@ornncompute/cli 1.0.62 → 1.0.64

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ornncompute/cli",
-  "version": "1.0.62",
+  "version": "1.0.64",
   "description": "Command-line interface for Ornn compute access workflows.",
   "type": "module",
   "bin": {

package/src/admin-enrollment.mjs

@@ -498,7 +498,7 @@ function enrollmentProgressTransport(fetch, runtime, privateKey) {
       }
       return minted;
     }
-    if (path !== "/internal/remote" || !tokenId) return request(path, init);
+    if (path !== "/remote" || !tokenId) return request(path, init);
 
     const remote = request(path, init).then(
       (value) => ({ ok: true, value }),

package/src/admin-node-diagnostics.mjs

@@ -155,7 +155,7 @@ function reviewFields(target) {
 }
 
 async function prepareTarget(input, runtime, fetch) {
-  const payload = await fetch(`/internal/nodes/${encodeURIComponent(input.node_id)}`, {
+  const payload = await fetch(`/nodes/${encodeURIComponent(input.node_id)}`, {
     method: "GET",
     ...(runtime.signal ? { signal: runtime.signal } : {}),
   });

package/src/admin-node-lifecycle.mjs

@@ -262,7 +262,7 @@ function isNotFound(error) {
 
 async function readNodeById(fetch, id, { allowMissing = false, signal } = {}) {
   try {
-    return await fetch(`/internal/nodes/${encodeURIComponent(id)}`, {
+    return await fetch(`/nodes/${encodeURIComponent(id)}`, {
       method: "GET",
       ...(signal ? { signal } : {}),
     });

package/vendor/capabilities/capabilities/admin-enrollment.js

@@ -187,7 +187,7 @@ export const adminNodeEnrollCapability = defineCapability({
     roles: ["admin"],
     description: "Enroll one explicit node over SSH with an explicit supplier and facility assignment.",
     mutation: "preview-confirm",
-    http: { method: "POST", path: "/internal/remote" },
+    http: { method: "POST", path: "/remote" },
     cli: {
         command: ["admin", "nodes", "enroll"],
         vnext: adminHelp(["admin", "nodes", "enroll"], "Install Ornn management on one explicitly assigned node.", "ornn admin nodes enroll <node-id> --host HOST --supplier UUID --facility UUID [--filter COMPARTMENT_IDS] --identity-file PATH --token-ttl SECONDS --replace-existing-management [--verbose] [--yes]", "Unsupported: remote enrollment requires an eligible human terminal.", ["canonical node UUID", "canonical supplier organization UUID", "canonical facility UUID"], "Review node identity, SSH target, assignment, compartment filter, and replacement of existing management."),
@@ -234,7 +234,7 @@ export const adminNodeEnrollCapability = defineCapability({
             restoreNodeId: parsed.node_id,
             force: true,
         });
-        const remote = await ctx.fetch("/internal/remote", {
+        const remote = await ctx.fetch("/remote", {
             method: "POST",
             body: {
                 host: parsed.host,

