@ornncompute/cli 1.0.122 → 1.0.123

package/README.md

@@ -69,6 +69,10 @@ The CLI uses Authorization's newest membership on every request, regardless of
 approval. `ornn context` displays that current organization; login and launch
 use the same context. Reserve browsing and purchasing still require approval.
 
+Node and VM requests use `@ornn/api-client/orchestrator`; CLI selection, polling,
+and SSH remain here. VM readiness comes from the guest resource, separately from
+physical-host readiness. See [machine behavior](../../docs/cli.md#customer-workflows).
+
 Advanced customer resources are registered under one noun and one verb:
 
 ```text
@@ -271,6 +275,10 @@ Global interaction modifiers are `--format`, `--guided`, `--wait`,
 as `--erase-local-data` or `--delete-node-record`. Machine retries require a
 caller-stable idempotency key and reconcile against durable owner state.
 
+Access-mode changes preserve the reported network mode and require an
+explicit `--network` when it is unreported. A same-mode request stays read-only,
+including its bounded wait; an existing request key reconciles its owner receipt.
+
 Permanent deletion and teardown requests execute directly when explicitly
 requested. Private networks, detached volumes, and
 Kubernetes or Slurm clusters use their command arguments to express the exact

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ornncompute/cli",
-  "version": "1.0.122",
+  "version": "1.0.123",
   "description": "Command-line interface for Ornn compute access workflows.",
   "type": "module",
   "bin": {

package/src/admin-node-diagnostics.mjs

@@ -1,3 +1,4 @@
+import * as orchestrator from "../vendor/api-client/orchestrator.js";
 import { createHash } from "node:crypto";
 
 import { ADMIN_MUTATION_SAFETY, AdminMutationError, runAdminMutation } from "./admin-mutations.mjs";
@@ -140,10 +141,7 @@ function reviewFields(target) {
 }
 
 async function prepareTarget(input, runtime, fetch) {
-  const payload = await fetch(`/nodes/${encodeURIComponent(input.node_id)}`, {
-    method: "GET",
-    ...(runtime.signal ? { signal: runtime.signal } : {}),
-  });
+  const payload = await orchestrator.getNode(fetch, input.node_id, runtime.signal);
   return nodeContext(payload, input.node_id);
 }
 

package/src/admin-node-lifecycle.mjs

@@ -1,3 +1,4 @@
+import * as orchestrator from "../vendor/api-client/orchestrator.js";
 import { getReservation } from "../vendor/api-client/commerce.js";
 import { ADMIN_MUTATION_SAFETY, AdminMutationError, runAdminMutation } from "./admin-mutations.mjs";
 import { isRecoverableWaitFailure } from "./interaction-runtime.mjs";
@@ -210,10 +211,7 @@ function isNotFound(error) {
 
 async function readNodeById(fetch, id, { allowMissing = false, signal } = {}) {
   try {
-    return await fetch(`/nodes/${encodeURIComponent(id)}`, {
-      method: "GET",
-      ...(signal ? { signal } : {}),
-    });
+    return await orchestrator.getNode(fetch, id, signal);
   } catch (error) {
     if (allowMissing && isNotFound(error)) return null;
     throw error;
@@ -238,7 +236,7 @@ async function resolveNode(fetch, reference, { allowMissing = false, machine = f
     });
   }
   const folded = reference.toLocaleLowerCase("en-US");
-  const matches = nodeRows(await fetch("/nodes", { method: "GET" })).filter((node) => {
+  const matches = nodeRows(await orchestrator.listStaffNodes(fetch)).filter((node) => {
     const names = [node?.hostname, node?.k8s_node_name]
       .map(text)
       .filter(Boolean)
@@ -282,9 +280,7 @@ async function resolveLiveMachine(fetch, node) {
     );
   }
   const rows = machineRows(
-    await fetch(`/nodes?reservation_id=${encodeURIComponent(reservation)}`, {
-      method: "GET",
-    })
+    await orchestrator.listStaffNodes(fetch, { reservation_id: reservation })
   );
   const refs = new Set([id, text(node?.id), text(node?.k8s_node_name)].filter(Boolean));
   const matches = rows.filter((machine) => refs.has(text(machine?.node_id)));

package/src/admin-ssh.mjs

@@ -1,3 +1,4 @@
+import * as orchestrator from "../vendor/api-client/orchestrator.js";
 import { spawn } from "node:child_process";
 import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
 import { constants, tmpdir } from "node:os";
@@ -21,7 +22,7 @@ function run(program, args, signal) {
 
 export async function openAdminSsh({ input, fetch, execute, runtime }, { runProcess = run } = {}) {
   // Read the existing node route; issuance returns only its own certificate.
-  const node = await fetch(`/nodes/${encodeURIComponent(input.node_id)}`, { method: "GET" });
+  const node = await orchestrator.getNode(fetch, input.node_id);
   const host = node.ip;
   const port = node.port ?? 22;
   if (

package/src/api-client.mjs

@@ -251,9 +251,12 @@ export function resolveInstallerBaseUrl({ env = process.env } = {}) {
 }
 
 function operatorProxyEndpoint(endpoint) {
-  // Shared clients use canonical staff or Benchmark paths. Keep the existing
+  // Shared clients use canonical staff or owner paths. Keep the existing
