nepher-cli 0.2.6__tar.gz → 0.2.8__tar.gz

nepher_cli-0.2.8/PKG-INFO

@@ -0,0 +1,177 @@
+Metadata-Version: 2.4
+Name: nepher-cli
+Version: 0.2.8
+Summary: npcli — unified Nepher command-line interface for accounts, hackathons, EnvHub, tournaments, and SimStore
+Project-URL: Homepage, https://github.com/nepher-ai/nepher-cli
+Author: Nepher
+License: MIT
+Keywords: bittensor,cli,envhub,hackathon,nepher,subnet,tournament
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Requires-Python: >=3.10
+Requires-Dist: click>=8.1.0
+Requires-Dist: httpx>=0.27.0
+Requires-Dist: keyring>=25.0.0
+Requires-Dist: platformdirs>=4.0.0
+Requires-Dist: rich>=13.7.0
+Provides-Extra: bittensor
+Requires-Dist: bittensor-wallet>=4.1.0; extra == 'bittensor'
+Provides-Extra: dev
+Requires-Dist: pytest>=8.0.0; extra == 'dev'
+Requires-Dist: ruff>=0.4.0; extra == 'dev'
+Description-Content-Type: text/markdown
+
+<div align="center">
+
+# nepher-cli
+
+**The unified CLI for [Nepher Robotics](https://nepher.ai): accounts, tournaments, hackathons, EnvHub and SimStore.**
+
+[![PyPI](https://img.shields.io/pypi/v/nepher-cli)](https://pypi.org/project/nepher-cli/)
+[![Python 3.10+](https://img.shields.io/badge/python-3.10+-blue.svg)](https://www.python.org/downloads/)
+[![License: MIT](https://img.shields.io/badge/license-MIT-green.svg)](#license)
+
+[Install](#install) •
+[Commands](#commands) •
+[Tournaments](#tournaments) •
+[EnvHub](#envhub) •
+[Hackathons](#hackathons) •
+[Account](#account) •
+[Troubleshooting](#troubleshooting)
+
+</div>
+
+---
+
+## Install
+
+```bash
+pip install nepher-cli
+pip install "nepher-cli[bittensor]"   # adds wallet signing for tournament submit and coldkey registration
+```
+
+This installs two equivalent commands, `npcli` and `nepher-cli`.
+
+## Quick start
+
+```bash
+npcli login --api-key nepher_xxxxxxxx
+npcli whoami
+npcli --help
+```
+
+Get your API key at [nepher.ai/account](https://nepher.ai/account) under **API Keys**. In CI/CD, set `NEPHER_API_KEY` instead of logging in.
+
+## Commands
+
+| Command | Description |
+|---|---|
+| `npcli login` / `whoami` / `logout` | Manage authentication |
+| `npcli account` | API keys and coldkey registration |
+| `npcli tournament` | Browse tournaments, check and submit agents, view leaderboards |
+| `npcli envhub` | Manage Isaac Lab environment bundles |
+| `npcli hackathon` | Browse and submit to hackathons |
+| `npcli simstore` | SimStore marketplace (coming soon) |
+
+Run any command with `--help` for all options.
+
+## Tournaments
+
+```bash
+npcli tournament list                  # or list-active
+npcli tournament status <tournament_id>
+npcli tournament leaderboard <tournament_id>
+npcli tournament check --path ./my-agent
+npcli tournament submit --path ./my-agent --wallet-name miner --wallet-hotkey default
+```
+
+`check` validates the agent directory (add `--verbose` for recommended-file warnings). `submit` requires `bittensor-wallet`.
+
+<details>
+<summary>Full <code>tournament submit</code> options</summary>
+
+| Option | Description |
+|---|---|
+| `--path <path>` | Agent directory |
+| `--wallet-name <str>` | Bittensor wallet name (default: `miner`) |
+| `--wallet-hotkey <str>` | Bittensor wallet hotkey (default: `default`) |
+| `--api-key <key>` | Nepher API key (falls back to stored credentials) |
+| `--tournament-id <id>` | Target tournament, required when several are active |
+| `--api-url <url>` | Override the tournament API URL |
+| `-v`, `--verbose` | Verbose output |
+
+</details>
+
+## EnvHub
+
+```bash
+npcli envhub list
+npcli envhub download <env_id>
+npcli envhub upload ./my-bundle --category navigation
+npcli envhub cache list | info | clear
+```
+
+Shares login, API and cache with the standalone [`nepher`](https://github.com/nepher-ai/envhub) package.
+
+## Hackathons
+
+```bash
+npcli hackathon list
+npcli hackathon submit --title "My entry" --submission ./my-project --assets ./my-assets
+```
+
+<details>
+<summary>Full <code>hackathon submit</code> options</summary>
+
+| Option | Description |
+|---|---|
+| `--hackathon-id <uuid>` | Required when several hackathons are open |
+| `--title <str>` | Entry title |
+| `--description <markdown>` | Entry description |
+| `--thumbnail <file>` | Cover image (JPEG, PNG, WebP, GIF) |
+| `--submission <path>` | Project folder or `submission.zip` |
+| `--assets <path>` | Assets folder or `assets.zip` (images, videos, PDFs) |
+| `--public-source` | Mark source as public |
+
+</details>
+
+## Account
+
+API key management needs a session from `npcli account login`. Don't pass `--api-key` to the `api-keys` commands; the account API rejects `X-API-Key` for key management.
+
+```bash
+npcli account login --api-key nepher_...
+npcli account api-keys list
+npcli account api-keys create --name "CI key" --platform hackathon
+npcli account api-keys revoke <key_id>
+```
+
+Bind a Bittensor coldkey to your account (requires `bittensor-wallet`; `btcli` is not needed):
+
+```bash
+npcli account register-coldkey --wallet <wallet_name>
+```
+
+Keys must start with `nepher_` and be active. `hackathon submit` needs Hackathon scope and `tournament submit` needs Tournament scope, or use an unrestricted key.
+
+## Troubleshooting
+
+| Error | Fix |
+|---|---|
+| `npcli: command not found` | Check the install succeeded and Python's scripts directory is on `PATH` |
+| `Not logged in` | `npcli login --api-key nepher_...` |
+| `invalid api key format` | Key must start with `nepher_` |
+| `api key expired` | Create a new key with `npcli account api-keys create` |
+| `api key does not have hackathon access` | Enable Hackathon scope or use an unrestricted key |
+| `Several hackathons are accepting submissions` | Re-run with `--hackathon-id` |
+| `bittensor-wallet not installed` | `pip install bittensor-wallet` |
+| `Conflict detected: 'scalecodec' ... 'cyscale'` | Leftover `scalecodec` from a Bittensor upgrade. Install `bittensor-wallet` so npcli doesn't need `btcli`, or repair `btcli` with `pip uninstall scalecodec cyscale -y && pip install -U cyscale --force-reinstall` |
+
+## License
+
+MIT © 2026 Nepher Robotics

