@andreprado/agentkit 0.1.1 → 0.3.0

package/src/cli/index.ts

@@ -1,17 +1,13 @@
 import { spawn } from "node:child_process";
 import { existsSync } from "node:fs";
-import { chmod, mkdir, readFile, writeFile } from "node:fs/promises";
-import { dirname, join, relative, resolve } from "node:path";
+import { readFile } from "node:fs/promises";
+import { join, relative, resolve } from "node:path";
 
 import { createProject } from "../create-project";
-import { buildAgentCapsule } from "../runtime/build";
 import { findAgentCapsuleRoot, loadAgentCapsule } from "../runtime/config";
-import { readLocalDeployStateIfExists, type LocalDeployState } from "../runtime/core/deploy-state";
-import { resolveBuildTarget, resolveDeployTarget } from "../runtime/core/targets";
 import { getConversationFromCwd, listConversationsFromCwd } from "../runtime/conversations";
 import { getConversationTraceFromCwd } from "../runtime/traces";
 import { runAgentMessageFromCwd } from "../runtime/chat";
-import { deployBuildToAgentKitCloud, writeLocalDeployState } from "../runtime/deploy";
 import {
   migrateLocalDatabase,
   openLocalDatabaseShell,
@@ -21,57 +17,23 @@ import {
 import { runEvalsFromCwd, writeEvalFromConversation } from "../runtime/evals";
 import { findAgentKitDocs } from "../runtime/docs";
 import { listCapsuleEnv, setCapsuleEnv, unsetCapsuleEnv } from "../runtime/env";
-import { collectDeployImproveBundle, collectLocalImproveBundle, generateImproveEvals, replayImproveBundle } from "../runtime/improve";
+import { collectLocalImproveBundle, generateImproveEvals, replayImproveBundle } from "../runtime/improve";
 import { checkAgentSpec, initializeAgentSpec } from "../runtime/spec";
 import { checkDefaultSkillStatus, syncDefaultSkillFiles } from "../runtime/skills";
 import { initializeSyncScaffold, runCapsuleSync } from "../runtime/sync";
 import { runToolFromCwd } from "../runtime/tool-runner";
 import { startAgentDevServer } from "../runtime/dev-server";
 import { inspectAgentCapsule } from "../runtime/inspect";
-import { AgentKitError, isAgentKitError } from "../runtime/errors";
-import { prepareVpsDeploy } from "../runtime/targets/vps/deploy";
-import { parseArgs, isHelpRequested, type ParsedArgs } from "./args";
+import { isAgentKitError } from "../runtime/errors";
+import { parseArgs, isHelpRequested } from "./args";
 import { resolveNewProjectName } from "./new-command";
 import {
   defaultAgentKitDevPort,
-  defaultDeployChatAccessTokenName,
-  defaultDeployChatAccessTokenPath,
 } from "./constants";
 import {
-  clearCloudAuth,
-  cloudApiRequest,
-  readCloudAuth,
-  readCloudAuthForApiUrl,
-  readCloudError,
-  resolveCloudApiUrl,
-  verifyCloudLogin,
-  writeCloudAuth,
-  type AccountApiTokenCreateResponse,
-  type AccountApiTokenListResponse,
-  type BillingCheckoutIntentResponse,
-  type BillingCheckoutResponse,
-  type BillingClaimResponse,
-  type BillingPortalResponse,
-  type CloudMeResponse,
-  type DeployAccessTokenCreateResponse,
-  type DeployAccessTokenListResponse,
-} from "./cloud-client";
-import {
-  checkDeployReadiness,
-  formatDeployCloudAuthSummary,
-  formatDeployOnlineCapacity,
-  formatReadinessError,
-  printDeployReadinessReport,
-  resolveProjectIdForSecretCommand,
-  syncHostedSecretsFromLocal,
-} from "./deploy-readiness";
-import { readDeployAccessTokenForUi, startDeployChatUiServer } from "./deploy-chat-ui";
-import {
-  parseCloudApiUrl,
   parseOptionalStringFlag,
   parsePort,
   parseRequiredStringFlag,
-  parseTargetFlag,
   resolveSecretInputValue,
 } from "./flags";
 import { renderCommandHelp, renderCommandReference, renderHelp } from "./help";
@@ -82,7 +44,6 @@ import { handleFeedbackCommand } from "./commands/feedback";
 import { handleKnowledgeCommand } from "./commands/knowledge";
 import { handleTranscribeCommand } from "./commands/transcribe";
 
-const hostedDeployEntitlement = "agentkit_cloud_deploy";
 
 async function main() {
   const args = parseArgs(process.argv.slice(2));
@@ -113,6 +74,10 @@ async function main() {
     throw new Error("Usage: agentkit help [commands]");
   }
 
+  if (args.flags.deploy !== undefined || args.flags.api !== undefined || args.flags.target !== undefined) {
+    throw new Error("AgentKit runs locally. Hosted --deploy, --api, and --target options are no longer supported.");
+  }
+
   warnIfUnsupportedNode();
 
   if (args.command === "provider") {
@@ -147,7 +112,6 @@ async function main() {
     console.log("  Codex starts at skills/agentkit-capsule/SKILL.md and treats your request as the brief");
     console.log('  npm run chat -- --message "hello"');
     console.log("  npm run dev");
-    console.log("  npm run agentkit -- deploy");
     console.log("");
     console.log("Optional: manage local secrets with `printf %s \"$VALUE\" | npm run agentkit -- env set <NAME> --stdin`.");
     return;
@@ -189,37 +153,6 @@ async function main() {
     return;
   }
 
