@ornncompute/cli 1.0.35 → 1.0.62

package/README.md

@@ -59,11 +59,9 @@ ornn resources
 Advanced customer resources are registered under one noun and one verb:
 
 ```text
-capacity-offers  list | show | relist | update | delist
-reservations     list | show | invoices
-fees             show
-spot             books | book | trades | bid | orders | cancel
-schedules        list | show | buy
+capacity-offers  list | show | terms | availability | relist | delist
+reservations     list | show | invoices | buy
+market           books | book | trades | bid | orders | cancel
 offers           list | post | accept | cancel
 machines         list | show | wait | switch | reboot | reset | metrics | logs
 clusters         list | show | wait | eligible-machines | add-node | remove-node | teardown | metrics | logs
@@ -82,34 +80,60 @@ filesystems      deploy | show | wait | delete
 `ssh-keys list` uses backend cursors; see [pagination](../../docs/cli.md#advanced-customer-resources).
 
 Market commands call one gateway route each and print that route's JSON.
-`capacity-offers` reads Commerce listings (`/commerce/listings`) and relists a
-schedule reservation you hold, or a primary listing you own, as a secondary
-listing with an asking price, its only price: buyers buy its windows at that
-price with no acceptance. `reservations` reads Commerce
-reservations, schedule and spot alike. `spot`, `schedules`, and `offers` call
-Markets (`/v1/markets`): place 1-8 GPU spot bids (one node each), buy a
-secondary window at its asking price (`schedules buy`), post offers on a
-primary listing's schedule, and accept or cancel offers on primaries you own.
+`capacity-offers list|show|terms` reads native Commerce capacity
+(`/commerce/v2/listings*`). List/show return parent fields with `capacityListingId`;
+pass it as `--listing-id`. `terms` separately returns advertised financial choices
+with `listingTermsId`, price, duration bounds, down payment and renewable flag.
+List accepts limits of 1–100 and the owner cursor unchanged. `availability`
+reads Markets `/v1/markets/listings/{id}/availability` (optional `--from`/`--to`)
+as windows of free GPUs and the whole machines those GPUs make
+([Markets routes](../../services/markets/README.md#routes)). Relisting uses
+`POST /commerce/reservations/{id}/relist` with `nodeCount`, dates, and a
+`terms` array. The body does not take node IDs. Delisting uses the native parent’s `/delist` POST. `reservations` reads Commerce
+reservations, schedule and spot alike; `reservations buy` books one window of a
+relisted (secondary) listing term with Markets `POST /v1/markets/bookings`
+(`{legs: [...]}`), at the term price `terms` shows; it becomes a reservation
+when the window starts. `market` and `offers` call Markets (`/v1/markets`):
+buy `--nodes` at market (Markets also takes GPU counts and limit bids; the
+CLI does not send them yet), end a fill with
+`market end` (Commerce `POST /commerce/reservations/{id}/stop`), post an offer
+on a whole primary listing for one of its terms (`--listing-term-id`, optional
+`--duration-seconds`), list the offers your organization made or received, and
+accept or cancel offers by `--offer-id`.
 Prices are integer micro-USD per GPU-hour (`1000000` is $1.00). Every write
 reviews its terms and needs default-no consent, or `--yes` with
-`--format json`; writes accept `--idempotency-key`. Payment methods and
-invoices are managed in the web app. Launch consumes already allocated
+`--format json`; writes accept `--idempotency-key`. Customer payment methods and
+billing stay in the web app. Launch consumes already allocated
 capacity; internal reservation lookups remain necessary for access and
 ownership.
 
 Only admins can create primary listings or reservations through
 `ornn admin capacity-offers create` and `ornn admin reservations create`.
-They post to the role-aware `POST /commerce/listings` and
-`POST /commerce/reservations` with the admin's own session; Commerce enforces
+They post to the role-aware `POST /commerce/v2/listings` and Markets
+`POST /v1/markets/bookings` with the admin's own session; the owners enforce
 the admin role. Both commands retain explicit commercial-term validation and
-default-no human confirmation. A new primary listing reaches the market once
-staff attach its nodes.
