@guanjinke/artifact-client 1.3.0 → 1.4.0

package/README.md

@@ -56,9 +56,13 @@ const minors = await client.listMinorVersions('myPlugin', '1.0');
 
 // List artifacts in a specific version
 const artifacts = await client.listArtifacts('myPlugin', '1.0.5');
+// [{ name: 'bundle.zip', path: '...' }, ...]
+
+// ... including each file's size
+const artifactsWithSize = await client.listArtifacts('myPlugin', '1.0.5', { includeSize: true });
 // [{ name: 'bundle.zip', path: '...', sizeMB: 12.5 }, ...]
 
-// Upload an artifact into a version directory (a plain write: no major version pointer
+// Upload an artifact into a version directory (a plain write: no major version
 // pointer is touched)
 await client.uploadArtifact('myPlugin', '1.0.6', 'bundle.zip', './dist/bundle.zip');
 
@@ -224,6 +228,136 @@ A **product major version** (主版本号) is a label rather than a semver:
 | `downloadArtifact(plugin, version, fileName, localDir)` | Download by name |
 | `downloadVersion(plugin, version, localDir)` | Download all artifacts for a version |
 
+## Create a Wyn Environment
+
+`create-env` resolves and assembles a **fresh Windows embedded environment** without installing Windows services or starting anything. It supports product labels `9.1`, `9.1-*` and `dev`. Dry-run reports `schema: "pending"`; execution reads the monitoring bundle's XML template and accepts only verified V91/9.1 or V100/10.0, with matching Monitor XSD assets. Missing Server XSD assets produce a warning rather than preventing assembly. Numeric artifact versions never determine the schema. Other numeric product majors fail explicitly.
+
+A resolved dry-run is not proof that independently published packages are compatible. Some dev Server packages omit `xsd/V100/Wyn.conf.xsd`, while the Monitor template selects V100. Wyn's configuration reader falls back to ordinary XML deserialization when its XSD assets are absent. Assembly therefore records and returns a warning for missing Server XSD rather than rejecting that combination or copying schemas from another package. Monitor's matching XSD remains required. This does not verify the Server assembly's XML reader compatibility or successful runtime startup.
+
+
+```bash
+# Core environment only; Server, Account, Dataset, AnalysisModel and CotWorker are automatic
+ afm oss create-env D:/wyn-core --name wyn-core --major 9.1
+
+ # Resolve exact per-module artifacts; no downloads or filesystem writes
+afm oss create-env D:/wyn-test --name wyn-test --major 9.1 --modules dashboard,reporting --dry-run
+afm az create-env D:/wyn-test --name wyn-test --major dev --modules analysis --edition en --dry-run
+
+# Assemble a fresh environment (Windows only)
+afm oss create-env D:/wyn-test --name wyn-test --major 9.1 --modules dashboard reporting --port 51980
+
+# With a configured environment root (afm env root D:/wyn-envs) the path is optional:
+afm oss create-env --name wyn-test --major 9.1
+```
+
+The default edition is `cn`, profile is `embedded`, and Web/embedded identity port is `51980`. The core Wyn components—Server, Account, Dataset, AnalysisModel and CotWorker—are always included and do not need to be listed in `--modules`. Optional modules are `dashboard`, `reporting` and EN-only `sheets`. `documents` is deliberately rejected until its CollaborationService dependency and embedded configuration are verified. Monitoring is also always included to run the environment. Dashboard no longer requires a separate AnalysisModel selection. Module names may be space- or comma-separated. Each plugin resolves its major once, and only its exact runtime ZIP is selected: unrelated language, styles and support archives are never selected by size.
+
+Saved credentials and inline credential flags work as with other commands. This command honors saved `basePrefix` and `--base-prefix`; an explicit empty string selects the container/bucket root. Provider defaults are Azure `plugin_artifacts` and OSS root. Existing commands retain their current prefix behavior. The JSON plan includes exact remote object names and mappings, not credentials or a SAS URL.
+
+Console progress is written to stderr with elapsed time and artifact counts: version resolution, download, SHA256, ZIP validation/extraction, directory assembly, configuration generation and publication. Long stages emit a waiting message every 15 seconds; this is not a byte percentage. Stdout remains a single JSON plan/result, so redirecting stdout preserves machine-readable output. Library callers can opt into the same stage messages using the third `buildEnvironmentPlan` argument or `executeEnvironmentPlan`'s `onProgress` dependency; library calls remain silent by default.
+
+The target must be absent or empty, must not be a filesystem root or protected installed/system location, and must not have a linked/reparse-point ancestor. There is no overwrite or force option. Download, streaming ZIP extraction, assembly verification and configuration generation happen in owned sibling temporary directories. ZIP paths, case-insensitive conflicts, links, reserved Windows names and resource limits are checked for every entry, including unused support files. The defaults cap each archive at 100,000 entries and 20 GiB uncompressed. Final files are published exclusively without replacing racing files; failure removes only owned paths and preserves unrelated data.
+
+Server-root `appsettings.json` and `appsettings.Development.json` are excluded from deployment (case-insensitive) so bundled startup overrides cannot affect the generated environment. This does not remove Monitor settings, nested helper settings or other environment-specific settings, and does not modify the downloaded ZIP or existing environments.
+
+The canonical editable configuration is `<root>/conf/Wyn.conf`. `<root>/Monitor/conf` is a Windows directory junction to it because the monitoring process resolves configuration from its own working directory. Other monitoring-bundle `conf` files are preserved in the canonical directory. The environment contains explicit plugin/embedded worker lists, actual assembly names (including known reporting naming variants), SQLite server databases and DuckDB warehouse settings. Monitored worker services are disabled to avoid parallel launches while embedded Server loads the deployed worker assemblies.
+
+`environment.lock.json` records selections, independent resolved versions, SHA256 hashes of downloaded ZIPs and runtime framework requirements read from required `.runtimeconfig.json` files. No host license, database or sample data is copied. Optional theme recompilation/styles-cache, additional language archives, bootstrap/sample provisioning, standalone identity patches and service installation are outside this command. Successful assembly is **not** proof of license validity, database initialization or successful runtime startup. Review the generated requirements and provide the appropriate .NET runtimes and licensing before starting anything manually.
