accli 2.0.0b3__tar.gz → 2.0.0rc1__tar.gz

{accli-2.0.0b3 → accli-2.0.0rc1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: accli
-Version: 2.0.0b3
+Version: 2.0.0rc1
 Summary: IIASA Accelerator Client
 Author-email: Wrufesh S <wrufesh@gmail.com>
 License: The MIT License (MIT)

{accli-2.0.0b3 → accli-2.0.0rc1}/accli/AcceleratorTaskDispatcher.py

@@ -139,10 +139,10 @@ class JobDispatchModel(BaseModel):
 class WKubeTaskMeta(BaseModel):
     required_cores: float
     required_ram: float
-    required_storage_local: float
+    required_storage_local: Optional[float] = None
 
     # is ignored if it is a callback and child of non-free node jobs
-    required_storage_workflow: float
+    required_storage_workflow: Optional[float] = None
 
     job_secrets: Optional[dict] = {}
 

{accli-2.0.0b3 → accli-2.0.0rc1}/accli/CsvRegionalTimeseriesValidator.py

@@ -205,8 +205,8 @@ class CsvRegionalTimeseriesValidator:
             for key in self.errors:
                 print(f"[bold red]Invalid data:[/bold red] {self.errors[key]}")
                 print(f"[bold red]Error:[/bold red] {key}")
-            print("[bold red]Data is not valid against selected template. ⚠️⚠️")
+            print("[bold red]Data is not valid against selected template.[/bold red]")
             typer.Exit(1)
         else:
-            print("[bold green]Data validated against selected template.[/bold green] 🎉🎉")
+            print("[bold green]Data validated against selected template.[/bold green]")
             typer.Exit(0)

{accli-2.0.0b3 → accli-2.0.0rc1}/accli/_version.py

@@ -1,3 +1,3 @@
 # Please strictly put double quote to use this info for git tag 
 # Read a developer guide for git tag command with regex
-VERSION = "v2.0.0-beta.3"
+VERSION = "v2.0.0-c1"

accli-2.0.0rc1/accli/cleanup-nfs.ps1

@@ -0,0 +1,57 @@
+<#
+.SYNOPSIS
+    Reverts all Windows NFS Client and Task Scheduler changes made by setup-nfs.ps1.
+.DESCRIPTION
+    This script removes the scheduled task, registry keys, ProgramData configs, and disables
+    the native Windows NFS Client features. Useful for testing first-time accli setups.
+.NOTES
+    Must be run in an elevated (Administrator) PowerShell window.
+.EXAMPLE
+    # Open an Administrator PowerShell window and execute:
+    powershell -ExecutionPolicy Bypass -File .\accli\cleanup-nfs.ps1
+#>
+
+# Ensure running as Administrator
+$isAdmin = ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)
+if (-not $isAdmin) {
+    Write-Error "This script must be run as Administrator."
+    Write-Host "Please open PowerShell as Administrator and run:" -ForegroundColor Yellow
+    Write-Host "  powershell -ExecutionPolicy Bypass -File `"$PSCommandPath`"" -ForegroundColor Yellow
+    exit 1
+}
+
+Write-Host "=== Reverting accli Windows NFS Client Configuration ===" -ForegroundColor Cyan
+
+# 1. Unregister Scheduled Tasks
+Write-Host "Removing Scheduled Tasks..." -ForegroundColor Yellow
+if (Get-Command Unregister-ScheduledTask -ErrorAction SilentlyContinue) {
+    Unregister-ScheduledTask -TaskName "accli-mount-nfs" -Confirm:$false -ErrorAction SilentlyContinue | Out-Null
+    Unregister-ScheduledTask -TaskName "accli-umount-nfs" -Confirm:$false -ErrorAction SilentlyContinue | Out-Null
+} else {
+    schtasks /delete /tn "accli-mount-nfs" /f 2> $null | Out-Null
+    schtasks /delete /tn "accli-umount-nfs" /f 2> $null | Out-Null
+}
+Write-Host "[OK] Scheduled Tasks removed." -ForegroundColor Green
+
+# 2. Delete Registry Policy Keys
+Write-Host "Removing registry policies (EnableLinkedConnections, AnonymousUid, AnonymousGid)..." -ForegroundColor Yellow
+Remove-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" -Name "EnableLinkedConnections" -ErrorAction SilentlyContinue | Out-Null
+Remove-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\ClientForNFS\CurrentVersion\Default" -Name "AnonymousUid" -ErrorAction SilentlyContinue | Out-Null
+Remove-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\ClientForNFS\CurrentVersion\Default" -Name "AnonymousGid" -ErrorAction SilentlyContinue | Out-Null
+Write-Host "[OK] Registry policies removed." -ForegroundColor Green
+
+# 3. Delete Config Folder & Helpers
+Write-Host "Deleting ProgramData configurations..." -ForegroundColor Yellow
+Remove-Item -Path "C:\ProgramData\accli" -Recurse -Force -ErrorAction SilentlyContinue | Out-Null
+Write-Host "[OK] ProgramData folder removed." -ForegroundColor Green
+
+# 4. Disable Windows NFS Client features
+Write-Host "Disabling Windows Client for NFS features..." -ForegroundColor Yellow
+if (Get-Command Disable-WindowsOptionalFeature -ErrorAction SilentlyContinue) {
+    Disable-WindowsOptionalFeature -Online -FeatureName ServicesForNFS-ClientOnly,ClientForNFS-Infrastructure -NoRestart | Out-Null
+}
+Write-Host "[OK] NFS Client features disabled." -ForegroundColor Green
+
+Write-Host ""
+Write-Host "Reversion completed successfully!" -ForegroundColor Green
+Write-Host "⚠ Note: A Windows sign-out/sign-in or system restart is required for changes to take effect." -ForegroundColor Yellow

{accli-2.0.0b3 → accli-2.0.0rc1}/accli/cli.py

@@ -141,7 +141,7 @@ def dispatch(
         verify_cert=(not ACCLI_DEBUG)
     )
 
-    # ✅ Resolve the workflow file path properly
+    #  Resolve the workflow file path properly
     if os.path.isabs(workflow_filename):
         workflow_filepath = workflow_filename
     else:
@@ -152,9 +152,9 @@ def dispatch(
 
     workflow_dir = os.path.dirname(workflow_filepath)
 
-    # ✅ Temporarily switch to the workflow file's directory
+    #  Temporarily switch to the workflow file's directory
     with pushd(workflow_dir):
-        # ✅ Import the module dynamically
+        #  Import the module dynamically
         spec = importlib.util.spec_from_file_location("workflow", workflow_filepath)
         module = importlib.util.module_from_spec(spec)
         spec.loader.exec_module(module)
@@ -400,7 +400,7 @@ def copy(
                 progress_updater=None,
                 request_headers=None
             )
-            print("[bold green]✔ Download completed successfully![/bold green]")
+            print("[bold green][OK] Download completed successfully![/bold green]")
         except Exception as e:
             print(f"[bold red]ERROR: Download failed: {e}[/bold red]")
             raise typer.Exit(1)
@@ -500,7 +500,7 @@ def copy(
                 verify=(not ACCLI_DEBUG)
             )
             response.raise_for_status()
-            print("[bold green]✔ Upload and bulk metadata registration completed successfully![/bold green]")
+            print("[bold green][OK] Upload and bulk metadata registration completed successfully![/bold green]")
         except requests.exceptions.HTTPError as e:
             detail = None
             try:
@@ -710,6 +710,7 @@ def mount_start(
     from . import mount_downloader
     import platform
     import re
+    import json
     
     sys_name = platform.system()
     
