@ornncompute/cli 0.2.6 → 0.2.7

package/README.md

@@ -72,7 +72,7 @@ ornn nodes keys attach <node-id> --key <path|id|label> [--json]
 ornn nodes keys list <node-id> [--json]
 ornn node health <node-id> [--json]
 ornn node diagnose <node-id> [--json]
-ornn node list [--operator <id-or-slug>] [--facility <id>] [--json]
+ornn node list [--operator <id-or-slug>] [--facility <id>] [--email <email>] [--json]
 ornn node reboot <node-id> [--json]
 ornn node hard-reset <node-id> [--json]
 ornn node off-grid <node-id> [--reason <text>] [--yes] [--json]
@@ -138,6 +138,14 @@ ornn storage buckets connect gcs|s3|r2 --bucket <bucket>|--url <url> [--name <na
 ornn storage buckets update-credentials <drive-id> --access-key-id <id> --secret-access-key-file <path> [--json]
 ornn storage buckets verify <drive-id> [--json]
 ornn storage buckets disconnect <drive-id> [--json]
+ornn storage filesystem deploy --reservation <reservation-id> [--performance-tier <tier>] [--capacity-gib <gib>] [--json]
+ornn storage filesystem status --reservation <reservation-id> [--json]
+ornn storage filesystem delete --reservation <reservation-id> [--json]
+ornn telemetry latest <node-id> [--span 15m] [--start <iso>] [--end <iso>] [--max-points <n>] [--json]
+ornn telemetry tail <node-id> [--duration <seconds>] [--json]
+ornn logs latest <node-id> [--stream kernel] [--count <n>] [--before <iso>] [--cursor <token>] [--json]
+ornn logs tail <node-id> [--stream kernel] [--duration <seconds>] [--json]
+ornn users query [--name <name>] [--email <email>] [--organization <name>] [--max <n>]
 ornn keys list [--json]
 ornn keys add [<public-key-file>] --label <label> [--public-key <key>] [--json]
 ornn keys delete <key-id> [--json]
@@ -236,14 +244,15 @@ path.
 - `ornn node health <node-id>` shows launch readiness (ready/blocked plus
   reasons), passive fault reasons, and the last validation status.
 - `ornn node diagnose <node-id>` queues a manual node validation test.
-- `ornn node list [--operator <id-or-slug>] [--facility <id>]` lists GPU nodes,
-  optionally filtered by operator and/or facility. A UUID operator is matched by
-  id; anything else is treated as the operator slug.
-- `ornn node reboot <node-id>` queues an OS reboot of the host backing the node
-  (storage and SSH keys preserved).
+- `ornn node list [--operator <id-or-slug>] [--facility <id>] [--email <email>]` lists GPU nodes.
+  Orchestrator applies facility id and an operator UUID. Non-UUID `--operator`
+  slugs and `--email` are forwarded today and do not filter the fleet.
+- `ornn node reboot <node-id>` queues an OS reboot of the node's resolved
+  instance (its host for bare-metal, its VM for a virtual-machine instance id;
+  storage and SSH keys preserved).
 - `ornn node hard-reset <node-id>` wipes tenant storage/users and reboots, then
   re-pushes the tenant's keys on reconnect. The tenant keeps ownership of the
-  host.
+  instance.
 - `ornn node off-grid <node-id> [--reason <text>] [--yes]` takes a node off-grid
   (remove Ornn agent management, leave the host powered on). Asks y/N unless `--yes`.
 - `ornn node on-grid <node-id> [--yes]` re-enrolls an off-grid host: orchestrator