+default-no human confirmation. Reservation creation books a window for a
+customer and takes `--organization-id UUID`, `--listing-id UUID`,
+`--listing-term-id UUID`, `--nodes COUNT`, `--starts-at TIME`, `--ends-at TIME`,
+`--price-per-gpu-hour-micro-usd N`, and `--idempotency-key KEY`. The window is
+whole seconds, the term is non-renewable Reserved, and the price is the term's.
+Reuse the key and payload on retries. Creation requires an eligible human
+terminal. Native capacity creation takes
+`--gpu-slug`, `--capacity-node-count`, `--gpus-per-node`, `--facility-id`,
+`--provisioning-type`, `--state`, `--terms` (a JSON array) and `--idempotency-key`,
+plus optional `--organization-id`. Supply availability dates or `--days-to-rfs`.
+Reuse the key and the same body on retries. Prices are integer micro-USD inside
+terms, with explicit duration bounds, nullable deposit and renewable flag.
+`ornn admin capacity-offers update` edits a selected term using `--listing-id`,
+`--listing-terms-id`, the complete term fields and `--idempotency-key`. Financial
+editing remains staff-only. The old customer `capacity-offers update` is removed.
 
 All staff discovery and execution starts at `ornn admin`. A fresh staff preflight
-runs before the catalog is shown. The seven roots are:
+runs before the catalog is shown. The eight roots are:
 
 ```text
 ornn admin users
+ornn admin organizations
 ornn admin suppliers
 ornn admin facilities
 ornn admin nodes
@@ -119,6 +143,27 @@ ornn admin reservations
 ```
 
 Every `ornn admin` command, read or mutation, requires an admin session.
+`ornn admin users list` and `ornn admin organizations list` search the
+Authorization directory by person name, email, or company name, with bounded `--limit` and
+`--offset` pagination. Users can be restricted by `--organization`; organization
+results can be filtered by `--role`, `--approved`, or `--ids`.
+
+`ornn admin organizations invite --organization UUID --email EMAIL` emails an
+invitation immediately using the selected organization UUID from the directory.
+It shares its schema and execution with MCP and Slack and uses the staff session
+on `POST /v1/staff/invites`. The result includes the sign-in invitation path and
+`email_sent`. If delivery is uncertain, the invitation remains valid; check
+delivery or share the sign-in link before retrying. Use `--format json` for automation.
+
+`ornn admin organizations grant-credit --organization UUID --amount-cents 10000
+--note "Customer goodwill credit" --idempotency-key UUID` grants $100.00 in Ornn
+credits to the organization. Find the organization with the directory commands
+above. Like admin reservation creation, it requires a human terminal and
+reviews the organization, USD amount, note, and UUID before default-no consent.
+The key supplies the existing API's required `adjustmentId`; repeating it with
+the same details returns the same grant. The admin's session supplies audit
+identity. See the [credit-adjustment contract](../../services/commerce/README.md#staff-credit-adjustments).
+
 `ornn admin nodes --help` lists the authorized node commands. Node health
 returns the node detail object; metrics preserve the owner `tier` and `windows`;
 logs return `data.logs` and an opaque continuation cursor in `page.next_cursor`.
@@ -253,33 +298,33 @@ error record. Progress is additive and contains no secret or supplier identity.
 vNext is a clean cutover. Retired forms are never aliases: each fails before I/O
 with one replacement and <https://docs.ornn.com/cli#migrating-to-vnext>.
