nylorun 0.14.0-beta → 0.15.0-beta

package/dist/client/project/connection.d.ts

@@ -1,36 +0,0 @@
-import { type ManagementClient } from "@nylorun/admin";
-import { type ProjectCredentials, type ProjectLink as LinkFile } from "@nylorun/core/project";
-/**
- * The Project link (format 3), which `nylorun start` writes and `nylo` only reads with
- * `@nylorun/core/project`'s reader. `tenantId` is information: the installation serves one
- * Tenant, so nothing selects it.
- */
-export type ProjectLink = LinkFile & {
-    format: 3;
-};
-/** The Project's link; one of an older nylorun (formats 0 to 2) is refused. */
-export declare function readLink(projectRoot: string): Promise<ProjectLink | undefined>;
-/**
- * The Project's credentials (mode 0600), which `nylorun start` writes beside the link: the
- * application key and its principal, and the management key and its principal when it issued
- * one. A format 0 file's legacy `executors` map is ignored.
- */
-export declare function readCredentials(projectRoot: string): Promise<ProjectCredentials | undefined>;
-/** The installation `nylo` acts on: a Runtime URL, an application key and a management key. */
-export interface LinkedConnection {
-    url: string;
-    /** The application key (Runtime API); absent when only a management key is set. */
-    key?: string;
-    /** The management key (Management API), when there is one. */
-    managementKey?: string;
-    /** The Project link it came from, when it came from one. */
-    link?: ProjectLink;
-}
-/**
- * The Project's link and credentials, else `NYLORUN_RUNTIME_URL` with `NYLORUN_SERVER_KEY`, or
- * `NYLORUN_MANAGEMENT_KEY`, or both; `NYLORUN_MANAGEMENT_KEY` also stands in for a Project
- * credentials file without one. The installation serves one Tenant, so nothing names it.
- */
-export declare function linkedConnection(projectRoot: string, env?: Readonly<Record<string, string | undefined>>): Promise<LinkedConnection>;
-/** The Management API client of `connection`; refused without a management key. */
-export declare function managementClient(connection: LinkedConnection): ManagementClient;

package/dist/client/project/connection.js

@@ -1,80 +0,0 @@
-import { chmod } from "node:fs/promises";
-import { createManagementClient } from "@nylorun/admin";
-import { ProjectFileError, projectCredentialsPath, projectLinkPath, readProjectCredentials, readProjectLink, } from "@nylorun/core/project";
-import { CliError } from "../../errors.js";
-/** The Project's link; one of an older nylorun (formats 0 to 2) is refused. */
-export async function readLink(projectRoot) {
-    const path = projectLinkPath(projectRoot);
-    let link;
-    try {
-        link = readProjectLink(projectRoot);
-    }
-    catch (error) {
-        if (!(error instanceof ProjectFileError))
-            throw error;
-        throw new CliError(error.reason === "newer"
-            ? `Project link at ${path} has an unsupported format. Upgrade nylorun.`
-            : `Invalid Project link at ${path}. Remove .nylorun/link.json and run "npx nylorun start".`, 1);
-    }
-    if (link === undefined)
-        return undefined;
-    if (link.format !== 3)
-        throw new CliError(`The Project link at ${path} is from an older nylorun. Run "npx nylorun start" in this project to link it again.`, 1);
-    return { ...link, format: 3 };
-}
-/**
- * The Project's credentials (mode 0600), which `nylorun start` writes beside the link: the
- * application key and its principal, and the management key and its principal when it issued
- * one. A format 0 file's legacy `executors` map is ignored.
- */
-export async function readCredentials(projectRoot) {
-    const path = projectCredentialsPath(projectRoot);
-    let credentials;
-    try {
-        credentials = readProjectCredentials(projectRoot);
-    }
-    catch (error) {
-        if (!(error instanceof ProjectFileError))
-            throw error;
-        throw new CliError(error.reason === "newer"
-            ? `Project credentials at ${path} have an unsupported format. Upgrade nylorun.`
-            : `Invalid Project credentials at ${path}. Remove .nylorun/credentials.json and run "npx nylorun start".`, 1);
-    }
-    if (credentials)
-        await chmod(path, 0o600);
-    return credentials;
-}
-/**
- * The Project's link and credentials, else `NYLORUN_RUNTIME_URL` with `NYLORUN_SERVER_KEY`, or
- * `NYLORUN_MANAGEMENT_KEY`, or both; `NYLORUN_MANAGEMENT_KEY` also stands in for a Project
- * credentials file without one. The installation serves one Tenant, so nothing names it.
- */
-export async function linkedConnection(projectRoot, env = process.env) {
-    const link = await readLink(projectRoot);
-    const credentials = await readCredentials(projectRoot);
-    const managementKey = env.NYLORUN_MANAGEMENT_KEY?.trim();
-    if (link && credentials) {
-        const management = credentials.managementKey ?? managementKey;
-        return {
-            url: link.hostUrl,
-            key: credentials.applicationKey,
-            ...(management ? { managementKey: management } : {}),
-            link,
-        };
-    }
-    const url = env.NYLORUN_RUNTIME_URL?.trim();
-    const key = env.NYLORUN_SERVER_KEY?.trim();
-    if (url && (key || managementKey))
-        return {
-            url: url.replace(/\/$/, ""),
-            ...(key ? { key } : {}),
-            ...(managementKey ? { managementKey } : {}),
-        };
-    throw new CliError(`No Project link in ${projectRoot}. Run "npx nylorun start" in this project to start its Tenant and link it, or set NYLORUN_RUNTIME_URL and NYLORUN_SERVER_KEY (or NYLORUN_MANAGEMENT_KEY).`, 1);
-}
-/** The Management API client of `connection`; refused without a management key. */
-export function managementClient(connection) {
-    if (!connection.managementKey)
-        throw new CliError(`No management key for the Tenant at ${connection.url}: run npx nylorun start, or set NYLORUN_MANAGEMENT_KEY.`, 1);
-    return createManagementClient({ url: connection.url, key: connection.managementKey });
-}