nepher_cli-0.2.8/README.md

@@ -0,0 +1,149 @@
+<div align="center">
+
+# nepher-cli
+
+**The unified CLI for [Nepher Robotics](https://nepher.ai): accounts, tournaments, hackathons, EnvHub and SimStore.**
+
+[![PyPI](https://img.shields.io/pypi/v/nepher-cli)](https://pypi.org/project/nepher-cli/)
+[![Python 3.10+](https://img.shields.io/badge/python-3.10+-blue.svg)](https://www.python.org/downloads/)
+[![License: MIT](https://img.shields.io/badge/license-MIT-green.svg)](#license)
+
+[Install](#install) •
+[Commands](#commands) •
+[Tournaments](#tournaments) •
+[EnvHub](#envhub) •
+[Hackathons](#hackathons) •
+[Account](#account) •
+[Troubleshooting](#troubleshooting)
+
+</div>
+
+---
+
+## Install
+
+```bash
+pip install nepher-cli
+pip install "nepher-cli[bittensor]"   # adds wallet signing for tournament submit and coldkey registration
+```
+
+This installs two equivalent commands, `npcli` and `nepher-cli`.
+
+## Quick start
+
+```bash
+npcli login --api-key nepher_xxxxxxxx
+npcli whoami
+npcli --help
+```
+
+Get your API key at [nepher.ai/account](https://nepher.ai/account) under **API Keys**. In CI/CD, set `NEPHER_API_KEY` instead of logging in.
+
+## Commands
+
+| Command | Description |
+|---|---|
+| `npcli login` / `whoami` / `logout` | Manage authentication |
+| `npcli account` | API keys and coldkey registration |
+| `npcli tournament` | Browse tournaments, check and submit agents, view leaderboards |
+| `npcli envhub` | Manage Isaac Lab environment bundles |
+| `npcli hackathon` | Browse and submit to hackathons |
+| `npcli simstore` | SimStore marketplace (coming soon) |
+
+Run any command with `--help` for all options.
+
+## Tournaments
+
+```bash
+npcli tournament list                  # or list-active
+npcli tournament status <tournament_id>
+npcli tournament leaderboard <tournament_id>
+npcli tournament check --path ./my-agent
+npcli tournament submit --path ./my-agent --wallet-name miner --wallet-hotkey default
+```
+
+`check` validates the agent directory (add `--verbose` for recommended-file warnings). `submit` requires `bittensor-wallet`.
+
+<details>
+<summary>Full <code>tournament submit</code> options</summary>
+
+| Option | Description |
+|---|---|
+| `--path <path>` | Agent directory |
+| `--wallet-name <str>` | Bittensor wallet name (default: `miner`) |
+| `--wallet-hotkey <str>` | Bittensor wallet hotkey (default: `default`) |
+| `--api-key <key>` | Nepher API key (falls back to stored credentials) |
+| `--tournament-id <id>` | Target tournament, required when several are active |
+| `--api-url <url>` | Override the tournament API URL |
+| `-v`, `--verbose` | Verbose output |
+
+</details>
+
+## EnvHub
+
+```bash
+npcli envhub list
+npcli envhub download <env_id>
+npcli envhub upload ./my-bundle --category navigation
+npcli envhub cache list | info | clear
+```
+
+Shares login, API and cache with the standalone [`nepher`](https://github.com/nepher-ai/envhub) package.
+
+## Hackathons
+
+```bash
+npcli hackathon list
+npcli hackathon submit --title "My entry" --submission ./my-project --assets ./my-assets
+```
+
+<details>
+<summary>Full <code>hackathon submit</code> options</summary>
+
+| Option | Description |
+|---|---|
+| `--hackathon-id <uuid>` | Required when several hackathons are open |
+| `--title <str>` | Entry title |
+| `--description <markdown>` | Entry description |
+| `--thumbnail <file>` | Cover image (JPEG, PNG, WebP, GIF) |
+| `--submission <path>` | Project folder or `submission.zip` |
+| `--assets <path>` | Assets folder or `assets.zip` (images, videos, PDFs) |
+| `--public-source` | Mark source as public |
+
+</details>
+
+## Account
+
+API key management needs a session from `npcli account login`. Don't pass `--api-key` to the `api-keys` commands; the account API rejects `X-API-Key` for key management.
+
+```bash
+npcli account login --api-key nepher_...
+npcli account api-keys list
+npcli account api-keys create --name "CI key" --platform hackathon
+npcli account api-keys revoke <key_id>
+```
+
+Bind a Bittensor coldkey to your account (requires `bittensor-wallet`; `btcli` is not needed):
+
+```bash
+npcli account register-coldkey --wallet <wallet_name>
+```
+
+Keys must start with `nepher_` and be active. `hackathon submit` needs Hackathon scope and `tournament submit` needs Tournament scope, or use an unrestricted key.
+
+## Troubleshooting
+
+| Error | Fix |
+|---|---|
+| `npcli: command not found` | Check the install succeeded and Python's scripts directory is on `PATH` |
+| `Not logged in` | `npcli login --api-key nepher_...` |
+| `invalid api key format` | Key must start with `nepher_` |
+| `api key expired` | Create a new key with `npcli account api-keys create` |
+| `api key does not have hackathon access` | Enable Hackathon scope or use an unrestricted key |
+| `Several hackathons are accepting submissions` | Re-run with `--hackathon-id` |
+| `bittensor-wallet not installed` | `pip install bittensor-wallet` |
+| `Conflict detected: 'scalecodec' ... 'cyscale'` | Leftover `scalecodec` from a Bittensor upgrade. Install `bittensor-wallet` so npcli doesn't need `btcli`, or repair `btcli` with `pip uninstall scalecodec cyscale -y && pip install -U cyscale --force-reinstall` |
+
+## License
+
+MIT © 2026 Nepher Robotics

