sima-cli 2.1.7__tar.gz → 2.1.9__tar.gz

{sima_cli-2.1.7/sima_cli.egg-info → sima_cli-2.1.9}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sima-cli
-Version: 2.1.7
+Version: 2.1.9
 Summary: CLI tool for SiMa Developer Portal to download models, firmware, and apps.
 Home-page: https://developer.sima.ai/
 Author: SiMa.ai
@@ -17,7 +17,7 @@ Requires-Python: >=3.8
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: click>=8.0
-Requires-Dist: requests>=2.33.0
+Requires-Dist: requests<3.0,>=2.32.4
 Requires-Dist: tqdm>=4.64
 Requires-Dist: pyyaml>=6.0
 Requires-Dist: paramiko>=3.5.1
@@ -163,10 +163,11 @@ sima-cli vulcan download --env production core main
   - `dev`: `https://artifacts.neat.paconsultings.com`
   - `staging`: `https://artifacts.stg.neat.sima.ai`
   - `production`: `https://artifacts.neat.sima.ai`
-- `staging` and `production` are not yet available for Vulcan downloads; use `--env dev` for now.
+- `dev`, `staging`, and `production` are available for Vulcan downloads.
 - Usage:
-  - `sima-cli vulcan --env {dev|staging|production} download [REPO] [BRANCH_OR_TAG]`
-  - `sima-cli vulcan download --env {dev|staging|production} [REPO] [BRANCH_OR_TAG]`
+  - `sima-cli vulcan --env {dev|stg|staging|prd|prod|production} download [REPO] [BRANCH_OR_TAG]`
+  - `sima-cli vulcan download --env {dev|stg|staging|prd|prod|production} [REPO] [BRANCH_OR_TAG]`
+  - Shortcut flags are also available: `--dev`, `--stg`/`--staging`, and `--prd`/`--prod`.
   - If `REPO` is omitted, the CLI prompts for a repository.
   - If `BRANCH_OR_TAG` is omitted, the CLI downloads `branches.json` and prompts for a branch.
   - For automation, pass both values and add `--json` for structured output.
@@ -587,7 +588,19 @@ sima-cli selfupdate
 sima-cli selfupdate --dev
 ```
 
-- Update from the latest tested artifact installer. On Windows, this prints the PowerShell commands to run in a new shell.
+- Update from Vulcan dev artifacts. If `--branch` is omitted, sima-cli loads `branches.json` and prompts for a branch.
+
+```bash
+sima-cli selfupdate --stg --branch main
+```
+
+- Update from Vulcan staging artifacts.
+
+```bash
+sima-cli selfupdate --neat --branch main
+```
+
+- Update from Vulcan production artifacts. Production aliases are `--prd`, `--prod`, `--neat`, and `--vulcan`.
 
 ```bash
 sima-cli selfupdate -v 0.0.46

{sima_cli-2.1.7 → sima_cli-2.1.9}/README.md

@@ -129,10 +129,11 @@ sima-cli vulcan download --env production core main
   - `dev`: `https://artifacts.neat.paconsultings.com`
   - `staging`: `https://artifacts.stg.neat.sima.ai`
   - `production`: `https://artifacts.neat.sima.ai`
-- `staging` and `production` are not yet available for Vulcan downloads; use `--env dev` for now.
+- `dev`, `staging`, and `production` are available for Vulcan downloads.
 - Usage:
-  - `sima-cli vulcan --env {dev|staging|production} download [REPO] [BRANCH_OR_TAG]`
-  - `sima-cli vulcan download --env {dev|staging|production} [REPO] [BRANCH_OR_TAG]`
+  - `sima-cli vulcan --env {dev|stg|staging|prd|prod|production} download [REPO] [BRANCH_OR_TAG]`
+  - `sima-cli vulcan download --env {dev|stg|staging|prd|prod|production} [REPO] [BRANCH_OR_TAG]`
+  - Shortcut flags are also available: `--dev`, `--stg`/`--staging`, and `--prd`/`--prod`.
   - If `REPO` is omitted, the CLI prompts for a repository.
   - If `BRANCH_OR_TAG` is omitted, the CLI downloads `branches.json` and prompts for a branch.
   - For automation, pass both values and add `--json` for structured output.
@@ -553,7 +554,19 @@ sima-cli selfupdate
 sima-cli selfupdate --dev
 ```
 
-- Update from the latest tested artifact installer. On Windows, this prints the PowerShell commands to run in a new shell.
+- Update from Vulcan dev artifacts. If `--branch` is omitted, sima-cli loads `branches.json` and prompts for a branch.
+
+```bash
+sima-cli selfupdate --stg --branch main
+```
+
+- Update from Vulcan staging artifacts.
+
+```bash
+sima-cli selfupdate --neat --branch main
+```
+
+- Update from Vulcan production artifacts. Production aliases are `--prd`, `--prod`, `--neat`, and `--vulcan`.
 
