CLI Command Reference

Command	Purpose
`login`, `logout`, `whoami`	Manage authentication
`org create`	Legacy command; directs users to the atomic web signup flow
`app create`, `app list`	Manage applications
`app signing-key generate`	Register a public signing key and save its private PEM
`env create --key-out <new-file>`	Create an environment and save its one-time key to a `0600` file
`embedded upload`	Register a native-binary bundle baseline for the separate RN/Expo bundle-delta path; not a NativeScript app-tree upload
`key rotate --out <new-file>`	Generate a new server-side key with explicit grace or immediate revocation
`key list`, `key validate`, `key revoke`	Inspect non-secret generation metadata or revoke an old generation
`release upload`	Canonical bundle and upload workflow
`release list`	List releases for an environment and runtime
`release rollout`	Set a release rollout percentage
`release promote`	Promote a release to the next environment
`release create`	Create a record for an already-uploaded storage object
`release bundle-create`	Produce a local bundle output
`interactive`, `wizard`	Run the guided release flow

Run nitropush help <command> or nitropush <group> <command> --help for current flags.

Deployment keys are shown once

NitroPush stores only SHA-256 key hashes. env create and key rotate require a new output path, write it with mode 0600, never print the key, and refuse to overwrite an existing file.

Prefer release upload

release create expects storage keys and checksums that already exist. Normal application deployments should use release upload.