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ornncompute/cli",
-  "version": "0.2.6",
+  "version": "0.2.7",
   "description": "Command-line interface for Ornn compute access workflows.",
   "type": "module",
   "bin": {

package/vendor/capabilities/capabilities/clusters.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { defineCapability } from "../capability.js";
+import { defineCapability, preview } from "../capability.js";
 const reservationInput = z.object({
     reservation_id: z.string().min(1),
     reservationId: z.string().optional(),
@@ -51,7 +51,7 @@ function clusterPair(kind, domain) {
                     return { ok: false, error: "other_cluster", reason: "other_cluster" };
                 }
                 if (!ctx.confirmed) {
-                    return { ok: true, action: `${kind}.launch`, reservation_id: id };
+                    return preview(`${kind}.launch`, { reservation_id: id });
                 }
                 return ctx.fetch(clusterPath(kind, id, "cluster/launch"), {
                     method: "POST",
@@ -75,7 +75,7 @@ function clusterPair(kind, domain) {
                 const parsed = reservationInput.parse(input);
                 const id = reservationId(parsed);
                 if (!ctx.confirmed) {
-                    return { ok: true, action: `${kind}.teardown`, reservation_id: id };
+                    return preview(`${kind}.teardown`, { reservation_id: id });
                 }
                 return ctx.fetch(clusterPath(kind, id, "cluster/teardown"), { method: "POST" });
             },

package/vendor/capabilities/capabilities/fleet.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { defineCapability } from "../capability.js";
+import { defineCapability, preview } from "../capability.js";
 function queryPath(path, params) {
     const parts = [];
     for (const [key, value] of Object.entries(params)) {
@@ -138,7 +138,7 @@ export const nodeOffGridCapability = defineCapability({
         const id = nodeIdOf(parsed);
         const body = { ...(parsed.reason ? { reason: parsed.reason } : {}) };
         if (!ctx.confirmed) {
-            return { ok: true, action: "node.off-grid", payload: { node_id: id, ...body } };
+            return preview("node.off-grid", { node_id: id, ...body });
         }
         return ctx.fetch(`/internal/nodes/${encodeURIComponent(id)}/off-grid`, {
             method: "POST",
@@ -167,7 +167,7 @@ export const nodeOnGridCapability = defineCapability({
         const parsed = nodeLifecycleInput.parse(input);
         const id = nodeIdOf(parsed);
         if (!ctx.confirmed) {
-            return { ok: true, action: "node.on-grid", payload: { node_id: id } };
+            return preview("node.on-grid", { node_id: id });
         }
         return ctx.fetch(`/internal/nodes/${encodeURIComponent(id)}/on-grid`, {
             method: "POST",
@@ -234,7 +234,7 @@ export const nodeTerminateCapability = defineCapability({
             ...(parsed.force !== undefined ? { force: parsed.force } : {}),
         };
         if (!ctx.confirmed) {
-            return { ok: true, action: "node.terminate", payload: { node_id: id, ...body } };
+            return preview("node.terminate", { node_id: id, ...body });
         }
         return ctx.fetch(`/internal/nodes/${encodeURIComponent(id)}/terminate`, {
             method: "POST",

package/vendor/capabilities/capabilities/listings.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { defineCapability } from "../capability.js";
+import { defineCapability, preview } from "../capability.js";
 import { bindHardwareFields, HARDWARE_LISTING_FIELDS, HARDWARE_LISTING_FILTERS, loadHardwareCatalog, projectCatalogTerms, } from "../spec-catalog.js";
 export const listingCreateInput = z.object({
     kind: z.enum(["gpu", "cpu", "node", "link"]).optional(),
@@ -147,7 +147,7 @@ export const createListingCapability = defineCapability({
             return bound;
         const payload = { backing_mode: "forward", ...bound.payload };
         if (!ctx.confirmed) {
-            return { ok: true, action: "create_listing", payload };
+            return preview("create_listing", payload);
         }
         return ctx.fetch("/inventory", { method: "POST", body: payload });
     },

package/vendor/capabilities/capabilities/tokens.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { defineCapability } from "../capability.js";
+import { defineCapability, preview } from "../capability.js";
 const optionalText = z.string().nullish();
 const tokenCreateInput = z.object({
     operator_id: z.string().min(1),
@@ -107,7 +107,7 @@ export const tokensCreateCapability = defineCapability({
             remote: hosts.length > 0 && privateKey.length > 0,
         };
         if (!ctx.confirmed) {
-            return { ok: true, action: "tokens.create", payload: { ...payload, private_key: privateKey ? "[redacted]" : "" } };
+            return preview("tokens.create", { ...payload, private_key: privateKey ? "[redacted]" : "" });
         }
         const minted = (await ctx.fetch("/internal/enrollment-tokens", {
             method: "POST",

