bdy 1.23.7-dev-target-commands → 1.23.7-dev

package/distTs/src/api/client.js

@@ -563,162 +563,6 @@ class ApiClient {
             q.project = project;
         return await this.getResourceByIdentifier(workspace, q);
     }
-    // Target methods
-    targetScopeQuery(scope) {
-        const query = {};
-        if (scope.project)
-            query.project_name = scope.project;
-        if (scope.pipelineId)
-            query.pipeline_id = scope.pipelineId.toString();
-        if (scope.environmentId)
-            query.environment_id = scope.environmentId;
-        return query;
-    }
-    async getTargets(workspace, filters = {}) {
-        return await this.request({
-            method: 'GET',
-            path: `/workspaces/${encodeURIComponent(workspace)}/targets`,
-            query: this.targetScopeQuery(filters),
-            parseResponseBody: true,
-        });
-    }
-    async getTarget(workspace, targetId) {
-        return await this.request({
-            method: 'GET',
-            path: `/workspaces/${encodeURIComponent(workspace)}/targets/${encodeURIComponent(targetId)}`,
-            parseResponseBody: true,
-        });
-    }
-    async createTargetByYaml(workspace, scope, body) {
-        return await this.request({
-            method: 'POST',
-            path: `/workspaces/${encodeURIComponent(workspace)}/targets/yaml`,
-            query: this.targetScopeQuery(scope),
-            body,
-            parseResponseBody: true,
-        });
-    }
-    async updateTargetByYaml(workspace, targetId, body) {
-        return await this.request({
-            method: 'PATCH',
-            path: `/workspaces/${encodeURIComponent(workspace)}/targets/${encodeURIComponent(targetId)}/yaml`,
-            body,
-            parseResponseBody: true,
-        });
-    }
-    async deleteTarget(workspace, targetId) {
-        return await this.request({
-            method: 'DELETE',
-            path: `/workspaces/${encodeURIComponent(workspace)}/targets/${encodeURIComponent(targetId)}`,
-            parseResponseBody: false,
-        });
-    }
-    async executeTargetCommand(workspace, targetId, body) {
-        return await this.request({
-            method: 'POST',
-            path: `/workspaces/${encodeURIComponent(workspace)}/targets/${encodeURIComponent(targetId)}/execs`,
-            body,
-            parseResponseBody: true,
-        });
-    }
-    async getTargetExecs(workspace, targetId, limit) {
-        const query = {};
-        if (limit)
-            query.limit = limit.toString();
-        return await this.request({
-            method: 'GET',
-            path: `/workspaces/${encodeURIComponent(workspace)}/targets/${encodeURIComponent(targetId)}/execs`,
-            query,
-            parseResponseBody: true,
-        });
-    }
-    async getTargetExec(workspace, execId, wait) {
-        const query = {};
-        if (wait)
-            query.wait = wait.toString();
-        return await this.request({
-            method: 'GET',
-            path: `/workspaces/${encodeURIComponent(workspace)}/targets/execs/${encodeURIComponent(execId)}`,
-            query,
-            parseResponseBody: true,
-        });
-    }
-    async cancelTargetExec(workspace, execId) {
-        return await this.request({
-            method: 'DELETE',
-            path: `/workspaces/${encodeURIComponent(workspace)}/targets/execs/${encodeURIComponent(execId)}`,
-            parseResponseBody: false,
-        });
-    }
-    async getTargetExecLog(workspace, execId, offset, limit) {
-        const query = {};
-        if (offset)
-            query.offset = offset.toString();
-        if (limit)
-            query.limit = limit.toString();
-        return await this.request({
-            method: 'GET',
-            path: `/workspaces/${encodeURIComponent(workspace)}/targets/execs/${encodeURIComponent(execId)}/log`,
-            query,
-            parseResponseBody: true,
-        });
-    }
-    async getTargetByIdentifier(workspace, identifier, line = {}) {
-        return await this.getResourceByIdentifier(workspace, {
-            target: identifier,
-            ...line,
-        });
-    }
-    // Environment methods
-    async getEnvironments(workspace, project) {
-        const query = {};
-        if (project)
-            query.project_name = project;
-        return await this.request({
-            method: 'GET',
-            path: `/workspaces/${encodeURIComponent(workspace)}/environments`,
-            query,
-            parseResponseBody: true,
-        });
-    }
-    async getEnvironment(workspace, environmentId) {
-        return await this.request({
-            method: 'GET',
-            path: `/workspaces/${encodeURIComponent(workspace)}/environments/${encodeURIComponent(environmentId)}`,
-            parseResponseBody: true,
-        });
-    }
-    async createEnvironment(workspace, body) {
-        return await this.request({
-            method: 'POST',
-            path: `/workspaces/${encodeURIComponent(workspace)}/environments`,
-            body,
-            parseResponseBody: true,
-        });
-    }
-    async updateEnvironment(workspace, environmentId, body) {
-        return await this.request({
-            method: 'PATCH',
-            path: `/workspaces/${encodeURIComponent(workspace)}/environments/${encodeURIComponent(environmentId)}`,
-            body,
-            parseResponseBody: true,
-        });
-    }
-    async deleteEnvironment(workspace, environmentId) {
-        return await this.request({
-            method: 'DELETE',
-            path: `/workspaces/${encodeURIComponent(workspace)}/environments/${encodeURIComponent(environmentId)}`,
-            parseResponseBody: false,
-        });
-    }
-    async getEnvironmentByIdentifier(workspace, identifier, project) {
-        const q = {
-            environment: identifier,
-        };
-        if (project)
-            q.project = project;
-        return await this.getResourceByIdentifier(workspace, q);
-    }
     // Sandbox methods
     async createSandbox(workspace, project, body) {
         return await this.request({

