@nylorun/cli 0.6.0-beta → 0.8.0-beta

package/dist/tenant/commands.js

@@ -1,394 +0,0 @@
-import { createInterface } from "node:readline/promises";
-import { randomUUID } from "node:crypto";
-import { PROJECT_PRINCIPAL_ID, createAdmin, } from "@nylorun/admin";
-import { createClient, isTenantId } from "@nylorun/agents";
-import { CliError } from "../errors.js";
-import { resolveHome } from "../home.js";
-import { readCredentials, removeCredentials, writeCredentials, } from "../project/credentials.js";
-import { readLink, removeLink, writeLink, } from "../project/link.js";
-import { findProjectRoot, requireProjectRoot } from "../project/root.js";
-import { createProjectTenant, defaultTenantName, } from "../project/create-tenant.js";
-import { seedTenantFromProject } from "../project/seed.js";
-import { loadProjectEnvironment } from "../environment.js";
-import { shellQuote } from "../project/env.js";
-/** Exact-and-unique name or id match. */
-export function matchTenant(tenants, nameOrId) {
-    if (isTenantId(nameOrId)) {
-        const byId = tenants.find((t) => t.id === nameOrId);
-        if (!byId)
-            throw new CliError(`No Tenant with id ${nameOrId}.`, 1);
-        return byId;
-    }
-    const matches = tenants.filter((t) => t.name === nameOrId);
-    if (matches.length === 0) {
-        throw new CliError(`No Tenant named ${JSON.stringify(nameOrId)}.`, 1);
-    }
-    if (matches.length > 1) {
-        throw new CliError(`Tenant name ${JSON.stringify(nameOrId)} is not unique (${matches.length} matches). Use the Tenant id.`, 1);
-    }
-    return matches[0];
-}
-function localAdmin(home) {
-    return createAdmin(home ? { home } : undefined);
-}
-/**
- * `nylo tenant create [name]`. Inside a Project: create the Tenant, write the
- * Project link and credentials, and seed it from the Project's `.env` (sandbox
- * and model provider). Outside one: create the Tenant and print its
- * connection variables once, since the Host keeps only a hash of the key.
- */
-async function createTenant(options) {
-    const admin = localAdmin(options.home);
-    let hostId;
-    try {
-        hostId = (await admin.status()).host?.hostId;
-    }
-    catch (error) {
-        throw new CliError(`No Runtime answers at ${admin.url} (${error instanceof Error ? error.message : String(error)}). Start the local stack with "npx nylorun up".`, 6);
-    }
-    if (!hostId)
-        throw new CliError(`Host at ${admin.url} did not report hostId in admin status.`, 1);
-    const projectRoot = findProjectRoot();
-    if (!projectRoot) {
-        const created = await admin.createTenant({ name: options.name ?? "tenant" });
-        console.log(`Tenant    ${created.tenant.name}  ${created.tenant.id}  (created)`);
-        console.log("# Not in a Project: nothing was linked. The key is shown only once.");
-        console.log(`export NYLORUN_RUNTIME_URL=${shellQuote(admin.url.replace(/\/$/, ""))}`);
-        console.log(`export NYLORUN_SERVER_KEY=${shellQuote(created.applicationKey)}`);
-        console.log(`export NYLORUN_TENANT=${shellQuote(created.tenant.id)}`);
-        return;
-    }
-    const link = await readLink(projectRoot);
-    if (link)
-        throw new CliError(`This Project is already linked to Tenant ${link.tenantId}. Use "nylo tenant use <name-or-id>" to switch, or "nylo tenant delete" first.`, 1);
-    const created = await createProjectTenant({
-        admin,
-        hostId,
-        projectRoot,
-        name: options.name ?? (await defaultTenantName(projectRoot)),
-    });
-    console.log(`Tenant    ${created.envelope.name}  ${created.envelope.id}  (created)`);
-    console.log(`Linked    ${projectRoot}/.nylorun/`);
-    const seeded = await seedTenantFromProject({
-        hostUrl: created.link.hostUrl,
-        tenantId: created.link.tenantId,
-        applicationKey: created.credentials.applicationKey,
-        projectRoot,
-        env: loadProjectEnvironment(projectRoot),
-    });
-    console.log(seeded.model
-        ? `Model     ${seeded.model} (from .env)`
-        : "Model     not configured: set it in Studio, or run nylo configure");
-}
-export async function tenantCommand(args) {
-    const [verb, ...rest] = args;
