hold) _arguments -C -s $_shtab_ahriman_package_hold_options ;;
+        package-pkgbuild) _arguments -C -s $_shtab_ahriman_package_pkgbuild_options ;;
+        package-pkgbuild-remove) _arguments -C -s $_shtab_ahriman_package_pkgbuild_remove_options ;;
        package-remove) _arguments -C -s $_shtab_ahriman_package_remove_options ;;
+        package-rollback) _arguments -C -s $_shtab_ahriman_package_rollback_options ;;
        package-status) _arguments -C -s $_shtab_ahriman_package_status_options ;;
        package-status-remove) _arguments -C -s $_shtab_ahriman_package_status_remove_options ;;
        package-status-update) _arguments -C -s $_shtab_ahriman_package_status_update_options ;;
+        package-unhold) _arguments -C -s $_shtab_ahriman_package_unhold_options ;;
        package-update) _arguments -C -s $_shtab_ahriman_package_update_options ;;
        patch-add) _arguments -C -s $_shtab_ahriman_patch_add_options ;;
        patch-list) _arguments -C -s $_shtab_ahriman_patch_list_options ;;
@@ -0,0 +1,64 @@
+[build-system]
+requires = [
+    "hatchling",
+]
+build-backend = "hatchling.build"
+
+[project]
+name = "ahriman-core"
+dependencies = [
+    "bcrypt",
+    "filelock",
+    "inflection",
+    "pyelftools",
+    "requests",
+]
+description = "ArcH linux ReposItory MANager, core package"
+dynamic = [
+    "version",
+]
+requires-python = ">=3.14"
+
+[project.optional-dependencies]
+journald = [
+    "systemd-python",
+]
+# FIXME technically this dependency is required, but in some cases we do not have access to
+# the libalpm which is required in order to install the package. Thus in case if we do not
+# really need to run the application we can move it to "optional" dependencies
+pacman = [
+    "pyalpm",
+]
+reports = [
+    "Jinja2",
+]
+s3 = [
+    "boto3",
+]
+shell = [
+    "IPython",
+]
+stats = [
+    "matplotlib",
+]
+unixsocket = [
+    "requests-unixsocket2",  # required by unix socket support
+]
+validator = [
+    "cerberus",
+]
+
+[project.scripts]
+ahriman = "ahriman.application.ahriman:run"
+
+[tool.hatch.build.targets.wheel]
+packages = [
+    "src/ahriman",
+]
+
+[tool.hatch.build.targets.wheel.shared-data]
+"package/lib" = "lib"
+"package/share" = "share"
+
+[tool.hatch.version]
+path = "src/ahriman/__init__.py"
@@ -17,4 +17,4 @@
 # You should have received a copy of the GNU General Public License
 # along with this program. If not, see <http://www.gnu.org/licenses/>.
 #
-__version__ = "2.20.0rc7"
+__version__ = "2.21.1"
@@ -19,6 +19,7 @@
 #
 import argparse

+from functools import partial
 from pathlib import Path

 import ahriman.application.handlers
@@ -34,10 +35,13 @@ from ahriman.models.log_handler import LogHandler
 __all__: list[str] = []


-def _parser() -> argparse.ArgumentParser:
+def _parser(*, color: bool = False) -> argparse.ArgumentParser:
    """
    command line parser generator

+    Args:
+        color(bool, optional): enable colors in help messages (Default value = False)
+
    Returns:
        argparse.ArgumentParser: command line parser for the application
    """
@@ -63,7 +67,7 @@ Start web service (requires additional configuration):

 >>> ahriman web
 """,
-                                     fromfile_prefix_chars="@", formatter_class=_HelpFormatter)
+                                     fromfile_prefix_chars="@", formatter_class=_HelpFormatter, color=color)
    parser.add_argument("-a", "--architecture", help="filter by target architecture")
    parser.add_argument("-c", "--configuration", help="configuration path", type=Path,
                        default=Path("/") / "etc" / "ahriman.ini")
@@ -92,8 +96,9 @@ Start web service (requires additional configuration):
    for handler in implementations(ahriman.application.handlers, Handler):
        for subparser_parser in handler.arguments:
            subparser = subparser_parser(subparsers)
+            subparser.color = color
            subparser.formatter_class = _HelpFormatter
-            subparser.set_defaults(handler=handler, parser=_parser)
+            subparser.set_defaults(handler=handler, parser=partial(_parser, color=color))

    # sort actions alphabetically in both choices and help message
    # pylint: disable=protected-access
@@ -110,7 +115,7 @@ def run() -> int:
    Returns:
        int: application status code
    """
-    parser = _parser()
+    parser = _parser(color=True)
    args = parser.parse_args()

    if args.command is None:  # in case of empty command we would like to print help message
@@ -154,13 +154,13 @@ class Application(ApplicationPackages, ApplicationRepository):
                for package_name, packager in missing.items():
                    if (source_dir := self.repository.paths.cache_for(package_name)).is_dir():
                        # there is local cache, load package from it
-                        leaf = Package.from_build(source_dir, self.repository.architecture, packager)
+                        leaf = Package.from_build(source_dir, self.repository.repository_id.architecture, packager)
                    else:
                        leaf = Package.from_aur(package_name, packager, include_provides=True)
                    portion[leaf.base] = leaf