package/distTs/src/cliIndex.js

@@ -24,8 +24,6 @@ const artifact_1 = __importDefault(require("./command/artifact"));
 const api_1 = __importDefault(require("./command/api"));
 const domain_1 = __importDefault(require("./command/domain"));
 const distro_1 = __importDefault(require("./command/distro"));
-const target_1 = __importDefault(require("./command/target"));
-const environment_1 = __importDefault(require("./command/environment"));
 const register_1 = __importDefault(require("./command/register"));
 const mcp_1 = __importDefault(require("./command/mcp"));
 function cliIndex() {
@@ -49,8 +47,6 @@ function cliIndex() {
     program.addCommand(sandbox_1.default);
     program.addCommand(domain_1.default);
     program.addCommand(distro_1.default);
-    program.addCommand(target_1.default);
-    program.addCommand(environment_1.default);
     program.addCommand(login_1.default);
     program.addCommand(register_1.default);
     program.addCommand(whoami_1.default);

package/distTs/src/command/agent/debug.js

@@ -11,8 +11,8 @@ commandAgentDebug.argument('<on/off>');
 commandAgentDebug.action(async (debug) => {
     const AgentManager = require('../../agent/manager').default;
     const ApiAgent = require('../../tunnel/api/agent').default;
-    const hasAdminRights = await AgentManager.system.hasAdminRights();
-    if (!hasAdminRights) {
+    const hasRights = await AgentManager.system.hasRightsToManage();
+    if (!hasRights) {
         output_1.default.exitError(texts_1.ERR_AGENT_ADMIN_RIGHTS);
     }
     if (!commandAgentDebug.agentInstalled) {

