@nylorun/cli 0.14.1-beta → 0.15.0-beta

package/CHANGELOG.md

@@ -1,5 +1,37 @@
 # @nylorun/cli
 
+## 0.15.0-beta
+
+### Major Changes
+
+- 1345f61: **`nylo` ships in `nylorun`; `@nylorun/cli` is deprecated.** One package runs a project's local Tenant (`nylorun`) and is the Runtime client of the linked installation (`nylo`). MIGRATION.md ("`nylo` ships in `nylorun`") has the details.
+
+  - `nylorun`: a second bin, `nylo` (`npx -p nylorun nylo <command>`), with the same commands, flags, output and exit codes as `@nylorun/cli`'s. The `nylorun` command never loads it. nylorun now depends on `@nylorun/admin`, which `nylo` uses. `nylo configure`'s provider sign-in comes from `@earendil-works/pi-ai` (about 100 MB with its provider SDKs), which is not a dependency: the first `nylo configure` installs the tested version into `~/.nylorun/lib/pi-ai-<version>/` with npm, without install scripts, unless it resolves beside nylorun, so `npx nylorun` stays about 11 MB. `nylorun configure`, `nylorun status --env` and `nylorun doctor sandbox` still exit 2, now naming `npx -p nylorun nylo …`. `nylorun status|reset` (the local Tenant's containers and volumes) and `nylo status|reset` (the Management API) keep their meanings; both usages and the README say which is which.
+  - **Deprecated (`@nylorun/cli`):** its `nylo` prints one line on stderr and runs nylorun's `nylo` with the same arguments and exit code; stdout is unchanged, so `eval "$(npx @nylorun/cli env)"` still works. It depends on `nylorun` only. A later release removes it.
+  - **Breaking (`@nylorun/admin`): the `./project` subpath is removed.** It re-exported `@nylorun/core/project` for `nylo`, which now imports Core directly. Import `@nylorun/core/project` instead.
+  - `@nylorun/create-agent`: `compatibility.json` no longer pins `@nylorun/cli`; the examples run `nylo` from their `nylorun` devDependency.
+
+### Patch Changes
+
+- Pin nylorun to the tested release.
+- Updated dependencies [554df94]
+- Updated dependencies [1345f61]
+- Updated dependencies
+- Updated dependencies
+- Updated dependencies
+  - nylorun@0.13.0-beta
+
+## 0.14.2-beta
+
+### Patch Changes
+
+- Pin agents to the tested release.
+- Pin admin to the tested release.
+- Updated dependencies
+- Updated dependencies
+  - @nylorun/agents@0.19.1-beta
+  - @nylorun/admin@0.14.1-beta
+
 ## 0.14.1-beta
 
 ### Patch Changes

package/README.md

@@ -1,101 +1,26 @@
-# @nylorun/cli
+# @nylorun/cli (deprecated)
 
-The Runtime client, command `nylo`: it acts on the one Tenant of an
-installation, a local Tenant or any Runtime reachable by URL and key. Setting up
-and running local Tenants is [`nylorun`](../nylorun/README.md)'s job; the two
-packages are independent and never call each other. Depends on
-`@nylorun/agents` and `@nylorun/admin` only among Nylorun packages. Vocabulary:
-[runtime/src/CONTEXT.md](../runtime/src/CONTEXT.md).
+`nylo`, the Runtime client, ships in [`nylorun`](../nylorun/README.md#the-runtime-client-nylo)
+beside the `nylorun` command. This package is kept for one release so that
+existing commands and scripts keep working: its `nylo` prints one line on
+stderr, then runs nylorun's `nylo` with the same arguments and exits with its
+code. stdout is `nylo`'s alone, so `eval` still works:
 
 ```sh
-npx nylorun start                     # in the project: its Tenant and the Project link
-npx @nylorun/cli status               # the linked Tenant
-```
-
-## Commands
-
-```sh
-nylo status [--json]                  # the Tenant, its checks and counts
-nylo reset [--sessions|--sandboxes|--all] [--yes]
-nylo access signing-keys …            # the Tenant's signing keys: list, rotate, revoke
-nylo configure                        # set or replace the Tenant's model provider
-nylo env                              # export lines for the linked Project
-nylo doctor sandbox [--json]          # sandbox backend via the Management API
+npx @nylorun/cli status
+eval "$(npx @nylorun/cli env)"
 ```
 
-Every command acts on the linked installation: the Project link and
-credentials (below), or `NYLORUN_RUNTIME_URL` and `NYLORUN_SERVER_KEY` when the
-Project has no link. An installation serves one Tenant, so nothing selects it.
-`status`, `reset`, `access`, `configure` and `doctor` use the Management API
-with the Project's management key, or `NYLORUN_MANAGEMENT_KEY` (with
-`NYLORUN_RUNTIME_URL` when there is no link); `env` prints the Runtime URL and
-the application key, for the Runtime API.
-
-Local Tenant commands (`up`, `down`, `start`, `stop`, `logs`, `studio`) exit 2
-naming `npx nylorun <command>`. `nylo tenant …` exits 2: `npx nylorun start`
-creates the project's Tenant and the link, and `nylo status|reset` replace
-`nylo tenant status|reset`. `nylo endpoints` was removed with Action endpoints
-and exits 2. `nylorun dev` was removed: run
-`npx nylorun start` once, then the project's own `npm run dev`
-(`tsx watch src/main.ts`).
-
-## `nylo status`
-
-Reads the Management API's status (`GET /v1/tenant`, with a management key) and
-prints the Tenant, the Runtime URL, the checks, the counts and the sandbox
-backend. When the Tenant is not open it does not answer; `nylo status` then
-fails and says to run `npx nylorun status`, which reports why from the
-Runtime's container (`nylorun-operate status`).
-
-## `nylo reset`
-
-Clears the Tenant's sessions (the default), its sandboxes, or all its data
-(`--all`), after draining work in flight. `--all` asks first; pass `--yes` when
-not in a terminal. The Project link and credentials are kept.
-
-## Project link
-
-`npx nylorun start` writes it; `nylo` only reads it. A **Project** stores only:
-
-- `.nylorun/link.json`: `{ format: 3, tenant, hostUrl, hostId, tenantId }`
-  (`tenant` is the local Tenant's name; `tenantId` is information)
-- `.nylorun/credentials.json` (0600): the application key `project` and the
-  management key `project-management`, with their ids (`applicationKey`,
-  `principalId`, `managementKey`, `managementPrincipalId`)
-- `.nylorun/.gitignore` containing `*`
-
-A link from an older nylorun (format 0 to 2): `nylo` refuses it and says to run
-`npx nylorun start`, which links the project again.
-
-`createClient` in `@nylorun/agents` reads the link (or the two variables), so the
-project's `npm run dev` and `npm start`, which save its agents, need no Nylorun tool.
-`nylo endpoints` was removed with Action endpoints (protocol 8): the Runtime runs no code
-of yours during a session.
+Run nylorun's `nylo` instead:
 
 ```sh
-eval "$(npx @nylorun/cli env)"
-# → NYLORUN_RUNTIME_URL, NYLORUN_SERVER_KEY
+npx -p nylorun nylo status
+eval "$(npx -p nylorun nylo env)"
 ```
 