@@ -738,6 +739,27 @@ def mount_start(
 
     # Standardize mount_point and handle defaults / auto-selection
     if sys_name == "Windows":
+        # Check if the daemon is already running to prevent double mount
+        import subprocess
+        try:
+            task_check = subprocess.run(["tasklist", "/FI", "IMAGENAME eq hf-mount-nfs.exe"], capture_output=True, text=True)
+            if "hf-mount-nfs.exe" in task_check.stdout:
+                config_file = Path("C:/ProgramData/accli/mount_config.json")
+                active_msg = ""
+                if config_file.is_file():
+                    try:
+                        import json
+                        cfg = json.loads(config_file.read_text(encoding="utf-8"))
+                        active_msg = f" for project '{cfg.get('project_slug')}' at '{cfg.get('mount_point')}'"
+                    except Exception:
+                        pass
+                print(f"[bold red]ERROR: A mount daemon is already running{active_msg}.[/bold red]")
+                print("[yellow]Please run 'accli mount stop' to unmount before starting a new mount.[/yellow]")
+                raise typer.Exit(1)
+        except Exception as e:
+            if isinstance(e, typer.Exit):
+                raise e
+
         if mount_point is None:
             # Auto-detect available drive letter starting with W
             try:
@@ -917,6 +939,8 @@ def mount_start(
                     print("[yellow]Falling back to UAC elevation...[/yellow]")
                     has_task = False
             except Exception as e:
+                if isinstance(e, typer.Exit) or type(e).__name__ == "Exit":
+                    raise e
                 print(f"[bold red]ERROR: Task Scheduler trigger failed: {e}[/bold red]")
                 print("[yellow]Falling back to UAC elevation...[/yellow]")
                 has_task = False
@@ -1108,8 +1132,9 @@ def mount_stop(
                             print(f"[bold red]ERROR: You requested to stop '{mount_point_abs}', but the active daemon is mounted at '{active_mount}'.[/bold red]")
                             print(f"[yellow]To stop the server, please run: accli mount stop {active_mount}[/yellow]")
                             raise typer.Exit(1)
-                except Exception:
-                    pass
+                except Exception as e:
+                    if isinstance(e, typer.Exit) or type(e).__name__ == "Exit":
+                        raise e
     else:
         if mount_point is None:
             try:
@@ -1128,28 +1153,71 @@ def mount_stop(
         print(f"[bold cyan]Stopping mount at '[white]{mount_point_abs}[/white]' on Windows...[/bold cyan]")
         import subprocess
         
-        # 1. Run Windows standard umount command
-        res = subprocess.run(["C:\\Windows\\System32\\umount.exe", "-f", str(mount_point_abs)], capture_output=True, text=True)
-        
-        # 2. Stop the scheduled task (which terminates the elevated daemon background process tree)
-        try:
-            subprocess.run(["schtasks", "/end", "/tn", "accli-mount-nfs"], capture_output=True)
-        except Exception:
-            pass
-        
-        # 2. Selective Kill: Target and terminate only the specific process using the target mount point using a PowerShell command-line filter
+        # Determine if current user is admin
         try:
-            escaped_mount_point = str(mount_point_abs).replace("'", "''")
-            kill_cmd = [
-                "powershell.exe", "-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-Command",
-                f"Get-CimInstance Win32_Process -Filter \"name='hf-mount-nfs.exe'\" | "
-                f"Where-Object {{ $_.CommandLine -like '*{escaped_mount_point}*' }} | "
-                f"ForEach-Object {{ Stop-Process -Id $_.ProcessId -Force }}"
-            ]
-            subprocess.run(kill_cmd, capture_output=True)
+            import ctypes
+            is_admin = ctypes.windll.shell32.IsUserAnAdmin() != 0
         except Exception:
-            # Fallback to killing all instances if selective filter fails
-            subprocess.run(["taskkill", "/f", "/im", "hf-mount-nfs.exe"], capture_output=True)
+            is_admin = False
+
+        # 1. Unmap the network drive in the user session
+        res = subprocess.run(["C:\\Windows\\System32\\umount.exe", "-f", str(mount_point_abs)], capture_output=True, text=True)
+        if res.returncode != 0:
+            # Fallback to force-releasing using net use
+            subprocess.run(["net", "use", str(mount_point_abs), "/delete", "/y"], capture_output=True)
+
+        # 2. Terminate the background daemon
+        has_umount_task = False
+        if not is_admin:
+            try:
+                task_check = subprocess.run(["schtasks", "/query", "/tn", "accli-umount-nfs"], capture_output=True, text=True)
+                if task_check.returncode == 0:
+                    has_umount_task = True
+            except Exception:
+                pass
+
+        if has_umount_task:
+            print("[cyan]Triggering elevated NFS daemon termination via Task Scheduler...[/cyan]")
+            subprocess.run(["schtasks", "/run", "/tn", "accli-umount-nfs"], capture_output=True)
+            # Poll for up to 5 seconds to ensure hf-mount-nfs.exe has fully terminated
+            import time
+            for _ in range(10):
+                time.sleep(0.5)
+                task_check = subprocess.run(["tasklist", "/FI", "IMAGENAME eq hf-mount-nfs.exe"], capture_output=True, text=True)
+                if "hf-mount-nfs.exe" not in task_check.stdout:
+                    break
+        else:
+            # If admin or task scheduler gateway is not registered, stop/kill directly
+            if is_admin:
+                try:
+                    subprocess.run(["schtasks", "/end", "/tn", "accli-mount-nfs"], capture_output=True)
+                except Exception:
+                    pass
+                try:
+                    escaped_mount_point = str(mount_point_abs).replace("'", "''")
+                    kill_cmd = [
+                        "powershell.exe", "-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-Command",
+                        f"Get-CimInstance Win32_Process -Filter \"name='hf-mount-nfs.exe'\" | "
+                        f"Where-Object {{ $_.CommandLine -like '*{escaped_mount_point}*' }} | "
+                        f"ForEach-Object {{ Stop-Process -Id $_.ProcessId -Force }}"
+                    ]
+                    subprocess.run(kill_cmd, capture_output=True)
+                except Exception:
+                    # Fallback to killing all instances if selective filter fails
+                    subprocess.run(["taskkill", "/f", "/im", "hf-mount-nfs.exe"], capture_output=True)
+            else:
+                # Standard user with no task registered - need UAC to end task/kill process
+                print("[yellow]Notice: Task Scheduler gateway is not active. Requesting UAC elevation to terminate daemon...[/yellow]")
+                ps_command = (
+                    "Start-Process powershell.exe -ArgumentList '-NoProfile -ExecutionPolicy Bypass -Command "
+                    "\"Stop-ScheduledTask -TaskName accli-mount-nfs -ErrorAction SilentlyContinue; "
+                    "Get-CimInstance Win32_Process -Filter \\\"name=''hf-mount-nfs.exe''\\\" | Stop-Process -Force -ErrorAction SilentlyContinue\"' "
+                    "-Verb RunAs -Wait"
+                )
+                subprocess.run([
+                    "powershell.exe", "-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-Command",
+                    ps_command
+                ], capture_output=True)
         
         if res.returncode == 0 or "successfully" in res.stdout or "successfully" in res.stderr:
             print("[bold green][OK] Mount stopped successfully.[/bold green]")