+
+### Environment Library API
+
+```typescript
+import { ArtifactClient, buildEnvironmentPlan, executeEnvironmentPlan } from '@guanjinke/artifact-client';
+
+const client = new ArtifactClient('oss', { keyId: 'id', key: 'secret' });
+const plan = await buildEnvironmentPlan({
+  root: 'D:/wyn-test', major: '9.1', modules: ['dashboard'],
+}, client);
+// Planning never downloads or writes; execution uses these exact resolved versions.
+const result = await executeEnvironmentPlan(plan, { client });
+console.log(result.root, result.requirements);
+```
+
+Both APIs accept the existing client through a small typed interface, enabling cloud-independent testing. Execution defaults to the host platform; the optional injected platform is intended for isolated layout tests, not a claim of cross-platform Wyn support.
+
+## Update an Existing Environment
+
+`update-env` replaces selected modules of an already registered environment, or points a module at a local developer build without copying any files:
+
+```bash
+afm oss update-env <name> --modules <spec...> [--dry-run]
+afm az  update-env <name> --modules <spec...> [--dry-run]
+```
+
+Specs are space- or comma-separated, and each entry has one of these forms:
+
+| Spec | Meaning |
+| --- | --- |
+| `all` | every configured module from remote, skipping modules that have a local source |
+| `dashboard` | latest artifact of that module for the environment's recorded major |
+| `dashboard:0.1.12345` | pinned version |
+| `dashboard=D:\build\Wyn.Dashboards.Plugin.dll` | local source (no download, no copy) |
+
+`all` must be used alone and covers exactly the modules that are both updateable and currently installed in that environment (`common`, `analysis`, plus any of `dashboard`/`reporting`/`sheets` it has). Modules with a local source are skipped and reported (manifest `moduleSources`, registry `localModules`, the result's `skipped` list and a stderr line); `server` and `monitoring` are never included. Because `all` only selects remote specs, it follows the remote state rule below and requires the environment to be `ready` or `stopped`. If nothing is left to update the command fails without writing.
+
+A spec may not combine a pinned version with a local source, duplicate modules in one call are refused, and the module name must be `dashboard`, `reporting`, `sheets`, `analysis` or `common`. `server` and `monitoring` are refused because they define the runtime and configuration schema (recreate the environment instead), `documents` stays unsupported, and `sheets` still requires an `en` edition environment. Updating a module that was never installed installs it: its plugin entry is added and the module is listed in the registry; a remote spec also adds the manifest artifact/download entries, while a local spec records only `moduleSources`/`localModules` (there is no downloaded artifact to describe).
+
+Remote updates resolve exactly one exact artifact name for the resolved version, download into a sibling staging workspace (`<dirname(root)>/.afm-env-*`), verify its SHA256, extract and validate it, check every mapping's source directory and that exactly one runtime assembly is present, and only then replace the module's deployed directories (`Plugins/<X>`, its worker directories, and `<root>/Web Contents` when the dashboard archive contains it). The plugin entry is rewritten as the normal relative `Plugins\<dest>\<assembly>` path and the deployment is recorded in the manifest and registry.
+
+Local source behavior is configuration-only:
+
+* Nothing is copied into or out of the environment.
+* The already deployed `Plugins/<destination>` directory is deleted so the stale artifact cannot be loaded twice; the worker directories are left alone.
+* `<root>/conf/Wyn.conf` `<Server><Plugins>` is rewritten to the **absolute** local DLL path (forward slashes are normalized) so the Server loads the developer build directly.
+* The override is recorded in `environment.lock.json` `moduleSources` and in the registry as `localModules` (shown by `env list` in a `local` column); `dashboard`, `reporting`, `analysis` and `sheets` are supported. `common` deploys two plugin directories and is rejected for local sources. A directory may be given instead of a DLL when it contains exactly one of the module's known plugin assemblies, and the DLL must be outside the deployed plugin directory.
+* Only configuration changed, so the environment must be **restarted** (`afm env restart <name>`) to load the build; the CLI never restarts it automatically.
+* Switching a module back to a remote spec deletes the override, restores the relative entry and copies the freshly downloaded artifact again.
+
+Configuration rewriting always parses `<root>/conf/Wyn.conf`, mutates only the `Plugins` `sys:string` list (a single string or an array are both accepted), rebuilds it with the same options the creation path uses, and validates the result with `XMLValidator` before writing. Dashboard stays the first `Plugins` entry and unrelated entries keep their order.
+
+State rules: a remote update requires the observed state `ready` or `stopped`; `running`/`unknown` are refused with a request to run `afm env stop <name>` first, because the deployed files may be in use. A local-only update may run while the environment is `running` (the CLI then reports that a restart is required), but `unknown` is always refused. `--dry-run` performs the spec, ownership, tree and state validation plus remote resolution, prints the planned changes and downloads or writes nothing. Progress and the restart reminder go to stderr; stdout remains a single JSON result. JSON and configuration writes go through `<file>.afm-tmp` followed by an atomic rename, and the staging workspace is always removed. Unlike `create`/`start`/`stop`/`restart`, `update-env` does not take the per-environment lifecycle lock — those state rules are its only guard, so do not run an update concurrently with a lifecycle command for the same environment.
+
+## Managed Local Environments
+
+Create a named environment with `node dist/cli.js oss create-env D:/wyn/demo --name demo --major 9.1` (use `az` similarly). `--name` is required for managed creation and names are case-insensitively unique. The environment path is optional once a unified environment root is configured (see below). `--port` defaults to `51980`; reserved or occupied ports fail without automatic reassignment. `--dry-run` checks options, registry conflicts and TCP availability without reserving or writing files.
+
+### Unified Environment Root
+
+Configure one directory for all environments so the path no longer has to be typed:
+
+```bash
+afm env root D:/wyn-envs   # validate, create if missing and remember the directory
+afm env root               # print the configured directory (path on stdout)
