@ornncompute/cli 0.2.5 → 0.2.6

package/README.md

@@ -77,7 +77,7 @@ ornn node reboot <node-id> [--json]
 ornn node hard-reset <node-id> [--json]
 ornn node off-grid <node-id> [--reason <text>] [--yes] [--json]
 ornn node on-grid <node-id> [--yes] [--json]
-ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--yes] [--json]
+ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--json]
 ornn node terminate <node-id> [--reason <text>] [--force] [--yes] [--json]
 ornn node admin-key <node-id> [--generate] [--json]
 ornn reservations commerce list --tenant <email-or-id> [--listing <listing-id>] [--json]
@@ -248,9 +248,9 @@ path.
   (remove Ornn agent management, leave the host powered on). Asks y/N unless `--yes`.
 - `ornn node on-grid <node-id> [--yes]` re-enrolls an off-grid host: orchestrator
   SSHs with the stored admin key and re-runs the installer. Asks y/N unless `--yes`.
-- `ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--yes]` runs
+- `ornn node exec <node-id> --command <shell> --timeout-seconds <n>` runs
   one unrestricted command over orchestrator SSH with the stored admin key. Not
-  an interactive shell (`ornn ssh`). Asks y/N unless `--yes`.
+  an interactive shell (`ornn ssh`). Runs immediately; no y/N.
 - `ornn node terminate <node-id> [--reason <text>] [--force] [--yes]` best-effort
   cleans the host, removes the Ornn agent, and hard-deletes the node record.
   It does not return the host to a tenant. Asks y/N unless `--yes`. There is no

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ornncompute/cli",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "Command-line interface for Ornn compute access workflows.",
   "type": "module",
   "bin": {

package/src/catalog-dispatch.mjs

@@ -468,24 +468,26 @@ export async function nodeOnGridCommand(args, context) {
 export async function nodeExecCommand(args, context) {
   const [nodeId, ...rest] = args;
   if (!nodeId) {
-    throw new Error("Usage: ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--yes] [--json]");
+    throw new Error("Usage: ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--json]");
   }
   const options = context.parseCommandOptions(
     rest,
     { boolean: ["json", "yes"], value: ["command", "timeout-seconds"] },
-    "Usage: ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--yes] [--json]",
+    "Usage: ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--json]",
   );
   const command = String(options.command ?? "").trim();
   const timeoutSeconds = Number(options.timeoutSeconds);
   if (!command || !Number.isFinite(timeoutSeconds) || timeoutSeconds <= 0) {
-    throw new Error("Usage: ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--yes] [--json]");
+    throw new Error("Usage: ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--json]");
   }
-  return runNodeLifecycle(
-    "nodeExecCapability",
-    { node_id: nodeId, command, timeout_seconds: timeoutSeconds, yes: options.yes === true },
-    context,
-    `Run ${JSON.stringify(command)} on node ${nodeId} (${timeoutSeconds}s)?`,
+  const { nodeExecCapability } = await loadCapabilities();
+  const result = await runCatalogCapability(
+    nodeExecCapability,
+    { node_id: nodeId, command, timeout_seconds: timeoutSeconds },
+    { ...context, staff: true, role: "admin" },
   );
+  context.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+  return 0;
 }
 
 export async function nodeTerminateCommand(args, context) {

package/src/cli.mjs

@@ -159,7 +159,7 @@ Usage:
   ornn node hard-reset <node-id> [--json]
   ornn node off-grid <node-id> [--reason <text>] [--yes] [--json]
   ornn node on-grid <node-id> [--yes] [--json]
-  ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--yes] [--json]
+  ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--json]
   ornn node terminate <node-id> [--reason <text>] [--force] [--yes] [--json]
   ornn node admin-key <node-id> [--generate] [--json]
   ornn operators list [--json]
@@ -2195,7 +2195,7 @@ function nodeOpUsage(subcommand) {
     return "Usage: ornn node on-grid <node-id> [--yes] [--json]";
   }
   if (subcommand === "exec") {
-    return "Usage: ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--yes] [--json]";
+    return "Usage: ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--json]";
   }
   if (subcommand === "terminate") {
     return "Usage: ornn node terminate <node-id> [--reason <text>] [--force] [--yes] [--json]";

package/vendor/capabilities/capabilities/fleet.js

@@ -179,8 +179,8 @@ export const nodeExecCapability = defineCapability({
     id: "node.exec",
     domain: "fleet",
     roles: ["admin"],
-    description: "Admin-only. Run one unrestricted command on an enrolled node over orchestrator SSH with the stored admin key. Always pass timeout_seconds. Not an interactive shell. On NVIDIA hosts use nvidia-smi; on AMD Instinct use amd-smi. CLI asks y/N. Slack waits for a human confirm. MCP requires confirm: true.",
-    mutation: "preview-confirm",
+    description: "Admin-only. Run one unrestricted command on an enrolled node over orchestrator SSH with the stored admin key. Always pass timeout_seconds. Not an interactive shell. On NVIDIA hosts use nvidia-smi; on AMD Instinct use amd-smi. Runs on the tool call — no confirm, no y/N.",
+    mutation: "read",
     http: { method: "POST", path: "/internal/remote" },
     slack: {
         parameters: {
@@ -201,11 +201,10 @@ export const nodeExecCapability = defineCapability({
         const parsed = nodeExecInput.parse(input);
         const id = nodeIdOf(parsed);
         const timeoutSeconds = parsed.timeout_seconds ?? parsed.timeoutSeconds;
-        const payload = { node_id: id, command: parsed.command, timeout_seconds: timeoutSeconds };
-        if (!ctx.confirmed) {
-            return { ok: true, action: "node.exec", payload };
-        }
-        return ctx.fetch("/internal/remote", { method: "POST", body: payload });
+        return ctx.fetch("/internal/remote", {
+            method: "POST",
+            body: { node_id: id, command: parsed.command, timeout_seconds: timeoutSeconds },
+        });
     },
 });
 export const nodeTerminateCapability = defineCapability({