@ornncompute/cli 0.2.5 → 0.2.7

package/README.md

@@ -72,12 +72,12 @@ ornn nodes keys attach <node-id> --key <path|id|label> [--json]
 ornn nodes keys list <node-id> [--json]
 ornn node health <node-id> [--json]
 ornn node diagnose <node-id> [--json]
-ornn node list [--operator <id-or-slug>] [--facility <id>] [--json]
+ornn node list [--operator <id-or-slug>] [--facility <id>] [--email <email>] [--json]
 ornn node reboot <node-id> [--json]
 ornn node hard-reset <node-id> [--json]
 ornn node off-grid <node-id> [--reason <text>] [--yes] [--json]
 ornn node on-grid <node-id> [--yes] [--json]
-ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--yes] [--json]
+ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--json]
 ornn node terminate <node-id> [--reason <text>] [--force] [--yes] [--json]
 ornn node admin-key <node-id> [--generate] [--json]
 ornn reservations commerce list --tenant <email-or-id> [--listing <listing-id>] [--json]
@@ -138,6 +138,14 @@ ornn storage buckets connect gcs|s3|r2 --bucket <bucket>|--url <url> [--name <na
 ornn storage buckets update-credentials <drive-id> --access-key-id <id> --secret-access-key-file <path> [--json]
 ornn storage buckets verify <drive-id> [--json]
 ornn storage buckets disconnect <drive-id> [--json]
+ornn storage filesystem deploy --reservation <reservation-id> [--performance-tier <tier>] [--capacity-gib <gib>] [--json]
+ornn storage filesystem status --reservation <reservation-id> [--json]
+ornn storage filesystem delete --reservation <reservation-id> [--json]
+ornn telemetry latest <node-id> [--span 15m] [--start <iso>] [--end <iso>] [--max-points <n>] [--json]
+ornn telemetry tail <node-id> [--duration <seconds>] [--json]
+ornn logs latest <node-id> [--stream kernel] [--count <n>] [--before <iso>] [--cursor <token>] [--json]
+ornn logs tail <node-id> [--stream kernel] [--duration <seconds>] [--json]
+ornn users query [--name <name>] [--email <email>] [--organization <name>] [--max <n>]
 ornn keys list [--json]
 ornn keys add [<public-key-file>] --label <label> [--public-key <key>] [--json]
 ornn keys delete <key-id> [--json]
@@ -236,21 +244,22 @@ path.
 - `ornn node health <node-id>` shows launch readiness (ready/blocked plus
   reasons), passive fault reasons, and the last validation status.
 - `ornn node diagnose <node-id>` queues a manual node validation test.
-- `ornn node list [--operator <id-or-slug>] [--facility <id>]` lists GPU nodes,
-  optionally filtered by operator and/or facility. A UUID operator is matched by
-  id; anything else is treated as the operator slug.
-- `ornn node reboot <node-id>` queues an OS reboot of the host backing the node
-  (storage and SSH keys preserved).
+- `ornn node list [--operator <id-or-slug>] [--facility <id>] [--email <email>]` lists GPU nodes.
+  Orchestrator applies facility id and an operator UUID. Non-UUID `--operator`
+  slugs and `--email` are forwarded today and do not filter the fleet.
+- `ornn node reboot <node-id>` queues an OS reboot of the node's resolved
+  instance (its host for bare-metal, its VM for a virtual-machine instance id;
+  storage and SSH keys preserved).
 - `ornn node hard-reset <node-id>` wipes tenant storage/users and reboots, then
   re-pushes the tenant's keys on reconnect. The tenant keeps ownership of the
-  host.
+  instance.
 - `ornn node off-grid <node-id> [--reason <text>] [--yes]` takes a node off-grid
   (remove Ornn agent management, leave the host powered on). Asks y/N unless `--yes`.
 - `ornn node on-grid <node-id> [--yes]` re-enrolls an off-grid host: orchestrator
   SSHs with the stored admin key and re-runs the installer. Asks y/N unless `--yes`.
-- `ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--yes]` runs
+- `ornn node exec <node-id> --command <shell> --timeout-seconds <n>` runs
   one unrestricted command over orchestrator SSH with the stored admin key. Not
-  an interactive shell (`ornn ssh`). Asks y/N unless `--yes`.
+  an interactive shell (`ornn ssh`). Runs immediately; no y/N.
 - `ornn node terminate <node-id> [--reason <text>] [--force] [--yes]` best-effort
   cleans the host, removes the Ornn agent, and hard-deletes the node record.
   It does not return the host to a tenant. Asks y/N unless `--yes`. There is no