-## Exit codes
-
-| Code | Meaning |
-| --- | --- |
-| 0 | Success |
-| 1 | Generic failure |
-| 2 | Usage error, or a moved or removed command |
-| 6 | No Runtime at the linked or local URL |
-| 130 / 143 | SIGINT / SIGTERM |
-
-## Troubleshooting
-
-| Symptom | What to do |
-| --- | --- |
-| No Runtime answers | `npx nylorun start`, then `npx nylorun status` |
-| Tenant not open | `npx nylorun status` shows the cause and its `repair` |
-| No management key | `npx nylorun start` in the project writes one; elsewhere set `NYLORUN_MANAGEMENT_KEY` |
-| `403 key_role_mismatch` | The key belongs to the other API: a management key for the Management API, an application key for the Runtime API |
-| Old Project link refused | `npx nylorun start` in the project |
-| `426` from the Runtime | Upgrade the CLI, or pin a matching older set |
-
-See [MIGRATION.md](../MIGRATION.md).
+or add `nylorun` as a devDependency and run `nylo` there (`npx nylo` in the
+project; outside it, `npx nylo` looks for an unrelated npm package named
+`nylo`). The commands, their output and their exit codes are the same:
+[nylorun/README.md](../nylorun/README.md#the-runtime-client-nylo) documents
+them. This package depends on `nylorun` only, at the version released with it,
+and a later release removes it. See [MIGRATION.md](../MIGRATION.md).

package/dist/cli.d.ts

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-import "./baseline.js";
+export {};

package/dist/cli.js

@@ -1,145 +1,11 @@
 #!/usr/bin/env node
-import "./baseline.js";
-import { ConfigurationCancelled, configureProvider, fetchModelCatalog, } from "./model/configure.js";
-import { putHostModel } from "./model/host-model.js";
-import { CliError } from "./errors.js";
-import { findProjectRoot } from "@nylorun/admin/project";
-import { printLinkedEnvExports } from "./project/env.js";
-import { linkedConnection, managementClient } from "./project/connection.js";
-import { accessCommand } from "./access/commands.js";
-import { resetCommand, statusCommand } from "./installation/commands.js";
-const usage = `nylo <status|reset|access|configure|env|doctor>
-
-Runtime client for the linked installation and its one Tenant (the Project link that
-npx nylorun start writes, or NYLORUN_RUNTIME_URL with NYLORUN_SERVER_KEY, and
-NYLORUN_MANAGEMENT_KEY for status, reset, access, configure and doctor):
-  status [--json]                         the Tenant, its checks and counts
-  reset [--sessions|--sandboxes|--all] [--yes]
-                                          clear the Tenant's sessions, sandboxes or all its data
-  access signing-keys list|rotate|revoke  the Tenant's token signing keys (nylo access --help)
-  configure                               set the linked Tenant's model provider
-  env                                     print the linked Project's NYLORUN_* variables as exports
-  doctor sandbox [--json]                 show which sandbox backend this Tenant's Host offers
-
-Local Tenants are run by the nylorun package: npx nylorun start in a project creates its
-Tenant and the Project link.`;
-/** Local Tenant commands, which the nylorun package runs. */
-const LOCAL_COMMANDS = new Set([
-    "up", "down", "start", "stop", "logs", "studio", "runtime", "restart", "run",
-]);
-const TENANT_REMOVED = `nylo tenant was removed: an installation serves one Tenant.
-Run "npx nylorun start" in your project to create its Tenant and the Project link.
-Then use nylo status and nylo reset on the linked installation.`;
-const ENDPOINTS_REMOVED = `nylo endpoints was removed: the Runtime runs no code of yours during a session,
-so there are no Action endpoints. An agent's tools are http() tools and remote MCP servers
-(see MIGRATION.md).`;
-function parseFlags(args, allowed = {}) {
-    const booleans = new Set();
-    const values = new Map();
-    const rest = [];
-    const booleanNames = new Set(allowed.booleans ?? []);
-    const valueNames = new Set(allowed.values ?? []);
-    for (let index = 0; index < args.length; index += 1) {
-        const arg = args[index];
-        if (!arg.startsWith("-")) {
-            rest.push(arg);
-            continue;
-        }
-        if (arg === "--global" || arg === "--db") {
-            throw usageError(`${arg} was removed. Use the Runtime Host root (NYLORUN_HOME) and a Project link instead.`);
-        }
-        if (booleanNames.has(arg)) {
-            if (booleans.has(arg))
-                throw usageError(`${arg} may only be supplied once.`);
-            booleans.add(arg);
-            continue;
-        }
-        if (valueNames.has(arg)) {
-            if (values.has(arg))
-                throw usageError(`${arg} may only be supplied once.`);
-            const value = args[++index];
-            if (!value || value.startsWith("-"))
-                throw usageError(`${arg} requires a value.`);
-            values.set(arg, value);
-            continue;
-        }
-        throw usageError(usage);
-    }
-    return { rest, booleans, values };
-}
-const usageError = (message) => new CliError(message, 2);
-async function main() {
-    const [command, ...args] = process.argv.slice(2);
-    if (!command || command === "--help" || command === "-h")
-        return void console.log(usage);
-    if (process.platform === "win32")
-        throw new CliError("Nylorun does not run on native Windows. Use WSL2: install Node 24 and Docker (Docker Desktop's WSL integration) inside your WSL distribution and run nylorun there (https://learn.microsoft.com/windows/wsl/install).", 1);
-    if (command === "tenant")
-        throw usageError(TENANT_REMOVED);
-    if (command === "status")
-        return await statusCommand(args);
-    if (command === "reset")
-        return await resetCommand(args);
-    if (command === "endpoints")
-        throw usageError(ENDPOINTS_REMOVED);
-    if (command === "access") {
-        if (args[0] === "--help" || args[0] === "-h" || args.length === 0) {
-            const { accessUsage } = await import("./access/commands.js");
-            return void console.log(accessUsage);
-        }
-        return await accessCommand(args);
-    }
-    if (command === "env") {
-        if (args.length)
-            throw usageError("Usage: nylo env");
-        await printLinkedEnvExports(findProjectRoot() ?? process.cwd());
-        return;
-    }
-    if (command === "doctor") {
-        const [topic, ...options] = args;
-        if (topic !== "sandbox" || options.some((option) => option !== "--json"))
-            throw usageError("Usage: nylo doctor sandbox [--json]. Check the local Tenant with npx nylorun doctor.");
-        const { doctorSandbox } = await import("./doctor.js");
-        await doctorSandbox({ json: options.includes("--json") });
-        return;
-    }
-    if (command === "dev")
-        throw usageError('nylorun dev was removed: run "npx nylorun start" once in your project, then your project\'s npm run dev.');
-    if (LOCAL_COMMANDS.has(command))
-        throw usageError(`Local Tenants are run by the nylorun package: npx nylorun ${command}`);
-    if (command === "configure") {
-        const flags = parseFlags(args);
-        if (flags.rest.length)
-            throw usageError(usage);
-        const projectRoot = findProjectRoot() ?? process.cwd();
-        const auth = await linkedConnection(projectRoot);
-        const admin = managementClient(auth);
-        const controller = new AbortController();
-        const cancel = (signal) => controller.abort(new ConfigurationCancelled(signal));
-        process.once("SIGINT", () => cancel("SIGINT"));
-        process.once("SIGTERM", () => cancel("SIGTERM"));
-        const health = await fetch(`${auth.url}/health`).catch(() => undefined);
-        if (!health?.ok)
-            throw new CliError(`No Runtime is listening at ${auth.url}. Start the local Tenant with "npx nylorun start".`, 6);
-        const catalog = await fetchModelCatalog(admin);
-        const prompted = await configureProvider({
-            signal: controller.signal,
-            catalog,
-        });
-        await putHostModel(admin, prompted);
-        return;
-    }
-    throw usageError(usage);
-}
-async function finish(code) {
-    process.exitCode = code;
-    for (const stream of [process.stdout, process.stderr])
-        await new Promise((resolve) => stream.write("", () => resolve()));
-    process.exit(code);
-}
-void main().then(() => finish(process.exitCode === undefined ? 0 : Number(process.exitCode)), (error) => {
-    console.error(error instanceof Error ? error.message : String(error));
-    return finish(error instanceof ConfigurationCancelled || error instanceof CliError
-        ? error.exitCode
-        : 1);
-});
+import { createRequire } from "node:module";
+import { dirname, join } from "node:path";
+import { pathToFileURL } from "node:url";
+// @nylorun/cli is deprecated: `nylo` ships in nylorun. This runs nylorun's `nylo` with the same
+// arguments, after one line on stderr, so `eval "$(npx @nylorun/cli env)"` keeps a clean stdout.
+process.stderr.write("@nylorun/cli is deprecated: nylo ships in nylorun. Use npx -p nylorun nylo, or install nylorun.\n");
+const require = createRequire(import.meta.url);
+const manifest = require.resolve("nylorun/package.json");
+const { bin } = require(manifest);
+await import(pathToFileURL(join(dirname(manifest), bin.nylo)).href);