-  if (args.command === "chat-ui") {
-    if (!args.flags.deploy) {
-      throw new Error("Usage: agentkit chat-ui --deploy [--port <number>] [--token-file <path>]");
-    }
-
-    const requestedPort = parsePort(args.flags.port, "agentkit chat-ui --deploy --port <number>");
-    const port = requestedPort ?? 4124;
-    const tokenFile = parseOptionalStringFlag(
-      args.flags["token-file"],
-      "token-file",
-      "agentkit chat-ui --deploy --token-file <path>",
-    );
-    const server = await startDeployChatUiServer(process.cwd(), {
-      port,
-      tokenFile,
-      autoPort: requestedPort === undefined,
-    });
-
-    console.log("AgentKit hosted chat UI running");
-    console.log("");
-    if (server.portConflict) {
-      console.log(`Port ${server.portConflict.port} is already used. Started hosted chat UI at ${server.url}.`);
-      console.log("");
-    }
-    console.log(`Chat:       ${server.url}`);
-    console.log(`Production: ${server.deployUrl}`);
-    console.log(`Token:      ${server.tokenSource}`);
-    await waitForShutdown(server.stop);
-    return;
-  }
-
   if (args.command === "chat") {
     const message = args.flags.message;
     const conversationId = parseOptionalStringFlag(
@@ -373,32 +306,7 @@ async function main() {
         "agentkit improve collect --conversation-id <id>",
       );
       const out = parseOptionalStringFlag(args.flags.out, "out", "agentkit improve collect --out <directory>");
-      const deployState = args.flags.deploy === true ? await requireLocalDeployState() : null;
-      const apiUrl = args.flags.deploy === true ? await resolveCloudApiUrl(args.flags.api) : null;
-      const cloudAuth = apiUrl ? await readCloudAuthForApiUrl(apiUrl) : null;
-      const result = args.flags.deploy === true
-        ? await collectDeployImproveBundle(process.cwd(), {
-            deployId: deployState?.deploy_id ?? "",
-            since,
-            conversationId,
-            out,
-            collector: {
-              ...(cloudAuth && apiUrl && deployState
-                ? {
-                    exportEvidence: (input: { deployId: string; since?: string; conversationId?: string }) =>
-                      fetchDeployImproveEvidence(apiUrl, input),
-                  }
-                : {}),
-              listConversations: () => fetchDeployConversationJson(process.cwd(), "/v1/conversations"),
-              getTrace: (id: string) =>
-                fetchDeployConversationJson(process.cwd(), `/v1/conversations/${encodeURIComponent(id)}/trace`),
-            },
-          })
-        : await collectLocalImproveBundle(process.cwd(), {
-            since,
-            conversationId,
-            out,
-          });
+      const result = await collectLocalImproveBundle(process.cwd(), { since, conversationId, out });
 
       console.log("Improve bundle collected");
       console.log(`Source:    ${result.source}`);
@@ -437,7 +345,7 @@ async function main() {
       return;
     }
 
-    throw new Error("Usage: agentkit improve collect [--deploy] [--since <duration|iso>] [--conversation-id <id>] [--out <directory>] | agentkit improve evals <bundle-dir-or-json> [--force]");
+    throw new Error("Usage: agentkit improve collect [--since <duration|iso>] [--conversation-id <id>] [--out <directory>] | agentkit improve evals <bundle-dir-or-json> [--force]");
   }
 
   if (args.command === "replay") {
@@ -479,14 +387,8 @@ async function main() {
 
   if (args.command === "conversations") {
     const [subcommand, conversationId] = args.positional;
-    const fromDeploy = args.flags.deploy === true;
 
     if (subcommand === "list") {
-      if (fromDeploy) {
-        const payload = await fetchDeployConversationJson(process.cwd(), "/v1/conversations");
-        printJson(payload);
-        return;
-      }
 
       const conversations = await listConversationsFromCwd(process.cwd());
 
@@ -513,16 +415,7 @@ async function main() {
 
     if (subcommand === "show") {
       if (!conversationId) {
-        throw new Error("Missing conversation id. Usage: agentkit conversations show <conversation-id> [--deploy]");
-      }
-
-      if (fromDeploy) {
-        const payload = await fetchDeployConversationJson(
-          process.cwd(),
-          `/v1/conversations/${encodeURIComponent(conversationId)}`,
-        );
-        printJson(payload);
-        return;
+        throw new Error("Missing conversation id. Usage: agentkit conversations show <conversation-id>");
       }
 
       const conversation = await getConversationFromCwd(process.cwd(), conversationId);
@@ -541,16 +434,7 @@ async function main() {
 
     if (subcommand === "trace") {
       if (!conversationId) {
-        throw new Error("Missing conversation id. Usage: agentkit conversations trace <conversation-id> [--deploy]");
-      }
-
-      if (fromDeploy) {
-        const trace = await fetchDeployConversationJson(
-          process.cwd(),
-          `/v1/conversations/${encodeURIComponent(conversationId)}/trace`,
-        );
-        printJson(trace);
-        return;
+        throw new Error("Missing conversation id. Usage: agentkit conversations trace <conversation-id>");
       }
 
       const trace = await getConversationTraceFromCwd(process.cwd(), conversationId);
@@ -558,7 +442,7 @@ async function main() {
       return;
     }
 
-    throw new Error("Usage: agentkit conversations list [--deploy] | agentkit conversations show <conversation-id> [--deploy] | agentkit conversations trace <conversation-id> [--deploy]");
+    throw new Error("Usage: agentkit conversations list | agentkit conversations show <conversation-id> | agentkit conversations trace <conversation-id>");
   }
 
   if (args.command === "knowledge") {
@@ -648,505 +532,6 @@ async function main() {
     return;
   }
 