package/vendor/capabilities/capabilities/admin-nodes-lifecycle.js

@@ -112,7 +112,7 @@ export const adminNodeSuspendManagementCapability = defineCapability({
     roles: ["admin"],
     description: "Suspend Ornn management while leaving the exact host powered on.",
     mutation: "preview-confirm",
-    http: { method: "POST", path: "/internal/nodes/{id}/off-grid" },
+    http: { method: "POST", path: "/nodes/{id}/off-grid" },
     cli: {
         command: ["admin", "nodes", "suspend-management"],
         vnext: adminLifecycleHelp(["admin", "nodes", "suspend-management"], "Remove Ornn management and managed access from one powered-on node.", "ornn admin nodes suspend-management <node-ref> [--reason TEXT] [--yes] [--no-wait]", "ornn admin nodes suspend-management <node-id> --yes --idempotency-key KEY --format json", "Node, supplier, facility, capacity assignment, management removal, and managed-access loss."),
@@ -129,7 +129,7 @@ export const adminNodeSuspendManagementCapability = defineCapability({
         };
         if (!ctx.confirmed)
             return preview("nodes.suspend_management", { node_id: id, ...body });
-        return ctx.fetch(`/internal/nodes/${encodeURIComponent(id)}/off-grid`, {
+        return ctx.fetch(`/nodes/${encodeURIComponent(id)}/off-grid`, {
             method: "POST",
             body,
             headers: requestHeaders(parsed.idempotency_key),
@@ -142,7 +142,7 @@ export const adminNodeResumeManagementCapability = defineCapability({
     roles: ["admin"],
     description: "Resume Ornn management for one exact off-grid node.",
     mutation: "preview-confirm",
-    http: { method: "POST", path: "/internal/nodes/{id}/on-grid" },
+    http: { method: "POST", path: "/nodes/{id}/on-grid" },
     cli: {
         command: ["admin", "nodes", "resume-management"],
         vnext: adminLifecycleHelp(["admin", "nodes", "resume-management"], "Restore Ornn management and managed access on one off-grid node.", "ornn admin nodes resume-management <node-ref> [--yes] [--no-wait]", "ornn admin nodes resume-management <node-id> --yes --idempotency-key KEY --format json", "Node, supplier, facility, capacity assignment, remote re-enrollment, and restored managed access."),
@@ -155,7 +155,7 @@ export const adminNodeResumeManagementCapability = defineCapability({
         const id = nodeId(parsed);
         if (!ctx.confirmed)
             return preview("nodes.resume_management", { node_id: id });
-        return ctx.fetch(`/internal/nodes/${encodeURIComponent(id)}/on-grid`, {
+        return ctx.fetch(`/nodes/${encodeURIComponent(id)}/on-grid`, {
             method: "POST",
             body: {
                 ...(parsed.idempotency_key ? { request_id: parsed.idempotency_key } : {}),
@@ -170,7 +170,7 @@ export const adminNodeTerminateCapability = defineCapability({
     roles: ["admin"],
     description: "Delete one exact node record with explicit cleanup scope and consequence review.",
     mutation: "preview-confirm",
-    http: { method: "POST", path: "/internal/nodes/{id}/terminate" },
+    http: { method: "POST", path: "/nodes/{id}/terminate" },
     cli: {
         command: ["admin", "nodes", "terminate"],
         vnext: adminLifecycleHelp(["admin", "nodes", "terminate"], "End managed access and permanently delete one exact node record.", "ornn admin nodes terminate <node-ref> --delete-node-record [--skip-cleanup] [--reason TEXT] [--yes]", "ornn admin nodes terminate <node-id> --delete-node-record --yes --idempotency-key KEY --format json", "Node, supplier, facility, reservation/capacity, host cleanup, node-record deletion, and access loss."),
@@ -188,7 +188,7 @@ export const adminNodeTerminateCapability = defineCapability({
         };
         if (!ctx.confirmed)
             return preview("nodes.terminate", { node_id: id, ...body });
-        return ctx.fetch(`/internal/nodes/${encodeURIComponent(id)}/terminate`, {
+        return ctx.fetch(`/nodes/${encodeURIComponent(id)}/terminate`, {
             method: "POST",
             body,
             headers: requestHeaders(parsed.idempotency_key),
@@ -201,7 +201,7 @@ export const adminNodeAssignCapability = defineCapability({
     roles: ["admin"],
     description: "Assign one exact node to one exact capacity reservation after consequence review.",
     mutation: "preview-confirm",
-    http: { method: "POST", path: "/internal/nodes/{id}/assign" },
+    http: { method: "POST", path: "/nodes/{id}/assign" },
     cli: {
         command: ["admin", "nodes", "assign"],
         vnext: adminLifecycleHelp(["admin", "nodes", "assign"], "Assign one exact node to one exact capacity reservation.", "ornn admin nodes assign <node-ref> --reservation <reservation-id> [--yes] [--no-wait]", "ornn admin nodes assign <node-id> --reservation <reservation-id> --yes --idempotency-key KEY --format json", "Node, supplier, facility, previous and requested capacity assignments, and tenant access change."),
@@ -218,7 +218,7 @@ export const adminNodeAssignCapability = defineCapability({
         };
         if (!ctx.confirmed)
             return preview("nodes.assign", { node_id: id, ...body });
-        return ctx.fetch(`/internal/nodes/${encodeURIComponent(id)}/assign`, {
+        return ctx.fetch(`/nodes/${encodeURIComponent(id)}/assign`, {
             method: "POST",
             body,
             headers: requestHeaders(parsed.idempotency_key),

package/vendor/capabilities/capabilities/admin.js

@@ -48,7 +48,7 @@ export const adminNodeHealthCapability = defineCapability({
     roles: ["admin"],
     description: "Read lifecycle and readiness facts for one enrolled node.",
     mutation: "read",
-    http: { method: "GET", path: "/internal/nodes/{id}" },
+    http: { method: "GET", path: "/nodes/{id}" },
     cli: {
         command: ["admin", "nodes", "health"],
         vnext: adminHelp(["admin", "nodes", "health"], "Inspect lifecycle and readiness facts for one node.", "ornn admin nodes health <node-id>", "ornn admin nodes health <node-id> --format json", ["canonical node ID"]),
@@ -58,7 +58,7 @@ export const adminNodeHealthCapability = defineCapability({
     input: nodeInput,
     execute: async (ctx, input) => {
         const parsed = nodeInput.parse(input);
-        return ctx.fetch(`/internal/nodes/${encodeURIComponent(parsed.node_id)}`, { method: "GET" });
+        return ctx.fetch(`/nodes/${encodeURIComponent(parsed.node_id)}`, { method: "GET" });
     },
 });
 export const adminNodeMetricsCapability = withAdminBinding(telemetryLatestCapability, adminHelp(["admin", "nodes", "metrics"], "Read a bounded telemetry window for one node.", "ornn admin nodes metrics <node-id> [--span 15m] [--start TIME --end TIME] [--max-points 240]", "ornn admin nodes metrics <node-id> --span 15m [--start TIME --end TIME] --max-points 240 --format json", ["canonical node ID"]));