   // staff envelope, including its admin-role and impersonation checks.
-  const path = normalizeComputePath(endpoint).replace(/^\/v1\/(?:staff|benchmark)(?=\/|$)/, "");
+  const path = normalizeComputePath(endpoint).replace(
+    /^\/v1\/(?:staff|benchmark|orchestrator)(?=\/|$)/,
+    ""
+  );
   return `/v1/staff${path}`;
 }
 

package/src/evidence-commands.mjs

@@ -1,7 +1,11 @@
 import * as gatewayApi from "../vendor/api-client/gateway.js";
 import { gpuLabeler } from "./gpu-catalog.mjs";
 import { clusterFactLabel, reservationFactsForCluster } from "./kubernetes-commands.mjs";
-import { listOwnedActiveMachines, resolveMachineReference } from "./machine-reference.mjs";
+import {
+  canonicalMachineId as machineId,
+  listOwnedActiveMachines,
+  resolveMachineReference,
+} from "./machine-reference.mjs";
 import { machineReachability } from "./vm-commands.mjs";
 
 const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
@@ -106,11 +110,6 @@ function containsUnsafeFields(value) {
   });
 }
 
-function machineId(value) {
-  const source = record(value);
-  return text(source.id) ?? text(source.machine_id) ?? text(source.instance_id);
-}
-
 function reservationId(value) {
   const source = record(value);
   return text(source.reservation_id) ?? text(source.reservationId);
@@ -250,6 +249,11 @@ function lifecycle(value, kind) {
   if (["failed", "error", "unavailable"].includes(state)) {
     return { class: "failed", phase: "failed" };
   }
+  if (state === "bare_metal") {
+    return source.health_readiness?.ready === true
+      ? { class: "ready", phase: "active" }
+      : { class: "working", phase: "provisioning" };
+  }
   if (["active", "online", "ready", "running", "provisioned"].includes(state)) {
     return { class: "ready", phase: kind === "cluster" ? "access_ready" : "active" };
   }

package/src/interaction-runtime.mjs

@@ -2,6 +2,7 @@ import { randomUUID } from "node:crypto";
 import { createInterface } from "node:readline/promises";
 
 import { resolveAuthBaseUrl } from "./device-auth.mjs";
+import { CliApiError } from "./api-client.mjs";
 
 const BOOLEAN_OPTIONS = new Set([
   "acknowledge-retained-os",
@@ -53,6 +54,7 @@ export class InteractionError extends Error {
 }
 
 export function isRecoverableWaitFailure(error) {
+  if (error instanceof CliApiError && error.status === undefined) return true;
   const status = Number(error?.status);
   if (status === 401 || status === 403 || (Number.isFinite(status) && status >= 500)) {
     return true;

package/src/machine-reference.mjs

@@ -1,3 +1,4 @@
+import * as orchestrator from "../vendor/api-client/orchestrator.js";
 import { getCliSession } from "../vendor/api-client/authorization.js";
 import { listAllReservations } from "../vendor/api-client/commerce.js";
 import { gpuLabeler } from "./gpu-catalog.mjs";
@@ -139,8 +140,9 @@ export async function listActiveDirectReservations(context, interaction) {
   );
 }
 
-export async function listOwnedActiveMachines(context, interaction) {
-  const reservations = await listActiveDirectReservations(context, interaction);
+export async function listOwnedActiveMachines(context, interaction, activeReservations) {
+  const reservations =
+    activeReservations ?? (await listActiveDirectReservations(context, interaction));
   const pages = await Promise.all(
     reservations.map(async (reservation) => {
       const ref = reservationId(reservation);
@@ -150,21 +152,13 @@ export async function listOwnedActiveMachines(context, interaction) {
           "The gateway returned a capacity reservation without a canonical identifier."
         );
       }
-      const payload = await context.fetch(
-        `/v1/workflows/compute/nodes/reservations/${encodeURIComponent(ref)}/machines`,
-        { method: "GET" }
-      );
+      const payload = await orchestrator.listNodes(context.fetch, { reservation_id: ref });
       const machineRows = rows(payload, "machines");
       if (!machineRows)
         invalidGateway(interaction, "The gateway returned an invalid machine collection.");
       return machineRows
         .map(record)
-        .filter((machine) => !TERMINAL_MACHINE_STATES.has(machineState(machine)))
-        .map((machine) => ({
-          ...machine,
-          reservation_id:
-            text(machine.reservation_id) ?? text(machine.commerce_reservation_id) ?? ref,
-        }));
+        .filter((machine) => !TERMINAL_MACHINE_STATES.has(machineState(machine)));
     })
   );
 
@@ -185,11 +179,7 @@ export async function listOwnedActiveMachines(context, interaction) {
 
 async function fetchCanonicalMachine(reference, context, interaction, { allowMiss = false } = {}) {
   try {
-    const machine = record(
-      await context.fetch(`/v1/workflows/compute/nodes/${encodeURIComponent(reference)}`, {
-        method: "GET",
-      })
-    );
+    const machine = record(await orchestrator.getNode(context.fetch, reference));
     if (canonicalMachineId(machine)?.toLowerCase() !== reference.toLowerCase()) {
       invalidGateway(
         interaction,