+afm env root --json        # script-friendly state: configured/root/exists/configPath
+afm env root --unset       # forget it; <root> is required again
+
+# No path needed: creates D:/wyn-envs/demo
+afm oss create-env --name demo --major 9.1
+```
+
+The setting is stored as an absolute path in `~/.afm/config.json` (`AFM_CONFIG_DIR` redirects the directory) alongside credentials, so it is per OS user/profile; credentials and other settings are preserved when it is set or cleared. Every new environment is created at `<environment root>/<name>`, and the name must be a single safe directory segment (`A-Za-z0-9`, `.`, `_`, `-`, max 64 characters), so it can never escape the root.
+
+The configured directory is re-validated on every use. It must not be a filesystem root, the user profile itself, the AFM configuration directory or one of its descendants, or a Windows/Program Files/SystemRoot location, and no existing ancestor may be a symlink or junction. `afm env root <path>` creates a missing directory and verifies it is a regular directory; `--dry-run` validates the configured root without creating anything. An explicit `<root>` argument still wins over the configured root; when it points outside the configured directory a note is printed to stderr and the environment is still registered normally.
+
+Registered environments live in `~/.afm/environments.json` (set `AFM_CONFIG_DIR` for an isolated profile); credentials and the optional unified environment root remain in `config.json`. Use `node dist/cli.js env list [--json]` (the table shows a `local` column listing modules with a local build override; the JSON rows carry `localModules`), `env root [<path>] [--unset] [--json]`, `env start <name> [--foreground|--background]`, `env stop <name>`, and `env restart <name>`. Background output is appended to `<root>/logs/server.stdout.log` and `server.stderr.log`; foreground Ctrl+C stops the verified monitor process tree before returning.
+
+Start defaults to foreground. Restart preserves the previous mode, falling back to foreground. A stopped environment keeps its reserved port until deletion. List includes only environments registered for the current user/profile; in table mode it also prints the configured environment root (if any) to stderr. Lifecycle stages, verified monitor PID/mode and background log paths are printed to stderr; stdout remains available for inherited foreground output or list JSON.
+
+Background mode starts the monitor in its own hidden console through a short launcher, then confirms the monitor by its exact command line (absolute DLL, `--RunAsMonitor`) before recording it; the recorded process is independent of the CLI, and its stdout/stderr are appended to the log files. This is required because `Wyn.Server` assigns `Console.Title` at the top of `Main` and throws `IOException` without an attached console, while a process that merely inherits the CLI's console does not outlive the CLI. Foreground mode inherits the terminal's console and stdio, so run it from a real console; if a start fails, the error includes the monitor's last log output and, when the log shows the `Console.Title` failure, points at that call. Command execution still uses the OS process query (`Get-CimInstance`); if that query is unavailable or fails twice, start/stop report an uncertain state instead of guessing.
+
+`env delete <name> --yes` stops the verified monitor, removes the owned environment directory and then removes its registry record. Without `--yes`, deletion requires a TTY confirmation. Existing directories created before managed registration are not adopted.
+
+
+Registered states are `creating`, `ready`, `running` and `stopped`. List checks live identity and also reports `unknown`, `identity-mismatch`, `missing` and `broken`; `running` means a verified monitor process, not HTTP readiness. Start/stop/restart are serialized per environment. Names, ports and overlapping roots are reserved atomically before cloud access; interrupted creation remains visible rather than silently releasing an active reservation. Creator command lines are stored as digests so inline credentials are not persisted.
+
+Startup requires the owned marker and manifest, Server DLL/runtimeconfig, and a configuration port matching the registry. Stop verifies PID, creation timestamp, executable and exact argument tokens, then uses forced Windows `taskkill /T /F` tree termination and confirms captured descendants exited. A final process identity recheck reduces PID reuse risk; Windows native process handles/Job Objects are not used, so hostile process reuse between inspection and `taskkill` is outside this guarantee. Unknown identity or failed tree confirmation retains the record and refuses deletion. Uncertain startup cleanup keeps a recovery identity in the registry and reports failure. If registry persistence also fails, it attempts to write `<root>/.afm-runtime-recovery.json`; any such file makes lifecycle operations uncertain and requires manual recovery. Durable identity storage cannot be guaranteed if both registry and environment filesystems are unwritable. A manual relative `dotnet Wyn.Server.dll` launch cannot be safely attributed from CIM metadata, so such an ambiguous candidate makes list/stop/delete report `unknown` and refuse; a start is still allowed because environments are only ever launched with an absolute DLL path, so that process cannot be the one being replaced.
+
+Deletion preserves the ownership marker and manifest while removing other payload entries. If payload removal fails, the registry and metadata remain for retry. If the final directory removal fails (for example an editor or terminal still has the folder open), the command retries briefly, then attempts exclusive metadata restoration and reports an actionable error that names the processes whose command line mentions the directory, states that metadata and the registry record were retained, and asks for the same `env delete <name>` command to be re-run after those holders are closed; it does not silently unregister a partial directory.
+
+Locks are exclusive and bounded, with no automatic stale-lock deletion. A terminated CLI can leave `registry.lock` or `env-<uuid>.lock` in the configuration directory. Recover manually only after positively establishing that its owning operation is no longer active; elapsed age alone is not sufficient. Reservation/process recovery may require manual inspection when Windows denies process metadata. No command automatically adopts old environments or scans arbitrary Wyn installs.
+
+The standalone `buildEnvironmentPlan`/`executeEnvironmentPlan` APIs retain their previous behavior without global registration; managed callers can use `EnvironmentManager` and inject registry/process/port adapters for isolated tests. Runtime management is Windows-only; metadata planning/listing can run elsewhere but unavailable process inspection is reported as uncertain.
+
 ## License
 