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@nylorun/cli",
-  "version": "0.14.1-beta",
+  "version": "0.15.0-beta",
   "type": "module",
   "license": "Apache-2.0",
-  "description": "Nylorun Runtime client: the linked installation's Tenant, its access and its model provider",
+  "description": "Deprecated: nylo ships in the nylorun package. This package runs nylorun's nylo for one more release.",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/nylorun/agents.git",
@@ -30,9 +30,7 @@
     "prepack": "npm run build"
   },
   "dependencies": {
-    "@nylorun/agents": "0.19.0-beta",
-    "@nylorun/admin": "0.14.0-beta",
-    "@earendil-works/pi-ai": "0.99.1"
+    "nylorun": "0.13.0-beta"
   },
   "devDependencies": {
     "typescript": "npm:@typescript/typescript6@^6.0.2",

package/dist/access/commands.d.ts

@@ -1,8 +0,0 @@
-/**
- * `nylo access`: the linked Tenant's signing keys, which sign capability links and run tokens,
- * through the Management API with the Project's management key. (Subject tokens, the
- * access policy, browser keys and revocations left the Runtime in protocol 7.)
- */
-import type { ManagementClient } from "@nylorun/admin";
-export declare const accessUsage = "nylo access signing-keys <list|rotate|revoke>\n\n  signing-keys list                  list the signing keys\n  signing-keys rotate [--force]      rotate; --force ends outstanding links and run tokens\n  signing-keys revoke <kid>          revoke a previous or standby key";
-export declare function accessCommand(input: readonly string[], client?: () => Promise<ManagementClient>): Promise<void>;

package/dist/access/commands.js

@@ -1,33 +0,0 @@
-import { findProjectRoot } from "@nylorun/admin/project";
-import { CliError } from "../errors.js";
-import { linkedConnection, managementClient } from "../project/connection.js";
-export const accessUsage = `nylo access signing-keys <list|rotate|revoke>
-
-  signing-keys list                  list the signing keys
-  signing-keys rotate [--force]      rotate; --force ends outstanding links and run tokens
-  signing-keys revoke <kid>          revoke a previous or standby key`;
-const usageError = (message = accessUsage) => new CliError(message, 2);
-async function linkedClient() {
-    return managementClient(await linkedConnection(findProjectRoot() ?? process.cwd()));
-}
-const print = (value) => console.log(JSON.stringify(value, null, 2));
-export async function accessCommand(input, client = linkedClient) {
-    const [topic, action, ...args] = input;
-    if (topic === "signing-keys") {
-        const keys = async () => (await client()).signingKeys;
-        if (action === "list" && args.length === 0)
-            return print(await (await keys()).list());
-        if (action === "rotate") {
-            const force = args[0] === "--force";
-            if (args.length > (force ? 1 : 0))
-                throw usageError();
-            return print(await (await keys()).rotate({ force }));
-        }
-        if (action === "revoke" && args.length === 1)
-            return print(await (await keys()).revoke(args[0]));
-        throw usageError();
-    }
-    if (topic === "policy" || topic === "keys" || topic === "revoke" || topic === "token")
-        throw usageError(`nylo access ${topic} was removed: the Runtime no longer mints subject tokens or keeps an access policy, browser keys or revocations (protocol 7). Trust your identity provider's tokens with an identity file, and give servers an application key (nylorun key put <id>).`);
-    throw usageError();
-}

package/dist/baseline.d.ts

@@ -1,2 +0,0 @@
-/** Frozen map captured when this module first loads. */
-export declare function baselineEnv(): Readonly<Record<string, string | undefined>>;

package/dist/baseline.js

@@ -1,10 +0,0 @@
-/**
- * Snapshot of the process environment at CLI module load.
- */
-const snapshot = Object.freeze({
-    ...process.env,
-});
-/** Frozen map captured when this module first loads. */
-export function baselineEnv() {
-    return snapshot;
-}