-  if (args.command === "build") {
-    const target = resolveBuildTarget(parseTargetFlag(args.flags.target, "build"));
-    const result = await buildAgentCapsule(process.cwd(), { target: target.id });
-    printBuildResult(result);
-    return;
-  }
-
-  if (args.command === "login") {
-    const token = parseRequiredStringFlag(args.flags.token, "token", "agentkit login --token <token> [--api <url>]");
-    const apiUrl = parseCloudApiUrl(args.flags.api);
-    const verified = await verifyCloudLogin(apiUrl, token);
-    await writeCloudAuth({ apiUrl, token });
-    const email = verified.me.account?.email;
-    console.log(email ? `Logged in to AgentKit Cloud as ${email}.` : "AgentKit Cloud token verified and stored.");
-
-    const hasHostedDeploy = (verified.capabilities.capabilities ?? []).some(
-      (capability) =>
-        (capability.name === "cloudflare_deploy_alpha" || capability.name === hostedDeployEntitlement) &&
-        capability.status === "active",
-    );
-    console.log(
-      hasHostedDeploy
-        ? "Entitlement: hosted deploy active."
-        : `Warning: cloudflare_deploy_alpha or ${hostedDeployEntitlement} entitlement was not found for this account.`,
-    );
-
-    if (process.env.AGENTKIT_CLOUD_API_TOKEN && process.env.AGENTKIT_CLOUD_API_TOKEN !== token) {
-      console.log("Warning: AGENTKIT_CLOUD_API_TOKEN is set and will override this saved login in the current shell.");
-    }
-
-    return;
-  }
-
-  if (args.command === "logout") {
-    await clearCloudAuth();
-    console.log("AgentKit Cloud token removed.");
-    return;
-  }
-
-  if (args.command === "account") {
-    const [noun, verb, value] = args.positional;
-
-    if (noun !== "token") {
-      throw new Error("Usage: agentkit account token create <name> [--use] [--out <path>] | list | revoke <token-id> [--api <url>]");
-    }
-
-    const apiUrl = await resolveCloudApiUrl(args.flags.api);
-
-    if (verb === "create" && value) {
-      const payload = (await cloudApiRequest(apiUrl, "/v1/account/tokens", {
-        method: "POST",
-        body: JSON.stringify({ name: value }),
-      })) as AccountApiTokenCreateResponse;
-      const token = payload.token;
-
-      if (!token?.token || !token.id) {
-        throw new AgentKitError("account_token_invalid", "AgentKit Cloud returned an invalid account token payload.");
-      }
-
-      const outPath = parseOptionalStringFlag(
-        args.flags.out,
-        "out",
-        "agentkit account token create <name> [--api <url>] [--use] [--out <path>]",
-      );
-
-      if (outPath) {
-        const absolutePath = resolve(process.cwd(), outPath);
-        await writeSecretJson(absolutePath, payload);
-        console.log(`Account token written to ${absolutePath}`);
-      } else {
-        printJson(payload);
-      }
-
-      if (args.flags.use === true) {
-        await writeCloudAuth({ apiUrl, token: token.token });
-        console.log(`Saved ${token.id} as the current AgentKit Cloud login.`);
-      }
-
-      return;
-    }
-
-    if (verb === "list" && !value) {
-      const payload = (await cloudApiRequest(apiUrl, "/v1/account/tokens", {
-        method: "GET",
-      })) as AccountApiTokenListResponse;
-      printJson(payload);
-      return;
-    }
-
-    if (verb === "revoke" && value) {
-      const payload = await cloudApiRequest(apiUrl, `/v1/account/tokens/${encodeURIComponent(value)}/revoke`, {
-        method: "POST",
-      });
-      printJson(payload);
-      return;
-    }
-
-    throw new Error("Usage: agentkit account token create <name> [--use] [--out <path>] | list | revoke <token-id> [--api <url>]");
-  }
-
-  if (args.command === "billing") {
-    const [subcommand, intentId] = args.positional;
-    const apiUrl = await resolveCloudApiUrl(args.flags.api);
-
-    if (subcommand === "checkout") {
-      const slots = parsePositiveIntegerFlag(
-        args.flags.slots,
-        "slots",
-        "agentkit billing checkout --slots <count> [--email <email>] [--api <url>]",
-      );
-      const email = parseOptionalStringFlag(
-        args.flags.email,
-        "email",
-        "agentkit billing checkout --slots <count> --email <email>",
-      );
-      const payload = (await cloudApiRequest(apiUrl, "/v1/billing/checkout", {
-        method: "POST",
-        body: JSON.stringify({
-          slots,
-          ...(email ? { email } : {}),
-        }),
-      })) as BillingCheckoutResponse;
-      const checkoutUrl = payload.checkout?.url;
-      const billingIntentId = payload.billing_intent?.id;
-      const secret = payload.billing_intent?.secret;
-
-      if (!checkoutUrl || !billingIntentId || !secret) {
-        throw new AgentKitError("billing_checkout_invalid", "AgentKit Cloud returned an invalid billing checkout payload.");
-      }
-
-      if (args.flags.json === true) {
-        printJson(payload);
-      } else {
-        console.log("AgentKit Cloud checkout");
-        console.log("");
-        console.log(`URL:    ${checkoutUrl}`);
-        console.log(`Intent: ${billingIntentId}`);
-        console.log(`Secret: ${secret}`);
-        console.log("");
-        console.log(`After payment: agentkit billing claim ${billingIntentId} --secret ${secret} --api ${apiUrl}`);
-      }
-
-      if (args.flags.open === true) {
-        await openLocalUrl(checkoutUrl);
-      }
-
-      return;
-    }
-
-    if (subcommand === "status" && intentId) {
-      const secret = parseRequiredStringFlag(
-        args.flags.secret,
-        "secret",
-        "agentkit billing status <billing-intent-id> --secret <secret> [--api <url>]",
-      );
-      const payload = (await cloudApiRequest(
-        apiUrl,
-        `/v1/billing/checkout-intents/${encodeURIComponent(intentId)}?secret=${encodeURIComponent(secret)}`,
-        { method: "GET" },
-      )) as BillingCheckoutIntentResponse;
-      printJson(payload);
-      return;
-    }
-
-    if (subcommand === "claim" && intentId) {
-      const secret = parseRequiredStringFlag(
-        args.flags.secret,
-        "secret",
-        "agentkit billing claim <billing-intent-id> --secret <secret> [--token-name <name>] [--api <url>]",
-      );
-      const tokenName = parseOptionalStringFlag(