 MIT

package/dist/cli/config-manager.d.ts

@@ -32,4 +32,19 @@ export declare function saveOSSConfig(config: OSSConfig): void;
  * Clear all stored configuration.
  */
 export declare function clearConfig(): void;
+/**
+ * Read the unified environment root, i.e. the directory that holds managed
+ * environments. Returns undefined when it has not been configured.
+ */
+export declare function getEnvironmentRoot(): string | undefined;
+/**
+ * Persist the unified environment root. The path is stored as an absolute path
+ * so later `create-env` calls do not depend on the current working directory.
+ * Credentials and other settings in the config file are preserved.
+ */
+export declare function setEnvironmentRoot(directory: string): void;
+/**
+ * Remove the unified environment root setting. Other settings are preserved.
+ */
+export declare function clearEnvironmentRoot(): void;
 //# sourceMappingURL=config-manager.d.ts.map

package/dist/cli/config-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-manager.d.ts","sourceRoot":"","sources":["../../src/cli/config-manager.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAK7D;;;;;GAKG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAGrC;AAED;;;GAGG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAYD;;;GAGG;AACH,wBAAgB,UAAU,IAAI,SAAS,CAWtC;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAGnD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CAIzD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAIrD;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,IAAI,CAGlC"}
+{"version":3,"file":"config-manager.d.ts","sourceRoot":"","sources":["../../src/cli/config-manager.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAK7D;;;;;GAKG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAGrC;AAED;;;GAGG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAYD;;;GAGG;AACH,wBAAgB,UAAU,IAAI,SAAS,CAWtC;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAGnD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CAIzD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAIrD;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,IAAI,CAGlC;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAGvD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAK1D;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,IAAI,CAI3C"}

package/dist/cli/config-manager.js

@@ -40,6 +40,9 @@ exports.writeConfig = writeConfig;
 exports.saveAzureConfig = saveAzureConfig;
 exports.saveOSSConfig = saveOSSConfig;
 exports.clearConfig = clearConfig;
+exports.getEnvironmentRoot = getEnvironmentRoot;
+exports.setEnvironmentRoot = setEnvironmentRoot;
+exports.clearEnvironmentRoot = clearEnvironmentRoot;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const os = __importStar(require("os"));
@@ -118,4 +121,32 @@ function clearConfig() {
     ensureConfigDir();
     writeConfig({});
 }
+/**
+ * Read the unified environment root, i.e. the directory that holds managed
+ * environments. Returns undefined when it has not been configured.
+ */
+function getEnvironmentRoot() {
+    const configured = readConfig().environmentRoot;
+    return typeof configured === 'string' && configured.trim() !== '' ? path.resolve(configured) : undefined;
+}
+/**
+ * Persist the unified environment root. The path is stored as an absolute path
+ * so later `create-env` calls do not depend on the current working directory.
+ * Credentials and other settings in the config file are preserved.
+ */
+function setEnvironmentRoot(directory) {
+    if (typeof directory !== 'string' || directory.trim() === '')
+        throw new Error('Environment root must be a non-empty directory path.');
+    const config = readConfig();
+    config.environmentRoot = path.resolve(directory);
+    writeConfig(config);
+}
+/**
+ * Remove the unified environment root setting. Other settings are preserved.
+ */
+function clearEnvironmentRoot() {
+    const config = readConfig();
+    delete config.environmentRoot;
+    writeConfig(config);
+}
 //# sourceMappingURL=config-manager.js.map