-    if (!verb || verb === "--help" || verb === "-h") {
-        console.log(`nylo tenant create [name]|current|list [--json]|use <name-or-id>|status [--json]|endpoints [--json]|endpoints ping <agent>|reset [--sessions|--sandboxes|--all] [--yes]|delete <name-or-id> [--yes]`);
-        return;
-    }
-    const home = resolveHome();
-    if (verb === "create") {
-        if (rest.length > 1 || rest.some((arg) => arg.startsWith("-")))
-            throw new CliError("Usage: nylo tenant create [name]", 2);
-        await createTenant({ home, ...(rest[0] ? { name: rest[0] } : {}) });
-        return;
-    }
-    if (verb === "current") {
-        const root = requireProjectRoot();
-        const link = await readLink(root);
-        if (!link) {
-            console.log("No Project link. Run nylo tenant create to create one.");
-            return;
-        }
-        const admin = localAdmin(home);
-        const tenants = await admin.listTenants();
-        const match = tenants.find((t) => t.id === link.tenantId);
-        const name = match?.name ?? match?.envelope?.name ?? "(unknown)";
-        console.log(`${name}  ${link.tenantId}`);
-        console.log(`Host  ${link.hostUrl}  ${link.hostId}`);
-        return;
-    }
-    if (verb === "list") {
-        const json = rest.includes("--json");
-        if (rest.some((a) => a !== "--json")) {
-            throw new CliError("Usage: nylo tenant list [--json]", 2);
-        }
-        const admin = localAdmin(home);
-        const tenants = await admin.listTenants();
-        if (json) {
-            console.log(JSON.stringify(tenants, null, 2));
-            return;
-        }
-        if (tenants.length === 0) {
-            console.log("No Tenants on this Host.");
-            return;
-        }
-        for (const tenant of tenants) {
-            const name = tenant.name ?? "(unreadable)";
-            console.log(`${name}  ${tenant.id}  ${tenant.state}`);
-        }
-        return;
-    }
-    if (verb === "use") {
-        const nameOrId = rest[0];
-        if (!nameOrId || rest.length > 1) {
-            throw new CliError("Usage: nylo tenant use <name-or-id>", 2);
-        }
-        const root = requireProjectRoot();
-        const admin = localAdmin(home);
-        const status = await admin.status();
-        const hostId = status.host?.hostId;
-        if (!hostId) {
-            throw new CliError(`Host at ${admin.url} did not report hostId in admin status.`, 1);
-        }
-        const tenants = await admin.listTenants();
-        const selected = matchTenant(tenants, nameOrId);
-        console.warn("Sharing a Tenant shares Action endpoint registrations across Projects that link to it.");
-        const authorizes = async (key) => {
-            try {
-                await createClient({ url: admin.url, key, tenant: selected.id }).transport.json("/v1/tenant", "GET");
-                return true;
-            }
-            catch {
-                return false;
-            }
-        };
-        const link = await readLink(root);
-        const current = await readCredentials(root);
-        const kept = await readCredentials(root, selected.id);
-        // The Project's own key, then one kept when it last left this Tenant, then
-        // the key derived from this machine's admin key (Tenants Studio creates).
-        let chosen;
-        for (const candidate of [current, kept])
-            if (!chosen && candidate && (await authorizes(candidate.applicationKey)))
-                chosen = candidate;
-        if (!chosen) {
-            const derived = admin.deriveTenantKey(selected.id, PROJECT_PRINCIPAL_ID);
-            if (await authorizes(derived))
-                chosen = { format: 1, applicationKey: derived, principalId: PROJECT_PRINCIPAL_ID };
-        }
-        if (!chosen) {
-            throw new CliError(`No key of this Project authorizes Tenant ${selected.id}, and it has no derived "${PROJECT_PRINCIPAL_ID}" principal (Tenants created in Studio have one). Link a Tenant created in Studio, or create one with nylo tenant create.`, 1);
-        }
-        if (chosen !== current) {
-            // An application key is shown only once: keep the one being replaced.