accli-2.0.0rc1/accli/gui.py

@@ -0,0 +1,623 @@
+import os
+import sys
+import json
+import time
+import platform
+import threading
+import subprocess
+from pathlib import Path
+
+def setup_tcl_tk_env():
+    base = sys.base_prefix
+    for sub in ["tcl", "lib", "."]:
+        search_dir = os.path.join(base, sub)
+        if not os.path.isdir(search_dir):
+            continue
+        try:
+            for item in os.listdir(search_dir):
+                item_path = os.path.join(search_dir, item)
+                if os.path.isdir(item_path):
+                    if item.startswith("tcl") and not os.environ.get("TCL_LIBRARY"):
+                        if os.path.isfile(os.path.join(item_path, "init.tcl")):
+                            os.environ["TCL_LIBRARY"] = item_path
+                    elif item.startswith("tk") and not os.environ.get("TK_LIBRARY"):
+                        if os.path.isfile(os.path.join(item_path, "tk.tcl")):
+                            os.environ["TK_LIBRARY"] = item_path
+        except Exception:
+            pass
+
+setup_tcl_tk_env()
+
+import tkinter as tk
+from tkinter import ttk, messagebox, filedialog
+
+# Ensure PyInstaller static analyzer traces and bundles all CLI dependencies
+import accli.cli
+
+class AccliGuiApp(tk.Tk):
+    def __init__(self):
+        super().__init__()
+        self.title("IIASA Accelerator Client (accli)")
+        self.geometry("800x600")
+        self.minsize(700, 500)
+        
+        # Apply dark modern theme style
+        self.style = ttk.Style()
+        self.configure_styles()
+        
+        # Main layout
+        self.create_widgets()
+        
+        # Start state check poll
+        self.refresh_login_status()
+        self.refresh_mounts_list()
+        
+    def configure_styles(self):
+        self.configure(bg="#1e1e1e")
+        self.style.theme_use("clam")
+        
+        # Style Definitions
+        self.style.configure(".", background="#1e1e1e", foreground="#ffffff", font=("Segoe UI", 10))
+        self.style.configure("TFrame", background="#1e1e1e")
+        self.style.configure("TLabel", background="#1e1e1e", foreground="#ffffff")
+        self.style.configure("Header.TLabel", font=("Segoe UI", 14, "bold"), foreground="#007acc")
+        
+        # Notebook Style
+        self.style.configure("TNotebook", background="#252526", borderwidth=0)
+        self.style.configure("TNotebook.Tab", background="#2d2d2d", foreground="#888888", padding=[15, 5])
+        self.style.map("TNotebook.Tab",
+            background=[("selected", "#252526"), ("active", "#333333")],
+            foreground=[("selected", "#ffffff"), ("active", "#ffffff")]
+        )
+        
+        # Buttons Style
+        self.style.configure("TButton", background="#007acc", foreground="#ffffff", borderwidth=0, padding=[10, 5])
+        self.style.map("TButton",
+            background=[("active", "#0098ff"), ("disabled", "#555555")],
+            foreground=[("disabled", "#aaaaaa")]
+        )
+        self.style.configure("Stop.TButton", background="#e51400")
+        self.style.map("Stop.TButton",
+            background=[("active", "#ff3333"), ("disabled", "#555555")]
+        )
+        self.style.configure("Refresh.TButton", background="#333333")
+        self.style.map("Refresh.TButton", background=[("active", "#444444")])
+        
+        # Entry fields
+        self.style.configure("TEntry", fieldbackground="#2d2d2d", foreground="#ffffff", borderwidth=0)
+        
+        # Checkboxes
+        self.style.configure("TCheckbutton", background="#1e1e1e", foreground="#ffffff")
+        self.style.map("TCheckbutton", background=[("active", "#1e1e1e")])
+
+    def create_widgets(self):
+        # Top banner
+        banner_frame = ttk.Frame(self, padding=10)
+        banner_frame.pack(fill=tk.X)
+        
+        title_label = ttk.Label(banner_frame, text="IIASA ACCELERATOR CLIENT", style="Header.TLabel")
+        title_label.pack(side=tk.LEFT)
+        
+        self.status_bar_val = tk.StringVar(value="Checking state...")
+        status_lbl = ttk.Label(banner_frame, textvariable=self.status_bar_val, font=("Segoe UI", 9, "italic"), foreground="#4ec9b0")
+        status_lbl.pack(side=tk.RIGHT)
+        
+        # Tabs
+        self.notebook = ttk.Notebook(self)
+        self.notebook.pack(fill=tk.BOTH, expand=True, padx=10, pady=(0, 10))
+        
+        # Build Tabs
+        self.build_mounts_tab()
+        self.build_copy_tab()
+        self.build_dispatch_tab()
+        self.build_auth_tab()
+        self.build_logs_tab()
+
+    def run_cli_async(self, args, on_done=None, log_to_viewer=True):
+        """Runs the CLI binary in a background thread to prevent UI freezing."""
+        def worker():
+            # Determine how to invoke accli
+            if getattr(sys, "frozen", False):
+                # Executable mode (PyInstaller package)
+                cmd = [sys.executable] + args
+            else:
+                # Script mode
+                cmd = [sys.executable, "-m", "accli.cli"] + args
+
+            try:
+                if log_to_viewer:
+                    self.append_log(f"Executing: {' '.join(cmd)}\n")
+                
+                # Start process with hidden console window on Windows
+                startupinfo = None
+                if platform.system() == "Windows":
+                    startupinfo = subprocess.STARTUPINFO()
+                    startupinfo.dwFlags |= subprocess.STARTF_USESHOWWINDOW
+                
+                process = subprocess.Popen(
+                    cmd,
+                    stdout=subprocess.PIPE,
+                    stderr=subprocess.STDOUT,
+                    text=True,
+                    bufsize=1,
+                    startupinfo=startupinfo
+                )
+                
+                output_lines = []
+                while True:
+                    line = process.stdout.readline()
+                    if not line:
+                        break
+                    output_lines.append(line)
+                    if log_to_viewer:
+                        self.append_log(line)
+                
+                process.wait()
+                
+                if on_done:
+                    self.after(0, lambda: on_done(process.returncode, "".join(output_lines)))
+            except Exception as e:
+                self.append_log(f"ERROR executing command: {e}\n")
+                if on_done:
+                    self.after(0, lambda: on_done(-1, str(e)))
+
+        threading.Thread(target=worker, daemon=True).start()
+
+    def append_log(self, text):
+        self.after(0, lambda: self._safe_append_log(text))
+
+    def _safe_append_log(self, text):
+        self.log_txt.configure(state=tk.NORMAL)
+        self.log_txt.insert(tk.END, text)
+        self.log_txt.see(tk.END)
+        self.log_txt.configure(state=tk.DISABLED)
+
+    # ------------------ AUTH TAB ------------------
+    def build_auth_tab(self):
+        auth_tab = ttk.Frame(self.notebook, padding=20)
+        self.notebook.add(auth_tab, text="Connection / Login")
+        
+        # Login Details Card
+        card = ttk.LabelFrame(auth_tab, text="Login Credentials", padding=15)
+        card.pack(fill=tk.X, pady=10)
+        
+        ttk.Label(card, text="Server URL:").grid(row=0, column=0, sticky=tk.W, pady=5)
+        self.server_url_val = tk.StringVar(value="https://accelerator.iiasa.ac.at")
+        self.server_entry = ttk.Entry(card, textvariable=self.server_url_val, width=40)
+        self.server_entry.grid(row=0, column=1, sticky=tk.W, padx=10, pady=5)
+        
+        self.login_btn = ttk.Button(card, text="Authenticate / Login", command=self.action_login)
+        self.login_btn.grid(row=0, column=2, padx=10, pady=5)
+        
+        # Connection status details
+        self.conn_details_txt = tk.Text(auth_tab, height=12, bg="#2d2d2d", fg="#ffffff", insertbackground="white", font=("Courier New", 10), state=tk.DISABLED)
+        self.conn_details_txt.pack(fill=tk.BOTH, expand=True, pady=10)
+
+    def refresh_login_status(self):
+        from accli.token import get_db_path
+        from tinydb import TinyDB
+        db_path = get_db_path()
+        logged_in = False
+        server_url = "https://accelerator.iiasa.ac.at"
+        
+        if os.path.exists(db_path):
+            try:
+                db = TinyDB(db_path)
+                for item in db:
+                    if item.get('token'):
+                        logged_in = True
+                    if item.get('server_url'):
+                        server_url = item.get('server_url')
+            except Exception:
+                pass
+                
+        self.is_logged_in_state = logged_in
+        if logged_in:
+            self.login_btn.configure(text="Logout", style="Stop.TButton")
+            self.server_entry.configure(state=tk.DISABLED)
+            self.server_url_val.set(server_url)
+            self.status_bar_val.set("Session Status: Connected")
+        else:
+            self.login_btn.configure(text="Authenticate / Login", style="TButton")