                    # register package in the database
-                    self.repository.reporter.set_unknown(leaf)
+                    self.reporter.set_unknown(leaf)

            return portion

@@ -45,8 +45,8 @@ class ApplicationRepository(ApplicationProperties):
            if last_commit_sha is None:
                continue  # skip check in case if we can't calculate diff

-            changes = self.repository.package_changes(package, last_commit_sha)
-            self.repository.reporter.package_changes_update(package.base, changes)
+            if (changes := self.repository.package_changes(package, last_commit_sha)) is not None:
+                self.reporter.package_changes_update(package.base, changes)

    def clean(self, *, cache: bool, chroot: bool, manual: bool, packages: bool, pacman: bool) -> None:
        """
@@ -156,12 +156,15 @@ class ApplicationRepository(ApplicationProperties):
        result = Result()

        # process already built packages if any
-        built_packages = self.repository.packages_built()
-        if built_packages:  # speedup a bit
+        if built_packages := self.repository.packages_built():  # speedup a bit
            build_result = self.repository.process_update(built_packages, packagers)
            self.on_result(build_result)
            result.merge(build_result)

+            # filter packages which were prebuilt
+            succeeded = {package.base for package in build_result.success}
+            updates = [package for package in updates if package.base not in succeeded]
+
        builder = Updater.load(self.repository_id, self.configuration, self.repository)

        # ok so for now we split all packages into chunks and process each chunk accordingly
@@ -21,10 +21,10 @@ import argparse

 from ahriman.application.application import Application
 from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.application.handlers.update import Update
 from ahriman.core.configuration import Configuration
 from ahriman.core.utils import enum_values, extract_user
 from ahriman.models.package_source import PackageSource
-from ahriman.models.packagers import Packagers
 from ahriman.models.pkgbuild_patch import PkgbuildPatch
 from ahriman.models.repository_id import RepositoryId

@@ -48,26 +48,7 @@ class Add(Handler):
        """
        application = Application(repository_id, configuration, report=report, refresh_pacman_database=args.refresh)
        application.on_start()
-
-        application.add(args.package, args.source, args.username)
-        patches = [PkgbuildPatch.from_env(patch) for patch in args.variable] if args.variable is not None else []
-        for package in args.package:  # for each requested package insert patch
-            for patch in patches:
-                application.reporter.package_patches_update(package, patch)
-
-        if not args.now:
-            return
-
-        packages = application.updates(args.package, aur=False, local=False, manual=True, vcs=False, check_files=False)
-        if args.changes:  # generate changes if requested
-            application.changes(packages)
-
-        packages = application.with_dependencies(packages, process_dependencies=args.dependencies)
-        packagers = Packagers(args.username, {package.base: package.packager for package in packages})
-
-        application.print_updates(packages, log_fn=application.logger.info)
-        result = application.update(packages, packagers, bump_pkgrel=args.increment)
-        Add.check_status(args.exit_code, not result.is_empty)
+        Add.perform_action(application, args)

    @staticmethod
    def _set_package_add_parser(root: SubParserAction) -> argparse.ArgumentParser:
@@ -103,14 +84,34 @@ class Add(Handler):
        parser.add_argument("--increment", help="increment package release (pkgrel) version on duplicate",
                            action=argparse.BooleanOptionalAction, default=True)
        parser.add_argument("-n", "--now", help="run update function after", action="store_true")
-        parser.add_argument("-y", "--refresh", help="download fresh package databases from the mirror before actions, "
-                                                    "-yy to force refresh even if up to date",
-                            action="count", default=False)
        parser.add_argument("-s", "--source", help="explicitly specify the package source for this command",
                            type=PackageSource, choices=enum_values(PackageSource), default=PackageSource.Auto)
        parser.add_argument("-u", "--username", help="build as user", default=extract_user())
        parser.add_argument("-v", "--variable", help="apply specified makepkg variables to the next build",
                            action="append")
+        parser.add_argument("-y", "--refresh", help="download fresh package databases from the mirror before actions, "
+                                                    "-yy to force refresh even if up to date",
+                            action="count", default=False)
+        parser.set_defaults(aur=False, check_files=False, dry_run=False, local=False, manual=True, vcs=False)
        return parser