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ornncompute/cli",
-  "version": "0.2.5",
+  "version": "0.2.7",
   "description": "Command-line interface for Ornn compute access workflows.",
   "type": "module",
   "bin": {

package/src/catalog-dispatch.mjs

@@ -468,24 +468,26 @@ export async function nodeOnGridCommand(args, context) {
 export async function nodeExecCommand(args, context) {
   const [nodeId, ...rest] = args;
   if (!nodeId) {
-    throw new Error("Usage: ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--yes] [--json]");
+    throw new Error("Usage: ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--json]");
   }
   const options = context.parseCommandOptions(
     rest,
     { boolean: ["json", "yes"], value: ["command", "timeout-seconds"] },
-    "Usage: ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--yes] [--json]",
+    "Usage: ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--json]",
   );
   const command = String(options.command ?? "").trim();
   const timeoutSeconds = Number(options.timeoutSeconds);
   if (!command || !Number.isFinite(timeoutSeconds) || timeoutSeconds <= 0) {
-    throw new Error("Usage: ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--yes] [--json]");
+    throw new Error("Usage: ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--json]");
   }
-  return runNodeLifecycle(
-    "nodeExecCapability",
-    { node_id: nodeId, command, timeout_seconds: timeoutSeconds, yes: options.yes === true },
-    context,
-    `Run ${JSON.stringify(command)} on node ${nodeId} (${timeoutSeconds}s)?`,
+  const { nodeExecCapability } = await loadCapabilities();
+  const result = await runCatalogCapability(
+    nodeExecCapability,
+    { node_id: nodeId, command, timeout_seconds: timeoutSeconds },
+    { ...context, staff: true, role: "admin" },
   );
+  context.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+  return 0;
 }
 
 export async function nodeTerminateCommand(args, context) {

package/src/cli.mjs

@@ -159,7 +159,7 @@ Usage:
   ornn node hard-reset <node-id> [--json]
   ornn node off-grid <node-id> [--reason <text>] [--yes] [--json]
   ornn node on-grid <node-id> [--yes] [--json]
-  ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--yes] [--json]
+  ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--json]
   ornn node terminate <node-id> [--reason <text>] [--force] [--yes] [--json]
   ornn node admin-key <node-id> [--generate] [--json]
   ornn operators list [--json]
@@ -2195,7 +2195,7 @@ function nodeOpUsage(subcommand) {
     return "Usage: ornn node on-grid <node-id> [--yes] [--json]";
   }
   if (subcommand === "exec") {
-    return "Usage: ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--yes] [--json]";
+    return "Usage: ornn node exec <node-id> --command <shell> --timeout-seconds <n> [--json]";
   }
   if (subcommand === "terminate") {
     return "Usage: ornn node terminate <node-id> [--reason <text>] [--force] [--yes] [--json]";

package/vendor/capabilities/capabilities/clusters.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { defineCapability } from "../capability.js";
+import { defineCapability, preview } from "../capability.js";
 const reservationInput = z.object({
     reservation_id: z.string().min(1),
     reservationId: z.string().optional(),
@@ -51,7 +51,7 @@ function clusterPair(kind, domain) {
                     return { ok: false, error: "other_cluster", reason: "other_cluster" };
                 }
                 if (!ctx.confirmed) {
-                    return { ok: true, action: `${kind}.launch`, reservation_id: id };
+                    return preview(`${kind}.launch`, { reservation_id: id });
                 }
                 return ctx.fetch(clusterPath(kind, id, "cluster/launch"), {
                     method: "POST",
@@ -75,7 +75,7 @@ function clusterPair(kind, domain) {
                 const parsed = reservationInput.parse(input);
                 const id = reservationId(parsed);
                 if (!ctx.confirmed) {
-                    return { ok: true, action: `${kind}.teardown`, reservation_id: id };
+                    return preview(`${kind}.teardown`, { reservation_id: id });
                 }
                 return ctx.fetch(clusterPath(kind, id, "cluster/teardown"), { method: "POST" });
             },

