sima-cli 2.1.7__tar.gz → 2.1.8__tar.gz

{sima_cli-2.1.7/sima_cli.egg-info → sima_cli-2.1.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sima-cli
-Version: 2.1.7
+Version: 2.1.8
 Summary: CLI tool for SiMa Developer Portal to download models, firmware, and apps.
 Home-page: https://developer.sima.ai/
 Author: SiMa.ai
@@ -163,10 +163,11 @@ sima-cli vulcan download --env production core main
   - `dev`: `https://artifacts.neat.paconsultings.com`
   - `staging`: `https://artifacts.stg.neat.sima.ai`
   - `production`: `https://artifacts.neat.sima.ai`
-- `staging` and `production` are not yet available for Vulcan downloads; use `--env dev` for now.
+- `dev` and `staging` are available for Vulcan downloads. `production` is not yet available.
 - Usage:
-  - `sima-cli vulcan --env {dev|staging|production} download [REPO] [BRANCH_OR_TAG]`
-  - `sima-cli vulcan download --env {dev|staging|production} [REPO] [BRANCH_OR_TAG]`
+  - `sima-cli vulcan --env {dev|stg|staging|prd|prod|production} download [REPO] [BRANCH_OR_TAG]`
+  - `sima-cli vulcan download --env {dev|stg|staging|prd|prod|production} [REPO] [BRANCH_OR_TAG]`
+  - Shortcut flags are also available: `--dev`, `--stg`/`--staging`, and `--prd`/`--prod`.
   - If `REPO` is omitted, the CLI prompts for a repository.
   - If `BRANCH_OR_TAG` is omitted, the CLI downloads `branches.json` and prompts for a branch.
   - For automation, pass both values and add `--json` for structured output.
@@ -587,7 +588,19 @@ sima-cli selfupdate
 sima-cli selfupdate --dev
 ```
 
-- Update from the latest tested artifact installer. On Windows, this prints the PowerShell commands to run in a new shell.
+- Update from Vulcan dev artifacts. If `--branch` is omitted, sima-cli loads `branches.json` and prompts for a branch.
+
+```bash
+sima-cli selfupdate --stg --branch main
+```
+
+- Update from Vulcan staging artifacts.
+
+```bash
+sima-cli selfupdate --neat --branch main
+```
+
+- Update from Vulcan production artifacts. Production aliases are `--prd`, `--prod`, `--neat`, and `--vulcan`.
 
 ```bash
 sima-cli selfupdate -v 0.0.46

{sima_cli-2.1.7 → sima_cli-2.1.8}/README.md

@@ -129,10 +129,11 @@ sima-cli vulcan download --env production core main
   - `dev`: `https://artifacts.neat.paconsultings.com`
   - `staging`: `https://artifacts.stg.neat.sima.ai`
   - `production`: `https://artifacts.neat.sima.ai`
-- `staging` and `production` are not yet available for Vulcan downloads; use `--env dev` for now.
+- `dev` and `staging` are available for Vulcan downloads. `production` is not yet available.
 - Usage:
-  - `sima-cli vulcan --env {dev|staging|production} download [REPO] [BRANCH_OR_TAG]`
-  - `sima-cli vulcan download --env {dev|staging|production} [REPO] [BRANCH_OR_TAG]`
+  - `sima-cli vulcan --env {dev|stg|staging|prd|prod|production} download [REPO] [BRANCH_OR_TAG]`
+  - `sima-cli vulcan download --env {dev|stg|staging|prd|prod|production} [REPO] [BRANCH_OR_TAG]`
+  - Shortcut flags are also available: `--dev`, `--stg`/`--staging`, and `--prd`/`--prod`.
   - If `REPO` is omitted, the CLI prompts for a repository.
   - If `BRANCH_OR_TAG` is omitted, the CLI downloads `branches.json` and prompts for a branch.
   - For automation, pass both values and add `--json` for structured output.
@@ -553,7 +554,19 @@ sima-cli selfupdate
 sima-cli selfupdate --dev
 ```
 
-- Update from the latest tested artifact installer. On Windows, this prints the PowerShell commands to run in a new shell.
+- Update from Vulcan dev artifacts. If `--branch` is omitted, sima-cli loads `branches.json` and prompts for a branch.
+
+```bash
+sima-cli selfupdate --stg --branch main
+```
+
+- Update from Vulcan staging artifacts.
+
+```bash
+sima-cli selfupdate --neat --branch main
+```
+
+- Update from Vulcan production artifacts. Production aliases are `--prd`, `--prod`, `--neat`, and `--vulcan`.
 