+    @staticmethod
+    def perform_action(application: Application, args: argparse.Namespace) -> None:
+        """
+        perform add action
+
+        Args:
+            application(Application): application instance
+            args(argparse.Namespace): command line args
+        """
+        application.add(args.package, args.source, args.username)
+        patches = [PkgbuildPatch.from_env(patch) for patch in args.variable] if args.variable is not None else []
+        for package in args.package:  # for each requested package insert patch
+            for patch in patches:
+                application.reporter.package_patches_update(package, patch)
+
+        if not args.now:
+            return
+        Update.perform_action(application, args)
+
    arguments = [_set_package_add_parser]
@@ -0,0 +1,81 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.formatters import PackagePrinter
+from ahriman.models.action import Action
+from ahriman.models.build_status import BuildStatus, BuildStatusEnum
+from ahriman.models.repository_id import RepositoryId
+
+
+class Archives(Handler):
+    """
+    package archives handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # conflicting io
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        application = Application(repository_id, configuration, report=True)
+
+        match args.action:
+            case Action.List:
+                archives = application.repository.package_archives(args.package)
+                for package in archives:
+                    PackagePrinter(package, BuildStatus(BuildStatusEnum.Success))(verbose=args.info)
+
+                Archives.check_status(args.exit_code, bool(archives))
+
+    @staticmethod
+    def _set_package_archives_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for package archives subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("package-archives", help="list package archive versions",
+                                 description="list available archive versions for the package")
+        parser.add_argument("package", help="package base")
+        parser.add_argument("-e", "--exit-code", help="return non-zero exit status if result is empty",
+                            action="store_true")
+        parser.add_argument("--info", help="show additional package information",
+                            action=argparse.BooleanOptionalAction, default=False)
+        parser.set_defaults(action=Action.List, lock=None, quiet=True, report=False, unsafe=True)
+        return parser
+
+    arguments = [_set_package_archives_parser]
@@ -47,14 +47,13 @@ class Change(Handler):
            configuration(Configuration): configuration instance
            report(bool): force enable or disable reporting
        """
-        application = Application(repository_id, configuration, report=True)
-        client = application.repository.reporter
+        client = Application(repository_id, configuration, report=True).reporter

        match args.action:
            case Action.List:
                changes = client.package_changes_get(args.package)
                ChangesPrinter(changes)(verbose=True, separator="")
-                Change.check_status(args.exit_code, not changes.is_empty)
+                Change.check_status(args.exit_code, changes.changes is not None)
            case Action.Remove:
                client.package_changes_update(args.package, Changes())

@@ -0,0 +1,93 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.models.action import Action
+from ahriman.models.repository_id import RepositoryId
+
+
+class Hold(Handler):
+    """
+    package hold handler
+    """
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        client = Application(repository_id, configuration, report=True).reporter
+
+        match args.action:
+            case Action.Remove:
+                for package in args.package:
+                    client.package_hold_update(package, enabled=False)
+            case Action.Update:
+                for package in args.package:
+                    client.package_hold_update(package, enabled=True)
+
+    @staticmethod
+    def _set_package_hold_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for hold package subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("package-hold", help="hold package",
+                                 description="hold package from automatic updates")
+        parser.add_argument("package", help="package base", nargs="+")
+        parser.set_defaults(action=Action.Update, lock=None, quiet=True, report=False, unsafe=True)
+        return parser
+
+    @staticmethod
+    def _set_package_unhold_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for unhold package subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("package-unhold", help="unhold package",
+                                 description="remove package hold, allowing automatic updates")
+        parser.add_argument("package", help="package base", nargs="+")
+        parser.set_defaults(action=Action.Remove, lock=None, quiet=True, report=False, unsafe=True)
+        return parser
+
+    arguments = [
+        _set_package_hold_parser,
+        _set_package_unhold_parser,
+    ]
@@ -0,0 +1,100 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from dataclasses import replace
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.formatters import PkgbuildPrinter
+from ahriman.models.action import Action
+from ahriman.models.repository_id import RepositoryId
+
+
+class Pkgbuild(Handler):
+    """
+    package pkgbuild handler
+    """
+
+    ALLOW_MULTI_ARCHITECTURE_RUN = False  # conflicting io
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        client = Application(repository_id, configuration, report=True).reporter
+
+        match args.action:
+            case Action.List:
+                changes = client.package_changes_get(args.package)
+                PkgbuildPrinter(changes)(verbose=True, separator="")
+                Pkgbuild.check_status(args.exit_code, changes.pkgbuild is not None)
+            case Action.Remove:
+                changes = client.package_changes_get(args.package)
+                client.package_changes_update(args.package, replace(changes, pkgbuild=None))
+
+    @staticmethod
+    def _set_package_pkgbuild_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for package pkgbuild subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("package-pkgbuild", help="get package pkgbuild",
+                                 description="retrieve package PKGBUILD stored in database",
+                                 epilog="This command requests package status from the web interface "
+                                        "if it is available.")
+        parser.add_argument("package", help="package base")
+        parser.add_argument("-e", "--exit-code", help="return non-zero exit status if result is empty",
+                            action="store_true")
+        parser.set_defaults(action=Action.List, lock=None, quiet=True, report=False, unsafe=True)
+        return parser
+
+    @staticmethod
+    def _set_package_pkgbuild_remove_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for package pkgbuild remove subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("package-pkgbuild-remove", help="remove package pkgbuild",
+                                 description="remove the package PKGBUILD stored remotely")
+        parser.add_argument("package", help="package base")
+        parser.set_defaults(action=Action.Remove, exit_code=False, lock=None, quiet=True, report=False, unsafe=True)
+        return parser
+
+    arguments = [_set_package_pkgbuild_parser, _set_package_pkgbuild_remove_parser]
@@ -44,8 +44,7 @@ class Reload(Handler):
            configuration(Configuration): configuration instance
            report(bool): force enable or disable reporting
        """
-        application = Application(repository_id, configuration, report=True)
-        client = application.repository.reporter
+        client = Application(repository_id, configuration, report=True).reporter
        client.configuration_reload()