-        args.flags["token-name"],
-        "token-name",
-        "agentkit billing claim <billing-intent-id> --secret <secret> --token-name <name>",
-      );
-      const payload = (await cloudApiRequest(apiUrl, `/v1/billing/checkout-intents/${encodeURIComponent(intentId)}/claim`, {
-        method: "POST",
-        body: JSON.stringify({
-          secret,
-          ...(tokenName ? { token_name: tokenName } : {}),
-        }),
-      })) as BillingClaimResponse;
-      const token = payload.token;
-
-      if (!token?.token || !token.id) {
-        throw new AgentKitError("billing_claim_invalid", "AgentKit Cloud returned an invalid billing claim payload.");
-      }
-
-      await writeCloudAuth({ apiUrl, token: token.token });
-
-      const outPath = parseOptionalStringFlag(
-        args.flags.out,
-        "out",
-        "agentkit billing claim <billing-intent-id> --secret <secret> [--out <path>]",
-      );
-
-      if (outPath) {
-        const absolutePath = resolve(process.cwd(), outPath);
-        await writeSecretJson(absolutePath, payload);
-        console.log(`Account token written to ${absolutePath}`);
-      } else if (args.flags.json === true) {
-        printJson(payload);
-      } else {
-        console.log("AgentKit Cloud account token claimed and saved.");
-        console.log(`Token: ${token.id}`);
-        console.log(`API:   ${apiUrl}`);
-      }
-
-      return;
-    }
-
-    if (subcommand === "portal") {
-      const payload = (await cloudApiRequest(apiUrl, "/v1/billing/portal", {
-        method: "POST",
-        body: JSON.stringify({}),
-      })) as BillingPortalResponse;
-      const portalUrl = payload.portal?.url;
-
-      if (!portalUrl) {
-        throw new AgentKitError("billing_portal_invalid", "AgentKit Cloud returned an invalid billing portal payload.");
-      }
-
-      if (args.flags.json === true) {
-        printJson(payload);
-      } else {
-        console.log("AgentKit Cloud billing portal");
-        console.log(`URL: ${portalUrl}`);
-      }
-
-      if (args.flags.open === true) {
-        await openLocalUrl(portalUrl);
-      }
-
-      return;
-    }
-
-    throw new Error(
-      "Usage: agentkit billing checkout --slots <count> [--email <email>] | status <intent-id> --secret <secret> | claim <intent-id> --secret <secret> | portal [--api <url>]",
-    );
-  }
-
-  if (args.command === "deploy") {
-    const [deploySubcommand] = args.positional;
-
-    if (deploySubcommand === "smoke") {
-      const message =
-        parseOptionalStringFlag(args.flags.message ?? args.flags.smoke, "message", 'agentkit deploy smoke --message "hello"') ??
-        "hello";
-      const state = await requireLocalDeployState();
-      const token = await readDeployAccessTokenForHostedRequest(process.cwd());
-      await runDeploySmoke({
-        deployUrl: requireDeployUrl(state),
-        message,
-        token,
-      });
-      return;
-    }
-
-    if (deploySubcommand === "doctor") {
-      const report = await checkDeployReadiness({
-        apiUrl: await resolveCloudApiUrl(args.flags.api),
-        requireLogin: !args.flags.anonymous,
-      });
-      printDeployReadinessReport(report);
-
-      if (!report.ok) {
-        process.exitCode = 1;
-      }
-
-      return;
-    }
-
-    if (deploySubcommand === "status" || deploySubcommand === "pause" || deploySubcommand === "resume") {
-      const state = await requireLocalDeployState();
-      const apiUrl = await resolveCloudApiUrl(args.flags.api);
-
-      if (deploySubcommand === "status") {
-        const payload = await cloudApiRequest(apiUrl, `/v1/deploys/${encodeURIComponent(state.deploy_id)}`, {
-          method: "GET",
-        });
-        printJson(payload);
-        return;
-      }
-
-      const payload = await cloudApiRequest(apiUrl, `/v1/deploys/${encodeURIComponent(state.deploy_id)}/${deploySubcommand}`, {
-        method: "POST",
-      });
-      printJson(payload);
-      return;
-    }
-
-    const target = resolveDeployTarget(parseTargetFlag(args.flags.target, "deploy"));
-    const anonymous = Boolean(args.flags.anonymous);
-    const smokeMessage = parseOptionalStringFlag(args.flags.smoke, "smoke", 'agentkit deploy --smoke "hello"');
-
-    if (target.id === "vps") {
-      const host = parseRequiredStringFlag(args.flags.host, "host", "agentkit deploy --target vps --host <host>");
-      const container = await buildAgentCapsule(process.cwd(), { target: "container" });
-      const plan = await prepareVpsDeploy(container, { host, dryRun: Boolean(args.flags["dry-run"]) });
-      printBuildResult(container);
-      printVpsDeployPlan(plan);
-      return;
-    }
-
-    let readinessReport: Awaited<ReturnType<typeof checkDeployReadiness>> | null = null;
-
-    if (!args.flags["dry-run"] && !args.flags["local-wrangler"]) {
-      readinessReport = await checkDeployReadiness({
-        apiUrl: await resolveCloudApiUrl(args.flags.api),
-        requireLogin: !anonymous,
-      });
-
-      if (!readinessReport.ok) {
-        printDeployReadinessReport(readinessReport);
-        throw new AgentKitError(
-          "deploy_readiness_failed",
-          "Fix deploy readiness failures before running agentkit deploy.",
-        );
-      }
-    }
-
-    const result = await buildAgentCapsule(process.cwd(), { target: target.id });
-    if (result.target !== "cloudflare") {
-      throw new Error(`Unsupported AgentKit Cloud deploy target: ${result.target}`);
-    }
-    printBuildResult(result);
-
-    if (args.flags["dry-run"]) {
-      console.log("");
-      console.log("Dry run only. Artifact is ready for AgentKit Cloud.");
-      return;
-    }
-
-    if (args.flags["local-wrangler"]) {
-      await deployCloudflare(result.wranglerPath, result.buildDir);
-      return;
-    }
-
-    const apiUrl = await resolveCloudApiUrl(args.flags.api);
-    const auth = anonymous ? null : await readCloudAuthForApiUrl(apiUrl);
-    const deploy = await deployBuildToAgentKitCloud(result, {
-      apiUrl,
-      apiToken: anonymous ? null : auth?.token,
-      anonymous: anonymous || !auth?.token,
-    });
-    const statePath = await writeLocalDeployState(result.root, deploy);