package/distTs/src/command/agent/install.js

@@ -9,6 +9,7 @@ const texts_1 = require("../../texts");
 const cfg_1 = __importDefault(require("../../tunnel/cfg"));
 const utils_1 = require("../../utils");
 const logger_1 = __importDefault(require("../../logger"));
+const node_net_1 = require("node:net");
 const removeAllAndExit = async (txt, id, host, token) => {
     const AgentManager = require('../../agent/manager').default;
     const ApiBuddy = require('../../tunnel/api/buddy').default;
@@ -25,7 +26,9 @@ const removeAllAndExit = async (txt, id, host, token) => {
         // do nothing
     }
     try {
-        AgentManager.system.clearSystemFiles();
+        // Named rather than resolved: this only ever unmakes the service install started above, and
+        // the account running it can have an `--app` install of its own that a resolver would pick
+        AgentManager.system.clearServiceFiles();
     }
     catch {
         // do nothing
@@ -36,14 +39,19 @@ const removeAllAndExit = async (txt, id, host, token) => {
     catch {
         // do nothing
     }
-    try {
-        AgentManager.system.clearNewAgentFiles();
-    }
-    catch {
-        // do nothing
-    }
     output_1.default.exitError(txt);
 };
+// A standalone install in another user's directory cannot be seen from here, so the config
+// check below no longer proves the machine is free - see agent/system.ts isUserOwnedInstall.
+// The port is what two agents actually compete for, and this binds it the way the agent does
+// (manager.ts listens without a host), so the answer is the one that will matter on start.
+const isPortFree = (port) => new Promise((resolve) => {
+    const srv = (0, node_net_1.createServer)();
+    srv.once('error', () => resolve(false));
+    srv.listen(port, () => {
+        srv.close(() => resolve(true));
+    });
+});
 const prepareTags = (tags) => {
     const validTags = [];
     if (tags) {
@@ -235,14 +243,33 @@ commandAgentInstall.option('--agent-note <note>', texts_1.OPT_COMMAND_AGENT_NOTE
 commandAgentInstall.action(async (options) => {
     const AgentManager = require('../../agent/manager').default;
     options.start = options.start === 'true' || options.start === true;
-    const hasAdminRights = await AgentManager.system.hasAdminRights();
-    if (!hasAdminRights) {
-        output_1.default.exitError(texts_1.ERR_AGENT_ADMIN_RIGHTS);
+    // `--app` installs no service: the config goes to this user's own directory and the agent
+    // runs as this user, so there is nothing left in the mode that needs root. A service
+    // install writes to LaunchDaemons/systemd/ProgramData and still does.
+    if (!options.app) {
+        const hasAdminRights = await AgentManager.system.hasAdminRights();
+        if (!hasAdminRights) {
+            output_1.default.exitError(texts_1.ERR_AGENT_ADMIN_RIGHTS);
+        }
     }
     const hasSystemConfig = AgentManager.system.hasSystemConfig();
     if (hasSystemConfig) {
         output_1.default.exitError(texts_1.TXT_AGENT_ALREADY_INSTALLED);
     }
+    // One agent per machine. The check above only sees the system config and this account's own
+    // standalone one - an `--app` install in another home is invisible from there, and a service
+    // installed on top of it would fight it for the port and the agent id.
+    if (!options.app) {
+        const apps = AgentManager.system.findAppInstalls();
+        if (apps.length) {
+            output_1.default.exitError((0, texts_1.ERR_AGENT_APP_INSTALL_PRESENT)(apps[0]));
+        }
+    }
+    const port = input_1.default.port(options.port);
+    const free = await isPortFree(port);
+    if (!free) {
+        output_1.default.exitError((0, texts_1.ERR_AGENT_PORT_TAKEN)(port));
+    }
     if (options.app) {
         await installApp(options);
     }

package/distTs/src/command/agent/restart.js

@@ -10,8 +10,8 @@ const logger_1 = __importDefault(require("../../logger"));
 const commandAgentRestart = (0, utils_1.newCommand)('restart', texts_1.DESC_COMMAND_AGENT_RESTART);
 commandAgentRestart.action(async () => {
     const AgentManager = require('../../agent/manager').default;
-    const hasAdminRights = await AgentManager.system.hasAdminRights();
-    if (!hasAdminRights) {
+    const hasRights = await AgentManager.system.hasRightsToManage();
+    if (!hasRights) {
         output_1.default.exitError(texts_1.ERR_AGENT_ADMIN_RIGHTS);
     }
     if (!commandAgentRestart.agentInstalled) {

package/distTs/src/command/agent/run.js

@@ -13,6 +13,9 @@ commandAgentRun.option('--port <port>');
 commandAgentRun.option('--start <start>');
 commandAgentRun.action(async (options) => {
     const AgentManager = require('../../agent/manager').default;
+    // Only the service starts the agent this way, so its files are the system ones even when
+    // the user it runs as has an `--app` install of their own
+    AgentManager.system.serviceMode = true;
     logger_1.default.changeRootPath(AgentManager.system.getNewAgentConfigDir());
     AgentManager.start(options.id, options.host, options.token, parseInt(options.port, 10));
 });