package/vendor/capabilities/capabilities/fleet.js

@@ -174,7 +174,7 @@ export const nodeOffGridCapability = defineCapability({
     roles: ["admin"],
     description: "Admin-only. Take a node off-grid (remove Ornn agent management, leave the host powered on). CLI asks y/N. Slack waits for a human confirm. MCP requires confirm: true.",
     mutation: "preview-confirm",
-    http: { method: "POST", path: "/internal/nodes/{id}/off-grid" },
+    http: { method: "POST", path: "/nodes/{id}/off-grid" },
     slack: {
         parameters: {
             type: "object",
@@ -193,7 +193,7 @@ export const nodeOffGridCapability = defineCapability({
         if (!ctx.confirmed) {
             return preview("node.off-grid", { node_id: id, ...body });
         }
-        return ctx.fetch(`/internal/nodes/${encodeURIComponent(id)}/off-grid`, {
+        return ctx.fetch(`/nodes/${encodeURIComponent(id)}/off-grid`, {
             method: "POST",
             body,
         });
@@ -205,7 +205,7 @@ export const nodeOnGridCapability = defineCapability({
     roles: ["admin"],
     description: "Admin-only. Re-enroll an off-grid node: orchestrator SSHs with the stored admin key and runs the installer with restore_node_id. No caller key. CLI asks y/N. Slack waits for a human confirm. MCP requires confirm: true.",
     mutation: "preview-confirm",
-    http: { method: "POST", path: "/internal/nodes/{id}/on-grid" },
+    http: { method: "POST", path: "/nodes/{id}/on-grid" },
     slack: {
         parameters: {
             type: "object",
@@ -222,7 +222,7 @@ export const nodeOnGridCapability = defineCapability({
         if (!ctx.confirmed) {
             return preview("node.on-grid", { node_id: id });
         }
-        return ctx.fetch(`/internal/nodes/${encodeURIComponent(id)}/on-grid`, {
+        return ctx.fetch(`/nodes/${encodeURIComponent(id)}/on-grid`, {
             method: "POST",
             body: {},
         });
@@ -234,7 +234,7 @@ export const nodeExecCapability = defineCapability({
     roles: ["admin"],
     description: "Admin-only. Run one unrestricted command on an enrolled node over orchestrator SSH with the stored admin key. Always pass timeout_seconds. Not an interactive shell. On NVIDIA hosts use nvidia-smi; on AMD Instinct use amd-smi. Runs on the tool call — no confirm, no y/N.",
     mutation: "read",
-    http: { method: "POST", path: "/internal/remote" },
+    http: { method: "POST", path: "/remote" },
     slack: {
         parameters: {
             type: "object",
@@ -254,7 +254,7 @@ export const nodeExecCapability = defineCapability({
         const parsed = nodeExecInput.parse(input);
         const id = nodeIdOf(parsed);
         const timeoutSeconds = parsed.timeout_seconds ?? parsed.timeoutSeconds;
-        return ctx.fetch("/internal/remote", {
+        return ctx.fetch("/remote", {
             method: "POST",
             body: { node_id: id, command: parsed.command, timeout_seconds: timeoutSeconds },
         });
@@ -266,7 +266,7 @@ export const nodeTerminateCapability = defineCapability({
     roles: ["admin"],
     description: "Admin-only. Terminate a node record (best-effort clean + delete). Off-grid nodes need force: true. There is no deenroll verb. CLI asks y/N. Slack waits for a human confirm. MCP requires confirm: true.",
     mutation: "preview-confirm",
-    http: { method: "POST", path: "/internal/nodes/{id}/terminate" },
+    http: { method: "POST", path: "/nodes/{id}/terminate" },
     slack: {
         parameters: {
             type: "object",
@@ -289,7 +289,7 @@ export const nodeTerminateCapability = defineCapability({
         if (!ctx.confirmed) {
             return preview("node.terminate", { node_id: id, ...body });
         }
-        return ctx.fetch(`/internal/nodes/${encodeURIComponent(id)}/terminate`, {
+        return ctx.fetch(`/nodes/${encodeURIComponent(id)}/terminate`, {
             method: "POST",
             body,
         });

package/vendor/capabilities/capabilities/tokens.js

@@ -142,7 +142,7 @@ export const tokensCreateCapability = defineCapability({
         }
         const results = [];
         for (const host of hosts) {
-            results.push(await ctx.fetch("/internal/remote", {
+            results.push(await ctx.fetch("/remote", {
                 method: "POST",
                 body: {
                     host,