package/dist/cli/config-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-manager.js","sourceRoot":"","sources":["../../src/cli/config-manager.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,oCAGC;AAMD,sCAEC;AAgBD,gCAWC;AAKD,kCAGC;AAKD,0CAIC;AAKD,sCAIC;AAKD,kCAGC;AAtFD,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAGzB,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAEvC;;;;;GAKG;AACH,SAAgB,YAAY;IAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAC5C,OAAO,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC,CAAC;AAClG,CAAC;AAED;;;GAGG;AACH,SAAgB,aAAa;IAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,gBAAgB,CAAC,CAAC;AACrD,CAAC;AAED;;GAEG;AACH,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,UAAU;IACxB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,MAAiB;IAC3C,eAAe,EAAE,CAAC;IAClB,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAC9E,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,MAAmB;IACjD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC;IACpB,WAAW,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,SAAgB,aAAa,CAAC,MAAiB;IAC7C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC;IACrB,WAAW,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW;IACzB,eAAe,EAAE,CAAC;IAClB,WAAW,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC"}
+{"version":3,"file":"config-manager.js","sourceRoot":"","sources":["../../src/cli/config-manager.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,oCAGC;AAMD,sCAEC;AAgBD,gCAWC;AAKD,kCAGC;AAKD,0CAIC;AAKD,sCAIC;AAKD,kCAGC;AAMD,gDAGC;AAOD,gDAKC;AAKD,oDAIC;AApHD,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAGzB,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAEvC;;;;;GAKG;AACH,SAAgB,YAAY;IAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAC5C,OAAO,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC,CAAC;AAClG,CAAC;AAED;;;GAGG;AACH,SAAgB,aAAa;IAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,gBAAgB,CAAC,CAAC;AACrD,CAAC;AAED;;GAEG;AACH,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,UAAU;IACxB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,MAAiB;IAC3C,eAAe,EAAE,CAAC;IAClB,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAC9E,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,MAAmB;IACjD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC;IACpB,WAAW,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,SAAgB,aAAa,CAAC,MAAiB;IAC7C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC;IACrB,WAAW,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW;IACzB,eAAe,EAAE,CAAC;IAClB,WAAW,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB;IAChC,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC,eAAe,CAAC;IAChD,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3G,CAAC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,SAAiB;IAClD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACtI,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,WAAW,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB;IAClC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,MAAM,CAAC,eAAe,CAAC;IAC9B,WAAW,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC"}

package/dist/cli/environment.d.ts

@@ -0,0 +1,6 @@
+import { Command } from 'commander';
+import { EnvironmentManager } from '../environment/manager';
+import { EnvironmentRecord } from '../environment/registry';
+export declare function confirmDeletion(entry: EnvironmentRecord, yes: boolean): Promise<boolean>;
+export declare function addEnvironmentCommands(program: Command, factory?: () => EnvironmentManager): void;
+//# sourceMappingURL=environment.d.ts.map

package/dist/cli/environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../src/cli/environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAW,MAAM,yBAAyB,CAAC;AAQrE,wBAAsB,eAAe,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAO9F;AA0CD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE,MAAM,kBAAoG,GAAG,IAAI,CAoBlL"}

package/dist/cli/environment.js

@@ -0,0 +1,134 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.confirmDeletion = confirmDeletion;
+exports.addEnvironmentCommands = addEnvironmentCommands;
+const commander_1 = require("commander");
+const path = __importStar(require("path"));
+const readline_1 = require("readline");
+const manager_1 = require("../environment/manager");
+const root_1 = require("../environment/root");
+const config_manager_1 = require("./config-manager");
+function runMode(options) {
+    if (options.foreground && options.background)
+        throw new Error('--foreground and --background are mutually exclusive.');
+    return options.background ? 'background' : 'foreground';
+}
+async function confirmDeletion(entry, yes) {
+    console.error(`Delete environment directory ${entry.root} and registry record after stopping it?`);
+    if (yes)
+        return true;
+    if (!process.stdin.isTTY)
+        throw new Error('Noninteractive deletion requires --yes.');
+    const input = (0, readline_1.createInterface)({ input: process.stdin, output: process.stderr });
+    try {
+        return await new Promise(resolve => { input.once('close', () => resolve(false)); input.question('Type yes to continue: ', answer => resolve(answer.trim().toLowerCase() === 'yes')); });
+    }
+    finally {
+        input.close();
+    }
+}
+/**
+ * Show or configure the unified directory that holds managed environments.
+ * Stored in the CLI config file so `create-env` can omit the environment path.
+ */
+function addRootCommand(env) {
+    env.command('root')
+        .description('Show or set the unified directory that holds managed environments')
+        .argument('[path]', 'Directory for new environments; each environment is created at <path>/<name>')
+        .option('--unset', 'Forget the configured environment root')
+        .option('--json', 'Output JSON')
+        .action(async (target, options) => {
+        if (options.unset) {
+            if (target)
+                throw new Error('Pass either <path> or --unset, not both.');
+            (0, config_manager_1.clearEnvironmentRoot)();
+            console.error('Environment root cleared. New environments must pass <root> explicitly until one is configured again.');
+            return;
+        }
+        if (target !== undefined) {
+            const container = await (0, root_1.resolveEnvironmentContainer)(target, (0, config_manager_1.getConfigDir)(), { create: true });
+            (0, config_manager_1.setEnvironmentRoot)(container.directory);
+            console.log(container.directory);
+            console.error(`Environment root ${container.created ? 'created at' : 'set to'} ${container.directory}`);
+            console.error(`Stored in ${(0, config_manager_1.getConfigPath)()}`);
+            console.error(`New environments are created at ${path.join(container.directory, '<name>')}`);
+            return;
+        }
+        const configured = (0, config_manager_1.getEnvironmentRoot)();
+        if (configured === undefined) {
+            if (options.json) {
+                console.log(JSON.stringify({ configured: false, root: null, configPath: (0, config_manager_1.getConfigPath)() }, null, 2));
+                return;
+            }
+            console.error('No environment root configured.');
+            console.error('Set one with: afm env root <path>');
+            console.error('Then create environments without a path, e.g. `afm oss create-env --name demo --major 9.1`.');
+            return;
+        }
+        const exists = await (0, root_1.inspectEnvironmentDirectory)(configured, (0, config_manager_1.getConfigDir)());
+        if (options.json) {
+            console.log(JSON.stringify({ configured: true, root: configured, exists, configPath: (0, config_manager_1.getConfigPath)() }, null, 2));
+            return;
+        }
+        console.log(configured);
+        console.error(`Stored in ${(0, config_manager_1.getConfigPath)()}`);
+        console.error(exists ? `New environments are created at ${path.join(configured, '<name>')}` : 'The directory is missing and will be created on the next create-env.');
+    });
+}
+function addEnvironmentCommands(program, factory = () => new manager_1.EnvironmentManager({ onProgress: message => console.error(message) })) {
+    const env = new commander_1.Command('env').description('Manage registered local Wyn environments');
+    env.command('list').option('--json', 'Output JSON').action(async (options) => {
+        const rows = await factory().list();
+        if (options.json)
+            console.log(JSON.stringify(rows, null, 2));
+        else {
+            const configured = (0, config_manager_1.getEnvironmentRoot)();
+            console.error(configured ? `Environment root: ${configured}` : 'No environment root configured; set one with `afm env root <path>`.');
+            console.table(rows.map(row => ({ name: row.name, state: row.observedState, port: row.port, edition: row.edition, major: row.major, root: row.root, local: (row.localModules ?? []).join(','), PID: row.observedState === 'running' || row.observedState === 'unknown' ? row.run?.pid ?? '' : '', problem: row.problem ?? '' })));
+        }
+    });
+    addRootCommand(env);
+    env.command('start').argument('<name>').option('--foreground').option('--background')
+        .action(async (name, options) => { const mode = runMode(options); console.error(`Starting ${name} (${mode})...`); await factory().start(name, mode); });
+    env.command('restart').argument('<name>').option('--foreground').option('--background')
+        .action(async (name, options) => { const mode = options.foreground || options.background ? runMode(options) : undefined; console.error(`Restarting ${name} (${mode ?? 'previous mode or foreground'})...`); await factory().restart(name, mode); });
+    env.command('stop').argument('<name>').action(async (name) => { console.error(`Stopping ${name}...`); await factory().stop(name); });
+    env.command('delete').argument('<name>').option('-y, --yes')
+        .action(async (name, options) => { const deleted = await factory().delete(name, entry => confirmDeletion(entry, !!options.yes)); if (!deleted)
+        console.error('Deletion cancelled.'); });
+    program.addCommand(env);
+}
+//# sourceMappingURL=environment.js.map