 ```bash
 sima-cli selfupdate -v 0.0.46

{sima_cli-2.1.7 → sima_cli-2.1.8}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "sima-cli"
-version = "2.1.7"
+version = "2.1.8"
 description = "CLI tool for SiMa Developer Portal to download models, firmware, and apps."
 readme = "README.md"
 requires-python = ">=3.8"

{sima_cli-2.1.7 → sima_cli-2.1.8}/sima_cli/__version__.py

@@ -1,2 +1,2 @@
 # sima_cli/__version__.py
-__version__ = "2.1.7"
+__version__ = "2.1.8"

{sima_cli-2.1.7 → sima_cli-2.1.8}/sima_cli/cli.py

@@ -30,7 +30,13 @@ from sima_cli.install.registry import register_packages_commands
 from sima_cli.upgrade.selfupdate import register_selfupdate_command
 from sima_cli.playbooks import register_playbook_commands
 from sima_cli.vulcan import register_vulcan_commands
-from sima_cli.vulcan.commands import ENV_BASE_URLS, install_vulcan_package
+from sima_cli.vulcan.commands import (
+    ENV_METAVAR,
+    _environment_shortcut_options,
+    _normalize_environment_option,
+    _resolve_environment,
+    install_vulcan_package,
+)
 
 def _configure_stdio_errors() -> None:
     for stream in (getattr(sys, "stdout", None), getattr(sys, "stderr", None)):
@@ -505,21 +511,29 @@ ALL_COMPONENTS = SDK_DEPENDENT_COMPONENTS | SDK_INDEPENDENT_COMPONENTS
 @click.argument("component", required=False)
 @click.option("-v", "--version", help="SDK version (required for SDK-dependent components unless --metadata is provided)")
 @click.option("-m", "--mirror", help="URL to a metadata.json file for generic installation")
-@click.option("-t", "--tag", help="Tag of the package. With --vulcan, metadata variant type such as minimum.")
-@click.option("--vulcan", "use_vulcan", is_flag=True, help="Install from Vulcan artifacts using the Vulcan package resolver.")
+@click.option("-t", "--tag", help="Tag of the package. With --neat, metadata variant type such as minimum.")
+@click.option("--neat", "use_neat", is_flag=True, help="Install from Neat artifacts using the Neat package resolver.")
+@click.option(
+    "--vulcan",
+    "use_vulcan",
+    is_flag=True,
+    help="Install from Neat/Vulcan artifacts. Compatibility alias for --neat.",
+)
+@_environment_shortcut_options
 @click.option(
     "--env",
     "vulcan_environment",
-    type=click.Choice(sorted(ENV_BASE_URLS), case_sensitive=False),
+    metavar=ENV_METAVAR,
+    callback=_normalize_environment_option,
     default=None,
-    help="Vulcan artifact environment. Used with --vulcan. Defaults to production.",
+    help="Neat artifact environment. Used with --neat or --vulcan. Defaults to production.",
 )
 @click.option(
     "--base-url",
     "vulcan_base_url",
     default=None,
-    envvar="SIMA_VULCAN_BASE_URL",
-    help="Override the Vulcan artifact base URL. Used with --vulcan.",
+    envvar="SIMA_NEAT_BASE_URL",
+    help="Override the Neat artifact base URL. Used with --neat or --vulcan.",
 )
 @click.option(
     "-d",
@@ -527,9 +541,9 @@ ALL_COMPONENTS = SDK_DEPENDENT_COMPONENTS | SDK_INDEPENDENT_COMPONENTS
     default=".",
     show_default=True,
     type=click.Path(file_okay=False, dir_okay=True, path_type=str),
-    help="Directory where Vulcan package resources are downloaded and installed. Used with --vulcan.",
+    help="Directory where Neat package resources are downloaded and installed. Used with --neat or --vulcan.",
 )
-@click.option("--json", "json_output", is_flag=True, help="With --vulcan, print resolved metadata URL and exit.")
+@click.option("--json", "json_output", is_flag=True, help="With --neat or --vulcan, print resolved metadata URL and exit.")
 @click.option(
     "-f",
     "--force",
@@ -538,7 +552,21 @@ ALL_COMPONENTS = SDK_DEPENDENT_COMPONENTS | SDK_INDEPENDENT_COMPONENTS
     help="Force installation even if compatibility checks fail.",
 )
 @click.pass_context
-def install_cmd(ctx, component, version, mirror, tag, use_vulcan, vulcan_environment, vulcan_base_url, install_dir, json_output, force):
+def install_cmd(
+    ctx,
+    component,
+    version,
+    mirror,
+    tag,
+    use_neat,
+    use_vulcan,
+    vulcan_environment,
+    environment_flag,
+    vulcan_base_url,
+    install_dir,
+    json_output,
+    force,
+):
     """
     Install SiMa packages.
 