-    const chatAccess = await ensureDeployChatAccessToken({
-      apiUrl,
-      root: result.root,
-      deployId: deploy.deploy.id,
-      skip: anonymous || !auth?.token,
-    });
-
-    console.log("");
-    console.log("Deploy ready");
-    console.log(`URL:       ${deploy.deploy.url}`);
-    console.log(`Project:   ${deploy.project.id}`);
-    console.log(`Deploy:    ${deploy.deploy.id}`);
-    console.log(`State:     ${statePath}`);
-    printDeployCloudSummary(readinessReport);
-
-    if (chatAccess?.status === "ready") {
-      console.log(`Chat auth: ${relativePath(process.cwd(), chatAccess.path)}`);
-    } else if (chatAccess?.status === "skipped") {
-      console.log("Chat auth: anonymous deploy; no local chat token was created.");
-    } else if (chatAccess?.status === "failed") {
-      console.log(`Chat auth: could not create local chat token. ${formatReadinessError(chatAccess.error)}`);
-      console.log(`Run:       agentkit access token create ${defaultDeployChatAccessTokenName} --out ${defaultDeployChatAccessTokenPath}`);
-    }
-
-    if (smokeMessage) {
-      if (chatAccess?.status === "failed") {
-        throw new AgentKitError("deploy_smoke_failed", "Could not run deploy smoke because chat access token creation failed.");
-      }
-
-      await runDeploySmoke({
-        deployUrl: requireDeployUrl({
-          deploy_id: deploy.deploy.id,
-          url: deploy.deploy.url,
-        }),
-        message: smokeMessage,
-        token:
-          chatAccess?.status === "ready"
-            ? await readDeployAccessTokenForUi(chatAccess.path)
-            : undefined,
-      });
-    }
-    printDeployProductionHandoff({
-      deployUrl: deploy.deploy.url,
-      statePath,
-      chatAccess,
-      databaseSchemaPath: result.tursoSchemaPath,
-      readinessReport,
-      smokeMessage,
-    });
-    return;
-  }
-
-  if (args.command === "secret") {
-    const [subcommand, name, ...valueParts] = args.positional;
-    const apiUrl = await resolveCloudApiUrl(args.flags.api);
-    const projectId = await resolveProjectIdForSecretCommand(process.cwd(), apiUrl);
-
-    if (subcommand === "list") {
-      const payload = await cloudApiRequest(apiUrl, `/v1/projects/${encodeURIComponent(projectId)}/secrets`, {
-        method: "GET",
-      });
-      printJson(payload);
-      return;
-    }
-
-    if (subcommand === "set") {
-      const value = await resolveSecretInputValue({
-        name,
-        valueParts,
-        stdinFlag: args.flags.stdin,
-        fromEnvFlag: args.flags["from-env"],
-        fromLocalEnvFlag: args.flags["from-local-env"],
-        localEnvRoot: args.flags["from-local-env"] !== undefined ? await findAgentCapsuleRoot(process.cwd()) : undefined,
-        usage: "agentkit secret set <NAME> <VALUE> | agentkit secret set <NAME> --stdin | agentkit secret set <NAME> --from-env [ENV_NAME] | agentkit secret set <NAME> --from-local-env [--api <url>]",
-        inlineSensitiveHelp: "Prefer --stdin, --from-env, or --from-local-env so the value does not enter shell history.",
-      });
-
-      if (!name) {
-        throw new Error("Usage: agentkit secret set <NAME> <VALUE> | agentkit secret set <NAME> --stdin | agentkit secret set <NAME> --from-env [ENV_NAME] | agentkit secret set <NAME> --from-local-env [--api <url>]");
-      }
-
-      const payload = await cloudApiRequest(apiUrl, `/v1/projects/${encodeURIComponent(projectId)}/secrets/${encodeURIComponent(name)}`, {
-        method: "PUT",
-        body: JSON.stringify({ value }),
-      });
-      printJson(payload);
-      return;
-    }
-
-    if (subcommand === "sync") {
-      if (args.flags["from-local"] !== true) {
-        throw new Error("Usage: agentkit secret sync --from-local [--api <url>]");
-      }
-
-      await syncHostedSecretsFromLocal({ apiUrl, projectId });
-      return;
-    }
-
-    if (subcommand === "unset") {
-      if (!name) {
-        throw new Error("Usage: agentkit secret unset <NAME> [--api <url>]");
-      }
-
-      const payload = await cloudApiRequest(apiUrl, `/v1/projects/${encodeURIComponent(projectId)}/secrets/${encodeURIComponent(name)}`, {
-        method: "DELETE",
-      });
-      printJson(payload);
-      return;
-    }
-
-    throw new Error("Usage: agentkit secret set <NAME> <VALUE> | agentkit secret set <NAME> --stdin | agentkit secret set <NAME> --from-env [ENV_NAME] | agentkit secret set <NAME> --from-local-env | agentkit secret sync --from-local | agentkit secret list | agentkit secret unset <NAME>");
-  }
-
-  if (args.command === "access") {
-    const [subcommand, noun, name] = args.positional;
-
-    if (subcommand !== "token") {
-      throw new Error("Usage: agentkit access token create <name> [--out <path>] | list | revoke <token-id> [--api <url>]");
-    }
-
-    const state = await requireLocalDeployState();
-    const apiUrl = await resolveCloudApiUrl(args.flags.api);
-
-    if (noun === "create" && name) {
-      const payload = await cloudApiRequest(apiUrl, `/v1/deploys/${encodeURIComponent(state.deploy_id)}/access-tokens`, {
-        method: "POST",
-        body: JSON.stringify({ name }),
-      });
-      await printJsonOrWrite(payload, args.flags.out, "agentkit access token create <name> [--api <url>] [--out <path>]");
-      return;
-    }
-
-    if (noun === "list" && !name) {
-      const payload = await cloudApiRequest(apiUrl, `/v1/deploys/${encodeURIComponent(state.deploy_id)}/access-tokens`, {
-        method: "GET",
-      });
-      printJson(payload);
-      return;
-    }
-
-    if (noun === "revoke" && name) {
-      const payload = await cloudApiRequest(
-        apiUrl,
-        `/v1/deploys/${encodeURIComponent(state.deploy_id)}/access-tokens/${encodeURIComponent(name)}/revoke`,
-        { method: "POST" },
-      );
-      printJson(payload);
-      return;
-    }
-
-    throw new Error("Usage: agentkit access token create <name> [--out <path>] | list | revoke <token-id> [--api <url>]");
-  }
-
   if (args.command === "channels") {
     await handleChannelsCommand(args);
     return;
@@ -1180,93 +565,6 @@ async function main() {
     throw new Error("Usage: agentkit skills status | agentkit skills sync");
   }
 