    @staticmethod
@@ -0,0 +1,131 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+import argparse
+
+from dataclasses import replace
+from pathlib import Path
+
+from ahriman.application.application import Application
+from ahriman.application.handlers.add import Add
+from ahriman.application.handlers.handler import Handler, SubParserAction
+from ahriman.core.configuration import Configuration
+from ahriman.core.exceptions import UnknownPackageError
+from ahriman.core.utils import extract_user
+from ahriman.models.package import Package
+from ahriman.models.package_source import PackageSource
+from ahriman.models.repository_id import RepositoryId
+
+
+class Rollback(Handler):
+    """
+    package rollback handler
+    """
+
+    @classmethod
+    def run(cls, args: argparse.Namespace, repository_id: RepositoryId, configuration: Configuration, *,
+            report: bool) -> None:
+        """
+        callback for command line
+
+        Args:
+            args(argparse.Namespace): command line args
+            repository_id(RepositoryId): repository unique identifier
+            configuration(Configuration): configuration instance
+            report(bool): force enable or disable reporting
+        """
+        application = Application(repository_id, configuration, report=report)
+        application.on_start()
+
+        package = Rollback.package_load(application, args.package, args.version)
+        artifacts = Rollback.package_artifacts(application, package)
+
+        args.package = [str(artifact) for artifact in artifacts]
+        Add.perform_action(application, args)
+
+        if args.hold:
+            application.reporter.package_hold_update(package.base, enabled=True)
+
+    @staticmethod
+    def _set_package_rollback_parser(root: SubParserAction) -> argparse.ArgumentParser:
+        """
+        add parser for package rollback subcommand
+
+        Args:
+            root(SubParserAction): subparsers for the commands
+
+        Returns:
+            argparse.ArgumentParser: created argument parser
+        """
+        parser = root.add_parser("package-rollback", help="rollback package",
+                                 description="rollback package to specified version from archives")
+        parser.add_argument("package", help="package base")
+        parser.add_argument("version", help="package version")
+        parser.add_argument("--hold", help="hold package afterwards",
+                            action=argparse.BooleanOptionalAction, default=True)
+        parser.add_argument("-u", "--username", help="build as user", default=extract_user())
+        parser.set_defaults(aur=False, changes=False, check_files=False, dependencies=False, dry_run=False,
+                            exit_code=True, increment=False, now=True, local=False, manual=False, refresh=False,
+                            source=PackageSource.Archive, variable=None, vcs=False)
+        return parser
+
+    @staticmethod
+    def package_artifacts(application: Application, package: Package) -> list[Path]:
+        """
+        look for requested package artifacts and return paths to them
+
+        Args:
+            application(Application): application instance
+            package(Package): package descriptor
+
+        Returns:
+            list[Path]: paths to found artifacts
+
+        Raises:
+            UnknownPackageError: if artifacts do not exist
+        """
+        # lookup for built artifacts
+        artifacts = application.repository.package_archives_lookup(package)
+        if not artifacts:
+            raise UnknownPackageError(package.base)
+        return artifacts
+
+    @staticmethod
+    def package_load(application: Application, package_base: str, version: str) -> Package:
+        """
+        load package from repository, while setting requested version
+
+        Args:
+            application(Application): application instance
+            package_base(str): package base
+            version(str): package version
+
+        Returns:
+            Package: loaded package
+
+        Raises:
+            UnknownPackageError: if package does not exist
+        """
+        try:
+            package, _ = next(iter(application.reporter.package_get(package_base)))
+            return replace(package, version=version)
+        except StopIteration:
+            raise UnknownPackageError(package_base) from None
+
+    arguments = [_set_package_rollback_parser]
@@ -52,7 +52,7 @@ class Status(Handler):
            report(bool): force enable or disable reporting
        """
        # we are using reporter here
-        client = Application(repository_id, configuration, report=True).repository.reporter
+        client = Application(repository_id, configuration, report=True).reporter
        if args.ahriman:
            service_status = client.status_get()
            StatusPrinter(service_status.status)(verbose=args.info)
@@ -47,8 +47,7 @@ class StatusUpdate(Handler):
            configuration(Configuration): configuration instance
            report(bool): force enable or disable reporting
        """
-        application = Application(repository_id, configuration, report=True)
-        client = application.repository.reporter
+        client = Application(repository_id, configuration, report=True).reporter

        match args.action:
            case Action.Update if args.package:
@@ -48,22 +48,7 @@ class Update(Handler):
        """
        application = Application(repository_id, configuration, report=report, refresh_pacman_database=args.refresh)
        application.on_start()
-
-        packages = application.updates(args.package, aur=args.aur, local=args.local, manual=args.manual, vcs=args.vcs,
-                                       check_files=args.check_files)
-        if args.changes:  # generate changes if requested
-            application.changes(packages)
-
-        if args.dry_run:  # exit from application if no build requested
-            Update.check_status(args.exit_code, packages)  # status code check
-            return
-
-        packages = application.with_dependencies(packages, process_dependencies=args.dependencies)
-        packagers = Packagers(args.username, {package.base: package.packager for package in packages})
-
-        application.print_updates(packages, log_fn=application.logger.info)
-        result = application.update(packages, packagers, bump_pkgrel=args.increment)
-        Update.check_status(args.exit_code, not result.is_empty)
+        Update.perform_action(application, args)