@@ -573,15 +601,18 @@ def install_cmd(ctx, component, version, mirror, tag, use_vulcan, vulcan_environ
     """
     internal = ctx.obj.get("internal", False)
 
-    if use_vulcan:
+    use_neat_resolver = use_neat or use_vulcan
+    if use_neat_resolver:
+        if use_neat and use_vulcan:
+            raise click.ClickException("Use only one of --neat or --vulcan.")
         if mirror:
-            raise click.ClickException("--mirror cannot be used with --vulcan.")
+            raise click.ClickException("--mirror cannot be used with --neat.")
         if not component:
-            raise click.ClickException("You must specify a Vulcan target when using --vulcan.")
+            raise click.ClickException("You must specify a Neat target when using --neat.")
         install_vulcan_package(
             target=component,
-            environment=vulcan_environment or "production",
-            base_url=vulcan_base_url,
+            environment=_resolve_environment(vulcan_environment, environment_flag),
+            base_url=vulcan_base_url or os.getenv("SIMA_VULCAN_BASE_URL"),
             package_type=tag,
             install_dir=install_dir,
             force=force,

{sima_cli-2.1.7 → sima_cli-2.1.8}/sima_cli/install/metadata_installer.py

@@ -11,7 +11,7 @@ import stat
 import shlex
 import platform
 import hashlib
-from urllib.parse import urlparse, quote, urljoin
+from urllib.parse import urlparse, quote, urljoin, unquote
 from typing import Dict
 from tqdm import tqdm
 from pathlib import Path
@@ -280,6 +280,169 @@ def _compute_sha256(file_path: Path, chunk_size: int = 1024 * 1024) -> str:
                 hasher.update(chunk)
     return hasher.hexdigest()
 