-            if (current &&
-                link &&
-                link.tenantId !== selected.id &&
-                current.principalId !== PROJECT_PRINCIPAL_ID) {
-                await writeCredentials(root, current, link.tenantId);
-                console.warn(`Kept the key for Tenant ${link.tenantId} in .nylorun/credentials.${link.tenantId}.json; nylo tenant use ${link.tenantId} switches back.`);
-            }
-            await writeCredentials(root, chosen);
-            if (chosen === kept)
-                await removeCredentials(root, selected.id);
-        }
-        await writeLink(root, {
-            format: 1,
-            hostUrl: admin.url,
-            hostId,
-            tenantId: selected.id,
-        });
-        console.log(`Linked to ${selected.name ?? selected.id}  ${selected.id}`);
-        return;
-    }
-    if (verb === "endpoints") {
-        await endpointsCommand(rest);
-        return;
-    }
-    if (verb === "status") {
-        const json = rest.includes("--json");
-        if (rest.some((a) => a !== "--json")) {
-            throw new CliError("Usage: nylo tenant status [--json]", 2);
-        }
-        const root = requireProjectRoot();
-        const link = await readLink(root);
-        const credentials = await readCredentials(root);
-        if (!link || !credentials) {
-            throw new CliError("No Project link. Run nylo tenant create to create one.", 1);
-        }
-        const client = createClient({
-            url: link.hostUrl,
-            key: credentials.applicationKey,
-            tenant: link.tenantId,
-        });
-        try {
-            const body = await client.transport.json("/v1/tenant", "GET");
-            if (json) {
-                console.log(JSON.stringify(body, null, 2));
-                return;
-            }
-            console.log(`${body.tenant.name}  ${body.tenant.id}`);
-            console.log(`path     ${body.path}`);
-            console.log(`checks   ${Object.entries(body.checks)
-                .map(([k, v]) => `${k}=${v ? "ok" : "fail"}`)
-                .join(" ")}`);
-            console.log(`counts   sessions=${body.counts.sessions} running=${body.counts.runningSessions} pending=${body.counts.pendingActions}`);
-            console.log(`sandbox  ${body.sandbox.backend ?? "none"}`);
-            return;
-        }
-        catch {
-            // Quarantined / opaque — fall back to admin status.
-        }
-        const admin = localAdmin(home);
-        try {
-            const body = await admin.getTenant(link.tenantId);
-            if (json) {
-                console.log(JSON.stringify(body, null, 2));
-                return;
-            }
-            console.log(`${body.name ?? "(unreadable)"}  ${body.id}  ${body.state}`);
-            if (body.quarantine) {
-                console.log(`reason   ${body.quarantine.code}: ${body.quarantine.message}`);
-                console.log(`repair   ${body.quarantine.repair}`);
-            }
-            return;
-        }
-        catch (error) {
-            throw new CliError(error instanceof Error
-                ? error.message
-                : `Tenant ${link.tenantId} is not reachable.`, 1);
-        }
-    }
-    if (verb === "reset") {
-        const yes = rest.includes("--yes");
-        const flags = rest.filter((a) => a !== "--yes");
-        let scope = "sessions";
-        if (flags.includes("--all"))
-            scope = "all";
-        else if (flags.includes("--sandboxes"))
-            scope = "sandboxes";
-        else if (flags.includes("--sessions") || flags.length === 0)
-            scope = "sessions";
-        else
-            throw new CliError("Usage: nylo tenant reset [--sessions|--sandboxes|--all] [--yes]", 2);
-        if (flags.filter((f) => ["--sessions", "--sandboxes", "--all"].includes(f)).length > 1) {
-            throw new CliError("Pass only one of --sessions, --sandboxes, --all.", 2);
-        }
-        const root = requireProjectRoot();
-        const link = await readLink(root);
-        const credentials = await readCredentials(root);
-        if (!link || !credentials) {
-            throw new CliError("No Project link. Run nylo tenant create first.", 1);
-        }
-        const admin = localAdmin(home);
-        const tenants = await admin.listTenants();
-        const match = tenants.find((t) => t.id === link.tenantId);
-        const name = match?.name ?? link.tenantId;
-        if (scope === "all" && !yes) {
-            await confirmOrThrow(`Reset ALL data for Tenant ${name} (${link.tenantId})? Link and credentials are kept. [y/N] `);
-        }
-        const client = createClient({
-            url: link.hostUrl,
-            key: credentials.applicationKey,
-            tenant: link.tenantId,
-        });
-        try {
-            await client.transport.json("/v1/tenant/reset", "POST", {