 ```bash
 sima-cli selfupdate -v 0.0.46

{sima_cli-2.1.7 → sima_cli-2.1.9}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "sima-cli"
-version = "2.1.7"
+version = "2.1.9"
 description = "CLI tool for SiMa Developer Portal to download models, firmware, and apps."
 readme = "README.md"
 requires-python = ">=3.8"
@@ -23,7 +23,7 @@ classifiers = [
 
 dependencies = [
     "click>=8.0",
-    "requests>=2.33.0",
+    "requests>=2.32.4,<3.0",
     "tqdm>=4.64",
     "pyyaml>=6.0",
     "paramiko>=3.5.1",

{sima_cli-2.1.7 → sima_cli-2.1.9}/requirements.txt

@@ -1,5 +1,5 @@
 click>=8.0
-requests>=2.33.0
+requests>=2.32.4,<3.0
 tqdm>=4.64
 pyyaml>=6.0
 paramiko>=3.5.1

{sima_cli-2.1.7 → sima_cli-2.1.9}/setup.py

@@ -18,7 +18,7 @@ setup(
     },
     install_requires=[
         "click>=8.0,<9.0",
-        "requests>=2.33.0,<3.0",
+        "requests>=2.32.4,<3.0",
         "tqdm>=4.64,<5.0",
         "InquirerPy>=0.3.4,<0.4",
         "tftpy>=0.8.6,<0.9",

{sima_cli-2.1.7 → sima_cli-2.1.9}/sima_cli/__version__.py

@@ -1,2 +1,2 @@
 # sima_cli/__version__.py
-__version__ = "2.1.7"
+__version__ = "2.1.9"

{sima_cli-2.1.7 → sima_cli-2.1.9}/sima_cli/auth/auth0.py

@@ -15,7 +15,7 @@ import base64
 import requests
 import webbrowser
 import click
-from typing import Dict, Optional
+from typing import Dict, Iterable, Optional, Tuple
 
 from sima_cli.utils.config_loader import load_resource_config
 
@@ -24,6 +24,16 @@ from sima_cli.utils.config_loader import load_resource_config
 # ─────────────────────────────────────────────
 HOME_DIR = os.path.expanduser("~/.sima-cli")
 TOKEN_FILE = os.path.join(HOME_DIR, ".tokens.json")
+COOKIE_FILE = os.path.join(HOME_DIR, ".sima-cli-cookies.txt")
+CSRF_FILE = os.path.join(HOME_DIR, ".sima-cli-csrf.json")
+PROD_USERINFO_AUDIENCE = "https://sima-ai.us.auth0.com/userinfo"
+STAGING_USERINFO_AUDIENCE = "https://dev-d3sxf54xfkcifph2.us.auth0.com/userinfo"
+USERINFO_AUDIENCE = PROD_USERINFO_AUDIENCE
+LATEST_EULA_GRANT = "LatestEULA"
+DOC_ACCESS_GRANT = "DocsAccess"
+DOC_ACCESS_GRANT_ALIASES = (DOC_ACCESS_GRANT, "DocAccess")
+PROD_DISCOURSE_URL = "https://developer.sima.ai/login"
+STAGING_DISCOURSE_URL = "https://discourse-dev.sima.ai/login"
 