package/dist/doctor.d.ts

@@ -1,25 +0,0 @@
-export type SandboxReport = {
-    preference: string;
-    backend: string | null;
-    isolation?: string;
-    reason?: string;
-    probes: {
-        name: string;
-        isolation: string;
-        available: boolean;
-        reason?: string;
-        version?: string;
-    }[];
-    defaultImage?: string;
-    /** The Tenant's sandbox configuration (Runtimes with Sandboxes v3). */
-    config?: {
-        default: "none" | "virtual" | Record<string, unknown>;
-        limits?: {
-            network?: readonly string[];
-        };
-    };
-};
-/** `nylo doctor sandbox`: Tenant sandbox report via the Management API (F2-4). */
-export declare function doctorSandbox(options: {
-    json: boolean;
-}): Promise<void>;

package/dist/doctor.js

@@ -1,65 +0,0 @@
-import { release } from "node:os";
-import { findProjectRoot } from "@nylorun/admin/project";
-import { CliError } from "./errors.js";
-import { linkedConnection, managementClient } from "./project/connection.js";
-function platformLine() {
-    const os = process.platform === "darwin"
-        ? "macOS"
-        : process.env.WSL_DISTRO_NAME
-            ? `Linux (WSL: ${process.env.WSL_DISTRO_NAME})`
-            : process.platform;
-    return `${os} (kernel ${release()}) · ${process.arch}`;
-}
-/** The Tenant's sandbox report (`GET /v1/tenant/sandbox`, Management API). */
-async function fetchSandboxReport() {
-    const connection = await linkedConnection(findProjectRoot() ?? process.cwd());
-    return (await managementClient(connection).settings.sandbox.get());
-}
-/** `nylo doctor sandbox`: Tenant sandbox report via the Management API (F2-4). */
-export async function doctorSandbox(options) {
-    let report;
-    try {
-        report = await fetchSandboxReport();
-    }
-    catch (error) {
-        throw new CliError(error instanceof Error
-            ? error.message
-            : `Could not read Tenant sandbox status: ${String(error)}`, 1);
-    }
-    if (options.json) {
-        console.log(JSON.stringify({ platform: platformLine(), ...report }, null, 2));
-        return;
-    }
-    const rows = [["platform", platformLine()]];
-    for (const probe of report.probes)
-        rows.push([
-            probe.name,
-            `${probe.available ? "✓" : "✗"} ${probe.reason ?? ""}${probe.version ? ` · ${probe.version}` : ""}`,
-        ]);
-    rows.push([
-        "preference",
-        report.preference === "auto"
-            ? "auto (npx nylorun start seeds the Tenant's sandbox.backend from .env NYLORUN_SANDBOX)"
-            : report.preference,
-    ]);
-    if (report.config)
-        rows.push([
-            "default",
-            report.config.default === "none"
-                ? "none: sessions get a sandbox only when opened with one (set a default with PUT /v1/tenant/sandbox)"
-                : report.config.default === "virtual"
-                    ? "virtual: sessions that name no sandbox get one"
-                    : "a Tenant sandbox: sessions that name no sandbox get it",
-        ]);
-    rows.push([
-        "selected",
-        report.backend
-            ? `${report.backend} (${report.isolation} isolation)`
-            : `none: ${report.reason}`,
-    ]);
-    const width = Math.max(...rows.map(([key]) => key.length)) + 2;
-    for (const [key, value] of rows)
-        console.log(`  ${key.padEnd(width)}${value}`);
-    if (report.backend === "virtual")
-        console.log("\n  The virtual shell emulates bash in the Runtime process; it is not a VM boundary.");
-}

package/dist/environment.d.ts

@@ -1,5 +0,0 @@
-/**
- * Read the Project `.env` into a value map. Does not mutate `process.env` (F3).
- */
-export declare function loadProjectEnvironment(root?: string): Record<string, string>;
-export declare function saveEnvironment(root: string, updates: Record<string, string | undefined>, signal?: AbortSignal): Promise<void>;

package/dist/environment.js

@@ -1,73 +0,0 @@
-import { readFileSync, statSync } from "node:fs";
-import { writeFile, rename, rm } from "node:fs/promises";
-import { join } from "node:path";
-import { randomUUID } from "node:crypto";
-import { parseEnv } from "node:util";
-/**
- * Read the Project `.env` into a value map. Does not mutate `process.env` (F3).
- */
-export function loadProjectEnvironment(root = process.cwd()) {
-    const file = join(root, ".env");
-    try {
-        if (statSync(file).isDirectory())
-            throw new Error("The .env directory must be migrated manually: back it up, create a .env file with MODEL_PROVIDER, MODEL and MODEL_PROVIDER_API_KEY, and move OAuth credentials to .nylorun/auth.json. See the Runtime migration guide.");
-    }
-    catch (error) {
-        if (error.code === "ENOENT")
-            return {};
-        throw error;
-    }
-    const parsed = parseEnv(readFileSync(file, "utf8"));
-    const result = {};
-    for (const [key, value] of Object.entries(parsed)) {
-        if (value !== undefined)
-            result[key] = value;
-    }
-    return result;
-}
-// Match complete dotenv assignments, including quoted multiline values.
-const assignment = /^(?:export\s+)?([\w]+)[\t ]*=[\t ]*(?:"[^"]*"|'[^']*'|`[^`]*`|[^#\r\n]*)([^\r\n]*)(?:\r?\n|$)/gm;
-export async function saveEnvironment(root, updates, signal) {
-    const file = join(root, ".env");
-    let contents = "";
-    try {
-        contents = readFileSync(file, "utf8");
-    }
-    catch (error) {
-        if (error.code !== "ENOENT")
-            throw error;
-    }
-    const encode = (value) => {
-        // Node's dotenv parser has no general quote-escaping syntax. Select a
-        // delimiter absent from the value rather than changing the credential.
-        for (const quote of ["'", '"', "`"]) {
-            if (!value.includes(quote) && !(quote === '"' && /\\[nr]/.test(value)))
-                return quote + value + quote;
-        }
-        throw new Error("This value contains all dotenv quote delimiters; set it through your process environment instead.");
-    };
-    const remaining = new Set(Object.keys(updates));
-    contents = contents.replace(assignment, (whole, key, suffix) => {
-        if (!(key in updates))
-            return whole;
-        if (!remaining.delete(key))
-            return "";
-        return updates[key] === undefined
-            ? ""
-            : `${key}=${encode(updates[key])}${suffix}\n`;
-    });
-    if (contents && !contents.endsWith("\n"))
-        contents += "\n";
-    for (const key of remaining)
-        if (updates[key] !== undefined)
-            contents += `${key}=${encode(updates[key])}\n`;
-    const temporary = join(root, `.env-${randomUUID()}.tmp`);
-    try {
-        await writeFile(temporary, contents, { mode: 0o600, signal });
-        signal?.throwIfAborted();
-        await rename(temporary, file);
-    }
-    finally {
-        await rm(temporary, { force: true });
-    }
-}