+            self.server_entry.configure(state=tk.NORMAL)
+            self.status_bar_val.set("Session Status: Disconnected")
+            
+        def on_check_done(code, output):
+            self.conn_details_txt.configure(state=tk.NORMAL)
+            self.conn_details_txt.delete("1.0", tk.END)
+            self.conn_details_txt.insert(tk.END, output)
+            self.conn_details_txt.configure(state=tk.DISABLED)
+
+        self.run_cli_async(["status"], on_done=on_check_done, log_to_viewer=False)
+
+    def action_login(self):
+        if hasattr(self, "is_logged_in_state") and self.is_logged_in_state:
+            from accli.token import get_db_path
+            db_path = get_db_path()
+            try:
+                if os.path.exists(db_path):
+                    os.remove(db_path)
+                self.append_log("Logged out successfully.\n")
+                messagebox.showinfo("Success", "Logged out successfully.")
+            except Exception as e:
+                self.append_log(f"Error during logout: {e}\n")
+            self.refresh_login_status()
+            return
+
+        url = self.server_url_val.get().strip()
+        if not url:
+            messagebox.showerror("Error", "Please provide a valid Server URL.")
+            return
+        
+        self.status_bar_val.set("Authenticating...")
+        
+        import webbrowser
+        from tkinter import simpledialog
+        import requests
+        from accli.token import save_token_details
+        
+        webcli_url = url
+        auth_url = f"{webcli_url.rstrip('/')}/acli-auth-code"
+        
+        self.append_log(f"Opening browser for authentication at: {auth_url}\n")
+        try:
+            webbrowser.open(auth_url)
+        except Exception as e:
+            self.append_log(f"Warning: Could not open browser automatically: {e}\n")
+            
+        auth_code = simpledialog.askstring(
+            "Authorization Code", 
+            f"Please authenticate in your browser at:\n{auth_url}\n\nThen enter the authorization code here:"
+        )
+        
+        if not auth_code:
+            self.status_bar_val.set("Session Status: Disconnected")
+            return
+            
+        def perform_auth():
+            try:
+                self.append_log("Exchanging authorization code for token...\n")
+                token_endpoint = f"{url.rstrip('/')}/api/v1/oauth/device/token/"
+                response = requests.post(
+                    token_endpoint,
+                    json={"device_authorization_code": auth_code.strip()},
+                    verify=True
+                )
+                
+                if response.status_code == 400:
+                    detail = response.json().get("detail", "Unknown error")
+                    self.append_log(f"Authentication Error: {detail}\n")
+                    self.after(0, lambda: messagebox.showerror("Auth Error", f"Failed to log in: {detail}"))
+                    self.after(0, self.refresh_login_status)
+                    return
+                    
+                response.raise_for_status()
+                data = response.json()
+                
+                save_token_details(data, url, webcli_url)
+                self.append_log("Authentication successful! Token saved.\n")
+                self.after(0, lambda: messagebox.showinfo("Success", "Successfully logged in!"))
+                self.after(0, self.refresh_login_status)
+            except Exception as e:
+                self.append_log(f"Authentication Failed: {e}\n")
+                self.after(0, lambda: messagebox.showerror("Error", f"Authentication failed: {e}"))
+                self.after(0, self.refresh_login_status)
+
+        threading.Thread(target=perform_auth, daemon=True).start()
+
+    # ------------------ DISPATCH TAB ------------------
+    def build_dispatch_tab(self):
+        dispatch_tab = ttk.Frame(self.notebook, padding=15)
+        self.notebook.add(dispatch_tab, text="Task Dispatcher")
+        
+        card = ttk.LabelFrame(dispatch_tab, text="Workflow Configuration", padding=15)
+        card.pack(fill=tk.X, pady=10)
+        
+        # Project Slug
+        ttk.Label(card, text="Project Slug:").grid(row=0, column=0, sticky=tk.W, pady=5)
+        self.disp_slug_val = tk.StringVar()
+        ttk.Entry(card, textvariable=self.disp_slug_val, width=30).grid(row=0, column=1, sticky=tk.W, padx=10, pady=5)
+        
+        # Root Task Variable
+        ttk.Label(card, text="Root Task Variable:").grid(row=1, column=0, sticky=tk.W, pady=5)
+        self.disp_root_val = tk.StringVar()
+        ttk.Entry(card, textvariable=self.disp_root_val, width=30).grid(row=1, column=1, sticky=tk.W, padx=10, pady=5)
+        
+        # Workflow File Path
+        ttk.Label(card, text="Workflow Python File (-f):").grid(row=2, column=0, sticky=tk.W, pady=5)
+        file_frame = ttk.Frame(card)
+        file_frame.grid(row=2, column=1, sticky=tk.W, padx=10, pady=5)
+        
+        self.disp_file_val = tk.StringVar(value="wkube.py")
+        ttk.Entry(file_frame, textvariable=self.disp_file_val, width=30).pack(side=tk.LEFT)
+        ttk.Button(file_frame, text="Browse...", command=self.browse_workflow_file).pack(side=tk.LEFT, padx=5)
+        
+        # Dispatch Button
+        btn_frame = ttk.Frame(dispatch_tab)
+        btn_frame.pack(fill=tk.X, pady=15)
+        
+        dispatch_btn = ttk.Button(btn_frame, text="Dispatch Task", command=self.action_dispatch)
+        dispatch_btn.pack(anchor=tk.CENTER)
+        
+        # Try to pre-populate project slug from config
+        try:
+            from accli.token import get_project_slug
+            slug = get_project_slug()
+            if slug:
+                self.disp_slug_val.set(slug)
+        except Exception:
+            pass
+
+    def browse_workflow_file(self):
+        file_path = filedialog.askopenfilename(filetypes=[("Python Files", "*.py")])
+        if file_path:
+            self.disp_file_val.set(file_path)
+
+    def action_dispatch(self):
+        slug = self.disp_slug_val.get().strip()
+        root_var = self.disp_root_val.get().strip()
+        wf_file = self.disp_file_val.get().strip()
+        
+        if not slug or not root_var or not wf_file:
+            messagebox.showerror("Error", "Please fill in all Dispatch fields.")
+            return
+            
+        args = ["dispatch", slug, root_var, "-f", wf_file]
+        
+        self.status_bar_val.set("Dispatching workflow...")
+        self.notebook.select(self.log_tab_idx)
+        
+        def on_done(code, output):
+            if code == 0:
+                self.status_bar_val.set("Workflow Dispatched")
+                messagebox.showinfo("Success", "Workflow task successfully dispatched!")
+            else:
+                self.status_bar_val.set("Dispatch Failed")
+                messagebox.showerror("Error", "Failed to dispatch workflow task. See logs for details.")
+
+        self.run_cli_async(args, on_done=on_done)
+
+    # ------------------ MOUNTS TAB ------------------
+    def build_mounts_tab(self):
+        mounts_tab = ttk.Frame(self.notebook, padding=15)
+        self.notebook.add(mounts_tab, text="Mount Manager")
+        
+        # Left Panel (Input Form)
+        form_frame = ttk.LabelFrame(mounts_tab, text="Mount Configuration", padding=15)
+        form_frame.pack(side=tk.LEFT, fill=tk.BOTH, expand=True, padx=(0, 10))
+        
+        ttk.Label(form_frame, text="Project Slug / Repository ID:").grid(row=0, column=0, sticky=tk.W, pady=5)
+        self.proj_slug_val = tk.StringVar()
+        ttk.Entry(form_frame, textvariable=self.proj_slug_val, width=25).grid(row=0, column=1, sticky=tk.W, padx=10, pady=5)
+        
+        ttk.Label(form_frame, text="Mount Point / Drive Letter:").grid(row=1, column=0, sticky=tk.W, pady=5)
+        self.mount_point_val = tk.StringVar(value="W:" if platform.system() == "Windows" else "")
+        ttk.Entry(form_frame, textvariable=self.mount_point_val, width=25).grid(row=1, column=1, sticky=tk.W, padx=10, pady=5)
+        
+        # Options
+        ttk.Label(form_frame, text="Options:").grid(row=2, column=0, sticky=tk.NW, pady=5)
+        options_frame = ttk.Frame(form_frame)
+        options_frame.grid(row=2, column=1, sticky=tk.W, padx=10, pady=5)
+        
+        self.opt_overlay = tk.BooleanVar(value=False)
+        ttk.Checkbutton(options_frame, text="Enable Overlay (local writes)", variable=self.opt_overlay).pack(anchor=tk.W, pady=2)
+        
+        self.opt_readonly = tk.BooleanVar(value=False)
+        ttk.Checkbutton(options_frame, text="Force Read-Only", variable=self.opt_readonly).pack(anchor=tk.W, pady=2)
+        
+        self.opt_fuse = tk.BooleanVar(value=False)
+        if platform.system() != "Windows":
+            ttk.Checkbutton(options_frame, text="Use FUSE backend", variable=self.opt_fuse).pack(anchor=tk.W, pady=2)
+            
+        # Mount / Unmount buttons
+        btn_frame = ttk.Frame(form_frame)
+        btn_frame.grid(row=3, column=0, columnspan=2, pady=15, sticky=tk.W)
+        