    @staticmethod
    def _set_repo_check_parser(root: SubParserAction) -> argparse.ArgumentParser:
@@ -153,6 +138,31 @@ class Update(Handler):
            return print(line) if dry_run else application.logger.info(line)  # pylint: disable=bad-builtin
        return inner

+    @staticmethod
+    def perform_action(application: Application, args: argparse.Namespace) -> None:
+        """
+        perform update action
+
+        Args:
+            application(Application): application instance
+            args(argparse.Namespace): command line args
+        """
+        packages = application.updates(args.package, aur=args.aur, local=args.local, manual=args.manual, vcs=args.vcs,
+                                       check_files=args.check_files)
+        if args.changes:  # generate changes if requested
+            application.changes(packages)
+
+        if args.dry_run:  # exit from application if no build requested
+            Update.check_status(args.exit_code, packages)  # status code check
+            return
+
+        packages = application.with_dependencies(packages, process_dependencies=args.dependencies)
+        packagers = Packagers(args.username, {package.base: package.packager for package in packages})
+
+        application.print_updates(packages, log_fn=application.logger.info)
+        result = application.update(packages, packagers, bump_pkgrel=args.increment)
+        Update.check_status(args.exit_code, not result.is_empty)
+
    arguments = [
        _set_repo_check_parser,
        _set_repo_update_parser,
@@ -24,10 +24,11 @@ import tarfile
 from collections.abc import Iterable, Iterator
 from functools import cached_property
 from pathlib import Path
-from pyalpm import DB, Handle, Package, SIG_DATABASE_OPTIONAL, SIG_PACKAGE_OPTIONAL  # type: ignore[import-not-found]
+from pyalpm import DB, Package, SIG_DATABASE_OPTIONAL, SIG_PACKAGE_OPTIONAL  # type: ignore[import-not-found]
 from string import Template

 from ahriman.core.alpm.pacman_database import PacmanDatabase
+from ahriman.core.alpm.pacman_handle import PacmanHandle
 from ahriman.core.configuration import Configuration
 from ahriman.core.log import LazyLogging
 from ahriman.core.utils import trim_package
@@ -61,16 +62,16 @@ class Pacman(LazyLogging):
        self.refresh_database = refresh_database

    @cached_property
-    def handle(self) -> Handle:
+    def handle(self) -> PacmanHandle:
        """
        pyalpm handle

        Returns:
-            Handle: generated pyalpm handle instance
+            PacmanHandle: generated pyalpm handle instance
        """
        return self.__create_handle(refresh_database=self.refresh_database)

-    def __create_handle(self, *, refresh_database: PacmanSynchronization) -> Handle:
+    def __create_handle(self, *, refresh_database: PacmanSynchronization) -> PacmanHandle:
        """
        create lazy handle function

@@ -78,14 +79,14 @@ class Pacman(LazyLogging):
            refresh_database(PacmanSynchronization): synchronize local cache to remote

        Returns:
-            Handle: fully initialized pacman handle
+            PacmanHandle: fully initialized pacman handle
        """
        pacman_root = self.configuration.getpath("alpm", "database")
        use_ahriman_cache = self.configuration.getboolean("alpm", "use_ahriman_cache")

        database_path = self.repository_paths.pacman if use_ahriman_cache else pacman_root
        root = self.configuration.getpath("alpm", "root")
-        handle = Handle(str(root), str(database_path))
+        handle = PacmanHandle(str(root), str(database_path))

        for repository in self.configuration.getlist("alpm", "repositories"):
            database = self.database_init(handle, repository, self.repository_id.architecture)
@@ -99,12 +100,12 @@ class Pacman(LazyLogging):

        return handle

-    def database_copy(self, handle: Handle, database: DB, pacman_root: Path, *, use_ahriman_cache: bool) -> None:
+    def database_copy(self, handle: PacmanHandle, database: DB, pacman_root: Path, *, use_ahriman_cache: bool) -> None:
        """
        copy database from the operating system root to the ahriman local home

        Args:
-            handle(Handle): pacman handle which will be used for database copying
+            handle(PacmanHandle): pacman handle which will be used for database copying
            database(DB): pacman database instance to be copied
            pacman_root(Path): operating system pacman root
            use_ahriman_cache(bool): use local ahriman cache instead of system one
@@ -133,12 +134,12 @@ class Pacman(LazyLogging):
        with self.repository_paths.preserve_owner():
            shutil.copy(src, dst)

-    def database_init(self, handle: Handle, repository: str, architecture: str) -> DB:
+    def database_init(self, handle: PacmanHandle, repository: str, architecture: str) -> DB:
        """
        create database instance from pacman handler and set its properties

        Args:
-            handle(Handle): pacman handle which will be used for database initializing
+            handle(PacmanHandle): pacman handle which will be used for database initializing
            repository(str): pacman repository name (e.g. core)
            architecture(str): repository architecture

@@ -164,12 +165,12 @@ class Pacman(LazyLogging):

        return database

-    def database_sync(self, handle: Handle, *, force: bool) -> None:
+    def database_sync(self, handle: PacmanHandle, *, force: bool) -> None:
        """
        sync local database