package/dist/client/project/env.d.ts

@@ -1,3 +0,0 @@
-/** Two `export` lines for `nylo env` (was `nylorun status --env`, F2-7). */
-export declare function printLinkedEnvExports(projectRoot?: string): Promise<void>;
-export declare function shellQuote(value: string): string;

package/dist/client/project/env.js

@@ -1,19 +0,0 @@
-import { findProjectRoot } from "@nylorun/core/project";
-import { readCredentials, readLink } from "./connection.js";
-/** Two `export` lines for `nylo env` (was `nylorun status --env`, F2-7). */
-export async function printLinkedEnvExports(projectRoot = process.cwd()) {
-    const root = findProjectRoot(projectRoot) ?? projectRoot;
-    const link = await readLink(root);
-    const credentials = await readCredentials(root);
-    if (!link || !credentials) {
-        console.log('# No Project link in this directory. Run "npx nylorun start" in this project to start its Tenant and link it.');
-        return;
-    }
-    console.log(`export NYLORUN_RUNTIME_URL=${shellQuote(link.hostUrl)}`);
-    console.log(`export NYLORUN_SERVER_KEY=${shellQuote(credentials.applicationKey)}`);
-}
-export function shellQuote(value) {
-    if (/^[A-Za-z0-9_./:-]+$/.test(value))
-        return value;
-    return `'${value.replace(/'/g, `'\\''`)}'`;
-}

package/dist/stack/sandbox.d.ts

@@ -1,4 +0,0 @@
-import { type StackDeps } from "./commands.js";
-export declare const sandboxUsage = "  sandbox ls [--tenant <name>] [--label <key=value>]... [--json]\n                                      the Tenant's Environments: id, kind, state, sessions and labels\n  sandbox rm <id> [--tenant <name>]   delete an Environment: its sandbox, files and vault\n                                      (refused while a turn runs in it)\n  sandbox enable --context <name> [--tenant <name>] [--host-address <ip>] [--bind-address <ip>] [--no-pull]\n                                      run the Tenant's sandboxes as pods on that kubeconfig context (agent-sandbox v1.0.5)\n  sandbox disable [--tenant <name>] [--delete-namespace]\n                                      stop the sandboxes service and forget the cluster\n  sandbox status [--tenant <name>] [--json]\n                                      the cluster, the sandboxes service's readiness and what it reports";
-/** `nylorun sandbox <ls|rm|enable|disable|status> ...` */
-export declare function sandboxCommand(deps: StackDeps, args: readonly string[]): Promise<number>;