 # ─────────────────────────────────────────────
 # Configuration loader
@@ -81,6 +91,16 @@ def load_tokens() -> Optional[Dict]:
         return None
 
 
+def clear_external_login_state():
+    """Remove cached external-auth state so the next login starts cleanly."""
+    for path in (TOKEN_FILE, COOKIE_FILE, CSRF_FILE):
+        if os.path.exists(path):
+            try:
+                os.remove(path)
+            except Exception as e:
+                print(f"⚠️ Failed to delete {path}: {e}")
+
+
 def is_token_valid(tokens: dict) -> bool:
     """Check if access token still valid based on expires_in field."""
     if not tokens:
@@ -131,6 +151,123 @@ def is_browser_available():
     except webbrowser.Error:
         return False
 
+
+def _discourse_sign_in_url() -> str:
+    if os.getenv("USE_STAGING_DEV_PORTAL", "false").lower() in ("1", "true", "yes"):
+        return STAGING_DISCOURSE_URL
+    return PROD_DISCOURSE_URL
+
+
+def _expected_userinfo_audience() -> str:
+    if os.getenv("USE_STAGING_DEV_PORTAL", "false").lower() in ("1", "true", "yes"):
+        return STAGING_USERINFO_AUDIENCE
+    return PROD_USERINFO_AUDIENCE
+
+
+def _as_iterable(value) -> Iterable:
+    if value is None:
+        return []
+    if isinstance(value, (list, tuple, set)):
+        return value
+    return [value]
+
+
+def _access_token_claims(tokens: dict) -> dict:
+    return decode_jwt_payload(tokens.get("access_token", ""))
+
+
+def _access_token_has_userinfo_audience(claims: dict) -> bool:
+    return _expected_userinfo_audience() in _as_iterable(claims.get("aud"))
+
+
+def _access_token_has_grant(claims: dict, grant: str) -> bool:
+    grant_names = DOC_ACCESS_GRANT_ALIASES if grant in DOC_ACCESS_GRANT_ALIASES else (grant,)
+    for claim_name, claim_value in claims.items():
+        if claim_name in ("permissions", "grants", "roles") or claim_name.endswith(("/permissions", "/grants", "/roles")):
+            if any(grant_name in _as_iterable(claim_value) for grant_name in grant_names):
+                return True
+
+    scope = claims.get("scope")
+    if isinstance(scope, str) and any(grant_name in scope.split() for grant_name in grant_names):
+        return True
+
+    return False
+
+
+def access_token_has_doc_access(tokens: dict) -> bool:
+    return _access_token_has_grant(_access_token_claims(tokens), DOC_ACCESS_GRANT)
+
+
+def access_token_has_latest_eula(tokens: dict) -> bool:
+    return _access_token_has_grant(_access_token_claims(tokens), LATEST_EULA_GRANT)
+
+
+def _validate_access_token_requirements(tokens: dict) -> Tuple[bool, Dict[str, bool]]:
+    claims = _access_token_claims(tokens)
+    checks = {
+        "doc_access": _access_token_has_grant(claims, DOC_ACCESS_GRANT),
+        "latest_eula": _access_token_has_grant(claims, LATEST_EULA_GRANT),
+        "userinfo_audience": _access_token_has_userinfo_audience(claims),
+    }
+    return checks["doc_access"] and checks["latest_eula"] and checks["userinfo_audience"], checks
+
+
+def _prompt_for_discourse_sign_in(checks: Dict[str, bool]) -> bool:
+    discourse_url = _discourse_sign_in_url()
+    missing = []
+    if not checks.get("latest_eula"):
+        missing.append("LatestEULA grant")
+    if not checks.get("userinfo_audience"):
+        missing.append(f"{_expected_userinfo_audience()} audience")
+
+    click.echo("")
+    click.secho("Developer Portal sign-in is required before sima-cli can continue.", fg="yellow")
+    if missing:
+        click.echo(f"Missing from the access token: {', '.join(missing)}.")
+    click.echo("Please sign in to Discourse / Developer Portal and accept the EULA if prompted.")
+
+    if is_browser_available():
+        click.echo(f"Opening sign-in page: {click.style(discourse_url, fg='cyan', bold=True)}")
+        try:
+            webbrowser.open(discourse_url)
+        except Exception:
+            click.echo("Browser could not be opened automatically. Open this link manually:")
+            click.secho(discourse_url, fg="cyan", bold=True)
+    else:
+        click.echo("Browser not available. Open this link manually:")
+        click.secho(discourse_url, fg="cyan", bold=True)
+
+    return click.confirm("Have you signed in to Discourse / Developer Portal?", default=True)
+
+
+def _ensure_access_token_requirements(tokens: dict, auth_cfg: dict) -> Optional[dict]:
+    while True:
+        valid, checks = _validate_access_token_requirements(tokens)
+        if valid:
+            return tokens
+        if not checks.get("doc_access"):
+            return tokens
+
+        if not _prompt_for_discourse_sign_in(checks):
+            clear_external_login_state()
+            click.echo("Logged out. Run `sima-cli login` again after signing in to Developer Portal.")
+            return None
+
+        refresh_token = tokens.get("refresh_token")
+        if not refresh_token:
+            click.echo("Unable to refresh your access token after Developer Portal sign-in.")
+            clear_external_login_state()
+            click.echo("Logged out. Run `sima-cli login` again.")
+            return None
+
+        refreshed = refresh_access_token(auth_cfg, refresh_token)
+        if not refreshed:
+            clear_external_login_state()
+            click.echo("Logged out. Run `sima-cli login` again.")
+            return None
+
+        tokens = refreshed
+
 def request_device_code(auth_cfg):
     """Step 1: Request device code from Auth0."""
     data = {
@@ -269,16 +406,25 @@ def get_or_refresh_tokens(force=False):
     tokens = load_tokens()
 