 
-| Retired form                                                                                    | Replacement                                                   |
-| ----------------------------------------------------------------------------------------------- | ------------------------------------------------------------- |
-| `ornn account`, `ornn whoami`                                                                   | `ornn context`                                                |
-| `ornn catalog search`, `gpu-types`, `availability *`, `listing *`, `listings` read leaves       | matching `ornn capacity-offers` leaf                          |
-| `ornn listings create`                                                                          | `ornn admin capacity-offers create`                           |
-| `ornn buy`                                                                                      | Use the Ornn web app.                                         |
-| `ornn bid create`, `exchange create`                                                            | Use the Ornn web app.                                         |
-| `ornn bid` or `exchange` list, show, update, withdraw                                           | Use the Ornn web app.                                         |
-| `ornn gpu` or `gpus` list, show                                                                 | Use the Ornn web app.                                         |
-| `ornn gpu` or `gpus` checkout, `reservations checkout`                                          | Use the Ornn web app.                                         |
-| `ornn nodes launch`                                                                             | `ornn launch`                                                 |
-| `ornn nodes` list, show, wait, switch, reboot, hard-reset                                       | matching `ornn machines` leaf; reset needs erase flag         |
-| `ornn ssh`, `nodes ssh-command`                                                                 | `ornn connect`                                                |
-| `ornn metrics`, `telemetry`, `logs`                                                             | `ornn check`, `machines metrics`, or `machines logs`          |
-| `ornn clusters create`, `kubernetes launch`, `slurm launch`                                     | `ornn launch --mode kubernetes` or `ornn launch --mode slurm` |
-| Kubernetes or Slurm status, credentials, SSH, teardown                                          | `ornn clusters show`, `connect`, or `clusters teardown`       |
-| `ornn network *`, `networks *`                                                                  | `ornn private-networks <verb>`                                |
-| `ornn access *`, `keys`                                                                         | exact `ornn machines` or `ornn ssh-keys` leaf printed         |
-| `ornn storage volumes *`                                                                        | `ornn volumes <verb>`                                         |
-| `ornn storage files *`                                                                          | `ornn volumes files <verb>`                                   |
-| `ornn storage buckets *`                                                                        | `ornn external-buckets <verb>`                                |
-| Storage targets, deploy, status, detach, filesystem                                             | exact `ornn volume-mounts` or `ornn filesystems` leaf printed |
-| `ornn billing`                                                                                  | Use the Ornn web app.                                         |
-| customer-root `facilities`, `tokens`, `users`, `node`, or staff `reservations *`                | exact `ornn admin ...` command printed by the error           |
-| `ornn api`, `commerce`, `orchestrator`, `cache purge`                                           | `ornn resources`; no generic replacement exists               |
-| `--json`                                                                                        | `--format json`                                               |
-| `--interactive`                                                                                 | `--guided`                                                    |
+| Retired form                                                                              | Replacement                                                   |
+| ----------------------------------------------------------------------------------------- | ------------------------------------------------------------- |
+| `ornn account`, `ornn whoami`                                                             | `ornn context`                                                |
+| `ornn catalog search`, `gpu-types`, `availability *`, `listing *`, `listings` read leaves | matching `ornn capacity-offers` leaf                          |
+| `ornn listings create`                                                                    | `ornn admin capacity-offers create`                           |
+| `ornn buy`                                                                                | Use the Ornn web app.                                         |
+| `ornn bid create`, `exchange create`                                                      | Use the Ornn web app.                                         |
+| `ornn bid` or `exchange` list, show, update, withdraw                                     | Use the Ornn web app.                                         |
+| `ornn gpu` or `gpus` list, show                                                           | Use the Ornn web app.                                         |
+| `ornn gpu` or `gpus` checkout, `reservations checkout`                                    | Use the Ornn web app.                                         |