-                requestId: randomUUID(),
-                scope,
-                activeWork: "drain",
-            });
-        }
-        catch (error) {
-            throw new CliError(error instanceof Error
-                ? error.message
-                : `Tenant reset failed: ${String(error)}`, 1);
-        }
-        console.log(`Reset Tenant ${name} (${scope}).`);
-        return;
-    }
-    if (verb === "delete") {
-        const yes = rest.includes("--yes");
-        const nameOrId = rest.find((a) => a !== "--yes");
-        if (!nameOrId || rest.filter((a) => a !== "--yes").length !== 1) {
-            throw new CliError("Usage: nylo tenant delete <name-or-id> [--yes]", 2);
-        }
-        const root = requireProjectRoot();
-        const admin = localAdmin(home);
-        const tenants = await admin.listTenants();
-        const selected = matchTenant(tenants, nameOrId);
-        if (!yes) {
-            await confirmOrThrow(`Delete Tenant ${selected.name ?? selected.id} (${selected.id})?\nThe KEK moves to trash with the Tenant directory. [y/N] `);
-        }
-        try {
-            await admin.deleteTenant(selected.id, { activeWork: "refuse" });
-        }
-        catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            if (/active_work|409|live work/i.test(message)) {
-                throw new CliError(`Tenant ${selected.id} has live work. Retry with the Host idle, or drain sessions first.`, 1);
-            }
-            throw new CliError(message, 1);
-        }
-        const link = await readLink(root);
-        if (link?.tenantId === selected.id) {
-            await removeLink(root);
-            await removeCredentials(root);
-            console.log("Removed Project link and credentials for the deleted Tenant.");
-        }
-        console.log(`Deleted Tenant ${selected.name ?? selected.id}.`);
-        return;
-    }
-    throw new CliError(`Unknown tenant command ${verb}.\nUsage: nylo tenant current|list|use|status|reset|delete`, 2);
-}
-async function confirmOrThrow(prompt) {
-    if (!process.stdin.isTTY || !process.stdout.isTTY) {
-        throw new CliError("Confirmation required; pass --yes for non-interactive use.", 2);
-    }
-    const rl = createInterface({ input: process.stdin, output: process.stdout });
-    try {
-        const answer = (await rl.question(prompt)).trim().toLowerCase();
-        if (answer !== "y" && answer !== "yes") {
-            throw new CliError("Cancelled.", 1);
-        }
-    }
-    finally {
-        rl.close();
-    }
-}
-/** The Project's application client, from its link and credentials. */
-async function projectClient() {
-    const root = requireProjectRoot();
-    const link = await readLink(root);
-    const credentials = await readCredentials(root);
-    if (!link || !credentials)
-        throw new CliError("No Project link. Run nylo tenant create to create one.", 1);
-    return createClient({ url: link.hostUrl, key: credentials.applicationKey, tenant: link.tenantId });
-}
-/** `nylo tenant endpoints [--json]` and `nylo tenant endpoints ping <agent>`. */
-async function endpointsCommand(args) {
-    const client = await projectClient();
-    if (args[0] === "ping") {
-        const agentId = args[1];
-        if (!agentId || args.length > 2)
-            throw new CliError("Usage: nylo tenant endpoints ping <agent>", 2);
-        const answer = await client.transport.json(`/v1/endpoints/${encodeURIComponent(agentId)}/ping`, "POST");
-        console.log(`${answer.agentId}  serves ${answer.implementationVersion}${answer.manifestHash ? `  ${answer.manifestHash}` : ""}`);
-        return;
-    }
-    const json = args.includes("--json");
-    if (args.some((a) => a !== "--json"))
-        throw new CliError("Usage: nylo tenant endpoints [--json] | nylo tenant endpoints ping <agent>", 2);
-    const body = await client.transport.json("/v1/endpoints", "GET");
-    if (json) {
-        console.log(JSON.stringify(body, null, 2));
-        return;
-    }
-    if (body.endpoints.length === 0) {
-        console.log("No Action endpoints. Register one with createActionHandler(...).register({ url }).");
-        return;
-    }
-    for (const endpoint of body.endpoints)
-        console.log(endpointLine(endpoint));
-}
-/** One line of `nylo tenant endpoints`: the agent, its URL and version, and how it is doing. */
-export function endpointLine(endpoint) {
-    const { health } = endpoint;
-    const state = health.consecutiveFailures > 0
-        ? `failing (${health.consecutiveFailures}): ${health.lastError?.message || health.lastError?.code || "unknown"}`
-        : health.lastSuccessAt
-            ? `ok (last ${health.lastSuccessAt})`
-            : "no deliveries yet";
-    return `${endpoint.agentId}  ${endpoint.url}  ${endpoint.implementationVersion}  ${state}`;
-}