# Provisioning Platform Quick Reference\n\n**Version**: 3.5.0\n**Last Updated**: 2025-10-09\n\n---\n\n## Quick Navigation\n\n- [Plugin Commands](#plugin-commands) - Native Nushell plugins (10-50x faster)\n- [CLI Shortcuts](#cli-shortcuts) - 80+ command shortcuts\n- [Infrastructure Commands](#infrastructure-commands) - Servers, taskservs, clusters\n- [Orchestration Commands](#orchestration-commands) - Workflows, batch operations\n- [Configuration Commands](#configuration-commands) - Config, validation, environment\n- [Workspace Commands](#workspace-commands) - Multi-workspace management\n- [Security Commands](#security-commands) - Auth, MFA, secrets, compliance\n- [Common Workflows](#common-workflows) - Complete deployment examples\n- [Debug and Check Mode](#debug-and-check-mode) - Testing and troubleshooting\n- [Output Formats](#output-formats) - JSON, YAML, table formatting\n\n---\n\n## Plugin Commands\n\nNative Nushell plugins for high-performance operations. **10-50x faster than HTTP API**.\n\n### Authentication Plugin (nu_plugin_auth)\n\n```\n# Login (password prompted securely)\nauth login admin\n\n# Login with custom URL\nauth login admin --url https://control-center.example.com\n\n# Verify current session\nauth verify\n# Returns: { active: true, user: "admin", role: "Admin", expires_at: "...", mfa_verified: true }\n\n# List active sessions\nauth sessions\n\n# Logout\nauth logout\n\n# MFA enrollment\nauth mfa enroll totp       # TOTP (Google Authenticator, Authy)\nauth mfa enroll webauthn   # WebAuthn (YubiKey, Touch ID, Windows Hello)\n\n# MFA verification\nauth mfa verify --code 123456\nauth mfa verify --code ABCD-EFGH-IJKL  # Backup code\n```\n\n**Installation:**\n\n```\ncd provisioning/core/plugins/nushell-plugins\ncargo build --release -p nu_plugin_auth\nplugin add target/release/nu_plugin_auth\n```\n\n### KMS Plugin (nu_plugin_kms)\n\n**Performance**: 10x faster encryption (~5 ms vs ~50 ms HTTP)\n\n```\n# Encrypt with auto-detected backend\nkms encrypt "secret data"\n# vault:v1:abc123...\n\n# Encrypt with specific backend\nkms encrypt "data" --backend rustyvault --key provisioning-main\nkms encrypt "data" --backend age --key age1xxxxxxxxx\nkms encrypt "data" --backend aws --key alias/provisioning\n\n# Encrypt with context (AAD for additional security)\nkms encrypt "data" --context "user=admin,env=production"\n\n# Decrypt (auto-detects backend from format)\nkms decrypt "vault:v1:abc123..."\nkms decrypt "-----BEGIN AGE ENCRYPTED FILE-----..."\n\n# Decrypt with context (must match encryption context)\nkms decrypt "vault:v1:abc123..." --context "user=admin,env=production"\n\n# Generate data encryption key\nkms generate-key\nkms generate-key --spec AES256\n\n# Check backend status\nkms status\n```\n\n**Supported Backends:**\n\n- **rustyvault**: High-performance (~5 ms) - Production\n- **age**: Local encryption (~3 ms) - Development\n- **cosmian**: Cloud KMS (~30 ms)\n- **aws**: AWS KMS (~50 ms)\n- **vault**: HashiCorp Vault (~40 ms)\n\n**Installation:**\n\n```\ncargo build --release -p nu_plugin_kms\nplugin add target/release/nu_plugin_kms\n\n# Set backend environment\nexport RUSTYVAULT_ADDR="http://localhost:8200"\nexport RUSTYVAULT_TOKEN="hvs.xxxxx"\n```\n\n### Orchestrator Plugin (nu_plugin_orchestrator)\n\n**Performance**: 30-50x faster queries (~1 ms vs ~30-50 ms HTTP)\n\n```\n# Get orchestrator status (direct file access, ~1 ms)\norch status\n# { active_tasks: 5, completed_tasks: 120, health: "healthy" }\n\n# Validate workflow Nickel file (~10 ms vs ~100 ms HTTP)\norch validate workflows/deploy.ncl\norch validate workflows/deploy.ncl --strict\n\n# List tasks (direct file read, ~5 ms)\norch tasks\norch tasks --status running\norch tasks --status failed --limit 10\n```\n\n**Installation:**\n\n```\ncargo build --release -p nu_plugin_orchestrator\nplugin add target/release/nu_plugin_orchestrator\n```\n\n### Plugin Performance Comparison\n\n| Operation | HTTP API | Plugin | Speedup |\n| ----------- | ---------- | -------- | --------- |\n| KMS Encrypt | ~50 ms | ~5 ms | **10x** |\n| KMS Decrypt | ~50 ms | ~5 ms | **10x** |\n| Orch Status | ~30 ms | ~1 ms | **30x** |\n| Orch Validate | ~100 ms | ~10 ms | **10x** |\n| Orch Tasks | ~50 ms | ~5 ms | **10x** |\n| Auth Verify | ~50 ms | ~10 ms | **5x** |\n\n---\n\n## CLI Shortcuts\n\n### Infrastructure Shortcuts\n\n```\n# Server shortcuts\nprovisioning s              # server (same as 'provisioning server')\nprovisioning s create       # Create servers\nprovisioning s delete       # Delete servers\nprovisioning s list         # List servers\nprovisioning s ssh web-01   # SSH into server\n\n# Taskserv shortcuts\nprovisioning t              # taskserv (same as 'provisioning taskserv')\nprovisioning task           # taskserv (alias)\nprovisioning t create kubernetes\nprovisioning t delete kubernetes\nprovisioning t list\nprovisioning t generate kubernetes\nprovisioning t check-updates\n\n# Cluster shortcuts\nprovisioning cl             # cluster (same as 'provisioning cluster')\nprovisioning cl create buildkit\nprovisioning cl delete buildkit\nprovisioning cl list\n\n# Infrastructure shortcuts\nprovisioning i              # infra (same as 'provisioning infra')\nprovisioning infras         # infra (alias)\nprovisioning i list\nprovisioning i validate\n```\n\n### Orchestration Shortcuts\n\n```\n# Workflow shortcuts\nprovisioning wf             # workflow (same as 'provisioning workflow')\nprovisioning flow           # workflow (alias)\nprovisioning wf list\nprovisioning wf status <task_id>\nprovisioning wf monitor <task_id>\nprovisioning wf stats\nprovisioning wf cleanup\n\n# Batch shortcuts\nprovisioning bat            # batch (same as 'provisioning batch')\nprovisioning batch submit workflows/example.ncl\nprovisioning bat list\nprovisioning bat status <workflow_id>\nprovisioning bat monitor <workflow_id>\nprovisioning bat rollback <workflow_id>\nprovisioning bat cancel <workflow_id>\nprovisioning bat stats\n\n# Orchestrator shortcuts\nprovisioning orch           # orchestrator (same as 'provisioning orchestrator')\nprovisioning orch start\nprovisioning orch stop\nprovisioning orch status\nprovisioning orch health\nprovisioning orch logs\n```\n\n### Development Shortcuts\n\n```\n# Module shortcuts\nprovisioning mod            # module (same as 'provisioning module')\nprovisioning mod discover taskserv\nprovisioning mod discover provider\nprovisioning mod discover cluster\nprovisioning mod load taskserv workspace kubernetes\nprovisioning mod list taskserv workspace\nprovisioning mod unload taskserv workspace kubernetes\nprovisioning mod sync-kcl\n\n# Layer shortcuts\nprovisioning lyr            # layer (same as 'provisioning layer')\nprovisioning lyr explain\nprovisioning lyr show\nprovisioning lyr test\nprovisioning lyr stats\n\n# Version shortcuts\nprovisioning version check\nprovisioning version show\nprovisioning version updates\nprovisioning version apply <name> <version>\nprovisioning version taskserv <name>\n\n# Package shortcuts\nprovisioning pack core\nprovisioning pack provider upcloud\nprovisioning pack list\nprovisioning pack clean\n```\n\n### Workspace Shortcuts\n\n```\n# Workspace shortcuts\nprovisioning ws             # workspace (same as 'provisioning workspace')\nprovisioning ws init\nprovisioning ws create <name>\nprovisioning ws validate\nprovisioning ws info\nprovisioning ws list\nprovisioning ws migrate\nprovisioning ws switch <name>  # Switch active workspace\nprovisioning ws active         # Show active workspace\n\n# Template shortcuts\nprovisioning tpl            # template (same as 'provisioning template')\nprovisioning tmpl           # template (alias)\nprovisioning tpl list\nprovisioning tpl types\nprovisioning tpl show <name>\nprovisioning tpl apply <name>\nprovisioning tpl validate <name>\n```\n\n### Configuration Shortcuts\n\n```\n# Environment shortcuts\nprovisioning e              # env (same as 'provisioning env')\nprovisioning val            # validate (same as 'provisioning validate')\nprovisioning st             # setup (same as 'provisioning setup')\nprovisioning config         # setup (alias)\n\n# Show shortcuts\nprovisioning show settings\nprovisioning show servers\nprovisioning show config\n\n# Initialization\nprovisioning init <name>\n\n# All environment\nprovisioning allenv         # Show all config and environment\n```\n\n### Utility Shortcuts\n\n```\n# List shortcuts\nprovisioning l              # list (same as 'provisioning list')\nprovisioning ls             # list (alias)\nprovisioning list           # list (full)\n\n# SSH operations\nprovisioning ssh <server>\n\n# SOPS operations\nprovisioning sops <file>    # Edit encrypted file\n\n# Cache management\nprovisioning cache clear\nprovisioning cache stats\n\n# Provider operations\nprovisioning providers list\nprovisioning providers info <name>\n\n# Nushell session\nprovisioning nu             # Start Nushell with provisioning library loaded\n\n# QR code generation\nprovisioning qr <data>\n\n# Nushell information\nprovisioning nuinfo\n\n# Plugin management\nprovisioning plugin         # plugin (same as 'provisioning plugin')\nprovisioning plugins        # plugin (alias)\nprovisioning plugin list\nprovisioning plugin test nu_plugin_kms\n```\n\n### Generation Shortcuts\n\n```\n# Generate shortcuts\nprovisioning g              # generate (same as 'provisioning generate')\nprovisioning gen            # generate (alias)\nprovisioning g server\nprovisioning g taskserv <name>\nprovisioning g cluster <name>\nprovisioning g infra --new <name>\nprovisioning g new <type> <name>\n```\n\n### Action Shortcuts\n\n```\n# Common actions\nprovisioning c              # create (same as 'provisioning create')\nprovisioning d              # delete (same as 'provisioning delete')\nprovisioning u              # update (same as 'provisioning update')\n\n# Pricing shortcuts\nprovisioning price          # Show server pricing\nprovisioning cost           # price (alias)\nprovisioning costs          # price (alias)\n\n# Create server + taskservs (combo command)\nprovisioning cst            # create-server-task\nprovisioning csts           # create-server-task (alias)\n```\n\n---\n\n## Infrastructure Commands\n\n### Server Management\n\n```\n# Create servers\nprovisioning server create\nprovisioning server create --check  # Dry-run mode\nprovisioning server create --yes    # Skip confirmation\n\n# Delete servers\nprovisioning server delete\nprovisioning server delete --check\nprovisioning server delete --yes\n\n# List servers\nprovisioning server list\nprovisioning server list --infra wuji\nprovisioning server list --out json\n\n# SSH into server\nprovisioning server ssh web-01\nprovisioning server ssh db-01\n\n# Show pricing\nprovisioning server price\nprovisioning server price --provider upcloud\n```\n\n### Taskserv Management\n\n```\n# Create taskserv\nprovisioning taskserv create kubernetes\nprovisioning taskserv create kubernetes --check\nprovisioning taskserv create kubernetes --infra wuji\n\n# Delete taskserv\nprovisioning taskserv delete kubernetes\nprovisioning taskserv delete kubernetes --check\n\n# List taskservs\nprovisioning taskserv list\nprovisioning taskserv list --infra wuji\n\n# Generate taskserv configuration\nprovisioning taskserv generate kubernetes\nprovisioning taskserv generate kubernetes --out yaml\n\n# Check for updates\nprovisioning taskserv check-updates\nprovisioning taskserv check-updates --taskserv kubernetes\n```\n\n### Cluster Management\n\n```\n# Create cluster\nprovisioning cluster create buildkit\nprovisioning cluster create buildkit --check\nprovisioning cluster create buildkit --infra wuji\n\n# Delete cluster\nprovisioning cluster delete buildkit\nprovisioning cluster delete buildkit --check\n\n# List clusters\nprovisioning cluster list\nprovisioning cluster list --infra wuji\n```\n\n---\n\n## Orchestration