+| `ornn nodes launch`                                                                       | `ornn launch`                                                 |
+| `ornn nodes` list, show, wait, switch, reboot, hard-reset                                 | matching `ornn machines` leaf; reset needs erase flag         |
+| `ornn ssh`, `nodes ssh-command`                                                           | `ornn connect`                                                |
+| `ornn metrics`, `telemetry`, `logs`                                                       | `ornn check`, `machines metrics`, or `machines logs`          |
+| `ornn clusters create`, `kubernetes launch`, `slurm launch`                               | `ornn launch --mode kubernetes` or `ornn launch --mode slurm` |
+| Kubernetes or Slurm status, credentials, SSH, teardown                                    | `ornn clusters show`, `connect`, or `clusters teardown`       |
+| `ornn network *`, `networks *`                                                            | `ornn private-networks <verb>`                                |
+| `ornn access *`, `keys`                                                                   | exact `ornn machines` or `ornn ssh-keys` leaf printed         |
+| `ornn storage volumes *`                                                                  | `ornn volumes <verb>`                                         |
+| `ornn storage files *`                                                                    | `ornn volumes files <verb>`                                   |
+| `ornn storage buckets *`                                                                  | `ornn external-buckets <verb>`                                |
+| Storage targets, deploy, status, detach, filesystem                                       | exact `ornn volume-mounts` or `ornn filesystems` leaf printed |
+| `ornn billing`                                                                            | Use the Ornn web app.                                         |
+| customer-root `facilities`, `tokens`, `users`, `node`, or staff `reservations *`          | exact `ornn admin ...` command printed by the error           |
+| `ornn api`, `commerce`, `orchestrator`, `cache purge`                                     | `ornn resources`; no generic replacement exists               |
+| `--json`                                                                                  | `--format json`                                               |
+| `--interactive`                                                                           | `--guided`                                                    |
 
 Changed behavior is intentional: waits are deadline-bound, consent is semantic
 and default-no, pagination is bounded and cursor-based, machine output is always

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ornncompute/cli",
-  "version": "1.0.35",
+  "version": "1.0.62",
   "description": "Command-line interface for Ornn compute access workflows.",
   "type": "module",
   "bin": {
@@ -42,7 +42,7 @@
   },
   "dependencies": {
     "picocolors": "^1.1.1",
-    "zod": "^4.6.5",
+    "zod": "^4.6.7",
     "update-notifier": "7.3.1"
   }
 }

package/src/admin-capacity-reservations.mjs

@@ -1,17 +1,12 @@
 import { ADMIN_MUTATION_SAFETY, AdminMutationError, runAdminMutation } from "./admin-mutations.mjs";
-import { gpuLabeler } from "./gpu-catalog.mjs";
+import { parseSemanticArguments } from "./interaction-runtime.mjs";
 
 const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
-const DECIMAL = /^\d+(?:\.\d{1,6})?$/;
 
 const USAGE = {
-  "listings.create":
-    "Usage: ornn admin capacity-offers create --gpu GPU --nodes COUNT --gpus-per-node COUNT --site SITE --starts-at TIME --ends-at TIME --price-per-gpu-hour USD [--supplier-price-per-gpu-hour USD] [--down-payment-cents CENTS] [--access-mode bare-metal|virtual-machine] [--yes]",
   "reservations.create":
-    "Usage: ornn admin reservations create --organization ID --capacity-offer ID --starts-at TIME --ends-at TIME --price-per-gpu-hour USD [--down-payment-cents CENTS] [--yes]",
+    "Usage: ornn admin reservations create --organization-id ID --listing-id ID --listing-term-id ID --nodes COUNT --starts-at TIME --ends-at TIME --price-per-gpu-hour-micro-usd N --idempotency-key KEY [--yes]",
 };
-const ACCESS_MODES = new Set(["bare-metal", "virtual-machine"]);
-const STAFF_HARDWARE_CATALOG = "/catalog/hardware";
 
 function parseOptions(argv, { values, positionals }, usage) {
   const options = {};
@@ -72,97 +67,31 @@ function uuid(options, name, usage) {
   return value.toLowerCase();
 }
 
+// Markets books windows in whole seconds.
 function timestamp(options, name, usage) {
   const value = required(options, name, usage);
   const parsed = Date.parse(value);
-  if (!Number.isFinite(parsed)) {
-    throw new AdminMutationError(`--${name} must be an ISO timestamp.`, { field: name });
-  }
-  return new Date(parsed).toISOString();
-}
-
-function price(options, usage, name = "price-per-gpu-hour") {
-  const value = required(options, name, usage);
-  if (!DECIMAL.test(value)) {
-    throw new AdminMutationError(
-      `--${name} must be zero or a positive decimal with at most 6 decimal places.`,
-      { field: name }
-    );
-  }
-  return value;
-}
-
-function optionalCents(options) {
-  const value = options["down-payment-cents"]?.trim();
-  if (value === undefined) return undefined;
-  const parsed = Number(value);
-  if (!Number.isSafeInteger(parsed) || parsed < 0) {
-    throw new AdminMutationError("--down-payment-cents must be a whole number of cents.", {
-      field: "down-payment-cents",
+  if (!Number.isFinite(parsed) || !/(?:Z|[+-]\d{2}:\d{2})$/i.test(value)) {
+    throw new AdminMutationError(`--${name} must be an ISO timestamp with a timezone.`, {
+      field: name,
     });
   }
-  return parsed;
-}
-
-function assertWindow(start, end) {
-  if (Date.parse(start) >= Date.parse(end)) {
-    throw new AdminMutationError("--ends-at must be later than --starts-at.", { field: "ends-at" });
+  // Date.parse drops sub-millisecond digits, so check the text itself.