{nepher_cli-0.2.6 → nepher_cli-0.2.8}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "nepher-cli"
-version = "0.2.6"
+version = "0.2.8"
 description = "npcli — unified Nepher command-line interface for accounts, hackathons, EnvHub, tournaments, and SimStore"
 readme = "README.md"
 requires-python = ">=3.10"

{nepher_cli-0.2.6 → nepher_cli-0.2.8}/src/nepher_cli/commands/envhub.py

@@ -7,7 +7,9 @@ same operations from inside the unified npcli interface.
 
 from __future__ import annotations
 
+import contextlib
 import json
+import os
 import shutil
 import tempfile
 import zipfile
@@ -21,18 +23,39 @@ from rich.console import Console
 from nepher_cli.config import ENVHUB_BACKEND
 from nepher_cli.core.credentials import get_auth_headers, get_stored_api_key
 from nepher_cli.core.http import parse_error_body
+from nepher_cli.envhub.bundle import extract_bundle, iter_bundle_files, safe_env_id
 from nepher_cli.envhub.cache import is_cached_env, list_cached_env_dirs, resolve_cache_dir
+from nepher_cli.envhub.config import (
+    get_api_url as get_envhub_api_url,
+)
 from nepher_cli.envhub.config import (
     get_value as get_envhub_config_value,
+)
+from nepher_cli.envhub.config import (
     list_values as list_envhub_config_values,
+)
+from nepher_cli.envhub.config import (
     mask_secret as mask_envhub_config_secret,
+)
+from nepher_cli.envhub.config import (
     parse_config_value,
+)
+from nepher_cli.envhub.config import (
     reset_config as reset_envhub_config,
+)
+from nepher_cli.envhub.config import (
     set_value as set_envhub_config_value,
 )
 
 console = Console(stderr=True)
 
+# A numeric write timeout switches the SSL socket into timeout mode. On Windows
+# that makes OpenSSL raise SSLWantWriteError as soon as the TCP window fills,
+# which requests/httpcore surface as a failed upload ("Max retries exceeded"
+# / SSLWantWriteError) instead of waiting for the server to read. Leave the
+# write unbounded; bound connect and the wait for the upload response.
+_UPLOAD_TIMEOUT = httpx.Timeout(connect=30.0, read=3600.0, write=None, pool=30.0)
+
 
 def _headers(api_key: str | None) -> dict[str, str]:
     h = get_auth_headers(api_key)
@@ -44,7 +67,16 @@ def _headers(api_key: str | None) -> dict[str, str]:
 
 
 def _base() -> str:
-    return ENVHUB_BACKEND.rstrip("/")
+    """EnvHub API base, shared with the ``nepher`` CLI's ``api_url`` setting."""
+    return get_envhub_api_url() or ENVHUB_BACKEND.rstrip("/")
+
+
+def _env_id_or_exit(env_id: str) -> str:
+    try:
+        return safe_env_id(env_id)
+    except ValueError as e:
+        console.print(f"[red]{e}[/red]")
+        raise SystemExit(1) from e
 
 
 @click.group("envhub")
@@ -146,6 +178,7 @@ def envhub_list(
 @envhub.command("download")
 @click.argument("env_id")
 @click.option("--cache-dir", type=click.Path(), default=None, help="Override local cache directory.")
+@click.option("--category", default=None, help="Use the category-specific cache directory from config.")
 @click.option("--force", is_flag=True, help="Re-download even if already cached.")
 @click.option(
     "--api-key",
@@ -155,7 +188,9 @@ def envhub_list(
     help="API key for authentication. Sent directly as X-API-Key so the "
     "download succeeds regardless of any cached access-token expiry.",
 )
-def envhub_download(env_id: str, cache_dir: str | None, force: bool, api_key: str | None) -> None:
+def envhub_download(
+    env_id: str, cache_dir: str | None, category: str | None, force: bool, api_key: str | None
+) -> None:
     """Download an environment bundle and cache it locally.
 
     The bundle is extracted to ~/.nepher/cache/<env_id>/ by default.
@@ -164,7 +199,8 @@ def envhub_download(env_id: str, cache_dir: str | None, force: bool, api_key: st
     is sent directly to EnvHub, which verifies it against account-backend — the
     download therefore works even if a previously cached JWT has expired.
     """
-    cache_root = resolve_cache_dir(cache_dir)
+    env_id = _env_id_or_exit(env_id)
+    cache_root = resolve_cache_dir(cache_dir, category=category)
     env_cache = cache_root / env_id
 