package/distTs/src/command/agent/start.js

@@ -10,8 +10,8 @@ const commandAgentStart = (0, utils_1.newCommand)('start', texts_1.DESC_COMMAND_
 commandAgentStart.action(async () => {
     const AgentManager = require('../../agent/manager').default;
     const logger = require('../../logger').default;
-    const hasAdminRights = await AgentManager.system.hasAdminRights();
-    if (!hasAdminRights) {
+    const hasRights = await AgentManager.system.hasRightsToManage();
+    if (!hasRights) {
         output_1.default.exitError(texts_1.ERR_AGENT_ADMIN_RIGHTS);
     }
     if (!commandAgentStart.agentInstalled) {

package/distTs/src/command/agent/status.js

@@ -4,12 +4,22 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 const output_1 = __importDefault(require("../../output"));
+const node_fs_1 = require("node:fs");
 const texts_1 = require("../../texts");
 const utils_1 = require("../../utils");
 const tunnel_1 = require("../../types/tunnel");
 const commandAgentStatus = (0, utils_1.newCommand)('status', texts_1.DESC_COMMAND_AGENT_STATUS);
 const outputStatus = (installed, standalone, version, id, running, enabled, target, tunneling, proxy, status) => {
+    const AgentManager = require('../../agent/manager').default;
     if (!installed) {
+        // Nothing loaded, yet there is a file where the install would be - it is unreadable or not
+        // the shape this cli writes. Worth naming rather than reporting no install at all: the
+        // system config takes precedence whatever state it is in, so while it sits there an `--app`
+        // install in this account's home is shadowed by it and every command says the same nothing.
+        const active = AgentManager.system.getActiveConfigPath();
+        if ((0, node_fs_1.existsSync)(active)) {
+            output_1.default.exitError((0, texts_1.ERR_AGENT_CONFIG_UNREADABLE)(active));
+        }
         output_1.default.exitError(texts_1.ERR_AGENT_NOT_INSTALLED);
     }
     let txt = 'Installation: ';
@@ -51,6 +61,15 @@ const outputStatus = (installed, standalone, version, id, running, enabled, targ
         output_1.default.normal('Problems: ');
         output_1.default.error(status);
     }
+    // A config in this account's home that is not the install being managed here - see
+    // isUserOwnedInstall for which one wins. Asked of the resolver rather than of `standalone`
+    // above: an install made before those files moved keeps its config in the system directory
+    // and reports itself as an app, and a leftover in the home is just as inert next to it.
+    // Inert, but only findable if it is said out loud.
+    const orphan = AgentManager.system.getStandaloneConfigPath();
+    if (!AgentManager.system.isUserOwnedInstall() && (0, node_fs_1.existsSync)(orphan)) {
+        output_1.default.error((0, texts_1.TXT_AGENT_APP_INSTALL_ORPHANED)(orphan));
+    }
     output_1.default.exitNormal();
 };
 commandAgentStatus.action(async () => {

package/distTs/src/command/agent/stop.js

@@ -11,8 +11,8 @@ const commandAgentStop = (0, utils_1.newCommand)('stop', texts_1.DESC_COMMAND_AG
 commandAgentStop.action(async () => {
     const AgentManager = require('../../agent/manager').default;
     const ApiAgent = require('../../tunnel/api/agent').default;
-    const hasAdminRights = await AgentManager.system.hasAdminRights();
-    if (!hasAdminRights) {
+    const hasRights = await AgentManager.system.hasRightsToManage();
+    if (!hasRights) {
         output_1.default.exitError(texts_1.ERR_AGENT_ADMIN_RIGHTS);
     }
     if (!commandAgentStop.agentInstalled) {