        Args:
-            handle(Handle): pacman handle which will be used for database sync
+            handle(PacmanHandle): pacman handle which will be used for database sync
            force(bool): force database synchronization (same as ``pacman -Syy``)
        """
        self.logger.info("refresh ahriman's home pacman database (force refresh %s)", force)
@@ -0,0 +1,81 @@
+#
+# Copyright (c) 2021-2026 ahriman team.
+#
+# This file is part of ahriman
+# (see https://github.com/arcan1s/ahriman).
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+from pathlib import Path
+from pyalpm import Handle, Package  # type: ignore[import-not-found]
+from tempfile import TemporaryDirectory
+from typing import Any, ClassVar, Self
+
+
+class PacmanHandle:
+    """
+    lightweight wrapper for pacman handle to be used for direct alpm operations (e.g. package load)
+
+    Attributes:
+        handle(Handle): pyalpm handle instance
+    """
+
+    _ephemeral: ClassVar[Self | None] = None
+
+    def __init__(self, *args: Any, **kwargs: Any) -> None:
+        """
+        Args:
+            *args(Any): positional arguments for :class:`pyalpm.Handle`
+            **kwargs(Any): keyword arguments for :class:`pyalpm.Handle`
+        """
+        self.handle = Handle(*args, **kwargs)
+
+    @classmethod
+    def ephemeral(cls) -> Self:
+        """
+        create temporary instance with no access to real databases
+
+        Returns:
+            Self: loaded class
+        """
+        if cls._ephemeral is None:
+            # handle creates alpm version file, but we don't use it
+            # so it is ok to just remove it
+            with TemporaryDirectory(ignore_cleanup_errors=True) as dir_name:
+                cls._ephemeral = cls("/", dir_name)
+        return cls._ephemeral
+
+    def package_load(self, path: Path) -> Package:
+        """
+        load package from path to the archive
+
+        Args:
+            path(Path): path to package archive
+
+        Returns:
+            Package: package instance
+        """
+        return self.handle.load_pkg(str(path))
+
+    def __getattr__(self, item: str) -> Any:
+        """
+        proxy methods for :class:`pyalpm.Handle`, because it doesn't allow subclassing
+
+        Args:
+            item(str): property name
+
+        Returns:
+            Any: attribute by its name
+        """
+        return self.handle.__getattribute__(item)
@@ -104,7 +104,7 @@ class PkgbuildParser(shlex.shlex):

        # ignore substitution and extend bash symbols
        self.wordchars += "${}#:+-@!"
-        # in case of default behaviour, it will ignore, for example, segment part of url outside of quotes
+        # in case of default behavior, it will ignore, for example, segment part of url outside of quotes
        self.commenters = ""

    @staticmethod
@@ -72,7 +72,7 @@ class AUR(Remote):
        parse RPC response to package list

        Args:
-            response(dict[str, Any]): RPC response json
+            response(dict[str, Any]): RPC response JSON

        Returns:
            list[AURPackage]: list of parsed packages
@@ -74,7 +74,7 @@ class Official(Remote):
        parse RPC response to package list

        Args:
-            response(dict[str, Any]): RPC response json
+            response(dict[str, Any]): RPC response JSON

        Returns:
            list[AURPackage]: list of parsed packages
@@ -32,7 +32,7 @@ class OfficialSyncdb(Official):
    updates.

    This approach also has limitations, because we don't require superuser rights (neither going to download database
-    separately), the database file might be outdated and must be handled manually (or kind of). This behaviour might be
+    separately), the database file might be outdated and must be handled manually (or kind of). This behavior might be
    changed in the future.

    Still we leave search function based on the official repositories RPC.
@@ -72,17 +72,17 @@ class PackageArchive:
            if not PackageArchive.is_elf(binary_file):
                return []

-            elf_file = ELFFile(binary_file)  # type: ignore[no-untyped-call]
+            elf_file = ELFFile(binary_file)
            dynamic_section = next(
-                (section for section in elf_file.iter_sections()  # type: ignore[no-untyped-call]
+                (section for section in elf_file.iter_sections()
                 if isinstance(section, DynamicSection)),
                None)
            if dynamic_section is None:
                return []

            return [
-                tag.needed
-                for tag in dynamic_section.iter_tags()  # type: ignore[no-untyped-call]
+                tag.needed  # type: ignore[attr-defined]
+                for tag in dynamic_section.iter_tags()
                if tag.entry.d_tag == "DT_NEEDED"
            ]

@@ -22,6 +22,7 @@ from ahriman.core.configuration import Configuration
 from ahriman.core.log import LazyLogging
 from ahriman.core.utils import full_version, utcnow
 from ahriman.models.package import Package
+from ahriman.models.package_source import PackageSource
 from ahriman.models.pkgbuild import Pkgbuild