package/dist/cli/environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.js","sourceRoot":"","sources":["../../src/cli/environment.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,0CAOC;AA0CD,wDAoBC;AAjFD,yCAAoC;AACpC,2CAA6B;AAC7B,uCAA2C;AAC3C,oDAA4D;AAE5D,8CAA+F;AAC/F,qDAA6H;AAE7H,SAAS,OAAO,CAAC,OAAuD;IACtE,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IACvH,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC;AAC1D,CAAC;AACM,KAAK,UAAU,eAAe,CAAC,KAAwB,EAAE,GAAY;IAC1E,OAAO,CAAC,KAAK,CAAC,gCAAgC,KAAK,CAAC,IAAI,yCAAyC,CAAC,CAAC;IACnG,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IACrB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACrF,MAAM,KAAK,GAAG,IAAA,0BAAe,EAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAChF,IAAI,CAAC;QAAC,OAAO,MAAM,IAAI,OAAO,CAAU,OAAO,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;YACjM,CAAC;QAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AAC5B,CAAC;AACD;;;GAGG;AACH,SAAS,cAAc,CAAC,GAAY;IAClC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;SAChB,WAAW,CAAC,mEAAmE,CAAC;SAChF,QAAQ,CAAC,QAAQ,EAAE,8EAA8E,CAAC;SAClG,MAAM,CAAC,SAAS,EAAE,wCAAwC,CAAC;SAC3D,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;SAC/B,MAAM,CAAC,KAAK,EAAE,MAA0B,EAAE,OAA4C,EAAE,EAAE;QACzF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,IAAI,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACxE,IAAA,qCAAoB,GAAE,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,uGAAuG,CAAC,CAAC;YACvH,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,MAAM,IAAA,kCAA2B,EAAC,MAAM,EAAE,IAAA,6BAAY,GAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9F,IAAA,mCAAkB,EAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACjC,OAAO,CAAC,KAAK,CAAC,oBAAoB,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;YACxG,OAAO,CAAC,KAAK,CAAC,aAAa,IAAA,8BAAa,GAAE,EAAE,CAAC,CAAC;YAC9C,OAAO,CAAC,KAAK,CAAC,mCAAmC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC7F,OAAO;QACT,CAAC;QACD,MAAM,UAAU,GAAG,IAAA,mCAAkB,GAAE,CAAC;QACxC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,IAAA,8BAAa,GAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACnI,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACjD,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACnD,OAAO,CAAC,KAAK,CAAC,6FAA6F,CAAC,CAAC;YAC7G,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAA,kCAA2B,EAAC,UAAU,EAAE,IAAA,6BAAY,GAAE,CAAC,CAAC;QAC7E,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,IAAA,8BAAa,GAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAChJ,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,aAAa,IAAA,8BAAa,GAAE,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,mCAAmC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,sEAAsE,CAAC,CAAC;IACxK,CAAC,CAAC,CAAC;AACP,CAAC;AACD,SAAgB,sBAAsB,CAAC,OAAgB,EAAE,UAAoC,GAAG,EAAE,CAAC,IAAI,4BAAkB,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1K,MAAM,GAAG,GAAG,IAAI,mBAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,0CAA0C,CAAC,CAAC;IACvF,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC3E,MAAM,IAAI,GAAG,MAAM,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,OAAO,CAAC,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;aACxD,CAAC;YACJ,MAAM,UAAU,GAAG,IAAA,mCAAkB,GAAE,CAAC;YACxC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,qBAAqB,UAAU,EAAE,CAAC,CAAC,CAAC,qEAAqE,CAAC,CAAC;YACtI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACnU,CAAC;IACH,CAAC,CAAC,CAAC;IACH,cAAc,CAAC,GAAG,CAAC,CAAC;IACpB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;SAClF,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAAO,EAAE,EAAE,GAAG,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClK,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;SACpF,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAAO,EAAE,EAAE,GAAG,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,IAAI,KAAK,IAAI,IAAI,6BAA6B,MAAM,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9P,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7I,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;SACzD,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAAO,EAAE,EAAE,GAAG,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClM,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC"}