package/distTs/src/command/agent/uninstall.js

@@ -12,8 +12,8 @@ commandAgentUninstall.action(async (options) => {
     const AgentManager = require('../../agent/manager').default;
     const ApiBuddy = require('../../tunnel/api/buddy').default;
     const ApiAgent = require('../../tunnel/api/agent').default;
-    const hasAdminRights = await AgentManager.system.hasAdminRights();
-    if (!hasAdminRights) {
+    const hasRights = await AgentManager.system.hasRightsToManage();
+    if (!hasRights) {
         output_1.default.exitError(texts_1.ERR_AGENT_ADMIN_RIGHTS);
     }
     const confirmed = options.force || (await output_1.default.confirm(texts_1.TXY_AGENT_CONFIRM_DELETE));
@@ -52,17 +52,14 @@ commandAgentUninstall.action(async (options) => {
         // do nothing
     }
     try {
+        // The host key went with clearSystemFiles above. Asking for it here by way of
+        // getNewAgentConfigDir would resolve against a config that is already gone, and land on the
+        // other install's.
         AgentManager.system.clearAgentFiles();
     }
     catch {
         // do nothing
     }
-    try {
-        AgentManager.system.clearNewAgentFiles();
-    }
-    catch {
-        // do nothing
-    }
     output_1.default.exitSuccess(texts_1.TXT_AGENT_DISABLED);
 });
 exports.default = commandAgentUninstall;

package/distTs/src/command/agent/update.js

@@ -12,8 +12,8 @@ commandAgentUpdate.action(async () => {
     const AgentManager = require('../../agent/manager').default;
     const ApiAgent = require('../../tunnel/api/agent').default;
     const waitUntilAgentEnabled = require('../../agent/wait').default;
-    const hasAdminRights = await AgentManager.system.hasAdminRights();
-    if (!hasAdminRights) {
+    const hasRights = await AgentManager.system.hasRightsToManage();
+    if (!hasRights) {
         output_1.default.exitError(texts_1.ERR_AGENT_ADMIN_RIGHTS);
     }
     if (!commandAgentUpdate.agentInstalled) {

package/distTs/src/command/artifact/list.js

@@ -22,7 +22,10 @@ commandArtifactList.action(async (options) => {
     const response = await client.getArtifacts(workspace, scope === distro_1.SCOPE.PROJECT ? project : null);
     const artifacts = response.artifacts || [];
     if (options.format === 'json') {
-        output_1.default.json(artifacts);
+        const filtered = scope === distro_1.SCOPE.PROJECT
+            ? artifacts.filter((a) => a.scope !== distro_1.SCOPE.WORKSPACE)
+            : artifacts;
+        output_1.default.json(filtered);
     }
     else {
         if (artifacts.length === 0) {
@@ -30,6 +33,8 @@ commandArtifactList.action(async (options) => {
         }
         const data = [['NAME', 'IDENTIFIER', 'TYPE', 'URL']];
         for (const artifact of artifacts) {
+            if (scope === distro_1.SCOPE.PROJECT && artifact.scope === distro_1.SCOPE.WORKSPACE)
+                continue;
             data.push([
                 artifact.name,
                 artifact.identifier,

package/distTs/src/command/artifact/publish.js

@@ -196,7 +196,9 @@ const addEntryToZip = (dirPath, zip, entry) => {
                 resolve();
         };
         rs.on('data', (chunk) => {
-            file.push(chunk, false);
+            // Always a Buffer here - no encoding is set on the stream - but the event is typed for
+            // the ones that do set one, and a string would reach fflate as something it cannot zip
+            file.push(typeof chunk === 'string' ? Buffer.from(chunk) : chunk, false);
         });
         rs.on('error', (err) => {
             finish(err);

package/distTs/src/command/distro/route/update.js

@@ -77,7 +77,7 @@ commandDistroRouteUpdate.action(async (identifier, routeId, options) => {
         changed = true;
     }
     if (!changed) {
-        output_1.default.exitError(texts_1.ERR_COMMAND_NO_UPDATE);
+        output_1.default.exitError(texts_1.ERR_COMMAND_ROUTE_NO_UPDATE);
     }
     const result = await client.updateRoute(workspace, scope === distro_1.SCOPE.PROJECT ? project : null, data.distribution_id, routeId, body);
     output_1.default.id(result.id);