     if is_cached_env(env_cache) and not force:
@@ -174,31 +210,33 @@ def envhub_download(env_id: str, cache_dir: str | None, force: bool, api_key: st
     headers = _headers(api_key)
     url = f"{_base()}/api/v1/envs/{env_id}/download"
     console.print(f"Downloading [bold]{env_id}[/bold]...")
+    tmp_fd, tmp_name = tempfile.mkstemp(suffix=".zip")
+    os.close(tmp_fd)
+    tmp_path = Path(tmp_name)
     try:
-        with httpx.stream("GET", url, headers=headers, timeout=600.0, follow_redirects=True) as r:
-            if r.status_code != 200:
-                body = r.read().decode(errors="replace")
-                console.print(f"[red]{parse_error_body(body) or body.strip() or f'HTTP {r.status_code}'}[/red]")
-                raise SystemExit(1)
-
-            with tempfile.NamedTemporaryFile(suffix=".zip", delete=False) as tmp:
-                tmp_path = Path(tmp.name)
-                for chunk in r.iter_bytes(chunk_size=65536):
-                    tmp.write(chunk)
-    except httpx.RequestError as e:
-        console.print(f"[red]Network error[/red]: {e}")
-        raise SystemExit(1) from e
-
-    console.print("Extracting bundle...")
-    env_cache.mkdir(parents=True, exist_ok=True)
-    try:
-        with zipfile.ZipFile(tmp_path, "r") as zf:
-            zf.extractall(env_cache)
-    except zipfile.BadZipFile:
-        console.print("[red]Downloaded file is not a valid ZIP archive.[/red]")
-        shutil.rmtree(env_cache, ignore_errors=True)
-        tmp_path.unlink(missing_ok=True)
-        raise SystemExit(1)
+        try:
+            with httpx.stream("GET", url, headers=headers, timeout=600.0, follow_redirects=True) as r:
+                if r.status_code != 200:
+                    body = r.read().decode(errors="replace")
+                    console.print(f"[red]{parse_error_body(body) or body.strip() or f'HTTP {r.status_code}'}[/red]")
+                    raise SystemExit(1)
+
+                with open(tmp_path, "wb") as tmp:
+                    for chunk in r.iter_bytes(chunk_size=1024 * 1024):
+                        tmp.write(chunk)
+        except httpx.HTTPError as e:
+            console.print(f"[red]Network error[/red]: {e}")
+            raise SystemExit(1) from e
+
+        console.print("Extracting bundle...")
+        try:
+            extract_bundle(tmp_path, env_cache)
+        except zipfile.BadZipFile as e:
+            console.print("[red]Downloaded file is not a valid ZIP archive.[/red]")
+            raise SystemExit(1) from e
+        except (ValueError, OSError) as e:
+            console.print(f"[red]Invalid bundle[/red]: {e}")
+            raise SystemExit(1) from e
     finally:
         tmp_path.unlink(missing_ok=True)
 
@@ -239,13 +277,11 @@ def envhub_upload(path: str, category: str, benchmark: bool, force: bool, thumbn
                 raise SystemExit(1)
             console.print("Zipping bundle...")
             tmp_fd, tmp_name = tempfile.mkstemp(suffix=".zip")
-            import os
             os.close(tmp_fd)
             tmp_zip = Path(tmp_name)
             with zipfile.ZipFile(tmp_zip, "w", zipfile.ZIP_DEFLATED) as zf:
-                for file in bundle_path.rglob("*"):
-                    if file.is_file():
-                        zf.write(file, file.relative_to(bundle_path))
+                for file, arcname in iter_bundle_files(bundle_path):
+                    zf.write(file, arcname.as_posix())
             upload_path = tmp_zip
         else:
             upload_path = bundle_path
@@ -257,15 +293,16 @@ def envhub_upload(path: str, category: str, benchmark: bool, force: bool, thumbn
         if force:
             data_fields["force"] = "true"
 
-        with open(upload_path, "rb") as f:
+        data_fields["duplicate_policy"] = "reject"
+        with contextlib.ExitStack() as stack:
+            f = stack.enter_context(open(upload_path, "rb"))
             files: dict[str, Any] = {"bundle": (upload_path.name, f, "application/zip")}
             if thumbnail:
                 thumb_path = Path(thumbnail)
                 suffix = thumb_path.suffix.lower()
                 content_type = "image/png" if suffix == ".png" else ("image/webp" if suffix == ".webp" else "image/jpeg")
-                files["thumbnail"] = (thumb_path.name, open(thumbnail, "rb"), content_type)
-
-            data_fields["duplicate_policy"] = "reject"
+                thumb_file = stack.enter_context(open(thumb_path, "rb"))
+                files["thumbnail"] = (thumb_path.name, thumb_file, content_type)
 
             try:
                 r = httpx.post(
@@ -273,9 +310,9 @@ def envhub_upload(path: str, category: str, benchmark: bool, force: bool, thumbn
                     headers=headers,
                     data=data_fields,
                     files=files,
-                    timeout=600.0,
+                    timeout=_UPLOAD_TIMEOUT,
                 )
-            except httpx.RequestError as e:
+            except httpx.HTTPError as e:
                 console.print(f"[red]Network error[/red]: {e}")
                 raise SystemExit(1) from e
 
@@ -325,15 +362,15 @@ def cache_clear(env_id: str | None, cache_dir: str | None) -> None:
     """Clear cache — all environments or a specific one."""
     root = resolve_cache_dir(cache_dir)
     if env_id:
-        target = root / env_id
+        target = root / _env_id_or_exit(env_id)
         if target.exists():
             shutil.rmtree(target)
             console.print(f"[green]Cleared cache for[/green] {env_id}")
         else:
             console.print(f"[yellow]{env_id} is not cached.[/yellow]")
     else:
-        if root.exists():
-            shutil.rmtree(root)
+        for entry in list_cached_env_dirs(root):
+            shutil.rmtree(entry)
         console.print("[green]Cleared all cached environments.[/green]")
 
 
@@ -363,14 +400,20 @@ def cache_info(cache_dir: str | None) -> None:
 @click.argument("new_path", type=click.Path())
 @click.option("--cache-dir", type=click.Path(), default=None)
 def cache_migrate(new_path: str, cache_dir: str | None) -> None:
-    """Move the local cache to a new directory."""
+    """Move cached environments to NEW_PATH and make it the configured cache_dir."""
     old_root = resolve_cache_dir(cache_dir)
-    new_root = Path(new_path)
-    if not old_root.exists():
-        console.print("[yellow]Nothing to migrate — cache is empty.[/yellow]")
+    new_root = Path(new_path).expanduser().resolve()
+    if new_root == old_root:
+        console.print("[dim]Cache is already at that location.[/dim]")
         return
-    new_root.parent.mkdir(parents=True, exist_ok=True)
-    shutil.move(str(old_root), str(new_root))
+    new_root.mkdir(parents=True, exist_ok=True)
+    for entry in list_cached_env_dirs(old_root):
+        target = new_root / entry.name
+        if target.exists():
+            console.print(f"[red]{target} already exists; aborting.[/red]")
+            raise SystemExit(1)
+        shutil.move(str(entry), str(target))
+    set_envhub_config_value("cache_dir", str(new_root))
     console.print(f"[green]Cache migrated to[/green] {new_root}")
 