+        mount_btn = ttk.Button(btn_frame, text="Start Mount", command=self.action_mount_start)
+        mount_btn.pack(side=tk.LEFT, padx=5)
+        
+        # Right Panel (List of mounts)
+        list_frame = ttk.LabelFrame(mounts_tab, text="Active Mounts", padding=10)
+        list_frame.pack(side=tk.RIGHT, fill=tk.BOTH, expand=True)
+        
+        list_btn_frame = ttk.Frame(list_frame)
+        list_btn_frame.pack(fill=tk.X, pady=5)
+        
+        refresh_btn = ttk.Button(list_btn_frame, text="Refresh", style="Refresh.TButton", command=self.refresh_mounts_list)
+        refresh_btn.pack(side=tk.LEFT, padx=2)
+        
+        stop_btn = ttk.Button(list_btn_frame, text="Stop Selected", style="Stop.TButton", command=self.action_mount_stop)
+        stop_btn.pack(side=tk.RIGHT, padx=2)
+        
+        self.mounts_list = tk.Listbox(list_frame, bg="#2d2d2d", fg="#ffffff", selectbackground="#007acc", font=("Segoe UI", 10))
+        self.mounts_list.pack(fill=tk.BOTH, expand=True)
+
+    def refresh_mounts_list(self):
+        def on_done(code, output):
+            self.mounts_list.delete(0, tk.END)
+            # Filter and parse 'accli mount status' output
+            lines = output.splitlines()
+            for line in lines:
+                cleaned = line.strip()
+                if not cleaned:
+                    continue
+                
+                # Only insert actual mount entries, skip headers and info logs
+                if platform.system() == "Windows":
+                    # Look for lines starting with drive letter (e.g. W:)
+                    if len(cleaned) >= 2 and cleaned[0].isalpha() and cleaned[1] == ":":
+                        self.mounts_list.insert(tk.END, cleaned)
+                else:
+                    # Look for lines starting with absolute/home path (e.g. / or ~)
+                    if cleaned.startswith("/") or cleaned.startswith("~"):
+                        self.mounts_list.insert(tk.END, cleaned)
+        
+        self.run_cli_async(["mount", "status"], on_done=on_done, log_to_viewer=False)
+
+    def action_mount_start(self):
+        slug = self.proj_slug_val.get().strip()
+        point = self.mount_point_val.get().strip()
+        if not slug:
+            messagebox.showerror("Error", "Please enter a valid Project Slug.")
+            return
+            
+        args = ["mount", "start", slug]
+        if point:
+            args.append(point)
+        if self.opt_overlay.get():
+            args.append("--overlay")
+        if self.opt_readonly.get():
+            args.append("--read-only")
+        if platform.system() != "Windows" and self.opt_fuse.get():
+            args.append("--fuse")
+            
+        self.status_bar_val.set("Mounting project...")
+        self.notebook.select(self.log_tab_idx)
+        
+        def on_done(code, output):
+            self.refresh_mounts_list()
+            if code == 0:
+                if "system restart is required" in output.lower() or "restart your computer" in output.lower():
+                    self.status_bar_val.set("Restart Required")
+                    messagebox.showwarning(
+                        "System Restart Required",
+                        "A Windows system restart is required for the new NFS Client features and registry policies to take effect.\n\n"
+                        "Please restart your computer, then run the mount again."
+                    )
+                else:
+                    self.status_bar_val.set("Mount Active")
+                    messagebox.showinfo("Success", f"Successfully mounted project '{slug}'!")
+            else:
+                self.status_bar_val.set("Mount Failed")
+                messagebox.showerror("Error", f"Failed to mount project '{slug}'. See logs for details.")
+
+        self.run_cli_async(args, on_done=on_done)
+
+    def action_mount_stop(self):
+        selected = self.mounts_list.get(tk.ACTIVE)
+        if not selected:
+            messagebox.showwarning("Warning", "Please select a mount to stop from the list.")
+            return
+            
+        # Parse the mount point from the status line
+        # E.g. "W:       \\\\127.0.0.1\\!" -> "W:"
+        # Or parse folder paths
+        parts = selected.split()
+        if not parts:
+            return
+            
+        mount_point = parts[0]
+        args = ["mount", "stop", mount_point]
+        
+        self.status_bar_val.set("Stopping mount...")
+        self.notebook.select(self.log_tab_idx)
+        
+        def on_done(code, output):
+            self.refresh_mounts_list()
+            if code == 0:
+                self.status_bar_val.set("Mount Stopped")
+                messagebox.showinfo("Success", f"Successfully stopped mount at {mount_point}.")
+            else:
+                self.status_bar_val.set("Stop Failed")
+                messagebox.showerror("Error", f"Failed to stop mount at {mount_point}.")
+
+        self.run_cli_async(args, on_done=on_done)
+
+    # ------------------ COPY TAB ------------------
+    def build_copy_tab(self):
+        copy_tab = ttk.Frame(self.notebook, padding=15)
+        self.notebook.add(copy_tab, text="File Transfer")
+        
+        # Source Group
+        src_frame = ttk.LabelFrame(copy_tab, text="Source Path", padding=10)
+        src_frame.pack(fill=tk.X, pady=5)
+        self.src_val = tk.StringVar()
+        ttk.Entry(src_frame, textvariable=self.src_val).pack(side=tk.LEFT, fill=tk.X, expand=True, padx=5)
+        ttk.Button(src_frame, text="Browse...", command=lambda: self.browse_path(self.src_val)).pack(side=tk.RIGHT)
+        
+        # Swap button
+        swap_frame = ttk.Frame(copy_tab)
+        swap_frame.pack(fill=tk.X)
+        ttk.Button(swap_frame, text="<-> Swap Paths", style="Refresh.TButton", command=self.swap_paths).pack(pady=2)
+
+        # Destination Group
+        dest_frame = ttk.LabelFrame(copy_tab, text="Destination Path", padding=10)
+        dest_frame.pack(fill=tk.X, pady=5)
+        self.dest_val = tk.StringVar()
+        ttk.Entry(dest_frame, textvariable=self.dest_val).pack(side=tk.LEFT, fill=tk.X, expand=True, padx=5)
+        ttk.Button(dest_frame, text="Browse...", command=lambda: self.browse_path(self.dest_val)).pack(side=tk.RIGHT)
+        
+        # Copy Action
+        btn_frame = ttk.Frame(copy_tab)
+        btn_frame.pack(fill=tk.X, pady=15)
+        ttk.Button(btn_frame, text="Start Transfer (Copy)", command=self.action_copy).pack(anchor=tk.CENTER)
+
+        # Tip
+        tip_lbl = ttk.Label(copy_tab, text="Tip: Remote paths must be structured as 'acc://[project-slug]/[file-or-folder]'.\nLocal paths can be chosen using the Browse button.", font=("Segoe UI", 9, "italic"), justify=tk.CENTER)
+        tip_lbl.pack(pady=10)
+
+    def browse_path(self, var_target):
+        # Open file dialog
+        path = filedialog.askopenfilename() or filedialog.askdirectory()
+        if path:
+            var_target.set(path)
+
+    def swap_paths(self):
+        s = self.src_val.get()
+        d = self.dest_val.get()
+        self.src_val.set(d)
+        self.dest_val.set(s)
+
+    def action_copy(self):
+        src = self.src_val.get().strip()
+        dest = self.dest_val.get().strip()
+        if not src or not dest:
+            messagebox.showerror("Error", "Please fill in both Source and Destination paths.")
+            return
+            
+        args = ["copy", src, dest]
+        
+        self.status_bar_val.set("Transferring files...")
+        self.notebook.select(self.log_tab_idx)
+        
+        def on_done(code, output):
+            if code == 0:
+                self.status_bar_val.set("Transfer Completed")
+                messagebox.showinfo("Success", "File transfer finished successfully!")
+            else:
+                self.status_bar_val.set("Transfer Failed")
+                messagebox.showerror("Error", "File transfer failed. See logs for details.")
+
+        self.run_cli_async(args, on_done=on_done)
+
+    # ------------------ LOGS TAB ------------------
+    def build_logs_tab(self):
+        logs_tab = ttk.Frame(self.notebook, padding=10)
+        self.notebook.add(logs_tab, text="Log Console")
+        self.log_tab_idx = self.notebook.index(logs_tab)
+        
+        # Log buttons
+        ctrl_frame = ttk.Frame(logs_tab)
+        ctrl_frame.pack(fill=tk.X, pady=(0, 5))
+        
+        clear_btn = ttk.Button(ctrl_frame, text="Clear Console", style="Refresh.TButton", command=self.clear_logs)
+        clear_btn.pack(side=tk.LEFT)
+        
+        self.log_txt = tk.Text(logs_tab, bg="#1e1e1e", fg="#d4d4d4", insertbackground="white", font=("Courier New", 10), state=tk.DISABLED)
+        self.log_txt.pack(fill=tk.BOTH, expand=True)
+
+    def clear_logs(self):
+        self.log_txt.configure(state=tk.NORMAL)
+        self.log_txt.delete("1.0", tk.END)
+        self.log_txt.configure(state=tk.DISABLED)
+
+def main():
+    app = AccliGuiApp()
+    app.mainloop()
+
+if __name__ == "__main__":
+    if len(sys.argv) > 1:
+        from accli.cli import app as cli_app
+        cli_app()
+    else:
+        main()