package/dist/cli/setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/cli/setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOpC;;;GAGG;AACH,wBAAgB,aAAa,IAAI,OAAO,CA+BvC"}
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/cli/setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAapC;;;GAGG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAiCvC"}

package/dist/cli/setup.js

@@ -1,11 +1,50 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createProgram = createProgram;
 const commander_1 = require("commander");
+const path = __importStar(require("path"));
 const artifact_client_1 = require("../artifact-client");
 const config_manager_1 = require("./config-manager");
 const version_1 = require("./version");
 const semver_1 = require("../utils/semver");
+const plan_1 = require("../environment/plan");
+const manager_1 = require("../environment/manager");
+const update_1 = require("../environment/update");
+const root_1 = require("../environment/root");
+const environment_1 = require("./environment");
 /**
  * Build and configure the CLI program.
  * Returns the configured Command instance.
@@ -30,12 +69,122 @@ function createProgram() {
         .description('Aliyun OSS operations');
     addSharedCommands(ossProgram, 'oss');
     program.addCommand(ossProgram);
+    (0, environment_1.addEnvironmentCommands)(program);
     return program;
 }
 /**
  * Add shared commands to a storage-specific program ('az' or 'oss').
  */
 function addSharedCommands(program, type) {
+    program
+        .command('create-env')
+        .description('Plan or assemble a fresh Windows Wyn embedded environment (core server, account, dataset, analysis model and cot worker are automatic)')
+        .argument('[root]', 'Environment directory; defaults to <configured environment root>/<name>')
+        .requiredOption('--name <name>', 'Registered environment name')
+        .requiredOption('--major <major>', '9.1, 9.1-* or dev')
+        .option('--modules <names...>', 'Optional modules: dashboard, reporting, sheets (comma-separated also accepted)')
+        .option('--edition <edition>', 'cn or en', 'cn')
+        .option('--profile <profile>', 'embedded', 'embedded')
+        .option('--port <port>', 'Web and embedded identity port', '51980')
+        .option('--dry-run', 'Resolve remote artifacts without writing or downloading')
+        .option('--base-prefix <prefix>', 'Override saved storage prefix (empty means bucket/container root)')
+        .option('--sasurl <url>', 'Azure SAS URL')
+        .option('--keyid <id>', 'OSS Key ID')
+        .option('--key <key>', 'OSS Key Secret')
+        .option('--bucket <bucket>', 'OSS bucket')
+        .option('--region <region>', 'OSS region')
+        .action(async (rootArgument, options) => {
+        const configuredRoot = (0, config_manager_1.getEnvironmentRoot)();
+        const root = rootArgument ?? (configuredRoot === undefined ? undefined : (0, root_1.resolveNamedEnvironmentDirectory)(configuredRoot, options.name));
+        if (root === undefined)
+            throw new Error('No environment root configured: pass <root> or set a default with `afm env root <path>`.');
+        const input = { root, major: options.major, modules: options.modules, edition: options.edition, profile: options.profile, port: Number(options.port), dryRun: options.dryRun };
+        const started = Date.now();
+        let currentStage = 'Validating environment options and target directory';
+        let stageStarted = started;
+        const onProgress = (message) => {
+            currentStage = message;
+            stageStarted = Date.now();
+            console.error(`[create-env +${Math.floor((stageStarted - started) / 1000)}s] ${message}`);
+        };
+        const absoluteRoot = path.resolve(input.root);
+        console.error(`[create-env] Environment directory: ${absoluteRoot}${rootArgument === undefined ? ' (from the configured environment root)' : ''}`);
+        if (rootArgument !== undefined && configuredRoot !== undefined) {
+            const relative = path.relative(configuredRoot, absoluteRoot);
+            if (relative.startsWith('..') || path.isAbsolute(relative))
+                console.error(`[create-env] Note: ${absoluteRoot} is outside the configured environment root ${configuredRoot}.`);
+        }
+        onProgress(currentStage);
+        const heartbeat = setInterval(() => {
+            console.error(`[create-env +${Math.floor((Date.now() - started) / 1000)}s] Still working (${Math.floor((Date.now() - stageStarted) / 1000)}s): ${currentStage}`);
+        }, 15000);
+        heartbeat.unref();
+        try {
+            await (0, plan_1.validateEnvironmentOptions)(input);
+            if (configuredRoot !== undefined) {
+                const container = await (0, root_1.resolveEnvironmentContainer)(configuredRoot, (0, config_manager_1.getConfigDir)(), { create: !options.dryRun });
+                if (container.created)
+                    console.error(`[create-env] Created environment root: ${container.directory}`);
+            }
+            const manager = new manager_1.EnvironmentManager();
+            const result = await manager.create(options.name, input, () => createClient(type, options, true), onProgress);
+            if (options.dryRun) {
+                onProgress(`Dry-run complete: ${'artifacts' in result ? result.artifacts.length : 0} artifacts resolved; nothing downloaded or written`);