Commands\n\n### Workflow Management\n\n```\n# Submit server creation workflow\nnu -c "use core/nulib/workflows/server_create.nu *; server_create_workflow 'wuji' '' [] --check"\n\n# Submit taskserv workflow\nnu -c "use core/nulib/workflows/taskserv.nu *; taskserv create 'kubernetes' 'wuji' --check"\n\n# Submit cluster workflow\nnu -c "use core/nulib/workflows/cluster.nu *; cluster create 'buildkit' 'wuji' --check"\n\n# List all workflows\nprovisioning workflow list\nnu -c "use core/nulib/workflows/management.nu *; workflow list"\n\n# Get workflow statistics\nprovisioning workflow stats\nnu -c "use core/nulib/workflows/management.nu *; workflow stats"\n\n# Monitor workflow in real-time\nprovisioning workflow monitor <task_id>\nnu -c "use core/nulib/workflows/management.nu *; workflow monitor <task_id>"\n\n# Check orchestrator health\nprovisioning workflow orchestrator\nnu -c "use core/nulib/workflows/management.nu *; workflow orchestrator"\n\n# Get specific workflow status\nprovisioning workflow status <task_id>\nnu -c "use core/nulib/workflows/management.nu *; workflow status <task_id>"\n```\n\n### Batch Operations\n\n```\n# Submit batch workflow from Nickel\nprovisioning batch submit workflows/example_batch.ncl\nnu -c "use core/nulib/workflows/batch.nu *; batch submit workflows/example_batch.ncl"\n\n# Monitor batch workflow progress\nprovisioning batch monitor <workflow_id>\nnu -c "use core/nulib/workflows/batch.nu *; batch monitor <workflow_id>"\n\n# List batch workflows with filtering\nprovisioning batch list\nprovisioning batch list --status Running\nnu -c "use core/nulib/workflows/batch.nu *; batch list --status Running"\n\n# Get detailed batch status\nprovisioning batch status <workflow_id>\nnu -c "use core/nulib/workflows/batch.nu *; batch status <workflow_id>"\n\n# Initiate rollback for failed workflow\nprovisioning batch rollback <workflow_id>\nnu -c "use core/nulib/workflows/batch.nu *; batch rollback <workflow_id>"\n\n# Cancel running batch\nprovisioning batch cancel <workflow_id>\n\n# Show batch workflow statistics\nprovisioning batch stats\nnu -c "use core/nulib/workflows/batch.nu *; batch stats"\n```\n\n### Orchestrator Management\n\n```\n# Start orchestrator in background\ncd provisioning/platform/orchestrator\n./scripts/start-orchestrator.nu --background\n\n# Check orchestrator status\n./scripts/start-orchestrator.nu --check\nprovisioning orchestrator status\n\n# Stop orchestrator\n./scripts/start-orchestrator.nu --stop\nprovisioning orchestrator stop\n\n# View logs\ntail -f provisioning/platform/orchestrator/data/orchestrator.log\nprovisioning orchestrator logs\n```\n\n---\n\n## Configuration Commands\n\n### Environment and Validation\n\n```\n# Show environment variables\nprovisioning env\n\n# Show all environment and configuration\nprovisioning allenv\n\n# Validate configuration\nprovisioning validate config\nprovisioning validate infra\n\n# Setup wizard\nprovisioning setup\n```\n\n### Configuration Files\n\n```\n# System defaults\nless provisioning/config/config.defaults.toml\n\n# User configuration\nvim workspace/config/local-overrides.toml\n\n# Environment-specific configs\nvim workspace/config/dev-defaults.toml\nvim workspace/config/test-defaults.toml\nvim workspace/config/prod-defaults.toml\n\n# Infrastructure-specific config\nvim workspace/infra/<name>/config.toml\n```\n\n### HTTP Configuration\n\n```\n# Configure HTTP client behavior\n# In workspace/config/local-overrides.toml:\n[http]\nuse_curl = true  # Use curl instead of ureq\n```\n\n---\n\n## Workspace Commands\n\n### Workspace Management\n\n```\n# List all workspaces\nprovisioning workspace list\n\n# Show active workspace\nprovisioning workspace active\n\n# Switch to another workspace\nprovisioning workspace switch <name>\nprovisioning workspace activate <name>  # alias\n\n# Register new workspace\nprovisioning workspace register <name> <path>\nprovisioning workspace register <name> <path> --activate\n\n# Remove workspace from registry\nprovisioning workspace remove <name>\nprovisioning workspace remove <name> --force\n\n# Initialize new workspace\nprovisioning workspace init\nprovisioning workspace init --name production\n\n# Create new workspace\nprovisioning workspace create <name>\n\n# Validate workspace\nprovisioning workspace validate\n\n# Show workspace info\nprovisioning workspace info\n\n# Migrate workspace\nprovisioning workspace migrate\n```\n\n### User Preferences\n\n```\n# View user preferences\nprovisioning workspace preferences\n\n# Set user preference\nprovisioning workspace set-preference editor vim\nprovisioning workspace set-preference output_format yaml\nprovisioning workspace set-preference confirm_delete true\n\n# Get user preference\nprovisioning workspace get-preference editor\n```\n\n**User Config Location:**\n\n- macOS: `~/Library/Application Support/provisioning/user_config.yaml`\n- Linux: `~/.config/provisioning/user_config.yaml`\n- Windows: `%APPDATA%\provisioning\user_config.yaml`\n\n---\n\n## Security Commands\n\n### Authentication (via CLI)\n\n```\n# Login\nprovisioning login admin\n\n# Logout\nprovisioning logout\n\n# Show session status\nprovisioning auth status\n\n# List active sessions\nprovisioning auth sessions\n```\n\n### Multi-Factor Authentication (MFA)\n\n```\n# Enroll in TOTP (Google Authenticator, Authy)\nprovisioning mfa totp enroll\n\n# Enroll in WebAuthn (YubiKey, Touch ID, Windows Hello)\nprovisioning mfa webauthn enroll\n\n# Verify MFA code\nprovisioning mfa totp verify --code 123456\nprovisioning mfa webauthn verify\n\n# List registered devices\nprovisioning mfa devices\n```\n\n### Secrets Management\n\n```\n# Generate AWS STS credentials (15 min-12h TTL)\nprovisioning secrets generate aws --ttl 1hr\n\n# Generate SSH key pair (Ed25519)\nprovisioning secrets generate ssh --ttl 4hr\n\n# List active secrets\nprovisioning secrets list\n\n# Revoke secret\nprovisioning secrets revoke <secret_id>\n\n# Cleanup expired secrets\nprovisioning secrets cleanup\n```\n\n### SSH Temporal Keys\n\n```\n# Connect to server with temporal key\nprovisioning ssh connect server01 --ttl 1hr\n\n# Generate SSH key pair only\nprovisioning ssh generate --ttl 4hr\n\n# List active SSH keys\nprovisioning ssh list\n\n# Revoke SSH key\nprovisioning ssh revoke <key_id>\n```\n\n### KMS Operations (via CLI)\n\n```\n# Encrypt configuration file\nprovisioning kms encrypt secure.yaml\n\n# Decrypt configuration file\nprovisioning kms decrypt secure.yaml.enc\n\n# Encrypt entire config directory\nprovisioning config encrypt workspace/infra/production/\n\n# Decrypt config directory\nprovisioning config decrypt workspace/infra/production/\n```\n\n### Break-Glass Emergency Access\n\n```\n# Request emergency access\nprovisioning break-glass request "Production database outage"\n\n# Approve emergency request (requires admin)\nprovisioning break-glass approve <request_id> --reason "Approved by CTO"\n\n# List break-glass sessions\nprovisioning break-glass list\n\n# Revoke break-glass session\nprovisioning break-glass revoke <session_id>\n```\n\n### Compliance and Audit\n\n```\n# Generate compliance report\nprovisioning compliance report\nprovisioning compliance report --standard gdpr\nprovisioning compliance report --standard soc2\nprovisioning compliance report --standard iso27001\n\n# GDPR operations\nprovisioning compliance gdpr export <user_id>\nprovisioning compliance gdpr delete <user_id>\nprovisioning compliance gdpr rectify <user_id>\n\n# Incident management\nprovisioning compliance incident create "Security breach detected"\nprovisioning compliance incident list\nprovisioning compliance incident update <incident_id> --status investigating\n\n# Audit log queries\nprovisioning audit query --user alice --action deploy --from 24h\nprovisioning audit export --format json --output audit-logs.json\n```\n\n---\n\n## Common Workflows\n\n### Complete Deployment from