package/vendor/capabilities/capability.d.ts

@@ -19,6 +19,24 @@ export type CapabilityContext = {
     /** Human (or MCP) confirmed a preview-confirm mutation. Execute never POSTs without this. */
     confirmed?: boolean;
 };
+/** The un-executed result of a `preview-confirm` capability. */
+export type PreviewResult = {
+    status: "preview";
+    requiresConfirm: true;
+    confirmed: false;
+    action: string;
+    payload: unknown;
+};
+/**
+ * Build a preview-confirm capability's un-executed result.
+ *
+ * Previews used to return `{ ok: true, action, payload }`, which is
+ * indistinguishable from a completed mutation to anyone skimming the JSON --
+ * a human, or an LLM deciding whether its call took effect. ORN-3417 recorded
+ * a live `node.off-grid` preview as a confirm-gate failure for exactly that
+ * reason. `status: "preview"` states it outright, and carries no `ok`.
+ */
+export declare function preview(action: string, payload: unknown): PreviewResult;
 export type JsonSchema = {
     type: "object";
     properties?: Record<string, unknown>;

package/vendor/capabilities/capability.js

@@ -16,6 +16,18 @@ export const DOMAINS = [
     "billing",
     "observability",
 ];
+/**
+ * Build a preview-confirm capability's un-executed result.
+ *
+ * Previews used to return `{ ok: true, action, payload }`, which is
+ * indistinguishable from a completed mutation to anyone skimming the JSON --
+ * a human, or an LLM deciding whether its call took effect. ORN-3417 recorded
+ * a live `node.off-grid` preview as a confirm-gate failure for exactly that
+ * reason. `status: "preview"` states it outright, and carries no `ok`.
+ */
+export function preview(action, payload) {
+    return { status: "preview", requiresConfirm: true, confirmed: false, action, payload };
+}
 /** Fill CLI/MCP/Slack names from `id`. Slack parameters stay optional. */
 export function defineCapability(spec) {
     const names = namesFromId(spec.id);

package/vendor/capabilities/index.d.ts

@@ -1,4 +1,4 @@
-export { byCliCommand, byMcpName, bySlackName, defineCapability, forRole, slackStaffVisible, visibleToClient, type Capability, type CapabilityBindings, type CapabilityContext, type CapabilitySpec, type JsonSchema, type CapabilityTransport, type Domain, type HttpSpec, type Mutation, } from "./capability.ts";
+export { byCliCommand, byMcpName, bySlackName, defineCapability, forRole, preview, slackStaffVisible, visibleToClient, type Capability, type CapabilityBindings, type CapabilityContext, type CapabilitySpec, type JsonSchema, type CapabilityTransport, type Domain, type HttpSpec, type Mutation, type PreviewResult, } from "./capability.ts";
 export { namesFromId } from "./names.ts";
 export { catalog } from "./catalog.ts";
 export { fleetCapabilities, listFacilitiesCapability, listNodesCapability, listOperatorsCapability, nodeExecCapability, nodeOffGridCapability, nodeOnGridCapability, nodeTerminateCapability, } from "./capabilities/fleet.ts";

package/vendor/capabilities/index.js

@@ -1,4 +1,4 @@
-export { byCliCommand, byMcpName, bySlackName, defineCapability, forRole, slackStaffVisible, visibleToClient, } from "./capability.js";
+export { byCliCommand, byMcpName, bySlackName, defineCapability, forRole, preview, slackStaffVisible, visibleToClient, } from "./capability.js";
 export { namesFromId } from "./names.js";
 export { catalog } from "./catalog.js";
 export { fleetCapabilities, listFacilitiesCapability, listNodesCapability, listOperatorsCapability, nodeExecCapability, nodeOffGridCapability, nodeOnGridCapability, nodeTerminateCapability, } from "./capabilities/fleet.js";