+  if (/\.\d*[1-9]/.test(value)) {
+    throw new AdminMutationError(`--${name} must be in whole seconds.`, { field: name });
   }
+  return new Date(parsed).toISOString();
 }
 
 function parseCapacityOffer(argv) {
-  const usage = USAGE["listings.create"];
-  const { options } = parseOptions(
-    argv,
-    {
-      positionals: 0,
-      values: [
-        "gpu",
-        "nodes",
-        "gpus-per-node",
-        "site",
-        "starts-at",
-        "ends-at",
-        "price-per-gpu-hour",
-        "supplier-price-per-gpu-hour",
-        "down-payment-cents",
-        "access-mode",
-        "idempotency-key",
-      ],
-    },
-    usage
-  );
-  const startsAt = timestamp(options, "starts-at", usage);
-  const endsAt = timestamp(options, "ends-at", usage);
-  assertWindow(startsAt, endsAt);
-  const accessMode = options["access-mode"]?.trim();
-  if (accessMode !== undefined && !ACCESS_MODES.has(accessMode)) {
-    throw new AdminMutationError("--access-mode must be bare-metal or virtual-machine.", {
-      field: "access-mode",
-    });
-  }
-  const downPaymentCents = optionalCents(options);
+  const { $positionals, yes, ...input } = parseSemanticArguments(argv);
+  if ($positionals.length) throw new AdminMutationError("Use named options for listing writes.");
   return {
-    input: {
-      gpu_type: required(options, "gpu", usage),
-      node_count: positiveInteger(options, "nodes", usage),
-      gpus_per_node: positiveInteger(options, "gpus-per-node", usage),
-      site_nickname: required(options, "site", usage),
-      available_start_at: startsAt,
-      available_end_at: endsAt,
-      buy_now_price_per_gpu_hour: Number(price(options, usage)),
-      ...(options["supplier-price-per-gpu-hour"] !== undefined
-        ? {
-            cost_per_gpu_hour: Number(price(options, usage, "supplier-price-per-gpu-hour")),
-          }
-        : {}),
-      ...(downPaymentCents !== undefined ? { down_payment_cents: downPaymentCents } : {}),
-      ...(accessMode ? { access_mode: accessMode } : {}),
-    },
+    input,
     mutation: {
-      idempotencyKey: options["idempotency-key"],
+      idempotencyKey: input.idempotencyKey,
       safety: ADMIN_MUTATION_SAFETY.eligibleHumanOnly,
-      yes: options.yes === true,
+      yes: yes === true,
     },
   };
 }
@@ -174,12 +103,13 @@ function parseReservationCreate(argv) {
     {
       positionals: 0,
       values: [
-        "organization",
-        "capacity-offer",
+        "organization-id",
+        "listing-id",
+        "listing-term-id",
+        "nodes",
         "starts-at",
         "ends-at",
-        "price-per-gpu-hour",
-        "down-payment-cents",
+        "price-per-gpu-hour-micro-usd",
         "idempotency-key",
       ],
     },
@@ -187,94 +117,70 @@ function parseReservationCreate(argv) {
   );
   const startsAt = timestamp(options, "starts-at", usage);
   const endsAt = timestamp(options, "ends-at", usage);
-  assertWindow(startsAt, endsAt);
-  const downPaymentCents = optionalCents(options);
+  if (Date.parse(endsAt) <= Date.parse(startsAt)) {
+    throw new AdminMutationError("--ends-at must be later than --starts-at.", { field: "ends-at" });
+  }
+  const idempotencyKey = required(options, "idempotency-key", usage);
   return {
     input: {
-      organization_id: uuid(options, "organization", usage),
-      listing_id: uuid(options, "capacity-offer", usage),
-      start_at: startsAt,
-      end_at: endsAt,
-      price_per_gpu_hour: price(options, usage),
-      ...(downPaymentCents !== undefined ? { down_payment_cents: downPaymentCents } : {}),
+      organizationId: uuid(options, "organization-id", usage),
+      listingId: uuid(options, "listing-id", usage),
+      listingTermId: uuid(options, "listing-term-id", usage),
+      nodes: positiveInteger(options, "nodes", usage),
+      startsAt,
+      endsAt,