{accli-2.0.0b3 → accli-2.0.0rc1}/accli/mount_downloader.py

@@ -9,7 +9,7 @@ import typer
 from rich import print
 from rich.progress import Progress, TextColumn, BarColumn, TaskProgressColumn, TimeElapsedColumn
 
-DEFAULT_VERSION = "v0.6.5-acc-pr140"
+DEFAULT_VERSION = "v0.6.5-acc-pr140-p4"
 BINARY_DIR = Path.home() / ".accli" / "bin"
 
 # Regex to safely validate version strings to prevent URL manipulation or directory traversal
@@ -140,12 +140,12 @@ def ensure_binaries(version: str = DEFAULT_VERSION, use_fuse: bool = False):
             if sys_name != "Windows":
                 current_stat = dest_path.stat().st_mode
                 dest_path.chmod(current_stat | stat.S_IXUSR | stat.S_IXGRP | stat.S_IXOTH)
-            print(f"[bold green]✔ Successfully cached {bin_name}[/bold green]")
+            print(f"[bold green][OK] Successfully cached {bin_name}[/bold green]")
 
         except Exception as e:
             if part_path.exists():
                 part_path.unlink()
-            print(f"[bold red]✖ Failed to download {bin_name}: {e}[/bold red]")
+            print(f"[bold red][ERROR] Failed to download {bin_name}: {e}[/bold red]")
             raise typer.Exit(1)
 