-  if (args.command === "integrations") {
-    const [subcommand, provider] = args.positional;
-
-    if (provider !== undefined && provider !== "composio") {
-      throw new Error("Usage: agentkit integrations status | connect composio [--toolkit <slug>] [--callback-url <url>] [--api <url>]");
-    }
-
-    const state = await requireLocalDeployState();
-    const apiUrl = await resolveCloudApiUrl(args.flags.api);
-
-    if (subcommand === "status") {
-      const toolkit = parseOptionalStringFlag(
-        args.flags.toolkit,
-        "toolkit",
-        "agentkit integrations status --toolkit <slug>",
-      );
-      const payload = await cloudApiRequest(
-        apiUrl,
-        `/v1/deploys/${encodeURIComponent(state.deploy_id)}/integrations/composio/status${
-          toolkit ? `?toolkit=${encodeURIComponent(toolkit)}` : ""
-        }`,
-        { method: "GET" },
-      );
-      printJson(payload);
-      return;
-    }
-
-    if (subcommand === "connect" && provider === "composio") {
-      const toolkit = parseOptionalStringFlag(
-        args.flags.toolkit,
-        "toolkit",
-        "agentkit integrations connect composio --toolkit <slug>",
-      );
-      const callbackUrl = parseOptionalStringFlag(
-        args.flags["callback-url"],
-        "callback-url",
-        "agentkit integrations connect composio --callback-url <url>",
-      );
-      const payload = (await cloudApiRequest(
-        apiUrl,
-        `/v1/deploys/${encodeURIComponent(state.deploy_id)}/integrations/composio/connect-link`,
-        {
-          method: "POST",
-          body: JSON.stringify({
-            ...(toolkit ? { toolkit } : {}),
-            ...(callbackUrl ? { callback_url: callbackUrl } : {}),
-          }),
-        },
-      )) as {
-        connect_link?: {
-          toolkit?: string;
-          user_id?: string;
-          redirect_url?: string;
-          expires_at?: string;
-          connected_account_id?: string;
-          auth_config_source?: string;
-        };
-      };
-
-      const link = payload.connect_link;
-
-      if (!link?.redirect_url) {
-        throw new AgentKitError("integration_response_invalid", "AgentKit Cloud returned an invalid Composio connect-link payload.");
-      }
-
-      console.log("Composio connect link");
-      console.log(`Toolkit: ${link.toolkit ?? toolkit ?? "unknown"}`);
-      console.log(`User:    ${link.user_id ?? "unknown"}`);
-      if (link.auth_config_source) {
-        console.log(`Auth:    ${link.auth_config_source}`);
-      }
-      console.log(`URL:     ${link.redirect_url}`);
-
-      if (link.expires_at) {
-        console.log(`Expires: ${link.expires_at}`);
-      }
-
-      if (link.connected_account_id) {
-        console.log(`Account: ${link.connected_account_id}`);
-      }
-
-      return;
-    }
-
-    throw new Error("Usage: agentkit integrations status | connect composio [--toolkit <slug>] [--callback-url <url>] [--api <url>]");
-  }
-
   if (args.command === "env") {
     const [subcommand, name, ...valueParts] = args.positional;
     const root = await findAgentCapsuleRoot(process.cwd());
@@ -1413,7 +711,6 @@ npm run agentkit -- tool tool_name --input '{}'
 