package/dist/stack/sandbox.js

@@ -1,107 +0,0 @@
-/**
- * `nylorun sandbox ls | rm`: the running local Tenant's Environments (protocol 11: each holds one
- * sandbox and one vault), through its Runtime API with the application key (`runningTenantApi`).
- * Neither starts the Tenant. `nylorun sandbox enable|disable|status` (sandbox pods on a cluster,
- * F7.2) live in `../sandbox/commands.ts`.
- */
-import { PROTOCOL_HEADER, PROTOCOL_VERSION } from "@nylorun/core/compatibility";
-import { CliError } from "../errors.js";
-import { runSandboxCommand, sandboxUsage as clusterUsage } from "../sandbox/commands.js";
-import { spawnKubectl } from "../sandbox/kubectl.js";
-import { parseStackFlags, runningTenantApi } from "./commands.js";
-export const sandboxUsage = `  sandbox ls [--tenant <name>] [--label <key=value>]... [--json]
-                                      the Tenant's Environments: id, kind, state, sessions and labels
-  sandbox rm <id> [--tenant <name>]   delete an Environment: its sandbox, files and vault
-                                      (refused while a turn runs in it)
-${clusterUsage}`;
-const usageError = (message) => new CliError(message, 2);
-async function call(deps, api, method, path) {
-    const response = await deps.fetch(`${api.runtimeUrl}${path}`, {
-        method,
-        headers: {
-            authorization: `Bearer ${api.applicationKey}`,
-            [PROTOCOL_HEADER]: String(PROTOCOL_VERSION),
-            accept: "application/json",
-        },
-        redirect: "error",
-        signal: AbortSignal.timeout(15_000),
-    });
-    const body = (await response.json().catch(() => ({})));
-    if (response.status === 404 && /^\/v1\/environments(\?|$)/.test(path))
-        throw new CliError(`Tenant ${api.name} runs a Runtime without Environments. Update it: npx nylorun@latest start.`, 1);
-    if (!response.ok && response.status !== 404)
-        throw new CliError(`${method} ${path} returned ${response.status}${typeof body.message === "string" ? `: ${body.message}` : ""}`, 1);
-    return { status: response.status, body };
-}
-function labelsText(labels) {
-    const entries = Object.entries(labels);
-    return entries.length === 0 ? "-" : entries.map(([key, value]) => `${key}=${value}`).join(",");
-}
-async function ls(deps, args) {
-    const usage = "nylorun sandbox ls [--tenant <name>] [--label <key=value>]... [--json]";
-    const flags = parseStackFlags(args, { booleans: ["--json"], values: ["--tenant"], lists: ["--label"] }, usage);
-    if (flags.rest.length)
-        throw usageError(`Usage: ${usage}`);
-    const query = new URLSearchParams();
-    for (const label of flags.lists.get("--label") ?? []) {
-        if (label.indexOf("=") <= 0)
-            throw usageError(`--label must be key=value, not ${label}`);
-        query.append("label", label);
-    }
-    const name = flags.values.get("--tenant");
-    const api = await runningTenantApi(deps, name === undefined ? {} : { name });
-    const search = query.toString();
-    const { body } = await call(deps, api, "GET", `/v1/environments${search ? `?${search}` : ""}`);
-    const environments = (body.environments ?? []);
-    if (flags.booleans.has("--json")) {
-        deps.out(JSON.stringify(environments, null, 2));
-        return 0;
-    }
-    if (environments.length === 0) {
-        deps.out(`No Environments on Tenant ${api.name}.`);
-        return 0;
-    }
-    const rows = [
-        ["ID", "KIND", "STATE", "SESSIONS", "LABELS"],
-        ...environments.map((environment) => [
-            environment.id,
-            environment.kind,
-            environment.state,
-            String(environment.sessions.length),
-            labelsText(environment.labels),
-        ]),
-    ];
-    const widths = rows[0].map((_, column) => Math.max(...rows.map((row) => row[column].length)));
-    for (const row of rows)
-        deps.out(row
-            .map((cell, column) => (column === row.length - 1 ? cell : cell.padEnd(widths[column])))
-            .join("  "));
-    return 0;
-}
-async function rm(deps, args) {
-    const usage = "nylorun sandbox rm <id> [--tenant <name>]";
-    const flags = parseStackFlags(args, { values: ["--tenant"] }, usage);
-    if (flags.rest.length !== 1)
-        throw usageError(`Usage: ${usage}`);
-    const id = flags.rest[0];
-    const name = flags.values.get("--tenant");
-    const api = await runningTenantApi(deps, name === undefined ? {} : { name });
-    const { status, body } = await call(deps, api, "DELETE", `/v1/environments/${encodeURIComponent(id)}`);
-    if (status === 404 || body.deleted !== true) {
-        deps.err(`No Environment ${id} on Tenant ${api.name}.`);
-        return 1;
-    }
-    deps.out(`Deleted Environment ${id}: its sandbox, files and vault.`);
-    return 0;
-}
-/** `nylorun sandbox <ls|rm|enable|disable|status> ...` */
-export async function sandboxCommand(deps, args) {
-    const [sub, ...rest] = args;
-    if (sub === "ls" || sub === "list")
-        return ls(deps, rest);
-    if (sub === "rm" || sub === "delete")
-        return rm(deps, rest);
-    if (sub === "enable" || sub === "disable" || sub === "status")
-        return runSandboxCommand(args, { stack: deps, kubectl: spawnKubectl(deps.env) });
-    throw usageError(`Usage:\n${sandboxUsage}`);
-}