package/vendor/capabilities/capabilities/fleet.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { defineCapability } from "../capability.js";
+import { defineCapability, preview } from "../capability.js";
 function queryPath(path, params) {
     const parts = [];
     for (const [key, value] of Object.entries(params)) {
@@ -138,7 +138,7 @@ export const nodeOffGridCapability = defineCapability({
         const id = nodeIdOf(parsed);
         const body = { ...(parsed.reason ? { reason: parsed.reason } : {}) };
         if (!ctx.confirmed) {
-            return { ok: true, action: "node.off-grid", payload: { node_id: id, ...body } };
+            return preview("node.off-grid", { node_id: id, ...body });
         }
         return ctx.fetch(`/internal/nodes/${encodeURIComponent(id)}/off-grid`, {
             method: "POST",
@@ -167,7 +167,7 @@ export const nodeOnGridCapability = defineCapability({
         const parsed = nodeLifecycleInput.parse(input);
         const id = nodeIdOf(parsed);
         if (!ctx.confirmed) {
-            return { ok: true, action: "node.on-grid", payload: { node_id: id } };
+            return preview("node.on-grid", { node_id: id });
         }
         return ctx.fetch(`/internal/nodes/${encodeURIComponent(id)}/on-grid`, {
             method: "POST",
@@ -179,8 +179,8 @@ export const nodeExecCapability = defineCapability({
     id: "node.exec",
     domain: "fleet",
     roles: ["admin"],
-    description: "Admin-only. Run one unrestricted command on an enrolled node over orchestrator SSH with the stored admin key. Always pass timeout_seconds. Not an interactive shell. On NVIDIA hosts use nvidia-smi; on AMD Instinct use amd-smi. CLI asks y/N. Slack waits for a human confirm. MCP requires confirm: true.",
-    mutation: "preview-confirm",
+    description: "Admin-only. Run one unrestricted command on an enrolled node over orchestrator SSH with the stored admin key. Always pass timeout_seconds. Not an interactive shell. On NVIDIA hosts use nvidia-smi; on AMD Instinct use amd-smi. Runs on the tool call — no confirm, no y/N.",
+    mutation: "read",
     http: { method: "POST", path: "/internal/remote" },
     slack: {
         parameters: {
@@ -201,11 +201,10 @@ export const nodeExecCapability = defineCapability({
         const parsed = nodeExecInput.parse(input);
         const id = nodeIdOf(parsed);
         const timeoutSeconds = parsed.timeout_seconds ?? parsed.timeoutSeconds;
-        const payload = { node_id: id, command: parsed.command, timeout_seconds: timeoutSeconds };
-        if (!ctx.confirmed) {
-            return { ok: true, action: "node.exec", payload };
-        }
-        return ctx.fetch("/internal/remote", { method: "POST", body: payload });
+        return ctx.fetch("/internal/remote", {
+            method: "POST",
+            body: { node_id: id, command: parsed.command, timeout_seconds: timeoutSeconds },
+        });
     },
 });
 export const nodeTerminateCapability = defineCapability({
@@ -235,7 +234,7 @@ export const nodeTerminateCapability = defineCapability({
             ...(parsed.force !== undefined ? { force: parsed.force } : {}),
         };
         if (!ctx.confirmed) {
-            return { ok: true, action: "node.terminate", payload: { node_id: id, ...body } };
+            return preview("node.terminate", { node_id: id, ...body });
         }
         return ctx.fetch(`/internal/nodes/${encodeURIComponent(id)}/terminate`, {
             method: "POST",

package/vendor/capabilities/capabilities/listings.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { defineCapability } from "../capability.js";
+import { defineCapability, preview } from "../capability.js";
 import { bindHardwareFields, HARDWARE_LISTING_FIELDS, HARDWARE_LISTING_FILTERS, loadHardwareCatalog, projectCatalogTerms, } from "../spec-catalog.js";
 export const listingCreateInput = z.object({
     kind: z.enum(["gpu", "cpu", "node", "link"]).optional(),
@@ -147,7 +147,7 @@ export const createListingCapability = defineCapability({
             return bound;
         const payload = { backing_mode: "forward", ...bound.payload };
         if (!ctx.confirmed) {
-            return { ok: true, action: "create_listing", payload };
+            return preview("create_listing", payload);
         }
         return ctx.fetch("/inventory", { method: "POST", body: payload });
     },