+def _resolve_resource_url(base_url: str, resource: str) -> str:
+    """
+    Resolve a metadata resource to a downloadable URL.
+
+    Metadata resources are file names or relative paths. Encode each path segment
+    so URL-reserved characters that are valid in artifact names, such as '+', do
+    not get interpreted by object storage/CDNs as a different key.
+    """
+    parsed_resource = urlparse(resource)
+    if parsed_resource.scheme or parsed_resource.netloc:
+        return resource
+
+    encoded_resource = "/".join(
+        quote(segment, safe="")
+        for segment in resource.split("/")
+    )
+    return urljoin(base_url, encoded_resource)
+
+def _resolve_resource_url_candidates(base_url: str, resource: str) -> list[str]:
+    primary_url = _resolve_resource_url(base_url, resource)
+
+    parsed_resource = urlparse(resource)
+    if parsed_resource.scheme or parsed_resource.netloc or "%" not in resource:
+        return [primary_url]
+
+    percent_preserving_resource = "/".join(
+        quote(segment, safe="%")
+        for segment in resource.split("/")
+    )
+    fallback_url = urljoin(base_url, percent_preserving_resource)
+    if fallback_url == primary_url:
+        return [primary_url]
+    return [primary_url, fallback_url]
+
+def _metadata_resource_path(dest_folder: str, resource: str, resource_url: str) -> Path:
+    parsed_resource = urlparse(resource)
+    if parsed_resource.scheme or parsed_resource.netloc:
+        file_name = os.path.basename(urlparse(resource_url).path)
+    else:
+        file_name = os.path.basename(resource)
+
+    if not file_name:
+        raise click.ClickException(f"❌ Cannot determine file name for resource '{resource}'.")
+
+    return Path(dest_folder) / file_name
+
+def _normalize_downloaded_metadata_resource(local_path: str, expected_path: Path) -> str:
+    downloaded_path = Path(local_path)
+    if downloaded_path == expected_path:
+        return local_path
+
+    if expected_path.exists():
+        expected_path.unlink()
+    downloaded_path.rename(expected_path)
+    return str(expected_path)
+
+def _download_metadata_file_resource(
+    resource: str,
+    resource_urls: list[str],
+    dest_folder: str,
+    dest_path: Path,
+    internal: bool,
+) -> str:
+    errors: list[str] = []
+    for index, resource_url in enumerate(resource_urls):
+        try:
+            local_path = download_file_from_url(
+                url=resource_url,
+                dest_folder=dest_folder,
+                internal=internal
+            )
+            return _normalize_downloaded_metadata_resource(local_path, dest_path)
+        except Exception as e:
+            errors.append(f"{resource_url}: {e}")
+            if index < len(resource_urls) - 1:
+                click.echo(
+                    f"⚠️  Download failed for encoded resource URL; retrying percent-preserving URL for '{resource}'."
+                )
+
+    raise click.ClickException("; ".join(errors))
+
+
+def _resource_basename(resource: str) -> str:
+    parsed = urlparse(resource)
+    path = parsed.path if parsed.scheme or parsed.netloc else resource
+    return unquote(os.path.basename(path)).lower()
+
+
+def _is_wheel_resource(resource: str) -> bool:
+    return _resource_basename(resource).endswith(".whl")
+
+
+def _wheel_platform_tag(resource: str) -> str:
+    name = _resource_basename(resource)
+    if not name.endswith(".whl"):
+        return ""
+    parts = name[:-4].split("-")
+    if len(parts) < 5:
+        return ""
+    return parts[-1].lower()
+
+
+def _current_wheel_platform() -> tuple:
+    system = platform.system().lower()
+    machine = platform.machine().lower()
+
+    if system == "darwin":
+        os_family = "mac"
+    elif system == "windows":
+        os_family = "windows"
+    elif system == "linux":
+        os_family = "linux"
+    else:
+        os_family = system
+
+    if machine in {"x86_64", "amd64"}:
+        arch_tokens = {"x86_64", "amd64"}
+    elif machine in {"aarch64", "arm64"}:
+        arch_tokens = {"aarch64", "arm64"}
+    elif machine in {"i386", "i686", "x86"}:
+        arch_tokens = {"i386", "i686", "x86", "win32"}
+    else:
+        arch_tokens = {machine} if machine else set()
+
+    return os_family, arch_tokens
+
+
+def _wheel_arch_matches(platform_tag: str, arch_tokens: set) -> bool:
+    known_arch_tokens = {"x86_64", "amd64", "aarch64", "arm64", "i386", "i686", "x86", "win32"}
+    present_tokens = {token for token in known_arch_tokens if token in platform_tag}
+    return not present_tokens or bool(present_tokens & arch_tokens)
+
+
+def _is_compatible_wheel_resource(resource: str) -> bool:
+    platform_tag = _wheel_platform_tag(resource)
+    if not platform_tag:
+        return True
+    if platform_tag in {"any", "none"}:
+        return True
+
+    os_family, arch_tokens = _current_wheel_platform()
+    if os_family == "mac":
+        os_matches = platform_tag.startswith("macosx") or "macos" in platform_tag
+    elif os_family == "windows":
+        os_matches = platform_tag.startswith("win") or platform_tag in {"win32", "win_amd64", "win_arm64"}
+    elif os_family == "linux":
+        os_matches = "linux" in platform_tag
+    else:
+        os_matches = False
+
+    return os_matches and _wheel_arch_matches(platform_tag, arch_tokens)
+
+
+def _filter_download_compatible_resources(resources: list) -> list:
+    filtered = []
+    for resource in resources:
+        if _is_wheel_resource(resource) and not _is_compatible_wheel_resource(resource):
+            click.echo(f"⏭️  Skipping incompatible wheel for this platform: {resource}")
+            continue
+        filtered.append(resource)
+    return filtered
+
+
 def _download_assets(metadata: dict, base_url: str, dest_folder: str, internal: bool = False, skip_models: bool = False, tag: str = None) -> list:
     """
     Downloads resources defined in metadata to a local destination folder.
@@ -321,8 +484,11 @@ def _download_assets(metadata: dict, base_url: str, dest_folder: str, internal:
             continue
         filtered_resources.append(r)
 