Scratch\n\n```\n# 1. Initialize workspace\nprovisioning workspace init --name production\n\n# 2. Validate configuration\nprovisioning validate config\n\n# 3. Create infrastructure definition\nprovisioning generate infra --new production\n\n# 4. Create servers (check mode first)\nprovisioning server create --infra production --check\n\n# 5. Create servers (actual deployment)\nprovisioning server create --infra production --yes\n\n# 6. Install Kubernetes\nprovisioning taskserv create kubernetes --infra production --check\nprovisioning taskserv create kubernetes --infra production\n\n# 7. Deploy cluster services\nprovisioning cluster create production --check\nprovisioning cluster create production\n\n# 8. Verify deployment\nprovisioning server list --infra production\nprovisioning taskserv list --infra production\n\n# 9. SSH to servers\nprovisioning server ssh k8s-master-01\n```\n\n### Multi-Environment Deployment\n\n```\n# Deploy to dev\nprovisioning server create --infra dev --check\nprovisioning server create --infra dev\nprovisioning taskserv create kubernetes --infra dev\n\n# Deploy to staging\nprovisioning server create --infra staging --check\nprovisioning server create --infra staging\nprovisioning taskserv create kubernetes --infra staging\n\n# Deploy to production (with confirmation)\nprovisioning server create --infra production --check\nprovisioning server create --infra production\nprovisioning taskserv create kubernetes --infra production\n```\n\n### Update Infrastructure\n\n```\n# 1. Check for updates\nprovisioning taskserv check-updates\n\n# 2. Update specific taskserv (check mode)\nprovisioning taskserv update kubernetes --check\n\n# 3. Apply update\nprovisioning taskserv update kubernetes\n\n# 4. Verify update\nprovisioning taskserv list --infra production | where name == kubernetes\n```\n\n### Encrypted Secrets Deployment\n\n```\n# 1. Authenticate\nauth login admin\nauth mfa verify --code 123456\n\n# 2. Encrypt secrets\nkms encrypt (open secrets/production.yaml) --backend rustyvault | save secrets/production.enc\n\n# 3. Deploy with encrypted secrets\nprovisioning cluster create production --secrets secrets/production.enc\n\n# 4. Verify deployment\norch tasks --status completed\n```\n\n---\n\n## Debug and Check Mode\n\n### Debug Mode\n\nEnable verbose logging with `--debug` or `-x` flag:\n\n```\n# Server creation with debug output\nprovisioning server create --debug\nprovisioning server create -x\n\n# Taskserv creation with debug\nprovisioning taskserv create kubernetes --debug\n\n# Show detailed error traces\nprovisioning --debug taskserv create kubernetes\n```\n\n### Check Mode (Dry Run)\n\nPreview changes without applying them with `--check` or `-c` flag:\n\n```\n# Check what servers would be created\nprovisioning server create --check\nprovisioning server create -c\n\n# Check taskserv installation\nprovisioning taskserv create kubernetes --check\n\n# Check cluster creation\nprovisioning cluster create buildkit --check\n\n# Combine with debug for detailed preview\nprovisioning server create --check --debug\n```\n\n### Auto-Confirm Mode\n\nSkip confirmation prompts with `--yes` or `-y` flag:\n\n```\n# Auto-confirm server creation\nprovisioning server create --yes\nprovisioning server create -y\n\n# Auto-confirm deletion\nprovisioning server delete --yes\n```\n\n### Wait Mode\n\nWait for operations to complete with `--wait` or `-w` flag:\n\n```\n# Wait for server creation to complete\nprovisioning server create --wait\n\n# Wait for taskserv installation\nprovisioning taskserv create kubernetes --wait\n```\n\n### Infrastructure Selection\n\nSpecify target infrastructure with `--infra` or `-i` flag:\n\n```\n# Create servers in specific infrastructure\nprovisioning server create --infra production\nprovisioning server create -i production\n\n# List servers in specific infrastructure\nprovisioning server list --infra production\n```\n\n---\n\n## Output Formats\n\n### JSON Output\n\n```\n# Output as JSON\nprovisioning server list --out json\nprovisioning taskserv list --out json\n\n# Pipeline JSON output\nprovisioning server list --out json | jq '.