     if tokens and is_token_valid(tokens) and not force:
-        return tokens
+        tokens = _ensure_access_token_requirements(tokens, auth_cfg)
+        if tokens:
+            return tokens
+        return None
 
     if tokens and tokens.get("refresh_token"):
         refreshed = refresh_access_token(auth_cfg, tokens["refresh_token"])
         if refreshed:
-            print_welcome_message(refreshed)
-            return refreshed
+            refreshed = _ensure_access_token_requirements(refreshed, auth_cfg)
+            if refreshed:
+                print_welcome_message(refreshed)
+                return refreshed
+            return None
         print("⚠️ Refresh failed, falling back to new login.")
 
     new_tokens = login_auth0(auth_cfg)
+    new_tokens = _ensure_access_token_requirements(new_tokens, auth_cfg)
+    if not new_tokens:
+        return None
     print_welcome_message(new_tokens)
     return new_tokens
 

{sima_cli-2.1.7 → sima_cli-2.1.9}/sima_cli/auth/devportal.py

@@ -7,6 +7,7 @@ import subprocess
 import shutil
 import base64
 import hashlib
+import webbrowser
 
 from typing import Optional
 from http.cookiejar import MozillaCookieJar
@@ -17,9 +18,14 @@ from sima_cli.utils.env import is_sima_board
 from sima_cli.auth.auth0 import (
     decode_jwt_payload,
     extract_email,
+    access_token_has_doc_access,
+    access_token_has_latest_eula,
+    get_auth_config,
     get_or_refresh_tokens,
     get_cached_access_token,
+    is_browser_available,
     load_tokens,
+    refresh_access_token,
 )
 
 HOME_DIR = os.path.expanduser("~/.sima-cli")
@@ -43,6 +49,7 @@ else:
 