 UI testing:
 - For local UI testing, run \`npm run dev\`, open the printed \`Chat:\` URL, and tell the owner the exact URL.
-- For hosted UI testing after deploy, run \`npm run agentkit -- chat-ui --deploy\`, open the printed \`Chat:\` URL, and tell the owner it is connected to the hosted deploy.
 - If the provider is still \`test/fake\`, say the UI was tested only with the deterministic fake provider.
 
 Final response:
@@ -1425,16 +722,12 @@ Final response:
 `;
 }
 
-function isRecord(value: unknown): value is Record<string, unknown> {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-
 function warnIfUnsupportedNode(): void {
   const major = majorNodeVersion(process.versions.node);
 
   if (major !== null && major < 24) {
     console.warn(
-      `Warning: @andreprado/agentkit requires Node >=24; current Node is ${process.versions.node}. Use Node 24+ before relying on local runtime or deploy commands.`,
+      `Warning: @andreprado/agentkit requires Node >=24; current Node is ${process.versions.node}. Use Node 24+ before relying on local runtime commands.`,
     );
   }
 }
@@ -1445,291 +738,6 @@ function majorNodeVersion(version: string): number | null {
   return Number.isInteger(parsed) ? parsed : null;
 }
 
-function printDeployProductionHandoff(input: {
-  deployUrl: string;
-  statePath: string;
-  chatAccess: Awaited<ReturnType<typeof ensureDeployChatAccessToken>>;
-  databaseSchemaPath: string | null;
-  readinessReport: Awaited<ReturnType<typeof checkDeployReadiness>> | null;
-  smokeMessage?: string;
-}): void {
-  const context = input.readinessReport?.context;
-  const userSecrets = context?.userManagedSecrets ?? [];
-  const managedSecrets = context?.agentKitManagedSecrets ?? [];
-  const composio = context?.integrations.managedComposio;
-
-  console.log("");
-  console.log("Production handoff");
-  console.log(`URL:          ${input.deployUrl}`);
-  console.log(`UI:           npm run agentkit -- chat-ui --deploy`);
-  console.log(`State:        ${input.statePath}`);
-  console.log(
-    `Secrets:      ${
-      userSecrets.length > 0
-        ? `user-managed set (${userSecrets.join(", ")})`
-        : "no user-managed hosted secrets required"
-    }${managedSecrets.length > 0 ? `; AgentKit-managed: ${managedSecrets.join(", ")}` : ""}`,
-  );
-  console.log(
-    `Database:     ${
-      input.databaseSchemaPath
-        ? `AgentKit-managed; schema artifact ${input.databaseSchemaPath}`
-        : "AgentKit-managed; no application schema artifact"
-    }`,
-  );
-
-  if (composio?.enabled) {
-    console.log(`Integrations: managed Composio configured for ${composio.toolkits.join(", ")}`);
-    for (const toolkit of composio.toolkits) {
-      console.log(`Connect:      npm run agentkit -- integrations connect composio --toolkit ${toolkit}`);
-    }
-  } else {
-    console.log("Integrations: none configured");
-  }
-
-  if (input.smokeMessage) {
-    console.log(`Smoke:        verified with ${JSON.stringify(input.smokeMessage)}`);
-  } else {
-    console.log('Smoke:        not run; next check: npm run agentkit -- deploy smoke --message "hello"');
-  }
-
-  if (input.chatAccess.status === "ready") {
-    console.log(`Chat token:   ${relativePath(process.cwd(), input.chatAccess.path)}`);
-  } else if (input.chatAccess.status === "skipped") {
-    console.log("Chat token:   not created for anonymous deploy");
-  } else {
-    console.log(`Chat token:   failed; run npm run agentkit -- access token create ${defaultDeployChatAccessTokenName} --out ${defaultDeployChatAccessTokenPath}`);
-  }
-
-  const nextCommand = composio?.enabled && composio.toolkits.length > 0
-    ? `npm run agentkit -- integrations connect composio --toolkit ${composio.toolkits[0]}`
-    : "npm run agentkit -- chat-ui --deploy";
-  console.log(`Next:         ${nextCommand}`);
-}
-
-function printDeployCloudSummary(report: Awaited<ReturnType<typeof checkDeployReadiness>> | null): void {
-  if (!report) {
-    return;
-  }
-
-  const authSummary = formatDeployCloudAuthSummary(report);
-
-  if (authSummary) {
-    console.log(`Account:   ${authSummary.account}`);
-    console.log(`Auth:      ${authSummary.source}`);
-  }
-
-  const capacitySummary = formatDeployOnlineCapacity(report, "before deploy");
-
-  if (capacitySummary) {
-    console.log(`Capacity:  ${capacitySummary}`);
-  }
-}
-
-async function ensureDeployChatAccessToken(options: {
-  apiUrl: string;
-  root: string;
-  deployId: string;
-  skip: boolean;
-}): Promise<
-  | { status: "ready"; path: string; tokenId: string; created: boolean }
-  | { status: "skipped" }
-  | { status: "failed"; error: unknown }
-> {
-  if (options.skip) {
-    return { status: "skipped" };
-  }
-
-  try {
-    const path = join(options.root, defaultDeployChatAccessTokenPath);
-    const existing = await readDeployAccessTokenFile(path);
-
-    if (existing?.deploy_id === options.deployId && existing.id) {
-      const listed = (await cloudApiRequest(
-        options.apiUrl,
-        `/v1/deploys/${encodeURIComponent(options.deployId)}/access-tokens`,
-        { method: "GET" },
-      )) as DeployAccessTokenListResponse;
-      const stillUsable = (listed.access_tokens ?? []).some(
-        (token) => token.id === existing.id && deployAccessTokenMetadataIsUsable(token),
-      );
-
-      if (stillUsable) {
-        await chmod(path, 0o600);
-        return { status: "ready", path, tokenId: existing.id, created: false };
-      }
-    }
-
-    const created = (await cloudApiRequest(
-      options.apiUrl,
-      `/v1/deploys/${encodeURIComponent(options.deployId)}/access-tokens`,
-      {
-        method: "POST",
-        body: JSON.stringify({ name: defaultDeployChatAccessTokenName }),
-      },
-    )) as DeployAccessTokenCreateResponse;
-    const token = created.access_token;
-
-    if (!token?.id || token.deploy_id !== options.deployId || !token.token) {
-      throw new AgentKitError("access_token_invalid", "AgentKit Cloud returned an invalid deploy access token payload.");
-    }
-
-    await writeSecretJson(path, created);
-    return { status: "ready", path, tokenId: token.id, created: true };
-  } catch (error) {
-    return { status: "failed", error };
-  }
-}
-
-function deployAccessTokenMetadataIsUsable(token: { expires_at?: string }): boolean {
-  if (!token.expires_at) {
-    return true;
-  }
-
-  const expiresAtMs = Date.parse(token.expires_at);
-  return Number.isFinite(expiresAtMs) && expiresAtMs > Date.now();
-}
-
-async function readDeployAccessTokenFile(path: string): Promise<{ id?: string; deploy_id?: string } | null> {
-  try {
-    const parsed = JSON.parse(await readFile(path, "utf8")) as DeployAccessTokenCreateResponse;
-    return parsed.access_token ?? null;
-  } catch {
-    return null;
-  }
-}
-
-async function writeSecretJson(path: string, value: unknown): Promise<void> {
-  await mkdir(dirname(path), { recursive: true });
-  await writeFile(path, `${JSON.stringify(value, null, 2)}\n`, { mode: 0o600 });
-  await chmod(path, 0o600);
-}
-
-async function requireLocalDeployState(): Promise<LocalDeployState> {
-  const state = await readLocalDeployStateIfExists(process.cwd());
-
-  if (!state) {
-    throw new Error("No .agentkit/deploy.json found. Run agentkit deploy first.");
-  }
-
-  return state;
-}
-
-function requireDeployUrl(state: Pick<LocalDeployState, "deploy_id" | "url">): string {
-  if (!state.url) {
-    throw new Error(`Deploy ${state.deploy_id} does not have a URL. Run agentkit deploy again.`);
-  }
-
-  return state.url;
-}
-
-async function readDeployAccessTokenForHostedRequest(cwd: string): Promise<string> {
-  const root = await findAgentCapsuleRoot(cwd);
-  return readDeployAccessTokenForUi(join(root, defaultDeployChatAccessTokenPath));
-}
-
-async function runDeploySmoke(input: { deployUrl: string; message: string; token?: string }): Promise<void> {
-  const headers = new Headers({ "Content-Type": "application/json" });
-
-  if (input.token) {
-    headers.set("Authorization", `Bearer ${input.token}`);
-  }
-
-  let response: Response;
-
-  try {
-    response = await fetch(new URL("/v1/chat", input.deployUrl).href, {
-      method: "POST",
-      headers,
-      body: JSON.stringify({ message: input.message }),
-    });
-  } catch (error) {
-    throw new AgentKitError(
-      "deploy_smoke_failed",
-      `Deploy smoke request failed before a response: ${error instanceof Error ? error.message : String(error)}`,
-    );
-  }
-
-  const payload = await response.json().catch(() => null);
-
-  if (!response.ok) {
-    throw new AgentKitError("deploy_smoke_failed", readCloudError(payload, response.status));
-  }
-
-  const content =
-    payload && typeof payload === "object" && "message" in payload && isRecord((payload as { message?: unknown }).message)
-      ? (payload as { message: { content?: unknown } }).message.content
-      : undefined;
-
-  console.log("");
-  console.log("Deploy smoke verified");
-  console.log(`URL:      ${input.deployUrl}`);
-  console.log(`Message:  ${input.message}`);
-  if (typeof content === "string") {
-    console.log(`Response: ${content}`);
-  }
-}
-
-async function fetchDeployConversationJson(cwd: string, path: string): Promise<unknown> {
-  const state = await requireLocalDeployState();
-  const deployUrl = requireDeployUrl(state);
-  const token = await readDeployAccessTokenForHostedRequest(cwd);
-  const headers = new Headers();
-
-  headers.set("Authorization", `Bearer ${token}`);
-
-  let response: Response;
-
-  try {
-    response = await fetch(new URL(path, deployUrl).href, {
-      method: "GET",
-      headers,
-    });
-  } catch (error) {
-    throw new AgentKitError(
-      "deploy_conversation_request_failed",
-      `Could not read hosted conversation data: ${error instanceof Error ? error.message : String(error)}`,
-    );
-  }
-
-  const payload = await response.json().catch(() => null);
-
-  if (!response.ok) {
-    throw new AgentKitError("deploy_conversation_request_failed", readCloudError(payload, response.status));
-  }
-
-  return payload;
-}
-
-async function fetchDeployImproveEvidence(
-  apiUrl: string,
-  input: { deployId: string; since?: string; conversationId?: string },
-): Promise<unknown | null> {
-  try {
-    return await cloudApiRequest(apiUrl, `/v1/deploys/${encodeURIComponent(input.deployId)}/improve/export`, {
-      method: "POST",
-      body: JSON.stringify({
-        status: "all",
-        ...(input.since ? { since: input.since } : {}),
-        ...(input.conversationId ? { conversation_id: input.conversationId } : {}),
-      }),
-    });
-  } catch (error) {
-    if (
-      isAgentKitError(error) &&
-      (error.code === "improve_evidence_store_not_configured" || error.code === "not_found")
-    ) {
-      return null;
-    }
-
-    throw error;
-  }
-}
-
-function printJson(value: unknown): void {
-  console.log(JSON.stringify(value, null, 2));
-}
-
 function printSkillStatus(status: Awaited<ReturnType<typeof checkDefaultSkillStatus>>): void {
   console.log("AgentKit skills");
   console.log(`Status: ${status.status}`);
@@ -1754,95 +762,11 @@ function printSkillStatus(status: Awaited<ReturnType<typeof checkDefaultSkillSta
   }
 }
 