 
@@ -402,8 +445,8 @@ def envhub_view(env_id: str, category: str | None, scene: str | None, cache_dir:
         )
         raise SystemExit(1)
 
-    root = resolve_cache_dir(cache_dir)
-    env_path = root / env_id
+    root = resolve_cache_dir(cache_dir, category=category)
+    env_path = root / _env_id_or_exit(env_id)
     if not is_cached_env(env_path):
         console.print(
             f"[yellow]{env_id} is not cached.[/yellow] "
@@ -412,7 +455,7 @@ def envhub_view(env_id: str, category: str | None, scene: str | None, cache_dir:
         raise SystemExit(1)
 
     try:
-        env = load_env(env_id, category)
+        env = load_env(env_id, category, cache_dir=root) if cache_dir else load_env(env_id, category)
     except Exception as e:
         console.print(f"[red]Failed to load environment[/red]: {e}")
         raise SystemExit(1) from e
@@ -428,8 +471,15 @@ def envhub_view(env_id: str, category: str | None, scene: str | None, cache_dir:
     console.print(f"Launching scene [bold]{scene}[/bold] in Isaac Sim...")
     # Actual rendering requires the full IsaacLab runtime; delegate back to the
     # installed nepher package's view script which handles AppLauncher setup.
-    import subprocess, sys
-    subprocess.run([sys.executable, "-m", "nepher", "view", env_id, "--scene", scene], check=False)
+    import subprocess
+    import sys
+
+    cmd = [sys.executable, "-m", "nepher", "view", env_id, "--scene", scene]
+    if category:
+        cmd += ["--category", category]
+    if cache_dir:
+        cmd += ["--cache-dir", str(root)]
+    raise SystemExit(subprocess.run(cmd, check=False).returncode)
 
 
 # ---------------------------------------------------------------------------
@@ -459,7 +509,11 @@ def config_get(key: str) -> None:
 def config_set(key: str, value: str) -> None:
     """Set a configuration value."""
     parsed = parse_config_value(value)
-    set_envhub_config_value(key, parsed)
+    try:
+        set_envhub_config_value(key, parsed)
+    except ValueError as e:
+        console.print(f"[red]{e}[/red]")
+        raise SystemExit(1) from e
     display = mask_envhub_config_secret(key, parsed) if isinstance(parsed, str) else parsed
     console.print(f"[green]Set[/green] {key} = {display}")
 

nepher_cli-0.2.8/src/nepher_cli/envhub/bundle.py

@@ -0,0 +1,73 @@
+"""EnvHub bundle helpers — safe extraction and zipping (same rules as ``nepher``)."""
+
+from __future__ import annotations
+
+import re
+import shutil
+import tempfile
+import zipfile
+from collections.abc import Iterator
+from pathlib import Path, PurePosixPath, PureWindowsPath
+
+_ENV_ID_RE = re.compile(r"^[A-Za-z0-9][A-Za-z0-9._-]*$")
+
+EXCLUDED_NAMES = {".git", ".hg", ".svn", "__pycache__", ".DS_Store", ".env", ".venv", "venv"}
+EXCLUDED_SUFFIXES = {".pyc", ".pyo"}
+
+
+def safe_env_id(env_id: str) -> str:
+    """Return ``env_id`` if it is a single safe path segment, else raise ValueError."""
+    if not _ENV_ID_RE.match(env_id) or ".." in env_id:
+        raise ValueError(f"Invalid environment ID: {env_id!r}")
+    return env_id
+
+
+def _check_member(dest: Path, name: str) -> None:
+    win = PureWindowsPath(name)
+    if PurePosixPath(name).is_absolute() or win.is_absolute() or win.drive:
+        raise ValueError(f"Unsafe path in bundle: {name!r}")
+    if not (dest / name).resolve().is_relative_to(dest):
+        raise ValueError(f"Unsafe path in bundle: {name!r}")
+
+
+def extract_bundle(zip_path: Path, dest_dir: Path) -> None:
+    """Extract a bundle into ``dest_dir`` atomically.
+
+    Members that would land outside the destination are rejected, the
+    uncompressed size is checked against free disk space, and the result only
+    replaces ``dest_dir`` once it contains a root ``manifest.yaml``.
+    """
+    dest_dir.parent.mkdir(parents=True, exist_ok=True)
+    staging = Path(tempfile.mkdtemp(prefix=f".{dest_dir.name}.", dir=dest_dir.parent))
+    try:
+        with zipfile.ZipFile(zip_path, "r") as zf:
+            members = zf.infolist()
+            root = staging.resolve()
+            for member in members:
+                _check_member(root, member.filename)
+            total = sum(m.file_size for m in members)
+            free = shutil.disk_usage(staging).free
+            if total > free:
+                need, have = total / 1024**3, free / 1024**3
+                raise ValueError(f"Bundle needs {need:.2f} GB but only {have:.2f} GB is free")
+            zf.extractall(staging, members=members)
+
+        if not (staging / "manifest.yaml").is_file():
+            raise ValueError("manifest.yaml not found at the root of the bundle")
+
+        if dest_dir.exists():
+            shutil.rmtree(dest_dir)
+        staging.rename(dest_dir)
+    finally:
+        if staging.exists():
+            shutil.rmtree(staging, ignore_errors=True)
+
+
+def iter_bundle_files(bundle_dir: Path) -> Iterator[tuple[Path, Path]]:
+    """Yield ``(path, archive_name)`` for files to include when zipping a bundle."""
+    for path in sorted(bundle_dir.rglob("*")):
+        rel = path.relative_to(bundle_dir)
+        if any(part in EXCLUDED_NAMES for part in rel.parts):
+            continue
+        if path.is_file() and path.suffix not in EXCLUDED_SUFFIXES:
+            yield path, rel