 # Derived endpoints
 LOGIN_URL = f"{DEV_PORTAL}/session"
+DEV_PORTAL_LOGIN_URL = f"{DEV_PORTAL}/login"
 DUMMY_CHECK_URL = f"{DOCS_PORTAL}/pkg_downloads/validation"
 ACCESS_REQUEST_FORM_URL = "https://www2.sima.ai/l/1041271/2025-05-05/37bndg"
 USER_INFO_CLAIM = "https://auth.sima.ai/user_info"
@@ -61,14 +68,39 @@ HEADERS = {
     "sec-ch-ua-platform": '"macOS"',
 }
 
+
+def _prompt_manual_developer_portal_login(confirm_completion: bool = False) -> bool:
+    click.secho(
+        f"\nOpen this page to accept EULA to proceed, press Y when you are done:\n{DEV_PORTAL_LOGIN_URL}\n",
+        fg="green",
+    )
+    if confirm_completion:
+        return click.confirm("Have you accepted the EULA?", default=True)
+    return False
+
+
+def _open_developer_portal_login_page(confirm_manual_completion: bool = False) -> bool:
+    if not is_browser_available():
+        return _prompt_manual_developer_portal_login(confirm_manual_completion)
+
+    try:
+        opened = webbrowser.open(DEV_PORTAL_LOGIN_URL)
+    except Exception:
+        opened = False
+
+    if not opened:
+        return _prompt_manual_developer_portal_login(confirm_manual_completion)
+    return True
+
+
 def _handle_eula_flow(session: requests.Session, username: str, domain: str) -> bool:
     try:
         click.echo("\n📄 To continue, you must accept the End-User License Agreement (EULA).")
-        click.echo("👉 Please sign in to Developer Portal on your browser, then open the following URL to accept the EULA:")
-        click.echo("👉 If you were not prompted with the EULA acceptance popup, please open the URL in the incogniton browser.")
-        click.echo(f"\n  {DUMMY_CHECK_URL}\n")
+        click.echo("👉 Please sign in to Developer Portal in your browser and accept the EULA if prompted.")
+        click.echo("👉 If you were not prompted with the EULA acceptance popup, try opening the page in an incognito browser.")
+        _open_developer_portal_login_page()
 
-        if not click.confirm("✅ Have you completed the EULA form in your browser?", default=True):
+        if not click.confirm("✅ Have you signed in to Developer Portal and accepted the EULA?", default=True):
             click.echo("❌ EULA acceptance is required to continue.")
             return False
 
@@ -192,15 +224,20 @@ def _show_access_request_pending_message(already_submitted: bool = False):
         click.secho("✅ Your access request has already been submitted.", fg="green")
     else:
         click.secho("✅ Your access request has been submitted.", fg="green")
+
+
+def _show_limited_access_pending_message():
+    click.secho("✅ You are signed in with limited Developer Portal access.", fg="green")
     console.print(
         Panel(
             "\n".join(
                 [
-                    "SiMa is reviewing your request and will grant access shortly.",
+                    "SiMa is reviewing your account and will grant full access shortly.",
                     "Please look out for an email from marketing@marketing.sima.ai.",
-                    "Once access is granted, run `sima-cli login` again.",
                 ]
             ),
+            title="Notice",
+            title_align="center",
             border_style="yellow",
             style="yellow",
             expand=False,
@@ -208,27 +245,26 @@ def _show_access_request_pending_message(already_submitted: bool = False):
     )
 