package/distTs/src/command/distro/update.js

@@ -27,6 +27,14 @@ commandDistroUpdate.action(async (identifier, options) => {
     const workspace = input_1.default.restApiWorkspace(options.workspace);
     const project = input_1.default.restApiProject(options.project, true);
     const scope = input_1.default.scope(project, options.scope);
+    const client = input_1.default.restApiTokenClient();
+    const data = await client.getDistributionByIdentifier(workspace, scope === distro_1.SCOPE.PROJECT ? project : null, identifier);
+    if (!data || !data.domain) {
+        output_1.default.exitError(texts_1.ERR_WORKSPACE_NOT_FOUND);
+    }
+    if (!data || !data.distribution_id) {
+        output_1.default.exitError(texts_1.ERR_COMMAND_DISTRO_NOT_FOUND);
+    }
     const body = {};
     let changed = false;
     if (options.name) {
@@ -46,15 +54,7 @@ commandDistroUpdate.action(async (identifier, options) => {
         changed = true;
     }
     if (!changed) {
-        output_1.default.exitError(texts_1.ERR_COMMAND_NO_UPDATE);
-    }
-    const client = input_1.default.restApiTokenClient();
-    const data = await client.getDistributionByIdentifier(workspace, scope === distro_1.SCOPE.PROJECT ? project : null, identifier);
-    if (!data || !data.domain) {
-        output_1.default.exitError(texts_1.ERR_WORKSPACE_NOT_FOUND);
-    }
-    if (!data || !data.distribution_id) {
-        output_1.default.exitError(texts_1.ERR_COMMAND_DISTRO_NOT_FOUND);
+        output_1.default.exitError(texts_1.ERR_COMMAND_DISTRO_NO_UPDATE);
     }
     const result = await client.updateDistribution(workspace, scope === distro_1.SCOPE.PROJECT ? project : null, data.distribution_id, body);
     output_1.default.identifier(result.identifier);

package/distTs/src/command/project/get.js

@@ -0,0 +1,18 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const cfg_1 = __importDefault(require("../../tunnel/cfg"));
+const output_1 = __importDefault(require("../../output"));
+const texts_1 = require("../../texts");
+const utils_1 = require("../../utils");
+const commandProjectGet = (0, utils_1.newCommand)('get', texts_1.DESC_COMMAND_PROJECT_GET);
+commandProjectGet.action(async () => {
+    const project = cfg_1.default.getProject();
+    if (!project) {
+        output_1.default.exitError(texts_1.TXT_PROJECT_NONE);
+    }
+    output_1.default.exitNormal(project);
+});
+exports.default = commandProjectGet;

package/distTs/src/command/project/set.js

@@ -0,0 +1,31 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const cfg_1 = __importDefault(require("../../tunnel/cfg"));
+const output_1 = __importDefault(require("../../output"));
+const texts_1 = require("../../texts");
+const utils_1 = require("../../utils");
+const input_1 = __importDefault(require("../../input"));
+const commandProjectSet = (0, utils_1.newCommand)('set', texts_1.DESC_COMMAND_PROJECT_SET);
+commandProjectSet.option('-w, --workspace <domain>', texts_1.OPTION_REST_API_WORKSPACE);
+commandProjectSet.argument('[project]', texts_1.ARG_COMMAND_PROJECT_NAME);
+commandProjectSet.action(async (project, options) => {
+    output_1.default.handleSignals();
+    const workspace = input_1.default.restApiWorkspace(options.workspace);
+    const client = input_1.default.restApiTokenClient();
+    if (project) {
+        await client.getProject(workspace, project);
+    }
+    else {
+        const response = await client.getProjects(workspace);
+        project = await output_1.default.selectProject(response.projects);
+    }
+    cfg_1.default.setProject(project);
+    if (!project)
+        output_1.default.exitSuccess(texts_1.TXT_PROJECT_SET_CLEARED);
+    else
+        output_1.default.exitSuccess((0, texts_1.TXT_PROJECT_SET_SUCCESS)(project));
+});
+exports.default = commandProjectSet;