-async function printJsonOrWrite(value: unknown, outFlag: string | boolean | undefined, usage: string): Promise<void> {
-  const outPath = parseOptionalStringFlag(outFlag, "out", usage);
-
-  if (!outPath) {
-    printJson(value);
-    return;
-  }
-
-  const absolutePath = resolve(process.cwd(), outPath);
-  await writeSecretJson(absolutePath, value);
-  console.log(`Deploy access token written to ${absolutePath}`);
-}
-
-function parsePositiveIntegerFlag(value: string | boolean | undefined, name: string, usage: string): number {
-  if (typeof value !== "string") {
-    throw new Error(`Missing ${name}. Usage: ${usage}`);
-  }
-
-  const parsed = Number(value);
-
-  if (!Number.isInteger(parsed) || parsed <= 0) {
-    throw new Error(`Invalid ${name}. Usage: ${usage}`);
-  }
-
-  return parsed;
-}
-
 function relativePath(root: string, path: string): string {
   const output = relative(root, path);
   return output.startsWith("..") ? path : output || ".";
 }
 
-function printBuildResult(result: Awaited<ReturnType<typeof buildAgentCapsule>>): void {
-  console.log("AgentKit build complete");
-  console.log("");
-  console.log(`Target:    ${result.target}`);
-  console.log(`Build dir: ${result.buildDir}`);
-  console.log(`Manifest:  ${result.manifestPath}`);
-
-  if (result.target === "cloudflare") {
-    console.log(`Worker:    ${result.workerPath}`);
-    console.log(`Wrangler:  ${result.wranglerPath}`);
-    if (result.tursoSchemaPath) {
-      console.log(`Turso:     ${result.tursoSchemaPath}`);
-    }
-    console.log(`Bundle:    ${result.bundleSha256}`);
-  }
-
-  if (result.target === "container") {
-    console.log(`Server:    ${result.serverPath}`);
-    console.log(`Docker:    ${result.dockerfilePath}`);
-    console.log(`Migrations:${result.migrationsDir}`);
-  }
-
-  if (result.warnings.length > 0) {
-    console.log("");
-    console.log("Warnings:");
-
-    for (const warning of result.warnings) {
-      console.log(`  - ${warning}`);
-    }
-  }
-}
-
-function printVpsDeployPlan(plan: Awaited<ReturnType<typeof prepareVpsDeploy>>): void {
-  console.log("");
-  console.log("VPS deploy plan ready");
-  console.log(`Host:      ${plan.host}`);
-  console.log(`Compose:   ${plan.composePath}`);
-  console.log(`Env:       ${plan.envExamplePath}`);
-  console.log(`Secrets:   ${plan.secretsPath}`);
-  console.log(`Handoff:   ${plan.handoffPath}`);
-  console.log(`State:     ${plan.statePath}`);
-  console.log("");
-  console.log("Commands:");
-
-  for (const command of plan.commands) {
-    console.log(`  ${command}`);
-  }
-}
-
-async function deployCloudflare(wranglerPath: string, buildDir: string): Promise<void> {
-  const exitCode = await runInheritedCommand("npx", ["wrangler", "deploy", "--config", wranglerPath], buildDir);
-
-  if (exitCode !== 0) {
-    throw new Error(`Cloudflare deploy failed with exit code ${exitCode}.`);
-  }
-}
-
 async function installProjectDependencies(projectPath: string): Promise<void> {
   const exitCode = await runInheritedCommand("npm", ["install"], projectPath);