+    if metadata.get("download-compatible-files-only"):
+        filtered_resources = _filter_download_compatible_resources(filtered_resources)
+
     if not filtered_resources:
-        click.echo("ℹ️ No non-model resources to download.")
+        click.echo("ℹ️ No compatible resources to download.")
         return []
 
     click.echo(f"📥 Downloading {len(filtered_resources)} resource(s) to: {dest_folder}\n")
@@ -387,10 +553,8 @@ def _download_assets(metadata: dict, base_url: str, dest_folder: str, internal:
                 continue
 
             # 🌐 Standard file or URL
-            resource_url = urljoin(base_url, resource)
-            parsed = urlparse(resource_url)
-            file_name = os.path.basename(parsed.path)
-            dest_path = Path(dest_folder) / file_name
+            resource_urls = _resolve_resource_url_candidates(base_url, resource)
+            dest_path = _metadata_resource_path(dest_folder, resource, resource_urls[0])
 
             if expected_sha256 and dest_path.exists() and dest_path.is_file():
                 existing_sha = _compute_sha256(dest_path)
@@ -398,9 +562,11 @@ def _download_assets(metadata: dict, base_url: str, dest_folder: str, internal:
                     click.echo(f"♻️  Checksum mismatch for existing file '{dest_path.name}', re-downloading.")
                     dest_path.unlink()
 
-            local_path = download_file_from_url(
-                url=resource_url,
+            local_path = _download_metadata_file_resource(
+                resource=resource,
+                resource_urls=resource_urls,
                 dest_folder=dest_folder,
+                dest_path=dest_path,
                 internal=internal
             )
             if expected_sha256:
@@ -417,6 +583,28 @@ def _download_assets(metadata: dict, base_url: str, dest_folder: str, internal:
 
     return local_paths
 
+def _mark_install_script_executable(metadata: Dict, install_dir: str) -> None:
+    script = metadata.get("installation", {}).get("script", "")
+    if not isinstance(script, str):
+        return
+
+    script = script.strip()
+    if not script or any(char in script for char in "\n\r;&|`$<>"):
+        return
+
+    script_path = Path(script)
+    if not script_path.is_absolute():
+        script_path = Path(install_dir) / script_path
+    try:
+        resolved = script_path.resolve()
+        install_root = Path(install_dir).resolve()
+        if resolved != install_root and install_root not in resolved.parents:
+            return
+        if resolved.is_file():
+            resolved.chmod(resolved.stat().st_mode | stat.S_IXUSR | stat.S_IXGRP | stat.S_IXOTH)
+    except OSError:
+        return
+
 def selectable_resource_handler(metadata):
     """
     Allow user to select one or more opt-in resources to download.
@@ -1222,8 +1410,10 @@ def install_from_metadata(metadata_url: str, internal: bool, install_dir: str =
                 if _is_platform_compatible(metadata, force) or force:
                     local_paths = _download_assets(metadata, metadata_url, install_dir, internal, tag=tag)
                     if len(local_paths) > 0:
+                        _mark_install_script_executable(metadata, install_dir)
                         _combine_multipart_files(install_dir, local_paths=local_paths)
                         _extract_archives_in_folder(install_dir, local_paths)
+                        _mark_install_script_executable(metadata, install_dir)
                         _run_installation_script(metadata=metadata, extract_path=install_dir)
 
     except Exception as e:

{sima_cli-2.1.7 → sima_cli-2.1.8}/sima_cli/install/package_builder.py

@@ -242,6 +242,7 @@ def build_metadata(
     install_script: str = "",
     selectables: Optional[str] = None,
     exclude: Optional[Sequence[str]] = None,
+    download_compatible_files_only: bool = False,
 ) -> Dict:
     artifacts_folder = artifacts_folder.expanduser().resolve()
     if not artifacts_folder.is_dir():
@@ -266,7 +267,7 @@ def build_metadata(
         resolved_description = github_repo_description(artifacts_folder)
 
     size_text = _format_size(total_size)
-    return {
+    metadata = {
         "name": name or default_package_name(artifacts_folder),
         "version": version or default_version(artifacts_folder),
         "release": "",
@@ -284,6 +285,9 @@ def build_metadata(
             "post-message": DEFAULT_POST_MESSAGE,
         },
     }
+    if download_compatible_files_only:
+        metadata["download-compatible-files-only"] = True
+    return metadata
 
 
 def metadata_filename(variant: Optional[str] = None) -> str:

{sima_cli-2.1.7 → sima_cli-2.1.8}/sima_cli/install/registry.py

@@ -103,7 +103,23 @@ def show_metadata(name, version):
     "--variant",
     help="Optional metadata variant name. Writes metadata-<variant>.json instead of metadata.json.",
 )
-def build_package_metadata(artifacts_folder, name, version, description, install_script, selectables, exclude, variant):
+@click.option(
+    "--download-compatible-files-only",
+    is_flag=True,
+    default=False,
+    help="Add download-compatible-files-only so installers download only wheel files compatible with the current platform.",
+)
+def build_package_metadata(
+    artifacts_folder,
+    name,
+    version,
+    description,
+    install_script,
+    selectables,
+    exclude,
+    variant,
+    download_compatible_files_only,
+):
     """
     Generate metadata.json, or metadata-<variant>.json, for sima-cli package installation.
     """
@@ -116,6 +132,7 @@ def build_package_metadata(artifacts_folder, name, version, description, install
             install_script=install_script,
             selectables=selectables,
             exclude=exclude,
+            download_compatible_files_only=download_compatible_files_only,
         )
         output_path = write_metadata(artifacts_folder, metadata, variant=variant)
     except ValueError as exc:

{sima_cli-2.1.7 → sima_cli-2.1.8}/sima_cli/sdk/install.py

@@ -43,6 +43,8 @@ from sima_cli.sdk.utils import (
     select_containers,
 )
 
+LINUX_NEAT_EXPORTS_PATH = Path("/etc/exports.d/neat-sdk.exports")
+
 # ─────────────────────────────────────────────
 # Entrypoint for setup/start
 # ─────────────────────────────────────────────
@@ -323,6 +325,7 @@ class ExistingNfsExport:
     local_export_path: str
     client: str
     client_allowed: bool
+    managed_by_sima: bool = False
 
 
 @dataclass(frozen=True)
@@ -330,6 +333,7 @@ class ParsedNfsExport:
     path: Path
     client: str
     options: Tuple[str, ...]
+    source: Optional[Path] = None
 
 
 def _parse_export_line(line: str) -> List[ParsedNfsExport]:
@@ -373,10 +377,16 @@ def _read_linux_exports() -> List[ParsedNfsExport]:
                     logical_line += line[:-1] + " "
                     continue
                 logical_line += line
-                exports.extend(_parse_export_line(logical_line))
+                exports.extend(
+                    ParsedNfsExport(export.path, export.client, export.options, source=path)
+                    for export in _parse_export_line(logical_line)
+                )
                 logical_line = ""
             if logical_line:
-                exports.extend(_parse_export_line(logical_line))
+                exports.extend(
+                    ParsedNfsExport(export.path, export.client, export.options, source=path)
+                    for export in _parse_export_line(logical_line)
+                )
         except OSError:
             continue
     return exports
@@ -416,6 +426,12 @@ def _join_nfs_path(base: str, relative: Path) -> str:
     return f"{base.rstrip('/')}/{relative_text}"
 