package/distTs/src/command/sandbox/get/yaml.js

@@ -0,0 +1,30 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const utils_1 = require("../../../utils");
+const texts_1 = require("../../../texts");
+const input_1 = __importDefault(require("../../../input"));
+const output_1 = __importDefault(require("../../../output"));
+const commandSandboxGetYaml = (0, utils_1.newCommand)('yaml', texts_1.DESC_COMMAND_SANDBOX_GET_YAML);
+commandSandboxGetYaml.hideVersionUpdate = true;
+commandSandboxGetYaml.alias('yml');
+commandSandboxGetYaml.option('-w, --workspace <domain>', texts_1.OPTION_REST_API_WORKSPACE);
+commandSandboxGetYaml.option('-p, --project <name>', texts_1.OPTION_REST_API_PROJECT);
+commandSandboxGetYaml.argument('<identifier>', texts_1.OPTION_SANDBOX_IDENTIFIER);
+commandSandboxGetYaml.action(async (identifier, options) => {
+    const workspace = input_1.default.restApiWorkspace(options.workspace);
+    const project = input_1.default.restApiProject(options.project);
+    const client = input_1.default.restApiTokenClient();
+    let result = await client.listSandboxes(workspace, project);
+    const sandboxes = result.sandboxes || [];
+    const found = sandboxes.find((s) => s.identifier === identifier);
+    if (!found) {
+        output_1.default.exitError(texts_1.ERR_SANDBOX_NOT_FOUND);
+    }
+    const sandboxId = found.id;
+    result = await client.getSandboxYaml(workspace, sandboxId);
+    output_1.default.exitNormal(Buffer.from(result.yaml, 'base64').toString('utf8'));
+});
+exports.default = commandSandboxGetYaml;

package/distTs/src/command/version.js

@@ -33,9 +33,12 @@ const updateByApt = (currentVersion, latestVersion) => {
     const instructions = 'sudo apt-get update && sudo apt-get install -y bdy';
     updateMessage(currentVersion, latestVersion, instructions);
 };
-const updateByNpm = (isWin, currentVersion, latestVersion, env) => {
+const updateByNpm = async (isWin, currentVersion, latestVersion, env) => {
     let instructions = '';
-    if (!isWin)
+    // Only prefixed with sudo where npm genuinely cannot write, which a node from nvm, fnm,
+    // volta or a user-set prefix always can. The old version asked for a password on every
+    // platform but windows, including the installs that had no use for one.
+    if (!isWin && !(await (0, utils_1.isNpmGlobalWritable)()))
         instructions = 'sudo ';
     instructions += 'npm i -g bdy';
     if (env !== 'prod')
@@ -59,8 +62,13 @@ const updateByDownload = (platform, currentVersion, latestVersion, env) => {
     let instructions = `curl https://es.buddy.works/bdy/${env}/${latestWithoutEnv}/${packageName}`;
     if (isWin)
         instructions += ' -o bdy.zip\ntar -xf bdy.zip';
-    else
-        instructions += ' -o bdy.tar.gz\nsudo tar -zxf bdy.tar.gz -C /usr/local/bin/';
+    else {
+        // Same rule as the npm instructions: sudo only where the destination is not this user's to
+        // write. On a mac with homebrew on an intel prefix it already is.
+        const dest = '/usr/local/bin/';
+        const elevate = (0, utils_1.isPathWritable)(dest) ? '' : 'sudo ';
+        instructions += ` -o bdy.tar.gz\n${elevate}tar -zxf bdy.tar.gz -C ${dest}`;
+    }
     updateMessage(currentVersion, latestVersion, instructions);
 };
 const commandVersion = (0, utils_2.newCommand)('update');
@@ -97,7 +105,7 @@ commandVersion.action(async () => {
         }
         const isInstalled = await (0, utils_1.isInstalledByNpm)();
         if (isInstalled) {
-            updateByNpm(isWin, currVersion, lastVersion, env);
+            await updateByNpm(isWin, currVersion, lastVersion, env);
             return;
         }
         else {