+      pricePerGpuHourMicroUsd: positiveInteger(options, "price-per-gpu-hour-micro-usd", usage),
+      idempotencyKey,
     },
     mutation: {
-      idempotencyKey: options["idempotency-key"],
+      idempotencyKey,
       safety: ADMIN_MUTATION_SAFETY.eligibleHumanOnly,
       yes: options.yes === true,
     },
   };
 }
 
-function previewPayload(value) {
-  if (value?.ok === false) {
-    throw new AdminMutationError("The capacity offer contains an unknown hardware catalog term.", {
-      code: value.error ?? "unknown_catalog_term",
-    });
-  }
-  if (!value?.payload || typeof value.payload !== "object") {
-    throw new AdminMutationError("Capacity-offer normalization returned no effective terms.", {
-      code: "admin_review_incomplete",
-    });
-  }
-  return value.payload;
-}
-
-function usd(microUsd) {
-  return typeof microUsd === "number" ? (microUsd / 1_000_000).toFixed(6) : undefined;
-}
-
-function capacityOfferReview(payload, input, gpuLabel) {
-  const listing = payload.listing ?? {};
+function capacityOfferReview(body, editing) {
   return {
-    title: "Create capacity offer",
-    fields: [
-      { label: "GPU", value: gpuLabel(payload.gpu_type ?? listing.gpuSlug) },
-      { label: "Nodes to attach", value: payload.node_count ?? input.node_count },
-      { label: "GPUs per node", value: listing.gpusPerNode ?? input.gpus_per_node },
-      { label: "Site", value: payload.site_nickname ?? input.site_nickname },
-      { label: "Access mode", value: listing.accessMode },
-      { label: "Starts at", value: listing.startsAt ?? input.available_start_at },
-      { label: "Ends at", value: listing.endsAt ?? input.available_end_at },
-      { label: "Price per GPU-hour (USD)", value: input.buy_now_price_per_gpu_hour },
-      {
-        label: "Supplier price per GPU-hour (USD)",
-        value: usd(listing.supplierPricePerGpuHourMicroUsd),
-      },
-      { label: "Spread per GPU-hour (USD)", value: usd(listing.spreadPerGpuHourMicroUsd) },
-      { label: "Down payment (cents)", value: listing.downPaymentCents },
-    ],
-    consequence:
-      "Publishes a primary listing with these terms; attach its nodes before it reaches the market.",
+    title: editing ? "Edit listing term" : "Create capacity offer",
+    fields: Object.entries(body).map(([label, value]) => ({
+      label,
+      value: typeof value === "object" ? JSON.stringify(value) : value,
+    })),
+    consequence: editing
+      ? "Updates the selected advertised financial term."
+      : "Creates native capacity and its advertised financial terms.",
   };
 }
 
 function reservationCreateReview(input) {
   return {
-    title: "Create capacity reservation",
+    title: "Book reservation for customer",
     fields: [
-      { label: "Organization", value: input.organization_id },
-      { label: "Capacity offer", value: input.listing_id },
-      { label: "Starts at", value: input.start_at },
-      { label: "Ends at", value: input.end_at },
-      { label: "Price per GPU-hour (USD)", value: input.price_per_gpu_hour },
-      ...(input.down_payment_cents !== undefined
-        ? [{ label: "Down payment (cents)", value: input.down_payment_cents }]
-        : []),
+      { label: "Customer organization", value: input.organizationId },
+      { label: "Listing", value: input.listingId },
+      { label: "Listing term", value: input.listingTermId },
+      { label: "Nodes", value: input.nodes },
+      { label: "Starts at", value: input.startsAt },
+      { label: "Ends at", value: input.endsAt },
+      { label: "Price per GPU-hour (micro-USD)", value: input.pricePerGpuHourMicroUsd },
+      { label: "Idempotency key", value: input.idempotencyKey },
     ],
     consequence:
-      "Creates a schedule reservation on the listing's nodes with the reviewed dates and price.",
+      "Holds the reviewed nodes for the window; the customer's reservation starts when it opens.",
   };
 }
 
