@ornncompute/cli 0.1.3 → 0.1.4

package/README.md

@@ -28,6 +28,7 @@ static.
 ```bash
 ornn help [command]
 ornn login [--auth-base <url>] [--no-browser] [--timeout <seconds>]
+ornn update
 ornn whoami [--json]
 ornn status [--json]
 ornn listings list [--gpu-type <type>] [--facility <name>] [--operator <name>] [--json]
@@ -52,6 +53,10 @@ ornn nodes revoke <node-id> [--json]
 ornn nodes ssh-command <node-or-reservation-id> [--json]
 ornn nodes keys attach <node-id> --key <path|id|label> [--json]
 ornn nodes keys list <node-id> [--json]
+ornn node health <node-id> [--json]
+ornn node diagnose <node-id> [--json]
+ornn node drain <node-id> [--reason <text>] [--json]
+ornn node restore <node-id> [--reason <text>] [--json]
 ornn ssh <node-or-reservation-id> [--print] [--identity-file <path>] [--user <name>] [--json]
 ornn metrics nodes [--json]
 ornn metrics node <node-id> [--json]
@@ -84,6 +89,14 @@ ornn storage volumes create --name <name> [--source <drive-id>] [--json]
 ornn storage volumes refresh <drive-id> [--json]
 ornn storage volumes clear <drive-id> [--json]
 ornn storage volumes delete <drive-id> [--json]
+ornn storage deploy <drive-id> --reservation <reservation-id> [--mount-path <path>] [--read-only|--read-write] [--json]
+ornn storage deploy status --reservation <reservation-id> [--json]
+ornn storage buckets list [--json]
+ornn storage buckets show <drive-id> [--json]
+ornn storage buckets connect gcs|s3|r2 --bucket <bucket>|--url <url> [--name <name>] [--prefix <prefix>] [--region <region>] [--account-id <id>|--endpoint-url <url>] [--access-key-id <id> --secret-access-key-file <path>] [--read-only|--read-write] [--verify] [--json]
+ornn storage buckets update-credentials <drive-id> --access-key-id <id> --secret-access-key-file <path> [--json]
+ornn storage buckets verify <drive-id> [--json]
+ornn storage buckets disconnect <drive-id> [--json]
 ornn keys list [--json]
 ornn keys add [<public-key-file>] [--public-key <key>] [--label <label>] [--json]
 ornn keys delete <key-id> [--json]
@@ -111,6 +124,30 @@ UI aliases are first-class in the CLI: `listings` maps to the older
 `availability` command, `exchange` maps to `bid`, and `gpus` maps to
 `reservations`. The older command names remain available for scripts.
 
+## Operator commands
+
+The `ornn node` commands are for Ornn operators and reviewers, not tenants. They
+strictly wrap the internal-reviewer-gated compute endpoints, so they do not use
+the tenant CLI login. Instead they talk to the compute service directly and
+authenticate with the shared reviewer secret:
+
+- `ornn node health <node-id>` shows launch readiness (ready/blocked plus
+  reasons), passive fault reasons, and the last validation status.
+- `ornn node diagnose <node-id>` queues an active health run for the node.
+- `ornn node drain <node-id>` / `ornn node restore <node-id>` take the node out
+  of and back into service. Both accept an optional `--reason`.
+
+Set these environment variables before running them:
+
+- `ORNN_COMPUTE_BASE_URL` — origin of the internal compute service (for example
+  `http://localhost:8000`). The review secret travels as a request header, so
+  in any non-local deployment this should be an `https://` origin.
+- `ORNN_INTERNAL_REVIEW_SECRET` — the reviewer secret, sent as the
+  `X-Internal-Review-Secret` header.
+
+If either is missing the command fails with a clear error before making any
+network request.
+
 Commands print concise human-readable output by default. Use `--json` on
 read/show/list commands and transaction handoffs when you need structured
 stdout for scripts. Errors and login/browser progress go to stderr.
@@ -123,3 +160,7 @@ the terminal keeps polling until the login is approved or expires.
 
 Run `ornn --help` for the full command list and `ornn api` for the
 allowlisted compute API escape hatch.
+
+## Updating
+
+The CLI checks the npm registry for a newer version at most once per day and prints a one-line notice on stderr when one exists. Run `ornn update` to install it (the command detects npm, pnpm, yarn, or bun installs). The check is skipped in CI and non-interactive shells.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ornncompute/cli",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Command-line interface for Ornn compute access workflows.",
   "type": "module",
   "bin": {

package/src/api-client.mjs

@@ -94,6 +94,69 @@ export async function cliRequest({
   return data;
 }
 
+export function resolveComputeBaseUrl({ env = process.env } = {}) {
+  const base = env.ORNN_COMPUTE_BASE_URL?.trim();
+  if (!base) {
+    throw new CliApiError(
+      "Set ORNN_COMPUTE_BASE_URL to the internal compute service origin to run operator commands.",
+    );
+  }
+  return base.replace(/\/+$/, "");
+}
+
+export function resolveInternalReviewSecret({ env = process.env } = {}) {
+  const secret = env.ORNN_INTERNAL_REVIEW_SECRET?.trim();
+  if (!secret) {
+    throw new CliApiError(
+      "Set ORNN_INTERNAL_REVIEW_SECRET to authenticate operator commands.",
+    );
+  }
+  return secret;
+}
+
+export async function operatorRequest({
+  body,
+  endpoint,
+  env = process.env,
+  fetchImpl = fetch,
+  method = "GET",
+} = {}) {
+  // Operator path: hit compute directly with the review secret (not the tenant /api/cli proxy).
+  const baseUrl = resolveComputeBaseUrl({ env });
+  const secret = resolveInternalReviewSecret({ env });
+  const url = new URL(endpoint, `${baseUrl}/`);
+  const headers = {
+    Accept: "application/json",
+    "X-Internal-Review-Secret": secret,
+  };
+
+  let requestBody;
+  if (body !== undefined) {
+    headers["Content-Type"] = "application/json";
+    requestBody = typeof body === "string" ? body : JSON.stringify(body);
+  }
+
+  let response;
+  try {
+    response = await fetchImpl(url, { body: requestBody, headers, method });
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    throw new CliApiError(`Could not reach Ornn compute at ${baseUrl}: ${message}`);
+  }
+
+  const text = await response.text();
+  const data = text ? parseJson(text, url.toString(), response) : null;
+  if (!response.ok) {
+    const detail = data?.detail ?? data?.error ?? response.statusText;
+    const message = detailMessage(detail) || response.statusText;
+    throw new CliApiError(`Ornn request failed: ${message}`, {
+      detail: data,
+      status: response.status,
+    });
+  }
+  return data;
+}
+
 export function computeEndpoint(path) {
   const normalized = normalizeComputePath(path);
   return `/api/cli/compute${normalized}`;