     # After all downloads successfully complete, update the cached version file

accli-2.0.0rc1/accli/setup-nfs.ps1

@@ -0,0 +1,262 @@
+<#
+.SYNOPSIS
+    One-time administrative configuration script to enable Windows Client for NFS and register the Task Scheduler Mount Gateway.
+.DESCRIPTION
+    This script performs the administrative setup required to allow standard users to mount 
+    Accelerator project spaces on Windows over NFS with ZERO UAC prompts.
+    It can be run silently by IT Administrators using Microsoft Intune, Group Policy (GPO), or SCCM.
+.PARAMETER NfsAlreadyEnabled
+    Bypasses enabling NFS Optional features if already enabled.
+.PARAMETER RegAlreadyEnabled
+    Bypasses EnableLinkedConnections registry policy creation if already enabled.
+.NOTES
+    This script is static and fully auditable by Security and Network Administrators.
+#>
+
+param (
+    [switch]$NfsAlreadyEnabled,
+    [switch]$RegAlreadyEnabled
+)
+
+# 1. Enable Windows Client for NFS Optional Features
+if (-not $NfsAlreadyEnabled) {
+    Write-Host "Enabling Windows Client for NFS features..." -ForegroundColor Cyan
+
+    if (Get-Command Enable-WindowsOptionalFeature -ErrorAction SilentlyContinue) {
+        # Split into two separate calls to bypass Windows 11 comma-separated feature parser bug
+        Enable-WindowsOptionalFeature -Online -FeatureName ServicesForNFS-ClientOnly -All -NoRestart | Out-Null
+        Enable-WindowsOptionalFeature -Online -FeatureName ClientForNFS-Infrastructure -All -NoRestart | Out-Null
+    } elseif (Get-Command Install-WindowsFeature -ErrorAction SilentlyContinue) {
+        # Fallback for Windows Server OS
+        Install-WindowsFeature -Name NFS-Client | Out-Null
+    }
+    Write-Host "[OK] Enabled Client for NFS features." -ForegroundColor Green
+} else {
+    Write-Host "[OK] Client for NFS features already enabled." -ForegroundColor Green
+}
+
+# 2. Add Registry value for Linked Connections
+# Allows mapped network drives to be shared between elevated and standard sessions under the same user log-in.
+if (-not $RegAlreadyEnabled) {
+    Write-Host "Configuring EnableLinkedConnections registry policy..." -ForegroundColor Cyan
+
+    $regPath = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System"
+    if (-not (Test-Path $regPath)) {
+        New-Item -Path $regPath -Force | Out-Null
+    }
+    New-ItemProperty -Path $regPath -Name "EnableLinkedConnections" -Value 1 -PropertyType DWORD -Force | Out-Null
+    Write-Host "[OK] Registry value configured." -ForegroundColor Green
+} else {
+    Write-Host "[OK] Registry value already configured." -ForegroundColor Green
+}
+
+# 2.5 Configure Anonymous UID/GID to match hf-mount-nfs (UID 0)
+if (-not $RegAlreadyEnabled) {
+    Write-Host "Configuring Anonymous UID/GID for NFS Client..." -ForegroundColor Cyan
+    $clientForNfsPath = "HKLM:\SOFTWARE\Microsoft\ClientForNFS\CurrentVersion\Default"
+    if (-not (Test-Path $clientForNfsPath)) {
+        New-Item -Path $clientForNfsPath -Force | Out-Null
+    }
+    New-ItemProperty -Path $clientForNfsPath -Name "AnonymousUid" -Value 0 -PropertyType DWORD -Force | Out-Null
+    New-ItemProperty -Path $clientForNfsPath -Name "AnonymousGid" -Value 0 -PropertyType DWORD -Force | Out-Null
+    Write-Host "[OK] Anonymous UID/GID configured." -ForegroundColor Green
+} else {
+    Write-Host "[OK] Anonymous UID/GID registry values already configured (skipped)." -ForegroundColor Green
+}
+
+# 3. Create public ProgramData folder and configure permissions for Authenticated Users
+Write-Host "Initializing public accli configuration directory..." -ForegroundColor Cyan
+$configDir = "C:\ProgramData\accli"
+if (-not (Test-Path $configDir)) {
+    New-Item -ItemType Directory -Path $configDir -Force | Out-Null
+}
+
+try {
+    $acl = Get-Acl $configDir
+    # Grant Modify (Read, Write, Execute, Delete) to all Authenticated Users so non-admin users can write the mount_config.json
+    $ar = New-Object System.Security.AccessControl.FileSystemAccessRule("Authenticated Users", "Modify", "ContainerInherit,ObjectInherit", "None", "Allow")
+    $acl.SetAccessRule($ar)
+    Set-Acl $configDir $acl
+    Write-Host "[OK] Directory permissions configured." -ForegroundColor Green
+} catch {
+    Write-Warning "Could not configure ProgramData permissions. Standalone non-admin users might not be able to write configuration."
+}
+
+# 4. Write static run-mount-helper.ps1 static helper
+Write-Host "Registering run-mount-helper script..." -ForegroundColor Cyan
+$helperScript = @'
+$configPath = "C:\ProgramData\accli\mount_config.json"
+if (-not (Test-Path $configPath)) {
+    Write-Error "Config file not found at $configPath."
+    exit 1
+}
+
+try {
+    $cfg = Get-Content $configPath -Raw | ConvertFrom-Json
+} catch {
+    Write-Error "Failed to parse $configPath."
+    exit 1
+}
+
+# Construct environment
+$env:PATH = "C:\Windows\System32\downlevel;" + $env:PATH
+$env:ACCELERATOR_MOUNT = "1"
+$env:ACC_ENDPOINT = $cfg.server_url
+$env:ACC_CAS_ENDPOINT = "$($cfg.server_url.TrimEnd('/'))/api/xet-cas"
+$env:ACC_TOKEN = $cfg.token
+if ($cfg.skip_auto_mount) {
+    $env:HF_MOUNT_SKIP_AUTO_MOUNT = "1"
+}
+
+# Construct arguments
+$mountArgs = @(
+    "--token-file", $cfg.db_path,
+    "--hub-endpoint", $cfg.server_url,
+    $cfg.mode,
+    $cfg.project_slug,
+    $cfg.mount_point
+)
+
+if ($cfg.overlay) { $mountArgs += "--overlay" }
+if ($cfg.read_only) { $mountArgs += "--read-only" }
+
+# Prepare background logger
+$logFile = "C:\ProgramData\accli\mount.log"
+$errFile = "C:\ProgramData\accli\mount_err.log"
+try {
+    # Run the background daemon process elevated (since task runs as SYSTEM)
+    & $cfg.hf_mount_bin @mountArgs > $logFile 2> $errFile
+    if ($LASTEXITCODE -ne 0 -and $LASTEXITCODE -ne $null) {
+        Add-Content -Path $errFile -Value "Process exited with code `$LASTEXITCODE"
+        exit `$LASTEXITCODE
+    }
+} catch {
+    Write-Error "Failed to execute hf-mount-nfs.exe."
+    exit 1
+}
+'@
+
+$helperScriptPath = "C:\ProgramData\accli\run-mount-helper.ps1"
+Set-Content -Path $helperScriptPath -Value $helperScript -Encoding UTF8
+Write-Host "[OK] Mount helper script registered." -ForegroundColor Green
+
+# 4.5 Write static run-umount-helper.ps1 static helper
+Write-Host "Registering run-umount-helper script..." -ForegroundColor Cyan
+$helperUmountScript = @'
+try {
+    if (Get-Command Stop-ScheduledTask -ErrorAction SilentlyContinue) {
+        Stop-ScheduledTask -TaskName "accli-mount-nfs" -ErrorAction SilentlyContinue | Out-Null
+    } else {
+        schtasks /end /tn "accli-mount-nfs" 2> $null | Out-Null
+    }
+} catch {}
+
+try {
+    Get-CimInstance Win32_Process -Filter "name='hf-mount-nfs.exe'" | ForEach-Object {
+        Stop-Process -Id $_.ProcessId -Force -ErrorAction SilentlyContinue | Out-Null
+    }
+} catch {}
+'@
+
+$helperUmountScriptPath = "C:\ProgramData\accli\run-umount-helper.ps1"
+Set-Content -Path $helperUmountScriptPath -Value $helperUmountScript -Encoding UTF8
+Write-Host "[OK] Umount helper script registered." -ForegroundColor Green
+
+# 5. Register the Scheduled Task (accli-mount-nfs)
+Write-Host "Registering accli-mount-nfs Scheduled Task..." -ForegroundColor Cyan
+$taskName = "accli-mount-nfs"
+
+# Helper block executing PowerShell in Task Action
+$psActionPath = "powershell.exe"
+$psActionArgs = "-NoProfile -ExecutionPolicy Bypass -File `"$helperScriptPath`""
+
+if (Get-Command Register-ScheduledTask -ErrorAction SilentlyContinue) {
+    try {
+        $action = New-ScheduledTaskAction -Execute $psActionPath -Argument $psActionArgs
+        $principal = New-ScheduledTaskPrincipal -UserId "SYSTEM" -RunLevel Highest
+        $settings = New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries
+        
+        # Unregister task if already exists to update
+        Unregister-ScheduledTask -TaskName $taskName -Confirm:$false -ErrorAction SilentlyContinue | Out-Null
+        Register-ScheduledTask -TaskName $taskName -Action $action -Principal $principal -Settings $settings -Force | Out-Null
+        
+        Write-Host "[OK] Scheduled Task registered successfully." -ForegroundColor Green
+    } catch {
+        # Fallback to schtasks.exe if cmdlet fails
+        schtasks /delete /tn $taskName /f 2> $null | Out-Null
+        schtasks /create /tn $taskName /tr "$psActionPath $psActionArgs" /sc ONCE /sd "2026/01/01" /st "00:00" /ru "SYSTEM" /rl "HIGHEST" /f | Out-Null
+        Write-Host "[OK] Scheduled Task registered successfully." -ForegroundColor Green
+    }
+} else {
+    # Legacy fallback
+    schtasks /delete /tn $taskName /f 2> $null | Out-Null
+    schtasks /create /tn $taskName /tr "$psActionPath $psActionArgs" /sc ONCE /sd "2026/01/01" /st "00:00" /ru "SYSTEM" /rl "HIGHEST" /f | Out-Null
+    Write-Host "[OK] Scheduled Task registered successfully." -ForegroundColor Green
+}
+
+# 5.5 Register the Scheduled Task (accli-umount-nfs)
+Write-Host "Registering accli-umount-nfs Scheduled Task..." -ForegroundColor Cyan
+$umountTaskName = "accli-umount-nfs"
+$psUmountActionArgs = "-NoProfile -ExecutionPolicy Bypass -File `"$helperUmountScriptPath`""
+
+if (Get-Command Register-ScheduledTask -ErrorAction SilentlyContinue) {
+    try {
+        $action = New-ScheduledTaskAction -Execute $psActionPath -Argument $psUmountActionArgs
+        $principal = New-ScheduledTaskPrincipal -UserId "SYSTEM" -RunLevel Highest
+        $settings = New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries
+        
+        Unregister-ScheduledTask -TaskName $umountTaskName -Confirm:$false -ErrorAction SilentlyContinue | Out-Null
+        Register-ScheduledTask -TaskName $umountTaskName -Action $action -Principal $principal -Settings $settings -Force | Out-Null
+        
+        Write-Host "[OK] Umount Scheduled Task registered successfully." -ForegroundColor Green
+    } catch {
+        schtasks /delete /tn $umountTaskName /f 2> $null | Out-Null
+        schtasks /create /tn $umountTaskName /tr "$psActionPath $psUmountActionArgs" /sc ONCE /sd "2026/01/01" /st "00:00" /ru "SYSTEM" /rl "HIGHEST" /f | Out-Null
+        Write-Host "[OK] Umount Scheduled Task registered successfully." -ForegroundColor Green
+    }
+} else {
+    schtasks /delete /tn $umountTaskName /f 2> $null | Out-Null
+    schtasks /create /tn $umountTaskName /tr "$psActionPath $psUmountActionArgs" /sc ONCE /sd "2026/01/01" /st "00:00" /ru "SYSTEM" /rl "HIGHEST" /f | Out-Null
+    Write-Host "[OK] Umount Scheduled Task registered successfully." -ForegroundColor Green
+}
+
+# Grant Authenticated Users permission to read, query, and run the task files
+foreach ($tName in @("accli-mount-nfs", "accli-umount-nfs")) {
+    $taskFile = "C:\Windows\System32\Tasks\$tName"
+    if (Test-Path $taskFile) {
+        try {
+            $acl = Get-Acl $taskFile
+            $rule = New-Object System.Security.AccessControl.FileSystemAccessRule("Authenticated Users", "ReadAndExecute", "Allow")
+            $acl.AddAccessRule($rule)
+            Set-Acl $taskFile $acl
+            Write-Host "[OK] Task file permissions configured for $tName." -ForegroundColor Green
+        } catch {
+            Write-Warning "Could not configure task file permissions for $tName."
+        }
+    }
+}
+
+# Grant Authenticated Users permission to query and trigger the Task Scheduler Service task objects themselves via COM SDDL
+try {
+    $Scheduler = New-Object -ComObject "Schedule.Service"
+    $Scheduler.Connect()
+    
+    foreach ($tName in @("accli-mount-nfs", "accli-umount-nfs")) {
+        $TaskObject = $Scheduler.GetFolder("\").GetTask($tName)
+        $SDDL = $TaskObject.GetSecurityDescriptor(0xF)
+        
+        # (A;;GRGX;;;AU) grants Read (GR) and Execute (GX) to Authenticated Users (AU)
+        if ($SDDL -notmatch 'A;;0x1200a9;;;AU' -and $SDDL -notmatch 'A;;GRGX;;;AU') {
+            $SDDL = $SDDL + '(A;;GRGX;;;AU)'
+            $TaskObject.SetSecurityDescriptor($SDDL, 0)
+            Write-Host "[OK] Task Scheduler COM Service permissions configured for $tName." -ForegroundColor Green
+        } else {
+            Write-Host "[OK] Task Scheduler COM Service permissions already configured for $tName." -ForegroundColor Green
+        }
+    }
+} catch {
+    Write-Warning "Could not configure Task Scheduler COM permissions: $_"
+}
+
+Write-Host "Windows NFS Client Task Scheduler Gateway Setup Completed Successfully!" -ForegroundColor Green
+Write-Host "⚠ Note: A Windows sign-out/sign-in or system restart is required for changes to take effect." -ForegroundColor Yellow