package/dist/errors.d.ts

@@ -1,5 +0,0 @@
-/** Exit codes are part of the CLI contract; see cli/README.md. */
-export declare class CliError extends Error {
-    readonly exitCode: number;
-    constructor(message: string, exitCode?: number);
-}

package/dist/errors.js

@@ -1,9 +0,0 @@
-/** Exit codes are part of the CLI contract; see cli/README.md. */
-export class CliError extends Error {
-    exitCode;
-    constructor(message, exitCode = 1) {
-        super(message);
-        this.exitCode = exitCode;
-        this.name = "CliError";
-    }
-}

package/dist/installation/commands.d.ts

@@ -1,7 +0,0 @@
-/**
- * `nylo status [--json]`: the Tenant, its checks and counts. A Tenant that is not open does not
- * answer: `npx nylorun status` reports why.
- */
-export declare function statusCommand(args: readonly string[]): Promise<void>;
-/** `nylo reset [--sessions|--sandboxes|--all] [--yes]`; `--all` asks first. */
-export declare function resetCommand(args: readonly string[]): Promise<void>;

package/dist/installation/commands.js

@@ -1,80 +0,0 @@
-/**
- * `nylo status` and `nylo reset`: the linked installation's one Tenant, through the Management
- * API (the Project's management key).
- */
-import { createInterface } from "node:readline/promises";
-import { findProjectRoot } from "@nylorun/admin/project";
-import { CliError } from "../errors.js";
-import { linkedConnection, managementClient } from "../project/connection.js";
-const projectRoot = () => findProjectRoot() ?? process.cwd();
-/**
- * `nylo status [--json]`: the Tenant, its checks and counts. A Tenant that is not open does not
- * answer: `npx nylorun status` reports why.
- */
-export async function statusCommand(args) {
-    const json = args.includes("--json");
-    if (args.some((a) => a !== "--json"))
-        throw new CliError("Usage: nylo status [--json]", 2);
-    const root = projectRoot();
-    const connection = await linkedConnection(root);
-    const admin = managementClient(connection);
-    let body;
-    try {
-        body = await admin.tenant.status();
-    }
-    catch (error) {
-        throw new CliError(`${(error instanceof Error ? error.message : `The Tenant at ${connection.url} is not reachable`).replace(/\.?$/, ".")} Run "npx nylorun status" to see the Tenant's state and why it is not open.`, 1);
-    }
-    if (json) {
-        console.log(JSON.stringify(body, null, 2));
-        return;
-    }
-    console.log(`${body.tenant.name}  ${body.tenant.id}`);
-    console.log(`runtime  ${connection.url}`);
-    console.log(`path     ${body.path}`);
-    console.log(`checks   ${Object.entries(body.checks)
-        .map(([k, v]) => `${k}=${v ? "ok" : "fail"}`)
-        .join(" ")}`);
-    console.log(`counts   sessions=${body.counts.sessions} running=${body.counts.runningSessions} uncertain=${body.counts.uncertainEffects}`);
-    console.log(`sandbox  ${body.sandbox.backend ?? "none"}`);
-}
-const RESET_USAGE = "Usage: nylo reset [--sessions|--sandboxes|--all] [--yes]";
-const SCOPES = { "--sessions": "sessions", "--sandboxes": "sandboxes", "--all": "all" };
-/** `nylo reset [--sessions|--sandboxes|--all] [--yes]`; `--all` asks first. */
-export async function resetCommand(args) {
-    const yes = args.includes("--yes");
-    const flags = args.filter((a) => a !== "--yes");
-    if (flags.some((f) => !(f in SCOPES)) || args.filter((a) => a === "--yes").length > 1)
-        throw new CliError(RESET_USAGE, 2);
-    if (flags.length > 1)
-        throw new CliError("Pass only one of --sessions, --sandboxes, --all.", 2);
-    const scope = flags.length ? SCOPES[flags[0]] : "sessions";
-    const connection = await linkedConnection(projectRoot());
-    const tenant = connection.link?.tenant;
-    const target = tenant ? `Tenant ${tenant} (${connection.url})` : `the Tenant on ${connection.url}`;
-    const admin = managementClient(connection);
-    if (scope === "all" && !yes)
-        await confirmOrThrow(`Reset ALL data of ${target}? The Project link and credentials are kept. [y/N] `);
-    try {
-        await admin.tenant.reset({ scope, activeWork: "drain" });
-    }
-    catch (error) {
-        throw new CliError(error instanceof Error ? error.message : `Tenant reset failed: ${String(error)}`, 1);
-    }
-    console.log(`Reset ${target} (${scope}).`);
-}
-async function confirmOrThrow(prompt) {
-    if (!process.stdin.isTTY || !process.stdout.isTTY) {
-        throw new CliError("Confirmation required; pass --yes for non-interactive use.", 2);
-    }
-    const rl = createInterface({ input: process.stdin, output: process.stdout });
-    try {
-        const answer = (await rl.question(prompt)).trim().toLowerCase();
-        if (answer !== "y" && answer !== "yes") {
-            throw new CliError("Cancelled.", 1);
-        }
-    }
-    finally {
-        rl.close();
-    }
-}

package/dist/model/configure.d.ts

@@ -1,57 +0,0 @@
-import type { Readable, Writable } from "node:stream";
-import type { Credential } from "@earendil-works/pi-ai";
-import type { ManagementClient } from "@nylorun/admin";
-export declare class ConfigurationCancelled extends Error {
-    readonly signal: "SIGINT" | "SIGTERM";
-    readonly exitCode: number;
-    constructor(signal: "SIGINT" | "SIGTERM");
-}
-export type PromptedModel = {
-    provider: string;
-    model: string;
-    baseUrl?: string;
-    /** A custom endpoint's context window and output limit, when given. */
-    settings?: {
-        contextWindow?: number;
-        maxTokens?: number;
-    };
-    auth: Credential;
-};
-export type ModelCatalog = {
-    providers: {
-        id: string;
-        name: string;
-        models: {
-            id: string;
-            name: string;
-        }[];
-        auth?: {
-            apiKey?: unknown;
-            oauth?: unknown;
-        };
-    }[];
-};
-export type Selection = Readonly<{
-    provider: string;
-    model: string;
-    custom?: Readonly<{
-        baseUrl: string;
-    }>;
-}>;
-/** The Tenant's model catalog (`GET /v1/tenant/models`, Management API). */
-export declare function fetchModelCatalog(admin: ManagementClient): Promise<ModelCatalog>;
-export declare function configureProvider(options?: {
-    signal?: AbortSignal;
-    root?: string;
-    input?: Readable;
-    output?: Writable;
-    /** Tenant API catalog from GET /v1/tenant/models. */
-    catalog?: ModelCatalog;
-    /** This installation's stable id, for OAuth flows that need one (OpenAI). */
-    deviceId?: () => string;
-}): Promise<PromptedModel>;
-/**
- * A stable id for this CLI installation, created on first use under the Host root.
- * OpenAI's "Sign in with ChatGPT" sends it as the agent host id.
- */
-export declare function installationId(home?: string): string;