 
-def _show_access_request_info_panel():
-    console.print(
-        Panel(
-            "\n".join(
-                [
-                    "Welcome to the SiMa.ai Developer Portal.",
-                    "",
-                    "To download digital assets from the Developer Portal, "
-                    "SiMa's business team needs to grant access after you "
-                    "provide a few additional details, including your project goal.",
-                    "",
-                    "Once approved, you will receive an email from "
-                    "marketing@marketing.sima.ai. Please check your email "
-                    "client's spam filter.",
-                ]
-            ),
-            title="Developer Portal Access Request",
-            border_style="yellow",
-            expand=False,
-        )
-    )
+def _prompt_eula_acceptance_after_access_request() -> bool:
+    click.echo("\n📄 To continue, accept the End-User License Agreement (EULA).")
+    click.echo("👉 Please sign in to Developer Portal in your browser and accept the EULA if prompted.")
+    _open_developer_portal_login_page()
+    if not click.confirm("✅ Have you signed in to Developer Portal and accepted the EULA?", default=True):
+        return False
+
+    tokens = load_tokens() or {}
+    refresh_token = tokens.get("refresh_token")
+    if not refresh_token:
+        click.secho("⚠️  Unable to refresh your access token: missing refresh token.", fg="yellow")
+        return False
+
+    click.echo("Refreshing access token after EULA acceptance...")
+    refreshed = refresh_access_token(get_auth_config(), refresh_token)
+    if not refreshed:
+        click.secho("⚠️  Unable to refresh your access token after EULA acceptance.", fg="yellow")
+        return False
+
+    return True
 
 
 def _submit_access_request() -> bool:
@@ -243,19 +279,10 @@ def _submit_access_request() -> bool:
         )
         return False
 
-    if _has_submitted_access_request(claims):
-        _show_access_request_pending_message(already_submitted=True)
-        _logout_external_credentials()
-        return False
-
-    _show_access_request_info_panel()
-    message = click.prompt(
-        click.style("Please briefly describe your project", fg="yellow"),
-        type=str,
-    ).strip()
-    payload = _build_access_request_payload(claims, message)
+    payload = _build_access_request_payload(claims, "sima-cli sign up request")
 
     try:
+        click.echo("Submitting Developer Portal access request...")
         response = requests.post(ACCESS_REQUEST_FORM_URL, data=payload, timeout=15)
         response.raise_for_status()
     except requests.RequestException as e:
@@ -264,7 +291,8 @@ def _submit_access_request() -> bool:
 
     _mark_access_request_submitted(claims)
     _show_access_request_pending_message()
-    _logout_external_credentials()
+    if not access_token_has_latest_eula(load_tokens() or {}):
+        _prompt_eula_acceptance_after_access_request()
     return False
 
 
@@ -355,7 +383,12 @@ def login_external(force=False, loginDocker=True):
         if _ACCESS_REQUEST_HANDLED:
             return None
         
-    get_or_refresh_tokens(force=force)
+    tokens = get_or_refresh_tokens(force=force)
+    if not tokens:
+        return None
+    if not access_token_has_doc_access(tokens):
+        return _submit_access_request()
+
     session, valid = validate_session()
     if valid:
         if loginDocker:

{sima_cli-2.1.7 → sima_cli-2.1.9}/sima_cli/cli.py

@@ -30,7 +30,13 @@ from sima_cli.install.registry import register_packages_commands
 from sima_cli.upgrade.selfupdate import register_selfupdate_command
 from sima_cli.playbooks import register_playbook_commands
 from sima_cli.vulcan import register_vulcan_commands
-from sima_cli.vulcan.commands import ENV_BASE_URLS, install_vulcan_package
+from sima_cli.vulcan.commands import (
+    ENV_METAVAR,
+    _environment_shortcut_options,
+    _normalize_environment_option,
+    _resolve_environment,
+    install_vulcan_package,
+)
 