[] | select(.status == "running")'\n```\n\n### YAML Output\n\n```\n# Output as YAML\nprovisioning server list --out yaml\nprovisioning taskserv list --out yaml\n\n# Pipeline YAML output\nprovisioning server list --out yaml | yq '.[] | select(.status == "running")'\n```\n\n### Table Output (Default)\n\n```\n# Output as table (default)\nprovisioning server list\nprovisioning server list --out table\n\n# Pretty-printed table\nprovisioning server list | table\n```\n\n### Text Output\n\n```\n# Output as plain text\nprovisioning server list --out text\n```\n\n---\n\n## Performance Tips\n\n### Use Plugins for Frequent Operations\n\n```\n# ❌ Slow: HTTP API (50 ms per call)\nfor i in 1..100 { http post http://localhost:9998/encrypt { data: "secret" } }\n\n# ✅ Fast: Plugin (5 ms per call, 10x faster)\nfor i in 1..100 { kms encrypt "secret" }\n```\n\n### Batch Operations\n\n```\n# Use batch workflows for multiple operations\nprovisioning batch submit workflows/multi-cloud-deploy.ncl\n```\n\n### Check Mode for Testing\n\n```\n# Always test with --check first\nprovisioning server create --check\nprovisioning server create  # Only after verification\n```\n\n---\n\n## Help System\n\n### Command-Specific Help\n\n```\n# Show help for specific command\nprovisioning help server\nprovisioning help taskserv\nprovisioning help cluster\nprovisioning help workflow\nprovisioning help batch\n\n# Show help for command category\nprovisioning help infra\nprovisioning help orch\nprovisioning help dev\nprovisioning help ws\nprovisioning help config\n```\n\n### Bi-Directional Help\n\n```\n# All these work identically:\nprovisioning help workspace\nprovisioning workspace help\nprovisioning ws help\nprovisioning help ws\n```\n\n### General Help\n\n```\n# Show all commands\nprovisioning help\nprovisioning --help\n\n# Show version\nprovisioning version\nprovisioning --version\n```\n\n---\n\n## Quick Reference: Common Flags\n\n| Flag | Short | Description | Example |\n| ------ | ------- | ------------- | --------- |\n| `--debug` | `-x` | Enable debug mode | `provisioning server create --debug` |\n| `--check` | `-c` | Check mode (dry run) | `provisioning server create --check` |\n| `--yes` | `-y` | Auto-confirm | `provisioning server delete --yes` |\n| `--wait` | `-w` | Wait for completion | `provisioning server create --wait` |\n| `--infra` | `-i` | Specify infrastructure | `provisioning server list --infra prod` |\n| `--out` | - | Output format | `provisioning server list --out json` |\n\n---\n\n## Plugin Installation Quick Reference\n\n```\n# Build all plugins (one-time setup)\ncd provisioning/core/plugins/nushell-plugins\ncargo build --release --all\n\n# Register plugins\nplugin add target/release/nu_plugin_auth\nplugin add target/release/nu_plugin_kms\nplugin add target/release/nu_plugin_orchestrator\n\n# Verify installation\nplugin list | where name =~ "auth|kms|orch"\nauth --help\nkms --help\norch --help\n\n# Set environment\nexport RUSTYVAULT_ADDR="http://localhost:8200"\nexport RUSTYVAULT_TOKEN="hvs.xxxxx"\nexport CONTROL_CENTER_URL="http://localhost:3000"\n```\n\n---\n\n## Related Documentation\n\n- **Complete Plugin Guide**: `docs/user/PLUGIN_INTEGRATION_GUIDE.md`\n- **Plugin Reference**: `docs/user/NUSHELL_PLUGINS_GUIDE.md`\n- **From Scratch Guide**: `docs/guides/from-scratch.md`\n- **Update Infrastructure**: [Update Guide](../guides/update-infrastructure.md)\n- **Customize Infrastructure**: [Customize Guide](../guides/customize-infrastructure.md)\n- **CLI Architecture**: [CLI Reference](../infrastructure/cli-reference.md)\n- **Security System**: [Security Architecture](../security/security-system.md)\n\n---\n\n**For fastest access to this guide**: `provisioning sc`\n\n**Last Updated**: 2025-10-09\n**Maintained By**: Platform Team