{nepher_cli-0.2.6 → nepher_cli-0.2.8}/src/nepher_cli/envhub/cache.py

@@ -24,11 +24,16 @@ def resolve_cache_dir(cache_dir: str | Path | None = None, category: str | None
     if cache_dir:
         return Path(cache_dir).expanduser().resolve()
 
+    # Read the env var directly: an already-initialised ``nepher`` config may
+    # predate it. Category-specific cache_dir still wins, as in ``nepher``.
+    env_override = os.getenv("NEPHER_CACHE_DIR")
+    if env_override and not category:
+        return Path(env_override).expanduser().resolve()
+
     nepher_dir = _nepher_cache_dir(category)
     if nepher_dir is not None:
         return nepher_dir
 
-    env_override = os.getenv("NEPHER_CACHE_DIR")
     if env_override:
         return Path(env_override).expanduser().resolve()
 
@@ -50,7 +55,7 @@ def is_cached_env(path: Path) -> bool:
 
 
 def list_cached_env_dirs(root: Path) -> list[Path]:
-    """List cached environment directories under ``root``."""
+    """List cached environment directories under ``root`` (skips in-progress staging dirs)."""
     if not root.exists():
         return []
-    return sorted(p for p in root.iterdir() if is_cached_env(p))
+    return sorted(p for p in root.iterdir() if not p.name.startswith(".") and is_cached_env(p))

{nepher_cli-0.2.6 → nepher_cli-0.2.8}/src/nepher_cli/envhub/config.py

@@ -17,18 +17,32 @@ DEFAULT_CONFIG: dict[str, Any] = {
 
 LIST_KEYS = ("api_url", "cache_dir", "default_category")
 
+# Older ``nepher`` releases persisted this default into config.toml; treat it as unset.
+LEGACY_API_URLS = frozenset({"https://envhub-api.nepher.ai", "https://envhub-api.nepher.ai/"})
+
+SECRET_KEYS = ("api_key",)
+
 
 def find_config_file() -> Path | None:
     """Return the active nepher config file path, if any."""
     cwd_config = Path.cwd() / ".nepherrc"
     if cwd_config.exists():
         return cwd_config
-    home_config = Path.home() / ".nepher" / "config.toml"
-    if home_config.exists():
-        return home_config
+    for name in ("config.toml", "config.json"):
+        home_config = Path.home() / ".nepher" / name
+        if home_config.exists():
+            return home_config
     return None
 
 
+def _load_toml(text: str) -> dict[str, Any]:
+    try:
+        import tomllib
+    except ImportError:
+        import tomli as tomllib  # type: ignore[no-redef]
+    return tomllib.loads(text)
+
+
 def load_config_file() -> dict[str, Any]:
     """Load values from the nepher config file (no defaults or env overrides)."""
     config_file = find_config_file()
@@ -36,24 +50,23 @@ def load_config_file() -> dict[str, Any]:
         return {}
 
     try:
-        if config_file.suffix == ".toml":
+        text = config_file.read_text(encoding="utf-8")
+        if config_file.suffix == ".json":
+            data = json.loads(text)
+        elif config_file.suffix == ".toml":
+            data = _load_toml(text)
+        else:
             try:
-                import tomllib
-            except ImportError:
-                try:
-                    import tomli as tomllib  # type: ignore[no-redef]
-                except ImportError:
-                    return {}
-            with open(config_file, "rb") as f:
-                data = tomllib.load(f)
-                return data if isinstance(data, dict) else {}
-        if config_file.suffix == ".json" or config_file.name == ".nepherrc":
-            with open(config_file, encoding="utf-8") as f:
-                data = json.load(f)
-                return data if isinstance(data, dict) else {}
+                data = _load_toml(text)
+            except Exception:
+                data = json.loads(text)
     except Exception:
         return {}
-    return {}
+    if not isinstance(data, dict):
+        return {}
+    if data.get("api_url") in LEGACY_API_URLS:
+        data.pop("api_url")
+    return data
 
 
 def _apply_env_overrides(config: dict[str, Any]) -> dict[str, Any]:
@@ -88,9 +101,17 @@ def get_value(key: str, default: Any = None) -> Any:
     try:
         from nepher.config import get_config
 
-        return get_config().get(key, default)
+        value = get_config().get(key, default)
     except ImportError:
         return _fallback_get(key, default)
+    if key == "api_url" and value in LEGACY_API_URLS:
+        return _fallback_get(key, default)
+    return value
+
+
+def get_api_url() -> str:
+    """Effective EnvHub API base URL (env vars > config file > default)."""
+    return str(get_value("api_url") or DEFAULT_CONFIG["api_url"]).rstrip("/")
 
 
 def list_values() -> dict[str, Any]:
@@ -111,6 +132,8 @@ def parse_config_value(value: str) -> Any:
 
 def set_value(key: str, value: Any) -> None:
     """Persist a configuration value."""
+    if key in SECRET_KEYS:
+        raise ValueError("API keys are not stored in config; use 'npcli login' or NEPHER_API_KEY.")
     try:
         from nepher.config import set_config
 