-async function runCapacityOffer({ execute, fetch, input, mutation, runtime }) {
+async function runCapacityOffer({ capability, execute, input, mutation, runtime }) {
   return runAdminMutation({
     ...runtime,
     ...mutation,
     prepare: async () => {
-      const payload = previewPayload(await execute(input));
-      const gpuLabel = await gpuLabeler(fetch, STAFF_HARDWARE_CATALOG);
-      return { review: capacityOfferReview(payload, input, gpuLabel), value: input };
+      const { payload } = await execute(input);
+      return {
+        review: capacityOfferReview(payload, capability.id === "listings.update"),
+        value: input,
+      };
     },
     execute: (value) => execute(value, { confirmed: true }),
   });
@@ -291,7 +197,13 @@ async function runReservationCreate({ execute, input, mutation, runtime }) {
 
 export const adminCapacityReservationHandlers = [
   {
-    capabilityId: "listings.create",
+    capabilityId: "listing.create",
+    parse: parseCapacityOffer,
+    run: runCapacityOffer,
+    safety: ADMIN_MUTATION_SAFETY.eligibleHumanOnly,
+  },
+  {
+    capabilityId: "listings.update",
     parse: parseCapacityOffer,
     run: runCapacityOffer,
     safety: ADMIN_MUTATION_SAFETY.eligibleHumanOnly,

package/src/admin-command-handlers.mjs

@@ -1,4 +1,5 @@
 import { adminCapacityReservationHandlers } from "./admin-capacity-reservations.mjs";
+import { adminCreditHandlers } from "./admin-credits.mjs";
 import { adminEnrollmentHandlers } from "./admin-enrollment.mjs";
 import { adminNodeDiagnosticsHandlers } from "./admin-node-diagnostics.mjs";
 import { adminNodeLifecycleHandlers } from "./admin-node-lifecycle.mjs";
@@ -6,6 +7,7 @@ import { ADMIN_MUTATION_SAFETY, assertAdminMutationContext } from "./admin-mutat
 
 const handlers = [
   ...adminCapacityReservationHandlers,
+  ...adminCreditHandlers,
   ...adminEnrollmentHandlers,
   ...adminNodeDiagnosticsHandlers,
   ...adminNodeLifecycleHandlers,

package/src/admin-credits.mjs

@@ -0,0 +1,57 @@
+import { ADMIN_MUTATION_SAFETY, AdminMutationError, runAdminMutation } from "./admin-mutations.mjs";
+import { parseSemanticArguments } from "./interaction-runtime.mjs";
+
+function parseGrant(argv, capability) {
+  const { $positionals, yes, organization, amountCents, note, idempotencyKey, ...extra } =
+    parseSemanticArguments(argv);
+  if ($positionals.length || Object.keys(extra).length) {
+    throw new AdminMutationError(`Usage: ${capability.cli.vnext.human}`);
+  }
+  const parsed = capability.input.safeParse({
+    organizationId: organization,
+    adjustmentId: idempotencyKey,
+    amountCents: amountCents === undefined ? undefined : Number(amountCents),
+    note,
+  });
+  if (!parsed.success) {
+    throw new AdminMutationError(`Usage: ${capability.cli.vnext.human}\n${parsed.error.message}`);
+  }
+  return {
+    input: parsed.data,
+    mutation: {
+      idempotencyKey: parsed.data.adjustmentId,
+      safety: ADMIN_MUTATION_SAFETY.eligibleHumanOnly,
+      yes: yes === true,
+    },
+  };
+}
+
+async function runGrant({ execute, input, mutation, runtime }) {
+  return runAdminMutation({
+    ...runtime,
+    ...mutation,
+    prepare: async () => ({
+      review: {
+        title: "Grant Ornn credits",
+        fields: [
+          { label: "Customer organization", value: input.organizationId },
+          { label: "Amount (USD)", value: `$${(input.amountCents / 100).toFixed(2)}` },
+          { label: "Note", value: input.note },
+          { label: "Grant UUID", value: input.adjustmentId },
+        ],
+        consequence: "Adds spendable Ornn credits to the selected organization.",
+      },
+      value: input,
+    }),
+    execute: (value) => execute(value, { confirmed: true }),
+  });
+}
+
+export const adminCreditHandlers = [
+  {
+    capabilityId: "credits.grant",
+    parse: parseGrant,
+    run: runGrant,
+    safety: ADMIN_MUTATION_SAFETY.eligibleHumanOnly,
+  },
+];