{accli-2.0.0b3 → accli-2.0.0rc1}/accli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: accli
-Version: 2.0.0b3
+Version: 2.0.0rc1
 Summary: IIASA Accelerator Client
 Author-email: Wrufesh S <wrufesh@gmail.com>
 License: The MIT License (MIT)

{accli-2.0.0b3 → accli-2.0.0rc1}/accli.egg-info/SOURCES.txt

@@ -8,9 +8,12 @@ accli/CsvRegionalTimeseriesValidator.py
 accli/__init__.py
 accli/__main__.py
 accli/_version.py
+accli/cleanup-nfs.ps1
 accli/cli.py
 accli/common.py
+accli/gui.py
 accli/mount_downloader.py
+accli/setup-nfs.ps1
 accli/token.py
 accli.egg-info/PKG-INFO
 accli.egg-info/SOURCES.txt

{accli-2.0.0b3 → accli-2.0.0rc1}/accli.egg-info/entry_points.txt

@@ -1,2 +1,3 @@
 [console_scripts]
 accli = accli.cli:app
+accli-gui = accli.gui:main

{accli-2.0.0b3 → accli-2.0.0rc1}/pyproject.toml

@@ -31,6 +31,9 @@ classifiers = [
 [tool.setuptools]
 packages = ['accli']
 
+[tool.setuptools.package-data]
+accli = ["*.ps1"]
+
 [tool.setuptools.dynamic]
 version = {attr="accli._version.VERSION"}
 
@@ -40,3 +43,4 @@ version = {attr="accli._version.VERSION"}
 
 [project.scripts]
 accli = "accli.cli:app"
+accli-gui = "accli.gui:main"