@@ -64,7 +65,7 @@ class PackageVersion(LazyLogging):

            return full_version(pkgbuild.get("epoch"), pkgbuild["pkgver"], pkgbuild["pkgrel"])
        except Exception:
-            self.logger.exception("cannot determine version of VCS package")
+            self.logger.exception("cannot determine version of VCS package %s", self.package.base)
        finally:
            # clear log files generated by devtools
            for log_file in paths.cache_for(self.package.base).glob("*.log"):
@@ -103,9 +104,14 @@ class PackageVersion(LazyLogging):
        Returns:
            bool: ``True`` if the package is out-of-dated and ``False`` otherwise
        """
+        min_allowed_age = configuration.getint("build", "min_age", fallback=0)
+        min_build_date = utcnow().timestamp() - min_allowed_age
+        if remote.remote.source == PackageSource.AUR and PackageVersion(remote).is_newer_than(min_build_date):
+            self.logger.info("package %s was modified too recently, skip update", remote.base)
+            return False
+
        vcs_allowed_age = configuration.getint("build", "vcs_allowed_age", fallback=0)
        min_vcs_build_date = utcnow().timestamp() - vcs_allowed_age
-
        if calculate_version and not self.is_newer_than(min_vcs_build_date):
            remote_version = PackageVersion(remote).actual_version(configuration)
        else:
@@ -26,6 +26,7 @@ from typing import ClassVar
 from ahriman.core.exceptions import CalledProcessError
 from ahriman.core.log import LazyLogging
 from ahriman.core.utils import check_output, utcnow, walk
+from ahriman.models.changes import Changes
 from ahriman.models.package import Package
 from ahriman.models.pkgbuild import Pkgbuild
 from ahriman.models.pkgbuild_patch import PkgbuildPatch
@@ -51,24 +52,25 @@ class Sources(LazyLogging):
    }

    @staticmethod
-    def changes(source_dir: Path, last_commit_sha: str | None) -> str | None:
+    def changes(source_dir: Path, last_commit_sha: str) -> Changes:
        """
        extract changes from the last known commit if available

        Args:
            source_dir(Path): local path to directory with source files
-            last_commit_sha(str | None): last known commit hash
+            last_commit_sha(str): last known commit hash

        Returns:
-            str | None: changes from the last commit if available or ``None`` otherwise
+            Changes: changes from the last commit if available
        """
-        if last_commit_sha is None:
-            return None  # no previous reference found
-
        instance = Sources()
+
+        diff = None
        if instance.fetch_until(source_dir, commit_sha=last_commit_sha) is not None:
-            return instance.diff(source_dir, last_commit_sha)
-        return None
+            diff = instance.diff(source_dir, last_commit_sha)
+        pkgbuild = instance.read(source_dir, "HEAD", Path("PKGBUILD"))
+
+        return Changes(last_commit_sha, diff, pkgbuild)