package/dist/model/configure.js

@@ -1,293 +0,0 @@
-import { createInterface } from "node:readline/promises";
-import { randomUUID } from "node:crypto";
-import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
-import { builtinModels } from "@earendil-works/pi-ai/providers/all";
-import { createProvider, } from "@earendil-works/pi-ai";
-import { stream, streamSimple, } from "@earendil-works/pi-ai/api/openai-completions";
-import { nylorunHome } from "@nylorun/admin/project";
-export class ConfigurationCancelled extends Error {
-    signal;
-    exitCode;
-    constructor(signal) {
-        super(`Provider configuration cancelled (${signal}).`);
-        this.signal = signal;
-        this.exitCode = signal === "SIGINT" ? 130 : 143;
-    }
-}
-/**
- * Build a pi-ai registry for interactive login. Catalog listing prefers the
- * Tenant API payload when provided (F2-4).
- */
-function modelsFor(selection, credentials, catalog) {
-    const models = builtinModels({ credentials });
-    if (selection.custom) {
-        const model = {
-            id: selection.model,
-            name: selection.model,
-            api: "openai-completions",
-            provider: "custom",
-            baseUrl: selection.custom.baseUrl,
-            reasoning: false,
-            input: ["text", "image"],
-            cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
-            contextWindow: 128000,
-            maxTokens: 16384,
-        };
-        models.setProvider(createProvider({
-            id: "custom",
-            name: "Custom OpenAI-compatible",
-            baseUrl: selection.custom.baseUrl,
-            auth: {
-                apiKey: {
-                    name: "Custom API key",
-                    async login(interaction) {
-                        const key = await interaction.prompt({
-                            type: "secret",
-                            message: "API key",
-                        });
-                        return { type: "api_key", key: key.trim() };
-                    },
-                    async resolve() {
-                        const credential = await credentials.read("custom");
-                        if (!credential || credential.type !== "api_key")
-                            return undefined;
-                        const key = credential.key;
-                        if (!key)
-                            return undefined;
-                        return { type: "api_key", auth: { apiKey: key } };
-                    },
-                },
-            },
-            models: [model],
-            api: { stream, streamSimple },
-        }));
-    }
-    return {
-        models,
-        listProviders() {
-            if (catalog?.providers.length) {
-                return catalog.providers.map((provider) => {
-                    const live = models.getProvider(provider.id);
-                    return {
-                        id: provider.id,
-                        name: provider.name,
-                        auth: {
-                            ...(live?.auth?.apiKey || provider.auth?.apiKey
-                                ? { apiKey: live?.auth?.apiKey ?? {} }
-                                : {}),
-                            ...(live?.auth?.oauth || provider.auth?.oauth
-                                ? { oauth: live?.auth?.oauth ?? {} }
-                                : {}),
-                            ...(!live?.auth?.apiKey &&
-                                !live?.auth?.oauth &&
-                                !provider.auth?.apiKey &&
-                                !provider.auth?.oauth
-                                ? { apiKey: {} }
-                                : {}),
-                        },
-                    };
-                });
-            }
-            return models.getProviders().map((provider) => ({
-                id: provider.id,
-                name: provider.name,
-                auth: {
-                    ...(provider.auth?.apiKey ? { apiKey: provider.auth.apiKey } : {}),
-                    ...(provider.auth?.oauth ? { oauth: provider.auth.oauth } : {}),
-                },
-            }));
-        },
-        listModels(providerId) {
-            const fromCatalog = catalog?.providers.find((p) => p.id === providerId);
-            if (fromCatalog?.models.length)
-                return fromCatalog.models;
-            return models.getModels(providerId).map((model) => ({
-                id: model.id,
-                name: model.name,
-            }));
-        },
-    };
-}
-/** The Tenant's model catalog (`GET /v1/tenant/models`, Management API). */
-export async function fetchModelCatalog(admin) {
-    return await admin.models.catalog();
-}
-// Internal options also allow isolated prompt tests without changing process globals.
-export async function configureProvider(options = {}) {
-    const login = { getDeviceId: options.deviceId ?? installationId };
-    const output = options.output ?? process.stdout;
-    const controller = new AbortController();
-    const signal = controller.signal;
-    const forwardAbort = () => controller.abort(options.signal.reason);
-    options.signal?.throwIfAborted();
-    let captured;
-    const store = {
-        async read() {
-            return undefined;
-        },
-        async list() {
-            return [];
-        },
-        async delete() { },
-        async modify(_id, fn) {
-            const next = await fn(captured);
-            if (next?.type === "api_key" && !next.key)
-                throw new Error("An API key is required.");
-            if (next)
-                captured = next;
-            return next ?? captured;
-        },
-    };
-    const registry = modelsFor({ provider: "", model: "" }, store, options.catalog);
-    const providers = registry.listProviders();
-    const prompt = createInterface({
-        input: options.input ?? process.stdin,
-        output,
-    });
-    const onInt = () => controller.abort(new ConfigurationCancelled("SIGINT"));
-    const onClose = () => controller.abort(new Error("Configuration input closed before setup completed."));
-    const closeOnAbort = () => prompt.close();
-    prompt.on("SIGINT", onInt);
-    prompt.on("close", onClose);
-    signal.addEventListener("abort", closeOnAbort, { once: true });
-    options.signal?.addEventListener("abort", forwardAbort, { once: true });
-    if (options.signal?.aborted)
-        forwardAbort();
-    async function question(message) {
-        signal.throwIfAborted();
-        return prompt.question(message, { signal });
-    }
-    /** A positive whole number of tokens, or undefined for the default. */
-    async function tokens(message) {
-        const answer = (await question(message)).trim();
-        if (!answer)
-            return undefined;
-        const value = Number(answer);
-        if (!Number.isInteger(value) || value < 1)
-            throw new Error(`${message.split(" (")[0]} must be a whole number of tokens.`);
-        return value;
-    }
-    try {
-        signal.throwIfAborted();
-        output.write("0. Custom OpenAI-compatible provider\n");
-        providers.forEach((provider, index) => output.write(`${index + 1}. ${provider.name} (${provider.id})\n`));
-        const choice = Number(await question("Choose a provider: "));
-        if (choice === 0) {
-            const baseUrl = (await question("OpenAI-compatible base URL: "))
-                .trim()
-                .replace(/\/$/, "");
-            const model = (await question("Model id: ")).trim();
-            if (!baseUrl || !model)
-                throw new Error("A base URL and model id are required.");
-            const contextWindow = await tokens("Context window in tokens (Enter for 32768): ");
-            const maxTokens = await tokens("Max output tokens (Enter for 8192): ");
-            const settings = {
-                ...(contextWindow ? { contextWindow } : {}),
-                ...(maxTokens ? { maxTokens } : {}),
-            };
-            const selection = {
-                provider: "custom",
-                model,
-                custom: { baseUrl },
-            };
-            const custom = modelsFor(selection, store, options.catalog);
-            if (!(await custom.models.checkAuth("custom", { signal })))
-                await custom.models.login("custom", "api_key", interaction(), login);
-            return {
-                ...prompted(selection),
-                ...(Object.keys(settings).length ? { settings } : {}),
-            };
-        }
-        else {
-            const chosen = providers[choice - 1];
-            if (!chosen)
-                throw new Error("Choose a listed provider.");
-            const available = registry.listModels(chosen.id);
-            available.forEach((model, index) => output.write(`${index + 1}. ${model.name} (${model.id})\n`));
-            const model = available[Number(await question("Choose a model: ")) - 1];
-            if (!model)
-                throw new Error("Choose a listed model.");
-            if (!(await registry.models.checkAuth(chosen.id, { signal }))) {
-                let method = chosen.auth.apiKey
-                    ? "api_key"
-                    : "oauth";
-                if (chosen.auth.apiKey && chosen.auth.oauth) {
-                    const answer = (await question("Choose authentication: 1. API key (default), 2. OAuth: ")).trim();
-                    if (answer && !["1", "2"].includes(answer))
-                        throw new Error("Choose authentication 1 or 2.");
-                    if (answer === "2")
-                        method = "oauth";
-                }
-                await registry.models.login(chosen.id, method, interaction(), login);
-            }
-            return prompted({ provider: chosen.id, model: model.id });
-        }
-    }
-    catch (error) {
-        throw signal.aborted ? signal.reason : error;
-    }
-    finally {
-        options.signal?.removeEventListener("abort", forwardAbort);
-        signal.removeEventListener("abort", closeOnAbort);
-        prompt.removeListener("SIGINT", onInt);
-        prompt.removeListener("close", onClose);
-        prompt.close();
-    }
-    function interaction() {
-        return {
-            signal,
-            prompt: async (item) => {
-                if (item.type !== "select")
-                    return question(item.message + ": ");
-                item.options.forEach((option, index) => output.write(`${index + 1}. ${option.label}\n`));
-                const answer = (await question(item.message + " ")).trim();
-                const option = item.options.find((option) => option.id === answer) ??
-                    item.options[Number(answer) - 1];
-                if (!option)
-                    throw new Error("Choose a listed authentication option.");
-                return option.id;
-            },
-            notify: (event) => {
-                output.write(("url" in event
-                    ? event.url
-                    : "verificationUri" in event
-                        ? event.verificationUri
-                        : event.message) + "\n");
-            },
-        };
-    }
-    function prompted(selection) {
-        signal.throwIfAborted();
-        if (!captured)
-            throw new Error("An API key or OAuth credential is required.");
-        output.write("Provider configuration saved.\n");
-        return {
-            provider: selection.provider,
-            model: selection.model,
-            ...(selection.custom?.baseUrl
-                ? { baseUrl: selection.custom.baseUrl }
-                : {}),
-            auth: captured,
-        };
-    }
-}
-/**
- * A stable id for this CLI installation, created on first use under the Host root.
- * OpenAI's "Sign in with ChatGPT" sends it as the agent host id.
- */
-export function installationId(home = nylorunHome()) {
-    const file = join(home, "cli-installation-id");
-    try {
-        const existing = readFileSync(file, "utf8").trim();
-        if (existing)
-            return existing;
-    }
-    catch {
-        /* Created below on first use. */
-    }
-    const id = randomUUID();
-    mkdirSync(home, { recursive: true });
-    writeFileSync(file, `${id}\n`, { mode: 0o600 });
-    return id;
-}