package/vendor/capabilities/capabilities/tokens.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { defineCapability } from "../capability.js";
+import { defineCapability, preview } from "../capability.js";
 const optionalText = z.string().nullish();
 const tokenCreateInput = z.object({
     operator_id: z.string().min(1),
@@ -107,7 +107,7 @@ export const tokensCreateCapability = defineCapability({
             remote: hosts.length > 0 && privateKey.length > 0,
         };
         if (!ctx.confirmed) {
-            return { ok: true, action: "tokens.create", payload: { ...payload, private_key: privateKey ? "[redacted]" : "" } };
+            return preview("tokens.create", { ...payload, private_key: privateKey ? "[redacted]" : "" });
         }
         const minted = (await ctx.fetch("/internal/enrollment-tokens", {
             method: "POST",

package/vendor/capabilities/capability.d.ts

@@ -19,6 +19,24 @@ export type CapabilityContext = {
     /** Human (or MCP) confirmed a preview-confirm mutation. Execute never POSTs without this. */
     confirmed?: boolean;
 };
+/** The un-executed result of a `preview-confirm` capability. */
+export type PreviewResult = {
+    status: "preview";
+    requiresConfirm: true;
+    confirmed: false;
+    action: string;
+    payload: unknown;
+};
+/**
+ * Build a preview-confirm capability's un-executed result.
+ *
+ * Previews used to return `{ ok: true, action, payload }`, which is
+ * indistinguishable from a completed mutation to anyone skimming the JSON --
+ * a human, or an LLM deciding whether its call took effect. ORN-3417 recorded
+ * a live `node.off-grid` preview as a confirm-gate failure for exactly that
+ * reason. `status: "preview"` states it outright, and carries no `ok`.
+ */
+export declare function preview(action: string, payload: unknown): PreviewResult;
 export type JsonSchema = {
     type: "object";
     properties?: Record<string, unknown>;

package/vendor/capabilities/capability.js

@@ -16,6 +16,18 @@ export const DOMAINS = [
     "billing",
     "observability",
 ];
+/**
+ * Build a preview-confirm capability's un-executed result.
+ *
+ * Previews used to return `{ ok: true, action, payload }`, which is
+ * indistinguishable from a completed mutation to anyone skimming the JSON --
+ * a human, or an LLM deciding whether its call took effect. ORN-3417 recorded
+ * a live `node.off-grid` preview as a confirm-gate failure for exactly that
+ * reason. `status: "preview"` states it outright, and carries no `ok`.
+ */
+export function preview(action, payload) {
+    return { status: "preview", requiresConfirm: true, confirmed: false, action, payload };
+}
 /** Fill CLI/MCP/Slack names from `id`. Slack parameters stay optional. */
 export function defineCapability(spec) {
     const names = namesFromId(spec.id);

package/vendor/capabilities/index.d.ts

@@ -1,4 +1,4 @@
-export { byCliCommand, byMcpName, bySlackName, defineCapability, forRole, slackStaffVisible, visibleToClient, type Capability, type CapabilityBindings, type CapabilityContext, type CapabilitySpec, type JsonSchema, type CapabilityTransport, type Domain, type HttpSpec, type Mutation, } from "./capability.ts";
+export { byCliCommand, byMcpName, bySlackName, defineCapability, forRole, preview, slackStaffVisible, visibleToClient, type Capability, type CapabilityBindings, type CapabilityContext, type CapabilitySpec, type JsonSchema, type CapabilityTransport, type Domain, type HttpSpec, type Mutation, type PreviewResult, } from "./capability.ts";
 export { namesFromId } from "./names.ts";
 export { catalog } from "./catalog.ts";
 export { fleetCapabilities, listFacilitiesCapability, listNodesCapability, listOperatorsCapability, nodeExecCapability, nodeOffGridCapability, nodeOnGridCapability, nodeTerminateCapability, } from "./capabilities/fleet.ts";

package/vendor/capabilities/index.js

@@ -1,4 +1,4 @@
-export { byCliCommand, byMcpName, bySlackName, defineCapability, forRole, slackStaffVisible, visibleToClient, } from "./capability.js";
+export { byCliCommand, byMcpName, bySlackName, defineCapability, forRole, preview, slackStaffVisible, visibleToClient, } from "./capability.js";
 export { namesFromId } from "./names.js";
 export { catalog } from "./catalog.js";
 export { fleetCapabilities, listFacilitiesCapability, listNodesCapability, listOperatorsCapability, nodeExecCapability, nodeOffGridCapability, nodeOnGridCapability, nodeTerminateCapability, } from "./capabilities/fleet.js";