 
+def _is_sima_managed_linux_export(export: ParsedNfsExport) -> bool:
+    if export.source is None:
+        return False
+    return export.source == LINUX_NEAT_EXPORTS_PATH
+
+
 def _resolve_client_visible_export_path(workspace: Path, matching_export: ParsedNfsExport, exports: List[ParsedNfsExport]) -> str:
     workspace_path = workspace.resolve()
 
@@ -452,12 +468,14 @@ def _detect_existing_linux_nfs_export(workspace: Path, devkit_ip: str, host_ip:
 
     allowed_exports = [export for export in exports if _export_allows_client(export.client, devkit_ip)]
     matching_export = max(allowed_exports or exports, key=lambda export: len(str(export.path.resolve())))
+    managed_by_sima = not allowed_exports and all(_is_sima_managed_linux_export(export) for export in exports)
     return ExistingNfsExport(
         server=host_ip,
         export_path=_resolve_client_visible_export_path(workspace_path, matching_export, exports),
         local_export_path=str(matching_export.path.resolve()),
         client=matching_export.client,
         client_allowed=bool(allowed_exports),
+        managed_by_sima=managed_by_sima,
     )
 
 
@@ -551,10 +569,29 @@ def _setup_devkit_share(devkit_ip: str, workspace: str, selected_images: List[st
             )
         )
         if not existing_export.client_allowed:
+            if existing_export.managed_by_sima:
+                print(
+                    "ℹ️  Existing sima-cli-managed NFS export allows {}, updating it for DevKit {}.".format(
+                        existing_export.client,
+                        devkit_ip,
+                    )
+                )
+                _print_devkit_nfs_banner(workspace, devkit_ip, host_os)
+                _configure_nfs_export(host_dir, devkit_ip, host_os, host_ip)
+                configure_linux_shared_devkit_network(devkit_ip)
+                print("✅ Host NFS export configured for workspace {} -> {}".format(workspace, devkit_ip))
+                return {
+                    "devkit_ip": devkit_ip,
+                    "host_ip": host_ip,
+                    "workspace": workspace,
+                    "host_platform": host_os,
+                    "bootstrap_interactive": not noninteractive,
+                    "noninteractive": noninteractive,
+                }
             raise RuntimeError(
-                "Workspace is under an existing admin-managed NFS export, but DevKit {} is not allowed "
+                "Workspace is under an existing unmanaged NFS export, but DevKit {} is not allowed "
                 "by the export client '{}'. Ask an admin to add an export entry that covers {} for the "
-                "DevKit IP/subnet, then rerun setup. sima-cli will not try to modify this admin-managed "
+                "DevKit IP/subnet, then rerun setup. sima-cli will not try to modify this unmanaged "
                 "export without permission.".format(
                     devkit_ip,
                     existing_export.client,
@@ -562,7 +599,7 @@ def _setup_devkit_share(devkit_ip: str, workspace: str, selected_images: List[st
                 )
             )
         print(
-            "ℹ️  Reusing admin-managed NFS export for DevKit sync: {}:{}.".format(
+            "ℹ️  Reusing existing NFS export for DevKit sync: {}:{}.".format(
                 existing_export.server,
                 existing_export.export_path,
             )

{sima_cli-2.1.7 → sima_cli-2.1.8}/sima_cli/sdk/utils.py

@@ -916,6 +916,8 @@ def install_neat_playbooks(sdk_container_name: str, login_name: str) -> None:
             "exec",
             "-u",
             login_name,
+            "-e",
+            "SIMA_CLI_CHECK_FOR_UPDATE=0",
             sdk_container_name,
             "bash",
             "-lc",