nepher_cli-0.2.6/PKG-INFO

@@ -1,200 +0,0 @@
-Metadata-Version: 2.4
-Name: nepher-cli
-Version: 0.2.6
-Summary: npcli — unified Nepher command-line interface for accounts, hackathons, EnvHub, tournaments, and SimStore
-Project-URL: Homepage, https://github.com/nepher-ai/nepher-cli
-Author: Nepher
-License: MIT
-Keywords: bittensor,cli,envhub,hackathon,nepher,subnet,tournament
-Classifier: Development Status :: 4 - Beta
-Classifier: Environment :: Console
-Classifier: Intended Audience :: Developers
-Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.10
-Classifier: Programming Language :: Python :: 3.11
-Classifier: Programming Language :: Python :: 3.12
-Requires-Python: >=3.10
-Requires-Dist: click>=8.1.0
-Requires-Dist: httpx>=0.27.0
-Requires-Dist: keyring>=25.0.0
-Requires-Dist: platformdirs>=4.0.0
-Requires-Dist: rich>=13.7.0
-Provides-Extra: bittensor
-Requires-Dist: bittensor-wallet>=4.1.0; extra == 'bittensor'
-Provides-Extra: dev
-Requires-Dist: pytest>=8.0.0; extra == 'dev'
-Requires-Dist: ruff>=0.4.0; extra == 'dev'
-Description-Content-Type: text/markdown
-
-# nepher-cli
-
-The unified CLI for [Nepher Robotics](https://nepher.ai) — accounts, hackathons, EnvHub, tournaments, and SimStore from a single tool.
-
-**Requires:** Python 3.10+
-
-## Install
-
-```bash
-pip install nepher-cli
-```
-
-Both `npcli` and `nepher-cli` entry points are registered after install.
-
-```bash
-npcli --version
-npcli --help
-```
-
-## Commands
-
-| Command / Group | Description |
-|-----------------|-------------|
-| `npcli login` | Log in with a Nepher API key |
-| `npcli whoami` | Show the currently authenticated user |
-| `npcli logout` | Clear locally stored credentials |
-| `npcli account` | API keys and coldkey registration |
-| `npcli tournament` | Browse tournaments, submit agents, leaderboards |
-| `npcli envhub` | Manage Isaac Lab environment bundles |
-| `npcli hackathon` | Browse and submit to hackathons |
-| `npcli simstore` | SimStore marketplace *(coming soon)* |
-
-## Quick Start
-
-### Authenticate
-
-```bash
-npcli login --api-key nepher_xxxxxxxx
-npcli whoami
-npcli logout
-```
-
-Get your API key at [nepher.ai/account](https://nepher.ai/account) → Account → API Keys.  
-For CI/CD, set `NEPHER_API_KEY=nepher_xxxxxxxx` instead of logging in.
-
-### Tournaments
-
-```bash
-npcli tournament list
-npcli tournament list-active
-npcli tournament status <tournament_id>
-npcli tournament leaderboard <tournament_id>
-```
-
-Check your agent directory structure (no extra dependencies needed):
-
-```bash
-npcli tournament check --path ./my-agent
-npcli tournament check --path ./my-agent --verbose   # also show recommended-file warnings
-```
-
-Submit an agent (requires `bittensor-wallet` for wallet signing):
-
-```bash
-pip install bittensor-wallet
-# or: pip install "nepher-cli[bittensor]"
-```
-
-```bash
-npcli tournament submit --path ./my-agent --wallet-name miner --wallet-hotkey default
-```
-
-Full options for `submit`:
-
-```
---path <path>               Agent directory
---wallet-name <str>         Bittensor wallet name (default: miner)
---wallet-hotkey <str>       Bittensor wallet hotkey (default: default)
---api-key <key>             Nepher API key (falls back to stored credentials)
---tournament-id <id>        Target tournament ID (required when multiple are active)
---api-url <url>             Override tournament API URL
--v / --verbose              Verbose output
-```
-
-### EnvHub
-
-```bash
-npcli envhub list
-npcli envhub download <env_id>
-npcli envhub upload ./my-bundle --category navigation
-npcli envhub cache list
-npcli envhub cache info
-npcli envhub cache clear
-```
-
-### Hackathons
-
-```bash
-npcli hackathon list
-
-npcli hackathon submit \
-  --title "My entry" \
-  --submission ./my-project \
-  --assets ./my-assets
-```
-
-Full options:
-
-```
---hackathon-id <uuid>       Required when multiple hackathons are open
---title <str>               Entry title
---description <markdown>    Entry description
---thumbnail <file>          Cover image (JPEG, PNG, WebP, GIF)
---submission <path>         Project folder or submission.zip
---assets <path>             Assets folder or assets.zip (images, videos, PDFs)
---public-source             Mark source as public
-```
-
-### API Keys
-
-`list` / `create` / `revoke` need a **JWT session** from `npcli account login`.  
-Do **not** pass `--api-key` on these commands (that flag sends `X-API-Key`, which the account API rejects for key management).
-
-```bash
-npcli account login --api-key nepher_...
-npcli account api-keys list
-npcli account api-keys create --name "CI key" --platform hackathon
-npcli account api-keys revoke <key_id>
-```
-
-### Coldkey Registration
-
-Bind a Bittensor coldkey to your account (requires `bittensor-wallet`; `btcli` is optional fallback):
-
-```bash
-pip install bittensor-wallet
-npcli account register-coldkey --wallet <wallet_name>
-```
-
-Signing uses the local coldkey via `bittensor-wallet` and does not import `btcli`. If you still have a mixed Bittensor venv (`scalecodec` + `cyscale`), `register-coldkey` keeps working as long as `bittensor-wallet` is installed.
-
-## API Key Requirements
-
-- Must start with `nepher_`
-- Must be active and not expired
-- `hackathon submit` requires **Hackathon** scope (or an unrestricted key)
-- `tournament submit` requires **Tournament** scope (or an unrestricted key)
-
-## Troubleshooting
-
-| Error | Fix |
-|-------|-----|
-| `npcli: command not found` | Ensure `pip install` succeeded and Python scripts dir is on `PATH` |
-| `invalid api key format` | Key must start with `nepher_` |
-| `api key does not have hackathon access` | Enable Hackathon scope or use an unrestricted key |
-| `api key expired` | Run `npcli account api-keys create` |
-| `Several hackathons are accepting submissions` | Re-run with `--hackathon-id` |
-| `bittensor-wallet not installed` | `pip install bittensor-wallet` (needed for `tournament submit` and `account register-coldkey`) |
-| `Not logged in` | `npcli login --api-key nepher_...` |
-| `Conflict detected: 'scalecodec' ... conflicts with 'cyscale'` | Leftover `scalecodec` after a Bittensor upgrade. Prefer `pip install bittensor-wallet` so npcli never needs `btcli`. To repair `btcli` itself: `pip uninstall scalecodec cyscale -y && pip install -U cyscale --force-reinstall` |
-
-Run any command with `--help` for full flag details:
-
-```bash
-npcli --help
-npcli hackathon submit --help
-npcli tournament submit --help
-```
-
-## License
-
-MIT