package/dist/model/host-model.d.ts

@@ -1,4 +0,0 @@
-import type { ManagementClient } from "@nylorun/admin";
-import type { PromptedModel } from "./configure.js";
-/** Set the installation's Tenant model provider (`PUT /v1/tenant/model`, Management API). */
-export declare function putHostModel(admin: ManagementClient, model: PromptedModel): ReturnType<ManagementClient["models"]["put"]>;

package/dist/model/host-model.js

@@ -1,13 +0,0 @@
-import { randomUUID } from "node:crypto";
-/** Set the installation's Tenant model provider (`PUT /v1/tenant/model`, Management API). */
-export async function putHostModel(admin, model) {
-    return await admin.models.put({
-        idempotencyKey: randomUUID(),
-        provider: model.provider,
-        model: model.model,
-        ...(model.baseUrl ? { baseUrl: model.baseUrl } : {}),
-        ...(model.settings ? { settings: model.settings } : {}),
-        // A prompted credential is complete: pi-ai's type leaves its fields optional.
-        auth: model.auth,
-    });
-}

package/dist/project/connection.d.ts

@@ -1,20 +0,0 @@
-import { type ManagementClient } from "@nylorun/admin";
-import { type ProjectLink } from "./link.js";
-/** The installation `nylo` acts on: a Runtime URL, an application key and a management key. */
-export interface LinkedConnection {
-    url: string;
-    /** The application key (Runtime API); absent when only a management key is set. */
-    key?: string;
-    /** The management key (Management API), when there is one. */
-    managementKey?: string;
-    /** The Project link it came from, when it came from one. */
-    link?: ProjectLink;
-}
-/**
- * The Project's link and credentials, else `NYLORUN_RUNTIME_URL` with `NYLORUN_SERVER_KEY`, or
- * `NYLORUN_MANAGEMENT_KEY`, or both; `NYLORUN_MANAGEMENT_KEY` also stands in for a Project
- * credentials file without one. The installation serves one Tenant, so nothing names it.
- */
-export declare function linkedConnection(projectRoot: string, env?: Readonly<Record<string, string | undefined>>): Promise<LinkedConnection>;
-/** The Management API client of `connection`; refused without a management key. */
-export declare function managementClient(connection: LinkedConnection): ManagementClient;