    @staticmethod
    def extend_architectures(sources_dir: Path, architecture: str) -> list[PkgbuildPatch]:
@@ -413,3 +415,21 @@ class Sources(LazyLogging):
                         cwd=sources_dir, input_data=patch.serialize(), logger=self.logger)
        else:
            patch.write(sources_dir / "PKGBUILD")
+
+    def read(self, sources_dir: Path, commit_sha: str, path: Path) -> str | None:
+        """
+        read file content from the specified commit
+
+        Args:
+            sources_dir(Path): local path to git repository
+            commit_sha(str): commit hash to read from
+            path(Path): path to file inside the repository
+
+        Returns:
+            str | None: file content at specified commit if available
+        """
+        try:
+            return check_output(*self.git(), "show", f"{commit_sha}:{path}", cwd=sources_dir, logger=self.logger)
+        except CalledProcessError:
+            self.logger.exception("failed to read file %s at %s", path, commit_sha)
+            return None
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
arcanis	2eb51ba85a	Release 2.21.1	2026-07-21 10:46:21 +03:00
arcanis	36e28aba99	fix: always load tab on remount it fixes a bug, which leads to missing tab content load when opening package info	2026-07-21 10:44:20 +03:00
arcanis	81c9e1e596	Release 2.21.0	2026-07-21 00:24:44 +03:00
arcanis	2693f789d0	build: explicit hatchling dep	2026-07-21 00:22:07 +03:00
arcanis	08ade0b425	build: do not use system site packages for archive target	2026-07-21 00:22:07 +03:00
arcanis	c648f91662	build: skip install in publish target	2026-07-21 00:10:37 +03:00
arcanis	20482cb137	misc: rename frontend to just ahriman	2026-07-21 00:09:56 +03:00
arcanis	70829619a1	build: handle posargs for tests	2026-07-20 12:48:47 +03:00
arcanis	dd659820da	build: try to handle workspace packages for tests	2026-07-19 23:58:49 +03:00
arcanis	e835668f7d	feat: add cooldown for aur packages	2026-07-18 21:55:26 +03:00
arcanis	526edfe2cd	build: update frontend dependencies	2026-07-18 20:10:32 +03:00
arcanis	a4a7c13344	fix: disable colors for importing parser calls In case if parser is used to generate docs, it remains w\o colors, but help messages are still formatted with it	2026-07-18 14:12:33 +03:00
arcanis	fd6add46f9	build: fix import paths for rtd	2026-07-17 14:57:19 +03:00
arcanisandGitHub	700893ecac	build: subpackages implementation (#164 ) * migrate to hatch * reorder tests * generic fixtures * straight forward conftest * fix docs generation * fix tox environments * reformat tomls * cleanup pyproject * some play with renaming * move root conftest into pytest plugins * fix setup script * move fixtures to __init__.py * remove duplicate fixtures * disable pylint warning * simplify configuration fixture * remove empty conftest * remove crap from local pyprojects	2026-07-17 14:00:20 +03:00
arcanis	f12278a31d	build: reorganize scripts	2026-07-16 23:07:09 +03:00
arcanis	3492892cd2	build: replace deprecated ::set-output with GITHUB_OUTPUT	2026-07-08 15:01:06 +03:00
arcanis	aef7fa5f93	build: update frontend dependencies	2026-07-06 16:16:31 +03:00
arcanis	c412b08135	fix: remove staleTime defaults for query client	2026-07-06 15:33:20 +03:00
arcanis	a3b6372c11	fix: override head method for sse endpoint to make it actually working	2026-07-06 14:44:29 +03:00
arcanis	78288befb8	build: use python 3.13 lowerbound	2026-07-06 13:56:02 +03:00
arcanis	49cd3d43c8	fix: handle errors in sse stream	2026-06-09 01:01:08 +03:00
arcanis	d9b52806c0	fix: clear subscriber map on shutdown Even though it is not a case in the application, the interface could be used externally	2026-06-07 11:58:04 +03:00
arcanis	774db2d780	type: fix typing ignore with the last typing update	2026-05-31 20:04:25 +03:00
arcanis	68afda4c71	feat: allow readonly events with read permission	2026-05-26 20:51:06 +03:00
arcanis	fa9fa73078	docs: bump python version to 2.13	2026-05-08 10:25:24 +03:00
arcanisandGitHub	3e1e24cb50	feat: SSE support (#162 ) * event bus implementation * update tests * docs update * review fixes * update configs * fix typo * frontend changes * install missing pacakge * queue processing simplification	2026-05-08 10:20:03 +03:00
arcanis	18fe38c30b	build: use build_date argument for docker image instead of guessing from pacman root	2026-05-05 13:45:42 +03:00
arcanis	6ee8b26bd5	feat: show aur url in interface	2026-04-22 06:56:28 +03:00
arcanis	fce49f22c9	type: fix mypy warnings in updated version	2026-04-03 13:36:41 +03:00
arcanis	af8e2c9e9b	build: update rtd.io image	2026-03-30 19:20:03 +03:00
arcanis	1c312bb528	feat: add error boundary	2026-03-24 01:17:42 +02:00
arcanis	e39194e9f6	feat: etag support	2026-03-23 23:58:56 +02:00
arcanis	21cc029c18	refactor: use usedforsecurity flag for md5 calculations	2026-03-23 23:07:31 +02:00
arcanis	40671b99d5	feat: allow to configure cors	2026-03-23 16:39:07 +02:00
arcanis	3ad2c494af	docs: update docstrings	2026-03-22 17:23:16 +02:00
arcanis	34014d1cdd	build: add more rules for typescript	2026-03-22 17:23:16 +02:00
arcanis	93ed2b864b	docs: describe rollback procedure in docs	2026-03-22 17:23:16 +02:00
arcanis	cca931ccd0	fix: handle errors on pkgbuild reading	2026-03-22 13:10:09 +02:00
arcanis	5e090cebdb	refactor: reorder arguments in web ui	2026-03-22 04:03:41 +02:00
arcanisandGitHub	d7984c12f0	feat: package rollback support (#161 ) * implement support of rollback handler * react interface for the rollback	2026-03-22 00:36:48 +02:00
arcanis	96684d7ddd	refactor: move package archive lockup to package info trait	2026-03-18 18:48:27 +02:00
arcanis	2e9837b70d	build: update frontend dependencies	2026-03-15 19:18:58 +02:00
arcanis	ac4a8fb2cd	fix: hide ignore_list because it is ambiguous now	2026-03-15 19:06:53 +02:00
arcanis	1db8eb0ac4	fix: preserve hold status on status updates	2026-03-15 19:03:05 +02:00
arcanisandGitHub	dc394f7df9	feat: dynamic package hold (#160 ) * add dynamic hold implementation to backend * update frontend to support new status * force reporter loader * handle missing packages explicitly * handle missing packages explicitly	2026-03-15 18:47:02 +02:00
arcanis	058f784b05	fix: center icons on buttons	2026-03-15 17:07:39 +02:00
arcanis	f688768ca7	fix: fallback to timestamp in case if crypto context is not available Previous tests have been done in either secure (HTTPS) or loopback (localhost) environments, so I missed the case, that crypto methods might not be available Fixes #159	2026-03-13 17:00:06 +02:00
arcanis	a09ad7617d	feat: support archive listing	2026-03-12 22:26:35 +02:00
arcanis	81aeb56ba3	refactor: lightweight Package.from_archive method	2026-03-11 23:00:55 +02:00
arcanis	2cd4ef5e86	refactor: separate package_archives method from trigger	2026-03-11 13:36:59 +02:00
arcanis	998ed48dde	feat: add pkgbuild subscommands	2026-03-11 13:31:19 +02:00
arcanis	021d88dc4c	feat: store and show pkgbuild (implements #157 )	2026-03-11 01:05:06 +02:00
arcanis	9012ee7144	feat: add dark theme support and increase contrast	2026-03-08 22:59:31 +02:00
arcanis	945ddb2942	Release 2.20.0	2026-03-08 16:51:28 +02:00
arcanis	9cd0926588	docs: add http client description	2026-03-08 16:49:46 +02:00