nepher_cli-0.2.6/README.md

@@ -1,172 +0,0 @@
-# nepher-cli
-
-The unified CLI for [Nepher Robotics](https://nepher.ai) — accounts, hackathons, EnvHub, tournaments, and SimStore from a single tool.
-
-**Requires:** Python 3.10+
-
-## Install
-
-```bash
-pip install nepher-cli
-```
-
-Both `npcli` and `nepher-cli` entry points are registered after install.
-
-```bash
-npcli --version
-npcli --help
-```
-
-## Commands
-
-| Command / Group | Description |
-|-----------------|-------------|
-| `npcli login` | Log in with a Nepher API key |
-| `npcli whoami` | Show the currently authenticated user |
-| `npcli logout` | Clear locally stored credentials |
-| `npcli account` | API keys and coldkey registration |
-| `npcli tournament` | Browse tournaments, submit agents, leaderboards |
-| `npcli envhub` | Manage Isaac Lab environment bundles |
-| `npcli hackathon` | Browse and submit to hackathons |
-| `npcli simstore` | SimStore marketplace *(coming soon)* |
-
-## Quick Start
-
-### Authenticate
-
-```bash
-npcli login --api-key nepher_xxxxxxxx
-npcli whoami
-npcli logout
-```
-
-Get your API key at [nepher.ai/account](https://nepher.ai/account) → Account → API Keys.  
-For CI/CD, set `NEPHER_API_KEY=nepher_xxxxxxxx` instead of logging in.
-
-### Tournaments
-
-```bash
-npcli tournament list
-npcli tournament list-active
-npcli tournament status <tournament_id>
-npcli tournament leaderboard <tournament_id>
-```
-
-Check your agent directory structure (no extra dependencies needed):
-
-```bash
-npcli tournament check --path ./my-agent
-npcli tournament check --path ./my-agent --verbose   # also show recommended-file warnings
-```
-
-Submit an agent (requires `bittensor-wallet` for wallet signing):
-
-```bash
-pip install bittensor-wallet
-# or: pip install "nepher-cli[bittensor]"
-```
-
-```bash
-npcli tournament submit --path ./my-agent --wallet-name miner --wallet-hotkey default
-```
-
-Full options for `submit`:
-
-```
---path <path>               Agent directory
---wallet-name <str>         Bittensor wallet name (default: miner)
---wallet-hotkey <str>       Bittensor wallet hotkey (default: default)
---api-key <key>             Nepher API key (falls back to stored credentials)
---tournament-id <id>        Target tournament ID (required when multiple are active)
---api-url <url>             Override tournament API URL
--v / --verbose              Verbose output
-```
-
-### EnvHub
-
-```bash
-npcli envhub list
-npcli envhub download <env_id>
-npcli envhub upload ./my-bundle --category navigation
-npcli envhub cache list
-npcli envhub cache info
-npcli envhub cache clear
-```
-
-### Hackathons
-
-```bash
-npcli hackathon list
-
-npcli hackathon submit \
-  --title "My entry" \
-  --submission ./my-project \
-  --assets ./my-assets
-```
-
-Full options:
-
-```
---hackathon-id <uuid>       Required when multiple hackathons are open
---title <str>               Entry title
---description <markdown>    Entry description
---thumbnail <file>          Cover image (JPEG, PNG, WebP, GIF)
---submission <path>         Project folder or submission.zip
---assets <path>             Assets folder or assets.zip (images, videos, PDFs)
---public-source             Mark source as public
-```
-
-### API Keys
-
-`list` / `create` / `revoke` need a **JWT session** from `npcli account login`.  
-Do **not** pass `--api-key` on these commands (that flag sends `X-API-Key`, which the account API rejects for key management).
-
-```bash
-npcli account login --api-key nepher_...
-npcli account api-keys list
-npcli account api-keys create --name "CI key" --platform hackathon
-npcli account api-keys revoke <key_id>
-```
-
-### Coldkey Registration
-
-Bind a Bittensor coldkey to your account (requires `bittensor-wallet`; `btcli` is optional fallback):
-
-```bash
-pip install bittensor-wallet
-npcli account register-coldkey --wallet <wallet_name>
-```
-
-Signing uses the local coldkey via `bittensor-wallet` and does not import `btcli`. If you still have a mixed Bittensor venv (`scalecodec` + `cyscale`), `register-coldkey` keeps working as long as `bittensor-wallet` is installed.
-
-## API Key Requirements
-
-- Must start with `nepher_`
-- Must be active and not expired
-- `hackathon submit` requires **Hackathon** scope (or an unrestricted key)
-- `tournament submit` requires **Tournament** scope (or an unrestricted key)
-
-## Troubleshooting
-
-| Error | Fix |
-|-------|-----|
-| `npcli: command not found` | Ensure `pip install` succeeded and Python scripts dir is on `PATH` |
-| `invalid api key format` | Key must start with `nepher_` |
-| `api key does not have hackathon access` | Enable Hackathon scope or use an unrestricted key |
-| `api key expired` | Run `npcli account api-keys create` |
-| `Several hackathons are accepting submissions` | Re-run with `--hackathon-id` |
-| `bittensor-wallet not installed` | `pip install bittensor-wallet` (needed for `tournament submit` and `account register-coldkey`) |
-| `Not logged in` | `npcli login --api-key nepher_...` |
-| `Conflict detected: 'scalecodec' ... conflicts with 'cyscale'` | Leftover `scalecodec` after a Bittensor upgrade. Prefer `pip install bittensor-wallet` so npcli never needs `btcli`. To repair `btcli` itself: `pip uninstall scalecodec cyscale -y && pip install -U cyscale --force-reinstall` |
-
-Run any command with `--help` for full flag details:
-
-```bash
-npcli --help
-npcli hackathon submit --help
-npcli tournament submit --help
-```
-
-## License
-
-MIT