 def _configure_stdio_errors() -> None:
     for stream in (getattr(sys, "stdout", None), getattr(sys, "stderr", None)):
@@ -505,21 +511,29 @@ ALL_COMPONENTS = SDK_DEPENDENT_COMPONENTS | SDK_INDEPENDENT_COMPONENTS
 @click.argument("component", required=False)
 @click.option("-v", "--version", help="SDK version (required for SDK-dependent components unless --metadata is provided)")
 @click.option("-m", "--mirror", help="URL to a metadata.json file for generic installation")
-@click.option("-t", "--tag", help="Tag of the package. With --vulcan, metadata variant type such as minimum.")
-@click.option("--vulcan", "use_vulcan", is_flag=True, help="Install from Vulcan artifacts using the Vulcan package resolver.")
+@click.option("-t", "--tag", help="Tag of the package. With --neat, metadata variant type such as minimum.")
+@click.option("--neat", "use_neat", is_flag=True, help="Install from Neat artifacts using the Neat package resolver.")
+@click.option(
+    "--vulcan",
+    "use_vulcan",
+    is_flag=True,
+    help="Install from Neat/Vulcan artifacts. Compatibility alias for --neat.",
+)
+@_environment_shortcut_options
 @click.option(
     "--env",
     "vulcan_environment",
-    type=click.Choice(sorted(ENV_BASE_URLS), case_sensitive=False),
+    metavar=ENV_METAVAR,
+    callback=_normalize_environment_option,
     default=None,
-    help="Vulcan artifact environment. Used with --vulcan. Defaults to production.",
+    help="Neat artifact environment. Used with --neat or --vulcan. Defaults to production.",
 )
 @click.option(
     "--base-url",
     "vulcan_base_url",
     default=None,
-    envvar="SIMA_VULCAN_BASE_URL",
-    help="Override the Vulcan artifact base URL. Used with --vulcan.",
+    envvar="SIMA_NEAT_BASE_URL",
+    help="Override the Neat artifact base URL. Used with --neat or --vulcan.",
 )
 @click.option(
     "-d",
@@ -527,9 +541,9 @@ ALL_COMPONENTS = SDK_DEPENDENT_COMPONENTS | SDK_INDEPENDENT_COMPONENTS
     default=".",
     show_default=True,
     type=click.Path(file_okay=False, dir_okay=True, path_type=str),
-    help="Directory where Vulcan package resources are downloaded and installed. Used with --vulcan.",
+    help="Directory where Neat package resources are downloaded and installed. Used with --neat or --vulcan.",
 )
-@click.option("--json", "json_output", is_flag=True, help="With --vulcan, print resolved metadata URL and exit.")
+@click.option("--json", "json_output", is_flag=True, help="With --neat or --vulcan, print resolved metadata URL and exit.")
 @click.option(
     "-f",
     "--force",
@@ -538,7 +552,21 @@ ALL_COMPONENTS = SDK_DEPENDENT_COMPONENTS | SDK_INDEPENDENT_COMPONENTS
     help="Force installation even if compatibility checks fail.",
 )
 @click.pass_context
-def install_cmd(ctx, component, version, mirror, tag, use_vulcan, vulcan_environment, vulcan_base_url, install_dir, json_output, force):
+def install_cmd(
+    ctx,
+    component,
+    version,
+    mirror,
+    tag,
+    use_neat,
+    use_vulcan,
+    vulcan_environment,
+    environment_flag,
+    vulcan_base_url,
+    install_dir,
+    json_output,
+    force,
+):
     """
     Install SiMa packages.
 
@@ -573,15 +601,18 @@ def install_cmd(ctx, component, version, mirror, tag, use_vulcan, vulcan_environ
     """
     internal = ctx.obj.get("internal", False)
 
-    if use_vulcan:
+    use_neat_resolver = use_neat or use_vulcan
+    if use_neat_resolver:
+        if use_neat and use_vulcan:
+            raise click.ClickException("Use only one of --neat or --vulcan.")
         if mirror:
-            raise click.ClickException("--mirror cannot be used with --vulcan.")
+            raise click.ClickException("--mirror cannot be used with --neat.")
         if not component:
-            raise click.ClickException("You must specify a Vulcan target when using --vulcan.")
+            raise click.ClickException("You must specify a Neat target when using --neat.")
         install_vulcan_package(
             target=component,
-            environment=vulcan_environment or "production",
-            base_url=vulcan_base_url,
+            environment=_resolve_environment(vulcan_environment, environment_flag),
+            base_url=vulcan_base_url or os.getenv("SIMA_VULCAN_BASE_URL"),
             package_type=tag,
             install_dir=install_dir,
             force=force,