+                console.log(JSON.stringify(result, null, 2));
+            }
+            else {
+                onProgress('Complete');
+                console.log(JSON.stringify(result, null, 2));
+            }
+        }
+        finally {
+            clearInterval(heartbeat);
+        }
+    });
+    // --- update-env ---
+    program
+        .command('update-env')
+        .description('Update selected modules of a registered environment; a local DLL source points the Server at the developer build instead of copying files')
+        .argument('<name>', 'Registered environment name')
+        .requiredOption('--modules <specs...>', 'Module specs: all, dashboard, dashboard:0.1.12345 or dashboard=D:\\path\\Wyn.Dashboards.Plugin.dll (comma-separated also accepted)')
+        .option('--dry-run', 'Validate state and resolve remote versions without writing, downloading or deleting anything')
+        .option('--base-prefix <prefix>', 'Override saved storage prefix (empty means bucket/container root)')
+        .option('--sasurl <url>', 'Azure SAS URL')
+        .option('--keyid <id>', 'OSS Key ID')
+        .option('--key <key>', 'OSS Key Secret')
+        .option('--bucket <bucket>', 'OSS bucket')
+        .option('--region <region>', 'OSS region')
+        .action(async (name, options) => {
+        const started = Date.now();
+        let currentStage = 'Validating module specs';
+        let stageStarted = started;
+        const onProgress = (message) => {
+            currentStage = message;
+            stageStarted = Date.now();
+            console.error(`[update-env +${Math.floor((stageStarted - started) / 1000)}s] ${message}`);
+        };
+        const heartbeat = setInterval(() => {
+            console.error(`[update-env +${Math.floor((Date.now() - started) / 1000)}s] Still working (${Math.floor((Date.now() - stageStarted) / 1000)}s): ${currentStage}`);
+        }, 15000);
+        heartbeat.unref();
+        try {
+            // Local-only updates never construct a cloud client; the factory is only
+            // called when a remote spec actually has to be resolved.
+            let client;
+            const clientFactory = () => { client ??= createClient(type, options, true); return client; };
+            const updater = new update_1.EnvironmentUpdater();
+            const result = await updater.update(name, options.modules, clientFactory, { dryRun: options.dryRun, onProgress });
+            onProgress(result.dryRun ? `Dry-run complete: ${result.changes.length} module(s) validated; nothing downloaded or written` : 'Complete');
+            if ((result.skipped ?? []).length)
+                console.error(`[update-env] local modules skipped (not updated from artifacts): ${(result.skipped ?? []).map(item => item.module).join(', ')}`);
+            if (!result.dryRun)
+                console.error(`[update-env] ${result.name} must be restarted to load the change: afm env restart ${result.name}`);
+            console.log(JSON.stringify(result, null, 2));
+        }
+        finally {
+            clearInterval(heartbeat);
+        }
+    });
     // --- login ---
     program
         .command('login')
@@ -400,23 +549,31 @@ function addSharedCommands(program, type) {
 /**
  * Create an ArtifactClient based on CLI options and stored config.
  */
-function createClient(type, cliOptions) {
+function createClient(type, cliOptions, environment = false) {
     const storedConfig = (0, config_manager_1.readConfig)();
     const stored = storedConfig[type];
+    const prefix = environment ? cliOptions.basePrefix ?? stored?.basePrefix : undefined;
+    if (prefix !== undefined && (typeof prefix !== 'string' || /[?:\\\x00-\x1f]/.test(prefix) || prefix.startsWith('/') || prefix.split('/').some((p) => p === '..' || p === '.')))
+        throw new Error('Invalid storage base prefix.');
+    const basePrefix = prefix === undefined ? undefined : prefix.replace(/\/+$/, '');
     if (type === 'az') {
         const azStored = stored;
         const sasUrl = cliOptions.sasurl || azStored?.sasUrl;
         if (!sasUrl) {
+            if (environment)
+                throw new Error('Azure SAS URL is required. Provide --sasurl or run "afm az login".');
             console.error('Error: Azure SAS URL is required. Provide --sasurl or run "afm az login".');
             process.exit(1);
         }
-        return new artifact_client_1.ArtifactClient('az', { sasUrl });
+        return new artifact_client_1.ArtifactClient('az', { sasUrl, ...(basePrefix !== undefined ? { basePrefix } : {}) });
     }
     else {
         const ossStored = stored;
         const keyId = cliOptions.keyid || ossStored?.keyId;
         const key = cliOptions.key || ossStored?.key;
         if (!keyId || !key) {
+            if (environment)
+                throw new Error('OSS key ID and key are required. Provide --keyid and --key or run "afm oss login".');
             console.error('Error: OSS key ID and key are required. Provide --keyid and --key or run "afm oss login".');
             process.exit(1);
         }
@@ -425,6 +582,7 @@ function createClient(type, cliOptions) {
             key,
             bucket: cliOptions.bucket || ossStored?.bucket,
             region: cliOptions.region || ossStored?.region,
+            ...(basePrefix !== undefined ? { basePrefix } : {}),
         });
     }
 }