package/dist/project/connection.js

@@ -1,38 +0,0 @@
-import { createManagementClient } from "@nylorun/admin";
-import { CliError } from "../errors.js";
-import { readCredentials } from "./credentials.js";
-import { readLink } from "./link.js";
-/**
- * The Project's link and credentials, else `NYLORUN_RUNTIME_URL` with `NYLORUN_SERVER_KEY`, or
- * `NYLORUN_MANAGEMENT_KEY`, or both; `NYLORUN_MANAGEMENT_KEY` also stands in for a Project
- * credentials file without one. The installation serves one Tenant, so nothing names it.
- */
-export async function linkedConnection(projectRoot, env = process.env) {
-    const link = await readLink(projectRoot);
-    const credentials = await readCredentials(projectRoot);
-    const managementKey = env.NYLORUN_MANAGEMENT_KEY?.trim();
-    if (link && credentials) {
-        const management = credentials.managementKey ?? managementKey;
-        return {
-            url: link.hostUrl,
-            key: credentials.applicationKey,
-            ...(management ? { managementKey: management } : {}),
-            link,
-        };
-    }
-    const url = env.NYLORUN_RUNTIME_URL?.trim();
-    const key = env.NYLORUN_SERVER_KEY?.trim();
-    if (url && (key || managementKey))
-        return {
-            url: url.replace(/\/$/, ""),
-            ...(key ? { key } : {}),
-            ...(managementKey ? { managementKey } : {}),
-        };
-    throw new CliError(`No Project link in ${projectRoot}. Run "npx nylorun start" in this project to start its Tenant and link it, or set NYLORUN_RUNTIME_URL and NYLORUN_SERVER_KEY (or NYLORUN_MANAGEMENT_KEY).`, 1);
-}
-/** The Management API client of `connection`; refused without a management key. */
-export function managementClient(connection) {
-    if (!connection.managementKey)
-        throw new CliError(`No management key for the Tenant at ${connection.url}: run npx nylorun start, or set NYLORUN_MANAGEMENT_KEY.`, 1);
-    return createManagementClient({ url: connection.url, key: connection.managementKey });
-}

package/dist/project/credentials.d.ts

@@ -1,9 +0,0 @@
-import { type ProjectCredentials } from "@nylorun/admin/project";
-/**
- * Project-local credentials (mode 0600): the application key and its principal, and the
- * management key and its principal when `nylorun start` issued one. A format 0 file may still
- * carry a legacy `executors` map from before protocol 3; it is ignored.
- */
-export type { ProjectCredentials };
-/** The Project's credentials, which `nylorun start` writes beside the link; kept 0600. */
-export declare function readCredentials(projectRoot: string): Promise<ProjectCredentials | undefined>;

package/dist/project/credentials.js

@@ -1,21 +0,0 @@
-import { chmod } from "node:fs/promises";
-import { ProjectFileError, projectCredentialsPath, readProjectCredentials, } from "@nylorun/admin/project";
-import { CliError } from "../errors.js";
-/** The Project's credentials, which `nylorun start` writes beside the link; kept 0600. */
-export async function readCredentials(projectRoot) {
-    const path = projectCredentialsPath(projectRoot);
-    let credentials;
-    try {
-        credentials = readProjectCredentials(projectRoot);
-    }
-    catch (error) {
-        if (!(error instanceof ProjectFileError))
-            throw error;
-        throw new CliError(error.reason === "newer"
-            ? `Project credentials at ${path} have an unsupported format. Upgrade the CLI.`
-            : `Invalid Project credentials at ${path}. Remove .nylorun/credentials.json and run "npx nylorun start".`, 1);
-    }
-    if (credentials)
-        await chmod(path, 0o600);
-    return credentials;
-}

package/dist/project/env.d.ts

@@ -1,3 +0,0 @@
-/** Two `export` lines for `nylo env` (was `nylorun status --env`, F2-7). */
-export declare function printLinkedEnvExports(projectRoot?: string): Promise<void>;
-export declare function shellQuote(value: string): string;

package/dist/project/env.js

@@ -1,20 +0,0 @@
-import { findProjectRoot } from "@nylorun/admin/project";
-import { readCredentials } from "./credentials.js";
-import { readLink } from "./link.js";
-/** Two `export` lines for `nylo env` (was `nylorun status --env`, F2-7). */
-export async function printLinkedEnvExports(projectRoot = process.cwd()) {
-    const root = findProjectRoot(projectRoot) ?? projectRoot;
-    const link = await readLink(root);
-    const credentials = await readCredentials(root);
-    if (!link || !credentials) {
-        console.log('# No Project link in this directory. Run "npx nylorun start" in this project to start its Tenant and link it.');
-        return;
-    }
-    console.log(`export NYLORUN_RUNTIME_URL=${shellQuote(link.hostUrl)}`);
-    console.log(`export NYLORUN_SERVER_KEY=${shellQuote(credentials.applicationKey)}`);
-}
-export function shellQuote(value) {
-    if (/^[A-Za-z0-9_./:-]+$/.test(value))
-        return value;
-    return `'${value.replace(/'/g, `'\\''`)}'`;
-}

package/dist/project/link.d.ts

@@ -1,10 +0,0 @@
-import { type ProjectLink as LinkFile } from "@nylorun/admin/project";
-/**
- * Project-local link to an installation (format 3). `nylorun start` writes it; `nylo` only
- * reads it, with `@nylorun/core/project`'s reader (through `@nylorun/admin/project`).
- * `tenantId` is information: the installation serves one Tenant, so nothing selects it.
- */
-export type ProjectLink = LinkFile & {
-    format: 3;
-};
-export declare function readLink(projectRoot: string): Promise<ProjectLink | undefined>;

package/dist/project/link.js

@@ -1,22 +0,0 @@
-import { ProjectFileError, projectLinkPath, readProjectLink, } from "@nylorun/admin/project";
-import { CliError } from "../errors.js";
-export async function readLink(projectRoot) {
-    const path = projectLinkPath(projectRoot);
-    let link;
-    try {
-        link = readProjectLink(projectRoot);
-    }
-    catch (error) {
-        if (!(error instanceof ProjectFileError))
-            throw error;
-        throw new CliError(error.reason === "newer"
-            ? `Project link at ${path} has an unsupported format. Upgrade the CLI.`
-            : `Invalid Project link at ${path}. Remove .nylorun/link.json and run "npx nylorun start".`, 1);
-    }
-    if (link === undefined)
-        return undefined;
-    // Formats 0 to 2 are from older releases.
-    if (link.format !== 3)
-        throw new CliError(`The Project link at ${path} is from an older nylorun. Run "npx nylorun start" in this project to link it again.`, 1);
-    return { ...link, format: 3 };
-}